feat(codex_account): 改用 shell 取得登入帳號並補上容器環境

app/codex_account.py

@@ -1,73 +1,70 @@
-"""透過 codex app-server 的 JSON-RPC account/read 取得目前登入帳號的 email。
+#!/usr/bin/env bash
+# 透過 codex app-server 的 JSON-RPC account/read 取得目前登入帳號的 email。
+#
+# 這是 TUI `/status` Account 欄位的程式化來源，不解析本地 OAuth token，
+# 而是由 codex 自身回報登入帳號。將 email 印到 stdout（取不到時印空字串）。
 
-這是 TUI `/status` Account 欄位的程式化來源，不解析本地 OAuth token，
-而是由 codex 自身回報登入帳號。將 email 印到 stdout（取不到時印空字串）。
-"""
+set -uo pipefail
 
-import json
-import subprocess
-import time
+timeout_seconds="${1:-25}"
+if ! [[ "$timeout_seconds" =~ ^[0-9]+([.][0-9]+)?$ ]]; then
+  echo "timeout_seconds must be a number." >&2
+  exit 2
+fi
 
+if ! command -v jq >/dev/null 2>&1; then
+  echo "jq is required." >&2
+  exit 2
+fi
 
-def read_account_email(timeout_seconds: float = 25.0) -> str:
-    """透過 codex app-server 的 JSON-RPC account/read 取得目前登入帳號的 email。
+email=""
 
-    啟動 ``codex app-server`` 子行程，依序送出 initialize / initialized /
-    account/read 三筆 JSON-RPC 訊息，並讀取其回報的登入帳號 email。
+cleanup() {
+  if [[ -n "${CODEX_SERVER_PID:-}" ]]; then
+    kill "$CODEX_SERVER_PID" >/dev/null 2>&1 || true
+    wait "$CODEX_SERVER_PID" >/dev/null 2>&1 || true
+  fi
+}
+trap cleanup EXIT
 
-    Args:
-        timeout_seconds: 等待 app-server 回應的秒數上限，預設 25.0。
+coproc CODEX_SERVER { codex app-server 2>/dev/null; }
+exec {codex_server_stdin}>&"${CODEX_SERVER[1]}"
+exec {codex_server_stdout}<&"${CODEX_SERVER[0]}"
 
-    Returns:
-        登入帳號的 email；取不到或逾時時回傳空字串 ""。
+send_json() {
+  printf '%s\n' "$1" >&"$codex_server_stdin"
+}
 
-    使用情境：
-        在 CI 中驗證登入身分時呼叫。前置條件為 codex CLI 已安裝，
-        且 $HOME/.codex/auth.json 已寫入有效的 OAuth token。
-    """
-    process = subprocess.Popen(
-        ["codex", "app-server"],
-        stdin=subprocess.PIPE,
-        stdout=subprocess.PIPE,
-        stderr=subprocess.DEVNULL,
-        text=True,
-        bufsize=1,
-    )
+send_json '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"clientInfo":{"name":"ci","version":"1.0"}}}'
+send_json '{"jsonrpc":"2.0","method":"initialized","params":{}}'
+send_json '{"jsonrpc":"2.0","id":2,"method":"account/read","params":{}}'
 
-    def send(obj):
-        """將 dict 物件序列化成 JSON 後寫入 app-server 的 stdin 並 flush。"""
-        process.stdin.write(json.dumps(obj) + "\n")
-        process.stdin.flush()
+deadline="$(
+  awk -v now="$(date +%s)" -v timeout="$timeout_seconds" 'BEGIN { printf "%.3f", now + timeout }'
+)"
 
-    send({
-        "jsonrpc": "2.0",
-        "id": 1,
-        "method": "initialize",
-        "params": {"clientInfo": {"name": "ci", "version": "1.0"}},
-    })
-    send({"jsonrpc": "2.0", "method": "initialized", "params": {}})
-    send({"jsonrpc": "2.0", "id": 2, "method": "account/read", "params": {}})
+while awk -v now="$(date +%s)" -v deadline="$deadline" 'BEGIN { exit !(now < deadline) }'; do
+  remaining="$(
+    awk -v now="$(date +%s)" -v deadline="$deadline" 'BEGIN {
+      remaining = deadline - now
+      if (remaining < 1) {
+        remaining = 1
+      }
+      printf "%.0f", remaining
+    }'
+  )"
 
-    email = ""
-    deadline = time.time() + timeout_seconds
-    try:
-        while time.time() < deadline:
-            line = process.stdout.readline()
-            if not line:
-                break
-            try:
-                message = json.loads(line)
-            except ValueError:
-                continue
-            if message.get("id") == 2:
-                account = (message.get("result") or {}).get("account") or {}
-                email = account.get("email") or ""
-                break
-    finally:
-        process.terminate()
+  if ! IFS= read -r -t "$remaining" line <&"$codex_server_stdout"; then
+    break
+  fi
 
-    return email
+  message_id="$(jq -r 'try .id catch empty' <<<"$line" 2>/dev/null || true)"
+  if [[ "$message_id" != "2" ]]; then
+    continue
+  fi
 
+  email="$(jq -r 'try (.result.account.email // "") catch ""' <<<"$line" 2>/dev/null || true)"
+  break
+done
 
-if __name__ == "__main__":
-    print(read_account_email())
+printf '%s\n' "$email"