Login and 2FA agent

import OpenAI from 'openai';
import { Mcpmailer } from '@mcpmailer/sdk';

/* ── your provider: this block is the only part that changes ── */
const client = new OpenAI({ apiKey: process.env.OPENAI_API_KEY });

const MODEL = process.env.MODEL;
if (!MODEL) throw new Error('Set MODEL to the model name your provider expects, e.g. export MODEL=gpt-4o-mini');

/** The only provider-specific code in any of these examples. */
async function ask({ system, user, schema }: {
  system: string;
  user: string;
  schema?: object;
}) {
  const res = await client.chat.completions.create({
    model: MODEL,
    messages: [
      { role: 'system', content: system },
      { role: 'user', content: user }
    ],
    // A schema turns the answer into an object instead of prose, which is what
    // the branching examples want. Without one you get the text back.
    ...(schema
      ? { response_format: { type: 'json_schema', json_schema: { name: 'out', schema, strict: true } } }
      : {})
  });

  const text = res.choices[0].message.content ?? '';
  return schema ? JSON.parse(text) : text;
}

/* ── the agent ── */

const mm = new Mcpmailer();

// Names and types, no values: finding the right entry opens nothing.
const secrets = await mm.listSecrets();
const entry = secrets.find((s) => s.name === 'acme-partner-portal');
if (!entry) throw new Error('no credential for the portal');

await openLoginPage();

// Opened at the form, not at the start of the task.
const login = await mm.getSecret(entry.id);
await fillLogin(login.secret);

const factor = await whichSecondFactor();

if (factor === 'totp') {
  const { code, expiresInSeconds } = await mm.getTotpCode(entry.id);
  // A code that expires between your keystroke and their check is a failed
  // attempt, and attempts are the thing you cannot spend.
  if (expiresInSeconds < 5) {
    await new Promise((r) => setTimeout(r, (expiresInSeconds + 1) * 1000));
    await submitCode((await mm.getTotpCode(entry.id)).code);
  } else {
    await submitCode(code);
  }
} else if (factor === 'email') {
  const deadline = Date.now() + 120_000;
  let code: string | undefined;
  while (!code && Date.now() < deadline) {
    const [newest] = await mm.listMessages({ limit: 1 });
    // From the body: subject lines truncate and reformat codes.
    code = newest && (newest.body ?? newest.snippet).match(/\b\d{6}\b/)?.[0];
    if (!code) await new Promise((r) => setTimeout(r, 5_000));
  }
  if (!code) throw new Error('no emailed code arrived');
  await submitCode(code);
} else {
  // Push, SMS, device approval: not clearable. Say so rather than burning tries.
  await mm.send({
    to: ['ops@acme.com'],
    subject: 'Cannot sign in to the partner portal',
    body: `Blocked by a ${factor} second factor, which I cannot clear.`
  });
  throw new Error(`unsupported second factor: ${factor}`);
}