refactor kiro auth flow and share account password service

shared/settings-schema.js

@@ -57,6 +57,9 @@
         schemaVersion: 3,
         activeFlowId: defaultFlowId,
         services: {
+          account: {
+            customPassword: '',
+          },
           email: {
             provider: '163',
           },
@@ -91,9 +94,6 @@
                 },
               },
             },
-            account: {
-              customPassword: '',
-            },
             signup: {
               signupMethod: 'email',
               phoneVerificationEnabled: false,
@@ -131,7 +131,7 @@
               stepExecutionRange: {
                 enabled: false,
                 fromStep: 1,
-                toStep: 3,
+                toStep: 7,
               },
             },
           },
@@ -202,6 +202,14 @@
               ?? defaults.services.proxy.mode
             ).trim() || defaults.services.proxy.mode,
           },
+          account: {
+            customPassword: String(
+              input?.customPassword
+              ?? nested?.services?.account?.customPassword
+              ?? nested?.flows?.openai?.account?.customPassword
+              ?? defaults.services.account.customPassword
+            ).trim(),
+          },
         },
         flows: {
           openai: {
@@ -242,9 +250,6 @@
                 },
               },
             },
-            account: {
-              customPassword: String(input?.customPassword ?? nested?.flows?.openai?.account?.customPassword ?? '').trim(),
-            },
             signup: {
               signupMethod: String(input?.signupMethod ?? nested?.flows?.openai?.signup?.signupMethod ?? defaults.flows.openai.signup.signupMethod).trim().toLowerCase() === 'phone' ? 'phone' : 'email',
               phoneVerificationEnabled: Boolean(input?.phoneVerificationEnabled ?? nested?.flows?.openai?.signup?.phoneVerificationEnabled ?? defaults.flows.openai.signup.phoneVerificationEnabled),
@@ -370,7 +375,7 @@
       next.sub2apiDefaultProxyName = openaiState.source.entries.sub2api.sub2apiDefaultProxyName;
       next.codex2apiUrl = openaiState.source.entries.codex2api.codex2apiUrl;
       next.codex2apiAdminKey = openaiState.source.entries.codex2api.codex2apiAdminKey;
-      next.customPassword = openaiState.account.customPassword;
+      next.customPassword = normalizedState.services.account.customPassword;
       next.signupMethod = openaiState.signup.signupMethod;
       next.phoneVerificationEnabled = openaiState.signup.phoneVerificationEnabled;
       next.phoneSignupReloginAfterBindEmailEnabled = openaiState.signup.phoneSignupReloginAfterBindEmailEnabled;