@4yi/cli 0.1.9 → 0.1.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4yi/cli",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "4YI command-line launcher for OAuth login and OpenCode runtime",
   "type": "module",
   "bin": {

package/src/connect.mjs

@@ -320,9 +320,16 @@ function buildCodexCatalog(models, template) {
 }
 
 async function checkCodex(session, codexBaseUrl, model) {
-  await requestJson(codexBaseUrl.replace(/\/+$/, ""), "/responses", {
+  const response = await fetch(`${codexBaseUrl.replace(/\/+$/, "")}/responses`, {
     method: "POST",
-    token: session.token,
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${session.token}`,
+      // The Responses ingress only accepts the native Codex request shape.
+      // Keep this synthetic compatibility check aligned with the real client
+      // so it exercises the same authorization and routing path.
+      originator: "codex_cli_rs",
+    },
     body: JSON.stringify({
       model,
       instructions: "Reply with pong.",
@@ -331,16 +338,39 @@ async function checkCodex(session, codexBaseUrl, model) {
       tool_choice: "auto",
       parallel_tool_calls: true,
       store: false,
-      stream: false,
+      // Safe Responses ingress deliberately requires streaming requests. A
+      // JSON/non-streaming probe is rejected before routing, even though the
+      // same credential and model work in Codex itself.
+      stream: true,
       include: [],
+      client_metadata: {
+        session_id: "4yi-cli-preflight",
+        thread_id: "4yi-cli-preflight",
+      },
     }),
   });
+
+  if (!response.ok) {
+    const text = await response.text();
+    let body;
+    try { body = text ? JSON.parse(text) : null; } catch { body = null; }
+    const message = body?.error?.message || body?.error || text || `HTTP ${response.status}`;
+    const error = new Error(typeof message === "string" ? message : JSON.stringify(message));
+    error.status = response.status;
+    error.body = body;
+    throw error;
+  }
+
+  // A successful native probe is an SSE stream. Compatibility is established
+  // once the response starts; do not consume a model response just for setup.
+  if (response.body) await response.body.cancel();
 }
 
 async function connectCodex({ session, home, codexHome, codexBaseUrl, stdout, skipCheck = false, tooling = {} }) {
   const paths = connectionPaths({ home, codexHome });
   const { models, defaultModel } = await loadCodexModels(session);
   if (!skipCheck) await checkCodex(session, codexBaseUrl, defaultModel);
+  ensureDir(path.dirname(paths.codexConfig));
   const template = parseBundledCatalog(tooling);
   const catalog = buildCodexCatalog(models, template);
   atomicWrite(paths.codexCatalog, `${JSON.stringify(catalog, null, 2)}\n`);
@@ -437,6 +467,7 @@ export function restoreConnection({ target = "all", home = os.homedir(), stdout
 
 export const __testing = {
   buildCodexCatalog,
+  checkCodex,
   commandAvailable,
   desktopAppCandidates,
   ensureToolCli,