npm - @bitkyc08/opencodex - Versions diffs - 2.18.2 → 2.19.0 - Mend

@bitkyc08/opencodex 2.18.2 → 2.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (22) hide show

package/gui/dist/assets/{index-DUCH59lJ.css → index-CQ7bIKee.css} +1 -1
package/gui/dist/assets/{index-CXI1262_.js → index-D_JUZLEC.js} +16 -16
package/gui/dist/index.html +2 -2
package/package.json +1 -1
package/src/adapters/client-fingerprint.ts +14 -10
package/src/adapters/google-antigravity-wire.ts +4 -3
package/src/adapters/google.ts +1 -1
package/src/chat/inbound.ts +24 -1
package/src/codex/shim.ts +100 -5
package/src/generated/compatibility-version.json +21 -17
package/src/lib/errors.ts +27 -0
package/src/providers/registry.ts +2 -0
package/src/responses/spill-store.ts +20 -1
package/src/responses/state.ts +159 -3
package/src/server/chat-completions.ts +4 -2
package/src/server/effort-policy.ts +18 -0
package/src/server/responses/core.ts +21 -2
package/src/server/responses/input-admission.ts +169 -0
package/src/service-manager-probe.ts +2 -3
package/src/types.ts +10 -2
package/src/vision/index.ts +21 -4
package/src/web-search/index.ts +2 -1

package/gui/dist/index.html CHANGED Viewed

@@ -16,8 +16,8 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-CXI1262_.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DUCH59lJ.css">
+    <script type="module" crossorigin src="/assets/index-D_JUZLEC.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-CQ7bIKee.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bitkyc08/opencodex",
-  "version": "2.18.2",
+  "version": "2.19.0",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",

package/src/adapters/client-fingerprint.ts CHANGED Viewed

@@ -40,20 +40,24 @@ export function claudeCodeSessionId(token: string | undefined): string {
   return `${h.slice(0, 8)}-${h.slice(8, 12)}-4${h.slice(13, 16)}-${variant}${h.slice(17, 20)}-${h.slice(20, 32)}`;
 }
-// ── Antigravity CLI ──
-/** Pinned fallback Antigravity CLI version (real client fetches a manifest; we pin to avoid the network dependency). */
-export const ANTIGRAVITY_CLI_VERSION = "1.1.12";
-const ANTIGRAVITY_CLI_CLIENT_NAME = "aidev_client";
-const ANTIGRAVITY_CLI_PLATFORM = "darwin/arm64";
+// ── Antigravity IDE ──
+/** Pinned fallback Antigravity IDE language-server version (matches the bundled LS 2.5.5). */
+export const ANTIGRAVITY_IDE_VERSION = "2.5.5";
+const ANTIGRAVITY_IDE_CLIENT_NAME = "aidev_client";
+const ANTIGRAVITY_IDE_PLATFORM = "windows/amd64";
 /** Secondary Google API client UA the Antigravity client library reports. */
 export const ANTIGRAVITY_GOOG_API_CLIENT_UA = "google-api-nodejs-client/10.3.0";
 /**
- * The real Antigravity CLI User-Agent, e.g.
- * `antigravity/cli/1.1.12 (aidev_client; os_type=darwin; arch=arm64)`.
+ * The real Antigravity IDE User-Agent, e.g.
+ * `antigravity/ide/2.5.5 (aidev_client; os_type=windows; arch=amd64)`.
+ *
+ * Must be the IDE client family, NOT `antigravity/cli/...`: the Cloud Code Assist backend gates
+ * newer agent models (e.g. `gemini-3.7-flash`) by User-Agent and answers 404 NOT_FOUND to
+ * CLI-shaped UAs even with a valid OAuth token. Only `antigravity/ide/<ver>` unlocks them.
  * A `GOOGLE_ANTIGRAVITY_USER_AGENT` override (set by the caller) takes precedence upstream.
  */
-export function antigravityUserAgent(version = ANTIGRAVITY_CLI_VERSION): string {
-  const [osType, arch] = ANTIGRAVITY_CLI_PLATFORM.split("/");
-  return `antigravity/cli/${version} (${ANTIGRAVITY_CLI_CLIENT_NAME}; os_type=${osType}; arch=${arch})`;
+export function antigravityUserAgent(version = ANTIGRAVITY_IDE_VERSION): string {
+  const [osType, arch] = ANTIGRAVITY_IDE_PLATFORM.split("/");
+  return `antigravity/ide/${version} (${ANTIGRAVITY_IDE_CLIENT_NAME}; os_type=${osType}; arch=${arch})`;
 }

package/src/adapters/google-antigravity-wire.ts CHANGED Viewed

@@ -3,10 +3,11 @@ import type { OcxContentPart, OcxParsedRequest } from "../types";
 import { antigravityUserAgent } from "./client-fingerprint";
 /**
- * Antigravity request User-Agent. Mirrors the real Antigravity CLI UA
- * (`antigravity/cli/{ver} (aidev_client; os_type=darwin; arch=arm64)`) so the request fingerprint
+ * Antigravity request User-Agent. Mirrors the real Antigravity IDE UA
+ * (`antigravity/ide/{ver} (aidev_client; os_type=windows; arch=amd64)`) so the request fingerprint
  * matches the OAuth credential — the prior literal `"antigravity"` was a giveaway no real client
- * sends. A `GOOGLE_ANTIGRAVITY_USER_AGENT` override still wins.
+ * sends. The IDE client family is also required to unlock newer agent models (the backend 404s
+ * CLI-shaped UAs for `gemini-3.7-*`). A `GOOGLE_ANTIGRAVITY_USER_AGENT` override still wins.
  */
 export const ANTIGRAVITY_REQUEST_UA = process.env.GOOGLE_ANTIGRAVITY_USER_AGENT || antigravityUserAgent();

package/src/adapters/google.ts CHANGED Viewed

@@ -469,7 +469,7 @@ export function createGoogleAdapter(provider: OcxProviderConfig): ProviderAdapte
         const envelope = {
           model: wireModelId,
           // The envelope's `userAgent` field is a protocol constant ("antigravity"), distinct from
-          // the HTTP `User-Agent` header (the real CLI UA). CLIProxyAPI `geminiToAntigravity` hardcodes
+          // the HTTP `User-Agent` header (the real IDE UA). CLIProxyAPI `geminiToAntigravity` hardcodes
           // the body field; only the header carries the versioned client string.
           userAgent: "antigravity",
           requestType: "agent",

package/src/chat/inbound.ts CHANGED Viewed

@@ -14,6 +14,7 @@ function isRec(v: unknown): v is Rec {
 }
 const OUTPUT_CONFIG_EFFORTS = new Set(["minimal", "low", "medium", "high", "xhigh", "max", "ultra"]);
+const OUTPUT_CONFIG_SUMMARIES = new Set(["auto", "concise", "detailed", "none"]);
 function contentToText(content: unknown): string {
   if (typeof content === "string") return content;
@@ -205,6 +206,22 @@ function resolveReasoningEffort(raw: Rec): string | undefined {
   return undefined;
 }
+/**
+ * Chat Completions clients (Grok Build, Copilot, OpenAI-compatible SDKs) expect
+ * `delta.reasoning_content` whenever the model thinks. The internal Responses
+ * parser hides thinking unless `reasoning.summary` is set and is not `"none"`.
+ * Map the common Chat Completions knobs onto that field. When the client only
+ * sent an effort, default the summary to `"auto"` so traces are not swallowed.
+ */
+function resolveReasoningSummary(raw: Rec): string | undefined {
+  if (isRec(raw.reasoning) && typeof raw.reasoning.summary === "string" && OUTPUT_CONFIG_SUMMARIES.has(raw.reasoning.summary)) {
+    return raw.reasoning.summary;
+  }
+  if (raw.include_reasoning === false) return "none";
+  if (raw.include_reasoning === true) return "auto";
+  return undefined;
+}
 /**
  * Translate an OpenAI Chat Completions request body into a /v1/responses request body.
  * Throws ChatCompletionsRequestError (-> 400) on malformed input.
@@ -286,7 +303,13 @@ export function chatCompletionsToResponsesBody(raw: unknown): Rec {
   if (raw.metadata !== undefined) body.metadata = raw.metadata;
   const effort = resolveReasoningEffort(raw);
-  if (effort) body.reasoning = { effort };
+  const summary = resolveReasoningSummary(raw);
+  if (effort || summary !== undefined) {
+    body.reasoning = {
+      ...(effort ? { effort } : {}),
+      summary: summary ?? "auto",
+    };
+  }
   const text = responseFormatToText(raw.response_format);
   if (text) body.text = text;

package/src/codex/shim.ts CHANGED Viewed

@@ -8,16 +8,19 @@ import {
   existsSync,
   fstatSync,
   lstatSync,
+  linkSync,
   mkdirSync,
   mkdtempSync,
   openSync,
   readFileSync,
   readdirSync,
+  readlinkSync,
   readSync,
   renameSync,
   rmSync,
   rmdirSync,
   statSync,
+  symlinkSync,
   type Stats,
   unlinkSync,
   writeFileSync,
@@ -407,6 +410,63 @@ function sameStableShimPathProbe(left: StableShimPathProbe, right: StableShimPat
   return left.prefix === right.prefix && sameFingerprint(left.fingerprint, right.fingerprint);
 }
+/**
+ * Identity of whatever sits at `path`, read from metadata alone.
+ *
+ * `stableShimPathProbe` answers a different question: it reads content to decide
+ * whether a launcher looks like a healthy shim, and it deliberately returns null
+ * for a zero-byte file. That makes it the wrong instrument for rollback
+ * bookkeeping. A user can legitimately own an empty `codex` launcher, and a fresh
+ * install moves it aside before writing our wrapper; if the move is recorded
+ * without a fingerprint, rollback cannot prove the backup is still the file it
+ * set aside and refuses to restore it — the launcher stays lost (#1625).
+ *
+ * Content is irrelevant to that proof, so this reads dev/ino/mode/size/times and
+ * re-reads them to reject a path that changed under us, following a symlink to
+ * fingerprint its target as well.
+ */
+function shimPathFingerprint(path: string): ShimPathFingerprint | null {
+  const before = statFingerprint(path, false);
+  if (!before) return null;
+  if (before.kind !== "symlink") {
+    const after = statFingerprint(path, false);
+    return after && sameFingerprint(before, after) ? before : null;
+  }
+  const targetBefore = statFingerprint(path, true);
+  if (!targetBefore) return null;
+  const targetAfter = statFingerprint(path, true);
+  const after = statFingerprint(path, false);
+  if (!targetAfter || !after
+    || !sameFingerprint(targetBefore, targetAfter)
+    || !sameFingerprint(before, after)) return null;
+  return { ...before, target: targetBefore };
+}
+/**
+ * Move `from` onto `to` without ever replacing an existing entry.
+ *
+ * `renameSync` silently clobbers the destination on POSIX, which is wrong for a
+ * rollback restore: `sourceOccupied` is sampled before the fingerprint check, so
+ * a concurrent installer can publish its own launcher at the original path in
+ * between, and the restore would delete it. `link` fails EEXIST instead, which
+ * is the no-replace primitive we need and needs no native helper.
+ *
+ * `link` follows a symlink to its target rather than preserving the link, so a
+ * symlink launcher is republished with `symlink`, which is also no-replace: it
+ * fails EEXIST on an occupied destination. Checking existence and then renaming
+ * would reintroduce exactly the race this function exists to close.
+ */
+function restoreWithoutReplacing(from: string, to: string): void {
+  const source = lstatSync(from);
+  if (source.isSymbolicLink()) {
+    symlinkSync(readlinkSync(from), to);
+    unlinkSync(from);
+    return;
+  }
+  linkSync(from, to);
+  unlinkSync(from);
+}
 function isHealthyShimProbe(probe: StableShimPathProbe, platform: NodeJS.Platform): boolean {
   if (probe.prefix.length < 180 || !probe.prefix.includes(SHIM_MARKER) || !probe.prefix.includes("ensure")) return false;
   const mode = probe.fingerprint.target?.mode ?? probe.fingerprint.mode;
@@ -644,6 +704,7 @@ let codexShimProbeHookForTests: (() => void) | null = null;
 let codexShimProbeShellForTests: string | null = null;
 let codexShimGuardedWriteHookForTests: (() => void) | null = null;
 let codexShimFreshWriteHookForTests: (() => void) | null = null;
+let codexShimRollbackRestoreHookForTests: ((target: ShimFileState) => void) | null = null;
 let codexShimProbeObservationMs = CODEX_SHIM_INSTALL_PROBE_TIMEOUT_MS;
 /** Narrow deterministic seam for transaction rollback tests. */
@@ -671,6 +732,20 @@ export function setCodexShimFreshWriteHookForTests(hook: (() => void) | null): v
   codexShimFreshWriteHookForTests = hook;
 }
+/**
+ * @internal Test-only seam for the rollback restore race.
+ *
+ * The window this closes opens after `sourceOccupied` is sampled and closes when
+ * the backup is republished, so no earlier hook can reach it: publishing from
+ * the fresh-write hook makes `sourceOccupied` true and skips the restore
+ * entirely.
+ */
+export function setCodexShimRollbackRestoreHookForTests(
+  hook: ((target: ShimFileState) => void) | null,
+): void {
+  codexShimRollbackRestoreHookForTests = hook;
+}
 function readProbeMetadata(path: string, maxBytes: number): string | null {
   try {
     if (!existsSync(path)) return "";
@@ -830,9 +905,9 @@ function rollbackFreshShimInstall(journal: readonly FreshShimInstallJournalEntry
     }
     try {
       if (entry.originalMovedToBackup && existsSync(target.backupPath)) {
-        const movedOriginal = stableShimPathProbe(target.backupPath);
+        const movedOriginal = shimPathFingerprint(target.backupPath);
         if (!movedOriginal || !entry.movedOriginalFingerprint
-          || !sameFingerprint(movedOriginal.fingerprint, entry.movedOriginalFingerprint)) {
+          || !sameFingerprint(movedOriginal, entry.movedOriginalFingerprint)) {
           throw new Error("Codex shim fresh-install backup changed during rollback");
         }
         if (sourceOccupied) {
@@ -842,7 +917,12 @@ function rollbackFreshShimInstall(journal: readonly FreshShimInstallJournalEntry
           // lose the command entirely. Keep it in that case — a stray
           // `codex.opencodex-real` is recoverable, a deleted launcher is not.
           if (ownsWrapperNow) unlinkSync(target.backupPath);
-        } else renameSync(target.backupPath, target.originalPath);
+        } else {
+          // No-replace: sourceOccupied was sampled earlier, so a concurrent
+          // installer may have published a launcher at the original path since.
+          codexShimRollbackRestoreHookForTests?.(target);
+          restoreWithoutReplacing(target.backupPath, target.originalPath);
+        }
       }
     } catch (error) {
       errors.push(error instanceof Error ? error : new Error(String(error)));
@@ -1832,10 +1912,25 @@ function installCodexShimInternal(options: InstallCodexShimInternalOptions): { i
       if (existsSync(target.originalPath)) {
         renameSync(target.originalPath, target.backupPath);
         entry.originalMovedToBackup = true;
+        // Metadata-only, and before the content probe: an empty or otherwise
+        // unprobeable launcher must still be restorable during rollback.
+        //
+        // Only Unix reaches the rollback path (Windows rethrows freshApplyError
+        // without rolling back), so only Unix may treat a missing fingerprint as
+        // fatal. Throwing here on Windows would abort AFTER the original moved,
+        // stranding the launcher at its backup path with nothing to restore it.
+        const movedOriginalFingerprint = shimPathFingerprint(target.backupPath);
+        if (movedOriginalFingerprint) entry.movedOriginalFingerprint = movedOriginalFingerprint;
         if (process.platform !== "win32") {
+          if (!movedOriginalFingerprint) {
+            throw new Error("Codex shim fresh install could not fingerprint the staged launcher");
+          }
           const movedOriginal = stableShimPathProbe(target.backupPath);
-          if (!movedOriginal) throw new Error("Codex shim fresh install could not fingerprint the staged launcher");
-          entry.movedOriginalFingerprint = movedOriginal.fingerprint;
+          // A content probe still runs where it can, purely as a consistency
+          // check: disagreement means the file moved under us mid-install.
+          if (movedOriginal && !sameFingerprint(movedOriginal.fingerprint, movedOriginalFingerprint)) {
+            throw new Error("Codex shim fresh install staged launcher changed while being fingerprinted");
+          }
         }
       }
       if (!target.preserveOnly) {

package/src/generated/compatibility-version.json CHANGED Viewed

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "c49e32901436d0c5d16ce428689fc389ce9647256fa7a1143afa2d96b046a30d"
+      "sha256": "4b1881e599a19c6a02309927d634f2bf2a45a93da5762d63e37e5795d103713e"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -46,7 +46,7 @@
     },
     {
       "path": "src/adapters/client-fingerprint.ts",
-      "sha256": "db85c96fb739ada2ddb2b811722d497cec0cbe692fa816920da6a97d10c202e4"
+      "sha256": "6494cb40aefb337db3584489d1544d7ae623445dd3c81e5e34a30c77312f4e69"
     },
     {
       "path": "src/adapters/command-code.ts",
@@ -186,7 +186,7 @@
     },
     {
       "path": "src/adapters/google-antigravity-wire.ts",
-      "sha256": "1d4b78e8002aba15e94e222ab5e0b4adf1a1a2754922ff967c5be2acaa16a3dc"
+      "sha256": "1fa3361241026926754656cf8300ce513fefac86020d796cb985018192499797"
     },
     {
       "path": "src/adapters/google-errors.ts",
@@ -210,7 +210,7 @@
     },
     {
       "path": "src/adapters/google.ts",
-      "sha256": "5fd50e67930ddac30951c2764b5dc8852252e75690fa4c7068a8f36d85932f82"
+      "sha256": "7905d7c039bebc63a2fa968fc934570d5dedf882c474087bcf4d55e317641e63"
     },
     {
       "path": "src/adapters/identity.ts",
@@ -302,7 +302,7 @@
     },
     {
       "path": "src/chat/inbound.ts",
-      "sha256": "747105ce3fb5cff8d5a8020e5df2a481fa218321a957717c2f6db0417e9fe690"
+      "sha256": "fe115207f0d5a4cf397e7e46a81b772f405363bd623481dc3fd4b2eec4bbf87e"
     },
     {
       "path": "src/chat/outbound.ts",
@@ -906,7 +906,7 @@
     },
     {
       "path": "src/codex/shim.ts",
-      "sha256": "f39249f3748a1c35b116677a0583704cba02cc99e3f320ac46356a24983d250c"
+      "sha256": "f779c71050a1b2c3d6c08c22dbb6597d393a106f20a27566cc949203dbdad837"
     },
     {
       "path": "src/codex/subagent-defaults.ts",
@@ -1530,7 +1530,7 @@
     },
     {
       "path": "src/lib/errors.ts",
-      "sha256": "0e0a2b5117cf32f981256ec550e1fcf43dc181c026258736a9ef65ec9046a47d"
+      "sha256": "39613acb1eaae98fa448296a9ea6e55e246e7348aebf3110d775ac05febae7df"
     },
     {
       "path": "src/lib/eventstream-decoder.ts",
@@ -1942,7 +1942,7 @@
     },
     {
       "path": "src/providers/registry.ts",
-      "sha256": "78f6cda9b3a114e72656e88645b062e96af413f9af7e0241246f37473d086b7f"
+      "sha256": "89cc6f2a0fb31b3b05df612e86f396682bc0e7e50bf4d9d733b870ed1307a880"
     },
     {
       "path": "src/providers/slug-codec.ts",
@@ -1986,11 +1986,11 @@
     },
     {
       "path": "src/responses/spill-store.ts",
-      "sha256": "c0cd3343d0803eb6d14203f19d6ee38f33110042d8aa896cc9f60bd422ca8f21"
+      "sha256": "a1239057ea7a156c562222a6f385a3bbd3f324cf346964cb6aae8185f47a3e34"
     },
     {
       "path": "src/responses/state.ts",
-      "sha256": "59952393060143aae734770fbf78761a8cc69e5b6335c6452bdf5ac7da686bb4"
+      "sha256": "761a96f2839ee22f7cea11f037424a13bd1dedb0f747f1bc35a81c91ca9b0bbd"
     },
     {
       "path": "src/responses/tool-groups.ts",
@@ -2110,7 +2110,7 @@
     },
     {
       "path": "src/server/chat-completions.ts",
-      "sha256": "7f3b9b2f0e9850e687d672266f7e6976f634b151ddbcf729b2373c5d31ef51cc"
+      "sha256": "31a6edac0e224e98bdfa3c46197388f5ef8067e2be2e25751b2a23fb7a1cdc96"
     },
     {
       "path": "src/server/claude-messages.ts",
@@ -2122,7 +2122,7 @@
     },
     {
       "path": "src/server/effort-policy.ts",
-      "sha256": "7ca86f1bdd5ab6e6cd58cf3fbb65a6c076359f4bc05a6c790ccceb05d071e350"
+      "sha256": "1678af1658f000101cb2c5f3273388953e642fbaf7e85771d425d057c4fd2a6f"
     },
     {
       "path": "src/server/github-copilot-responses-repair.ts",
@@ -2366,7 +2366,7 @@
     },
     {
       "path": "src/server/responses/core.ts",
-      "sha256": "1dde5ae551f6baadb2dd0cca790d43d6ce1ae223568ebbc8d9a0d68c41cf7ef6"
+      "sha256": "d4eb9b247e29412896578bd59492a0983681210439d19188b992011b4963992d"
     },
     {
       "path": "src/server/responses/encrypted-payload.ts",
@@ -2376,6 +2376,10 @@
       "path": "src/server/responses/fetch-helpers.ts",
       "sha256": "1043b5b66d5d8c43bd3600200d86cbd6bb5af5614bc4fa17bebc2134b854ca99"
     },
+    {
+      "path": "src/server/responses/input-admission.ts",
+      "sha256": "961168288033b3bb4f1b9542e7ab329a0350d2c5fc44036d2e6cf39355d3b26c"
+    },
     {
       "path": "src/server/responses/passthrough-error.ts",
       "sha256": "d1de1ae5bedc91406219ff82276158b8203c53191a106051a2e2d65140fcef63"
@@ -2434,7 +2438,7 @@
     },
     {
       "path": "src/service-manager-probe.ts",
-      "sha256": "6a9efca4e86bb940654475254c6600f377d1fa96a430f70c47fa0781145fca6f"
+      "sha256": "debddd154561e93532edb423bf53dc917c6619ea980d7061368c22a512b29200"
     },
     {
       "path": "src/service.ts",
@@ -2514,7 +2518,7 @@
     },
     {
       "path": "src/types.ts",
-      "sha256": "b04403f46247c96634d0c8c6344c1ecc44979980b0456c28140e3aa1da4ab6ca"
+      "sha256": "4eccad9a6a250af4255297f55de0a8b4fd31058e7f4ea0068eeba4a744f7a3fd"
     },
     {
       "path": "src/update/badge.ts",
@@ -2602,7 +2606,7 @@
     },
     {
       "path": "src/vision/index.ts",
-      "sha256": "b3c27892a17ea2176c2b6361830800772a6efea5681fff570b3ca5da77626bbc"
+      "sha256": "eec04f8b8e21e3e0f894eda6a194947e3e4f91129e9b089f31c1a5f98a781bd6"
     },
     {
       "path": "src/vision/reasoning.ts",
@@ -2626,7 +2630,7 @@
     },
     {
       "path": "src/web-search/index.ts",
-      "sha256": "d8f043b344f916c63ae8d09323a2f894c1c98b76feae7921e67152fcc1db4b5f"
+      "sha256": "5334eb4bf0a970693eca2fa7e38cacef23c1ec5b79692383aa7364db2c011144"
     },
     {
       "path": "src/web-search/loop.ts",

package/src/lib/errors.ts CHANGED Viewed

@@ -43,6 +43,25 @@ function isSubscriptionGateMessage(text: string): boolean {
   );
 }
+function isLocalAclHardeningMessage(text: string): boolean {
+  const secretPathHardening = text.includes("secret path") && (
+    text.includes("acl") ||
+    text.includes("harden") ||
+    text.includes("permission") ||
+    text.includes("access denied") ||
+    text.includes("inheritance")
+  );
+  return (
+    text.includes("icacls") ||
+    text.includes("acl hardening") ||
+    text.includes("ntfs") ||
+    secretPathHardening ||
+    text.includes("inheritance:r") ||
+    /\bwindows\b.*\bacl\b/.test(text) ||
+    text.includes("/grant:r")
+  );
+}
 function isAuthenticationMessage(text: string): boolean {
   const accessDeniedWithCredentialCue = (
     text.includes("access denied") ||
@@ -170,6 +189,11 @@ export function classifyError(status: number, type: string, message: string): Oc
   if (type === "origin_rejected") {
     return { message, type: "invalid_request_error", code: "origin_rejected" };
   }
+  // Local ACL setup failures can contain provider-like auth wording (for example
+  // "access denied" or "authentication") but represent unavailable infrastructure.
+  if (status === 503 && isLocalAclHardeningMessage(text)) {
+    return { message, type: "server_error", code: "upstream_server_error" };
+  }
   // HTTP 401 and explicit auth failures are authoritative even when provider text
   // also advertises an upgrade or subscription.
   if (
@@ -280,6 +304,9 @@ export function inferHttpStatusFromAdapterMessage(message: string): number {
     lower.includes("too many requests") ||
     lower.includes("throttling")
   ) return 429;
+  // Local Windows filesystem hardening is infrastructure, not provider authentication.
+  // Keep this ahead of auth/permission and timeout keyword inference.
+  if (isLocalAclHardeningMessage(lower)) return 503;
   // Strong authentication signals win when a message contains mixed auth and
   // subscription/permission wording.
   if (isAuthenticationMessage(lower)) return 401;

package/src/providers/registry.ts CHANGED Viewed

@@ -2420,6 +2420,8 @@ export const PROVIDER_REGISTRY: readonly ProviderRegistryEntry[] = [
     dashboardUrl: "https://xiaomimimo.com",
     defaultModel: "mimo-auto",
     models: ["mimo-auto"],
+    reasoningEfforts: ["low", "medium", "high"],
+    reasoningEffortMap: { xhigh: "high", max: "high", ultra: "high" },
     note: "No key needed — uses Xiaomi MiMo's free public tier (limited-time offer). A JWT is bootstrapped automatically with an anonymous random client id stored locally. The endpoint contract mirrors the official MiMoCode client and is not publicly documented — Xiaomi may change or restrict it at any time. Prompts may be processed/retained by Xiaomi; do not send confidential material.",
   },
   // Xiaomi MiMo paid token plan. Separate host and wire from both `xiaomi` (Anthropic) and

package/src/responses/spill-store.ts CHANGED Viewed

@@ -36,6 +36,17 @@ export interface ResponseSpillPayload {
   createdAt: number;
   clientThreadId?: string;
   items: unknown[];
+  /**
+   * Index in `items` where the provider output begins, used by replay-overlap detection
+   * in state.ts. Optional so a payload written before this field still loads (it simply
+   * never authorizes a skip).
+   *
+   * Compatibility is FORWARD-ONLY: `validPayload` is a strict key allowlist, so a build
+   * predating this field rejects a payload carrying it as corrupt rather than ignoring
+   * it. Rolling back across this change invalidates spilled entries, which degrades to a
+   * replay miss — an already-handled path — not to corrupted live state.
+   */
+  providerOutputStart?: number;
   providers?: OcxProviderContinuationState;
 }
@@ -261,12 +272,19 @@ function validPayload(value: unknown, responseId: string): value is ResponseSpil
   if (!value || typeof value !== "object" || Array.isArray(value)) return false;
   const payload = value as Record<string, unknown>;
   const keys = Object.keys(payload);
-  if (keys.some(key => !["version", "responseId", "createdAt", "clientThreadId", "items", "providers"].includes(key))) return false;
+  if (keys.some(key => !["version", "responseId", "createdAt", "clientThreadId", "items", "providerOutputStart", "providers"].includes(key))) return false;
   if (payload.version !== 1 || payload.responseId !== responseId) return false;
   if (typeof payload.createdAt !== "number" || !Number.isFinite(payload.createdAt)) return false;
   if (payload.clientThreadId !== undefined
     && (typeof payload.clientThreadId !== "string" || payload.clientThreadId.trim().length === 0)) return false;
   if (!Array.isArray(payload.items)) return false;
+  // A malformed boundary must degrade to "never skip", never to a bad index: reject the
+  // payload outright so materialization treats it as corrupt rather than trusting it.
+  if (payload.providerOutputStart !== undefined) {
+    const anchor = payload.providerOutputStart;
+    if (typeof anchor !== "number" || !Number.isSafeInteger(anchor)
+      || anchor < 0 || anchor > payload.items.length) return false;
+  }
   if (payload.providers !== undefined) {
     if (!payload.providers || typeof payload.providers !== "object" || Array.isArray(payload.providers)) return false;
     for (const providerState of Object.values(payload.providers)) {
@@ -289,6 +307,7 @@ export function writeResponseSpillDurably(
       createdAt: state.createdAt,
       ...(state.clientThreadId ? { clientThreadId: state.clientThreadId } : {}),
       items: state.items,
+      ...(state.providerOutputStart !== undefined ? { providerOutputStart: state.providerOutputStart } : {}),
       ...(state.providers ? { providers: state.providers } : {}),
     };
     const serialized = JSON.stringify(payload);