@bitkyc08/opencodex 2.32.1 → 2.33.0

package/src/generated/compatibility-version.json

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "04296a57ecf1045f16342e12ccba46e204ba2991cf33660531ea0924b4dbbcc1"
+      "sha256": "b2e14672cf7df2f0eadb7e4327c50c6ff2768e6fdc023927fe22da8fc336e249"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -34,7 +34,7 @@
     },
     {
       "path": "src/adapters/anthropic.ts",
-      "sha256": "af1369074d4639e8e6863184734837cd6969a6cd5e1c51ceb9f258fcf761a859"
+      "sha256": "8e3a0ab54d16da6a290d7574e5360b0c55e63d359d107a448c440eb80d935df0"
     },
     {
       "path": "src/adapters/azure.ts",
@@ -274,7 +274,7 @@
     },
     {
       "path": "src/adapters/kiro-tools.ts",
-      "sha256": "74820aaa19ca00a9b28d8d862b068a29fd489c74b739acaacaa68f3ec1b0ab35"
+      "sha256": "a176dac1e44959607f817c88c777df5394da3006f68fe9d5b759393600633da6"
     },
     {
       "path": "src/adapters/kiro-truncation.ts",
@@ -338,7 +338,7 @@
     },
     {
       "path": "src/bridge.ts",
-      "sha256": "ed2f284f6eec13422a0ccd8fb6d1621776c3b24ed1e38bfba8e4add16d96a7e8"
+      "sha256": "9a50601ff7b592204713845db8631bc01cf4bb0e9d8e8a3a7e226ce19148e03b"
     },
     {
       "path": "src/chat/inbound.ts",
@@ -370,7 +370,7 @@
     },
     {
       "path": "src/claude/context-windows.ts",
-      "sha256": "4c49d8efeec1d1060e9e61201370d4dce268b7826ca3fcff773d1d53c4c548b4"
+      "sha256": "c400f4b76319ec14855128af40fe52b60d31d217b89e291641522a51d2583d97"
     },
     {
       "path": "src/claude/desktop-3p-guard.ts",
@@ -498,7 +498,7 @@
     },
     {
       "path": "src/cli/doctor.ts",
-      "sha256": "9aa9c6470bb69b32db20fa7b48f193fc21d08d303cf340b55d2b7a3335eab5c6"
+      "sha256": "3809a5be6f5223ffcfc9225187dcca8e1f4be0b01d281126fe3722f89a754767"
     },
     {
       "path": "src/cli/ensure-desired-integrations.ts",
@@ -514,7 +514,7 @@
     },
     {
       "path": "src/cli/index.ts",
-      "sha256": "40abaa584326962536f4b00ef6a5af3319c58b1d2bcee900a7303b9bd986761d"
+      "sha256": "64b43bdeed4ba242bfbf2531f49da3dc2c2292ed2a6a0cef0bb93cbc1222075e"
     },
     {
       "path": "src/cli/init.ts",
@@ -594,7 +594,7 @@
     },
     {
       "path": "src/cli/status.ts",
-      "sha256": "5388615c35af1f140c5fa78d891fb030ea82aa0382dcafbb3086cd8cae616640"
+      "sha256": "809fe8cf65f422b1405c67a4a5739f79d988f8b421d8bdb8003c9dffd4c51d56"
     },
     {
       "path": "src/cli/system-command.ts",
@@ -678,7 +678,7 @@
     },
     {
       "path": "src/codex/auth-api.ts",
-      "sha256": "e9e1dcd8c0ac39c93a1ed7977398bd5ce518669f5cc04b9f1331d2d1f54d9ed1"
+      "sha256": "b1b5dcece7e1f817a134361f6895c35550afc66d5db11602c6d25d0c40c2f0b8"
     },
     {
       "path": "src/codex/auth-collision.ts",
@@ -690,7 +690,7 @@
     },
     {
       "path": "src/codex/autostart-health.ts",
-      "sha256": "b91e91d7dd2a0373b4da9a6955e714ba79326046dc1d45b4ce129e955bc069e0"
+      "sha256": "e15bd998f1598bf6fe8a1bffdbb836225503baae36e6dc58357b4bb4bde425b6"
     },
     {
       "path": "src/codex/catalog-admission.ts",
@@ -714,7 +714,7 @@
     },
     {
       "path": "src/codex/catalog/aggregation.ts",
-      "sha256": "4c3ee463d05c005b0127926d756f81e7d01adbbd68be3130724410c428bda6f7"
+      "sha256": "aa80a049a216ffde1d39a221281c9f5666330f05cadd93a11399eac36c6f9404"
     },
     {
       "path": "src/codex/catalog/bundled.ts",
@@ -722,7 +722,7 @@
     },
     {
       "path": "src/codex/catalog/effort.ts",
-      "sha256": "e9efbb137522a8952150a75cc04061af43e161203f57b2d02650973119e2316c"
+      "sha256": "b837a78528f944ece136efc155aee4ff819f44f57d1affc65db1b36f47048ba6"
     },
     {
       "path": "src/codex/catalog/filesystem-evidence.ts",
@@ -734,7 +734,7 @@
     },
     {
       "path": "src/codex/catalog/metadata.ts",
-      "sha256": "e1c798b07f69a0c6130581096a1bc99ecad597e835895df58d1d76ab8f855f3e"
+      "sha256": "227871625347429067da8b8057412934f366900feba2e4be20749e6cb1dacaa3"
     },
     {
       "path": "src/codex/catalog/native-models.ts",
@@ -742,15 +742,15 @@
     },
     {
       "path": "src/codex/catalog/parsing.ts",
-      "sha256": "f066aa552765c7bd439516d58b9a5781ed606beb8525d8bb8cc967003441d06a"
+      "sha256": "ce7a1e2713ddcb2f2774d9641b014db88e92ca9e70e12cbde82b91ef5c0bd9db"
     },
     {
       "path": "src/codex/catalog/provider-fetch.ts",
-      "sha256": "8e1fff8e630df65179833156b8affd84643dcb3630218e1cd6d0457a9c1922ef"
+      "sha256": "f8f03db782a29e9c995d198780aa2c9279f6b4f81261f296d061788c3cc513e5"
     },
     {
       "path": "src/codex/catalog/sync.ts",
-      "sha256": "9b2d579bf93782bd4496b1fc5ade7def4f4bc4d55bebee395404da4e0cf857bd"
+      "sha256": "616a707b30b3e7c02334da5df2d35e490d758990916272e16fb0c7d5aeb2e38e"
     },
     {
       "path": "src/codex/codex-write-lock.ts",
@@ -762,7 +762,7 @@
     },
     {
       "path": "src/codex/convergence.ts",
-      "sha256": "4ab2e8828a32a1b6235528d0b9be18b24c7457c485972a00492a4a1675bb9c0a"
+      "sha256": "699abdffcecb97ea147e8514755d2d667fffea283d6146298af34bf6fda6502f"
     },
     {
       "path": "src/codex/coordinator-doctor.ts",
@@ -1026,7 +1026,7 @@
     },
     {
       "path": "src/codex/shim.ts",
-      "sha256": "f779c71050a1b2c3d6c08c22dbb6597d393a106f20a27566cc949203dbdad837"
+      "sha256": "0ffddafd8f9c10344a213e67363318598894a113ae8e5d383440d935a9c3132f"
     },
     {
       "path": "src/codex/subagent-defaults.ts",
@@ -1098,7 +1098,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "13dea38a22b2a511adf830f9ddfcb66ff7e384dc52028891585d2e8572cf75c7"
+      "sha256": "875dc438cd7bbbebe3645abac09b85efcaf5829548da154c09f116bc72329ee8"
     },
     {
       "path": "src/config/atomic-write.ts",
@@ -2026,7 +2026,7 @@
     },
     {
       "path": "src/oauth/callback-server.ts",
-      "sha256": "35c7f440cec98b32fd62a065e23370916d0d61118bbb54ae4542a2c74e22669f"
+      "sha256": "3c481c4b26bcaaee246aff098be3fa402e1c0f813adf0f00a4122af92d8d5264"
     },
     {
       "path": "src/oauth/chatgpt.ts",
@@ -2062,7 +2062,7 @@
     },
     {
       "path": "src/oauth/kimi.ts",
-      "sha256": "58fb57aab767941d89247e6d38b23e0dc6c4f15693504dc4040a5402265780af"
+      "sha256": "cbbd772bfcf74c1bf6357d494b1b87034c59fbc9ebeda0ccc93e31df431d4a30"
     },
     {
       "path": "src/oauth/kiro-credentials.ts",
@@ -2088,6 +2088,10 @@
       "path": "src/oauth/nous.ts",
       "sha256": "49fb089b01a8a118e575069d2308912b7fd661ef882913193b0e9f4d8df28201"
     },
+    {
+      "path": "src/oauth/open-browser-choice.ts",
+      "sha256": "f4ef3a89b0df0db5d5ae853378029e4983cd3a239cc97a36535350d939066bbb"
+    },
     {
       "path": "src/oauth/pkce.ts",
       "sha256": "8e2798e44de278bc4db99ceaeded806e4d80a141f4d81bd81e4ab6fd22189509"
@@ -2128,6 +2132,10 @@
       "path": "src/providers/api-keys.ts",
       "sha256": "53be86c657fa5f4ad3605f0098312df7186072637f8fe4d16667a64ec853e19e"
     },
+    {
+      "path": "src/providers/auto-compact-budget.ts",
+      "sha256": "574d38c410f507f590a2285086b78b34318b01f233fabf322a6cef0b817b5eb9"
+    },
     {
       "path": "src/providers/base-url-choices.ts",
       "sha256": "f75c050dd851d38fd90335def782699aea43f89930dfff95060fa88d9724a9a6"
@@ -2254,7 +2262,7 @@
     },
     {
       "path": "src/providers/xai-transport.ts",
-      "sha256": "469bae4776ca5a4e49c2e1c55b4dcc5c38918d9dd69d179266fdfe79704a644c"
+      "sha256": "1ac6638465ad2b2a36603ee36aa53176474f9c6ca3253db0a43933ed7b20371d"
     },
     {
       "path": "src/reasoning-effort.ts",
@@ -2434,7 +2442,7 @@
     },
     {
       "path": "src/server/auth-cors.ts",
-      "sha256": "8b4ce3cd26e0960b71dc671a8b638b2cbd0e760ee5d1fab90aafc64b80d81ba7"
+      "sha256": "8ae32bbf202ae3271139ebe5594f939fa81687316d006da088d064cb44521556"
     },
     {
       "path": "src/server/background-lifecycle.ts",
@@ -2510,7 +2518,7 @@
     },
     {
       "path": "src/server/management/agent-settings-routes.ts",
-      "sha256": "0ddaa9c208323d3c59abeed44cb05bf662828238e2ce8d7ad2495992fcf1435a"
+      "sha256": "d41b02b59c071c86f32829ec769110320b2b994efb724cfe2bcf64352645096a"
     },
     {
       "path": "src/server/management/api-access.ts",
@@ -2530,7 +2538,7 @@
     },
     {
       "path": "src/server/management/config-routes.ts",
-      "sha256": "7f6c34a95c4c5380c5e1fc48988836fc9e58868111e009621431025768488ced"
+      "sha256": "54b4936caf99e8df7cdf38afe9290615d9c9ae83acaeb6a42da192936bd1706d"
     },
     {
       "path": "src/server/management/context.ts",
@@ -2558,7 +2566,7 @@
     },
     {
       "path": "src/server/management/model-rows.ts",
-      "sha256": "8222455775c291b704d7b3fd807de115e7bab596d9183a8f0a0393aa4954054b"
+      "sha256": "ef61d365e116a718e46f73925315c244e0dab66191f1f449e5b281476dc009c7"
     },
     {
       "path": "src/server/management/native-integration-routes.ts",
@@ -2566,7 +2574,7 @@
     },
     {
       "path": "src/server/management/oauth-account-routes.ts",
-      "sha256": "b45cb4a832968edbdc3e60c09d8ba0945f430a619907b330fd930c9baeab0943"
+      "sha256": "a59494a55de7245e9bb37578437d085255ed67f8de9c3887042db5284b4691d2"
     },
     {
       "path": "src/server/management/provider-capability-config.ts",
@@ -2574,7 +2582,7 @@
     },
     {
       "path": "src/server/management/provider-routes.ts",
-      "sha256": "cab630320710e9931b8ac11aa171610c38d6f98766213ca1053d17f3f20e9831"
+      "sha256": "aea775e35c8da60e4d5e487f0515da72a16df03defb9227c410fcee0b3e2a4b9"
     },
     {
       "path": "src/server/management/request-history-routes.ts",
@@ -2706,7 +2714,7 @@
     },
     {
       "path": "src/server/responses-undeclared-tool-guard.ts",
-      "sha256": "63b70defd6739ef416ce8b37190f630ad86799fc480b98dcdf6f7ee4b7ff4e48"
+      "sha256": "6e023eec3dc7b2f81ff00b40c4dd8f2203c48daaff58fd0696a75ce2f4e3c1a6"
     },
     {
       "path": "src/server/responses.ts",
@@ -2738,11 +2746,11 @@
     },
     {
       "path": "src/server/responses/core.ts",
-      "sha256": "bf7fe92c249b5d683331a4513eebf63feb2dc32d6c3c9aa92cbb04faaf1c786a"
+      "sha256": "d7c3664cbdfd358c4f7a6be202eae41a612a8c7c8f7bc5f921aaef743221d22b"
     },
     {
       "path": "src/server/responses/empty-completion-guard.ts",
-      "sha256": "7df9d606c9072e9b72f4063403c507a0945f83be84188a37a0fe918f966d658f"
+      "sha256": "7ba65c37a10ab1c2a6c57b2d373e4bc601e092c4600aefe33ff97ebe4ead4415"
     },
     {
       "path": "src/server/responses/encrypted-payload.ts",
@@ -2910,7 +2918,7 @@
     },
     {
       "path": "src/types.ts",
-      "sha256": "aa0197bb8f8e30eadd0f658a8b5f4ab96a1bedcdda33a38f07d1b2a4437c14ae"
+      "sha256": "71bf1c05ce762244905ad304d674754ac1a759bd0d62164c402fb3c090e21a5d"
     },
     {
       "path": "src/types/accounts.ts",
@@ -2918,11 +2926,11 @@
     },
     {
       "path": "src/types/config.ts",
-      "sha256": "473fde6d5b11a71b4e7712b3bc2863841d0ecb327f335c3979328850afa0700f"
+      "sha256": "926fb0ee733520d9f756a1b54192193a255a078bd5fdf5c7511f47d1f033bbf3"
     },
     {
       "path": "src/types/provider.ts",
-      "sha256": "6a37ade0ad24851f61705584e0c67f1c64335541ffcd5f337465ddd618249f39"
+      "sha256": "0edbdc5f84f07d6c1412da8cc89958156c96782f3fd9fed082a41d6239f63e18"
     },
     {
       "path": "src/types/request.ts",
@@ -2930,7 +2938,7 @@
     },
     {
       "path": "src/types/tools.ts",
-      "sha256": "f78adbc5df38abc606972296ead76bb562ca6d491f5c738a8ecf678b15c8e77c"
+      "sha256": "a5c36b0dc61a88d395783ca613e06caddce54bfb9fc44fe9f24c5fe9f59b7a64"
     },
     {
       "path": "src/types/wire.ts",

package/src/oauth/callback-server.ts

@@ -276,10 +276,30 @@ export function parseCallbackInput(input: string): { kind: "url" | "query" | "ra
 
   try {
     const url = new URL(value);
+    // Also read the fragment. No provider configured here returns one — every
+    // OAuthCallbackFlow asks for response_type=code without response_mode, so
+    // the parameters land in the query — but a full URL whose parameters sit in
+    // the hash parses as a valid URL with no code, and reading only the query
+    // rejects it as "no authorization code found in input". This is the one
+    // place a fragment-returning provider would land, and the raw branch below
+    // already understands `code#state`.
+    //
+    // The query wins as a WHOLE when it carries the response, and the two
+    // fields are never mixed across collections. Reading `code` and `state`
+    // independently would accept `?state=<expected>#code=<other>` — one
+    // response assembled from two sources — which is exactly the confusion a
+    // state check exists to prevent. An authorization response arrives in one
+    // place; treat it that way.
+    //
+    // Only `code` and `state` are read — never a token. This repo does not
+    // implement the implicit grant and a paste field must not become the place
+    // it appears.
+    const fragment = new URLSearchParams(url.hash.replace(/^#/, ""));
+    const source = url.searchParams.has("code") ? url.searchParams : fragment;
     return {
       kind: "url",
-      code: url.searchParams.get("code") ?? undefined,
-      state: url.searchParams.get("state") ?? undefined,
+      code: source.get("code") ?? undefined,
+      state: source.get("state") ?? undefined,
     };
   } catch {
     // Not a URL - check for query string format

package/src/oauth/kimi.ts

@@ -209,7 +209,15 @@ async function pollForToken(deviceCode: string, intervalMs: number, expiresInMs:
 
 export async function loginKimi(ctrl: OAuthController): Promise<OAuthCredentials> {
   const device = await requestDeviceAuthorization();
-  ctrl.onAuth?.({ url: device.verificationUriComplete, instructions: `Enter code: ${device.userCode}` });
+  // `deviceCode` carries the human-typed user code, matching the other device
+  // providers. It is also what tells the management login route this is a device
+  // flow, so a provider-supplied verification URI is no longer handed to a local
+  // browser spawn — the URL stays visible and copyable in every login surface.
+  ctrl.onAuth?.({
+    url: device.verificationUriComplete,
+    instructions: `Enter code: ${device.userCode}`,
+    deviceCode: device.userCode,
+  });
   return pollForToken(device.deviceCode, device.intervalMs, device.expiresInMs, ctrl.signal);
 }
 

package/src/oauth/open-browser-choice.ts

@@ -0,0 +1,26 @@
+import type { OcxConfig } from "../types";
+
+/**
+ * Whether a login should open a browser on the machine running the proxy.
+ *
+ * Both login routes share this so the two surfaces cannot drift: a per-request
+ * `openBrowser` beats the persisted setting, and the persisted setting beats
+ * the historical default. It lives in `src/oauth/` rather than beside either
+ * route because `src/codex/auth-api.ts` and
+ * `src/server/management/oauth-account-routes.ts` both already import from
+ * here, so no new edge is added to the import graph.
+ *
+ * The default is the important part. An operator who upgrades and configures
+ * nothing must see exactly what they saw before, so only an explicit `false`
+ * declines — `undefined`, `true`, and a malformed value all open.
+ *
+ * A malformed request field is ignored rather than rejected on purpose: this is
+ * a display preference, and no login should fail because of one.
+ */
+export function shouldOpenBrowserForLogin(
+  requested: unknown,
+  config: Pick<OcxConfig, "oauthOpenBrowser">,
+): boolean {
+  if (typeof requested === "boolean") return requested;
+  return config.oauthOpenBrowser !== false;
+}

package/src/providers/auto-compact-budget.ts

@@ -0,0 +1,65 @@
+import { SUPPORTED_NATIVE_OPENAI_SLUGS } from "../codex/catalog/native-models";
+import { redactSecretString } from "../lib/redact";
+
+const RESERVED_OBJECT_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+
+function positiveSafeInteger(value: unknown): value is number {
+  return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+
+/**
+ * Resolve a client-facing soft compaction budget without changing any hard
+ * model limit. Configuration and measured input ceilings may only lower the
+ * default 90% envelope.
+ */
+export function clampAutoCompactTokenLimit(
+  contextWindow: number,
+  maxInputTokens?: number,
+  configuredLimit?: number,
+): number {
+  const candidates = [Math.floor(contextWindow * 0.9), contextWindow];
+  if (positiveSafeInteger(maxInputTokens)) candidates.push(maxInputTokens);
+  if (positiveSafeInteger(configuredLimit)) candidates.push(configuredLimit);
+  return Math.min(...candidates);
+}
+
+export type AutoCompactBudgetValidationOptions = Readonly<{
+  /** PATCH accepts null for whole-map and per-key deletion. */
+  allowTombstones?: boolean;
+  /** The canonical ChatGPT provider accepts only exact supported native ids. */
+  requireNativeIds?: boolean;
+}>;
+
+/** Shared config/load/management boundary for per-model soft budgets. */
+export function modelAutoCompactTokenLimitsConfigError(
+  value: unknown,
+  options: AutoCompactBudgetValidationOptions = {},
+): string | null {
+  const field = "modelAutoCompactTokenLimits";
+  if (value === undefined || (options.allowTombstones && value === null)) return null;
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return `${field} must be a plain object${options.allowTombstones ? " or null" : ""}`;
+  }
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) {
+    return `${field} must be a plain object with own properties`;
+  }
+  for (const [modelId, entry] of Object.entries(value as Record<string, unknown>)) {
+    const safeModelId = JSON.stringify(redactSecretString(modelId));
+    if (!modelId.trim()) return `${field} keys must be nonblank model ids`;
+    if (RESERVED_OBJECT_KEYS.has(modelId)) {
+      return `${field} key ${safeModelId} is reserved`;
+    }
+    if (options.requireNativeIds
+      && (modelId.includes("/") || !SUPPORTED_NATIVE_OPENAI_SLUGS.has(modelId))) {
+      return `${field} key ${safeModelId} must be an exact supported native model id`;
+    }
+    if (options.allowTombstones && entry === null) continue;
+    if (!positiveSafeInteger(entry)) {
+      return `${field}[${safeModelId}] must be a positive safe integer${
+        options.allowTombstones ? " or null" : ""
+      }`;
+    }
+  }
+  return null;
+}

package/src/providers/xai-transport.ts

@@ -4,6 +4,27 @@ import { resolveGithubCopilotTransport } from "./github-copilot-transport";
 
 export const XAI_GROK_CLI_BASE_URL = "https://cli-chat-proxy.grok.com/v1";
 
+/** The two hosts that serve xAI's Responses API: the public API and the Grok CLI proxy. */
+const XAI_RESPONSES_HOSTS = new Set(["api.x.ai", "cli-chat-proxy.grok.com"]);
+
+/**
+ * True when this provider's Responses traffic terminates at xAI itself.
+ *
+ * Probed 2026-08-22 one field per request: the two hosts accept and refuse exactly the same
+ * web_search fields, so they are one dialect rather than two. Matching is exact-host over
+ * https, which keeps lookalikes (`api.x.ai.evil.test`) and nonstandard ports out.
+ */
+export function isXaiResponsesDestination(provider: Pick<OcxProviderConfig, "baseUrl">): boolean {
+  try {
+    const url = new URL(provider.baseUrl);
+    return url.protocol === "https:"
+      && XAI_RESPONSES_HOSTS.has(url.hostname.toLowerCase())
+      && (url.port === "" || url.port === "443");
+  } catch {
+    return false;
+  }
+}
+
 export const XAI_GROK_COMPATIBILITY = {
   version: "0.2.93",
   userAgent: "opencodex-grok/0.2.93",

package/src/server/auth-cors.ts

@@ -26,6 +26,7 @@ import { effectiveGoogleMode, getProviderRegistryEntry, providerCodexAccountMode
 import { providerConfigSeed } from "../providers/derive";
 import type { OcxConfig, OcxProviderConfig } from "../types";
 import { openRouterRoutingConfigError } from "../providers/openrouter-routing";
+import { modelAutoCompactTokenLimitsConfigError } from "../providers/auto-compact-budget";
 import { googleVertexLocationConfigError } from "../providers/google-vertex-location";
 import { xaiResponsesOptInState } from "../providers/xai-responses-opt-in";
 
@@ -565,6 +566,8 @@ export function providerManagementConfigError(name: unknown, provider: unknown):
     if (contextOverlayError) return contextOverlayError;
     delete canonicalCandidate.contextWindow;
     delete canonicalCandidate.modelContextWindows;
+    // User-owned soft compaction policy; it does not alter the canonical transport seed.
+    delete canonicalCandidate.modelAutoCompactTokenLimits;
     const canonical = seed && sameCanonicalProviderSeed(canonicalCandidate, seed);
     if (!canonical) {
       return `provider ${name} must equal the canonical built-in provider seed`;
@@ -607,6 +610,13 @@ export function providerManagementConfigError(name: unknown, provider: unknown):
   if (apiKeyTransportError) return `provider ${name} ${apiKeyTransportError}`;
   const maxInputError = positiveIntegerRecordConfigError(raw.modelMaxInputTokens, "modelMaxInputTokens");
   if (maxInputError) return `provider ${name} ${maxInputError}`;
+  const autoCompactError = modelAutoCompactTokenLimitsConfigError(
+    raw.modelAutoCompactTokenLimits,
+    { requireNativeIds: name === "openai" },
+  );
+  if (autoCompactError) {
+    return `provider ${JSON.stringify(redactSecretString(name))} ${autoCompactError}`;
+  }
   const reasoningSummariesError = booleanRecordConfigError(raw.modelSupportsReasoningSummaries, "modelSupportsReasoningSummaries");
   if (reasoningSummariesError) return `provider ${name} ${reasoningSummariesError}`;
   const reasoningSummaryDeliveryError = reasoningSummaryDeliveryRecordConfigError(
@@ -707,6 +717,7 @@ export function safeConfigDTO(config: OcxConfig): unknown {
       "models",
       "contextWindow",
       "modelContextWindows",
+      "modelAutoCompactTokenLimits",
       "defaultMaxOutputTokens",
       "modelMaxOutputTokens",
       "openRouterRouting",
@@ -748,6 +759,9 @@ export function safeConfigDTO(config: OcxConfig): unknown {
     defaultProvider: config.defaultProvider,
     codexAutoStart: codexAutoStartEnabled(config),
     websockets: config.websockets,
+    // The GUI's browser-open toggle reads and writes this; absent means the
+    // historical auto-open behavior.
+    oauthOpenBrowser: config.oauthOpenBrowser !== false,
     providers,
   };
 }

package/src/server/management/agent-settings-routes.ts

@@ -60,6 +60,7 @@ import {
   webSearchCandidateRows,
   webSearchModelIsRejected,
   webSearchModelRejection,
+  type WebSearchBackend,
 } from "./web-search-sidecar-options";
 import { drainAndShutdown } from "../lifecycle";
 import { filterRequestLogs, getRequestLogEntries, type RequestLogEntry } from "../request-log";
@@ -1118,13 +1119,18 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
       if (field === "webSearchSidecar"
         && (section.model !== undefined || section.backend !== undefined)) {
         const stored = config.claudeCode?.webSearchSidecar;
-        const effectiveBackend = section.backend === "anthropic"
-          ? "anthropic"
-          : section.backend === "openai"
-            ? "openai"
-            : section.backend === null
-              ? config.webSearchSidecar?.backend ?? "openai"
-              : stored?.backend ?? config.webSearchSidecar?.backend ?? "openai";
+        // Validate against the SUBMITTED backend across the whole union, not
+        // just openai/anthropic (#2457). allowedBackends above already refused
+        // unknown literals; Array.includes does not narrow, hence the cast.
+        // null keeps its own meaning here — drop the override and inherit the
+        // global backend — which is deliberately NOT the sidecar-settings rule.
+        const submittedBackend = section.backend;
+        const effectiveBackend = typeof submittedBackend === "string"
+          && allowedBackends.includes(submittedBackend)
+          ? submittedBackend as WebSearchBackend
+          : submittedBackend === null
+            ? config.webSearchSidecar?.backend ?? "openai"
+            : stored?.backend ?? config.webSearchSidecar?.backend ?? "openai";
         const effectiveModel = section.model === ""
           ? config.webSearchSidecar?.model
           : typeof section.model === "string"

package/src/server/management/config-routes.ts

@@ -298,6 +298,9 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       streamMode: config.streamMode ?? "auto",
       appOwnedMemoryBudgetMb: config.appOwnedMemoryBudgetMb ?? 256,
       codexAccountPickerEnabled: codexAccountPickerEnabled(config),
+      // Absent means the historical auto-open, so the GUI can render the toggle
+      // without having to know that `undefined` and `true` mean the same thing.
+      oauthOpenBrowser: config.oauthOpenBrowser !== false,
       startupHealth: await readStartupHealth(config),
       codexRuntime: {
         path: displayCodexRuntimePath(resolved.runtime.command),
@@ -382,16 +385,21 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       streamMode?: unknown;
       appOwnedMemoryBudgetMb?: unknown;
       codexAccountPickerEnabled?: unknown;
+      oauthOpenBrowser?: unknown;
     };
     if (body.codexAutoStart === undefined
       && body.streamMode === undefined
       && body.appOwnedMemoryBudgetMb === undefined
-      && body.codexAccountPickerEnabled === undefined) {
-      return jsonResponse({ error: "provide codexAutoStart, streamMode, appOwnedMemoryBudgetMb, or codexAccountPickerEnabled" }, 400);
+      && body.codexAccountPickerEnabled === undefined
+      && body.oauthOpenBrowser === undefined) {
+      return jsonResponse({ error: "provide codexAutoStart, streamMode, appOwnedMemoryBudgetMb, codexAccountPickerEnabled, or oauthOpenBrowser" }, 400);
     }
     if (body.codexAutoStart !== undefined && typeof body.codexAutoStart !== "boolean") {
       return jsonResponse({ error: "codexAutoStart boolean is required" }, 400);
     }
+    if (body.oauthOpenBrowser !== undefined && typeof body.oauthOpenBrowser !== "boolean") {
+      return jsonResponse({ error: "oauthOpenBrowser boolean is required" }, 400);
+    }
     if (body.streamMode !== undefined && !isStreamMode(body.streamMode)) {
       return jsonResponse({ error: "streamMode must be auto, legacy-tee, or eager-relay" }, 400);
     }
@@ -418,6 +426,8 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       hasCodexAccountNamespaces: Object.hasOwn(config, "codexAccountNamespaces"),
       codexAccountPickerEnabled: config.codexAccountPickerEnabled,
       hasCodexAccountPickerEnabled: Object.hasOwn(config, "codexAccountPickerEnabled"),
+      oauthOpenBrowser: config.oauthOpenBrowser,
+      hasOauthOpenBrowser: Object.hasOwn(config, "oauthOpenBrowser"),
     };
     const pickerWasEnabled = codexAccountPickerEnabled(config);
     let pickerIsEnabled = pickerWasEnabled;
@@ -441,6 +451,9 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       } else if (body.codexAccountPickerEnabled === false) {
         config.codexAccountPickerEnabled = false;
       }
+      if (typeof body.oauthOpenBrowser === "boolean") {
+        config.oauthOpenBrowser = body.oauthOpenBrowser;
+      }
       pickerIsEnabled = codexAccountPickerEnabled(config);
       (deps.saveConfigPreservingClaudeCode ?? saveConfigPreservingClaudeCode)(config);
     } catch (error) {
@@ -457,6 +470,9 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       if (previousSettings.hasCodexAccountPickerEnabled) {
         config.codexAccountPickerEnabled = previousSettings.codexAccountPickerEnabled;
       } else delete config.codexAccountPickerEnabled;
+      if (previousSettings.hasOauthOpenBrowser) {
+        config.oauthOpenBrowser = previousSettings.oauthOpenBrowser;
+      } else delete config.oauthOpenBrowser;
       throw error;
     }
     if (typeof body.appOwnedMemoryBudgetMb === "number") {
@@ -476,6 +492,7 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
       streamMode: config.streamMode ?? "auto",
       appOwnedMemoryBudgetMb: config.appOwnedMemoryBudgetMb ?? 256,
       codexAccountPickerEnabled: pickerIsEnabled,
+      oauthOpenBrowser: config.oauthOpenBrowser !== false,
       catalogRefreshPending,
       startupHealth: await readStartupHealth(config),
     });
@@ -665,9 +682,18 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise<Respon
 
     if (body.webSearch) {
       const pairTouched = body.webSearch.model !== undefined || body.webSearch.backend !== undefined;
-      const effectiveBackend = body.webSearch.backend === "anthropic"
-        ? "anthropic"
-        : body.webSearch.backend === "openai" || body.webSearch.backend === null
+      // Validate against the backend the caller SUBMITTED, across the whole
+      // union — not just openai/anthropic (#2457). The union check above has
+      // already refused unknown literals, so a surviving string is a member;
+      // Array.includes does not narrow, hence the cast. Falling back to the
+      // stored backend for xai/gemini/exa both rejected legal pairs and
+      // accepted illegal ones: a submitted gemini was checked against a stored
+      // openai. null means "unset the backend", and unset resolves to openai.
+      const submittedBackend = body.webSearch.backend;
+      const effectiveBackend = typeof submittedBackend === "string"
+        && WEB_SEARCH_BACKENDS_UNION.includes(submittedBackend as never)
+        ? submittedBackend as typeof WEB_SEARCH_BACKENDS_UNION[number]
+        : submittedBackend === null
           ? "openai"
           : config.webSearchSidecar?.backend ?? "openai";
       const effectiveModel = typeof body.webSearch.model === "string"