npm - @bitkyc08/opencodex - Versions diffs - 2.45.0 → 2.46.0-preview.20260907 - Mend

@bitkyc08/opencodex 2.45.0 → 2.46.0-preview.20260907

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (52) hide show

package/gui/dist/assets/{index-J96sug5C.css → index-BFgUC17B.css} +1 -1
package/gui/dist/assets/{index-CCfD72yq.js → index-NcAVXkST.js} +19 -19
package/gui/dist/index.html +2 -2
package/gui/dist/provider-icons/raycast.svg +3 -0
package/package.json +1 -1
package/src/adapters/anthropic.ts +8 -3
package/src/adapters/openai-responses.ts +7 -0
package/src/bridge.ts +27 -7
package/src/claude/inbound.ts +23 -5
package/src/claude/outbound.ts +87 -19
package/src/cli/capabilities.ts +4 -1
package/src/cli/dispatch.ts +1 -1
package/src/cli/doctor.ts +2 -2
package/src/cli/export-command.ts +22 -10
package/src/cli/help.ts +1 -1
package/src/cli/index.ts +34 -7
package/src/cli/integrations.ts +34 -1
package/src/cli/provider.ts +27 -15
package/src/cli/registry.ts +2 -2
package/src/cli/version-skew.ts +36 -3
package/src/clients/aside-profiles.ts +8 -7
package/src/clients/config-export/contracts.ts +2 -1
package/src/clients/config-export/raycast.ts +106 -0
package/src/clients/config-export.ts +36 -0
package/src/clients/model-presentation.ts +61 -0
package/src/codex/catalog/sync.ts +44 -2
package/src/codex/convergence.ts +7 -0
package/src/generated/compatibility-version.json +59 -43
package/src/generated/model-metadata.ts +1 -0
package/src/images/loop.ts +10 -2
package/src/integrations/catalog-refresh.ts +1 -1
package/src/integrations/merge.ts +158 -25
package/src/integrations/raycast-detect.ts +111 -0
package/src/integrations/registry.ts +18 -0
package/src/integrations/state.ts +82 -13
package/src/integrations/writer.ts +46 -31
package/src/lib/bounded-body.ts +22 -7
package/src/oauth/anthropic-routing.ts +59 -14
package/src/oauth/health.ts +3 -0
package/src/providers/quota.ts +145 -9
package/src/providers/registry.ts +31 -0
package/src/responses/parser.ts +16 -3
package/src/responses/reasoning-envelope.ts +3 -2
package/src/server/grok-responses-control-frame.ts +43 -0
package/src/server/management/config-routes.ts +6 -2
package/src/server/management/integration-routes.ts +29 -2
package/src/server/management/model-routes.ts +9 -1
package/src/server/request-decompress.ts +34 -8
package/src/server/responses/agent-task-recovery-cache.ts +43 -14
package/src/server/responses/agent-task-recovery.ts +28 -16
package/src/server/responses/core.ts +39 -6
package/src/web-search/loop.ts +10 -2

package/gui/dist/index.html CHANGED Viewed

@@ -16,8 +16,8 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-CCfD72yq.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-J96sug5C.css">
+    <script type="module" crossorigin src="/assets/index-NcAVXkST.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BFgUC17B.css">
   </head>
   <body>
     <div id="root"></div>

package/gui/dist/provider-icons/raycast.svg ADDED Viewed

@@ -0,0 +1,3 @@
+<svg viewBox="0 0 228 228" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path fill-rule="evenodd" clip-rule="evenodd" d="M57 147.207V171L-0.0518799 113.948L11.9031 102.084L57 147.207ZM80.7932 171H57L114.052 228.052L125.955 216.149L80.7932 171ZM216.11 125.89L228 114L114 0L102.11 11.8901L147.155 57H119.926L88.4822 25.5826L76.5792 37.4727L96.1583 57.0519H82.5307V145.521H171V131.907L190.579 151.486L202.469 139.583L171 108.048V80.8192L216.11 125.89ZM62.9515 51.0485L51.0614 62.9516L63.8203 75.7104L75.7104 63.8073L62.9515 51.0485ZM164.193 152.29L152.341 164.18L165.1 176.939L177.003 165.048L164.193 152.29ZM37.4208 76.5792L25.5307 88.4693L57 119.952V96.1454L37.4208 76.5792ZM131.842 171H108.048L139.531 202.469L151.421 190.579L131.842 171Z" fill="#FF6363"/>
+</svg>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bitkyc08/opencodex",
-  "version": "2.45.0",
+  "version": "2.46.0-preview.20260907",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",

package/src/adapters/anthropic.ts CHANGED Viewed

@@ -1118,9 +1118,14 @@ export function createAnthropicAdapter(provider: OcxProviderConfig, cacheRetenti
                 break;
               }
               case "content_block_start": {
-                const block = data.content_block as { type: string; id?: string; name?: string; data?: string } | undefined;
+                const block = data.content_block as { type: string; id?: string; name?: string; data?: string; thinking?: string } | undefined;
                 if (!block) break;
                 currentBlockType = block.type;
+                if (block.type === "thinking") {
+                  // Preserve even a display:omitted block boundary. The bridge can then
+                  // distinguish consecutive empty signed blocks from signature updates.
+                  yield { type: "thinking_delta", thinking: typeof block.thinking === "string" ? block.thinking : "" };
+                }
                 if (block.type === "tool_use") {
                   currentToolCallId = usableToolUseId(block.id);
                   currentToolCallName = toolNames.fromWire(block.name ?? "");
@@ -1151,8 +1156,8 @@ export function createAnthropicAdapter(provider: OcxProviderConfig, cacheRetenti
                   // later text blocks independent.
                   yield { type: "thinking_delta", thinking: delta.reasoning };
                 } else if (delta.type === "signature_delta" && typeof delta.signature === "string" && (currentBlockType === "thinking" || currentBlockType === "reasoning")) {
-                  // Arrives once, just before the thinking block's content_block_stop; block-scoped
-                  // so a stray signature on a non-thinking block can never be captured.
+                  // Anthropic SDKs replace the signature with this value. Forward updates
+                  // within the block; the bridge closes on the next semantic boundary.
                   yield { type: "thinking_signature", signature: delta.signature };
                 } else if (delta.type === "input_json_delta" && typeof delta.partial_json === "string" && currentBlockType === "tool_use") {
                   // Forwarded immediately: the bridge maps each delta to a client-visible

package/src/adapters/openai-responses.ts CHANGED Viewed

@@ -630,6 +630,13 @@ function mapRoutedResponsesReasoningEffort(
   if (provider.authMode === "forward") return body;
   if (configuredReasoningEfforts(provider, modelId) === undefined) return body;
   if (!isPlainObject(body) || !isPlainObject(body.reasoning)) return body;
+  const declaredEfforts = modelRecordValue(provider.modelReasoningEfforts, modelId) ?? provider.reasoningEfforts;
+  // An explicitly empty ladder means no effort control, not no reasoning output.
+  // Omit only effort so the upstream default applies; unknown/non-rankable ladders stay untouched.
+  if (declaredEfforts?.length === 0 && Object.hasOwn(body.reasoning, "effort")) {
+    const { effort: _effort, ...reasoning } = body.reasoning;
+    return { ...body, reasoning: Object.keys(reasoning).length > 0 ? reasoning : undefined };
+  }
   const requested = body.reasoning.effort;
   if (typeof requested !== "string") return body;

package/src/bridge.ts CHANGED Viewed

@@ -945,6 +945,13 @@ export function bridgeToResponsesSSE(
             }
             if (event.type !== "done" && event.type !== "incomplete" && event.type !== "error") continue;
           }
+          // Anthropic signature_delta supplies the latest signature, not an append-only
+          // fragment (anthropic-sdk-typescript MessageStream). Keep consecutive updates
+          // together; the next semantic event belongs to the following block.
+          if (pendingSignature !== undefined && event.type !== "thinking_signature" && event.type !== "heartbeat") {
+            if (currentReasoning) closeCurrentReasoning();
+            else flushHiddenReasoningEnvelope();
+          }
           switch (event.type) {
             case "assistant_boundary": {
               // A guarded continuation starts a fresh assistant output item while keeping the
@@ -1054,15 +1061,21 @@ export function bridgeToResponsesSSE(
             case "thinking_signature": {
               pendingSignatureBytes = replaceRetainedString(pendingSignatureBytes, event.signature, "reasoning");
               pendingSignature = event.signature;
-              // Signature arrives at the end of the thinking block. With a visible reasoning item
-              // open, closeCurrentReasoning attaches the envelope; hidden/suppressed blocks flush
-              // an envelope-only reasoning item now.
-              if (!currentReasoning) flushHiddenReasoningEnvelope();
+              // Delay closing until the next semantic event so a signature update cannot
+              // create another block or become attached to the following thinking text.
               break;
             }
             case "redacted_thinking": {
+              if (currentMsg) closeCurrentMessage("commentary");
+              if (currentReasoning) closeCurrentReasoning();
+              if (currentRawReasoning) closeCurrentRawReasoning();
+              flushHiddenRawReasoning();
+              if (currentToolCall) closeCurrentToolCall();
               budget?.chargeRetained(bytesOf(event.data), { kind: "reasoning" });
               pendingRedacted.push(event.data);
+              // A redacted block is complete at content_block_start. Emit it here,
+              // not with a later thinking block or after a tool call at turn end.
+              flushHiddenReasoningEnvelope();
               break;
             }
             case "kiro_redacted_reasoning": {
@@ -1816,6 +1829,9 @@ function buildResponseJSONWithBudget(
       if (budget) releaseTranslatedEvent(e, budget);
       continue;
     }
+    if (batchSignature !== undefined && e.type !== "thinking_signature" && e.type !== "heartbeat") {
+      flushSummaryReasoning();
+    }
     switch (e.type) {
       case "assistant_boundary":
         flushText("commentary");
@@ -1860,19 +1876,23 @@ function buildResponseJSONWithBudget(
         }
         break;
       case "thinking_signature":
-        // End of the current thinking block — flush it WITH the signature envelope so the
-        // block/signature pairing survives multi-block turns.
+        // Like streaming, retain the latest signature update until the next semantic
+        // event. Flushing every update would manufacture signature-only siblings.
         batchSignatureBytes = replaceBatchRetainedString(batchSignatureBytes, e.signature, "reasoning");
         batchSignature = e.signature;
-        flushSummaryReasoning();
         break;
       case "redacted_thinking":
+        flushText("commentary");
+        flushSummaryReasoning();
+        flushRawReasoning();
+        flushToolCall();
         {
           const dataBytes = bytesOf(e.data);
           budget?.chargeRetained(dataBytes, { kind: "reasoning" });
           batchRedactedBytes += dataBytes;
         }
         batchRedacted.push(e.data);
+        flushSummaryReasoning();
         break;
       case "kiro_redacted_reasoning":
         // Stash only — pushed after the trailing flushes. One blob per turn, so last wins.

package/src/claude/inbound.ts CHANGED Viewed

@@ -4,8 +4,8 @@
  * Design (devlog/260711_claude_inbound/010, 003_evidence.md):
  *  - translate-and-replay: the produced body MUST pass the real responsesRequestSchema
  *    parse so routing/OAuth/pool/failover are inherited unchanged.
- *  - thinking/redacted_thinking blocks on replay are DROPPED (v1 policy) — routed
- *    providers carry reasoning in Responses items/ocxr1 envelopes instead.
+ *  - thinking/redacted_thinking replay is preserved in Responses reasoning items;
+ *    signatures and redacted payloads travel in bounded ocxr1 envelopes.
  *  - thinking.budget_tokens is NEVER forwarded raw; it maps to an effort tier.
  *  - top_k is accepted and silently dropped (no Responses equivalent, CCR parity).
  */
@@ -17,6 +17,7 @@ export { resolveInboundModel, effortForThinkingBudget, effortFromOutputConfig, e
 import { AnthropicRequestError, isRec, type Rec } from "./inbound-records";
 import { resolveInboundModel, effortForThinkingBudget, effortFromOutputConfig, formatFromOutputConfig } from "./inbound-model-options";
 import { systemToInstructions, toolsToResponses, toolChoiceToResponses } from "./inbound-content-options";
+import { decodeReasoningEnvelope, encodeReasoningEnvelope, OCX_REASONING_PREFIX } from "../responses/reasoning-envelope";
@@ -234,9 +235,26 @@ function assistantMessageToItems(content: unknown, input: Rec[]): void {
         input.push({ type: "function_call", call_id: raw.id, name: raw.name, arguments: JSON.stringify(raw.input ?? {}) });
         break;
       }
-      case "thinking":
-      case "redacted_thinking":
-        break; // v1 policy: dropped on replay (003 evidence — safe for routed providers)
+      case "thinking": {
+        flush();
+        const thinking = typeof raw.thinking === "string" ? raw.thinking : "";
+        const signature = typeof raw.signature === "string" ? raw.signature : "";
+        if (signature.startsWith(OCX_REASONING_PREFIX)) {
+          const owned = decodeReasoningEnvelope(signature);
+          if (!owned) throw new AnthropicRequestError("malformed ocxr1 reasoning signature");
+          if (Object.hasOwn(owned, "sig")) throw new AnthropicRequestError("OpenCodex reasoning continuity cannot be replayed as an Anthropic signature");
+        }
+        const encrypted = signature.length === 0 ? undefined : signature.startsWith(OCX_REASONING_PREFIX) ? signature : encodeReasoningEnvelope({ sig: signature });
+        if (thinking.length === 0 && !encrypted) break;
+        input.push({ type: "reasoning", id: `rs_${crypto.randomUUID().replace(/-/g, "")}`, summary: thinking.length > 0 ? [{ type: "summary_text", text: thinking }] : [], ...(encrypted ? { encrypted_content: encrypted } : {}) });
+        break;
+      }
+      case "redacted_thinking": {
+        flush();
+        const data = typeof raw.data === "string" ? raw.data : "";
+        if (data.length > 0) input.push({ type: "reasoning", id: `rs_${crypto.randomUUID().replace(/-/g, "")}`, summary: [], encrypted_content: encodeReasoningEnvelope({ red: [data] }) });
+        break;
+      }
       default:
         break;
     }

package/src/claude/outbound.ts CHANGED Viewed

@@ -5,8 +5,8 @@
  *  - Transport-only `ping` events may appear at any point, including before
  *    message_start. Semantic framing stays message_start ->
  *    (content_block_start -> deltas -> content_block_stop)* -> message_delta -> message_stop.
- *  - thinking blocks get thinking_delta(s) then ONE synthetic signature_delta just
- *    before content_block_stop (CCR precedent: Claude Code does not verify signatures).
+ *  - thinking blocks get thinking_delta(s), then one signature_delta containing the
+ *    genuine replay signature or a bounded ocxr1 fallback envelope.
  *  - message_delta.usage is cumulative; message_start embeds a full message snapshot.
  *  - errors: {type:"error", error:{type,message}}; may arrive mid-stream after HTTP 200.
  */
@@ -20,6 +20,7 @@ import {
   type TranslatorBudget,
 } from "../lib/translator-budget";
 import { sseFieldOffset, sseFieldValue } from "../lib/sse-decoder";
+import { decodeReasoningEnvelope, encodeReasoningEnvelope } from "../responses/reasoning-envelope";
 type Rec = Record<string, unknown>;
@@ -214,6 +215,9 @@ interface OpenBlock {
   callId?: string;
   /** Last fixed-size reasoning identity (item + summary/content index) seen by this block. */
   reasoningPartKey?: string;
+  thinkingBuf?: string;
+  thinkingBufBytes?: number;
+  reasoningSig?: string;
 }
 /** Streaming: Responses SSE bytes -> Anthropic Messages SSE bytes. */
@@ -230,6 +234,9 @@ export function responsesSseToAnthropicSse(
   let bufferBytes = 0;
   let started = false;
   let terminated = false;
+  // Starting termination can still throw while closing a block or emitting its
+  // terminal frame. Only a delivered terminal forbids the bounded overflow error.
+  let terminalDelivered = false;
   let cancelled = false;
   let blockIndex = 0;
   let open: OpenBlock | null = null;
@@ -253,6 +260,11 @@ export function responsesSseToAnthropicSse(
     const bytes = queuedLiveFrameBytes.shift();
     if (bytes !== undefined) translatorBudget.releaseRetained(bytes, { kind: "live_transient" });
   };
+  const releaseThinkingBuffer = (block: OpenBlock | null | undefined) => {
+    if (block?.kind !== "thinking") return;
+    translatorBudget.releaseRetained(block.thinkingBufBytes ?? 0, { kind: "reasoning" });
+    block.thinkingBufBytes = 0;
+  };
   return new ReadableStream<Uint8Array>({
     start(controller) {
@@ -296,13 +308,14 @@ export function responsesSseToAnthropicSse(
           open.webSearchArgsEmitted = true;
         }
         if (open.kind === "thinking") {
-          // Synthetic signature: Claude Code accepts it (003 E6); inbound drops replays anyway.
+          const signature = open.reasoningSig ?? encodeReasoningEnvelope({ txt: open.thinkingBuf ?? "" });
           emit("content_block_delta", {
             type: "content_block_delta", index: open.index,
-            delta: { type: "signature_delta", signature: `ocx${Date.now()}` },
+            delta: { type: "signature_delta", signature },
           });
         }
         emit("content_block_stop", { type: "content_block_stop", index: open.index });
+        releaseThinkingBuffer(open);
         if (open.callId) translatorBudget.closeCall(open.callId);
         open = null;
       };
@@ -315,7 +328,7 @@ export function responsesSseToAnthropicSse(
           ? { type: "text", text: "" }
           : { type: "thinking", thinking: "", signature: "" };
         emit("content_block_start", { type: "content_block_start", index, content_block: contentBlock });
-        open = { kind, index };
+        open = { kind, index, thinkingBuf: "", thinkingBufBytes: 0 };
       };
       const finish = (stopReason: string, usage: unknown) => {
         if (terminated) return;
@@ -328,6 +341,7 @@ export function responsesSseToAnthropicSse(
           usage: anthropicUsage(usage, webSearchRequests),
         });
         emit("message_stop", { type: "message_stop" });
+        terminalDelivered = true;
       };
       // upstreamDerived: transient upstream statuses become overloaded_error so the
       // Anthropic-SDK client retries with backoff; proxy-internal exceptions stay
@@ -336,11 +350,15 @@ export function responsesSseToAnthropicSse(
       // resets reach the reader catch (no failed-tail relay) and stay api_error —
       // same as today, deliberate residual.
       const fail = (status: number, message: string, upstreamDerived = false, code?: string) => {
-        if (terminated) return;
+        // finish/fail sets terminated before closeOpenBlock. A closure-time
+        // allocation failure must still emit one error, without retrying closure.
+        if (terminated && (code !== "translation_buffer_limit" || terminalDelivered)) return;
         terminated = true;
         if (code === "translation_buffer_limit") {
+          releaseThinkingBuffer(open);
           if (open?.callId) translatorBudget.closeCall(open.callId);
           open = null;
+          terminalDelivered = true;
           // No normal close frames are valid after overflow. Emit exactly one bounded
           // typed terminal without consulting the exhausted budget.
           controller.enqueue(encoder.encode(sseFrame("error", anthropicErrorBody(
@@ -357,10 +375,12 @@ export function responsesSseToAnthropicSse(
           // Do not manufacture message_start before the terminal error. Earlier transport-only
           // pings remain valid and do not turn the failure into a partial message.
           emit("error", anthropicErrorBody(status, message, type, code));
+          terminalDelivered = true;
           return;
         }
         closeOpenBlock();
         emit("error", anthropicErrorBody(status, message, type, code));
+        terminalDelivered = true;
       };
       const handleFrame = (eventName: string, data: Rec) => {
@@ -374,8 +394,10 @@ export function responsesSseToAnthropicSse(
           case "response.output_text.delta": {
             if (typeof data.delta !== "string" || data.delta.length === 0) break;
             ensureBlock("text");
+            const active = open;
+            if (!active || active.kind !== "text") break;
             emit("content_block_delta", {
-              type: "content_block_delta", index: open!.index,
+              type: "content_block_delta", index: active.index,
               delta: { type: "text_delta", text: data.delta },
             });
             break;
@@ -384,6 +406,8 @@ export function responsesSseToAnthropicSse(
           case "response.reasoning_text.delta": {
             if (typeof data.delta !== "string" || data.delta.length === 0) break;
             ensureBlock("thinking");
+            const active = open;
+            if (!active || active.kind !== "thinking") break;
             // The JSON path joins reasoning summary/content parts with "\n\n"
             // (responsesJsonToAnthropicMessage); mirror that at part and item boundaries
             // so multi-part summaries do not glue into one run-on paragraph. Frames
@@ -395,15 +419,32 @@ export function responsesSseToAnthropicSse(
             // components while retaining item and part equality, rather than dropping item_id and
             // accidentally joining distinct malformed reasoning items.
             const partKey = `${boundedReasoningIdentity(data.item_id)}:${slot}`;
-            if (open!.reasoningPartKey !== undefined && open!.reasoningPartKey !== partKey) {
+            const needsPartSeparator = active.reasoningPartKey !== undefined
+              && active.reasoningPartKey !== partKey;
+            const appended = `${needsPartSeparator ? "\n\n" : ""}${data.delta}`;
+            const previous = active.thinkingBuf ?? "";
+            const previousBytes = active.thinkingBufBytes ?? 0;
+            const nextBytes = appendedUtf8Bytes(previous, previousBytes, appended);
+            const scope = { kind: "reasoning" } as const;
+            const reservation = translatorBudget.reserveTransient(nextBytes, scope);
+            try {
+              active.thinkingBuf = previous + appended;
+              active.thinkingBufBytes = nextBytes;
+              reservation.commitRetained();
+              translatorBudget.releaseRetained(previousBytes, scope);
+            } catch (error) {
+              reservation.release();
+              throw error;
+            }
+            if (needsPartSeparator) {
               emit("content_block_delta", {
-                type: "content_block_delta", index: open!.index,
+                type: "content_block_delta", index: active.index,
                 delta: { type: "thinking_delta", thinking: "\n\n" },
               });
             }
-            open!.reasoningPartKey = partKey;
+            active.reasoningPartKey = partKey;
             emit("content_block_delta", {
-              type: "content_block_delta", index: open!.index,
+              type: "content_block_delta", index: active.index,
               delta: { type: "thinking_delta", thinking: data.delta },
             });
             break;
@@ -499,10 +540,9 @@ export function responsesSseToAnthropicSse(
               if (pair.completed) webSearchRequests++;
               break;
             }
-            if (!open) break;
             // Close the matching open block (message/reasoning items close implicitly on
             // the next block; function_call items must close here so tool input parses).
-            if (open.kind === "tool_use" && item.type === "function_call") {
+            if (open && open.kind === "tool_use" && item.type === "function_call") {
               if (open.bufferWebSearchArgs && !open.webSearchArgsEmitted) {
                 const rawArgs = typeof item.arguments === "string" && item.arguments.length > 0
                   ? item.arguments
@@ -518,8 +558,26 @@ export function responsesSseToAnthropicSse(
               }
               closeOpenBlock();
             }
-            else if (open.kind === "text" && item.type === "message") closeOpenBlock();
-            else if (open.kind === "thinking" && item.type === "reasoning") closeOpenBlock();
+            else if (open && open.kind === "text" && item.type === "message") closeOpenBlock();
+            else if (item.type === "reasoning") {
+              const encrypted = typeof item.encrypted_content === "string" ? item.encrypted_content : "";
+              const env = encrypted ? decodeReasoningEnvelope(encrypted) : null;
+              const red = env?.red ?? [];
+              if (env?.sig && open?.kind !== "thinking") ensureBlock("thinking");
+              if (open?.kind === "thinking") {
+                if (env?.sig) open.reasoningSig = env.sig;
+                closeOpenBlock();
+              }
+              if (red.length > 0) {
+                ensureStarted();
+                closeOpenBlock();
+              }
+              for (const data of red) {
+                const idx = blockIndex++;
+                emit("content_block_start", { type: "content_block_start", index: idx, content_block: { type: "redacted_thinking", data } });
+                emit("content_block_stop", { type: "content_block_stop", index: idx });
+              }
+            }
             break;
           }
           case "response.completed": {
@@ -704,6 +762,7 @@ export function responsesSseToAnthropicSse(
             fail(413, "upstream translation buffer exceeded the safe limit", false, "translation_buffer_limit");
           } else fail(500, err instanceof Error ? err.message : String(err));
         } finally {
+          releaseThinkingBuffer(open);
           translatorBudget.releaseRetained(bufferBytes, { kind: "live_transient" });
           if (pingTimer !== undefined) clearInterval(pingTimer);
           reader.releaseLock();
@@ -717,6 +776,7 @@ export function responsesSseToAnthropicSse(
     cancel(reason) {
       cancelled = true;
       while (queuedLiveFrameBytes.length > 0) releaseDeliveredFrame();
+      releaseThinkingBuffer(open);
       if (open?.callId) translatorBudget.closeCall(open.callId);
       if (pingTimer !== undefined) clearInterval(pingTimer);
       return reader?.cancel(reason);
@@ -756,8 +816,15 @@ export function responsesJsonToAnthropicMessage(json: unknown, model: string): R
             if (isRec(s) && typeof s.text === "string" && s.text.length > 0) parts.push(s.text);
           }
         }
-        if (parts.length > 0) {
-          content.push({ type: "thinking", thinking: parts.join("\n\n"), signature: `ocx${Date.now()}` });
+        const encrypted = typeof raw.encrypted_content === "string" ? raw.encrypted_content : "";
+        const env = encrypted ? decodeReasoningEnvelope(encrypted) : null;
+        // Legacy combined envelopes place redacted blocks before the signed block,
+        // matching the Anthropic adapter. New bridge output uses separate items.
+        for (const data of env?.red ?? []) content.push({ type: "redacted_thinking", data });
+        // env.txt may be locally hidden text. Do not expose it here or manufacture
+        // a new signed continuity carrier; hidden-summary replay remains limited.
+        if (parts.length > 0 || env?.sig) {
+          content.push({ type: "thinking", thinking: parts.join("\n\n"), signature: env?.sig ?? encodeReasoningEnvelope({ txt: parts.join("\n\n") }) });
         }
         break;
       }
@@ -923,9 +990,10 @@ export async function collectAnthropicMessage(
   } finally {
     reader.releaseLock();
   }
-  closeBlock();
+  // Error is authoritative. In particular, do not allocate another copy of an
+  // unfinished thinking block after the translator reported closure overflow.
   if (error) return error;
+  closeBlock();
   return {
     id: `msg_${uuid()}`,
     type: "message",

package/src/cli/capabilities.ts CHANGED Viewed

@@ -148,7 +148,10 @@ export const CAPABILITIES: readonly Capability[] = [
     summary: "Configured providers with connectivity and selected models.",
     // Local config + PROVIDER_REGISTRY. Does not call GET /api/providers.
     routes: [],
-    flags: [{ name: "--json", value: "boolean", summary: "Emit the provider list as JSON." }],
+    flags: [
+      { name: "--json", value: "boolean", summary: "Emit the provider list as JSON." },
+      { name: "--jsonl", value: "boolean", summary: "Emit one configured provider per JSON line." },
+    ],
     mutates: false,
     json: "envelope",
     details: ["Reads local config; drives no management API route."],

package/src/cli/dispatch.ts CHANGED Viewed

@@ -403,7 +403,7 @@ const commandRunners: Record<string, CommandRunner> = {
             },
             config,
             port: live.port,
-          }, ["mcode", "pi"]));
+          }, ["mcode", "pi", "raycast"]));
         } catch (error) {
           console.warn(`Client integrations were not refreshed: ${error instanceof Error ? error.message : String(error)}`);
         }

package/src/cli/doctor.ts CHANGED Viewed

@@ -1157,11 +1157,11 @@ export async function runDoctor(args: string[] = []): Promise<void> {
   // No extra probe -- findLiveProxy already carried the version back.
   {
     const { packageVersion } = await import("./help");
-    const { computeVersionSkew } = await import("./version-skew");
+    const { computeVersionSkew, isConfirmedVersionMatch } = await import("./version-skew");
     const skew = computeVersionSkew(packageVersion(), live?.version);
     if (skew.skewed && skew.warning) {
       console.log(`!! ${skew.warning}`);
-    } else if (skew.proxyVersion !== null) {
+    } else if (isConfirmedVersionMatch(skew)) {
       console.log(`ok ocx ${skew.cliVersion} matches the running proxy`);
     }
   }

package/src/cli/export-command.ts CHANGED Viewed

@@ -172,17 +172,29 @@ export async function handleExportCommand(argv: string[], deps: ExportCommandDep
     const spec = EXPORT_CLIENTS[client];
     const root = await runtimeBaseUrl(deps);
-    const rows = await runtimeRequest<ExportProxyModelRow[]>("/api/models", {}, { ...deps, baseUrl: root });
-    if (!Array.isArray(rows)) {
-      throw new RuntimeApiError("Management API returned an unexpected /api/models payload.", 502, rows);
+    let built: { document: unknown; text: string };
+    if (client === "raycast") {
+      // The dial address alone cannot distinguish a wildcard authenticated bind
+      // from loopback. Let the live server resolve its admission/listener policy;
+      // saved config can differ from the process serving this request.
+      const exported = await runtimeRequest<{
+        client: string; format: string; config: unknown; text: string;
+      }>("/api/client-config?client=raycast", {}, { ...deps, baseUrl: root });
+      if (!exported || exported.client !== "raycast" || exported.format !== "yaml"
+        || typeof exported.text !== "string" || exported.config === undefined) {
+        throw new RuntimeApiError("Management API returned an unexpected Raycast export payload.", 502, null);
+      }
+      built = { document: exported.config, text: exported.text };
+    } else {
+      const rows = await runtimeRequest<ExportProxyModelRow[]>("/api/models", {}, { ...deps, baseUrl: root });
+      if (!Array.isArray(rows)) {
+        throw new RuntimeApiError("Management API returned an unexpected /api/models payload.", 502, rows);
+      }
+      // Discovery can persist selection; preserve the existing exporters' flow.
+      const config = (deps.configImpl ?? loadConfig)();
+      const models = exportModelsFromProxyRows(rows, config);
+      built = buildClientConfigText(client, { baseUrl: proxyV1BaseUrl(root), models, config });
     }
-    // Discovery can persist pending -> ready selection. Read from the caller's
-    // config source after the response, rather than filtering with a stale snapshot.
-    const config = (deps.configImpl ?? loadConfig)();
-    const models = exportModelsFromProxyRows(rows, config);
-    // The text is the client's OWN format — YAML, TOML and JSON5 clients would
-    // otherwise receive a JSON rendering their parser reads differently.
-    const built = buildClientConfigText(client, { baseUrl: proxyV1BaseUrl(root), models, config });
     const clientConfig = built.document;
     const text = built.text;

package/src/cli/help.ts CHANGED Viewed

@@ -77,7 +77,7 @@ Usage:
   ocx memory [--json]         Alias of ocx observe memory
   ocx api-key <sub>           Alias of ocx access key
   ocx access <sub>            External API keys and endpoint information
-  ocx export --client <id>    Print a client config wired to the running proxy (12 clients)
+  ocx export --client <id>    Print a client config wired to the running proxy (13 clients)
   ocx integration client <sub> Enable, disable, inspect or roll back a client integration
   ocx grok <sub>              Grok Build model selection and apply
   ocx system <sub>            Runtime settings, startup, sync, OpenCodex updates, and Codex CLI inspection

package/src/cli/index.ts CHANGED Viewed

@@ -92,6 +92,15 @@ import {
   grokSyncFailureMessage,
   reconcileEnsureDesiredIntegrations,
 } from "./ensure-desired-integrations";
+import { refreshOwnedCatalogIntegrations } from "../integrations/catalog-refresh";
+import { loadExportModels } from "../server/management/model-rows";
+import { removeOwnedConfigAfterDesktopCleanup } from "./uninstall-client-state";
+import { withProcessRuntimeProvenance } from "../lib/bun-runtime";
+import { selfLaunchArgv } from "../lib/self-launch-argv";
+import { initializeNodeLauncherContext } from "./launcher-context";
+import { createLocalAttestationSecret } from "../lib/local-management-attestation";
+import { MEMORY_DRAIN_RESTART_MS, REPLACEMENT_READY_TIMEOUT_MS } from "../lib/system-restart-contract";
 /**
  * A failed shell-hook reconcile is not cosmetic: a stale hook keeps sourcing
@@ -105,13 +114,25 @@ function reportShellHookFailure(result: { state: "installed" | "absent" | "faile
   console.warn("   Check ~/.zshrc for the '# opencodex claude-env hook' block.");
 }
-import { removeOwnedConfigAfterDesktopCleanup } from "./uninstall-client-state";
-import { withProcessRuntimeProvenance } from "../lib/bun-runtime";
-import { selfLaunchArgv } from "../lib/self-launch-argv";
-import { initializeNodeLauncherContext } from "./launcher-context";
-import { createLocalAttestationSecret } from "../lib/local-management-attestation";
-import { MEMORY_DRAIN_RESTART_MS, REPLACEMENT_READY_TIMEOUT_MS } from "../lib/system-restart-contract";
+async function refreshOwnedRaycastCatalog(
+  config: ReturnType<typeof loadConfig>,
+  port: number,
+): Promise<void> {
+  try {
+    const outcomes = await refreshOwnedCatalogIntegrations({
+      models: () => loadExportModels(config),
+      config,
+      port,
+    }, ["raycast"]);
+    for (const outcome of outcomes) {
+      if (!outcome.ok) {
+        console.error(`⚠️  Raycast integration was not refreshed: ${outcome.reason}`);
+      }
+    }
+  } catch (error) {
+    console.error(`⚠️  Raycast integration was not refreshed: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
 initializeNodeLauncherContext();
@@ -493,6 +514,7 @@ async function handleStart(options: { block?: boolean } = {}) {
     },
   );
   if (!startupSync.ran) console.log("   Codex integration OFF; startup left Codex native.");
+  await refreshOwnedRaycastCatalog(config, port);
   // #1046: one warning per startup, after BOTH writes. The server's cache
   // invalidation happens first and the catalog sync second, so the mtime is only
   // final here — and neither write site warns on its own, or a boot that hits
@@ -558,6 +580,9 @@ async function handleEnsure(options: { existingIsSuccess?: boolean } = {}): Prom
         return null;
       });
       if (synced?.status === "skipped") console.log("   Codex integration OFF; startup left Codex native.");
+      // Do not refresh Raycast from saved config here: live bind/admission and
+      // secondary-listener settings may differ. Explicit sync or server startup
+      // owns catalog refresh; ensure must not overwrite a working destination.
       // Ensure env file exists for already-running proxy (may have been deleted or pre-dates this feature).
       const systemEnv = await injectSystemEnv(live.port, config).catch(() => ({ injected: false }));
       reportShellHookFailure(reconcileShellHook(systemEnv.injected));
@@ -602,6 +627,8 @@ async function handleEnsure(options: { existingIsSuccess?: boolean } = {}): Prom
     return null;
   });
   if (synced?.status === "skipped") console.log("   Codex integration OFF; startup left Codex native.");
+  // The child performs Raycast refresh with its actual startup config. The
+  // parent's pre-spawn snapshot is not authoritative for a client-file write.
   // The child opens /healthz before its best-effort roster reconcile. Await the same idempotent
   // operation in the parent so `ocx ensure` cannot report success while stale ocx-*.md files are
   // still observable. Always use the live port, including fallback-port starts.