@codexapi/codexclaude 2.0.34 → 2.0.36

package/CUSTOMIZATIONS.md

@@ -5,10 +5,10 @@
 ## Runtime
 
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Local launcher version: `2.0.34`
-- Bundled official runtime dependency: `@openai/codex@0.149.0`
+- Local launcher version: `2.0.36`
+- Bundled official runtime dependency: `@openai/codex@0.152.0-alpha.6`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.36.tgz`
 - Bundled runtime version is managed internally and must not be used for customer update prompts.
 - Launcher update checks may call the CodexAPI.pro version endpoint and `@codexapi/codexclaude` npm metadata only.
 - The launcher must never check `@openai/codex` npm metadata or OpenAI GitHub releases for update notices.
@@ -25,10 +25,12 @@
 - Passes unknown commands directly to the bundled runtime after config is applied.
 - Provides `codexclaude changelog` using the managed version endpoint.
 - Does not expose separate `codexclaude status` or `codexclaude usage` commands; wallet information remains a compact pre-launch line.
-- Version `2.0.34` is forced by the backend minimum version and older clients must show an update-required message.
+- Version `2.0.36` is forced by the backend minimum version and older clients must show an update-required message.
 - Mandatory updates present a press-Enter `Upgrade Now` action in an interactive terminal, invoke npm with an argument array and no shell interpolation, verify the installed launcher version, use the hosted release if the registry fails or returns a stale version, then relaunch the requested action automatically.
 - The npm package manifest exposes only `codexclaude`, preventing npm from colliding with a native `codex` or `claude` command before postinstall runs.
 - Global installation creates optional `codex` and `claude` aliases only when no existing command is present in the npm prefix or anywhere on `PATH`; native clients must never be overwritten.
+- `codexclaude topup` and `codexclaude /topup` authenticate with the saved System Token, map the six fixed packages to the correct site-specific plan ids, and call only `/api/v1/wallet/stripe/checkout` and `/api/v1/wallet/stripe/confirm`.
+- The top-up flow never asks for or stores card numbers, CVCs, or issuer authentication codes. Stripe's hosted PCI surface owns payment-method collection and any required bank challenge; the launcher waits for idempotent server confirmation and then refreshes the wallet.
 
 ## Provider Config
 
@@ -65,7 +67,7 @@ Before launching the runtime, the launcher calls `/api/v1/wallet/status`, then `
 Expected status line:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.36 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
@@ -90,3 +92,4 @@ When updating the bundled runtime:
 15. Keep bearer username auth and the `X-CodexAPI-*` headers.
 16. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
 17. Run syntax checks, temporary-home setup, alias-preservation tests, `npm pack --dry-run`, and endpoint validation before publishing.
+18. Keep CLI top-up payment-method collection on Stripe's hosted surface and preserve checkout/confirm polling plus wallet refresh tests.

package/README.md

@@ -2,7 +2,7 @@
 
 `codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use ChatGPT Daybreak Blue, GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
 
-Version `2.0.34` bundles the official Codex runtime dependency `@openai/codex@0.149.0` and makes GPT-5.6 SOL with visible Extra High reasoning the default for new or invalid configurations. Existing valid model selections remain unchanged. It preserves the collision-safe updater, platform-native runtime launch, managed account and wallet integration, Full Access defaults, upstream update suppression, and complete model metadata.
+Version `2.0.36` bundles the exact Codex runtime dependency `@openai/codex@0.152.0-alpha.6` and makes GPT-5.6 SOL with visible Extra High reasoning the default for new or invalid configurations. Existing valid model selections remain unchanged. It preserves the collision-safe updater, platform-native runtime launch, managed account and wallet integration, Full Access defaults, upstream update suppression, and complete model metadata.
 
 ## Install Or Update
 
@@ -16,7 +16,7 @@ This does not delete local session history. The update replaces the `codexclaude
 
 The launcher checks CodexAPI.pro's managed version endpoint and the `@codexapi/codexclaude` npm package metadata only. It must never check `@openai/codex` npm metadata or OpenAI GitHub releases for customer update prompts.
 
-Version `2.0.34` is enforced as the minimum supported version. A compatible older launcher presents `✨ Update now available`; pressing Enter installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. If the npm registry install fails, the updater tries the hosted release before asking the user to intervene. Non-interactive terminals print the same npm command instead of hanging for input.
+Version `2.0.36` is enforced as the minimum supported version. A compatible older launcher presents `✨ Update now available`; pressing Enter installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. If the npm registry install fails, the updater tries the hosted release before asking the user to intervene. Non-interactive terminals print the same npm command instead of hanging for input.
 
 ## First Login
 
@@ -62,12 +62,25 @@ Show current launcher changes:
 codexclaude changelog
 ```
 
+## Top Up From The CLI
+
+Start the package selector with either command:
+
+```bash
+codexclaude topup
+codexclaude /topup
+```
+
+You can also choose a package directly, for example `codexclaude topup 25`. The launcher authenticates with the saved System Token, shows the current wallet, creates a server-authoritative Stripe Checkout session, waits for confirmed payment, and then prints the API Coding Credit added and the refreshed wallet balance.
+
+Card numbers, CVCs, and bank authentication challenges are entered only on Stripe's secure payment form. They are never read, logged, or stored by `codexclaude`. The terminal can be left waiting while payment is completed; webhook fulfillment still credits a successful purchase if the terminal is closed.
+
 ## Startup Status
 
 Before launching the coding runtime, the app prints a compact status line like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.36 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
@@ -81,5 +94,6 @@ Fable 5 is now available in codexclaude, exclusively.
 - A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including Terra, SOL Max, and SOL Ultra.
 - No default fast service tier. Fast mode is billed only when the user enables it inside the client.
 - Token Wallet balance lookup before launch without exposing separate `status` or `usage` launcher commands.
+- Authenticated `topup` and `/topup` commands using fixed server-authoritative packages, idempotent Stripe fulfillment, and post-payment wallet refresh.
 - Backend-identifying request headers so the API can enforce account and plan rules server-side.
 - Direct platform binary launch so the upstream npm wrapper cannot emit OpenAI update prompts.

package/bin/codexclaude.js

@@ -12,8 +12,8 @@ import { installSafeCommandAliases } from "../scripts/install-safe-aliases.js";
 
 const require = createRequire(import.meta.url);
 
-const APP_VERSION = "2.0.34";
-const CODEX_VERSION = "0.149.0";
+const APP_VERSION = "2.0.36";
+const CODEX_VERSION = "0.152.0-alpha.6";
 const APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI";
 const DEFAULT_MODEL_ID = "gpt-5.6-sol";
 const DEFAULT_DISPLAY_REASONING_EFFORT = "xhigh";
@@ -79,6 +79,17 @@ const SUPPORTED_REASONING_LEVELS = [
   { effort: "ultra", description: "GPT-5.6 SOL Ultra visible reasoning mode" },
 ];
 
+const TOPUP_PACKAGES = [
+  { amount: 5, credit: 50, sharedPlanId: "test", whiteLabelPlanId: "credit-5" },
+  { amount: 10, credit: 100, sharedPlanId: "starter", whiteLabelPlanId: "credit-10" },
+  { amount: 25, credit: 270, sharedPlanId: "pro", whiteLabelPlanId: "credit-25" },
+  { amount: 40, credit: 600, sharedPlanId: "boost", whiteLabelPlanId: "credit-40" },
+  { amount: 65, credit: 1000, sharedPlanId: "vip", whiteLabelPlanId: "credit-65" },
+  { amount: 115, credit: 2000, sharedPlanId: "titan", whiteLabelPlanId: "credit-115" },
+];
+const TOPUP_POLL_INTERVAL_MS = positiveInteger(process.env.CODEXCLAUDE_TOPUP_POLL_INTERVAL_MS, 3000);
+const TOPUP_TIMEOUT_MS = positiveInteger(process.env.CODEXCLAUDE_TOPUP_TIMEOUT_MS, 30 * 60 * 1000);
+
 const MODELS = {
   "claude-opus-5": {
     id: "claude-opus-5",
@@ -179,6 +190,11 @@ async function main() {
     await setupFlow();
     return;
   }
+  if (["topup", "/topup"].includes(command)) {
+    await ensureReady();
+    await topupFlow(args[0]);
+    return;
+  }
   if (command === "resume") {
     await ensureReady();
     await runCodex(["resume", "--search", ...args]);
@@ -203,6 +219,7 @@ Commands:
   codexclaude model       Select Daybreak Blue, GPT-5.6, Opus 5, Terra, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
   codexclaude changelog   Show the latest CodexAPI.pro launcher changes
   codexclaude setup       Rewrite ~/.codex/config.toml with Full Access defaults
+  codexclaude topup       Select an API Coding Credit package and securely complete payment
   codexclaude start       Start ${APP_DISPLAY_NAME} with --search
   codexclaude resume      Resume the latest coding session with --search
   codexclaude logout      Remove saved codexclaude account state
@@ -386,6 +403,143 @@ async function setupFlow() {
   console.log(`Configured ${CODEX_CONFIG_FILE} for ${MODELS[config.model].label} with Full Access, model-specific visible reasoning, and server-managed routing.`);
 }
 
+async function topupFlow(packageChoice = "") {
+  const config = normalizeConfig(requireConfig());
+  const walletBefore = await walletSnapshot(config);
+  const topupPackage = await selectTopupPackage(packageChoice);
+  const planId = topupPlanId(config, topupPackage);
+  const rl = readline.createInterface({ input, output });
+  try {
+    if (!packageChoice) {
+      const answer = (await rl.question(
+        `Deposit ${formatUsd(topupPackage.amount)} for ${formatUsd(topupPackage.credit)} API Coding Credit? [Y/n]: `,
+      )).trim().toLowerCase();
+      if (["n", "no"].includes(answer)) {
+        console.log("Top-up cancelled. No payment was created.");
+        return;
+      }
+    }
+  } finally {
+    rl.close();
+  }
+
+  console.log(`Current wallet balance: ${formatUsd(walletBefore.balance)}`);
+  const checkout = await postJsonAuth(
+    "/api/v1/wallet/stripe/checkout",
+    { planId },
+    config,
+    { timeoutMs: 30000 },
+  );
+  const checkoutUrl = String(checkout?.checkoutUrl || "").trim();
+  const sessionId = String(checkout?.sessionId || "").trim();
+  if (!checkoutUrl || !sessionId) {
+    throw new Error("Stripe did not return a usable secure Checkout session.");
+  }
+
+  console.log("\nStripe secure payment link:");
+  console.log(checkoutUrl);
+  console.log(
+    "\nComplete the payment on Stripe's secure form. This terminal does not read or store card numbers, CVCs, or bank authentication codes.",
+  );
+  console.log("Waiting for Stripe to confirm payment. Press Ctrl+C to stop waiting; the webhook will still credit a successful payment.");
+
+  if (isTruthy(process.env.CODEXCLAUDE_TOPUP_NO_WAIT)) {
+    return;
+  }
+  const confirmed = await waitForTopupConfirmation(config, sessionId);
+  const walletAfter = await walletSnapshot(config);
+  const confirmedCredit = numericWalletValue(
+    confirmed?.payment?.creditAddedUsd ??
+      confirmed?.payment?.creditUsd ??
+      confirmed?.selectedPlan?.creditUsd,
+  );
+  const credited = Math.max(0, walletAfter.balance - walletBefore.balance) || confirmedCredit;
+  console.log(`\nTop-up complete${confirmed?.alreadyFulfilled ? " (already reconciled)" : ""}.`);
+  console.log(`API Coding Credit added: ${formatUsd(credited)}`);
+  console.log(`New wallet balance: ${formatUsd(walletAfter.balance)}`);
+}
+
+async function selectTopupPackage(packageChoice) {
+  const normalized = String(packageChoice || "").trim().toLowerCase().replace(/^\$/, "");
+  if (normalized) {
+    const selected = TOPUP_PACKAGES.find((item, index) =>
+      normalized === String(item.amount) ||
+      normalized === String(index + 1) ||
+      normalized === item.sharedPlanId ||
+      normalized === item.whiteLabelPlanId,
+    );
+    if (!selected) {
+      throw new Error("Unknown top-up package. Choose 5, 10, 25, 40, 65, or 115.");
+    }
+    return selected;
+  }
+
+  if (!input.isTTY || !output.isTTY) {
+    throw new Error("Choose a package amount: codexclaude topup 5|10|25|40|65|115");
+  }
+  console.log("\nChoose an API Coding Credit package:");
+  TOPUP_PACKAGES.forEach((item, index) => {
+    console.log(`  ${index + 1}. ${formatUsd(item.amount)} deposit -> ${formatUsd(item.credit)} API Coding Credit`);
+  });
+  const rl = readline.createInterface({ input, output });
+  try {
+    const answer = (await rl.question("Package [1]: ")).trim() || "1";
+    const selected = TOPUP_PACKAGES.find((item, index) => answer === String(index + 1) || answer === String(item.amount));
+    if (!selected) {
+      throw new Error("Unknown top-up package. Choose one of the numbered options.");
+    }
+    return selected;
+  } finally {
+    rl.close();
+  }
+}
+
+function topupPlanId(config, topupPackage) {
+  return ["myapi", "magnetapi"].includes(config.serviceId)
+    ? topupPackage.whiteLabelPlanId
+    : topupPackage.sharedPlanId;
+}
+
+async function waitForTopupConfirmation(config, sessionId) {
+  const startedAt = Date.now();
+  let lastDetail = "Payment is still pending.";
+  while (Date.now() - startedAt < TOPUP_TIMEOUT_MS) {
+    try {
+      const confirmation = await postJsonAuth(
+        "/api/v1/wallet/stripe/confirm",
+        { sessionId },
+        config,
+        { timeoutMs: 30000 },
+      );
+      const paymentStatus = String(
+        confirmation?.payment?.status ??
+          confirmation?.status ??
+          "",
+      ).trim().toLowerCase();
+      if (
+        confirmation?.credited === true ||
+        ["paid", "succeeded", "complete", "completed", "fulfilled"].includes(paymentStatus)
+      ) {
+        return {
+          ...confirmation,
+          alreadyFulfilled: confirmation?.credited !== true && paymentStatus === "paid",
+        };
+      }
+      lastDetail = confirmation?.detail || `Payment is ${paymentStatus || "pending"}.`;
+    } catch (error) {
+      if (![402, 409, 425].includes(Number(error.status))) {
+        throw error;
+      }
+      lastDetail = error.message || lastDetail;
+    }
+    await delay(TOPUP_POLL_INTERVAL_MS);
+    process.stdout.write(".");
+  }
+  throw new Error(
+    `Payment confirmation timed out. ${lastDetail} A successful Stripe payment will still be credited by the webhook; run codexclaude topup later to view the refreshed balance.`,
+  );
+}
+
 async function ensureReady() {
   let config = readConfig();
   if (!config?.username) {
@@ -464,6 +618,7 @@ async function enforceLauncherVersion() {
 async function runMandatoryUpgrade(metadata) {
   const latest = metadata?.latestVersion || "latest";
   const minimum = metadata?.minimumVersion || latest;
+  const hostedTarballUrl = metadata?.hostedTarballUrl || HOSTED_TARBALL_URL;
   const changes = Array.isArray(metadata?.changes) ? metadata.changes.slice(0, 4) : [];
   console.error(`\n✨ Update now available · ${APP_DISPLAY_NAME} v${latest}`);
   console.error(`${APP_DISPLAY_NAME} v${latest} is required before your next coding session.`);
@@ -501,13 +656,13 @@ async function runMandatoryUpgrade(metadata) {
       console.log(`\nThe npm registry returned v${installedAfterRegistry || "unknown"}, below required v${minimum}.`);
     }
     console.log("\nThe npm registry install did not complete. Trying the hosted release automatically...");
-    exitCode = await spawnAndWait(npmCommand, ["install", "-g", HOSTED_TARBALL_URL]);
+    exitCode = await spawnAndWait(npmCommand, ["install", "-g", hostedTarballUrl]);
   }
   const installedVersion = exitCode === 0 ? installedLauncherVersion() : null;
   if (exitCode !== 0 || isOlderVersion(installedVersion, minimum)) {
     throw new Error(
       `Automatic upgrade failed with exit code ${exitCode} and installed version ${installedVersion || "unknown"}. Run ${UPDATE_COMMAND}. ` +
-        `If npm is unavailable, use: ${HOSTED_UPDATE_COMMAND}`,
+        `If npm is unavailable, use: npm install -g ${hostedTarballUrl}`,
     );
   }
   console.log(`\nUpgrade complete. Restarting ${APP_DISPLAY_NAME} now...`);
@@ -631,6 +786,42 @@ async function getJsonAuth(pathname, config, options = {}) {
   }
 }
 
+async function postJsonAuth(pathname, body, config, options = {}) {
+  const controller = new AbortController();
+  const timeoutMs = Number(options.timeoutMs || 10000);
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  timer.unref?.();
+  try {
+    const response = await fetch(`${config.apiOrigin || API_ORIGIN}${pathname}`, {
+      method: "POST",
+      headers: {
+        "accept": "application/json",
+        "authorization": `Bearer ${config.username}`,
+        "content-type": "application/json",
+        "user-agent": `codexclaude/${APP_VERSION}`,
+      },
+      body: JSON.stringify(body),
+      signal: controller.signal,
+    });
+    const text = await response.text();
+    let payload = null;
+    try {
+      payload = text ? JSON.parse(text) : null;
+    } catch {
+      payload = { detail: text };
+    }
+    if (!response.ok) {
+      const error = new Error(payload?.detail || `Request failed with HTTP ${response.status}.`);
+      error.status = response.status;
+      error.payload = payload;
+      throw error;
+    }
+    return payload;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 async function tryGetJsonAuth(pathname, config, options = {}) {
   try {
     return await getJsonAuth(pathname, config, options);
@@ -1259,6 +1450,15 @@ function formatUsd(value) {
   })}`;
 }
 
+function positiveInteger(value, fallback) {
+  const parsed = Number(value);
+  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+}
+
+function delay(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+
 function formatCwd(cwd) {
   const home = homedir();
   if (cwd === home) {

package/codexclaude.md

@@ -5,12 +5,12 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 ## Current Release
 
 - Package name: `@codexapi/codexclaude`
-- Launcher version: `2.0.34`
+- Launcher version: `2.0.36`
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Bundled runtime dependency: `@openai/codex@0.149.0`
+- Bundled runtime dependency: `@openai/codex@0.152.0-alpha.6`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz`
-- Backend minimum version: `2.0.34`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.36.tgz`
+- Backend minimum version: `2.0.36`
 - Default visible model: `GPT-5.6 SOL`
 - Default model slug: `gpt-5.6-sol`
 - Default visible reasoning effort: `Extra High`, stored as `xhigh`; premium SOL Max and SOL Ultra retain their explicit `max` and `ultra` labels.
@@ -25,13 +25,13 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 The launcher must present itself as:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34
+MagnetAPI.org Codex CLI v2.0.36
 ```
 
 Normal pre-launch status should look like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.36 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
@@ -60,7 +60,7 @@ GPT-5.6 SOL must be the default when a new config is created or a legacy config
 - `https://codexapi.pro/api/v1/codexclaude/version`
 - `https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest`
 
-It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.34` is both the enforced minimum and current latest release. Compatible older launchers offer an interactive `Upgrade Now` action; pressing Enter invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. If that registry install fails, the launcher automatically tries the hosted tarball. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
+It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.36` is both the enforced minimum and current latest release. Compatible older launchers offer an interactive `Upgrade Now` action; pressing Enter invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. If that registry install fails, the launcher automatically tries the hosted tarball. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
 
 The npm package manifest owns only `codexclaude`. This is deliberate: npm creates manifest binaries before postinstall, so claiming `codex` there causes an `EEXIST` upgrade failure on machines with native Codex CLI. During a global installation, postinstall may create optional `codex` and `claude` aliases only when neither the target npm prefix nor any directory on `PATH` already contains the command. Existing native clients are preserved and no install path requires `--force`.
 
@@ -96,7 +96,7 @@ base_url = "<service Responses URL>"
 experimental_bearer_token = "<customer System Token/API username>"
 wire_api = "responses"
 supports_websockets = false
-http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.34", "X-CodexAPI-Selected-Model" = "<selected model>" }
+http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.36", "X-CodexAPI-Selected-Model" = "<selected model>" }
 
 [tui]
 status_line = ["model-with-reasoning", "fast-mode", "current-dir"]
@@ -124,6 +124,21 @@ The launcher supports CodexAPI.pro, ChatPlus.chat, MyAPI.world, and MagnetAPI.or
 
 The saved `username` is the System Token/API username returned by the service and is used as the bearer value. Do not store dashboard session tokens in the launcher config.
 
+## CLI Top-Up Contract
+
+`codexclaude topup` and `codexclaude /topup` expose the six server-authoritative API Coding Credit packages. An amount may be supplied directly, for example `codexclaude topup 25`. CodexAPI.pro and ChatPlus.chat map those amounts to `test`, `starter`, `pro`, `boost`, `vip`, and `titan`; MyAPI.world and MagnetAPI.org map them to `credit-5`, `credit-10`, `credit-25`, `credit-40`, `credit-65`, and `credit-115`.
+
+The launcher must:
+
+1. Authenticate every wallet, checkout, and confirmation call with the saved System Token.
+2. Show the wallet before checkout.
+3. Call `POST /api/v1/wallet/stripe/checkout` with only the selected server plan id.
+4. Print the returned Stripe-hosted payment URL without launching a browser process.
+5. Poll `POST /api/v1/wallet/stripe/confirm` until the server has confirmed and idempotently fulfilled the payment.
+6. Refresh `/api/v1/wallet/status` and show the credit added plus the new wallet balance.
+
+Never collect card numbers, expiry dates, CVCs, or issuer authentication codes through readline, command arguments, environment variables, config files, logs, or model prompts. Stripe-hosted Checkout owns payment-method collection and any 3DS challenge. Closing the terminal must not affect webhook fulfillment of a successful payment.
+
 ## Routing Expectations
 
 The launcher is not the source of truth for upstream runtime routing. Admin Manage Models controls execution routing server-side. The launcher must preserve the user-selected model slug and pass it through the Responses request so billing, logs, and the dashboard can record what the user chose.
@@ -168,7 +183,7 @@ tmp_home="$(mktemp -d)"
 mkdir -p "$tmp_home/.codexclaude"
 cat > "$tmp_home/.codexclaude/config.json" <<'JSON'
 {
-  "version": "2.0.34",
+  "version": "2.0.36",
   "serviceId": "codexapi",
   "serviceLabel": "CodexAPI.pro",
   "apiOrigin": "https://codexapi.pro",
@@ -207,10 +222,18 @@ After packaging, copy the tarball to the public downloads directories, restart t
 
 ```bash
 curl -fsS "https://codexapi.pro/api/v1/codexclaude/version?current=2.0.17"
-curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz"
+curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.36.tgz"
 ```
 
-The version endpoint must report `latestVersion = 2.0.34`, `minimumVersion = 2.0.34`, and `updateRequired = true` for every older client.
+The version endpoint must report `latestVersion = 2.0.36`, `minimumVersion = 2.0.36`, and `updateRequired = true` for every older client.
+
+## Version 2.0.36 Changes
+
+- Updated the bundled coding runtime to exact `@openai/codex@0.152.0-alpha.6`.
+- Added authenticated `topup` and `/topup` commands for all four account services and all six fixed API Coding Credit packages.
+- Added Stripe checkout confirmation polling and a refreshed wallet summary after successful payment.
+- Kept card and issuer-authentication data outside the CLI on Stripe's secure payment surface.
+- Made `2.0.36` mandatory while preserving projects, history, login state, model choice, Full Access, and native `codex`/`claude` commands.
 
 ## Version 2.0.34 Changes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codexapi/codexclaude",
-  "version": "2.0.34",
+  "version": "2.0.36",
   "description": "MagnetAPI.org Codex CLI for ChatGPT Daybreak Blue, GPT-5.6, Opus 5, Sonnet 5, and Fable 5.",
   "license": "Apache-2.0",
   "type": "module",
@@ -22,7 +22,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@openai/codex": "0.149.0"
+    "@openai/codex": "0.152.0-alpha.6"
   },
   "publishConfig": {
     "access": "public"