@codexapi/codexclaude 2.0.34 → 2.0.37

package/CUSTOMIZATIONS.md

@@ -5,10 +5,10 @@
 ## Runtime
 
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Local launcher version: `2.0.34`
-- Bundled official runtime dependency: `@openai/codex@0.149.0`
+- Local launcher version: `2.0.37`
+- Bundled official runtime dependency: `@openai/codex@0.153.4`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.37.tgz`
 - Bundled runtime version is managed internally and must not be used for customer update prompts.
 - Launcher update checks may call the CodexAPI.pro version endpoint and `@codexapi/codexclaude` npm metadata only.
 - The launcher must never check `@openai/codex` npm metadata or OpenAI GitHub releases for update notices.
@@ -25,10 +25,12 @@
 - Passes unknown commands directly to the bundled runtime after config is applied.
 - Provides `codexclaude changelog` using the managed version endpoint.
 - Does not expose separate `codexclaude status` or `codexclaude usage` commands; wallet information remains a compact pre-launch line.
-- Version `2.0.34` is forced by the backend minimum version and older clients must show an update-required message.
+- Version `2.0.37` is forced by the backend minimum version and older clients must show an update-required message.
 - Mandatory updates present a press-Enter `Upgrade Now` action in an interactive terminal, invoke npm with an argument array and no shell interpolation, verify the installed launcher version, use the hosted release if the registry fails or returns a stale version, then relaunch the requested action automatically.
 - The npm package manifest exposes only `codexclaude`, preventing npm from colliding with a native `codex` or `claude` command before postinstall runs.
 - Global installation creates optional `codex` and `claude` aliases only when no existing command is present in the npm prefix or anywhere on `PATH`; native clients must never be overwritten.
+- `codexclaude topup` and `codexclaude /topup` authenticate with the saved System Token, map the six fixed packages to the correct site-specific plan ids, and call only `/api/v1/wallet/stripe/checkout` and `/api/v1/wallet/stripe/confirm`.
+- The top-up flow never asks for or stores card numbers, CVCs, or issuer authentication codes. Stripe's hosted PCI surface owns payment-method collection and any required bank challenge; the launcher waits for idempotent server confirmation and then refreshes the wallet.
 
 ## Provider Config
 
@@ -46,17 +48,17 @@ The launcher writes a model provider named `codexapi`:
 ## Runtime Defaults
 
 - Default model: `gpt-5.6-sol` displayed as `GPT-5.6 SOL`
-- Supported launcher choices: `gpt-daybreak-blue-latest`, `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-5`, `claude-opus-4-8`, `claude-sonnet-5`, `claude-fable-5`, and `gpt-5.6-terra`
+- Supported launcher choices: `gpt-6-astra`, `gpt-daybreak-blue-latest`, `gpt-5.6`, `gpt-5.6-sol-max`, `gpt-5.6-sol-ultra`, `gpt-5.6-sol`, `gpt-5.5`, `claude-opus-5`, `claude-opus-4-8`, `claude-sonnet-5`, `claude-fable-5`, and `gpt-5.6-terra`
 - Default reasoning effort displayed locally: `Extra High`, stored as `xhigh`; SOL Max and SOL Ultra retain their explicit premium labels.
 - Reasoning hint written to managed runtime config: model-specific
 - Approval policy: `never`
 - Sandbox mode: `danger-full-access`
 - Display wording for permissions: `Full Access` in launcher-owned copy
-- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for ChatGPT Daybreak Blue, GPT-5.6 Terra, SOL, SOL Max, SOL Ultra, Opus 5, Opus 4.8, Sonnet 5, and Fable 5.
+- Local model catalog: `~/.codexclaude/model_catalog.json`; this keeps the native `/model` picker limited to the supported choices and prevents fallback metadata warnings for ChatGPT-6 Astra, ChatGPT Daybreak Blue, GPT-5.6 Terra, SOL, SOL Max, SOL Ultra, Opus 5, Opus 4.8, Sonnet 5, and Fable 5.
 - Service tier: omitted by default; `/fast` remains user-controlled and billed server-side when active.
 - TUI status line: `model-with-reasoning`, `fast-mode`, `current-dir`
 - Fable 5 stays visible to the user while the backend applies its server-managed route and billing policy.
-- Premium model billing remains server-managed and is not rendered in the customer model picker or model descriptions.
+- Premium model billing remains server-managed. ChatGPT-6 Astra is the explicit exception: its native signed-in 2x usage notice is printed when the user selects it, without injecting billing text into a model prompt or assistant output.
 
 ## Wallet Display
 
@@ -65,7 +67,7 @@ Before launching the runtime, the launcher calls `/api/v1/wallet/status`, then `
 Expected status line:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.37 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
@@ -86,7 +88,8 @@ When updating the bundled runtime:
 11. Keep update checks limited to `/api/v1/codexclaude/version` and `@codexapi/codexclaude` npm metadata.
 12. Keep the interactive `Upgrade Now` flow installing `@codexapi/codexclaude@latest` without a shell and relaunching automatically.
 13. Keep `codexclaude` as the only manifest-owned command and preserve the conditional, non-overwriting `codex` and `claude` postinstall aliases.
-14. Keep the managed `MODELS` map and local model catalog, including Terra, SOL Max, and SOL Ultra.
+14. Keep the managed `MODELS` map and local model catalog, including Astra, Terra, SOL Max, and SOL Ultra.
 15. Keep bearer username auth and the `X-CodexAPI-*` headers.
 16. Update `README.md`, `CUSTOMIZATIONS.md`, and `codexclaude.md`.
 17. Run syntax checks, temporary-home setup, alias-preservation tests, `npm pack --dry-run`, and endpoint validation before publishing.
+18. Keep CLI top-up payment-method collection on Stripe's hosted surface and preserve checkout/confirm polling plus wallet refresh tests.

package/README.md

@@ -1,8 +1,8 @@
 # codexclaude
 
-`codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use ChatGPT Daybreak Blue, GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
+`codexclaude` installs the MagnetAPI.org Codex CLI for customers who want one coding CLI that can use ChatGPT-6 Astra, ChatGPT Daybreak Blue, GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, ChatGPT-5.5, Opus 5, Opus 4.8, Sonnet 5, or Fable 5 against the same Token Wallet.
 
-Version `2.0.34` bundles the official Codex runtime dependency `@openai/codex@0.149.0` and makes GPT-5.6 SOL with visible Extra High reasoning the default for new or invalid configurations. Existing valid model selections remain unchanged. It preserves the collision-safe updater, platform-native runtime launch, managed account and wallet integration, Full Access defaults, upstream update suppression, and complete model metadata.
+Version `2.0.37` bundles the exact Codex runtime dependency `@openai/codex@0.153.4` and adds ChatGPT-6 Astra with its supported reasoning levels and complete model metadata. GPT-5.6 SOL with visible Extra High reasoning remains the default for new or invalid configurations, and existing valid model selections remain unchanged. The release preserves the collision-safe updater, platform-native runtime launch, managed account and wallet integration, Full Access defaults, upstream update suppression, and every MagnetAPI customization.
 
 ## Install Or Update
 
@@ -16,7 +16,7 @@ This does not delete local session history. The update replaces the `codexclaude
 
 The launcher checks CodexAPI.pro's managed version endpoint and the `@codexapi/codexclaude` npm package metadata only. It must never check `@openai/codex` npm metadata or OpenAI GitHub releases for customer update prompts.
 
-Version `2.0.34` is enforced as the minimum supported version. A compatible older launcher presents `✨ Update now available`; pressing Enter installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. If the npm registry install fails, the updater tries the hosted release before asking the user to intervene. Non-interactive terminals print the same npm command instead of hanging for input.
+Version `2.0.37` is enforced as the minimum supported version. A compatible older launcher presents `✨ Update now available`; pressing Enter installs `@codexapi/codexclaude@latest` and relaunches the requested action automatically. If the npm registry install fails, the updater tries the hosted release before asking the user to intervene. Non-interactive terminals print the same npm command instead of hanging for input.
 
 ## First Login
 
@@ -44,7 +44,7 @@ Switch model:
 codexclaude model
 ```
 
-Available model labels are `ChatGPT Daybreak Blue`, `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 5`, `Opus 4.8`, `Sonnet 5`, `Fable 5`, and `GPT-5.6 Terra`. All models use a Responses-compatible endpoint and the same customer Token Wallet.
+Available model labels are `ChatGPT-6 Astra`, `ChatGPT Daybreak Blue`, `GPT-5.6`, `GPT-5.6 SOL Max`, `GPT-5.6 SOL Ultra`, `GPT-5.6 SOL`, `ChatGPT-5.5`, `Opus 5`, `Opus 4.8`, `Sonnet 5`, `Fable 5`, and `GPT-5.6 Terra`. All models use a Responses-compatible endpoint and the same customer Token Wallet. Selecting ChatGPT-6 Astra displays its billing notice before the choice is saved; native signed-in Astra usage is charged at 2x the normal Codex rate, while managed cross-model execution follows that route's normal billing.
 
 ## Launch Commands
 
@@ -62,24 +62,38 @@ Show current launcher changes:
 codexclaude changelog
 ```
 
+## Top Up From The CLI
+
+Start the package selector with either command:
+
+```bash
+codexclaude topup
+codexclaude /topup
+```
+
+You can also choose a package directly, for example `codexclaude topup 25`. The launcher authenticates with the saved System Token, shows the current wallet, creates a server-authoritative Stripe Checkout session, waits for confirmed payment, and then prints the API Coding Credit added and the refreshed wallet balance.
+
+Card numbers, CVCs, and bank authentication challenges are entered only on Stripe's secure payment form. They are never read, logged, or stored by `codexclaude`. The terminal can be left waiting while payment is completed; webhook fulfillment still credits a successful purchase if the terminal is closed.
+
 ## Startup Status
 
 Before launching the coding runtime, the app prints a compact status line like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.37 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
 ## Preserved Customizations
 
 - Dashboard Username or Email Address plus password login for CodexAPI.pro, ChatPlus.chat, MyAPI.world, and MagnetAPI.org.
-- ChatGPT Daybreak Blue, Opus 5, GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6 SOL/Extra High as the default.
+- ChatGPT-6 Astra, ChatGPT Daybreak Blue, Opus 5, GPT-5.6, GPT-5.6 Terra, GPT-5.6 SOL Max, GPT-5.6 SOL Ultra, GPT-5.6 SOL, ChatGPT-5.5, Opus 4.8, Sonnet 5, or Fable 5 model selection, with GPT-5.6 SOL/Extra High as the default.
 - Service-specific Responses-compatible provider for the dashboard account that logged in.
 - Full Access defaults: approval policy `never` and sandbox mode `danger-full-access`.
 - Model-specific visible reasoning in the local UI while the API server keeps upstream runtime effort server-managed.
-- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including Terra, SOL Max, and SOL Ultra.
+- A local `~/.codexclaude/model_catalog.json` file so the native `/model` picker lists only the supported MagnetAPI.org Codex CLI choices, including Astra, Terra, SOL Max, and SOL Ultra.
 - No default fast service tier. Fast mode is billed only when the user enables it inside the client.
 - Token Wallet balance lookup before launch without exposing separate `status` or `usage` launcher commands.
+- Authenticated `topup` and `/topup` commands using fixed server-authoritative packages, idempotent Stripe fulfillment, and post-payment wallet refresh.
 - Backend-identifying request headers so the API can enforce account and plan rules server-side.
 - Direct platform binary launch so the upstream npm wrapper cannot emit OpenAI update prompts.

package/bin/codexclaude.js

@@ -12,8 +12,8 @@ import { installSafeCommandAliases } from "../scripts/install-safe-aliases.js";
 
 const require = createRequire(import.meta.url);
 
-const APP_VERSION = "2.0.34";
-const CODEX_VERSION = "0.149.0";
+const APP_VERSION = "2.0.37";
+const CODEX_VERSION = "0.153.4";
 const APP_DISPLAY_NAME = "MagnetAPI.org Codex CLI";
 const DEFAULT_MODEL_ID = "gpt-5.6-sol";
 const DEFAULT_DISPLAY_REASONING_EFFORT = "xhigh";
@@ -79,6 +79,17 @@ const SUPPORTED_REASONING_LEVELS = [
   { effort: "ultra", description: "GPT-5.6 SOL Ultra visible reasoning mode" },
 ];
 
+const TOPUP_PACKAGES = [
+  { amount: 5, credit: 50, sharedPlanId: "test", whiteLabelPlanId: "credit-5" },
+  { amount: 10, credit: 100, sharedPlanId: "starter", whiteLabelPlanId: "credit-10" },
+  { amount: 25, credit: 270, sharedPlanId: "pro", whiteLabelPlanId: "credit-25" },
+  { amount: 40, credit: 600, sharedPlanId: "boost", whiteLabelPlanId: "credit-40" },
+  { amount: 65, credit: 1000, sharedPlanId: "vip", whiteLabelPlanId: "credit-65" },
+  { amount: 115, credit: 2000, sharedPlanId: "titan", whiteLabelPlanId: "credit-115" },
+];
+const TOPUP_POLL_INTERVAL_MS = positiveInteger(process.env.CODEXCLAUDE_TOPUP_POLL_INTERVAL_MS, 3000);
+const TOPUP_TIMEOUT_MS = positiveInteger(process.env.CODEXCLAUDE_TOPUP_TIMEOUT_MS, 30 * 60 * 1000);
+
 const MODELS = {
   "claude-opus-5": {
     id: "claude-opus-5",
@@ -142,6 +153,16 @@ const MODELS = {
     aliases: ["11", "terra", "gpt-5.6-terra", "gpt56-terra"],
     reasoningEffort: "xhigh",
   },
+  "gpt-6-astra": {
+    id: "gpt-6-astra",
+    label: "ChatGPT-6 Astra",
+    aliases: ["12", "astra", "gpt-6", "gpt-6-astra", "gpt6-astra", "chatgpt-6-astra"],
+    reasoningEffort: "xhigh",
+    contextWindow: 1050000,
+    maxOutputTokens: 128000,
+    premium: true,
+    supportedReasoningLevels: SUPPORTED_REASONING_LEVELS.filter(({ effort }) => effort !== "ultra"),
+  },
 };
 
 async function main() {
@@ -179,6 +200,11 @@ async function main() {
     await setupFlow();
     return;
   }
+  if (["topup", "/topup"].includes(command)) {
+    await ensureReady();
+    await topupFlow(args[0]);
+    return;
+  }
   if (command === "resume") {
     await ensureReady();
     await runCodex(["resume", "--search", ...args]);
@@ -200,9 +226,10 @@ ${APP_DISPLAY_NAME} v${APP_VERSION}
 
 Commands:
   codexclaude login       Login with dashboard username/email and password
-  codexclaude model       Select Daybreak Blue, GPT-5.6, Opus 5, Terra, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
+  codexclaude model       Select GPT-6 Astra, Daybreak Blue, GPT-5.6, Opus 5, Terra, SOL modes, Opus 4.8, Sonnet 5, or Fable 5
   codexclaude changelog   Show the latest CodexAPI.pro launcher changes
   codexclaude setup       Rewrite ~/.codex/config.toml with Full Access defaults
+  codexclaude topup       Select an API Coding Credit package and securely complete payment
   codexclaude start       Start ${APP_DISPLAY_NAME} with --search
   codexclaude resume      Resume the latest coding session with --search
   codexclaude logout      Remove saved codexclaude account state
@@ -386,6 +413,143 @@ async function setupFlow() {
   console.log(`Configured ${CODEX_CONFIG_FILE} for ${MODELS[config.model].label} with Full Access, model-specific visible reasoning, and server-managed routing.`);
 }
 
+async function topupFlow(packageChoice = "") {
+  const config = normalizeConfig(requireConfig());
+  const walletBefore = await walletSnapshot(config);
+  const topupPackage = await selectTopupPackage(packageChoice);
+  const planId = topupPlanId(config, topupPackage);
+  const rl = readline.createInterface({ input, output });
+  try {
+    if (!packageChoice) {
+      const answer = (await rl.question(
+        `Deposit ${formatUsd(topupPackage.amount)} for ${formatUsd(topupPackage.credit)} API Coding Credit? [Y/n]: `,
+      )).trim().toLowerCase();
+      if (["n", "no"].includes(answer)) {
+        console.log("Top-up cancelled. No payment was created.");
+        return;
+      }
+    }
+  } finally {
+    rl.close();
+  }
+
+  console.log(`Current wallet balance: ${formatUsd(walletBefore.balance)}`);
+  const checkout = await postJsonAuth(
+    "/api/v1/wallet/stripe/checkout",
+    { planId },
+    config,
+    { timeoutMs: 30000 },
+  );
+  const checkoutUrl = String(checkout?.checkoutUrl || "").trim();
+  const sessionId = String(checkout?.sessionId || "").trim();
+  if (!checkoutUrl || !sessionId) {
+    throw new Error("Stripe did not return a usable secure Checkout session.");
+  }
+
+  console.log("\nStripe secure payment link:");
+  console.log(checkoutUrl);
+  console.log(
+    "\nComplete the payment on Stripe's secure form. This terminal does not read or store card numbers, CVCs, or bank authentication codes.",
+  );
+  console.log("Waiting for Stripe to confirm payment. Press Ctrl+C to stop waiting; the webhook will still credit a successful payment.");
+
+  if (isTruthy(process.env.CODEXCLAUDE_TOPUP_NO_WAIT)) {
+    return;
+  }
+  const confirmed = await waitForTopupConfirmation(config, sessionId);
+  const walletAfter = await walletSnapshot(config);
+  const confirmedCredit = numericWalletValue(
+    confirmed?.payment?.creditAddedUsd ??
+      confirmed?.payment?.creditUsd ??
+      confirmed?.selectedPlan?.creditUsd,
+  );
+  const credited = Math.max(0, walletAfter.balance - walletBefore.balance) || confirmedCredit;
+  console.log(`\nTop-up complete${confirmed?.alreadyFulfilled ? " (already reconciled)" : ""}.`);
+  console.log(`API Coding Credit added: ${formatUsd(credited)}`);
+  console.log(`New wallet balance: ${formatUsd(walletAfter.balance)}`);
+}
+
+async function selectTopupPackage(packageChoice) {
+  const normalized = String(packageChoice || "").trim().toLowerCase().replace(/^\$/, "");
+  if (normalized) {
+    const selected = TOPUP_PACKAGES.find((item, index) =>
+      normalized === String(item.amount) ||
+      normalized === String(index + 1) ||
+      normalized === item.sharedPlanId ||
+      normalized === item.whiteLabelPlanId,
+    );
+    if (!selected) {
+      throw new Error("Unknown top-up package. Choose 5, 10, 25, 40, 65, or 115.");
+    }
+    return selected;
+  }
+
+  if (!input.isTTY || !output.isTTY) {
+    throw new Error("Choose a package amount: codexclaude topup 5|10|25|40|65|115");
+  }
+  console.log("\nChoose an API Coding Credit package:");
+  TOPUP_PACKAGES.forEach((item, index) => {
+    console.log(`  ${index + 1}. ${formatUsd(item.amount)} deposit -> ${formatUsd(item.credit)} API Coding Credit`);
+  });
+  const rl = readline.createInterface({ input, output });
+  try {
+    const answer = (await rl.question("Package [1]: ")).trim() || "1";
+    const selected = TOPUP_PACKAGES.find((item, index) => answer === String(index + 1) || answer === String(item.amount));
+    if (!selected) {
+      throw new Error("Unknown top-up package. Choose one of the numbered options.");
+    }
+    return selected;
+  } finally {
+    rl.close();
+  }
+}
+
+function topupPlanId(config, topupPackage) {
+  return ["myapi", "magnetapi"].includes(config.serviceId)
+    ? topupPackage.whiteLabelPlanId
+    : topupPackage.sharedPlanId;
+}
+
+async function waitForTopupConfirmation(config, sessionId) {
+  const startedAt = Date.now();
+  let lastDetail = "Payment is still pending.";
+  while (Date.now() - startedAt < TOPUP_TIMEOUT_MS) {
+    try {
+      const confirmation = await postJsonAuth(
+        "/api/v1/wallet/stripe/confirm",
+        { sessionId },
+        config,
+        { timeoutMs: 30000 },
+      );
+      const paymentStatus = String(
+        confirmation?.payment?.status ??
+          confirmation?.status ??
+          "",
+      ).trim().toLowerCase();
+      if (
+        confirmation?.credited === true ||
+        ["paid", "succeeded", "complete", "completed", "fulfilled"].includes(paymentStatus)
+      ) {
+        return {
+          ...confirmation,
+          alreadyFulfilled: confirmation?.credited !== true && paymentStatus === "paid",
+        };
+      }
+      lastDetail = confirmation?.detail || `Payment is ${paymentStatus || "pending"}.`;
+    } catch (error) {
+      if (![402, 409, 425].includes(Number(error.status))) {
+        throw error;
+      }
+      lastDetail = error.message || lastDetail;
+    }
+    await delay(TOPUP_POLL_INTERVAL_MS);
+    process.stdout.write(".");
+  }
+  throw new Error(
+    `Payment confirmation timed out. ${lastDetail} A successful Stripe payment will still be credited by the webhook; run codexclaude topup later to view the refreshed balance.`,
+  );
+}
+
 async function ensureReady() {
   let config = readConfig();
   if (!config?.username) {
@@ -405,15 +569,28 @@ async function askModel(rl, current) {
   });
   const answer = (await rl.question(`Model [${currentLabel}]: `)).trim().toLowerCase();
   if (!answer) {
-    return MODELS[current] ? current : DEFAULT_MODEL_ID;
+    const selected = MODELS[current] ? current : DEFAULT_MODEL_ID;
+    printModelSelectionWarning(selected);
+    return selected;
   }
   const match = Object.values(MODELS).find((model) => model.aliases.includes(answer));
   if (!match) {
     throw new Error("Unknown model choice. Run codexclaude model and choose one of the numbered options.");
   }
+  printModelSelectionWarning(match.id);
   return match.id;
 }
 
+function printModelSelectionWarning(modelId) {
+  if (modelId !== "gpt-6-astra") {
+    return;
+  }
+  console.log(
+    "\nBilling notice: Native ChatGPT-6 Astra usage is charged at 2x the normal Codex rate. " +
+      "When the managed cross-model route serves the request, that route's normal billing applies.",
+  );
+}
+
 async function postJson(pathname, body, origin = API_ORIGIN) {
   const response = await fetch(`${String(origin || API_ORIGIN).replace(/\/+$/, "")}${pathname}`, {
     method: "POST",
@@ -464,6 +641,7 @@ async function enforceLauncherVersion() {
 async function runMandatoryUpgrade(metadata) {
   const latest = metadata?.latestVersion || "latest";
   const minimum = metadata?.minimumVersion || latest;
+  const hostedTarballUrl = metadata?.hostedTarballUrl || HOSTED_TARBALL_URL;
   const changes = Array.isArray(metadata?.changes) ? metadata.changes.slice(0, 4) : [];
   console.error(`\n✨ Update now available · ${APP_DISPLAY_NAME} v${latest}`);
   console.error(`${APP_DISPLAY_NAME} v${latest} is required before your next coding session.`);
@@ -501,13 +679,13 @@ async function runMandatoryUpgrade(metadata) {
       console.log(`\nThe npm registry returned v${installedAfterRegistry || "unknown"}, below required v${minimum}.`);
     }
     console.log("\nThe npm registry install did not complete. Trying the hosted release automatically...");
-    exitCode = await spawnAndWait(npmCommand, ["install", "-g", HOSTED_TARBALL_URL]);
+    exitCode = await spawnAndWait(npmCommand, ["install", "-g", hostedTarballUrl]);
   }
   const installedVersion = exitCode === 0 ? installedLauncherVersion() : null;
   if (exitCode !== 0 || isOlderVersion(installedVersion, minimum)) {
     throw new Error(
       `Automatic upgrade failed with exit code ${exitCode} and installed version ${installedVersion || "unknown"}. Run ${UPDATE_COMMAND}. ` +
-        `If npm is unavailable, use: ${HOSTED_UPDATE_COMMAND}`,
+        `If npm is unavailable, use: npm install -g ${hostedTarballUrl}`,
     );
   }
   console.log(`\nUpgrade complete. Restarting ${APP_DISPLAY_NAME} now...`);
@@ -631,6 +809,42 @@ async function getJsonAuth(pathname, config, options = {}) {
   }
 }
 
+async function postJsonAuth(pathname, body, config, options = {}) {
+  const controller = new AbortController();
+  const timeoutMs = Number(options.timeoutMs || 10000);
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  timer.unref?.();
+  try {
+    const response = await fetch(`${config.apiOrigin || API_ORIGIN}${pathname}`, {
+      method: "POST",
+      headers: {
+        "accept": "application/json",
+        "authorization": `Bearer ${config.username}`,
+        "content-type": "application/json",
+        "user-agent": `codexclaude/${APP_VERSION}`,
+      },
+      body: JSON.stringify(body),
+      signal: controller.signal,
+    });
+    const text = await response.text();
+    let payload = null;
+    try {
+      payload = text ? JSON.parse(text) : null;
+    } catch {
+      payload = { detail: text };
+    }
+    if (!response.ok) {
+      const error = new Error(payload?.detail || `Request failed with HTTP ${response.status}.`);
+      error.status = response.status;
+      error.payload = payload;
+      throw error;
+    }
+    return payload;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 async function tryGetJsonAuth(pathname, config, options = {}) {
   try {
     return await getJsonAuth(pathname, config, options);
@@ -800,8 +1014,9 @@ function modelCatalogEntry(model, index) {
     supports_image_detail_original: true,
     truncation_policy: { mode: "tokens", limit: 10000 },
     supports_parallel_tool_calls: true,
-    context_window: MODEL_CATALOG_CONTEXT_WINDOW,
-    max_context_window: MODEL_CATALOG_CONTEXT_WINDOW,
+    context_window: model.contextWindow || MODEL_CATALOG_CONTEXT_WINDOW,
+    max_context_window: model.contextWindow || MODEL_CATALOG_CONTEXT_WINDOW,
+    max_output_tokens: model.maxOutputTokens || null,
     auto_compact_token_limit: null,
     reasoning_summary_format: "experimental",
     default_reasoning_summary: "none",
@@ -809,7 +1024,7 @@ function modelCatalogEntry(model, index) {
     display_name: model.label,
     description: modelCatalogDescription(model.id),
     default_reasoning_level: reasoningEffortForModel(model.id),
-    supported_reasoning_levels: SUPPORTED_REASONING_LEVELS,
+    supported_reasoning_levels: model.supportedReasoningLevels || SUPPORTED_REASONING_LEVELS,
     shell_type: "shell_command",
     visibility: "list",
     minimal_client_version: "0.124.0",
@@ -828,6 +1043,9 @@ function modelCatalogEntry(model, index) {
 }
 
 function modelCatalogDescription(modelId) {
+  if (modelId === "gpt-6-astra") {
+    return "ChatGPT-6 Astra coding route with local coding tools, configurable reasoning, and wallet billing.";
+  }
   if (modelId === "gpt-5.6") {
     return "GPT-5.6 coding route with local coding tools and wallet billing.";
   }
@@ -1064,6 +1282,9 @@ function formatStatusLine(config, wallet, cwd) {
 }
 
 function modelStatusName(model) {
+  if (model === "gpt-6-astra") {
+    return "ChatGPT-6 Astra";
+  }
   if (model === "gpt-5.6") {
     return "GPT-5.6";
   }
@@ -1259,6 +1480,15 @@ function formatUsd(value) {
   })}`;
 }
 
+function positiveInteger(value, fallback) {
+  const parsed = Number(value);
+  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+}
+
+function delay(milliseconds) {
+  return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+
 function formatCwd(cwd) {
   const home = homedir();
   if (cwd === home) {

package/codexclaude.md

@@ -5,12 +5,12 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 ## Current Release
 
 - Package name: `@codexapi/codexclaude`
-- Launcher version: `2.0.34`
+- Launcher version: `2.0.37`
 - Customer-facing app name: `MagnetAPI.org Codex CLI`
-- Bundled runtime dependency: `@openai/codex@0.149.0`
+- Bundled runtime dependency: `@openai/codex@0.153.4`
 - Required install command: `npm install -g @codexapi/codexclaude@latest`
-- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz`
-- Backend minimum version: `2.0.34`
+- Hosted fallback: `npm install -g https://codexapi.pro/downloads/codexapi-codexclaude-2.0.37.tgz`
+- Backend minimum version: `2.0.37`
 - Default visible model: `GPT-5.6 SOL`
 - Default model slug: `gpt-5.6-sol`
 - Default visible reasoning effort: `Extra High`, stored as `xhigh`; premium SOL Max and SOL Ultra retain their explicit `max` and `ultra` labels.
@@ -25,13 +25,13 @@ This file is the durable handoff for the `@codexapi/codexclaude` package in `/ro
 The launcher must present itself as:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34
+MagnetAPI.org Codex CLI v2.0.37
 ```
 
 Normal pre-launch status should look like:
 
 ```text
-MagnetAPI.org Codex CLI v2.0.34 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
+MagnetAPI.org Codex CLI v2.0.37 · GPT-5.6 SOL Extra High · ~/project · Wallet balance $20.00
 Fable 5 is now available in codexclaude, exclusively.
 ```
 
@@ -50,6 +50,9 @@ The launcher command `codexclaude model` must list these customer-visible models
 - `claude-sonnet-5` displayed as `Sonnet 5`
 - `claude-fable-5` displayed as `Fable 5`
 - `gpt-5.6-terra` displayed as `GPT-5.6 Terra`
+- `gpt-6-astra` displayed as `ChatGPT-6 Astra`
+
+ChatGPT-6 Astra supports `low`, `medium`, `high`, `xhigh`, and `max` reasoning in the managed catalog, with a 1,050,000-token context window and 128,000 maximum output tokens. The launcher displays a billing notice when Astra is selected. Native signed-in Astra usage is charged at 2x the normal Codex rate; when the dedicated Astra route follows Global Cross-Model Routing, normal billing for that route applies.
 
 GPT-5.6 SOL must be the default when a new config is created or a legacy config contains an unsupported model value. It is displayed as Extra High while the generated runtime config stores `xhigh`. A valid existing customer selection must remain unchanged across upgrades. The selected model slug must stay in `~/.codex/config.toml`; do not rewrite customer-facing model selections locally. `gpt-5.6-sol-max` and `gpt-5.6-sol-ultra` remain distinct for customer choice, usage display, and wallet billing.
 
@@ -60,7 +63,7 @@ GPT-5.6 SOL must be the default when a new config is created or a legacy config
 - `https://codexapi.pro/api/v1/codexclaude/version`
 - `https://registry.npmjs.org/@codexapi%2Fcodexclaude/latest`
 
-It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.34` is both the enforced minimum and current latest release. Compatible older launchers offer an interactive `Upgrade Now` action; pressing Enter invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. If that registry install fails, the launcher automatically tries the hosted tarball. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
+It must not check `@openai/codex` npm metadata, OpenAI GitHub releases, or any upstream OpenAI update endpoint. Version `2.0.37` is both the enforced minimum and current latest release. Compatible older launchers offer an interactive `Upgrade Now` action; pressing Enter invokes `npm install -g @codexapi/codexclaude@latest` without shell interpolation. If that registry install fails, the launcher automatically tries the hosted tarball. Non-interactive terminals print the exact update command and exit instead of waiting for input. After a successful interactive update, the launcher starts the requested action again automatically.
 
 The npm package manifest owns only `codexclaude`. This is deliberate: npm creates manifest binaries before postinstall, so claiming `codex` there causes an `EEXIST` upgrade failure on machines with native Codex CLI. During a global installation, postinstall may create optional `codex` and `claude` aliases only when neither the target npm prefix nor any directory on `PATH` already contains the command. Existing native clients are preserved and no install path requires `--force`.
 
@@ -96,7 +99,7 @@ base_url = "<service Responses URL>"
 experimental_bearer_token = "<customer System Token/API username>"
 wire_api = "responses"
 supports_websockets = false
-http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.34", "X-CodexAPI-Selected-Model" = "<selected model>" }
+http_headers = { "X-CodexAPI-Client" = "codexclaude", "X-CodexAPI-Client-Version" = "2.0.37", "X-CodexAPI-Selected-Model" = "<selected model>" }
 
 [tui]
 status_line = ["model-with-reasoning", "fast-mode", "current-dir"]
@@ -104,7 +107,7 @@ status_line_use_colors = true
 terminal_title = ["project-name", "model-with-reasoning", "run-state"]
 ```
 
-The generated model catalog must contain full metadata for every supported slug, including `gpt-daybreak-blue-latest`, `gpt-5.6`, `gpt-5.6-terra`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
+The generated model catalog must contain full metadata for every supported slug, including `gpt-6-astra`, `gpt-daybreak-blue-latest`, `gpt-5.6`, `gpt-5.6-terra`, `gpt-5.6-sol-max`, and `gpt-5.6-sol-ultra`. This prevents fallback metadata warnings such as:
 
 ```text
 Model metadata for `claude-opus-4-8` not found. Defaulting to fallback metadata; this can degrade performance and cause issues.
@@ -124,6 +127,21 @@ The launcher supports CodexAPI.pro, ChatPlus.chat, MyAPI.world, and MagnetAPI.or
 
 The saved `username` is the System Token/API username returned by the service and is used as the bearer value. Do not store dashboard session tokens in the launcher config.
 
+## CLI Top-Up Contract
+
+`codexclaude topup` and `codexclaude /topup` expose the six server-authoritative API Coding Credit packages. An amount may be supplied directly, for example `codexclaude topup 25`. CodexAPI.pro and ChatPlus.chat map those amounts to `test`, `starter`, `pro`, `boost`, `vip`, and `titan`; MyAPI.world and MagnetAPI.org map them to `credit-5`, `credit-10`, `credit-25`, `credit-40`, `credit-65`, and `credit-115`.
+
+The launcher must:
+
+1. Authenticate every wallet, checkout, and confirmation call with the saved System Token.
+2. Show the wallet before checkout.
+3. Call `POST /api/v1/wallet/stripe/checkout` with only the selected server plan id.
+4. Print the returned Stripe-hosted payment URL without launching a browser process.
+5. Poll `POST /api/v1/wallet/stripe/confirm` until the server has confirmed and idempotently fulfilled the payment.
+6. Refresh `/api/v1/wallet/status` and show the credit added plus the new wallet balance.
+
+Never collect card numbers, expiry dates, CVCs, or issuer authentication codes through readline, command arguments, environment variables, config files, logs, or model prompts. Stripe-hosted Checkout owns payment-method collection and any 3DS challenge. Closing the terminal must not affect webhook fulfillment of a successful payment.
+
 ## Routing Expectations
 
 The launcher is not the source of truth for upstream runtime routing. Admin Manage Models controls execution routing server-side. The launcher must preserve the user-selected model slug and pass it through the Responses request so billing, logs, and the dashboard can record what the user chose.
@@ -168,7 +186,7 @@ tmp_home="$(mktemp -d)"
 mkdir -p "$tmp_home/.codexclaude"
 cat > "$tmp_home/.codexclaude/config.json" <<'JSON'
 {
-  "version": "2.0.34",
+  "version": "2.0.37",
   "serviceId": "codexapi",
   "serviceLabel": "CodexAPI.pro",
   "apiOrigin": "https://codexapi.pro",
@@ -207,10 +225,26 @@ After packaging, copy the tarball to the public downloads directories, restart t
 
 ```bash
 curl -fsS "https://codexapi.pro/api/v1/codexclaude/version?current=2.0.17"
-curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.34.tgz"
+curl -fsSI "https://codexapi.pro/downloads/codexapi-codexclaude-2.0.37.tgz"
 ```
 
-The version endpoint must report `latestVersion = 2.0.34`, `minimumVersion = 2.0.34`, and `updateRequired = true` for every older client.
+The version endpoint must report `latestVersion = 2.0.37`, `minimumVersion = 2.0.37`, and `updateRequired = true` for every older client.
+
+## Version 2.0.37 Changes
+
+- Updated the bundled coding runtime to exact `@openai/codex@0.153.4`.
+- Added ChatGPT-6 Astra with complete context, output, image, search, tool, and reasoning metadata.
+- Added a model-selection warning for Astra's native signed-in 2x usage rate while keeping cross-model billing route-aware.
+- Preserved all MagnetAPI account login, wallet, top-up, Full Access, safe-alias, update, and model-selection customizations.
+- Made `2.0.37` mandatory after npm and the hosted fallback package become available.
+
+## Version 2.0.36 Changes
+
+- Updated the bundled coding runtime to exact `@openai/codex@0.152.0-alpha.6`.
+- Added authenticated `topup` and `/topup` commands for all four account services and all six fixed API Coding Credit packages.
+- Added Stripe checkout confirmation polling and a refreshed wallet summary after successful payment.
+- Kept card and issuer-authentication data outside the CLI on Stripe's secure payment surface.
+- Made `2.0.36` mandatory while preserving projects, history, login state, model choice, Full Access, and native `codex`/`claude` commands.
 
 ## Version 2.0.34 Changes
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codexapi/codexclaude",
-  "version": "2.0.34",
-  "description": "MagnetAPI.org Codex CLI for ChatGPT Daybreak Blue, GPT-5.6, Opus 5, Sonnet 5, and Fable 5.",
+  "version": "2.0.37",
+  "description": "MagnetAPI.org Codex CLI for ChatGPT-6 Astra, ChatGPT Daybreak Blue, GPT-5.6, Opus 5, Sonnet 5, and Fable 5.",
   "license": "Apache-2.0",
   "type": "module",
   "bin": {
@@ -22,7 +22,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@openai/codex": "0.149.0"
+    "@openai/codex": "0.153.4"
   },
   "publishConfig": {
     "access": "public"