@dreb/coding-agent 2.68.1 → 2.69.0

package/README.md

@@ -97,7 +97,7 @@ Then just talk to dreb. All 13 standard built-in tools are enabled by default (u
 
 For each built-in provider, dreb maintains a list of tool-capable models, updated with every release. Authenticate via subscription (`/login`) or API key, then select any model from that provider via `/model`.
 
-GPT-6 Astra is available as `openai-codex/gpt-6-astra` and `github-copilot/gpt-6-astra`, with `xhigh` and native `max` thinking support. Codex defaults to `gpt-5.6-luna`. Missing saved defaults now warn and prefer the same provider's available default; explicit removed model IDs are not automatically migrated. See [model selection and removed models](docs/providers.md#model-selection-and-removed-models).
+GPT-6 models (Astra, Sol, Luna, 6.1 Sol) are available on `openai-codex` and `github-copilot`, with `xhigh` and native `max` thinking support. The `openai-codex` catalog is derived automatically from the OpenAI catalog, so new frontier models appear there without manual updates (whether they work depends on your ChatGPT plan/workspace). Codex defaults to `gpt-5.6-luna`. Missing saved defaults now warn and prefer the same provider's available default; explicit removed model IDs are not automatically migrated. See [model selection and removed models](docs/providers.md#model-selection-and-removed-models).
 
 **Subscriptions:**
 - OpenAI ChatGPT Plus/Pro (Codex)

package/docs/development.md

@@ -55,11 +55,16 @@ A pre-commit hook runs biome checks, tests, and `tsgo --noEmit` (matching CI) au
 ```bash
 npm test                                           # All workspace tests
 npx vitest --run packages/coding-agent/test/some.test.ts  # Single file
-bash test.sh                                       # Full suite, including configured live providers
-bash test.sh --no-live-api                         # Offline suite (skips live provider calls)
+bash test.sh                                       # Full suite, offline (no live provider calls)
+bash test.sh --live-api                            # Also run live provider tests (spends real quota)
 ```
 
-CI runs `bash test.sh`. The script does not unset API keys: provider tests run when their credentials are available, including OAuth credentials from `~/.dreb/agent/auth.json`, and can consume tokens or subscription quota. CI normally has no provider credentials, so its live tests skip. Use `--no-live-api` for explicit offline isolation; it sets `DREB_SKIP_LIVE_API=1`. Both script modes disable local LLM tests.
+**Live provider tests are opt-in.** They make real, billed requests with API keys and subscription OAuth logins from `~/.dreb/agent/auth.json`, so `npm test`, `bash test.sh`, the pre-commit hook, and CI all skip them by default, even when credentials are present. Credentials are not read or refreshed unless you opt in.
+
+- `DREB_LIVE_API=1` (or `bash test.sh --live-api`) enables live provider tests for every provider you have credentials for.
+- `DREB_LIVE_API_EXPENSIVE=1` additionally enables the context-overflow tests, which send prompts larger than a model's full context window (hundreds of thousands of tokens per request). It has no effect without `DREB_LIVE_API=1`.
+
+Target a single file or provider when running live tests, for example `DREB_LIVE_API=1 npx vitest --run packages/ai/test/stream.test.ts -t "OpenAI Codex"`. New live tests must gate on `isLiveApiEnabled()` (or `isExpensiveLiveApiEnabled()`) from the package's `test/live-api.ts`; `packages/ai/test/live-api-gating.test.ts` fails if a credential-gated `skipIf`/`runIf` bypasses it. `test.sh` also disables local LLM tests.
 
 When updating live model fixtures, check protocol behavior as well as catalog membership. Adaptive Claude tests that assert visible thinking must request `thinkingDisplay: "summarized"`. A conservative registry window is not necessarily the endpoint's hard limit: overflow tests may need to check full input usage (`input + cacheRead + cacheWrite`) when the server accepts a request beyond the configured window.
 

package/docs/providers.md

@@ -50,7 +50,8 @@ Use `/logout` to clear credentials. Tokens are stored in `~/.dreb/agent/auth.jso
 
 - Requires ChatGPT Plus or Pro subscription
 - Personal use only; for production, use the OpenAI Platform API
-- Built-in models are `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-luna` (default), and `gpt-6-astra`. The Codex catalog is maintained separately from the OpenAI Platform API catalog.
+- The Codex catalog is derived automatically from the OpenAI Platform catalog at build time: frontier GPT models (GPT-5.5 and newer, named variants such as Sol/Terra/Luna/Astra, and `gpt-daybreak-*` previews) are mirrored onto `openai-codex`, plus `gpt-5.4-mini`. `-pro`, `-mini`, `-nano`, `-chat` and `-codex` variants and dated snapshots are excluded. The build fails loudly if a known Codex model disappears from the OpenAI catalog or a derived model lacks the catalog limits Codex requires (logic in `packages/ai/scripts/codex-models.ts`). Default is `gpt-5.6-luna`. Every Codex model uses a 272k context window, matching Codex CLI's default: the models support ~1M, but prompts above 272k input are billed at 2x. To use a larger window, override `contextWindow` for the model via `modelOverrides` in `models.json`.
+- Which models actually work depends on your ChatGPT plan/workspace — enterprise workspaces often enable new models later. An unavailable model fails with "model is not supported when using Codex with a ChatGPT account".
 - Astra supports text/image input, a conservative 272K configured context window, and up to 128K output tokens. Codex `minimal` effort is clamped to `low`; `xhigh` and `max` are sent unchanged.
 
 ### Kimi For Coding

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@dreb/coding-agent",
-	"version": "2.68.1",
+	"version": "2.69.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"drebConfig": {