@fased/fased 0.1.55 → 0.1.57

package/dist/browser/extension-relay.js

@@ -2,7 +2,7 @@ import { isLoopbackAddress, isLoopbackHost } from "../gateway/net.js";
 import { rawDataToString } from "../infra/ws.js";
 import { probeAuthenticatedFasedAgentRelay, resolveRelayAcceptedTokensForPort, resolveRelayAuthTokenForPort } from "./extension-relay-auth.js";
 import { createServer } from "node:http";
-import WebSocket, { WebSocketServer } from "ws";
+import WebSocket$1, { WebSocketServer } from "ws";
 
 //#region src/browser/extension-relay.ts
 const RELAY_AUTH_HEADER = "x-fased-relay-token";
@@ -125,7 +125,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let extensionWs = null;
 		const cdpClients = new Set();
 		const connectedTargets = new Map();
-		const extensionConnected = () => extensionWs?.readyState === WebSocket.OPEN;
+		const extensionConnected = () => extensionWs?.readyState === WebSocket$1.OPEN;
 		let extensionDisconnectCleanupTimer = null;
 		const extensionReconnectWaiters = new Set();
 		const flushExtensionReconnectWaiters = (connected) => {
@@ -190,7 +190,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 		let nextExtensionId = 1;
 		const sendToExtension = async (payload) => {
 			const ws = extensionWs;
-			if (!ws || ws.readyState !== WebSocket.OPEN) {
+			if (!ws || ws.readyState !== WebSocket$1.OPEN) {
 				throw new Error("Chrome extension not connected");
 			}
 			ws.send(JSON.stringify(payload));
@@ -209,14 +209,14 @@ async function ensureChromeExtensionRelayServer(opts) {
 		const broadcastToCdpClients = (evt) => {
 			const msg = JSON.stringify(evt);
 			for (const ws of cdpClients) {
-				if (ws.readyState !== WebSocket.OPEN) {
+				if (ws.readyState !== WebSocket$1.OPEN) {
 					continue;
 				}
 				ws.send(msg);
 			}
 		};
 		const sendResponseToCdp = (ws, res) => {
-			if (ws.readyState !== WebSocket.OPEN) {
+			if (ws.readyState !== WebSocket$1.OPEN) {
 				return;
 			}
 			ws.send(JSON.stringify(res));
@@ -460,7 +460,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 					rejectUpgrade(socket, 401, "Unauthorized");
 					return;
 				}
-				if (extensionWs && extensionWs.readyState !== WebSocket.OPEN) {
+				if (extensionWs && extensionWs.readyState !== WebSocket$1.OPEN) {
 					try {
 						extensionWs.terminate();
 					} catch {}
@@ -497,7 +497,7 @@ async function ensureChromeExtensionRelayServer(opts) {
 			clearExtensionDisconnectCleanupTimer();
 			flushExtensionReconnectWaiters(true);
 			const ping = setInterval(() => {
-				if (ws.readyState !== WebSocket.OPEN) {
+				if (ws.readyState !== WebSocket$1.OPEN) {
 					return;
 				}
 				ws.send(JSON.stringify({ method: "ping" }));

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.55",
-  "commit": "c850bc2e9c5030a16672d753fdf92c14cfe8832e",
-  "builtAt": "2026-07-12T22:55:14.749Z"
+  "version": "0.1.57",
+  "commit": "91e53d4b2c1ca02701eff503d93e889ccfaab43d",
+  "builtAt": "2026-07-13T13:04:23.327Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-c4a6e3e507ccfdd8b130a370232c38876b21dcd70184d986652833ecac14bd0a
+bfd05e986c05a91921422f61d2871d036c3e2622a756b89cd75c7ba92ccf4947

package/dist/capabilities/install.js

@@ -0,0 +1,43 @@
+import { installPluginFromNpmSpec } from "../plugins/install.js";
+import { buildNpmResolutionInstallFields } from "../plugins/installs.js";
+import { finalizeInstalledPluginConfig } from "../plugins/lifecycle.js";
+import { loadCapabilityCatalog } from "./catalog.js";
+
+//#region src/capabilities/install.ts
+async function installCapabilityComponent(params) {
+	const entry = loadCapabilityCatalog().find((candidate) => candidate.id === params.id);
+	if (!entry) {
+		throw new Error(`Unknown component: ${params.id}. Run \`fased components\` to list choices.`);
+	}
+	if (entry.delivery !== "npm-addon" || !entry.packageName || !entry.pluginId) {
+		throw new Error(`${entry.label} is delivered as ${entry.delivery} and cannot be installed as an add-on. See ${entry.docsPath}.`);
+	}
+	const packageSpec = params.packageSpec?.trim() || entry.packageName;
+	const result = await installPluginFromNpmSpec({ spec: packageSpec });
+	if (!result.ok) {
+		throw new Error(result.error);
+	}
+	const finalized = finalizeInstalledPluginConfig({
+		config: params.config,
+		pluginId: result.pluginId,
+		refreshManifestRegistry: true,
+		installRecord: {
+			source: "npm",
+			spec: packageSpec,
+			installPath: result.targetDir,
+			version: result.version,
+			...buildNpmResolutionInstallFields(result.npmResolution)
+		}
+	});
+	return {
+		config: finalized.config,
+		entry,
+		pluginId: result.pluginId,
+		targetDir: result.targetDir,
+		...result.version ? { version: result.version } : {},
+		slotWarnings: finalized.slotWarnings
+	};
+}
+
+//#endregion
+export { installCapabilityComponent };

package/dist/cli/components-cli.js

@@ -1,13 +1,11 @@
 import { theme } from "../terminal/theme.js";
 import { defaultRuntime } from "../runtime.js";
-import { installPluginFromNpmSpec } from "../plugins/install.js";
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import { formatDocsLink } from "../terminal/links.js";
+import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary } from "../capabilities/catalog.js";
+import { installCapabilityComponent } from "../capabilities/install.js";
 import { renderTable } from "../terminal/table.js";
-import { buildNpmResolutionInstallFields } from "../plugins/installs.js";
-import { finalizeInstalledPluginConfig } from "../plugins/lifecycle.js";
-import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary, loadCapabilityCatalog } from "../capabilities/catalog.js";
 
 //#region src/cli/components-cli.ts
 function registerComponentsCli(program) {
@@ -18,36 +16,16 @@ function registerComponentsCli(program) {
 		renderComponentReport(options);
 	});
 	components.command("install").description("Install a cataloged optional component").argument("<id>", "Component id from `fased components`").action(async (id) => {
-		const entry = loadCapabilityCatalog().find((candidate) => candidate.id === id);
-		if (!entry) {
-			throw new Error(`Unknown component: ${id}. Run \`fased components\` to list choices.`);
-		}
-		if (entry.delivery !== "npm-addon" || !entry.packageName || !entry.pluginId) {
-			throw new Error(`${entry.label} is delivered as ${entry.delivery} and cannot be installed as an add-on. See ${entry.docsPath}.`);
-		}
-		const result = await installPluginFromNpmSpec({ spec: entry.packageName });
-		if (!result.ok) {
-			throw new Error(result.error);
-		}
-		const config = loadConfig();
-		const finalized = finalizeInstalledPluginConfig({
-			config,
-			pluginId: result.pluginId,
-			refreshManifestRegistry: true,
-			installRecord: {
-				source: "npm",
-				spec: entry.packageName,
-				installPath: result.targetDir,
-				version: result.version,
-				...buildNpmResolutionInstallFields(result.npmResolution)
-			}
+		const result = await installCapabilityComponent({
+			id,
+			config: loadConfig()
 		});
-		await writeConfigFile(finalized.config);
-		for (const warning of finalized.slotWarnings) {
+		await writeConfigFile(result.config);
+		for (const warning of result.slotWarnings) {
 			defaultRuntime.log(theme.warn(warning));
 		}
-		defaultRuntime.log(`Installed component: ${entry.label} (${entry.packageName})`);
-		if (entry.restartRequired !== false) {
+		defaultRuntime.log(`Installed component: ${result.entry.label} (${result.entry.packageName})`);
+		if (result.entry.restartRequired !== false) {
 			defaultRuntime.log("Restart the gateway to apply the component.");
 		}
 	});

package/dist/cli/cron-cli/register.cron-add.js

@@ -38,7 +38,7 @@ function registerCronListCommand(cron) {
 	}));
 }
 function registerCronAddCommand(cron) {
-	addGatewayClientOptions(cron.command("add").alias("create").description("Add a scheduled task").requiredOption("--name <name>", "Task name").option("--description <text>", "Optional description").option("--disabled", "Create task disabled", false).option("--delete-after-run", "Delete one-shot task after it succeeds", false).option("--keep-after-run", "Keep one-shot task after it succeeds", false).option("--agent <id>", "Agent id for this task").option("--session <target>", "Session target (main|isolated)").option("--session-key <key>", "Session key for task routing (e.g. agent:my-agent:my-session)").option("--wake <mode>", "Wake mode (now|next-heartbeat)", "now").option("--at <when>", "Run once at time (ISO) or +duration (e.g. 20m)").option("--every <duration>", "Run every duration (e.g. 10m, 1h)").option("--cron <expr>", "Cron expression (5-field or 6-field with seconds)").option("--tz <iana>", "Timezone for cron expressions (IANA)", "").option("--stagger <duration>", "Cron stagger window (e.g. 30s, 5m)").option("--exact", "Disable cron staggering (set stagger to 0)", false).option("--system-event <text>", "System event payload (main session)").option("--message <text>", "Agent message payload").option("--thinking <level>", "Thinking level for agent tasks (off|minimal|low|medium|high)").option("--model <model>", "Model override for agent tasks (provider/model or alias)").option("--timeout-seconds <n>", "Timeout seconds for agent tasks").option("--announce", "Announce summary to a chat (subagent-style)", false).option("--deliver", "Deprecated (use --announce). Announces a summary to a chat.").option("--no-deliver", "Disable announce delivery and skip main-session summary").option("--channel <channel>", `Delivery channel (${getCronChannelOptions()})`, "last").option("--to <dest>", "Delivery destination (E.164, Telegram chatId, or Discord channel/user)").option("--best-effort-deliver", "Do not fail the task if delivery fails", false).option("--json", "Output JSON", false).action(async (opts, cmd) => {
+	addGatewayClientOptions(cron.command("add").alias("create").description("Add a scheduled task").requiredOption("--name <name>", "Task name").option("--description <text>", "Optional description").option("--disabled", "Create task disabled", false).option("--delete-after-run", "Delete one-shot task after it succeeds", false).option("--keep-after-run", "Keep one-shot task after it succeeds", false).option("--agent <id>", "Agent id for this task").option("--session <target>", "Session target (main|isolated)").option("--session-key <key>", "Session key for task routing (e.g. agent:my-agent:my-session)").option("--wake <mode>", "Wake mode (now|next-heartbeat)", "now").option("--at <when>", "Run once at time (ISO) or +duration (e.g. 20m)").option("--every <duration>", "Run every duration (e.g. 10m, 1h)").option("--cron <expr>", "Cron expression (5-field or 6-field with seconds)").option("--tz <iana>", "Timezone for cron expressions (IANA)", "").option("--stagger <duration>", "Cron stagger window (e.g. 30s, 5m)").option("--exact", "Disable cron staggering (set stagger to 0)", false).option("--system-event <text>", "System event payload (main session)").option("--message <text>", "Agent message payload").option("--thinking <level>", "Thinking level for agent tasks (off|minimal|low|medium|high|xhigh|max|ultra)").option("--model <model>", "Model override for agent tasks (provider/model or alias)").option("--timeout-seconds <n>", "Timeout seconds for agent tasks").option("--announce", "Announce summary to a chat (subagent-style)", false).option("--deliver", "Deprecated (use --announce). Announces a summary to a chat.").option("--no-deliver", "Disable announce delivery and skip main-session summary").option("--channel <channel>", `Delivery channel (${getCronChannelOptions()})`, "last").option("--to <dest>", "Delivery destination (E.164, Telegram chatId, or Discord channel/user)").option("--best-effort-deliver", "Do not fail the task if delivery fails", false).option("--json", "Output JSON", false).action(async (opts, cmd) => {
 		try {
 			const staggerRaw = typeof opts.stagger === "string" ? opts.stagger.trim() : "";
 			const useExact = Boolean(opts.exact);

package/dist/cli/hooks-cli.js

@@ -7,8 +7,8 @@ import { resolveArchiveKind } from "../infra/archive.js";
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import { promptYesNo } from "./prompt.js";
 import { formatDocsLink } from "../terminal/links.js";
-import { renderTable } from "../terminal/table.js";
 import { buildPluginStatusReport } from "../plugins/status.js";
+import { renderTable } from "../terminal/table.js";
 import { loadWorkspaceHookEntries } from "../hooks/workspace.js";
 import { buildWorkspaceHookStatus } from "../hooks/hooks-status.js";
 import { installHooksFromNpmSpec, installHooksFromPath, resolveHookInstallDir } from "../hooks/install.js";

package/dist/cli/plugins-cli.js

@@ -7,13 +7,13 @@ import { installPluginFromNpmSpec, installPluginFromPath } from "../plugins/inst
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import { promptYesNo } from "./prompt.js";
-import { formatDocsLink } from "../terminal/links.js";
-import { renderTable } from "../terminal/table.js";
-import { findBundledPluginByNpmSpec } from "../plugins/bundled-sources.js";
 import { setPluginEnabledInConfig } from "../plugins/toggle-config.js";
 import { enablePluginInConfig } from "../plugins/enable.js";
+import { formatDocsLink } from "../terminal/links.js";
+import { findBundledPluginByNpmSpec } from "../plugins/bundled-sources.js";
 import { applySlotSelectionForPlugin, buildPluginLifecycleReport, buildPluginUninstallPreview, executePluginUninstallLifecycle, executePluginUpdateLifecycle, finalizeInstalledPluginConfig } from "../plugins/lifecycle.js";
 import { buildPluginMarketplaceReport } from "../plugins/marketplace.js";
+import { renderTable } from "../terminal/table.js";
 import { buildPluginMarketplaceUpdateReview, formatPluginMarketplaceUpdateReviewWarnings } from "../plugins/marketplace-update-review.js";
 import { getPluginRuntimeSessionReadGrant, setPluginRuntimeSessionReadGrant } from "../plugins/runtime-helper-grants.js";
 import { resolvePinnedNpmInstallRecordForCli } from "./npm-resolution.js";

package/dist/cli/program/register.agent.js

@@ -18,7 +18,7 @@ import "../../commands/agents.js";
 
 //#region src/cli/program/register.agent.ts
 function registerAgentCommands(program, args) {
-	program.command("agent").description("Run an agent turn via the Gateway (use --local for embedded)").requiredOption("-m, --message <text>", "Message body for the agent").option("-t, --to <number>", "Recipient number in E.164 used to derive the session key").option("--session-id <id>", "Use an explicit session id").option("--agent <id>", "Agent id (overrides routing bindings)").option("--thinking <level>", "Thinking level: off | minimal | low | medium | high").option("--verbose <on|off>", "Persist agent verbose level for the session").option("--channel <channel>", `Delivery channel: ${args.agentChannelOptions} (omit to use the main session channel)`).option("--reply-to <target>", "Delivery target override (separate from session routing)").option("--reply-channel <channel>", "Delivery channel override (separate from routing)").option("--reply-account <id>", "Delivery account id override").option("--local", "Run the embedded agent locally (requires model provider API keys in your shell)", false).option("--deliver", "Send the agent's reply back to the selected channel", false).option("--json", "Output result as JSON", false).option("--timeout <seconds>", "Override agent command timeout (seconds, default 600 or config value)").addHelpText("after", () => `
+	program.command("agent").description("Run an agent turn via the Gateway (use --local for embedded)").requiredOption("-m, --message <text>", "Message body for the agent").option("-t, --to <number>", "Recipient number in E.164 used to derive the session key").option("--session-id <id>", "Use an explicit session id").option("--agent <id>", "Agent id (overrides routing bindings)").option("--thinking <level>", "Thinking level: off | minimal | low | medium | high | xhigh | max | ultra").option("--verbose <on|off>", "Persist agent verbose level for the session").option("--channel <channel>", `Delivery channel: ${args.agentChannelOptions} (omit to use the main session channel)`).option("--reply-to <target>", "Delivery target override (separate from session routing)").option("--reply-channel <channel>", "Delivery channel override (separate from routing)").option("--reply-account <id>", "Delivery account id override").option("--local", "Run the embedded agent locally (requires model provider API keys in your shell)", false).option("--deliver", "Send the agent's reply back to the selected channel", false).option("--json", "Output result as JSON", false).option("--timeout <seconds>", "Override agent command timeout (seconds, default 600 or config value)").addHelpText("after", () => `
 ${theme.heading("Examples:")}
 ${formatHelpExamples([
 		["fased agent --to +15555550123 --message \"status update\"", "Start a new session."],

package/dist/cli/update-cli/update-command.js

@@ -9,6 +9,8 @@ import { readConfigFileSnapshot, writeConfigFile } from "../../config/io.js";
 import "../../config/config.js";
 import { loadGatewayTlsRuntime } from "../../infra/tls/gateway.js";
 import { stylePromptMessage } from "../../terminal/prompt-style.js";
+import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
+import { OPENAI_RUNTIME_COMPONENT_ID, ensureOpenAICodexRuntimeComponent, hasConfiguredOpenAICodexProfile } from "../../agents/openai-codex-runtime-component.js";
 import { DEFAULT_GIT_CHANNEL, DEFAULT_PACKAGE_CHANNEL, channelToNpmTag, normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { cleanupGlobalRenameDirs, globalInstallArgs, resolveGlobalPackageRoot, resolveNodeModulesRootForPackageRoot } from "../../infra/update-global.js";
 import { checkUpdateStatus, compareSemverStrings, resolveNpmChannelTag } from "../../infra/update-check.js";
@@ -18,7 +20,6 @@ import { renderRestartDiagnostics, terminateStaleGatewayPids, waitForGatewayHeal
 import { runDaemonRestart } from "../daemon-cli/lifecycle.js";
 import "../../daemon-cli.js";
 import { installCompletion } from "../completion-cli.js";
-import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
 import { readPackageName, readPackageVersion } from "../../infra/package-json.js";
 import { finalizeUpdateTransaction, rollbackUpdateTransaction, runGatewayUpdate } from "../../infra/update-runner.js";
 import { checkShellCompletionStatus, ensureCompletionCacheExists } from "../../commands/doctor-completion.js";
@@ -422,14 +423,32 @@ async function updatePluginsAfterCoreUpdate(params) {
 		config: params.configSnapshot.config,
 		updateCompleted: true
 	});
-	const installs = repairResult.config.plugins?.installs ?? {};
+	let pluginConfig = repairResult.config;
+	let installedOpenAIRuntime = false;
+	if (hasConfiguredOpenAICodexProfile(pluginConfig)) {
+		const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+			config: pluginConfig,
+			version: params.targetVersion
+		});
+		pluginConfig = runtimeComponent.config;
+		installedOpenAIRuntime = runtimeComponent.installed;
+		if (runtimeComponent.installed && !params.opts.json) {
+			defaultRuntime.log(theme.muted("Installed the managed OpenAI sign-in runtime required by the existing ChatGPT credential."));
+		}
+		for (const warning of runtimeComponent.slotWarnings) {
+			if (!params.opts.json) {
+				defaultRuntime.log(theme.warn(warning));
+			}
+		}
+	}
+	const installs = pluginConfig.plugins?.installs ?? {};
 	if (Object.keys(installs).length === 0) {
-		if (repairResult.changed) {
-			await writeConfigFile(repairResult.config);
+		if (repairResult.changed || installedOpenAIRuntime) {
+			await writeConfigFile(pluginConfig);
 		}
 		return {
-			changed: repairResult.changed,
-			checked: false
+			changed: repairResult.changed || installedOpenAIRuntime,
+			checked: installedOpenAIRuntime
 		};
 	}
 	const pluginLogger = params.opts.json ? {} : {
@@ -442,25 +461,25 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.heading("Updating plugins..."));
 	}
 	const syncResult = await syncPluginsForUpdateChannel({
-		config: repairResult.config,
+		config: pluginConfig,
 		channel: params.channel,
 		workspaceDir: params.root,
 		logger: pluginLogger
 	});
-	let pluginConfig = syncResult.config;
+	pluginConfig = syncResult.config;
 	const npmResult = await updateNpmInstalledPlugins({
 		config: pluginConfig,
-		skipIds: new Set(syncResult.summary.switchedToNpm),
+		skipIds: new Set([...syncResult.summary.switchedToNpm, ...installedOpenAIRuntime ? [OPENAI_RUNTIME_COMPONENT_ID] : []]),
 		updateChannel: params.channel,
 		logger: pluginLogger
 	});
 	pluginConfig = npmResult.config;
-	if (repairResult.changed || syncResult.changed || npmResult.changed) {
+	if (repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed) {
 		await writeConfigFile(pluginConfig);
 	}
 	if (params.opts.json) {
 		return {
-			changed: repairResult.changed || syncResult.changed || npmResult.changed,
+			changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 			checked: true
 		};
 	}
@@ -511,7 +530,7 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.error(outcome.message));
 	}
 	return {
-		changed: repairResult.changed || syncResult.changed || npmResult.changed,
+		changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 		checked: true
 	};
 }
@@ -802,6 +821,24 @@ async function updateCommand(opts) {
 		}
 	}
 	if (alreadyCurrent && currentVersion && targetVersion) {
+		if (configSnapshot.valid && hasConfiguredOpenAICodexProfile(configSnapshot.config)) {
+			try {
+				const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+					config: configSnapshot.config,
+					version: targetVersion
+				});
+				if (runtimeComponent.installed) {
+					await writeConfigFile(runtimeComponent.config);
+					if (!opts.json) {
+						defaultRuntime.log(theme.muted("Installed the version-matched OpenAI sign-in runtime required by the current release."));
+					}
+				}
+			} catch (error) {
+				defaultRuntime.error(`OpenAI sign-in runtime update failed: ${String(error)}`);
+				defaultRuntime.exit(1);
+				return;
+			}
+		}
 		const runningRuntime = await probeRunningGatewayRuntimeIdentity({ timeoutMs: 750 });
 		if (runningRuntime.reachable && runningRuntime.version !== currentVersion) {
 			if (!shouldRestart) {
@@ -1000,6 +1037,7 @@ async function updateCommand(opts) {
 	const pluginResult = await measureUpdateStage(lifecycleTimings, "plugin updates", () => updatePluginsAfterCoreUpdate({
 		root,
 		channel,
+		targetVersion: result.after?.version ?? targetVersion ?? undefined,
 		configSnapshot,
 		opts
 	}));

package/dist/commands/agent.js

@@ -1,4 +1,4 @@
-import { formatThinkingLevels, formatXHighModelHint, normalizeThinkLevel, supportsXHighThinking } from "../shared/model-thinking.js";
+import { formatThinkingLevels, formatXHighModelHint, normalizeThinkLevel, supportsThinkingLevel, supportsXHighThinking } from "../shared/model-thinking.js";
 import { normalizeVerboseLevel } from "../auto-reply/thinking.js";
 import { defaultRuntime } from "../runtime.js";
 import { normalizeAgentId, resolveAgentIdFromSessionKey } from "../routing/session-key.js";
@@ -26,10 +26,10 @@ import { resolveSendPolicy } from "../sessions/send-policy.js";
 import { toAcpRuntimeError } from "../acp/runtime/errors.js";
 import { getAcpSessionManager } from "../acp/control-plane/manager.js";
 import { resolveAcpAgentPolicyError, resolveAcpDispatchPolicyError } from "../acp/policy.js";
-import { runWithModelFallback } from "../agents/model-fallback.js";
-import { applyModelOverrideToSessionEntry } from "../sessions/model-overrides.js";
 import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { loadModelCatalog } from "../agents/model-catalog.js";
+import { runWithModelFallback } from "../agents/model-fallback.js";
+import { applyModelOverrideToSessionEntry } from "../sessions/model-overrides.js";
 import { buildWorkspaceSkillSnapshot } from "../agents/skills/workspace.js";
 import "../agents/skills.js";
 import { getSkillsSnapshotVersion } from "../agents/skills/refresh-state.js";
@@ -492,6 +492,25 @@ async function agentCommand(opts, runtime = defaultRuntime, deps = createDefault
 				});
 			}
 		}
+		if ((resolvedThinkLevel === "max" || resolvedThinkLevel === "ultra") && !supportsThinkingLevel(provider, model, resolvedThinkLevel)) {
+			const explicitThink = Boolean(thinkOnce || thinkOverride);
+			if (explicitThink) {
+				throw new Error(`Thinking level "${resolvedThinkLevel}" is not supported for ${provider}/${model}. Supported levels: ${formatThinkingLevels(provider, model)}.`);
+			}
+			const unsupportedLevel = resolvedThinkLevel;
+			resolvedThinkLevel = "high";
+			if (sessionEntry && sessionStore && sessionKey && sessionEntry.thinkingLevel === unsupportedLevel) {
+				const entry = sessionEntry;
+				entry.thinkingLevel = "high";
+				entry.updatedAt = Date.now();
+				await persistSessionEntry({
+					sessionStore,
+					sessionKey,
+					storePath,
+					entry
+				});
+			}
+		}
 		const sessionPathOpts = resolveSessionFilePathOptions({
 			agentId: sessionAgentId,
 			storePath

package/dist/commands/auth-choice.apply.openai.js

@@ -1,4 +1,5 @@
 import { openUrl } from "./onboard-helpers.js";
+import { ensureOpenAICodexRuntimeComponent } from "../agents/openai-codex-runtime-component.js";
 import { normalizeApiKeyInput, validateApiKeyInput } from "./auth-choice.api-key.js";
 import { applyDefaultModelChoice } from "./auth-choice.default-model.js";
 import { createAuthChoiceAgentModelNoter, ensureApiKeyFromOptionEnvOrPrompt, normalizeSecretInputModeInput } from "./auth-choice.apply-helpers.js";
@@ -82,6 +83,14 @@ async function applyAuthChoiceOpenAI(params) {
 			};
 		}
 		if (creds) {
+			const runtimeComponent = await ensureOpenAICodexRuntimeComponent({ config: nextConfig });
+			nextConfig = runtimeComponent.config;
+			for (const warning of runtimeComponent.slotWarnings) {
+				await params.prompter.note(warning, "OpenAI runtime warning");
+			}
+			if (runtimeComponent.installed) {
+				await params.prompter.note("Installed the managed OpenAI sign-in runtime for authenticated model discovery and execution.", "OpenAI runtime ready");
+			}
 			const profileId = await writeOAuthCredentials("openai-codex", creds, params.agentDir, { syncSiblingAgents: true });
 			nextConfig = applyAuthProfileConfig(nextConfig, {
 				profileId,

package/dist/commands/auth-choice.apply.plugin-provider.js

@@ -1,8 +1,8 @@
 import { resolveDefaultAgentWorkspaceDir } from "../agents/workspace.js";
 import { resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent-scope.js";
 import { resolveFasedAgentAgentDir } from "../agents/agent-paths.js";
-import { resolvePluginProviders } from "../plugins/providers.js";
 import { enablePluginInConfig } from "../plugins/enable.js";
+import { resolvePluginProviders } from "../plugins/providers.js";
 import { pickAuthMethod, resolveProviderMatch } from "../plugins/provider-auth-choice-helpers.js";
 import { applyPluginProviderAuthRunResult, createPluginProviderAuthContext, runInteractivePluginProviderOAuthDeviceAuth } from "../plugins/provider-auth-runtime.js";
 

package/dist/commands/doctor-config-flow.js

@@ -14,8 +14,8 @@ import "../config/config.js";
 import { listTelegramAccountIds, resolveTelegramAccount } from "../telegram/accounts.js";
 import "../channels/registry.js";
 import { readChannelAllowFromStore } from "../pairing/pairing-store.js";
-import { listInterpreterLikeSafeBins, resolveMergedSafeBinProfileFixtures } from "../infra/exec-safe-bin-runtime-policy.js";
 import { readWalletApprovalAuthSnapshot } from "../wallet/wallet-approval-auth.js";
+import { listInterpreterLikeSafeBins, resolveMergedSafeBinProfileFixtures } from "../infra/exec-safe-bin-runtime-policy.js";
 import { applyPluginAutoEnable } from "../config/plugin-auto-enable.js";
 import { isNumericTelegramUserId, normalizeTelegramAllowFromEntry } from "../channels/telegram/allow-from.js";
 import { collectProviderDangerousNameMatchingScopes } from "../config/dangerous-name-matching.js";

package/dist/commands/hosted-dashboard-probe.js

@@ -6,7 +6,7 @@ import { rawDataToString } from "../infra/ws.js";
 import { buildDeviceAuthPayload } from "../gateway/device-auth.js";
 import { PROTOCOL_VERSION } from "../gateway/protocol/schema/protocol-schemas.js";
 import "../gateway/protocol/index.js";
-import { WebSocket as WebSocket$1 } from "ws";
+import { WebSocket } from "ws";
 
 //#region src/commands/hosted-dashboard-probe.ts
 function sanitizeErrorMessage(value) {
@@ -392,7 +392,7 @@ function probeHostedWs(params) {
 			resolve(result);
 		};
 		const sendConnect = () => {
-			if (!ws || ws.readyState !== WebSocket$1.OPEN || connectSent) {
+			if (!ws || ws.readyState !== WebSocket.OPEN || connectSent) {
 				return;
 			}
 			connectSent = true;
@@ -438,7 +438,7 @@ function probeHostedWs(params) {
 			});
 		}, params.timeoutMs);
 		try {
-			ws = new WebSocket$1(params.wsUrl, {
+			ws = new WebSocket(params.wsUrl, {
 				headers: { Origin: params.origin },
 				handshakeTimeout: Math.max(1e3, Math.floor(params.timeoutMs)),
 				maxPayload: 1024 * 1024

package/dist/commands/model-picker.js

@@ -13,10 +13,10 @@ import { listProfilesForProvider } from "../agents/auth-profiles/profiles.js";
 import "../agents/auth-profiles.js";
 import { getCustomProviderApiKey, resolveEnvApiKey } from "../agents/model-auth.js";
 import { buildAllowedModelSet, buildModelAliasIndex, modelKey, normalizeProviderId, resolveConfiguredModelRef } from "../agents/model-selection.js";
-import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { formatModelFeatureList } from "../agents/model-metadata.js";
-import { loadModelCatalog } from "../agents/model-catalog.js";
+import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { resolveAuthenticatedModelCatalog } from "../agents/authenticated-model-catalog.js";
+import { loadModelCatalog } from "../agents/model-catalog.js";
 import { loadPreviewModelListSources } from "./models/list.preview-catalog.js";
 import { formatTokenK } from "./models/shared.js";
 import { OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default.js";
@@ -222,7 +222,8 @@ async function loadModelPickerCatalog(cfg, agentDir) {
 		cfg,
 		store,
 		catalog: standardModels,
-		defaultProvider: DEFAULT_PROVIDER
+		defaultProvider: DEFAULT_PROVIDER,
+		agentDir
 	});
 	return authenticated.allowedCatalog.length > 0 ? authenticated.allowedCatalog : authenticated.usableCatalog;
 }

package/dist/commands/models/list.probe.js

@@ -11,8 +11,8 @@ import { getCustomProviderApiKey, resolveEnvApiKey } from "../../agents/model-au
 import { findNormalizedProviderValue, normalizeProviderId, parseModelRef } from "../../agents/model-selection.js";
 import { resolveSessionTranscriptPath, resolveSessionTranscriptsDirForAgent } from "../../config/sessions/paths.js";
 import "../../agents/pi-embedded.js";
-import { describeFailoverError } from "../../agents/failover-error.js";
 import { loadModelCatalog } from "../../agents/model-catalog.js";
+import { describeFailoverError } from "../../agents/failover-error.js";
 import { runEmbeddedPiAgent } from "../../agents/pi-embedded-runner/run.js";
 import { redactSecrets } from "../status-all/format.js";
 import { formatMs } from "./shared.js";

package/dist/commands/models/list.registry.js

@@ -6,8 +6,8 @@ import { modelKey } from "../../agents/model-selection.js";
 import { ensureFasedAgentModelsJson } from "../../agents/models-config.js";
 import { discoverAuthStorage, discoverModels } from "../../agents/pi-model-discovery.js";
 import { deriveModelMetadata, formatModelFeatureList } from "../../agents/model-metadata.js";
-import { loadModelCatalog } from "../../agents/model-catalog.js";
 import { resolveAuthenticatedModelCatalog } from "../../agents/authenticated-model-catalog.js";
+import { loadModelCatalog } from "../../agents/model-catalog.js";
 import { isLocalBaseUrl } from "./shared.js";
 import { createModelListAuthIndex } from "./list.auth-index.js";
 import { MODEL_AVAILABILITY_UNAVAILABLE_CODE, formatErrorWithStack, shouldFallbackToAuthHeuristics } from "./list.errors.js";
@@ -78,7 +78,8 @@ async function loadModelRegistry(cfg) {
 		cfg,
 		store,
 		catalog,
-		defaultProvider: DEFAULT_PROVIDER
+		defaultProvider: DEFAULT_PROVIDER,
+		agentDir
 	});
 	const models = authenticated.usableCatalog.map((model) => normalizeModelListSource(model));
 	let availableKeys;

package/dist/commands/models/list.status-command.js

@@ -16,12 +16,12 @@ import "../../agents/auth-profiles.js";
 import { resolveEnvApiKey } from "../../agents/model-auth.js";
 import { buildModelAliasIndex, parseModelRef, resolveConfiguredModelRef, resolveDefaultModelForAgent, resolveModelRefFromString } from "../../agents/model-selection.js";
 import { withProgressTotals } from "../../cli/progress.js";
+import { loadProviderExtensionCatalogIndex } from "../../agents/provider-extension-catalog-index.js";
+import { loadModelCatalog } from "../../agents/model-catalog.js";
 import { resolveUsageProviderId } from "../../infra/provider-usage.shared.js";
 import { formatUsageWindowSummary } from "../../infra/provider-usage.format.js";
 import { loadProviderUsageSummary } from "../../infra/provider-usage.load.js";
 import "../../infra/provider-usage.js";
-import { loadProviderExtensionCatalogIndex } from "../../agents/provider-extension-catalog-index.js";
-import { loadModelCatalog } from "../../agents/model-catalog.js";
 import { renderTable } from "../../terminal/table.js";
 import { buildModelCatalogStatus } from "../../agents/model-catalog-status.js";
 import { DEFAULT_OAUTH_WARN_MS, buildAuthHealthSummary, formatRemainingShort } from "../../agents/auth-health.js";

package/dist/commands/onboard-channels.js

@@ -4,11 +4,11 @@ import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent
 import { formatCliCommand } from "../cli/command-format.js";
 import { getChannelPlugin, listChannelPlugins } from "../channels/plugins/index.js";
 import { formatChannelPrimerLine, formatChannelSelectionLine, listChatChannels } from "../channels/registry.js";
+import { enablePluginInConfig } from "../plugins/enable.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { formatChannelPluginCatalogSelectionHint, formatChannelPluginCatalogStatusLine, listChannelPluginCatalogEntries } from "../channels/plugins/catalog.js";
 import { isChannelConfigured } from "../config/plugin-auto-enable.js";
 import { resolveChannelDefaultAccountId } from "../channels/plugins/helpers.js";
-import { enablePluginInConfig } from "../plugins/enable.js";
 import { ensureOnboardingPluginInstalled, reloadOnboardingPluginRegistry } from "./onboarding/plugin-install.js";
 import { getChannelOnboardingAdapter, listChannelOnboardingAdapters } from "./onboarding/registry.js";
 

package/dist/commands/onboarding/plugin-install.js

@@ -2,11 +2,11 @@ import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { resolveFasedAgentPackageRootSync } from "../../infra/fased-root.js";
 import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agents/agent-scope.js";
 import { installPluginFromNpmSpec } from "../../plugins/install.js";
+import { buildNpmResolutionInstallFields } from "../../plugins/installs.js";
 import { loadFasedAgentPlugins } from "../../plugins/loader.js";
 import { createPluginLoaderLogger } from "../../plugins/logger.js";
-import { resolveChannelPluginExpectedPluginIds } from "../../channels/plugins/catalog.js";
-import { buildNpmResolutionInstallFields } from "../../plugins/installs.js";
 import { finalizeInstalledPluginConfig } from "../../plugins/lifecycle.js";
+import { resolveChannelPluginExpectedPluginIds } from "../../channels/plugins/catalog.js";
 import fs from "node:fs";
 import path from "node:path";
 

package/dist/commands/openai-codex-model-default.js

@@ -1,8 +1,8 @@
 import { DEFAULT_PROVIDER } from "../agents/defaults.js";
 import { ensureAuthProfileStore } from "../agents/auth-profiles/store.js";
 import "../agents/auth-profiles.js";
-import { loadModelCatalog } from "../agents/model-catalog.js";
 import { resolveAuthenticatedModelCatalog } from "../agents/authenticated-model-catalog.js";
+import { loadModelCatalog } from "../agents/model-catalog.js";
 
 //#region src/commands/openai-codex-model-default.ts
 const OPENAI_CODEX_DEFAULT_MODEL = "openai-codex/gpt-5.5";
@@ -17,7 +17,8 @@ async function discoverOpenAICodexDefaultModel(params) {
 		cfg: params.config,
 		store,
 		catalog,
-		defaultProvider: DEFAULT_PROVIDER
+		defaultProvider: DEFAULT_PROVIDER,
+		agentDir: params.agentDir
 	});
 	const model = authenticated.usableCatalog.filter((entry) => entry.provider === "openai-codex").toSorted((left, right) => (left.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) - (right.metadata?.recommendationRank ?? Number.MAX_SAFE_INTEGER) || left.name.localeCompare(right.name))[0];
 	return model ? `${model.provider}/${model.id}` : undefined;

package/dist/config/zod-schema.agent-defaults.js

@@ -90,7 +90,8 @@ const AgentDefaultsSchema = z.object({
 		z.literal("medium"),
 		z.literal("high"),
 		z.literal("xhigh"),
-		z.literal("max")
+		z.literal("max"),
+		z.literal("ultra")
 	]).optional(),
 	reasoningDefault: z.union([
 		z.literal("off"),
@@ -99,7 +100,8 @@ const AgentDefaultsSchema = z.object({
 		z.literal("medium"),
 		z.literal("high"),
 		z.literal("xhigh"),
-		z.literal("max")
+		z.literal("max"),
+		z.literal("ultra")
 	]).optional(),
 	fastModeDefault: z.boolean().optional(),
 	verboseDefault: z.union([