@khorsheed/dsh-local-agent-codex 0.2.0-rc.1 → 0.2.0-rc.3

package/lib/types/live-driver.js

@@ -24,10 +24,12 @@
 import { randomUUID } from 'node:crypto';
 import { StringDecoder } from 'node:string_decoder';
 import { createUserMessage } from '@deepseek-ai/dsh-llm';
+import { SessionId } from '@deepseek-ai/dsh-session';
 import { settleRunResult, subprocessRunHandle, } from '@deepseek-ai/dsh-subagent';
 import { delegationEnv, persistChildSession, LiveStreamPublisher, LiveFlush, LIVE_FLUSH_INTERVAL_MS } from '@khorsheed/dsh-local-agent';
 import { appendCodexTranscriptLine, codexAssistantEvent, codexLineText, DEFAULT_DISPOSE_GRACE_MS, registerCodexMemberRun, textTask, } from './codex-cli-provider.js';
 import { codexRolloutRoundFacts } from './records.js';
+import { endpointAuthEnv, endpointConfigOverrides } from './endpoint-auth.js';
 /** Default idle lifetime of an unused resident runtime before reclaim. */
 export const DEFAULT_LIVE_IDLE_MS = 30 * 60_000;
 /** Default timeout for a wire request acknowledgement. */
@@ -552,10 +554,18 @@ export class CodexLiveDriver {
         const startModel = spec.startModel?.trim();
         const model = spec.configuration !== undefined ? spec.configuration.model
             : startModel !== undefined && startModel !== '' ? startModel : this.config.model?.(key)?.trim();
+        // The endpoint credential routes the resident process too: with a key the
+        // app-server spawns onto the relay's custom provider (the same `-c`
+        // overrides the exec path carries), so a live round never consults
+        // auth.json either. Read per spawn — a card write reaches the next respawn.
+        const endpoint = this.config.endpoint === undefined
+            ? undefined
+            : await this.config.endpoint(spec.homeDir).catch(() => undefined);
         const spawnSpec = {
             argv: [
                 'codex', 'app-server',
                 ...member === undefined ? [] : ['-c', member.configOverride],
+                ...endpointConfigOverrides(endpoint),
                 ...model === undefined || model === '' ? [] : ['-c', `model=${JSON.stringify(model)}`],
                 ...spec.configuration?.effort === undefined ? [] : ['-c', `model_reasoning_effort=${JSON.stringify(spec.configuration.effort)}`],
                 '--stdio',
@@ -563,7 +573,7 @@ export class CodexLiveDriver {
             cwd: spec.cwd,
             stdio: { stdin: 'pipe', stdout: 'pipe', stderr: 'pipe' },
             graceMs: DEFAULT_DISPOSE_GRACE_MS,
-            env: delegationEnv({ CODEX_HOME: spec.homeDir }),
+            env: delegationEnv({ CODEX_HOME: spec.homeDir, ...endpointAuthEnv(endpoint) }),
         };
         let child;
         try {
@@ -1261,7 +1271,11 @@ export class CodexLiveDriver {
         // hostage to the slow windows — a cancel returns the run immediately.
         await Promise.race([accepted, abortBranch.catch(() => undefined)]);
         return subprocessRunHandle({
-            id: childSession.id,
+            // Host 0.2.1: a fresh PER-EXECUTION run id — the activation manager
+            // rejects a run id naming a live Session (this child session is live),
+            // and resume rounds reuse the child session id. The family's durable
+            // tracking key (the child session id) rides the staged intent instead.
+            id: SessionId(randomUUID()),
             result,
             signal: request.signal,
             onAbort,

package/lib/types/live-switch.d.ts

@@ -13,6 +13,7 @@
 import type { Context } from '@deepseek-ai/cordis';
 import type { SettingsFace } from '@khorsheed/dsh-local-agent';
 import type { Config } from './index.ts';
+import type { CodexEndpointAuth } from './endpoint-auth.ts';
 import { CodexLiveDriver } from './live-driver.ts';
 import type { CodexLiveMirrorGranularity } from './live-driver.ts';
 /** The resolved live settings (schema defaults ← YAML base ← user layer). */
@@ -41,6 +42,12 @@ export declare class LiveDriverSwitch {
          * outrank the settings value.
          */
         model?: (childSessionId: string) => string | undefined;
+        /**
+         * Per-spawn endpoint credential resolver, handed to every driver
+         * generation: a resolution carrying a key routes the app-server at the
+         * relay (see the driver's own contract).
+         */
+        endpoint?: (scopeHome: string) => Promise<CodexEndpointAuth>;
     });
     /**
      * Resolve the live driver for one round's member (the provider's call

package/lib/types/live-switch.js

@@ -69,6 +69,7 @@ export class LiveDriverSwitch {
                 ...this.options.sandbox === undefined ? {} : { sandbox: this.options.sandbox },
                 ...this.options.liveIdleMs === undefined ? {} : { liveIdleMs: this.options.liveIdleMs },
                 ...this.options.model === undefined ? {} : { model: this.options.model },
+                ...this.options.endpoint === undefined ? {} : { endpoint: this.options.endpoint },
             })
             : undefined;
         if (retiring !== undefined) {

package/lib/types/model-broker.d.ts

@@ -31,8 +31,18 @@ import type { LocalAgentModelBroker, LocalAgentModelInfo, LocalAgentModelDirecto
 export interface CodexModelBrokerDeps {
     /** Host context carrying the family registry (in-flight reads, delegation records). */
     readonly ctx: Context;
-    /** The plugin-config `model` resolver — the settings layer, blank reads unset. */
-    readonly settingsModel: () => string | undefined;
+    /**
+     * The settings-layer model for one scoped home: the curated model list's
+     * FIRST entry (models.json, edited on the card), then the plugin-config
+     * `model` key — blank reads unset.
+     */
+    readonly settingsModel: (homeDir: string) => string | undefined;
+    /**
+     * The scope's curated model list (models.json) for the choice vocabulary:
+     * non-empty it is the COMPLETE vocabulary (nothing outside the endpoint's
+     * served catalog sneaks in); empty falls back to the pre-list chain.
+     */
+    readonly modelList?: (homeDir: string) => readonly string[];
     /** The card's recent-model memory (the suggestion vocabulary's tail). */
     readonly recentModels: () => readonly string[];
     /**

package/lib/types/model-broker.js

@@ -54,7 +54,7 @@ export class CodexModelBroker {
             }
             const model = selection.model.mode === 'value' ? selection.model.value
                 : (selection.model.mode === 'inherit' ? binding.model : undefined)
-                    ?? this.deps.settingsModel() ?? await readCodexModel(home)
+                    ?? this.deps.settingsModel(home) ?? await readCodexModel(home)
                     ?? this.deps.catalogDefault(home, binding.cwd);
             const entry = directory?.entries.find(entry => entry.value === model);
             const explicitEffort = selection.effort.mode === 'value' ? selection.effort.value
@@ -113,7 +113,7 @@ export class CodexModelBroker {
         const recorded = record?.model?.trim();
         if (recorded !== undefined && recorded !== '')
             return recorded;
-        return this.deps.settingsModel();
+        return this.deps.settingsModel(this.deps.homeDir(childSessionId));
     }
     /**
      * Read the model surface. The cliDefault and the discovered identifiers come
@@ -124,8 +124,8 @@ export class CodexModelBroker {
      * re-fetches on open, so it never blocks on a CLI boot).
      */
     async modelInfo(childSessionId, delegationModel) {
-        const settings = this.deps.settingsModel();
         const homeDir = this.deps.homeDir(childSessionId);
+        const settings = this.deps.settingsModel(homeDir);
         const [cliDefault, discovered] = await Promise.all([
             readCodexModel(homeDir).catch(() => undefined),
             listCodexConfigModels(homeDir).catch(() => []),
@@ -144,6 +144,10 @@ export class CodexModelBroker {
                 : settings !== undefined ? 'settings'
                     : cliDefault !== undefined ? 'cli-config' : 'cli-builtin';
         const inFlight = childSessionId !== undefined && this.activeDelegations().includes(childSessionId);
+        // The curated list is the whole vocabulary when non-empty — nothing from
+        // outside the endpoint's served catalog sneaks in. Empty falls back to
+        // the pre-list chain (native candidates plus configuration and history).
+        const curated = this.deps.modelList?.(homeDir) ?? [];
         return {
             ...effective === undefined ? {} : { effective },
             source,
@@ -151,8 +155,8 @@ export class CodexModelBroker {
             ...delegation === undefined ? {} : { delegation },
             ...settings === undefined ? {} : { settings },
             ...cliDefault === undefined ? {} : { cliDefault },
-            ...this.deps.directory === undefined ? {} : { directory: extendModelDirectory(this.deps.directory(homeDir, this.deps.cwd?.(childSessionId)), [settings, cliDefault, ...discovered], this.deps.recentModels()) },
-            choices: dedupeChoices([settings, cliDefault, ...discovered, ...this.deps.catalog(homeDir, this.deps.cwd?.(childSessionId)), ...this.deps.recentModels()]),
+            ...this.deps.directory === undefined ? {} : { directory: extendModelDirectory(this.deps.directory(homeDir, this.deps.cwd?.(childSessionId)), [settings, cliDefault, ...discovered], curated.length > 0 ? [] : this.deps.recentModels()) },
+            choices: curated.length > 0 ? [...curated] : dedupeChoices([settings, cliDefault, ...discovered, ...this.deps.catalog(homeDir, this.deps.cwd?.(childSessionId)), ...this.deps.recentModels()]),
             live: this.deps.live(),
             switchable: !inFlight,
             ...inFlight ? { reason: '成员有进行中的委派轮次，等其完成后再切换模型' } : {},

package/lib/types/model-catalog.d.ts

@@ -1,8 +1,21 @@
-/** Native app-server model/list discovery. Shared core cache owns refresh,
- * stale data and subscriptions; this provider owns protocol and pagination. */
+/**
+ * The codex model directory: the VOCABULARY comes from the configured
+ * endpoint (`GET <baseUrl>/v1/models` with the resolved credential — the same
+ * probe the settings card's verify button runs), never from the CLI's local
+ * registry: a local list cannot prove what the endpoint serves, and showing
+ * it made a credential that does not work look valid. The native app-server
+ * `model/list` probe survives as METADATA ENRICHMENT only — it alone carries
+ * the display names, the hidden candidates, the reasoning-effort options and
+ * the `isDefault` slug (the CLI's compiled default), so it still runs
+ * CONCURRENTLY and folds into the entries whose ids the endpoint serves; its
+ * failure warns once and the endpoint data stands alone.
+ * Shared core cache owns refresh, stale data and subscriptions; this provider
+ * owns protocol and pagination (the native side).
+ */
 import type { SubprocessHandle, SubprocessSpawnSpec } from '@deepseek-ai/dsh-subprocess';
 import type { LocalAgentModelDirectory } from '@khorsheed/dsh-local-agent/types';
-/** Default overall bound for one catalog probe (spawn → model/list answer). */
+import { type CodexEndpointAuth, type EndpointCheckFetch } from './endpoint-auth.ts';
+/** Default overall bound for one NATIVE catalog probe (spawn → model/list answer). */
 export declare const DEFAULT_CATALOG_PROBE_TIMEOUT_MS = 5000;
 /** Default lifetime of a completed probe's cached answer, per scoped home. */
 export declare const DEFAULT_CATALOG_TTL_MS: number;
@@ -12,7 +25,17 @@ export interface CodexModelCatalogDeps {
     readonly spawn: (spec: SubprocessSpawnSpec) => SubprocessHandle;
     /** Diagnostic sink; a degraded probe warns once, never throws. */
     readonly warn?: (message: string) => void;
-    /** Overall probe bound; tests inject a small value. */
+    /**
+     * The scope's endpoint credential resolver: the endpoint probe (the
+     * directory's vocabulary) reads the credential through it, and the native
+     * probe routes its spawn at the same relay (custom provider overrides plus
+     * the key in the env), or model/list fails for a scope that has no other
+     * credential. Absent = the pre-endpoint probe shape.
+     */
+    readonly endpoint?: (scopeHome: string) => Promise<CodexEndpointAuth>;
+    /** The HTTP fetch for the endpoint probe (injected in tests). */
+    readonly fetchImpl?: EndpointCheckFetch;
+    /** The native probe's overall bound; when set it also bounds the endpoint fetch (unset, the fetch gets 4× the native default — 20s, mirroring claude's catalog timeout). Tests inject a small value. */
     readonly timeoutMs?: number;
     /** Completed-probe cache lifetime; tests inject a small value. */
     readonly ttlMs?: number;
@@ -34,11 +57,32 @@ export declare class CodexModelCatalog {
     dispose(): void;
     refresh(homeDir: string, cwd?: string): Promise<readonly string[]>;
     /**
-     * One bounded probe: spawn the app-server against the scoped home, answer
-     * the initialize handshake exactly as the live driver shapes it, ask
-     * `model/list`, then tear the process down (stdin EOF → grace →
-     * terminate). The overall timeout kills the process on expiry. Failures propagate to the shared cache, which preserves prior data.
+     * One directory load: the endpoint's served id list is the vocabulary (the
+     * card's add dialog can only offer what the endpoint answers), folded
+     * CONCURRENTLY with the native app-server probe's metadata. The endpoint
+     * answers are deliberate:
+     *
+     * - no credential resolved → empty with a "save a key first" reason;
+     * - 401/403 → empty with the rejection (definitive — cached as data);
+     * - another HTTP status → empty with it (the relay serves no model route);
+     * - a transport failure THROWS, so the cache keeps the last good list and
+     *   retries on schedule instead of blanking a momentarily-down endpoint
+     *   (the openproxy relay once 500'd and recovered — 2026-10-22).
+     *
+     * The native probe's failure never fails the load: endpoint data alone is
+     * complete (it warns once via the deps sink). The endpoint fetch gets a
+     * 20s ceiling by default (mirrors claude's catalog timeout); the native
+     * probe keeps its own tighter bound internally.
+     */
+    private load;
+    /**
+     * One bounded NATIVE probe — the metadata-enrichment side of {@link load}:
+     * spawn the app-server against the scoped home, answer the initialize
+     * handshake exactly as the live driver shapes it, ask `model/list`, then
+     * tear the process down (stdin EOF → grace → terminate). The overall
+     * timeout kills the process on expiry. Failures propagate to the caller
+     * (load demotes them to a warn).
      */
-    private probe;
+    private probeNative;
 }
 //# sourceMappingURL=model-catalog.d.ts.map

package/lib/types/model-catalog.js

@@ -1,15 +1,32 @@
-/** Native app-server model/list discovery. Shared core cache owns refresh,
- * stale data and subscriptions; this provider owns protocol and pagination. */
+/**
+ * The codex model directory: the VOCABULARY comes from the configured
+ * endpoint (`GET <baseUrl>/v1/models` with the resolved credential — the same
+ * probe the settings card's verify button runs), never from the CLI's local
+ * registry: a local list cannot prove what the endpoint serves, and showing
+ * it made a credential that does not work look valid. The native app-server
+ * `model/list` probe survives as METADATA ENRICHMENT only — it alone carries
+ * the display names, the hidden candidates, the reasoning-effort options and
+ * the `isDefault` slug (the CLI's compiled default), so it still runs
+ * CONCURRENTLY and folds into the entries whose ids the endpoint serves; its
+ * failure warns once and the endpoint data stands alone.
+ * Shared core cache owns refresh, stale data and subscriptions; this provider
+ * owns protocol and pagination (the native side).
+ */
 import { dirname, join } from 'node:path';
 import { StringDecoder } from 'node:string_decoder';
 import { ModelDirectoryCache, modelDirectoryContextKey, delegationEnv } from '@khorsheed/dsh-local-agent';
 import { DEFAULT_DISPOSE_GRACE_MS } from './codex-cli-provider.js';
-/** Default overall bound for one catalog probe (spawn → model/list answer). */
+import { ENDPOINT_AUTH_FILE, endpointAuthEnv, endpointConfigOverrides, fetchEndpointModels, hasEndpointCredential, OFFICIAL_BASE_URL, } from './endpoint-auth.js';
+/** Default overall bound for one NATIVE catalog probe (spawn → model/list answer). */
 export const DEFAULT_CATALOG_PROBE_TIMEOUT_MS = 5_000;
 /** Default lifetime of a completed probe's cached answer, per scoped home. */
 export const DEFAULT_CATALOG_TTL_MS = 5 * 60_000;
 /** Grace between stdin EOF and terminate when the probe tears the process down. */
 const PROBE_EOF_GRACE_MS = 1_000;
+/** One directory answer that names why it is empty. */
+function unsupported(reason) {
+    return { entries: [], complete: false, customInput: true, unsupported: true, reason };
+}
 /** Preserve native metadata, including hidden candidates; reject malformed pages. */
 function catalogEntries(result) {
     const page = result;
@@ -61,7 +78,7 @@ export class CodexModelCatalog {
         this.cache = new ModelDirectoryCache({
             load: (key, signal) => {
                 const context = JSON.parse(key);
-                return this.probe(context.homeDir, context.cwd, signal);
+                return this.load(context.homeDir, context.cwd, signal);
             },
             ttlMs: deps.ttlMs ?? DEFAULT_CATALOG_TTL_MS,
             ...deps.now === undefined ? {} : { now: deps.now },
@@ -69,7 +86,9 @@ export class CodexModelCatalog {
         });
     }
     key(homeDir, cwd = homeDir) {
-        const files = [join(homeDir, 'config.toml'), join(homeDir, 'auth.json')];
+        // endpoint-auth.json re-keys the cache: a card credential write changes
+        // which catalog the probe would answer, so the next read re-probes.
+        const files = [join(homeDir, 'config.toml'), join(homeDir, 'auth.json'), join(homeDir, ENDPOINT_AUTH_FILE)];
         for (let directory = cwd;; directory = dirname(directory)) {
             files.push(join(directory, '.codex', 'config.toml'));
             if (dirname(directory) === directory)
@@ -90,18 +109,82 @@ export class CodexModelCatalog {
         return snapshot.entries.filter(entry => !entry.hidden).map(entry => entry.value);
     }
     /**
-     * One bounded probe: spawn the app-server against the scoped home, answer
-     * the initialize handshake exactly as the live driver shapes it, ask
-     * `model/list`, then tear the process down (stdin EOF → grace →
-     * terminate). The overall timeout kills the process on expiry. Failures propagate to the shared cache, which preserves prior data.
+     * One directory load: the endpoint's served id list is the vocabulary (the
+     * card's add dialog can only offer what the endpoint answers), folded
+     * CONCURRENTLY with the native app-server probe's metadata. The endpoint
+     * answers are deliberate:
+     *
+     * - no credential resolved → empty with a "save a key first" reason;
+     * - 401/403 → empty with the rejection (definitive — cached as data);
+     * - another HTTP status → empty with it (the relay serves no model route);
+     * - a transport failure THROWS, so the cache keeps the last good list and
+     *   retries on schedule instead of blanking a momentarily-down endpoint
+     *   (the openproxy relay once 500'd and recovered — 2026-10-22).
+     *
+     * The native probe's failure never fails the load: endpoint data alone is
+     * complete (it warns once via the deps sink). The endpoint fetch gets a
+     * 20s ceiling by default (mirrors claude's catalog timeout); the native
+     * probe keeps its own tighter bound internally.
+     */
+    async load(homeDir, cwd, signal) {
+        const endpoint = this.deps.endpoint === undefined
+            ? undefined
+            : await this.deps.endpoint(homeDir).catch(() => undefined);
+        if (!hasEndpointCredential(endpoint)) {
+            return unsupported('No endpoint credential configured — the model list loads from the endpoint once an API Key is saved');
+        }
+        const combined = AbortSignal.any([signal, AbortSignal.timeout(this.deps.timeoutMs ?? DEFAULT_CATALOG_PROBE_TIMEOUT_MS * 4)]);
+        const [result, native] = await Promise.all([
+            fetchEndpointModels({ ...endpoint, baseUrl: endpoint.baseUrl ?? OFFICIAL_BASE_URL }, this.deps.fetchImpl, combined),
+            this.probeNative(homeDir, cwd, combined).catch((error) => {
+                this.deps.warn?.(`local-agent-codex: the native model/list probe failed (metadata only — the endpoint's list stands): ${error instanceof Error ? error.message : String(error)}`);
+                return undefined;
+            }),
+        ]);
+        if (result.kind === 'unreachable') {
+            // Not a verdict: the cache keeps the last good list and retries.
+            throw new Error(`endpoint unreachable: ${result.message}`);
+        }
+        if (result.kind === 'malformed')
+            return unsupported('The endpoint answered but the model list did not parse (not /v1/models-shaped)');
+        if (result.kind === 'http') {
+            if (result.status === 401 || result.status === 403) {
+                return unsupported(`The endpoint rejected the credential (HTTP ${String(result.status)}) — the list loads once a valid key is saved`);
+            }
+            return unsupported(`The endpoint does not serve a model list (HTTP ${String(result.status)})`);
+        }
+        if (result.models.length === 0)
+            return unsupported('The endpoint serves no models');
+        const nativeByValue = new Map((native?.entries ?? []).map(entry => [entry.value, entry]));
+        // Served ids the native registry also knows carry its metadata over
+        // (label, description, hidden, reasoning — source stays 'native', which
+        // they are: the harness's own vocabulary, just read from the endpoint in
+        // force); ids only the endpoint serves are plain.
+        const entries = result.models.map(id => nativeByValue.get(id) ?? { value: id, label: id, source: 'native' });
+        const defaultModel = native?.defaultModel;
+        return {
+            entries, complete: true, customInput: true,
+            ...defaultModel === undefined ? {} : { defaultModel },
+        };
+    }
+    /**
+     * One bounded NATIVE probe — the metadata-enrichment side of {@link load}:
+     * spawn the app-server against the scoped home, answer the initialize
+     * handshake exactly as the live driver shapes it, ask `model/list`, then
+     * tear the process down (stdin EOF → grace → terminate). The overall
+     * timeout kills the process on expiry. Failures propagate to the caller
+     * (load demotes them to a warn).
      */
-    async probe(homeDir, cwd, signal) {
+    async probeNative(homeDir, cwd, signal) {
+        const endpoint = this.deps.endpoint === undefined
+            ? undefined
+            : await this.deps.endpoint(homeDir).catch(() => undefined);
         const spec = {
-            argv: ['codex', 'app-server', '--stdio'],
+            argv: ['codex', 'app-server', ...endpointConfigOverrides(endpoint), '--stdio'],
             cwd,
             stdio: { stdin: 'pipe', stdout: 'pipe', stderr: 'pipe' },
             graceMs: DEFAULT_DISPOSE_GRACE_MS,
-            env: delegationEnv({ CODEX_HOME: homeDir }),
+            env: delegationEnv({ CODEX_HOME: homeDir, ...endpointAuthEnv(endpoint) }),
         };
         const child = this.deps.spawn(spec);
         const decoder = new StringDecoder('utf8');

package/lib/types/provision.d.ts

@@ -1,18 +1,19 @@
 /**
- * Codex scoped-home provisioning: pin file-based credential storage so the
- * device-code login writes `auth.json` inside the scoped home. Codex's
- * `cli_auth_credentials_store` defaults to `auto` — on macOS that resolves
- * to the keychain, which would both leak credentials outside the scoped
- * home and defeat the `auth.json` presence check this package's records
- * adapter uses for authentication. An existing config is respected
- * untouched; sign-out removes the credential file.
+ * Codex scoped-home provisioning: a working `config.toml` (a person may edit
+ * it — custom providers, model, effort) plus the one-way sweep of the web
+ * login's leftover `auth.json`. The harness is endpoint-key only: a stale
+ * grant sitting next to an endpoint credential would keep authenticating the
+ * built-in provider while the status reads "unauthenticated", so provisioning
+ * deletes it on every boot (claude-code's OAuth-remnant sweep, same idea).
  * @module @khorsheed/dsh-local-agent-codex/provision
  */
 /**
- * Provision `<homeDir>/config.toml` unless one already exists. A present
- * config is respected untouched (a person may have edited it); otherwise a
- * minimal config pinning file-based credential storage is written so login
- * lands in the scoped home's `auth.json`.
+ * Provision the scoped home: ensure a `config.toml` exists (a minimal one —
+ * codex reads it for custom providers, model, and effort; the historical
+ * `cli_auth_credentials_store = "file"` pin stays so a hand-run `codex login`
+ * under the scoped home can never spill into the macOS keychain), and sweep
+ * the web login's leftover `auth.json` (the harness no longer consults it —
+ * endpoint key or nothing).
  * @param homeDir - the `codex` harness's scoped home.
  * @returns true when a config was written, false when one already existed.
  */
@@ -61,20 +62,4 @@ export declare function readCodexModel(homeDir: string): Promise<string | undefi
  * @returns the model identifiers the file carries.
  */
 export declare function listCodexConfigModels(homeDir: string): Promise<string[]>;
-/**
- * The credential file's modification stamp (epoch ms), undefined when absent.
- * A completed device-code login rewrites `auth.json`, so the stamp
- * distinguishes a fresh login from a leftover (possibly revoked) credential.
- * @param homeDir - the `codex` harness's scoped home.
- * @returns the marker's mtime, or undefined when no credential exists.
- */
-export declare function codexCredentialStamp(homeDir: string): Promise<number | undefined>;
-/**
- * Sign out of the scoped account: remove the credential file, so `/<name>
- * status` reports not authenticated and the next login authorizes a fresh
- * account. With `cli_auth_credentials_store = "file"` the credentials live
- * solely in `auth.json`, so removing it is the logout path.
- * @param homeDir - the `codex` harness's scoped home.
- */
-export declare function codexLogout(homeDir: string): Promise<void>;
 //# sourceMappingURL=provision.d.ts.map

package/lib/types/provision.js

@@ -1,31 +1,35 @@
 /**
- * Codex scoped-home provisioning: pin file-based credential storage so the
- * device-code login writes `auth.json` inside the scoped home. Codex's
- * `cli_auth_credentials_store` defaults to `auto` — on macOS that resolves
- * to the keychain, which would both leak credentials outside the scoped
- * home and defeat the `auth.json` presence check this package's records
- * adapter uses for authentication. An existing config is respected
- * untouched; sign-out removes the credential file.
+ * Codex scoped-home provisioning: a working `config.toml` (a person may edit
+ * it — custom providers, model, effort) plus the one-way sweep of the web
+ * login's leftover `auth.json`. The harness is endpoint-key only: a stale
+ * grant sitting next to an endpoint credential would keep authenticating the
+ * built-in provider while the status reads "unauthenticated", so provisioning
+ * deletes it on every boot (claude-code's OAuth-remnant sweep, same idea).
  * @module @khorsheed/dsh-local-agent-codex/provision
  */
-import { readFile, rm, stat, writeFile } from 'node:fs/promises';
+import { readFile, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
-/** Credential file inside the scoped home; its presence marks auth. */
-const AUTH_FILE = 'auth.json';
-/** Minimal scoped config: keep credentials in the scoped home. */
+/** Minimal scoped config: keep any hand-run login's credentials in the scoped home. */
 const SCOPED_CONFIG = `# Written by dsh-local-agent-codex: keep the device-code
 # credentials inside the scoped home (auth.json) instead of the OS keychain.
 cli_auth_credentials_store = "file"
 `;
+/** The web login's credential file, swept on every boot (endpoint-key only now). */
+const LEGACY_AUTH_FILE = 'auth.json';
 /**
- * Provision `<homeDir>/config.toml` unless one already exists. A present
- * config is respected untouched (a person may have edited it); otherwise a
- * minimal config pinning file-based credential storage is written so login
- * lands in the scoped home's `auth.json`.
+ * Provision the scoped home: ensure a `config.toml` exists (a minimal one —
+ * codex reads it for custom providers, model, and effort; the historical
+ * `cli_auth_credentials_store = "file"` pin stays so a hand-run `codex login`
+ * under the scoped home can never spill into the macOS keychain), and sweep
+ * the web login's leftover `auth.json` (the harness no longer consults it —
+ * endpoint key or nothing).
  * @param homeDir - the `codex` harness's scoped home.
  * @returns true when a config was written, false when one already existed.
  */
 export async function provisionCodexConfig(homeDir) {
+    // The sweep runs even when the config already exists: a leftover grant from
+    // the web-login era must not keep working past the upgrade.
+    await rm(join(homeDir, LEGACY_AUTH_FILE), { force: true });
     try {
         await readFile(join(homeDir, 'config.toml'));
         return false;
@@ -186,28 +190,3 @@ export async function listCodexConfigModels(homeDir) {
     }
     return found;
 }
-/**
- * The credential file's modification stamp (epoch ms), undefined when absent.
- * A completed device-code login rewrites `auth.json`, so the stamp
- * distinguishes a fresh login from a leftover (possibly revoked) credential.
- * @param homeDir - the `codex` harness's scoped home.
- * @returns the marker's mtime, or undefined when no credential exists.
- */
-export async function codexCredentialStamp(homeDir) {
-    try {
-        return (await stat(join(homeDir, AUTH_FILE))).mtimeMs;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Sign out of the scoped account: remove the credential file, so `/<name>
- * status` reports not authenticated and the next login authorizes a fresh
- * account. With `cli_auth_credentials_store = "file"` the credentials live
- * solely in `auth.json`, so removing it is the logout path.
- * @param homeDir - the `codex` harness's scoped home.
- */
-export async function codexLogout(homeDir) {
-    await rm(join(homeDir, AUTH_FILE), { force: true });
-}

package/lib/types/records.d.ts

@@ -13,13 +13,6 @@
  */
 import type { TokenUsage } from '@deepseek-ai/dsh-llm';
 import type { LocalAgentSessionRecord } from '@khorsheed/dsh-local-agent';
-/**
- * Whether the scoped home holds usable Codex credentials: the `auth.json`
- * file exists. Absent means the device-code flow has not completed.
- * @param homeDir - the `codex` harness's scoped home.
- * @returns true when credentials are present.
- */
-export declare function codexAuthenticated(homeDir: string): Promise<boolean>;
 /**
  * Parse the first line of a rollout file for the listing fields. Unknown or
  * malformed values yield an undefined record rather than failing the list.

package/lib/types/records.js

@@ -11,7 +11,7 @@
  * contents are always untrusted input.
  * @module @khorsheed/dsh-local-agent-codex/records
  */
-import { open, readFile, readdir } from 'node:fs/promises';
+import { open, readdir } from 'node:fs/promises';
 import { join, resolve } from 'node:path';
 /** Rollout files live under this directory inside the scoped home. */
 const SESSIONS_ROOT = 'sessions';
@@ -28,24 +28,6 @@ const FULL_BYTES = 8 * 1024 * 1024;
 const ROLLOUT_WINDOW_SLACK_MS = 5 * 60_000;
 /** Extra future slack for the window end (file timestamps may skew ahead). */
 const ROLLOUT_WINDOW_FUTURE_MS = 60_000;
-/**
- * Whether the scoped home holds usable Codex credentials: the `auth.json`
- * file exists. Absent means the device-code flow has not completed.
- * @param homeDir - the `codex` harness's scoped home.
- * @returns true when credentials are present.
- */
-export async function codexAuthenticated(homeDir) {
-    try {
-        await readFile(join(homeDir, 'auth.json'));
-        return true;
-    }
-    catch (error) {
-        // No auth file yet: not authenticated.
-        if (error.code === 'ENOENT')
-            return false;
-        throw error;
-    }
-}
 /**
  * Parse the first line of a rollout file for the listing fields. Unknown or
  * malformed values yield an undefined record rather than failing the list.

package/locale/en.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "Codex Delegation",
-    "description": "Delegate coding tasks to your locally installed Codex CLI."
+    "title": "Local Codex Delegation",
+    "description": "Delegate coding tasks to this machine's Codex CLI."
   }
 }

package/locale/zh.json

@@ -1,6 +1,6 @@
 {
   "meta": {
-    "title": "Codex 委派",
-    "description": "把编码任务委派给本地 Codex CLI，在隔离作用域中运行。"
+    "title": "本机 Codex 委派",
+    "description": "把编码任务委派给本机的 Codex CLI，在隔离作用域中运行。"
   }
 }