@lyogvce/dsh-codex-subscription 0.2.0 → 0.2.2

package/README.md

@@ -13,10 +13,11 @@
    - 每次请求前检查 `access_token` 的 JWT `exp`：距离过期不足 5 分钟时自动通过单飞锁（Single-flight）向 `https://auth.openai.com/oauth/token` 刷新，并通过 `realpathSync` + 临时文件 `rename` 原子写回 `auth.json`，保证与 Codex CLI 永不互踢下线。
 2. **零网络轮询的本地模型目录发现**
    - 直接读取 `~/.codex/models_cache.json`（按文件 `mtime` 与大小自动感知更新），提取 `visibility === "list"` 的模型及其 `context_window`、`supported_reasoning_levels`（自动将 `ultra` 映射为 DSH 的 `max` 档位）与 `default_verbosity`。
-3. **支持按配置屏蔽不想看到的模型（`disabledModels`）**
+3. **支持按配置屏蔽模型（`disabledModels`）与自定义上下文窗口（`contextWindows`）**
    - 在插件配置中通过 `disabledModels` 屏蔽指定模型 `slug`，保持模型选择器干净清爽。
+   - 通过 `contextWindows` 按模型 `slug` 自定义向 DSH 会话与自动压缩器暴露的预算窗口（例如设为 `400000`）；未配置时默认使用模型物理上限 `max_context_window`（`872000`）。同时底层 `PiCodexModel.contextWindow` 始终保持物理上限 `872000`，彻底防止 `dsh-llm-pi-ai` 在预算窗口与物理上限之间误判 `CONTEXT_WINDOW_EXCEEDED`。
 4. **原生多轮思考链回放与工具调用**
-   - 底层复用 DSH 内置的 `PiAiAdapter` 与 `@earendil-works/pi-ai` 的 `openaiCodexProvider()`，固定使用 `sse` 传输（含 `zstd` 请求体压缩、`session-id` / `thread-id` 缓存头、`reasoning.encrypted_content` 签名回放与图片自动缩放卸载）。
+   - 底层复用 DSH 内置的 `PiAiAdapter` 与 `@earendil-works/pi-ai` 的 `openaiCodexProvider()`，固定使用 `sse` 传输（含 `zstd` 请求体压缩、规范化纯 UUID `session-id` / `x-client-request-id` 缓存头、`reasoning.encrypted_content` 签名回放与图片自动缩放卸载）。
 5. **Codex 订阅限额内联展示（`conversation.input.right`）**
    - 当会话选中 `openai-codex` 模型时，在输入框右下角紧邻模型选择器左侧展示 `5h X% · 7d Y%` 限额胶囊（数据源来自 `https://chatgpt.com/backend-api/wham/usage`，内置 60 秒缓存、单飞合并与每轮回复结束自动刷新），点击可展开查看 5 小时 / 7 天窗口进度条、重置倒计时与手动刷新按钮；切换至其他 Provider 模型时自动隐藏。
 
@@ -32,9 +33,9 @@
 dsh plugin --profile desktop add @lyogvce/dsh-codex-subscription
 ```
 
-### 2. 配置屏蔽模型（`disabledModels`）
+### 2. 配置屏蔽模型（`disabledModels`）与上下文窗口（`contextWindows`）
 
-默认配置（见 [cordis.patch.yml](cordis.patch.yml)）已屏蔽旧模型与备用模型，仅保留主力模型（如 `gpt-6.1-sol`、`gpt-6-astra`）：
+默认配置（见 [cordis.patch.yml](cordis.patch.yml)）已屏蔽旧模型与备用模型，仅保留主力模型（如 `gpt-6.1-sol`、`gpt-6-astra`）。未配置 `contextWindows` 时，模型默认使用 `872000` 上下文窗口；若希望主动限制长上下文预算（例如统一设为 400K），可在 Profile 的 `cordis.patch.yml` 中配置：
 
 ```yaml
 - id: codex-subscription
@@ -46,9 +47,12 @@ dsh plugin --profile desktop add @lyogvce/dsh-codex-subscription
       - gpt-5.6-sol
       - gpt-5.6-terra
       - gpt-5.6-luna
+    contextWindows:
+      gpt-6.1-sol: 400000
+      gpt-6-astra: 400000
 ```
 
-可在 DSH 的 **设置 → 插件 → Codex 订阅直连** 页面或 `cordis.patch.yml` 中随时修改 `disabledModels`，实时生效无需重启。
+可在 DSH 的 **设置 → 插件 → Codex 订阅直连** 页面或 `cordis.patch.yml` 中随时修改 `disabledModels` 与 `contextWindows`，实时生效无需重启。
 
 ---
 

package/lib/client.js

@@ -15,6 +15,9 @@ window.__ModuleLoader__.load({
 		]);
 		//#endregion
 		//#region src/usage.ts
+		function safeErrorMessage(error) {
+			return (error instanceof Error ? error.message : String(error)).replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/\b(Bearer\s+)[^\s,;'"&]+/giu, "$1[redacted]").replace(/(\b(?:code|token|access_token|refresh_token|id_token)=)[^&\s"']+/giu, "$1[redacted]").replace(/("(?:access_token|refresh_token|id_token)"\s*:\s*")[^"]+"/giu, "$1[redacted]\"").slice(0, 1e3);
+		}
 		const USAGE_ROUTE_PATH = "/api/codex-subscription/usage";
 		function clampPercent(value) {
 			return Math.max(0, Math.min(100, Math.round(value)));
@@ -153,7 +156,7 @@ window.__ModuleLoader__.load({
 						setState({
 							quota: state.quota,
 							loading: false,
-							error: error instanceof Error ? error.message : String(error)
+							error: safeErrorMessage(error)
 						});
 					} finally {
 						if (seq === requestSeq) {

package/lib/index.d.ts

@@ -18,6 +18,7 @@ interface JwtClaims {
 }
 interface AuthManagerOptions {
   getCodexHome: () => string;
+  getClientVersion?: (() => string) | undefined;
   fetchImpl?: typeof fetch | undefined;
   now?: (() => number) | undefined;
 }
@@ -57,6 +58,7 @@ interface RawModelsCache {
   models?: RawCodexModelEntry[];
 }
 interface CodexModelMetadata {
+  readonly contextWindow: number;
   readonly supportVerbosity: boolean;
   readonly defaultVerbosity: 'low' | 'medium' | 'high';
   readonly defaultReasoningLevel?: string | undefined;
@@ -67,14 +69,16 @@ interface ParsedModelsCatalog {
   readonly metadataById: ReadonlyMap<string, CodexModelMetadata>;
 }
 declare function buildThinkingLevelMap(supportedLevels: unknown): Record<string, string | null>;
-declare function parseModelsCache(rawCache: RawModelsCache | null | undefined, baseModels: readonly PiCodexModel[], disabledModels?: readonly string[]): ParsedModelsCatalog;
+declare function parseModelsCache(rawCache: RawModelsCache | null | undefined, baseModels: readonly PiCodexModel[], disabledModels?: readonly string[], contextWindows?: Readonly<Record<string, number>>): ParsedModelsCatalog;
 //#endregion
 //#region src/request.d.ts
 declare function buildCodexUserAgent(version?: string): string;
-declare function buildCodexHeaders(existingHeaders: Record<string, string> | undefined, clientVersion: string, sessionId?: string | undefined): Record<string, string>;
+declare function normalizeCodexSessionId(sessionId: string | undefined): string | undefined;
+declare function buildCodexHeaders(existingHeaders?: Record<string, string> | undefined, clientVersion?: string): Record<string, string>;
 declare function sanitizeCodexPayload(payload: Record<string, unknown> | null | undefined, modelMeta?: CodexModelMetadata | undefined): Record<string, unknown> | null | undefined;
 //#endregion
 //#region src/usage.d.ts
+declare function safeErrorMessage(error: unknown): string;
 interface CodexQuotaWindow {
   readonly usedPercent: number;
   readonly resetAt: number | null;
@@ -131,18 +135,21 @@ export declare const __test: Readonly<{
   PROVIDER: "openai-codex";
   DISPLAY_NAME: "Codex";
   DEFAULT_DISABLED_MODELS: readonly string[];
+  DEFAULT_CONTEXT_WINDOW: 872000;
   CODEX_USAGE_URL: "https://chatgpt.com/backend-api/wham/usage";
   USAGE_ROUTE_PATH: "/api/codex-subscription/usage";
   DEFAULT_USAGE_TTL_MS: 60000;
   resolveCodexHome: typeof resolveCodexHome;
   decodeJwtPayload: typeof decodeJwtPayload;
   extractAccountId: typeof extractAccountId;
+  safeErrorMessage: typeof safeErrorMessage;
   createAuthManager: typeof createAuthManager;
   buildThinkingLevelMap: typeof buildThinkingLevelMap;
   parseModelsCache: typeof parseModelsCache;
   sanitizeCodexPayload: typeof sanitizeCodexPayload;
   buildCodexHeaders: typeof buildCodexHeaders;
   buildCodexUserAgent: typeof buildCodexUserAgent;
+  normalizeCodexSessionId: typeof normalizeCodexSessionId;
   parseUsagePayload: typeof parseUsagePayload;
   createUsageFetcher: typeof createUsageFetcher;
 }>;

package/lib/index.js

@@ -1,167 +1,18 @@
-import { readFileSync, realpathSync, statSync } from "node:fs";
+import { chmodSync, readFileSync, realpathSync, statSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import z from "@deepseek-ai/schemastery";
-import { LlmError, resolveImageAttachmentAccess } from "@deepseek-ai/dsh-llm";
+import { LlmError, resolveImageAttachmentAccess, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
 import { openaiCodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
 import { randomUUID } from "node:crypto";
 import { chmod, rename, writeFile } from "node:fs/promises";
 import { arch, homedir, platform, release } from "node:os";
 import { execFileSync } from "node:child_process";
-//#region src/auth.ts
-const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
-const CODEX_TOKEN_URL = "https://auth.openai.com/oauth/token";
-const TOKEN_REFRESH_LEAD_MS = 3e5;
-const TOKEN_REFRESH_TIMEOUT_MS = 3e4;
-function resolveCodexHome(envCodexHome = process.env.CODEX_HOME) {
-	const raw = typeof envCodexHome === "string" && envCodexHome.trim() !== "" ? envCodexHome.trim() : join(homedir(), ".codex");
-	return raw.startsWith("~/") ? join(homedir(), raw.slice(2)) : resolve(raw);
-}
-function decodeJwtPayload(token) {
-	if (typeof token !== "string") return void 0;
-	const parts = token.split(".");
-	const body = parts[1];
-	if (parts.length !== 3 || !body) return void 0;
-	try {
-		return JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
-	} catch {
-		return;
-	}
-}
-function extractAccountId(parsed, accessToken) {
-	const fileAccountId = parsed?.tokens?.account_id;
-	if (typeof fileAccountId === "string" && fileAccountId.trim() !== "") return fileAccountId.trim();
-	const authClaim = decodeJwtPayload(accessToken)?.["https://api.openai.com/auth"];
-	if (authClaim && typeof authClaim === "object" && !Array.isArray(authClaim)) {
-		const jwtAccountId = authClaim.chatgpt_account_id;
-		if (typeof jwtAccountId === "string" && jwtAccountId.trim() !== "") return jwtAccountId.trim();
-	}
-}
-async function writeJsonAtomic(filePath, data) {
-	let targetPath = filePath;
-	try {
-		targetPath = realpathSync(filePath);
-	} catch {}
-	const tempPath = join(dirname(targetPath), `.auth.json.tmp-${process.pid}-${randomUUID()}`);
-	const content = `${JSON.stringify(data, null, 2)}\n`;
-	await writeFile(tempPath, content, {
-		encoding: "utf8",
-		mode: 384
-	});
-	await chmod(tempPath, 384).catch(() => {});
-	await rename(tempPath, targetPath);
-}
-function createAuthManager(options) {
-	const { getCodexHome } = options;
-	const fetchFn = options.fetchImpl ?? globalThis.fetch;
-	const nowFn = options.now ?? Date.now;
-	let inflightRefresh;
-	let memoryFallback;
-	function readAuthState() {
-		const authPath = join(getCodexHome(), "auth.json");
-		let rawText;
-		try {
-			rawText = readFileSync(authPath, "utf8");
-		} catch (error) {
-			if (memoryFallback?.authPath === authPath) return memoryFallback;
-			throw new LlmError(`无法读取 Codex 登录凭证 (${authPath})，请先在终端运行 codex login`, "MISSING_CREDENTIAL", { cause: error });
-		}
-		let parsed;
-		try {
-			parsed = JSON.parse(rawText);
-		} catch (error) {
-			if (memoryFallback?.authPath === authPath) return memoryFallback;
-			throw new LlmError(`Codex 凭证文件格式损坏 (${authPath})`, "INVALID_CREDENTIAL", { cause: error });
-		}
-		const accessToken = parsed?.tokens?.access_token;
-		if (typeof accessToken !== "string" || accessToken.trim() === "") {
-			if (memoryFallback?.authPath === authPath) return memoryFallback;
-			throw new LlmError(`Codex 未登录 (${authPath} 中无 access_token)，请运行 codex login`, "MISSING_CREDENTIAL");
-		}
-		if (memoryFallback?.authPath === authPath && memoryFallback.accessToken !== accessToken && isTokenFresh(memoryFallback.accessToken)) return memoryFallback;
-		return {
-			authPath,
-			parsed,
-			accessToken
-		};
-	}
-	function isTokenFresh(accessToken) {
-		const exp = decodeJwtPayload(accessToken)?.exp;
-		if (typeof exp !== "number" || !Number.isFinite(exp)) return true;
-		return exp * 1e3 - nowFn() > TOKEN_REFRESH_LEAD_MS;
-	}
-	async function refreshToken(authPath, rawAuth) {
-		const refreshTok = rawAuth?.tokens?.refresh_token;
-		if (typeof refreshTok !== "string" || refreshTok.trim() === "") throw new LlmError("Codex 凭证已过期且缺少 refresh_token，请重新运行 codex login", "AUTH_FAILED");
-		const response = await fetchFn(CODEX_TOKEN_URL, {
-			method: "POST",
-			headers: { "Content-Type": "application/json" },
-			body: JSON.stringify({
-				client_id: CODEX_CLIENT_ID,
-				grant_type: "refresh_token",
-				refresh_token: refreshTok,
-				scope: "openid profile email"
-			}),
-			signal: AbortSignal.timeout(TOKEN_REFRESH_TIMEOUT_MS)
-		});
-		if (!response.ok) throw new LlmError(`Codex Token 刷新失败 (HTTP ${response.status})，请重新运行 codex login`, "AUTH_FAILED");
-		const fresh = await response.json();
-		if (typeof fresh?.access_token !== "string" || fresh.access_token.trim() === "") throw new LlmError("Codex Token 刷新响应缺少 access_token", "AUTH_FAILED");
-		const nextAuth = {
-			...rawAuth,
-			tokens: {
-				...rawAuth.tokens ?? {},
-				access_token: fresh.access_token,
-				...typeof fresh.id_token === "string" && fresh.id_token !== "" ? { id_token: fresh.id_token } : {},
-				...typeof fresh.refresh_token === "string" && fresh.refresh_token !== "" ? { refresh_token: fresh.refresh_token } : {}
-			},
-			last_refresh: new Date(nowFn()).toISOString()
-		};
-		memoryFallback = {
-			authPath,
-			parsed: nextAuth,
-			accessToken: fresh.access_token
-		};
-		try {
-			await writeJsonAtomic(authPath, nextAuth);
-		} catch (error) {
-			console.error(`[dsh-codex-subscription] 写回刷新后的 Codex auth.json 失败 (${authPath}): ${error instanceof Error ? error.message : String(error)}`);
-		}
-		return {
-			accessToken: fresh.access_token,
-			accountId: extractAccountId(nextAuth, fresh.access_token)
-		};
-	}
-	function toCredentials(state) {
-		return {
-			accessToken: state.accessToken,
-			accountId: extractAccountId(state.parsed, state.accessToken)
-		};
-	}
-	async function resolveCredentials() {
-		const current = readAuthState();
-		if (isTokenFresh(current.accessToken)) return toCredentials(current);
-		if (!inflightRefresh) inflightRefresh = (async () => {
-			const latest = readAuthState();
-			if (isTokenFresh(latest.accessToken)) return toCredentials(latest);
-			return refreshToken(latest.authPath, latest.parsed);
-		})().finally(() => {
-			inflightRefresh = void 0;
-		});
-		return inflightRefresh;
-	}
-	return {
-		resolveCredentials,
-		async resolveAccessToken() {
-			return (await resolveCredentials()).accessToken;
-		}
-	};
-}
-//#endregion
 //#region src/catalog.ts
 const PROVIDER = "openai-codex";
 const DISPLAY_NAME = "Codex";
 const DEFAULT_CLIENT_VERSION = "0.163.0";
+const DEFAULT_CONTEXT_WINDOW = 872e3;
 const THINKING_LEVELS = [
 	"off",
 	"minimal",
@@ -202,7 +53,10 @@ function normalizeDefaultReasoningLevel(rawLevel, thinkingLevelMap) {
 function isVerbosity(value) {
 	return value === "low" || value === "medium" || value === "high";
 }
-function parseModelsCache(rawCache, baseModels, disabledModels = []) {
+function isPositiveSafeInt(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+function parseModelsCache(rawCache, baseModels, disabledModels = [], contextWindows = {}) {
 	const disabledSet = new Set((Array.isArray(disabledModels) ? disabledModels : []).filter((id) => typeof id === "string").map((id) => id.trim()).filter(Boolean));
 	const clientVersion = typeof rawCache?.client_version === "string" && rawCache.client_version.trim() !== "" ? rawCache.client_version.trim() : DEFAULT_CLIENT_VERSION;
 	const rawModels = Array.isArray(rawCache?.models) ? rawCache.models : [];
@@ -218,8 +72,11 @@ function parseModelsCache(rawCache, baseModels, disabledModels = []) {
 		if (seen.has(id)) continue;
 		seen.add(id);
 		const base = baseModels.find((model) => model.id === id) ?? templateModel;
-		const contextWindow = typeof entry.context_window === "number" && Number.isSafeInteger(entry.context_window) && entry.context_window > 0 ? entry.context_window : typeof entry.max_context_window === "number" && Number.isSafeInteger(entry.max_context_window) && entry.max_context_window > 0 ? entry.max_context_window : base?.contextWindow ?? 272e3;
-		const maxTokens = Math.min(128e3, Math.max(32768, Math.floor(contextWindow / 4)));
+		const maxContextWindow = isPositiveSafeInt(entry.max_context_window) ? entry.max_context_window : DEFAULT_CONTEXT_WINDOW;
+		const configuredOverride = contextWindows && typeof contextWindows === "object" ? contextWindows[id] : void 0;
+		const targetContextWindow = isPositiveSafeInt(configuredOverride) ? configuredOverride : maxContextWindow;
+		const wireContextWindow = Math.max(maxContextWindow, targetContextWindow);
+		const maxTokens = Math.min(128e3, Math.max(32768, Math.floor(targetContextWindow / 4)));
 		const inputs = Array.isArray(entry.input_modalities) ? entry.input_modalities.filter((m) => m === "text" || m === "image") : ["text", "image"];
 		const thinkingLevelMap = buildThinkingLevelMap(entry.supported_reasoning_levels);
 		const hasReasoning = Object.entries(thinkingLevelMap).some(([k, v]) => k !== "off" && v !== null);
@@ -227,6 +84,7 @@ function parseModelsCache(rawCache, baseModels, disabledModels = []) {
 		const defaultVerbosity = isVerbosity(entry.default_verbosity) ? entry.default_verbosity : "low";
 		const defaultReasoningLevel = normalizeDefaultReasoningLevel(entry.default_reasoning_level, thinkingLevelMap);
 		metadataById.set(id, {
+			contextWindow: targetContextWindow,
 			supportVerbosity,
 			defaultVerbosity,
 			defaultReasoningLevel
@@ -240,7 +98,7 @@ function parseModelsCache(rawCache, baseModels, disabledModels = []) {
 			provider: PROVIDER,
 			baseUrl: "https://chatgpt.com/backend-api",
 			input: inputs.length > 0 ? inputs : ["text"],
-			contextWindow,
+			contextWindow: wireContextWindow,
 			maxTokens,
 			reasoning: hasReasoning,
 			thinkingLevelMap,
@@ -298,7 +156,12 @@ function buildCodexUserAgent(version = DEFAULT_CLIENT_VERSION) {
 	const term = platform() === "darwin" ? "Apple_Terminal/455" : platform() === "win32" ? "WindowsTerminal" : "xterm-256color";
 	return `codex_cli_rs/${version} (${detectOsLabel()}; ${cpu}) ${term}`;
 }
-function buildCodexHeaders(existingHeaders, clientVersion, sessionId) {
+function normalizeCodexSessionId(sessionId) {
+	if (typeof sessionId !== "string") return void 0;
+	const stripped = sessionId.trim().replace(/^session-/iu, "").trim();
+	return stripped.length > 0 ? stripped : void 0;
+}
+function buildCodexHeaders(existingHeaders, clientVersion = DEFAULT_CLIENT_VERSION) {
 	const headers = {};
 	for (const [key, value] of Object.entries(existingHeaders ?? {})) {
 		if (key.toLowerCase() === "user-agent") continue;
@@ -307,7 +170,6 @@ function buildCodexHeaders(existingHeaders, clientVersion, sessionId) {
 	headers.originator = "codex_cli_rs";
 	headers.version = clientVersion;
 	headers["User-Agent"] = buildCodexUserAgent(clientVersion);
-	if (typeof sessionId === "string" && sessionId.length > 0) headers["thread-id"] = sessionId;
 	return headers;
 }
 function sanitizeCodexPayload(payload, modelMeta) {
@@ -352,6 +214,9 @@ function sanitizeCodexPayload(payload, modelMeta) {
 }
 //#endregion
 //#region src/usage.ts
+function safeErrorMessage(error) {
+	return (error instanceof Error ? error.message : String(error)).replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/\b(Bearer\s+)[^\s,;'"&]+/giu, "$1[redacted]").replace(/(\b(?:code|token|access_token|refresh_token|id_token)=)[^&\s"']+/giu, "$1[redacted]").replace(/("(?:access_token|refresh_token|id_token)"\s*:\s*")[^"]+"/giu, "$1[redacted]\"").slice(0, 1e3);
+}
 const CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
 const USAGE_ROUTE_PATH = "/api/codex-subscription/usage";
 const DEFAULT_USAGE_TTL_MS = 6e4;
@@ -431,7 +296,7 @@ function createUsageFetcher(options) {
 		} catch (error) {
 			return {
 				ok: false,
-				error: error instanceof Error ? error.message : String(error),
+				error: safeErrorMessage(error),
 				...cached !== void 0 ? { quota: cached } : {}
 			};
 		}
@@ -453,6 +318,174 @@ function createUsageFetcher(options) {
 	};
 }
 //#endregion
+//#region src/auth.ts
+const CODEX_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+const CODEX_TOKEN_URL = "https://auth.openai.com/oauth/token";
+const TOKEN_REFRESH_LEAD_MS = 3e5;
+const TOKEN_REFRESH_TIMEOUT_MS = 3e4;
+function resolveCodexHome(envCodexHome = process.env.CODEX_HOME) {
+	const raw = typeof envCodexHome === "string" && envCodexHome.trim() !== "" ? envCodexHome.trim() : join(homedir(), ".codex");
+	return raw.startsWith("~/") ? join(homedir(), raw.slice(2)) : resolve(raw);
+}
+function decodeJwtPayload(token) {
+	if (typeof token !== "string") return void 0;
+	const parts = token.split(".");
+	const body = parts[1];
+	if (parts.length !== 3 || !body) return void 0;
+	try {
+		return JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+	} catch {
+		return;
+	}
+}
+function extractAccountId(parsed, accessToken) {
+	const fileAccountId = parsed?.tokens?.account_id;
+	if (typeof fileAccountId === "string" && fileAccountId.trim() !== "") return fileAccountId.trim();
+	const authClaim = decodeJwtPayload(accessToken)?.["https://api.openai.com/auth"];
+	if (authClaim && typeof authClaim === "object" && !Array.isArray(authClaim)) {
+		const jwtAccountId = authClaim.chatgpt_account_id;
+		if (typeof jwtAccountId === "string" && jwtAccountId.trim() !== "") return jwtAccountId.trim();
+	}
+}
+async function writeJsonAtomic(filePath, data) {
+	let targetPath = filePath;
+	try {
+		targetPath = realpathSync(filePath);
+	} catch {}
+	const tempPath = join(dirname(targetPath), `.auth.json.tmp-${process.pid}-${randomUUID()}`);
+	const content = `${JSON.stringify(data, null, 2)}\n`;
+	await writeFile(tempPath, content, {
+		encoding: "utf8",
+		mode: 384
+	});
+	await chmod(tempPath, 384).catch(() => {});
+	await rename(tempPath, targetPath);
+}
+function createAuthManager(options) {
+	const { getCodexHome } = options;
+	const fetchFn = options.fetchImpl ?? globalThis.fetch;
+	const nowFn = options.now ?? Date.now;
+	let inflightRefresh;
+	let memoryFallback;
+	function readAuthState() {
+		const authPath = join(getCodexHome(), "auth.json");
+		if (process.platform !== "win32") try {
+			const stat = statSync(authPath);
+			if ((stat.mode & 256) === 0) {
+				if (memoryFallback?.authPath === authPath) return memoryFallback;
+				const octal = (stat.mode & 511).toString(8).padStart(4, "0");
+				throw new LlmError(`Codex 凭证文件属主不可读 (${authPath}, mode ${octal})，请执行 chmod 600 "${authPath}"`, "INVALID_CREDENTIAL");
+			}
+			if ((stat.mode & 63) !== 0) try {
+				chmodSync(realpathSync(authPath), 384);
+			} catch {}
+		} catch (error) {
+			if (error instanceof LlmError) throw error;
+		}
+		let rawText;
+		try {
+			rawText = readFileSync(authPath, "utf8");
+		} catch (error) {
+			if (memoryFallback?.authPath === authPath) return memoryFallback;
+			const code = error?.code;
+			if (code === "EACCES" || code === "EPERM") throw new LlmError(`Codex 凭证文件无读取权限 (${authPath})，请执行 chmod 600 "${authPath}"`, "INVALID_CREDENTIAL", { cause: error });
+			throw new LlmError(`无法读取 Codex 登录凭证 (${authPath})，请先在终端运行 codex login`, "MISSING_CREDENTIAL", { cause: error });
+		}
+		let parsed;
+		try {
+			parsed = JSON.parse(rawText);
+		} catch (error) {
+			if (memoryFallback?.authPath === authPath) return memoryFallback;
+			throw new LlmError(`Codex 凭证文件格式损坏 (${authPath})`, "INVALID_CREDENTIAL", { cause: error });
+		}
+		const accessToken = parsed?.tokens?.access_token;
+		if (typeof accessToken !== "string" || accessToken.trim() === "") {
+			if (memoryFallback?.authPath === authPath) return memoryFallback;
+			throw new LlmError(`Codex 未登录 (${authPath} 中无 access_token)，请运行 codex login`, "MISSING_CREDENTIAL");
+		}
+		if (memoryFallback?.authPath === authPath && memoryFallback.accessToken !== accessToken && isTokenFresh(memoryFallback.accessToken)) return memoryFallback;
+		return {
+			authPath,
+			parsed,
+			accessToken
+		};
+	}
+	function isTokenFresh(accessToken) {
+		const exp = decodeJwtPayload(accessToken)?.exp;
+		if (typeof exp !== "number" || !Number.isFinite(exp)) return true;
+		return exp * 1e3 - nowFn() > TOKEN_REFRESH_LEAD_MS;
+	}
+	async function refreshToken(authPath, rawAuth) {
+		const refreshTok = rawAuth?.tokens?.refresh_token;
+		if (typeof refreshTok !== "string" || refreshTok.trim() === "") throw new LlmError("Codex 凭证已过期且缺少 refresh_token，请重新运行 codex login", "AUTH_FAILED");
+		const response = await fetchFn(CODEX_TOKEN_URL, {
+			method: "POST",
+			headers: buildCodexHeaders({
+				"Content-Type": "application/json",
+				Accept: "application/json"
+			}, options.getClientVersion?.()),
+			body: JSON.stringify({
+				client_id: CODEX_CLIENT_ID,
+				grant_type: "refresh_token",
+				refresh_token: refreshTok,
+				scope: "openid profile email"
+			}),
+			signal: AbortSignal.timeout(TOKEN_REFRESH_TIMEOUT_MS)
+		});
+		if (!response.ok) throw new LlmError(`Codex Token 刷新失败 (HTTP ${response.status})，请重新运行 codex login`, "AUTH_FAILED");
+		const fresh = await response.json();
+		if (typeof fresh?.access_token !== "string" || fresh.access_token.trim() === "") throw new LlmError("Codex Token 刷新响应缺少 access_token", "AUTH_FAILED");
+		const nextAuth = {
+			...rawAuth,
+			tokens: {
+				...rawAuth.tokens ?? {},
+				access_token: fresh.access_token,
+				...typeof fresh.id_token === "string" && fresh.id_token !== "" ? { id_token: fresh.id_token } : {},
+				...typeof fresh.refresh_token === "string" && fresh.refresh_token !== "" ? { refresh_token: fresh.refresh_token } : {}
+			},
+			last_refresh: new Date(nowFn()).toISOString()
+		};
+		memoryFallback = {
+			authPath,
+			parsed: nextAuth,
+			accessToken: fresh.access_token
+		};
+		try {
+			await writeJsonAtomic(authPath, nextAuth);
+		} catch (error) {
+			console.error(`[dsh-codex-subscription] 写回刷新后的 Codex auth.json 失败 (${authPath}): ${safeErrorMessage(error)}`);
+		}
+		return {
+			accessToken: fresh.access_token,
+			accountId: extractAccountId(nextAuth, fresh.access_token)
+		};
+	}
+	function toCredentials(state) {
+		return {
+			accessToken: state.accessToken,
+			accountId: extractAccountId(state.parsed, state.accessToken)
+		};
+	}
+	async function resolveCredentials() {
+		const current = readAuthState();
+		if (isTokenFresh(current.accessToken)) return toCredentials(current);
+		if (!inflightRefresh) inflightRefresh = (async () => {
+			const latest = readAuthState();
+			if (isTokenFresh(latest.accessToken)) return toCredentials(latest);
+			return refreshToken(latest.authPath, latest.parsed);
+		})().finally(() => {
+			inflightRefresh = void 0;
+		});
+		return inflightRefresh;
+	}
+	return {
+		resolveCredentials,
+		async resolveAccessToken() {
+			return (await resolveCredentials()).accessToken;
+		}
+	};
+}
+//#endregion
 //#region src/index.ts
 const name = "codex-subscription";
 const inject = ["llm"];
@@ -460,7 +493,10 @@ const STREAM_IDLE_TIMEOUT_MS = 3e5;
 const MAX_REQUEST_IMAGE_BYTES = 20971520;
 const REQUEST_IMAGE_PIXEL_BUDGET = 4194304;
 const REQUEST_IMAGE_MAX_BYTES = 1048576;
-const Config = z.object({ disabledModels: z.array(z.string()).default([...DEFAULT_DISABLED_MODELS]).description("在模型选择器中屏蔽的模型 slug 列表").volatile() });
+const Config = z.object({
+	disabledModels: z.array(z.string()).default([...DEFAULT_DISABLED_MODELS]).description("在模型选择器中屏蔽的模型 slug 列表").volatile(),
+	contextWindows: z.dict(z.number()).default({}).description("按模型 slug 覆盖上下文窗口大小（tokens），未配置时默认使用 872000").volatile()
+});
 function readVolatile(field, fallback) {
 	const value = typeof field?.get === "function" ? field.get() : field;
 	return value === void 0 || value === null ? fallback : value;
@@ -473,23 +509,34 @@ var CodexPiAiAdapter = class extends PiAiAdapter {
 	}
 	modelInfo(snapshot, provider, model) {
 		const info = super.modelInfo(snapshot, provider, model);
-		const defaultLevel = this.#getModelMetadata(model)?.defaultReasoningLevel;
-		if (defaultLevel !== void 0 && info.reasoning !== void 0 && info.reasoning.efforts.some((e) => e.id === defaultLevel)) return {
+		const meta = this.#getModelMetadata(model);
+		if (meta === void 0) return info;
+		const defaultLevel = meta.defaultReasoningLevel;
+		const hasDefaultLevel = defaultLevel !== void 0 && info.reasoning !== void 0 && info.reasoning.efforts.some((e) => e.id === defaultLevel);
+		return {
 			...info,
-			reasoning: {
+			context: {
+				...info.context ?? {},
+				contextWindow: meta.contextWindow
+			},
+			...hasDefaultLevel && info.reasoning !== void 0 ? { reasoning: {
 				...info.reasoning,
 				defaultEffort: defaultLevel
-			}
+			} } : {}
 		};
-		return info;
 	}
 };
 function apply(ctx, config = {}) {
 	const baseProvider = openaiCodexProvider();
 	const baseModels = baseProvider.getModels();
+	const retryPolicy = resolveRetryPolicy(void 0, "codex-subscription retryPolicy");
 	const getCodexHome = () => resolveCodexHome();
 	const getDisabledModels = () => readVolatile(config.disabledModels, DEFAULT_DISABLED_MODELS);
-	const authManager = createAuthManager({ getCodexHome });
+	const getContextWindows = () => readVolatile(config.contextWindows, {});
+	const authManager = createAuthManager({
+		getCodexHome,
+		getClientVersion: () => ensureSnapshot().catalog.clientVersion
+	});
 	let fileSignature;
 	let cachedRaw;
 	let warnedMissingFile = false;
@@ -514,11 +561,13 @@ function apply(ctx, config = {}) {
 	function wrapOptions(model, options = {}) {
 		const { catalog } = ensureSnapshot();
 		const modelMeta = catalog.metadataById.get(model?.id);
-		const { temperature: _temperature, onPayload, ...rest } = options;
+		const { temperature: _temperature, sessionId, onPayload, ...rest } = options;
+		const normalizedSessionId = normalizeCodexSessionId(sessionId);
 		return {
 			...rest,
+			...normalizedSessionId !== void 0 ? { sessionId: normalizedSessionId } : {},
 			transport: "sse",
-			headers: buildCodexHeaders(rest.headers, catalog.clientVersion, rest.sessionId),
+			headers: buildCodexHeaders(rest.headers, catalog.clientVersion),
 			async onPayload(payload, requestModel) {
 				return sanitizeCodexPayload(await onPayload?.(payload, requestModel) ?? payload, modelMeta);
 			}
@@ -549,6 +598,7 @@ function apply(ctx, config = {}) {
 	function ensureSnapshot() {
 		const cachePath = join(getCodexHome(), "models_cache.json");
 		const disabled = getDisabledModels();
+		const contextWindows = getContextWindows();
 		try {
 			const stat = statSync(cachePath);
 			const nextFileSig = `${cachePath}:${stat.mtimeMs}:${stat.size}`;
@@ -560,12 +610,16 @@ function apply(ctx, config = {}) {
 		} catch (error) {
 			if (!warnedMissingFile) {
 				warnedMissingFile = true;
-				console.error(`[dsh-codex-subscription] 读取 Codex models_cache.json 失败 (${cachePath}): ${error instanceof Error ? error.message : String(error)}`);
+				console.error(`[dsh-codex-subscription] 读取 Codex models_cache.json 失败 (${cachePath}): ${safeErrorMessage(error)}`);
 			}
 		}
-		const nextSnapshotSig = JSON.stringify([fileSignature ?? "none", disabled]);
+		const nextSnapshotSig = JSON.stringify([
+			fileSignature ?? "none",
+			disabled,
+			contextWindows
+		]);
 		if (nextSnapshotSig !== snapshotSignature || currentProfilesMap === void 0) {
-			currentCatalog = cachedRaw !== void 0 ? parseModelsCache(cachedRaw, baseModels, disabled) : {
+			currentCatalog = cachedRaw !== void 0 ? parseModelsCache(cachedRaw, baseModels, disabled, contextWindows) : {
 				clientVersion: DEFAULT_CLIENT_VERSION,
 				models: [],
 				metadataById: new Map()
@@ -574,6 +628,7 @@ function apply(ctx, config = {}) {
 				provider: PROVIDER,
 				displayName: DISPLAY_NAME,
 				piProvider,
+				retryPolicy,
 				configuredMaxTokens: new Map(),
 				modelErrors: new Map(),
 				maxRequestImageBytes: MAX_REQUEST_IMAGE_BYTES,
@@ -647,18 +702,21 @@ const __test = Object.freeze({
 	PROVIDER,
 	DISPLAY_NAME,
 	DEFAULT_DISABLED_MODELS,
+	DEFAULT_CONTEXT_WINDOW,
 	CODEX_USAGE_URL,
 	USAGE_ROUTE_PATH,
 	DEFAULT_USAGE_TTL_MS,
 	resolveCodexHome,
 	decodeJwtPayload,
 	extractAccountId,
+	safeErrorMessage,
 	createAuthManager,
 	buildThinkingLevelMap,
 	parseModelsCache,
 	sanitizeCodexPayload,
 	buildCodexHeaders,
 	buildCodexUserAgent,
+	normalizeCodexSessionId,
 	parseUsagePayload,
 	createUsageFetcher
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lyogvce/dsh-codex-subscription",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "复用本机 ~/.codex 订阅凭证与 models_cache.json 模型缓存，在 DSH 中通过 SSE 直连调用 Codex 模型。",
   "type": "module",
   "main": "./lib/index.js",