@mewbleh/purrx 1.0.11 → 1.0.14

package/bin/purrx.js

@@ -335,6 +335,15 @@ async function main() {
     case "status":
       cmdStatus();
       break;
+    case "version":
+    case "--version":
+    case "-v": {
+      const { createRequire } = await import("node:module");
+      const require = createRequire(import.meta.url);
+      const pkg = require("../package.json");
+      console.log(`purrx ${pkg.version}`);
+      break;
+    }
     case "help":
     case "--help":
     case "-h":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mewbleh/purrx",
-  "version": "1.0.11",
+  "version": "1.0.14",
   "description": "purrx, a lightweight AI coding agent for your terminal",
   "type": "module",
   "main": "src/index.js",

package/src/api/client.js

@@ -1,26 +1,40 @@
-import { API_BASE, CHATGPT_BASE } from "../config.js";
+import { API_BASE, CHATGPT_BASE, CODEX_CLI_VERSION } from "../config.js";
+
+// Models that take the Responses API reasoning fields (gpt-5 family, o-series,
+// and codex variants). The official Codex client always sends a reasoning block
+// for these and requests encrypted reasoning back since store is false.
+function isReasoningModel(model) {
+  return /^(gpt-5|o\d|codex)/i.test(model) || /-codex\b/i.test(model);
+}
 
 // Builds the request URL and headers for the resolved auth mode.
+//
+// The ChatGPT-codex header set mirrors the official Codex CLI
+// (codex-rs default_client + BearerAuthProvider + build_session_headers):
+//   Authorization, ChatGPT-Account-ID, originator, User-Agent,
+//   OpenAI-Beta, session-id.
 /**
  * @param {import("../types.js").AuthInfo} authInfo
+ * @param {string} [sessionId]
  * @returns {{ url: string, headers: Record<string, string> }}
  */
-function buildRequest(authInfo) {
+function buildRequest(authInfo, sessionId) {
   if (authInfo.mode === "chatgpt") {
-    // These headers match the proven-working ChatGPT-codex request shape.
-    // The OpenAI-Beta header is required; the backend rejects requests without
-    // it (with a misleading "model not supported" error). Do NOT add an
-    // `originator` header here: the codex backend does not expect it on this
-    // path and its presence can cause the request to be rejected.
     /** @type {Record<string, string>} */
     const headers = {
       "Content-Type": "application/json",
       Authorization: `Bearer ${authInfo.accessToken}`,
       "OpenAI-Beta": "responses=experimental",
+      originator: "codex_cli_rs",
+      // The codex backend requires this version header to accept the request.
+      version: CODEX_CLI_VERSION,
+      "User-Agent": `codex_cli_rs/${CODEX_CLI_VERSION} (purrx)`,
     };
     if (authInfo.accountId) {
-      headers["chatgpt-account-id"] = authInfo.accountId;
+      // Casing matches the official client (BearerAuthProvider).
+      headers["ChatGPT-Account-ID"] = authInfo.accountId;
     }
+    if (sessionId) headers["session-id"] = sessionId;
     return { url: `${CHATGPT_BASE}/responses`, headers };
   }
   // API-key mode.
@@ -44,7 +58,7 @@ function buildRequest(authInfo) {
  * @param {import("../types.js").HistoryItem[]} req.input
  * @param {import("../types.js").ToolDefinition[]} [req.tools]
  * @param {string} [req.instructions]
- * @param {string} [req.sessionId] stable id used for prompt caching
+ * @param {string} [req.sessionId] stable id, sent as session-id + prompt_cache_key
  * @param {{ onText?: (delta: string) => void, onEvent?: (event: any) => void }} [handlers]
  * @returns {Promise<any>}
  */
@@ -52,26 +66,44 @@ export async function streamResponse(
   { authInfo, model, input, tools, instructions, sessionId },
   handlers = {}
 ) {
-  const { url, headers } = buildRequest(authInfo);
-
-  // Minimal request shape that the ChatGPT-codex backend accepts. The backend
-  // requires `instructions` to be present (a string, even if empty) and
-  // `store: false`. We deliberately avoid adding reasoning/include/cache fields
-  // here: the backend rejects requests it doesn't recognize as a valid Codex
-  // session with a misleading "model not supported" error, and the known-good
-  // client sends only these fields.
+  const { url, headers } = buildRequest(authInfo, sessionId);
+
+  // Request body matching the official Codex ResponsesApiRequest. These fields
+  // are always present in the real client; sending a stripped-down body is what
+  // triggers the backend's misleading "model is not supported" rejection.
   /** @type {Record<string, any>} */
   const payload = {
     model,
     instructions: instructions || "",
     input,
-    stream: true,
+    tool_choice: "auto",
+    parallel_tool_calls: false,
     store: false,
+    stream: true,
+    include: [],
   };
 
+  if (isReasoningModel(model)) {
+    payload.reasoning = { effort: "medium", summary: "auto" };
+    payload.include = ["reasoning.encrypted_content"];
+  }
+
+  if (sessionId) payload.prompt_cache_key = sessionId;
+
   if (tools && tools.length) {
     payload.tools = tools;
-    payload.tool_choice = "auto";
+  }
+
+  // Debug: dump the exact outgoing request when PURRX_DEBUG is set. Auth tokens
+  // are redacted. This is the fastest way to diagnose backend rejections.
+  if (process.env.PURRX_DEBUG) {
+    const safeHeaders = { ...headers };
+    if (safeHeaders.Authorization) safeHeaders.Authorization = "Bearer <redacted>";
+    console.error(`\n[purrx] POST ${url}`);
+    console.error(`[purrx] headers: ${JSON.stringify(safeHeaders)}`);
+    console.error(
+      `[purrx] body: ${JSON.stringify({ ...payload, input: `<${input.length} items>` })}`
+    );
   }
 
   const resp = await fetch(url, {
@@ -82,6 +114,9 @@ export async function streamResponse(
 
   if (!resp.ok || !resp.body) {
     const text = await resp.text().catch(() => "");
+    if (process.env.PURRX_DEBUG) {
+      console.error(`[purrx] response ${resp.status}: ${text}`);
+    }
     throw new Error(`API request failed (${resp.status}): ${text}`);
   }
 

package/src/auth/tokens.js

@@ -111,7 +111,7 @@ export async function refreshTokens(refreshToken) {
       client_id: OAUTH_CLIENT_ID,
       grant_type: "refresh_token",
       refresh_token: refreshToken,
-      scope: "openid profile email",
+      scope: "openid profile email offline_access",
     }),
   });
   if (!resp.ok) {

package/src/config.js

@@ -13,6 +13,12 @@ export const OAUTH_SCOPE =
 export const API_BASE = "https://api.openai.com/v1";
 export const CHATGPT_BASE = "https://chatgpt.com/backend-api/codex";
 
+// The official Codex client sends a `version` header (its CLI version) on every
+// request. The ChatGPT-codex backend uses it to recognize a legitimate Codex
+// client; omitting it causes a generic "model not supported" rejection.
+// Override with PURRX_CODEX_VERSION to match your installed Codex CLI.
+export const CODEX_CLI_VERSION = process.env.PURRX_CODEX_VERSION || "0.5.0";
+
 // Default model. gpt-5-codex is the default Codex coding model and works on
 // both API-key and ChatGPT-account auth. Override with PURRX_MODEL.
 export const DEFAULT_MODEL = process.env.PURRX_MODEL || "gpt-5-codex";