@opengeni/codex 0.2.1 → 0.2.2

package/LICENSE

@@ -0,0 +1,190 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Cloudgeni-ai
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/{chunk-2ESTGQ57.js → chunk-KKKJKW6M.js}

@@ -12,13 +12,17 @@ var CODEX_ID_TOKEN_AUTH_CLAIM = "https://api.openai.com/auth";
 var CODEX_PROVIDER_ID = "codex-subscription";
 var CODEX_PROVIDER_BASE_URL = "https://chatgpt.com/backend-api";
 var CODEX_MODEL_ID_PREFIX = "codex/";
-var CODEX_FALLBACK_MODEL_SLUGS = [
-  "gpt-5.5",
-  "gpt-5.4",
-  "gpt-5.4-mini",
-  "gpt-5.3-codex-spark"
-];
-var CODEX_CLIENT_VERSION = "0.142.4";
+var CODEX_FALLBACK_MODEL_SLUGS = ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"];
+var CODEX_MODEL_CONTEXT_WINDOW_TOKENS = 272e3;
+var CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT = 95;
+var CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS = Math.floor(
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT / 100
+);
+var CODEX_AUTO_COMPACTION_PERCENT = 90;
+var CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT = Math.floor(
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_AUTO_COMPACTION_PERCENT / 100
+);
+var CODEX_CLIENT_VERSION = "0.144.4";
 var CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1e3;
 var CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1e3;
 var CODEX_APPS_MCP_SERVER_ID = "codex_apps";
@@ -42,6 +46,11 @@ export {
   CODEX_PROVIDER_BASE_URL,
   CODEX_MODEL_ID_PREFIX,
   CODEX_FALLBACK_MODEL_SLUGS,
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+  CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT,
+  CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
+  CODEX_AUTO_COMPACTION_PERCENT,
+  CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,
   CODEX_CLIENT_VERSION,
   CODEX_REFRESH_WINDOW_MS,
   CODEX_REFRESH_FALLBACK_MS,
@@ -51,4 +60,4 @@ export {
   CODEX_APPS_STARTUP_TIMEOUT_MS,
   CODEX_APPS_REQUIRED_SCOPES
 };
-//# sourceMappingURL=chunk-2ESTGQ57.js.map
+//# sourceMappingURL=chunk-KKKJKW6M.js.map

package/dist/chunk-KKKJKW6M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["// Wire constants for the ChatGPT/Codex subscription backend.\n// Source: CODEX-SUBSCRIPTION-SPEC.md (verified against openai/codex codex-rs).\n\nexport const CODEX_ISSUER = \"https://auth.openai.com\";\nexport const CODEX_CLIENT_ID = \"app_EMoamEEZ73f0CkXaXp7hrann\"; // spec §1.1 (manager.rs:1444)\nexport const CODEX_AUTH_BASE = `${CODEX_ISSUER}/api/accounts`; // device endpoints (device_code_auth.rs:164)\nexport const CODEX_TOKEN_URL = `${CODEX_ISSUER}/oauth/token`; // exchange (form) + refresh (json)\nexport const CODEX_DEVICE_VERIFICATION_URL = `${CODEX_ISSUER}/codex/device`;\nexport const CODEX_DEVICE_REDIRECT_URI = `${CODEX_ISSUER}/deviceauth/callback`;\n\n// Model requests: base already includes /codex; client appends /responses, /models.\nexport const CODEX_RESPONSES_BASE = \"https://chatgpt.com/backend-api/codex\";\n// Usage lives on the WHAM base — NOT under /codex (verified, spec §1.8a).\nexport const CODEX_WHAM_BASE = \"https://chatgpt.com/backend-api\";\n\nexport const CODEX_ORIGINATOR = \"codex_cli_rs\"; // whitelisted originator (spec §1.2)\nexport const CODEX_ID_TOKEN_AUTH_CLAIM = \"https://api.openai.com/auth\";\n\n// Synthetic registry-provider identity. The provider's baseURL is the bare\n// /backend-api (NOT /codex) — codexSubscriptionFetch rewrites /responses ->\n// /codex/responses. Codex model ids are namespaced `codex/<slug>` so they never\n// collide with the built-in OpenAI provider's model ids; the fetch's resolveModel\n// strips the prefix before the slug reaches the backend.\nexport const CODEX_PROVIDER_ID = \"codex-subscription\";\nexport const CODEX_PROVIDER_BASE_URL = \"https://chatgpt.com/backend-api\";\nexport const CODEX_MODEL_ID_PREFIX = \"codex/\";\n\n// The only Codex subscription models OpenGeni exposes. The live GET /models\n// catalog must contain every exact slug; older or internal models never broaden\n// this product allowlist.\nexport const CODEX_FALLBACK_MODEL_SLUGS = [\"gpt-5.6-sol\", \"gpt-5.6-terra\", \"gpt-5.6-luna\"] as const;\n\n// Live Codex model-catalog values for every exposed gpt-5.6 subscription slug.\n// Verified 2026-07-14 against Codex CLI 0.144.4's freshly fetched\n// ~/.codex/models_cache.json and the matching openai/codex core derivations:\n//   raw context window                = 272,000\n//   effective input window (95%)      = 258,400\n//   automatic compaction limit (90%)  = 244,800\n// Keep all three explicit: the effective ceiling is a hard input guard while\n// the lower auto-compact limit is the proactive checkpoint trigger.\nexport const CODEX_MODEL_CONTEXT_WINDOW_TOKENS = 272_000;\nexport const CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT = 95;\nexport const CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS = Math.floor(\n  (CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT) / 100,\n);\nexport const CODEX_AUTO_COMPACTION_PERCENT = 90;\nexport const CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT = Math.floor(\n  (CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_AUTO_COMPACTION_PERCENT) / 100,\n);\n\n// Sent as the `version` header and inside the User-Agent. Staging-proven on\n// 2026-07-09: 0.142.4 filtered every GPT-5.6 slug out of GET /models, while the\n// official Codex 0.144.0+ releases return all three exact slugs above. Keep\n// this pinned to the latest stable Codex release we have verified end-to-end.\nexport const CODEX_CLIENT_VERSION = \"0.144.4\";\n\nexport const CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1000; // proactive refresh when within 5 min of exp (spec §1.1)\nexport const CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1000; // 8 days when exp is unparseable\n\n// ── Apps / connectors MCP (spec §1.10, §E) ───────────────────────────────────\n// One server-side MCP exposes ALL the user's ChatGPT/Codex connectors\n// (gmail/github/linear/slack/sentry/drive/calendar/…). Streamable HTTP, always.\nexport const CODEX_APPS_MCP_SERVER_ID = \"codex_apps\"; // tools surface as mcp__codex_apps__<tool>\nexport const CODEX_APPS_MCP_SERVER_NAME = \"codex_apps\"; // MCP `name` — MUST equal the id so the SDK namespaces tools as mcp__codex_apps__*\nexport const CODEX_APPS_MCP_URL = \"https://chatgpt.com/backend-api/ps/mcp\"; // live URL (NOT /codex, NOT the legacy /wham/apps)\nexport const CODEX_APPS_STARTUP_TIMEOUT_MS = 30_000; // startup_timeout 30s (spec §1.10) — maps to timeoutMs on this server only\n// Connector scopes that the apps MCP requires. Present ONLY when granted at\n// browser-authorize time; the device-code path CANNOT be confirmed to grant\n// them, so treat connector availability as runtime-discovered (spec §1.10 / §E).\nexport const CODEX_APPS_REQUIRED_SCOPES = [\"api.connectors.read\", \"api.connectors.invoke\"] as const;\n"],"mappings":";AAGO,IAAM,eAAe;AACrB,IAAM,kBAAkB;AACxB,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,gCAAgC,GAAG,YAAY;AACrD,IAAM,4BAA4B,GAAG,YAAY;AAGjD,IAAM,uBAAuB;AAE7B,IAAM,kBAAkB;AAExB,IAAM,mBAAmB;AACzB,IAAM,4BAA4B;AAOlC,IAAM,oBAAoB;AAC1B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAK9B,IAAM,6BAA6B,CAAC,eAAe,iBAAiB,cAAc;AAUlF,IAAM,oCAAoC;AAC1C,IAAM,yCAAyC;AAC/C,IAAM,8CAA8C,KAAK;AAAA,EAC7D,oCAAoC,yCAA0C;AACjF;AACO,IAAM,gCAAgC;AACtC,IAAM,uCAAuC,KAAK;AAAA,EACtD,oCAAoC,gCAAiC;AACxE;AAMO,IAAM,uBAAuB;AAE7B,IAAM,0BAA0B,IAAI,KAAK;AACzC,IAAM,4BAA4B,IAAI,KAAK,KAAK,KAAK;AAKrD,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,qBAAqB;AAC3B,IAAM,gCAAgC;AAItC,IAAM,6BAA6B,CAAC,uBAAuB,uBAAuB;","names":[]}

package/dist/constants.d.ts

@@ -11,8 +11,13 @@ declare const CODEX_ID_TOKEN_AUTH_CLAIM = "https://api.openai.com/auth";
 declare const CODEX_PROVIDER_ID = "codex-subscription";
 declare const CODEX_PROVIDER_BASE_URL = "https://chatgpt.com/backend-api";
 declare const CODEX_MODEL_ID_PREFIX = "codex/";
-declare const CODEX_FALLBACK_MODEL_SLUGS: readonly ["gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.3-codex-spark"];
-declare const CODEX_CLIENT_VERSION = "0.142.4";
+declare const CODEX_FALLBACK_MODEL_SLUGS: readonly ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"];
+declare const CODEX_MODEL_CONTEXT_WINDOW_TOKENS = 272000;
+declare const CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT = 95;
+declare const CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS: number;
+declare const CODEX_AUTO_COMPACTION_PERCENT = 90;
+declare const CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT: number;
+declare const CODEX_CLIENT_VERSION = "0.144.4";
 declare const CODEX_REFRESH_WINDOW_MS: number;
 declare const CODEX_REFRESH_FALLBACK_MS: number;
 declare const CODEX_APPS_MCP_SERVER_ID = "codex_apps";
@@ -21,4 +26,4 @@ declare const CODEX_APPS_MCP_URL = "https://chatgpt.com/backend-api/ps/mcp";
 declare const CODEX_APPS_STARTUP_TIMEOUT_MS = 30000;
 declare const CODEX_APPS_REQUIRED_SCOPES: readonly ["api.connectors.read", "api.connectors.invoke"];
 
-export { CODEX_APPS_MCP_SERVER_ID, CODEX_APPS_MCP_SERVER_NAME, CODEX_APPS_MCP_URL, CODEX_APPS_REQUIRED_SCOPES, CODEX_APPS_STARTUP_TIMEOUT_MS, CODEX_AUTH_BASE, CODEX_CLIENT_ID, CODEX_CLIENT_VERSION, CODEX_DEVICE_REDIRECT_URI, CODEX_DEVICE_VERIFICATION_URL, CODEX_FALLBACK_MODEL_SLUGS, CODEX_ID_TOKEN_AUTH_CLAIM, CODEX_ISSUER, CODEX_MODEL_ID_PREFIX, CODEX_ORIGINATOR, CODEX_PROVIDER_BASE_URL, CODEX_PROVIDER_ID, CODEX_REFRESH_FALLBACK_MS, CODEX_REFRESH_WINDOW_MS, CODEX_RESPONSES_BASE, CODEX_TOKEN_URL, CODEX_WHAM_BASE };
+export { CODEX_APPS_MCP_SERVER_ID, CODEX_APPS_MCP_SERVER_NAME, CODEX_APPS_MCP_URL, CODEX_APPS_REQUIRED_SCOPES, CODEX_APPS_STARTUP_TIMEOUT_MS, CODEX_AUTH_BASE, CODEX_AUTO_COMPACTION_PERCENT, CODEX_CLIENT_ID, CODEX_CLIENT_VERSION, CODEX_DEVICE_REDIRECT_URI, CODEX_DEVICE_VERIFICATION_URL, CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT, CODEX_FALLBACK_MODEL_SLUGS, CODEX_ID_TOKEN_AUTH_CLAIM, CODEX_ISSUER, CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT, CODEX_MODEL_CONTEXT_WINDOW_TOKENS, CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS, CODEX_MODEL_ID_PREFIX, CODEX_ORIGINATOR, CODEX_PROVIDER_BASE_URL, CODEX_PROVIDER_ID, CODEX_REFRESH_FALLBACK_MS, CODEX_REFRESH_WINDOW_MS, CODEX_RESPONSES_BASE, CODEX_TOKEN_URL, CODEX_WHAM_BASE };

package/dist/constants.js

@@ -5,13 +5,18 @@ import {
   CODEX_APPS_REQUIRED_SCOPES,
   CODEX_APPS_STARTUP_TIMEOUT_MS,
   CODEX_AUTH_BASE,
+  CODEX_AUTO_COMPACTION_PERCENT,
   CODEX_CLIENT_ID,
   CODEX_CLIENT_VERSION,
   CODEX_DEVICE_REDIRECT_URI,
   CODEX_DEVICE_VERIFICATION_URL,
+  CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT,
   CODEX_FALLBACK_MODEL_SLUGS,
   CODEX_ID_TOKEN_AUTH_CLAIM,
   CODEX_ISSUER,
+  CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+  CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
   CODEX_MODEL_ID_PREFIX,
   CODEX_ORIGINATOR,
   CODEX_PROVIDER_BASE_URL,
@@ -21,7 +26,7 @@ import {
   CODEX_RESPONSES_BASE,
   CODEX_TOKEN_URL,
   CODEX_WHAM_BASE
-} from "./chunk-2ESTGQ57.js";
+} from "./chunk-KKKJKW6M.js";
 export {
   CODEX_APPS_MCP_SERVER_ID,
   CODEX_APPS_MCP_SERVER_NAME,
@@ -29,13 +34,18 @@ export {
   CODEX_APPS_REQUIRED_SCOPES,
   CODEX_APPS_STARTUP_TIMEOUT_MS,
   CODEX_AUTH_BASE,
+  CODEX_AUTO_COMPACTION_PERCENT,
   CODEX_CLIENT_ID,
   CODEX_CLIENT_VERSION,
   CODEX_DEVICE_REDIRECT_URI,
   CODEX_DEVICE_VERIFICATION_URL,
+  CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT,
   CODEX_FALLBACK_MODEL_SLUGS,
   CODEX_ID_TOKEN_AUTH_CLAIM,
   CODEX_ISSUER,
+  CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+  CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
   CODEX_MODEL_ID_PREFIX,
   CODEX_ORIGINATOR,
   CODEX_PROVIDER_BASE_URL,

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { CODEX_APPS_MCP_SERVER_ID, CODEX_APPS_MCP_SERVER_NAME, CODEX_APPS_MCP_URL, CODEX_APPS_REQUIRED_SCOPES, CODEX_APPS_STARTUP_TIMEOUT_MS, CODEX_AUTH_BASE, CODEX_CLIENT_ID, CODEX_CLIENT_VERSION, CODEX_DEVICE_REDIRECT_URI, CODEX_DEVICE_VERIFICATION_URL, CODEX_FALLBACK_MODEL_SLUGS, CODEX_ID_TOKEN_AUTH_CLAIM, CODEX_ISSUER, CODEX_MODEL_ID_PREFIX, CODEX_ORIGINATOR, CODEX_PROVIDER_BASE_URL, CODEX_PROVIDER_ID, CODEX_REFRESH_FALLBACK_MS, CODEX_REFRESH_WINDOW_MS, CODEX_RESPONSES_BASE, CODEX_TOKEN_URL, CODEX_WHAM_BASE } from './constants.js';
+export { CODEX_APPS_MCP_SERVER_ID, CODEX_APPS_MCP_SERVER_NAME, CODEX_APPS_MCP_URL, CODEX_APPS_REQUIRED_SCOPES, CODEX_APPS_STARTUP_TIMEOUT_MS, CODEX_AUTH_BASE, CODEX_AUTO_COMPACTION_PERCENT, CODEX_CLIENT_ID, CODEX_CLIENT_VERSION, CODEX_DEVICE_REDIRECT_URI, CODEX_DEVICE_VERIFICATION_URL, CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT, CODEX_FALLBACK_MODEL_SLUGS, CODEX_ID_TOKEN_AUTH_CLAIM, CODEX_ISSUER, CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT, CODEX_MODEL_CONTEXT_WINDOW_TOKENS, CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS, CODEX_MODEL_ID_PREFIX, CODEX_ORIGINATOR, CODEX_PROVIDER_BASE_URL, CODEX_PROVIDER_ID, CODEX_REFRESH_FALLBACK_MS, CODEX_REFRESH_WINDOW_MS, CODEX_RESPONSES_BASE, CODEX_TOKEN_URL, CODEX_WHAM_BASE } from './constants.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 /**
@@ -184,6 +184,19 @@ type CodexUsageHeaderSnapshot = {
 };
 type CodexRequestContext = {
     clientVersion: string;
+    /**
+     * Stable per-session affinity id, sent as the `session_id` header on every
+     * request. This is the backend's STICKY CACHE-ROUTING key — measured
+     * 2026-07-12 with byte-identical ~99k-token gpt-5.6-sol requests on one idle
+     * account: without the header, repeat requests hit the prompt cache ~50% of
+     * the time (a per-request routing lottery across cache shards; matches the
+     * prod fleet's 48.6%); with a stable session_id, 10/10 requests hit at the
+     * 99.0% ceiling — Codex CLI parity (the CLI always sends it; its own last-3d
+     * token-weighted rate here is 94%). `prompt_cache_key` in the body only
+     * influences routing and does NOT pin it. Use the SAME value as
+     * prompt_cache_key (the OpenGeni sessionId) so routing and cache key agree.
+     */
+    sessionId?: string;
     /** Worker-supplied: proactive refresh + single-flight + db persist. */
     getToken: () => Promise<CodexTokenSnapshot>;
     /** Forced refresh used for the 401 retry. */
@@ -201,6 +214,15 @@ type CodexRequestContext = {
 declare const codexRequestStorage: AsyncLocalStorage<CodexRequestContext>;
 
 type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+/**
+ * Internal provenance marker copied onto buffered non-OK Codex responses.
+ * OpenAI's APIError preserves response headers, which lets the worker
+ * distinguish a model-provider refusal from an unrelated sandbox/MCP HTTP
+ * error that happened during the same Codex turn.
+ */
+declare const CODEX_TRANSPORT_ERROR_HEADER = "x-opengeni-codex-transport-error";
+/** True only for an error produced from this Codex transport's non-OK response. */
+declare function isCodexTransportError(error: unknown): boolean;
 /**
  * Multi-account P4 (Part A): scrape the full usage snapshot the codex backend
  * stamps on every `/codex/responses` response in `x-codex-primary-*` /
@@ -264,4 +286,4 @@ declare function remapToolCallRequestBody(body: string, mapper: ToolNameMapper):
  */
 declare function codexAppsSanitizingFetch(base?: FetchLike, namespaceSink?: Set<string>): FetchLike;
 
-export { CODEX_FIVE_HOUR_WINDOW_SECONDS, CODEX_USAGE_LIMIT_ERROR_TYPE, CODEX_WEEKLY_WINDOW_SECONDS, type CodexAdditionalLimit, type CodexAuthHeaders, CodexDeviceError, type CodexDeviceStart, type CodexFetch, type CodexPollResult, type CodexRefreshTokens, CodexRefreshTransient, CodexReloginRequired, type CodexRequestContext, type CodexTokenSnapshot, type CodexTokens, type CodexUsageHeaderSnapshot, type CodexUsageLimitInfo, type CodexUsagePayload, type CodexUsageStatus, type CodexUsageWindow, type FetchLike, ToolNameMapper, accessTokenExpiry, buildCodexUsageWindowFromCache, buildModelResolver, classifyCodexUsageLimitError, codexAppsSanitizingFetch, codexRequestStorage, codexSubscriptionFetch, decodeJwtPayload, exchangeDeviceCode, fetchCodexModels, fetchCodexUsage, isCodexBilledModel, normalizeCodexRequestBody, normalizeCodexUsage, parseCodexUsageHeaders, parseIdToken, pollDeviceCode, refreshCodexToken, remapToolCallRequestBody, sanitizeMcpJsonBody, sanitizeMcpSseBody, startDeviceCode };
+export { CODEX_FIVE_HOUR_WINDOW_SECONDS, CODEX_TRANSPORT_ERROR_HEADER, CODEX_USAGE_LIMIT_ERROR_TYPE, CODEX_WEEKLY_WINDOW_SECONDS, type CodexAdditionalLimit, type CodexAuthHeaders, CodexDeviceError, type CodexDeviceStart, type CodexFetch, type CodexPollResult, type CodexRefreshTokens, CodexRefreshTransient, CodexReloginRequired, type CodexRequestContext, type CodexTokenSnapshot, type CodexTokens, type CodexUsageHeaderSnapshot, type CodexUsageLimitInfo, type CodexUsagePayload, type CodexUsageStatus, type CodexUsageWindow, type FetchLike, ToolNameMapper, accessTokenExpiry, buildCodexUsageWindowFromCache, buildModelResolver, classifyCodexUsageLimitError, codexAppsSanitizingFetch, codexRequestStorage, codexSubscriptionFetch, decodeJwtPayload, exchangeDeviceCode, fetchCodexModels, fetchCodexUsage, isCodexBilledModel, isCodexTransportError, normalizeCodexRequestBody, normalizeCodexUsage, parseCodexUsageHeaders, parseIdToken, pollDeviceCode, refreshCodexToken, remapToolCallRequestBody, sanitizeMcpJsonBody, sanitizeMcpSseBody, startDeviceCode };

package/dist/index.js

@@ -5,13 +5,18 @@ import {
   CODEX_APPS_REQUIRED_SCOPES,
   CODEX_APPS_STARTUP_TIMEOUT_MS,
   CODEX_AUTH_BASE,
+  CODEX_AUTO_COMPACTION_PERCENT,
   CODEX_CLIENT_ID,
   CODEX_CLIENT_VERSION,
   CODEX_DEVICE_REDIRECT_URI,
   CODEX_DEVICE_VERIFICATION_URL,
+  CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT,
   CODEX_FALLBACK_MODEL_SLUGS,
   CODEX_ID_TOKEN_AUTH_CLAIM,
   CODEX_ISSUER,
+  CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+  CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
   CODEX_MODEL_ID_PREFIX,
   CODEX_ORIGINATOR,
   CODEX_PROVIDER_BASE_URL,
@@ -21,7 +26,7 @@ import {
   CODEX_RESPONSES_BASE,
   CODEX_TOKEN_URL,
   CODEX_WHAM_BASE
-} from "./chunk-2ESTGQ57.js";
+} from "./chunk-KKKJKW6M.js";
 
 // src/billing.ts
 function isCodexBilledModel(model) {
@@ -67,7 +72,11 @@ async function pollDeviceCode(input, fetchImpl = fetch) {
   });
   if (res.ok) {
     const body = await res.json();
-    return { status: "authorized", authorizationCode: body.authorization_code, codeVerifier: body.code_verifier };
+    return {
+      status: "authorized",
+      authorizationCode: body.authorization_code,
+      codeVerifier: body.code_verifier
+    };
   }
   if (res.status === 403 || res.status === 404) {
     return { status: "pending" };
@@ -91,7 +100,11 @@ async function exchangeDeviceCode(input, fetchImpl = fetch) {
     throw new CodexDeviceError(`device code exchange failed with status ${res.status}`);
   }
   const body = await res.json();
-  return { idToken: body.id_token, accessToken: body.access_token, refreshToken: body.refresh_token };
+  return {
+    idToken: body.id_token,
+    accessToken: body.access_token,
+    refreshToken: body.refresh_token
+  };
 }
 
 // src/refresh.ts
@@ -111,7 +124,11 @@ async function refreshCodexToken(refreshToken, fetchImpl = fetch) {
   const res = await fetchImpl(CODEX_TOKEN_URL, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ client_id: CODEX_CLIENT_ID, grant_type: "refresh_token", refresh_token: refreshToken })
+    body: JSON.stringify({
+      client_id: CODEX_CLIENT_ID,
+      grant_type: "refresh_token",
+      refresh_token: refreshToken
+    })
   });
   const text = await res.text();
   if (!res.ok) {
@@ -121,12 +138,18 @@ async function refreshCodexToken(refreshToken, fetchImpl = fetch) {
       throw new CodexReloginRequired(msg);
     }
     if (res.status === 401) {
-      throw new CodexReloginRequired("Your Codex session could not be refreshed. Please disconnect and sign in again.");
+      throw new CodexReloginRequired(
+        "Your Codex session could not be refreshed. Please disconnect and sign in again."
+      );
     }
     throw new CodexRefreshTransient(`Failed to refresh Codex token: ${res.status}`);
   }
   const body = JSON.parse(text);
-  return { idToken: body.id_token, accessToken: body.access_token, refreshToken: body.refresh_token };
+  return {
+    idToken: body.id_token,
+    accessToken: body.access_token,
+    refreshToken: body.refresh_token
+  };
 }
 var PERMANENT_REFRESH_FAILURES = {
   refresh_token_expired: "Your Codex refresh token has expired. Please disconnect and sign in again.",
@@ -338,7 +361,10 @@ function pickWindows(primary, secondary) {
   let fiveHour = null;
   let weekly = null;
   const unplaced = [];
-  for (const [slot, raw] of [["primary", primary], ["secondary", secondary]]) {
+  for (const [slot, raw] of [
+    ["primary", primary],
+    ["secondary", secondary]
+  ]) {
     const nw = normalizeWindow(raw);
     if (!nw) continue;
     if (nw.limitWindowSeconds === CODEX_WEEKLY_WINDOW_SECONDS) {
@@ -371,7 +397,10 @@ function normalizeCodexUsage(httpStatus, rawPayload) {
     return { ...base, status: "error" };
   }
   const rate = body.rate_limit ?? null;
-  const { fiveHour, weekly } = pickWindows(rate?.primary_window ?? null, rate?.secondary_window ?? null);
+  const { fiveHour, weekly } = pickWindows(
+    rate?.primary_window ?? null,
+    rate?.secondary_window ?? null
+  );
   const limitReached = !!(rate?.limit_reached || rate?.allowed === false) || (fiveHour?.percent ?? 0) >= 100 || (weekly?.percent ?? 0) >= 100;
   const additionalLimits = body.additional_limits ? body.additional_limits.map((al) => {
     const windows = pickWindows(al.primary_window ?? null, al.secondary_window ?? null);
@@ -419,10 +448,13 @@ function subscriptionHeaders(a) {
   };
 }
 async function fetchCodexModels(a, fetchImpl = fetch) {
-  const res = await fetchImpl(`${CODEX_RESPONSES_BASE}/models?client_version=${encodeURIComponent(a.clientVersion)}`, {
-    method: "GET",
-    headers: subscriptionHeaders(a)
-  });
+  const res = await fetchImpl(
+    `${CODEX_RESPONSES_BASE}/models?client_version=${encodeURIComponent(a.clientVersion)}`,
+    {
+      method: "GET",
+      headers: subscriptionHeaders(a)
+    }
+  );
   if (!res.ok) {
     return { ok: false, status: res.status, slugs: [] };
   }
@@ -444,6 +476,25 @@ import { AsyncLocalStorage } from "async_hooks";
 var codexRequestStorage = new AsyncLocalStorage();
 
 // src/fetch.ts
+var CODEX_TRANSPORT_ERROR_HEADER = "x-opengeni-codex-transport-error";
+function headersCarryCodexTransportMarker(headers) {
+  if (!headers || typeof headers !== "object") return false;
+  const getter = headers.get;
+  if (typeof getter === "function") {
+    return getter.call(headers, CODEX_TRANSPORT_ERROR_HEADER) === "1";
+  }
+  const record = headers;
+  return record[CODEX_TRANSPORT_ERROR_HEADER] === "1" || record[CODEX_TRANSPORT_ERROR_HEADER.toLowerCase()] === "1";
+}
+function isCodexTransportError(error) {
+  let current = error;
+  for (let depth = 0; depth < 6 && current && typeof current === "object"; depth += 1) {
+    const value = current;
+    if (headersCarryCodexTransportMarker(value.headers)) return true;
+    current = value.cause;
+  }
+  return false;
+}
 function parseIntHeader(value) {
   if (value === null) {
     return null;
@@ -471,9 +522,19 @@ function parseCodexUsageHeaders(headers) {
   const nowMs = Date.now();
   return {
     primaryUsedPercent,
-    primaryResetAt: resolveResetAt(headers, "x-codex-primary-reset-at", "x-codex-primary-reset-after-seconds", nowMs),
+    primaryResetAt: resolveResetAt(
+      headers,
+      "x-codex-primary-reset-at",
+      "x-codex-primary-reset-after-seconds",
+      nowMs
+    ),
     secondaryUsedPercent,
-    secondaryResetAt: resolveResetAt(headers, "x-codex-secondary-reset-at", "x-codex-secondary-reset-after-seconds", nowMs),
+    secondaryResetAt: resolveResetAt(
+      headers,
+      "x-codex-secondary-reset-at",
+      "x-codex-secondary-reset-after-seconds",
+      nowMs
+    ),
     checkedAt: new Date(nowMs)
   };
 }
@@ -496,6 +557,9 @@ function codexSubscriptionFetch(base = globalThis.fetch) {
       headers.set("version", ctx.clientVersion);
       headers.set("accept", "text/event-stream");
       headers.set("content-type", "application/json");
+      if (ctx.sessionId) {
+        headers.set("session_id", ctx.sessionId);
+      }
       if (auth.isFedramp) {
         headers.set("X-OpenAI-Fedramp", "true");
       }
@@ -513,7 +577,9 @@ function codexSubscriptionFetch(base = globalThis.fetch) {
       }
       if (process.env.CODEX_DEBUG) {
         const keys = typeof nextInit.body === "string" ? Object.keys(JSON.parse(nextInit.body)) : [];
-        console.error(`[codex-debug] POST ${rewritten} stream=${callerWantsStream} bodyKeys=[${keys.join(",")}]`);
+        console.error(
+          `[codex-debug] POST ${rewritten} stream=${callerWantsStream} bodyKeys=[${keys.join(",")}]`
+        );
       }
       const res2 = await base(rewritten, nextInit);
       const usage = parseCodexUsageHeaders(res2.headers);
@@ -521,7 +587,9 @@ function codexSubscriptionFetch(base = globalThis.fetch) {
         ctx.onUsageHeaders?.(usage);
       }
       if (process.env.CODEX_DEBUG && !res2.ok) {
-        console.error(`[codex-debug] <- ${res2.status} ${await res2.clone().text()}`);
+        console.error(
+          `[codex-debug] <- ${res2.status} requestId=${res2.headers.get("x-request-id") ?? "unknown"}`
+        );
       }
       if (!res2.ok) {
         return await bufferCodexErrorResponse(res2);
@@ -556,6 +624,7 @@ async function bufferCodexErrorResponse(res) {
   const bodyText = await res.text().catch(() => "");
   const headers = new Headers(res.headers);
   headers.set("content-type", "application/json");
+  headers.set(CODEX_TRANSPORT_ERROR_HEADER, "1");
   headers.delete("content-length");
   headers.delete("content-encoding");
   let errorType;
@@ -592,7 +661,9 @@ async function sseToJsonResponse(res) {
     final = { ...final, output: items };
   }
   if (process.env.CODEX_DEBUG) {
-    console.error(`[codex-debug] sse->json items=${items.length} outputLen=${Array.isArray(final?.output) ? final.output.length : "?"}`);
+    console.error(
+      `[codex-debug] sse->json items=${items.length} outputLen=${Array.isArray(final?.output) ? final.output.length : "?"}`
+    );
   }
   const headers = new Headers(res.headers);
   headers.set("content-type", "application/json");
@@ -830,14 +901,19 @@ export {
   CODEX_APPS_REQUIRED_SCOPES,
   CODEX_APPS_STARTUP_TIMEOUT_MS,
   CODEX_AUTH_BASE,
+  CODEX_AUTO_COMPACTION_PERCENT,
   CODEX_CLIENT_ID,
   CODEX_CLIENT_VERSION,
   CODEX_DEVICE_REDIRECT_URI,
   CODEX_DEVICE_VERIFICATION_URL,
+  CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT,
   CODEX_FALLBACK_MODEL_SLUGS,
   CODEX_FIVE_HOUR_WINDOW_SECONDS,
   CODEX_ID_TOKEN_AUTH_CLAIM,
   CODEX_ISSUER,
+  CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT,
+  CODEX_MODEL_CONTEXT_WINDOW_TOKENS,
+  CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS,
   CODEX_MODEL_ID_PREFIX,
   CODEX_ORIGINATOR,
   CODEX_PROVIDER_BASE_URL,
@@ -846,6 +922,7 @@ export {
   CODEX_REFRESH_WINDOW_MS,
   CODEX_RESPONSES_BASE,
   CODEX_TOKEN_URL,
+  CODEX_TRANSPORT_ERROR_HEADER,
   CODEX_USAGE_LIMIT_ERROR_TYPE,
   CODEX_WEEKLY_WINDOW_SECONDS,
   CODEX_WHAM_BASE,
@@ -865,6 +942,7 @@ export {
   fetchCodexModels,
   fetchCodexUsage,
   isCodexBilledModel,
+  isCodexTransportError,
   normalizeCodexRequestBody,
   normalizeCodexUsage,
   parseCodexUsageHeaders,