@opengeni/codex 0.2.1 → 0.2.3

package/src/fetch.ts

@@ -12,10 +12,46 @@
 
 import { CODEX_ORIGINATOR } from "./constants";
 import { normalizeCodexRequestBody } from "./normalize";
-import { codexRequestStorage, type CodexTokenSnapshot, type CodexUsageHeaderSnapshot } from "./request-context";
+import {
+  codexRequestStorage,
+  type CodexTokenSnapshot,
+  type CodexUsageHeaderSnapshot,
+} from "./request-context";
 
 export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 
+/**
+ * Internal provenance marker copied onto buffered non-OK Codex responses.
+ * OpenAI's APIError preserves response headers, which lets the worker
+ * distinguish a model-provider refusal from an unrelated sandbox/MCP HTTP
+ * error that happened during the same Codex turn.
+ */
+export const CODEX_TRANSPORT_ERROR_HEADER = "x-opengeni-codex-transport-error";
+
+function headersCarryCodexTransportMarker(headers: unknown): boolean {
+  if (!headers || typeof headers !== "object") return false;
+  const getter = (headers as { get?: unknown }).get;
+  if (typeof getter === "function") {
+    return getter.call(headers, CODEX_TRANSPORT_ERROR_HEADER) === "1";
+  }
+  const record = headers as Record<string, unknown>;
+  return (
+    record[CODEX_TRANSPORT_ERROR_HEADER] === "1" ||
+    record[CODEX_TRANSPORT_ERROR_HEADER.toLowerCase()] === "1"
+  );
+}
+
+/** True only for an error produced from this Codex transport's non-OK response. */
+export function isCodexTransportError(error: unknown): boolean {
+  let current: unknown = error;
+  for (let depth = 0; depth < 6 && current && typeof current === "object"; depth += 1) {
+    const value = current as Record<string, unknown>;
+    if (headersCarryCodexTransportMarker(value.headers)) return true;
+    current = value.cause;
+  }
+  return false;
+}
+
 /** Parse an integer header value; null when absent or not a finite integer. */
 function parseIntHeader(value: string | null): number | null {
   if (value === null) {
@@ -65,9 +101,19 @@ export function parseCodexUsageHeaders(headers: Headers): CodexUsageHeaderSnapsh
   const nowMs = Date.now();
   return {
     primaryUsedPercent,
-    primaryResetAt: resolveResetAt(headers, "x-codex-primary-reset-at", "x-codex-primary-reset-after-seconds", nowMs),
+    primaryResetAt: resolveResetAt(
+      headers,
+      "x-codex-primary-reset-at",
+      "x-codex-primary-reset-after-seconds",
+      nowMs,
+    ),
     secondaryUsedPercent,
-    secondaryResetAt: resolveResetAt(headers, "x-codex-secondary-reset-at", "x-codex-secondary-reset-after-seconds", nowMs),
+    secondaryResetAt: resolveResetAt(
+      headers,
+      "x-codex-secondary-reset-at",
+      "x-codex-secondary-reset-after-seconds",
+      nowMs,
+    ),
     checkedAt: new Date(nowMs),
   };
 }
@@ -96,6 +142,12 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
       headers.set("version", ctx.clientVersion);
       headers.set("accept", "text/event-stream");
       headers.set("content-type", "application/json");
+      if (ctx.sessionId) {
+        // Backend sticky cache-routing key (see CodexRequestContext.sessionId):
+        // without it, byte-identical resends miss the prompt cache ~half the
+        // time; with it they pin to a warm shard and hit at the ceiling.
+        headers.set("session_id", ctx.sessionId);
+      }
       if (auth.isFedramp) {
         headers.set("X-OpenAI-Fedramp", "true");
       }
@@ -117,8 +169,13 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
         }
       }
       if (process.env.CODEX_DEBUG) {
-        const keys = typeof nextInit.body === "string" ? Object.keys(JSON.parse(nextInit.body) as Record<string, unknown>) : [];
-        console.error(`[codex-debug] POST ${rewritten} stream=${callerWantsStream} bodyKeys=[${keys.join(",")}]`);
+        const keys =
+          typeof nextInit.body === "string"
+            ? Object.keys(JSON.parse(nextInit.body) as Record<string, unknown>)
+            : [];
+        console.error(
+          `[codex-debug] POST ${rewritten} stream=${callerWantsStream} bodyKeys=[${keys.join(",")}]`,
+        );
       }
       const res = await base(rewritten, nextInit);
       // Multi-account P4 (Part A): scrape the usage headers ONCE, before the
@@ -132,7 +189,12 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
         ctx.onUsageHeaders?.(usage);
       }
       if (process.env.CODEX_DEBUG && !res.ok) {
-        console.error(`[codex-debug] <- ${res.status} ${await res.clone().text()}`);
+        // Never log provider bodies: they can contain request-derived content or
+        // account details. Status + request id is sufficient to correlate with
+        // the structured worker failure telemetry.
+        console.error(
+          `[codex-debug] <- ${res.status} requestId=${res.headers.get("x-request-id") ?? "unknown"}`,
+        );
       }
       // The codex backend leaves the terminal event's response.output empty and
       // delivers the assistant items via output_item.done events instead. The
@@ -182,8 +244,12 @@ export function classifyCodexUsageLimitError(error: unknown): CodexUsageLimitInf
   let cur: unknown = error;
   for (let depth = 0; depth < 6 && cur && typeof cur === "object"; depth++) {
     const e = cur as Record<string, unknown>;
-    const body = (e.error && typeof e.error === "object" ? e.error : undefined) as Record<string, unknown> | undefined;
-    const type = (typeof e.type === "string" ? e.type : undefined) ?? (typeof body?.type === "string" ? body.type : undefined);
+    const body = (e.error && typeof e.error === "object" ? e.error : undefined) as
+      | Record<string, unknown>
+      | undefined;
+    const type =
+      (typeof e.type === "string" ? e.type : undefined) ??
+      (typeof body?.type === "string" ? body.type : undefined);
     const message = typeof e.message === "string" ? e.message : "";
     const status = Number(e.status);
     if (
@@ -213,6 +279,7 @@ async function bufferCodexErrorResponse(res: Response): Promise<Response> {
   const bodyText = await res.text().catch(() => "");
   const headers = new Headers(res.headers);
   headers.set("content-type", "application/json");
+  headers.set(CODEX_TRANSPORT_ERROR_HEADER, "1");
   headers.delete("content-length"); // body re-serialized
   headers.delete("content-encoding"); // text() already decoded any gzip
   let errorType: string | undefined;
@@ -248,10 +315,18 @@ async function sseToJsonResponse(res: Response): Promise<Response> {
       continue;
     }
     try {
-      const ev = JSON.parse(data) as { type?: string; response?: Record<string, unknown>; item?: unknown };
+      const ev = JSON.parse(data) as {
+        type?: string;
+        response?: Record<string, unknown>;
+        item?: unknown;
+      };
       if (ev.type === "response.output_item.done" && ev.item !== undefined) {
         items.push(ev.item);
-      } else if (ev.type === "response.completed" || ev.type === "response.done" || ev.type === "response.incomplete") {
+      } else if (
+        ev.type === "response.completed" ||
+        ev.type === "response.done" ||
+        ev.type === "response.incomplete"
+      ) {
         final = ev.response ?? null;
       }
     } catch {
@@ -262,7 +337,9 @@ async function sseToJsonResponse(res: Response): Promise<Response> {
     final = { ...final, output: items }; // prefer the assembled items over an empty output array
   }
   if (process.env.CODEX_DEBUG) {
-    console.error(`[codex-debug] sse->json items=${items.length} outputLen=${Array.isArray(final?.output) ? (final.output as unknown[]).length : "?"}`);
+    console.error(
+      `[codex-debug] sse->json items=${items.length} outputLen=${Array.isArray(final?.output) ? (final.output as unknown[]).length : "?"}`,
+    );
   }
   const headers = new Headers(res.headers);
   headers.set("content-type", "application/json");
@@ -308,7 +385,10 @@ function repairCodexStream(res: Response): Response {
 /** Collect output_item.done items (mutating `items`); rewrite the terminal event's empty output. */
 function patchSseBlock(block: string, items: unknown[]): string {
   const lines = block.split("\n");
-  const dataStr = lines.filter((l) => l.startsWith("data:")).map((l) => l.slice(5).trim()).join("\n");
+  const dataStr = lines
+    .filter((l) => l.startsWith("data:"))
+    .map((l) => l.slice(5).trim())
+    .join("\n");
   if (!dataStr || dataStr === "[DONE]") {
     return block;
   }
@@ -323,7 +403,9 @@ function patchSseBlock(block: string, items: unknown[]): string {
     return block;
   }
   if (
-    (ev.type === "response.completed" || ev.type === "response.done" || ev.type === "response.incomplete") &&
+    (ev.type === "response.completed" ||
+      ev.type === "response.done" ||
+      ev.type === "response.incomplete") &&
     ev.response
   ) {
     const out = ev.response.output;

package/src/mcp-sanitize.ts

@@ -85,9 +85,10 @@ export class ToolNameMapper {
       let n = 2;
       do {
         const suffix = `_${n++}`;
-        candidate = (base.length + suffix.length > EFFECTIVE_MAX_TOOL_NAME_LEN
-          ? base.slice(0, EFFECTIVE_MAX_TOOL_NAME_LEN - suffix.length)
-          : base) + suffix;
+        candidate =
+          (base.length + suffix.length > EFFECTIVE_MAX_TOOL_NAME_LEN
+            ? base.slice(0, EFFECTIVE_MAX_TOOL_NAME_LEN - suffix.length)
+            : base) + suffix;
       } while (this.used.has(candidate));
     }
     this.used.add(candidate);
@@ -110,7 +111,11 @@ export class ToolNameMapper {
  * dotted name BEFORE mapper.sanitize rewrites the dot away. Only dotted names carry a
  * connector namespace; un-dotted (already-legal) names are not connectors and are skipped.
  */
-function sanitizeToolsInRpcMessage(message: unknown, mapper: ToolNameMapper, namespaceSink?: Set<string>): void {
+function sanitizeToolsInRpcMessage(
+  message: unknown,
+  mapper: ToolNameMapper,
+  namespaceSink?: Set<string>,
+): void {
   if (!message || typeof message !== "object") {
     return;
   }
@@ -190,7 +195,11 @@ function inlineStructuredContentInRpcMessage(message: unknown): void {
 }
 
 /** Sanitize a single JSON body (application/json MCP response). */
-export function sanitizeMcpJsonBody(text: string, mapper: ToolNameMapper = new ToolNameMapper(), namespaceSink?: Set<string>): string {
+export function sanitizeMcpJsonBody(
+  text: string,
+  mapper: ToolNameMapper = new ToolNameMapper(),
+  namespaceSink?: Set<string>,
+): string {
   try {
     const parsed = JSON.parse(text);
     sanitizeToolsInRpcMessage(parsed, mapper, namespaceSink);
@@ -202,7 +211,11 @@ export function sanitizeMcpJsonBody(text: string, mapper: ToolNameMapper = new T
 }
 
 /** Sanitize an SSE body: each JSON-RPC message rides on a `data:` line. */
-export function sanitizeMcpSseBody(text: string, mapper: ToolNameMapper = new ToolNameMapper(), namespaceSink?: Set<string>): string {
+export function sanitizeMcpSseBody(
+  text: string,
+  mapper: ToolNameMapper = new ToolNameMapper(),
+  namespaceSink?: Set<string>,
+): string {
   return text
     .split("\n")
     .map((line) => {
@@ -256,7 +269,10 @@ export function remapToolCallRequestBody(body: string, mapper: ToolNameMapper):
  * dot is sanitized away). The worker reads the (live, by-reference) Set after the
  * turn to cache the serving account's connector set — packages/codex stays db-free.
  */
-export function codexAppsSanitizingFetch(base: FetchLike = globalThis.fetch, namespaceSink?: Set<string>): FetchLike {
+export function codexAppsSanitizingFetch(
+  base: FetchLike = globalThis.fetch,
+  namespaceSink?: Set<string>,
+): FetchLike {
   const mapper = new ToolNameMapper();
   return async (input, init) => {
     // Outgoing: reverse a sanitized tools/call name to the server's original.
@@ -268,7 +284,9 @@ export function codexAppsSanitizingFetch(base: FetchLike = globalThis.fetch, nam
       }
     }
     const res = await base(input, nextInit);
-    const method = (init?.method ?? (input instanceof Request ? input.method : "GET")).toUpperCase();
+    const method = (
+      init?.method ?? (input instanceof Request ? input.method : "GET")
+    ).toUpperCase();
     if (method !== "POST" || !res.ok || !res.body) {
       return res;
     }

package/src/normalize.ts

@@ -44,7 +44,9 @@ export function normalizeCodexRequestBody(
   body.stream = true; // ChatGPT backend REQUIRES stream=true (confirmed live: 400 "Stream must be set to true").
 
   // include MUST contain reasoning.encrypted_content (stateless continuity, spec §1.6)
-  const include = Array.isArray(body.include) ? (body.include as unknown[]).filter((v): v is string => typeof v === "string") : [];
+  const include = Array.isArray(body.include)
+    ? (body.include as unknown[]).filter((v): v is string => typeof v === "string")
+    : [];
   if (!include.includes("reasoning.encrypted_content")) {
     include.push("reasoning.encrypted_content");
   }
@@ -120,7 +122,9 @@ export function buildModelResolver(
   fallbackSlug: string,
 ): (slug: string) => string {
   return (requested: string): string => {
-    const stripped = requested.includes("/") ? requested.slice(requested.indexOf("/") + 1) : requested;
+    const stripped = requested.includes("/")
+      ? requested.slice(requested.indexOf("/") + 1)
+      : requested;
     let best = "";
     for (const slug of liveSlugs) {
       if (stripped.startsWith(slug) && slug.length > best.length) {

package/src/refresh.ts

@@ -36,7 +36,11 @@ export async function refreshCodexToken(
   const res = await fetchImpl(CODEX_TOKEN_URL, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ client_id: CODEX_CLIENT_ID, grant_type: "refresh_token", refresh_token: refreshToken }),
+    body: JSON.stringify({
+      client_id: CODEX_CLIENT_ID,
+      grant_type: "refresh_token",
+      refresh_token: refreshToken,
+    }),
   });
   const text = await res.text();
   if (!res.ok) {
@@ -46,20 +50,33 @@ export async function refreshCodexToken(
       throw new CodexReloginRequired(msg);
     }
     if (res.status === 401) {
-      throw new CodexReloginRequired("Your Codex session could not be refreshed. Please disconnect and sign in again.");
+      throw new CodexReloginRequired(
+        "Your Codex session could not be refreshed. Please disconnect and sign in again.",
+      );
     }
     throw new CodexRefreshTransient(`Failed to refresh Codex token: ${res.status}`);
   }
-  const body = JSON.parse(text) as { id_token?: string; access_token?: string; refresh_token?: string };
-  return { idToken: body.id_token, accessToken: body.access_token, refreshToken: body.refresh_token };
+  const body = JSON.parse(text) as {
+    id_token?: string;
+    access_token?: string;
+    refresh_token?: string;
+  };
+  return {
+    idToken: body.id_token,
+    accessToken: body.access_token,
+    refreshToken: body.refresh_token,
+  };
 }
 
 // Codes that mean the refresh token is permanently dead -> reconnect required.
 // Includes the standard OAuth `invalid_grant` alongside the Codex-specific codes.
 const PERMANENT_REFRESH_FAILURES: Record<string, string> = {
-  refresh_token_expired: "Your Codex refresh token has expired. Please disconnect and sign in again.",
-  refresh_token_reused: "Your Codex refresh token was already used. Please disconnect and sign in again.",
-  refresh_token_invalidated: "Your Codex refresh token was revoked. Please disconnect and sign in again.",
+  refresh_token_expired:
+    "Your Codex refresh token has expired. Please disconnect and sign in again.",
+  refresh_token_reused:
+    "Your Codex refresh token was already used. Please disconnect and sign in again.",
+  refresh_token_invalidated:
+    "Your Codex refresh token was revoked. Please disconnect and sign in again.",
   invalid_grant: "Your Codex session is no longer valid. Please disconnect and sign in again.",
 };
 

package/src/request-context.ts

@@ -32,6 +32,19 @@ export type CodexUsageHeaderSnapshot = {
 
 export type CodexRequestContext = {
   clientVersion: string;
+  /**
+   * Stable per-session affinity id, sent as the `session_id` header on every
+   * request. This is the backend's STICKY CACHE-ROUTING key — measured
+   * 2026-07-12 with byte-identical ~99k-token gpt-5.6-sol requests on one idle
+   * account: without the header, repeat requests hit the prompt cache ~50% of
+   * the time (a per-request routing lottery across cache shards; matches the
+   * prod fleet's 48.6%); with a stable session_id, 10/10 requests hit at the
+   * 99.0% ceiling — Codex CLI parity (the CLI always sends it; its own last-3d
+   * token-weighted rate here is 94%). `prompt_cache_key` in the body only
+   * influences routing and does NOT pin it. Use the SAME value as
+   * prompt_cache_key (the OpenGeni sessionId) so routing and cache key agree.
+   */
+  sessionId?: string;
   /** Worker-supplied: proactive refresh + single-flight + db persist. */
   getToken: () => Promise<CodexTokenSnapshot>;
   /** Forced refresh used for the 401 retry. */

package/src/usage-normalize.ts

@@ -50,7 +50,9 @@ export type CodexUsagePayload = {
   reason?: "needs_relogin" | undefined;
   // forward-compat, populated but unused in P2:
   additionalLimits?: CodexAdditionalLimit[] | undefined;
-  credits?: { hasCredits: boolean; unlimited: boolean; overageLimitReached: boolean; balance: string } | undefined;
+  credits?:
+    | { hasCredits: boolean; unlimited: boolean; overageLimitReached: boolean; balance: string }
+    | undefined;
 };
 
 /**
@@ -71,9 +73,10 @@ export function buildCodexUsageWindowFromCache(
   const percent = clampPercent(usedPercent);
   const resetDate = resetAt ? new Date(resetAt) : null;
   const resetIso = resetDate && !Number.isNaN(resetDate.getTime()) ? resetDate.toISOString() : null;
-  const resetAfterSeconds = resetDate && !Number.isNaN(resetDate.getTime())
-    ? Math.max(0, Math.round((resetDate.getTime() - Date.now()) / 1000))
-    : null;
+  const resetAfterSeconds =
+    resetDate && !Number.isNaN(resetDate.getTime())
+      ? Math.max(0, Math.round((resetDate.getTime() - Date.now()) / 1000))
+      : null;
   return {
     used: percent,
     limit: 100,
@@ -139,7 +142,10 @@ function normalizeWindow(w: RawWindow): CodexUsageWindow | null {
     return null;
   }
   const percent = clampPercent(w.used_percent);
-  const resetAfterSeconds = typeof w.reset_after_seconds === "number" ? Math.max(0, Math.round(w.reset_after_seconds)) : null;
+  const resetAfterSeconds =
+    typeof w.reset_after_seconds === "number"
+      ? Math.max(0, Math.round(w.reset_after_seconds))
+      : null;
   let resetAt: string | null = null;
   if (typeof w.reset_at === "number") {
     resetAt = new Date(w.reset_at * 1000).toISOString(); // epoch SECONDS → ms
@@ -162,14 +168,20 @@ function normalizeWindow(w: RawWindow): CodexUsageWindow | null {
  * (18000 vs 604800), NEVER by position; fall back to position (primary ⇒ 5h,
  * secondary ⇒ weekly) only for a window whose limit_window_seconds is absent.
  */
-function pickWindows(primary: RawWindow, secondary: RawWindow): { fiveHour: CodexUsageWindow | null; weekly: CodexUsageWindow | null } {
+function pickWindows(
+  primary: RawWindow,
+  secondary: RawWindow,
+): { fiveHour: CodexUsageWindow | null; weekly: CodexUsageWindow | null } {
   let fiveHour: CodexUsageWindow | null = null;
   let weekly: CodexUsageWindow | null = null;
   // Track each unplaced window with the slot it came from, so the positional
   // fallback can place it (re-normalizing produces a fresh object that would
   // never match by reference — the bug this replaces).
   const unplaced: Array<{ slot: "primary" | "secondary"; window: CodexUsageWindow }> = [];
-  for (const [slot, raw] of [["primary", primary], ["secondary", secondary]] as const) {
+  for (const [slot, raw] of [
+    ["primary", primary],
+    ["secondary", secondary],
+  ] as const) {
     const nw = normalizeWindow(raw);
     if (!nw) continue;
     if (nw.limitWindowSeconds === CODEX_WEEKLY_WINDOW_SECONDS) {
@@ -215,9 +227,14 @@ export function normalizeCodexUsage(httpStatus: number, rawPayload: unknown): Co
   }
 
   const rate = body.rate_limit ?? null;
-  const { fiveHour, weekly } = pickWindows(rate?.primary_window ?? null, rate?.secondary_window ?? null);
+  const { fiveHour, weekly } = pickWindows(
+    rate?.primary_window ?? null,
+    rate?.secondary_window ?? null,
+  );
   const limitReached =
-    !!(rate?.limit_reached || rate?.allowed === false) || (fiveHour?.percent ?? 0) >= 100 || (weekly?.percent ?? 0) >= 100;
+    !!(rate?.limit_reached || rate?.allowed === false) ||
+    (fiveHour?.percent ?? 0) >= 100 ||
+    (weekly?.percent ?? 0) >= 100;
 
   const additionalLimits: CodexAdditionalLimit[] | undefined = body.additional_limits
     ? body.additional_limits.map((al) => {

package/dist/chunk-2ESTGQ57.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["// Wire constants for the ChatGPT/Codex subscription backend.\n// Source: CODEX-SUBSCRIPTION-SPEC.md (verified against openai/codex codex-rs).\n\nexport const CODEX_ISSUER = \"https://auth.openai.com\";\nexport const CODEX_CLIENT_ID = \"app_EMoamEEZ73f0CkXaXp7hrann\"; // spec §1.1 (manager.rs:1444)\nexport const CODEX_AUTH_BASE = `${CODEX_ISSUER}/api/accounts`; // device endpoints (device_code_auth.rs:164)\nexport const CODEX_TOKEN_URL = `${CODEX_ISSUER}/oauth/token`; // exchange (form) + refresh (json)\nexport const CODEX_DEVICE_VERIFICATION_URL = `${CODEX_ISSUER}/codex/device`;\nexport const CODEX_DEVICE_REDIRECT_URI = `${CODEX_ISSUER}/deviceauth/callback`;\n\n// Model requests: base already includes /codex; client appends /responses, /models.\nexport const CODEX_RESPONSES_BASE = \"https://chatgpt.com/backend-api/codex\";\n// Usage lives on the WHAM base — NOT under /codex (verified, spec §1.8a).\nexport const CODEX_WHAM_BASE = \"https://chatgpt.com/backend-api\";\n\nexport const CODEX_ORIGINATOR = \"codex_cli_rs\"; // whitelisted originator (spec §1.2)\nexport const CODEX_ID_TOKEN_AUTH_CLAIM = \"https://api.openai.com/auth\";\n\n// Synthetic registry-provider identity. The provider's baseURL is the bare\n// /backend-api (NOT /codex) — codexSubscriptionFetch rewrites /responses ->\n// /codex/responses. Codex model ids are namespaced `codex/<slug>` so they never\n// collide with the built-in OpenAI provider's model ids; the fetch's resolveModel\n// strips the prefix before the slug reaches the backend.\nexport const CODEX_PROVIDER_ID = \"codex-subscription\";\nexport const CODEX_PROVIDER_BASE_URL = \"https://chatgpt.com/backend-api\";\nexport const CODEX_MODEL_ID_PREFIX = \"codex/\";\n\n// Offline fallback catalog. The live catalog from GET /models supersedes this\n// when wired; until then these are the selectable codex models and the\n// longest-prefix resolution targets. Confirmed live (2026-06) against a pro plan:\n// GET /codex/models returned exactly these (plus the internal codex-auto-review).\nexport const CODEX_FALLBACK_MODEL_SLUGS = [\n  \"gpt-5.5\",\n  \"gpt-5.4\",\n  \"gpt-5.4-mini\",\n  \"gpt-5.3-codex-spark\",\n] as const;\n\n// Sent as the `version` header and inside the User-Agent. Confirmed live: the\n// backend accepts the current codex CLI version; an older value risks /models\n// min_client_version filtering. Keep in step with the codex CLI releases.\nexport const CODEX_CLIENT_VERSION = \"0.142.4\";\n\nexport const CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1000; // proactive refresh when within 5 min of exp (spec §1.1)\nexport const CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1000; // 8 days when exp is unparseable\n\n// ── Apps / connectors MCP (spec §1.10, §E) ───────────────────────────────────\n// One server-side MCP exposes ALL the user's ChatGPT/Codex connectors\n// (gmail/github/linear/slack/sentry/drive/calendar/…). Streamable HTTP, always.\nexport const CODEX_APPS_MCP_SERVER_ID = \"codex_apps\";        // tools surface as mcp__codex_apps__<tool>\nexport const CODEX_APPS_MCP_SERVER_NAME = \"codex_apps\";      // MCP `name` — MUST equal the id so the SDK namespaces tools as mcp__codex_apps__*\nexport const CODEX_APPS_MCP_URL = \"https://chatgpt.com/backend-api/ps/mcp\"; // live URL (NOT /codex, NOT the legacy /wham/apps)\nexport const CODEX_APPS_STARTUP_TIMEOUT_MS = 30_000;         // startup_timeout 30s (spec §1.10) — maps to timeoutMs on this server only\n// Connector scopes that the apps MCP requires. Present ONLY when granted at\n// browser-authorize time; the device-code path CANNOT be confirmed to grant\n// them, so treat connector availability as runtime-discovered (spec §1.10 / §E).\nexport const CODEX_APPS_REQUIRED_SCOPES = [\"api.connectors.read\", \"api.connectors.invoke\"] as const;\n"],"mappings":";AAGO,IAAM,eAAe;AACrB,IAAM,kBAAkB;AACxB,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,gCAAgC,GAAG,YAAY;AACrD,IAAM,4BAA4B,GAAG,YAAY;AAGjD,IAAM,uBAAuB;AAE7B,IAAM,kBAAkB;AAExB,IAAM,mBAAmB;AACzB,IAAM,4BAA4B;AAOlC,IAAM,oBAAoB;AAC1B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAM9B,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,IAAM,uBAAuB;AAE7B,IAAM,0BAA0B,IAAI,KAAK;AACzC,IAAM,4BAA4B,IAAI,KAAK,KAAK,KAAK;AAKrD,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,qBAAqB;AAC3B,IAAM,gCAAgC;AAItC,IAAM,6BAA6B,CAAC,uBAAuB,uBAAuB;","names":[]}