@opengeni/codex 0.2.17 → 0.2.19-canary.0

package/dist/model-output-truncation.d.ts

@@ -20,6 +20,27 @@
  */
 export { MODEL_TOOL_OUTPUT_OVERSIZED_IMAGE_CARD_DATA_URL } from "./oversized-image-card.js";
 export type ModelHistoryItem = Record<string, unknown>;
+type WithoutOutputOnlyProviderDataFields<T> = T extends ModelHistoryItem ? Omit<T, "status"> : T;
+type WithoutOutputOnlyProviderDataField<T extends ModelHistoryItem> = "providerData" extends keyof T ? string extends keyof T ? {
+    providerData?: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+} : object extends Pick<T, Extract<keyof T, "providerData">> ? {
+    providerData?: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+} : {
+    providerData: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+} : object;
+type WithoutOutputOnlyHistoryItemFields<T extends ModelHistoryItem> = T extends unknown ? Omit<T, "status" | "providerData"> & WithoutOutputOnlyProviderDataField<T> : never;
+/**
+ * Responses output items carry `status` (`in_progress` / `completed` /
+ * `incomplete`). That field is not conversation meaning — pairing is `call_id`
+ * — and Codex's input schema 400s it (`Unknown parameter: 'input[N].status'`).
+ * SuperGrok accepts items with or without it. The SDK also nests `status` on
+ * `providerData` (reasoning items) and flattens it back onto the request.
+ * Canonical history therefore omits both at persist so portable sessions can
+ * cross Responses providers.
+ */
+export declare function omitOutputOnlyHistoryItemFields<T extends ModelHistoryItem>(item: T): WithoutOutputOnlyHistoryItemFields<T>;
+/** Persist/replay boundary: drop output-only fields, then bound tool output. */
+export declare function canonicalizePersistedHistoryItem<T extends ModelHistoryItem>(item: T, policyTokens?: number): WithoutOutputOnlyHistoryItemFields<T>;
 export declare const CODEX_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS = 10000;
 export declare const CODEX_TOOL_OUTPUT_SERIALIZATION_ALLOWANCE = 1.2;
 export declare const DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS = 10000;

package/dist/realtime.d.ts

@@ -31,7 +31,22 @@ export declare class CodexRealtimeError extends Error {
 export type CodexRealtimeCallOptions = {
     signal?: AbortSignal | undefined;
     timeoutMs?: number | undefined;
+    providerConfig?: CodexRealtimeProviderConfig | undefined;
 };
+export type CodexRealtimeProviderConfig = {
+    architecture: string;
+    model: string;
+    version: typeof CODEX_REALTIME_VERSION;
+};
+/**
+ * Resolve the provider-controlled Codex voice model without changing the
+ * stable OpenGeni model id. ChatGPT rotates this config independently of Codex
+ * releases; pinning the old value caused deterministic call-creation failures.
+ */
+export declare function fetchCodexRealtimeProviderConfig(auth: CodexAuthHeaders, fetchImpl?: CodexFetch, options?: {
+    signal?: AbortSignal | undefined;
+    timeoutMs?: number | undefined;
+}): Promise<CodexRealtimeProviderConfig>;
 /**
  * Create one native subscription-authenticated Codex GPT-Live V3 WebRTC call.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/codex",
-  "version": "0.2.17",
+  "version": "0.2.19-canary.0",
   "description": "ChatGPT/Codex subscription auth + transport: device-code login, token refresh, and the Responses-backend fetch. Pure HTTP + transforms; no database dependency.",
   "license": "Apache-2.0",
   "repository": {
@@ -41,7 +41,7 @@
     "prepublishOnly": "bash ../../scripts/prepublish-guard"
   },
   "dependencies": {
-    "@opengeni/network": "^0.2.2",
+    "@opengeni/network": "^0.2.3-canary.0",
     "zod": "^4.2.1"
   },
   "engines": {

package/src/constants.ts

@@ -54,12 +54,19 @@ export const CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT = Math.floor(
 // this pinned to the latest stable Codex release we have verified end-to-end.
 export const CODEX_CLIENT_VERSION = "0.145.0";
 
-// Native ChatGPT/Codex subscription WebRTC call creation. Verified against
-// openai/codex 0.145.0 commit bd2de422aa287b97b06ca6425a10935bcf1b3731.
+// Public OpenGeni selector for native ChatGPT/Codex subscription WebRTC. This
+// remains stable for persisted sessions; the provider's remotely configured
+// model is resolved separately before call creation.
 export const CODEX_REALTIME_MODEL = "gpt-live-1-boulder-alpha";
 export const CODEX_REALTIME_VERSION = "v3";
 export const CODEX_REALTIME_DEFAULT_VOICE = "cove";
 export const CODEX_REALTIME_CALL_TIMEOUT_MS = 15_000;
+export const CODEX_REALTIME_CONFIG_TIMEOUT_MS = 5_000;
+export const CODEX_REALTIME_CONFIG_ID = "3566525122";
+// Verified live on 2026-08-23. Used only when the authenticated remote config
+// is transiently unavailable or malformed; it is not the persisted model id.
+export const CODEX_REALTIME_PROVIDER_MODEL_FALLBACK = "gpt-live-1-codex";
+export const CODEX_REALTIME_PROVIDER_ARCHITECTURE_FALLBACK = "avas";
 
 export const CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1000; // proactive refresh when within 5 min of exp (spec §1.1)
 export const CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1000; // 8 days when exp is unparseable

package/src/model-output-truncation.ts

@@ -25,6 +25,67 @@ export { MODEL_TOOL_OUTPUT_OVERSIZED_IMAGE_CARD_DATA_URL } from "./oversized-ima
 
 export type ModelHistoryItem = Record<string, unknown>;
 
+type WithoutOutputOnlyProviderDataFields<T> = T extends ModelHistoryItem ? Omit<T, "status"> : T;
+
+type WithoutOutputOnlyProviderDataField<T extends ModelHistoryItem> = "providerData" extends keyof T
+  ? string extends keyof T
+    ? {
+        providerData?: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+      }
+    : object extends Pick<T, Extract<keyof T, "providerData">>
+      ? {
+          providerData?: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+        }
+      : {
+          providerData: WithoutOutputOnlyProviderDataFields<T["providerData"]>;
+        }
+  : object;
+
+type WithoutOutputOnlyHistoryItemFields<T extends ModelHistoryItem> = T extends unknown
+  ? Omit<T, "status" | "providerData"> & WithoutOutputOnlyProviderDataField<T>
+  : never;
+
+/**
+ * Responses output items carry `status` (`in_progress` / `completed` /
+ * `incomplete`). That field is not conversation meaning — pairing is `call_id`
+ * — and Codex's input schema 400s it (`Unknown parameter: 'input[N].status'`).
+ * SuperGrok accepts items with or without it. The SDK also nests `status` on
+ * `providerData` (reasoning items) and flattens it back onto the request.
+ * Canonical history therefore omits both at persist so portable sessions can
+ * cross Responses providers.
+ */
+export function omitOutputOnlyHistoryItemFields<T extends ModelHistoryItem>(
+  item: T,
+): WithoutOutputOnlyHistoryItemFields<T> {
+  if (!item || typeof item !== "object") {
+    return item as unknown as WithoutOutputOnlyHistoryItemFields<T>;
+  }
+  const providerData =
+    item.providerData && typeof item.providerData === "object"
+      ? (item.providerData as Record<string, unknown>)
+      : null;
+  const hasTopStatus = "status" in item;
+  const hasNestedStatus = Boolean(providerData && "status" in providerData);
+  if (!hasTopStatus && !hasNestedStatus) {
+    return item as unknown as WithoutOutputOnlyHistoryItemFields<T>;
+  }
+  const next = { ...item };
+  if (hasTopStatus) delete (next as Record<string, unknown>).status;
+  if (hasNestedStatus && providerData) {
+    const { status: _dropped, ...rest } = providerData;
+    (next as Record<string, unknown>).providerData = rest;
+  }
+  return next as unknown as WithoutOutputOnlyHistoryItemFields<T>;
+}
+
+/** Persist/replay boundary: drop output-only fields, then bound tool output. */
+export function canonicalizePersistedHistoryItem<T extends ModelHistoryItem>(
+  item: T,
+  policyTokens = DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS,
+): WithoutOutputOnlyHistoryItemFields<T> {
+  return boundModelToolOutputItem(omitOutputOnlyHistoryItemFields(item), policyTokens);
+}
+
 export const CODEX_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS = 10_000;
 export const CODEX_TOOL_OUTPUT_SERIALIZATION_ALLOWANCE = 1.2;
 export const DEFAULT_MODEL_TOOL_OUTPUT_TRUNCATION_TOKENS =

package/src/normalize.ts

@@ -7,9 +7,14 @@
 //   - strip max_output_tokens / max_completion_tokens
 //   - reasoning effort minimal -> low
 //   - normalize the model slug (longest-prefix against the live catalog)
-//   - strip every item `id` but PRESERVE `call_id`
+//   - strip every item `id` and `status` but PRESERVE `call_id`
 // We do NOT filter item_reference (the SDK never emits it) and do NOT convert
 // orphaned tool outputs (the SDK's runner already prunes by call_id).
+//
+// `status` is an output annotation SuperGrok (and some Responses items) persist
+// on messages / function_call / function_call_output. Codex's strict input
+// schema 400s `Unknown parameter: 'input[N].status'` — observed live on a
+// portable SuperGrok → Codex switch. Pairing uses `call_id`, never `status`.
 
 const MINIMAL = "minimal";
 
@@ -66,10 +71,13 @@ export function normalizeCodexRequestBody(
     body.model = resolveModel(body.model);
   }
 
-  // strip every item id; PRESERVE call_id. spec §1.6 / verdict §0(b)
+  // strip every item id and status; PRESERVE call_id. spec §1.6 / verdict §0(b)
   // (This also covers tool_search items: the backend accepts an id-less
   // tool_search_call/output pair correlated by call_id — verified live — and
   // stripping the provider-stored `tsc_…` id here sanitizes BOTH replay paths.)
+  // `status` is output-only on Codex input items. New rows omit it at persist;
+  // this wire strip remains defense for already-stored SuperGrok rows and
+  // mid-turn SDK items.
   if (Array.isArray(body.input)) {
     for (const item of body.input as unknown[]) {
       if (!item || typeof item !== "object") {
@@ -79,6 +87,9 @@ export function normalizeCodexRequestBody(
       if ("id" in record) {
         delete record.id;
       }
+      if ("status" in record) {
+        delete record.status;
+      }
       // A replayed tool_search_call must carry `arguments` as an OBJECT — the
       // backend 400s a string ("Invalid type for 'input[N].arguments': expected
       // an object", verified live). The live wire emits an object (the SDK's
@@ -133,6 +144,7 @@ export function normalizedCodexRequestBody(
       if (!item || typeof item !== "object" || Array.isArray(item)) return item;
       const record = item as Record<string, unknown>;
       return "id" in record ||
+        "status" in record ||
         (record.type === "tool_search_call" && typeof record.arguments === "string")
         ? { ...record }
         : item;

package/src/realtime.ts

@@ -1,10 +1,15 @@
 import { codexSubscriptionHeaders, type CodexAuthHeaders } from "./api-client";
 import {
   CODEX_REALTIME_CALL_TIMEOUT_MS,
+  CODEX_REALTIME_CONFIG_ID,
+  CODEX_REALTIME_CONFIG_TIMEOUT_MS,
   CODEX_REALTIME_DEFAULT_VOICE,
   CODEX_REALTIME_MODEL,
+  CODEX_REALTIME_PROVIDER_ARCHITECTURE_FALLBACK,
+  CODEX_REALTIME_PROVIDER_MODEL_FALLBACK,
   CODEX_REALTIME_VERSION,
   CODEX_RESPONSES_BASE,
+  CODEX_WHAM_BASE,
 } from "./constants";
 import type { CodexFetch } from "./device-code";
 import {
@@ -13,8 +18,9 @@ import {
   type CodexRealtimeInitialItem,
 } from "./realtime-v3";
 
-const CODEX_REALTIME_CALL_URL = `${CODEX_RESPONSES_BASE}/realtime/calls?intent=quicksilver&architecture=avas`;
 const MAX_REALTIME_SDP_BYTES = 1024 * 1024;
+const MAX_REALTIME_PROVIDER_VALUE_LENGTH = 128;
+const REALTIME_PROVIDER_VALUE = /^[a-z0-9][a-z0-9._-]*$/i;
 const REALTIME_CALL_ID =
   /^(?:rtc_.+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i;
 
@@ -78,8 +84,108 @@ export class CodexRealtimeError extends Error {
 export type CodexRealtimeCallOptions = {
   signal?: AbortSignal | undefined;
   timeoutMs?: number | undefined;
+  providerConfig?: CodexRealtimeProviderConfig | undefined;
 };
 
+export type CodexRealtimeProviderConfig = {
+  architecture: string;
+  model: string;
+  version: typeof CODEX_REALTIME_VERSION;
+};
+
+const FALLBACK_REALTIME_PROVIDER_CONFIG: CodexRealtimeProviderConfig = {
+  architecture: CODEX_REALTIME_PROVIDER_ARCHITECTURE_FALLBACK,
+  model: CODEX_REALTIME_PROVIDER_MODEL_FALLBACK,
+  version: CODEX_REALTIME_VERSION,
+};
+
+/**
+ * Resolve the provider-controlled Codex voice model without changing the
+ * stable OpenGeni model id. ChatGPT rotates this config independently of Codex
+ * releases; pinning the old value caused deterministic call-creation failures.
+ */
+export async function fetchCodexRealtimeProviderConfig(
+  auth: CodexAuthHeaders,
+  fetchImpl: CodexFetch = fetch,
+  options: {
+    signal?: AbortSignal | undefined;
+    timeoutMs?: number | undefined;
+  } = {},
+): Promise<CodexRealtimeProviderConfig> {
+  if (options.signal?.aborted) {
+    throw new CodexRealtimeError("cancelled", "Codex realtime request cancelled");
+  }
+  const controller = new AbortController();
+  const timeoutMs = options.timeoutMs ?? CODEX_REALTIME_CONFIG_TIMEOUT_MS;
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  const onAbort = (): void => controller.abort(options.signal?.reason);
+  options.signal?.addEventListener("abort", onAbort, { once: true });
+  try {
+    const response = await fetchImpl(`${CODEX_WHAM_BASE}/wham/statsig/bootstrap`, {
+      method: "POST",
+      headers: {
+        ...codexSubscriptionHeaders(auth),
+        "content-type": "application/json",
+      },
+      body: JSON.stringify({
+        app_session_id: crypto.randomUUID(),
+        app_version: auth.clientVersion,
+        brand_name: "Codex",
+        build_flavor: "stable",
+        locale: "en-US",
+        stable_id: auth.chatgptAccountId ?? "opengeni-server",
+        system_name: "OpenGeni",
+        system_version: "server",
+        window_type: "local",
+      }),
+      signal: controller.signal,
+    });
+    if (response.status === 401) {
+      await response.body?.cancel().catch(() => undefined);
+      throw new CodexRealtimeError(
+        "authentication",
+        "Codex subscription rejected authentication",
+        response.status,
+      );
+    }
+    if (!response.ok) {
+      await response.body?.cancel().catch(() => undefined);
+      return FALLBACK_REALTIME_PROVIDER_CONFIG;
+    }
+    const outer = (await response.json().catch(() => null)) as {
+      statsigPayload?: unknown;
+    } | null;
+    if (typeof outer?.statsigPayload !== "string") return FALLBACK_REALTIME_PROVIDER_CONFIG;
+    const payload = JSON.parse(outer.statsigPayload) as {
+      dynamic_configs?: Record<string, { value?: Record<string, unknown> }>;
+    };
+    const value = payload.dynamic_configs?.[CODEX_REALTIME_CONFIG_ID]?.value;
+    const version = value?.version;
+    if (version !== undefined && version !== CODEX_REALTIME_VERSION) {
+      throw new CodexRealtimeError(
+        "incompatible",
+        `Codex realtime remote configuration requires ${String(version)}`,
+      );
+    }
+    const architecture = validProviderValue(value?.architecture)
+      ? value.architecture
+      : FALLBACK_REALTIME_PROVIDER_CONFIG.architecture;
+    const model = validProviderValue(value?.model)
+      ? value.model
+      : FALLBACK_REALTIME_PROVIDER_CONFIG.model;
+    return { architecture, model, version: CODEX_REALTIME_VERSION };
+  } catch (error) {
+    if (error instanceof CodexRealtimeError) throw error;
+    if (options.signal?.aborted) {
+      throw new CodexRealtimeError("cancelled", "Codex realtime request cancelled");
+    }
+    return FALLBACK_REALTIME_PROVIDER_CONFIG;
+  } finally {
+    clearTimeout(timeout);
+    options.signal?.removeEventListener("abort", onAbort);
+  }
+}
+
 /**
  * Create one native subscription-authenticated Codex GPT-Live V3 WebRTC call.
  *
@@ -95,12 +201,28 @@ export async function createCodexRealtimeCall(
 ): Promise<CodexRealtimeCallResult> {
   validateRealtimeInput(input);
   const timeoutMs = options.timeoutMs ?? CODEX_REALTIME_CALL_TIMEOUT_MS;
+  const providerConfig = options.providerConfig ?? FALLBACK_REALTIME_PROVIDER_CONFIG;
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
     throw new CodexRealtimeError("invalid_request", "Codex realtime timeout must be positive");
   }
   if (options.signal?.aborted) {
     throw new CodexRealtimeError("cancelled", "Codex realtime request cancelled");
   }
+  if (providerConfig.version !== CODEX_REALTIME_VERSION) {
+    throw new CodexRealtimeError(
+      "incompatible",
+      `Codex realtime provider configuration requires ${providerConfig.version}`,
+    );
+  }
+  if (
+    !validProviderValue(providerConfig.architecture) ||
+    !validProviderValue(providerConfig.model)
+  ) {
+    throw new CodexRealtimeError(
+      "invalid_request",
+      "Codex realtime provider configuration is invalid",
+    );
+  }
 
   const controller = new AbortController();
   let timedOut = false;
@@ -124,42 +246,45 @@ export async function createCodexRealtimeCall(
   });
 
   const request = (async (): Promise<CodexRealtimeCallResult> => {
-    const response = await fetchImpl(CODEX_REALTIME_CALL_URL, {
-      method: "POST",
-      headers: {
-        ...codexSubscriptionHeaders(auth),
-        "content-type": "application/json",
-        "openai-alpha": "quicksilver=v2",
-        "session-id": input.sessionId,
-        "thread-id": input.sessionId,
-      },
-      body: JSON.stringify({
-        sdp: input.sdp,
-        session: {
-          instructions: input.instructions ?? "",
-          audio: {
-            output: { voice: input.voice ?? CODEX_REALTIME_DEFAULT_VOICE },
-          },
-          delegation: { type: "client" },
-          model: CODEX_REALTIME_MODEL,
-          ...(input.initialItems?.length
-            ? {
-                initial_items: input.initialItems.map((item) => ({
-                  type: "message",
-                  role: item.role,
-                  content: [
-                    {
-                      type: item.role === "assistant" ? "output_text" : "input_text",
-                      text: item.text,
-                    },
-                  ],
-                })),
-              }
-            : {}),
+    const response = await fetchImpl(
+      `${CODEX_RESPONSES_BASE}/realtime/calls?intent=quicksilver&architecture=${encodeURIComponent(providerConfig.architecture)}`,
+      {
+        method: "POST",
+        headers: {
+          ...codexSubscriptionHeaders(auth),
+          "content-type": "application/json",
+          "openai-alpha": "quicksilver=v2",
+          "session-id": input.sessionId,
+          "thread-id": input.sessionId,
         },
-      }),
-      signal: controller.signal,
-    });
+        body: JSON.stringify({
+          sdp: input.sdp,
+          session: {
+            instructions: input.instructions ?? "",
+            audio: {
+              output: { voice: input.voice ?? CODEX_REALTIME_DEFAULT_VOICE },
+            },
+            delegation: { type: "client" },
+            model: providerConfig.model,
+            ...(input.initialItems?.length
+              ? {
+                  initial_items: input.initialItems.map((item) => ({
+                    type: "message",
+                    role: item.role,
+                    content: [
+                      {
+                        type: item.role === "assistant" ? "output_text" : "input_text",
+                        text: item.text,
+                      },
+                    ],
+                  })),
+                }
+              : {}),
+          },
+        }),
+        signal: controller.signal,
+      },
+    );
 
     if (!response.ok) {
       await response.body?.cancel().catch(() => undefined);
@@ -208,6 +333,14 @@ export async function createCodexRealtimeCall(
   }
 }
 
+function validProviderValue(value: unknown): value is string {
+  return (
+    typeof value === "string" &&
+    value.length <= MAX_REALTIME_PROVIDER_VALUE_LENGTH &&
+    REALTIME_PROVIDER_VALUE.test(value)
+  );
+}
+
 /** Shared pin→active selection for worker turns and direct realtime calls. */
 export function selectCodexCredentialId(args: {
   sessionPinnedCredentialId: string | null;

package/dist/chunk-HT463QWA.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["// Wire constants for the ChatGPT/Codex subscription backend.\n// Source: CODEX-SUBSCRIPTION-SPEC.md (verified against openai/codex codex-rs).\n\nexport const CODEX_ISSUER = \"https://auth.openai.com\";\nexport const CODEX_CLIENT_ID = \"app_EMoamEEZ73f0CkXaXp7hrann\"; // spec §1.1 (manager.rs:1444)\nexport const CODEX_AUTH_BASE = `${CODEX_ISSUER}/api/accounts`; // device endpoints (device_code_auth.rs:164)\nexport const CODEX_TOKEN_URL = `${CODEX_ISSUER}/oauth/token`; // exchange (form) + refresh (json)\nexport const CODEX_DEVICE_VERIFICATION_URL = `${CODEX_ISSUER}/codex/device`;\nexport const CODEX_DEVICE_REDIRECT_URI = `${CODEX_ISSUER}/deviceauth/callback`;\n\n// Model requests: base already includes /codex; client appends /responses, /models.\nexport const CODEX_RESPONSES_BASE = \"https://chatgpt.com/backend-api/codex\";\n// Usage lives on the WHAM base — NOT under /codex (verified, spec §1.8a).\nexport const CODEX_WHAM_BASE = \"https://chatgpt.com/backend-api\";\n\nexport const CODEX_ORIGINATOR = \"codex_cli_rs\"; // whitelisted originator (spec §1.2)\nexport const CODEX_ID_TOKEN_AUTH_CLAIM = \"https://api.openai.com/auth\";\n\n// Synthetic registry-provider identity. The provider's baseURL is the bare\n// /backend-api (NOT /codex) — codexSubscriptionFetch rewrites /responses ->\n// /codex/responses. Codex model ids are namespaced `codex/<slug>` so they never\n// collide with the built-in OpenAI provider's model ids; the fetch's resolveModel\n// strips the prefix before the slug reaches the backend.\nexport const CODEX_PROVIDER_ID = \"codex-subscription\";\nexport const CODEX_PROVIDER_BASE_URL = \"https://chatgpt.com/backend-api\";\nexport const CODEX_MODEL_ID_PREFIX = \"codex/\";\n\n// The only Codex subscription models OpenGeni exposes. The live GET /models\n// catalog must contain every exact slug; older or internal models never broaden\n// this product allowlist.\nexport const CODEX_FALLBACK_MODEL_SLUGS = [\"gpt-5.6-sol\", \"gpt-5.6-terra\", \"gpt-5.6-luna\"] as const;\n\n// Live Codex model-catalog values for every exposed gpt-5.6 subscription slug.\n// Verified 2026-07-18 against Codex CLI 0.144.6's freshly fetched\n// ~/.codex/models_cache.json and the matching openai/codex core derivations:\n//   raw context window                = 272,000\n//   effective input window (95%)      = 258,400\n//   automatic compaction limit (90%)  = 244,800\n// Keep all three explicit: the effective ceiling is a hard input guard while\n// the lower auto-compact limit is the proactive checkpoint trigger.\nexport const CODEX_MODEL_CONTEXT_WINDOW_TOKENS = 272_000;\nexport const CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT = 95;\nexport const CODEX_MODEL_EFFECTIVE_CONTEXT_WINDOW_TOKENS = Math.floor(\n  (CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_EFFECTIVE_CONTEXT_WINDOW_PERCENT) / 100,\n);\nexport const CODEX_AUTO_COMPACTION_PERCENT = 90;\nexport const CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT = Math.floor(\n  (CODEX_MODEL_CONTEXT_WINDOW_TOKENS * CODEX_AUTO_COMPACTION_PERCENT) / 100,\n);\n\n// Sent as the `version` header and inside the User-Agent. Staging-proven on\n// 2026-07-09: 0.142.4 filtered every GPT-5.6 slug out of GET /models, while the\n// official Codex 0.144.0+ releases return all three exact slugs above. Keep\n// this pinned to the latest stable Codex release we have verified end-to-end.\nexport const CODEX_CLIENT_VERSION = \"0.145.0\";\n\n// Native ChatGPT/Codex subscription WebRTC call creation. Verified against\n// openai/codex 0.145.0 commit bd2de422aa287b97b06ca6425a10935bcf1b3731.\nexport const CODEX_REALTIME_MODEL = \"gpt-live-1-boulder-alpha\";\nexport const CODEX_REALTIME_VERSION = \"v3\";\nexport const CODEX_REALTIME_DEFAULT_VOICE = \"cove\";\nexport const CODEX_REALTIME_CALL_TIMEOUT_MS = 15_000;\n\nexport const CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1000; // proactive refresh when within 5 min of exp (spec §1.1)\nexport const CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1000; // 8 days when exp is unparseable\n\n// Codex Responses transport deadlines. The OpenAI SDK's own timeout only covers\n// the wait for response headers and erases the underlying timeout class into the\n// bare `Request timed out.` error. Keep the provider-specific budgets here so\n// the transport can enforce and durably report them without enabling the SDK's\n// blind request replay.\nexport const CODEX_RESPONSE_HEADERS_TIMEOUT_MS = 4 * 60_000;\nexport const CODEX_RESPONSE_STREAM_IDLE_TIMEOUT_MS = 5 * 60_000;\nexport const CODEX_RESPONSE_WHOLE_TIMEOUT_MS = 30 * 60_000;\n// Kept as a compatibility-shaped policy field, but automatic replay is disabled\n// until a provider-specific operation receipt can prove non-acceptance or resume\n// the same operation identity. An absent response does not prove that the\n// provider never accepted the request.\nexport const CODEX_RESPONSE_NO_BYTE_RETRIES = 0;\nexport const CODEX_RESPONSE_RETRY_BACKOFF_MS = 1_000;\n// Must exceed the transport-owned whole-response deadline. This SDK guard is a\n// last-resort envelope; the inner transport emits the typed/durable failure.\nexport const CODEX_RESPONSE_SDK_OUTER_TIMEOUT_MS = 35 * 60_000;\n\n// ── Apps / connectors MCP (spec §1.10, §E) ───────────────────────────────────\n// One server-side MCP exposes ALL the user's ChatGPT/Codex connectors\n// (gmail/github/linear/slack/sentry/drive/calendar/…). Streamable HTTP, always.\nexport const CODEX_APPS_MCP_SERVER_ID = \"codex_apps\"; // tools surface as mcp__codex_apps__<tool>\nexport const CODEX_APPS_MCP_SERVER_NAME = \"codex_apps\"; // MCP `name` — MUST equal the id so the SDK namespaces tools as mcp__codex_apps__*\nexport const CODEX_APPS_MCP_URL = \"https://chatgpt.com/backend-api/ps/mcp\"; // live URL (NOT /codex, NOT the legacy /wham/apps)\nexport const CODEX_APPS_STARTUP_TIMEOUT_MS = 30_000; // startup_timeout 30s (spec §1.10) — maps to timeoutMs on this server only\n// Connector scopes that the apps MCP requires. Present ONLY when granted at\n// browser-authorize time; the device-code path CANNOT be confirmed to grant\n// them, so treat connector availability as runtime-discovered (spec §1.10 / §E).\nexport const CODEX_APPS_REQUIRED_SCOPES = [\"api.connectors.read\", \"api.connectors.invoke\"] as const;\n"],"mappings":";AAGO,IAAM,eAAe;AACrB,IAAM,kBAAkB;AACxB,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,kBAAkB,GAAG,YAAY;AACvC,IAAM,gCAAgC,GAAG,YAAY;AACrD,IAAM,4BAA4B,GAAG,YAAY;AAGjD,IAAM,uBAAuB;AAE7B,IAAM,kBAAkB;AAExB,IAAM,mBAAmB;AACzB,IAAM,4BAA4B;AAOlC,IAAM,oBAAoB;AAC1B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAK9B,IAAM,6BAA6B,CAAC,eAAe,iBAAiB,cAAc;AAUlF,IAAM,oCAAoC;AAC1C,IAAM,yCAAyC;AAC/C,IAAM,8CAA8C,KAAK;AAAA,EAC7D,oCAAoC,yCAA0C;AACjF;AACO,IAAM,gCAAgC;AACtC,IAAM,uCAAuC,KAAK;AAAA,EACtD,oCAAoC,gCAAiC;AACxE;AAMO,IAAM,uBAAuB;AAI7B,IAAM,uBAAuB;AAC7B,IAAM,yBAAyB;AAC/B,IAAM,+BAA+B;AACrC,IAAM,iCAAiC;AAEvC,IAAM,0BAA0B,IAAI,KAAK;AACzC,IAAM,4BAA4B,IAAI,KAAK,KAAK,KAAK;AAOrD,IAAM,oCAAoC,IAAI;AAC9C,IAAM,wCAAwC,IAAI;AAClD,IAAM,kCAAkC,KAAK;AAK7C,IAAM,iCAAiC;AACvC,IAAM,kCAAkC;AAGxC,IAAM,sCAAsC,KAAK;AAKjD,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,qBAAqB;AAC3B,IAAM,gCAAgC;AAItC,IAAM,6BAA6B,CAAC,uBAAuB,uBAAuB;","names":[]}