@tnnevol/dsh-codex-auth 0.1.2-alpha.4 → 0.1.2-rc.1.2

package/lib/index.js

@@ -1,22 +1,18 @@
-import { a as CODEX_PROVIDER, i as CODEX_AUTH_FILENAME, n as loginCodex, o as CodexCredentialStore, r as logoutCodex, s as codexAuthPath, t as codexAuthStatus } from "./auth-DQ2F4vc6.js";
-import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_USAGE_PATH } from "./auth-paths.js";
-import { APP_IDENTITY, createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
+import { a as CODEX_PROVIDER, i as CODEX_AUTH_FILENAME, n as loginCodex, o as CodexCredentialStore, r as logoutCodex, s as codexAuthPath, t as codexAuthStatus } from "./auth-BdEwtK4R.js";
+import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_MODEL_REFRESH_PATH, CODEX_USAGE_PATH } from "./auth-paths.js";
 import { createModels, defaultProviderAuthContext } from "@earendil-works/pi-ai";
 import { openaiCodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
-import { basename } from "node:path";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-import z from "@deepseek-ai/schemastery";
-import { AttachmentId } from "@deepseek-ai/dsh-attachment";
-import { defineTool } from "@deepseek-ai/dsh-tools";
+import { resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
-//#region src/usage.ts
+//#region src/host/usage.ts
 /** Read-only Codex account quota information for the local settings card. */
 const CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
 const CODEX_USAGE_TIMEOUT_MS = 1e4;
-function record(value) {
+function record$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
-function number(value) {
+function number$1(value) {
 	if (typeof value === "number") return Number.isFinite(value) ? value : void 0;
 	if (typeof value !== "string" || value.trim() === "") return void 0;
 	const parsed = Number(value);
@@ -25,7 +21,7 @@ function number(value) {
 function boolean(value) {
 	return typeof value === "boolean" ? value : void 0;
 }
-function string(value) {
+function string$1(value) {
 	if (typeof value === "string" && value.length > 0) return value;
 	if (typeof value === "number" && Number.isFinite(value)) return String(value);
 }
@@ -33,14 +29,14 @@ function percentage(value) {
 	return Math.max(0, Math.min(100, value));
 }
 function window(value) {
-	const source = record(value);
+	const source = record$1(value);
 	if (source === void 0) return void 0;
 	const result = {};
-	const usedPercent = number(source["used_percent"]);
-	const explicitRemainingPercent = number(source["remaining_percent"]);
-	const limitWindowSeconds = number(source["limit_window_seconds"]);
-	const resetAfterSeconds = number(source["reset_after_seconds"]);
-	const resetAt = number(source["reset_at"]);
+	const usedPercent = number$1(source["used_percent"]);
+	const explicitRemainingPercent = number$1(source["remaining_percent"]);
+	const limitWindowSeconds = number$1(source["limit_window_seconds"]);
+	const resetAfterSeconds = number$1(source["reset_after_seconds"]);
+	const resetAt = number$1(source["reset_at"]);
 	if (explicitRemainingPercent !== void 0) result.remainingPercent = percentage(explicitRemainingPercent);
 	else if (usedPercent !== void 0) result.remainingPercent = percentage(100 - usedPercent);
 	if (limitWindowSeconds !== void 0) result.limitWindowSeconds = limitWindowSeconds;
@@ -49,12 +45,12 @@ function window(value) {
 	return Object.keys(result).length > 0 ? result : void 0;
 }
 function credits(value) {
-	const source = record(value);
+	const source = record$1(value);
 	if (source === void 0) return void 0;
 	const result = {};
 	const hasCredits = boolean(source["has_credits"]);
 	const unlimited = boolean(source["unlimited"]);
-	const balance = string(source["balance"]);
+	const balance = string$1(source["balance"]);
 	if (hasCredits !== void 0) result.hasCredits = hasCredits;
 	if (unlimited !== void 0) result.unlimited = unlimited;
 	if (balance !== void 0) result.balance = balance;
@@ -62,11 +58,11 @@ function credits(value) {
 }
 /** Normalize the evolving private WHAM response into a small UI-safe shape. */
 function normalizeCodexUsagePayload(value) {
-	const source = record(value);
+	const source = record$1(value);
 	if (source === void 0) throw new Error("Codex usage response was not an object");
-	const rateLimit = record(source["rate_limit"]);
+	const rateLimit = record$1(source["rate_limit"]);
 	const result = {};
-	const planType = string(source["plan_type"]);
+	const planType = string$1(source["plan_type"]);
 	const allowed = boolean(rateLimit?.["allowed"]);
 	const limitReached = boolean(rateLimit?.["limit_reached"]);
 	const primaryWindow = window(rateLimit?.["primary_window"]);
@@ -80,10 +76,10 @@ function normalizeCodexUsagePayload(value) {
 	if (quota !== void 0) result.credits = quota;
 	return result;
 }
-function accessToken(auth) {
+function accessToken$1(auth) {
 	return typeof auth?.apiKey === "string" && auth.apiKey.length > 0 ? auth.apiKey : void 0;
 }
-function accountId(credential) {
+function accountId$1(credential) {
 	if (credential?.type !== "oauth") return void 0;
 	return typeof credential.accountId === "string" && credential.accountId.length > 0 ? credential.accountId : void 0;
 }
@@ -108,9 +104,9 @@ var CodexUsageService = class {
 		}
 	}
 	async readNow() {
-		const token = accessToken((await this.models.getAuth(CODEX_PROVIDER))?.auth);
+		const token = accessToken$1((await this.models.getAuth(CODEX_PROVIDER))?.auth);
 		if (token === void 0) return void 0;
-		const account = accountId(await this.store.read(CODEX_PROVIDER));
+		const account = accountId$1(await this.store.read(CODEX_PROVIDER));
 		if (account === void 0) return void 0;
 		const controller = new AbortController();
 		const timer = setTimeout(() => {
@@ -135,36 +131,198 @@ var CodexUsageService = class {
 	}
 };
 //#endregion
-//#region src/settings-contract.ts
-const DEFAULT_CODEX_AUTH_SETTINGS = Object.freeze({
-	enableImageTool: false,
-	enableImageUpload: false
-});
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/** Narrow the settings wire payload before it enters React state. */
-function decodeCodexAuthSettings(value) {
-	if (!isRecord(value) || typeof value["enableImageTool"] !== "boolean") return void 0;
+//#region src/host/model-refresh.ts
+/**
+* Refresh the OpenAI Codex route's model catalog from the signed-in
+* ChatGPT account instead of the pi-ai installed static table.
+*
+* pi-ai ships a build-time snapshot of Codex models (`gpt-5.3-codex-spark` …
+* `gpt-5.6-*`). The ChatGPT backend lists what the *signed-in account* can
+* actually use today (`chatgpt.com/backend-api/codex/models`), which drifts
+* from that snapshot — new models appear (e.g. `gpt-6-astra`) and retired
+* ones disappear. The harness model catalog, the in-conversation model
+* picker, and the plugin's own global-model Cascader all read the route's
+* model list from llm-pi-ai, which resolves the profile's `models` array
+* over the pi-ai catalog. Writing that array therefore updates every
+* selector at once, and writing it in the user settings layer *replaces*
+* the composition's static list (DSH settings merge arrays wholesale).
+*
+* Only the account's user-visible model rows are written: internal service
+* rows (`codex-auto-review`, `gpt-reserve`, anything the backend marks
+* `visibility: hide`) are skipped so pickers keep showing models a human
+* would choose.
+*/
+const CODEX_MODELS_URL = "https://chatgpt.com/backend-api/codex/models";
+const CODEX_MODELS_CLIENT_VERSION = "1.0.0";
+const CODEX_MODELS_TIMEOUT_MS = 15e3;
+/**
+* Thinking levels DSH's llm-pi-ai profile vocabulary can express. The ChatGPT
+* backend may advertise `ultra` (and more in future) which this vocabulary
+* cannot carry; such levels are dropped from the written profile, with the
+* model's remaining levels preserved.
+*/
+const LLM_PI_AI_THINKING_LEVELS = /* @__PURE__ */ new Set([
+	"minimal",
+	"low",
+	"medium",
+	"high",
+	"xhigh",
+	"max"
+]);
+/** Rows the account endpoint returns for machinery, not human selection. */
+const INTERNAL_CODEX_MODEL_IDS = /* @__PURE__ */ new Set(["codex-auto-review", "gpt-reserve"]);
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function accessToken(auth) {
+	return typeof auth?.apiKey === "string" && auth.apiKey.length > 0 ? auth.apiKey : void 0;
+}
+function accountId(credential) {
+	const value = record(credential)?.["accountId"];
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function string(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function number(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+/** Resolve the output-cap estimate for one account row. */
+function outputCap(model) {
+	const context = number(model.context_window);
+	if (context === void 0) return 128e3;
+	return Math.min(128e3, Math.max(32768, context));
+}
+/** Map account modalities onto pi-ai's `input` vocabulary (text/image only). */
+function inputModalities(model) {
+	const raw = model.input_modalities;
+	if (!Array.isArray(raw) || raw.length === 0) return ["text"];
+	const allowed = /* @__PURE__ */ new Set(["text", "image"]);
+	const values = raw.filter((value) => typeof value === "string" && allowed.has(value));
+	return values.length > 0 ? values : ["text"];
+}
+/**
+* Normalize the account's reasoning levels into llm-pi-ai's
+* `reasoningEfforts` dict (level → wire value) or `false`.
+*
+* The backend effort names double as the wire value the responses API
+* expects, so each supported level maps to itself. `ultra` and any future
+* level outside llm-pi-ai's vocabulary is dropped; a model whose only
+* declared level falls outside the vocabulary becomes `false` (no thinking).
+*/
+function normalizeReasoningEfforts(model) {
+	const rows = model.supported_reasoning_levels;
+	if (!Array.isArray(rows) || rows.length === 0) return false;
+	const efforts = {};
+	for (const row of rows) {
+		const effort = string(row.effort);
+		if (effort === void 0 || !LLM_PI_AI_THINKING_LEVELS.has(effort)) continue;
+		efforts[effort] = effort;
+	}
+	return Object.keys(efforts).length > 0 ? efforts : false;
+}
+function isSelectable(model) {
+	if (model.slug === void 0) return false;
+	if (INTERNAL_CODEX_MODEL_IDS.has(model.slug)) return false;
+	return model.visibility !== "hide";
+}
+/**
+* Normalize one raw account model row into a profile entry, or `undefined`
+* when the row is not human-selectable or lacks the identity/context facts a
+* profile entry requires.
+*/
+function normalizeCodexModel(model) {
+	const id = string(model.slug);
+	if (id === void 0 || !isSelectable(model)) return void 0;
+	const name = string(model.display_name) ?? id;
+	const context = number(model.context_window);
+	if (context === void 0) return void 0;
+	return {
+		id,
+		name,
+		contextWindow: context,
+		maxTokens: outputCap(model),
+		input: inputModalities(model),
+		reasoningEfforts: normalizeReasoningEfforts(model)
+	};
+}
+/**
+* Normalize a full account catalog response into the list of profile model
+* entries and the skipped row slugs. The result is ready to write to the
+* llm-pi-ai `providers.openai-codex.models` array.
+*/
+function normalizeCodexCatalog(payload) {
+	const rows = Array.isArray(payload.models) ? payload.models : [];
+	const models = [];
+	const skipped = [];
+	for (const row of rows) {
+		const entry = normalizeCodexModel(row);
+		if (entry === void 0) {
+			const slug = string(row.slug);
+			if (slug !== void 0 && row.visibility === "hide") skipped.push(slug);
+			continue;
+		}
+		models.push(entry);
+	}
+	return {
+		models,
+		skipped
+	};
+}
+/** Read the signed-in account's current Codex model catalog. */
+async function fetchCodexModelCatalog(store, fetchImpl = fetch) {
+	const models = createModels({ credentials: store });
+	models.setProvider(openaiCodexProvider());
+	const token = accessToken((await models.getAuth(CODEX_PROVIDER))?.auth);
+	if (token === void 0) throw new Error("codex model refresh requires a signed-in ChatGPT account");
+	const account = accountId(await store.read(CODEX_PROVIDER));
+	if (account === void 0) throw new Error("codex model refresh requires the ChatGPT account id");
+	const controller = new AbortController();
+	const timer = setTimeout(() => {
+		controller.abort();
+	}, CODEX_MODELS_TIMEOUT_MS);
+	try {
+		const url = new URL(CODEX_MODELS_URL);
+		url.searchParams.set("client_version", CODEX_MODELS_CLIENT_VERSION);
+		const response = await fetchImpl(url, {
+			method: "GET",
+			headers: {
+				accept: "application/json",
+				authorization: `Bearer ${token}`,
+				"ChatGPT-Account-Id": account,
+				"user-agent": "dsh-codex-auth-plugin"
+			},
+			signal: controller.signal
+		});
+		if (!response.ok) throw new Error(`Codex model catalog request failed with status ${String(response.status)}`);
+		const parsed = record(await response.json());
+		if (parsed === void 0 || !Array.isArray(parsed["models"])) throw new Error("Codex model catalog response was not an object with a models array");
+		return { models: parsed["models"] };
+	} finally {
+		clearTimeout(timer);
+	}
+}
+/**
+* Fetch and normalize the account catalog. Returns the ready-to-write model
+* list plus skipped row slugs; throws a plain `Error` when the account is
+* signed out, the backend request fails, or the payload is unusable.
+*/
+async function refreshCodexModelCatalog(store, fetchImpl = fetch) {
+	const { models, skipped } = normalizeCodexCatalog(await fetchCodexModelCatalog(store, fetchImpl));
+	if (models.length === 0) throw new Error("Codex model catalog returned no selectable models");
 	return {
-		enableImageTool: value["enableImageTool"],
-		enableImageUpload: typeof value["enableImageUpload"] === "boolean" ? value["enableImageUpload"] : DEFAULT_CODEX_AUTH_SETTINGS.enableImageUpload
+		models,
+		skipped
 	};
 }
 //#endregion
-//#region src/auth-routes.ts
+//#region src/host/auth-routes.ts
 const CODEX_AUTH_URL_TIMEOUT_MS = 3e4;
 const REMOTE_WEB_ORIGIN_NOT_TRUSTED = "remote-web-origin-not-trusted";
 const CODEX_USAGE_UNAVAILABLE = "codex-usage-unavailable";
-const CODEX_SETTINGS_INVALID = "codex-settings-invalid";
 const CODEX_GLOBAL_MODEL_INVALID = "codex-global-model-invalid";
-const CODEX_SETTINGS_BODY_LIMIT = 8192;
-function withDshVersion(status) {
-	return {
-		...status,
-		dshVersion: APP_IDENTITY.version
-	};
-}
+const CODEX_MODEL_REFRESH_FAILED = "codex-model-refresh-failed";
+const CODEX_REQUEST_BODY_LIMIT = 8192;
 function signedInStatus(expiresAt) {
 	return expiresAt === void 0 ? { status: "signed-in" } : {
 		status: "signed-in",
@@ -370,7 +528,7 @@ function readJsonBody(req) {
 		req.on("data", (chunk) => {
 			if (finished) return;
 			size += Buffer.byteLength(chunk);
-			if (size > CODEX_SETTINGS_BODY_LIMIT) {
+			if (size > CODEX_REQUEST_BODY_LIMIT) {
 				finished = true;
 				reject(/* @__PURE__ */ new Error("request body is too large"));
 				return;
@@ -393,12 +551,6 @@ function readJsonBody(req) {
 		});
 	});
 }
-function decodeSettingsWrite(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-	const record = value;
-	if (typeof record["enableImageTool"] !== "boolean" || typeof record["enableImageUpload"] !== "boolean") return;
-	return decodeCodexAuthSettings(record);
-}
 function codexGlobalModelOf(selection) {
 	if (selection.provider !== "openai-codex") return void 0;
 	return {
@@ -416,8 +568,13 @@ function decodeGlobalModelWrite(value) {
 		...typeof record.reasoningEffort === "string" ? { reasoningEffort: record.reasoningEffort } : {}
 	};
 }
-/** Register the plugin-owned bridge to DSH alpha.4's shared Agent default model. */
-function registerCodexGlobalModelRoute(ctx, defaultModel, llm) {
+/**
+* Register the endpoint that refreshes the OpenAI Codex route model catalog
+* from the signed-in ChatGPT account and writes it into the llm-pi-ai user
+* settings layer.
+*/
+function registerCodexModelRefreshRoute(ctx, store, settings) {
+	const llmPiAiNamespace = "llm-pi-ai";
 	ctx.effect(() => {
 		const authorize = (req, res) => {
 			if (trustedRequest(req)) return true;
@@ -426,31 +583,31 @@ function registerCodexGlobalModelRoute(ctx, defaultModel, llm) {
 		};
 		return ctx.webServer.register({
 			kind: "exact",
-			path: CODEX_GLOBAL_MODEL_PATH,
+			path: CODEX_MODEL_REFRESH_PATH,
 			handler: async (req, res) => {
-				if (req.method !== "GET" && req.method !== "PUT") return json(res, 405, { error: "method not allowed" });
+				if (req.method !== "POST") return json(res, 405, { error: "method not allowed" });
 				if (!authorize(req, res)) return;
-				if (req.method === "GET") return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
 				try {
-					const next = decodeGlobalModelWrite(await readJsonBody(req));
-					if (next === void 0) return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
-					const resolved = await llm.resolveCallConfig({
-						provider: CODEX_PROVIDER,
-						model: next.model,
-						...next.reasoningEffort === void 0 ? {} : { reasoningEffort: next.reasoningEffort }
+					const { models, skipped } = await refreshCodexModelCatalog(store);
+					await settings.update(llmPiAiNamespace, { providers: { [CODEX_PROVIDER]: { models } } });
+					json(res, 200, {
+						ok: true,
+						models,
+						skipped
 					});
-					if (resolved.provider !== "openai-codex") return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
-					await defaultModel.saveSelection(resolved);
-					return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
 				} catch (error) {
-					return json(res, 400, { error: safeMessage(error) });
+					const message = safeMessage(error);
+					json(res, 502, {
+						error: CODEX_MODEL_REFRESH_FAILED,
+						message
+					});
 				}
 			}
 		});
-	}, "dsh-codex-auth-plugin: global Codex model route");
+	}, "dsh-codex-auth-plugin: Codex model catalog refresh route");
 }
-/** Register the plugin-owned settings endpoint for browsers opened through a NAS authority. */
-function registerCodexSettingsRoute(ctx, settings) {
+/** Register the plugin-owned bridge to DSH alpha.4's shared Agent default model. */
+function registerCodexGlobalModelRoute(ctx, defaultModel, llm) {
 	ctx.effect(() => {
 		const authorize = (req, res) => {
 			if (trustedRequest(req)) return true;
@@ -459,22 +616,28 @@ function registerCodexSettingsRoute(ctx, settings) {
 		};
 		return ctx.webServer.register({
 			kind: "exact",
-			path: CODEX_AUTH_SETTINGS_PATH,
+			path: CODEX_GLOBAL_MODEL_PATH,
 			handler: async (req, res) => {
 				if (req.method !== "GET" && req.method !== "PUT") return json(res, 405, { error: "method not allowed" });
 				if (!authorize(req, res)) return;
-				if (req.method === "GET") return json(res, 200, settings.get());
+				if (req.method === "GET") return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
 				try {
-					const next = decodeSettingsWrite(await readJsonBody(req));
-					if (next === void 0) return json(res, 400, { error: CODEX_SETTINGS_INVALID });
-					await settings.update(next);
-					json(res, 200, settings.get());
+					const next = decodeGlobalModelWrite(await readJsonBody(req));
+					if (next === void 0) return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
+					const resolved = await llm.resolveCallConfig({
+						provider: CODEX_PROVIDER,
+						model: next.model,
+						...next.reasoningEffort === void 0 ? {} : { reasoningEffort: next.reasoningEffort }
+					});
+					if (resolved.provider !== "openai-codex") return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
+					await defaultModel.saveSelection(resolved);
+					return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
 				} catch (error) {
-					json(res, 400, { error: safeMessage(error) });
+					return json(res, 400, { error: safeMessage(error) });
 				}
 			}
 		});
-	}, "dsh-codex-auth-plugin: remote settings route");
+	}, "dsh-codex-auth-plugin: global Codex model route");
 }
 /** Register the auth endpoints when the DSH Web server is available. */
 function registerCodexAuthRoutes(ctx, store, mirror) {
@@ -494,7 +657,7 @@ function registerCodexAuthRoutes(ctx, store, mirror) {
 					if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
 					if (!authorize(req, res)) return;
 					try {
-						json(res, 200, withDshVersion(await auth.status()));
+						json(res, 200, await auth.status());
 					} catch (error) {
 						json(res, 500, { error: safeMessage(error) });
 					}
@@ -550,7 +713,7 @@ function registerCodexAuthRoutes(ctx, store, mirror) {
 	}, "dsh-codex-auth-plugin: Web OAuth routes");
 }
 //#endregion
-//#region src/credential-mirror.ts
+//#region src/host/credential-mirror.ts
 /** Bridge the plugin-owned OAuth credential into dsh's generic LLM seam. */
 /** Credential reference exposed to the official `llm-pi-ai` model settings UI. */
 const CODEX_API_KEY_ENV = "OPENAI_CODEX_AUTH_TOKEN";
@@ -600,174 +763,7 @@ var CodexCredentialMirror = class {
 	}
 };
 //#endregion
-//#region src/settings.ts
-/** Host settings registration that makes the standalone auth card discoverable. */
-/** Branded namespace used by the Host settings service. */
-const CODEX_AUTH_SETTINGS_NS = CODEX_AUTH_SETTINGS_NAMESPACE;
-/** Settings schema for the plugin card and its optional image capability. */
-const CodexAuthSettingsSchema = z.object({
-	enableImageTool: z.boolean().default(DEFAULT_CODEX_AUTH_SETTINGS.enableImageTool),
-	enableImageUpload: z.boolean().default(DEFAULT_CODEX_AUTH_SETTINGS.enableImageUpload)
-});
-//#endregion
-//#region src/view-image.ts
-/** Optional Codex image-reading tool, modeled on DSH's durable attachment seam. */
-/** Stable name of the optional image-recognition tool. */
-const VIEW_IMAGE_TOOL_NAME = "view_image";
-function imageRefOf(image) {
-	return {
-		attachmentId: AttachmentId(image.attachmentId),
-		mediaType: image.mediaType,
-		bytes: image.bytes,
-		width: image.width,
-		height: image.height,
-		...image.name === void 0 ? {} : { name: image.name }
-	};
-}
-function contentOf(value) {
-	return [{
-		type: "text",
-		text: `<source>${value.source}</source>\n<image>${value.image.mediaType}, ${value.image.width}x${value.image.height} px, ${value.image.bytes} bytes</image>`
-	}, {
-		type: "image",
-		attachment: imageRefOf(value.image)
-	}];
-}
-function mediaTypeOf(data) {
-	if (data.length >= 8 && data[0] === 137 && data[1] === 80 && data[2] === 78 && data[3] === 71 && data[4] === 13 && data[5] === 10 && data[6] === 26 && data[7] === 10) return "image/png";
-	if (data.length >= 3 && data[0] === 255 && data[1] === 216 && data[2] === 255) return "image/jpeg";
-	if (data.length >= 6) {
-		const signature = String.fromCharCode(...data.subarray(0, 6));
-		if (signature === "GIF87a" || signature === "GIF89a") return "image/gif";
-	}
-	if (data.length >= 12 && String.fromCharCode(...data.subarray(0, 4)) === "RIFF" && String.fromCharCode(...data.subarray(8, 12)) === "WEBP") return "image/webp";
-}
-async function assertImageCapable(ctx, exec, source) {
-	const routed = exec.agent?.session.requestHeader()?.config;
-	const provider = routed?.provider ?? exec.agent?.options.provider;
-	const model = routed?.model ?? exec.agent?.options.model;
-	if (provider === void 0 || model === void 0) throw new Error(`cannot view ${JSON.stringify(source)}: the current model route is unavailable`);
-	const info = await ctx.llm.resolveModelInfo(provider, model, exec.signal);
-	if (info.inputModalities === void 0 || !info.inputModalities.includes("image")) throw new Error(`cannot view ${JSON.stringify(source)}: model "${model}" does not declare image input`);
-}
-/** Register a local-file image tool in the current DSH tool scope. */
-function viewImageTool(ctx) {
-	return defineTool({
-		name: VIEW_IMAGE_TOOL_NAME,
-		description: "View a local PNG, JPEG, WebP, or GIF image and return it to an image-capable model.",
-		parameters: { source: {
-			type: "string",
-			required: true,
-			description: "Absolute or workspace-relative local image path."
-		} },
-		output: {
-			schema: {
-				type: "object",
-				additionalProperties: false,
-				properties: {
-					source: {
-						type: "string",
-						required: true
-					},
-					image: {
-						type: "object",
-						required: true,
-						additionalProperties: false,
-						properties: {
-							attachmentId: {
-								type: "string",
-								required: true
-							},
-							mediaType: {
-								type: "string",
-								required: true,
-								enum: [
-									"image/png",
-									"image/jpeg",
-									"image/webp",
-									"image/gif"
-								]
-							},
-							bytes: {
-								type: "integer",
-								required: true
-							},
-							width: {
-								type: "integer",
-								required: true
-							},
-							height: {
-								type: "integer",
-								required: true
-							},
-							name: { type: "string" }
-						}
-					}
-				}
-			},
-			render: (_args, value) => contentOf(value)
-		},
-		isConcurrencySafe: () => true,
-		async execute(args, exec) {
-			const source = args.source.trim();
-			if (source.length === 0) throw new Error("view_image source must not be empty");
-			await assertImageCapable(ctx, exec, source);
-			const attachments = ctx.attachments;
-			const maxBytes = Math.min(attachments.imageLimits.maxImageBytes, attachments.imageLimits.maxMessageImageBytes);
-			const cwd = exec.agent?.session.header.cwd;
-			const target = await ctx.fs.resolve(source, {
-				...cwd === void 0 ? {} : { cwd },
-				signal: exec.signal
-			});
-			const info = await ctx.fs.stat(target, exec.signal);
-			if (info === void 0) throw new Error(`image path does not exist: ${source}`);
-			if (info.type !== "file") throw new Error(`image path is not a regular file: ${source}`);
-			const data = await ctx.fs.readBytes(target, exec.signal, maxBytes);
-			ctx.emit("fs/observed", target, {
-				kind: "present",
-				version: info.version
-			}, exec);
-			const mediaType = mediaTypeOf(data);
-			if (mediaType === void 0) throw new Error("view_image supports PNG, JPEG, WebP, and GIF image bytes");
-			if (!attachments.imageLimits.mediaTypes.includes(mediaType)) throw new Error(`${mediaType} images are disabled by this deployment`);
-			const name = basename(target.displayPath);
-			const image = {
-				data,
-				mediaType,
-				...name.length === 0 ? {} : { name }
-			};
-			await attachments.validateImage(image);
-			const ref = await attachments.saveImage(image);
-			const value = {
-				source: target.displayPath,
-				image: {
-					attachmentId: ref.attachmentId,
-					mediaType: ref.mediaType,
-					bytes: ref.bytes,
-					width: ref.width,
-					height: ref.height,
-					...ref.name === void 0 ? {} : { name: ref.name }
-				}
-			};
-			if (exec.parent !== void 0) exec.deferContext(createUserMessage({
-				content: contentOf(value),
-				source: {
-					kind: "plugin",
-					plugin: "@tnnevol/dsh-codex-auth"
-				}
-			}));
-			return value;
-		},
-		presentCall: (args) => ({
-			card: "generic",
-			title: `View image ${args.source}`,
-			kind: "read",
-			locations: [{ path: args.source }]
-		})
-	});
-}
-//#endregion
-//#region src/adapter.ts
+//#region src/host/adapter.ts
 /** OpenAI Codex adapter assembled from dsh's public pi-ai extension seam. */
 /** Keep the Codex stream open while the provider is still producing output. */
 const CODEX_STREAM_IDLE_TIMEOUT_MS = 3e5;
@@ -830,7 +826,7 @@ function createCodexAdapter(credentials, resolveAttachments) {
 //#region src/index.ts
 /** Stable Host bundle name. */
 const name = "dsh-codex-auth-plugin";
-/** Host services required by the routes, settings card, and credential mirror. */
+/** Host services required by the routes and credential mirror. */
 const inject = [
 	"webServer",
 	"settings",
@@ -839,7 +835,6 @@ const inject = [
 	"llm"
 ];
 function apply(ctx) {
-	const settings = ctx.settings.register(CODEX_AUTH_SETTINGS_NS, CodexAuthSettingsSchema);
 	const store = new CodexCredentialStore();
 	const mirror = new CodexCredentialMirror(ctx.credentials, store);
 	const syncMirror = () => {
@@ -855,48 +850,8 @@ function apply(ctx) {
 		};
 	}, "dsh-codex-auth: credential mirror");
 	registerCodexAuthRoutes(ctx, store, mirror);
-	registerCodexSettingsRoute(ctx, settings);
+	registerCodexModelRefreshRoute(ctx, store, { update: (ns, patch) => ctx.settings.update(ns, patch) });
 	registerCodexGlobalModelRoute(ctx, ctx.agentDefaultModel, ctx.llm);
-	let stopped = false;
-	let imageFiber;
-	let imageTail = Promise.resolve();
-	const reconcileImageTool = async () => {
-		if (stopped) return;
-		const enabled = settings.get().enableImageTool;
-		if (enabled === (imageFiber !== void 0)) return;
-		const previous = imageFiber;
-		imageFiber = void 0;
-		if (previous !== void 0) await previous.dispose();
-		if (stopped || !enabled) return;
-		const fiber = ctx.inject([
-			"tools",
-			"fs",
-			"attachments",
-			"llm"
-		], (toolCtx) => toolCtx.tools.register(viewImageTool(toolCtx)));
-		imageFiber = fiber;
-		Promise.resolve(fiber).catch((error) => {
-			if (imageFiber === fiber) imageFiber = void 0;
-			ctx.logger.error("dsh-codex-auth: optional view_image tool failed to activate");
-			ctx.logger.error(error);
-		});
-	};
-	const scheduleImageTool = () => {
-		imageTail = imageTail.then(reconcileImageTool, reconcileImageTool).catch((error) => {
-			ctx.logger.error("dsh-codex-auth: could not apply the image-recognition configuration");
-			ctx.logger.error(error);
-		});
-	};
-	const unwatch = settings.watch(scheduleImageTool);
-	ctx.effect(() => async () => {
-		stopped = true;
-		unwatch();
-		await imageTail;
-		const image = imageFiber;
-		imageFiber = void 0;
-		await image?.dispose();
-	}, "dsh-codex-auth: optional image-tool lifecycle");
-	scheduleImageTool();
 }
 //#endregion
-export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, CodexCredentialMirror, CodexCredentialStore, CodexUsageService, CodexWebAuth, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };
+export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, CodexCredentialMirror, CodexCredentialStore, CodexUsageService, CodexWebAuth, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };