@velum-labs/routekit-tool-codex 0.18.0 → 0.18.2

package/dist/install.d.ts

@@ -29,6 +29,15 @@ export type CodexInstallInput = {
     defaultModel?: string;
     /** Safe selector for the one persistent RouteKit profile. */
     profileId?: string;
+    /**
+     * Pull-based bearer-token helper used by current Codex releases. When
+     * omitted, the provider retains the environment-variable contract for
+     * callers that manage credentials themselves.
+     */
+    auth?: {
+        command: string;
+        args?: readonly string[];
+    };
     owner: CodexInstallOwner;
     codexHome?: string;
 };

package/dist/install.js

@@ -68,8 +68,17 @@ export function codexIntegrationBlock(input) {
                 name: `${input.owner.displayName} gateway`,
                 base_url: `${base}/v1`,
                 wire_api: "responses",
-                requires_openai_auth: false,
-                env_key: "ROUTEKIT_GATEWAY_TOKEN"
+                ...(input.auth !== undefined
+                    ? {
+                        auth: {
+                            command: input.auth.command,
+                            ...(input.auth.args !== undefined ? { args: [...input.auth.args] } : {})
+                        }
+                    }
+                    : {
+                        requires_openai_auth: false,
+                        env_key: "ROUTEKIT_GATEWAY_TOKEN"
+                    })
             }
         }
     });

package/dist/test/install.test.js

@@ -58,6 +58,29 @@ test("Codex managed install adds one picker-backed profile and removes only owne
         rmSync(home, { recursive: true, force: true });
     }
 });
+test("Codex managed install can use a command-backed bearer token", () => {
+    const home = mkdtempSync(join(tmpdir(), "routekit-codex-auth-helper-"));
+    try {
+        installCodexIntegration({
+            gatewayUrl: "http://127.0.0.1:9999",
+            owner: OWNER,
+            profiles: [{ modelId: "opaque-primary" }],
+            auth: {
+                command: "/opt/routekit/node",
+                args: ["/opt/routekit/index.js", "credential", "get", "--tool", "codex"]
+            },
+            codexHome: home
+        });
+        const config = readFileSync(join(home, "config.toml"), "utf8");
+        assert.match(config, /\[model_providers\.example_route\.auth\]/);
+        assert.match(config, /command = "\/opt\/routekit\/node"/);
+        assert.match(config, /"credential", "get", "--tool", "codex"/);
+        assert.doesNotMatch(config, /env_key|requires_openai_auth/);
+    }
+    finally {
+        rmSync(home, { recursive: true, force: true });
+    }
+});
 test("Codex's single persistent profile can use a safe custom selector", () => {
     const home = mkdtempSync(join(tmpdir(), "routekit-codex-opaque-"));
     try {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@velum-labs/routekit-tool-codex",
   "private": false,
-  "version": "0.18.0",
+  "version": "0.18.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/velum-labs/routekit.git",
@@ -29,11 +29,11 @@
     "@openai/codex-sdk": "0.145.0",
     "smol-toml": "1.7.0",
     "zod": "4.4.3",
-    "@velum-labs/routekit-contracts": "0.18.0",
-    "@velum-labs/routekit-harness-core": "0.18.0",
-    "@velum-labs/routekit-registry": "0.18.0",
-    "@velum-labs/routekit-runtime": "0.18.0",
-    "@velum-labs/routekit-tools": "0.18.0"
+    "@velum-labs/routekit-contracts": "0.18.2",
+    "@velum-labs/routekit-harness-core": "0.18.2",
+    "@velum-labs/routekit-registry": "0.18.2",
+    "@velum-labs/routekit-runtime": "0.18.2",
+    "@velum-labs/routekit-tools": "0.18.2"
   },
   "keywords": [
     "llm",