@velum-labs/routekit-tool-codex 1.4.0 → 1.5.1

package/dist/launch.js

@@ -1,5 +1,5 @@
 import { spawn } from "node:child_process";
-import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { isAbsolute, join } from "node:path";
 import { codexCompatibility, isCodexPickerEligibleModel, reasoningEffortDescriptors } from "@velum-labs/routekit-contracts";
@@ -7,6 +7,7 @@ import { gatewayOpenAiBaseUrl } from "@velum-labs/routekit-runtime/network";
 import { stringify as tomlStringify } from "smol-toml";
 const PROVIDER_ID = "routekit";
 const CATALOG_FILE = "model-catalog.json";
+const ROUTEKIT_CODEX_HOME = join("codex");
 /** Model-agnostic agent prompt, matching the gateway's synthesized entries. */
 const NEUTRAL_INSTRUCTIONS = "You are a coding agent.";
 const PROFILE_DIR = "agent-profiles";
@@ -71,6 +72,25 @@ export function createIsolatedCodexHome(prefix, env = process.env) {
     mkdirSync(parent, { recursive: true, mode: 0o700 });
     return mkdtempSync(join(parent, prefix));
 }
+/** Stable RouteKit-owned Codex home used by interactive launchers. */
+export function resolveRouteKitCodexHome(env = process.env) {
+    const configured = env.CODEX_HOME;
+    if (configured !== undefined && configured.length > 0) {
+        if (!isAbsolute(configured))
+            throw new Error("CODEX_HOME must be an absolute path");
+        return configured;
+    }
+    const routekit = env.ROUTEKIT_HOME;
+    if (routekit !== undefined && routekit.length > 0) {
+        if (!isAbsolute(routekit))
+            throw new Error("ROUTEKIT_HOME must be an absolute path");
+        return join(routekit, ROUTEKIT_CODEX_HOME);
+    }
+    return join(env.HOME ?? env.USERPROFILE ?? homedir(), ".routekit", ROUTEKIT_CODEX_HOME);
+}
+function resolveCodexSourceHome(env = process.env) {
+    return join(env.HOME ?? env.USERPROFILE ?? homedir(), ".codex");
+}
 function presetSlug(entry) {
     return typeof entry.slug === "string" && entry.slug.length > 0 ? entry.slug : undefined;
 }
@@ -127,6 +147,23 @@ function isCodexNativeId(spec, id) {
     return (spec.defaultModel === namespaced ||
         spec.models.some((model) => model.id === namespaced || model.aliases?.includes(namespaced) === true));
 }
+function codexServiceTierEntries(capabilities) {
+    if (capabilities?.wireShape !== "openai-service-tier")
+        return [];
+    return capabilities.tiers.map((tier) => ({
+        id: tier.id,
+        name: tier.name ??
+            (tier.id === "priority" || tier.id === "fast"
+                ? "Fast"
+                : tier.id === "flex"
+                    ? "Flex"
+                    : tier.id),
+        description: tier.description ??
+            (tier.id === "priority" || tier.id === "fast"
+                ? "Faster responses with increased usage."
+                : `${tier.name ?? tier.id} service tier.`)
+    }));
+}
 export function codexCatalogEntries(spec, template, stockModels = [], options = {}) {
     const appendUnlistedStock = options.appendUnlistedStock ?? true;
     const models = catalogModels(spec);
@@ -142,12 +179,15 @@ export function codexCatalogEntries(spec, template, stockModels = [], options =
     // gateway-routed entries: reasoning tiers are replaced by each model's
     // discovered capabilities; `tool_mode` (e.g. "code_mode_only") and
     // `use_responses_lite` alter (or drop entirely) the tool declarations Codex
-    // sends; service tiers are a stock-model billing offer; and
-    // `base_instructions` / `model_messages` become the developer message, so a
+    // sends; service tiers are replaced by authoritative per-model discovery;
+    // and `base_instructions` / `model_messages` become the developer message, so a
     // stock prompt ("You are Codex, an agent based on GPT-5...") would tell
     // every routed model it is GPT-5. Fields are reset to neutral values only
     // when the template carries them, so the output still matches the installed
     // Codex version's required fields.
+    const templateHasAdditionalSpeedTiers = Object.hasOwn(template, "additional_speed_tiers");
+    const templateHasServiceTiers = Object.hasOwn(template, "service_tiers");
+    const templateHasDefaultServiceTier = Object.hasOwn(template, "default_service_tier");
     const { supported_reasoning_levels: _templateLevels, default_reasoning_level: _templateDefault, supports_reasoning_summaries: _templateSummaries, tool_mode: _templateToolMode, default_service_tier: _templateServiceTier, ...neutralTemplate } = template;
     for (const [field, neutral] of [
         ["use_responses_lite", false],
@@ -181,6 +221,9 @@ export function codexCatalogEntries(spec, template, stockModels = [], options =
             effort: effort.id,
             description: effort.label
         }));
+        const serviceTiers = codexServiceTierEntries(model?.serviceTiers);
+        const supportsFast = serviceTiers.some((tier) => tier.id === "priority" || tier.id === "fast");
+        const defaultServiceTier = model?.serviceTiers?.defaultTier;
         return {
             ...neutralTemplate,
             prefer_websockets: false,
@@ -197,6 +240,15 @@ export function codexCatalogEntries(spec, template, stockModels = [], options =
             ...(model?.reasoning?.defaultEffort !== undefined
                 ? { default_reasoning_level: model.reasoning.defaultEffort }
                 : {}),
+            ...(templateHasAdditionalSpeedTiers || serviceTiers.length > 0
+                ? { additional_speed_tiers: supportsFast ? ["fast"] : [] }
+                : {}),
+            ...(templateHasServiceTiers || serviceTiers.length > 0 ? { service_tiers: serviceTiers } : {}),
+            ...(defaultServiceTier !== undefined
+                ? { default_service_tier: defaultServiceTier }
+                : templateHasDefaultServiceTier
+                    ? { default_service_tier: null }
+                    : {}),
             supports_reasoning_summaries: model?.reasoning?.status === "supported"
         };
     });
@@ -229,7 +281,8 @@ export function codexPersistentModelCatalogJson(models, template = undefined) {
             {
                 id: model.id,
                 ...(model.label !== undefined ? { label: model.label } : {}),
-                ...(model.reasoning !== undefined ? { reasoning: model.reasoning } : {})
+                ...(model.reasoning !== undefined ? { reasoning: model.reasoning } : {}),
+                ...(model.serviceTiers !== undefined ? { serviceTiers: model.serviceTiers } : {})
             }
         ];
     });
@@ -334,6 +387,7 @@ export function codexAgentRoleToml(profile) {
 }
 export function codexLaunchConfigToml(spec, modelCatalogPath, roles = []) {
     const lines = [
+        `cli_auth_credentials_store = "file"`,
         `model = ${JSON.stringify(codexModelId(spec.defaultModel))}`,
         `model_provider = ${JSON.stringify(PROVIDER_ID)}`
     ];
@@ -352,20 +406,9 @@ export function codexLaunchConfigToml(spec, modelCatalogPath, roles = []) {
     }
     return lines.join("\n");
 }
-export function resolveCodexHome(env = process.env) {
-    const configured = env.CODEX_HOME;
-    if (configured !== undefined && configured.length > 0) {
-        if (!isAbsolute(configured))
-            throw new Error("CODEX_HOME must be an absolute path");
-        return configured;
-    }
-    return join(env.HOME ?? env.USERPROFILE ?? homedir(), ".codex");
-}
-function tomlValue(value) {
-    return JSON.stringify(value);
-}
 function codexLaunchOverrides(spec, catalogPath, roles = []) {
     const values = [
+        ["cli_auth_credentials_store", "file"],
         ["model", codexModelId(spec.defaultModel)],
         ["model_provider", PROVIDER_ID],
         [`model_providers.${PROVIDER_ID}.name`, "RouteKit gateway"],
@@ -387,7 +430,7 @@ function codexLaunchOverrides(spec, catalogPath, roles = []) {
     }
     return values.flatMap(([key, value]) => [
         "-c",
-        `${key}=${typeof value === "string" ? tomlValue(value) : String(value)}`
+        `${key}=${JSON.stringify(value)}`
     ]);
 }
 function spawnCodex(args, home, cwd, token, dependencies) {
@@ -406,7 +449,7 @@ function spawnCodex(args, home, cwd, token, dependencies) {
         child.once("exit", (code, signal) => resolve(code ?? (signal === null ? 0 : 1)));
     });
 }
-/** Launch against the user's real Codex home; only generated catalog data is temporary. */
+/** Launch against a RouteKit-owned Codex home with file-only auth persistence. */
 export async function launchCodex(ctx, deps = {}) {
     if (!ctx.spec.models.some((model) => model.id === ctx.spec.defaultModel)) {
         throw new Error(`Codex startup model "${ctx.spec.defaultModel}" is absent from the advertised catalog`);
@@ -415,10 +458,16 @@ export async function launchCodex(ctx, deps = {}) {
         model.aliases?.includes(ctx.spec.defaultModel) === true)) {
         throw new Error(`Codex startup model "${ctx.spec.defaultModel}" is not in the compatible model picker`);
     }
-    const home = resolveCodexHome(deps.env ?? process.env);
+    const sourceHome = resolveCodexSourceHome(deps.env ?? process.env);
+    const home = resolveRouteKitCodexHome(deps.env ?? process.env);
+    mkdirSync(home, { recursive: true, mode: 0o700 });
+    chmodSync(home, 0o700);
+    const configPath = join(home, "config.toml");
+    writeFileSync(configPath, codexLaunchConfigToml(ctx.spec), { mode: 0o600 });
+    chmodSync(configPath, 0o600);
     const temp = mkdtempSync(join(tmpdir(), "rk-codex-"));
     ctx.registerDisposer(() => rmSync(temp, { recursive: true, force: true }));
-    const stockModels = readCodexHomeModelsCache(home);
+    const stockModels = readCodexHomeModelsCache(sourceHome);
     const template = stockModels[0];
     const catalogPath = template === undefined ? undefined : join(temp, CATALOG_FILE);
     if (catalogPath !== undefined && template !== undefined) {

package/dist/test/driver.test.js

@@ -1,5 +1,5 @@
 import assert from "node:assert/strict";
-import { chmodSync, existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { test } from "node:test";
@@ -161,6 +161,7 @@ test("gateway-routed codex homes are owned by their harness instance", async ()
         assert.notEqual(firstHome, secondHome);
         assert.ok(firstHome.startsWith(join(userHome, ".cache", "routekit", "codex")));
         assert.ok(secondHome.startsWith(join(userHome, ".cache", "routekit", "codex")));
+        assert.equal(readFileSync(join(firstHome, "config.toml"), "utf8"), 'cli_auth_credentials_store = "file"\n');
         await first.dispose();
         assert.equal(existsSync(firstHome), false);
         assert.equal(existsSync(secondHome), true);