npm - @yansigit/opencodex - Versions diffs - 2.35.2-dev.20260829.13 → 2.36.1-dev.20260829.17 - Mend

@yansigit/opencodex 2.35.2-dev.20260829.13 → 2.36.1-dev.20260829.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/gui/dist/assets/{index-C8Tctiwl.js → index-l0pKn4-2.js} +10 -10
package/gui/dist/index.html +1 -1
package/package.json +1 -1
package/src/config.ts +23 -1
package/src/generated/compatibility-version.json +17 -17
package/src/server/index.ts +9 -2
package/src/server/management/agent-settings-routes.ts +175 -54
package/src/server/management/combo-routes.ts +3 -4
package/src/server/management/config-routes.ts +45 -18
package/src/server/management/context.ts +50 -0
package/src/server/management/logs-usage-routes.ts +0 -1
package/src/server/management/model-routes.ts +2 -3
package/src/server/management/native-integration-routes.ts +17 -6
package/src/server/management/oauth-account-routes.ts +6 -7
package/src/server/management/provider-routes.ts +9 -15
package/src/server/management/replit-provider-routes.ts +8 -2
package/src/server/management/routing-profile-routes.ts +4 -6
package/src/server/management/shared.ts +0 -1
package/src/server/management-api.ts +12 -0
package/src/server/responses/v2-routed-delegation-bridge.ts +45 -14

package/gui/dist/index.html CHANGED Viewed

@@ -16,7 +16,7 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-C8Tctiwl.js"></script>
+    <script type="module" crossorigin src="/assets/index-l0pKn4-2.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-DLkXOXLC.css">
   </head>
   <body>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@yansigit/opencodex",
-  "version": "2.35.2-dev.20260829.13",
+  "version": "2.36.1-dev.20260829.17",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",

package/src/config.ts CHANGED Viewed

@@ -109,6 +109,7 @@ import {
   atomicWriteFile,
   isMissingPathError,
   nextAtomicTempSequence,
+  resolveWriteTarget,
 } from "./config/atomic-write";
 export {
   AtomicWriteResidualTempError,
@@ -2180,6 +2181,19 @@ function mergeConfigDefaults(parsed: unknown): unknown {
   return merged;
 }
+function configNeedsProviderRepair(parsed: Record<string, unknown>): boolean {
+  const providers = parsed.providers;
+  if (parsed.defaultProvider !== undefined
+    || (providers && typeof providers === "object" && !Array.isArray(providers)
+      && Object.keys(providers).length > 0)) return false;
+  const candidate = structuredClone(parsed);
+  sanitizeAliasesForLoad(candidate);
+  sanitizeRetryOn429ForLoad(candidate);
+  sanitizeModelCostsForLoad(candidate);
+  return !configSchema.safeParse(candidate).success
+    && configSchema.safeParse(mergeConfigDefaults(candidate)).success;
+}
 function schemaDiagnosticsError(error: z.ZodError): string {
   const details = error.issues.map(issue => {
     const path = issue.path.join(".") || "config";
@@ -2720,6 +2734,14 @@ export const withExpectedConfigGenerationSync: WithExpectedConfigGenerationSync
  */
 function persistConfigUnlocked(config: OcxConfig): boolean {
   const configPath = getConfigPath();
+  // Check the resolved file target before reading it: a symlink can point from an
+  // isolated test home into the protected real home, where another write guard
+  // must not mask this refusal based on the target's current contents.
+  assertNotRealHomeUnderTest(dirname(resolveWriteTarget(configPath)));
+  const raw = readRawConfigJson();
+  if (raw && configNeedsProviderRepair(raw)) {
+    throw new Error("refusing to overwrite a config repaired with defaults; fix the persisted config first");
+  }
   // External editors can add provider rows the live config deliberately does
   // not route with yet; merge them at the serialization boundary so an
   // unrelated in-process save cannot erase the provider or its overlay.
@@ -3353,7 +3375,7 @@ function warnConfigRepaired(configPath: string, error: z.ZodError): void {
   if (warnedConfigFallbacks.has(configPath)) return;
   warnedConfigFallbacks.add(configPath);
   const fields = error.issues.map(i => i.path.join(".") || "config").join(", ");
-  console.error(`opencodex config at ${configPath}: repaired missing field(s) [${fields}] with defaults. Your providers and accounts are preserved.`);
+  console.error(`opencodex config at ${configPath}: repaired invalid or missing field(s) [${fields}] in memory. A providerless fallback config will not be written automatically.`);
 }
 /**

package/src/generated/compatibility-version.json CHANGED Viewed

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "d4d7ca044f38d4ae640587f7f21230425cb1a500ee2b56d2c8418c73812bda30"
+      "sha256": "92a14143a77f8c42de843d7c7652699316f4c5f829cc0aaa6cdfa0bdf1738280"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -1166,7 +1166,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "4534807abf3722078ae2c6d377885a12d4e6921b376601ea6d76ccc3f677cfb9"
+      "sha256": "f5fb76e03c8e27883d2522cf78daf7ef4643e36625e126683d470f4f7616d3f8"
     },
     {
       "path": "src/config/atomic-write.ts",
@@ -2682,7 +2682,7 @@
     },
     {
       "path": "src/server/index.ts",
-      "sha256": "5dd54908f3adb4d22b39e6d44924ef9e5e254bca2590e22e653ae0ac03f583b3"
+      "sha256": "571ee5edbbff9311f3c5bf044c5330b03b8defc47dd6c05ea118ece2b91c1b3d"
     },
     {
       "path": "src/server/lifecycle.ts",
@@ -2702,7 +2702,7 @@
     },
     {
       "path": "src/server/management-api.ts",
-      "sha256": "f32c50a454a5bdfd738790a589badc1faf594412b014faadb8ae01b774856472"
+      "sha256": "908099bead27f40d7147bac8ab156717ac8af6494a4a7caa85f3ecfc5b11c6da"
     },
     {
       "path": "src/server/management-auth.ts",
@@ -2710,7 +2710,7 @@
     },
     {
       "path": "src/server/management/agent-settings-routes.ts",
-      "sha256": "1fb5e34401044aedbc3164c083d0c1d37857083f3144e296d4e5ad4993bc3cee"
+      "sha256": "223da28c5ed1951dbaf014ebac9e26c8035d14884b50b7985294c0d39e1c0ab8"
     },
     {
       "path": "src/server/management/api-access.ts",
@@ -2730,15 +2730,15 @@
     },
     {
       "path": "src/server/management/combo-routes.ts",
-      "sha256": "889a32183516f12b8dcfa66b04005210c79cafd9bf3d6d28ff480d72d1554c95"
+      "sha256": "fcb5f839b6a8e4f2ea1a1f6ccd80c932efc1a68ce0ce5b3c6aeea15885942631"
     },
     {
       "path": "src/server/management/config-routes.ts",
-      "sha256": "ad0d8c16dde2c10530bdf7a2ffe5344e7fdd230cd8b71c13d297f260d3ae6e71"
+      "sha256": "090f6f7ba1d80d2d23fc090134fa6dc4e7114a646d3c41dd4b08eb137255964a"
     },
     {
       "path": "src/server/management/context.ts",
-      "sha256": "87144e592ec4b66d3b5ca4f616565a6745c823595c1c59d26be16f38cc918468"
+      "sha256": "48b53d840a12a08da2e22864d209099bb3832d9571360899f670956ed0e2a5fa"
     },
     {
       "path": "src/server/management/integration-routes.ts",
@@ -2754,11 +2754,11 @@
     },
     {
       "path": "src/server/management/logs-usage-routes.ts",
-      "sha256": "756c8d015d880a76ec4ef086c423f7a9b04fc874568b06ebb48d6f5deb3e8827"
+      "sha256": "24f5aec4c42a7ae0460d60acab8242facaa1b8f27d67d96f22ebb439a85955c2"
     },
     {
       "path": "src/server/management/model-routes.ts",
-      "sha256": "5927c79c91419e5b4065c86f0bf6665cf3a178850cf08755d05960c5559a1518"
+      "sha256": "eaa34ed610ea3651c48d36b47f1b34eaf7ac74b33ccfff1f5852f809d71845f2"
     },
     {
       "path": "src/server/management/model-rows.ts",
@@ -2766,11 +2766,11 @@
     },
     {
       "path": "src/server/management/native-integration-routes.ts",
-      "sha256": "43aa083ea1c838f2c86ce778c76fd0be362f509459d60cd8dfcddf489194fcd8"
+      "sha256": "cc0c9f72afb609bae1da2caa0140b8c75c43a10b8eaaf919d0993387ad8d30e8"
     },
     {
       "path": "src/server/management/oauth-account-routes.ts",
-      "sha256": "9f1fe5834e08d8a68ec1facb2c9a89a5e389e2140a1430e689fd5748fdf1c76b"
+      "sha256": "2fd9233cd2994161950747fc771e67a5724d1a961ff474fd0cd2e4693638938f"
     },
     {
       "path": "src/server/management/provider-capability-config.ts",
@@ -2778,11 +2778,11 @@
     },
     {
       "path": "src/server/management/provider-routes.ts",
-      "sha256": "914b7a6cb10609e062874d2af8226f6471d18b269a96e0a0e6e215412d250603"
+      "sha256": "5e9d3b6985b2e498034a4d06336be2de6a6d77ddab7dc794ed3eb2979bd4ce25"
     },
     {
       "path": "src/server/management/replit-provider-routes.ts",
-      "sha256": "b4de19caa24b46ab3c0ac2281e3dd30c6673d410b0728421b6324da8f13f3363"
+      "sha256": "455c81cdc658a65ac960d64747f0aa1b273cdb57d0ef7f7febc2a3b76d244d73"
     },
     {
       "path": "src/server/management/request-history-routes.ts",
@@ -2794,11 +2794,11 @@
     },
     {
       "path": "src/server/management/routing-profile-routes.ts",
-      "sha256": "bb36b25beb53c63a2a875a301cc27dad58e1e68503af6c7fafe1e9a75b321011"
+      "sha256": "2af59cc4760eaa45aee41e2685187ed63228a8e60fe0b72c72f501ba54a5155a"
     },
     {
       "path": "src/server/management/shared.ts",
-      "sha256": "20d037194bf445da81fc3e266885344c5c3f8e252cabe46d11c4de68a71748ab"
+      "sha256": "5bab0481beb8bcaf8b6a42b0b6da7b53e01bc79d9da39f10958360c56b904c1e"
     },
     {
       "path": "src/server/management/sidebar-routes.ts",
@@ -2994,7 +2994,7 @@
     },
     {
       "path": "src/server/responses/v2-routed-delegation-bridge.ts",
-      "sha256": "a0ea013323d54c81426a0abc42eef6682d160a9ce71e3fc209c3124034ee514b"
+      "sha256": "6b4e814ea2539d51bd8e4071230954d46c045e08745fd2d586ee0d0636610b21"
     },
     {
       "path": "src/server/responses/ws-upstream.ts",

package/src/server/index.ts CHANGED Viewed

@@ -17,6 +17,8 @@ import {
   armClaudeCodeBaseline,
   loadConfig,
   saveConfig,
+  saveConfigPreservingClaudeCode,
+  mutatePersistedConfig,
   getConfigDir,
   websocketsEnabled,
 } from "../config";
@@ -531,6 +533,11 @@ export function warnAgentTaskRecoveryStartup(config: {
 }
 export function startServer(port?: number, deps: StartServerDeps = {}): Server<WsData> {
+  const managementApi: ManagementApiDeps = {
+    saveConfigPreservingClaudeCode,
+    mutatePersistedConfig,
+    ...deps.managementApi,
+  };
   const localAttestationSecret = deps.localAttestationSecret ?? createLocalAttestationSecret();
   const config = runModelRenameStartupMigration(runAlibabaRegionStartupMigration(runOpenAiTierStartupMigration(loadConfig())));
   warnAgentTaskRecoveryStartup(config);
@@ -1044,7 +1051,7 @@ export function startServer(port?: number, deps: StartServerDeps = {}): Server<W
             method: "POST",
             headers: { Host: req.headers.get("Host") ?? "127.0.0.1" },
           });
-          const probeResponse = await handleManagementAPI(probeRequest, new URL(probeRequest.url), config, deps.managementApi);
+          const probeResponse = await handleManagementAPI(probeRequest, new URL(probeRequest.url), config, managementApi);
           const probe = await probeResponse?.json().catch(() => null) as { ok?: boolean; error?: string } | null;
           if (!probe?.ok) return jsonResponse({ ok: false, error: probe?.error ?? "AI Studio connection probe failed" }, 502, req, policy);
           return jsonResponse({ ok: true, sessionPath: login.sessionPath }, 200, req, policy);
@@ -1122,7 +1129,7 @@ export function startServer(port?: number, deps: StartServerDeps = {}): Server<W
         // gate used. Consent-bearing routes need this: request headers are forgeable
         // by anything holding the admin token, the credential is not.
         const principal = managementPrincipal(req, managementAuth, config, localManagementAuth) ?? undefined;
-        const mgmtResponse = await handleManagementAPI(req, url, config, deps.managementApi, principal);
+        const mgmtResponse = await handleManagementAPI(req, url, config, managementApi, principal);
         if (mgmtResponse) return withManagementCors(mgmtResponse, req, config);
         return withManagementCors(formatErrorResponse(404, "not_found", `Unknown endpoint: ${req.method} ${url.pathname}`), req, config);
       }