@youdie006/prodex 0.16.7 → 0.16.8

package/dist/cli-pro.js

@@ -692,10 +692,17 @@ export async function runAskProCommand(rest, io) {
         }
         const answerArtifactText = formatProConsultArtifact(consult);
         const persistenceWarnings = [...consult.warnings];
+        // A send with no model selection at all (no per-ask flag, no saved
+        // default) silently uses whatever the ChatGPT UI last had selected -
+        // after the 2026-07 update reset that to Medium, consults meant for Pro
+        // quietly ran on a mid-tier model. Warn loudly and record it.
+        if (!selectionModel && !selectionProMode && !selectionEffort) {
+            persistenceWarnings.push("model_selection_warning: no model/effort was selected for this send (no per-ask flag, no saved default), so it used whatever the ChatGPT UI last had selected. Pin one with `prodex setup --model Pro` or pass --model/--effort.");
+        }
         // Truncation and other send warnings must be visible at runtime, not
         // only inside the persisted receipt: a caller who never opens .bridge
         // would otherwise treat a cut-off answer as complete.
-        for (const warning of consult.warnings)
+        for (const warning of persistenceWarnings)
             io.stderr(warning);
         let answerArtifactPath;
         const answerArtifactBytes = Buffer.byteLength(answerArtifactText, "utf8");

package/dist/config.js

@@ -76,9 +76,14 @@ export async function writeLocalConfig(cwd, input = {}) {
     const now = new Date().toISOString();
     const host = normalizeLoopbackHttpHost(input.host ?? "127.0.0.1");
     const port = input.port ?? 8787;
-    const token = input.token ?? randomBytes(24).toString("hex");
-    const tokenExpiresAt = computeTokenExpiresAt(input.tokenTtlHours, now);
     const existing = await readExistingConfig(cwd);
+    // A setup re-run that only adjusts defaults/host/port must NOT rotate the
+    // token - that would silently 401 every client holding the old MCP URL.
+    // Rotation happens only when the caller explicitly asks for a token
+    // (--token) or a fresh expiry (--token-ttl-hours).
+    const tokenExplicitlyRequested = input.token !== undefined || input.tokenTtlHours !== undefined;
+    const token = input.token ?? (tokenExplicitlyRequested ? undefined : existing?.token) ?? randomBytes(24).toString("hex");
+    const tokenExpiresAt = tokenExplicitlyRequested || !existing ? computeTokenExpiresAt(input.tokenTtlHours, now) : existing.token_expires_at;
     const browserDefaults = mergeBrowserDefaults(existing?.browser_defaults, input.browserDefaults);
     const config = LocalConfigSchema.parse({
         schema_version: SCHEMA_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.16.7",
+  "version": "0.16.8",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",