dsh-codex-connect 0.1.0-alpha.4.13 → 0.1.0-alpha.4.14

package/INSTALL.md

@@ -21,7 +21,7 @@ The only verified combination is DSH plugin API packages `0.1.0-rc.7`, `@earendi
    dsh plugin --profile web add dsh-codex-connect@alpha
    ```
 
-   After `0.1.0-alpha.4.13` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.13`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.13'`.
+   After `0.1.0-alpha.4.14` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.14`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.14'`.
 
 3. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.
 4. Confirm the effective `agent-default-model` and `web.searchProvider` values are unchanged from before installation.

package/MIGRATION.md

@@ -10,3 +10,21 @@
 6. Run `--dump-config`, then `dsh-codex-connect doctor`. Do not run OAuth again when `status` already reports signed in.
 
 Rollback is the inverse package swap. Do not delete or copy the separate OAuth file during either direction. If Harness reports a duplicate `openai-codex` adapter, the old bundle or a manual provider row is still active; resolve that one row instead of changing credentials.
+
+## Repairing search history written by Alpha 4.10
+
+Alpha 4.10 briefly wrote `web/openai-codex-search-llm-request` as a required private Session event. Because an external plugin cannot extend the Host persistence vocabulary across independent module instances, a newer Harness can refuse to read those histories after the event writer is removed.
+
+Upgrade Codex Connect, then inspect the default `$DSH_HOME/sessions` root without changing it:
+
+```sh
+dsh plugin --profile web exec dsh-codex-connect migrate-history --json
+```
+
+If the dry run reports affected events, stop every DSH process that can write this Session root and apply the migration. `--confirm-stopped` is required together with `--apply`:
+
+```sh
+dsh plugin --profile web exec dsh-codex-connect migrate-history --apply --confirm-stopped --json
+```
+
+The migration changes only that retired event's envelope by adding `"ignorable": true`. It preserves event data, sequence, time, and the concatenated Zstandard frame layout, and creates `session.jsonl.zstd.pre-codex-search-history-migration` beside every changed artifact before replacing it. Keep that backup until you have reopened and verified the repaired Session. Re-running the command is safe. For a non-default JSONL persistence root, pass `--root /absolute/path/to/sessions`. SQLite and uncompressed JSONL stores are not modified by this command. Applying fails closed when the filesystem cannot create the required same-directory hard-link backup. Applying is also fail-closed on Windows; Windows users can run the dry-run only.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: 2f74e9c6f07f649354b00d8055bc2470a2e85c1c
-docs/README.zh.md: a8efb3f3f0380f864bf54cbe5b47487ffd52b52c
+README.md: c496db682e79e0cd36471a2c592de4284819b450
+docs/README.zh.md: 718224bb667a95a9b20fabf59f3d5d5732923790

package/README.md

@@ -28,7 +28,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 
 Expected result: the package is added to that profile. This does not change the profile's default model or global search route.
 
-To reproduce this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.13`. If npm is unavailable after the matching GitHub prerelease exists, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.13'`. A local checkout can be installed as `link:/absolute/path/to/dsh-codex-connect`.
+To reproduce this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.14`. If npm is unavailable after the matching GitHub prerelease exists, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.14'`. A local checkout can be installed as `link:/absolute/path/to/dsh-codex-connect`.
 
 ### 2. Start Harness
 
@@ -50,7 +50,7 @@ Expected result: a fresh installation shows **Not signed in** and a **Sign in wi
 
 ### 4. Sign in with ChatGPT
 
-Click **Sign in with ChatGPT** and complete the browser approval yourself. Do not copy an authorization URL, code, token, or account identifier into an issue, log, or configuration file.
+Click **Sign in with ChatGPT** and complete the browser approval yourself. If an embedded WebView blocks the sign-in window, use the displayed **Open ChatGPT sign-in page** link to continue in your system browser. Do not copy an authorization URL, code, token, or account identifier into an issue, log, or configuration file.
 
 Expected result: the account area changes to **Signed in**. The screenshot below is the successful end state after this step; it is not the initial sign-in screen.
 
@@ -164,6 +164,7 @@ Selecting Codex as the profile's global search route is another explicit change:
 - If the card says **Sign in again** or the server asks for reauthentication, click that action and complete the same safe browser flow. It preserves this plugin's capability settings and does not silently change your default model or global search route. Do not run `logout` just to renew a session.
 - `doctor` reads process and filesystem metadata only. `doctor --json` emits exactly one secret-free JSON document with schema version 1, package/version/Node metadata, credential-file state and safe mode, capabilities, conflict status, and hints. It omits the absolute credential path and OAuth, account, and expiry data.
 - `status --json` emits only signed-in or signed-out state with package metadata. `status --json` reads the credential only to determine sign-in state, but never prints credential contents or starts OAuth.
+- Alpha 4.10 users whose search histories fail with an unknown `web/openai-codex-search-llm-request` event can run `dsh-codex-connect migrate-history --json`, stop DSH, then apply the reported repair with `migrate-history --apply --confirm-stopped --json`. The command is dry-run by default, backs up every changed compressed JSONL artifact, and is dry-run only on Windows; see [MIGRATION.md](MIGRATION.md).
 - OAuth is stored separately at `$DSH_HOME/.openai-codex-auth.json` (`~/.dsh` by default). `~/.codex/auth.json` is never copied or modified. The parent directory and file use owner-only permissions where supported, writes are atomic, and refresh writes use a cross-process file lock.
 - By default, the OAuth routes accept loopback browser requests only. When DSH runs on one device and you open it from another device on a trusted network, approve the browser address-bar origin explicitly on the device that runs DSH:
 

package/docs/README.zh.md

@@ -28,7 +28,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 
 预期结果：包被加入该 profile。这个动作不会更改 profile 的默认模型或全局搜索路由。
 
-如需精确复现这个版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.13`。对应 GitHub prerelease 已创建但 npm 不可用时，可使用 `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.13'`。本地 checkout 可安装为 `link:/absolute/path/to/dsh-codex-connect`。
+如需精确复现这个版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.14`。对应 GitHub prerelease 已创建但 npm 不可用时，可使用 `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.14'`。本地 checkout 可安装为 `link:/absolute/path/to/dsh-codex-connect`。
 
 ### 2. 启动 Harness
 
@@ -50,7 +50,7 @@ dsh web
 
 ### 4. 使用 ChatGPT 登录
 
-点击 **使用 ChatGPT 登录**，并自行完成浏览器审批。不要把授权 URL、授权码、token 或账户标识复制到 Issue、日志或配置文件中。
+点击 **使用 ChatGPT 登录**，并自行完成浏览器审批。如果内嵌 WebView 阻止登录窗口，请点击页面显示的 **打开 ChatGPT 登录页面**，在系统浏览器中继续。不要把授权 URL、授权码、token 或账户标识复制到 Issue、日志或配置文件中。
 
 预期结果：账户区变为 **已登录**。下图展示的是完成本步骤后的成功状态，不是开始登录前的页面。
 
@@ -163,6 +163,7 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 
 - 卡片显示 **重新登录**，或服务端要求重新认证时，点击该操作并完成同一套安全的浏览器流程。它会保留本插件的能力配置，不会偷偷改动默认模型或全局搜索路由。不要为了刷新会话而运行 `logout`。
 - `doctor` 只读取进程与文件系统元数据。`doctor --json` 只输出一条可解析的非敏感 JSON，包含 schema version 1、包/版本/Node 信息、认证文件状态与安全 mode、能力、冲突状态和提示；它省略认证文件绝对路径以及 OAuth、账户和过期时间信息。
+- Alpha 4.10 用户若因未知的 `web/openai-codex-search-llm-request` 事件而无法读取搜索历史，可先运行 `dsh-codex-connect migrate-history --json`，停止 DSH 后再以 `migrate-history --apply --confirm-stopped --json` 应用修复。该命令默认只预检，会备份每个被修改的压缩 JSONL 文件，Windows 仅支持预检；详见 [MIGRATION.md](../MIGRATION.md)。
 - `status --json` 只输出 signed-in 或 signed-out 状态及包元数据。它只为判断登录态读取认证文件，但不会输出认证文件内容或启动 OAuth。
 - OAuth 单独存储于 `$DSH_HOME/.openai-codex-auth.json`（默认 `~/.dsh`）。`~/.codex/auth.json` 不会被复制或修改。支持的平台上，父目录与文件使用仅所有者可访问权限；写入采用原子替换，刷新写入使用跨进程文件锁。
 - 默认情况下，OAuth 路由只接受 loopback 浏览器请求。当 DSH 在一台设备运行，而你从可信网络中的另一台设备打开 DSH 时，请在运行 DSH 的设备上显式批准浏览器地址栏中的 origin：

package/lib/bin.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as OpenAICodexTrustedOriginsStore, I as CODEX_CONNECT_VERSION, P as diagnoseOpenAICodex, at as logoutOpenAICodex, et as normalizeTrustedOrigin, it as loginOpenAICodex, ot as openAICodexAuthStatus, ut as openAICodexAuthPath } from "./src-zOltFEBG.js";
+import { L as diagnoseOpenAICodex, c as migrateOpenAICodexSearchHistory, ct as logoutOpenAICodex, lt as openAICodexAuthStatus, nt as OpenAICodexTrustedOriginsStore, pt as openAICodexAuthPath, rt as normalizeTrustedOrigin, st as loginOpenAICodex, z as CODEX_CONNECT_VERSION } from "./src-15cHQKm5.js";
 import { fileURLToPath } from "node:url";
-import { spawn } from "node:child_process";
 import { realpathSync } from "node:fs";
+import { spawn } from "node:child_process";
 import { createInterface } from "node:readline/promises";
 //#region src/bin.ts
 /** Standalone credential CLI for the optional OpenAI Codex bundle. */
@@ -65,6 +65,7 @@ async function answerPrompt(prompt, deviceCode, question) {
 function printHelp() {
 	process.stdout.write([
 		"Usage: dsh-codex-connect <doctor|login|logout|status> [--device-code|--json]",
+		"       dsh-codex-connect migrate-history [--apply --confirm-stopped] [--root <path>] [--json]",
 		"       dsh-codex-connect trust-origin <origin>",
 		"       dsh-codex-connect trusted-origins [--json]",
 		"       dsh-codex-connect untrust-origin <origin>",
@@ -72,12 +73,13 @@ function printHelp() {
 		"  doctor         inspect secret-free runtime and OAuth file metadata",
 		"  login          sign in with a separate ChatGPT OAuth session",
 		"  logout         remove the dsh credential without changing ~/.codex",
+		"  migrate-history find or repair Alpha 4.10 private search events (dry-run by default)",
 		"  status         report non-secret dsh credential state",
 		"  trust-origin   allow one exact browser origin to reach Web OAuth routes",
 		"  trusted-origins list the currently allowed browser origins",
 		"  untrust-origin remove one exact browser origin from the allowlist",
 		"  --device-code  use headless device-code login (login only)",
-		"  --json         emit one secret-free JSON document (doctor/status/trusted-origins only)",
+		"  --json         emit one JSON document (doctor/status/trusted-origins/migrate-history)",
 		""
 	].join("\n"));
 }
@@ -118,12 +120,13 @@ async function run(argv) {
 		"doctor",
 		"login",
 		"logout",
+		"migrate-history",
 		"status",
 		"trust-origin",
 		"trusted-origins",
 		"untrust-origin"
 	].includes(rawAction)) {
-		process.stderr.write(`dsh-codex-connect: expected doctor, login, logout, status, trust-origin, trusted-origins, or untrust-origin; got ${JSON.stringify(rawAction)}\n`);
+		process.stderr.write(`dsh-codex-connect: expected doctor, login, logout, migrate-history, status, trust-origin, trusted-origins, or untrust-origin; got ${JSON.stringify(rawAction)}\n`);
 		return 1;
 	}
 	const action = rawAction;
@@ -131,7 +134,25 @@ async function run(argv) {
 	const optionFlags = action === "trust-origin" || action === "untrust-origin" ? flags.slice(1) : flags;
 	const deviceCode = optionFlags.includes("--device-code");
 	const jsonOutput = optionFlags.includes("--json");
-	if (optionFlags.filter((flag) => flag !== "--device-code" && flag !== "--json").length > 0 || deviceCode && action !== "login" || jsonOutput && (action === "login" || action === "logout" || deviceCode) || (action === "trust-origin" || action === "untrust-origin") && (originArgument === void 0 || optionFlags.length !== 0)) {
+	let migrationRoot;
+	let migrationApply = false;
+	let migrationConfirmStopped = false;
+	const unknown = [];
+	if (action === "migrate-history") for (let index = 0; index < optionFlags.length; index += 1) {
+		const flag = optionFlags[index];
+		if (flag === "--apply") {
+			if (migrationApply) unknown.push(flag ?? "");
+			migrationApply = true;
+		} else if (flag === "--confirm-stopped") {
+			if (migrationConfirmStopped) unknown.push(flag ?? "");
+			migrationConfirmStopped = true;
+		} else if (flag === "--json") {} else if (flag === "--root" && migrationRoot === void 0 && optionFlags[index + 1] !== void 0 && !optionFlags[index + 1]?.startsWith("--")) {
+			migrationRoot = optionFlags[index + 1];
+			index += 1;
+		} else unknown.push(flag ?? "");
+	}
+	else unknown.push(...optionFlags.filter((flag) => flag !== "--device-code" && flag !== "--json"));
+	if (unknown.length > 0 || deviceCode && action !== "login" || jsonOutput && (action === "login" || action === "logout" || deviceCode) || action === "migrate-history" && (migrationConfirmStopped && !migrationApply || migrationApply && !migrationConfirmStopped) || (action === "trust-origin" || action === "untrust-origin") && (originArgument === void 0 || optionFlags.length !== 0)) {
 		process.stderr.write(`dsh-codex-connect: invalid options for ${action}: ${flags.join(" ")}\n`);
 		return 1;
 	}
@@ -154,6 +175,23 @@ async function run(argv) {
 				].join("\n"));
 				return doctorExitCode(report);
 			}
+			case "migrate-history": {
+				const result = await migrateOpenAICodexSearchHistory({
+					apply: migrationApply,
+					...migrationConfirmStopped ? { confirmStopped: true } : {},
+					...migrationRoot === void 0 ? {} : { root: migrationRoot }
+				});
+				if (jsonOutput) printJson({
+					schemaVersion: JSON_SCHEMA_VERSION,
+					...result
+				});
+				else {
+					const verb = result.mode === "apply" ? "Repaired" : "Found";
+					process.stdout.write(`${verb} ${result.changedEvents} legacy Codex search event(s) in ${result.changedFiles} session file(s) under ${result.root}.\n`);
+					if (result.mode === "dry-run" && result.changedEvents > 0) process.stdout.write("Stop DSH, then run again with --apply --confirm-stopped to create backups and repair these histories.\n");
+				}
+				return 0;
+			}
 			case "status": {
 				const status = await openAICodexAuthStatus();
 				if (jsonOutput) {

package/lib/client.js

@@ -745,6 +745,7 @@ window.__ModuleLoader__.load({
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [copied, setCopied] = (0, react.useState)(false);
 			const [copyFailed, setCopyFailed] = (0, react.useState)(false);
+			const [loginUrl, setLoginUrl] = (0, react.useState)();
 			const mounted = (0, react.useRef)(true);
 			const trustedOriginCommand = `dsh plugin --profile web exec dsh-codex-connect trust-origin ${window.location.origin}`;
 			(0, react.useEffect)(() => {
@@ -783,27 +784,27 @@ window.__ModuleLoader__.load({
 					controller.abort();
 				};
 			}, [refresh, status.status]);
+			(0, react.useEffect)(() => {
+				if (status.status !== "signing-in") setLoginUrl(void 0);
+			}, [status.status]);
 			const signIn = async () => {
 				const popup = window.open("about:blank", "_blank");
-				if (popup === null) {
-					setStatus({
-						status: "error",
-						message: t("popupBlocked")
-					});
-					return;
-				}
-				popup.opener = null;
+				if (popup !== null) popup.opener = null;
 				setBusy(true);
 				setStatus({ status: "signing-in" });
 				try {
 					const challenge = await jsonRequest(OPENAI_CODEX_AUTH_LOGIN_PATH, "POST");
 					if (!mounted.current) {
-						popup.close();
+						popup?.close();
 						return;
 					}
-					popup.location.replace(challenge.url);
+					if (popup !== null) {
+						setLoginUrl(void 0);
+						popup.location.replace(challenge.url);
+					} else setLoginUrl(challenge.url);
 				} catch (error) {
 					popup?.close();
+					setLoginUrl(void 0);
 					if (mounted.current) setStatus(error instanceof AccountRequestError && error.code === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
 						status: "error",
 						message: error instanceof Error ? error.message : t("requestFailed")
@@ -874,7 +875,7 @@ window.__ModuleLoader__.load({
 									signOut();
 								},
 								children: busy ? t("working") : t("logout")
-							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+							}) : status.status === "signing-in" && loginUrl !== void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
 								style: primaryButtonStyle,
 								disabled: busy,
@@ -884,6 +885,29 @@ window.__ModuleLoader__.load({
 								children: busy ? t("working") : status.status === "error" || status.status === "reauth-required" ? t("loginAgain") : t("login")
 							})]
 						}),
+						loginUrl === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: {
+								display: "flex",
+								flexDirection: "column",
+								alignItems: "flex-start",
+								gap: 10
+							},
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: bodyStyle,
+								children: t("popupBlockedFallback")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+								href: loginUrl,
+								target: "_blank",
+								rel: "noopener noreferrer",
+								style: {
+									...primaryButtonStyle,
+									display: "inline-flex",
+									alignItems: "center",
+									textDecoration: "none"
+								},
+								children: t("openLoginInBrowser")
+							})]
+						}),
 						status.status === "error" || status.status === "reauth-required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: status.message
@@ -1479,6 +1503,8 @@ window.__ModuleLoader__.load({
 			working: "Working…",
 			retry: "Retry",
 			popupBlocked: "The browser blocked the sign-in window. Allow pop-ups for this dsh page and retry.",
+			popupBlockedFallback: "The sign-in window could not be opened automatically. Use the link below to continue in your browser.",
+			openLoginInBrowser: "Open ChatGPT sign-in page",
 			usageLimits: "Usage limits",
 			fiveHourLimit: "5-hour limit",
 			weeklyLimit: "Weekly limit",
@@ -1576,6 +1602,8 @@ window.__ModuleLoader__.load({
 			working: "处理中…",
 			retry: "重试",
 			popupBlocked: "浏览器阻止了登录窗口。请允许此 dsh 页面弹出窗口后重试。",
+			popupBlockedFallback: "无法自动打开登录窗口。请使用下面的链接在浏览器中继续登录。",
+			openLoginInBrowser: "打开 ChatGPT 登录页面",
 			usageLimits: "使用额度",
 			fiveHourLimit: "5 小时额度",
 			weeklyLimit: "每周额度",

package/lib/index.d.ts

@@ -471,6 +471,41 @@ declare class FastModeRegistry {
 /** GET/POST endpoint for one conversation's process-local Fast Mode state. */
 declare const OPENAI_CODEX_FAST_MODE_PATH = "/plugins/dsh-openai-codex/fast-mode";
 //#endregion
+//#region src/history-migration.d.ts
+/** Offline compatibility migration for the private Codex search event emitted by Alpha 4.10. */
+/** Private event written by Alpha 4.10 before the provider stopped persisting it. */
+declare const OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT = "web/openai-codex-search-llm-request";
+/** Backup suffix created beside every changed session artifact. */
+declare const OPENAI_CODEX_HISTORY_BACKUP_SUFFIX = ".pre-codex-search-history-migration";
+interface OpenAICodexHistoryMigrationOptions {
+  /** Apply changes; omitted/false performs a read-only dry run. */
+  readonly apply?: boolean;
+  /** Required acknowledgement that every DSH writer using this root is stopped. */
+  readonly confirmStopped?: boolean;
+  /** Explicit JSONL persistence root. Defaults to `<DSH_HOME>/sessions`. */
+  readonly root?: string;
+  /** Optional Harness home override used only when `root` is omitted. */
+  readonly dshHome?: string;
+}
+interface OpenAICodexHistoryMigrationFile {
+  readonly path: string;
+  readonly changedEvents: number;
+  readonly backupPath?: string;
+}
+interface OpenAICodexHistoryMigrationResult {
+  readonly mode: 'apply' | 'dry-run';
+  readonly root: string;
+  readonly changedFiles: number;
+  readonly changedEvents: number;
+  readonly files: readonly OpenAICodexHistoryMigrationFile[];
+}
+/**
+ * Mark the retired Alpha 4.10 search event ignorable in compressed JSONL logs.
+ * Applying is an offline maintenance operation and fails closed without the
+ * caller's explicit acknowledgement that all DSH writers are stopped.
+ */
+declare function migrateOpenAICodexSearchHistory(options?: OpenAICodexHistoryMigrationOptions): Promise<OpenAICodexHistoryMigrationResult>;
+//#endregion
 //#region src/index.d.ts
 declare module '@deepseek-ai/cordis' {
   interface Context {
@@ -511,4 +546,4 @@ declare const Config: z<Config>;
  */
 declare function apply(ctx: Context, config: Config): void;
 //#endregion
-export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, type CompatibilityDetectionOptions, type CompatibilityEntry, type CompatibilityEvaluationInput, type CompatibilityPackageName, type CompatibilityReport, type CompatibilityStatus, Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, type GeneratedImagePayload, IMAGE_GENERATE_TOOL_NAME, type ImageGenerationRequest, type ImageGenerationResponse, type ImageRequestContext, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_USAGE_URL, type OpenAICodexAuthStatus, OpenAICodexCredentialStore, type OpenAICodexCredits, type OpenAICodexDiagnosticOptions, type OpenAICodexDiagnosticReport, type OpenAICodexIndividualLimit, type OpenAICodexRateLimit, type OpenAICodexRateLimitWindow, type OpenAICodexSearchContextSize, type OpenAICodexSearchMode, OpenAICodexSearchProvider, type OpenAICodexSearchProviderOptions, type OpenAICodexSearchRequestRecord, type OpenAICodexSettingsConfig, OpenAICodexTransport, OpenAICodexTransportError, type OpenAICodexTransportErrorCode, type OpenAICodexTransportV1, type OpenAICodexUsage, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_VERSION, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, decodeOpenAICodexSettings, detectCompatibility, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUsage, readOpenAICodexRateLimits, resolveOpenAICodexSettings };
+export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, type CompatibilityDetectionOptions, type CompatibilityEntry, type CompatibilityEvaluationInput, type CompatibilityPackageName, type CompatibilityReport, type CompatibilityStatus, Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, type GeneratedImagePayload, IMAGE_GENERATE_TOOL_NAME, type ImageGenerationRequest, type ImageGenerationResponse, type ImageRequestContext, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_USAGE_URL, type OpenAICodexAuthStatus, OpenAICodexCredentialStore, type OpenAICodexCredits, type OpenAICodexDiagnosticOptions, type OpenAICodexDiagnosticReport, type OpenAICodexHistoryMigrationFile, type OpenAICodexHistoryMigrationOptions, type OpenAICodexHistoryMigrationResult, type OpenAICodexIndividualLimit, type OpenAICodexRateLimit, type OpenAICodexRateLimitWindow, type OpenAICodexSearchContextSize, type OpenAICodexSearchMode, OpenAICodexSearchProvider, type OpenAICodexSearchProviderOptions, type OpenAICodexSearchRequestRecord, type OpenAICodexSettingsConfig, OpenAICodexTransport, OpenAICodexTransportError, type OpenAICodexTransportErrorCode, type OpenAICodexTransportV1, type OpenAICodexUsage, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_VERSION, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, decodeOpenAICodexSettings, detectCompatibility, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, migrateOpenAICodexSearchHistory, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUsage, readOpenAICodexRateLimits, resolveOpenAICodexSettings };

package/lib/index.js

@@ -1,2 +1,2 @@
-import { A as isOpenAICodexTransportError, B as DSH_PLUGIN_API_PACKAGES, C as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, D as OPENAI_CODEX_TRANSPORT_SERVICE, E as OPENAI_CODEX_TRANSPORT_ERROR_CODES, F as openAICodexConflictMessage, G as assessCompatibility, H as SUPPORTED_DSH_PLUGIN_API_VERSION, J as OPENAI_CODEX_FAST_MODE_PATH, K as detectCompatibility, L as COMPATIBILITY_CONTRACT, M as IMAGE_GENERATE_TOOL_NAME, N as assertNoOpenAICodexProviderConflict, O as OpenAICodexTransport, P as diagnoseOpenAICodex, Q as isFastModeSessionId, R as COMPATIBILITY_PACKAGES, S as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, T as OPENAI_CODEX_TRANSPORT_API_VERSION, U as SUPPORTED_NODE_RANGE, V as PI_AI_PACKAGE, W as SUPPORTED_PI_AI_VERSION, X as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, Y as FastModeRegistry, Z as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, _ as decodeOpenAICodexSettings, a as name, at as logoutOpenAICodex, b as OPENAI_CODEX_IMAGE_MAX_COUNT, c as OPENAI_CODEX_SEARCH_URL, ct as OPENAI_CODEX_PROVIDER, d as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, f as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, g as OPENAI_CODEX_SETTINGS_NAMESPACE, h as DEFAULT_OPENAI_CODEX_SETTINGS, i as inject, it as loginOpenAICodex, j as VIEW_IMAGE_TOOL_NAME, k as OpenAICodexTransportError, l as OpenAICodexSearchProvider, lt as OpenAICodexCredentialStore, m as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, n as OPENAI_CODEX_SETTINGS_NS, nt as parseOpenAICodexUsage, o as OPENAI_CODEX_BASE_URL, ot as openAICodexAuthStatus, p as DEFAULT_OPENAI_CODEX_SEARCH_MODE, q as evaluateCompatibility, r as apply, rt as readOpenAICodexRateLimits, s as OPENAI_CODEX_SEARCH_PROVIDER, st as OPENAI_CODEX_AUTH_FILENAME, t as Config, tt as OPENAI_CODEX_USAGE_URL, u as mapOpenAICodexSearchResponse, ut as openAICodexAuthPath, v as resolveOpenAICodexSettings, w as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, x as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, y as OPENAI_CODEX_IMAGE_GENERATION_URL, z as COMPATIBILITY_SCHEMA_VERSION } from "./src-zOltFEBG.js";
-export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, IMAGE_GENERATE_TOOL_NAME, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexSearchProvider, OpenAICodexTransport, OpenAICodexTransportError, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_VERSION, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, decodeOpenAICodexSettings, detectCompatibility, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUsage, readOpenAICodexRateLimits, resolveOpenAICodexSettings };
+import { $ as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, A as OPENAI_CODEX_TRANSPORT_SERVICE, B as COMPATIBILITY_CONTRACT, C as OPENAI_CODEX_IMAGE_MAX_COUNT, D as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, E as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, F as IMAGE_GENERATE_TOOL_NAME, G as SUPPORTED_DSH_PLUGIN_API_VERSION, H as COMPATIBILITY_SCHEMA_VERSION, I as assertNoOpenAICodexProviderConflict, J as assessCompatibility, K as SUPPORTED_NODE_RANGE, L as diagnoseOpenAICodex, M as OpenAICodexTransportError, N as isOpenAICodexTransportError, O as OPENAI_CODEX_TRANSPORT_API_VERSION, P as VIEW_IMAGE_TOOL_NAME, Q as FastModeRegistry, R as openAICodexConflictMessage, S as OPENAI_CODEX_IMAGE_GENERATION_URL, T as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, U as DSH_PLUGIN_API_PACKAGES, V as COMPATIBILITY_PACKAGES, W as PI_AI_PACKAGE, X as evaluateCompatibility, Y as detectCompatibility, Z as OPENAI_CODEX_FAST_MODE_PATH, _ as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, a as name, at as parseOpenAICodexUsage, b as decodeOpenAICodexSettings, c as migrateOpenAICodexSearchHistory, ct as logoutOpenAICodex, d as OPENAI_CODEX_SEARCH_URL, dt as OPENAI_CODEX_PROVIDER, et as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, f as OpenAICodexSearchProvider, ft as OpenAICodexCredentialStore, g as DEFAULT_OPENAI_CODEX_SEARCH_MODE, h as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, i as inject, it as OPENAI_CODEX_USAGE_URL, j as OpenAICodexTransport, k as OPENAI_CODEX_TRANSPORT_ERROR_CODES, l as OPENAI_CODEX_BASE_URL, lt as openAICodexAuthStatus, m as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, n as OPENAI_CODEX_SETTINGS_NS, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as readOpenAICodexRateLimits, p as mapOpenAICodexSearchResponse, pt as openAICodexAuthPath, q as SUPPORTED_PI_AI_VERSION, r as apply, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, st as loginOpenAICodex, t as Config, tt as isFastModeSessionId, u as OPENAI_CODEX_SEARCH_PROVIDER, ut as OPENAI_CODEX_AUTH_FILENAME, v as DEFAULT_OPENAI_CODEX_SETTINGS, w as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, x as resolveOpenAICodexSettings, y as OPENAI_CODEX_SETTINGS_NAMESPACE } from "./src-15cHQKm5.js";
+export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, IMAGE_GENERATE_TOOL_NAME, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexSearchProvider, OpenAICodexTransport, OpenAICodexTransportError, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_VERSION, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, decodeOpenAICodexSettings, detectCompatibility, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, migrateOpenAICodexSearchHistory, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUsage, readOpenAICodexRateLimits, resolveOpenAICodexSettings };

package/lib/{src-zOltFEBG.js → src-15cHQKm5.js}

@@ -1,11 +1,11 @@
-import { randomUUID } from "node:crypto";
+import { randomBytes, randomUUID } from "node:crypto";
 import z from "@deepseek-ai/schemastery";
 import { deepEqualJson, installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import { createModels } from "@earendil-works/pi-ai";
 import { openaiCodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
 import { createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
-import { lstat, mkdir, readFile, rm, stat } from "node:fs/promises";
+import { link, lstat, mkdir, open, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, join, parse, resolve } from "node:path";
 import { withFileLock, writeFileAtomic } from "@deepseek-ai/dsh-atomic-write";
 import { resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -18,6 +18,8 @@ import { request as request$1 } from "node:https";
 import { BlockList, isIP } from "node:net";
 import { Service } from "@deepseek-ai/cordis";
 import { WebError } from "@deepseek-ai/dsh-web";
+import { constants } from "node:fs";
+import { constants as constants$1, zstdCompressSync, zstdDecompressSync } from "node:zlib";
 //#region src/store.ts
 /**
 * Owner-only persistent OAuth credential storage for the OpenAI Codex bundle.
@@ -1209,7 +1211,7 @@ async function detectCompatibility(options = {}) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.13";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.14";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */
@@ -2471,6 +2473,268 @@ var OpenAICodexSearchProvider = class {
 	}
 };
 //#endregion
+//#region src/history-migration.ts
+/** Offline compatibility migration for the private Codex search event emitted by Alpha 4.10. */
+/** Private event written by Alpha 4.10 before the provider stopped persisting it. */
+const OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT = "web/openai-codex-search-llm-request";
+/** Backup suffix created beside every changed session artifact. */
+const OPENAI_CODEX_HISTORY_BACKUP_SUFFIX = ".pre-codex-search-history-migration";
+const ZSTD_MAGIC = 4247762216;
+const CHECKSUM_OPTIONS = { params: { [constants$1.ZSTD_c_checksumFlag]: 1 } };
+const STABLE_READ_ATTEMPTS = 3;
+function scanZstdFrames(buffer) {
+	const frames = [];
+	let offset = 0;
+	while (offset < buffer.length) {
+		const start = offset;
+		if (buffer.length - offset < 4) throw new Error(`incomplete Zstandard frame magic at byte ${offset}`);
+		if (buffer.readUInt32LE(offset) !== ZSTD_MAGIC) throw new Error(`invalid Zstandard frame magic at byte ${offset}`);
+		offset += 4;
+		if (offset === buffer.length) throw new Error(`incomplete Zstandard frame descriptor at byte ${offset}`);
+		const descriptor = buffer.readUInt8(offset);
+		offset += 1;
+		if ((descriptor & 24) !== 0) throw new Error(`reserved Zstandard frame-header bit at byte ${offset - 1}`);
+		const contentSizeFlag = descriptor >>> 6;
+		const singleSegment = (descriptor & 32) !== 0;
+		const checksum = (descriptor & 4) !== 0;
+		const dictionaryFlag = descriptor & 3;
+		const dictionaryBytes = dictionaryFlag === 3 ? 4 : dictionaryFlag;
+		const contentSizeBytes = contentSizeFlag === 0 ? singleSegment ? 1 : 0 : 1 << contentSizeFlag;
+		const remainingHeaderBytes = (singleSegment ? 0 : 1) + dictionaryBytes + contentSizeBytes;
+		if (buffer.length - offset < remainingHeaderBytes) throw new Error(`incomplete Zstandard frame header at byte ${start}`);
+		offset += remainingHeaderBytes;
+		for (;;) {
+			if (buffer.length - offset < 3) throw new Error(`incomplete Zstandard block header at byte ${offset}`);
+			const blockHeader = buffer.readUIntLE(offset, 3);
+			offset += 3;
+			const lastBlock = (blockHeader & 1) !== 0;
+			const blockType = blockHeader >>> 1 & 3;
+			const blockSize = blockHeader >>> 3;
+			if (blockType === 3) throw new Error(`reserved Zstandard block type at byte ${offset - 3}`);
+			const payloadBytes = blockType === 1 ? 1 : blockSize;
+			if (buffer.length - offset < payloadBytes) throw new Error(`incomplete Zstandard block payload at byte ${offset}`);
+			offset += payloadBytes;
+			if (lastBlock) break;
+		}
+		if (checksum) {
+			if (buffer.length - offset < 4) throw new Error(`incomplete Zstandard checksum at byte ${offset}`);
+			offset += 4;
+		}
+		frames.push({
+			start,
+			end: offset
+		});
+	}
+	return frames;
+}
+function markLegacyEventIgnorable(line) {
+	let record;
+	try {
+		record = JSON.parse(line);
+	} catch {
+		return;
+	}
+	if (typeof record !== "object" || record === null || Array.isArray(record)) return void 0;
+	const event = record;
+	if (event["type"] !== "web/openai-codex-search-llm-request" || event["ignorable"] === true) return void 0;
+	if (event["ignorable"] !== void 0) throw new Error(`legacy Codex search event seq ${String(event["seq"])} has an unexpected ignorable value`);
+	let objectEnd = line.length - 1;
+	while (objectEnd >= 0 && /\s/u.test(line[objectEnd] ?? "")) objectEnd -= 1;
+	if (line[objectEnd] !== "}") throw new Error(`legacy Codex search event seq ${String(event["seq"])} is not a JSON object`);
+	return `${line.slice(0, objectEnd)},"ignorable":true${line.slice(objectEnd)}`;
+}
+function rewriteFrame(frame) {
+	const lines = zstdDecompressSync(frame).toString("utf8").split("\n");
+	let changedEvents = 0;
+	for (let index = 0; index < lines.length; index += 1) {
+		const line = lines[index];
+		if (line === void 0 || line.length === 0) continue;
+		const migrated = markLegacyEventIgnorable(line);
+		if (migrated === void 0) continue;
+		lines[index] = migrated;
+		changedEvents += 1;
+	}
+	if (changedEvents === 0) return {
+		frame,
+		changedEvents
+	};
+	return {
+		frame: zstdCompressSync(Buffer.from(lines.join("\n")), CHECKSUM_OPTIONS),
+		changedEvents
+	};
+}
+function validateMigration(original, migrated, expectedChanges) {
+	const beforeFrames = scanZstdFrames(original);
+	const afterFrames = scanZstdFrames(migrated);
+	if (beforeFrames.length !== afterFrames.length) throw new Error("Zstandard frame count changed during migration");
+	let changes = 0;
+	for (let index = 0; index < beforeFrames.length; index += 1) {
+		const beforeRange = beforeFrames[index];
+		const afterRange = afterFrames[index];
+		if (beforeRange === void 0 || afterRange === void 0) throw new Error("missing Zstandard frame during validation");
+		const beforeLines = zstdDecompressSync(original.subarray(beforeRange.start, beforeRange.end)).toString("utf8").split("\n");
+		const afterLines = zstdDecompressSync(migrated.subarray(afterRange.start, afterRange.end)).toString("utf8").split("\n");
+		if (beforeLines.length !== afterLines.length) throw new Error(`logical line count changed in frame ${index}`);
+		for (let line = 0; line < beforeLines.length; line += 1) {
+			if (beforeLines[line] === afterLines[line]) continue;
+			const expected = markLegacyEventIgnorable(beforeLines[line] ?? "");
+			if (expected === void 0) throw new Error(`non-target record changed in frame ${index}, line ${line + 1}`);
+			if (afterLines[line] !== expected) throw new Error(`legacy event changed beyond its ignorable marker in frame ${index}, line ${line + 1}`);
+			changes += 1;
+		}
+	}
+	if (changes !== expectedChanges) throw new Error(`validated ${changes} changes, expected ${expectedChanges}`);
+}
+function revision(metadata) {
+	return [
+		metadata.dev,
+		metadata.ino,
+		metadata.size,
+		metadata.mtimeNs,
+		metadata.ctimeNs
+	].join(":");
+}
+async function readStableFile(path) {
+	for (let attempt = 0; attempt < STABLE_READ_ATTEMPTS; attempt += 1) {
+		const before = revision(await stat(path, { bigint: true }));
+		const content = await readFile(path);
+		if (before === revision(await stat(path, { bigint: true }))) return content;
+	}
+	throw new Error(`session kept changing during ${STABLE_READ_ATTEMPTS} stable-read attempts: ${path}`);
+}
+function renderMigration(original) {
+	const frames = scanZstdFrames(original);
+	const output = [];
+	let changedEvents = 0;
+	for (const frame of frames) {
+		const rewritten = rewriteFrame(original.subarray(frame.start, frame.end));
+		output.push(rewritten.frame);
+		changedEvents += rewritten.changedEvents;
+	}
+	const migrated = Buffer.concat(output);
+	if (changedEvents > 0) validateMigration(original, migrated, changedEvents);
+	return {
+		migrated,
+		changedEvents
+	};
+}
+async function* sessionArtifacts(root) {
+	const pending = [root];
+	while (pending.length > 0) {
+		const current = pending.pop();
+		if (current === void 0) continue;
+		let entries;
+		try {
+			entries = await readdir(current, { withFileTypes: true });
+		} catch (error) {
+			if (error.code === "ENOENT") continue;
+			throw error;
+		}
+		for (const entry of entries) {
+			const path = join(current, entry.name);
+			if (entry.isDirectory()) pending.push(path);
+			else if (entry.isFile() && entry.name === "session.jsonl.zstd") yield path;
+		}
+	}
+}
+async function syncParentDirectory(path) {
+	const directory = await open(dirname(path), "r");
+	try {
+		await directory.sync();
+	} finally {
+		await directory.close();
+	}
+}
+async function migrateArtifact(path, apply) {
+	if (!apply) {
+		const { changedEvents } = renderMigration(await readStableFile(path));
+		return changedEvents === 0 ? void 0 : {
+			path,
+			changedEvents
+		};
+	}
+	return withFileLock(path, async () => {
+		const original = await readStableFile(path);
+		const { migrated, changedEvents } = renderMigration(original);
+		if (changedEvents === 0) return void 0;
+		const metadata = await stat(path);
+		const sourceIdentity = await stat(path, { bigint: true });
+		const backupPath = path + OPENAI_CODEX_HISTORY_BACKUP_SUFFIX;
+		try {
+			await link(path, backupPath);
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+		}
+		const backupHandle = await open(backupPath, constants.O_RDONLY | constants.O_NOFOLLOW);
+		try {
+			const backupIdentity = await backupHandle.stat({ bigint: true });
+			if (!backupIdentity.isFile()) throw new Error(`migration backup path is not a regular file: ${backupPath}`);
+			if (backupIdentity.dev !== sourceIdentity.dev || backupIdentity.ino !== sourceIdentity.ino) throw new Error(`migration backup does not reference the current Session artifact: ${backupPath}`);
+			if (!(await backupHandle.readFile()).equals(original)) throw new Error(`migration backup already exists with different content: ${backupPath}`);
+			await backupHandle.sync();
+		} finally {
+			await backupHandle.close();
+		}
+		await syncParentDirectory(backupPath);
+		const temporary = `${path}.codex-search-history-${randomBytes(6).toString("hex")}.tmp`;
+		try {
+			await writeFile(temporary, migrated, {
+				flag: "wx",
+				mode: metadata.mode & 511
+			});
+			const handle = await open(temporary, "r");
+			try {
+				await handle.sync();
+			} finally {
+				await handle.close();
+			}
+			if (!(await readStableFile(path)).equals(original)) throw new Error(`session changed while migration was prepared: ${path}`);
+			await rename(temporary, path);
+			try {
+				await syncParentDirectory(path);
+			} catch (error) {
+				const message = error instanceof Error ? error.message : String(error);
+				throw new Error(`session was repaired and backed up at ${backupPath}, but synchronizing its directory failed: ${message}`, { cause: error });
+			}
+			if (!(await readStableFile(backupPath)).equals(original)) throw new Error(`a Session writer changed the preserved backup during migration; stop DSH and restore ${backupPath}`);
+		} finally {
+			await rm(temporary, { force: true });
+		}
+		return {
+			path,
+			changedEvents,
+			backupPath
+		};
+	});
+}
+/**
+* Mark the retired Alpha 4.10 search event ignorable in compressed JSONL logs.
+* Applying is an offline maintenance operation and fails closed without the
+* caller's explicit acknowledgement that all DSH writers are stopped.
+*/
+async function migrateOpenAICodexSearchHistory(options = {}) {
+	const apply = options.apply === true;
+	if (apply && options.confirmStopped !== true) throw new Error("refusing to rewrite Session history without confirmStopped=true after stopping every DSH writer");
+	if (apply && process.platform === "win32") throw new Error("applying this history migration is not supported on Windows; dry-run only");
+	const root = resolve(options.root ?? join(resolveDshHome(options.dshHome), "sessions"));
+	const files = [];
+	for await (const path of sessionArtifacts(root)) try {
+		const result = await migrateArtifact(path, apply);
+		if (result !== void 0) files.push(result);
+	} catch (error) {
+		const partial = apply && files.length > 0 ? `; ${files.length} earlier file(s) were already repaired and remain backed up` : "";
+		const message = error instanceof Error ? error.message : String(error);
+		throw new Error(`Codex search history migration failed at ${path}${partial}: ${message}`, { cause: error });
+	}
+	return {
+		mode: apply ? "apply" : "dry-run",
+		root,
+		changedFiles: files.length,
+		changedEvents: files.reduce((sum, file) => sum + file.changedEvents, 0),
+		files
+	};
+}
+//#endregion
 //#region src/index.ts
 /** Stable Cordis plugin name. */
 const name = "llm-openai-codex";
@@ -2637,4 +2901,4 @@ function apply(ctx, config) {
 	scheduleCapabilities();
 }
 //#endregion
-export { OpenAICodexTrustedOriginsStore as $, isOpenAICodexTransportError as A, DSH_PLUGIN_API_PACKAGES as B, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH as C, OPENAI_CODEX_TRANSPORT_SERVICE as D, OPENAI_CODEX_TRANSPORT_ERROR_CODES as E, openAICodexConflictMessage as F, assessCompatibility as G, SUPPORTED_DSH_PLUGIN_API_VERSION as H, CODEX_CONNECT_VERSION as I, OPENAI_CODEX_FAST_MODE_PATH as J, detectCompatibility as K, COMPATIBILITY_CONTRACT as L, IMAGE_GENERATE_TOOL_NAME as M, assertNoOpenAICodexProviderConflict as N, OpenAICodexTransport as O, diagnoseOpenAICodex as P, isFastModeSessionId as Q, COMPATIBILITY_PACKAGES as R, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES as S, OPENAI_CODEX_TRANSPORT_API_VERSION as T, SUPPORTED_NODE_RANGE as U, PI_AI_PACKAGE as V, SUPPORTED_PI_AI_VERSION as W, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS as X, FastModeRegistry as Y, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH as Z, decodeOpenAICodexSettings as _, name as a, logoutOpenAICodex as at, OPENAI_CODEX_IMAGE_MAX_COUNT as b, OPENAI_CODEX_SEARCH_URL as c, OPENAI_CODEX_PROVIDER as ct, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as d, normalizeTrustedOrigin as et, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as f, OPENAI_CODEX_SETTINGS_NAMESPACE as g, DEFAULT_OPENAI_CODEX_SETTINGS as h, inject as i, loginOpenAICodex as it, VIEW_IMAGE_TOOL_NAME as j, OpenAICodexTransportError as k, OpenAICodexSearchProvider as l, OpenAICodexCredentialStore as lt, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as m, OPENAI_CODEX_SETTINGS_NS as n, parseOpenAICodexUsage as nt, OPENAI_CODEX_BASE_URL as o, openAICodexAuthStatus as ot, DEFAULT_OPENAI_CODEX_SEARCH_MODE as p, evaluateCompatibility as q, apply as r, readOpenAICodexRateLimits as rt, OPENAI_CODEX_SEARCH_PROVIDER as s, OPENAI_CODEX_AUTH_FILENAME as st, Config as t, OPENAI_CODEX_USAGE_URL as tt, mapOpenAICodexSearchResponse as u, openAICodexAuthPath as ut, resolveOpenAICodexSettings as v, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS as w, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES as x, OPENAI_CODEX_IMAGE_GENERATION_URL as y, COMPATIBILITY_SCHEMA_VERSION as z };
+export { OPENAI_CODEX_FAST_MODE_MAX_SESSIONS as $, OPENAI_CODEX_TRANSPORT_SERVICE as A, COMPATIBILITY_CONTRACT as B, OPENAI_CODEX_IMAGE_MAX_COUNT as C, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS as D, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH as E, IMAGE_GENERATE_TOOL_NAME as F, SUPPORTED_DSH_PLUGIN_API_VERSION as G, COMPATIBILITY_SCHEMA_VERSION as H, assertNoOpenAICodexProviderConflict as I, assessCompatibility as J, SUPPORTED_NODE_RANGE as K, diagnoseOpenAICodex as L, OpenAICodexTransportError as M, isOpenAICodexTransportError as N, OPENAI_CODEX_TRANSPORT_API_VERSION as O, VIEW_IMAGE_TOOL_NAME as P, FastModeRegistry as Q, openAICodexConflictMessage as R, OPENAI_CODEX_IMAGE_GENERATION_URL as S, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES as T, DSH_PLUGIN_API_PACKAGES as U, COMPATIBILITY_PACKAGES as V, PI_AI_PACKAGE as W, evaluateCompatibility as X, detectCompatibility as Y, OPENAI_CODEX_FAST_MODE_PATH as Z, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as _, name as a, parseOpenAICodexUsage as at, decodeOpenAICodexSettings as b, migrateOpenAICodexSearchHistory as c, logoutOpenAICodex as ct, OPENAI_CODEX_SEARCH_URL as d, OPENAI_CODEX_PROVIDER as dt, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH as et, OpenAICodexSearchProvider as f, OpenAICodexCredentialStore as ft, DEFAULT_OPENAI_CODEX_SEARCH_MODE as g, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as h, inject as i, OPENAI_CODEX_USAGE_URL as it, OpenAICodexTransport as j, OPENAI_CODEX_TRANSPORT_ERROR_CODES as k, OPENAI_CODEX_BASE_URL as l, openAICodexAuthStatus as lt, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as m, OPENAI_CODEX_SETTINGS_NS as n, OpenAICodexTrustedOriginsStore as nt, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX as o, readOpenAICodexRateLimits as ot, mapOpenAICodexSearchResponse as p, openAICodexAuthPath as pt, SUPPORTED_PI_AI_VERSION as q, apply as r, normalizeTrustedOrigin as rt, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT as s, loginOpenAICodex as st, Config as t, isFastModeSessionId as tt, OPENAI_CODEX_SEARCH_PROVIDER as u, OPENAI_CODEX_AUTH_FILENAME as ut, DEFAULT_OPENAI_CODEX_SETTINGS as v, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES as w, resolveOpenAICodexSettings as x, OPENAI_CODEX_SETTINGS_NAMESPACE as y, CODEX_CONNECT_VERSION as z };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-codex-connect",
   "displayName": "Codex Connect",
   "description": "ChatGPT OAuth and Codex models for DeepSeek Harness.",
-  "version": "0.1.0-alpha.4.13",
+  "version": "0.1.0-alpha.4.14",
   "author": "Frank Song",
   "contributors": [
     "Yan-Zero (original dsh-codex author)"