dsh-codex-connect 0.1.0-alpha.4.18 → 0.1.0-alpha.4.19

package/INSTALL.md

@@ -12,7 +12,7 @@ Install `dsh-codex-connect` into one requested DeepSeek Harness profile without
 
 ## Install and validate
 
-The only verified combination is DSH plugin API packages `0.1.1-rc.2`, `@earendil-works/pi-ai` `0.82.1`, and Node.js `^22.19.0 || >=24.0.0`. Alpha 4.18 uses the rc.2 keyed Plugin configuration slot; users of older DSH API packages should upgrade the DSH API packages and pi-ai together, then rerun `dsh-codex-connect doctor --json` and `pnpm --silent run check:compatibility`; the contract does not make claims about future versions.
+The only verified combination is DSH plugin API packages `0.1.1-rc.2`, `@earendil-works/pi-ai` `0.82.1`, and Node.js `^22.19.0 || >=24.0.0`. Alpha 4.19 uses the rc.2 keyed Plugin configuration slot; users of older DSH API packages should upgrade the DSH API packages and pi-ai together, then rerun `dsh-codex-connect doctor --json` and `pnpm --silent run check:compatibility`; the contract does not make claims about future versions.
 
 1. Check `dsh --version` or `dsh --help`. From a Harness checkout use `pnpm dsh`.
 2. Install the package:
@@ -21,7 +21,7 @@ The only verified combination is DSH plugin API packages `0.1.1-rc.2`, `@earendi
    dsh plugin --profile web add dsh-codex-connect@alpha
    ```
 
-   After `0.1.0-alpha.4.18` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.18`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.18'`.
+   After `0.1.0-alpha.4.19` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.19`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.19'`.
 
 3. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.
 4. Confirm the effective `agent-default-model` and `web.searchProvider` values are unchanged from before installation.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: a08627cda39b43cbc75d48f50370d8dcb7511365
-docs/README.zh.md: 3b018afca725285aa933eccc8b1c65599f1bf242
+README.md: ecad858eb993cfc54b97eb8d8d0518feb0b23f17
+docs/README.zh.md: 2d61465cfd3fde855d912ed39363563b46730a23

package/README.md

@@ -28,7 +28,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 
 Expected result: the package is added to that profile. This does not change the profile's default model or global search route.
 
-To reproduce this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.18`. If npm is unavailable after the matching GitHub prerelease exists, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.18'`. A local checkout can be installed as `link:/absolute/path/to/dsh-codex-connect`.
+To reproduce this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.19`. If npm is unavailable after the matching GitHub prerelease exists, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.19'`. A local checkout can be installed as `link:/absolute/path/to/dsh-codex-connect`.
 
 ### Version updates
 
@@ -84,6 +84,21 @@ Open Harness's normal model picker and select an `openai-codex` model for the ag
 
 The picker groups the available entries under **OpenAI Codex**. Model identifiers such as `GPT-5.6 Luna` are canonical names, so they intentionally remain un-translated.
 
+To shorten that list, open **Settings → Plugins → Plugin configuration → Codex Connect**, uncheck the models you do not want to see, and select **Save changes**. This controls discovery only: a hidden model already stored in an existing conversation or supplied by its exact id remains usable. A fresh installation shows the complete catalog.
+
+Profiles may also seed the visible subset with `models`; provider order is preserved regardless of the order written here:
+
+```yaml
+- id: llm-openai-codex
+  config:
+    models:
+      - gpt-5.6-luna
+      - gpt-5.6-sol
+      - gpt-5.6-terra
+```
+
+Omit `models` to show the full catalog. An empty list hides every Codex model from selectors without disabling exact-id routing.
+
 <p align="center">
   <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/en/model-selector.jpg" alt="OpenAI Codex model group in the English-localized DeepSeek Harness model picker" width="360">
 </p>
@@ -194,6 +209,7 @@ Selecting Codex as the profile's global search route is another explicit change:
 
 | Field | Default | Values |
 |---|---:|---|
+| `models` | full catalog | Codex model id array; empty hides all entries |
 | `enableSearch` | `false` | boolean |
 | `enableImageTool` | `false` | boolean |
 | `enableImageGeneration` | `false` | boolean |
@@ -223,8 +239,9 @@ Selecting Codex as the profile's global search route is another explicit change:
 
 ## Compatibility and security boundary
 
-- The only verified compatibility combination is DSH plugin API packages `0.1.1-rc.2`, `@earendil-works/pi-ai` `0.82.1`, and Node.js `^22.19.0 || >=24.0.0`; see [compatibility.json](compatibility.json). Alpha 4.18 uses the rc.2 keyed Plugin configuration slot; users of older DSH API packages should upgrade to the rc.2 API packages.
+- The only verified compatibility combination is DSH plugin API packages `0.1.1-rc.2`, `@earendil-works/pi-ai` `0.82.1`, and Node.js `^22.19.0 || >=24.0.0`; see [compatibility.json](compatibility.json). Alpha 4.19 uses the rc.2 keyed Plugin configuration slot; users of older DSH API packages should upgrade to the rc.2 API packages.
 - Upgrade the DSH plugin API packages and `@earendil-works/pi-ai` as one group, then run `dsh-codex-connect doctor --json` and the compatibility check again. This contract does not make claims about future versions.
+- When the daily upstream check finds a new `latest` or `next` DSH candidate, it installs Codex Connect into an isolated profile, boots the installed model runtime without OAuth credentials, verifies model and reasoning-effort discovery, and confirms provider disposal. Live sign-in, quota, and model requests still require manual validation in the test profile.
 - ChatGPT plan eligibility, model access, quotas, and backend behavior are controlled by OpenAI and may change.
 - The Codex endpoint does not enforce the ordinary Responses `max_output_tokens` field. Harness compaction still works, but that summary cap cannot be imposed server-side on this route.
 - Shell, filesystem, skills, MCP, subagents, approvals, permissions, attachments, session persistence, compaction, and recovery continue to come from the active Harness profile.

package/docs/README.zh.md

@@ -28,7 +28,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 
 预期结果：包被加入该 profile。这个动作不会更改 profile 的默认模型或全局搜索路由。
 
-如需精确复现这个版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.18`。对应 GitHub prerelease 已创建但 npm 不可用时，可使用 `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.18'`。本地 checkout 可安装为 `link:/absolute/path/to/dsh-codex-connect`。
+如需精确复现这个版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.19`。对应 GitHub prerelease 已创建但 npm 不可用时，可使用 `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.19'`。本地 checkout 可安装为 `link:/absolute/path/to/dsh-codex-connect`。
 
 ### 版本更新提醒
 
@@ -84,6 +84,21 @@ dsh web
 
 选择器会把可用项归在 **OpenAI Codex** 下。`GPT-5.6 Luna` 一类模型标识是规范名称，因此会保留原样，不翻译。
 
+如需缩短这个列表，打开 **设置 → 插件 → 插件配置 → Codex Connect**，取消勾选不想显示的模型，然后点击 **保存更改**。这个设置只控制模型发现：已有会话中保存的隐藏模型，或通过精确模型 ID 指定的隐藏模型，仍可继续使用。全新安装默认显示完整目录。
+
+也可以在 profile 中通过 `models` 设置初始显示子集；无论这里如何排列，选择器仍保持提供方的原始顺序：
+
+```yaml
+- id: llm-openai-codex
+  config:
+    models:
+      - gpt-5.6-luna
+      - gpt-5.6-sol
+      - gpt-5.6-terra
+```
+
+省略 `models` 时显示完整目录；空列表会在选择器中隐藏全部 Codex 模型，但不会禁用精确模型 ID 路由。
+
 <p align="center">
   <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/zh/model-selector.jpg" alt="中文 DeepSeek Harness 模型选择器中的 OpenAI Codex 模型分组" width="360">
 </p>
@@ -194,6 +209,7 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 
 | 字段 | 默认值 | 可选值 |
 |---|---:|---|
+| `models` | 完整目录 | Codex model id 数组；空数组隐藏全部条目 |
 | `enableSearch` | `false` | boolean |
 | `enableImageTool` | `false` | boolean |
 | `enableImageGeneration` | `false` | boolean |
@@ -223,8 +239,9 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 
 ## 兼容性与安全边界
 
-- 当前唯一已验证的兼容组合是 DSH 插件 API packages `0.1.1-rc.2`、`@earendil-works/pi-ai` `0.82.1` 和 Node.js `^22.19.0 || >=24.0.0`；详见 [compatibility.json](../compatibility.json)。Alpha 4.18 使用 rc.2 的 keyed 插件配置 slot；旧版 DSH API packages 用户应升级到 rc.2 API packages。
+- 当前唯一已验证的兼容组合是 DSH 插件 API packages `0.1.1-rc.2`、`@earendil-works/pi-ai` `0.82.1` 和 Node.js `^22.19.0 || >=24.0.0`；详见 [compatibility.json](../compatibility.json)。Alpha 4.19 使用 rc.2 的 keyed 插件配置 slot；旧版 DSH API packages 用户应升级到 rc.2 API packages。
 - 升级时请将 DSH 插件 API packages 与 `@earendil-works/pi-ai` 作为一组升级，再运行 `dsh-codex-connect doctor --json` 和兼容性检查。本契约不对未来版本作判断。
+- 每日上游检查发现新的 DSH `latest` 或 `next` 候选版本时，会把 Codex Connect 安装到隔离 Profile 中，在没有 OAuth 凭据的情况下启动已安装的模型运行时，验证模型与推理强度发现，并确认提供方可被正确卸载。真实登录、额度和模型请求仍需在测试 Profile 中人工验证。
 - ChatGPT 套餐资格、模型权限、额度和后端行为由 OpenAI 控制，可能变化。
 - Codex 端点不会强制普通 Responses 的 `max_output_tokens` 字段。Harness 压缩仍可工作，但这个摘要上限不能由服务端在该路由上强制。
 - shell、文件系统、skills、MCP、subagents、审批、权限、附件、会话持久化、压缩与恢复继续由当前 Harness profile 提供。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { L as diagnoseOpenAICodex, c as migrateOpenAICodexSearchHistory, ct as normalizeTrustedOrigin, ft as loginOpenAICodex, mt as openAICodexAuthStatus, pt as logoutOpenAICodex, st as OpenAICodexTrustedOriginsStore, vt as openAICodexAuthPath, z as CODEX_CONNECT_VERSION } from "./src-DY3uYj_g.js";
+import { L as diagnoseOpenAICodex, c as migrateOpenAICodexSearchHistory, ct as normalizeTrustedOrigin, ft as loginOpenAICodex, mt as openAICodexAuthStatus, pt as logoutOpenAICodex, st as OpenAICodexTrustedOriginsStore, vt as openAICodexAuthPath, z as CODEX_CONNECT_VERSION } from "./src-CiOi4nFr.js";
 import { fileURLToPath } from "node:url";
 import { realpathSync } from "node:fs";
 import { spawn } from "node:child_process";

package/lib/client.js

@@ -12,6 +12,7 @@ window.__ModuleLoader__.load({
 		/** Stable Harness settings namespace owned by this plugin. */
 		const OPENAI_CODEX_SETTINGS_NAMESPACE = "llm-openai-codex";
 		Object.freeze({
+			models: void 0,
 			enableSearch: false,
 			enableImageTool: false,
 			enableImageGeneration: false,
@@ -26,6 +27,7 @@ window.__ModuleLoader__.load({
 		/** Narrow the redacted settings wire payload before it enters React state. */
 		function decodeOpenAICodexSettings(value) {
 			if (!isRecord$2(value)) return void 0;
+			const models = value["models"];
 			const enableSearch = value["enableSearch"];
 			const enableImageTool = value["enableImageTool"];
 			const enableImageGeneration = value["enableImageGeneration"];
@@ -33,6 +35,7 @@ window.__ModuleLoader__.load({
 			const searchMode = value["searchMode"];
 			const searchContextSize = value["searchContextSize"];
 			const searchMaxOutputTokens = value["searchMaxOutputTokens"];
+			if (models !== void 0 && (!Array.isArray(models) || models.some((model) => typeof model !== "string"))) return void 0;
 			if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
 			if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 			if (typeof searchModel !== "string" || searchModel.trim().length === 0) return void 0;
@@ -40,6 +43,7 @@ window.__ModuleLoader__.load({
 			if (searchContextSize !== "low" && searchContextSize !== "medium" && searchContextSize !== "high") return void 0;
 			if (typeof searchMaxOutputTokens !== "number" || !Number.isInteger(searchMaxOutputTokens) || searchMaxOutputTokens < 1) return void 0;
 			return {
+				models: models === void 0 ? void 0 : [...new Set(models)],
 				enableSearch,
 				enableImageTool,
 				enableImageGeneration: enableImageGeneration ?? false,
@@ -59,6 +63,30 @@ window.__ModuleLoader__.load({
 		/** Plugin-owned logout endpoint consumed by its browser half. */
 		const OPENAI_CODEX_AUTH_LOGOUT_PATH = "/plugins/dsh-openai-codex/auth/logout";
 		//#endregion
+		//#region src/model-contract.ts
+		/** Node-free model catalog contract shared by the Host route and browser card. */
+		/** Same-origin endpoint exposing the complete Codex model catalog. */
+		const OPENAI_CODEX_MODEL_CATALOG_PATH = "/plugins/dsh-codex-connect/models";
+		/** Validate the model catalog before it enters React state. */
+		function decodeOpenAICodexModelCatalog(value) {
+			if (!Array.isArray(value)) return void 0;
+			const catalog = [];
+			const ids = /* @__PURE__ */ new Set();
+			for (const entry of value) {
+				if (typeof entry !== "object" || entry === null || Array.isArray(entry)) return void 0;
+				const record = entry;
+				const id = record["id"];
+				const name = record["name"];
+				if (typeof id !== "string" || id.length === 0 || typeof name !== "string" || name.length === 0 || ids.has(id)) return void 0;
+				ids.add(id);
+				catalog.push({
+					id,
+					name
+				});
+			}
+			return catalog;
+		}
+		//#endregion
 		//#region src/client/OpenAICodexConfiguration.tsx
 		/** Staged optional-capability editor inside the OpenAI Codex plugin card. */
 		const sectionStyle$1 = {
@@ -89,6 +117,25 @@ window.__ModuleLoader__.load({
 			padding: 0,
 			border: 0
 		};
+		const modelListStyle = {
+			display: "grid",
+			gridTemplateColumns: "repeat(auto-fit, minmax(210px, 1fr))",
+			gap: 10
+		};
+		const modelRowStyle = {
+			display: "flex",
+			alignItems: "center",
+			gap: 9,
+			minHeight: 30,
+			fontSize: 13,
+			color: "var(--dsw-alias-label-primary)",
+			cursor: "pointer"
+		};
+		const modelIdStyle = {
+			fontFamily: "ui-monospace, SFMono-Regular, Menlo, monospace",
+			fontSize: 12,
+			color: "var(--dsw-alias-label-secondary)"
+		};
 		const toggleRowStyle = {
 			display: "flex",
 			alignItems: "flex-start",
@@ -175,6 +222,7 @@ window.__ModuleLoader__.load({
 			mode: "memory"
 		};
 		const CONFIG_FIELDS = [
+			"models",
 			"enableSearch",
 			"enableImageTool",
 			"enableImageGeneration",
@@ -183,8 +231,13 @@ window.__ModuleLoader__.load({
 			"searchContextSize",
 			"searchMaxOutputTokens"
 		];
+		function sameField(field, left, right) {
+			if (field !== "models") return left === right;
+			if (left === void 0 || right === void 0) return left === right;
+			return Array.isArray(left) && Array.isArray(right) && left.length === right.length && left.every((model, index) => model === right[index]);
+		}
 		function sameConfig(left, right) {
-			return left !== void 0 && right !== void 0 && CONFIG_FIELDS.every((field) => left[field] === right[field]);
+			return left !== void 0 && right !== void 0 && CONFIG_FIELDS.every((field) => sameField(field, left[field], right[field]));
 		}
 		/** Edit the Host-owned llm-openai-codex settings section with Save/Discard staging. */
 		function OpenAICodexConfiguration({ scope, t }) {
@@ -195,6 +248,29 @@ window.__ModuleLoader__.load({
 			const [dirty, setDirty] = (0, react.useState)(false);
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [feedback, setFeedback] = (0, react.useState)("idle");
+			const [modelCatalog, setModelCatalog] = (0, react.useState)();
+			const [modelCatalogError, setModelCatalogError] = (0, react.useState)(false);
+			(0, react.useEffect)(() => {
+				if (scope === void 0) return;
+				const controller = new AbortController();
+				fetch(OPENAI_CODEX_MODEL_CATALOG_PATH, {
+					method: "GET",
+					credentials: "same-origin",
+					headers: { accept: "application/json" },
+					signal: controller.signal
+				}).then(async (response) => {
+					if (!response.ok) throw new Error(`model catalog request failed: ${String(response.status)}`);
+					const catalog = decodeOpenAICodexModelCatalog(await response.json());
+					if (catalog === void 0) throw new Error("model catalog response was invalid");
+					setModelCatalog(catalog);
+					setModelCatalogError(false);
+				}).catch(() => {
+					if (!controller.signal.aborted) setModelCatalogError(true);
+				});
+				return () => {
+					controller.abort();
+				};
+			}, [scope]);
 			(0, react.useEffect)(() => {
 				if (!dirty && !busy) setDraft(snapshot.value);
 			}, [
@@ -229,9 +305,11 @@ window.__ModuleLoader__.load({
 				setFeedback("idle");
 				try {
 					for (const field of CONFIG_FIELDS) {
-						if (scope.getSnapshot().value?.[field] === desired[field]) continue;
+						const accepted = scope.getSnapshot().value;
+						if (accepted !== void 0 && sameField(field, accepted[field], desired[field])) continue;
 						await scope.set(field, desired[field]);
-						if (scope.getSnapshot().value?.[field] !== desired[field]) throw new Error(`Host refused ${field}`);
+						const committed = scope.getSnapshot().value;
+						if (committed === void 0 || !sameField(field, committed[field], desired[field])) throw new Error(`Host refused ${field}`);
 					}
 					const accepted = scope.getSnapshot().value;
 					if (!sameConfig(accepted, desired)) throw new Error("Host returned a different configuration");
@@ -251,19 +329,8 @@ window.__ModuleLoader__.load({
 			const searchDisabled = !editable || draft?.enableSearch !== true;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				style: sectionStyle$1,
-				"aria-labelledby": "openai-codex-capabilities-title",
+				"aria-label": t("configurationHeading"),
 				children: [
-					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
-						id: "openai-codex-capabilities-title",
-						style: headingStyle,
-						children: t("capabilitiesHeading")
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: {
-							...bodyStyle$2,
-							marginTop: 4
-						},
-						children: t("capabilitiesIntro")
-					})] }),
 					loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: bodyStyle$2,
 						role: "status",
@@ -283,6 +350,67 @@ window.__ModuleLoader__.load({
 						style: fieldsetStyle,
 						disabled: !editable,
 						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+								style: headingStyle,
+								children: t("modelCatalog")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: {
+									...bodyStyle$2,
+									marginTop: 4
+								},
+								children: t("modelCatalogIntro")
+							})] }),
+							modelCatalog === void 0 && !modelCatalogError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: bodyStyle$2,
+								role: "status",
+								children: t("modelCatalogLoading")
+							}) : null,
+							modelCatalogError ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								style: errorStyle$2,
+								role: "alert",
+								children: t("modelCatalogFailed")
+							}) : null,
+							modelCatalog === void 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								style: modelListStyle,
+								role: "group",
+								"aria-label": t("modelCatalog"),
+								children: modelCatalog.map((model) => {
+									const selected = draft.models === void 0 || draft.models.includes(model.id);
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										style: modelRowStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											type: "checkbox",
+											checked: selected,
+											onChange: (event) => {
+												const visible = new Set(draft.models ?? modelCatalog.map((entry) => entry.id));
+												if (event.currentTarget.checked) visible.add(model.id);
+												else visible.delete(model.id);
+												update("models", modelCatalog.filter((entry) => visible.has(entry.id)).map((entry) => entry.id));
+											}
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: model.name }), model.name === model.id ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											style: modelIdStyle,
+											children: [
+												" (",
+												model.id,
+												")"
+											]
+										})] })]
+									}, model.id);
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+								style: { paddingTop: 4 },
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+									style: headingStyle,
+									children: t("capabilitiesHeading")
+								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: {
+										...bodyStyle$2,
+										marginTop: 4
+									},
+									children: t("capabilitiesIntro")
+								})]
+							}),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 								style: toggleRowStyle,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -492,7 +620,8 @@ window.__ModuleLoader__.load({
 			"dsh-rc7",
 			"search-stability",
 			"image-generation",
-			"oauth-history"
+			"oauth-history",
+			"model-visibility"
 		];
 		function isHighlightKind(value) {
 			return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -995,7 +1124,8 @@ window.__ModuleLoader__.load({
 			"dsh-rc7": "updateHighlightDshRc7",
 			"search-stability": "updateHighlightSearchStability",
 			"image-generation": "updateHighlightImageGeneration",
-			"oauth-history": "updateHighlightOauthHistory"
+			"oauth-history": "updateHighlightOauthHistory",
+			"model-visibility": "updateHighlightModelVisibility"
 		};
 		const compatibilityTitleKeys = {
 			compatible: "compatibilityCompatibleTitle",
@@ -2430,6 +2560,11 @@ window.__ModuleLoader__.load({
 			remoteOriginCopy: "Copy trust command",
 			remoteOriginCopied: "Copied",
 			remoteOriginCopyFailed: "Copy was unavailable. Copy the command manually.",
+			configurationHeading: "Codex Connect configuration",
+			modelCatalog: "Models shown in the selector",
+			modelCatalogIntro: "Choose which Codex models appear in model selectors. Existing conversations can continue using a hidden model.",
+			modelCatalogLoading: "Loading available models…",
+			modelCatalogFailed: "Available models could not be loaded.",
 			capabilitiesHeading: "Optional capabilities",
 			capabilitiesIntro: "Choose which extra Codex capabilities this dsh profile may register.",
 			enableSearch: "Enable Codex search provider",
@@ -2539,6 +2674,7 @@ window.__ModuleLoader__.load({
 			updateHighlightSearchStability: "Improved search-session stability so new search records remain readable after restarts.",
 			updateHighlightImageGeneration: "Added optional GPT Image generation in the Codex Connect settings and a preview card in the conversation.",
 			updateHighlightOauthHistory: "Added safer session-history migration and a sign-in fallback when the account needs to reconnect.",
+			updateHighlightModelVisibility: "You can now choose which Codex models appear in model selectors.",
 			viewTechnicalDetails: "View technical details",
 			hideTechnicalDetails: "Hide technical details",
 			technicalDetailsHeading: "Technical changes",
@@ -2608,6 +2744,11 @@ window.__ModuleLoader__.load({
 			remoteOriginCopy: "复制授权命令",
 			remoteOriginCopied: "已复制",
 			remoteOriginCopyFailed: "当前无法访问剪贴板，请手动复制命令。",
+			configurationHeading: "Codex Connect 配置",
+			modelCatalog: "模型选择器中显示的模型",
+			modelCatalogIntro: "选择要在模型选择器中显示的 Codex 模型；隐藏模型后，已有会话仍可继续使用。",
+			modelCatalogLoading: "正在加载可用模型…",
+			modelCatalogFailed: "无法加载可用模型。",
 			capabilitiesHeading: "可选能力",
 			capabilitiesIntro: "选择允许此 dsh profile 注册哪些额外的 Codex 能力。",
 			enableSearch: "启用 Codex 搜索提供方",
@@ -2717,6 +2858,7 @@ window.__ModuleLoader__.load({
 			updateHighlightSearchStability: "改进搜索会话稳定性，重启后新写入的搜索记录仍能正常读取。",
 			updateHighlightImageGeneration: "在 Codex Connect 设置中加入可选的 GPT Image 生图，并在对话里展示生成结果卡片。",
 			updateHighlightOauthHistory: "增加更安全的会话历史迁移，并在账号需要重新登录时提供备用登录路径。",
+			updateHighlightModelVisibility: "现在可以选择哪些 Codex 模型显示在模型选择菜单中。",
 			viewTechnicalDetails: "查看完整技术说明",
 			hideTechnicalDetails: "收起技术说明",
 			technicalDetailsHeading: "技术变更",
@@ -3805,7 +3947,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.18";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.19";
 		//#endregion
 		//#region src/client/index.tsx
 		/** Stable browser-plugin name. */

package/lib/index.d.ts

@@ -311,6 +311,8 @@ declare const DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE: OpenAICodexSearchContext
 declare const DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS = 10000;
 /** Fully resolved user-editable section presented by Plugin configuration. */
 interface OpenAICodexSettingsConfig {
+  /** Model ids advertised in selectors; undefined advertises the full catalog. */
+  models: string[] | undefined;
   enableSearch: boolean;
   enableImageTool: boolean;
   enableImageGeneration: boolean;
@@ -476,7 +478,7 @@ declare const OPENAI_CODEX_FAST_MODE_PATH = "/plugins/dsh-openai-codex/fast-mode
 declare const OPENAI_CODEX_UPDATE_PATH = "/openai-codex/update";
 //#endregion
 //#region src/update.d.ts
-type OpenAICodexUpdateHighlightKind = 'trusted-origins' | 'runtime-compatibility' | 'quota-fast-mode' | 'dsh-rc7' | 'search-stability' | 'image-generation' | 'oauth-history';
+type OpenAICodexUpdateHighlightKind = 'trusted-origins' | 'runtime-compatibility' | 'quota-fast-mode' | 'dsh-rc7' | 'search-stability' | 'image-generation' | 'oauth-history' | 'model-visibility';
 interface OpenAICodexUpdateHighlight {
   version: string;
   kind: OpenAICodexUpdateHighlightKind;
@@ -583,6 +585,8 @@ declare const inject: string[];
 declare const OPENAI_CODEX_SETTINGS_NS: import("@deepseek-ai/dsh-settings").SettingsNamespace;
 /** Composite model and standalone-search configuration. */
 interface Config {
+  /** Model ids advertised in selectors; omitted to advertise the full catalog. */
+  models?: string[] | undefined;
   /** Register the optional standalone Codex search provider. */
   enableSearch?: boolean;
   /** Register the optional image-loading tool. */

package/lib/index.js

@@ -1,2 +1,2 @@
-import { $ as assessCompatibility, A as OPENAI_CODEX_TRANSPORT_SERVICE, B as OPENAI_CODEX_UPDATE_PATH, C as OPENAI_CODEX_IMAGE_MAX_COUNT, D as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, E as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, F as IMAGE_GENERATE_TOOL_NAME, G as COMPATIBILITY_CONTRACT, H as compareOpenAICodexVersions, I as assertNoOpenAICodexProviderConflict, J as DSH_PLUGIN_API_PACKAGES, K as COMPATIBILITY_PACKAGES, L as diagnoseOpenAICodex, M as OpenAICodexTransportError, N as isOpenAICodexTransportError, O as OPENAI_CODEX_TRANSPORT_API_VERSION, P as VIEW_IMAGE_TOOL_NAME, Q as SUPPORTED_PI_AI_VERSION, R as openAICodexConflictMessage, S as OPENAI_CODEX_IMAGE_GENERATION_URL, T as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, U as parseOpenAICodexUpdateResult, V as checkForOpenAICodexUpdate, W as parseOpenAICodexVersion, X as SUPPORTED_DSH_PLUGIN_API_VERSION, Y as PI_AI_PACKAGE, Z as SUPPORTED_NODE_RANGE, _ as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, _t as OpenAICodexCredentialStore, a as name, at as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, b as decodeOpenAICodexSettings, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_SEARCH_URL, dt as readOpenAICodexRateLimits, et as detectCompatibility, f as OpenAICodexSearchProvider, ft as loginOpenAICodex, g as DEFAULT_OPENAI_CODEX_SEARCH_MODE, gt as OPENAI_CODEX_PROVIDER, h as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, ht as OPENAI_CODEX_AUTH_FILENAME, i as inject, it as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, j as OpenAICodexTransport, k as OPENAI_CODEX_TRANSPORT_ERROR_CODES, l as OPENAI_CODEX_BASE_URL, lt as OPENAI_CODEX_USAGE_URL, m as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, mt as openAICodexAuthStatus, n as OPENAI_CODEX_SETTINGS_NS, nt as OPENAI_CODEX_FAST_MODE_PATH, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as isFastModeSessionId, p as mapOpenAICodexSearchResponse, pt as logoutOpenAICodex, q as COMPATIBILITY_SCHEMA_VERSION, r as apply, rt as FastModeRegistry, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, t as Config, tt as evaluateCompatibility, u as OPENAI_CODEX_SEARCH_PROVIDER, ut as parseOpenAICodexUsage, v as DEFAULT_OPENAI_CODEX_SETTINGS, vt as openAICodexAuthPath, w as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, x as resolveOpenAICodexSettings, y as OPENAI_CODEX_SETTINGS_NAMESPACE } from "./src-DY3uYj_g.js";
+import { $ as assessCompatibility, A as OPENAI_CODEX_TRANSPORT_SERVICE, B as OPENAI_CODEX_UPDATE_PATH, C as OPENAI_CODEX_IMAGE_MAX_COUNT, D as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, E as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, F as IMAGE_GENERATE_TOOL_NAME, G as COMPATIBILITY_CONTRACT, H as compareOpenAICodexVersions, I as assertNoOpenAICodexProviderConflict, J as DSH_PLUGIN_API_PACKAGES, K as COMPATIBILITY_PACKAGES, L as diagnoseOpenAICodex, M as OpenAICodexTransportError, N as isOpenAICodexTransportError, O as OPENAI_CODEX_TRANSPORT_API_VERSION, P as VIEW_IMAGE_TOOL_NAME, Q as SUPPORTED_PI_AI_VERSION, R as openAICodexConflictMessage, S as OPENAI_CODEX_IMAGE_GENERATION_URL, T as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, U as parseOpenAICodexUpdateResult, V as checkForOpenAICodexUpdate, W as parseOpenAICodexVersion, X as SUPPORTED_DSH_PLUGIN_API_VERSION, Y as PI_AI_PACKAGE, Z as SUPPORTED_NODE_RANGE, _ as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, _t as OpenAICodexCredentialStore, a as name, at as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, b as decodeOpenAICodexSettings, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_SEARCH_URL, dt as readOpenAICodexRateLimits, et as detectCompatibility, f as OpenAICodexSearchProvider, ft as loginOpenAICodex, g as DEFAULT_OPENAI_CODEX_SEARCH_MODE, gt as OPENAI_CODEX_PROVIDER, h as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, ht as OPENAI_CODEX_AUTH_FILENAME, i as inject, it as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, j as OpenAICodexTransport, k as OPENAI_CODEX_TRANSPORT_ERROR_CODES, l as OPENAI_CODEX_BASE_URL, lt as OPENAI_CODEX_USAGE_URL, m as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, mt as openAICodexAuthStatus, n as OPENAI_CODEX_SETTINGS_NS, nt as OPENAI_CODEX_FAST_MODE_PATH, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as isFastModeSessionId, p as mapOpenAICodexSearchResponse, pt as logoutOpenAICodex, q as COMPATIBILITY_SCHEMA_VERSION, r as apply, rt as FastModeRegistry, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, t as Config, tt as evaluateCompatibility, u as OPENAI_CODEX_SEARCH_PROVIDER, ut as parseOpenAICodexUsage, v as DEFAULT_OPENAI_CODEX_SETTINGS, vt as openAICodexAuthPath, w as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, x as resolveOpenAICodexSettings, y as OPENAI_CODEX_SETTINGS_NAMESPACE } from "./src-CiOi4nFr.js";
 export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, IMAGE_GENERATE_TOOL_NAME, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_UPDATE_PATH, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexSearchProvider, OpenAICodexTransport, OpenAICodexTransportError, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_VERSION, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, checkForOpenAICodexUpdate, compareOpenAICodexVersions, decodeOpenAICodexSettings, detectCompatibility, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, migrateOpenAICodexSearchHistory, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUpdateResult, parseOpenAICodexUsage, parseOpenAICodexVersion, readOpenAICodexRateLimits, resolveOpenAICodexSettings };

package/lib/{src-DY3uYj_g.js → src-CiOi4nFr.js}

@@ -164,6 +164,13 @@ var OpenAICodexCredentialStore = class {
 //#endregion
 //#region src/adapter.ts
 /** OpenAI Codex adapter assembled from public dsh-llm-pi-ai extension points. */
+/** Return a detached copy of the complete pi-ai Codex model catalog. */
+function openAICodexModelCatalog() {
+	return openaiCodexProvider().getModels().map((model) => ({
+		id: model.id,
+		name: model.name
+	}));
+}
 /** Provider idle ceiling used by the composite route. */
 const OPENAI_CODEX_STREAM_IDLE_TIMEOUT_MS = 3e5;
 /** rc.2 default maximum base64 image payload retained in one request. */
@@ -243,12 +250,21 @@ function createOpenAICodexProfile(provider, fastMode) {
 * resolution, streaming, reasoning metadata, and compaction behavior; this
 * plugin supplies its provider-native OAuth token for each request.
 */
-function createOpenAICodexAdapter(credentials, resolveAttachments, fastMode) {
+function createOpenAICodexAdapter(credentials, resolveAttachments, fastMode, visibleModelIds) {
 	const provider = openaiCodexProvider();
 	const profiles = /* @__PURE__ */ new Map([[OPENAI_CODEX_PROVIDER, createOpenAICodexProfile(provider, fastMode)]]);
 	const models = createModels({ credentials });
 	models.setProvider(provider);
-	return new PiAiAdapter({
+	class OpenAICodexAdapter extends PiAiAdapter {
+		async listModels(providerId) {
+			const catalog = await super.listModels(providerId);
+			const configured = visibleModelIds?.();
+			if (configured === void 0) return catalog;
+			const visible = new Set(configured);
+			return catalog.filter((model) => visible.has(model.id));
+		}
+	}
+	return new OpenAICodexAdapter({
 		profiles: () => profiles,
 		resolveApiKey: async () => (await models.getAuth(OPENAI_CODEX_PROVIDER))?.auth.apiKey,
 		auth: {
@@ -928,7 +944,7 @@ async function trustedRequestDecision(req, trustedOrigins = new OpenAICodexTrust
 		error: REMOTE_WEB_ORIGIN_NOT_TRUSTED
 	};
 }
-function json$1(res, status, value) {
+function json$2(res, status, value) {
 	res.writeHead(status, {
 		"content-type": "application/json; charset=utf-8",
 		"cache-control": "no-store",
@@ -1018,7 +1034,7 @@ function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastM
 		const authorize = async (req, res) => {
 			const decision = await trustedRequestDecision(req, trustedOrigins);
 			if (decision.trusted) return true;
-			json$1(res, 403, { error: decision.error });
+			json$2(res, 403, { error: decision.error });
 			return false;
 		};
 		const routes = [
@@ -1026,21 +1042,21 @@ function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastM
 				kind: "exact",
 				path: OPENAI_CODEX_AUTH_STATUS_PATH,
 				handler: async (req, res) => {
-					if (req.method !== "GET") return json$1(res, 405, { error: "method not allowed" });
+					if (req.method !== "GET") return json$2(res, 405, { error: "method not allowed" });
 					if (!await authorize(req, res)) return;
-					json$1(res, 200, await auth.status());
+					json$2(res, 200, await auth.status());
 				}
 			}),
 			ctx.webServer.register({
 				kind: "exact",
 				path: OPENAI_CODEX_AUTH_LOGIN_PATH,
 				handler: async (req, res) => {
-					if (req.method !== "POST") return json$1(res, 405, { error: "method not allowed" });
+					if (req.method !== "POST") return json$2(res, 405, { error: "method not allowed" });
 					if (!await authorize(req, res)) return;
 					try {
-						json$1(res, 200, await auth.signIn());
+						json$2(res, 200, await auth.signIn());
 					} catch (error) {
-						json$1(res, 500, { error: safeMessage(error) });
+						json$2(res, 500, { error: safeMessage(error) });
 					}
 				}
 			}),
@@ -1048,13 +1064,13 @@ function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastM
 				kind: "exact",
 				path: OPENAI_CODEX_AUTH_LOGOUT_PATH,
 				handler: async (req, res) => {
-					if (req.method !== "POST") return json$1(res, 405, { error: "method not allowed" });
+					if (req.method !== "POST") return json$2(res, 405, { error: "method not allowed" });
 					if (!await authorize(req, res)) return;
 					try {
 						await auth.signOut();
-						json$1(res, 200, { ok: true });
+						json$2(res, 200, { ok: true });
 					} catch (error) {
-						json$1(res, 500, { error: safeMessage(error) });
+						json$2(res, 500, { error: safeMessage(error) });
 					}
 				}
 			}),
@@ -1062,22 +1078,22 @@ function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastM
 				kind: "exact",
 				path: OPENAI_CODEX_FAST_MODE_PATH,
 				handler: async (req, res) => {
-					if (req.method !== "GET" && req.method !== "POST") return json$1(res, 405, { error: "method not allowed" });
+					if (req.method !== "GET" && req.method !== "POST") return json$2(res, 405, { error: "method not allowed" });
 					if (!await authorize(req, res)) return;
 					if (req.method === "GET") {
 						const sessionId = fastModeSessionIdFromQuery(req);
-						if (sessionId === void 0) return json$1(res, 400, { error: "invalid input" });
-						return json$1(res, 200, { enabled: fastMode.isEnabled(sessionId) });
+						if (sessionId === void 0) return json$2(res, 400, { error: "invalid input" });
+						return json$2(res, 200, { enabled: fastMode.isEnabled(sessionId) });
 					}
 					const type = header(req, "content-type");
-					if (type === void 0 || !/^application\/json(?:\s*;|$)/iu.test(type.trim())) return json$1(res, 415, { error: "unsupported content type" });
+					if (type === void 0 || !/^application\/json(?:\s*;|$)/iu.test(type.trim())) return json$2(res, 415, { error: "unsupported content type" });
 					try {
 						const body = fastModeBody(await readFastModeBody(req));
-						if (body === void 0) return json$1(res, 400, { error: "invalid input" });
+						if (body === void 0) return json$2(res, 400, { error: "invalid input" });
 						fastMode.set(body.sessionId, body.enabled);
-						return json$1(res, 200, { enabled: fastMode.isEnabled(body.sessionId) });
+						return json$2(res, 200, { enabled: fastMode.isEnabled(body.sessionId) });
 					} catch (error) {
-						return json$1(res, error instanceof RangeError ? 413 : 400, { error: error instanceof RangeError ? "request body too large" : "invalid input" });
+						return json$2(res, error instanceof RangeError ? 413 : 400, { error: error instanceof RangeError ? "request body too large" : "invalid input" });
 					}
 				}
 			})
@@ -1242,7 +1258,8 @@ const HIGHLIGHT_KINDS = [
 	"dsh-rc7",
 	"search-stability",
 	"image-generation",
-	"oauth-history"
+	"oauth-history",
+	"model-visibility"
 ];
 function isHighlightKind(value) {
 	return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -1671,7 +1688,7 @@ async function detectCurrentDshVersion() {
 	const adapter = report.packages["@deepseek-ai/dsh-llm-pi-ai"].installed;
 	return llm !== null && llm === adapter ? llm : void 0;
 }
-function json(res, status, value) {
+function json$1(res, status, value) {
 	res.writeHead(status, {
 		"content-type": "application/json; charset=utf-8",
 		"cache-control": "no-store",
@@ -1686,14 +1703,14 @@ function registerOpenAICodexUpdateRoutes(ctx, options, trustedOrigins) {
 			kind: "exact",
 			path: OPENAI_CODEX_RUNTIME_PATH,
 			handler: async (req, res) => {
-				if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
+				if (req.method !== "GET") return json$1(res, 405, { error: "method not allowed" });
 				const decision = await trustedRequestDecision(req, trustedOrigins);
-				if (!decision.trusted) return json(res, 403, { error: decision.error });
+				if (!decision.trusted) return json$1(res, 403, { error: decision.error });
 				try {
 					const currentDshVersion = await (options.resolveCurrentDshVersion ?? detectCurrentDshVersion)();
-					return json(res, 200, currentDshVersion === void 0 ? {} : { currentDshVersion });
+					return json$1(res, 200, currentDshVersion === void 0 ? {} : { currentDshVersion });
 				} catch {
-					return json(res, 200, {});
+					return json$1(res, 200, {});
 				}
 			}
 		});
@@ -1701,9 +1718,9 @@ function registerOpenAICodexUpdateRoutes(ctx, options, trustedOrigins) {
 			kind: "exact",
 			path: OPENAI_CODEX_UPDATE_PATH,
 			handler: async (req, res) => {
-				if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
+				if (req.method !== "GET") return json$1(res, 405, { error: "method not allowed" });
 				const decision = await trustedRequestDecision(req, trustedOrigins);
-				if (!decision.trusted) return json(res, 403, { error: decision.error });
+				if (!decision.trusted) return json$1(res, 403, { error: decision.error });
 				let result;
 				let currentDshVersion;
 				try {
@@ -1726,7 +1743,7 @@ function registerOpenAICodexUpdateRoutes(ctx, options, trustedOrigins) {
 						reason: "registry-unavailable"
 					};
 				}
-				return json(res, 200, result);
+				return json$1(res, 200, result);
 			}
 		});
 		return () => {
@@ -1736,8 +1753,36 @@ function registerOpenAICodexUpdateRoutes(ctx, options, trustedOrigins) {
 	}, "dsh-codex-connect: update route");
 }
 //#endregion
+//#region src/model-contract.ts
+/** Node-free model catalog contract shared by the Host route and browser card. */
+/** Same-origin endpoint exposing the complete Codex model catalog. */
+const OPENAI_CODEX_MODEL_CATALOG_PATH = "/plugins/dsh-codex-connect/models";
+//#endregion
+//#region src/model-routes.ts
+function json(res, status, value) {
+	res.writeHead(status, {
+		"content-type": "application/json; charset=utf-8",
+		"cache-control": "no-store",
+		"x-content-type-options": "nosniff"
+	});
+	res.end(JSON.stringify(value));
+}
+/** Register the read-only catalog route consumed by Plugin configuration. */
+function registerOpenAICodexModelCatalogRoute(ctx, resolveCatalog, trustedOrigins) {
+	ctx.effect(() => ctx.webServer.register({
+		kind: "exact",
+		path: OPENAI_CODEX_MODEL_CATALOG_PATH,
+		handler: async (req, res) => {
+			if (req.method !== "GET") return json(res, 405, { error: "method not allowed" });
+			const decision = await trustedRequestDecision(req, trustedOrigins);
+			if (!decision.trusted) return json(res, 403, { error: decision.error });
+			return json(res, 200, resolveCatalog());
+		}
+	}), "dsh-codex-connect: model catalog route");
+}
+//#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.18";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.19";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */
@@ -2739,6 +2784,7 @@ const DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE = "medium";
 /** Default output budget for the standalone search response. */
 const DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS = 1e4;
 const DEFAULT_OPENAI_CODEX_SETTINGS = Object.freeze({
+	models: void 0,
 	enableSearch: false,
 	enableImageTool: false,
 	enableImageGeneration: false,
@@ -2760,6 +2806,7 @@ function isRecord$1(value) {
 /** Narrow the redacted settings wire payload before it enters React state. */
 function decodeOpenAICodexSettings(value) {
 	if (!isRecord$1(value)) return void 0;
+	const models = value["models"];
 	const enableSearch = value["enableSearch"];
 	const enableImageTool = value["enableImageTool"];
 	const enableImageGeneration = value["enableImageGeneration"];
@@ -2767,6 +2814,7 @@ function decodeOpenAICodexSettings(value) {
 	const searchMode = value["searchMode"];
 	const searchContextSize = value["searchContextSize"];
 	const searchMaxOutputTokens = value["searchMaxOutputTokens"];
+	if (models !== void 0 && (!Array.isArray(models) || models.some((model) => typeof model !== "string"))) return void 0;
 	if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
 	if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 	if (typeof searchModel !== "string" || searchModel.trim().length === 0) return void 0;
@@ -2774,6 +2822,7 @@ function decodeOpenAICodexSettings(value) {
 	if (searchContextSize !== "low" && searchContextSize !== "medium" && searchContextSize !== "high") return void 0;
 	if (typeof searchMaxOutputTokens !== "number" || !Number.isInteger(searchMaxOutputTokens) || searchMaxOutputTokens < 1) return void 0;
 	return {
+		models: models === void 0 ? void 0 : [...new Set(models)],
 		enableSearch,
 		enableImageTool,
 		enableImageGeneration: enableImageGeneration ?? false,
@@ -3269,6 +3318,7 @@ const inject = ["llm"];
 /** Branded Host settings namespace for Codex Connect capability configuration. */
 const OPENAI_CODEX_SETTINGS_NS = settingsNamespace(OPENAI_CODEX_SETTINGS_NAMESPACE);
 const Config = z.object({
+	models: z.union([z.const(void 0), z.array(z.string())]),
 	enableSearch: z.boolean().default(false),
 	enableImageTool: z.boolean().default(false),
 	enableImageGeneration: z.boolean().default(false),
@@ -3299,10 +3349,11 @@ function apply(ctx, config) {
 	const fastMode = new FastModeRegistry();
 	assertNoOpenAICodexProviderConflict(ctx.llm.listProviders().map((provider) => provider.id));
 	new OpenAICodexTransport(ctx, credentials);
-	ctx.llm.registerAdapter([OPENAI_CODEX_PROVIDER], createOpenAICodexAdapter(credentials, () => ctx.get("attachments"), fastMode));
+	ctx.llm.registerAdapter([OPENAI_CODEX_PROVIDER], createOpenAICodexAdapter(credentials, () => ctx.get("attachments"), fastMode, () => resolveOpenAICodexSettings(current()).models));
 	ctx.inject(["webServer"], (webCtx) => {
 		registerOpenAICodexAuthRoutes(webCtx, credentials, trustedOrigins, fastMode);
 		registerOpenAICodexUpdateRoutes(webCtx, { currentVersion: CODEX_CONNECT_VERSION }, trustedOrigins);
+		registerOpenAICodexModelCatalogRoute(webCtx, openAICodexModelCatalog, trustedOrigins);
 	});
 	let stopped = false;
 	let searchFiber;

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-codex-connect",
   "displayName": "Codex Connect",
   "description": "ChatGPT OAuth and Codex models for DeepSeek Harness.",
-  "version": "0.1.0-alpha.4.18",
+  "version": "0.1.0-alpha.4.19",
   "author": "Frank Song",
   "contributors": [
     "Yan-Zero (original dsh-codex author)"