dsh-codex-connect 0.1.0-alpha.4.21 → 0.1.0-alpha.4.22

package/lib/{src-Cxq99TvF.js → src-kwF-uZCG.js}

@@ -1,7 +1,7 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { basename, dirname, join, parse, resolve } from "node:path";
 import z from "@deepseek-ai/schemastery";
-import { deepEqualJson, installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
+import { deepEqualJson } from "@deepseek-ai/dsh-util-values";
 import { createModels, defaultProviderAuthContext } from "@earendil-works/pi-ai";
 import { openaiCodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
 import { createUserMessage, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
@@ -165,13 +165,43 @@ var OpenAICodexCredentialStore = class {
 	}
 };
 //#endregion
+//#region src/model-contract.ts
+/** Node-free model catalog contract shared by the Host route and browser card. */
+/** Same-origin endpoint exposing the complete Codex model catalog. */
+const OPENAI_CODEX_MODEL_CATALOG_PATH = "/plugins/dsh-codex-connect/models";
+const CONFIGURATION_LIMITS = Object.freeze({
+	"gpt-5.6-sol": 872e3,
+	"gpt-5.6-terra": 872e3,
+	"gpt-5.6-luna": 872e3,
+	"gpt-5.4": 1e6,
+	"gpt-5.5": 272e3,
+	"gpt-5.4-mini": 272e3
+});
+/** Keep unlisted or newer provider defaults usable without inventing a larger limit. */
+function openAICodexContextLimit(id, contextWindow) {
+	const ceiling = Object.hasOwn(CONFIGURATION_LIMITS, id) ? CONFIGURATION_LIMITS[id] : void 0;
+	return ceiling === void 0 || ceiling < contextWindow ? {
+		maxContextWindow: contextWindow,
+		contextLimitSource: "catalog-default"
+	} : {
+		maxContextWindow: ceiling,
+		contextLimitSource: "codex-catalog"
+	};
+}
+/** Whether a proposed local token budget fits the model's configuration range. */
+function isValidOpenAICodexContextBudget(value, maximum) {
+	return Number.isSafeInteger(value) && value > 0 && value <= maximum;
+}
+//#endregion
 //#region src/adapter.ts
 /** OpenAI Codex adapter assembled from public dsh-llm-pi-ai extension points. */
 /** Return a detached copy of the complete pi-ai Codex model catalog. */
 function openAICodexModelCatalog() {
 	return openaiCodexProvider().getModels().map((model) => ({
 		id: model.id,
-		name: model.name
+		name: model.name,
+		contextWindow: model.contextWindow,
+		...openAICodexContextLimit(model.id, model.contextWindow)
 	}));
 }
 /** Provider idle ceiling used by the composite route. */
@@ -240,8 +270,9 @@ function requestProvider(provider, fastMode, proxyManager, resolveProxyUrl) {
 		}
 	};
 }
-/** Build the immutable profile consumed by the rc.2 pi-ai adapter. */
-function createOpenAICodexProfile(provider, fastMode, proxyManager, resolveProxyUrl) {
+/** Build the immutable profile consumed by the DSH pi-ai adapter. */
+function createOpenAICodexProfile(provider, fastMode, proxyManager, resolveProxyUrl, contextWindowOverrides) {
+	const effectiveProvider = contextWindowOverrides === void 0 ? provider : withOpenAICodexContextWindowOverrides(provider, contextWindowOverrides);
 	return {
 		provider: OPENAI_CODEX_PROVIDER,
 		displayName: "OpenAI Codex",
@@ -252,18 +283,59 @@ function createOpenAICodexProfile(provider, fastMode, proxyManager, resolveProxy
 		requestImageMaxBytes: OPENAI_CODEX_REQUEST_IMAGE_MAX_BYTES,
 		retryPolicy: resolveRetryPolicy(void 0, "dsh-codex-connect retryPolicy"),
 		configuredMaxTokens: /* @__PURE__ */ new Map(),
-		piProvider: requestProvider(provider, fastMode, proxyManager, resolveProxyUrl)
+		piProvider: requestProvider(effectiveProvider, fastMode, proxyManager, resolveProxyUrl)
 	};
 }
 /**
+* Detach one provider and replace the advertised context window for the
+* configured model ids. Request streaming itself is unaffected: pi-ai streams
+* the caller-supplied model, so only the metadata Harness reads for context
+* budgeting and compaction changes.
+*/
+function withOpenAICodexContextWindowOverrides(provider, overrides) {
+	const baselineModels = provider.getModels();
+	assertOpenAICodexContextWindowOverrides(overrides, baselineModels);
+	const replaced = baselineModels.map((model) => {
+		const contextWindow = overrides[model.id];
+		return contextWindow === void 0 ? model : {
+			...model,
+			contextWindow
+		};
+	});
+	return {
+		...provider,
+		getModels: () => replaced
+	};
+}
+/** Reject unknown ids and out-of-range budgets before accepting settings or requests. */
+function assertOpenAICodexContextWindowOverrides(overrides, catalog) {
+	const models = new Map(catalog.map((model) => [model.id, model]));
+	for (const [id, budget] of Object.entries(overrides ?? {})) {
+		const model = models.get(id);
+		if (model === void 0) throw new TypeError(`OpenAI Codex contextWindowOverrides contains unknown model id "${id}"`);
+		const { maxContextWindow } = openAICodexContextLimit(id, model.contextWindow);
+		if (budget !== null && !isValidOpenAICodexContextBudget(budget, maxContextWindow)) throw new TypeError(`OpenAI Codex contextWindowOverrides for "${id}" must be an integer from 1 to ${maxContextWindow} tokens; use null to restore the catalog default`);
+	}
+}
+/**
 * Create the Codex subscription adapter without requiring a dsh fork. The
 * public pi-ai adapter owns Harness message conversion, image attachment
 * resolution, streaming, reasoning metadata, and compaction behavior; this
 * plugin supplies its provider-native OAuth token for each request.
 */
-function createOpenAICodexAdapter(credentials, resolveAttachments, fastMode, visibleModelIds, proxyManager, resolveProxyUrl) {
+function createOpenAICodexAdapter(credentials, resolveAttachments, fastMode, visibleModelIds, proxyManager, resolveProxyUrl, contextWindowOverrides) {
 	const provider = openaiCodexProvider();
-	const profiles = /* @__PURE__ */ new Map([[OPENAI_CODEX_PROVIDER, createOpenAICodexProfile(provider, fastMode, proxyManager, resolveProxyUrl)]]);
+	let profiles;
+	let previousOverrides;
+	const currentProfiles = () => {
+		const overrides = contextWindowOverrides?.();
+		if (profiles === void 0 || !deepEqualJson(previousOverrides, overrides)) {
+			const profile = createOpenAICodexProfile(provider, fastMode, proxyManager, resolveProxyUrl, overrides);
+			previousOverrides = overrides === void 0 ? void 0 : { ...overrides };
+			profiles = /* @__PURE__ */ new Map([[OPENAI_CODEX_PROVIDER, profile]]);
+		}
+		return profiles;
+	};
 	const models = createModels({ credentials });
 	models.setProvider(provider);
 	class OpenAICodexAdapter extends PiAiAdapter {
@@ -276,7 +348,7 @@ function createOpenAICodexAdapter(credentials, resolveAttachments, fastMode, vis
 		}
 	}
 	return new OpenAICodexAdapter({
-		profiles: () => profiles,
+		profiles: currentProfiles,
 		resolveApiKey: async () => {
 			const operation = async () => (await models.getAuth(OPENAI_CODEX_PROVIDER))?.auth.apiKey;
 			return proxyManager?.run(resolveProxyUrl?.(), operation) ?? operation();
@@ -494,6 +566,8 @@ const OPENAI_CODEX_AUTH_STATUS_PATH = "/plugins/dsh-openai-codex/auth/status";
 const OPENAI_CODEX_AUTH_LOGIN_PATH = "/plugins/dsh-openai-codex/auth/login";
 /** Plugin-owned logout endpoint consumed by its browser half. */
 const OPENAI_CODEX_AUTH_LOGOUT_PATH = "/plugins/dsh-openai-codex/auth/logout";
+/** Cancel only the pending authorization; never delete a stored credential. */
+const OPENAI_CODEX_AUTH_CANCEL_PATH = "/plugins/dsh-openai-codex/auth/cancel";
 //#endregion
 //#region src/trusted-origins.ts
 /** Owner-only allowlist for browser origins that may reach the Web OAuth routes. */
@@ -737,6 +811,8 @@ var FastModeRegistry = class {
 /** Node-free Fast Mode route constants shared by Host and browser halves. */
 /** GET/POST endpoint for one conversation's process-local Fast Mode state. */
 const OPENAI_CODEX_FAST_MODE_PATH = "/plugins/dsh-openai-codex/fast-mode";
+/** Default deadline for the complete interactive authorization, including the callback. */
+const OPENAI_CODEX_AUTHORIZATION_TIMEOUT_MS = 6e5;
 /** Stable, non-sensitive error returned when a browser origin needs CLI trust. */
 const REMOTE_WEB_ORIGIN_NOT_TRUSTED = "remote-web-origin-not-trusted";
 /** Redact provider diagnostics before they cross to the browser. */
@@ -744,9 +820,8 @@ function safeMessage(error) {
 	return (error instanceof Error ? error.message : String(error)).replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted token]").replace(/(\b(?:code|token|refresh_token|access_token)=)[^&\s]+/giu, "$1[redacted]").slice(0, 1e3);
 }
 /** Reject with the prompt's abort reason while browser callback owns completion. */
-function waitForPromptAbort(prompt) {
-	const signal = prompt.signal;
-	if (signal === void 0) return new Promise(() => {});
+function waitForPromptAbort(prompt, operationSignal) {
+	const signal = prompt.signal === void 0 ? operationSignal : AbortSignal.any([prompt.signal, operationSignal]);
 	if (signal.aborted) return Promise.reject(signal.reason);
 	return new Promise((_resolve, reject) => {
 		signal.addEventListener("abort", () => {
@@ -763,15 +838,21 @@ var OpenAICodexWebAuth = class {
 	challenge;
 	challengeWaiters = [];
 	challengeTimer;
+	authorizationTimer;
+	transition;
+	disposed = false;
 	challengeTimeoutMs;
+	authorizationTimeoutMs;
 	proxyManager;
 	resolveProxyUrl;
 	constructor(store, options = {}) {
 		this.store = store;
 		this.challengeTimeoutMs = options.challengeTimeoutMs ?? 3e4;
+		this.authorizationTimeoutMs = options.authorizationTimeoutMs ?? 6e5;
 		this.proxyManager = options.proxyManager;
 		this.resolveProxyUrl = options.resolveProxyUrl ?? (() => void 0);
 		if (!Number.isFinite(this.challengeTimeoutMs) || this.challengeTimeoutMs <= 0) throw new TypeError("OpenAI Codex auth URL timeout must be a positive finite number");
+		if (!Number.isSafeInteger(this.authorizationTimeoutMs) || this.authorizationTimeoutMs <= 0 || this.authorizationTimeoutMs > 2147483647) throw new TypeError("OpenAI Codex authorization timeout must be a positive timer-safe integer");
 	}
 	/** Read current public state, consulting durable storage while idle. */
 	async status() {
@@ -781,6 +862,8 @@ var OpenAICodexWebAuth = class {
 	}
 	/** Start or join the current browser-login operation. */
 	async signIn() {
+		while (this.transition !== void 0) await this.transition;
+		if (this.disposed) throw new Error("OpenAI Codex plugin disposed");
 		if (this.operation === void 0) this.start();
 		if (this.challenge !== void 0) return this.challenge;
 		return new Promise((resolve, reject) => {
@@ -792,16 +875,35 @@ var OpenAICodexWebAuth = class {
 	}
 	/** Cancel any callback listener, wait for quiescence, then delete the credential. */
 	async signOut() {
-		this.cancelSignIn(/* @__PURE__ */ new Error("OpenAI Codex sign-in cancelled"));
-		await this.operation?.catch(() => void 0);
-		await logoutOpenAICodex(this.store);
-		this.challenge = void 0;
-		this.state = { status: "signed-out" };
+		await this.finishLogin("logout");
+	}
+	/** Cancel the pending authorization and retain any already stored account. */
+	async cancel() {
+		await this.finishLogin("cancel");
 	}
 	/** Stop the owned callback listener during plugin disposal. */
 	async dispose() {
-		this.cancelSignIn(/* @__PURE__ */ new Error("OpenAI Codex plugin disposed"));
-		await this.operation?.catch(() => void 0);
+		this.disposed = true;
+		await this.finishLogin("dispose");
+	}
+	async finishLogin(action) {
+		while (this.transition !== void 0) await this.transition;
+		const operation = this.operation;
+		this.cancelSignIn(/* @__PURE__ */ new Error(action === "dispose" ? "OpenAI Codex plugin disposed" : "OpenAI Codex sign-in cancelled"));
+		const transition = (async () => {
+			await operation?.catch(() => void 0);
+			this.challenge = void 0;
+			if (action === "logout") {
+				await logoutOpenAICodex(this.store);
+				this.state = { status: "signed-out" };
+			} else if (action === "cancel") this.state = await this.readStoredStatus();
+		})();
+		this.transition = transition;
+		try {
+			await transition;
+		} finally {
+			if (this.transition === transition) this.transition = void 0;
+		}
 	}
 	start() {
 		const cancellation = new AbortController();
@@ -812,9 +914,13 @@ var OpenAICodexWebAuth = class {
 			this.cancelSignIn(/* @__PURE__ */ new Error(`OpenAI Codex did not provide an authorization URL within ${String(this.challengeTimeoutMs)}ms`));
 		}, this.challengeTimeoutMs);
 		this.challengeTimer.unref();
+		this.authorizationTimer = setTimeout(() => {
+			this.cancelSignIn(/* @__PURE__ */ new Error("ChatGPT authorization expired. Please sign in again."));
+		}, this.authorizationTimeoutMs);
+		this.authorizationTimer.unref();
 		const login = () => loginOpenAICodex({
 			signal: cancellation.signal,
-			prompt: (prompt) => prompt.type === "select" ? Promise.resolve("browser") : waitForPromptAbort(prompt),
+			prompt: (prompt) => prompt.type === "select" ? Promise.resolve("browser") : waitForPromptAbort(prompt, cancellation.signal),
 			notify: (event) => {
 				this.onEvent(event);
 			}
@@ -838,6 +944,9 @@ var OpenAICodexWebAuth = class {
 			};
 		}).finally(() => {
 			this.clearChallengeTimer();
+			clearTimeout(this.authorizationTimer);
+			this.authorizationTimer = void 0;
+			this.challenge = void 0;
 			this.operation = void 0;
 			this.cancellation = void 0;
 		});
@@ -1045,10 +1154,11 @@ function fastModeBody(value) {
 	} : void 0;
 }
 /** Register the plugin-owned OAuth routes when the Web server is composed. */
-function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastModeOverride, proxyManager, resolveProxyUrl) {
+function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastModeOverride, proxyManager, resolveProxyUrl, authorizationTimeoutMs) {
 	const auth = new OpenAICodexWebAuth(store, {
 		proxyManager,
-		resolveProxyUrl
+		resolveProxyUrl,
+		authorizationTimeoutMs
 	});
 	const storedFilename = store.filename;
 	const fastMode = fastModeOverride ?? new FastModeRegistry();
@@ -1083,6 +1193,20 @@ function registerOpenAICodexAuthRoutes(ctx, store, trustedOriginsOverride, fastM
 					}
 				}
 			}),
+			ctx.webServer.register({
+				kind: "exact",
+				path: OPENAI_CODEX_AUTH_CANCEL_PATH,
+				handler: async (req, res) => {
+					if (req.method !== "POST") return json$4(res, 405, { error: "method not allowed" });
+					if (!await authorize(req, res)) return;
+					try {
+						await auth.cancel();
+						json$4(res, 200, await auth.status());
+					} catch (error) {
+						json$4(res, 500, { error: safeMessage(error) });
+					}
+				}
+			}),
 			ctx.webServer.register({
 				kind: "exact",
 				path: OPENAI_CODEX_AUTH_LOGOUT_PATH,
@@ -1157,6 +1281,30 @@ function normalizeOpenAICodexProxyUrl(value) {
 function isValidOpenAICodexProxyUrl(value) {
 	return normalizeOpenAICodexProxyUrl(value) !== void 0;
 }
+/**
+* Whether a value is a bounded per-model context-window override map. Keys
+* are nonempty, unpadded model ids; values are positive safe integers or null
+* to restore that model's catalog default. The Host also checks catalog
+* membership and the model-specific configuration ceiling.
+*/
+function isValidOpenAICodexContextWindowOverrides(value) {
+	if (!isRecord$1(value)) return false;
+	const entries = Object.entries(value);
+	if (entries.length > 256) return false;
+	return entries.every(([modelId, window]) => modelId.length > 0 && modelId.trim() === modelId && (window === null || typeof window === "number" && Number.isSafeInteger(window) && window > 0));
+}
+/** Preserve per-model null masks until the Host has merged its settings layers. */
+function parseOpenAICodexContextWindowOverrides(value) {
+	if (value === void 0 || value === null) return void 0;
+	if (!isValidOpenAICodexContextWindowOverrides(value)) throw new TypeError("OpenAI Codex contextWindowOverrides must contain at most 256 nonempty model ids with positive safe-integer token budgets or null resets");
+	return { ...value };
+}
+/** Resolve merged settings; whole-map or per-model null masks use catalog defaults. */
+function resolveOpenAICodexContextWindowOverrides(value) {
+	const overrides = parseOpenAICodexContextWindowOverrides(value);
+	if (overrides === void 0) return void 0;
+	return Object.fromEntries(Object.entries(overrides).filter((entry) => entry[1] !== null));
+}
 /** Default model used by the standalone search endpoint. */
 const DEFAULT_OPENAI_CODEX_SEARCH_MODEL = "gpt-5.6-sol";
 /** Default search mode, matching the official local Codex client. */
@@ -1169,6 +1317,7 @@ const DEFAULT_OPENAI_CODEX_SETTINGS = Object.freeze({
 	models: void 0,
 	enableProxy: false,
 	proxyUrl: DEFAULT_OPENAI_CODEX_PROXY_URL,
+	contextWindowOverrides: void 0,
 	enableSearch: false,
 	enableImageTool: false,
 	enableImageGeneration: false,
@@ -1184,7 +1333,10 @@ function resolveOpenAICodexSettings(value) {
 		...value
 	};
 	if (!isValidOpenAICodexProxyUrl(resolved.proxyUrl)) throw new TypeError("OpenAI Codex proxyUrl must be an HTTP(S) origin without credentials or a path");
-	return resolved;
+	return {
+		...resolved,
+		contextWindowOverrides: resolveOpenAICodexContextWindowOverrides(resolved.contextWindowOverrides)
+	};
 }
 /** Resolve the active proxy without treating a disabled value as a route. */
 function resolveOpenAICodexProxyUrl(value) {
@@ -1200,6 +1352,7 @@ function decodeOpenAICodexSettings(value) {
 	const models = value["models"];
 	const enableProxy = value["enableProxy"];
 	const proxyUrl = value["proxyUrl"];
+	const contextWindowOverrides = value["contextWindowOverrides"];
 	const enableSearch = value["enableSearch"];
 	const enableImageTool = value["enableImageTool"];
 	const enableImageGeneration = value["enableImageGeneration"];
@@ -1210,16 +1363,19 @@ function decodeOpenAICodexSettings(value) {
 	if (models !== void 0 && (!Array.isArray(models) || models.some((model) => typeof model !== "string"))) return void 0;
 	if (enableProxy !== void 0 && typeof enableProxy !== "boolean") return void 0;
 	if (proxyUrl !== void 0 && (typeof proxyUrl !== "string" || !isValidOpenAICodexProxyUrl(proxyUrl))) return void 0;
+	if (contextWindowOverrides !== void 0 && contextWindowOverrides !== null && !isValidOpenAICodexContextWindowOverrides(contextWindowOverrides)) return void 0;
 	if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
 	if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 	if (typeof searchModel !== "string" || searchModel.trim().length === 0) return void 0;
 	if (searchMode !== "cached" && searchMode !== "indexed" && searchMode !== "live") return void 0;
 	if (searchContextSize !== "low" && searchContextSize !== "medium" && searchContextSize !== "high") return void 0;
 	if (typeof searchMaxOutputTokens !== "number" || !Number.isInteger(searchMaxOutputTokens) || searchMaxOutputTokens < 1) return void 0;
+	const overrides = resolveOpenAICodexContextWindowOverrides(contextWindowOverrides);
 	return {
 		models: models === void 0 ? void 0 : [...new Set(models)],
 		enableProxy: enableProxy ?? false,
 		proxyUrl: proxyUrl === void 0 ? DEFAULT_OPENAI_CODEX_PROXY_URL : normalizeOpenAICodexProxyUrl(proxyUrl),
+		contextWindowOverrides: overrides === void 0 ? void 0 : Object.freeze(overrides),
 		enableSearch,
 		enableImageTool,
 		enableImageGeneration: enableImageGeneration ?? false,
@@ -1514,8 +1670,8 @@ function registerOpenAICodexProxyRoutes(ctx, trustedOrigins, manager) {
 //#region src/compatibility.ts
 const COMPATIBILITY_SCHEMA_VERSION = 1;
 const SUPPORTED_NODE_RANGE = "^22.19.0 || >=24.0.0";
-const SUPPORTED_DSH_PLUGIN_API_VERSION = "0.1.1-rc.2";
-const SUPPORTED_PI_AI_VERSION = "0.82.1";
+const SUPPORTED_DSH_PLUGIN_API_VERSION = "0.1.2-alpha.2";
+const SUPPORTED_PI_AI_RANGE = "^0.84.2";
 const PI_AI_PACKAGE = "@earendil-works/pi-ai";
 const DSH_PLUGIN_API_PACKAGES = [
 	"@deepseek-ai/dsh-agent",
@@ -1530,6 +1686,7 @@ const DSH_PLUGIN_API_PACKAGES = [
 	"@deepseek-ai/dsh-session",
 	"@deepseek-ai/dsh-settings",
 	"@deepseek-ai/dsh-tools",
+	"@deepseek-ai/dsh-util-values",
 	"@deepseek-ai/dsh-web"
 ];
 const COMPATIBILITY_PACKAGES = [
@@ -1547,13 +1704,21 @@ const COMPATIBILITY_CONTRACT = {
 	},
 	piAi: {
 		package: PI_AI_PACKAGE,
-		version: SUPPORTED_PI_AI_VERSION
+		version: SUPPORTED_PI_AI_RANGE
 	}
 };
 const PACKAGE_JSON_SEARCH_DEPTH = 8;
 function compareVersion(left, right) {
 	return left === right ? "compatible" : "incompatible";
 }
+function piAiVersionStatus(value) {
+	const match = /^(\d+)\.(\d+)\.(\d+)$/u.exec(value.trim());
+	if (match === null) return "incompatible";
+	const major = Number(match[1]);
+	const minor = Number(match[2]);
+	const patch = Number(match[3]);
+	return major === 0 && minor === 84 && patch >= 2 ? "compatible" : "incompatible";
+}
 function parseNodeVersion(value) {
 	const match = /^v?(\d+)\.(\d+)\.(\d+)(?:[-+][0-9A-Za-z.-]+)?$/u.exec(value.trim());
 	if (match === null) return void 0;
@@ -1579,11 +1744,11 @@ function nodeStatus(value) {
 	if (major === 22) return minor > 19 || minor === 19 && patch >= 0 ? "compatible" : "incompatible";
 	return major >= 24 ? "compatible" : "incompatible";
 }
-function packageEntry(supported, installed) {
+function packageEntry(supported, installed, status = (value) => compareVersion(value, supported)) {
 	return {
 		supported,
 		installed: installed ?? null,
-		status: installed === void 0 || installed === null || installed === "" ? "unknown" : compareVersion(installed, supported)
+		status: installed === void 0 || installed === null || installed === "" ? "unknown" : status(installed)
 	};
 }
 function nodeEntry(installed) {
@@ -1605,7 +1770,7 @@ function evaluateCompatibility(input = {}) {
 	const packages = {
 		"@deepseek-ai/dsh-llm": packageEntry(SUPPORTED_DSH_PLUGIN_API_VERSION, suppliedPackages["@deepseek-ai/dsh-llm"]),
 		"@deepseek-ai/dsh-llm-pi-ai": packageEntry(SUPPORTED_DSH_PLUGIN_API_VERSION, suppliedPackages["@deepseek-ai/dsh-llm-pi-ai"]),
-		[PI_AI_PACKAGE]: packageEntry(SUPPORTED_PI_AI_VERSION, suppliedPackages[PI_AI_PACKAGE])
+		[PI_AI_PACKAGE]: packageEntry(SUPPORTED_PI_AI_RANGE, suppliedPackages[PI_AI_PACKAGE], piAiVersionStatus)
 	};
 	const node = nodeEntry(installedNode);
 	return {
@@ -1671,7 +1836,9 @@ const HIGHLIGHT_KINDS = [
 	"image-generation",
 	"oauth-history",
 	"model-visibility",
-	"proxy-connection"
+	"proxy-connection",
+	"models-account",
+	"context-budget"
 ];
 function isHighlightKind(value) {
 	return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -2165,11 +2332,6 @@ function registerOpenAICodexUpdateRoutes(ctx, options, trustedOrigins) {
 	}, "dsh-codex-connect: update route");
 }
 //#endregion
-//#region src/model-contract.ts
-/** Node-free model catalog contract shared by the Host route and browser card. */
-/** Same-origin endpoint exposing the complete Codex model catalog. */
-const OPENAI_CODEX_MODEL_CATALOG_PATH = "/plugins/dsh-codex-connect/models";
-//#endregion
 //#region src/model-routes.ts
 function json$1(res, status, value) {
 	res.writeHead(status, {
@@ -2339,7 +2501,7 @@ function registerOpenAICodexOriginalImageRoute(ctx, trustedOrigins, assets) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.21";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.22";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */
@@ -2379,7 +2541,7 @@ async function diagnoseOpenAICodex(options = {}) {
 	if (state === "unreadable-metadata") hints.push("Harness could not inspect the OAuth file metadata; check the parent directory and file ownership.");
 	if (providerConflict) hints.push(openAICodexConflictMessage());
 	if (!providerConflict) hints.push("If Harness reports a duplicate openai-codex adapter, remove the legacy bundle or manual provider row.");
-	if (compatibility.status === "incompatible") hints.push("Compatibility mismatch: install the declared DSH plugin API versions and pin @earendil-works/pi-ai to 0.82.1, then run doctor again; no files are changed automatically.");
+	if (compatibility.status === "incompatible") hints.push("Compatibility mismatch: install the declared DSH plugin API versions with @earendil-works/pi-ai ^0.84.2, then run doctor again; no files are changed automatically.");
 	else if (compatibility.status === "unknown") hints.push("Compatibility is unknown: verify the declared DSH plugin API and @earendil-works/pi-ai versions, then run doctor again.");
 	return {
 		package: "dsh-codex-connect",
@@ -4063,11 +4225,13 @@ const name = "llm-openai-codex";
 /** The model registry required before the provider can register. */
 const inject = ["llm"];
 /** Branded Host settings namespace for Codex Connect capability configuration. */
-const OPENAI_CODEX_SETTINGS_NS = settingsNamespace(OPENAI_CODEX_SETTINGS_NAMESPACE);
+const OPENAI_CODEX_SETTINGS_NS = OPENAI_CODEX_SETTINGS_NAMESPACE;
 const Config = z.object({
+	oauthTimeoutMs: z.number().step(1).min(1e3).max(18e5).default(OPENAI_CODEX_AUTHORIZATION_TIMEOUT_MS),
 	models: z.union([z.const(void 0), z.array(z.string())]),
 	enableProxy: z.boolean().default(false),
 	proxyUrl: z.string().default(DEFAULT_OPENAI_CODEX_PROXY_URL),
+	contextWindowOverrides: z.transform(z.union([z.const(void 0), z.dict(z.union([z.const(null), z.number()]))]), parseOpenAICodexContextWindowOverrides),
 	enableSearch: z.boolean().default(false),
 	enableImageTool: z.boolean().default(false),
 	enableImageGeneration: z.boolean().default(false),
@@ -4092,6 +4256,12 @@ const Config = z.object({
 * @param config - capability gates and standalone-search tuning.
 */
 function apply(ctx, config) {
+	const catalog = openAICodexModelCatalog();
+	const validateSettings = (value) => {
+		resolveOpenAICodexSettings(value);
+		assertOpenAICodexContextWindowOverrides(value.contextWindowOverrides ?? void 0, catalog);
+	};
+	validateSettings(config);
 	let current = () => config;
 	const proxyManager = new OpenAICodexProxyManager();
 	const resolveProviderProxyUrl = () => resolveOpenAICodexProxyUrl(resolveOpenAICodexSettings(current()));
@@ -4102,9 +4272,9 @@ function apply(ctx, config) {
 	const fastMode = new FastModeRegistry();
 	assertNoOpenAICodexProviderConflict(ctx.llm.listProviders().map((provider) => provider.id));
 	new OpenAICodexTransport(ctx, credentials, proxyManager, resolveProviderProxyUrl);
-	ctx.llm.registerAdapter([OPENAI_CODEX_PROVIDER], createOpenAICodexAdapter(credentials, () => ctx.get("attachments"), fastMode, () => resolveOpenAICodexSettings(current()).models, proxyManager, resolveProviderProxyUrl));
+	ctx.llm.registerAdapter([OPENAI_CODEX_PROVIDER], createOpenAICodexAdapter(credentials, () => ctx.get("attachments"), fastMode, () => resolveOpenAICodexSettings(current()).models, proxyManager, resolveProviderProxyUrl, () => resolveOpenAICodexSettings(current()).contextWindowOverrides));
 	ctx.inject(["webServer"], (webCtx) => {
-		registerOpenAICodexAuthRoutes(webCtx, credentials, trustedOrigins, fastMode, proxyManager, resolveProviderProxyUrl);
+		registerOpenAICodexAuthRoutes(webCtx, credentials, trustedOrigins, fastMode, proxyManager, resolveProviderProxyUrl, config.oauthTimeoutMs);
 		registerOpenAICodexProxyRoutes(webCtx, trustedOrigins, proxyManager);
 		registerOpenAICodexUpdateRoutes(webCtx, { currentVersion: CODEX_CONNECT_VERSION }, trustedOrigins);
 		registerOpenAICodexModelCatalogRoute(webCtx, openAICodexModelCatalog, trustedOrigins);
@@ -4224,25 +4394,27 @@ function apply(ctx, config) {
 		]);
 		await proxyManager.dispose();
 	}, "dsh-codex-connect: optional capability lifecycle");
-	installSettingsSection(ctx, OPENAI_CODEX_SETTINGS_NS, Config, config, {
-		validate(value) {
-			resolveOpenAICodexSettings(value);
-			if (value.enableProxy === true && !isValidOpenAICodexProxyUrl(value.proxyUrl)) throw new TypeError("OpenAI Codex proxyUrl must be an HTTP(S) origin without credentials or a path");
-		},
-		setSource(source) {
-			current = source;
-		},
-		onChange() {
-			const proxyIsActive = resolveProviderProxyUrl() !== void 0;
-			if (proxyWasActive && !proxyIsActive) proxyManager.deactivate().catch((error) => {
-				ctx.logger.error("dsh-codex-connect: could not deactivate the provider proxy");
-				ctx.logger.error(error);
-			});
-			proxyWasActive = proxyIsActive;
-			scheduleCapabilities();
-		}
+	ctx.inject(["settings"], (settingsCtx) => {
+		settingsCtx.settings.installSection(ctx, OPENAI_CODEX_SETTINGS_NS, Config, config, {
+			validate(value) {
+				validateSettings(value);
+				if (value.enableProxy === true && !isValidOpenAICodexProxyUrl(value.proxyUrl)) throw new TypeError("OpenAI Codex proxyUrl must be an HTTP(S) origin without credentials or a path");
+			},
+			setSource(source) {
+				current = source;
+			},
+			onChange() {
+				const proxyIsActive = resolveProviderProxyUrl() !== void 0;
+				if (proxyWasActive && !proxyIsActive) proxyManager.deactivate().catch((error) => {
+					ctx.logger.error("dsh-codex-connect: could not deactivate the provider proxy");
+					ctx.logger.error(error);
+				});
+				proxyWasActive = proxyIsActive;
+				scheduleCapabilities();
+			}
+		});
 	});
 	scheduleCapabilities();
 }
 //#endregion
-export { OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS as $, openAICodexConflictMessage as A, OPENAI_CODEX_AUTH_FILENAME as At, DSH_PLUGIN_API_PACKAGES as B, OpenAICodexTransport as C, OPENAI_CODEX_USAGE_URL as Ct, IMAGE_GENERATE_TOOL_NAME as D, logoutOpenAICodex as Dt, VIEW_IMAGE_TOOL_NAME as E, loginOpenAICodex as Et, parseOpenAICodexUpdateResult as F, assessCompatibility as G, SUPPORTED_DSH_PLUGIN_API_VERSION as H, parseOpenAICodexVersion as I, readInstalledPackageVersion as J, detectCompatibility as K, COMPATIBILITY_CONTRACT as L, OPENAI_CODEX_UPDATE_PATH as M, OpenAICodexCredentialStore as Mt, checkForOpenAICodexUpdate as N, openAICodexAuthPath as Nt, assertNoOpenAICodexProviderConflict as O, openAICodexAuthStatus as Ot, compareOpenAICodexVersions as P, OPENAI_CODEX_PROXY_CANDIDATE_LIMIT as Q, COMPATIBILITY_PACKAGES as R, OPENAI_CODEX_TRANSPORT_SERVICE as S, normalizeTrustedOrigin as St, isOpenAICodexTransportError as T, readOpenAICodexRateLimits as Tt, SUPPORTED_NODE_RANGE as U, PI_AI_PACKAGE as V, SUPPORTED_PI_AI_VERSION as W, OPENAI_CODEX_PROXY_TEST_PATH as X, OPENAI_CODEX_PROXY_DETECT_PATH as Y, OPENAI_CODEX_LOCAL_PROXY_CANDIDATES as Z, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES as _, FastModeRegistry as _t, name as a, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as at, OPENAI_CODEX_TRANSPORT_API_VERSION as b, isFastModeSessionId as bt, migrateOpenAICodexSearchHistory as c, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as ct, OPENAI_CODEX_SEARCH_URL as d, decodeOpenAICodexSettings as dt, OPENAI_CODEX_PROXY_PROBE_URL as et, OpenAICodexSearchProvider as f, isValidOpenAICodexProxyUrl as ft, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES as g, OPENAI_CODEX_FAST_MODE_PATH as gt, OPENAI_CODEX_IMAGE_MAX_COUNT as h, resolveOpenAICodexSettings as ht, inject as i, DEFAULT_OPENAI_CODEX_PROXY_URL as it, CODEX_CONNECT_VERSION as j, OPENAI_CODEX_PROVIDER as jt, diagnoseOpenAICodex as k, openAICodexModelCatalog as kt, OPENAI_CODEX_BASE_URL as l, DEFAULT_OPENAI_CODEX_SETTINGS as lt, OPENAI_CODEX_IMAGE_GENERATION_URL as m, resolveOpenAICodexProxyUrl as mt, OPENAI_CODEX_SETTINGS_NS as n, detectOpenAICodexProxies as nt, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX as o, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as ot, mapOpenAICodexSearchResponse as p, normalizeOpenAICodexProxyUrl as pt, evaluateCompatibility as q, apply as r, listOpenAICodexProxyCandidates as rt, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT as s, DEFAULT_OPENAI_CODEX_SEARCH_MODE as st, Config as t, OpenAICodexProxyManager as tt, OPENAI_CODEX_SEARCH_PROVIDER as u, OPENAI_CODEX_SETTINGS_NAMESPACE as ut, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH as v, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS as vt, OpenAICodexTransportError as w, parseOpenAICodexUsage as wt, OPENAI_CODEX_TRANSPORT_ERROR_CODES as x, OpenAICodexTrustedOriginsStore as xt, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS as y, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH as yt, COMPATIBILITY_SCHEMA_VERSION as z };
+export { OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS as $, openAICodexConflictMessage as A, openAICodexModelCatalog as At, DSH_PLUGIN_API_PACKAGES as B, OpenAICodexTransport as C, normalizeTrustedOrigin as Ct, IMAGE_GENERATE_TOOL_NAME as D, loginOpenAICodex as Dt, VIEW_IMAGE_TOOL_NAME as E, readOpenAICodexRateLimits as Et, parseOpenAICodexUpdateResult as F, assessCompatibility as G, SUPPORTED_DSH_PLUGIN_API_VERSION as H, parseOpenAICodexVersion as I, readInstalledPackageVersion as J, detectCompatibility as K, COMPATIBILITY_CONTRACT as L, OPENAI_CODEX_UPDATE_PATH as M, OPENAI_CODEX_PROVIDER as Mt, checkForOpenAICodexUpdate as N, OpenAICodexCredentialStore as Nt, assertNoOpenAICodexProviderConflict as O, logoutOpenAICodex as Ot, compareOpenAICodexVersions as P, openAICodexAuthPath as Pt, OPENAI_CODEX_PROXY_CANDIDATE_LIMIT as Q, COMPATIBILITY_PACKAGES as R, OPENAI_CODEX_TRANSPORT_SERVICE as S, OpenAICodexTrustedOriginsStore as St, isOpenAICodexTransportError as T, parseOpenAICodexUsage as Tt, SUPPORTED_NODE_RANGE as U, PI_AI_PACKAGE as V, SUPPORTED_PI_AI_RANGE as W, OPENAI_CODEX_PROXY_TEST_PATH as X, OPENAI_CODEX_PROXY_DETECT_PATH as Y, OPENAI_CODEX_LOCAL_PROXY_CANDIDATES as Z, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES as _, OPENAI_CODEX_FAST_MODE_PATH as _t, name as a, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as at, OPENAI_CODEX_TRANSPORT_API_VERSION as b, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH as bt, migrateOpenAICodexSearchHistory as c, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as ct, OPENAI_CODEX_SEARCH_URL as d, decodeOpenAICodexSettings as dt, OPENAI_CODEX_PROXY_PROBE_URL as et, OpenAICodexSearchProvider as f, isValidOpenAICodexContextWindowOverrides as ft, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES as g, resolveOpenAICodexSettings as gt, OPENAI_CODEX_IMAGE_MAX_COUNT as h, resolveOpenAICodexProxyUrl as ht, inject as i, DEFAULT_OPENAI_CODEX_PROXY_URL as it, CODEX_CONNECT_VERSION as j, OPENAI_CODEX_AUTH_FILENAME as jt, diagnoseOpenAICodex as k, openAICodexAuthStatus as kt, OPENAI_CODEX_BASE_URL as l, DEFAULT_OPENAI_CODEX_SETTINGS as lt, OPENAI_CODEX_IMAGE_GENERATION_URL as m, normalizeOpenAICodexProxyUrl as mt, OPENAI_CODEX_SETTINGS_NS as n, detectOpenAICodexProxies as nt, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX as o, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as ot, mapOpenAICodexSearchResponse as p, isValidOpenAICodexProxyUrl as pt, evaluateCompatibility as q, apply as r, listOpenAICodexProxyCandidates as rt, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT as s, DEFAULT_OPENAI_CODEX_SEARCH_MODE as st, Config as t, OpenAICodexProxyManager as tt, OPENAI_CODEX_SEARCH_PROVIDER as u, OPENAI_CODEX_SETTINGS_NAMESPACE as ut, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH as v, FastModeRegistry as vt, OpenAICodexTransportError as w, OPENAI_CODEX_USAGE_URL as wt, OPENAI_CODEX_TRANSPORT_ERROR_CODES as x, isFastModeSessionId as xt, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS as y, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS as yt, COMPATIBILITY_SCHEMA_VERSION as z };