dsh-codex-connect 0.1.0-alpha.4.30 → 0.1.0-alpha.4.32

package/INSTALL.md

@@ -1,6 +1,6 @@
 # Installation Runbook for CLI Agents
 
-Alpha 4.29 is verified with DSH `0.1.2-rc.1` and its declared pi-ai range `^0.84.2`.
+Alpha 4.31 is verified with DSH `0.1.2-rc.1` and its declared pi-ai range `^0.84.2`.
 
 Install `dsh-codex-connect` into one requested DeepSeek Harness profile without changing its current default model, search route, global configuration, or OAuth state.
 
@@ -23,14 +23,14 @@ Check `dsh --version` before changing the requested profile. Use `dsh --help` to
 | `0.1.0-rc.7` | `0.1.0-alpha.4.14` |
 | `0.1.1-rc.2` | `0.1.0-alpha.4.21` |
 | `0.1.2-alpha.2` | `0.1.0-alpha.4.23` |
-| `0.1.2-rc.1` | `0.1.0-alpha.4.29` |
+| `0.1.2-rc.1` | `0.1.0-alpha.4.31` |
 | `0.1.2-alpha.5` | `0.1.0-alpha.4.25` |
 
 If your exact DSH version is unknown or not listed, stop and verify the combination before installing. Do not blindly install `dsh-codex-connect@alpha`: `alpha` is a moving tag, not a compatibility guarantee. Do not infer support for newer DSH versions from these rows.
 
-Alpha 4.29's verified contract is DSH plugin API packages `0.1.2-rc.1`, `@earendil-works/pi-ai` `^0.84.2`, and Node.js `^22.19.0 || >=24.0.0`. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 remains the verified choice for DSH `0.1.2-alpha.2`, Alpha 4.21 remains the verified choice for DSH `0.1.1-rc.2`, and staying on DSH `0.1.0-rc.7` means selecting Alpha 4.14. Upgrading DSH is a separate decision: upgrade the DSH API packages and pi-ai together, then rerun `dsh-codex-connect doctor --json` and `pnpm --silent run check:compatibility` for the selected combination.
+Alpha 4.31's verified contract is DSH plugin API packages `0.1.2-rc.1`, `@earendil-works/pi-ai` `^0.84.2`, and Node.js `^22.19.0 || >=24.0.0`. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 remains the verified choice for DSH `0.1.2-alpha.2`, Alpha 4.21 remains the verified choice for DSH `0.1.1-rc.2`, and staying on DSH `0.1.0-rc.7` means selecting Alpha 4.14. Upgrading DSH is a separate decision: upgrade the DSH API packages and pi-ai together, then rerun `dsh-codex-connect doctor --json` and `pnpm --silent run check:compatibility` for the selected combination.
 
-The Alpha 4.29 row reflects a fresh isolated installation and runtime probe. Historical rows remain the repository's existing verification record. This guidance does not change upstream DSH behavior or resolve [Issue #64](https://github.com/franksong2702/dsh-codex-connect/issues/64).
+The Alpha 4.31 row reflects a fresh isolated installation and runtime probe. Historical rows remain the repository's existing verification record. This guidance does not change upstream DSH behavior or resolve [Issue #64](https://github.com/franksong2702/dsh-codex-connect/issues/64).
 
 ### Install the selected version and validate
 
@@ -53,10 +53,10 @@ The Alpha 4.29 row reflects a fresh isolated installation and runtime probe. His
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.23
    ```
 
-   For DSH `0.1.2-rc.1`, use Alpha 4.29:
+   For DSH `0.1.2-rc.1`, use Alpha 4.31:
 
    ```sh
-   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.29
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.31
    ```
 
    For DSH `0.1.2-alpha.5`, use Alpha 4.25:
@@ -65,7 +65,7 @@ The Alpha 4.29 row reflects a fresh isolated installation and runtime probe. His
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.25
    ```
 
-   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.29'` only for the DSH `0.1.2-rc.1` combination.
+   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.31'` only for the DSH `0.1.2-rc.1` combination.
 
 3. Run `dsh web --help` once to compose the installed profile without starting the server. DSH `0.1.2-rc.1` prepares profile plugin dependency fallback during this step.
 4. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.

package/MIGRATION.md

@@ -11,6 +11,19 @@
 
 Rollback is the inverse package swap. Do not delete or copy the separate OAuth file during either direction. If Harness reports a duplicate `openai-codex` adapter, the old bundle or a manual provider row is still active; resolve that one row instead of changing credentials.
 
+## Astra reasoning selections
+
+The plugin's Astra fallback definition offers `low`, `medium`, `high`, `xhigh`, and `max`. An omitted `reasoningEffort` preserves the provider default; it does not select Low or disable reasoning. The native dependency definition still takes precedence when present.
+
+Before using Astra with a saved `minimal` or `off` selection, update the selected conversation and, if applicable, the default model setting:
+
+| Saved value | Selection preserving its effective request behavior |
+| --- | --- |
+| `minimal` | Select `Low` (`reasoningEffort: low`); both send `low`. |
+| `off` | Select `Default` (provider default), omitting `reasoningEffort`; both omit wire `reasoning`. This never guaranteed disabled reasoning. |
+
+Other valid explicit efforts remain unchanged. A saved `minimal`, `off`, or unsupported `none` request is rejected with `UNSUPPORTED_REASONING_EFFORT` before authentication or model traffic; the plugin does not silently change it. `none` has no supported prior behavior to preserve: choose a valid effort or `Default` explicitly. The plugin does not rewrite settings or historical Session events. Use the conversation model selector for an existing Session; changing only the default model does not replace that Session's explicit selection. OAuth credentials do not need migration.
+
 ## Repairing search history written by Alpha 4.10
 
 Alpha 4.10 briefly wrote `web/openai-codex-search-llm-request` as a required private Session event. Because an external plugin cannot extend the Host persistence vocabulary across independent module instances, a newer Harness can refuse to read those histories after the event writer is removed.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: a46589829b432cfcb97af069f7d7a7b3080e42af
-docs/README.zh.md: c42807c90ad4fcc4a4850d1228cfd6330b2bc184
+README.md: b3d0bdd487da3988c277f9d6ed0cdd0ef3f62023
+docs/README.zh.md: 75b42211584eeaa14dfcc1b2aee451052d3c874f

package/README.md

@@ -16,7 +16,7 @@ This guide describes the published pairing below. Check `dsh --version` first; f
 
 | Requirement | Verified pairing |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.29` |
+| Codex Connect | `0.1.0-alpha.4.31` |
 | DeepSeek Harness | `0.1.2-rc.1` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | Account | ChatGPT OAuth with access to the requested Codex model; availability is decided by OpenAI |
@@ -24,7 +24,7 @@ This guide describes the published pairing below. Check `dsh --version` first; f
 ### 1. Install
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.29
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.31
 dsh web
 ```
 
@@ -52,7 +52,7 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 ## Core capabilities
 
 - **Accounts:** save up to 16 accounts on the DSH host and manually select the active account for subsequent requests. Account selection is not a per-session binding. Requests keep their captured account; the plugin does not rotate accounts or silently fail over.
-- **Models and Astra support:** the currently verified DSH and plugin combination supports `gpt-6-astra`. The plugin supplies the Astra model definition missing from the current dependency catalog, so users can select it without separately upgrading the underlying library. When the installed dependency catalog includes Astra, the plugin prefers its native definition. A model appearing in the list does not mean the current account has permission to use it; overall compatibility with new dependency versions still requires separate verification.
+- **Models and Astra support:** the currently verified DSH and plugin combination supports `gpt-6-astra`. The plugin supplies its missing model definition with Low, Medium, High, Xhigh, and Max reasoning levels; Default preserves the provider default. Saved Off/Minimal selections require an [explicit update](MIGRATION.md#astra-reasoning-selections). When the installed dependency catalog includes Astra, the plugin prefers its native definition. A model appearing in the list does not mean the current account has permission to use it; overall compatibility with new dependency versions still requires separate verification.
 - **Fast Mode:** request priority service for one conversation, off by default. Actual speed and quota consumption depend on the service; no fixed speed multiplier is guaranteed.
 - **Quota:** show the server-returned `5h` and `7d` windows and reset times, normally refreshed every 60 seconds while signed in. Missing windows are not invented; Spark uses its separate quota bucket.
 - **Update guidance:** compare the installed DSH/plugin pair with the public verification record without installing an upgrade.
@@ -121,7 +121,7 @@ pnpm run test:browser
 pnpm run check:dsh-install
 ```
 
-`check` covers static checks, unit tests, build, compatibility, and packaging. Browser regression and isolated DSH installation are separate commands. These checks use no real OAuth authorization and do not replace real-account acceptance.
+`check` covers static checks, unit tests, build, compatibility, and packaging. `lint:metadata` checks package and release rules; `lint:source` checks host and browser TypeScript for unhandled or misused promises, invalid awaits, duplicate cases, and unreachable code. Browser regression and isolated DSH installation are separate commands. These checks use no real OAuth authorization and do not replace real-account acceptance.
 
 ## License and acknowledgements
 

package/docs/README.zh.md

@@ -16,7 +16,7 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 
 | 要求 | 已验证组合 |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.29` |
+| Codex Connect | `0.1.0-alpha.4.31` |
 | DeepSeek Harness | `0.1.2-rc.1` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | 账户 | 通过 ChatGPT OAuth 使用所请求的 Codex 模型；可用性由 OpenAI 决定 |
@@ -24,7 +24,7 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 ### 1. 安装
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.29
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.31
 dsh web
 ```
 
@@ -52,7 +52,7 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 ## 核心能力
 
 - **账户：**在 DSH 主机上保存最多 16 个账户，手动选择后续请求使用的活动账户，不按会话绑定。请求保持已固定的账户，插件不会自动轮换或静默故障切换。
-- **模型与 Astra 支持：**当前已验证的 DSH 与插件组合已支持 `gpt-6-astra`。插件为当前依赖目录尚未收录的 Astra 补充了模型定义，让用户无需单独升级底层库即可选择该模型。未来使用的依赖目录包含 Astra 时，插件会优先采用其原生定义。模型出现在列表中，不代表当前账户具有调用权限；新依赖版本的整体兼容性仍需单独验证。
+- **模型与 Astra 支持：**当前已验证的 DSH 与插件组合已支持 `gpt-6-astra`。插件补充缺失的模型定义，提供 Low、Medium、High、Xhigh 和 Max 五档推理强度；Default 保持提供方默认值。已保存的 Off/Minimal 选择需要[明确更新](../MIGRATION.md#astra-reasoning-selections)。未来使用的依赖目录包含 Astra 时，插件会优先采用其原生定义。模型出现在列表中，不代表当前账户具有调用权限；新依赖版本的整体兼容性仍需单独验证。
 - **Fast Mode：**为单个对话请求优先服务，默认关闭。实际速度和额度消耗取决于服务端，不保证固定提速倍数。
 - **额度：**显示服务端返回的 `5h`、`7d` 窗口及重置时间，已登录时通常每 60 秒刷新一次。不虚构缺失窗口；Spark 使用独立额度桶。
 - **更新指引：**将已安装的 DSH/plugin 组合与公开验证记录比较，但不会自动执行升级。
@@ -121,7 +121,7 @@ pnpm run test:browser
 pnpm run check:dsh-install
 ```
 
-`check` 包含静态检查、单元测试、构建、兼容性和打包检查；浏览器回归与隔离 DSH 安装是另外两个命令。这些检查不使用真实 OAuth 授权，也不能替代真实账户验收。
+`check` 包含静态检查、单元测试、构建、兼容性和打包检查。`lint:metadata` 检查包元数据与发布规则；`lint:source` 检查宿主与浏览器 TypeScript 中未处理或误用的 Promise、无效 await、重复 case 和不可达代码。浏览器回归与隔离 DSH 安装是另外两个命令。这些检查不使用真实 OAuth 授权，也不能替代真实账户验收。
 
 ## 许可证与致谢
 

package/docs/design.i18n.yaml

@@ -1,4 +1,4 @@
 # Bilingual-pair consistency record for the design document. Re-record with:
 #   git hash-object docs/design.md docs/design.zh.md
-design.md: 26dd77d6b775164863d8658e38703650b3cb09b5
-design.zh.md: d34694bbb8aa883492871ef951323757ba7032a1
+design.md: 7292502d8abc9997ee9994890bb1413b1007ffc7
+design.zh.md: 2586023ae73b50966f46566b1798efa5ccbc6234

package/docs/design.md

@@ -16,12 +16,16 @@ Browser account routes expose deterministic plugin-derived keys, local display l
 
 The settings routes and CLI reuse the existing OAuth path and route names for migration compatibility. Only an explicit login operation emits an authorization URL or code. Browser requests are accepted by default only from loopback; a remote request must use an exact effective HTTP(S) origin in the current sidecar, must not carry cross-site Fetch Metadata, and must match any supplied Origin exactly. The sidecar is re-read for every request, and unknown fields or modes fail closed. A login challenge accepts only credential-free HTTPS URLs and fails closed after 30 seconds or when the provider finishes without a URL; logout and disposal cancel pending waiters. Status responses are redacted. Doctor uses `lstat` metadata and never opens the document.
 
+Browser account and update requests have a 45-second deadline covering response headers and JSON bodies. A timed-out account mutation is not retried automatically: while the account view is observed, the browser reads server state again because the mutation may already have committed. Failed state reads retry after five seconds, including when no account is stored. Plugin disposal aborts browser waits without logging out the server account.
+
 ## Search and images
 
 When `enableSearch: true`, the plugin registers its standalone search provider. It does not append a plugin-owned required-on-read Session event because an external package cannot guarantee that its `@deepseek-ai/dsh-session` module instance owns the Host persistence vocabulary; the standard web Tool call and result remain in the Session log. DSH `0.1.2-rc.1` does not expose the WebRuntime provider selection through its settings service, so the compatibility adapter verifies that release's runtime field, records the previous provider, and selects Codex only while the capability is active. Disable and disposal restore the recorded provider unless another owner has selected a newer route. An unsupported runtime fails activation instead of reporting a route change that did not occur. Search responses are mapped to Harness text and citation records.
 
 When `enableImageTool: true`, `view_image` is registered only after tools, filesystem, and attachment services are available. Local files remain bounded by the Harness filesystem surface. Remote images allow only credential-free public HTTP(S): all DNS answers must be public unicast, each redirect is revalidated, and each socket is pinned to the validated address to close DNS-rebinding gaps. The tool also checks bounded bytes, accepted media signatures, and current-model image support before saving a Harness attachment.
 
+Each remote-image redirect hop has one 30-second deadline covering DNS, connection, and body consumption. Cancellation settles the caller's wait immediately; an operating-system DNS lookup may still finish later, but its result cannot start a new HTTP request after cancellation or timeout.
+
 ## Conflicts and diagnostics
 
 Before registration the plugin checks current provider ids. An existing `openai-codex` adapter produces a focused message naming the likely legacy-bundle or manual-provider cause. The boot-free CLI `doctor` reports package/runtime version, OAuth path metadata, capability defaults, and safe conflict guidance without returning auth content.

package/docs/design.zh.md

@@ -16,10 +16,14 @@ Host 将 `llm-openai-codex` 注册为插件自有的能力 settings namespace。
 
 为兼容迁移，设置页路由、OAuth 路径和 provider id 不改名。浏览器请求默认只允许 loopback；远程请求必须使用当前 sidecar 中的精确有效 HTTP(S) origin，不能带 cross-site Fetch Metadata，若带 Origin 还必须精确匹配。每次请求都会重新读取 sidecar；未知字段或错误 mode 会快速失败。登录挑战只接受不含凭据的 HTTPS 地址；30 秒内未得到地址、provider 已结束但没有地址、退出登录或插件卸载时，所有 waiter 都会被清理。只有显式登录会输出授权 URL 或代码；状态输出会脱敏。doctor 只用 `lstat` 检查元数据，不打开文件。
 
+浏览器账户与更新请求具有 45 秒期限，覆盖响应头和 JSON 响应体。账户修改超时后不会自动重试写操作：只要账户视图仍在观察状态，浏览器就会重新读取服务端状态，因为修改可能已经提交。状态读取失败后每五秒重试，即使尚未保存账户也一样。插件卸载会取消浏览器等待，但不会退出服务端账户。
+
 ## 搜索与图片
 
 仅当 `enableSearch: true` 时注册 Codex 独立搜索提供方和不含凭据的请求事件。DSH `0.1.2-rc.1` 没有通过 settings 服务开放 WebRuntime 的 provider 选择，因此兼容适配器会先核对该版本的运行时字段，记录此前的提供方，并仅在能力开启期间选择 Codex。关闭能力或卸载插件时会恢复此前的提供方；如果另一个 owner 已经选择了更新的路由，则不会覆盖它。不支持的运行时会让能力启用失败，不会谎报路由已经变化。仅当 `enableImageTool: true` 且 tools、filesystem、attachments 服务存在时注册 `view_image`。本地文件继续受 Harness 文件系统边界与大小限制；远程图片只允许不含凭据的公共 HTTP(S)，所有 DNS 结果必须是公共单播地址，每次重定向都会重新验证，并把实际连接固定到已验证地址以关闭 DNS rebinding 缺口。
 
+远程图片的每次重定向跳转共用一个 30 秒期限，覆盖 DNS、连接与响应体读取。取消会立即结束调用方等待；操作系统 DNS 查询可能稍后才完成，但其结果不能在取消或超时后启动新的 HTTP 请求。
+
 ## 冲突、诊断与兼容边界
 
 注册前检查现有 provider id；发现 `openai-codex` 已被占用时，给出旧 bundle 或手动 provider 配置的定向迁移提示。boot-free CLI doctor 只报告包/运行时版本、OAuth 路径元数据、能力默认值和安全提示。

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { At as loginOpenAICodex, Bt as openAICodexAuthPath, H as DSH_PLUGIN_API_PACKAGES, Mt as openAICodexAuthStatus, N as CODEX_CONNECT_VERSION, Nt as publicAuthError, Rt as OPENAI_CODEX_PROVIDER, Tt as normalizeTrustedOrigin, X as readInstalledPackageVersion, Y as evaluateCompatibility, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_BASE_URL, gt as normalizeOpenAICodexProxyUrl, j as diagnoseOpenAICodex, jt as logoutOpenAICodex, kt as openAICodexModelCatalog, l as CODEX_AUTO_REVIEW_MODEL, u as probeCodexAutoReview, wt as OpenAICodexTrustedOriginsStore, zt as OpenAICodexCredentialStore } from "./src-D2Ig4NNT.js";
+import { At as loginOpenAICodex, Bt as openAICodexAuthPath, H as DSH_PLUGIN_API_PACKAGES, Mt as openAICodexAuthStatus, N as CODEX_CONNECT_VERSION, Nt as publicAuthError, Rt as OPENAI_CODEX_PROVIDER, Tt as normalizeTrustedOrigin, X as readInstalledPackageVersion, Y as evaluateCompatibility, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_BASE_URL, gt as normalizeOpenAICodexProxyUrl, j as diagnoseOpenAICodex, jt as logoutOpenAICodex, kt as openAICodexModelCatalog, l as CODEX_AUTO_REVIEW_MODEL, u as probeCodexAutoReview, wt as OpenAICodexTrustedOriginsStore, zt as OpenAICodexCredentialStore } from "./src-K61G4PZz.js";
 import { i as fetch, r as ProxyAgent, t as Agent } from "./undici-runtime-H2uktiw6.js";
 import { createHash } from "node:crypto";
 import { realpathSync } from "node:fs";

package/lib/client.js

@@ -124,6 +124,55 @@ window.__ModuleLoader__.load({
 			};
 		}
 		//#endregion
+		//#region src/client/request-json.ts
+		/** Bounded same-origin JSON reads, including response-body consumption. */
+		/** Allow the server's 30-second authorization-URL deadline to report first. */
+		const BROWSER_REQUEST_TIMEOUT_MS = 45e3;
+		/** A timed-out mutation may already have committed on the server. */
+		var BrowserRequestTimeoutError = class extends Error {
+			constructor() {
+				super("Request timed out; server outcome is unconfirmed");
+			}
+		};
+		/** Read headers and JSON within one deadline; cancellation also settles uncooperative transports. */
+		async function requestJson(path, init) {
+			const controller = new AbortController();
+			const parent = init.signal;
+			const abort = () => {
+				controller.abort(parent?.reason);
+			};
+			if (parent?.aborted) abort();
+			else parent?.addEventListener("abort", abort, { once: true });
+			const timer = setTimeout(() => {
+				controller.abort(new BrowserRequestTimeoutError());
+			}, BROWSER_REQUEST_TIMEOUT_MS);
+			let rejectAbort;
+			try {
+				if (controller.signal.aborted) throw controller.signal.reason;
+				const cancelled = new Promise((_resolve, reject) => {
+					rejectAbort = () => {
+						reject(controller.signal.reason);
+					};
+					controller.signal.addEventListener("abort", rejectAbort, { once: true });
+				});
+				const reading = (async () => {
+					const response = await fetch(path, {
+						...init,
+						signal: controller.signal
+					});
+					return {
+						response,
+						value: await response.json().catch(() => void 0)
+					};
+				})();
+				return await Promise.race([reading, cancelled]);
+			} finally {
+				clearTimeout(timer);
+				parent?.removeEventListener("abort", abort);
+				if (rejectAbort !== void 0) controller.signal.removeEventListener("abort", rejectAbort);
+			}
+		}
+		//#endregion
 		//#region src/auth-paths.ts
 		/** Node-free route constants shared by the Host and browser plugin halves. */
 		/** Plugin-owned status endpoint consumed by its browser half. */
@@ -226,7 +275,7 @@ window.__ModuleLoader__.load({
 			return { url: url.href };
 		}
 		async function request(path, method = "GET", signal, body) {
-			const response = await fetch(path, {
+			const { response, value } = await requestJson(path, {
 				method,
 				headers: {
 					accept: "application/json",
@@ -236,7 +285,6 @@ window.__ModuleLoader__.load({
 				...signal === void 0 ? {} : { signal },
 				...body === void 0 ? {} : { body: JSON.stringify(body) }
 			});
-			const value = await response.json().catch(() => void 0);
 			if (!response.ok) throw new AccountRequestError(typeof value === "object" && value !== null && "error" in value && typeof value.error === "string" ? value.error : `HTTP ${response.status}`);
 			return value;
 		}
@@ -252,6 +300,7 @@ window.__ModuleLoader__.load({
 			controller;
 			timer;
 			disposed = false;
+			lifetime = new AbortController();
 			popup = null;
 			getSnapshot = () => this.snapshot;
 			subscribe = (listener) => {
@@ -285,18 +334,21 @@ window.__ModuleLoader__.load({
 			}
 			schedule() {
 				clearTimeout(this.timer);
-				const interval = this.snapshot.operation.kind === "waiting-authorization" || this.snapshot.status.status === "signing-in" ? 1e3 : this.snapshot.operationError !== void 0 && this.snapshot.accounts.length > 0 ? 5e3 : this.snapshot.status.status === "signed-in" ? 6e4 : this.snapshot.status.status === "error" && this.snapshot.accounts.length > 0 ? 5e3 : void 0;
+				const interval = this.snapshot.operation.kind === "waiting-authorization" || this.snapshot.status.status === "signing-in" ? 1e3 : this.snapshot.operationError !== void 0 ? 5e3 : this.snapshot.status.status === "signed-in" ? 6e4 : this.snapshot.status.status === "error" ? 5e3 : void 0;
 				if (!this.disposed && this.listeners.size > 0 && interval !== void 0) this.timer = setTimeout(() => {
 					this.refresh();
 				}, interval);
 			}
 			async readServerState(signal) {
-				const response = await request(OPENAI_CODEX_AUTH_STATUS_PATH, "GET", signal);
+				const response = await this.request(OPENAI_CODEX_AUTH_STATUS_PATH, "GET", signal);
 				return {
 					status: parseStatus(response),
 					accounts: parseAccounts(response)
 				};
 			}
+			request(path, method = "GET", signal, body) {
+				return request(path, method, signal === void 0 ? this.lifetime.signal : AbortSignal.any([signal, this.lifetime.signal]), body);
+			}
 			stableStatus(status, accounts) {
 				if (status.status !== "signing-in" || accounts.length === 0) return status;
 				if (accounts.find((account) => account.active)?.accountKey !== this.snapshot.accounts.find((account) => account.active)?.accountKey) return status;
@@ -345,7 +397,7 @@ window.__ModuleLoader__.load({
 					operation: { kind: "starting-authorization" }
 				});
 				try {
-					const challenge = parseChallenge(await request(OPENAI_CODEX_AUTH_LOGIN_PATH, "POST"));
+					const challenge = parseChallenge(await this.request(OPENAI_CODEX_AUTH_LOGIN_PATH, "POST"));
 					if (this.disposed) {
 						popup?.close();
 						return;
@@ -372,7 +424,7 @@ window.__ModuleLoader__.load({
 						operation: { kind: "idle" },
 						operationError: this.errorMessage(error)
 					});
-					if (error instanceof AccountRequestError && error.message === "OpenAI Codex sign-in cancelled") await this.refresh();
+					if (error instanceof BrowserRequestTimeoutError || error instanceof AccountRequestError && error.message === "OpenAI Codex sign-in cancelled") await this.refresh();
 				} finally {
 					if (this.popup === popup) this.popup = null;
 					this.schedule();
@@ -388,7 +440,7 @@ window.__ModuleLoader__.load({
 					operation: { kind: "cancelling-authorization" }
 				});
 				try {
-					await request(OPENAI_CODEX_AUTH_CANCEL_PATH, "POST");
+					await this.request(OPENAI_CODEX_AUTH_CANCEL_PATH, "POST");
 					const { status, accounts } = await this.readServerState();
 					this.publish({
 						status,
@@ -409,6 +461,7 @@ window.__ModuleLoader__.load({
 						operation: { kind: "idle" },
 						operationError: this.errorMessage(error)
 					});
+					if (error instanceof BrowserRequestTimeoutError) await this.refresh();
 				} finally {
 					this.schedule();
 				}
@@ -423,7 +476,7 @@ window.__ModuleLoader__.load({
 					operation: { kind: "signing-out" }
 				});
 				try {
-					await request(OPENAI_CODEX_AUTH_LOGOUT_PATH, "POST");
+					await this.request(OPENAI_CODEX_AUTH_LOGOUT_PATH, "POST");
 					this.publish({
 						status: { status: "signed-out" },
 						busy: false,
@@ -438,6 +491,9 @@ window.__ModuleLoader__.load({
 						operation: { kind: "idle" },
 						operationError: this.errorMessage(error)
 					});
+					if (error instanceof BrowserRequestTimeoutError) await this.refresh();
+				} finally {
+					this.schedule();
 				}
 			}
 			/** Select one stored account and refresh account-specific status and quota. */
@@ -464,7 +520,7 @@ window.__ModuleLoader__.load({
 					}
 				});
 				try {
-					await request(OPENAI_CODEX_AUTH_ACCOUNTS_PATH, method, void 0, body);
+					await this.request(OPENAI_CODEX_AUTH_ACCOUNTS_PATH, method, void 0, body);
 					const { status, accounts } = await this.readServerState();
 					this.publish({
 						status,
@@ -480,6 +536,7 @@ window.__ModuleLoader__.load({
 						operation: { kind: "idle" },
 						operationError: this.errorMessage(error)
 					});
+					if (error instanceof BrowserRequestTimeoutError) await this.refresh();
 				} finally {
 					this.schedule();
 				}
@@ -487,6 +544,7 @@ window.__ModuleLoader__.load({
 			/** Stop local observation on plugin unload; do not log out the server account. */
 			dispose() {
 				this.disposed = true;
+				this.lifetime.abort();
 				this.stopPolling();
 				this.popup?.close();
 				this.popup = null;
@@ -2451,13 +2509,12 @@ window.__ModuleLoader__.load({
 					...this.snapshot.dismissedNotice === void 0 ? {} : { dismissedNotice: this.snapshot.dismissedNotice }
 				});
 				try {
-					const runtimeResponse = await fetch(OPENAI_CODEX_RUNTIME_PATH, {
+					const { response: runtimeResponse, value: runtimeValue } = await requestJson(OPENAI_CODEX_RUNTIME_PATH, {
 						method: "GET",
 						headers: { accept: "application/json" },
 						credentials: "same-origin",
 						signal: controller.signal
 					});
-					const runtimeValue = await runtimeResponse.json().catch(() => void 0);
 					const rawCurrentDshVersion = (typeof runtimeValue === "object" && runtimeValue !== null && !Array.isArray(runtimeValue) ? runtimeValue : void 0)?.["currentDshVersion"];
 					currentDshVersion = runtimeResponse.ok && typeof rawCurrentDshVersion === "string" && parseOpenAICodexVersion(rawCurrentDshVersion) !== void 0 ? rawCurrentDshVersion : void 0;
 					const currentDsh = currentDshVersion === void 0 ? {} : { currentDshVersion };
@@ -2471,13 +2528,12 @@ window.__ModuleLoader__.load({
 							return;
 						}
 					}
-					const response = await fetch(OPENAI_CODEX_UPDATE_PATH, {
+					const { response, value } = await requestJson(OPENAI_CODEX_UPDATE_PATH, {
 						method: "GET",
 						headers: { accept: "application/json" },
 						credentials: "same-origin",
 						signal: controller.signal
 					});
-					const value = await response.json().catch(() => void 0);
 					const safeResult = (response.ok ? parseOpenAICodexUpdateResult(value) : void 0) ?? {
 						status: "unavailable",
 						currentVersion: this.currentVersion,
@@ -6273,7 +6329,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.30";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.32";
 		//#endregion
 		//#region src/client/OpenAICodexModelsCard.tsx
 		/** Compact Models account entry with quota disclosure and shared configuration. */

package/lib/index.js

@@ -1,2 +1,2 @@
-import { $ as OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, A as assertNoOpenAICodexProviderConflict, At as loginOpenAICodex, B as COMPATIBILITY_PACKAGES, Bt as openAICodexAuthPath, C as OPENAI_CODEX_TRANSPORT_ERROR_CODES, Ct as isFastModeSessionId, D as isOpenAICodexTransportError, Dt as parseOpenAICodexUsage, E as OpenAICodexTransportError, Et as OPENAI_CODEX_USAGE_URL, F as checkForOpenAICodexUpdate, Ft as OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, G as SUPPORTED_NODE_RANGE, H as DSH_PLUGIN_API_PACKAGES, I as compareOpenAICodexVersions, It as OPENAI_CODEX_AUTH_FILENAME, J as detectCompatibility, K as SUPPORTED_PI_AI_RANGE, L as parseOpenAICodexUpdateResult, Lt as OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, M as openAICodexConflictMessage, Mt as openAICodexAuthStatus, O as VIEW_IMAGE_TOOL_NAME, Ot as readOpenAICodexRateLimits, P as OPENAI_CODEX_UPDATE_PATH, Pt as OPENAI_CODEX_ACCOUNT_LIMIT, Q as OPENAI_CODEX_PROXY_TEST_PATH, R as parseOpenAICodexVersion, Rt as OPENAI_CODEX_PROVIDER, S as OPENAI_CODEX_TRANSPORT_API_VERSION, St as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, T as OpenAICodexTransport, U as PI_AI_PACKAGE, V as COMPATIBILITY_SCHEMA_VERSION, W as SUPPORTED_DSH_PLUGIN_API_VERSION, Y as evaluateCompatibility, Z as OPENAI_CODEX_PROXY_DETECT_PATH, _ as OPENAI_CODEX_IMAGE_MAX_COUNT, _t as resolveOpenAICodexProxyUrl, a as name, at as listOpenAICodexProxyCandidates, b as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, bt as FastModeRegistry, c as migrateOpenAICodexSearchHistory, ct as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, d as OPENAI_CODEX_BASE_URL, dt as DEFAULT_OPENAI_CODEX_SETTINGS, et as OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, f as OPENAI_CODEX_SEARCH_PROVIDER, ft as OPENAI_CODEX_SETTINGS_NAMESPACE, g as OPENAI_CODEX_IMAGE_GENERATION_URL, h as mapOpenAICodexSearchResponse, ht as isValidOpenAICodexProxyUrl, i as inject, it as detectOpenAICodexProxies, j as diagnoseOpenAICodex, jt as logoutOpenAICodex, k as IMAGE_GENERATE_TOOL_NAME, lt as DEFAULT_OPENAI_CODEX_SEARCH_MODE, m as OpenAICodexSearchProvider, mt as isValidOpenAICodexContextWindowOverrides, n as OPENAI_CODEX_SETTINGS_NS, nt as OPENAI_CODEX_PROXY_PROBE_URL, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as DEFAULT_OPENAI_CODEX_PROXY_URL, p as OPENAI_CODEX_SEARCH_URL, pt as decodeOpenAICodexSettings, q as assessCompatibility, r as apply, rt as OpenAICodexProxyManager, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, st as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, t as Config, tt as OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, ut as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, v as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, vt as resolveOpenAICodexSettings, w as OPENAI_CODEX_TRANSPORT_SERVICE, x as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, xt as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, y as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, yt as OPENAI_CODEX_FAST_MODE_PATH, z as COMPATIBILITY_CONTRACT, zt as OpenAICodexCredentialStore } from "./src-D2Ig4NNT.js";
+import { $ as OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, A as assertNoOpenAICodexProviderConflict, At as loginOpenAICodex, B as COMPATIBILITY_PACKAGES, Bt as openAICodexAuthPath, C as OPENAI_CODEX_TRANSPORT_ERROR_CODES, Ct as isFastModeSessionId, D as isOpenAICodexTransportError, Dt as parseOpenAICodexUsage, E as OpenAICodexTransportError, Et as OPENAI_CODEX_USAGE_URL, F as checkForOpenAICodexUpdate, Ft as OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, G as SUPPORTED_NODE_RANGE, H as DSH_PLUGIN_API_PACKAGES, I as compareOpenAICodexVersions, It as OPENAI_CODEX_AUTH_FILENAME, J as detectCompatibility, K as SUPPORTED_PI_AI_RANGE, L as parseOpenAICodexUpdateResult, Lt as OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, M as openAICodexConflictMessage, Mt as openAICodexAuthStatus, O as VIEW_IMAGE_TOOL_NAME, Ot as readOpenAICodexRateLimits, P as OPENAI_CODEX_UPDATE_PATH, Pt as OPENAI_CODEX_ACCOUNT_LIMIT, Q as OPENAI_CODEX_PROXY_TEST_PATH, R as parseOpenAICodexVersion, Rt as OPENAI_CODEX_PROVIDER, S as OPENAI_CODEX_TRANSPORT_API_VERSION, St as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, T as OpenAICodexTransport, U as PI_AI_PACKAGE, V as COMPATIBILITY_SCHEMA_VERSION, W as SUPPORTED_DSH_PLUGIN_API_VERSION, Y as evaluateCompatibility, Z as OPENAI_CODEX_PROXY_DETECT_PATH, _ as OPENAI_CODEX_IMAGE_MAX_COUNT, _t as resolveOpenAICodexProxyUrl, a as name, at as listOpenAICodexProxyCandidates, b as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, bt as FastModeRegistry, c as migrateOpenAICodexSearchHistory, ct as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, d as OPENAI_CODEX_BASE_URL, dt as DEFAULT_OPENAI_CODEX_SETTINGS, et as OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, f as OPENAI_CODEX_SEARCH_PROVIDER, ft as OPENAI_CODEX_SETTINGS_NAMESPACE, g as OPENAI_CODEX_IMAGE_GENERATION_URL, h as mapOpenAICodexSearchResponse, ht as isValidOpenAICodexProxyUrl, i as inject, it as detectOpenAICodexProxies, j as diagnoseOpenAICodex, jt as logoutOpenAICodex, k as IMAGE_GENERATE_TOOL_NAME, lt as DEFAULT_OPENAI_CODEX_SEARCH_MODE, m as OpenAICodexSearchProvider, mt as isValidOpenAICodexContextWindowOverrides, n as OPENAI_CODEX_SETTINGS_NS, nt as OPENAI_CODEX_PROXY_PROBE_URL, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as DEFAULT_OPENAI_CODEX_PROXY_URL, p as OPENAI_CODEX_SEARCH_URL, pt as decodeOpenAICodexSettings, q as assessCompatibility, r as apply, rt as OpenAICodexProxyManager, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, st as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, t as Config, tt as OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, ut as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, v as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, vt as resolveOpenAICodexSettings, w as OPENAI_CODEX_TRANSPORT_SERVICE, x as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, xt as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, y as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, yt as OPENAI_CODEX_FAST_MODE_PATH, z as COMPATIBILITY_CONTRACT, zt as OpenAICodexCredentialStore } from "./src-K61G4PZz.js";
 export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, Config, DEFAULT_OPENAI_CODEX_PROXY_URL, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, IMAGE_GENERATE_TOOL_NAME, OPENAI_CODEX_ACCOUNT_LIMIT, OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, OPENAI_CODEX_PROXY_DETECT_PATH, OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, OPENAI_CODEX_PROXY_PROBE_URL, OPENAI_CODEX_PROXY_TEST_PATH, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_UPDATE_PATH, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexProxyManager, OpenAICodexSearchProvider, OpenAICodexTransport, OpenAICodexTransportError, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_RANGE, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, checkForOpenAICodexUpdate, compareOpenAICodexVersions, decodeOpenAICodexSettings, detectCompatibility, detectOpenAICodexProxies, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, isValidOpenAICodexContextWindowOverrides, isValidOpenAICodexProxyUrl, listOpenAICodexProxyCandidates, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, migrateOpenAICodexSearchHistory, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUpdateResult, parseOpenAICodexUsage, parseOpenAICodexVersion, readOpenAICodexRateLimits, resolveOpenAICodexProxyUrl, resolveOpenAICodexSettings };

package/lib/{src-D2Ig4NNT.js → src-K61G4PZz.js}

@@ -1224,7 +1224,8 @@ const OPENAI_CODEX_ASTRA_MODEL = {
 	contextWindow: 272e3,
 	maxTokens: 128e3,
 	thinkingLevelMap: {
-		minimal: "low",
+		off: null,
+		minimal: null,
 		xhigh: "xhigh",
 		max: "max"
 	},
@@ -3765,7 +3766,7 @@ function registerOpenAICodexOriginalImageRoute(ctx, trustedOrigins, assets) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.30";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.32";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */
@@ -4286,6 +4287,53 @@ function isPublicNetworkAddress(rawAddress) {
 function abortError(signal) {
 	return signal.reason instanceof Error ? signal.reason : new Error(signal.reason === void 0 ? "remote image request aborted" : String(signal.reason));
 }
+async function runPublicHttpHop(signal, operation) {
+	if (signal.aborted) throw abortError(signal);
+	const controller = new AbortController();
+	return new Promise((resolve, reject) => {
+		let settled = false;
+		const timer = setTimeout(() => {
+			const error = /* @__PURE__ */ new Error(`remote image request exceeded ${String(PUBLIC_HTTP_HOP_TIMEOUT_MS)}ms`);
+			controller.abort(error);
+			finish({
+				ok: false,
+				error
+			});
+		}, PUBLIC_HTTP_HOP_TIMEOUT_MS);
+		const cleanup = () => {
+			clearTimeout(timer);
+			signal.removeEventListener("abort", onAbort);
+		};
+		const finish = (result) => {
+			if (settled) return;
+			settled = true;
+			cleanup();
+			if (result.ok) resolve(result.value);
+			else reject(result.error);
+		};
+		const onAbort = () => {
+			const error = abortError(signal);
+			controller.abort(signal.reason);
+			finish({
+				ok: false,
+				error
+			});
+		};
+		timer.unref();
+		signal.addEventListener("abort", onAbort, { once: true });
+		operation(controller.signal).then((value) => {
+			finish({
+				ok: true,
+				value
+			});
+		}, (error) => {
+			finish({
+				ok: false,
+				error
+			});
+		});
+	});
+}
 function assertTargetUrl(url) {
 	if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error("view_image URL must use http or https");
 	if (url.username !== "" || url.password !== "") throw new Error("view_image URL must not contain credentials");
@@ -4428,9 +4476,12 @@ async function fetchPublicHttpResource(source, maxBytes, signal, runtime = NODE_
 	assertTargetUrl(url);
 	for (let redirects = 0;; redirects += 1) {
 		if (signal.aborted) throw abortError(signal);
-		const addresses = await runtime.resolve(url.hostname, signal);
-		if (addresses.length === 0 || addresses.some((candidate) => !isPublicNetworkAddress(candidate.address))) throw new Error(`remote image host ${JSON.stringify(url.hostname)} must resolve only to public network addresses`);
-		const hop = await runtime.get(url, addresses[0], maxBytes, signal);
+		const hop = await runPublicHttpHop(signal, async (hopSignal) => {
+			const addresses = await runtime.resolve(url.hostname, hopSignal);
+			if (hopSignal.aborted) throw abortError(hopSignal);
+			if (addresses.length === 0 || addresses.some((candidate) => !isPublicNetworkAddress(candidate.address))) throw new Error(`remote image host ${JSON.stringify(url.hostname)} must resolve only to public network addresses`);
+			return runtime.get(url, addresses[0], maxBytes, hopSignal);
+		});
 		if (hop.status >= 300 && hop.status < 400) {
 			if (redirects >= 5) throw new Error(`remote image exceeded ${String(5)} redirects`);
 			if (hop.location === void 0) throw new Error(`remote image redirect ${String(hop.status)} has no location`);

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-codex-connect",
   "displayName": "Codex Connect",
   "description": "ChatGPT OAuth and Codex models for DeepSeek Harness.",
-  "version": "0.1.0-alpha.4.30",
+  "version": "0.1.0-alpha.4.32",
   "author": "Frank Song",
   "contributors": [
     "Yan-Zero (original dsh-codex author)"
@@ -38,7 +38,9 @@
     "dsh-codex-connect": "lib/bin.js"
   },
   "scripts": {
-    "lint": "node scripts/lint.mjs",
+    "lint": "pnpm run lint:metadata && pnpm run lint:source",
+    "lint:metadata": "node scripts/lint.mjs",
+    "lint:source": "eslint src --max-warnings=0 && node scripts/check-source-lint.mjs",
     "build": "tsdown",
     "test": "vitest run",
     "test:browser": "vitest run --config vitest.browser.config.ts",
@@ -198,12 +200,14 @@
     "@types/react": "~18.3.1",
     "@types/react-dom": "~18.3.1",
     "@vitest/browser-playwright": "4.1.11",
+    "eslint": "^10.10.0",
     "jsdom": "29.1.1",
     "playwright": "1.62.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "tsdown": "^0.22.2",
     "typescript": "^5.9.3",
+    "typescript-eslint": "^8.69.0",
     "vitest": "^4.1.8"
   }
 }