dsh-codex-connect 0.1.0-alpha.4.34 → 0.1.0-alpha.4.35

package/INSTALL.md

@@ -1,6 +1,6 @@
 # Installation Runbook for CLI Agents
 
-Alpha 4.33 is verified with DSH `0.1.2-rc.1` and pi-ai `0.84.4` within `^0.84.2`, and with DSH `0.1.5-alpha.1` and pi-ai `0.85.1`.
+Published Alpha 4.34 is verified with DSH `0.1.2-rc.1` and pi-ai `0.84.4` within `^0.84.2`, and with each exact DSH `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` model-runtime pairing using pi-ai `0.85.1`.
 
 Install `dsh-codex-connect` into one requested DeepSeek Harness profile without changing its current default model, search route, global configuration, or OAuth state.
 
@@ -16,22 +16,26 @@ Install `dsh-codex-connect` into one requested DeepSeek Harness profile without
 
 ### Select an exact version before installation
 
-Check `dsh --version` before changing the requested profile. Use `dsh --help` to locate the CLI if needed; from a Harness checkout use `pnpm dsh --version`. Select an exact pair from [verified-compatibility.json](verified-compatibility.json):
+Check `dsh --version` before changing the requested profile. Use `dsh --help` to locate the CLI if needed; from a Harness checkout use `pnpm dsh --version`. The CLI string alone does not identify every installed model-runtime package: a CLI reporting `0.1.5-rc.1` can resolve `0.1.5-rc.2` packages. When the plugin is already installed, also run `dsh plugin --profile web exec dsh-codex-connect doctor --json` and inspect the installed `@deepseek-ai/dsh-llm`, `@deepseek-ai/dsh-llm-pi-ai`, and pi-ai versions. Substitute the requested profile. Select an exact pair from [verified-compatibility.json](verified-compatibility.json):
 
 | Installed DSH version | Codex Connect version to pin |
 | --- | --- |
 | `0.1.0-rc.7` | `0.1.0-alpha.4.14` |
 | `0.1.1-rc.2` | `0.1.0-alpha.4.21` |
 | `0.1.2-alpha.2` | `0.1.0-alpha.4.23` |
-| `0.1.2-rc.1` | `0.1.0-alpha.4.33` |
+| `0.1.2-rc.1` | `0.1.0-alpha.4.34` |
 | `0.1.2-alpha.5` | `0.1.0-alpha.4.25` |
-| `0.1.5-alpha.1` | `0.1.0-alpha.4.33` |
+| `0.1.5-alpha.1` | `0.1.0-alpha.4.34` |
+| `0.1.5-rc.1` | `0.1.0-alpha.4.34` |
+| `0.1.5-rc.2` | `0.1.0-alpha.4.34` |
 
 If your exact DSH version is unknown or not listed, preserve the installed host, report that the combination is unverified, and verify it before making installation changes. A missing record does not prove incompatibility, and the catalog's latest verified DSH version is not the latest upstream release. Do not recommend upgrading or downgrading DSH merely to match a row. Investigate any specific failure and seek verification of the installed combination. Do not blindly install `dsh-codex-connect@alpha`: `alpha` is a moving tag, not a compatibility guarantee. Do not infer support for newer DSH versions from these rows.
 
-Alpha 4.33 requires one consistent DSH plugin API version: `0.1.2-rc.1` with `@earendil-works/pi-ai` `^0.84.2`, or `0.1.5-alpha.1` with pi-ai `0.85.1`; Node.js remains `^22.19.0 || >=24.0.0`. Mixed host versions and other DSH/pi-ai combinations remain unverified. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 remains the verified choice for DSH `0.1.2-alpha.2`, Alpha 4.21 remains the verified choice for DSH `0.1.1-rc.2`, and staying on DSH `0.1.0-rc.7` means selecting Alpha 4.14. Changing DSH is a separate operation requiring the user's explicit request; a plugin update request does not authorize it. The repository's `pnpm --silent run check:compatibility` remains a strict development/release dependency gate, not a recommendation to change a user's host.
+Alpha 4.34 requires one consistent DSH plugin API version: `0.1.2-rc.1` with `@earendil-works/pi-ai` `^0.84.2`, or one of `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` with pi-ai `0.85.1`; Node.js remains `^22.19.0 || >=24.0.0`. Mixed host versions and other DSH/pi-ai combinations remain unverified. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 remains the verified choice for DSH `0.1.2-alpha.2`, Alpha 4.21 remains the verified choice for DSH `0.1.1-rc.2`, and staying on DSH `0.1.0-rc.7` means selecting Alpha 4.14. Changing DSH is a separate operation requiring the user's explicit request; a plugin update request does not authorize it. The repository's `pnpm --silent run check:compatibility` remains a strict development/release dependency gate, not a recommendation to change a user's host.
 
-The Alpha 4.33 rows reflect same-artifact isolated installation and runtime checks, bounded real-account calls, and isolated upgrades from Alpha 4.32. Fresh OAuth and manual callback acceptance used the real implementation through a temporary acceptance page. See [.github/ALPHA_433_RELEASE_READINESS.md](https://github.com/franksong2702/dsh-codex-connect/blob/main/.github/ALPHA_433_RELEASE_READINESS.md) for commands and verification limits. Historical rows remain the repository's existing verification record. This guidance does not change upstream DSH behavior or resolve [Issue #64](https://github.com/franksong2702/dsh-codex-connect/issues/64).
+The Alpha 4.34 rows reflect same-artifact isolated installation and model-runtime checks on both configured Node versions, browser regression, Windows canary contracts, and independent verification of the published npm artifact. All eight advertised models resolved and prepared, defaults were unchanged, and provider disposal succeeded. These are not fresh real OAuth, live model/tool/image, or full Windows application acceptance. See [.github/ALPHA_434_RELEASE_READINESS.md](https://github.com/franksong2702/dsh-codex-connect/blob/main/.github/ALPHA_434_RELEASE_READINESS.md) for release recovery, upgrade evidence, and verification limits. Historical rows remain the repository's existing verification record. This guidance does not change upstream DSH behavior or resolve [Issue #64](https://github.com/franksong2702/dsh-codex-connect/issues/64).
+
+Alpha 4.33 omits the `modelErrors` profile field required by RC model packages, producing `Cannot read properties of undefined (reading 'get')`. Alpha 4.34 contains the fix. Reauthorization or repeated model-list retries do not add a missing profile field. Pin the corrected plugin version for a verified host combination; do not delete credentials or change DSH merely to work around this failure. DSH `0.1.5-alpha.2` remains unverified.
 
 ### Install the selected version and validate
 
@@ -54,10 +58,10 @@ The Alpha 4.33 rows reflect same-artifact isolated installation and runtime chec
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.23
    ```
 
-   For DSH `0.1.2-rc.1` or `0.1.5-alpha.1`, use Alpha 4.33:
+   For DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, or `0.1.5-rc.2`, use Alpha 4.34:
 
    ```sh
-   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.33
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.34
    ```
 
    For DSH `0.1.2-alpha.5`, use Alpha 4.25:
@@ -66,7 +70,7 @@ The Alpha 4.33 rows reflect same-artifact isolated installation and runtime chec
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.25
    ```
 
-   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.33'` only for the DSH `0.1.2-rc.1` or `0.1.5-alpha.1` combinations.
+   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.34'` only for the DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, or `0.1.5-rc.2` combinations.
 
 3. Run `dsh web --help` once to compose the installed profile without starting the server. DSH `0.1.2-rc.1` prepares profile plugin dependency fallback during this step.
 4. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: abaac5cb3f80c204f01c6b804fff06e649a75298
-docs/README.zh.md: fe1383a7deaeaf355782ee6cf79f296e0f3cbaad
+README.md: 9016a882858e604aba551f61baadfe352e69e8e2
+docs/README.zh.md: 8d7d386608a125e6c381df3b7138fe787eba01f5

package/README.md

@@ -12,19 +12,19 @@ Codex Connect adds the `openai-codex` model provider to the normal Harness agent
 
 ## Quick start
 
-This guide describes the published pairing below. Check `dsh --version` first; for another DSH version, use [Installation and upgrades](INSTALL.md). A moving npm tag such as `alpha` is not a compatibility guarantee.
+This guide describes the published pairings below. Check `dsh --version` first and use `doctor --json` to inspect the installed model-runtime packages: an rc.1 CLI can resolve rc.2 packages. For other versions, use [Installation and upgrades](INSTALL.md). A moving npm tag such as `alpha` is not a compatibility guarantee.
 
 | Requirement | Verified pairing |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.33` |
-| DeepSeek Harness | `0.1.2-rc.1` or `0.1.5-alpha.1` |
+| Codex Connect | `0.1.0-alpha.4.34` |
+| DeepSeek Harness | `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, or `0.1.5-rc.2` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | Account | ChatGPT OAuth with access to the requested Codex model; availability is decided by OpenAI |
 
 ### 1. Install
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.33
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.34
 dsh web
 ```
 
@@ -69,10 +69,15 @@ All options below are off on a fresh installation. Edit them in **Settings → P
 |---|---|---|
 | Proxy | `enableProxy` | Credential-free HTTP(S), scoped to this plugin's traffic. A failed proxy request does not silently retry directly. |
 | Codex Search | `enableSearch` | Selects Codex for the entire profile's search route; disabling restores the previously active route. |
+| Luna Reserve | `enableReserveFallback` | Uses the hidden Reserve route only when the backend explicitly authorizes it for the captured account; never changes global defaults or retries a generic `429`. |
 | Image viewing | `enableImageTool` | Adds `view_image` to vision-capable models for local files and validated public HTTP(S) images. |
 | GPT Image generation | `enableImageGeneration` | Prompt-only generation; availability, dimensions, and quota remain account- and service-controlled. |
 | Auto-review | `enableAutoReview` | Sends bounded approval context, tool arguments, working directory, and the planned action to `chatgpt.com`, with confirmation on first enablement. Failures return to human approval. |
 
+**Unreleased experiment:** Luna Reserve fallback is not included in published Alpha 4.34. It remains disabled by default in this development build; real-account Reserve entry and recovery have not been verified.
+
+With `enableReserveFallback: true`, the account UI and agent routing share one identity-bound quota state. Background refresh follows the returned quota windows; fresh state is reused across agent steps. The plugin enters `gpt-reserve` only with complete, non-FedRAMP account/user identity and backend Luna Reserve authorization, then restores the session's previous model and reasoning effort after confirmed ordinary-usage recovery. Reserve has its own allowance, is hidden from the model picker, and is not unlimited. The backend decides eligibility; reset times alone do not authorize a switch. This version supports known `gpt-5.6-luna` metadata only. See [Luna Reserve fallback](docs/reference.md#luna-reserve-fallback) for refresh, identity, and verification limits.
+
 Use the image generation capability included with your current GPT subscription. Generated originals are stored separately from attachment previews; disabling the capability or uninstalling the plugin does not delete them. See [Configuration and recovery](docs/reference.md#search-and-image-tools) for storage and access rules.
 
 Auto-review operates after Harness policy requires approval; it does not bypass that policy. See [Auto-review behavior](docs/auto-review.md) before enabling it.

package/cordis.patch.yml

@@ -6,6 +6,7 @@
       config:
         enableProxy: false
         enableSearch: false
+        enableReserveFallback: false
         enableImageTool: false
         enableImageGeneration: false
         enableAutoReview: false

package/docs/README.zh.md

@@ -12,19 +12,19 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 
 ## 快速开始
 
-本指南介绍下方已发布的组合。请先运行 `dsh --version`；其他 DSH 版本请查阅[安装与升级](../INSTALL.md)。`alpha` 等会移动的 npm tag 不代表兼容性保证。
+本指南介绍下方已发布的组合。请先运行 `dsh --version`，并用 `doctor --json` 检查实际安装的模型运行库：rc.1 CLI 可能解析到 rc.2 包。其他版本请查阅[安装与升级](../INSTALL.md)。`alpha` 等会移动的 npm tag 不代表兼容性保证。
 
 | 要求 | 已验证组合 |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.33` |
-| DeepSeek Harness | `0.1.2-rc.1` 或 `0.1.5-alpha.1` |
+| Codex Connect | `0.1.0-alpha.4.34` |
+| DeepSeek Harness | `0.1.2-rc.1`、`0.1.5-alpha.1`、`0.1.5-rc.1` 或 `0.1.5-rc.2` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | 账户 | 通过 ChatGPT OAuth 使用所请求的 Codex 模型；可用性由 OpenAI 决定 |
 
 ### 1. 安装
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.33
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.34
 dsh web
 ```
 
@@ -69,10 +69,15 @@ dsh plugin --profile web exec dsh-codex-connect doctor --json
 |---|---|---|
 | 代理 | `enableProxy` | 不带凭据的 HTTP(S)，只作用于本插件流量。代理请求失败不会静默改走直连。 |
 | Codex 搜索 | `enableSearch` | 将整个 profile 的搜索路由切换为 Codex；关闭后恢复之前的路由。 |
+| Luna Reserve | `enableReserveFallback` | 只在服务端为当前已固定账户明确授权时使用隐藏的 Reserve 路由；不修改全局默认模型，也不因普通 `429` 重试。 |
 | 图片查看 | `enableImageTool` | 为视觉模型添加 `view_image`，读取本地文件和经过校验的公网 HTTP(S) 图片。 |
 | GPT Image 图片生成 | `enableImageGeneration` | 只接受提示词；可用性、尺寸和额度仍由账户及服务端控制。 |
 | 自动审查 | `enableAutoReview` | 将有界的审批上下文、工具参数、工作目录和待执行动作发送到 `chatgpt.com`，首次启用需要确认。失败时交还人工审批。 |
 
+**尚未发布的实验功能：** 已发布的 Alpha 4.34 不包含 Luna Reserve 回退。此开发版本仍默认关闭该功能，尚未完成真实账户进入 Reserve 及恢复普通模型的验证。
+
+启用 `enableReserveFallback: true` 后，账户 UI 和 agent 路由共用一份绑定身份的额度状态，按服务端返回的额度窗口后台刷新；有效状态可跨 agent step 复用。只有身份完整、非 FedRAMP 且服务端授权时，插件才进入 `gpt-reserve`；普通额度确认恢复后，切回该会话先前的模型和推理强度。Reserve 有自己的额度，不出现在模型选择器中，也不是无限额度。资格由服务端决定，重置时间本身不授权切换。当前版本只支持已知的 `gpt-5.6-luna` 元数据。刷新、身份和验证限制见 [Luna Reserve fallback](reference.md#luna-reserve-fallback)。
+
 使用你当前 GPT 订阅计划提供的图片生成能力。生成原文件与附件预览分开保存；关闭能力或卸载插件不会删除这些文件。存储和访问规则见[配置与恢复](reference.zh.md#搜索与图片工具)。
 
 自动审查在 Harness 策略判定需要审批后执行，不会绕过该策略。启用前请阅读[自动审查行为](auto-review.zh.md)。

package/docs/agent-notes/shared-reserve-quota.md

@@ -0,0 +1,9 @@
+# Shared Luna Reserve quota state
+
+One plugin-owned quota service supplies both the account UI and Reserve routing. It coalesces concurrent usage GETs and schedules adaptive refresh from the last successful completion. Repeated reads preserve that deadline. Reset times accelerate observation without granting permission; only an identity-matched backend response authorizes Reserve or ordinary-usage recovery.
+
+The in-memory cache holds at most sixteen account/user entries. Account mutations, configuration changes, and disposal revoke the epoch signal carried by undispatched local permits. Each entry also owns a snapshot signal: starting a refresh (successful or failed) or evicting that entry revokes its old undispatched permits without revoking other identities. Return-target reads and writes recheck this combined authority before changing routes, including recovery to an ordinary model. Caller cancellation detaches its waiter without cancelling shared transport. Disposal aborts the epoch and awaits authentication and transport operations before closing the proxy manager. Failed responses remove cached decisions and receive a five-second retry deadline; raw provider failures are not retained in public errors.
+
+Ordinary and Reserve allowances are distinct. Explicit exhaustion of both stops routing. A typed account-quota failure invalidates stale state and permits at most one fresh, authorized transition per turn; generic request-rate failures do not enter this path. Return selections remain session/account-bound private files. Reserve model calls use Luna defaults and the existing context-window restriction remains unchanged.
+
+Verification uses synthetic credentials and HTTP responses through the quota service, account API, assembled agent loop, and installed host matrix. It does not establish actual account eligibility or production quota availability.

package/docs/reference.i18n.yaml

@@ -1,4 +1,4 @@
 # Bilingual-pair consistency record for the operational reference. Re-record with:
 #   git hash-object docs/reference.md docs/reference.zh.md
-docs/reference.md: d3e3af704f0a40f35f8f99b422cb2606877b3861
-docs/reference.zh.md: 9b976d9b005c36a561d7a7fca74bb5250d518fb5
+docs/reference.md: 114ff306f7edffbec3f7faf97da0a4dbb9793c7e
+docs/reference.zh.md: 875352186b206b4f0fe29e5671972e781986a713

package/docs/reference.md

@@ -43,6 +43,7 @@ Fresh installations register the model provider and leave every additional capab
   config:
     enableProxy: false
     enableSearch: false
+    enableReserveFallback: false
     enableImageTool: false
     enableImageGeneration: false
     enableAutoReview: false
@@ -56,6 +57,26 @@ Disabling the proxy or unloading the plugin gives active proxy operations one se
 
 Direct connection is the default. An enabled credential-free HTTP(S) proxy applies only to this plugin's model, OAuth, refresh, quota, search, image, and Auto-review traffic. Detection checks standard proxy environment variables and documented loopback candidates without making a model call, consuming quota, or saving settings. A failed proxy request never silently retries through a direct connection. Loading Codex Connect does not replace Node's environment-proxy dispatcher, so unrelated Harness requests continue using the process's existing proxy policy.
 
+### Luna Reserve fallback
+
+This is an unreleased, default-off experiment; published Alpha 4.34 does not include it. Real-account Reserve entry and recovery remain unverified.
+
+`enableReserveFallback: true` opts agent requests into backend-authorized Luna Reserve fallback. The account UI and routing share an in-memory account/user-bound quota snapshot; concurrent reads coalesce and fresh reads do not issue another quota `GET`. A cold or stale read waits for refresh. After a successful fetch, background refresh runs at 60/30/15/5 seconds for usage below 75%, at least 75%, at least 90%, and at least 99%, using the highest consumption across ordinary and relevant model windows. Future reset times shorten the next refresh to reset plus one second; they never establish recovery. Cache reads do not postpone that deadline. Failed fetches discard cached decisions and retry after five seconds. Account mutations, settings changes, and plugin disposal invalidate the state; UI receives only the public quota projection.
+
+A valid shared decision issues a private one-shot permit for the next `gpt-reserve` dispatch in that session/account. This local dispatch guard is not a server-side per-call authorization requirement. Cancellation, replacement, an agent error, turn stopping, quota invalidation, snapshot refresh, or cache eviction revokes an unused permit. Return-target I/O rechecks that authority before restoring an ordinary model. Direct and auxiliary Reserve calls fail before a model request. With fallback disabled, ordinary agent steps do not query quota, account UI reads remain passive, and there is no background quota poller. An already-Reserve session requires an explicitly selected ordinary model.
+
+The access token must contain non-empty `chatgpt_account_id` and `chatgpt_user_id` (or `user_id`) claims under `https://api.openai.com/auth`, and `chatgpt_account_is_fedramp` must be absent or `false`. Missing, partial, FedRAMP, changed, or response-mismatched identity disables fallback for that step. The plugin does not guess identity from an email address or subscription plan.
+
+The plugin routes to the hidden model only when the quota response matches both the captured account and user and supplies a valid Luna Reserve authorization banner for the applicable model. A generic HTTP `429`, a rounded quota percentage, a reset time, or a Reserve model name is not authorization and is never retried as Reserve. This version accepts only the known `gpt-5.6-luna` Reserve metadata; other metadata is not inferred. The server decides eligibility and whether `5h`, weekly, or another backend limit causes Reserve authorization.
+
+Before entering Reserve, the plugin atomically saves the session's ordinary model request controls in a private `codex-connect-reserve/<SHA-256 of session id>.json` file beside the Codex credential file. The record contains a hash of the account/user pair and the ordinary model, reasoning effort, temperature, output limit, and stop sequences; it does not contain a bearer token or raw account and user ids. The Reserve request omits those ordinary controls and uses Luna's own defaults. A later identity-matched quota response must explicitly allow ordinary usage before the complete saved request configuration is restored. A missing, corrupt, oversized, wrong-account, or fork-without-its-own return record is never guessed or inherited: select an ordinary model explicitly to continue.
+
+Reserve is not exposed in model discovery and does not modify profile-wide defaults. Its allowance is separate from ordinary usage, not unlimited. When both are explicitly exhausted, routing stops with a usage-exhausted message. If a model request reports Harness's typed account-quota failure, the plugin invalidates cached state and allows at most one fresh, authorized entry or recovery retry per turn. Generic rate-limit failures never trigger this path.
+
+Reserve uses Luna's 272,000-token catalog context window, not the previous model's larger window. This release does not authorize automatic or manual compaction calls through Reserve. Switching a long conversation can therefore exceed Luna's context limit; compact before ordinary usage runs out or configure a separate, available summarization model. The plugin does not claim a cross-host exact token preflight or automatic long-context recovery.
+
+Automated coverage uses synthetic tokens and quota responses. It verifies local routing and restoration rules without contacting a real account, and therefore does not establish live account eligibility, available quota, or current server policy.
+
 ### Search and image tools
 
 - `enableSearch: true` registers Codex as an available search provider and selects it for profile-wide searches. Disabling it unregisters the provider and restores the route that was active before Codex Search was enabled.
@@ -101,6 +122,7 @@ The main plugin options are:
 | `proxyUrl` | `http://127.0.0.1:7890` | Credential-free HTTP(S) proxy origin; inactive until enabled |
 | `contextWindowOverrides` | none | Per-model client context-budget overrides |
 | `enableSearch` | `false` | Register Codex search and select it when the setting is saved |
+| `enableReserveFallback` | `false` | Follow identity-matched, backend-authorized Luna Reserve transitions for agent requests |
 | `enableImageTool` | `false` | Register `view_image` |
 | `enableImageGeneration` | `false` | Register GPT Image generation |
 | `imageModelHint` | empty | Optional unverified image route hint; empty keeps the default request |

package/docs/reference.zh.md

@@ -43,6 +43,7 @@ GPT Codex 对话的 Composer 会显示 Fast Mode 与额度：
   config:
     enableProxy: false
     enableSearch: false
+    enableReserveFallback: false
     enableImageTool: false
     enableImageGeneration: false
     enableAutoReview: false
@@ -56,6 +57,26 @@ GPT Codex 对话的 Composer 会显示 Fast Mode 与额度：
 
 默认使用直连。启用后，不带凭据的 HTTP(S) proxy 只应用于本插件的模型、OAuth、刷新、额度、搜索、图片和自动审查流量。检测只检查标准代理环境变量和文档列出的 loopback 候选地址，不调用模型、不消耗额度，也不保存设置。代理请求失败时，绝不会静默改走直连。加载 Codex Connect 不会替换 Node 的环境代理 dispatcher，因此其他 Harness 请求会继续使用进程已有的代理策略。
 
+### Luna Reserve 回退
+
+这是尚未发布、默认关闭的实验功能；已发布的 Alpha 4.34 不包含该功能。真实账户进入 Reserve 及恢复普通模型的过程仍未完成验证。
+
+`enableReserveFallback: true` 为 agent 请求启用由后端授权的 Luna Reserve 回退。账户 UI 和路由共用绑定账户与用户的内存额度快照；并发读取合并，有效状态不再发起额度 `GET`。首次或过期读取等待刷新。查询成功后，根据普通额度和相关模型窗口中的最高消耗，低于 75%、达到 75%、达到 90%、达到 99% 时，分别每 60/30/15/5 秒后台刷新。未来重置时间可将下次刷新提前到重置后一秒，但不证明额度恢复。缓存读取不会推迟刷新期限。查询失败会清除缓存决策，五秒后重试。账户修改、设置变更和插件卸载会使状态失效；UI 只接收公开额度投影。
+
+有效的共享决策为该会话和账户的下一次 `gpt-reserve` 调用签发私有一次性许可。这是本地调用保护，不代表服务端要求每次调用单独认证额度。取消、替换请求、agent 出错、回合停止、额度状态失效、快照刷新或缓存淘汰都会撤销未使用的许可。恢复普通模型前，返回记录的读取也会重新检查该授权是否有效。直接和辅助 Reserve 调用会在发送前失败。关闭回退时，普通 agent 步骤不查询额度，账户 UI 保持被动读取，也不创建后台额度轮询；已处于 Reserve 的会话需要显式选择普通模型.
+
+Access token 的 `https://api.openai.com/auth` 中必须包含非空的 `chatgpt_account_id` 和 `chatgpt_user_id`（或 `user_id`），且 `chatgpt_account_is_fedramp` 必须缺省或为 `false`。身份缺失、不完整、属于 FedRAMP、发生变化或与额度响应不匹配时，该步骤不会启用回退。插件不会从邮箱地址或订阅套餐推测身份。
+
+只有额度响应同时匹配固定的账户与用户，并包含适用于当前模型的有效 Luna Reserve 授权 banner，插件才会路由到隐藏模型。普通 HTTP `429`、四舍五入后的额度百分比、重置时间或 Reserve 模型名称都不是授权，也不会触发 Reserve 重试。当前版本只接受已知的 `gpt-5.6-luna` Reserve 元数据，不推测其他模型。能否使用 Reserve，以及触发授权的是 `5h`、周额度还是其他后端限制，都由服务端决定。
+
+进入 Reserve 前，插件会将会话的普通模型请求参数原子保存到 Codex 凭据文件旁的私有 `codex-connect-reserve/<会话 id 的 SHA-256>.json` 文件中。记录包含账户与用户组合的哈希，以及普通模型、推理强度、温度、输出上限和停止序列，不包含 bearer token 或原始账户与用户 id。Reserve 请求不继承这些普通模型参数，而是使用 Luna 自身的默认值。后续身份匹配的额度响应必须明确允许普通额度，插件才会恢复完整的已保存请求配置。返回记录缺失、损坏、过大、属于其他账户，或 fork 没有自己的记录时，插件都不会猜测或继承目标；请显式选择普通模型后继续。
+
+Reserve 不出现在模型发现列表，也不修改整个 profile 的默认模型。它有独立于普通额度的限额，并非无限可用。两者明确耗尽时，路由停止并提示额度用尽。如果模型请求报告宿主明确分类的账户额度耗尽，插件使缓存失效，每回合至多按新授权进行一次进入或恢复重试；普通请求限流不触发此路径。
+
+Reserve 使用 Luna 目录中的 272,000 token 上下文窗口，不沿用原模型更大的窗口。当前版本不授权通过 Reserve 进行自动或手动上下文压缩。因此，长会话切换后可能超过 Luna 的上下文限制；请在普通额度耗尽前压缩，或配置另一个仍可用的摘要模型。插件不保证跨宿主的精确 token 预检或自动长上下文恢复。
+
+自动化覆盖使用合成 token 和额度响应，验证本地路由与恢复规则，不连接真实账户，因此不能证明实际账户资格、可用额度或当前服务端策略。
+
 ### 搜索与图片工具
 
 - `enableSearch: true` 将 Codex 注册为可用搜索提供方，并用于整个 profile 的搜索。关闭时会注销该提供方，并恢复启用 Codex 搜索之前的路由。
@@ -101,6 +122,7 @@ GPT Codex 对话的 Composer 会显示 Fast Mode 与额度：
 | `proxyUrl` | `http://127.0.0.1:7890` | 不带凭据的 HTTP(S) proxy origin；启用前不生效 |
 | `contextWindowOverrides` | 无 | 按模型设置客户端上下文预算 |
 | `enableSearch` | `false` | 注册 Codex 搜索，并在保存时将它选为搜索提供方 |
+| `enableReserveFallback` | `false` | 为 agent 请求执行身份匹配、后端授权的 Luna Reserve 切换 |
 | `enableImageTool` | `false` | 注册 `view_image` |
 | `enableImageGeneration` | `false` | 注册 GPT Image 图片生成 |
 | `imageModelHint` | 空字符串 | 可选的未验证图片路由提示；留空保持默认请求 |

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as readInstalledPackageVersion, At as normalizeTrustedOrigin, Ft as loginOpenAICodex, Gt as openAICodexAuthPath, H as DSH_PLUGIN_API_PACKAGES, It as logoutOpenAICodex, Lt as openAICodexAuthStatus, N as CODEX_CONNECT_VERSION, Pt as openAICodexModelCatalog, Q as isSupportedDshPluginApiVersion, Rt as publicAuthError, Ut as OPENAI_CODEX_PROVIDER, Wt as OpenAICodexCredentialStore, Z as evaluateCompatibility, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_BASE_URL, j as diagnoseOpenAICodex, kt as OpenAICodexTrustedOriginsStore, l as CODEX_AUTO_REVIEW_MODEL, u as probeCodexAutoReview, xt as normalizeOpenAICodexProxyUrl } from "./src-rxlwLWWN.js";
+import { A as DSH_PLUGIN_API_PACKAGES, B as isSupportedDshPluginApiVersion, Ft as loginOpenAICodex, Gt as openAICodexAuthPath, It as logoutOpenAICodex, Lt as openAICodexAuthStatus, Pt as openAICodexModelCatalog, Rt as publicAuthError, Ut as OPENAI_CODEX_PROVIDER, V as readInstalledPackageVersion, Wt as OpenAICodexCredentialStore, c as migrateOpenAICodexSearchHistory, d as OPENAI_CODEX_BASE_URL, jt as normalizeOpenAICodexProxyUrl, l as CODEX_AUTO_REVIEW_MODEL, nt as OpenAICodexTrustedOriginsStore, rt as normalizeTrustedOrigin, u as probeCodexAutoReview, x as CODEX_CONNECT_VERSION, y as diagnoseOpenAICodex, z as evaluateCompatibility } from "./src-BTr7qkL_.js";
 import { i as fetch, r as ProxyAgent, t as Agent } from "./undici-runtime-H2uktiw6.js";
 import { createHash } from "node:crypto";
 import { realpathSync } from "node:fs";

package/lib/client.js

@@ -70,6 +70,7 @@ window.__ModuleLoader__.load({
 			proxyUrl: DEFAULT_OPENAI_CODEX_PROXY_URL,
 			contextWindowOverrides: void 0,
 			enableSearch: false,
+			enableReserveFallback: false,
 			enableImageTool: false,
 			enableImageGeneration: false,
 			imageModelHint: "",
@@ -91,6 +92,7 @@ window.__ModuleLoader__.load({
 			const proxyUrl = value["proxyUrl"];
 			const contextWindowOverrides = value["contextWindowOverrides"];
 			const enableSearch = value["enableSearch"];
+			const enableReserveFallback = value["enableReserveFallback"];
 			const enableImageTool = value["enableImageTool"];
 			const enableImageGeneration = value["enableImageGeneration"];
 			const imageModelHint = value["imageModelHint"];
@@ -105,6 +107,7 @@ window.__ModuleLoader__.load({
 			if (proxyUrl !== void 0 && (typeof proxyUrl !== "string" || !isValidOpenAICodexProxyUrl(proxyUrl))) return void 0;
 			if (contextWindowOverrides !== void 0 && contextWindowOverrides !== null && !isValidOpenAICodexContextWindowOverrides(contextWindowOverrides)) return void 0;
 			if (typeof enableSearch !== "boolean" || typeof enableImageTool !== "boolean") return void 0;
+			if (enableReserveFallback !== void 0 && typeof enableReserveFallback !== "boolean") return void 0;
 			if (enableImageGeneration !== void 0 && typeof enableImageGeneration !== "boolean") return void 0;
 			if (imageModelHint !== void 0 && !isValidOpenAICodexImageModelHint(imageModelHint)) return void 0;
 			if (autoReviewDisclosureAcknowledged !== void 0 && typeof autoReviewDisclosureAcknowledged !== "boolean") return void 0;
@@ -120,6 +123,7 @@ window.__ModuleLoader__.load({
 				proxyUrl: proxyUrl === void 0 ? DEFAULT_OPENAI_CODEX_PROXY_URL : normalizeOpenAICodexProxyUrl(proxyUrl),
 				contextWindowOverrides: overrides === void 0 ? void 0 : Object.freeze(overrides),
 				enableSearch,
+				enableReserveFallback: enableReserveFallback ?? false,
 				enableImageTool,
 				enableImageGeneration: enableImageGeneration ?? false,
 				imageModelHint: imageModelHint ?? "",
@@ -912,6 +916,7 @@ window.__ModuleLoader__.load({
 			"models",
 			"contextWindowOverrides",
 			"enableProxy",
+			"enableReserveFallback",
 			"proxyUrl",
 			"enableImageTool",
 			"enableImageGeneration",
@@ -2063,6 +2068,25 @@ window.__ModuleLoader__.load({
 											})
 										]
 									}),
+									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										style: toggleRowStyle,
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											type: "checkbox",
+											checked: draft.enableReserveFallback,
+											onChange: (event) => {
+												update("enableReserveFallback", event.currentTarget.checked);
+											}
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											style: toggleCopyStyle,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: labelStyle,
+												children: t("enableReserveFallback")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												style: bodyStyle$2,
+												children: t("enableReserveFallbackHelp")
+											})]
+										})]
+									}),
 									/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 										style: toggleRowStyle,
 										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
@@ -2297,7 +2321,8 @@ window.__ModuleLoader__.load({
 			"astra-compatibility",
 			"multi-account",
 			"search-route",
-			"image-model-hint"
+			"image-model-hint",
+			"luna-reserve"
 		];
 		function isHighlightKind(value) {
 			return typeof value === "string" && HIGHLIGHT_KINDS.includes(value);
@@ -2767,7 +2792,8 @@ window.__ModuleLoader__.load({
 			"astra-compatibility": "updateHighlightAstraCompatibility",
 			"multi-account": "updateHighlightMultiAccount",
 			"search-route": "updateHighlightSearchRoute",
-			"image-model-hint": "updateHighlightImageModelHint"
+			"image-model-hint": "updateHighlightImageModelHint",
+			"luna-reserve": "updateHighlightLunaReserve"
 		};
 		function pluginVersionSummary(current, latest, t) {
 			if (latest === void 0) return t("compatibilityPluginCurrentOnly", { current });
@@ -4734,6 +4760,8 @@ window.__ModuleLoader__.load({
 			enableImageToolHelp: "Allows approved local reads and public-network image fetches for vision-capable models.",
 			enableImageGeneration: "Enable GPT Image generation",
 			enableImageGenerationHelp: "Let GPT models use GPT Image to generate images in conversations.",
+			enableReserveFallback: "Automatic Luna Reserve",
+			enableReserveFallbackHelp: "Use Luna Reserve only when the server explicitly authorizes it after ordinary usage is exhausted. Restore this conversation’s previous model when ordinary usage recovers. Adds quota checks; does not change global defaults or grant extra quota.",
 			imageModelHint: "Image route model hint",
 			imageModelHintDefault: "Default: gpt-image-2; clear to restore",
 			imageModelHintHelp: "Optional unverified route hint; it may be ignored or rejected and does not guarantee the returned model.",
@@ -4838,6 +4866,7 @@ window.__ModuleLoader__.load({
 			updateHighlightMultiAccount: "Added management for multiple ChatGPT accounts; starting or cancelling authorization preserves existing accounts.",
 			updateHighlightSearchRoute: "Enabling Codex Search now selects the profile-wide search route; disabling it restores the previous provider.",
 			updateHighlightImageModelHint: "Added an optional profile-scoped image route model hint. It is unverified, may be ignored or rejected, and does not guarantee the returned model.",
+			updateHighlightLunaReserve: "Added an optional Luna Reserve fallback for agent requests. It stays off by default and switches only when the backend explicitly authorizes Reserve for the current account.",
 			viewTechnicalDetails: "View technical details",
 			hideTechnicalDetails: "Hide technical details",
 			technicalDetailsHeading: "Technical changes",
@@ -5043,6 +5072,8 @@ window.__ModuleLoader__.load({
 			enableImageToolHelp: "允许具备视觉能力的模型在审批后读取本地图片或获取公网图片。",
 			enableImageGeneration: "启用 GPT Image 图片生成",
 			enableImageGenerationHelp: "启用后，GPT 模型可以在对话中调用 GPT Image 生成图片。",
+			enableReserveFallback: "自动使用 Luna Reserve",
+			enableReserveFallbackHelp: "仅在普通额度耗尽且服务端明确授权时使用 Luna Reserve；普通额度恢复后切回本会话原来的模型。会增加额度查询，不修改全局默认模型，也不会获得额外额度。",
 			imageModelHint: "图片路由模型提示",
 			imageModelHintDefault: "默认：gpt-image-2；清空可恢复",
 			imageModelHintHelp: "可选的未验证路由提示；服务端可能忽略或拒绝，不能保证返回的模型。",
@@ -5147,6 +5178,7 @@ window.__ModuleLoader__.load({
 			updateHighlightMultiAccount: "增加多个 ChatGPT 账户的管理能力；开始或取消授权时会保留已有账户。",
 			updateHighlightSearchRoute: "启用 Codex 搜索时，现在会选中整个 profile 的搜索路由；关闭时恢复此前的提供方。",
 			updateHighlightImageModelHint: "增加可选的 profile 图片路由模型提示。该提示未经验证，服务端可能忽略或拒绝，也不保证返回指定模型。",
+			updateHighlightLunaReserve: "增加可选的 Luna Reserve 回退，仅用于 agent 请求。该能力默认关闭，只有服务端为当前账户明确授权 Reserve 时才会切换。",
 			viewTechnicalDetails: "查看完整技术说明",
 			hideTechnicalDetails: "收起技术说明",
 			technicalDetailsHeading: "技术变更",
@@ -6332,7 +6364,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.34";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.35";
 		//#endregion
 		//#region src/client/OpenAICodexModelsCard.tsx
 		/** Compact Models account entry with quota disclosure and shared configuration. */

package/lib/index.d.ts

@@ -1,7 +1,7 @@
 import z from "@deepseek-ai/schemastery";
 import { AuthInteraction, Credential, CredentialInfo, CredentialStore, OAuthCredential } from "@earendil-works/pi-ai";
-import "@deepseek-ai/dsh-tools";
 import { Context, Service } from "@deepseek-ai/cordis";
+import "@deepseek-ai/dsh-tools";
 import { WebSearchProvider, WebSearchRequest, WebSearchResult } from "@deepseek-ai/dsh-web";
 //#region src/account-profile.d.ts
 type OpenAICodexAccountProfileSource = 'oauth' | 'generated';
@@ -444,6 +444,8 @@ interface OpenAICodexSettingsConfig {
    */
   contextWindowOverrides: Readonly<Record<string, number>> | undefined;
   enableSearch: boolean;
+  /** Follow explicit server-authorized Luna Reserve transitions for agent requests. */
+  enableReserveFallback: boolean;
   enableImageTool: boolean;
   enableImageGeneration: boolean;
   /** Optional profile-scoped model hint for image generation; empty uses the route default. */
@@ -631,7 +633,7 @@ declare const OPENAI_CODEX_FAST_MODE_PATH = "/plugins/dsh-openai-codex/fast-mode
 declare const OPENAI_CODEX_UPDATE_PATH = "/openai-codex/update";
 //#endregion
 //#region src/update.d.ts
-type OpenAICodexUpdateHighlightKind = 'trusted-origins' | 'runtime-compatibility' | 'quota-fast-mode' | 'dsh-rc7' | 'search-stability' | 'image-generation' | 'oauth-history' | 'model-visibility' | 'proxy-connection' | 'models-account' | 'context-budget' | 'auto-review-probe' | 'auto-review' | 'astra-compatibility' | 'multi-account' | 'search-route' | 'image-model-hint';
+type OpenAICodexUpdateHighlightKind = 'trusted-origins' | 'runtime-compatibility' | 'quota-fast-mode' | 'dsh-rc7' | 'search-stability' | 'image-generation' | 'oauth-history' | 'model-visibility' | 'proxy-connection' | 'models-account' | 'context-budget' | 'auto-review-probe' | 'auto-review' | 'astra-compatibility' | 'multi-account' | 'search-route' | 'image-model-hint' | 'luna-reserve';
 interface OpenAICodexUpdateHighlight {
   version: string;
   kind: OpenAICodexUpdateHighlightKind;
@@ -744,6 +746,8 @@ interface Config {
   contextWindowOverrides?: Record<string, number | null> | null | undefined;
   /** Register the optional standalone Codex search provider. */
   enableSearch?: boolean;
+  /** Automatically follow server-authorized Luna Reserve transitions, never generic rate limits. */
+  enableReserveFallback?: boolean;
   /** Register the optional image-loading tool. */
   enableImageTool?: boolean;
   /** Register the optional prompt-only image generation tool. */

package/lib/index.js

@@ -1,2 +1,2 @@
-import { A as assertNoOpenAICodexProviderConflict, B as COMPATIBILITY_PACKAGES, Bt as OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, C as OPENAI_CODEX_TRANSPORT_ERROR_CODES, Ct as resolveOpenAICodexSettings, D as isOpenAICodexTransportError, Dt as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, E as OpenAICodexTransportError, Et as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, F as checkForOpenAICodexUpdate, Ft as loginOpenAICodex, G as SUPPORTED_DSH_PLUGIN_API_VERSION, Gt as openAICodexAuthPath, H as DSH_PLUGIN_API_PACKAGES, Ht as OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, I as compareOpenAICodexVersions, It as logoutOpenAICodex, J as SUPPORTED_PI_AI_RANGE, K as SUPPORTED_DSH_PLUGIN_API_VERSIONS, L as parseOpenAICodexUpdateResult, Lt as openAICodexAuthStatus, M as openAICodexConflictMessage, Mt as parseOpenAICodexUsage, Nt as readOpenAICodexRateLimits, O as VIEW_IMAGE_TOOL_NAME, Ot as isFastModeSessionId, P as OPENAI_CODEX_UPDATE_PATH, R as parseOpenAICodexVersion, S as OPENAI_CODEX_TRANSPORT_API_VERSION, St as resolveOpenAICodexProxyUrl, T as OpenAICodexTransport, Tt as FastModeRegistry, U as PI_AI_PACKAGE, Ut as OPENAI_CODEX_PROVIDER, V as COMPATIBILITY_SCHEMA_VERSION, Vt as OPENAI_CODEX_AUTH_FILENAME, W as SUPPORTED_DSH_PLUGIN_API_RANGE, Wt as OpenAICodexCredentialStore, X as detectCompatibility, Y as assessCompatibility, Z as evaluateCompatibility, _ as OPENAI_CODEX_IMAGE_MAX_COUNT, _t as decodeOpenAICodexSettings, a as name, at as OPENAI_CODEX_PROXY_PROBE_URL, b as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, bt as isValidOpenAICodexProxyUrl, c as migrateOpenAICodexSearchHistory, ct as listOpenAICodexProxyCandidates, d as OPENAI_CODEX_BASE_URL, dt as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, et as OPENAI_CODEX_PROXY_DETECT_PATH, f as OPENAI_CODEX_SEARCH_PROVIDER, ft as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, g as OPENAI_CODEX_IMAGE_GENERATION_URL, gt as OPENAI_CODEX_SETTINGS_NAMESPACE, h as mapOpenAICodexSearchResponse, ht as DEFAULT_OPENAI_CODEX_SETTINGS, i as inject, it as OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, j as diagnoseOpenAICodex, jt as OPENAI_CODEX_USAGE_URL, k as IMAGE_GENERATE_TOOL_NAME, lt as DEFAULT_OPENAI_CODEX_IMAGE_MODEL_HINT, m as OpenAICodexSearchProvider, mt as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, n as OPENAI_CODEX_SETTINGS_NS, nt as OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as OpenAICodexProxyManager, p as OPENAI_CODEX_SEARCH_URL, pt as DEFAULT_OPENAI_CODEX_SEARCH_MODE, q as SUPPORTED_NODE_RANGE, r as apply, rt as OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, st as detectOpenAICodexProxies, t as Config, tt as OPENAI_CODEX_PROXY_TEST_PATH, ut as DEFAULT_OPENAI_CODEX_PROXY_URL, v as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, vt as isValidOpenAICodexContextWindowOverrides, w as OPENAI_CODEX_TRANSPORT_SERVICE, wt as OPENAI_CODEX_FAST_MODE_PATH, x as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, y as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, yt as isValidOpenAICodexImageModelHint, z as COMPATIBILITY_CONTRACT, zt as OPENAI_CODEX_ACCOUNT_LIMIT } from "./src-rxlwLWWN.js";
+import { $ as OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, A as DSH_PLUGIN_API_PACKAGES, At as isValidOpenAICodexProxyUrl, Bt as OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, C as checkForOpenAICodexUpdate, Ct as DEFAULT_OPENAI_CODEX_SEARCH_MODE, D as COMPATIBILITY_CONTRACT, Dt as decodeOpenAICodexSettings, E as parseOpenAICodexVersion, Et as OPENAI_CODEX_SETTINGS_NAMESPACE, F as SUPPORTED_NODE_RANGE, Ft as loginOpenAICodex, G as OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, Gt as openAICodexAuthPath, H as OPENAI_CODEX_PROXY_DETECT_PATH, Ht as OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, I as SUPPORTED_PI_AI_RANGE, It as logoutOpenAICodex, J as OpenAICodexProxyManager, K as OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, L as assessCompatibility, Lt as openAICodexAuthStatus, M as SUPPORTED_DSH_PLUGIN_API_RANGE, Mt as resolveOpenAICodexProxyUrl, N as SUPPORTED_DSH_PLUGIN_API_VERSION, Nt as resolveOpenAICodexSettings, O as COMPATIBILITY_PACKAGES, Ot as isValidOpenAICodexContextWindowOverrides, P as SUPPORTED_DSH_PLUGIN_API_VERSIONS, Q as FastModeRegistry, R as detectCompatibility, S as OPENAI_CODEX_UPDATE_PATH, St as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, T as parseOpenAICodexUpdateResult, Tt as DEFAULT_OPENAI_CODEX_SETTINGS, U as OPENAI_CODEX_PROXY_TEST_PATH, Ut as OPENAI_CODEX_PROVIDER, Vt as OPENAI_CODEX_AUTH_FILENAME, W as OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, Wt as OpenAICodexCredentialStore, X as listOpenAICodexProxyCandidates, Y as detectOpenAICodexProxies, Z as OPENAI_CODEX_FAST_MODE_PATH, _ as IMAGE_GENERATE_TOOL_NAME, _t as OpenAICodexTransportError, a as name, at as parseOpenAICodexUsage, b as openAICodexConflictMessage, bt as DEFAULT_OPENAI_CODEX_PROXY_URL, c as migrateOpenAICodexSearchHistory, ct as OPENAI_CODEX_IMAGE_MAX_COUNT, d as OPENAI_CODEX_BASE_URL, dt as OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, et as OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, f as OPENAI_CODEX_SEARCH_PROVIDER, ft as OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, g as VIEW_IMAGE_TOOL_NAME, gt as OpenAICodexTransport, h as mapOpenAICodexSearchResponse, ht as OPENAI_CODEX_TRANSPORT_SERVICE, i as inject, it as OPENAI_CODEX_USAGE_URL, j as PI_AI_PACKAGE, k as COMPATIBILITY_SCHEMA_VERSION, kt as isValidOpenAICodexImageModelHint, lt as OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, m as OpenAICodexSearchProvider, mt as OPENAI_CODEX_TRANSPORT_ERROR_CODES, n as OPENAI_CODEX_SETTINGS_NS, o as OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, ot as readOpenAICodexRateLimits, p as OPENAI_CODEX_SEARCH_URL, pt as OPENAI_CODEX_TRANSPORT_API_VERSION, q as OPENAI_CODEX_PROXY_PROBE_URL, r as apply, s as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, st as OPENAI_CODEX_IMAGE_GENERATION_URL, t as Config, tt as isFastModeSessionId, ut as OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, v as assertNoOpenAICodexProviderConflict, vt as isOpenAICodexTransportError, w as compareOpenAICodexVersions, wt as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, xt as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, y as diagnoseOpenAICodex, yt as DEFAULT_OPENAI_CODEX_IMAGE_MODEL_HINT, z as evaluateCompatibility, zt as OPENAI_CODEX_ACCOUNT_LIMIT } from "./src-BTr7qkL_.js";
 export { COMPATIBILITY_CONTRACT, COMPATIBILITY_PACKAGES, COMPATIBILITY_SCHEMA_VERSION, Config, DEFAULT_OPENAI_CODEX_IMAGE_MODEL_HINT, DEFAULT_OPENAI_CODEX_PROXY_URL, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, DSH_PLUGIN_API_PACKAGES, FastModeRegistry, FastModeRegistry as OpenAICodexFastModeRegistry, IMAGE_GENERATE_TOOL_NAME, OPENAI_CODEX_ACCOUNT_LIMIT, OPENAI_CODEX_AUTH_DOCUMENT_LIMIT, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_AUTH_V1_BACKUP_SUFFIX, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_FAST_MODE_MAX_SESSIONS, OPENAI_CODEX_FAST_MODE_MAX_SESSION_ID_LENGTH, OPENAI_CODEX_FAST_MODE_PATH, OPENAI_CODEX_HISTORY_BACKUP_SUFFIX, OPENAI_CODEX_IMAGE_GENERATION_URL, OPENAI_CODEX_IMAGE_MAX_COUNT, OPENAI_CODEX_IMAGE_MAX_ERROR_BYTES, OPENAI_CODEX_IMAGE_MAX_RESPONSE_BYTES, OPENAI_CODEX_IMAGE_PROMPT_MAX_LENGTH, OPENAI_CODEX_IMAGE_REQUEST_TIMEOUT_MS, OPENAI_CODEX_LOCAL_PROXY_CANDIDATES, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_PROXY_CANDIDATE_LIMIT, OPENAI_CODEX_PROXY_DETECT_PATH, OPENAI_CODEX_PROXY_PROBE_TIMEOUT_MS, OPENAI_CODEX_PROXY_PROBE_URL, OPENAI_CODEX_PROXY_TEST_PATH, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_TRANSPORT_API_VERSION, OPENAI_CODEX_TRANSPORT_ERROR_CODES, OPENAI_CODEX_TRANSPORT_SERVICE, OPENAI_CODEX_UPDATE_PATH, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexProxyManager, OpenAICodexSearchProvider, OpenAICodexTransport, OpenAICodexTransportError, PI_AI_PACKAGE, SUPPORTED_DSH_PLUGIN_API_RANGE, SUPPORTED_DSH_PLUGIN_API_VERSION, SUPPORTED_DSH_PLUGIN_API_VERSIONS, SUPPORTED_NODE_RANGE, SUPPORTED_PI_AI_RANGE, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, assessCompatibility, checkForOpenAICodexUpdate, compareOpenAICodexVersions, decodeOpenAICodexSettings, detectCompatibility, detectOpenAICodexProxies, diagnoseOpenAICodex, evaluateCompatibility, inject, isFastModeSessionId, isOpenAICodexTransportError, isValidOpenAICodexContextWindowOverrides, isValidOpenAICodexImageModelHint, isValidOpenAICodexProxyUrl, listOpenAICodexProxyCandidates, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, migrateOpenAICodexSearchHistory, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUpdateResult, parseOpenAICodexUsage, parseOpenAICodexVersion, readOpenAICodexRateLimits, resolveOpenAICodexProxyUrl, resolveOpenAICodexSettings };