jeo-code 0.12.1 → 0.12.2

package/CHANGELOG.md

@@ -9,32 +9,29 @@ The README mirrors the latest 5 entries — regenerate with `bun run changelog:s
 
 ## [Unreleased]
 
-## [0.12.1] - 2026-10-16
-_Logged-in OpenAI subscription models were invisible on proxy-configured machines._
+## [0.12.2] - 2026-10-16
+_Select Argon through the official agy full agent, with its own live catalog and session, separately from jeo's Cloud Code Assist backend._
+
+### Added
+- **Explicit official CLI bridge** — `agy/<official-cli-slug>` runs the installed, externally authenticated official agent. `/model provider agy` reads its live `agy models` list without inventing static availability or assuming the CLI and jeo OAuth use the same account. CLI catalogs remain process-local.
+- **CLI-owned execution and session resume** — each jeo session preserves its own upstream conversation ID and exact model. The CLI owns its tools, sandbox and permissions; jeo approvals do not mediate inner tool calls. This text-only profile is opt-in, excluded from automatic raw-model/subagent routing, and rejects jeo-only tool/system/step/thinking controls it cannot enforce.
 
 ### Fixed
-- **OpenAI OAuth catalog discarded when a custom base URL is set** (`src/ai/model-discovery.ts`) — with `OPENAI_BASE_URL`/config `openaiBaseUrl` configured, discovery dropped the stored OAuth credential, probed the proxy keyless (`auth rejected`), and the Codex second pass never fired (it only covered `api_key` primaries). OpenAI has no static fallback by design, so the picker showed zero models despite a valid login. New `codexCatalog` option queries the ChatGPT subscription catalog ignoring any custom base URL; `discoverModels` now appends it whenever the primary pass did not already return the OAuth catalog. The post-login report (`jeo auth login openai`) uses it too.
+- **CCA tier/default model discovery** — combine `agentModelSorts`, `tieredModelIds` and `defaultAgentModelId`; preserve exact backend IDs and account scoping. Malformed normalized IDs cannot replace a known-good account catalog; authoritative empty lists remain empty. This does not claim direct CCA Argon access.
+- **CLI failure boundaries** — validate relevant stream events and resumed conversation identity, preserve quota/auth/permission errors without fallback, sanitize terminal diagnostics, and bound cancellation, timeout and child-process cleanup.
 
 ### Verified
-- Live on a proxy-configured machine: `openai` rows went from 1 failed keyless row to keyless-fail + 7-model OAuth catalog; `providerPickEntries` returns 7 rows. `bun run typecheck` clean; discovery suites green including 2 new regression tests.
+- Isolated source and compiled **0.12.2** turns with `--model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills` completed with exit **0**. The compiled run reported **30.6k input / 13 output tokens**. Availability still depends on the official CLI's signed-in account and quota.
+- Focused CLI/account regressions: **203 pass, 0 fail** across 9 files. Typecheck, standalone build and the **299-file** npm package/import-closure gate passed.
 
 ## [0.12.1] - 2026-10-16
-_Explicitly select the official agy full agent with its own live model catalog and session, separate from jeo's Cloud Code Assist backend._
-
-### Added
-- **Opt-in official agy discovery and execution** — `agy/<official-cli-slug>` selects the installed, externally authenticated official CLI as a full agent, not a raw-model adapter or CCA alias. `/model provider agy` reads the live `agy models` list, preserves exact slugs, and reports empty lists and failures without static fallback. CLI catalogs stay process-local; no identity or credential parity with jeo OAuth is assumed.
-- **Session-owned resume and process lifecycle** — saved jeo sessions retain their own CLI conversation ID rather than resuming the CLI's unrelated latest conversation. Turns support cancellation and bounded timeouts. The requested model and upstream quota/auth/permission errors remain visible, with no fallback to CCA, another model, or another account.
-- **Explicit execution boundary** — the CLI owns its tools, sandbox, permissions, and conversation; jeo approvals do not mediate its inner tool calls. The bridge is text-only, excluded from automatic raw-model/subagent routing, and rejects images and jeo-only tool/system/step/thinking controls it cannot enforce.
-
-### Changed
-- **CCA account model discovery** — combine `agentModelSorts`, `tieredModelIds`, and `defaultAgentModelId` instead of treating one metadata list as the whole chat catalog. Existing `antigravity/<CCA-id>` discovery remains scoped to the selected jeo OAuth account, without claiming direct CCA Argon support.
+_Logged-in OpenAI subscription models were invisible on proxy-configured machines._
 
 ### Fixed
-- **Malformed normalized CCA IDs** — reject invalid discovery responses instead of replacing an account's known-good cache with malformed IDs. Authoritative empty lists remain empty, failed discovery remains a failure, and existing account-cache isolation is preserved.
+- **OpenAI OAuth catalog discarded when a custom base URL is set** (`src/ai/model-discovery.ts`) — with `OPENAI_BASE_URL`/config `openaiBaseUrl` configured, discovery dropped the stored OAuth credential, probed the proxy keyless (`auth rejected`), and the Codex second pass never fired (it only covered `api_key` primaries). OpenAI has no static fallback by design, so the picker showed zero models despite a valid login. New `codexCatalog` option queries the ChatGPT subscription catalog ignoring any custom base URL; `discoverModels` now appends it whenever the primary pass did not already return the OAuth catalog. The post-login report (`jeo auth login openai`) uses it too.
 
-### Verification and release status
-- A real, isolated source-jeo invocation of `jeo launch --model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills "Explain this repository"` exited **0**, reporting **30.5k input / 11 output tokens**. This verifies that CLI bridge invocation, not direct CCA Argon access or availability for every account.
-- Three independent code, TypeScript, and security reviewers identified six failure-path issues; test-first fixes and regression coverage are in progress. Final release gates and public publication are not yet claimed.
+### Verified
+- Live on a proxy-configured machine: `openai` rows went from 1 failed keyless row to keyless-fail + 7-model OAuth catalog; `providerPickEntries` returns 7 rows. `bun run typecheck` clean; discovery suites green including 2 new regression tests.
 
 ## [0.12.0] - 2026-10-16
 _Karpathy behavioral guardrails become always-on discipline, and skill routing gains an ECC single-harness inventory plus a Jev-style advisory router._

package/README.ja.md

@@ -107,11 +107,32 @@ jeo --tmux               # 独立した tmux セッションで実行
 > [!CAUTION]
 > **`/model <name>` で特定モデルを手動指定すると、そのセッション中ルーティングが固定されます。** プロンプトルーティング(`/route`)はモデルが手動固定されていない間のみ毎ターン再評価されます。`/model <name>` で特定モデルを選ぶとその選択が固定され、`/model auto`(ピンを完全に解除)を実行するか、`/route on`(ピンを消さずに優先度だけ上げる — `/route off` した瞬間ピンが復活)を実行するまでルーティングは切り替わりません。`roles.*` 未設定時に `defaultModel` へ確定フォールバックするのは `standard` ティアのみで、`high`/`complex` ティアは通常フォールバック前にライブでクレデンシャル済みの最強モデルを先に探索するため、未設定でも毎ターン別モデルに着地することがあります。**例外:** Antigravity または Gemini OAuth でクレデンシャルされたセッションは一つの資格情報で Anthropic/Google/OpenAI のモデルを再公開しており、その場合 `high`/`complex` は(必ずしも最強ではなく)会社ごとに1モデルへセッション単位で安定的に分散されるため、ターンごとに変わらずそのセッション中は固定されます。
 
-### Antigravity アカウント モデル ライブディスカバリー
+### Antigravity アカウントモデルと公式 agy ブリッジ
 
-**ライブ モデル ディスカバリー** — `/model provider antigravity` と `/agents <ロール> provider antigravity` は OAuth アカウントが Cloud Code Assist で実際に保有するモデルを表示します。ピッカーはアカウントが持つモデルのみを認め、すべてのアカウントが Argon を備えていることは保証しません。空のアカウント一覧は正直に報告され、静的なカタログでの代用はしません。アカウントスコープはセッションのリフレッシュ全体を通じて保持されます。
+**Cloud Code Assist (`antigravity/<CCA-id>`)** — `/model provider antigravity` と `/agents <ロール> provider antigravity` は、選択した jeo OAuth アカウントに対して Cloud Code Assist が返したモデルを表示します。ディスカバリーは `agentModelSorts`、`tieredModelIds`、`defaultAgentModelId` を統合し、アカウント別キャッシュは更新後も分離されます。空の一覧や取得失敗は静的カタログで置き換えず、そのまま報告します。CLI のモデルスラッグは CCA の通信上の ID ではなく、CLI で利用できても CCA 経由で Argon を直接呼び出せることを意味しません。
+
+**CCA の例:** `jeo auth login antigravity` でそのアカウントのモデルを取得し、キャッシュします。`/model antigravity/<CCA-id>` または `/agents executor provider antigravity` で選択するか、`/model save antigravity/<CCA-id>` で既定値を保存します。
+
+**公式 CLI (`agy/<official-cli-slug>`)** — `PATH` にインストールされた `agy` 実行ファイルを使う、別のフルエージェントバックエンドを明示的に選択します。認証は公式 CLI がサポートする独自の手順で行い、jeo はその認証情報を管理・取り込みしません。`agy models` が実際の一覧と正確なスラッグを提供し、静的カタログや CCA の別名は使いません。CLI のセッション・アカウントが jeo の OAuth アカウントと同一であるとは仮定せず、CLI のモデル一覧は jeo のアカウント別ディスクキャッシュではなく、現在のプロセス内にのみ保持します。空の一覧は空のまま、取得失敗はエラーとして報告し、モデルを捏造しません。
+
+```sh
+agy models
+jeo launch --model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills "Explain this repository"
+```
+
+自分の CLI が実際に返したスラッグを使用してください。対話型 jeo セッションで一覧を表示して選択し、必要なら永続的な既定値として保存できます:
+
+```text
+/model provider agy
+/model agy/gemini-4-argon-low
+/model save agy/gemini-4-argon-low
+```
+
+> [!WARNING]
+> **公式 agy エージェントが独自のツール・サンドボックス・権限・会話を管理します。jeo の承認はその内部ツール呼び出しを仲介しません。** `--plan` は CLI の計画モードを選ぶだけで、ツール承認を jeo に移しません。このブリッジは明示的な選択が必要なテキスト専用機能で、自動の生モデル・サブエージェントルーティングから除外されます。画像添付と、強制できない jeo 専用のツール・システム・ステップ数・thinking 制御は拒否します。
+
+jeo のセッション保存が有効な場合、再開にはそのセッションに保存された CLI 会話 ID を使用し、無関係な CLI の最新会話は再開しません。キャンセルと期限付きタイムアウトは CLI ターンを停止します。選択した正確なモデルと、クォータエラーを含む上流 CLI のエラーを保持し、CCA・別のモデル・別のアカウントへ暗黙にフォールバックしません。
 
-**例:** `jeo auth login antigravity` はアカウントの実際に利用可能なモデルを発見しキャッシュします。`/model antigravity/<モデル-id>` または `/agents executor provider antigravity` で選択し、セッション中に利用するか `/model save antigravity/<モデル-id>` で既定値として設定します。
 ## CLI コマンド
 
 `jeo --help` が正式な一覧です。よく使うものは次のとおり:
@@ -395,8 +416,8 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.12.2]** (2026-10-16) — Select Argon through the official agy full agent, with its own live catalog and session, separately from jeo's Cloud Code Assist backend.
 - **[0.12.1]** (2026-10-16) — Logged-in OpenAI subscription models were invisible on proxy-configured machines.
-- **[0.12.1]** (2026-10-16) — Explicitly select the official agy full agent with its own live model catalog and session, separate from jeo's Cloud Code Assist backend.
 - **[0.12.0]** (2026-10-16) — Karpathy behavioral guardrails become always-on discipline, and skill routing gains an ECC single-harness inventory plus a Jev-style advisory router.
 - **[0.11.6]** (2026-10-16) — Live Antigravity account model discovery now serves the actual account's available models instead of assuming static availability.
 

package/README.ko.md

@@ -107,11 +107,31 @@ jeo --tmux               # 독립 tmux 세션에서 실행
 
 > [!CAUTION]
 > **`/model <name>`으로 특정 모델을 수동 지정하면 그 세션 동안 라우팅이 고정됩니다.** 프롬프트 라우팅(`/route`)은 모델이 수동으로 고정되지 않은 동안만 매 턴 재평가됩니다. `/model <name>`으로 특정 모델을 선택하면 그 선택이 그대로 고정되며, `/model auto`(핀을 완전히 해제)를 실행하거나 `/route on`(핀을 지우지 않고 그보다 우선순위를 높임 — `/route off` 하는 즉시 핀이 다시 살아남)을 실행하기 전까지는 라우팅이 다시 전환되지 않습니다. `roles.*` 항목 미설정 시 `defaultModel`로 확정 폴백되는 건 `standard` 티어뿐이며, `high`/`complex` 티어는 보통 폴백 전에 실시간으로 크레덴셜된 가장 강력한 모델을 먼저 탐색하므로, 설정이 없어도 매 턴 다른 모델로 갈 수 있습니다. **예외:** Antigravity 또는 Gemini OAuth로 크레덴셜된 세션은 하나의 크레덴셜로 Anthropic/Google/OpenAI 모델을 함께 재노출하는데, 이 경우 `high`/`complex`는 (항상 최강 모델이 아니라) 회사당 모델 1개로 세션-안정적으로 분산되어, 턴마다 바뀌지 않고 해당 세션 내내 고정됩니다.
-### Antigravity 계정 모델 라이브 디스커버리
+### Antigravity 계정 모델과 공식 agy 브리지
 
-**실시간 모델 디스커버리** — `/model provider antigravity`와 `/agents <역할> provider antigravity`는 OAuth 계정이 Cloud Code Assist에서 실제로 보유한 모델을 보여줍니다. 피커는 계정이 가진 모델만 인정하며, 모든 계정이 Argon을 갖추었다고 보장하지 않습니다. 빈 계정 목록은 정직하게 보고되며, 정적 카탈로그로 대체하지 않습니다. 계정 스코프는 세션 리프레시 전체에서 보존됩니다.
+**Cloud Code Assist (`antigravity/<CCA-id>`)** — `/model provider antigravity`와 `/agents <역할> provider antigravity`는 선택한 jeo OAuth 계정에 대해 Cloud Code Assist가 반환한 모델을 보여줍니다. 디스커버리는 `agentModelSorts`, `tieredModelIds`, `defaultAgentModelId`를 합치며, 계정별 캐시는 리프레시 후에도 서로 격리됩니다. 빈 목록이나 디스커버리 실패는 정적 카탈로그로 대체하지 않고 그대로 보고합니다. CLI 모델 슬러그는 CCA 통신용 ID가 아니며, CLI에서 이용 가능하다고 해서 CCA를 통한 Argon 직접 호출이 지원된다는 뜻은 아닙니다.
 
-**예시:** `jeo auth login antigravity`는 계정의 실제 이용 가능한 모델을 발견하고 캐시합니다. `/model antigravity/<모델-id>` 또는 `/agents executor provider antigravity`로 선택한 뒤 세션 동안 사용하거나 `/model save antigravity/<모델-id>`로 기본값 설정.
+**CCA 예시:** `jeo auth login antigravity`로 해당 계정의 모델을 발견하고 캐시합니다. `/model antigravity/<CCA-id>` 또는 `/agents executor provider antigravity`로 선택하거나 `/model save antigravity/<CCA-id>`로 기본값을 저장합니다.
+
+**공식 CLI (`agy/<official-cli-slug>`)** — `PATH`에 설치된 `agy` 실행 파일을 사용하는 별도의 전체 에이전트 백엔드를 명시적으로 선택합니다. 인증은 공식 CLI가 지원하는 자체 절차로 진행하며, jeo는 그 자격 증명을 관리하거나 가져오지 않습니다. `agy models`가 실제 목록과 정확한 슬러그를 제공하며, 정적 카탈로그나 CCA 별칭을 사용하지 않습니다. CLI 세션·계정과 jeo OAuth 계정이 같다고 가정하지 않으며, CLI 모델 목록은 jeo의 계정별 디스크 캐시 대신 현재 프로세스에만 보관합니다. 빈 목록은 빈 상태로, 디스커버리 실패는 오류로 보고하며 모델을 만들어 넣지 않습니다.
+
+```sh
+agy models
+jeo launch --model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills "Explain this repository"
+```
+
+자신의 CLI가 실제로 반환한 슬러그를 사용하세요. 대화형 jeo 세션에서 목록을 보고 선택한 뒤, 필요하면 영구 기본값으로 저장합니다:
+
+```text
+/model provider agy
+/model agy/gemini-4-argon-low
+/model save agy/gemini-4-argon-low
+```
+
+> [!WARNING]
+> **공식 agy 에이전트가 자체 도구·샌드박스·권한·대화를 관리합니다. jeo의 승인은 그 내부 도구 호출을 중재하지 않습니다.** `--plan`은 CLI의 계획 모드를 선택할 뿐, 도구 승인 권한을 jeo로 넘기지 않습니다. 이 브리지는 명시적 선택이 필요한 텍스트 전용 기능이며, 자동 원시 모델·서브에이전트 라우팅에서 제외됩니다. 이미지 첨부와 강제할 수 없는 jeo 전용 도구·시스템·단계 수·thinking 제어는 거부합니다.
+
+jeo 세션 저장이 켜져 있으면 재개 시 해당 세션에 저장된 CLI 대화 ID를 사용하며, 무관한 CLI 최신 대화를 이어받지 않습니다. 취소와 제한된 타임아웃은 CLI 턴을 중단합니다. 선택한 정확한 모델과 쿼터 오류를 포함한 상위 CLI 오류를 보존하며, CCA·다른 모델·다른 계정으로 조용히 폴백하지 않습니다.
 
 ## CLI 명령
 
@@ -397,8 +417,8 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.12.2]** (2026-10-16) — Select Argon through the official agy full agent, with its own live catalog and session, separately from jeo's Cloud Code Assist backend.
 - **[0.12.1]** (2026-10-16) — Logged-in OpenAI subscription models were invisible on proxy-configured machines.
-- **[0.12.1]** (2026-10-16) — Explicitly select the official agy full agent with its own live model catalog and session, separate from jeo's Cloud Code Assist backend.
 - **[0.12.0]** (2026-10-16) — Karpathy behavioral guardrails become always-on discipline, and skill routing gains an ECC single-harness inventory plus a Jev-style advisory router.
 - **[0.11.6]** (2026-10-16) — Live Antigravity account model discovery now serves the actual account's available models instead of assuming static availability.
 

package/README.md

@@ -112,11 +112,31 @@ Inside the `jeo` REPL (Tab autocompletes; `/` opens the palette).
 
 > [!CAUTION]
 > **`/model <name>` locks routing for the rest of the session.** Prompt routing (`/route`) only re-evaluates per turn while no model is manually pinned. Picking a specific model via `/model <name>` freezes that choice — routing will *not* switch away from it again until you run `/model auto` (which clears the pin), or `/route on` (which *outranks* an active pin without clearing it — the pin reasserts itself the moment you run `/route off`). Missing a `roles.*` entry only guarantees a `defaultModel` fallback on the `standard` tier; the `high`/`complex` tiers otherwise scan for the strongest live-credentialed model, so they can still land on a different model each turn even when unconfigured. **Exception:** an Antigravity- or Gemini-OAuth-credentialed session re-exports Anthropic/Google/OpenAI models under one credential — `high`/`complex` there instead session-stably spread across one model per company (not necessarily the strongest), so the pick stays fixed for that session rather than varying turn to turn.
-### Antigravity account model discovery
+### Antigravity account models and the official agy bridge
 
-**Live model discovery** — `/model provider antigravity` and `/agents <role> provider antigravity` show your OAuth account's actual available models from Cloud Code Assist. The picker honors only models your account holds; no Argon is guaranteed for every account. Empty account lists are reported honestly instead of falling back to static catalogs. Account scope is preserved across session refreshes.
+**Cloud Code Assist (`antigravity/<CCA-id>`)** — `/model provider antigravity` and `/agents <role> provider antigravity` show the models returned by Cloud Code Assist for the selected jeo OAuth account. Discovery combines `agentModelSorts`, `tieredModelIds`, and `defaultAgentModelId`; account-scoped caches remain isolated across refreshes. Empty or failed discovery is reported honestly, without a static catalog fallback. CLI model slugs are not CCA wire IDs, and CLI availability does not establish direct CCA Argon support.
 
-**Example:** `jeo auth login antigravity` discovers and caches your account's available models. Pick one with `/model antigravity/<model-id>` or `/agents executor provider antigravity`, then use it for the session or persist it as default via `/model save antigravity/<model-id>`.
+**CCA example:** `jeo auth login antigravity` discovers and caches that account's models. Select `/model antigravity/<CCA-id>` or `/agents executor provider antigravity`, or persist the default with `/model save antigravity/<CCA-id>`.
+
+**Official CLI (`agy/<official-cli-slug>`)** — explicitly opt in to a separate full-agent backend using the installed `agy` executable on `PATH`. Authenticate through the official CLI's own supported workflow; jeo does not manage or import its credentials. `agy models` supplies the live list and exact slugs, not a static catalog or CCA aliases. Its session/account is not assumed to match jeo's OAuth account, and its model catalog stays process-local rather than using jeo's account-scoped disk cache. Empty lists remain empty; discovery failures are shown, not replaced with invented models.
+
+```sh
+agy models
+jeo launch --model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills "Explain this repository"
+```
+
+Use a slug actually returned by your CLI. In an interactive jeo session, browse, select, and optionally save it as the persistent default:
+
+```text
+/model provider agy
+/model agy/gemini-4-argon-low
+/model save agy/gemini-4-argon-low
+```
+
+> [!WARNING]
+> **The official agy agent owns its tools, sandbox, permissions, and conversation. jeo's approvals do not mediate its inner tool calls.** `--plan` selects the CLI's plan mode; it does not transfer tool approval to jeo. This bridge is opt-in and text-only, is excluded from automatic raw-model/subagent routing, and rejects image attachments and jeo-only tool/system/step/thinking controls it cannot enforce.
+
+When jeo session persistence is enabled, resume uses that session's saved CLI conversation ID, never the CLI's unrelated latest conversation. Cancellation and bounded timeouts stop the CLI turn. The exact selected model and upstream errors, including quota failures, are preserved; no silent fallback to CCA, another model, or another account occurs.
 
 ## CLI commands
 
@@ -389,8 +409,8 @@ Huge thanks to [gajae-code](https://github.com/Yeachan-Heo/gajae-code) for the i
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.12.2]** (2026-10-16) — Select Argon through the official agy full agent, with its own live catalog and session, separately from jeo's Cloud Code Assist backend.
 - **[0.12.1]** (2026-10-16) — Logged-in OpenAI subscription models were invisible on proxy-configured machines.
-- **[0.12.1]** (2026-10-16) — Explicitly select the official agy full agent with its own live model catalog and session, separate from jeo's Cloud Code Assist backend.
 - **[0.12.0]** (2026-10-16) — Karpathy behavioral guardrails become always-on discipline, and skill routing gains an ECC single-harness inventory plus a Jev-style advisory router.
 - **[0.11.6]** (2026-10-16) — Live Antigravity account model discovery now serves the actual account's available models instead of assuming static availability.
 

package/README.zh.md

@@ -107,11 +107,32 @@ jeo --tmux               # 在独立 tmux 会话中运行
 > [!CAUTION]
 > **通过 `/model <name>` 手动指定模型后，路由会在本会话内保持锁定。** Prompt routing(`/route`)只在没有手动锁定模型时才会逐轮重新评估。用 `/model <name>` 选定具体模型后，该选择会被锁定 — 直到你运行 `/model auto`(彻底解除锁定)，或运行 `/route on`(不会清除锁定，只是优先级更高 — 一旦运行 `/route off`，锁定会立刻恢复)之前，路由都不会再切换。未配置 `roles.*` 条目时，只有 `standard` 层级会确定性地退回到 `defaultModel`；`high`/`complex` 层级通常会先实时扫描已配置凭证中最强的可用模型再决定是否回退，所以即使未配置，也可能每轮落到不同的模型上。**例外:** 通过 Antigravity 或 Gemini OAuth 授权的会话会用同一个凭证重新导出 Anthropic/Google/OpenAI 的模型 —此时 `high`/`complex` 会按公司各选一个模型、以会话为单位稳定分布(不一定是最强的那个)，因此在同一会话内保持固定，而不是逐轮变化。
 
-### Antigravity 账户 模型 实时发现
+### Antigravity 账户模型与官方 agy 桥接
 
-**实时模型发现** — `/model provider antigravity` 与 `/agents <角色> provider antigravity` 会显示你的 OAuth 账户在 Cloud Code Assist 实际拥有的模型。选择器仅认可账户持有的模型；并不保证每个账户都备有 Argon。空的账户列表会被诚实报告，不会被静态目录代用。账户范围在会话刷新全程得以保留。
+**Cloud Code Assist (`antigravity/<CCA-id>`)** — `/model provider antigravity` 与 `/agents <角色> provider antigravity` 显示 Cloud Code Assist 为所选 jeo OAuth 账户返回的模型。发现过程合并 `agentModelSorts`、`tieredModelIds` 和 `defaultAgentModelId`，账户级缓存在刷新后仍保持隔离。空列表或发现失败会如实报告，不会退回静态目录。CLI 模型 slug 不是 CCA 的通信 ID，CLI 中可用也不代表支持通过 CCA 直接调用 Argon。
+
+**CCA 示例：** `jeo auth login antigravity` 会发现并缓存该账户的模型。通过 `/model antigravity/<CCA-id>` 或 `/agents executor provider antigravity` 选择，或通过 `/model save antigravity/<CCA-id>` 保存默认值。
+
+**官方 CLI (`agy/<official-cli-slug>`)** — 显式选择一个独立的完整代理后端，使用已安装在 `PATH` 上的 `agy` 可执行文件。认证通过官方 CLI 自身支持的流程管理；jeo 不管理或导入其凭证。`agy models` 提供真实列表和准确的 slug，不使用静态目录或 CCA 别名。不能假定 CLI 会话、账户与 jeo OAuth 账户相同；CLI 模型列表仅保存在当前进程内，不使用 jeo 的账户级磁盘缓存。空列表保持为空，发现失败则显示错误，不会编造模型。
+
+```sh
+agy models
+jeo launch --model agy/gemini-4-argon-low --plan --no-tui --no-session --no-skills "Explain this repository"
+```
+
+请使用自己的 CLI 实际返回的 slug。在交互式 jeo 会话中查看列表、选择模型，并按需保存为持久默认值：
+
+```text
+/model provider agy
+/model agy/gemini-4-argon-low
+/model save agy/gemini-4-argon-low
+```
+
+> [!WARNING]
+> **官方 agy 代理自行管理工具、沙箱、权限和对话。jeo 的审批不介入其内部工具调用。** `--plan` 只选择 CLI 的计划模式，不会将工具审批权交给 jeo。此桥接必须显式选择，仅支持文本，不参与自动原始模型或子代理路由；图片附件以及无法强制执行的 jeo 专用工具、系统、步骤数、thinking 控制会被拒绝。
+
+启用 jeo 会话持久化时，恢复会使用该会话保存的 CLI 对话 ID，而不是 CLI 中无关的最近对话。取消和有界超时会停止 CLI 轮次。准确保留所选模型及上游 CLI 错误，包括配额错误；不会静默回退到 CCA、其他模型或其他账户。
 
-**示例:** `jeo auth login antigravity` 会发现并缓存你账户的实际可用模型。选择: `/model antigravity/<模型-id>` 或 `/agents executor provider antigravity`，之后在本会话内使用，或通过 `/model save antigravity/<模型-id>` 设为默认值。
 ## CLI 命令
 
 `jeo --help` 是权威列表；下面是你最常用到的:
@@ -393,8 +414,8 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.12.2]** (2026-10-16) — Select Argon through the official agy full agent, with its own live catalog and session, separately from jeo's Cloud Code Assist backend.
 - **[0.12.1]** (2026-10-16) — Logged-in OpenAI subscription models were invisible on proxy-configured machines.
-- **[0.12.1]** (2026-10-16) — Explicitly select the official agy full agent with its own live model catalog and session, separate from jeo's Cloud Code Assist backend.
 - **[0.12.0]** (2026-10-16) — Karpathy behavioral guardrails become always-on discipline, and skill routing gains an ECC single-harness inventory plus a Jev-style advisory router.
 - **[0.11.6]** (2026-10-16) — Live Antigravity account model discovery now serves the actual account's available models instead of assuming static availability.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",