pennyrouter 0.3.24 → 0.3.26

package/README.md

@@ -87,7 +87,8 @@ of `npx pennyrouter install`; to install or refresh it separately, run:
 npx pennyrouter compare
 ```
 
-Then use `penny-compare` for a side-by-side run or `penny-session` for one Penny-routed session.
+The installer puts `penny-compare` and `penny-session` on PATH alongside the `penny` launcher.
+Use `penny-compare` for a side-by-side run or `penny-session` for one Penny-routed session.
 The bundle requires `tmux`, Python 3.10+, and the harnesses being compared.
 
 On macOS and Linux, a normal install adds a small `penny` launcher under `~/.local/bin`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.3.24",
+  "version": "0.3.26",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {

package/src/cli.js

@@ -19,7 +19,13 @@ import {
 } from "./harnesses/claude-code.js";
 import { clineHarness } from "./harnesses/cline.js";
 import { codeGptHarness } from "./harnesses/codegpt.js";
-import { codexHarness, detectCodexChatgptAuth, isHostedPennyRouterGateway } from "./harnesses/codex.js";
+import {
+  codexHarness,
+  detectCodexChatgptAuth,
+  isCodexSubscriptionAuthGateway,
+  isHostedPennyRouterGateway,
+  isLocalPennyRouterGateway,
+} from "./harnesses/codex.js";
 import { fetchOpenCodeModels, opencodeHarness } from "./harnesses/opencode.js";
 import { windsurfHarness } from "./harnesses/windsurf.js";
 import { zedHarness } from "./harnesses/zed.js";
@@ -39,7 +45,10 @@ import {
 } from "./session.js";
 
 async function codexNativeAuthAvailable({ gatewayBaseUrl, apiKey, localAuth }) {
-  if (!isHostedPennyRouterGateway(gatewayBaseUrl)) return false;
+  if (!isCodexSubscriptionAuthGateway(gatewayBaseUrl)) return false;
+  // A local gateway should use Codex's detected login as the opt-in. Do not infer
+  // subscription auth from some other upstream credential stored on the local gateway.
+  if (isLocalPennyRouterGateway(gatewayBaseUrl)) return Boolean(localAuth);
   const capabilities = await fetchGatewayCapabilities({ gatewayBaseUrl, apiKey });
   const hasOpenAiCredential = Array.isArray(capabilities?.upstream_credentials)
     && capabilities.upstream_credentials.includes("openai_api");

package/src/harnesses/codex.js

@@ -103,12 +103,13 @@ export function renderCodexConfig(
   text,
   { apiKey, gatewayBaseUrl, subscriptionAuth, surface = "codex-terminal" },
 ) {
-  // Native Codex subscription/WebSocket auth is valid only through PennyRouter's hosted
-  // cloud gateway. Local, private, proxy, and other custom gateways must always use the
-  // ordinary PennyRouter bearer provider, even when Codex itself is logged into ChatGPT.
+  // Native Codex ChatGPT subscription auth is allowed through the hosted gateway and the
+  // explicitly supported local development gateway. Other custom gateways use Penny auth.
   // Keep this guard at the final renderer so every install/update/desktop path gets the
   // same safety rule regardless of which profile selected it.
-  subscriptionAuth = Boolean(subscriptionAuth && isHostedPennyRouterGateway(gatewayBaseUrl));
+  subscriptionAuth = Boolean(
+    subscriptionAuth && isCodexSubscriptionAuthGateway(gatewayBaseUrl),
+  );
   const clean = removeManagedCodexConfig(text, { removeRootProvider: true }).trimEnd();
   if (new RegExp(`^\\s*\\[model_providers\\.${escapeRegex(PROVIDER_ID)}\\]\\s*$`, "m").test(clean)) {
     throw new Error(
@@ -156,6 +157,20 @@ export function isHostedPennyRouterGateway(gatewayBaseUrl) {
   }
 }
 
+export function isLocalPennyRouterGateway(gatewayBaseUrl) {
+  try {
+    const url = new URL(String(gatewayBaseUrl));
+    return url.hostname.toLowerCase() === "localhost" && url.port === "8400";
+  } catch {
+    return false;
+  }
+}
+
+export function isCodexSubscriptionAuthGateway(gatewayBaseUrl) {
+  return isHostedPennyRouterGateway(gatewayBaseUrl)
+    || isLocalPennyRouterGateway(gatewayBaseUrl);
+}
+
 export function removeManagedCodexConfig(text, { removeRootProvider = false } = {}) {
   let out = String(text || "").replace(
     new RegExp(`${escapeRegex(MANAGED_START)}[\\s\\S]*?${escapeRegex(MANAGED_END)}\\n?`, "g"),

package/src/launch.js

@@ -2,6 +2,7 @@ import { spawn, spawnSync } from "node:child_process";
 import {
   chmod,
   cp,
+  lstat,
   mkdtemp,
   mkdir,
   readFile,
@@ -23,7 +24,10 @@ import {
   upgradeClaudeCodeModelValue,
   writeClaudeCodeModelPresentation,
 } from "./harnesses/claude-code.js";
-import { renderCodexConfig } from "./harnesses/codex.js";
+import {
+  isCodexSubscriptionAuthGateway,
+  renderCodexConfig,
+} from "./harnesses/codex.js";
 import {
   OPENCODE_MODEL_CHOICES,
   fetchOpenCodeModels,
@@ -284,6 +288,24 @@ export async function installPennyCompare() {
     await cp(join(source, entry), join(destination, entry), { recursive: true, force: true });
   }
   await mkdir(join(destination, "reports"), { recursive: true, mode: 0o700 });
+  await mkdir(pennyBinDir(), { recursive: true, mode: 0o755 });
+  for (const entry of ["penny-compare", "penny-session", "penny-compare-viewer"]) {
+    const link = join(pennyBinDir(), entry);
+    const target = join(destination, entry);
+    let replace = false;
+    try {
+      replace = (await lstat(link)).isSymbolicLink();
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+    if (replace) await unlink(link);
+    try {
+      await symlink(target, link);
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      // Leave a user-owned regular file in place rather than overwriting it.
+    }
+  }
   return { supported: true, installed: true, path: destination };
 }
 
@@ -421,16 +443,12 @@ export async function installPennyRuntime({ updatePath = true } = {}) {
 }
 
 export function renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
-  // Private/proxy/custom gateways never use Codex's native subscription/WebSocket lane.
-  // Apply the same hosted-only rule as the Codex config renderer at this launch-profile
+  // Native ChatGPT subscription auth is allowed for the hosted gateway and the explicitly
+  // supported local development gateway. Apply the same rule as the config renderer at this
   // boundary, since this path is what bare `penny codex` selects at runtime.
-  try {
-    subscriptionAuth = Boolean(
-      subscriptionAuth && new URL(String(gatewayBaseUrl)).hostname.toLowerCase() === "api.pennyrouter.com",
-    );
-  } catch {
-    subscriptionAuth = false;
-  }
+  subscriptionAuth = Boolean(
+    subscriptionAuth && isCodexSubscriptionAuthGateway(gatewayBaseUrl),
+  );
   if (subscriptionAuth) {
     return [
       CODEX_PROFILE_MARKER,

package/src/launch.test.js

@@ -20,6 +20,8 @@ import {
   isCodexDesktopRunning,
   loadPennyConfig,
   pennyConfigPath,
+  pennyCompareDir,
+  pennyBinDir,
   pennyRuntimeDir,
   pennyShimPath,
   readClaudeDesktopCredential,
@@ -100,6 +102,10 @@ async function main() {
     assert.equal(second.changed, false);
     assert.equal(await fileMode(pennyShimPath()), 0o755);
     assert.ok(fs.existsSync(path.join(pennyRuntimeDir(), "bin", "penny.js")));
+    assert.equal(
+      fs.realpathSync(path.join(pennyBinDir(), "penny-compare")),
+      fs.realpathSync(path.join(pennyCompareDir(), "penny-compare")),
+    );
     assert.ok(!fs.existsSync(staleSkill), "runtime upgrade removes stale plugin files");
     const rc = fs.readFileSync(path.join(home, ".zshrc"), "utf8");
     assert.equal((rc.match(/>>> pennyrouter PATH >>>/g) || []).length, 1);