pennyrouter 0.3.25 → 0.3.26

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.3.25",
+  "version": "0.3.26",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {

package/src/cli.js

@@ -19,7 +19,13 @@ import {
 } from "./harnesses/claude-code.js";
 import { clineHarness } from "./harnesses/cline.js";
 import { codeGptHarness } from "./harnesses/codegpt.js";
-import { codexHarness, detectCodexChatgptAuth, isHostedPennyRouterGateway } from "./harnesses/codex.js";
+import {
+  codexHarness,
+  detectCodexChatgptAuth,
+  isCodexSubscriptionAuthGateway,
+  isHostedPennyRouterGateway,
+  isLocalPennyRouterGateway,
+} from "./harnesses/codex.js";
 import { fetchOpenCodeModels, opencodeHarness } from "./harnesses/opencode.js";
 import { windsurfHarness } from "./harnesses/windsurf.js";
 import { zedHarness } from "./harnesses/zed.js";
@@ -39,7 +45,10 @@ import {
 } from "./session.js";
 
 async function codexNativeAuthAvailable({ gatewayBaseUrl, apiKey, localAuth }) {
-  if (!isHostedPennyRouterGateway(gatewayBaseUrl)) return false;
+  if (!isCodexSubscriptionAuthGateway(gatewayBaseUrl)) return false;
+  // A local gateway should use Codex's detected login as the opt-in. Do not infer
+  // subscription auth from some other upstream credential stored on the local gateway.
+  if (isLocalPennyRouterGateway(gatewayBaseUrl)) return Boolean(localAuth);
   const capabilities = await fetchGatewayCapabilities({ gatewayBaseUrl, apiKey });
   const hasOpenAiCredential = Array.isArray(capabilities?.upstream_credentials)
     && capabilities.upstream_credentials.includes("openai_api");

package/src/harnesses/codex.js

@@ -103,12 +103,13 @@ export function renderCodexConfig(
   text,
   { apiKey, gatewayBaseUrl, subscriptionAuth, surface = "codex-terminal" },
 ) {
-  // Native Codex subscription/WebSocket auth is valid only through PennyRouter's hosted
-  // cloud gateway. Local, private, proxy, and other custom gateways must always use the
-  // ordinary PennyRouter bearer provider, even when Codex itself is logged into ChatGPT.
+  // Native Codex ChatGPT subscription auth is allowed through the hosted gateway and the
+  // explicitly supported local development gateway. Other custom gateways use Penny auth.
   // Keep this guard at the final renderer so every install/update/desktop path gets the
   // same safety rule regardless of which profile selected it.
-  subscriptionAuth = Boolean(subscriptionAuth && isHostedPennyRouterGateway(gatewayBaseUrl));
+  subscriptionAuth = Boolean(
+    subscriptionAuth && isCodexSubscriptionAuthGateway(gatewayBaseUrl),
+  );
   const clean = removeManagedCodexConfig(text, { removeRootProvider: true }).trimEnd();
   if (new RegExp(`^\\s*\\[model_providers\\.${escapeRegex(PROVIDER_ID)}\\]\\s*$`, "m").test(clean)) {
     throw new Error(
@@ -156,6 +157,20 @@ export function isHostedPennyRouterGateway(gatewayBaseUrl) {
   }
 }
 
+export function isLocalPennyRouterGateway(gatewayBaseUrl) {
+  try {
+    const url = new URL(String(gatewayBaseUrl));
+    return url.hostname.toLowerCase() === "localhost" && url.port === "8400";
+  } catch {
+    return false;
+  }
+}
+
+export function isCodexSubscriptionAuthGateway(gatewayBaseUrl) {
+  return isHostedPennyRouterGateway(gatewayBaseUrl)
+    || isLocalPennyRouterGateway(gatewayBaseUrl);
+}
+
 export function removeManagedCodexConfig(text, { removeRootProvider = false } = {}) {
   let out = String(text || "").replace(
     new RegExp(`${escapeRegex(MANAGED_START)}[\\s\\S]*?${escapeRegex(MANAGED_END)}\\n?`, "g"),

package/src/launch.js

@@ -24,7 +24,10 @@ import {
   upgradeClaudeCodeModelValue,
   writeClaudeCodeModelPresentation,
 } from "./harnesses/claude-code.js";
-import { renderCodexConfig } from "./harnesses/codex.js";
+import {
+  isCodexSubscriptionAuthGateway,
+  renderCodexConfig,
+} from "./harnesses/codex.js";
 import {
   OPENCODE_MODEL_CHOICES,
   fetchOpenCodeModels,
@@ -440,16 +443,12 @@ export async function installPennyRuntime({ updatePath = true } = {}) {
 }
 
 export function renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
-  // Private/proxy/custom gateways never use Codex's native subscription/WebSocket lane.
-  // Apply the same hosted-only rule as the Codex config renderer at this launch-profile
+  // Native ChatGPT subscription auth is allowed for the hosted gateway and the explicitly
+  // supported local development gateway. Apply the same rule as the config renderer at this
   // boundary, since this path is what bare `penny codex` selects at runtime.
-  try {
-    subscriptionAuth = Boolean(
-      subscriptionAuth && new URL(String(gatewayBaseUrl)).hostname.toLowerCase() === "api.pennyrouter.com",
-    );
-  } catch {
-    subscriptionAuth = false;
-  }
+  subscriptionAuth = Boolean(
+    subscriptionAuth && isCodexSubscriptionAuthGateway(gatewayBaseUrl),
+  );
   if (subscriptionAuth) {
     return [
       CODEX_PROFILE_MARKER,