pi-openai-toolkit 0.13.1 → 0.14.0

package/src/context-management/codex-provider.ts

@@ -8,6 +8,7 @@ import {
 	type CodexContextProvider,
 	type CodexContextProviderResolution,
 } from "./types";
+import { ASTRA_MODEL_ID } from "../types";
 
 const CODEX_PROVIDER = "openai-codex";
 const CODEX_API = "openai-codex-responses";
@@ -31,11 +32,12 @@ export function isNativeCodexModel(
 
 export function isCodexGatewayModel(
 	model: ExtensionContext["model"] | undefined,
-	allowlist: readonly string[] = [],
 ): boolean {
+	// Only the Astra SKU has a verified Codex-compatible gateway relay path
+	// (NEWapi + CLIProxyAPI passthrough); other gateway models stay on remote
+	// compaction v2. Matching is on the bare model id, by design.
 	if (!model || model.provider !== GATEWAY_PROVIDER || model.api !== GATEWAY_API) return false;
-	const spec = `${model.provider}/${model.id}`;
-	return allowlist.some((entry) => entry.trim() === spec);
+	return model.id === ASTRA_MODEL_ID;
 }
 
 export function normalizeCodexBackendBaseUrl(baseUrl: string | undefined | null): string | undefined {
@@ -170,7 +172,6 @@ export function codexContextProviderHeaders(
 export async function resolveCodexContextProvider(
 	ctx: ExtensionContext,
 	modelOverride: ExtensionContext["model"] = ctx.model,
-	gatewayAllowlist: readonly string[] = [],
 ): Promise<CodexContextProviderResolution> {
 	const model = modelOverride;
 	const descriptor = {
@@ -182,7 +183,7 @@ export async function resolveCodexContextProvider(
 	if (!model) return { ok: false, reason: "unsupported-model" };
 
 	const isNative = isNativeCodexModel(model);
-	const isGateway = isCodexGatewayModel(model, gatewayAllowlist);
+	const isGateway = isCodexGatewayModel(model);
 	if (!isNative && !isGateway) {
 		return {
 			ok: false,

package/src/context-management/history-notes.ts

@@ -78,12 +78,11 @@ export async function callHistoryNotesBackend(
 		mode: "tokens",
 		limit: TOOL_OUTPUT_TOKEN_LIMIT,
 	},
-	gatewayAllowlist: readonly string[] = [],
 ): Promise<HistoryNotesResult> {
 	const timeoutSignal = AbortSignal.timeout(BACKEND_TIMEOUT_MS);
 	if (signal?.aborted) return { ok: false, reason: "aborted" };
 	const requestSignal = signal ? AbortSignal.any([signal, timeoutSignal]) : timeoutSignal;
-	const providerResult = await resolveProviderWithDeadline(ctx, requestSignal, timeoutSignal, gatewayAllowlist);
+	const providerResult = await resolveProviderWithDeadline(ctx, requestSignal, timeoutSignal);
 	if (providerResult === "aborted") return { ok: false, reason: "aborted" };
 	if (providerResult === "timeout") return { ok: false, reason: "backend-timeout" };
 	const provider = providerResult;
@@ -135,7 +134,6 @@ async function resolveProviderWithDeadline(
 	ctx: ExtensionContext,
 	requestSignal: AbortSignal,
 	timeoutSignal: AbortSignal,
-	gatewayAllowlist: readonly string[],
 ): Promise<Awaited<ReturnType<typeof resolveCodexContextProvider>> | "aborted" | "timeout"> {
 	if (requestSignal.aborted) return timeoutSignal.aborted ? "timeout" : "aborted";
 	return new Promise((resolve) => {
@@ -148,7 +146,7 @@ async function resolveProviderWithDeadline(
 		};
 		const onAbort = () => finish(timeoutSignal.aborted ? "timeout" : "aborted");
 		requestSignal.addEventListener("abort", onAbort, { once: true });
-		resolveCodexContextProvider(ctx, ctx.model, gatewayAllowlist).then(
+		resolveCodexContextProvider(ctx, ctx.model).then(
 			(value) => finish(value),
 			() => finish({ ok: false, reason: "auth-resolution-failed" }),
 		);
@@ -158,7 +156,6 @@ async function resolveProviderWithDeadline(
 export async function loadHistoryNotesThreadHint(
 	ctx: ExtensionContext,
 	signal?: AbortSignal,
-	gatewayAllowlist: readonly string[] = [],
 ): Promise<string | undefined> {
 	const result = await callHistoryNotesBackend(
 		THREAD_HINT_ENDPOINT,
@@ -166,7 +163,6 @@ export async function loadHistoryNotesThreadHint(
 		ctx,
 		signal,
 		{ mode: "bytes", limit: THREAD_HINT_MAX_BYTES },
-		gatewayAllowlist,
 	);
 	if (!result.ok) {
 		if (result.reason === "aborted") throw new Error("Remote context hint request was aborted");
@@ -182,7 +178,6 @@ export async function executeHistoryNotesTool(
 	params: Record<string, unknown>,
 	ctx: ExtensionContext,
 	signal?: AbortSignal,
-	gatewayAllowlist: readonly string[] = [],
 ): Promise<AgentToolResult<CodexHistoryNotesDetails>> {
 	const endpoint = namespace === "history"
 		? HISTORY_ENDPOINTS[action as HistoryAction]
@@ -195,7 +190,6 @@ export async function executeHistoryNotesTool(
 		ctx,
 		signal,
 		undefined,
-		gatewayAllowlist,
 	);
 	if (!result.ok) throw new Error(formatHistoryNotesFailure(result.reason, result.status));
 	const modelResult = { ...result.value };

package/src/context-management/tools.ts

@@ -85,10 +85,7 @@ export function createContextManagementTools(
 	pi: ExtensionAPI,
 	manager: CodexContextWindowManager,
 	isActive: (ctx: ExtensionContext) => Promise<boolean> | boolean,
-	gatewayAllowlist: readonly string[] | (() => readonly string[]) = [],
 ): ContextManagementTools {
-	const getGatewayAllowlist = (): readonly string[] =>
-		typeof gatewayAllowlist === "function" ? gatewayAllowlist() : gatewayAllowlist;
 	const assertActive = async (ctx: ExtensionContext): Promise<void> => {
 		if (!(await isActive(ctx))) throw new Error("remote-context-inactive");
 	};
@@ -145,7 +142,7 @@ export function createContextManagementTools(
 		],
 		execute: async (_id, params, _signal, _update, ctx) => {
 			await assertActive(ctx);
-			return executeHistoryNotesTool("history", params.action, params as Record<string, unknown>, ctx, _signal, getGatewayAllowlist());
+			return executeHistoryNotesTool("history", params.action, params as Record<string, unknown>, ctx, _signal);
 		},
 	};
 	const notes: ToolDefinition<typeof NOTES_PARAMETERS, CodexHistoryNotesDetails> = {
@@ -164,7 +161,7 @@ export function createContextManagementTools(
 		executionMode: "sequential",
 		execute: async (_id, params, _signal, _update, ctx) => {
 			await assertActive(ctx);
-			return executeHistoryNotesTool("notes", params.action, params as Record<string, unknown>, ctx, _signal, getGatewayAllowlist());
+			return executeHistoryNotesTool("notes", params.action, params as Record<string, unknown>, ctx, _signal);
 		},
 	};
 	return { newContext, getContextRemaining, history, notes };
@@ -296,10 +293,9 @@ export function registerContextManagementTools(
 	pi: ExtensionAPI,
 	manager: CodexContextWindowManager,
 	isActive: (ctx: ExtensionContext) => Promise<boolean> | boolean,
-	gatewayAllowlist: readonly string[] | (() => readonly string[]) = [],
 ): ContextManagementToolController {
 	const controller = new ContextManagementToolController(pi);
-	controller.register(createContextManagementTools(pi, manager, isActive, gatewayAllowlist));
+	controller.register(createContextManagementTools(pi, manager, isActive));
 	return controller;
 }
 

package/src/context-management/window-manager.ts

@@ -58,15 +58,9 @@ export class CodexContextWindowManager {
 	private rolloverPending = false;
 	private trimPendingWindowId: string | undefined;
 	private readonly loadThreadHint: ThreadHintLoader;
-	private readonly getGatewayAllowlist: () => readonly string[];
 
-	constructor(
-		loadThreadHint?: ThreadHintLoader,
-		gatewayAllowlist: readonly string[] | (() => readonly string[]) = [],
-	) {
-		this.getGatewayAllowlist = typeof gatewayAllowlist === "function" ? gatewayAllowlist : () => gatewayAllowlist;
-		this.loadThreadHint = loadThreadHint ?? ((ctx, signal) =>
-			loadHistoryNotesThreadHint(ctx, signal, this.getGatewayAllowlist()));
+	constructor(loadThreadHint?: ThreadHintLoader) {
+		this.loadThreadHint = loadThreadHint ?? ((ctx, signal) => loadHistoryNotesThreadHint(ctx, signal));
 	}
 
 	reset(): void {

package/src/extension-runtime.ts

@@ -109,7 +109,7 @@ async function isRemoteContextActive(
 	model: ExtensionContext["model"] = ctx.model,
 ): Promise<boolean> {
 	if (!config.enabled || config.contextManagement !== "remote") return false;
-	const resolution = await resolveCodexContextProvider(ctx, model, config.codexGatewayModels);
+	const resolution = await resolveCodexContextProvider(ctx, model);
 	return resolution.ok;
 }
 
@@ -117,7 +117,8 @@ function isCodexContextModel(
 	model: ExtensionContext["model"] | undefined,
 	config: CompactionConfig,
 ): boolean {
-	return isNativeCodexModel(model) || isCodexGatewayModel(model, config.codexGatewayModels);
+	return config.contextManagement === "remote"
+		&& (isNativeCodexModel(model) || isCodexGatewayModel(model));
 }
 
 function notifyRemoteContextFailure(ctx: ExtensionContext, reason: string): void {
@@ -369,7 +370,7 @@ async function handleSessionBeforeCompact(
 
 	// Remote Context management owns this eligible Codex session. It persists a
 	// no-summary boundary and deliberately never calls remote_compaction_v2.
-	if (config.contextManagement === "remote" && isCodexContextModel(ctx.model, config)) {
+	if (isCodexContextModel(ctx.model, config)) {
 		if (await remoteContextActive(ctx, config)) {
 			try {
 				dependencies.contextWindows.synchronize(ctx);
@@ -598,7 +599,7 @@ async function handleBeforeProviderRequest(
 			return undefined;
 		}
 	}
-	if (config.contextManagement === "remote" && isCodexContextModel(ctx.model, config)) {
+	if (isCodexContextModel(ctx.model, config)) {
 		// Keep Codex Remote mutually exclusive with the legacy replay
 		// pipeline when authentication or tool ownership is unavailable.
 		return undefined;
@@ -758,10 +759,7 @@ export default function registerCompactionExtension(
 	overrides: Partial<CompactionDependencies> = {},
 ) {
 	const loadConfig = overrides.loadConfig ?? loadToolkitConfig;
-	const contextWindows = overrides.contextWindows ?? new CodexContextWindowManager(
-		undefined,
-		() => loadConfig().config.compaction.codexGatewayModels,
-	);
+	const contextWindows = overrides.contextWindows ?? new CodexContextWindowManager();
 	const dependencies: CompactionDependencies = {
 		loadConfig,
 		remoteCompact: executeRemoteV2Compaction,
@@ -777,7 +775,6 @@ export default function registerCompactionExtension(
 			const config = dependencies.loadConfig().config.compaction;
 			return tools.isRegistered && await isRemoteContextActive(ctx, config);
 		},
-		() => dependencies.loadConfig().config.compaction.codexGatewayModels,
 	);
 	const remoteContextActive: RemoteContextActive = async (ctx, config, model = ctx.model) =>
 		tools.isRegistered && await isRemoteContextActive(ctx, config, model);
@@ -804,7 +801,7 @@ export default function registerCompactionExtension(
 				activationReason = "tool-name-conflict";
 				notifyRemoteContextFailure(ctx, activationReason);
 			} else {
-				const remoteResolution = await resolveCodexContextProvider(ctx, ctx.model, config.codexGatewayModels);
+				const remoteResolution = await resolveCodexContextProvider(ctx, ctx.model);
 				activationReason = remoteResolution.ok ? "codex-context-unavailable" : remoteResolution.reason;
 				notifyRemoteContextFailure(ctx, activationReason);
 			}
@@ -858,9 +855,9 @@ export default function registerCompactionExtension(
 	pi.on("before_provider_request", (event, ctx) => handleBeforeProviderRequest(event, ctx, dependencies.loadConfig, contextWindows, remoteContextActive));
 	pi.on("before_provider_headers", async (event, ctx) => {
 		const config = dependencies.loadConfig().config.compaction;
-		if (config.contextManagement !== "remote" || !isCodexContextModel(ctx.model, config)) return;
+		if (!isCodexContextModel(ctx.model, config)) return;
 		if (!(await remoteContextActive(ctx, config))) return;
-		const provider = await resolveCodexContextProvider(ctx, ctx.model, config.codexGatewayModels);
+		const provider = await resolveCodexContextProvider(ctx, ctx.model);
 		if (provider.ok && provider.provider.kind === "codex-gateway") {
 			const sessionId = getSessionId(ctx);
 			const gatewayHeaders = codexContextProviderHeaders(provider.provider, {
@@ -891,7 +888,7 @@ export default function registerCompactionExtension(
 	});
 	pi.on("message_end", (event, ctx) => {
 		const config = dependencies.loadConfig().config.compaction;
-		if (config.contextManagement !== "remote" || !isCodexContextModel(ctx.model, config) || !tools.isRegistered) return undefined;
+		if (!isCodexContextModel(ctx.model, config) || !tools.isRegistered) return undefined;
 		const message = routeContextNamespaceToolMessage(event.message);
 		return message === event.message ? undefined : { message };
 	});

package/src/types.ts

@@ -13,6 +13,12 @@ export const REDACTED_VALUE = "[REDACTED]";
  * `compaction.responsesApis` in config.json may only narrow this set.
  */
 export const RESPONSES_COMPACT_CAPABLE_APIS = ["openai-responses", "openai-codex-responses"] as const;
+/**
+ * The Codex model whose gateways are verified to speak the alpha window and
+ * Astra compatibility protocols. Remote Context and the Astra layer match on
+ * this bare model id; no operator allowlist is consulted.
+ */
+export const ASTRA_MODEL_ID = "gpt-6-astra";
 export const LEGACY_NATIVE_COMPACTION_STRATEGY = "openai-native-compact-v1";
 export const REMOTE_V2_COMPACTION_STRATEGY = "openai-remote-compaction-v2";
 export const NATIVE_COMPACTION_STRATEGY = REMOTE_V2_COMPACTION_STRATEGY;
@@ -58,8 +64,6 @@ export type CompactionConfig = {
 	enabled: boolean;
 	/** Optional Codex Remote Context management. Disabled by default for compatibility. */
 	contextManagement: ContextManagementMode;
-	/** Exact provider/model specs allowed to use the extension's CPA-backed Codex gateway. */
-	codexGatewayModels: string[];
 	/**
 	 * Allow a Responses session whose latest compaction was not created by this extension
 	 * to restart native compaction from Pi's current serialized session context.
@@ -99,12 +103,6 @@ export type ImageGenerationConfig = {
 	enabled: boolean;
 };
 
-export type CodexAstraConfig = {
-	enabled: boolean;
-	/** Exact provider/model keys that receive the stable-effort `configuration_update` rewrite. */
-	models: string[];
-};
-
 /** `side-effect` reviews bash/write/edit plus extras; `all` reviews every tool call. */
 export type AutoModeGate = "side-effect" | "all";
 
@@ -170,7 +168,6 @@ export type ToolkitConfig = {
 	webSearch: WebSearchConfig;
 	imageGeneration: ImageGenerationConfig;
 	autoMode: AutoModeConfig;
-	codexAstra: CodexAstraConfig;
 };
 
 export type LoadedToolkitConfig = {
@@ -505,7 +502,6 @@ export const DEFAULT_NATIVE_FALLBACK_CONFIG: NativeFallbackConfig = {
 export const DEFAULT_COMPACTION_CONFIG: CompactionConfig = {
 	enabled: true,
 	contextManagement: "off",
-	codexGatewayModels: [],
 	allowCompactionContinuityBreak: false,
 	remoteCompactModel: undefined,
 	nativeFallback: { ...DEFAULT_NATIVE_FALLBACK_CONFIG },
@@ -528,11 +524,6 @@ export const DEFAULT_IMAGE_GENERATION_CONFIG: ImageGenerationConfig = {
 	enabled: false,
 };
 
-export const DEFAULT_CODEX_ASTRA_CONFIG: CodexAstraConfig = {
-	enabled: false,
-	models: [],
-};
-
 export const DEFAULT_AUTO_MODE_CONFIG: AutoModeConfig = {
 	enabled: true,
 	models: [],
@@ -561,5 +552,4 @@ export const DEFAULT_TOOLKIT_CONFIG: ToolkitConfig = {
 	webSearch: DEFAULT_WEB_SEARCH_CONFIG,
 	imageGeneration: DEFAULT_IMAGE_GENERATION_CONFIG,
 	autoMode: DEFAULT_AUTO_MODE_CONFIG,
-	codexAstra: DEFAULT_CODEX_ASTRA_CONFIG,
 };