pi-openai-toolkit 0.14.4 → 0.14.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/README.md +119 -147
  2. package/README.zh.md +119 -151
  3. package/docs/internals.md +42 -21
  4. package/package.json +127 -127
  5. package/src/auto-mode/classifier.ts +165 -165
  6. package/src/auto-mode/policy.ts +146 -146
  7. package/src/auto-mode/prompt.ts +279 -279
  8. package/src/auto-mode/reviewer.ts +325 -325
  9. package/src/auto-mode/transcript.ts +133 -133
  10. package/src/auto-mode/types.ts +137 -137
  11. package/src/codex-astra/effort-planner.ts +175 -175
  12. package/src/codex-astra/extension.ts +122 -122
  13. package/src/config.ts +621 -592
  14. package/src/context-management/codex-provider.ts +260 -260
  15. package/src/context-management/history-notes.ts +357 -325
  16. package/src/context-management/messages.ts +112 -106
  17. package/src/context-management/namespace-tools.ts +426 -426
  18. package/src/context-management/tool-contract.ts +23 -23
  19. package/src/context-management/tools.ts +306 -311
  20. package/src/context-management/types.ts +168 -161
  21. package/src/context-management/window-budget.ts +83 -83
  22. package/src/context-management/window-manager.ts +60 -51
  23. package/src/context-management/window-request.ts +125 -125
  24. package/src/debug.ts +1 -1
  25. package/src/extension-runtime.ts +34 -9
  26. package/src/image-generation/artifacts.ts +237 -237
  27. package/src/image-generation/client.ts +248 -248
  28. package/src/image-generation/eligibility.ts +18 -18
  29. package/src/image-generation/extension.ts +19 -2
  30. package/src/image-generation/protocol.ts +473 -405
  31. package/src/image-generation/references.ts +194 -194
  32. package/src/image-generation/render.ts +252 -252
  33. package/src/image-generation/service.ts +249 -243
  34. package/src/image-generation/types.ts +189 -184
  35. package/src/model-scope.ts +17 -17
  36. package/src/provider-headers.ts +23 -23
  37. package/src/responses-headers.ts +173 -108
  38. package/src/runtime.ts +513 -477
  39. package/src/types.ts +11 -0
  40. package/src/web-search/extension.ts +80 -80
  41. package/src/web-search/payload.ts +96 -96
  42. package/src/web-search/prompt.ts +20 -20
  43. package/src/web-search/types.ts +45 -45
package/README.zh.md CHANGED
@@ -1,243 +1,211 @@
1
1
  # pi-openai-toolkit
2
2
 
3
- [![npm version](https://img.shields.io/npm/v/pi-openai-toolkit.svg)](https://www.npmjs.com/package/pi-openai-toolkit)
4
- [![license: MIT](https://img.shields.io/npm/l/pi-openai-toolkit.svg)](./LICENSE)
5
- [English](./README.md)
3
+ 为 Pi 添加 Codex 上下文窗口、Responses 压缩、托管工具和工具调用审查。
6
4
 
7
- 面向 Pi 的 OpenAI 工具包:无损长会话上下文管理、托管联网搜索、图像生成与带审批门禁的 Auto 模式。
5
+ [![npm 版本](https://img.shields.io/npm/v/pi-openai-toolkit.svg)](https://www.npmjs.com/package/pi-openai-toolkit)
6
+ [![许可证:MIT](https://img.shields.io/npm/l/pi-openai-toolkit.svg)](LICENSE)
8
7
 
9
- Pi 内置压缩把较早的轮次摘要为文本,细节永久丢失。OpenAI Codex 后端用一整套通用客户端从未获得的机制解决这个问题:上下文窗口体系(`new_context`、`history`、`notes`)、加密无损压缩、托管工具。本包通过对接真实后端协议,把这些 Codex 能力移植进 Pi;Auto 模式则是本包自有功能。需要说明:覆盖模型会话中出现的窗口工具是 Codex 的机制、由本包接通,并非 Pi 或本包独立发明的能力。
8
+ [英文版](README.md)
10
9
 
11
- ## 特性
10
+ ## 功能
12
11
 
13
- - **上下文窗口**(Codex 机制移植)- `new_context` 切换新窗口,全程不重摘要
14
- - **跨窗口回读** - `history` 搜索、阅读更早窗口的原始内容
15
- - **工作记忆笔记** - `notes` 持久化存档,作为每次换窗的门禁
16
- - **加密压缩 v2** - OpenAI 后端压缩能力,为 Responses 模型接通
17
- - **托管联网搜索** - OpenAI Responses 原生 `web_search`,对列入的模型替换 Pi 本地工具
18
- - **图像生成** - 托管 `image_generation`(gpt-image-2)的 Pi 封装,图像字节不入会话历史
19
- - **Auto 模式** - 本包自有功能:副作用工具调用的审查模型门禁
20
- - **安全承诺** - 覆盖模型上杜绝有损摘要,凭据不出本机
12
+ | 功能 | 用途 |
13
+ | --- | --- |
14
+ | Codex 远程上下文 | 切换到新上下文窗口,并通过 `history` 按需检索较早窗口。 |
15
+ | 远程压缩 v2 | 使用服务端返回的加密检查点继续符合条件的 Responses 会话。 |
16
+ | 托管联网搜索 | 为指定模型启用 OpenAI 托管的搜索工具。 |
17
+ | 图像生成 | 生成图片,或根据明确传入的本地参考图片进行编辑。 |
18
+ | 工具调用审查 | 在指定范围的工具调用执行前,由审查模型判断是否允许执行。 |
21
19
 
22
- 需要 Pi >= 0.85.1、Node.js >= 22.19.0。本包不注册任何 provider 或模型,全部经由 Pi 已有的目录、登录与会话存储工作。不要与 `pi-remote-compact`、`@lll9p/pi-better-compaction` 或独立的 `pi-openai-web-search` 同时运行:重复 hook 会导致竞态。
20
+ 本包沿用 Pi 已有的模型、认证和会话配置,不新增提供商或模型。
23
21
 
24
22
  ## 安装
25
23
 
24
+ 需要 Pi 0.85.1 或更高版本,以及 Node.js 22.19.0 或更高版本。
25
+
26
+ 安装扩展:
27
+
26
28
  ```bash
27
29
  pi install npm:pi-openai-toolkit
28
30
  ```
29
31
 
30
- 仅安装到当前项目:
32
+ 在当前项目中安装时,在命令后加上 `--local`。
31
33
 
32
- ```bash
33
- pi install npm:pi-openai-toolkit --local
34
- ```
34
+ 只安装扩展不会自动启用所有功能。没有扩展配置时,压缩模块处于开启状态,但远程上下文关闭,联网搜索没有目标模型,图像生成关闭,自动模式也没有允许的模型和审查模型。
35
35
 
36
- 从 git 安装(开发或锁定构建):
36
+ 扩展配置文件位于:
37
37
 
38
- ```bash
39
- pi install git:github.com/awoaCrim/pi-openai-toolkit
40
- ```
38
+ `~/.pi/agent/extensions/pi-openai-toolkit/config.json`
39
+
40
+ 下文除 `models.json` 示例外,其他 JSON 配置示例都写入此文件。文件不存在时,创建文件及所需目录;已有配置时,将字段合并到对应对象中,保留其他设置。
41
+
42
+ ## 快速开始:启用远程上下文
41
43
 
42
- 后续用 `pi update --extensions` 更新。
44
+ 本节适用于想使用 Codex 风格上下文窗口的用户。如果只需要联网搜索、图像生成或工具调用审查,请直接跳到[常见用法](#常见用法)。
43
45
 
44
- ## 快速开始
46
+ ### 使用 Pi 内置的 Codex 提供商
45
47
 
46
- **1.** 创建 `~/.pi/agent/extensions/pi-openai-toolkit/config.json`(Windows:`C:\Users\<user>\.pi\agent\extensions\pi-openai-toolkit\config.json`):
48
+ 你需要先登录 Pi 内置的 `openai-codex` 提供商。
49
+
50
+ 创建或合并扩展配置:
47
51
 
48
52
  ```json
49
53
  {
50
54
  "compaction": {
51
- "contextManagement": "remote",
52
- "contextReminderThresholdPercent": 10
55
+ "contextManagement": "remote"
53
56
  }
54
57
  }
55
58
  ```
56
59
 
57
- **2.** 在覆盖的模型上启动 Pi:Pi 内置 Codex provider(`openai-codex`)上的任意会话,或已列入 `gatewayContextModels` 的网关模型:
60
+ 使用已有 Codex 模型目录中的模型启动 Pi:
58
61
 
59
62
  ```bash
60
- pi --model uwoacrimson/gpt-6-astra
63
+ pi --model openai-codex/<model-id>
61
64
  ```
62
65
 
63
- **3.** 确认生效:会话内出现四个 Codex 上下文工具(`new_context`、`get_context_remaining`、`history`、`notes`)。
66
+ 将 `<model-id>` 换成 Pi 配置中实际显示的模型 ID。会话中出现 `new_context`、`get_context_remaining`、`history` 和 `notes` 工具,说明扩展已经完成启用检查。
64
67
 
65
- 窗口余量低于提醒阈值时,模型收到一次提醒:存档笔记并换窗。更早的内容始终可通过 `history` 搜索。没有配置文件时,Pi 按默认策略运行,所有可选功能保持关闭。
68
+ ### 使用兼容网关
66
69
 
67
- 网关覆盖是一份显式白名单:`compaction.gatewayContextModels` 逐条列出 `provider/model` 精确键,模型须走 `openai-responses` 线路,且你的网关确实透传 Codex 窗口标记。若 Pi 中尚未配置该网关,在 `~/.pi/agent/models.json` 添加:
70
+ 本路线要求使用 `openai-responses` 接口,并且网关保留远程上下文所需的 Codex 协议字段。普通对话请求成功,不代表已经验证远程上下文兼容性。
71
+
72
+ 如果 `~/.pi/agent/models.json` 中已有符合上述条件的网关模型,可以跳过模型配置,直接设置扩展白名单。否则,先添加或合并下面的提供商配置。请把 `my-gateway`、地址、环境变量名称和模型字段替换成实际值。示例中的数字只是示意值,不是项目默认值,必须改成符合实际模型与网关能力的上下文窗口和最大输出 token 数。
68
73
 
69
74
  ```json
70
75
  {
71
76
  "providers": {
72
- "uwoacrimson": {
73
- "baseUrl": "https://<your-gateway>/v1",
74
- "apiKeyRef": "uwoacrimson",
75
- "api": "openai",
77
+ "my-gateway": {
78
+ "baseUrl": "https://your-gateway.example/v1",
79
+ "api": "openai-responses",
80
+ "apiKey": "$MY_GATEWAY_KEY",
76
81
  "models": [{
77
- "id": "gpt-6-astra",
78
- "name": "GPT-6 Astra",
79
- "api": "openai-responses",
82
+ "id": "gpt-5.6-luna",
83
+ "name": "GPT-5.6 Luna",
80
84
  "reasoning": true,
81
85
  "input": ["text"],
82
86
  "contextWindow": 272000,
83
- "maxTokens": 16384,
84
- "compat": {"thinkingLevelMap": {"off": 0, "minimal": 0.1, "low": 0.2, "medium": 0.5, "high": 1, "xhigh": 2, "max": 2}}
87
+ "maxTokens": 128000
85
88
  }]
86
89
  }
87
90
  }
88
91
  }
89
92
  ```
90
93
 
91
- ## 用法
92
-
93
- ### Codex Remote Context
94
+ 在启动 Pi 之前设置配置中引用的密钥。PowerShell 使用:
94
95
 
95
- 这是 Codex 自身的上下文窗口机制,由本包为 Pi 实现。覆盖模型的会话按 Codex 客户端的方式运行:模型在上下文窗口中工作,用 `notes` 存档状态,在窗口装满前调用 `new_context`。不发生任何摘要,更早窗口通过 `history` 完整可读。本窗口没有成功笔记存档时换窗会被拒绝;resume 与 fork 后规则不变。提醒与窗口耗尽消息只向模型建议,换窗始终由模型自己调用 `new_context` 完成。
96
-
97
- 覆盖模型的压缩路径由本包独占:Pi 原生压缩全部取消,有损摘要无法进入会话。Remote Context 无法激活时,以通知报告确切原因。
98
-
99
- 生命周期机制与协议契约:[docs/internals.md](docs/internals.md#rollover-lifecycle)。
96
+ ```powershell
97
+ $env:MY_GATEWAY_KEY = "replace-with-your-gateway-key"
98
+ ```
100
99
 
101
- ### Remote Compaction v2
100
+ POSIX shell 使用:
102
101
 
103
- 适用于其他 Responses 模型:压缩触发时,本包请求 OpenAI 后端的压缩能力为旧前缀生成加密检查点,而非由文本摘要顶替;检查点由服务端计算,客户端只负责存储与回放。后续请求将其回放到较近轮次之前。远端尝试失败时回退到 Pi 原生压缩(`nativeFallback`)。线路契约:[docs/internals.md](docs/internals.md#remote-compaction-v2-wire-contract)。
102
+ ```bash
103
+ export MY_GATEWAY_KEY="replace-with-your-gateway-key"
104
+ ```
104
105
 
105
- ### 联网搜索
106
+ 使用同一个终端启动 Pi。创建或合并扩展配置,并确保白名单条目与提供商名称和模型 ID 完全一致:
106
107
 
107
108
  ```json
108
109
  {
109
- "webSearch": { "enabled": true, "models": ["uwoacrimson/gpt-5.6-luna"] }
110
+ "compaction": {
111
+ "contextManagement": "remote",
112
+ "gatewayContextModels": ["my-gateway/gpt-5.6-luna"]
113
+ }
110
114
  }
111
115
  ```
112
116
 
113
- 列入的模型获得 OpenAI 托管 `web_search`,其本地 `web_search` 工具从载荷移除。复用当前模型连接,无需额外 key。
117
+ 使用相同的模型标识启动 Pi:
118
+
119
+ ```bash
120
+ pi --model my-gateway/gpt-5.6-luna
121
+ ```
114
122
 
115
- ### 图像生成
123
+ 启用检查方式相同:会话中应该出现 `new_context`、`get_context_remaining`、`history` 和 `notes`。如果没有出现,先查看工具包通知,再检查提供商和模型字符串、接口、密钥、基础 URL 和白名单条目。
124
+
125
+ 较早窗口的历史仍可通过 `history` 检索和读取,但不会全部自动加入当前上下文。
126
+
127
+ ## 常见用法
128
+
129
+ ### 使用服务端压缩继续会话
130
+
131
+ 如果希望使用 Responses 压缩路径,就保持远程上下文关闭。远程压缩 v2 会为符合条件的 Responses 模型保存并回放加密检查点。只有在压缩请求需要使用其他模型时,才设置 `compaction.remoteCompactModel`。
132
+
133
+ ### 启用托管联网搜索
134
+
135
+ 在 `webSearch.models` 中填写精确的模型标识:
116
136
 
117
137
  ```json
118
138
  {
119
- "imageGeneration": { "enabled": true }
139
+ "webSearch": {
140
+ "models": ["my-gateway/gpt-5.6-luna"]
141
+ }
120
142
  }
121
143
  ```
122
144
 
123
- 为所有 Responses 协议会话添加 `openai_generate_image`,封装 OpenAI 托管 `image_generation` 工具(`gpt-image-2`):文生图,以及显式传入本地参考文件的编辑。图像字节以 artifact 存储而非进入会话历史。每次成功请求都可能产生费用,默认关闭。
145
+ 对于这些模型,扩展会用 OpenAI 托管的 Responses 搜索工具替代 Pi 本地的 `web_search` 工具。
124
146
 
125
- ### Auto 模式
147
+ ### 生成图片
148
+
149
+ 图像生成需要 Responses 会话,并且可能产生服务商费用。启用方式如下:
126
150
 
127
151
  ```json
128
152
  {
129
- "autoMode": {
153
+ "imageGeneration": {
130
154
  "enabled": true,
131
- "models": ["uwoacrimson/gpt-5.6-luna"],
132
- "reviewerModel": "uwoacrimson/gpt-5.6-luna"
155
+ "models": ["gpt-image-2.5", "grok-imagine-image-2.0"]
133
156
  }
134
157
  }
135
158
  ```
136
159
 
137
- 会话内用 `/auto on` 启用。副作用工具调用由 `reviewerModel` 批准(固有风险 + 对话授权),不再阻塞等用户。审查员仅有只读工具,超时不视为批准,无头会话一律阻断而非猜测。每条决定落盘可审计。
160
+ `models` 填写嵌套 Responses `image_generation` 工具使用的裸模型 ID。列表第一项是默认模型;`openai_generate_image` 也支持通过可选的 `model` 参数在单次调用中切换,但该值必须与配置列表中的某一项完全一致。省略 `models` 时默认使用 `gpt-image-2.5`。列表为空或格式无效时会告警并回退到默认模型;如果要关闭工具,将 `enabled` 设置为 `false`。服务商或网关必须实际支持配置的生图模型。
138
161
 
139
- ## 配置
162
+ `openai_generate_image` 支持文生图,也支持使用明确传入的本地参考图片进行编辑。
140
163
 
141
- 配置文件唯一:`~/.pi/agent/extensions/pi-openai-toolkit/config.json`。所有键可选,未知键告警忽略。`models` 键是精确 `provider/model-id` 白名单(不支持通配),列入前功能保持关闭。
164
+ ### 启用工具调用自动审查
142
165
 
143
- <details>
144
- <summary><b>完整选项参考</b>(compaction、webSearch、imageGeneration、autoMode)</summary>
166
+ 在 `autoMode` 中设置允许使用的模型和审查模型:
145
167
 
146
- ### `compaction`
147
-
148
- | 键 | 类型 / 默认值 | 含义 |
149
- | --- | --- | --- |
150
- | `enabled` | *boolean*, `true` | 压缩扩展总开关。 |
151
- | `contextManagement` | `"off"` \| `"remote"`, `"off"` | 为覆盖模型开启 Codex Remote Context:`openai-codex-responses` API 上的任意 `openai-codex` 会话,加上下列白名单中的网关模型。 |
152
- | `gatewayContextModels` | *string[]*, `[]` | 允许经 `openai-responses` 网关线路使用 Codex Remote Context 的 `provider/model` 精确键。覆盖范围由使用者配置;原生 Codex 路线不看此列表。 |
153
- | `contextReminderThresholdPercent` | *integer* `0`-`100`, `5` | 当剩余量低于可用预算(上下文窗口减去固定 16384 token 输出预留)的该百分比时,注入每窗口一次的 checkpoint 提醒。`0` 会连同窗口耗尽兜底一起关闭(当前实现如此),请保持大于 0。该阈值度量本包自己的预算,与 Pi 原生预留为固定数值配合,并非运行时动态联动。 |
154
- | `allowCompactionContinuityBreak` | *boolean*, `false` | v2:最近一次压缩来自其他策略(如安装前的文本摘要)时,重建全新密文链。 |
155
- | `remoteCompactModel` | *string \| null*, `null` | v2:仅用于服务端压缩请求的模型,会话模型不切换。必须与当前模型同 base URL。 |
156
- | `nativeFallback.enabled` | *boolean*, `true` | 仅在远端压缩确实失败后回退到原生压缩。 |
157
- | `nativeFallback.model` | *string \| null*, `null` | 完全无法使用 v2 的模型的摘要模型。`null` 沿用当前模型。 |
158
- | `nativeFallback.thinkingLevel` | *string*, `"off"` | 回退摘要的 thinking level(`off`...`max`)。 |
159
- | `responsesApis` | *string[]*, 两个 API | 允许使用 v2 压缩的 Responses API 标识。v2 只作用于未被 Remote Context 覆盖的模型。 |
160
- | `notifyOnLoad` | *boolean*, `false` | 启动横幅。 |
161
- | `debug` | *boolean*, `false` | 向 `artifactRoot` 写生命周期与压缩 artifact,含每次 `session_start` 的激活原因。 |
162
- | `logProviderPayloads` / `logCompactResponses` | *boolean*, `false` | 额外写原始载荷与 SSE 响应体,排查特定请求时再开。 |
163
- | `redactSensitiveData` | *boolean*, `true` | artifact 脱敏;凭据、account ID、密文永远脱敏。 |
164
- | `artifactRoot` | *string*, `~/.pi/agent/artifacts/pi-openai-toolkit/compaction` | artifact 根目录;相对路径按配置目录解析。 |
165
-
166
- ### `webSearch`
167
-
168
- | 键 | 类型 / 默认值 | 含义 |
169
- | --- | --- | --- |
170
- | `enabled` | *boolean*, `true` | 总开关。 |
171
- | `models` | *string[]*, `[]` | 接收 OpenAI 托管 `web_search` 的会话:本地 `web_search` 工具被移除,原生 Responses API 工具被注入。 |
168
+ ```json
169
+ {
170
+ "autoMode": {
171
+ "models": ["my-gateway/gpt-5.6-luna"],
172
+ "reviewerModel": "my-gateway/gpt-5.6-luna"
173
+ }
174
+ }
175
+ ```
172
176
 
173
- ### `imageGeneration`
177
+ 在会话中使用 `/auto on`。默认的 `side-effect` 审查范围覆盖 `bash`、`write`、`edit` 和额外配置的工具。如果需要审查所有工具调用,将 `gate` 设置为 `"all"`。审查超时不会自动放行调用。
174
178
 
175
- | 键 | 类型 / 默认值 | 含义 |
176
- | --- | --- | --- |
177
- | `enabled` | *boolean*, `false` | 向所有 Responses 协议会话开放 `openai_generate_image`。有意不设模型白名单。 |
179
+ ## 常用配置
178
180
 
179
- ### `autoMode`
181
+ 配置文件为 `~/.pi/agent/extensions/pi-openai-toolkit/config.json`。未知键会告警后忽略。大多数模型列表必须使用精确的 `provider/model-id` 字符串,不支持通配符;`imageGeneration.models` 是例外,填写嵌套生图工具使用的裸模型 ID。
180
182
 
181
- | 键 | 类型 / 默认值 | 含义 |
183
+ | 配置项 | 默认值 | 用途 |
182
184
  | --- | --- | --- |
183
- | `enabled` | *boolean*, `true` | 总开关;启用模式仍需列入模型并设置 `reviewerModel`。 |
184
- | `models` | *string[]*, `[]` | 允许运行 Auto 模式的会话模型。 |
185
- | `reviewerModel` | *string \| null*, `null` | 一次性审查的审批模型,绝不成为对话模型。 |
186
- | `gate` | `"side-effect"` \| `"all"`, `"side-effect"` | 审查范围;`/auto all` 按会话切换。 |
187
- | `extraTools` | *string[]*, `[]` | 在 `bash`、`write`、`edit` 之外追加审查的工具。 |
188
- | `timeoutMs` | *integer* 1000-120000, `30000` | 审查总时限。超时不视为批准。 |
189
- | `transcript` | *boolean*, `true` | 提供有界对话视图,供审查员判断授权情况。 |
190
- | `evidenceTools` | *boolean*, `true` | 审查员可用 `read`、`grep`、`find`、`ls`;永远没有 `bash`、写工具与网络。 |
191
- | `maxEvidenceRounds` | *integer* 0-8, `3` | 出结论前的调查轮数;`0` 为单次补全。 |
192
- | `classifier.*` | *object* | 可选非阻塞低风险预打分器,只放行、不否决。 |
193
- | `circuitBreaker.*` | *object* | 连续否决结束回合(`consecutiveDenials` `3`,或 `windowSize` `50` 内 `recentDenials` `10`;`0` 关闭)。 |
194
-
195
- ### `codexAstra`
196
-
197
- 已移除的配置段。Astra 兼容层对所有 Responses 系 API 的 `gpt-6-astra` 会话静默启用;旧 `codexAstra` 配置按未知字段告警忽略。若其他宿主(如 Oh My Pi)实现了同款改写,只启用一边。
198
-
199
- </details>
200
-
201
- ## 安全
202
-
203
- - 覆盖模型被 Remote Context 接管期间,Pi 原生压缩全部路径(阈值、手动 `/compact`、溢出)取消,无法产生有损摘要。
204
- - 网关模式只转发配置的数据面 API key。OAuth token、account cookie、account ID 绝不发给网关,artifact 中永远脱敏。
205
- - `new_context` 无法丢弃未保存状态:必须有本窗口成功的 notes 存档,或用户显式 `force`。
206
- - 图像生成(计费)与 Auto 模式均需显式开启;无人可批准的场景下 Auto 模式阻断。
207
-
208
- 需要宿主层保险时,在 Pi 的 `settings.json` 设置 `"compaction": { "enabled": false }`。
185
+ | `compaction.enabled` | `true` | 压缩功能总开关。 |
186
+ | `compaction.contextManagement` | `"off"` | 设置为 `"remote"` 后启用 Codex 远程上下文。 |
187
+ | `compaction.gatewayContextModels` | `[]` | 允许使用远程上下文的网关模型。 |
188
+ | `compaction.remoteCompactModel` | 未设置 | 仅用于 v2 压缩请求的可选模型。 |
189
+ | `compaction.contextReminderThresholdPercent` | `5` | 每个窗口触发一次提醒的剩余预算百分比。设置为 `0` 会关闭提醒和窗口耗尽兜底。 |
190
+ | `webSearch.models` | `[]` | 使用托管联网搜索的模型。 |
191
+ | `imageGeneration.enabled` | `false` | 启用 `openai_generate_image`。 |
192
+ | `imageGeneration.models` | `["gpt-image-2.5"]` | 裸生图模型 ID;列表第一项是默认模型。 |
193
+ | `autoMode.models` | `[]` | 允许使用自动模式的模型。 |
194
+ | `autoMode.reviewerModel` | 未设置 | 审查自动模式调用的模型。 |
195
+ | `autoMode.gate` | `"side-effect"` | 设置为 `"all"` 后审查所有工具调用。 |
196
+ | `autoMode.timeoutMs` | `30000` | 审查超时时间,单位为毫秒。 |
209
197
 
210
198
  ## 开发
211
199
 
200
+ 在仓库根目录安装依赖后运行:
201
+
212
202
  ```bash
213
- npm run typecheck # tsc 项目检查
214
- bun test # 单元测试
215
- npm run test:pi # Pi 集成冒烟测试
203
+ npm run typecheck # 类型检查
204
+ bun test # 运行测试
205
+ npm run test:pi # 运行 Pi 冒烟测试
216
206
  npm pack --dry-run # 检查发布包内容
217
207
  ```
218
208
 
219
- ## 文档
220
-
221
- - [docs/internals.md](docs/internals.md) - 协议端点、换窗生命周期、v2 线路契约、artifact、来源归属
222
- - [README.md](README.md) - 英文原版(canonical)
223
- - [NOTICE](./NOTICE) - 第三方归属
224
-
225
- ## 贡献
226
-
227
- 欢迎在 [issue 区](https://github.com/awoaCrim/pi-openai-toolkit/issues)提问和提交 PR。行为变更前先开 issue 讨论协议假设;提交前运行 `bun test` 与 `npm run typecheck`,线路变更需要 fixture 测试。
228
-
229
- ## 维护者
230
-
231
- [awoaCrim](https://github.com/awoaCrim)
232
-
233
209
  ## 许可证
234
210
 
235
- MIT © awoaCrim and contributors。见 [LICENSE](./LICENSE) 与 [NOTICE](./NOTICE)。
236
-
237
- ## 致谢
238
-
239
- 感谢 [Linux.do](https://linux.do/) 社区的支持与讨论。
240
-
241
- ---
242
-
243
- *本文译自 [README.md](README.md)。若两版内容冲突,以英文版为准。*
211
+ MIT © awoaCrim 与贡献者。见 [LICENSE](LICENSE) 和 [NOTICE](NOTICE)。
package/docs/internals.md CHANGED
@@ -1,8 +1,10 @@
1
1
  # Toolkit Internals
2
2
 
3
- Developer-facing reference for [pi-openai-toolkit](../README.md). This is the protocol and implementation detail that the README deliberately keeps out of the user's way. If you are only installing the toolkit, you never need this page; if you are changing wire behavior, fixtures, or the compaction strategy code, start here.
3
+ Developer-facing reference for [pi-openai-toolkit](../README.md). The README keeps this protocol and implementation detail out of the installation path. If you are changing wire behavior, fixtures, or the compaction strategy code, start here.
4
4
 
5
- ## Table of Contents
5
+ ---
6
+
7
+ ### Table of Contents
6
8
 
7
9
  - [Remote Context protocol](#remote-context-protocol)
8
10
  - [Rollover lifecycle](#rollover-lifecycle)
@@ -10,28 +12,34 @@ Developer-facing reference for [pi-openai-toolkit](../README.md). This is the pr
10
12
  - [Artifacts and debugging](#artifacts-and-debugging)
11
13
  - [Provenance](#provenance)
12
14
 
13
- ## Remote Context protocol
15
+ ---
16
+
17
+ ### Remote Context protocol
14
18
 
15
19
  Internal alpha endpoints, adapted from `@howaboua/pi-codex-conversion`:
16
20
 
17
21
  ```text
18
22
  POST {base}/alpha/history/v2/list_windows | list_items | read_item | search_contents
19
23
  POST {base}/alpha/notes/v2/list_files_by_prefix | read_file | search_contents | append_to_file | write_file
20
- GET {base}/alpha/notes/v2/thread_hint
24
+ POST {base}/alpha/notes/v2/thread_hint
21
25
  ```
22
26
 
23
- Native route uses `{base} = <backend-api>/codex` with `Authorization: Bearer <oauth token>`, `ChatGPT-Account-ID`, and Codex CLI headers. Gateway route uses the configured `/v1` base with the data-plane API key, `originator: codex_cli_rs`, `X-Codex-Affinity-Scope`, and `X-Codex-Model` carrying the bare model id, never local credentials. Both set `Session-Id` / `X-Client-Request-Id` to the bounded Pi session id, `x-openai-tool-output-truncation-policy`, and `x-openai-encrypted-tool-arguments` for endpoints with encrypted parameters; encrypted results come back as `encrypted_output` and are re-encoded into later requests. These are alpha contracts: the upstream backend may change them at any time.
27
+ The native route uses `{base} = <backend-api>/codex` with `Authorization: Bearer <oauth token>`, `ChatGPT-Account-ID`, and Codex CLI headers. The gateway route uses the configured `/v1` base with the API key configured for that provider, `originator: codex_cli_rs`, `X-Codex-Affinity-Scope`, and `X-Codex-Model` carrying the bare model ID. Inherited OAuth headers, cookies, and account IDs are stripped before the request leaves the process. Both routes set `Session-Id` and `X-Client-Request-Id` to the bounded Pi session ID, plus `x-openai-tool-output-truncation-policy` and `x-openai-encrypted-tool-arguments` for endpoints with encrypted parameters. Encrypted results come back as `encrypted_output` and are re-encoded into later requests. These are alpha contracts, so the upstream backend may change them at any time.
24
28
 
25
29
  Search text and note bodies are sent under the encrypted-argument policy. Live model requests carry `x-codex-window-id` and `x-codex-turn-metadata` request headers derived from the active window identity.
26
30
 
27
- Coverage is never inferred from model names. A native session is `provider: "openai-codex"` on api `openai-codex-responses` (any model id). A gateway session must be on api `openai-responses` and carry an exact `provider/model` key listed in `compaction.gatewayContextModels`; the list ships empty and there is no built-in gateway SKU ([src/context-management/codex-provider.ts](../src/context-management/codex-provider.ts)). Unlisted gateway models, listed or not, keep running remote compaction v2 when Remote Context declines them. The toolkit registers no provider or model with Pi; it resolves credentials and base URLs through Pi's `ModelRegistry`.
31
+ Coverage is never inferred from model names. A native session uses provider `openai-codex` with API `openai-codex-responses` for any model ID. A gateway session uses API `openai-responses` and must carry an exact `provider/model` key listed in `compaction.gatewayContextModels`; the list ships empty and there is no built-in gateway SKU. See [src/context-management/codex-provider.ts](../src/context-management/codex-provider.ts). The toolkit registers no provider or model with Pi. It resolves credentials and base URLs through Pi's `ModelRegistry`.
28
32
 
29
- ## Rollover lifecycle
33
+ ---
34
+
35
+ ### Rollover lifecycle
30
36
 
31
37
  The `new_context` happy path, end to end:
32
38
 
33
39
  ```mermaid
34
40
  sequenceDiagram
41
+ accTitle: Remote Context rollover
42
+ accDescr: A Pi model checkpoints notes, requests a local new_context boundary, and sends the next request with the new window identity.
35
43
  participant Model
36
44
  participant Toolkit
37
45
  participant Pi
@@ -41,6 +49,7 @@ sequenceDiagram
41
49
  Backend-->>Toolkit: encrypted_output
42
50
  Model->>Toolkit: new_context
43
51
  Toolkit->>Toolkit: verify successful notes write in this window
52
+ Toolkit-->>Model: checkpoint receipt with the successful note path
44
53
  Toolkit-->>Pi: window marker appended, previous window trim scheduled
45
54
  Model->>Backend: next request with the new x-codex-window-id
46
55
  Pi->>Toolkit: session_before_compact
@@ -49,25 +58,37 @@ sequenceDiagram
49
58
 
50
59
  State invariants the lifecycle code must keep honest:
51
60
 
52
- - The checkpoint gate verifies a *successful* `notes` `append_to_file` / `write_file` against the persisted session branch after the latest window boundary, so it survives restarts and forks.
53
- - Budget checks are skipped until the current window has produced its own assistant usage; acting on the previous window's usage anchor burns the once-per-window reminder on a false alarm.
54
- - The scheduled trim is consumed exactly once, synchronously, by the first compaction attempt whose boundary window id matches. Every other compaction path (threshold without a scheduled rollover, manual `/compact`, overflow) is cancelled.
55
- - A window boundary is persisted as a `codex-context-window` custom message; `session_start` replays boundaries from the branch and rebuilds identity after forks.
61
+ - The checkpoint gate verifies a successful `notes` `append_to_file` or `write_file` against the persisted session branch after the latest window boundary, so it survives restarts and forks. A response with `ok: false` or `success: false` is not successful, even when HTTP returns 200.
62
+ - Every rollover carries the most recent successful checkpoint path in its handoff message. The optional `thread_hint` is supplemental; a hint failure must not erase the local receipt.
63
+ - `new_context` has no force escape hatch: a successful notes checkpoint is always required before rollover.
64
+ - Budget checks are skipped until the current window has produced its own assistant usage. Acting on the previous window's usage anchor would burn the once-per-window reminder on a false alarm.
65
+ - The scheduled trim is consumed exactly once, synchronously, by the first compaction attempt whose boundary window ID matches. Every other compaction path, including a threshold without a scheduled rollover, manual `/compact`, and overflow, is cancelled.
66
+ - A window boundary is persisted as a `codex-context-window` custom message. `session_start` replays boundaries from the branch and rebuilds identity after forks.
67
+
68
+ ---
69
+
70
+ ### Remote Compaction v2 wire contract
71
+
72
+ v2 is what an uncovered session gets. Any model that Remote Context declines, such as a gateway model absent from `gatewayContextModels`, can still compact through v2 when its API appears in `responsesApis`. The two strategies never compete for one session.
73
+
74
+ A `compaction_trigger` item appended to the live streaming request yields one output item of `type: "compaction"` with non-empty `encrypted_content`, stored in `CompactionEntry.details.compactedWindow`. On later requests the opaque checkpoint is replayed ahead of live turns, with no text summary. Replay fails closed: if the summary anchor cannot be located, the request is aborted with a notification and a content-free failure artifact. The sentinel-only payload is never sent.
75
+
76
+ A v2 response with a missing or empty checkpoint is never stored, and the `nativeFallback` tier is skipped. Pi's own threshold drives the next attempt, which may use `remoteCompactModel` when configured. `remoteCompactModel` must resolve to the same effective base URL as the active model.
56
77
 
57
- ## Remote Compaction v2 wire contract
78
+ ---
58
79
 
59
- A `compaction_trigger` item appended to the live streaming request yields one output item of `type: "compaction"` with non-empty `encrypted_content`, stored in `CompactionEntry.details.compactedWindow`. On later requests the opaque checkpoint is replayed ahead of live turns: zero-loss, no text summary. Replay fails closed: if the summary anchor cannot be located, the request is aborted with a notification and a content-free failure artifact; the sentinel-only payload is never sent. A v2 response with a missing or empty checkpoint is never stored, and the `nativeFallback` tier is skipped: Pi's own threshold drives the next attempt, which may use `remoteCompactModel` when configured. `remoteCompactModel` must resolve to the same effective base URL as the active model.
80
+ ### Artifacts and debugging
60
81
 
61
- ## Artifacts and debugging
82
+ With `debug: true`, the toolkit writes lifecycle and compaction artifacts under `artifactRoot` (default `~/.pi/agent/artifacts/pi-openai-toolkit/compaction`):
62
83
 
63
- With `debug: true` the toolkit writes lifecycle and compaction artifacts under `artifactRoot` (default `~/.pi/agent/artifacts/pi-openai-toolkit/compaction`):
84
+ - Each `session_start` writes a lifecycle artifact whose `activation` field records `active` or the exact inactive reason, such as `unsupported-model`, `unsupported-api`, `missing-api-key`, `auth-resolution-failed`, or `tool-name-conflict`.
85
+ - `logProviderPayloads` additionally writes provider request metadata and payloads, while `logCompactResponses` writes compact status and structural summaries with complete response and body fields critically redacted. Keep both off unless inspecting a specific request.
86
+ - Artifacts always redact Authorization credentials, API keys and tokens, Codex account IDs, and opaque `encrypted_content` or `encrypted_output`, even when `redactSensitiveData` is `false`.
64
87
 
65
- - each `session_start` writes a lifecycle artifact whose `activation` field records `active`, or the exact inactive reason (`tool-name-conflict`, `missing-api-key`, `auth-resolution-failed`, `model-not-covered`, ...);
66
- - `logProviderPayloads` additionally writes raw provider request payloads, `logCompactResponses` the compact SSE bodies; keep both off unless inspecting a specific request;
67
- - artifacts always redact Authorization credentials, API keys/tokens, Codex account ids, and opaque `encrypted_content` / `encrypted_output`, even with `redactSensitiveData: false`.
88
+ ---
68
89
 
69
- ## Provenance
90
+ ### Provenance
70
91
 
71
- The Remote Context protocol was reverse-engineered from `@howaboua/pi-codex-conversion@3.0.29` (source commit `7021ae48e8efe36a3becc5830d529696ff798e5e`). The Astra compatibility layer is adapted from Oh My Pi 18.1.8 (MIT). Web Search behavior was adapted from [`pi-openai-web-search`](https://github.com/code-yeongyu/pi-openai-web-search) (commit `3964338`). Attribution details are in [NOTICE](../NOTICE).
92
+ The Remote Context protocol was reverse-engineered from `@howaboua/pi-codex-conversion@3.0.29` (source commit `7021ae48e8efe36a3becc5830d529696ff798e5e`). The Astra compatibility layer is adapted from Oh My Pi 18.1.8 (MIT). Web Search behavior was adapted from [pi-openai-web-search](https://github.com/code-yeongyu/pi-openai-web-search) (commit `3964338`). Attribution details are in [NOTICE](../NOTICE).
72
93
 
73
- Protocol fixtures live in [src/context-management/](../src/context-management/) and must be updated together with any upstream alpha endpoint change; fixture-based tests are required for new wire behavior.
94
+ Protocol fixtures live in [src/context-management/](../src/context-management/) and must be updated together with any upstream alpha endpoint change. New wire behavior requires fixture-based tests.