pi-openai-toolkit 0.17.0 → 0.17.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-openai-toolkit",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "private": false,
   "type": "module",
   "engines": {

package/src/context-management/codex-provider.ts

@@ -153,7 +153,8 @@ export function codexContextProviderHeaders(
 		headers.delete("Cookie");
 		headers.set("originator", CODEX_GATEWAY_ORIGINATOR);
 		headers.set("User-Agent", userAgent(CODEX_CLIENT_VERSION));
-		headers.set("version", CODEX_CLIENT_VERSION);
+		// Let the gateway own its version policy; preserve an explicitly configured
+		// version already copied from provider.headers above.
 		headers.set("X-Codex-Affinity-Scope", CODEX_AFFINITY_SCOPE);
 		headers.set("X-Codex-Model", provider.model);
 	}

package/src/extension-runtime.ts

@@ -1378,11 +1378,12 @@ export default function registerCompactionExtension(
 			for (const existing of Object.keys(event.headers)) {
 				if (!allowedGatewayHeaders.has(existing.toLowerCase())) delete event.headers[existing];
 			}
+			// Keep any caller-supplied version without forcing a Toolkit pin.
+			// The gateway allowlist above already permits it.
 			for (const name of [
 				"authorization",
 				"originator",
 				"user-agent",
-				"version",
 				"session-id",
 				"x-client-request-id",
 				"x-codex-affinity-scope",

package/src/responses-headers.ts

@@ -148,10 +148,11 @@ export function buildResponsesRequestHeaders(
 			headers.set("originator", "pi");
 			headers.set("user-agent", buildCodexUserAgent());
 			headers.set("openai-beta", "responses=experimental");
+			// Preserve the existing native Codex compatibility pin.
+			headers.set("version", CODEX_CLIENT_VERSION);
 		}
-		// Codex backend gating: a request without a new-enough `version` never
-		// reaches model SKUs that arrived behind the gate (gpt-6-astra).
-		headers.set("version", CODEX_CLIENT_VERSION);
+		// Gateways own their version policy. Explicit versions still pass through
+		// the header merge and allowlist, but Toolkit does not generate one.
 		// Prompt-cache/session affinity rides on the conversation identity. The
 		// gateway path also uses the bare model hint above so NEWapi can route
 		// context/compact requests without inspecting their body.