Release

.eslintignore

@@ -0,0 +1,7 @@
+dist/
+node_modules/
+coverage/
+.serena/
+assets/
+docs/
+spec/

.eslintrc.cjs

@@ -0,0 +1,47 @@
+/** @type {import("eslint").Linter.Config} */
+module.exports = {
+	root: true,
+	env: {
+		node: true,
+		es2022: true,
+	},
+	parser: "@typescript-eslint/parser",
+	parserOptions: {
+		// Keep this simple for now; add `project` later if you want type-aware rules
+		ecmaVersion: 2022,
+		sourceType: "module",
+	},
+	plugins: ["@typescript-eslint", "sonarjs"],
+	extends: [
+		"eslint:recommended",
+		"plugin:@typescript-eslint/recommended",
+		"plugin:sonarjs/recommended",
+	],
+	rules: {
+		// Sonar-style cognitive complexity (adjust threshold if needed)
+		"sonarjs/cognitive-complexity": ["warn", 20],
+
+		// You can tune or turn off rules as needed; start conservative
+		"@typescript-eslint/explicit-module-boundary-types": "off",
+		"@typescript-eslint/no-explicit-any": "off",
+	},
+	overrides: [
+		{
+			files: ["test/**/*.ts"],
+			env: {
+				node: true,
+			},
+			globals: {
+				describe: "readonly",
+				it: "readonly",
+				test: "readonly",
+				expect: "readonly",
+				beforeAll: "readonly",
+				afterAll: "readonly",
+				beforeEach: "readonly",
+				afterEach: "readonly",
+				vi: "readonly",
+			},
+		},
+	],
+};

.github/workflows/ci.yml

@@ -3,7 +3,7 @@ name: CI
 on:
   push:
     branches:
-      - '**'
+      - "**"
   pull_request:
 
 jobs:
@@ -28,8 +28,8 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
-      - name: Run lint
-        run: pnpm lint
+      - name: Run ESLint
+        run: pnpm lint:eslint
 
       - name: Run typecheck
         run: pnpm typecheck
@@ -131,19 +131,19 @@ jobs:
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
- 
+
       - name: Validate release secrets
         run: |
           if [ -z "$NPM_TOKEN" ]; then
             echo "NPM_TOKEN secret is required to publish" >&2
             exit 1
           fi
- 
+
       - name: Configure npm auth
 
         run: |
           echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
- 
+
       - name: Read release metadata
         id: release_meta
         run: |
@@ -165,19 +165,18 @@ jobs:
             cat "$NOTES_FILE"
             echo "${NOTES_DELIM}"
           } >> "$GITHUB_OUTPUT"
- 
+
       - name: Build package
         run: pnpm run build
- 
+
       - name: Publish to npm
         env:
           NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}
         run: pnpm publish --access public
- 
+
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:
           tag_name: v${{ steps.release_meta.outputs.version }}
           name: Release ${{ steps.release_meta.outputs.version }}
           body: ${{ steps.release_meta.outputs.notes }}
-

.github/workflows/formatting.yml

@@ -0,0 +1,45 @@
+name: Auto Formatting
+
+on:
+  push:
+    branches:
+      - "**"
+
+jobs:
+  format:
+    name: Auto Format
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      workflows: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.15.0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Run Prettier (write)
+        run: pnpm format:write
+
+      - name: Verify formatting
+        run: pnpm format:check
+
+      - name: Commit formatted changes
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: "style: apply prettier formatting"
+          branch: ${{ github.ref }}

.github/workflows/main-merge-guard.yml

@@ -1,6 +1,7 @@
 name: Main Merge Guard
 
 on:
+  workflow_call:
   pull_request:
     branches:
       - main

.github/workflows/opencode.yml

@@ -0,0 +1,33 @@
+name: opencode
+
+on:
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  opencode:
+    if: |
+      contains(github.event.comment.body, ' /oc') ||
+      startsWith(github.event.comment.body, '/oc') ||
+      contains(github.event.comment.body, ' /opencode') ||
+      startsWith(github.event.comment.body, '/opencode')
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run opencode
+        uses: sst/opencode/github@latest
+        env:
+          ZHIPU_API_KEY: ${{ secrets.ZHIPU_API_KEY }}
+        with:
+          model: zai-coding-plan/glm-4.6

.github/workflows/pr-auto-base.yml

@@ -0,0 +1,26 @@
+name: PR Auto Base
+
+on:
+  pull_request:
+    types: [opened]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  retarget:
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Retarget PR to staging unless from staging
+        run: |
+          if [ "${GITHUB_BASE_REF}" = "staging" ]; then
+            echo "PR already targets staging."; exit 0
+          fi
+          BRANCH="${GITHUB_HEAD_REF}"
+          if [ "$BRANCH" = "staging" ]; then
+            echo "Staging PRs can target main."; exit 0
+          fi
+          echo "Retargeting PR #${GITHUB_EVENT_PULL_REQUEST_NUMBER} to staging"
+          gh pr edit "$GITHUB_EVENT_PULL_REQUEST_NUMBER" --base staging

.gitignore

@@ -13,3 +13,4 @@ tmp
 .nx/
 
 .stryker-tmp/
+.worktrees/

.prettierignore

@@ -0,0 +1,5 @@
+dist/
+node_modules/
+coverage/
+.serena/
+.stryker-tmp/

.prettierrc

@@ -0,0 +1,5 @@
+{
+  "printWidth": 100,
+  "singleQuote": false,
+  "trailingComma": "all"
+}

AGENTS.md

@@ -4,7 +4,7 @@ This file provides coding guidance for AI agents (including Claude Code, Codex,
 
 ## Overview
 
-This is an **opencode plugin** that enables OAuth authentication with OpenAI's ChatGPT Plus/Pro Codex backend. It allows users to access `gpt-5-codex`, `gpt-5-codex-mini`, and `gpt-5` models through their ChatGPT subscription instead of using OpenAI Platform API credits.
+This is an **opencode plugin** that enables OAuth authentication with OpenAI's ChatGPT Plus/Pro Codex backend. It now mirrors the Codex CLI lineup, making `gpt-5.1-codex-max` (with optional `xhigh` reasoning) the default alongside the existing `gpt-5.1-codex`, `gpt-5.1-codex-mini`, and legacy `gpt-5` models—all available through a ChatGPT subscription instead of OpenAI Platform API credits.
 
 **Key architecture principle**: 7-step fetch flow that intercepts opencode's OpenAI SDK requests, transforms them for the ChatGPT backend API, and handles OAuth token management.
 
@@ -157,6 +157,8 @@ This plugin **intentionally differs from opencode defaults** because it accesses
 | `store` | true | false | Required for ChatGPT backend |
 | `include` | (not set) | `["reasoning.encrypted_content"]` | Required for stateless operation |
 
+> **Extra High reasoning**: `reasoningEffort: "xhigh"` is only honored for `gpt-5.1-codex-max`. Other models automatically downgrade it to `high` so their API calls remain valid.
+
 ## File Paths & Locations
 
 - **Plugin config**: `~/.opencode/openhax-codex-config.json`

CHANGELOG.md

@@ -2,6 +2,17 @@
 
 All notable changes to this project are documented here. Dates use the ISO format (YYYY-MM-DD).
 
+## [3.3.0] - 2025-11-19
+### Added
+- Codex Max support that mirrors the Codex CLI: normalization for every `gpt-5.1-codex-max` alias, `reasoningEffort: "xhigh"`, and unit tests covering both the transformer and request body integration path.
+- Documentation and configuration updates calling out Codex Max as the flagship preset, plus refreshed samples showing how to opt into the Extra High reasoning mode.
+
+### Changed
+- Sample configs (`full` + `minimal`), README tables, AGENTS.md, and the diagnostics script now prefer `gpt-5.1-codex-max`, keeping plugin defaults aligned with Codex CLI behaviour.
+
+### Fixed
+- Requests that specify `reasoningEffort: "xhigh"` for non-supported models are now automatically downgraded to `high`, preventing API errors when Codex Max isn't selected.
+
 ## [3.2.0] - 2025-11-13
 ### Added
 - GPT-5.1 family integration: normalization for `gpt-5.1`/`gpt-5.1-codex`/`gpt-5.1-codex-mini`, expanded reasoning heuristics (including `reasoningEffort: "none"`), and preservation of the native `shell`/`apply_patch` tools emitted by Codex CLI.