21 // modelChatGPTURL is the Responses endpoint of the ChatGPT backend.
22 modelChatGPTURL = "https://chatgpt.com/backend-api/codex/responses"
24 // modelAPIURL is the Responses endpoint of the OpenAI API.
25 modelAPIURL = "https://api.openai.com/v1/responses"
27 // modelQuotaPrefix starts the names of the quota headers of the ChatGPT
28 // backend, in canonical form.
29 modelQuotaPrefix = "X-Codex-"
31 // modelTurnStateHeader is an x-codex-* header that holds an opaque
32 // state of the backend, not quota.
33 modelTurnStateHeader = "X-Codex-Turn-State"
35 // modelErrorBytes is the most bytes of an error response that go into
37 modelErrorBytes = 4096
40 // errModelCallLimit tells that a client sent its limit of calls.
41 var errModelCallLimit = errors.New("call limit reached")
43 // modelEndpoint returns the URL and the authorizer of the endpoint in config.
44 // The ChatGPT backend uses the token file in dir. The OpenAI API uses the key
45 // in OPENAI_API_KEY, and there is no fallback from one to the other. All
46 // clients share the authorizer, so one refresh runs at a time.
47 func modelEndpoint(config Config, dir string) (string, ModelAuthorizer, error) {
48 if config.Endpoint == configEndpointAPI {
49 key := os.Getenv("OPENAI_API_KEY")
51 return "", nil, errors.New("endpoint api needs OPENAI_API_KEY")
54 return modelAPIURL, ModelAPIKey(key), nil
57 return modelChatGPTURL, newChatGPTAuth(filepath.Join(dir, chatgptTokenFileName), chatgptIssuer), nil
60 // newModelClient returns a client for the Responses endpoint at url. It records
61 // each call in the usage file at usagePath.
62 func newModelClient(url string, auth ModelAuthorizer, cacheKey, usagePath string) *ModelClient {
67 usage: &ModelUsageLog{
74 // modelUserMessage returns a user input item with one text part for each text.
75 func modelUserMessage(texts ...string) any {
76 content := make([]ModelInputPart, len(texts))
77 for n, text := range texts {
78 content[n] = ModelInputPart{
84 return modelUserParts(content)
87 // modelUserParts keeps text and image parts in one user message.
88 func modelUserParts(content []ModelInputPart) any {
90 Role string `json:"role"`
91 Content []ModelInputPart `json:"content"`
98 // modelOutputText returns the text of the message items of output.
99 func modelOutputText(output []json.RawMessage) (string, error) {
100 var text strings.Builder
102 for _, raw := range output {
103 var item ModelOutputItem
105 err := json.Unmarshal(raw, &item)
107 return "", fmt.Errorf("decode output item: %w", err)
110 if item.Type != "message" {
114 for _, part := range item.Content {
115 if part.Type == "output_text" {
116 text.WriteString(part.Text)
121 return text.String(), nil
124 // ModelAuthorizer adds the credentials of a model call to the headers of its
126 type ModelAuthorizer interface {
127 Authorize(ctx context.Context, header http.Header) error
130 // ModelAPIKey authorizes calls to the OpenAI API with a key.
131 type ModelAPIKey string
133 // Authorize sets the key as the bearer token.
134 func (k ModelAPIKey) Authorize(ctx context.Context, header http.Header) error {
135 header.Set("Authorization", "Bearer "+string(k))
140 // ModelClient sends model calls to a Responses endpoint for one agent. The
141 // ChatGPT backend and the OpenAI API take the same request body and differ only
142 // in the URL and the credentials. Every call sends the fixed cache key of the
143 // agent, so the turns and the compactions of the agent share one prompt cache.
144 // A call of a subagent sends the key of the agent with "-" and the name of the
145 // subagent, so that the calls of a subagent do not share a cache entry with the
146 // calls of the agent that run at the same time. The ChatGPT backend caches only
147 // with the key in the session_id header, so a call to it sends the key there
148 // and in the body. Every call is recorded in the usage file.
150 // The request never holds max_output_tokens or metadata, because the ChatGPT
151 // backend refuses them. It sets store to false, so the client sends the whole
152 // input on each call, and it asks for the encrypted reasoning, so a later call
153 // can send the reasoning items back.
154 type ModelClient struct {
164 // LimitCalls makes the client refuse each call after the first limit calls.
165 func (c *ModelClient) LimitCalls(limit int64) {
169 // LimitReached tells if the client refuses further calls.
170 func (c *ModelClient) LimitReached() bool {
171 return c.limit > 0 && c.calls.Load() >= c.limit
174 // CallLimit returns the configured call limit, or zero for no limit.
175 func (c *ModelClient) CallLimit() int64 {
179 // UsagePath returns the file that records the calls of this client.
180 func (c *ModelClient) UsagePath() string {
184 // Create sends the call and reads its event stream to the end. Over the call
185 // limit it sends nothing and returns errModelCallLimit.
186 func (c *ModelClient) Create(ctx context.Context, request ModelRequest) (ModelResponse, error) {
187 if c.calls.Add(1) > c.limit && c.limit > 0 {
188 return ModelResponse{}, errModelCallLimit
191 cacheKey := c.cacheKey
192 if request.Agent != "" {
193 cacheKey += "-" + request.Agent
196 body, err := json.Marshal(ModelRequestBody{
197 Model: request.Model,
198 Instructions: request.Instructions,
199 Input: request.Input,
200 Tools: request.Tools,
201 Reasoning: ModelReasoning{
202 Effort: request.Effort,
206 Include: []string{"reasoning.encrypted_content"},
207 PromptCacheKey: cacheKey,
210 return ModelResponse{}, fmt.Errorf("encode request: %w", err)
213 httpRequest, err := http.NewRequestWithContext(ctx, http.MethodPost, c.url, bytes.NewReader(body))
215 return ModelResponse{}, fmt.Errorf("create request: %w", err)
218 httpRequest.Header.Set("Content-Type", "application/json")
219 httpRequest.Header.Set("Accept", "text/event-stream")
221 err = c.auth.Authorize(ctx, httpRequest.Header)
223 return ModelResponse{}, fmt.Errorf("authorize model call: %w", err)
226 _, chatgpt := c.auth.(*ChatGPTAuth)
228 httpRequest.Header.Set("session_id", cacheKey)
232 record := ModelUsageRecord{
233 Date: start.Format(time.RFC3339Nano),
234 Model: request.Model,
237 if request.Node != nil {
238 record.Node = &[2]int{request.Node.level, request.Node.index}
241 record.Turn = request.Turn
242 record.Agent = request.Agent
243 response, err := c.send(httpRequest, &record)
245 record.Error = err.Error()
248 record.Seconds = time.Since(start).Seconds()
249 record.InputTokens = response.Usage.Input
250 record.CachedTokens = response.Usage.Cached
251 record.OutputTokens = response.Usage.Output
252 record.TextBytes = len(response.Text)
254 return response, errors.Join(err, c.usage.Write(record))
257 // send makes the HTTP call and reads its stream. It puts the status and the
258 // quota headers into record.
259 func (c *ModelClient) send(httpRequest *http.Request, record *ModelUsageRecord) (response ModelResponse, err error) {
260 httpResponse, err := c.http.Do(httpRequest)
262 return ModelResponse{}, fmt.Errorf("send model call: %w", err)
266 err = errors.Join(err, httpResponse.Body.Close())
269 record.Status = httpResponse.StatusCode
270 record.Quota = modelQuotaHeaders(httpResponse.Header)
271 if httpResponse.StatusCode != http.StatusOK {
272 text, readErr := io.ReadAll(io.LimitReader(httpResponse.Body, modelErrorBytes))
273 err = fmt.Errorf("model call: HTTP %d: %s", httpResponse.StatusCode, strings.TrimSpace(string(text)))
275 return ModelResponse{}, errors.Join(err, readErr)
278 return modelReadStream(httpResponse.Body)
281 // ModelUsageLog appends one JSON line for each model call to usage.jsonl. Calls
282 // can run at once, so a mutex serializes the writes.
283 type ModelUsageLog struct {
288 // Write appends record to the file with one write.
289 func (u *ModelUsageLog) Write(record ModelUsageRecord) (err error) {
290 line, err := json.Marshal(record)
292 return fmt.Errorf("encode usage: %w", err)
296 defer u.mutex.Unlock()
298 file, err := os.OpenFile(u.path, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o600)
300 return fmt.Errorf("open usage file: %w", err)
304 err = errors.Join(err, file.Close())
307 _, err = file.Write(append(line, '\n'))
309 return fmt.Errorf("write usage: %w", err)
315 // ModelOutputItem holds the fields of an output item that give its text.
316 type ModelOutputItem struct {
317 Type string `json:"type"`
319 Type string `json:"type"`
320 Text string `json:"text"`
324 // ModelInputPart is a text or image part in a user message or tool result.
325 type ModelInputPart struct {
326 Type string `json:"type"`
327 Text string `json:"text,omitempty"`
328 ImageURL string `json:"image_url,omitempty"`
331 // ModelRequest is one model call. Input holds the input items in order, such as
332 // modelUserMessage values or output items of an earlier response. Node names
333 // the node that a compaction builds, or is nil. Turn names the request of a
334 // turn: first or next. Agent names the subagent that makes the call, or is
335 // empty for a call of the agent itself. Node, Turn, and Agent go to the usage
336 // file, never to the endpoint as fields. Agent also gives the call the cache
337 // key of its subagent.
338 type ModelRequest struct {
349 // ModelResponse is the result of a model call. Output holds the output items as
350 // the endpoint sent them. Text is the text of the message items.
351 type ModelResponse struct {
352 Output []json.RawMessage
357 // ModelRequestBody is the JSON body of a call.
358 type ModelRequestBody struct {
359 Model string `json:"model"`
360 Instructions string `json:"instructions"`
361 Input []any `json:"input"`
362 Tools []ModelTool `json:"tools"`
363 Reasoning ModelReasoning `json:"reasoning"`
364 Store bool `json:"store"`
365 Stream bool `json:"stream"`
366 Include []string `json:"include"`
367 PromptCacheKey string `json:"prompt_cache_key"`
370 type ModelReasoning struct {
371 Effort string `json:"effort"`
374 // ModelUsageRecord is one line of usage.jsonl. Date is the start of the call,
375 // and Seconds its length. Node is the node [l, i] of a compaction. Status is
376 // the HTTP status, or 0 when no response came. TextBytes is the size of the
377 // text of the reply. Turn names the request of a turn. Agent names the subagent
378 // of the call. Quota holds the x-codex-* headers of the response, without the
380 type ModelUsageRecord struct {
381 Date string `json:"date"`
382 Seconds float64 `json:"seconds"`
383 Model string `json:"model"`
384 Node *[2]int `json:"node,omitempty"`
385 Turn string `json:"turn,omitempty"`
386 Agent string `json:"agent,omitempty"`
387 Status int `json:"status"`
388 InputTokens int `json:"input_tokens"`
389 CachedTokens int `json:"cached_tokens"`
390 OutputTokens int `json:"output_tokens"`
391 TextBytes int `json:"text_bytes"`
392 Quota map[string]string `json:"quota,omitempty"`
393 Error string `json:"error,omitempty"`
396 // ModelTool is the definition of a function tool.
397 type ModelTool struct {
398 Type string `json:"type"`
399 Name string `json:"name"`
400 Description string `json:"description"`
401 Parameters any `json:"parameters"`
402 Strict bool `json:"strict"`
405 // ModelUsage gives the token counts of a call. Cached is the part of the input
406 // tokens that came from the prompt cache.
407 type ModelUsage struct {
413 // ModelStreamEvent holds the fields of the stream events that the client reads.
414 type ModelStreamEvent struct {
415 Type string `json:"type"`
416 Item json.RawMessage `json:"item"`
417 Response *ModelEventResponse `json:"response"`
418 Code string `json:"code"`
419 Message string `json:"message"`
422 type ModelEventResponse struct {
423 Output []json.RawMessage `json:"output"`
424 Usage *ModelWireUsage `json:"usage"`
425 Error *ModelWireError `json:"error"`
426 IncompleteDetails *struct {
427 Reason string `json:"reason"`
428 } `json:"incomplete_details"`
431 type ModelWireUsage struct {
432 InputTokens int `json:"input_tokens"`
433 OutputTokens int `json:"output_tokens"`
434 InputTokensDetails struct {
435 CachedTokens int `json:"cached_tokens"`
436 } `json:"input_tokens_details"`
439 type ModelWireError struct {
440 Code string `json:"code"`
441 Message string `json:"message"`
444 // modelQuotaHeaders returns the x-codex-* headers, with lowercase names,
445 // without the turn state.
446 func modelQuotaHeaders(header http.Header) map[string]string {
447 var quota map[string]string
449 for name, values := range header {
450 if !strings.HasPrefix(name, modelQuotaPrefix) || name == modelTurnStateHeader || len(values) == 0 {
455 quota = make(map[string]string)
458 quota[strings.ToLower(name)] = values[0]
464 // modelReadStream reads the server-sent events of a call until the response
465 // completes. The output items come from the output_item.done events, or from
466 // the completed response when the stream sent none.
467 func modelReadStream(stream io.Reader) (ModelResponse, error) {
468 var response ModelResponse
470 reader := bufio.NewReader(stream)
472 var data bytes.Buffer
475 line, err := reader.ReadBytes('\n')
476 if err != nil && !errors.Is(err, io.EOF) {
477 return response, fmt.Errorf("read event stream: %w", err)
480 line = bytes.TrimRight(line, "\r\n")
482 value, found := bytes.CutPrefix(line, []byte("data:"))
484 data.Write(bytes.TrimPrefix(value, []byte(" ")))
487 } else if data.Len() > 0 {
488 done, eventErr := modelReadEvent(&response, data.Bytes())
491 if eventErr != nil || done {
492 return response, eventErr
496 if errors.Is(err, io.EOF) {
497 return response, errors.New("event stream ended before the response completed")
502 // modelReadEvent adds one stream event to response, and tells if it ends the
504 func modelReadEvent(response *ModelResponse, data []byte) (bool, error) {
505 var event ModelStreamEvent
507 err := json.Unmarshal(data, &event)
509 return true, fmt.Errorf("decode stream event: %w", err)
513 case "response.output_item.done":
514 response.Output = append(response.Output, event.Item)
515 case "response.completed":
516 if event.Response == nil {
517 return true, errors.New("completed event without a response")
520 if len(response.Output) == 0 {
521 response.Output = event.Response.Output
524 if event.Response.Usage != nil {
525 response.Usage = ModelUsage{
526 Input: event.Response.Usage.InputTokens,
527 Cached: event.Response.Usage.InputTokensDetails.CachedTokens,
528 Output: event.Response.Usage.OutputTokens,
532 response.Text, err = modelOutputText(response.Output)
535 case "response.incomplete":
537 if event.Response != nil && event.Response.IncompleteDetails != nil {
538 reason = event.Response.IncompleteDetails.Reason
541 return true, fmt.Errorf("response incomplete: %s", reason)
542 case "response.failed":
543 message := "no details"
544 if event.Response != nil && event.Response.Error != nil {
545 message = event.Response.Error.Code + ": " + event.Response.Error.Message
548 return true, fmt.Errorf("response failed: %s", message)
550 return true, fmt.Errorf("stream error: %s: %s", event.Code, event.Message)