Update to OpenAI Developers

Changed files

Choose a file to see its text changes. Binary or large files show metadata only.

.app.json →

.codex-plugin/plugin.json →

README.md →

assets/composer-icon.png →

mcp/server.mjs →

skills/openai-platform-api-key/SKILL.md →

skills/openai-platform-api-key/references/evals.md →

tests/openai-platform-api-key.test.mjs →

mcp/server.mjs

− removed · + added

--- before
+++ after
@@ -82,6 +82,25 @@
   },
   annotations: { ...TOOL_ANNOTATIONS, idempotentHint: false },
 };
+const PROMO_ORG_INPUT = "organization";
+const PROMO_DISCLOSURE_INPUT = "disclosure";
+const PROMO_DISCLOSURE_FORM = {
+  mode: "form",
+  message: "Codex usage through API keys",
+  requestedSchema: {
+    type: "object",
+    properties: {
+      acknowledged: {
+        type: "boolean",
+        default: false,
+        title: "I understand this limitation.",
+        description:
+          "Claiming these credits disables Codex access through the selected API Organization’s API keys, including usage paid for with purchased API credits. Restoring access requires canceling this benefit. This does not impact Codex usage through your subscription and does not impact regular API usage.",
+      },
+    },
+    required: ["acknowledged"],
+  },
+};
 const JsonRpcError = {
   METHOD_NOT_FOUND: -32601,
   INVALID_PARAMS: -32602,
@@ -113,7 +132,12 @@
 
 // Sign each prompt with its chat and form. Retries reuse the prompt UUID as
 // the credit-link operation ID without keeping abandoned prompts in memory.
-async function elicit(id, params, form) {
+async function elicit(
+  id,
+  params,
+  form,
+  { inputKey = "confirmation", context, previousPromptId, stateData } = {},
+) {
   if (protocol !== PROTOCOL) return (await request("elicitation/create", form)) ?? { action: "cancel" };
 
   const { name, arguments: args, _meta, requestState, inputResponses } = params;
@@ -127,15 +151,20 @@
   }
   requireNonEmptyString(_meta.threadId, "threadId");
   const call = [_meta.threadId, _meta.sessionId, _meta.itemId, _meta.callId];
-  const promptId = typeof requestState === "string" ? requestState.split(".", 1)[0] : randomUUID();
+  const promptId = previousPromptId ?? (
+    typeof requestState === "string" ? requestState.split(".", 1)[0] : randomUUID()
+  );
+  const statePrefix = stateData === undefined
+    ? `${promptId}.${inputKey}`
+    : `${promptId}.${inputKey}.${stateData}`;
   const signature = createHmac("sha256", continuationKey)
-    .update(JSON.stringify([promptId, name, args?.workspacePath, form, call]))
+    .update(JSON.stringify([statePrefix, name, args?.workspacePath, call, form, context]))
     .digest("base64url");
-  const state = `${promptId}.${signature}`;
-  if (requestState === undefined && inputResponses === undefined) {
+  const state = `${statePrefix}.${signature}`;
+  if (previousPromptId !== undefined || (requestState === undefined && inputResponses === undefined)) {
     sendResult(id, {
       resultType: "input_required",
-      inputRequests: { confirmation: { method: "elicitation/create", params: form } },
+      inputRequests: { [inputKey]: { method: "elicitation/create", params: form } },
       requestState: state,
     });
     return;
@@ -146,7 +175,7 @@
   ) {
     throw new Error("Confirmation does not belong to this tool call.");
   }
-  const response = inputResponses?.confirmation;
+  const response = inputResponses?.[inputKey];
   if (!["accept", "decline", "cancel"].includes(response?.action)) {
     throw new Error("Missing or invalid confirmation response.");
   }
@@ -213,6 +242,13 @@
   });
 }
 
+function sendPromoConfirmation(id, result) {
+  sendResult(id, {
+    content: [{ type: "text", text: JSON.stringify(result) }],
+    structuredContent: result,
+  });
+}
+
 async function handlePromoOrgConfirmation(id, params) {
   const args = params.arguments;
   if (!Array.isArray(args?.destinations) || args.destinations.length === 0 || Object.keys(args).length !== 1) {
@@ -238,34 +274,55 @@
       title: destination.display_name ? `${destination.display_name} (${orgId})` : orgId,
     };
   });
-  const elicitation = await elicit(id, params, {
-    mode: "form",
-    message:
-      "Your ChatGPT subscription includes free API credits. Choose the API organization that will receive them. You can't change the organization for this claim later.",
-    requestedSchema: {
-      type: "object",
-      properties: {
-        destination_account_id: { type: "string", title: "Platform organization", oneOf: choices },
+  const stateParts = protocol === PROTOCOL && typeof params.requestState === "string"
+    ? params.requestState.split(".", 3)
+    : [];
+  let selectedIndex;
+  let previousPromptId;
+  if (stateParts[1] === PROMO_DISCLOSURE_INPUT) {
+    selectedIndex = Number(stateParts[2]);
+    if (choices[selectedIndex] === undefined) {
+      throw new Error("Confirmation does not identify an available Platform organization.");
+    }
+  } else {
+    const picker = await elicit(id, params, {
+      mode: "form",
+      message:
+        "Your ChatGPT subscription includes free API credits. Choose the API organization that will receive them. You can't change the organization for this claim later.",
+      requestedSchema: {
+        type: "object",
+        properties: {
+          destination_account_id: { type: "string", title: "Platform organization", oneOf: choices },
+        },
+        required: ["destination_account_id"],
       },
-      required: ["destination_account_id"],
+    }, { inputKey: PROMO_ORG_INPUT });
+    if (!picker) return;
+    selectedIndex = choices.findIndex(({ const: orgId }) => orgId === picker.content?.destination_account_id);
+    if (picker.action !== "accept" || selectedIndex === -1) {
+      return sendPromoConfirmation(id, { status: "not_approved" });
+    }
+    previousPromptId = picker.promptId;
+  }
+
+  // Carry the confirmed org in the signed state while the disclosure is open.
+  const disclosure = await elicit(id, params, PROMO_DISCLOSURE_FORM, {
+    inputKey: PROMO_DISCLOSURE_INPUT,
+    context: choices,
+    previousPromptId,
+    stateData: selectedIndex,
+  });
+  if (!disclosure) return;
+  if (disclosure.action !== "accept" || disclosure.content?.acknowledged !== true) {
+    return sendPromoConfirmation(id, { status: "not_approved" });
+  }
+  sendPromoConfirmation(id, {
+    status: "approved",
+    link_arguments: {
+      destination_account_id: choices[selectedIndex].const,
+      operation_id: protocol === PROTOCOL ? disclosure.promptId : randomUUID(),
     },
   });
-  if (!elicitation) return;
-  const orgId = elicitation.content?.destination_account_id;
-  const result =
-    elicitation.action === "accept" && orgIds.has(orgId)
-      ? {
-          status: "approved",
-          link_arguments: {
-            destination_account_id: orgId,
-            operation_id: protocol === PROTOCOL ? elicitation.promptId : randomUUID(),
-          },
-        }
-      : { status: "not_approved" };
-  sendResult(id, {
-    content: [{ type: "text", text: JSON.stringify(result) }],
-    structuredContent: result,
-  });
 }
 
 async function handleToolCall(id, params) {