René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Codex (ChatGPT-OAuth) model calls 401 — stub id_token advertises \"free\" plan, routing codex to api.openai.com","articleBody":"## Description\n\nWhen an agent uses the **Codex** provider with a **ChatGPT-OAuth** (subscription) credential, every model call fails with:\n\n```\n401 Unauthorized: WebSocket upgrade rejected by upstream (wss://api.openai.com/v1/responses)\n```\n\n## Root cause\n\nOneCLI serves codex a stub `id_token` from `packages/api/src/lib/codex-stubs.ts`. Its payload advertises a **free** plan:\n\n```json\n\"https://api.openai.com/auth\": { \"chatgpt_plan_type\": \"free\", ... }\n```\n\ncodex-cli (\u003e= 0.14x) selects its model backend from this claim:\n\n- `free` → `wss://api.openai.com/v1/responses` (API mode). OneCLI injects the ChatGPT-OAuth **subscription** token here, which `api.openai.com` does not accept → **401**.\n- a paid plan → `wss://chatgpt.com/backend-api/codex/responses`, where the injected subscription token **is** valid → 200.\n\nSo the credential injection itself is correct — the stub just steers codex to the wrong (API-key) endpoint.\n\n## Evidence (gateway logs, one Codex session)\n\n```\nforward    GET  chatgpt.com/backend-api/...             status=200  injections_applied=2\nwebsocket       api.openai.com/v1/responses (upgrade)   status=401  upstream rejected upgrade\n```\n\nHTTP calls to `chatgpt.com` inject fine; only the `api.openai.com` WS upgrade 401s — consistent with wrong-endpoint routing, not a missing injection.\n\n## Fix\n\nAdvertise a paid plan in the stub `id_token` so codex routes to the `chatgpt.com` backend. The real entitlement stays enforced upstream by the injected token; this claim only steers routing. PR to follow.\n\n## Environment\n\n- OneCLI `1.41.0`\n- codex-cli `\u003e= 0.14x`, ChatGPT-OAuth (subscription) credential\n","author":{"url":"https://github.com/robbyczgw-cla","@type":"Person","name":"robbyczgw-cla"},"datePublished":"2026-07-10T10:41:35.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/425/onecli/issues/425"}