# Source and license notices

Sol/Luna metadata and reasoning mappings were checked against Apache-2.0 Codex
revision `40eac3ce8a0c10cbcb9db910d529355eb2f8fc09` and the MIT Pi 0.87.1
catalog. See `provenance/openai-codex-40eac3ce-sol-luna.json`. Request adaptation
uses Pi's Off mapping; it does not add public-API TTL fields to Codex Lite.

OpenAI ChatGPT request-field compatibility was adapted from MIT-licensed Pi
0.99.1, revision `d86654abb8862e201933517d6f1fce9f88dd117f`,
`packages/ai/src/api/openai-responses.ts`: the official-endpoint/token predicate,
temperature omission, and standard output-token compatibility/minimum.
Authentication and refresh use Pi's public interfaces, not copied OAuth code.

Per-thinking-level sampling precedence adapts MIT-licensed Pi 1.2.0,
revision `06a466935536f8c9bcacb2d5efc0fc021be1bdff`,
`packages/ai/src/api/simple-options.ts`. The local merge uses Pi's exported
thinking-level clamp and adds request-envelope, subscription and Lite guards;
it does not copy the upstream unrestricted payload assignment.

Append-only effort updates follow Apache-2.0 Codex revision
`0585dcb5dbb276a78909fa8fd0b36310f16973f9` and MIT Pi 1.5.0 revision
`f9a26365568127461c47a07a37dcb42c140a3ac5`. The local implementation replays
Pi's persisted provider-effort annotations, coalesces unchanged settings and
derives the request baseline from surviving context instead of a separate pin.
Source hashes and boundaries are in runtime's
`provenance/openai-codex-0585dcb-effort-updates.json`.

This package owns core code split from `@oai404iao/pi-codex-minimal-tools`.
Project material remains Copyright (c) 2026 oai404iao. The composite LICENSE
and verified Apache license/NOTICE snapshots are retained.

Codex protocol evidence remains pinned to
`eb9dceba1a2e658142a456c5898836774835616b`;
apply-patch compatibility evidence remains pinned to
`03bb3b12367397e14a8facc2e018d645ff4d8e83`.
The unmodified provenance record preserves upstream source identifiers, not
claims that every referenced source file is shipped in this package.

The `openai-codex/gpt-6-astra` Lite behavior is derived from Codex
model/request metadata at
`ddea03ad049142943bdbf13e937b1d67e8c1ba0c`, cross-checked against the
MIT-licensed `@earendil-works/pi-ai@0.85.1` catalog. Exact source and tarball
identifiers are recorded in
`provenance/openai-codex-ddea03ad-astra.json`.

Patch adaptations and the exact grammar asset now belong to `pi-codex-tools`,
which retains their source modification notices, Apache-2.0 terms and upstream
NOTICE. Core retains transport-related attribution and historical provenance;
the provenance paths do not imply current ownership of the moved patch code.
The internal Responses Lite transport is an unsupported compatibility boundary.

See `pi-codex-runtime/reference/source-map.md` in the repository for the pinned
evidence map. Immutable provenance paths describe the original source snapshot.