From e5a5cc6f76670b94fd0b2604195a0bfd213b5c23 Mon Sep 17 00:00:00 2001
From: luvs01 <luvs01@hanmail.net>
Date: Mon, 7 Sep 2026 15:24:05 +0900
Subject: [PATCH] fix(server): admit exported chat clients on loopback listener

---
 src/server/index.ts                                |  5 +++++
 tests/server/loopback-listener-integration.test.ts | 11 ++++++++++-
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/src/server/index.ts b/src/server/index.ts
index 8d46c30ab6..dd4a684288 100644
--- a/src/server/index.ts
+++ b/src/server/index.ts
@@ -813,6 +813,10 @@ export function startServer(port?: number, deps: StartServerDeps = {}): Server<W
    * `catalogPath: null`; Codex then builds an ONLINE model manager and `model/list` refreshes
    * through `GET {base_url}/models`. Returning 404 there would leave the picker on its bundled
    * fallback — fixing the direct-spawn host while breaking its model list.
+   *
+   * Exported Raycast and other OpenAI-compatible clients use Chat Completions. When this
+   * listener is selected as their loopback destination, that route must be admitted here too;
+   * the normal handler below still applies the same loopback policy and origin checks.
    */
   function loopbackRouteAllowed(url: URL, req: Request): boolean {
     const path = url.pathname;
@@ -824,6 +828,7 @@ export function startServer(port?: number, deps: StartServerDeps = {}): Server<W
     if (path === "/v1/images/generations" || path === "/v1/images/edits") {
       return req.method === "POST";
     }
+    if (path === "/v1/chat/completions") return req.method === "POST";
     if (path === "/v1/models") return req.method === "GET";
     // Realtime voice — a directly-spawned `codex app-server` needs these for desktop voice
     // the same way it needs /v1/responses. Two shapes, same trust model as /v1/responses:
diff --git a/tests/server/loopback-listener-integration.test.ts b/tests/server/loopback-listener-integration.test.ts
index 416fea6f4c..3336dc211c 100644
--- a/tests/server/loopback-listener-integration.test.ts
+++ b/tests/server/loopback-listener-integration.test.ts
@@ -290,7 +290,6 @@ describe("unauthenticated loopback listener", () => {
         { method: "GET", path: "/" },
         { method: "GET", path: "/healthz" },
         { method: "GET", path: "/readyz" },
-        { method: "POST", path: "/v1/chat/completions", body: '{"model":"x","messages":[]}' },
         { method: "POST", path: "/v1/messages", body: '{"model":"x","messages":[]}' },
         { method: "GET", path: "/v1/opencodex/artifacts/x" },
         // Voice call-create is admitted only as POST; the keyed sideband join only as an upgrade.
@@ -316,6 +315,16 @@ describe("unauthenticated loopback listener", () => {
       // And an allowlisted route is genuinely reachable, so the rejections above are not
       // passing merely because nothing works on this listener.
       expect((await fetch(`${base}/v1/models`)).status).toBe(200);
+
+      // Exported Raycast and other OpenAI-compatible clients target this listener and append
+      // /chat/completions to its /v1 base URL. The request must reach the normal handler rather
+      // than being rejected by the listener gate; the synthetic model can then fail normally.
+      const chatResponse = await fetch(`${base}/v1/chat/completions`, {
+        method: "POST",
+        body: '{"model":"x","messages":[]}',
+        headers: { "content-type": "application/json" },
+      });
+      expect(chatResponse.status).not.toBe(404);
     } finally {
       await server.stop(true);
     }