[0xMrMasry]

What changed

Codex discovery advertises client version 0.144.1, which can hide newer models available to the signed-in account. Update the shared version to 0.162.1, covering both direct model listing and translated catalog requests on every platform.

With the same account and token, changing only this version increased the visible list from three GPT-5.6 models to seven, adding GPT-6.1 Sol, GPT-6 Astra, GPT-6 Sol, and GPT-6 Luna. Model visibility filtering and account permissions are unchanged. This PR is independent of the SQLite fix in #1868.

How it was checked

• Live read-only catalog comparison, then a rebuilt executable and catalog refresh: all seven models are cached. No inference calls were made.
• Existing model-listing and request-translation tests pass:

go test ./internal/codexauth -run 'TestC12ListingUsesAccountHeadersFiltersVisibilityAndCachesLevels|TestC13C14C15TransportMapsTurnHeadersStreamAndReasoningRoundTrip' -count=1

• go vet ./internal/codexauth and git diff --check pass.
• The full auth suite encounters two unmodified Windows file-permission assertions expecting POSIX mode 0600.
• make pr-ready passes go build ./..., then stops at go vet ./... on unmodified tests using Unix-only syscalls or test helpers excluded on Windows. The full local gate does not pass.

Checklist

• Change entry for fix: refresh Codex client version to expose newer models #1870 added and validated with make changelog-check.
• No command, tool, default model, or limit changed; existing discovery behavior is restored.
• No new .github/known-red.txt entry.
• Only this fix is included; no SQLite changes.

[AbirAbbas]

Verified this one. 0.162.1 is a published Codex CLI release (openai/codex rust-v0.162.1, 2026-10-09, and on npm). With the same account and headers, a read-only catalog GET returns 3 visible models at client_version=0.144.1 and 7 at 0.162.1, which matches what you saw. Both doors (direct List and the translated GET /models) share the constant, and the User-Agent is still codeaf.

The existing C12 test compared the request to the same constant the code uses, so it would pass with any version. I added a catalog fixture that gates a visible model on 0.162.1 and checks it comes through both doors. It fails if only tokens.go is put back to dev. I also merged current dev. CI is green. Thanks!