feat: publish sanitized custom.97 source

service/codex_channel_models.go

@@ -19,18 +19,26 @@ func FetchCodexChannelModels(channel *model.Channel) ([]string, error) {
 		return nil, fmt.Errorf("codex channel does not support multi-key model discovery")
 	}
 
-	client, err := NewProxyHttpClient(channel.GetSetting().Proxy)
-	if err != nil {
-		return nil, err
-	}
+	setting := channel.GetSetting()
 	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
 	defer cancel()
 
-	clientVersion, err := GetLatestCodexClientVersion(ctx, client)
+	// The GitHub release lookup is not an upstream request; it always verifies
+	// certificates, whatever the channel's TLS setting says.
+	releaseClient, err := GetHttpClientWithProxy(setting.Proxy)
+	if err != nil {
+		return nil, err
+	}
+	clientVersion, err := GetLatestCodexClientVersion(ctx, releaseClient)
 	if err != nil {
 		return nil, fmt.Errorf("failed to get Codex client version: %w", err)
 	}
 
+	client, err := GetHttpClientWithProxySettings(setting.Proxy, setting)
+	if err != nil {
+		return nil, err
+	}
+
 	baseURL := channel.GetBaseURL()
 	if baseURL == "" {
 		baseURL = constant.GetChannelBaseURL(constant.ChannelTypeCodex)