diff --git a/backend/internal/handler/account_auto_config_outcome.go b/backend/internal/handler/account_auto_config_outcome.go
index 687b3f92d93..2a7848ddd20 100644
--- a/backend/internal/handler/account_auto_config_outcome.go
+++ b/backend/internal/handler/account_auto_config_outcome.go
@@ -31,10 +31,13 @@ func observeAutoConfigRequest(c *gin.Context, ops *service.OpsService, w *opsCap
 		}
 	}
 	for id := range failed {
+		if service.IsPrismBrowserAttempt(c, id) {
+			continue
+		}
 		ops.ObserveConcurrencyResult(service.AccountConcurrencyResult{AccountID: id, StartedAt: started})
 	}
 	id := c.GetInt64(opsAccountIDKey)
-	if id <= 0 || failed[id] {
+	if id <= 0 || failed[id] || service.IsPrismBrowserAttempt(c, id) {
 		return
 	}
 	if c.Request.Context().Err() != nil || c.Writer.Status() == 499 {
diff --git a/backend/internal/handler/account_auto_config_outcome_test.go b/backend/internal/handler/account_auto_config_outcome_test.go
index c1e6c80d240..3ed71f939d5 100644
--- a/backend/internal/handler/account_auto_config_outcome_test.go
+++ b/backend/internal/handler/account_auto_config_outcome_test.go
@@ -146,3 +146,24 @@ func TestAutoConfigSplitSSEAndWriterReuse(t *testing.T) {
 	require.False(t, state.terminalSuccess)
 	state.mu.RUnlock()
 }
+
+func TestAutoConfigPrismDoesNotChangeNativeTier(t *testing.T) {
+	for _, status := range []int{200, 422, 429, 502} {
+		ops := service.NewOpsService(nil, nil, &config.Config{}, nil, nil, nil, nil, nil, nil, nil, nil)
+		var got []service.AccountConcurrencyResult
+		ops.SetAutoConfigObserver(func(r service.AccountConcurrencyResult) { got = append(got, r) })
+		router := gin.New()
+		router.Use(OpsErrorLoggerMiddleware(ops))
+		router.POST("/v1/responses", func(c *gin.Context) {
+			c.Set(opsAccountIDKey, int64(8))
+			service.MarkPrismBrowserAttempt(c, 7)
+			service.MarkPrismBrowserAttempt(c, 8)
+			c.Set(service.OpsUpstreamErrorsKey, []*service.OpsUpstreamErrorEvent{{AccountID: 7}, {AccountID: 9}})
+			c.JSON(status, gin.H{"fixture": true})
+		})
+		router.ServeHTTP(httptest.NewRecorder(), httptest.NewRequest(http.MethodPost, "/v1/responses", nil))
+		require.Len(t, got, 1)
+		require.Equal(t, int64(9), got[0].AccountID)
+		require.False(t, got[0].Success)
+	}
+}
diff --git a/backend/internal/handler/openai_prism_error_test.go b/backend/internal/handler/openai_prism_error_test.go
new file mode 100644
index 00000000000..b7d62f27bdd
--- /dev/null
+++ b/backend/internal/handler/openai_prism_error_test.go
@@ -0,0 +1,98 @@
+package handler
+
+import (
+	"context"
+	"encoding/json"
+	"io"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+
+	"github.com/Wei-Shaw/sub2api/internal/config"
+	"github.com/Wei-Shaw/sub2api/internal/service"
+	"github.com/gin-gonic/gin"
+	"github.com/stretchr/testify/require"
+)
+
+func TestPrismErrorDoesNotAppendFallback(t *testing.T) {
+	for _, status := range []int{400, 401, 409, 422, 429, 502, 200} {
+		for _, mode := range []string{"json", "stream", "stream_started"} {
+			func() {
+				server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+					w.WriteHeader(status)
+					_, _ = io.WriteString(w, `{"error":{"type":"unsupported_request","message":"fixture"}}`)
+				}))
+				defer server.Close()
+				cfg := &config.Config{}
+				cfg.Gateway.PrismBrowser = config.GatewayPrismBrowserConfig{Enabled: true, BaseURL: server.URL + "/v1", APIKey: "fixture"}
+				account := &service.Account{ID: 300, Status: service.StatusActive, Schedulable: true, Platform: service.PlatformOpenAI, Type: service.AccountTypeOAuth,
+					Credentials: map[string]any{"access_token": "fixture"}, Extra: map[string]any{"openai_prism_browser": true}}
+				gateway := service.NewOpenAIGatewayService(excelBPSErrorAccountRepo{account: account}, nil, nil, nil, nil, nil, nil, nil, cfg, nil, nil, nil, nil, nil, nil, nil, nil, nil, nil, nil, nil, nil, nil)
+				body, err := json.Marshal(map[string]any{"model": "gpt-6.1-sol", "input": "hi", "stream": mode != "json"})
+				require.NoError(t, err)
+				rec := httptest.NewRecorder()
+				c, _ := gin.CreateTestContext(rec)
+				c.Request = httptest.NewRequest(http.MethodPost, "/v1/responses", nil)
+				if mode == "stream_started" {
+					c.Header("Content-Type", "text/event-stream")
+					_, err = c.Writer.WriteString(": keepalive\n\n")
+					require.NoError(t, err)
+					c.Writer.Flush()
+				}
+				before := c.Writer.Size()
+				_, err = gateway.Forward(context.Background(), c, account, body)
+				require.Error(t, err)
+				response := rec.Body.String()
+				if !openAIForwardErrorAlreadyCommunicated(c, before, err) {
+					require.False(t, (&OpenAIGatewayHandler{}).ensureForwardErrorResponse(c, false))
+				}
+				require.Equal(t, response, rec.Body.String())
+				if mode == "stream_started" {
+					require.Equal(t, 1, strings.Count(response, "event: response.failed"))
+					for _, line := range strings.Split(response, "\n") {
+						if strings.HasPrefix(line, "data: ") {
+							require.True(t, json.Valid([]byte(strings.TrimPrefix(line, "data: "))))
+						}
+					}
+				} else {
+					require.True(t, json.Valid(rec.Body.Bytes()), response)
+					require.NotContains(t, response, "event:")
+				}
+				require.True(t, service.IsPrismBrowserAttempt(c, 300))
+			}()
+		}
+	}
+}
+
+type prismScopeNativeUpstream struct {
+	service.HTTPUpstream
+	calls int
+}
+
+func (u *prismScopeNativeUpstream) Do(_ *http.Request, _ string, _ int64, _ int) (*http.Response, error) {
+	u.calls++
+	return &http.Response{StatusCode: 400, Header: http.Header{}, Body: io.NopCloser(strings.NewReader(`{"error":{"message":"native fixture"}}`))}, nil
+}
+
+func TestPrismUnselectedModelsUseExistingNativeRoute(t *testing.T) {
+	for _, model := range []string{"gpt-4o-audio-preview", "gpt-5.6-sol"} {
+		t.Run(model, func(t *testing.T) {
+			upstream := &prismScopeNativeUpstream{}
+			cfg := &config.Config{}
+			// An unreachable adapter must not interfere with unselected models.
+			cfg.Gateway.PrismBrowser = config.GatewayPrismBrowserConfig{Enabled: true, BaseURL: "http://127.0.0.1:1/v1", APIKey: "fixture"}
+			account := &service.Account{ID: 300, Status: service.StatusActive, Schedulable: true, Platform: service.PlatformOpenAI, Type: service.AccountTypeOAuth,
+				Credentials: map[string]any{"access_token": "fixture"}, Extra: map[string]any{"openai_prism_browser": true,
+					service.PrismBrowserModelsKey: []string{"gpt-6.1-sol"}, "openai_passthrough": true}}
+			gateway := service.NewOpenAIGatewayService(excelBPSErrorAccountRepo{account: account}, nil, nil, nil, nil, nil, nil, nil, cfg, nil, nil, nil, nil, nil, upstream, nil, nil, nil, nil, nil, nil, nil, nil)
+			body, err := json.Marshal(map[string]any{"model": model, "input": "hi"})
+			require.NoError(t, err)
+			c, _ := gin.CreateTestContext(httptest.NewRecorder())
+			c.Request = httptest.NewRequest(http.MethodPost, "/v1/responses", nil)
+			_, _ = gateway.Forward(context.Background(), c, account, body)
+			require.Equal(t, 1, upstream.calls)
+			require.False(t, service.IsPrismBrowserAttempt(c, account.ID))
+		})
+	}
+}
diff --git a/backend/internal/service/account_prism.go b/backend/internal/service/account_prism.go
new file mode 100644
index 00000000000..f70bd31182d
--- /dev/null
+++ b/backend/internal/service/account_prism.go
@@ -0,0 +1,58 @@
+package service
+
+import "strings"
+
+const PrismBrowserModelsKey = "openai_prism_browser_models"
+
+var prismBrowserModels = [...]string{"gpt-6.1-sol", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-6-luna"}
+
+// PrismBrowserSupportedModels returns the adapter contract, not a statement of
+// live account entitlement. Never treat an absent scope as all OpenAI models.
+func PrismBrowserSupportedModels() []string {
+	return append([]string(nil), prismBrowserModels[:]...)
+}
+
+func isPrismBrowserModel(model string) bool {
+	for _, supported := range prismBrowserModels {
+		if model == supported {
+			return true
+		}
+	}
+	return false
+}
+
+// IsPrismBrowserEnabledForModel follows the same account-mapping order as BPS.
+// Models outside this scope retain their ordinary native/BPS routing.
+func (a *Account) IsPrismBrowserEnabledForModel(requestedModel string) bool {
+	if !accountHasPrismBrowser(a) {
+		return false
+	}
+	upstream := a.GetMappedModel(strings.TrimSpace(requestedModel))
+	return a.isPrismBrowserUpstreamModelEnabled(upstream)
+}
+
+func (a *Account) isPrismBrowserUpstreamModelEnabled(upstream string) bool {
+	upstream = strings.TrimSpace(upstream)
+	if !accountHasPrismBrowser(a) || !isPrismBrowserModel(upstream) {
+		return false
+	}
+	raw, configured := a.Extra[PrismBrowserModelsKey]
+	if !configured {
+		return true // Legacy enabled accounts inherit only the four known models.
+	}
+	switch models := raw.(type) {
+	case []string:
+		for _, model := range models {
+			if strings.TrimSpace(model) == upstream {
+				return true
+			}
+		}
+	case []any:
+		for _, value := range models {
+			if model, ok := value.(string); ok && strings.TrimSpace(model) == upstream {
+				return true
+			}
+		}
+	}
+	return false // Explicit empty or malformed scopes never widen routing.
+}
diff --git a/backend/internal/service/account_prism_test.go b/backend/internal/service/account_prism_test.go
new file mode 100644
index 00000000000..ab56caaef2a
--- /dev/null
+++ b/backend/internal/service/account_prism_test.go
@@ -0,0 +1,57 @@
+package service
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestPrismBrowserModelScope(t *testing.T) {
+	for _, tc := range []struct {
+		name       string
+		scope      any
+		configured bool
+		model      string
+		want       bool
+	}{
+		{"legacy Sol", nil, false, "gpt-6.1-sol", true},
+		{"legacy audio stays native", nil, false, "gpt-4o-audio-preview", false},
+		{"selected", []any{"gpt-6.1-sol"}, true, "gpt-6.1-sol", true},
+		{"unselected", []any{"gpt-6.1-sol"}, true, "gpt-5.6-sol", false},
+		{"empty", []string{}, true, "gpt-6.1-sol", false},
+		{"null", nil, true, "gpt-6.1-sol", false},
+		{"malformed", "gpt-6.1-sol", true, "gpt-6.1-sol", false},
+		{"wildcard never widens", []string{"*"}, true, "gpt-6.1-sol", false},
+		{"unsupported cannot be selected", []string{"gpt-4o-audio-preview"}, true, "gpt-4o-audio-preview", false},
+		{"explicit alias", []string{"gpt-6.1-sol"}, true, "my-sol", true},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			_, a := prismTestService("")
+			a.Credentials["model_mapping"] = map[string]any{"my-sol": "gpt-6.1-sol"}
+			if tc.configured {
+				a.Extra[PrismBrowserModelsKey] = tc.scope
+			}
+			require.Equal(t, tc.want, a.IsPrismBrowserEnabledForModel(tc.model))
+			a.Extra["openai_prism_browser"] = false
+			require.False(t, a.IsPrismBrowserEnabledForModel(tc.model))
+		})
+	}
+	_, a := prismTestService("")
+	for _, model := range PrismBrowserSupportedModels() {
+		require.True(t, a.IsPrismBrowserEnabledForModel(model))
+	}
+}
+
+func TestPrismScopePreservesNativeWebSocketModels(t *testing.T) {
+	s, a := prismTestService("")
+	s.cfg = newSchedulerTestOpenAIWSV2Config()
+	a.Extra["openai_oauth_responses_websockets_v2_enabled"] = true
+	a.Extra[PrismBrowserModelsKey] = []string{"gpt-6.1-sol"}
+	for _, model := range []string{"gpt-4o-audio-preview", "gpt-5.6-sol"} {
+		require.True(t, s.isOpenAIAccountTransportCompatible(a, OpenAIUpstreamTransportResponsesWebsocketV2Ingress, model))
+	}
+	require.False(t, s.isOpenAIAccountTransportCompatible(a, OpenAIUpstreamTransportResponsesWebsocketV2Ingress, "gpt-6.1-sol"))
+	before := openAITurnRouteFingerprint(a)
+	a.Extra[PrismBrowserModelsKey] = []string{}
+	require.NotEqual(t, before, openAITurnRouteFingerprint(a))
+}
diff --git a/backend/internal/service/account_test_service.go b/backend/internal/service/account_test_service.go
index 31259fbdf90..82b9639cfea 100644
--- a/backend/internal/service/account_test_service.go
+++ b/backend/internal/service/account_test_service.go
@@ -411,7 +411,7 @@ func (s *AccountTestService) TestAccountConnection(c *gin.Context, accountID int
 	}
 
 	if account.IsOpenAI() {
-		if accountHasPrismBrowser(account) {
+		if account.IsPrismBrowserEnabledForModel(modelID) {
 			if normalizeAccountTestMode(mode) != AccountTestModeDefault || testOpts.ImageDataURL != "" || testOpts.AudioDataURL != "" {
 				return s.sendErrorAndEnd(c, "Prism supports the default text test only")
 			}
@@ -451,6 +451,7 @@ func (s *AccountTestService) testPrismBrowserConnection(c *gin.Context, account
 	if modelID == "" {
 		modelID = "gpt-5.6-sol"
 	}
+	modelID = account.GetMappedModel(modelID)
 	if prompt == "" {
 		prompt = "hi"
 	}
diff --git a/backend/internal/service/openai_account_scheduler.go b/backend/internal/service/openai_account_scheduler.go
index beb3efed23a..884d0c3d32c 100644
--- a/backend/internal/service/openai_account_scheduler.go
+++ b/backend/internal/service/openai_account_scheduler.go
@@ -2762,7 +2762,7 @@ func (s *OpenAIGatewayService) isOpenAIAccountTransportCompatible(account *Accou
 	}
 	// Prism runs one HTTP turn per request; the WS entry would only close the
 	// session after selection, so keep WS clients on the other accounts.
-	if accountHasPrismBrowser(account) {
+	if len(requestedModels) > 0 && account.IsPrismBrowserEnabledForModel(requestedModels[0]) {
 		return false
 	}
 	if requiredTransport == OpenAIUpstreamTransportResponsesWebsocketV2Ingress {
diff --git a/backend/internal/service/openai_codex_ticket.go b/backend/internal/service/openai_codex_ticket.go
index 45cd5fc9894..18bfd9afb0f 100644
--- a/backend/internal/service/openai_codex_ticket.go
+++ b/backend/internal/service/openai_codex_ticket.go
@@ -810,7 +810,7 @@ func (s *OpenAIGatewayService) openAICodexTicketOutboundModel(account *Account,
 // outboundModel 必须是真正会发给上游的模型名（openAICodexTicketOutboundModel），
 // 不是客户端原始模型：注入侧读的是出站 body.model，两侧口径必须一致。
 func (s *OpenAIGatewayService) openAICodexTicketBlocksAccount(account *Account, outboundModel string) bool {
-	if accountHasPrismBrowser(account) {
+	if account.isPrismBrowserUpstreamModelEnabled(outboundModel) {
 		return false
 	}
 	if s == nil || !isOpenAICodexTicketAccount(account, outboundModel) || !s.openAICodexTicketEnabled() {
diff --git a/backend/internal/service/openai_gateway_forward.go b/backend/internal/service/openai_gateway_forward.go
index 3ce8c3498c3..74dedd799dc 100644
--- a/backend/internal/service/openai_gateway_forward.go
+++ b/backend/internal/service/openai_gateway_forward.go
@@ -105,7 +105,7 @@ func (s *OpenAIGatewayService) Forward(ctx context.Context, c *gin.Context, acco
 	}
 
 	modelForBPS := gjson.GetBytes(body, "model").String()
-	if accountHasPrismBrowser(account) {
+	if account.IsPrismBrowserEnabledForModel(modelForBPS) {
 		return s.forwardPrismBrowser(ctx, c, account, body, startTime)
 	}
 	if c.GetBool(bpsAccountProbeRequiredContextKey) &&
diff --git a/backend/internal/service/openai_prism_browser.go b/backend/internal/service/openai_prism_browser.go
index 7bdafaf5da7..220058d530e 100644
--- a/backend/internal/service/openai_prism_browser.go
+++ b/backend/internal/service/openai_prism_browser.go
@@ -18,10 +18,31 @@ import (
 
 	"github.com/gin-gonic/gin"
 	"github.com/tidwall/gjson"
+	"github.com/tidwall/sjson"
 )
 
 const prismBrowserMaxResponseBytes = 2 << 20
 
+const prismBrowserAttemptsKey = "prism_browser_attempts"
+
+// MarkPrismBrowserAttempt separates adapter admission/outcomes from the native
+// account concurrency ramp. Keep all attempts so failover cannot lose the mark.
+func MarkPrismBrowserAttempt(c *gin.Context, accountID int64) {
+	value, _ := c.Get(prismBrowserAttemptsKey)
+	ids, _ := value.(map[int64]bool)
+	if ids == nil {
+		ids = make(map[int64]bool)
+	}
+	ids[accountID] = true
+	c.Set(prismBrowserAttemptsKey, ids)
+}
+
+func IsPrismBrowserAttempt(c *gin.Context, accountID int64) bool {
+	value, _ := c.Get(prismBrowserAttemptsKey)
+	ids, _ := value.(map[int64]bool)
+	return ids[accountID]
+}
+
 func prismBrowserTerminal(body []byte, model string, stream bool) (string, error) {
 	terminal := body
 	var itemEvents []gjson.Result
@@ -213,42 +234,88 @@ func prismBrowserAdapterErrorMessage(status int, body []byte) string {
 	}
 }
 
+// Only log protocol codes we own. Never copy arbitrary adapter messages or
+// reflected input into gateway logs when diagnosing fast 422 refusals.
+func prismBrowserForwardError(status int, body []byte) error {
+	code := gjson.GetBytes(body, "error.type").String()
+	switch code {
+	case "tools_disabled", "unsupported_model", "unsupported_request", "unsupported_reasoning",
+		"unsupported_input", "unsupported_tool_model", "unsupported_tool", "invalid_tools",
+		"invalid_tool_choice", "invalid_tool_payload", "unsupported_reasoning_history",
+		"model_unavailable", "reasoning_unavailable", "pending_turn", "prism_busy":
+		return fmt.Errorf("prism adapter returned HTTP %d (%s)", status, code)
+	default:
+		return fmt.Errorf("prism adapter returned HTTP %d", status)
+	}
+}
+
 func (s *OpenAIGatewayService) forwardPrismBrowser(ctx context.Context, c *gin.Context, account *Account, body []byte, started time.Time) (*OpenAIForwardResult, error) {
+	MarkPrismBrowserAttempt(c, account.ID)
+	// This path buffers and writes a complete JSON or SSE response, including
+	// errors. The handler must never append another response.failed envelope.
+	defer func() {
+		if c.Writer.Written() {
+			MarkResponseCommitted(c)
+		}
+	}()
+	writeError := func(status int, raw []byte) {
+		committed := StopOpenAICompactSSEKeepaliveCommitted(c)
+		if committed || c.Writer.Written() {
+			code := gjson.GetBytes(raw, "error.type").String()
+			message := gjson.GetBytes(raw, "error.message").String()
+			writeOpenAICompactSSEFailureMessage(c, status, code, message)
+			return
+		}
+		c.Data(status, "application/json", raw)
+	}
+	fail := func(status int, code, message string) {
+		raw, _ := json.Marshal(gin.H{"error": gin.H{"type": code, "message": message}})
+		writeError(status, raw)
+	}
 	if isOpenAIResponsesCompactPath(c) {
-		c.JSON(http.StatusBadRequest, gin.H{"error": gin.H{"type": "invalid_request_error", "message": "Prism adapter does not support responses/compact"}})
+		fail(http.StatusBadRequest, "invalid_request_error", "Prism adapter does not support responses/compact")
 		return nil, errors.New("prism adapter does not support responses/compact")
 	}
 	model := strings.TrimSpace(gjson.GetBytes(body, "model").String())
 	stream := gjson.GetBytes(body, "stream").Bool()
 	if model == "" {
-		c.JSON(http.StatusBadRequest, gin.H{"error": gin.H{"type": "invalid_request_error", "message": "model is required"}})
+		fail(http.StatusBadRequest, "invalid_request_error", "model is required")
 		return nil, errors.New("prism adapter model is required")
 	}
+	upstreamModel := account.GetMappedModel(model)
+	if upstreamModel != model {
+		mapped, mapErr := sjson.SetBytes(body, "model", upstreamModel)
+		if mapErr != nil {
+			fail(http.StatusBadRequest, "invalid_request_error", "invalid Prism request")
+			return nil, mapErr
+		}
+		body = mapped
+	}
 	sessionID, err := prismBrowserSessionID(c, account.ID, body)
 	if err != nil {
-		c.JSON(http.StatusBadRequest, gin.H{"error": gin.H{"type": "invalid_request_error", "message": err.Error()}})
+		fail(http.StatusBadRequest, "invalid_request_error", err.Error())
 		return nil, err
 	}
 	responseBody, upstreamHeaders, status, err := s.callPrismBrowserForCaller(ctx, account, body, sessionID, prismBrowserCallerID(c, account.ID))
 	if err != nil {
-		c.JSON(http.StatusBadGateway, gin.H{"error": gin.H{"type": "prism_unavailable", "message": "Prism adapter unavailable; request was not replayed"}})
+		fail(http.StatusBadGateway, "prism_unavailable", "Prism adapter unavailable; request was not replayed")
 		return nil, err
 	}
 	if status != http.StatusOK {
 		if prismBrowserAdapterMisconfigured(status) {
-			c.JSON(http.StatusBadGateway, gin.H{"error": gin.H{"type": "prism_unavailable", "message": "Prism adapter rejected the gateway; check the adapter key and endpoint"}})
+			fail(http.StatusBadGateway, "prism_unavailable", "Prism adapter rejected the gateway; check the adapter key and endpoint")
 			return nil, fmt.Errorf("prism adapter returned HTTP %d", status)
 		}
-		c.Data(status, "application/json", responseBody)
-		return nil, fmt.Errorf("prism adapter returned HTTP %d", status)
+		writeError(status, responseBody)
+		return nil, prismBrowserForwardError(status, responseBody)
 	}
-	responseID, err := prismBrowserTerminal(responseBody, model, stream)
+	responseID, err := prismBrowserTerminal(responseBody, upstreamModel, stream)
 	if err != nil {
-		c.JSON(http.StatusBadGateway, gin.H{"error": gin.H{"type": "invalid_prism_response", "message": "Prism adapter returned no valid terminal response"}})
+		fail(http.StatusBadGateway, "invalid_prism_response", "Prism adapter returned no valid terminal response")
 		return nil, err
 	}
 	if err := prismBrowserValidateToolCatalog(body, responseBody, stream); err != nil {
-		c.JSON(http.StatusBadGateway, gin.H{"error": gin.H{"type": "invalid_prism_response", "message": "Prism adapter returned an undeclared client tool"}})
+		fail(http.StatusBadGateway, "invalid_prism_response", "Prism adapter returned an undeclared client tool")
 		return nil, err
 	}
 	contentType := "application/json"
@@ -263,7 +330,7 @@ func (s *OpenAIGatewayService) forwardPrismBrowser(ctx context.Context, c *gin.C
 		ResponseID:       responseID,
 		UpstreamHeaders:  upstreamHeaders,
 		Model:            model,
-		UpstreamModel:    model,
+		UpstreamModel:    upstreamModel,
 		Stream:           stream,
 		Duration:         time.Since(started),
 		UsageUnavailable: true,
diff --git a/backend/internal/service/openai_turn_admission.go b/backend/internal/service/openai_turn_admission.go
index 01800c7d475..2be15178c17 100644
--- a/backend/internal/service/openai_turn_admission.go
+++ b/backend/internal/service/openai_turn_admission.go
@@ -188,7 +188,7 @@ func openAITurnRouteFingerprint(a *Account) [32]byte {
 	for _, key := range []string{
 		codexFingerprintSeedExtraKey, codexFingerprintModeExtraKey,
 		"openai_passthrough", "openai_oauth_passthrough", "openai_excel_bps", "openai_excel_bps_models", "openai_excel_bps_mihomo",
-		"openai_prism_browser",
+		"openai_prism_browser", PrismBrowserModelsKey,
 		"openai_oauth_responses_websockets_v2_mode", "openai_apikey_responses_websockets_v2_mode",
 		"openai_oauth_responses_websockets_v2_enabled", "openai_apikey_responses_websockets_v2_enabled",
 		"responses_websockets_v2_enabled", "openai_ws_enabled", "openai_ws_force_http",
@@ -397,7 +397,7 @@ func (s *OpenAIGatewayService) bindOpenAIWSHandshake(account *Account, model str
 }
 
 func (s *OpenAIGatewayService) checkOpenAIWSBinding(account *Account, model string, b *openAIWSTurnBinding) error {
-	if accountHasPrismBrowser(account) {
+	if account.isPrismBrowserUpstreamModelEnabled(model) {
 		return denyOpenAITurn("prism_requires_http")
 	}
 	if account.isExcelBPSUpstreamModelEnabled(model) {
diff --git a/backend/internal/service/openai_ws_forwarder_ingress.go b/backend/internal/service/openai_ws_forwarder_ingress.go
index ce2affcf04e..5646521c61c 100644
--- a/backend/internal/service/openai_ws_forwarder_ingress.go
+++ b/backend/internal/service/openai_ws_forwarder_ingress.go
@@ -599,7 +599,7 @@ func (s *OpenAIGatewayService) ProxyResponsesWebSocketFromClient(
 		return admissionErr
 	}
 	account = latest
-	if accountHasPrismBrowser(account) {
+	if account.IsPrismBrowserEnabledForModel(extractOpenAICodexTicketModel(firstClientMessage)) {
 		return NewOpenAIWSClientCloseError(coderws.StatusPolicyViolation, "Prism accounts require HTTP/SSE", nil)
 	}
 	if account.IsExcelBPSEnabledForModel(extractOpenAICodexTicketModel(firstClientMessage)) {
diff --git a/backend/internal/service/prism_browser_routing_test.go b/backend/internal/service/prism_browser_routing_test.go
index 5faddf827e1..1dca7af907f 100644
--- a/backend/internal/service/prism_browser_routing_test.go
+++ b/backend/internal/service/prism_browser_routing_test.go
@@ -2,6 +2,7 @@ package service
 
 import (
 	"context"
+	"encoding/json"
 	"io"
 	"net/http"
 	"net/http/httptest"
@@ -33,6 +34,13 @@ func TestPrismBrowserResponsesURL(t *testing.T) {
 	}
 }
 
+func TestPrismBrowserForwardErrorKeepsKnownCodeWithoutReflectingSecrets(t *testing.T) {
+	err := prismBrowserForwardError(422, []byte(`{"error":{"type":"tools_disabled","message":"private input fixture"}}`))
+	require.EqualError(t, err, "prism adapter returned HTTP 422 (tools_disabled)")
+	err = prismBrowserForwardError(422, []byte(`{"error":{"type":"private input fixture","message":"private input fixture"}}`))
+	require.EqualError(t, err, "prism adapter returned HTTP 422")
+}
+
 func TestPrismBrowserSessionIDUsesExistingCodexIdentity(t *testing.T) {
 	identity := func(keyID, accountID int64, headers map[string]string, body string) (string, error) {
 		c, _ := gin.CreateTestContext(httptest.NewRecorder())
@@ -147,6 +155,24 @@ func TestPrismBrowserInvalidSessionDoesNotDispatch(t *testing.T) {
 	}
 }
 
+func TestPrismBrowserExplicitMappingReachesAdapter(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var body map[string]any
+		require.NoError(t, json.NewDecoder(r.Body).Decode(&body))
+		require.Equal(t, "gpt-6.1-sol", body["model"])
+		_, _ = io.WriteString(w, `{"id":"resp_fixture","status":"completed","model":"gpt-6.1-sol","usage":null,"output":[{"content":[{"text":"21"}]}]}`)
+	}))
+	defer server.Close()
+	s, account := prismTestService(server.URL)
+	account.Credentials["model_mapping"] = map[string]any{"my-sol": "gpt-6.1-sol"}
+	c, _ := gin.CreateTestContext(httptest.NewRecorder())
+	c.Request = httptest.NewRequest(http.MethodPost, "/v1/responses", nil)
+	result, err := s.forwardPrismBrowser(context.Background(), c, account, []byte(`{"model":"my-sol","input":"hi"}`), time.Now())
+	require.NoError(t, err)
+	require.Equal(t, "my-sol", result.Model)
+	require.Equal(t, "gpt-6.1-sol", result.UpstreamModel)
+}
+
 func prismTestService(endpoint string) (*OpenAIGatewayService, *Account) {
 	cfg := &config.Config{}
 	cfg.Gateway.PrismBrowser = config.GatewayPrismBrowserConfig{Enabled: true, BaseURL: endpoint + "/v1", APIKey: "fixture-bridge-key"}
diff --git a/docs/screenshots/prism-model-scope/README.md b/docs/screenshots/prism-model-scope/README.md
new file mode 100644
index 00000000000..65667aef2fa
--- /dev/null
+++ b/docs/screenshots/prism-model-scope/README.md
@@ -0,0 +1,12 @@
+# Prism 专属模型选择
+
+入口：账号管理 → 编辑 OpenAI OAuth 账号 → Prism。
+
+截图来自本 PR 的实际 `EditAccountModal.vue`，使用本地 Vite、Playwright 和虚构账号 / mock API。验证了四模型默认勾选、仅保留 6.1 Sol 并提交保存、移动端深色布局；不是生产截图或整页导航验收。
+
+- `before.png`：生产基线 `bc83ff9c367883e5b7d0140e6bb42e2e7cc5239c`，只有总开关。
+- `after.png`：默认勾选四个已支持模型。
+- `selected.png`：仅勾选 6.1 Sol，mock 更新接口收到 `openai_prism_browser_models: ["gpt-6.1-sol"]`。
+- `mobile-dark.png`：相同选择在 390px 深色视口下的布局。
+
+源码改动与截图在同一提交；`manifest.json` 记录生成时的基线、修改状态和浏览器错误。可复用生成脚本在运维仓库 `.agents/skills/sub2api-pr-management/scripts/screenshot-prism-model-scope.mjs`。
diff --git a/docs/screenshots/prism-model-scope/after.png b/docs/screenshots/prism-model-scope/after.png
new file mode 100644
index 00000000000..edd5e131cc3
Binary files /dev/null and b/docs/screenshots/prism-model-scope/after.png differ
diff --git a/docs/screenshots/prism-model-scope/before.png b/docs/screenshots/prism-model-scope/before.png
new file mode 100644
index 00000000000..f78814e3658
Binary files /dev/null and b/docs/screenshots/prism-model-scope/before.png differ
diff --git a/docs/screenshots/prism-model-scope/manifest.json b/docs/screenshots/prism-model-scope/manifest.json
new file mode 100644
index 00000000000..24efc7d798a
--- /dev/null
+++ b/docs/screenshots/prism-model-scope/manifest.json
@@ -0,0 +1,10 @@
+{
+  "baseline": "bc83ff9c367883e5b7d0140e6bb42e2e7cc5239c",
+  "sourceHead": "bc83ff9c367883e5b7d0140e6bb42e2e7cc5239c",
+  "sourceModified": "M frontend/src/components/account/EditAccountModal.vue\n M frontend/src/i18n/locales/zh/admin/accounts.ts",
+  "scope": "Actual EditAccountModal, local mock API, synthetic account; not production or full navigation",
+  "savedModels": [
+    "gpt-6.1-sol"
+  ],
+  "errors": []
+}
diff --git a/docs/screenshots/prism-model-scope/mobile-dark.png b/docs/screenshots/prism-model-scope/mobile-dark.png
new file mode 100644
index 00000000000..fa96235453a
Binary files /dev/null and b/docs/screenshots/prism-model-scope/mobile-dark.png differ
diff --git a/docs/screenshots/prism-model-scope/selected.png b/docs/screenshots/prism-model-scope/selected.png
new file mode 100644
index 00000000000..131e08442bd
Binary files /dev/null and b/docs/screenshots/prism-model-scope/selected.png differ
diff --git a/frontend/src/components/account/AccountConcurrencyProgress.vue b/frontend/src/components/account/AccountConcurrencyProgress.vue
index 475f4869b7e..4ff39c6deb5 100644
--- a/frontend/src/components/account/AccountConcurrencyProgress.vue
+++ b/frontend/src/components/account/AccountConcurrencyProgress.vue
@@ -8,6 +8,7 @@
       :aria-label="t('autoConfig.progress', { count: progress.successes, required: progress.required, next: Math.min(account.concurrency + progress.step, progress.maximum) })"
     />
     <div>{{ t('autoConfig.progress', { count: progress.successes, required: progress.required, next: Math.min(account.concurrency + progress.step, progress.maximum) }) }}</div>
+    <p v-if="account.extra?.openai_prism_browser === true" class="mt-1">{{ t('admin.accounts.openai.prismBrowserConcurrencyHint') }}</p>
   </div>
 </template>
 <script setup lang="ts">
diff --git a/frontend/src/components/account/EditAccountModal.vue b/frontend/src/components/account/EditAccountModal.vue
index d70c725d32f..63b17c94b66 100644
--- a/frontend/src/components/account/EditAccountModal.vue
+++ b/frontend/src/components/account/EditAccountModal.vue
@@ -41,9 +41,17 @@
           <span>{{ t('admin.accounts.openai.prismBrowser') }}</span>
         </label>
         <p class="input-hint">{{ t('admin.accounts.openai.prismBrowserDesc') }}</p>
-        <p v-if="prismBrowserEnabled" class="mt-2 text-xs text-primary-600 dark:text-primary-400">
-          {{ t('admin.accounts.openai.prismBrowserManagedEndpoint') }}
-        </p>
+        <fieldset v-if="prismBrowserEnabled" class="mt-3" data-testid="prism-model-scope">
+          <legend class="input-label">{{ t('admin.accounts.openai.prismBrowserModels') }}</legend>
+          <div class="grid grid-cols-2 gap-2">
+            <label v-for="model in prismSupportedModels" :key="model" class="flex items-center gap-2 text-sm">
+              <input v-model="prismBrowserModels" type="checkbox" :value="model" :data-testid="`prism-model-${model}`" />
+              <span>{{ model }}</span>
+            </label>
+          </div>
+          <p class="input-hint">{{ t('admin.accounts.openai.prismBrowserModelsHint') }}</p>
+          <p class="mt-2 text-xs text-primary-600 dark:text-primary-400">{{ t('admin.accounts.openai.prismBrowserManagedEndpoint') }}</p>
+        </fieldset>
       </div>
 
       <!-- API Key fields (only for apikey type) -->
@@ -3575,6 +3583,8 @@ const submitting = ref(false)
 const editBaseUrl = ref('https://api.anthropic.com')
 const editApiKey = ref('')
 const prismBrowserEnabled = ref(false)
+const prismSupportedModels = ['gpt-6.1-sol', 'gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-6-luna']
+const prismBrowserModels = ref<string[]>([...prismSupportedModels])
 
 // ── 国产供应商（Kimi / Zhipu / DeepSeek）account_mode / api_protocol 编辑 ──
 // account_mode 决定额度/余额监控路径，api_protocol 决定转发端点与格式；
@@ -4462,6 +4472,7 @@ const syncFormFromAccount = (newAccount: Account | null) => {
   excelBPSAutoMoveOn403.value = false
   excelBPS403TargetGroupID.value = ''
   prismBrowserEnabled.value = false
+  prismBrowserModels.value = [...prismSupportedModels]
   copilotSDKEnabled.value = false
   openaiPassthroughEnabled.value = false
   openaiFlattenNamespacesEnabled.value = false
@@ -4483,6 +4494,11 @@ const syncFormFromAccount = (newAccount: Account | null) => {
   webSearchEmulationMode.value = 'default'
   if (newAccount.platform === 'openai' && (newAccount.type === 'oauth' || newAccount.type === 'setup-token' || newAccount.type === 'apikey')) {
     prismBrowserEnabled.value = newAccount.type === 'oauth' && extra?.openai_prism_browser === true
+    if (Object.prototype.hasOwnProperty.call(extra ?? {}, 'openai_prism_browser_models')) {
+      prismBrowserModels.value = Array.isArray(extra?.openai_prism_browser_models)
+        ? extra.openai_prism_browser_models.filter((model): model is string => typeof model === 'string' && prismSupportedModels.includes(model))
+        : []
+    }
     excelBPSEnabled.value = newAccount.type === 'oauth' && extra?.openai_excel_bps === true
     excelBPSMode.value = extra?.openai_excel_bps_config_mode === 'defaults' ? 'defaults' : 'initial'
     excelBPSAllModels.value = excelBPSEnabled.value && !Object.prototype.hasOwnProperty.call(extra ?? {}, 'openai_excel_bps_models')
@@ -6130,8 +6146,13 @@ const handleSubmit = async () => {
         newExtra.openai_compact_mode = openAICompactMode.value
       }
       if (props.account.type === 'oauth') {
-        if (prismBrowserEnabled.value) newExtra.openai_prism_browser = true
-        else delete newExtra.openai_prism_browser
+        if (prismBrowserEnabled.value) {
+          newExtra.openai_prism_browser = true
+          newExtra.openai_prism_browser_models = prismSupportedModels.filter(model => prismBrowserModels.value.includes(model))
+        } else {
+          delete newExtra.openai_prism_browser
+          delete newExtra.openai_prism_browser_models
+        }
       }
 		if (props.account.type === 'apikey') {
         if (!openAITextGenerationCapabilityEnabled.value || openAIResponsesMode.value === 'auto') {
diff --git a/frontend/src/components/account/__tests__/EditAccountModal.autoBPS.spec.ts b/frontend/src/components/account/__tests__/EditAccountModal.autoBPS.spec.ts
index 5b755b7c784..48cd705e613 100644
--- a/frontend/src/components/account/__tests__/EditAccountModal.autoBPS.spec.ts
+++ b/frontend/src/components/account/__tests__/EditAccountModal.autoBPS.spec.ts
@@ -104,15 +104,36 @@ describe('EditAccountModal Prism OAuth switch', () => {
     await wrapper.get('[data-testid="openai-prism-browser-oauth-toggle"]').setValue(true)
     await submit(wrapper)
     expect(mocks.updateAccount).toHaveBeenCalledTimes(1)
-    expect(mocks.updateAccount.mock.calls[0][1].extra).toMatchObject({ fixture_flag: true, openai_prism_browser: true })
+    expect(mocks.updateAccount.mock.calls[0][1].extra).toMatchObject({ fixture_flag: true, openai_prism_browser: true,
+      openai_prism_browser_models: ['gpt-6.1-sol', 'gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-6-luna'] })
   })
 
   it('removes the flag when disabled', async () => {
-    const wrapper = mountModal(buildOAuthAccount({ extra: { openai_prism_browser: true } }))
+    const wrapper = mountModal(buildOAuthAccount({ extra: { openai_prism_browser: true, openai_prism_browser_models: ['gpt-6.1-sol'] } }))
     await flushPromises()
     await wrapper.get('[data-testid="openai-prism-browser-oauth-toggle"]').setValue(false)
     await submit(wrapper)
     expect(mocks.updateAccount.mock.calls[0][1].extra.openai_prism_browser).toBeUndefined()
+    expect(mocks.updateAccount.mock.calls[0][1].extra.openai_prism_browser_models).toBeUndefined()
+  })
+
+  it('limits legacy accounts to the four supported models and persists a subset', async () => {
+    const wrapper = mountModal(buildOAuthAccount({ extra: { openai_prism_browser: true } }))
+    await flushPromises()
+    expect(wrapper.findAll('[data-testid="prism-model-scope"] input:checked')).toHaveLength(4)
+    for (const model of ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-6-luna']) {
+      await wrapper.get(`[data-testid="prism-model-${model}"]`).setValue(false)
+    }
+    await submit(wrapper)
+    expect(mocks.updateAccount.mock.calls[0][1].extra.openai_prism_browser_models).toEqual(['gpt-6.1-sol'])
+  })
+
+  it.each([[], ['gpt-4o-audio-preview'], 'malformed'])('does not widen an empty or invalid scope: %j', async (models) => {
+    const wrapper = mountModal(buildOAuthAccount({ extra: { openai_prism_browser: true, openai_prism_browser_models: models } }))
+    await flushPromises()
+    expect(wrapper.findAll('[data-testid="prism-model-scope"] input:checked')).toHaveLength(0)
+    await submit(wrapper)
+    expect(mocks.updateAccount.mock.calls[0][1].extra.openai_prism_browser_models).toEqual([])
   })
 
   it('hides Prism for API-key accounts', async () => {
diff --git a/frontend/src/i18n/locales/en/admin/accounts.ts b/frontend/src/i18n/locales/en/admin/accounts.ts
index c64cbbc06f9..5f65dee2e06 100644
--- a/frontend/src/i18n/locales/en/admin/accounts.ts
+++ b/frontend/src/i18n/locales/en/admin/accounts.ts
@@ -658,8 +658,11 @@ export default {
       openai: {
         baseUrlHint: 'Leave default for official OpenAI API',
         prismBrowser: 'Use Prism browser protocol automatically',
-        prismBrowserDesc: 'Uses the server-managed Prism adapter with this OpenAI OAuth account. No separate Prism credentials are needed. Currently supports text requests with gpt-5.6-sol.',
-        prismBrowserManagedEndpoint: 'Enabled: requests are routed to the server-managed Prism adapter.',
+        prismBrowserDesc: 'Uses this OpenAI OAuth account with the server-managed Prism adapter. No separate credentials are needed. Supports text for these four models and client function/custom tools for 6.1 Sol.',
+        prismBrowserModels: 'Models to route through Prism',
+        prismBrowserModelsHint: 'Matches model names after account mapping. Only selected models use Prism; others keep their Codex / Excel routing. Selecting none disables Prism routing. Availability depends on the upstream account.',
+        prismBrowserManagedEndpoint: 'Selected models use HTTP/SSE. Tool requests require an updated server adapter. Hosted tools such as web search and image generation are unsupported.',
+        prismBrowserConcurrencyHint: 'Prism also has adapter concurrency limits; its requests do not affect this tier’s progress.',
         apiKeyHint: 'Your OpenAI API Key',
         oauthPassthrough: 'Auto passthrough (auth only)',
         excelBPS: 'Excel / BPS protocol',
diff --git a/frontend/src/i18n/locales/zh/admin/accounts.ts b/frontend/src/i18n/locales/zh/admin/accounts.ts
index 8a4ae6aa6bd..5e4515ae459 100644
--- a/frontend/src/i18n/locales/zh/admin/accounts.ts
+++ b/frontend/src/i18n/locales/zh/admin/accounts.ts
@@ -776,8 +776,11 @@ export default {
       openai: {
         baseUrlHint: '留空使用官方 OpenAI API',
         prismBrowser: '自动使用 Prism 浏览器协议',
-        prismBrowserDesc: '使用此 OpenAI OAuth 账号接入服务器管理的 Prism 适配器，无需另填 Prism 凭据。目前支持 gpt-5.6-sol 纯文本请求。',
-        prismBrowserManagedEndpoint: '已启用：请求将自动发送到服务器的 Prism 适配器。',
+        prismBrowserDesc: '使用此 OpenAI OAuth 账号接入服务器管理的 Prism 适配器，无需另填 Prism 凭据。支持以下四个模型的文本请求，以及 6.1 Sol 的客户端函数和自定义工具。',
+        prismBrowserModels: '勾选使用 Prism 的模型',
+        prismBrowserModelsHint: '按账号映射后的模型名称匹配。仅勾选模型走 Prism；未选模型保留原 Codex / Excel 路由。全部取消时不使用 Prism。模型权限仍以上游账号为准。',
+        prismBrowserManagedEndpoint: '所选模型使用 HTTP/SSE。工具请求需同步升级服务器适配器；联网搜索、图片生成等托管工具不受支持。',
+        prismBrowserConcurrencyHint: 'Prism 另受适配器并发限制，其请求不计入本档升降级统计。',
         apiKeyHint: '您的 OpenAI API Key',
         oauthPassthrough: '自动透传（仅替换认证）',
         excelBPS: 'Excel / BPS 协议',
diff --git a/prism-adapter/README.md b/prism-adapter/README.md
index 8439628c7c3..c265a84d7b6 100644
--- a/prism-adapter/README.md
+++ b/prism-adapter/README.md
@@ -1,5 +1,23 @@
 # Prism OAuth 文本适配器（P1 试验）
 
+账号编辑 → Prism → 勾选专属模型。`extra.openai_prism_browser_models` 按账号映射后的模型名匹配，只支持 `gpt-6.1-sol`、`gpt-5.6-sol`、`gpt-5.6-terra`、`gpt-6-luna`。未选模型继续使用原来的 Codex / Excel 路由；显式空数组表示不走 Prism。已开启 Prism 的旧账号缺少该字段时仅默认这四个模型，不再接管所有 OpenAI 模型。所选模型的 Prism 失败仍不自动切换协议或模型。
+
+Prism 请求由适配器独立排队与限流，不参与原生账号的自动并发升降档；账号页显示的并发档位不代表适配器容量。本变更不会提高线上适配器限额。
+
+## 从 pr269 适配器升级（Issue #280）
+
+`v2.9.7` / `bc83ff9c3` 的 Go 网关已包含 #278 工具请求头与终态验证，但只替换 Go 二进制不会更新独立运行的 `pr269-49b0f52` 适配器。该旧组合不能验收为支持 6.1 Sol 客户端工具。普通文本请求带 `include=["reasoning.encrypted_content"]` 或 `reasoning.summary=auto` 也需要本次适配器修复。
+
+推荐使用 #281 同一提交中的 Go 网关与完整 `prism-adapter/` 目录。上线顺序：
+
+1. 保留现有 Go 二进制、适配器目录及受限环境文件的回滚副本。全部构建在本机或 CI 完成。
+2. 准备完整适配器目录和 `requirements.txt` 固定 wheel；保留已有 OAuth 会话、pending journal、工具状态目录和服务账号权限，不复制或清空状态来绕过失败。
+3. 先替换适配器并重启。启动检查会验证 `jsonschema` / `lark`；旧配置若显式设有 `PRISM_ADAPTER_CLIENT_TOOLS_ENABLED=false`，需改为 true 才能验收工具路径。未设置时新默认值为 true。
+4. 替换本 PR 的 Go 网关二进制，在账号编辑页保存 Prism 模型范围。新版适配器与 v2.9.7 网关的过渡组合可以用于验证工具，但专属模型路由、错误响应和并发统计必须有本 PR 的 Go 修复。
+5. 使用受控测试 key 验证纯文本、带可选推理参数的文本、函数与自定义工具回传闭环、未选模型的原生路由及错误响应。真实账号权益与线上结果以本次验收为准；本仓库的离线测试不能替代此步骤。
+
+网关日志会保留已知适配器错误码（例如 `tools_disabled`、`unsupported_request`、`model_unavailable`），不记录适配器任意错误文本。`model_unavailable` 表示账号页面缺少所选模型，不应作为参数兼容问题重放，也不会静默改成其他模型。
+
 关联 [Issue #256](https://github.com/ranxi2001/sub2api/issues/256)。账号编辑页的 Prism 开关复用现有 OpenAI OAuth 凭据，通过回环适配服务访问 Prism 网页。管理员账号测试与 HTTP `/v1/responses` 共用后端凭据获取及适配器请求函数。
 
 文本请求接受 `gpt-6.1-sol`、`gpt-5.6-sol`、`gpt-5.6-terra`、`gpt-6-luna` 四个精确模型 ID，以及 `low`、`medium`、`high`、`xhigh` 思考强度（省略时为 `medium`）。能否调用仍取决于该 OAuth 账号在 Prism 页面中实际可选的模型和强度；不把静态支持列表当作账号权益证明。默认保持文本模式。`gpt-6.1-sol` 可通过下述服务端试用开关启用客户端工具桥；图片、`previous_response_id`、background、structured output、compact 和原生 WebSocket 仍不支持。
@@ -24,7 +42,7 @@
 
 ## 6.1 Sol 客户端工具桥（试用）
 
-同时升级 Go 网关和本目录适配器，安装固定版本的预构建依赖后，在适配器的受限环境文件设置 `PRISM_ADAPTER_CLIENT_TOOLS_ENABLED=true`。默认 false；其他三个模型暂只保留文本路径。无需更改用户的 Codex 工具定义、provider 或请求头。
+同时升级 Go 网关和本目录适配器，并安装 `requirements.txt` 固定版本的预构建依赖。客户端工具桥接默认启用；显式设置 `PRISM_ADAPTER_CLIENT_TOOLS_ENABLED=false` 可关闭。启动时检查工具验证依赖，缺失则停止启动，避免接收请求后才发现升级不完整。其他三个模型暂只保留文本路径。无需更改用户的 Codex 工具定义、provider 或请求头。
 
 - 支持 Responses `function`、`custom`、嵌套 namespace，顶层 `tools` / `additional_tools` 及 input 内的 `additional_tools`。
 - 支持 `tool_choice=auto/none/required`、指定 function/custom，以及 `parallel_tool_calls`。最多 96 个工具、每次最多 8 个调用、历史最多 64 个调用；`parallel_tool_calls=false` 时最多一个。
diff --git a/prism-adapter/server.py b/prism-adapter/server.py
index ad5a1e38e1c..db5509699d8 100644
--- a/prism-adapter/server.py
+++ b/prism-adapter/server.py
@@ -55,14 +55,17 @@ def parse_prompt(payload):
         raise AdapterError(422, "unsupported_request", "Prism adapter does not yet support tools or server-side conversation state")
     if any(payload.get(key) is not None for key in ("max_output_tokens", "temperature", "top_p")) or payload.get("background") or payload.get("store"):
         raise AdapterError(422, "unsupported_request", "Generation limits, sampling, background and storage options are not supported")
-    if payload.get("tool_choice", "none") not in ("none", "auto") or payload.get("include") or payload.get("service_tier"):
+    # Codex requests optional reasoning fields even on text-only turns. Prism
+    # does not supply encrypted reasoning; accepting the request invents none.
+    if (payload.get("tool_choice", "none") not in ("none", "auto")
+            or payload.get("include") not in (None, [], ['reasoning.encrypted_content']) or payload.get("service_tier")):
         raise AdapterError(422, "unsupported_request", "Requested response options are not supported")
     text_options = payload.get("text") or {}
     if not isinstance(text_options, dict) or text_options.get("format", {"type": "text"}) != {"type": "text"}:
         raise AdapterError(422, "unsupported_request", "Only plain text output is supported")
     reasoning = payload.get("reasoning") or {}
     if (not isinstance(reasoning, dict) or not isinstance(reasoning.get("effort", "medium"), str)
-            or reasoning.get("effort", "medium") not in EFFORTS or reasoning.get("summary") not in (None, "none")):
+            or reasoning.get("effort", "medium") not in EFFORTS or reasoning.get("summary") not in (None, "none", "auto")):
         raise AdapterError(422, "unsupported_reasoning", "Unsupported Prism reasoning effort")
     if not isinstance(payload.get("stream", False), bool):
         raise AdapterError(400, "invalid_request", "stream must be a boolean")
@@ -708,6 +711,23 @@ def do_POST(self):
             self.send_json(502, {"error": {"type": "prism_unavailable", "message": "Prism browser request failed; inspect pending state before retrying"}})
 
 
+def configure_client_tools(state):
+    enabled = os.environ.get('PRISM_ADAPTER_CLIENT_TOOLS_ENABLED', 'true')
+    if enabled not in ('true', 'false'):
+        raise SystemExit('PRISM_ADAPTER_CLIENT_TOOLS_ENABLED must be true or false')
+    if enabled == 'false':
+        return None
+    # Fail startup on an incomplete adapter upgrade, before accepting traffic.
+    try:
+        from jsonschema import Draft202012Validator
+        from lark import Lark
+        Draft202012Validator.check_schema({'type': 'object'})
+        Lark('start: "ok"').parse('ok')
+    except ImportError:
+        raise SystemExit('Install prism-adapter/requirements.txt before enabling client tools') from None
+    return ToolState(state.directory, AdapterError)
+
+
 def main():
     if os.geteuid() == 0:
         raise SystemExit("Prism adapter must run as a non-root user")
@@ -717,11 +737,7 @@ def main():
         raise SystemExit("adapter key, Chromium binary, and Chromium sandbox are required")
     Handler.api_key = key
     Handler.state = State(os.environ.get("PRISM_ADAPTER_STATE_DIR", "/var/lib/sub2api-prism"))
-    tools = os.environ.get('PRISM_ADAPTER_CLIENT_TOOLS_ENABLED', 'false')
-    if tools not in ('true','false'):
-        raise SystemExit('PRISM_ADAPTER_CLIENT_TOOLS_ENABLED must be true or false')
-    if tools == 'true':
-        Handler.tool_state = ToolState(Handler.state.directory, AdapterError)
+    Handler.tool_state = configure_client_tools(Handler.state)
     max_sessions = int(os.environ.get("PRISM_ADAPTER_MAX_SESSIONS", "1"))
     idle_seconds = int(os.environ.get("PRISM_ADAPTER_SESSION_TTL_SECONDS", "300"))
     if not 1 <= max_sessions <= 2 or not 30 <= idle_seconds <= 900:
diff --git a/prism-adapter/test_server.py b/prism-adapter/test_server.py
index 8b233385ab5..5be725aa276 100644
--- a/prism-adapter/test_server.py
+++ b/prism-adapter/test_server.py
@@ -19,6 +19,28 @@
 
 
 class AdapterTests(unittest.TestCase):
+    def test_codex_optional_reasoning_on_all_text_models(self):
+        for model in adapter.MODELS:
+            payload = {'model': model, 'input': 'hi', 'include': ['reasoning.encrypted_content'],
+                       'reasoning': {'effort': 'high', 'summary': 'auto'}}
+            self.assertEqual(adapter.parse_prompt(payload), ('[user]\nhi', False))
+        for fields in ({'include': ['web_search_call.action.sources']},
+                       {'reasoning': {'summary': 'detailed'}},
+                       {'input': [{'type': 'reasoning', 'encrypted_content': 'fixture'}]}):
+            with self.assertRaises(adapter.AdapterError):
+                adapter.parse_prompt({'model': adapter.MODEL, 'input': 'hi', **fields})
+
+    def test_client_tools_enabled_by_default_with_explicit_opt_out(self):
+        with tempfile.TemporaryDirectory() as directory:
+            state = adapter.State(directory)
+            with mock.patch.dict('os.environ', {}, clear=True):
+                self.assertIsNotNone(adapter.configure_client_tools(state))
+            with mock.patch.dict('os.environ', {'PRISM_ADAPTER_CLIENT_TOOLS_ENABLED': 'false'}):
+                self.assertIsNone(adapter.configure_client_tools(state))
+            with mock.patch.dict('os.environ', {'PRISM_ADAPTER_CLIENT_TOOLS_ENABLED': 'invalid'}):
+                with self.assertRaises(SystemExit):
+                    adapter.configure_client_tools(state)
+
     def test_four_models_and_efforts_are_preserved_without_aliases(self):
         for model in adapter.MODELS:
             for effort in adapter.EFFORTS:
diff --git a/prism-adapter/test_tool_bridge.py b/prism-adapter/test_tool_bridge.py
index e101979e1ac..13ee815bb98 100644
--- a/prism-adapter/test_tool_bridge.py
+++ b/prism-adapter/test_tool_bridge.py
@@ -223,7 +223,7 @@ def run(inner, account, token, prompt, session, model, effort, reuse_project=Tru
             server=ThreadingHTTPServer(('127.0.0.1',0),handler)
             threading.Thread(target=server.serve_forever,daemon=True).start()
             try:
-                payload=request(stream=True)
+                payload=request(stream=True, include=['reasoning.encrypted_content'], reasoning={'effort':'medium','summary':'auto'})
                 headers={'Authorization':'Bearer fixture-key','X-Prism-Account-ID':'300',
                     'X-Prism-OAuth-Token':'synthetic','X-Prism-Session-ID':'a'*64,'X-Prism-Caller-ID':'b'*64,'Content-Type':'application/json'}
                 def send(headers_=headers):
diff --git a/prism-adapter/tool_bridge.py b/prism-adapter/tool_bridge.py
index b53ad90381c..12bbd57f9fb 100644
--- a/prism-adapter/tool_bridge.py
+++ b/prism-adapter/tool_bridge.py
@@ -106,12 +106,6 @@ def __init__(self, payload, api):
         validate_batch(self.commands, self.error)
         base = copy.deepcopy(payload)
         base.update(input=translated, tools=[], additional_tools=[], tool_choice='none')
-        # An encrypted reasoning item is not available from this upstream.
-        # Accept the client's optional request for it without inventing one.
-        if base.get('include') == ['reasoning.encrypted_content']:
-            base['include'] = []
-        if isinstance(base.get('reasoning'), dict) and base['reasoning'].get('summary') == 'auto':
-            base['reasoning']['summary'] = 'none'
         # The ordinary parser still owns model/options/message validation.
         self.prompt, self.stream = api.parse_prompt(base)
         catalog = [tool['catalog'] for tool in self.tools.values()]