@omnicross/cli-launcher 0.1.6 → 0.1.8

package/dist/index.cjs

@@ -412,6 +412,17 @@ function createProcessSupervisor() {
 var _completion = require('@omnicross/core/completion');
 var _providerproxy = require('@omnicross/core/provider-proxy');
 var CLAUDE_PROXY_API_KEY_SENTINEL = "omnicross-proxy";
+function buildClaudeRuntimeLaunchDescriptor(baseUrl, model, routeToken) {
+  return {
+    env: {
+      ANTHROPIC_BASE_URL: baseUrl,
+      ANTHROPIC_AUTH_TOKEN: routeToken,
+      ANTHROPIC_API_KEY: CLAUDE_PROXY_API_KEY_SENTINEL,
+      ANTHROPIC_MODEL: model
+    },
+    extraArgs: []
+  };
+}
 async function buildClaudeCliLaunchConfig(inputs) {
   const provider = await inputs.llmConfig.getProvider(inputs.providerId);
   if (!provider) {
@@ -442,14 +453,9 @@ async function buildClaudeCliLaunchConfig(inputs) {
     providerId: inputs.providerId,
     model: inputs.model
   });
-  const env = {
-    ANTHROPIC_BASE_URL: baseUrl,
-    ANTHROPIC_AUTH_TOKEN: token,
-    ANTHROPIC_API_KEY: CLAUDE_PROXY_API_KEY_SENTINEL,
-    ANTHROPIC_MODEL: inputs.model
-  };
+  const descriptor = buildClaudeRuntimeLaunchDescriptor(baseUrl, inputs.model, token);
   return {
-    env,
+    env: descriptor.env,
     baseUrl,
     onSessionEnd: () => {
       try {
@@ -638,6 +644,9 @@ function resolveApiKey2(apiKey) {
 // src/proxy-env/codex-proxy-env.ts
 
 
+
+
+
 var CODEX_PROXY_PROVIDER_NAME = "omnicross";
 var CODEX_PROXY_BASE_PATH = "/openai";
 function buildCodexConfigOverrides(baseUrl) {
@@ -647,15 +656,13 @@ function buildCodexConfigOverrides(baseUrl) {
     "-c",
     `model_provider="${name}"`,
     "-c",
-    `model_providers.${name}.name="${name}"`,
+    `model_providers.${name}.name="OmniCross"`,
     "-c",
     `model_providers.${name}.base_url="${providerBaseUrl}"`,
     "-c",
     `model_providers.${name}.wire_api="responses"`,
-    // requires_openai_auth is a boolean — UNQUOTED so the TOML override is typed
-    // as a bool, not the string "true".
     "-c",
-    `model_providers.${name}.requires_openai_auth=true`,
+    `model_providers.${name}.env_key="${_providerproxy.ROUTE_LEASE_CODEX_TOKEN_ENV}"`,
     // disable_response_storage: the CLI sends full context each turn (no
     // server-side response store) — required because the proxy upstream is
     // stateless w.r.t. Codex's response-id store (design Q3 contract).
@@ -663,6 +670,12 @@ function buildCodexConfigOverrides(baseUrl) {
     "disable_response_storage=true"
   ];
 }
+function buildCodexRuntimeLaunchDescriptor(baseUrl, routeToken) {
+  return {
+    env: { [_providerproxy.ROUTE_LEASE_CODEX_TOKEN_ENV]: routeToken },
+    extraArgs: buildCodexConfigOverrides(baseUrl)
+  };
+}
 async function buildCodexLaunchConfig(inputs) {
   const authMode = _nullishCoalesce(inputs.authMode, () => ( "byo"));
   if (authMode === "byo") {
@@ -701,15 +714,9 @@ async function buildCodexLaunchConfig(inputs) {
     model: inputs.model,
     authMode
   });
+  const descriptor = buildCodexRuntimeLaunchDescriptor(baseUrl, token);
   return {
-    env: {
-      // Satisfy the CLI's `requires_openai_auth = true` precondition. The CLI
-      // forwards this as the Responses-API key; the resident proxy uses it as
-      // the route TOKEN (looked up, then discarded) and re-authenticates
-      // upstream from the route's own provider/subscription credential.
-      OPENAI_API_KEY: token
-    },
-    extraArgs: buildCodexConfigOverrides(baseUrl),
+    ...descriptor,
     baseUrl,
     onSessionEnd: () => {
       proxy.removeRoute(token);
@@ -724,6 +731,28 @@ function resolveApiKey3(apiKey) {
   return apiKey;
 }
 
+// src/proxy-env/runtime-launch-descriptor.ts
+
+
+
+var routeLeaseDescriptorPort = {
+  has(runtime) {
+    return runtime === "claude" || runtime === "codex";
+  },
+  build(runtime, input) {
+    switch (runtime) {
+      case "claude":
+        return buildClaudeRuntimeLaunchDescriptor(input.proxyBaseUrl, input.model, input.routeToken);
+      case "codex":
+        return buildCodexRuntimeLaunchDescriptor(input.proxyBaseUrl, input.routeToken);
+      default: {
+        const exhaustive = runtime;
+        throw new (0, _providerproxy.RouteLeaseError)("runtime_unsupported", `runtime adapter unavailable: ${String(exhaustive)}`);
+      }
+    }
+  }
+};
+
 // src/index.ts
 var instance = null;
 function getProcessSupervisor() {
@@ -743,4 +772,7 @@ function getProcessSupervisor() {
 
 
 
-exports.CHAT_PROXY_BASE_PATH = CHAT_PROXY_BASE_PATH; exports.CLAUDE_PROXY_API_KEY_SENTINEL = CLAUDE_PROXY_API_KEY_SENTINEL; exports.CODEX_PROXY_BASE_PATH = CODEX_PROXY_BASE_PATH; exports.CODEX_PROXY_PROVIDER_NAME = CODEX_PROXY_PROVIDER_NAME; exports.OPENCODE_PROXY_PROVIDER_ID = OPENCODE_PROXY_PROVIDER_ID; exports.OPENCODE_PROXY_TOKEN_ENV = OPENCODE_PROXY_TOKEN_ENV; exports.buildChatCliLaunchConfig = buildChatCliLaunchConfig; exports.buildClaudeCliLaunchConfig = buildClaudeCliLaunchConfig; exports.buildCodexConfigOverrides = buildCodexConfigOverrides; exports.buildCodexLaunchConfig = buildCodexLaunchConfig; exports.buildGeminiCliLaunchConfig = buildGeminiCliLaunchConfig; exports.getProcessSupervisor = getProcessSupervisor;
+
+
+
+exports.CHAT_PROXY_BASE_PATH = CHAT_PROXY_BASE_PATH; exports.CLAUDE_PROXY_API_KEY_SENTINEL = CLAUDE_PROXY_API_KEY_SENTINEL; exports.CODEX_PROXY_BASE_PATH = CODEX_PROXY_BASE_PATH; exports.CODEX_PROXY_PROVIDER_NAME = CODEX_PROXY_PROVIDER_NAME; exports.OPENCODE_PROXY_PROVIDER_ID = OPENCODE_PROXY_PROVIDER_ID; exports.OPENCODE_PROXY_TOKEN_ENV = OPENCODE_PROXY_TOKEN_ENV; exports.buildChatCliLaunchConfig = buildChatCliLaunchConfig; exports.buildClaudeCliLaunchConfig = buildClaudeCliLaunchConfig; exports.buildClaudeRuntimeLaunchDescriptor = buildClaudeRuntimeLaunchDescriptor; exports.buildCodexConfigOverrides = buildCodexConfigOverrides; exports.buildCodexLaunchConfig = buildCodexLaunchConfig; exports.buildCodexRuntimeLaunchDescriptor = buildCodexRuntimeLaunchDescriptor; exports.buildGeminiCliLaunchConfig = buildGeminiCliLaunchConfig; exports.getProcessSupervisor = getProcessSupervisor; exports.routeLeaseDescriptorPort = routeLeaseDescriptorPort;

package/dist/index.d.cts

@@ -4,8 +4,8 @@ import { ChildProcess } from 'node:child_process';
 export { PtyAdapterHandle } from './pty-adapter.cjs';
 import { ProviderConfigSource, UsageRecorderImport } from '@omnicross/core';
 import { ApiKeyPoolService } from '@omnicross/core/completion/ApiKeyPoolService';
+import { RuntimeLaunchDescriptor, RouteAuthMode, RouteLeaseDescriptorPort } from '@omnicross/core/provider-proxy';
 import { SubscriptionAuthProfile } from '@omnicross/core/pipeline/SubscriptionAuthSource';
-import { RouteAuthMode } from '@omnicross/core/provider-proxy';
 
 /**
  * child_process spawn adapter.
@@ -197,6 +197,8 @@ interface ClaudeCliLaunchConfigInputs {
     /** Usage recorder — when set, anthropic-ingress usage is persisted. */
     readonly usageRecorder?: UsageRecorderImport | null;
 }
+/** Pure Claude descriptor. It never reads credentials, registers routes, or writes files. */
+declare function buildClaudeRuntimeLaunchDescriptor(baseUrl: string, model: string, routeToken: string): RuntimeLaunchDescriptor;
 /**
  * Build the env + route for a claude CLI redirect (BYO only). Validates the
  * provider row + key up front (throws BEFORE registering a route when the
@@ -215,20 +217,15 @@ declare function buildClaudeCliLaunchConfig(inputs: ClaudeCliLaunchConfigInputs)
  * `codex-responses-ingress` change): the Codex CLI does NOT honor an
  * `OPENAI_BASE_URL` env var for base-url redirection. It is redirected via its
  * config — `~/.codex/config.toml`'s `[model_providers.<name>]` block
- * (`base_url`, `wire_api = "responses"`, `requires_openai_auth = true`) selected
- * by `model_provider = "<name>"`. Codex exposes those config keys as
- * command-line `-c key=value` overrides (the SAME mechanism the canvas-MCP and
- * builtin-MCP CLI injectors already use for `mcp_servers.*`), so this builder
- * returns the `-c` overrides as `extraArgs` rather than writing the user's
- * `~/.codex/config.toml` on disk. This keeps the redirection session-scoped and
- * leaves the user's real config untouched (no file management, no rollback risk).
+ * (`base_url`, `wire_api = "responses"`, and a dedicated `env_key`) selected by
+ * `model_provider = "<name>"`. Codex exposes those config keys as command-line
+ * `-c key=value` overrides (the SAME mechanism the canvas-MCP and builtin-MCP CLI
+ * injectors already use for `mcp_servers.*`), so this builder returns the `-c`
+ * overrides as `extraArgs` rather than writing the user's `~/.codex/config.toml`
+ * on disk. This keeps redirection session-scoped and leaves user config untouched.
  *
- * The API key the CLI sends is supplied through the `requires_openai_auth` env
- * (`OPENAI_API_KEY`) — a placeholder is sufficient because the proxy
- * re-authenticates every upstream call with the resolved provider/subscription
- * credential; the value the CLI forwards is never used upstream. We still inject
- * a sentinel so the CLI's `requires_openai_auth = true` precondition is met
- * without the CLI falling back to a real `~/.codex/auth.json`.
+ * The route token is supplied only through `OMNICROSS_CODEX_ROUTE_TOKEN`, named
+ * by the custom provider's `env_key`; no OpenAI login or auth file is required.
  *
  * What this builder returns (mirroring `ProviderEnvResult` from provider-env.ts):
  *   - `env`        — env vars merged into the Codex subprocess (the auth sentinel).
@@ -282,21 +279,12 @@ interface CodexLaunchConfigInputs {
  * Codex-specific `extraArgs` (config overrides) and the `baseUrl`.
  */
 interface CodexLaunchConfig {
-    /**
-     * Env vars to merge into the Codex subprocess env. The Codex CLI's
-     * `requires_openai_auth = true` precondition is satisfied by a sentinel
-     * `OPENAI_API_KEY` (the value is never used upstream — the proxy re-auths).
-     */
+    /** Env vars to merge into the Codex subprocess env, including its route token. */
     readonly env: Record<string, string>;
     /**
      * `-c key=value` config overrides appended to the Codex argv. These override
-     * `~/.codex/config.toml` for THIS spawn only, pointing the CLI at the proxy:
-     *   `-c model_provider="omnicross"`
-     *   `-c model_providers.omnicross.name="omnicross"`
-     *   `-c model_providers.omnicross.base_url="http://127.0.0.1:<port>/openai"`
-     *   `-c model_providers.omnicross.wire_api="responses"`
-     *   `-c model_providers.omnicross.requires_openai_auth=true`
-     * (`requires_openai_auth` is an UNQUOTED boolean — TOML overrides are typed.)
+     * `~/.codex/config.toml` for THIS spawn only, pointing the CLI at the proxy and
+     * naming `OMNICROSS_CODEX_ROUTE_TOKEN` as the custom provider's `env_key`.
      */
     readonly extraArgs: string[];
     /** Stops the booted proxy listener. Best-effort; never throws. */
@@ -312,6 +300,8 @@ interface CodexLaunchConfig {
  * @param baseUrl listener base (`http://127.0.0.1:<port>`)
  */
 declare function buildCodexConfigOverrides(baseUrl: string): string[];
+/** Pure, argv-safe Codex descriptor. It performs no route or process I/O. */
+declare function buildCodexRuntimeLaunchDescriptor(baseUrl: string, routeToken: string): RuntimeLaunchDescriptor;
 /**
  * Boot the codex proxy route and return the launch redirection for the Codex CLI
  * subprocess. The analogue of `buildProviderEnvWithProxy` for the Codex CLI.
@@ -329,6 +319,9 @@ declare function buildCodexConfigOverrides(baseUrl: string): string[];
  */
 declare function buildCodexLaunchConfig(inputs: CodexLaunchConfigInputs): Promise<CodexLaunchConfig>;
 
+/** Shared pure descriptor adapter used by RouteLeaseManager and compatibility wrappers. */
+declare const routeLeaseDescriptorPort: RouteLeaseDescriptorPort;
+
 /**
  * Process Supervisor module — singleton accessor and re-exports.
  *
@@ -337,4 +330,4 @@ declare function buildCodexLaunchConfig(inputs: CodexLaunchConfigInputs): Promis
 
 declare function getProcessSupervisor(): ProcessSupervisor;
 
-export { CHAT_PROXY_BASE_PATH, CLAUDE_PROXY_API_KEY_SENTINEL, CODEX_PROXY_BASE_PATH, CODEX_PROXY_PROVIDER_NAME, type ChatCliBackendId, type ChatCliLaunchConfig, type ChatCliLaunchConfigInputs, type ChildAdapterHandle, type ClaudeCliLaunchConfigInputs, type CodexLaunchConfig, type CodexLaunchConfigInputs, type GeminiCliLaunchConfigInputs, OPENCODE_PROXY_PROVIDER_ID, OPENCODE_PROXY_TOKEN_ENV, ProcessSupervisor, buildChatCliLaunchConfig, buildClaudeCliLaunchConfig, buildCodexConfigOverrides, buildCodexLaunchConfig, buildGeminiCliLaunchConfig, getProcessSupervisor };
+export { CHAT_PROXY_BASE_PATH, CLAUDE_PROXY_API_KEY_SENTINEL, CODEX_PROXY_BASE_PATH, CODEX_PROXY_PROVIDER_NAME, type ChatCliBackendId, type ChatCliLaunchConfig, type ChatCliLaunchConfigInputs, type ChildAdapterHandle, type ClaudeCliLaunchConfigInputs, type CodexLaunchConfig, type CodexLaunchConfigInputs, type GeminiCliLaunchConfigInputs, OPENCODE_PROXY_PROVIDER_ID, OPENCODE_PROXY_TOKEN_ENV, ProcessSupervisor, buildChatCliLaunchConfig, buildClaudeCliLaunchConfig, buildClaudeRuntimeLaunchDescriptor, buildCodexConfigOverrides, buildCodexLaunchConfig, buildCodexRuntimeLaunchDescriptor, buildGeminiCliLaunchConfig, getProcessSupervisor, routeLeaseDescriptorPort };

package/dist/index.d.ts

@@ -4,8 +4,8 @@ import { ChildProcess } from 'node:child_process';
 export { PtyAdapterHandle } from './pty-adapter.js';
 import { ProviderConfigSource, UsageRecorderImport } from '@omnicross/core';
 import { ApiKeyPoolService } from '@omnicross/core/completion/ApiKeyPoolService';
+import { RuntimeLaunchDescriptor, RouteAuthMode, RouteLeaseDescriptorPort } from '@omnicross/core/provider-proxy';
 import { SubscriptionAuthProfile } from '@omnicross/core/pipeline/SubscriptionAuthSource';
-import { RouteAuthMode } from '@omnicross/core/provider-proxy';
 
 /**
  * child_process spawn adapter.
@@ -197,6 +197,8 @@ interface ClaudeCliLaunchConfigInputs {
     /** Usage recorder — when set, anthropic-ingress usage is persisted. */
     readonly usageRecorder?: UsageRecorderImport | null;
 }
+/** Pure Claude descriptor. It never reads credentials, registers routes, or writes files. */
+declare function buildClaudeRuntimeLaunchDescriptor(baseUrl: string, model: string, routeToken: string): RuntimeLaunchDescriptor;
 /**
  * Build the env + route for a claude CLI redirect (BYO only). Validates the
  * provider row + key up front (throws BEFORE registering a route when the
@@ -215,20 +217,15 @@ declare function buildClaudeCliLaunchConfig(inputs: ClaudeCliLaunchConfigInputs)
  * `codex-responses-ingress` change): the Codex CLI does NOT honor an
  * `OPENAI_BASE_URL` env var for base-url redirection. It is redirected via its
  * config — `~/.codex/config.toml`'s `[model_providers.<name>]` block
- * (`base_url`, `wire_api = "responses"`, `requires_openai_auth = true`) selected
- * by `model_provider = "<name>"`. Codex exposes those config keys as
- * command-line `-c key=value` overrides (the SAME mechanism the canvas-MCP and
- * builtin-MCP CLI injectors already use for `mcp_servers.*`), so this builder
- * returns the `-c` overrides as `extraArgs` rather than writing the user's
- * `~/.codex/config.toml` on disk. This keeps the redirection session-scoped and
- * leaves the user's real config untouched (no file management, no rollback risk).
+ * (`base_url`, `wire_api = "responses"`, and a dedicated `env_key`) selected by
+ * `model_provider = "<name>"`. Codex exposes those config keys as command-line
+ * `-c key=value` overrides (the SAME mechanism the canvas-MCP and builtin-MCP CLI
+ * injectors already use for `mcp_servers.*`), so this builder returns the `-c`
+ * overrides as `extraArgs` rather than writing the user's `~/.codex/config.toml`
+ * on disk. This keeps redirection session-scoped and leaves user config untouched.
  *
- * The API key the CLI sends is supplied through the `requires_openai_auth` env
- * (`OPENAI_API_KEY`) — a placeholder is sufficient because the proxy
- * re-authenticates every upstream call with the resolved provider/subscription
- * credential; the value the CLI forwards is never used upstream. We still inject
- * a sentinel so the CLI's `requires_openai_auth = true` precondition is met
- * without the CLI falling back to a real `~/.codex/auth.json`.
+ * The route token is supplied only through `OMNICROSS_CODEX_ROUTE_TOKEN`, named
+ * by the custom provider's `env_key`; no OpenAI login or auth file is required.
  *
  * What this builder returns (mirroring `ProviderEnvResult` from provider-env.ts):
  *   - `env`        — env vars merged into the Codex subprocess (the auth sentinel).
@@ -282,21 +279,12 @@ interface CodexLaunchConfigInputs {
  * Codex-specific `extraArgs` (config overrides) and the `baseUrl`.
  */
 interface CodexLaunchConfig {
-    /**
-     * Env vars to merge into the Codex subprocess env. The Codex CLI's
-     * `requires_openai_auth = true` precondition is satisfied by a sentinel
-     * `OPENAI_API_KEY` (the value is never used upstream — the proxy re-auths).
-     */
+    /** Env vars to merge into the Codex subprocess env, including its route token. */
     readonly env: Record<string, string>;
     /**
      * `-c key=value` config overrides appended to the Codex argv. These override
-     * `~/.codex/config.toml` for THIS spawn only, pointing the CLI at the proxy:
-     *   `-c model_provider="omnicross"`
-     *   `-c model_providers.omnicross.name="omnicross"`
-     *   `-c model_providers.omnicross.base_url="http://127.0.0.1:<port>/openai"`
-     *   `-c model_providers.omnicross.wire_api="responses"`
-     *   `-c model_providers.omnicross.requires_openai_auth=true`
-     * (`requires_openai_auth` is an UNQUOTED boolean — TOML overrides are typed.)
+     * `~/.codex/config.toml` for THIS spawn only, pointing the CLI at the proxy and
+     * naming `OMNICROSS_CODEX_ROUTE_TOKEN` as the custom provider's `env_key`.
      */
     readonly extraArgs: string[];
     /** Stops the booted proxy listener. Best-effort; never throws. */
@@ -312,6 +300,8 @@ interface CodexLaunchConfig {
  * @param baseUrl listener base (`http://127.0.0.1:<port>`)
  */
 declare function buildCodexConfigOverrides(baseUrl: string): string[];
+/** Pure, argv-safe Codex descriptor. It performs no route or process I/O. */
+declare function buildCodexRuntimeLaunchDescriptor(baseUrl: string, routeToken: string): RuntimeLaunchDescriptor;
 /**
  * Boot the codex proxy route and return the launch redirection for the Codex CLI
  * subprocess. The analogue of `buildProviderEnvWithProxy` for the Codex CLI.
@@ -329,6 +319,9 @@ declare function buildCodexConfigOverrides(baseUrl: string): string[];
  */
 declare function buildCodexLaunchConfig(inputs: CodexLaunchConfigInputs): Promise<CodexLaunchConfig>;
 
+/** Shared pure descriptor adapter used by RouteLeaseManager and compatibility wrappers. */
+declare const routeLeaseDescriptorPort: RouteLeaseDescriptorPort;
+
 /**
  * Process Supervisor module — singleton accessor and re-exports.
  *
@@ -337,4 +330,4 @@ declare function buildCodexLaunchConfig(inputs: CodexLaunchConfigInputs): Promis
 
 declare function getProcessSupervisor(): ProcessSupervisor;
 
-export { CHAT_PROXY_BASE_PATH, CLAUDE_PROXY_API_KEY_SENTINEL, CODEX_PROXY_BASE_PATH, CODEX_PROXY_PROVIDER_NAME, type ChatCliBackendId, type ChatCliLaunchConfig, type ChatCliLaunchConfigInputs, type ChildAdapterHandle, type ClaudeCliLaunchConfigInputs, type CodexLaunchConfig, type CodexLaunchConfigInputs, type GeminiCliLaunchConfigInputs, OPENCODE_PROXY_PROVIDER_ID, OPENCODE_PROXY_TOKEN_ENV, ProcessSupervisor, buildChatCliLaunchConfig, buildClaudeCliLaunchConfig, buildCodexConfigOverrides, buildCodexLaunchConfig, buildGeminiCliLaunchConfig, getProcessSupervisor };
+export { CHAT_PROXY_BASE_PATH, CLAUDE_PROXY_API_KEY_SENTINEL, CODEX_PROXY_BASE_PATH, CODEX_PROXY_PROVIDER_NAME, type ChatCliBackendId, type ChatCliLaunchConfig, type ChatCliLaunchConfigInputs, type ChildAdapterHandle, type ClaudeCliLaunchConfigInputs, type CodexLaunchConfig, type CodexLaunchConfigInputs, type GeminiCliLaunchConfigInputs, OPENCODE_PROXY_PROVIDER_ID, OPENCODE_PROXY_TOKEN_ENV, ProcessSupervisor, buildChatCliLaunchConfig, buildClaudeCliLaunchConfig, buildClaudeRuntimeLaunchDescriptor, buildCodexConfigOverrides, buildCodexLaunchConfig, buildCodexRuntimeLaunchDescriptor, buildGeminiCliLaunchConfig, getProcessSupervisor, routeLeaseDescriptorPort };

package/dist/index.js

@@ -412,6 +412,17 @@ function createProcessSupervisor() {
 import { resolveProviderEndpoint } from "@omnicross/core/completion";
 import { getProviderProxy } from "@omnicross/core/provider-proxy";
 var CLAUDE_PROXY_API_KEY_SENTINEL = "omnicross-proxy";
+function buildClaudeRuntimeLaunchDescriptor(baseUrl, model, routeToken) {
+  return {
+    env: {
+      ANTHROPIC_BASE_URL: baseUrl,
+      ANTHROPIC_AUTH_TOKEN: routeToken,
+      ANTHROPIC_API_KEY: CLAUDE_PROXY_API_KEY_SENTINEL,
+      ANTHROPIC_MODEL: model
+    },
+    extraArgs: []
+  };
+}
 async function buildClaudeCliLaunchConfig(inputs) {
   const provider = await inputs.llmConfig.getProvider(inputs.providerId);
   if (!provider) {
@@ -442,14 +453,9 @@ async function buildClaudeCliLaunchConfig(inputs) {
     providerId: inputs.providerId,
     model: inputs.model
   });
-  const env = {
-    ANTHROPIC_BASE_URL: baseUrl,
-    ANTHROPIC_AUTH_TOKEN: token,
-    ANTHROPIC_API_KEY: CLAUDE_PROXY_API_KEY_SENTINEL,
-    ANTHROPIC_MODEL: inputs.model
-  };
+  const descriptor = buildClaudeRuntimeLaunchDescriptor(baseUrl, inputs.model, token);
   return {
-    env,
+    env: descriptor.env,
     baseUrl,
     onSessionEnd: () => {
       try {
@@ -637,7 +643,10 @@ function resolveApiKey2(apiKey) {
 
 // src/proxy-env/codex-proxy-env.ts
 import { resolveProviderEndpoint as resolveProviderEndpoint3 } from "@omnicross/core/completion";
-import { getProviderProxy as getProviderProxy3 } from "@omnicross/core/provider-proxy";
+import {
+  getProviderProxy as getProviderProxy3,
+  ROUTE_LEASE_CODEX_TOKEN_ENV
+} from "@omnicross/core/provider-proxy";
 var CODEX_PROXY_PROVIDER_NAME = "omnicross";
 var CODEX_PROXY_BASE_PATH = "/openai";
 function buildCodexConfigOverrides(baseUrl) {
@@ -647,15 +656,13 @@ function buildCodexConfigOverrides(baseUrl) {
     "-c",
     `model_provider="${name}"`,
     "-c",
-    `model_providers.${name}.name="${name}"`,
+    `model_providers.${name}.name="OmniCross"`,
     "-c",
     `model_providers.${name}.base_url="${providerBaseUrl}"`,
     "-c",
     `model_providers.${name}.wire_api="responses"`,
-    // requires_openai_auth is a boolean — UNQUOTED so the TOML override is typed
-    // as a bool, not the string "true".
     "-c",
-    `model_providers.${name}.requires_openai_auth=true`,
+    `model_providers.${name}.env_key="${ROUTE_LEASE_CODEX_TOKEN_ENV}"`,
     // disable_response_storage: the CLI sends full context each turn (no
     // server-side response store) — required because the proxy upstream is
     // stateless w.r.t. Codex's response-id store (design Q3 contract).
@@ -663,6 +670,12 @@ function buildCodexConfigOverrides(baseUrl) {
     "disable_response_storage=true"
   ];
 }
+function buildCodexRuntimeLaunchDescriptor(baseUrl, routeToken) {
+  return {
+    env: { [ROUTE_LEASE_CODEX_TOKEN_ENV]: routeToken },
+    extraArgs: buildCodexConfigOverrides(baseUrl)
+  };
+}
 async function buildCodexLaunchConfig(inputs) {
   const authMode = inputs.authMode ?? "byo";
   if (authMode === "byo") {
@@ -701,15 +714,9 @@ async function buildCodexLaunchConfig(inputs) {
     model: inputs.model,
     authMode
   });
+  const descriptor = buildCodexRuntimeLaunchDescriptor(baseUrl, token);
   return {
-    env: {
-      // Satisfy the CLI's `requires_openai_auth = true` precondition. The CLI
-      // forwards this as the Responses-API key; the resident proxy uses it as
-      // the route TOKEN (looked up, then discarded) and re-authenticates
-      // upstream from the route's own provider/subscription credential.
-      OPENAI_API_KEY: token
-    },
-    extraArgs: buildCodexConfigOverrides(baseUrl),
+    ...descriptor,
     baseUrl,
     onSessionEnd: () => {
       proxy.removeRoute(token);
@@ -724,6 +731,28 @@ function resolveApiKey3(apiKey) {
   return apiKey;
 }
 
+// src/proxy-env/runtime-launch-descriptor.ts
+import {
+  RouteLeaseError
+} from "@omnicross/core/provider-proxy";
+var routeLeaseDescriptorPort = {
+  has(runtime) {
+    return runtime === "claude" || runtime === "codex";
+  },
+  build(runtime, input) {
+    switch (runtime) {
+      case "claude":
+        return buildClaudeRuntimeLaunchDescriptor(input.proxyBaseUrl, input.model, input.routeToken);
+      case "codex":
+        return buildCodexRuntimeLaunchDescriptor(input.proxyBaseUrl, input.routeToken);
+      default: {
+        const exhaustive = runtime;
+        throw new RouteLeaseError("runtime_unsupported", `runtime adapter unavailable: ${String(exhaustive)}`);
+      }
+    }
+  }
+};
+
 // src/index.ts
 var instance = null;
 function getProcessSupervisor() {
@@ -739,8 +768,11 @@ export {
   OPENCODE_PROXY_TOKEN_ENV,
   buildChatCliLaunchConfig,
   buildClaudeCliLaunchConfig,
+  buildClaudeRuntimeLaunchDescriptor,
   buildCodexConfigOverrides,
   buildCodexLaunchConfig,
+  buildCodexRuntimeLaunchDescriptor,
   buildGeminiCliLaunchConfig,
-  getProcessSupervisor
+  getProcessSupervisor,
+  routeLeaseDescriptorPort
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnicross/cli-launcher",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Omnicross CLI-launcher 鈥?the ProcessSupervisor subprocess-lifecycle mechanism + per-CLI proxy-env wiring.",
   "license": "MIT",
   "author": "Sayo (https://github.com/Dumoedss)",