@zvada/agent-server 0.3.3 → 0.3.5

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.3.5
+
+- Switching Codex ChatGPT accounts or API keys now recreates the native process
+  and resumes the same conversation. Native Codex keeps model WebSockets
+  authenticated as the account that opened them, so a login update alone could
+  keep using the previous account. Renewing a token for the same account remains
+  warm; no credential fields are added to the public protocol.
+
+## 0.3.4
+
+- Update the managed Codex CLI and development SDK to 0.153.4. This clears
+  Astra's minimum CLI requirement (0.153.0); model access still depends on
+  the selected OpenAI account. The generated app-server protocol remains
+  compatible with host-managed ChatGPT authentication and the engine's
+  existing conversation, approval, and usage handling.
+
 ## 0.3.3
 
 - Embedded hosts can resolve Codex API keys or externally managed ChatGPT

package/docs/harnesses.md

@@ -66,7 +66,7 @@ fresh access credentials, the callback must return the same ChatGPT account;
 the engine rejects mismatched identities and refreshes that outlive their turn.
 An absent previous-account hint resolves to the turn's selected account. No
 credentials or callbacks are added to `RunConfig` or the engine's public wire.
-The protocol was checked against Codex CLI 0.146.1 and the
+The protocol was checked against Codex CLI 0.153.4 and the
 [official app-server authentication documentation](https://learn.chatgpt.com/docs/app-server#3c-log-in-with-externally-managed-chatgpt-tokens-chatgptauthtokens).
 
 ## Payload notes

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zvada/agent-server",
-	"version": "0.3.3",
+	"version": "0.3.5",
 	"description": "Harness-agnostic agent execution engine: run Claude Code, Codex (SDK/CLI + app-server), and any ACP agent behind one interface with a normalized event stream, multi-turn sessions, and resume. Root export is the wire contract; /core, /server, /client are the seats.",
 	"license": "MIT",
 	"type": "module",
@@ -101,7 +101,7 @@
 	"devDependencies": {
 		"@agentclientprotocol/sdk": "^1.2.1",
 		"@anthropic-ai/claude-agent-sdk": "0.3.220",
-		"@openai/codex-sdk": "^0.146.1",
+		"@openai/codex-sdk": "0.153.4",
 		"@types/bun": "^1.2.0"
 	}
 }

package/src/core/agents/codex-app-server/codex-app-server-agent.ts

@@ -39,8 +39,8 @@ export interface AppServerSession {
 	sandbox: string;
 	systemPromptAppend?: string;
 	envFingerprint: string;
-	/** Native CLI auth and externally managed tokens cannot share a warm process. */
-	authMode?: CodexAppServerAuth["type"];
+	/** Native model connections retain the identity used at their first handshake. */
+	authFingerprint?: string;
 	/** Credentials and permission broker belong only to the current execute. */
 	turn?: AppServerTurn;
 	idleTimer?: ReturnType<typeof setTimeout>;
@@ -169,6 +169,13 @@ export interface CodexChatGptAuth {
 
 export type CodexAppServerAuth = { type: "apiKey"; apiKey: string } | CodexChatGptAuth;
 
+function authFingerprint(auth: CodexAppServerAuth | undefined): string | undefined {
+	if (!auth) return undefined;
+	return configFingerprint(
+		auth.type === "apiKey" ? auth : { type: auth.type, accountId: auth.tokens.chatgptAccountId },
+	);
+}
+
 export interface CodexAppServerAgentOptions {
 	createClient?: (options: CodexAppServerClientOptions) => CodexAppServerClient;
 	idleTimeoutMs?: number;
@@ -186,7 +193,8 @@ export interface CodexAppServerAgentOptions {
 	 * Resolve the selected API key or ChatGPT account before EVERY turn, including warm
 	 * sessions. Operator-only: neither callbacks nor tokens belong in RunConfig.
 	 * Return undefined to select native CLI auth; throw when the selected external
-	 * account is unavailable. Switching back to native auth recreates the process.
+	 * account is unavailable. Changing accounts, API keys, or auth modes recreates
+	 * the process and resumes the same conversation.
 	 */
 	resolveAuth?: (sessionId: string) => Promise<CodexAppServerAuth | undefined>;
 }
@@ -228,12 +236,13 @@ export class CodexAppServerAgent extends BaseAgent {
 		const approvalPolicy = approvalPolicyFor(options);
 		const sandbox = mapSandbox(options.permissionMode);
 		const existing = this.sessions.get(options.sessionId);
-		// Reuse a warm subprocess only when its (immutable) approval posture
-		// matches; otherwise recreate it, resuming the same thread so context
-		// survives. `resumeThreadId` carries that over to the spawn below.
+		const identity = authFingerprint(turn.auth);
+		// Codex caches an authenticated model WebSocket across turns. Login alone
+		// cannot switch its identity: restart on account/key changes and resume
+		// the same thread. Same-account token renewal can keep the process warm.
 		let resumeThreadId = options.resumeSessionId;
 		if (existing && !existing.client.closed) {
-			if (appServerSessionCompatible(existing, options) && existing.authMode === turn.auth?.type) {
+			if (appServerSessionCompatible(existing, options) && existing.authFingerprint === identity) {
 				this.sessions.clearIdle(existing);
 				existing.turn = turn;
 				const onAbort = () => existing.client.close();
@@ -284,7 +293,7 @@ export class CodexAppServerAgent extends BaseAgent {
 			sandbox,
 			systemPromptAppend: options.systemPromptAppend,
 			envFingerprint: configFingerprint(options.env),
-			authMode: turn.auth?.type,
+			authFingerprint: identity,
 			turn,
 		};
 		this.bindRequests(session);

package/src/core/provision/pins.ts

@@ -32,10 +32,10 @@ export const DEFAULT_PINS: Record<CliTool, string> = {
 	// streams token-estimate placeholders instead — bump only after verifying
 	// thinking summaries still flow (see options.ts extraArgs).
 	claude: "0.3.220",
-	// 0.146.1 re-verified 2026-08-06: generate-ts snapshot carries our full
-	// surface unchanged (thread/turn/item methods, tokenUsage w/ window,
-	// approvals) and a live turn ran clean incl. the gpt-5.6-sol default.
-	codex: "0.146.1",
+	// 0.153.4 re-verified 2026-09-08 against generate-ts: host-managed
+	// ChatGPT auth, thread/turn/item methods, token usage, and approvals
+	// remain compatible. Astra requires CLI 0.153.0 or newer.
+	codex: "0.153.4",
 };
 
 /**