clay-server 2.45.0-beta.2 → 2.45.0-beta.4

package/lib/project-user-message.js

@@ -145,7 +145,8 @@ function attachUserMessage(ctx) {
           return true;
         }
       }
-      var t = tm.create(msg.cols || 80, msg.rows || 24, getOsUserInfoForWs(ws), ws);
+      var t = tm.create(msg.cols || 80, msg.rows || 24, getOsUserInfoForWs(ws), ws,
+        msg.initialCommand ? { initialInput: String(msg.initialCommand) } : undefined);
       if (!t) {
         sendTo(ws, { type: "term_error", error: "Cannot create terminal (node-pty not available or limit reached)" });
         return true;

package/lib/project.js

@@ -907,13 +907,20 @@ function createProjectContext(opts) {
                 slug: slug,
               });
             } else if ((!sm.modelsByVendor || !sm.modelsByVendor[msg.vendor]) && typeof vendorAdapter.init === "function") {
-              await vendorAdapter.init({
-                cwd: cwd,
-                clayPort: serverPort,
-                clayTls: serverTls,
-                clayAuthToken: serverAuthToken,
-                slug: slug,
-              });
+              // Init warms the adapter, but a slow/failed init must not block
+              // model listing (e.g. Codex models are a fixed list). Keep going
+              // to supportedModels() even if init throws.
+              try {
+                await vendorAdapter.init({
+                  cwd: cwd,
+                  clayPort: serverPort,
+                  clayTls: serverTls,
+                  clayAuthToken: serverAuthToken,
+                  slug: slug,
+                });
+              } catch (e) {
+                console.error("[project] " + msg.vendor + " init failed (continuing to model list):", e.message || e);
+              }
             }
             if (vendorAdapter) {
               sm.availableVendors = Object.keys(adapters);

package/lib/public/css/tui-attention.css

@@ -349,6 +349,12 @@ body.tui-suspended #tui-resume-bar {
   border: 1px solid var(--border);
   box-shadow: 0 12px 48px rgba(0, 0, 0, 0.6);
 }
+/* Compact variant for short content (e.g. login wizard): smaller box so the
+   terminal hugs the content instead of leaving a tall empty area below. */
+.tui-modal.tui-modal-compact {
+  width: min(720px, 96%);
+  height: min(480px, 90%);
+}
 .tui-modal-header {
   display: flex;
   align-items: center;

package/lib/public/modules/app-messages.js

@@ -29,7 +29,7 @@ import { updateSettingsModels, updateSettingsStats, updateDaemonConfig, handleSe
 import { handleTermList, handleTermCreated, sendTerminalCommand, handleTermOutput, handleTermResized, handleTermExited, handleTermClosed } from './terminal.js';
 import { attachTuiView, detachTuiView, setTuiSuspendedView, tuiHandleTermOutput, tuiHandleTermResized, tuiHandleTermExited, tuiHandleTermClosed } from './session-tui-view.js';
 import { handleTuiTranscriptState } from './tui-grab.js';
-import { tuiModalHandleTermOutput, tuiModalHandleTermResized, tuiModalHandleTermExited, tuiModalHandleTermClosed } from './tui-attention.js';
+import { tuiModalHandleTermOutput, tuiModalHandleTermResized, tuiModalHandleTermExited, tuiModalHandleTermClosed, openTuiModal } from './tui-attention.js';
 import { updateTerminalList, handleContextSourcesState, updateEmailAccountList, updateEmailUnreadCounts, handleEmailTestResult, handleEmailAddResult, handleEmailRemoveResult, handleEmailDefaults } from './context-sources.js';
 import { refreshEmailSettings } from './user-settings.js';
 import { handleNotesList, handleNoteCreated, handleNoteUpdated, handleNoteDeleted } from './sticky-notes.js';
@@ -57,7 +57,7 @@ import { handleRemoteCursorMove, handleRemoteCursorLeave, handleRemoteSelection,
 import { showLoopBanner, updateLoopBanner, updateLoopInputVisibility, showRalphApprovalBar, updateRalphApprovalStatus, openRalphPreviewModal, showExecModal, updateExecModalStatus } from './app-loop-ui.js';
 import { showDebateSticky, showDebateConcludeConfirm, showDebateUserFloor, exitDebateFloorMode, exitDebateConcludeMode, exitDebateEndedMode, updateDebateRound, renderDebateUserFloorDone } from './app-debate-ui.js';
 import { handleSkillInstallWs } from './app-skills-install.js';
-import { handleNotificationsState, handleNotificationCreated, handleNotificationDismissed, handleNotificationDismissedAll, showUpdateBanner } from './app-notifications.js';
+import { handleNotificationsState, handleNotificationCreated, handleNotificationDismissed, handleNotificationDismissedAll, showUpdateBanner, autoStartLoginIfNeeded } from './app-notifications.js';
 import { handleDebatePreparing, handleDebateBriefReady, renderDebateBriefReady, handleDebateStarted, renderDebateStarted, handleDebateTurn, handleDebateActivity, handleDebateStream, handleDebateTurnDone, handleDebateCommentQueued, handleDebateCommentInjected, renderDebateCommentInjected, handleDebateResumed, handleDebateEnded, renderDebateEnded, handleDebateError, isDebateActive, renderMcpDebateProposal, renderDebateUserResume } from './debate.js';
 import { handleMentionStart, handleMentionActivity, handleMentionStream, handleMentionDone, handleMentionError, renderMentionUser, renderMentionResponse, renderUserMention } from './mention.js';
 
@@ -443,8 +443,18 @@ export function processMessage(msg) {
         if (_modelVal && typeof _modelVal === "object") _modelVal = _modelVal.value || _modelVal.displayName || "";
         var _miUpdate = { currentModels: msg.models || [] };
         if (Object.prototype.hasOwnProperty.call(msg, "model")) {
-          if (store.get('vendorSelectionLocked') && store.get('currentModel')) {
-            // Keep the user's existing selection; only update models list
+          // Keep the user's existing selection only if it actually belongs to
+          // this vendor's model list. Otherwise (e.g. switching to a Codex
+          // session while currentModel is still a Claude model) snap to the
+          // server-provided default so the chip doesn't show a cross-vendor
+          // model.
+          var _curModel = store.get('currentModel');
+          var _curInList = !!_curModel && (msg.models || []).some(function (m) {
+            var v = typeof m === "string" ? m : (m && m.value);
+            return v === _curModel;
+          });
+          if (store.get('vendorSelectionLocked') && _curInList) {
+            // Keep the user's existing (valid) selection; only update models list
           } else {
             _miUpdate.currentModel = _modelVal || "";
           }
@@ -1156,6 +1166,9 @@ export function processMessage(msg) {
         appendDelta((msg.text || "Authentication required.") + "\n");
         setStatus("connected");
         if (!store.get('loopActive')) enableMainInput();
+        // Auto-open the login modal terminal when the session can self-login.
+        // No-op otherwise (the auth_required banner remains the manual path).
+        autoStartLoginIfNeeded(msg);
         break;
 
       case "rate_limit":
@@ -1338,6 +1351,19 @@ export function processMessage(msg) {
         break;
 
       case "term_created":
+        // Login-modal path: the terminal was created with the login command as
+        // its initial input; attach the modal dialog to it (replays scrollback
+        // so the login URL is visible) instead of the sidebar terminal.
+        if (store.get('pendingLoginModal')) {
+          var _lm = store.get('pendingLoginModal');
+          store.set({ pendingLoginModal: null });
+          openTuiModal(msg.id, _lm.slug, {
+            sessionTitle: (_lm.vendor === "codex" ? "Codex" : "Claude") + " login",
+            projectName: _lm.slug,
+            compact: true,
+          });
+          break;
+        }
         handleTermCreated(msg);
         if (store.get('pendingTermCommand')) {
           var cmd = store.get('pendingTermCommand');

package/lib/public/modules/app-notifications.js

@@ -252,7 +252,7 @@ function showBanner(notif, autoDismissMs) {
           removeBanner(banner);
           dismissNotif(notif.id);
           var authMeta = notif.meta || {};
-          startLoginCommand(authMeta.loginCommand || ((authMeta.vendor || "claude") === "codex" ? "codex login --device-auth" : "claude login"));
+          startLoginInModal(authMeta.loginCommand || ((authMeta.vendor || "claude") === "codex" ? "codex login --device-auth" : "claude login"), authMeta.vendor || "claude");
           showLoginReminderBanner();
         });
       }
@@ -311,7 +311,42 @@ function showBanner(notif, autoDismissMs) {
   }
 }
 
+// Open the login terminal as a modal dialog (the same modal used for TUI
+// attention), running the vendor login command. The terminal is created with
+// the command as its initial input, so when the modal attaches it replays the
+// scrollback and the user sees the login URL / prompts immediately.
+// Falls back to the sidebar terminal if the current project slug is unknown
+// (the modal needs a slug to open its own WS to the project).
+function currentProjectSlug() {
+  var slug = store.get('currentSlug') || "";
+  if (slug) return slug;
+  // Fallback: derive from the URL (/p/<slug>/...).
+  try {
+    var m = (window.location.pathname || "").match(/^\/p\/([a-z0-9_-]+)/);
+    if (m) return m[1];
+  } catch (e) {}
+  return "";
+}
+
+function startLoginInModal(loginCommand, vendor) {
+  if (authReminderVisible) return;
+  var ws = getWs();
+  if (!ws || ws.readyState !== 1) return;
+  var cmd = loginCommand || (vendor === "codex" ? "codex login --device-auth" : "claude login");
+  var slug = currentProjectSlug();
+  if (!slug) { startLoginCommand(cmd); return; }
+  store.set({ pendingLoginModal: { slug: slug, vendor: vendor || "claude" } });
+  ws.send(JSON.stringify({
+    type: "term_create",
+    cols: 100,
+    rows: 30,
+    initialCommand: cmd + "\n",
+  }));
+}
+
+// Sidebar-terminal fallback (used when no slug is available for the modal).
 function startLoginCommand(loginCommand) {
+  if (authReminderVisible) return;
   var ws = getWs();
   if (!ws || ws.readyState !== 1) return;
   var termCommand = (loginCommand || "claude login") + "\n";
@@ -320,6 +355,23 @@ function startLoginCommand(loginCommand) {
   openTerminal();
 }
 
+// Auto-open the login modal and run the login command when the server reports
+// the vendor isn't logged in. The popup terminal runs as the connected user's
+// own OS identity (term_create -> getOsUserInfoForWs), so login always targets
+// the right account — we pop it unconditionally rather than gating on
+// canAutoLogin. Idempotent: startLoginInModal is guarded by authReminderVisible
+// so repeat auth_required events no-op.
+export function autoStartLoginIfNeeded(msg) {
+  if (!msg) return false;
+  if (authReminderVisible) return false;
+  var vendor = msg.vendor || "claude";
+  var cmd = msg.loginCommand
+    || (vendor === "codex" ? "codex login --device-auth" : "claude login");
+  startLoginInModal(cmd, vendor);
+  showLoginReminderBanner();
+  return true;
+}
+
 function showLoginReminderBanner() {
   if (!bannerContainer) return;
   authReminderVisible = true;
@@ -554,6 +606,11 @@ export function handleNotificationCreated(msg) {
   unreadCount = msg.unreadCount;
   updateBadge();
 
+  // auth_required no longer pops a banner: the login terminal modal opens
+  // automatically (see autoStartLoginIfNeeded). Keep the notification in the
+  // center (above) for history, but don't show the redundant banner.
+  if (notif.type === "auth_required") return;
+
   // tui_attention drives the project icon shake and the favicon blink —
   // same visual cues the SDK already produces from pendingPermissions /
   // permission_request messages, so the user notices either kind without

package/lib/public/modules/tui-attention.js

@@ -147,6 +147,12 @@ export function openTuiModal(terminalId, sourceSlug, info) {
   });
   modalEl.classList.remove("hidden");
 
+  // Compact sizing for short, content-light terminals (e.g. the login
+  // wizard) so the box hugs the content instead of leaving a tall empty
+  // black area below it. Full-size for live TUI sessions that fill the screen.
+  var boxEl = modalEl.querySelector(".tui-modal");
+  if (boxEl) boxEl.classList.toggle("tui-modal-compact", !!infoObj.compact);
+
   var bodyEl = modalEl.querySelector(".tui-modal-body");
   bodyEl.innerHTML = "";
   modalXterm = new Terminal({

package/lib/sdk-message-processor.js

@@ -36,6 +36,50 @@ function attachMessageProcessor(ctx) {
     sm.sendToSession(session, obj);
   }
 
+  // Emit the "not logged in" signal (WS message + notification) so the client
+  // auto-opens the login modal. Shared by the Claude path (login-prompt text
+  // detection) and the Codex path (app-server unauthorized error). Deduped
+  // per session to avoid spamming when multiple auth errors arrive in a burst.
+  function emitAuthRequired(session) {
+    var now = Date.now();
+    if (session._lastAuthEmit && (now - session._lastAuthEmit) < 5000) return;
+    session._lastAuthEmit = now;
+
+    var authUser = session.ownerId ? usersModule.findUserById(session.ownerId) : null;
+    var authLinuxUser = authUser && authUser.linuxUser ? authUser.linuxUser : null;
+    var canAutoLogin = !usersModule.isMultiUser()
+      || !!authLinuxUser
+      || (authUser && authUser.role === "admin");
+    var authTitle = session.vendor === "codex" ? "Codex is not logged in." : "Claude Code is not logged in.";
+    var loginCommand = session.vendor === "codex"
+      ? "codex login --device-auth"
+      : "claude login";
+    var _nmLogin = getNotificationsModule();
+    sendAndRecord(session, {
+      type: "auth_required",
+      text: authTitle,
+      vendor: session.vendor || "claude",
+      loginCommand: loginCommand,
+      linuxUser: authLinuxUser,
+      canAutoLogin: canAutoLogin,
+    });
+    if (_nmLogin) {
+      _nmLogin.notify("auth_required", {
+        title: authTitle,
+        body: "Open a terminal, then click the URL and follow the instructions.",
+        slug: slug,
+        sessionId: session.localId,
+        ownerId: session.ownerId || null,
+        vendor: session.vendor || "claude",
+        loginCommand: loginCommand,
+        linuxUser: authLinuxUser,
+        canAutoLogin: canAutoLogin,
+      });
+    }
+    // Reset CLI session so the next query starts fresh with new auth.
+    session.cliSessionId = null;
+  }
+
   function getModelsForVendor(vendor) {
     if (vendor && sm.modelsByVendor && sm.modelsByVendor[vendor]) return sm.modelsByVendor[vendor];
     return sm.availableModels || [];
@@ -447,40 +491,7 @@ function attachMessageProcessor(ctx) {
       // Detect "Not logged in / Please run /login" from SDK.
       // This is a short canned response with zero cost, not actual AI output.
       if (isLoginPrompt) {
-        var authUser = session.ownerId ? usersModule.findUserById(session.ownerId) : null;
-        var authLinuxUser = authUser && authUser.linuxUser ? authUser.linuxUser : null;
-        var canAutoLogin = !usersModule.isMultiUser()
-          || !!authLinuxUser
-          || (authUser && authUser.role === "admin");
-        var authTitle = session.vendor === "codex" ? "Codex is not logged in." : "Claude Code is not logged in.";
-        var loginCommand = session.vendor === "codex"
-          ? "codex login --device-auth"
-          : "claude login";
-        var _nmLogin = getNotificationsModule();
-        var authMsg = {
-          type: "auth_required",
-          text: authTitle,
-          vendor: session.vendor || "claude",
-          loginCommand: loginCommand,
-          linuxUser: authLinuxUser,
-          canAutoLogin: canAutoLogin,
-        };
-        sendAndRecord(session, authMsg);
-        if (_nmLogin) {
-          _nmLogin.notify("auth_required", {
-            title: authTitle,
-            body: "Open a terminal, then click the URL and follow the instructions.",
-            slug: slug,
-            sessionId: session.localId,
-            ownerId: session.ownerId || null,
-            vendor: session.vendor || "claude",
-            loginCommand: loginCommand,
-            linuxUser: authLinuxUser,
-            canAutoLogin: canAutoLogin,
-          });
-        }
-        // Reset CLI session so next query starts fresh with new auth
-        session.cliSessionId = null;
+        emitAuthRequired(session);
       }
       sendAndRecord(session, { type: "done", code: 0 });
       var _donePreviewText = (session.responsePreview || "").replace(/\s+/g, " ").trim();
@@ -751,6 +762,14 @@ function attachMessageProcessor(ctx) {
         message: parsed.message || "",
       });
 
+    } else if (parsed.yokeType === "auth_required") {
+      // Vendor adapter signalled the session isn't authenticated (e.g. Codex
+      // app-server returned an unauthorized/token-revoked error). Trigger the
+      // same login flow as the Claude login-prompt path.
+      session.isProcessing = false;
+      onProcessingChanged();
+      emitAuthRequired(session);
+
     } else if (parsed.yokeType === "model_refusal") {
       // Model declined the request. "fallback" => the CLI retried on another
       // model; "no_fallback" => the turn ended with a refusal.

package/lib/whats-new-content.js

@@ -27,6 +27,7 @@ var ENTRIES = [
     title: "TUI becomes the default for Claude sessions",
     publishedAt: "2026-05-25",
     image: null,
+    popup: false, // superseded by "GUI is back"; keep in the home feed only
     summary: "Anthropic is splitting Claude billing into Interactive and Programmatic buckets on June 15. To keep working with your existing plan, Clay opens Claude sessions in the embedded claude CLI by default from that date.",
     body: '' +
       '<p><strong>2026-06-15 Anthropic billing change.</strong> Claude subscriptions split into two buckets:</p>' +
@@ -55,6 +56,7 @@ var ENTRIES = [
     title: "Mates leaves the official feature set",
     publishedAt: "2026-05-25",
     image: null,
+    popup: false, // superseded by "GUI is back"; keep in the home feed only
     summary: "June 15 will be Mates' last day as a first-class Clay feature. It continues as a separate standalone project so Clay can focus fully on being a developer tool.",
     body: '' +
       '<p>On <strong>2026-06-15</strong>, Mates leaves Clay\'s official feature set. Your existing Mates and their knowledge files will remain on disk; we will share migration instructions and a link to the new standalone project before the cutover.</p>' +
@@ -63,6 +65,20 @@ var ENTRIES = [
       '<p>We are formally positioning Clay as a <strong>developer tool</strong>. From here on, every roadmap decision is judged by a single question: does it make Clay the sleekest, sharpest workspace on the AI-coding frontier? Mates no longer fits that bar cleanly, so it gets its own home where it can evolve on its own terms.</p>' +
       '<p>Thanks for being here. Clay only gets sharper from here.</p>',
   },
+  {
+    id: "2026-07-gui-is-back",
+    title: "GUI is back as the default",
+    publishedAt: "2026-07-01",
+    image: null,
+    summary: "Anthropic reversed the June 15 billing split, so SDK usage is no longer billed separately. Clay opens Claude sessions in the GUI chat again by default. Mates is now off by default as it winds down.",
+    body: '' +
+      '<p><strong>Good news: Anthropic walked back the June 15 billing change.</strong> The planned Interactive vs. Programmatic split (which would have charged Claude Agent SDK usage at full API rates) is off the table, so the reason we moved everyone to the TUI is gone.</p>' +
+      '<h3>GUI is the default again</h3>' +
+      '<p>New Claude sessions open in the <strong>GUI chat</strong> (SDK) by default, the way they did before. The embedded <code>claude</code> <strong>TUI</strong> is still there whenever you want it &mdash; toggle <strong>"Open Claude as terminal (TUI)"</strong> in Settings.</p>' +
+      '<h3>Mates is off by default</h3>' +
+      '<p>As announced, <strong>Mates</strong> is no longer a first-class Clay feature. It is now <strong>off by default</strong> so Clay stays focused as a developer tool. Your existing Mates and their knowledge files remain on disk &mdash; if you still use them, re-enable Mates in <strong>Settings</strong>.</p>' +
+      '<p>Clay only gets sharper from here.</p>',
+  },
 ];
 
 module.exports = { ENTRIES: ENTRIES };

package/lib/whats-new.js

@@ -26,6 +26,9 @@ function getStateForUser(userId) {
   var seen = (typeof users.getWhatsNewSeenIds === "function" && userId) ? users.getWhatsNewSeenIds(userId) : [];
   var unseenIds = [];
   for (var i = 0; i < entries.length; i++) {
+    // popup:false entries stay in the home feed (entries) as history but never
+    // auto-pop in the carousel, so superseded announcements don't resurface.
+    if (entries[i] && entries[i].popup === false) continue;
     if (entries[i] && entries[i].id && seen.indexOf(entries[i].id) === -1) {
       unseenIds.push(entries[i].id);
     }

package/lib/yoke/adapters/codex.js

@@ -145,6 +145,16 @@ function normalizePlanStatus(status) {
   return "pending";
 }
 
+// Detect Codex "not logged in" errors. Codex surfaces auth failures several
+// ways depending on transport: a clean error event with
+// codexErrorInfo:"unauthorized", or a turn/failed / item error whose message
+// carries a 401 / token-revoked / missing-bearer / "sign in again" string.
+// Callers map a match to the neutral auth_required yokeType.
+function isCodexAuthError(text, errObj) {
+  if (errObj && errObj.codexErrorInfo === "unauthorized") return true;
+  return /sign in again|token[_ ]?revoked|invalidated oauth|missing bearer|unauthorized|\b401\b/i.test(String(text || ""));
+}
+
 function extractPromptSuggestion(params) {
   if (!params) return "";
   if (typeof params.suggestion === "string") return params.suggestion;
@@ -226,9 +236,14 @@ function flattenEvent(notification, state) {
   }
 
   if (method === "turn/failed") {
+    var tfMsg = params.error ? params.error.message : "Turn failed";
+    if (isCodexAuthError(tfMsg, params.error)) {
+      events.push({ yokeType: "auth_required", vendor: "codex" });
+      return events;
+    }
     events.push({
       yokeType: "error",
-      text: params.error ? params.error.message : "Turn failed",
+      text: tfMsg,
     });
     return events;
   }
@@ -525,9 +540,14 @@ function flattenEvent(notification, state) {
 
     // Error item
     if (item.type === "error") {
+      var ieMsg = item.message || "Unknown error";
+      if (isCodexAuthError(ieMsg, item)) {
+        events.push({ yokeType: "auth_required", vendor: "codex" });
+        return events;
+      }
       events.push({
         yokeType: "error",
-        text: item.message || "Unknown error",
+        text: ieMsg,
       });
       return events;
     }
@@ -551,6 +571,20 @@ function flattenEvent(notification, state) {
     return events;
   }
 
+  // Top-level error event. Codex signals "not logged in" via an unauthorized /
+  // token-revoked error (not a login-prompt message like Claude), so map it to
+  // the neutral auth_required yokeType to drive the login flow.
+  if (method === "error" && params && params.error) {
+    var cErr = params.error;
+    var cErrMsg = cErr.message || "Codex error";
+    if (isCodexAuthError(cErrMsg, cErr)) {
+      events.push({ yokeType: "auth_required", vendor: "codex" });
+      return events;
+    }
+    events.push({ yokeType: "error", text: cErrMsg });
+    return events;
+  }
+
   // Unknown event type - pass through
   console.log("[yoke/codex] UNHANDLED event:", method, JSON.stringify(params).substring(0, 200));
   events.push({
@@ -922,10 +956,10 @@ function createCodexQueryHandle(appServer, queryOpts) {
       if (!isCancelled() && e.name !== "AbortError") {
         console.error("[yoke/codex] runQueryLoop error:", e.message || e);
         console.error("[yoke/codex] stack:", e.stack || "(no stack)");
-        pushEvent({
-          yokeType: "error",
-          text: e.message || String(e),
-        });
+        var loopErrMsg = e.message || String(e);
+        pushEvent(isCodexAuthError(loopErrMsg)
+          ? { yokeType: "auth_required", vendor: "codex" }
+          : { yokeType: "error", text: loopErrMsg });
       }
     }
 
@@ -1047,7 +1081,19 @@ function createCodexAdapter(opts) {
   var _cwd = (opts && opts.cwd) || process.cwd();
   var _slug = (opts && opts.slug) || "";
   var _defaultInitOpts = Object.assign({}, opts || {});
-  var _cachedModels = [];
+  // Codex models are a fixed list (the app-server doesn't enumerate them), so
+  // model listing must not depend on a successful app-server init — otherwise a
+  // slow/failed `initialize` leaves the picker empty and the chip shows the
+  // previous vendor's model.
+  var CODEX_MODELS = [
+    "gpt-5.5",
+    "gpt-5.4",
+    "gpt-5.4-mini",
+    "gpt-5.3-codex",
+    "gpt-5.3-codex-spark",
+    "gpt-5.2",
+  ];
+  var _cachedModels = CODEX_MODELS.slice();
   var _appServer = null;
   var _initPromise = null;
   var _shutdownPromise = null;
@@ -1297,16 +1343,9 @@ function createCodexAdapter(opts) {
           throw createShutdownError();
         }
 
-        console.log("[codex] App-server initialized, models: gpt-5.5, gpt-5.4, gpt-5.4-mini, gpt-5.3-codex, gpt-5.3-codex-spark, gpt-5.2");
+        console.log("[codex] App-server initialized, models: " + CODEX_MODELS.join(", "));
 
-        _cachedModels = [
-          "gpt-5.5",
-          "gpt-5.4",
-          "gpt-5.4-mini",
-          "gpt-5.3-codex",
-          "gpt-5.3-codex-spark",
-          "gpt-5.2",
-        ];
+        _cachedModels = CODEX_MODELS.slice();
 
         // Discover skills: built-in Codex skills + Claude skills
         var skillNames = [];
@@ -1361,7 +1400,8 @@ function createCodexAdapter(opts) {
     },
 
     supportedModels: function() {
-      return Promise.resolve(_cachedModels.slice());
+      // Fixed list; return it without requiring a live app-server init.
+      return Promise.resolve(CODEX_MODELS.slice());
     },
 
     createToolServer: function(def) {

package/lib/yoke/codex-app-server.js

@@ -7,6 +7,7 @@
 var { spawn } = require("child_process");
 var readline = require("readline");
 var path = require("path");
+var fs = require("fs");
 var { createRequire } = require("module");
 
 // --- Find the codex binary path ---
@@ -48,7 +49,17 @@ function findCodexPath() {
     var platformPkgJson = codexRequire.resolve(platformPkg + "/package.json");
     var vendorRoot = path.join(path.dirname(platformPkgJson), "vendor");
     var binaryName = process.platform === "win32" ? "codex.exe" : "codex";
-    return path.join(vendorRoot, triple, "codex", binaryName);
+    // The binary layout changed across versions: 0.142+ ships it under
+    // vendor/<triple>/bin/, older builds used vendor/<triple>/codex/.
+    // Try the known layouts and return the first that exists.
+    var candidates = [
+      path.join(vendorRoot, triple, "bin", binaryName),
+      path.join(vendorRoot, triple, "codex", binaryName),
+    ];
+    for (var i = 0; i < candidates.length; i++) {
+      if (fs.existsSync(candidates[i])) return candidates[i];
+    }
+    throw new Error("codex binary not found in any known layout under " + path.join(vendorRoot, triple));
   } catch (e) {
     throw new Error("Could not find codex binary: " + e.message);
   }
@@ -153,6 +164,7 @@ CodexAppServer.prototype.start = function() {
         while (lines.length > 1) {
           var line = lines.shift();
           if (line.trim()) console.log("[codex-app-server stderr]", line);
+          self._maybeSignalAuthError(line);
         }
         self._stderrBuf = lines[0] || "";
       });
@@ -211,6 +223,23 @@ CodexAppServer.prototype._handleMessage = function(msg) {
   }
 };
 
+// The definitive "not logged in" signal from Codex is a 401 on its own
+// responses endpoint, which only appears on stderr (not as a JSON-RPC error).
+// When we see it, synthesize an error event so the adapter maps it to the
+// neutral auth_required yokeType. Deduped so a burst of 401 retries collapses.
+CodexAppServer.prototype._maybeSignalAuthError = function(line) {
+  if (!this.eventHandler || !line || this._authSignalSent) return;
+  var isAuth = /missing bearer|token[_ ]?revoked|invalidated oauth|please sign in again/i.test(line)
+    || (/\b401\b/.test(line) && /unauthorized|responses|openai\.com|chatgpt\.com/i.test(line));
+  if (!isAuth) return;
+  this._authSignalSent = true;
+  var self = this;
+  setTimeout(function () { self._authSignalSent = false; }, 15000);
+  try {
+    this.eventHandler({ method: "error", params: { error: { codexErrorInfo: "unauthorized", message: line } } });
+  } catch (e) {}
+};
+
 // Send a JSON-RPC request (expects a response)
 CodexAppServer.prototype.send = function(method, params, timeoutMs) {
   var self = this;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clay-server",
-  "version": "2.45.0-beta.2",
+  "version": "2.45.0-beta.4",
   "description": "Self-hosted team workspace for Claude Code and Codex. Multi-user, browser-based, with persistent AI mates.",
   "bin": {
     "clay-server": "./bin/cli.js",
@@ -50,7 +50,7 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.196",
     "@lydell/node-pty": "^1.2.0-beta.3",
-    "@openai/codex": "^0.124.0",
+    "@openai/codex": "^0.142.4",
     "imapflow": "^1.3.1",
     "nodemailer": "^6.10.1",
     "qrcode-terminal": "^0.12.0",