very-happy-cli 0.2.191 → 0.2.193

package/dist/{codexCommand-CIaOiiOj.mjs → codexCommand-D1xlj4sT.mjs}

@@ -1,107 +1,112 @@
-import { a as authAndSetupMachineIfNeeded } from './auth-DC6rg8lJ.mjs';
-import { j as createEnvelope, t as BUILTIN_TODO_DISCOVERY, r as restoredEffort, m as readEffortIntent, E as EFFORT_INTENT_AUTO, P as PROMPT_QUEUE_CAPABILITY, Y as CODEX_STEER_CAPABILITY, a as PROJECT_SESSION_CAPABILITY, Z as CODEX_COMPACT_CAPABILITY, R as RUN_INTENT_CAPABILITY } from './index-Bq8NKSCF.mjs';
-import { a as recordRunIntents, w as withoutEffort, r as registerRunIntentRpc, b as DEFAULT_CODEX_PERMISSION_MODE } from './defaultPermissionMode-m6z2QVyP.mjs';
-import { h as hashObject, s as startHappyServer, c as createProjectInjector } from './deterministicJson-BtSwbsok.mjs';
-import { s as sharedProjectsClient } from './client-Bi20Ka0h.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-jN5dNqTO.mjs';
+import { k as createEnvelope, w as BUILTIN_TODO_DISCOVERY, r as restoredEffort, o as readEffortIntent, Q as EFFORT_INTENT_AUTO, P as PROMPT_QUEUE_CAPABILITY, a5 as CODEX_STEER_CAPABILITY, a as PROJECT_SESSION_CAPABILITY, a6 as CODEX_COMPACT_CAPABILITY, R as RUN_INTENT_CAPABILITY, A as AGENT_PROFILE_SESSION_CAPABILITY } from './index-D1YnIih6.mjs';
+import { a as recordRunIntents, w as withoutEffort, r as registerRunIntentRpc, b as DEFAULT_CODEX_PERMISSION_MODE } from './defaultPermissionMode-DF5AfeBb.mjs';
+import { h as hashObject, s as startHappyServer, c as createProjectInjector } from './deterministicJson-BzX94gi3.mjs';
+import { s as sharedProjectsClient } from './client-Bde4QVIn.mjs';
 import { unlink } from 'node:fs/promises';
 import { p as publishForkBackfillWhenCommitted, F as FORK_BACKFILL_CAPABILITY } from './forkBackfill-DYIjlN1Z.mjs';
 import { randomUUID } from 'node:crypto';
 import { createId } from '@paralleldrive/cuid2';
-import { t as textResultPayload, d as toolResultContentText, c as connectionState, A as ApiClient } from './api-jfeMRg5R.mjs';
+import { t as textResultPayload, d as toolResultContentText, c as connectionState, A as ApiClient } from './api-DUfunY3x.mjs';
 import { r as registerAgentAttachmentDownloads, H as HeldInput } from './heldInput-C69lA2dH.mjs';
-import { C as CLAUDE_ATTACHMENT_KINDS, a as stageClaudeAttachments, b as appendStagedAttachmentsToPrompt } from './attachmentContent-Dm_RIs5L.mjs';
+import { C as CLAUDE_ATTACHMENT_KINDS, a as stageClaudeAttachments, b as appendStagedAttachmentsToPrompt } from './attachmentContent-KNIZxwlu.mjs';
 import { useStdout, useInput, Box, Text, render } from 'ink';
-import { c as claimSessionOrExit, a as applyServerSnapshot, b as applyReconnectReplay, w as withoutServerSnapshot, m as mergeReconnectMetadata, t as takeAutoRestartedEvent, A as AUTO_RESTART_CAPABILITY, e as exitCursorStamp } from './sessionLock-G2PMqvsh.mjs';
+import { c as claimSessionOrExit, a as applyServerSnapshot, b as applyReconnectReplay, w as withoutServerSnapshot, m as mergeReconnectMetadata, t as takeAutoRestartedEvent, A as AUTO_RESTART_CAPABILITY, e as exitCursorStamp } from './sessionLock-B73fhgQN.mjs';
 import React, { useState, useRef, useEffect, useCallback } from 'react';
-import { C as CodexAppServerClient } from './codexAppServerClient-DXhAf6i-.mjs';
-import { w as wrapperRateLimitReporter } from './rateLimitReporter-COUkf446.mjs';
-import { l as logger } from './logger-GcbI0eg2.mjs';
-import { B as BasePermissionHandler } from './BasePermissionHandler-DYLN6Ec9.mjs';
-import { B as BaseReasoningProcessor, s as settleCodexSession } from './codexTermination-BcQdEDaw.mjs';
+import { C as CodexAppServerClient } from './codexAppServerClient-B3QJV6Ey.mjs';
+import { w as wrapperRateLimitReporter } from './rateLimitReporter-CAz7VMw4.mjs';
+import { l as logger } from './logger-JV7-4Q_6.mjs';
+import { B as BasePermissionHandler } from './BasePermissionHandler-DV6UM6e9.mjs';
+import { B as BaseReasoningProcessor, s as settleCodexSession } from './codexTermination-CaWAVQjZ.mjs';
 import { execSync } from 'node:child_process';
-import { r as readSettings, l as latchKeepAwake, e as evaluateWrapperIdle, a as resolveCheckMs, H as HIBERNATION_CAPABILITY } from './persistence-Cpw4yJs8.mjs';
-import { g as getInitialMachineMetadata } from './machineMetadata-CXRmFNOV.mjs';
-import { c as configuration } from './configuration-ECqXu34R.mjs';
-import { M as MessageQueue2, r as registerKillSessionHandler } from './registerKillSessionHandler-Cpug_r5C.mjs';
+import { r as readSettings, l as latchKeepAwake, e as evaluateWrapperIdle, a as resolveCheckMs, H as HIBERNATION_CAPABILITY } from './persistence-Cg4sfjQV.mjs';
+import { g as getInitialMachineMetadata } from './machineMetadata-D5-SW9kv.mjs';
+import { c as configuration } from './configuration-ThKBP_zY.mjs';
+import { M as MessageQueue2, r as registerKillSessionHandler } from './registerKillSessionHandler-Bg9t45Ub.mjs';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
-import { join } from 'node:path';
-import { c as createSessionMetadata } from './createSessionMetadata-B0eT_Kfj.mjs';
+import { dirname, join } from 'node:path';
+import { c as createSessionMetadata } from './createSessionMetadata-vug4Cv8z.mjs';
 import { M as MessageBuffer } from './sessionExitLifecycle-CzkLIgNZ.mjs';
-import { n as notifyDaemonSessionStarted, k as reportSessionEditToDaemon, c as checkDaemonHibernation } from './controlClient-ClI7A0qE.mjs';
-import { c as createSessionForStartup, b as HibernationExitLatch, H as HibernationProbe, a as commitHibernation } from './startupSessionCreate-BtR4iYEC.mjs';
+import { n as notifyDaemonSessionStarted, o as reportSessionEditToDaemon, c as checkDaemonHibernation } from './controlClient-Ckl8N1MS.mjs';
+import { c as createSessionForStartup, b as HibernationExitLatch, H as HibernationProbe, a as commitHibernation } from './startupSessionCreate-DoK0IvJG.mjs';
 import { d as decodeBase64, e as encodeBase64 } from './authRelay-DhQhkBvX.mjs';
-import { s as setupOfflineReconnection } from './setupOfflineReconnection-DI-QZGYz.mjs';
+import { s as setupOfflineReconnection } from './setupOfflineReconnection-Bvdy-2xd.mjs';
 import { t as trimIdent } from './trimIdent-BAjmv_TG.mjs';
 import { a as parseSpecialCommand, c as compactCommandText, b as parseCompact } from './specialCommands-MXUN0wfI.mjs';
 import { C as CHANGE_TITLE_INSTRUCTION } from './constants-BC4St0xd.mjs';
 import { E as EditReportThrottle, a as extractCodexPatchPaths } from './editPaths-BVfS_FFL.mjs';
-import { a as extractNoSandboxFlag, e as ensureDaemonRunning } from './ensureDaemonRunning-B_9WAlbU.mjs';
+import { t as takeReconnectEnv } from './reconnectEnv-DeSvHl3q.mjs';
+import { r as readSessionBindings, w as writeSessionBinding, d as defaultSecretProbe, a as readAccounts, c as readAccountsFileV2, f as writeAccountsFile, S as SPAWN_ACCOUNT_ENV } from './store-Vej_738f.mjs';
+import { mkdirSync, writeFileSync, chmodSync, rmSync } from 'node:fs';
+import { a as resolveCodexAccount, r as readCodexProviders, s as syncCodexOverlay, b as baseCodexHome, c as codexAccountSwitched, d as readCodexDefaultProvider, e as codexAccountDefaultModel, f as accountModelsAsCatalog, i as isHistoryRejectedError, g as isCodexAuthRejection } from './codexAccount-NOX5pmQf.mjs';
+import { s as shouldRecordSpawnAccount, u as unavailableNotice } from './wrapperAccount-BkufO_9g.mjs';
+import { a as extractNoSandboxFlag, e as ensureDaemonRunning } from './ensureDaemonRunning-C6ERYK-O.mjs';
 import 'tweetnacl';
 import 'axios';
-import './time-D0jvDRhn.mjs';
-import './browser-CHpVgyni.mjs';
+import './time-Cw0liIqB.mjs';
+import './browser-LHW2hBH8.mjs';
 import 'open';
 import 'zod';
 import './prompt-QHuFx9j6.mjs';
-import './reportProgressTool-XgQBzxoD.mjs';
-import './client-BXD66ZF5.mjs';
+import './reportProgressTool-DVru7jc_.mjs';
+import './client-7RnI9J0W.mjs';
 import './precheckCompat-DeEbilbr.mjs';
 import './agentGuidance-BDYt2Qy2.mjs';
-import 'node:fs';
 import 'node:os';
 import './pi-CqyoZMjI.mjs';
 import './fileStore-5qpetZS0.mjs';
-import './client-Bh1aUPh-.mjs';
+import './client-DwbhrX6D.mjs';
 import 'node:util';
-import './context-CfgTFpCB.mjs';
-import './sessionOps-DPw5k8vV.mjs';
+import './context-C0EFLnOg.mjs';
+import './sessionOps-C65Iej_C.mjs';
 import 'socket.io-client';
 import './backgroundTaskActivity-8PdPxrvy.mjs';
 import './resources-CLP_MpK4.mjs';
-import './tools-Bei5i03L.mjs';
-import './peerTools-CwCe6tmJ.mjs';
+import './tools-BR-drXZ8.mjs';
+import './peerTools-WtRgTSqG.mjs';
 import './ids-DU6sLx4C.mjs';
-import './remoteSessionClient-BdnJ_n8C.mjs';
+import './remoteSessionClient--0vfA7I5.mjs';
 import '@modelcontextprotocol/sdk/server/mcp.js';
 import 'node:http';
 import '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import './limits-DIo7rEBR.mjs';
-import './downloadTarget-BXqXhNF7.mjs';
+import './downloadTarget-Baslc6jW.mjs';
 import './terminals-Dlg0x3nY.mjs';
 import './terminalTitleSuggest-CeKsX_V6.mjs';
 import './tmuxSocket-B8Yx20sT.mjs';
-import './bootstrap-rLaL3kTa.mjs';
-import './package-BsUHyqWe.mjs';
+import './bootstrap-B3gMpU9e.mjs';
+import './package-Bw3H6VLn.mjs';
 import './webPanels-B2_C2-3g.mjs';
-import './pushNotifications-XAM8__Pg.mjs';
+import './pushNotifications-BbE-qV9I.mjs';
 import './contentLogMetadata-BlWI0egu.mjs';
 import './previewPath-CXN4Vag0.mjs';
 import 'crypto';
-import './lidState-CD81ryTy.mjs';
+import './lidState-B6yYKjNK.mjs';
 import 'os';
 import 'child_process';
 import 'node:events';
-import './registerCommonHandlers-DRRfinzK.mjs';
+import './registerCommonHandlers-Cj3Nl9y-.mjs';
 import 'util';
 import 'fs/promises';
 import 'path';
 import 'cross-spawn';
-import './sync-C0PRuTMj.mjs';
+import './sync-BP6vnxVP.mjs';
 import 'chalk';
 import './cliUpdate-Y34VGe9Y.mjs';
 import './processTreeSnapshot-CuLJDNC-.mjs';
 import 'node:readline';
 import './manager-BEsI4qt3.mjs';
 import '@anthropic-ai/sandbox-runtime';
-import './rateLimitWindows-j_qQk0KY.mjs';
+import './rateLimitWindows-CRARnKaI.mjs';
 import './processTree-CP5IvQ2Z.mjs';
 import './detectCLI-CSGMlV51.mjs';
 import 'fs';
-import './localHappyAgentAuth-Cg-m1lwm.mjs';
+import './localHappyAgentAuth-KRlg_aI0.mjs';
 import './fsMkdir-DumgLTzR.mjs';
 import './types-CkqAACXx.mjs';
 import 'url';
-import './spawnHappyCLI-CIA9Sc_5.mjs';
+import './claudeAccountEnv-BL1pR_37.mjs';
+import './spawnHappyCLI-CnMwzjWX.mjs';
 import './doctorReadiness-C208SMN9.mjs';
 
 function getStartedSubagents(state) {
@@ -1183,7 +1188,8 @@ async function resumeExistingThread(opts) {
     const resumedThread = await opts.client.resumeThread({
       threadId: opts.threadId,
       cwd: opts.cwd,
-      mcpServers: opts.mcpServers
+      mcpServers: opts.mcpServers,
+      ...opts.model ? { model: opts.model } : {}
     });
     opts.session.updateMetadata((currentMetadata) => ({
       ...currentMetadata,
@@ -1461,6 +1467,70 @@ function codexPublishablePermissionMode(mode) {
   return typeof mode === "string" && CODEX_REMOTE_PERMISSION_MODES.includes(mode) ? mode : null;
 }
 
+const MACHINE_CODEX_ACCOUNT = { profile: null, overrides: { env: {} }, unavailable: false, notices: [], cleanup: () => {
+} };
+function loadCodexWrapperAccount(happyHome, sessionId, spawnAccountId, env = process.env, now = Date.now()) {
+  let bindings = readSessionBindings(happyHome);
+  if (shouldRecordSpawnAccount(spawnAccountId, sessionId in bindings)) {
+    writeSessionBinding(happyHome, sessionId, { account: spawnAccountId });
+    bindings = { ...bindings, [sessionId]: { account: spawnAccountId } };
+  }
+  const probe = defaultSecretProbe(env);
+  const resolution = resolveCodexAccount(sessionId, {
+    home: happyHome,
+    accounts: readAccounts(happyHome),
+    bindings,
+    providers: readCodexProviders(env),
+    fileReadable: probe.fileReadable,
+    env,
+    nodePath: process.execPath,
+    envKeyCopyPath: (id) => join(happyHome, "tmp", "accounts", `key-${process.pid}-${id}`)
+  });
+  if (resolution.kind === "machine") return MACHINE_CODEX_ACCOUNT;
+  let cleanup = () => {
+  };
+  if (resolution.kind === "active" && resolution.envKeyCopy) {
+    const { name, path } = resolution.envKeyCopy;
+    mkdirSync(dirname(path), { recursive: true, mode: 448 });
+    writeFileSync(path, (env[name] ?? "").trim() + "\n", { mode: 384 });
+    chmodSync(path, 384);
+    cleanup = () => rmSync(path, { force: true });
+  }
+  for (const key of resolution.unset) delete env[key];
+  if (resolution.kind === "active" && resolution.envKeyCopy) delete env[resolution.envKeyCopy.name];
+  if (resolution.kind === "unavailable") {
+    return { profile: resolution.profile, overrides: { env: {} }, unavailable: true, notices: [unavailableNotice(resolution.profile)], cleanup };
+  }
+  const overrides = { env: {}, modelProvider: resolution.modelProvider, ...resolution.config ? { config: resolution.config } : {} };
+  if (resolution.codexHome) {
+    syncCodexOverlay(resolution.codexHome, baseCodexHome(env), now);
+    overrides.env.CODEX_HOME = resolution.codexHome;
+  }
+  return {
+    profile: resolution.profile,
+    overrides,
+    ...resolution.pinnedModel ? { pinnedModel: resolution.pinnedModel } : {},
+    ...resolution.models ? { models: resolution.models } : {},
+    unavailable: false,
+    notices: [],
+    cleanup
+  };
+}
+function markCodexAccountRejected(happyHome, accountId, now = Date.now()) {
+  try {
+    const file = readAccountsFileV2(happyHome);
+    const record = file.accounts[accountId];
+    if (!record || record.agent !== "codex") return null;
+    const status = record.kind === "codex-chatgpt" ? "expired" : "invalid";
+    if (record.check?.status === status) return status;
+    record.check = { status, at: now, detail: "rejected during a session" };
+    writeAccountsFile(happyHome, file);
+    return status;
+  } catch {
+    return null;
+  }
+}
+
 const DEFAULT_CODEX_MODEL = void 0;
 const DEFAULT_CODEX_EFFORT = "medium";
 async function runCodex(opts) {
@@ -1477,6 +1547,8 @@ async function runCodex(opts) {
     console.error("  \x1B[36mvery-happy claude\x1B[0m\n");
     process.exit(1);
   }
+  const spawnAccountId = process.env[SPAWN_ACCOUNT_ENV] || void 0;
+  delete process.env[SPAWN_ACCOUNT_ENV];
   const sessionTag = randomUUID();
   connectionState.setBackend("Codex");
   const api = await ApiClient.create(opts.credentials);
@@ -1505,7 +1577,7 @@ async function runCodex(opts) {
     dangerouslySkipPermissions: initialPermissionMode === "yolo" || initialPermissionMode === "bypassPermissions",
     ...forkedFromSessionId ? { parentSessionId: forkedFromSessionId } : {},
     ...forkedFromMessageId ? { forkedFromMessageId } : {},
-    capabilities: [PROMPT_QUEUE_CAPABILITY, FORK_BACKFILL_CAPABILITY, HIBERNATION_CAPABILITY, AUTO_RESTART_CAPABILITY, CODEX_STEER_CAPABILITY, PROJECT_SESSION_CAPABILITY, CODEX_COMPACT_CAPABILITY, RUN_INTENT_CAPABILITY]
+    capabilities: [PROMPT_QUEUE_CAPABILITY, FORK_BACKFILL_CAPABILITY, HIBERNATION_CAPABILITY, AUTO_RESTART_CAPABILITY, CODEX_STEER_CAPABILITY, PROJECT_SESSION_CAPABILITY, CODEX_COMPACT_CAPABILITY, RUN_INTENT_CAPABILITY, AGENT_PROFILE_SESSION_CAPABILITY]
   });
   metadata.attachmentKinds = [...CLAUDE_ATTACHMENT_KINDS];
   metadata.stickyModel = null;
@@ -1518,12 +1590,13 @@ async function runCodex(opts) {
     const importTitle = process.env.HAPPY_IMPORT_TITLE;
     if (importTitle) metadata.summary = { text: importTitle, updatedAt: Date.now() };
   }
-  const reconnectSessionId = process.env.HAPPY_RECONNECT_SESSION_ID;
-  const reconnectKeyBase64 = process.env.HAPPY_RECONNECT_ENCRYPTION_KEY;
-  const reconnectVariant = process.env.HAPPY_RECONNECT_ENCRYPTION_VARIANT;
-  const reconnectSeq = process.env.HAPPY_RECONNECT_SEQ;
-  const reconnectMetadataVersion = process.env.HAPPY_RECONNECT_METADATA_VERSION;
-  const reconnectAgentStateVersion = process.env.HAPPY_RECONNECT_AGENT_STATE_VERSION;
+  const reconnectEnv = takeReconnectEnv();
+  const reconnectSessionId = reconnectEnv.HAPPY_RECONNECT_SESSION_ID;
+  const reconnectKeyBase64 = reconnectEnv.HAPPY_RECONNECT_ENCRYPTION_KEY;
+  const reconnectVariant = reconnectEnv.HAPPY_RECONNECT_ENCRYPTION_VARIANT;
+  const reconnectSeq = reconnectEnv.HAPPY_RECONNECT_SEQ;
+  const reconnectMetadataVersion = reconnectEnv.HAPPY_RECONNECT_METADATA_VERSION;
+  const reconnectAgentStateVersion = reconnectEnv.HAPPY_RECONNECT_AGENT_STATE_VERSION;
   let response;
   if (reconnectSessionId && reconnectKeyBase64 && reconnectVariant) {
     logger.debug(`[START] Reconnecting to existing session ${reconnectSessionId}`);
@@ -1566,6 +1639,21 @@ async function runCodex(opts) {
     }
   }
   const resumedEffort = reconnectSeeded && response ? restoredEffort(response.metadata, { useReportedLevel: true }) : void 0;
+  let codexAccount = MACHINE_CODEX_ACCOUNT;
+  if (response) {
+    try {
+      codexAccount = loadCodexWrapperAccount(configuration.happyHomeDir, response.id, spawnAccountId);
+    } catch (error) {
+      const reason = error instanceof Error ? error.message : String(error);
+      logger.debug(`[START] B-850b account resolution failed: ${reason}`);
+      if (spawnAccountId) {
+        codexAccount = { ...MACHINE_CODEX_ACCOUNT, profile: { id: spawnAccountId, label: spawnAccountId, kind: "unknown", status: "unavailable", reason: "error" }, unavailable: true, notices: [`Account "${spawnAccountId}" could not be loaded: ${reason}`] };
+      }
+    }
+  }
+  const accountSwitched = !!reconnectSessionId && reconnectSeeded && !!response && codexAccountSwitched(response.metadata?.agentProfile, codexAccount.profile);
+  if (accountSwitched && !codexAccount.profile) codexAccount = { ...codexAccount, overrides: { env: {}, modelProvider: readCodexDefaultProvider() } };
+  logger.debug(`[START] B-850b account: ${codexAccount.profile ? `${codexAccount.profile.id} ${codexAccount.profile.kind} ${codexAccount.profile.status}` : "machine login"}${accountSwitched ? " (switched)" : ""}`);
   let session;
   let permissionHandler;
   let client;
@@ -1594,6 +1682,25 @@ async function runCodex(opts) {
     if (!wakingFromHibernation) void session.cancelUndeliveredQueuedInputs(reconnectReplay ? { maxSeq: reconnectReplay.seq } : void 0);
     session.updateMetadata((meta) => mergeReconnectMetadata(meta, metadata, Date.now()));
   }
+  session.updateMetadata((current) => ({
+    ...current,
+    agentProfile: codexAccount.profile,
+    ...accountSwitched ? { stickyModel: null, modelIntent: null } : {}
+  }));
+  for (const notice of codexAccount.notices) {
+    session.sendSessionEvent({ type: "message", message: notice, kind: codexAccount.unavailable ? "agent-profile-unavailable" : "agent-profile-warning" });
+  }
+  let historyRejectionReported = false;
+  const noteAccountFailure = (text) => {
+    if (!codexAccount.profile || codexAccount.unavailable) return;
+    if (accountSwitched && !historyRejectionReported && isHistoryRejectedError(text)) {
+      historyRejectionReported = true;
+      session.sendSessionEvent({ type: "message", message: `This conversation's history cannot continue on account "${codexAccount.profile.label}". Start a new session on it, or switch back to the previous account.`, kind: "agent-profile-history-rejected" });
+    } else if (isCodexAuthRejection(text)) {
+      const marked = markCodexAccountRejected(configuration.happyHomeDir, codexAccount.profile.id);
+      if (marked) session.sendSessionEvent({ type: "message", message: `Account "${codexAccount.profile.label}" was rejected (${marked}). Sign in again or switch accounts.`, kind: "agent-profile-auth-failed" });
+    }
+  };
   if (response) {
     try {
       logger.debug(`[START] Reporting session ${response.id} to daemon`);
@@ -1686,6 +1793,11 @@ async function runCodex(opts) {
   };
   let userMessageDelivery = Promise.resolve();
   session.onUserMessage((message) => {
+    if (codexAccount.unavailable && codexAccount.profile) {
+      if (message.localKey) session.sendQueueCancelReason([message.localKey], "failed");
+      session.sendSessionEvent({ type: "message", message: codexAccount.notices[0] ?? `Account "${codexAccount.profile.label}" is unavailable.`, kind: "agent-profile-unavailable" });
+      return;
+    }
     const downloads = session.drainAttachmentsForUserMessage();
     userMessageDelivery = userMessageDelivery.then(async () => {
       const attachments = await downloads;
@@ -1950,6 +2062,7 @@ async function runCodex(opts) {
     process.stdin.setEncoding("utf8");
   }
   client = new CodexAppServerClient(sandboxConfig);
+  client.setAccountOverrides(codexAccount.overrides);
   const idleRelease = new CodexIdleReleaseTimer({
     delayMs: resolveCodexIdleReleaseMs(process.env[CODEX_IDLE_RELEASE_ENV]),
     isIdle: () => shouldReleaseIdleCodex({
@@ -2019,6 +2132,7 @@ async function runCodex(opts) {
       if (failure) {
         messageBuffer.addMessage(`Task failed: ${failure}`, "status");
         session.sendSessionEvent({ type: "message", message: `Codex error: ${failure}` });
+        noteAccountFailure(failure);
       } else {
         messageBuffer.addMessage("Task completed", "status");
       }
@@ -2027,6 +2141,7 @@ async function runCodex(opts) {
       if (failure) {
         messageBuffer.addMessage(`Turn aborted: ${failure}`, "status");
         session.sendSessionEvent({ type: "message", message: `Codex error: ${failure}` });
+        noteAccountFailure(failure);
       } else {
         messageBuffer.addMessage("Turn aborted", "status");
       }
@@ -2133,6 +2248,11 @@ async function runCodex(opts) {
         logger.debug("[Codex] config/read unavailable", safeCodexErrorMetadata(error));
       }
       machineDefaultModel = configured?.model ?? discoveredModels.find((model) => model.isDefault)?.model;
+      const accountDefault = codexAccountDefaultModel(codexAccount, configured?.model ?? null, discoveredModels);
+      if (codexAccount.profile && !codexAccount.unavailable) {
+        machineDefaultModel = accountDefault;
+        if (codexAccount.models?.length) discoveredModels = accountModelsAsCatalog(codexAccount.models, discoveredModels);
+      }
       if (discoveredModels.length > 0 || configured) {
         session.updateMetadata((metadata2) => ({
           ...metadata2,
@@ -2145,22 +2265,30 @@ async function runCodex(opts) {
               defaultReasoningEffort: model.defaultReasoningEffort
             }))
           } : {},
-          defaultModelCode: configured?.model ?? discoveredModels.find((model) => model.isDefault)?.model,
-          ...configured ? { configuredModel: configured.model } : {}
+          defaultModelCode: codexAccount.profile && !codexAccount.unavailable ? accountDefault : configured?.model ?? discoveredModels.find((model) => model.isDefault)?.model,
+          ...configured ? { configuredModel: codexAccount.profile && !codexAccount.unavailable ? accountDefault ?? null : configured.model } : {}
         }));
       }
     } catch (error) {
       logger.debug("[Codex] Model discovery unavailable; using compatibility fallback", safeCodexErrorMetadata(error));
     }
-    if (opts.resumeThreadId) {
-      await resumeExistingThread({
-        client,
-        session,
-        messageBuffer,
-        threadId: opts.resumeThreadId,
-        cwd: process.cwd(),
-        mcpServers
-      });
+    if (opts.resumeThreadId && !codexAccount.unavailable) {
+      try {
+        await resumeExistingThread({
+          client,
+          session,
+          messageBuffer,
+          threadId: opts.resumeThreadId,
+          cwd: process.cwd(),
+          mcpServers,
+          // B-850b: after an account switch the thread moves to the
+          // new account's model (its old one is sticky otherwise).
+          ...accountSwitched && machineDefaultModel ? { model: machineDefaultModel } : {}
+        });
+      } catch (error) {
+        noteAccountFailure(error instanceof Error ? error.message : String(error));
+        throw error;
+      }
       first = false;
       appendSystemPromptInjected = true;
     }
@@ -2356,7 +2484,10 @@ async function runCodex(opts) {
         }
         if (!client.hasActiveThread()) {
           const startedThread = await client.startThread({
-            model: turnModel,
+            // B-850b: a new thread on an account starts on the account's
+            // model — Codex would otherwise pick config.toml's, which
+            // belongs to the machine's own provider.
+            model: turnModel ?? (codexAccount.profile && !codexAccount.unavailable ? machineDefaultModel : void 0),
             cwd: process.cwd(),
             approvalPolicy: executionPolicy.approvalPolicy,
             sandbox: executionPolicy.sandbox,
@@ -2411,6 +2542,7 @@ async function runCodex(opts) {
         if (reason) {
           messageBuffer.addMessage(`Task failed: ${reason}`, "status");
           session.sendSessionEvent({ type: "message", message: `Codex error: ${reason}` });
+          noteAccountFailure(reason);
         } else {
           const tail = codexStderrTailOf(error);
           messageBuffer.addMessage("Process exited unexpectedly", "status");

package/dist/{codexTermination-BszWfyk5.cjs → codexTermination-ByX9GcEJ.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var node_crypto = require('node:crypto');
-var logger = require('./logger-Ct2zvaq0.cjs');
+var logger = require('./logger-CX3x2eI4.cjs');
 var sessionExitLifecycle = require('./sessionExitLifecycle-DFltxXU8.cjs');
 
 class BaseReasoningProcessor {

package/dist/{codexTermination-BcQdEDaw.mjs → codexTermination-CaWAVQjZ.mjs}

@@ -1,5 +1,5 @@
 import { randomUUID } from 'node:crypto';
-import { l as logger } from './logger-GcbI0eg2.mjs';
+import { l as logger } from './logger-JV7-4Q_6.mjs';
 import { O as OFFLINE_EXIT_STAMP_TIMEOUT_MS } from './sessionExitLifecycle-CzkLIgNZ.mjs';
 
 class BaseReasoningProcessor {

package/dist/{config-Di3Cf6js.cjs → config-B2GGbiTv.cjs}

@@ -4,15 +4,15 @@ var require$$0 = require('fs');
 var require$$1 = require('path');
 var os = require('os');
 var child_process = require('child_process');
-var logger = require('./logger-Ct2zvaq0.cjs');
+var logger = require('./logger-CX3x2eI4.cjs');
 var constants = require('./constants-VJ0N6WuG.cjs');
 require('chalk');
 require('node:util');
-require('./configuration-DfPBa-9d.cjs');
+require('./configuration-BBK0rmmj.cjs');
 require('node:fs');
 require('node:os');
 require('node:path');
-require('./package-9n7wd2dT.cjs');
+require('./package-uzlvxa5S.cjs');
 require('node:fs/promises');
 require('./trimIdent-4gvk9Wk6.cjs');
 

package/dist/{config-OCEcVVK1.mjs → config-C2XYEwXz.mjs}

@@ -2,15 +2,15 @@ import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 import { execSync } from 'child_process';
-import { l as logger } from './logger-GcbI0eg2.mjs';
+import { l as logger } from './logger-JV7-4Q_6.mjs';
 import { D as DEFAULT_GEMINI_MODEL, G as GEMINI_MODEL_ENV } from './constants-BC4St0xd.mjs';
 import 'chalk';
 import 'node:util';
-import './configuration-ECqXu34R.mjs';
+import './configuration-ThKBP_zY.mjs';
 import 'node:fs';
 import 'node:os';
 import 'node:path';
-import './package-BsUHyqWe.mjs';
+import './package-Bw3H6VLn.mjs';
 import 'node:fs/promises';
 import './trimIdent-BAjmv_TG.mjs';
 

package/dist/{configuration-DfPBa-9d.cjs → configuration-BBK0rmmj.cjs}

@@ -3,7 +3,7 @@
 var node_fs = require('node:fs');
 var os = require('node:os');
 var path = require('node:path');
-var _package = require('./package-9n7wd2dT.cjs');
+var _package = require('./package-uzlvxa5S.cjs');
 var promises = require('node:fs/promises');
 
 const PRIVATE_DIRECTORY_MODE = 448;

package/dist/{configuration-ECqXu34R.mjs → configuration-ThKBP_zY.mjs}

@@ -1,7 +1,7 @@
 import { mkdirSync, chmodSync, readdirSync, statSync, appendFileSync, writeFileSync, existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
-import { p as packageJson } from './package-BsUHyqWe.mjs';
+import { p as packageJson } from './package-Bw3H6VLn.mjs';
 import { mkdir, chmod, writeFile } from 'node:fs/promises';
 
 const PRIVATE_DIRECTORY_MODE = 448;

package/dist/{connect-BTfAUhk8.mjs → connect-BirnCl9q.mjs}

@@ -1,12 +1,12 @@
 import chalk from 'chalk';
 import { homedir } from 'os';
 import { join } from 'path';
-import { b as readCredentialsForConfiguredRelay } from './persistence-Cpw4yJs8.mjs';
-import { A as ApiClient } from './api-jfeMRg5R.mjs';
-import { f as ensurePrivateDirectorySync, w as writePrivateFileSync } from './configuration-ECqXu34R.mjs';
+import { b as readCredentialsForConfiguredRelay } from './persistence-Cg4sfjQV.mjs';
+import { A as ApiClient } from './api-DUfunY3x.mjs';
+import { f as ensurePrivateDirectorySync, w as writePrivateFileSync } from './configuration-ThKBP_zY.mjs';
 import { createServer } from 'http';
 import { randomBytes, createHash } from 'crypto';
-import { o as openBrowser } from './browser-CHpVgyni.mjs';
+import { o as openBrowser } from './browser-LHW2hBH8.mjs';
 import { exec } from 'child_process';
 import { promisify } from 'util';
 import 'node:fs/promises';
@@ -15,29 +15,29 @@ import 'zod';
 import './authRelay-DhQhkBvX.mjs';
 import 'node:crypto';
 import 'tweetnacl';
-import './logger-GcbI0eg2.mjs';
+import './logger-JV7-4Q_6.mjs';
 import 'node:util';
 import 'node:path';
 import 'axios';
-import './lidState-CD81ryTy.mjs';
+import './lidState-B6yYKjNK.mjs';
 import 'node:events';
 import 'socket.io-client';
-import './pushNotifications-XAM8__Pg.mjs';
-import './index-Bq8NKSCF.mjs';
+import './pushNotifications-BbE-qV9I.mjs';
+import './index-D1YnIih6.mjs';
 import '@paralleldrive/cuid2';
 import './contentLogMetadata-BlWI0egu.mjs';
 import './limits-DIo7rEBR.mjs';
-import './time-D0jvDRhn.mjs';
-import './registerCommonHandlers-DRRfinzK.mjs';
+import './time-Cw0liIqB.mjs';
+import './registerCommonHandlers-Cj3Nl9y-.mjs';
 import 'fs/promises';
 import 'cross-spawn';
 import './projectPath-BTBIMB57.mjs';
 import 'url';
-import './sync-C0PRuTMj.mjs';
+import './sync-BP6vnxVP.mjs';
 import './backgroundTaskActivity-8PdPxrvy.mjs';
-import './controlClient-ClI7A0qE.mjs';
+import './controlClient-Ckl8N1MS.mjs';
 import 'node:os';
-import './package-BsUHyqWe.mjs';
+import './package-Bw3H6VLn.mjs';
 import 'open';
 
 const CLIENT_ID$2 = "app_EMoamEEZ73f0CkXaXp7hrann";

package/dist/{connect-BPQRuOw5.cjs → connect-C3tZs_NC.cjs}

@@ -3,12 +3,12 @@
 var chalk = require('chalk');
 var os = require('os');
 var require$$1 = require('path');
-var persistence = require('./persistence-A2NeERZJ.cjs');
-var api = require('./api-BBxZ7y2z.cjs');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var persistence = require('./persistence-CsmAgN-C.cjs');
+var api = require('./api-CBE_a88I.cjs');
+var configuration = require('./configuration-BBK0rmmj.cjs');
 var http = require('http');
 var require$$3 = require('crypto');
-var browser = require('./browser-BTgZ9d4i.cjs');
+var browser = require('./browser-v1pdPP1E.cjs');
 var child_process = require('child_process');
 var util = require('util');
 require('node:fs/promises');
@@ -17,29 +17,29 @@ require('zod');
 require('./authRelay-Dy1qU9td.cjs');
 require('node:crypto');
 require('tweetnacl');
-require('./logger-Ct2zvaq0.cjs');
+require('./logger-CX3x2eI4.cjs');
 require('node:util');
 require('node:path');
 require('axios');
-require('./lidState-C9_DoF9i.cjs');
+require('./lidState-B_v6qgfE.cjs');
 require('node:events');
 require('socket.io-client');
-require('./pushNotifications-23YSd-0l.cjs');
-require('./index-CLUHaPU8.cjs');
+require('./pushNotifications-BCg7YAiu.cjs');
+require('./index-BUFrKZeQ.cjs');
 require('@paralleldrive/cuid2');
 require('./contentLogMetadata-ZSFk_NjQ.cjs');
 require('./limits-C-a7gr04.cjs');
-require('./time-Cy0a-7YX.cjs');
-require('./registerCommonHandlers-D1MiSfcB.cjs');
+require('./time-BTLcO8jp.cjs');
+require('./registerCommonHandlers-CZGmrPbT.cjs');
 require('fs/promises');
 require('cross-spawn');
 require('./projectPath-C3ioB4Bu.cjs');
 require('url');
-require('./sync-Ba8N6xba.cjs');
+require('./sync-WYBwkJvG.cjs');
 require('./backgroundTaskActivity-CBvUdj39.cjs');
-require('./controlClient-C13_pSKG.cjs');
+require('./controlClient-DwWTns3A.cjs');
 require('node:os');
-require('./package-9n7wd2dT.cjs');
+require('./package-uzlvxa5S.cjs');
 require('open');
 
 const CLIENT_ID$2 = "app_EMoamEEZ73f0CkXaXp7hrann";

package/dist/{context-CfgTFpCB.mjs → context-C0EFLnOg.mjs}

@@ -3,7 +3,7 @@ import { constants } from 'node:fs';
 import { isAbsolute, join, dirname } from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { n as normalizeHttpEndpoint, c as configuration } from './configuration-ECqXu34R.mjs';
+import { n as normalizeHttpEndpoint, c as configuration } from './configuration-ThKBP_zY.mjs';
 
 const TeamScopeSchema = z.object({
   serverUrl: z.string(),

package/dist/{context-Co7hUaW-.cjs → context-wDp0aZBK.cjs}

@@ -5,7 +5,7 @@ var node_fs = require('node:fs');
 var path = require('node:path');
 var node_crypto = require('node:crypto');
 var z = require('zod');
-var configuration = require('./configuration-DfPBa-9d.cjs');
+var configuration = require('./configuration-BBK0rmmj.cjs');
 
 const TeamScopeSchema = z.z.object({
   serverUrl: z.z.string(),