Peter Steinberger f2a12916d7 fix(codex): refuse Platform routes on a subscription-signed native Codex home (#114719) ... A user-home app-server keeps its native Codex account, and OpenClaw verified only half of that contract. A subscription route was checked against the native account, but a Platform (API-key) route was not: an operator signed in to Codex with a ChatGPT subscription who selected an API-billed model silently spent their plan. Both directions of the same billing boundary now share one account/read check. An absent account is left alone, since a native home may serve a custom model provider that reports no OpenAI account at all. The home-scope rule behind #114397 was also expressed four times: two prepared-auth call sites spread it in conditionally from raw plugin config, two others read resolved start options, and the supervision connection applied its own default inline. resolveCodexAppServerHomeScope now owns it, and homeScope is a required argument of resolveCodexAppServerPreparedAuthHandoff, so a new call site that forgets it fails to compile instead of failing every turn. Docs dropped the stale user-home paragraph that still described the startup failure #114397 removed and told operators to delete a working OpenAI profile.		2026-07-27 22:42:18 -04:00
..
reference	fix(deepinfra): remove deprecated embedding provider warning (#114727)	2026-07-27 14:53:34 -06:00
adding-capabilities.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
admin-http-rpc.md	fix(gateway): admit plugin HTTP work during suspension (#104112)	2026-07-10 22:34:57 -07:00
agent-tools.md
architecture-internals.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
architecture.md	feat: auto-collect durable meeting transcripts (#113122)	2026-07-23 11:41:08 -07:00
beam.md	feat(plugins): mirror local coding sessions to a remote Beam receiver (#114735)	2026-07-27 17:31:34 -04:00
building-extensions.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
building-plugins.md	docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)	2026-07-22 11:04:19 -07:00
bundles.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
cli-backend-plugins.md	fix(cron): preserve scheduled caps across CLI and worker upgrades	2026-07-24 01:24:03 -05:00
codex-computer-use.md	fix(codex): stop Computer Use readiness stalls across fallbacks (#113393)	2026-07-24 14:27:53 -06:00
codex-harness-reference.md	refactor(agents): retire TOOLS.md into an AGENTS.md section with a doctor migration (#113966)	2026-07-27 03:56:30 -04:00
codex-harness-runtime.md	fix(gateway): stop showing retired HEARTBEAT.md in the agent files editor (#113621)	2026-07-25 04:58:31 -07:00
codex-harness.md	fix(codex): refuse Platform routes on a subscription-signed native Codex home (#114719)	2026-07-27 22:42:18 -04:00
codex-native-plugins.md	feat(codex): support workspace-directory plugins (#104188)	2026-07-11 09:04:55 -07:00
codex-supervision.md	improve: stream native sessions as hosts finish (#110211)	2026-07-17 23:59:57 +01:00
community.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
compatibility.md	refactor(prompt): use plain inbound context labels and drop system-tag sanitizer (#112000)	2026-07-27 11:27:53 +10:00
copilot.md	refactor: remove expired plugin compatibility surfaces (#111451)	2026-07-19 11:04:48 -07:00
dependency-resolution.md	build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)	2026-07-26 01:29:55 -04:00
google-meet.md	refactor(meetings): close manual action state (#114247)	2026-07-26 23:25:19 -04:00
hooks.md	feat(sdk): always persist media facts and ship facts-first replacements for legacy Media* surfaces (#113355)	2026-07-24 10:42:17 -07:00
install-overrides.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
llama-cpp.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
logbook.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
manage-plugins.md	fix(plugins): serialize lifecycle mutations and preserve setup-required installs (#112763)	2026-07-22 23:25:48 -04:00
manifest.md	improve(models): source pricing from hosted catalog (#114060)	2026-07-26 03:48:25 -04:00
meeting-plugins.md	refactor(meetings): close manual action state (#114247)	2026-07-26 23:25:19 -04:00
memory-lancedb.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
memory-wiki.md	fix(cli): correct optional plugin guidance (#112019)	2026-07-20 21:31:30 -07:00
message-presentation.md	refactor: remove dead tooling and deprecated exports (#112915)	2026-07-23 01:28:11 -04:00
oc-path.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
onepassword.md	fix(onepassword): make SecretRef setup production-safe	2026-07-25 06:03:30 -05:00
plugin-inventory.md	feat(plugins): beam local coding sessions into a read-only catalog (#112323)	2026-07-27 15:37:36 -04:00
plugin-permission-requests.md	feat(gateway): land remaining durable-approvals stack and repair main gates (#104837)	2026-07-12 10:51:38 +01:00
reference.md	feat(plugins): beam local coding sessions into a read-only catalog (#112323)	2026-07-27 15:37:36 -04:00
sdk-agent-harness.md	feat(anthropic): complete Claude Opus 5 rollout (#113392)	2026-07-24 14:55:36 -07:00
sdk-channel-inbound.md	fix(channels): harden record session override	2026-07-26 23:15:06 -05:00
sdk-channel-ingress.md	feat(channels): add unified implicit mention policy (#108829)	2026-07-16 17:16:01 -07:00
sdk-channel-message.md	refactor: remove expired plugin compatibility surfaces (#111451)	2026-07-19 11:04:48 -07:00
sdk-channel-outbound.md	refactor: remove expired plugin compatibility surfaces (#111451)	2026-07-19 11:04:48 -07:00
sdk-channel-plugins.md	refactor(model-picker): centralize session apply contracts (#114739)	2026-07-27 16:58:23 -04:00
sdk-channel-turn.md	refactor: remove channel turn runtime aliases	2026-05-27 11:37:23 +01:00
sdk-entrypoints.md	fix(cli): preserve machine-readable stdout (#113654)	2026-07-27 05:44:16 -04:00
sdk-migration.md	refactor(auth): finish SQLite-only auth profile cutover (#114033)	2026-07-26 07:27:54 -04:00
sdk-overview.md	fix(cli): preserve machine-readable stdout (#113654)	2026-07-27 05:44:16 -04:00
sdk-provider-plugins.md	refactor(providers): collapse live model discovery onto shared projection hook (#113903)	2026-07-25 16:17:27 -07:00
sdk-runtime.md	feat(plugins): deliver sessions.changed to plugin services (#114813)	2026-07-27 20:56:44 -04:00
sdk-setup.md	feat(channels): add channel-owned setup contracts (#112176)	2026-07-22 19:57:42 -04:00
sdk-subpaths.md	fix(cli): preserve machine-readable stdout (#113654)	2026-07-27 05:44:16 -04:00
sdk-testing.md	test(telegram): consolidate bot test harness (#113571)	2026-07-25 05:28:26 -07:00
teams-meetings.md	feat: auto-collect durable meeting transcripts (#113122)	2026-07-23 11:41:08 -07:00
tool-plugins.md	docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)	2026-07-22 11:04:19 -07:00
vault.md	Add Vault SecretRef plugin (#89255)	2026-07-09 05:30:12 -05:00
voice-call.md	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)	2026-07-21 20:28:43 -07:00
webhooks.md	fix(webhooks): keep routes cold when SecretRefs are unavailable (#109715)	2026-07-16 23:56:59 -07:00
workboard.md	feat(dashboard): workboard:mini aggregates all boards when boardId is unset (#112484)	2026-07-21 20:32:33 -07:00
zalouser.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
zoom-meetings.md	feat: auto-collect durable meeting transcripts (#113122)	2026-07-23 11:41:08 -07:00