Make Prime Agent use subscription connections

[vishaltandale00]

Closes #277

Summary

• Add a Relayer-owned, provider-definition-scoped Prime subscription profile that uses the unchanged Prime Agent authentication facilities for Codex and Claude OAuth.
• Transport provider-native request access only inside the admitted run, preserve exact account isolation, support mixed subscription families, and fence refreshes against concurrent disconnects.
• Rename the packaged product harnesses to codex, claude, and prime-agent while preserving exact known-state migration for prior shipped configurations.
• Keep Prime Agent package archives and native recursion unchanged.

Verification plan

• Exercise login, refresh, reconnect, disconnect, corruption recovery, multiple-account isolation, mixed Codex and Claude routing, and secret redaction at the production seams.
• Exercise exact catalog and harness-session migration from the prior shipped snapshots.
• Run repository formatting, linting, Rust tests, TypeScript checks, Vitest, Python tests, PRD readability, and the production build.

Evidence

• npm run build: passed on commit 9a47a24.
• Rust workspace tests: passed, including 169 relayer-app-server unit tests and the exact product-harness migration checkpoint.
• Full Vitest run: 1,447 of 1,449 passed in parallel; the two five-second load-sensitive timeouts both passed in isolated reruns.
• A prior parallel Vitest attempt exhausted macOS temporary storage; affected focused suites passed after storage recovered.
• Python tests: 16 passed.
• PRD readability: passed.
• git diff --check: passed.

Review assertion

• Reviewer: Codex local self-review.
• Source: 9a47a24.
• Scope: provider ownership, credential isolation, mixed-family routing, refresh and disconnect races, migration exactness, product packaging, and secret boundaries.
• Verdict: no remaining findings after fixing native model identity collisions, refresh resurrection after disconnect, and minimal managed-access transport.
• Limitation: the requested independent adversarial subagents could not run because the account reached its subagent usage limit, so this assertion is non-certifying.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.