feat(openai-codex): profile-scoped oauth + email/limits

[loject]

Related GitHub Issue

Closes: #11094

Roo Code Task Context (Optional)

https://app.roocode.com/share/d6d78501-039a-4118-a346-6349944ad9dd

Description

• Scoped OpenAI Codex OAuth credentials to provider profiles so each profile maintains its own session and tokens.
• Added account email extraction from id_token to surface the connected account in the UI.
• Refreshed Codex usage limits when switching profiles to avoid stale rate‑limit data.
• Updated webview state/types and UI wiring to pass and display the account email and ensure limits refresh on profile changes.

Test Procedure

1. Install dependencies (workspace root): pnpm install --frozen-lockfile
2. Backend tests: cd src && npx vitest run api/providers/tests/openai-codex-native-tool-calls.spec.ts core/webview/tests/webviewMessageHandler.spec.ts
3. UI tests: cd webview-ui && npx vitest run src/components/settings/tests/ApiOptions.spec.tsx
4. Manual: create multiple OpenAI Codex profiles, authenticate each with different accounts, verify email and usage limits update when switching profiles.

Pre-Submission Checklist

• Issue Linked: This PR is linked to an approved GitHub Issue (see "Related GitHub Issue" above).
• Scope: My changes are focused on the linked issue (one major feature/fix per PR).
• Self-Review: I have performed a thorough self-review of my code.
• Testing: New and/or updated tests have been added to cover my changes (if applicable).
• Documentation Impact: I have considered if my changes require documentation updates (see "Documentation Updates" section below).
• Contribution Guidelines: I have read and agree to the Contributor Guidelines.

Screenshots / Videos

Documentation Updates

Additional Notes

None.

Get in Touch

loject

---

Important

Introduces profile-scoped OAuth for OpenAI Codex, adding account email display and refreshing usage limits on profile switch.

• Behavior:
  • Scoped OpenAI Codex OAuth credentials to provider profiles in openai-codex.ts.
  • Added account email extraction from id_token in openai-codex.ts.
  • Refreshed Codex usage limits on profile switch in ClineProvider.ts.
• UI Components:
  • Updated ApiOptions.tsx to pass openAiCodexAccountEmail and currentApiConfigName.
  • Modified OpenAICodex.tsx to display account email and handle sign-in/out.
  • Enhanced OpenAICodexRateLimitDashboard.tsx to refresh limits on profile change.
• Misc:
  • Added openAiCodexAccountEmail to ExtensionState in vscode-extension-host.ts.

^{This description was created by for 11cddf8. You can customize this summary. It will automatically update as commits are pushed.}

[roomote]

Rooviewer   See task on Roo Cloud

All issues resolved. The test setup fix in commit 65a15d5 correctly adds the getState() mock with required profile data.

• Update requestOpenAiCodexRateLimits test setup in webviewMessageHandler.spec.ts to mock getState() with profile data

Previous reviews

• 11cddf8: Review #1

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}

[loject]

@mrubens @cte @jr can review pls?