重构主控编排与运行时预热链路，统一工作区提示词/专家调度协议并补齐 wiki 记忆注入与写回闭环。

同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。

Made-with: Cursor

openclaw/extensions/openai/openai-codex-auth-identity.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+import { resolveCodexAuthIdentity } from "./openai-codex-auth-identity.js";
+
+function createJwt(payload: Record<string, unknown>): string {
+  const header = Buffer.from(JSON.stringify({ alg: "none", typ: "JWT" })).toString("base64url");
+  const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+  return `${header}.${body}.signature`;
+}
+
+describe("resolveCodexAuthIdentity", () => {
+  it("prefers JWT profile email when present", () => {
+    const identity = resolveCodexAuthIdentity({
+      accessToken: createJwt({
+        "https://api.openai.com/profile": {
+          email: "jwt-user@example.com",
+        },
+      }),
+      email: "credential@example.com",
+    });
+
+    expect(identity).toEqual({
+      email: "jwt-user@example.com",
+      profileName: "jwt-user@example.com",
+    });
+  });
+
+  it("falls back to credential email before synthetic ids", () => {
+    const identity = resolveCodexAuthIdentity({
+      accessToken: createJwt({}),
+      email: "credential@example.com",
+    });
+
+    expect(identity).toEqual({
+      email: "credential@example.com",
+      profileName: "credential@example.com",
+    });
+  });
+
+  it("derives a stable profile id when email is missing", () => {
+    const identity = resolveCodexAuthIdentity({
+      accessToken: createJwt({
+        "https://api.openai.com/auth": {
+          chatgpt_account_user_id: "user-123__acct-456",
+        },
+      }),
+    });
+
+    expect(identity).toEqual({
+      profileName: `id-${Buffer.from("user-123__acct-456").toString("base64url")}`,
+    });
+  });
+
+  it("returns no metadata when token parsing yields no identity", () => {
+    expect(resolveCodexAuthIdentity({ accessToken: "not-a-jwt-token" })).toEqual({});
+  });
+});