OpenAI's Codex client redirects only to localhost, so a server cannot run that sign-in; kloe takes what codex login already stored and refreshes from there, which needs only the public client id. New adapter type for the Responses endpoint, a meta column for the account id it wants in a header, and store:false baked into the adapter because the endpoint requires it and config is a thing people forget.