its 3, openclaw author admitted it, you just point codex at an antigravity installation and ask it "figure out how to login like this thing"

and it starts decompiling javascript and extracting ids/secrets