@henryqw/pi-multi-codex 3.1.1 → 3.1.3

package/README.md

@@ -1,6 +1,6 @@
 # `@henryqw/pi-multi-codex`
 
-Add multiple ChatGPT Codex OAuth accounts and start Pi work on the eligible slot with the most weekly quota. The extension switches away from active five-hour blocks and can retry an HTTP 429 on another eligible slot.
+Add multiple ChatGPT Codex OAuth accounts and start Pi work on the eligible slot with the most remaining quota. The extension switches away from active five-hour quota blocks and can retry an HTTP 429 on another eligible slot.
 
 ![Pi showing Codex account quotas and the active footer slot](./example.png)
 ![Flowchart separating fresh-quota startup ranking from broader HTTP 429 failover](./docs/codex-routing-flow.svg)
@@ -11,42 +11,42 @@ Add multiple ChatGPT Codex OAuth accounts and start Pi work on the eligible slot
 pi install npm:@henryqw/pi-multi-codex
 ```
 
-Requires Pi 1.1.0 or later in the 1.x series.
+This package requires Pi 1.1.0 or later in the 1.x series.
 
 ## Works with
 
 | Package | Relationship | Purpose |
 | --- | --- | --- |
-| [`@henryqw/pi-footer`](https://pi.henry.wang/extensions/pi-footer) | Improves | Shows the active slot's quota or five-hour block in the footer. |
+| [`@henryqw/pi-footer`](https://pi.henry.wang/extensions/pi-footer) | Improves | Shows the remaining quota or five-hour quota block of the active slot in the footer. |
 | [`@henryqw/pi-subagent`](https://pi.henry.wang/extensions/pi-subagent) | Improves | Isolated children keep Main's active Codex slot. |
 | [`@henryqw/pi-task-models`](https://pi.henry.wang/extensions/pi-task-models) | Improves | Numbered slots share one profile route. |
 
 ## Use
 
-Run `/login` and authenticate `OpenAI Codex (legacy)` for slot 1 first. Run `/codex-add`, then run `/login` and select the new `OpenAI Codex #<n>` provider. Restart Pi or update model scope, then run `/codex-status`. The status lists the new slot with cached quota when available, or `unavailable` until the first successful snapshot.
+First, run `/login` and authenticate `OpenAI Codex (legacy)` for slot 1. Run `/codex-add`. Then run `/login` and select the new `OpenAI Codex #<n>` provider. Restart Pi or update model scope. Then run `/codex-status`. The status lists the new slot with cached quota when available, or `unavailable` until the first successful usage snapshot.
 
 | Surface | Type | Purpose |
 | --- | --- | --- |
 | `/codex-add` | command | For people: create the next numbered slot, then authenticate that slot. |
-| `/codex-status` | command | For people: show shared quota snapshots and five-hour blocks; never waits on network. |
+| `/codex-status` | command | For people: show shared usage snapshots and five-hour quota blocks. It never waits on the network. |
 | `/codex-switch` | command | For people: select an authenticated, scope-allowed slot for the current Codex model. |
 | Pi model selector (`OpenAI Codex (legacy)`, `OpenAI Codex #<n>`) | ui | Choose an authenticated account slot. |
-| Pi status `pi-multi-codex` | ui | Report the active slot's fresh quota, five-hour limit countdown, or stale/unavailable state; `@henryqw/pi-footer` displays it in the footer. |
+| Pi status `pi-multi-codex` | ui | Report the active slot's fresh quota, five-hour limit countdown, or stale/unavailable state. `@henryqw/pi-footer` displays it in the footer. |
 
 The footer and `/codex-status` show the five-hour reset countdown for Free, Go, and Plus tiers. They show the seven-day reset countdown for Pro Lite and other tiers. A numbered slot is one Codex account position in Pi.
 
 ## Flow
 
-- Before the first agent start, only fresh quota snapshots enter startup ranking. The slot with the most seven-day quota wins.
+- Before the first agent start, only fresh usage snapshots enter startup ranking. The slot with the most remaining quota wins.
 - An explicit model selection always wins for the next agent start.
-- Before later agent starts, a known active five-hour block switches to the eligible fresh slot with the most seven-day quota.
+- Before later agent starts, a known active five-hour quota block switches to the eligible fresh slot with the most remaining quota.
 - After HTTP 429, failover can use authenticated, registered, scope-allowed, untried slots with stale or missing quota.
-- Failover skips known active five-hour blocks. It ranks fresh known quota first, then unranked slots by slot number.
+- Failover skips known active five-hour quota blocks. It ranks fresh known quota first, then unranked slots by slot number.
 - Routing preserves the model ID.
 - Only physical Codex models are slots. A virtual model listed under `openai-codex`, such as `openai-codex/auto`, is never routed to a slot and shows no quota status.
-- During one agent run, each eligible slot is tried at most once after HTTP 429 responses.
+- During one agent run, each eligible slot is tried at most one time after HTTP 429 responses.
 - Automatic retry stops when no untried eligible slot remains.
-- The footer shows the active slot's fresh quota or five-hour block.
+- The footer shows the fresh quota or five-hour quota block of the active slot.
 
 ## Config
 
@@ -54,16 +54,16 @@ Package-owned: `~/.pi/agent/config/pi-multi-codex/config.json`
 
 | Name | Description | Values | Default |
 | --- | --- | --- | --- |
-| `autoSwitchOn429` | Switches to another eligible slot after an HTTP 429. | Boolean. | `true` when the config file is missing |
+| `autoSwitchOn429` | Switches to another eligible slot after an HTTP 429. | Boolean. | `true` |
 
-Edit this file yourself; the extension does not create or write it. A missing file uses the default `true`, and config changes take effect at the next session start. Set `autoSwitchOn429` to `false` to disable automatic switching. A present config must contain only this field as a boolean. Invalid config is preserved, warns, and disables automatic switching for the session. Fix the file and start a new session to recover.
+Edit this file yourself. The extension does not create or write it. A missing file uses the default `true`, and config changes take effect at the next session start. Set `autoSwitchOn429` to `false` to disable automatic switching. At session start, the extension shows a warning with the file path for an unknown key, malformed JSON, or a value that is not a boolean. It ignores an unknown key. When `autoSwitchOn429` is not a boolean or is misspelled (for example, `autoswitchOn429`), or when the file has malformed JSON, invalid UTF-8, more than 64 KiB, a read error, or a non-object root, automatic switching stays off for that session. The extension keeps the file unchanged. Fix the file and start a new session to recover.
 
 ## State and storage
 
-The extension maintains a generated, credential-free quota cache at `~/.pi/agent/config/pi-multi-codex/usage.json`.
+The extension keeps a generated, credential-free quota cache at `~/.pi/agent/config/pi-multi-codex/usage.json`.
 
 ## Limits and recovery
 
-The extension reads `auth.json` to identify account slots but does not directly edit credentials. When it asks Pi's auth resolver for a token to check quota, Pi may refresh expired OAuth credentials and update its auth store.
+The extension reads `auth.json` to identify account slots but does not directly edit credentials. When it asks Pi's auth resolver for a token to check quota, Pi can refresh expired OAuth credentials and update its auth store.
 
 Scoped sessions can switch only to exact scoped aliases.

package/extensions/multi-codex.ts

@@ -3,7 +3,7 @@ import { readFileSync } from "node:fs";
 import { mkdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
-import { createConfigStore, extensionConfigDir, writePrivateTextFileAtomically } from "@henryqw/pi-config-store";
+import { createConfigStore, extensionConfigDir, field, parsers, registerConfigReporting, writePrivateTextFileAtomically } from "@henryqw/pi-config-store";
 import { lock } from "proper-lockfile";
 import {
 	createAssistantMessageEventStream,
@@ -76,7 +76,6 @@ type UsageState = {
 };
 
 type ParsedUsage = { remaining: number; reset: number; fiveHourReset?: number; limitedUntil?: number; tier?: string };
-type Config = { autoSwitchOn429: boolean };
 
 const NATIVE_PROVIDER_ID = "openai-codex";
 const CODEX_ALIAS_PATTERN = /^openai-codex-([2-9]|[1-9]\d+)$/;
@@ -92,13 +91,6 @@ const CLEANUP_TIMEOUT_MS = 250;
 const cachePath = () => join(extensionConfigDir("pi-multi-codex"), "usage.json");
 const cacheMutexPath = () => `${cachePath()}.mutex`;
 
-function parseConfig(value: unknown): Config {
-	if (!isRecord(value) || Object.keys(value).length !== 1 || typeof value.autoSwitchOn429 !== "boolean") {
-		throw new Error("Config must contain only autoSwitchOn429:boolean.");
-	}
-	return { autoSwitchOn429: value.autoSwitchOn429 };
-}
-
 function isRecord(value: unknown): value is JsonRecord {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -820,11 +812,11 @@ export default function multiCodex(pi: ExtensionAPI): void {
 	const native = builtinProviders().find((provider) => provider.id === NATIVE_PROVIDER_ID) as CodexProvider | undefined;
 	if (!native) return;
 	const quota = new CodexQuotaStatus();
-	const configStore = createConfigStore<Config>({
+	const configStore = createConfigStore({
 		extensionId: "pi-multi-codex",
-		defaults: () => ({ autoSwitchOn429: true }),
-		parse: parseConfig,
+		fields: { autoSwitchOn429: field(parsers.boolean(), true) },
 	});
+	registerConfigReporting(pi, [configStore]);
 	const registered = new Map<number, CodexProvider>();
 	const triedSlots = new Set<number>();
 	let sessionContext: ExtensionContext | undefined;
@@ -833,7 +825,6 @@ export default function multiCodex(pi: ExtensionAPI): void {
 	let preserveModelChoice = false;
 	let selectingAutomatically = false;
 	let autoSwitchOn429 = true;
-	let configWarned = false;
 	let providerRequest: { provider?: string; status?: number } | undefined;
 
 	const registerSlot = (slot: number): void => {
@@ -949,15 +940,11 @@ export default function multiCodex(pi: ExtensionAPI): void {
 		triedSlots.clear();
 		providerRequest = undefined;
 		preserveModelChoice = false;
-		try {
-			autoSwitchOn429 = configStore.loadSync().value.autoSwitchOn429;
-		} catch {
-			autoSwitchOn429 = false;
-			if (!configWarned) {
-				configWarned = true;
-				ctx.ui.notify("Pi Multi Codex config is invalid. Automatic 429 switching is disabled; the file was left unchanged.", "warning");
-			}
-		}
+		// registerConfigReporting shows any issues. A file-level problem or an invalid or misspelled
+		// `autoSwitchOn429` keeps switching off; a missing file uses the default.
+		const config = configStore.loadSync();
+		autoSwitchOn429 = config.status === "ok" && config.value.autoSwitchOn429
+			&& !config.issues.some(({ key }) => key === "" || key === "autoSwitchOn429");
 		automaticOpen = isManagedModel(ctx.model) && !sessionHasAgentWork(ctx);
 		automaticCandidate = ctx.model;
 		// Cache-only ranking happens before background refresh starts.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@henryqw/pi-multi-codex",
-  "version": "3.1.1",
+  "version": "3.1.3",
   "description": "Use multiple ChatGPT Codex OAuth accounts in Pi.",
   "keywords": [
     "pi-package",
@@ -47,7 +47,7 @@
     "image": "https://raw.githubusercontent.com/HenryQW/pi-harness/main/extensions/pi-multi-codex/example.png"
   },
   "dependencies": {
-    "@henryqw/pi-config-store": "^3.0.0",
+    "@henryqw/pi-config-store": "^4.0.0",
     "proper-lockfile": "^4.1.2"
   },
   "devDependencies": {