@pure01fx/dsh-openai-codex-auth 0.7.3 → 0.9.0

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## Unreleased
 
+## 0.9.0
+
+### Codex 0.153 compatibility
+
+- Tracks Codex main snapshot `ddf04ad` and uses the stable `0.153.4` model-catalog client version after auditing the intervening Responses, WebSocket, OAuth, Catalog, and quota protocol changes.
+- Preserves the complete bounded `response.completed.response.usage` object alongside the exact high-precision `usage_metadata.amount` value across HTTP/SSE, WebSocket, and same-origin status responses.
+- Supports GPT-6-Astra and its Fast alias through the complete Responses Lite contract: stable developer instruction/tool prefix items, namespaced functions, all-turn reasoning context, model-default verbosity, disabled parallel tool calls, the HTTP Lite header, and the WebSocket request-metadata route marker. Standard Responses requests remain unchanged.
+- Recognizes `normal_model_slug` on additional `wham/usage` limits and honors the backend's `allowed` decision when `limit_reached` is absent, while intentionally remaining a passive client without the Luna Reserve opt-in header.
+- Shows an isolated quota snapshot, including remaining reset credits, for every managed account, refreshing once when Codex settings opens or on explicit request; concurrent usage lookups are time-bounded outside the main credential lock, rotating refresh operations are journaled, bounded independently of caller cancellation, single-flighted per account across service processes, recoverable after persistence contention, and never ambiguously retried, stale non-current credentials are renewed without changing the selected account, and one account's failure does not hide the others.
+
+## 0.8.0
+
+### Multi-account authentication
+
+- Adds multiple managed ChatGPT OAuth accounts with a global current-account selector, per-account removal, optional email labels, and automatic activation of newly added accounts.
+- Migrates legacy version-1 single-account credential documents atomically to version 2 while keeping DSH credential publication and rollback guarantees.
+- Pins every request/recovery attempt to its starting account so a concurrent account switch cannot replay an authenticated request under another account.
+- Extends the same-origin settings API and Web UI with an account list, explicit switching, and individual logout controls without exposing access or refresh tokens.
+
 ## 0.7.3
 
 ### Client model visibility

package/README.md

@@ -48,6 +48,14 @@ dsh web
 
 设备码登录无需 OAuth callback，适合本机、SSH 隧道和 HTTPS 反向代理场景。
 
+## 多账号切换
+
+- 已登录后继续点击 **用设备码添加账号** 或 **用浏览器添加账号**，可追加 ChatGPT 账号；新登录的账号会自动成为当前账号。
+- 设置页的 **已添加账号** 列表支持设为当前和单独移除。切换是全局的，只影响切换完成后的新 Codex 请求；已开始的请求继续使用启动时绑定的账号。
+- 移除当前账号时，插件按账号列表顺序选择下一个账号；移除最后一个账号后会清除 `DSH_OPENAI_CODEX_TOKEN`。
+- 原有单账号 `version: 1` 凭据会在首次读取时原子迁移为 `version: 2` 多账号文档，无需重新登录。
+- 如果 `DSH_OPENAI_CODEX_TOKEN` 来自只读环境变量或其他外部 authority，插件会拒绝需要改写当前 token 的登录、切换和退出操作，避免界面与实际请求账号不一致。
+
 ## 两种登录方式
 
 ### 设备码登录（推荐）
@@ -82,6 +90,7 @@ http://localhost:1455/auth/callback
 | --- | --- |
 | 设备码登录 | 无本机 callback，支持远程/headless 使用 |
 | 浏览器 OAuth fallback | PKCE + state、端到端 1455 探测、手动 code 回填和临时 callback listener |
+| 多账号管理 | 添加多个 OAuth 账号、全局切换当前账号、单独移除，并自动迁移旧单账号凭据 |
 | Codex 用量面板 | 展示短周期与周用量、剩余额度和重置时间；Native 模式直接接收 Codex 返回的套餐额度，`wham/usage` 仅作初始读取和 fallback |
 | 当前路由状态 | 设置页显示 `openai-codex` 当前由本插件 Native Adapter、外部 Adapter 或无人持有；Native 模式同时显示 WebSocket v2 或 HTTP/SSE |
 | 输入框额度圈 | 登录后显示在输入框右下角；悬停或键盘聚焦显示用量，点击圆圈强制刷新，不做常驻额度轮询 |
@@ -99,9 +108,9 @@ http://localhost:1455/auth/callback
 
 登录成功后：
 
-1. 凭据以 owner-only 权限原子写入 `$DSH_HOME/openai-codex-auth.json`。
-2. access token 通过 DSH credentials 注入 `DSH_OPENAI_CODEX_TOKEN`。
-3. `openai-codex` 模型提供方在请求时读取该凭据。
+1. 多账号凭据以 owner-only 权限原子写入 `$DSH_HOME/openai-codex-auth.json`；文档保存账号列表与全局当前账号指针。
+2. 当前账号的 access token 通过 DSH credentials 注入 `DSH_OPENAI_CODEX_TOKEN`。
+3. `openai-codex` 模型提供方在每个请求开始时读取当前凭据，并把该次尝试固定到同一个账号。
 4. 输入框右下角显示 Codex 额度圈；悬停或键盘聚焦显示当前用量，点击才强制刷新。Native transport 优先消费 WebSocket `codex.rate_limits` 事件或 HTTP `x-codex-*` headers，未收到直接更新时才在 turn 结束后读取 `wham/usage`。
 5. 设置页与额度圈只读取登录状态、账号 ID、过期时间和用量摘要，不接触 token。
 
@@ -111,13 +120,15 @@ http://localhost:1455/auth/callback
 
 | 方法 | 路径 | 用途 |
 | --- | --- | --- |
-| GET | `/openai-codex/status` | 登录、flow、用量和 CSRF 状态 |
+| GET | `/openai-codex/status` | 登录、账号列表、当前账号、flow、用量和 CSRF 状态 |
+| POST | `/openai-codex/accounts/current` | 以 `{ "accountId": "…" }` 设定全局当前账号 |
+| POST | `/openai-codex/accounts/logout` | 以 `{ "accountId": "…" }` 单独移除账号 |
 | POST | `/openai-codex/device/start` | 创建或复用设备码 flow |
 | POST | `/openai-codex/browser/prepare` | 创建浏览器 flow，返回授权 URL 和一次性 1455 探测 URL |
 | POST | `/openai-codex/browser/complete` | 接收用户粘贴的 callback URL 或 authorization code |
 | GET | `/openai-codex/browser/start` | 兼容入口：直接启动并跳转浏览器 OAuth |
 | POST | `/openai-codex/cancel` | 取消当前登录、关闭临时 listener，保留旧凭据 |
-| POST | `/openai-codex/logout` | 取消 flow 并删除本地凭据 |
+| POST | `/openai-codex/logout` | 兼容入口：取消 flow 并移除当前账号 |
 
 1456 已完全退役。1455 平时关闭，仅浏览器 OAuth pending 时绑定 loopback；设备码登录完全不使用它。
 

package/client.js

@@ -181,6 +181,7 @@ window.__ModuleLoader__.load({
       .codexButton:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover);border-color:var(--dsw-alias-border-l3)}.codexButton:focus-visible{outline:2px solid var(--dsw-alias-brand-primary);outline-offset:2px}.codexButton:disabled{color:var(--dsw-alias-label-dimmed);cursor:not-allowed}
       .codexButton.primary{border-color:transparent;background:var(--dsw-alias-button-primary-fill);color:var(--dsw-alias-label-primary-foreground)}.codexButton.primary:hover:not(:disabled){border-color:transparent;background:var(--dsw-alias-button-primary-hover)}.codexButton.danger{color:var(--dsw-alias-state-error-primary)}
       .codexGrid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:8px;margin-top:14px}
+      .codexAccounts{margin-top:14px;margin-bottom:20px;border-top:1px solid var(--dsw-alias-border-l2);padding-top:14px}.codexAccountList{display:flex;flex-direction:column;gap:8px}.codexAccountOption{display:flex;align-items:center;justify-content:space-between;gap:18px;min-width:0;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;padding:12px 14px;background:var(--dsw-alias-bg-layer-2)}.codexAccountDetails{flex:1;min-width:0}.codexAccountTitle{display:flex;align-items:center;flex-wrap:wrap;gap:6px 10px;min-width:0}.codexAccountTitle strong{font-size:13px;font-weight:500;overflow-wrap:anywhere}.codexAccountTitle .codexBadge{padding:1px 8px;line-height:18px}.codexAccountMeta{display:flex;flex-wrap:wrap;gap:2px 14px;margin-top:4px;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}.codexAccountActions{flex:none;flex-wrap:nowrap;margin-top:0}.codexAccountActions .codexButton{white-space:nowrap}.codexAccountHeaderActions{display:flex;align-items:center;gap:10px}.codexAccountRefresh{min-height:28px;padding:3px 9px;font-size:12px}.codexAccountQuota{display:flex;flex-wrap:wrap;gap:5px 14px;margin-top:10px;border-top:1px solid var(--dsw-alias-border-l2);padding-top:9px;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}.codexAccountQuotaItem{white-space:nowrap}.codexAccountQuotaItem strong{color:var(--dsw-alias-label-primary);font-weight:500;font-variant-numeric:tabular-nums}.codexAccountQuotaStatus{color:var(--dsw-alias-label-tertiary)}.codexAccountQuotaStatus.error{color:var(--dsw-alias-state-error-primary)}
       .codexUsage{border:1px solid var(--dsw-alias-border-l2);border-radius:10px;padding:12px 14px;background:var(--dsw-alias-bg-layer-2)}
       .codexUsageHead{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.codexUsageName{font-size:13px;font-weight:500}.codexUsageValue{font-size:12px;color:var(--dsw-alias-label-tertiary)}
       .codexBar{height:6px;margin:10px 0 8px;overflow:hidden;border-radius:999px;background:var(--dsw-alias-bg-layer-1)}.codexBarFill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-success-primary);transition:width .25s ease}.codexBarFill.high{background:var(--dsw-alias-state-warn-label)}
@@ -203,7 +204,7 @@ window.__ModuleLoader__.load({
       .codexQuotaTrack{fill:none;stroke:var(--dsw-alias-border-l3);stroke-width:2px}.codexQuotaAvailable{fill:none;stroke:var(--dsw-alias-state-success-primary);stroke-width:2px;stroke-linecap:round;transition:stroke .25s ease,stroke-dasharray .25s ease,stroke-dashoffset .25s ease}.codexQuotaAvailable.high{stroke:var(--dsw-alias-state-warn-label)}.codexQuotaAvailable.critical{stroke:var(--dsw-alias-state-error-primary)}.codexQuotaLoading{animation:codexQuotaPulse .8s ease-in-out infinite alternate}
       .codexQuotaPanel{z-index:100;box-sizing:border-box;width:272px;border:1px solid var(--dsw-alias-border-inverted);border-radius:12px;padding:12px;background:var(--dsw-specific-menu);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-secondary);cursor:default;font-size:12px;line-height:20px;position:absolute;right:0;bottom:calc(100% + 8px)}.codexQuotaPanelHead{display:flex;align-items:center;justify-content:space-between;gap:12px;margin-bottom:8px}.codexQuotaPanelHead strong{color:var(--dsw-alias-label-primary);font-size:13px;font-weight:500}.codexQuotaPanelHead span{color:var(--dsw-alias-label-tertiary)}
       .codexQuotaWindow{padding:7px 0}.codexQuotaWindow+.codexQuotaWindow{border-top:1px solid var(--dsw-alias-border-l2)}.codexQuotaWindowHead{display:flex;align-items:center;justify-content:space-between;gap:10px}.codexQuotaWindowHead strong{font-weight:500;color:var(--dsw-alias-label-secondary)}.codexQuotaWindowHead span{font-variant-numeric:tabular-nums;color:var(--dsw-alias-label-primary)}.codexQuotaBar{height:4px;margin:6px 0;border-radius:999px;overflow:hidden;background:var(--dsw-alias-interactive-bg-hover)}.codexQuotaBarFill{height:100%;border-radius:inherit;background:var(--dsw-alias-state-success-primary)}.codexQuotaBarFill.high{background:var(--dsw-alias-state-warn-label)}.codexQuotaBarFill.critical{background:var(--dsw-alias-state-error-primary)}.codexQuotaReset{color:var(--dsw-alias-label-tertiary)}.codexQuotaMessage{margin:4px 0;color:var(--dsw-alias-label-tertiary)}.codexQuotaMessage.error{color:var(--dsw-alias-state-error-primary)}
-      @keyframes codexPulse{to{background-position:-200% 0}}@keyframes codexQuotaPulse{to{opacity:.35}}@media(prefers-reduced-motion:reduce){.codexSkeleton,.codexQuotaLoading{animation:none}}@media(max-width:620px){.codexHero{padding:14px;flex-direction:column}.codexBody{padding:14px}.codexGrid,.codexModelVisibilityList{grid-template-columns:1fr}.codexCode{font-size:20px}}
+      @keyframes codexPulse{to{background-position:-200% 0}}@keyframes codexQuotaPulse{to{opacity:.35}}@media(prefers-reduced-motion:reduce){.codexSkeleton,.codexQuotaLoading{animation:none}}@media(max-width:620px){.codexHero{padding:14px;flex-direction:column}.codexBody{padding:14px}.codexGrid,.codexModelVisibilityList{grid-template-columns:1fr}.codexAccountOption{align-items:stretch;flex-direction:column;gap:10px}.codexAccountActions{align-self:flex-start}.codexCode{font-size:20px}}
     `
     if (typeof document !== 'undefined' && document.querySelector('style[data-plugin="' + PLUGIN_ID + '"]') === null) {
       const style = document.createElement('style')
@@ -341,6 +342,26 @@ window.__ModuleLoader__.load({
       )
     }
 
+    function AccountQuotaSummary(props) {
+      const entry = props.entry
+      if (props.loading && !entry) return h('div', { className: 'codexAccountQuota' }, h('span', { className: 'codexAccountQuotaStatus' }, '正在读取额度…'))
+      if (!entry) return h('div', { className: 'codexAccountQuota' }, h('span', { className: 'codexAccountQuotaStatus' }, '尚未读取额度'))
+      if (entry.error) return h('div', { className: 'codexAccountQuota' }, h('span', { className: 'codexAccountQuotaStatus error', role: 'status' }, '额度读取失败：' + entry.error))
+      const usage = entry.usage
+      if (!usage) return h('div', { className: 'codexAccountQuota' }, h('span', { className: 'codexAccountQuotaStatus' }, '暂无额度数据'))
+      const rows = []
+      if (usage.planType) rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'plan' }, String(usage.planType).toUpperCase()))
+      if (displayQuotaWindow(usage.primary)) rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'primary' }, quotaWindowName(usage.primary, false) + ' ', h('strong', null, '剩余 ' + Math.max(0, Math.round(100 - usage.primary.usedPercent)) + '%')))
+      if (displayQuotaWindow(usage.secondary)) rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'secondary' }, quotaWindowName(usage.secondary, true) + ' ', h('strong', null, '剩余 ' + Math.max(0, Math.round(100 - usage.secondary.usedPercent)) + '%')))
+      if (Number.isFinite(usage.resetCredits)) rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'resetCredits' }, '额度重置 ', h('strong', null, '剩余 ' + Math.max(0, Math.floor(usage.resetCredits)) + ' 次')))
+      if (usage.credits) {
+        const credits = usage.credits.unlimited ? '无限' : usage.credits.hasCredits ? (usage.credits.balance || '可用') : '不可用'
+        rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'credits' }, 'Credits ', h('strong', null, credits)))
+      }
+      if (usage.fetchedAt) rows.push(h('span', { className: 'codexAccountQuotaItem', key: 'updated' }, '更新 ' + new Date(usage.fetchedAt).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })))
+      return h('div', { className: 'codexAccountQuota' }, rows.length > 0 ? rows : h('span', { className: 'codexAccountQuotaStatus' }, '暂无额度数据'))
+    }
+
     function quotaTone(used) {
       return used >= 95 ? ' critical' : used >= 80 ? ' high' : ''
     }
@@ -484,7 +505,13 @@ window.__ModuleLoader__.load({
       const [manualInput, setManualInput] = useState('')
       const [now, setNow] = useState(Date.now())
       const [modelVisibility, setModelVisibility] = useState(readModelVisibility)
+      const [accountUsages, setAccountUsages] = useState({})
+      const [accountUsageBusy, setAccountUsageBusy] = useState(false)
+      const [accountUsageError, setAccountUsageError] = useState('')
+      const [accountStatusSyncError, setAccountStatusSyncError] = useState('')
       const probeGeneration = useRef(0)
+      const accountUsageGeneration = useRef(0)
+      const accountUsageScope = useRef('')
 
       useEffect(() => {
         const reload = () => { setModelVisibility(readModelVisibility()) }
@@ -566,6 +593,52 @@ window.__ModuleLoader__.load({
         return value
       }, [status])
 
+      const refreshAccountUsages = useCallback(async () => {
+        const generation = ++accountUsageGeneration.current
+        setAccountUsageBusy(true)
+        setAccountUsageError('')
+        setAccountStatusSyncError('')
+        try {
+          const value = await post('/accounts/usage')
+          const next = {}
+          for (const row of Array.isArray(value.accounts) ? value.accounts : []) {
+            if (row && typeof row.accountId === 'string') next[row.accountId] = row
+          }
+          if (generation === accountUsageGeneration.current) {
+            setAccountUsages(next)
+            try {
+              await requestStatus(false)
+            } catch (statusError) {
+              if (generation === accountUsageGeneration.current) {
+                setAccountStatusSyncError('额度已刷新，但账号状态同步失败：' + messageOf(statusError))
+              }
+            }
+          }
+        } catch (usageError) {
+          if (generation === accountUsageGeneration.current) setAccountUsageError(messageOf(usageError))
+        } finally {
+          if (generation === accountUsageGeneration.current) setAccountUsageBusy(false)
+        }
+      }, [post])
+
+      const accountUsageIds = status && Array.isArray(status.accounts)
+        ? status.accounts.map(account => account.accountId).filter(Boolean).sort().join('\n')
+        : ''
+      useEffect(() => {
+        if (!status || !status.csrf || !accountUsageIds) {
+          if (accountUsageScope.current) {
+            accountUsageScope.current = ''
+            setAccountUsages({})
+            setAccountUsageError('')
+            setAccountStatusSyncError('')
+          }
+          return
+        }
+        if (accountUsageScope.current === accountUsageIds) return
+        accountUsageScope.current = accountUsageIds
+        void refreshAccountUsages()
+      }, [accountUsageIds, refreshAccountUsages, status && status.csrf])
+
       const startDevice = async () => {
         setBusy('device')
         setCopied(false)
@@ -665,7 +738,38 @@ window.__ModuleLoader__.load({
         }
       }
 
+      const mutateAccount = async (path, accountId, action) => {
+        if (busy) return
+        setBusy(action + ':' + accountId)
+        setError('')
+        try {
+          await post(path, { accountId })
+          await load(false)
+        } catch (mutationError) {
+          setError(messageOf(mutationError))
+        } finally {
+          setBusy('')
+        }
+      }
+
+      const setCurrentAccount = async (accountId) => {
+        await mutateAccount('/accounts/current', accountId, 'current')
+      }
+
+      const removeAccount = async (accountId) => {
+        const account = accounts.find((candidate) => candidate.accountId === accountId)
+        const label = account && account.email ? account.email : shortAccount(accountId)
+        const isCurrent = account && (account.current === true || account.accountId === currentAccountId)
+        const isLast = accounts.length === 1
+        const consequence = isLast
+          ? '移除后将退出 Codex，重新使用需要再次完成 OAuth 登录。'
+          : isCurrent ? '移除后会自动切换到列表中的下一个账号。' : '该账号的本地 OAuth 凭据会被删除。'
+        if (!window.confirm('确定移除 ' + label + '？\n\n' + consequence)) return
+        await mutateAccount('/accounts/logout', accountId, 'remove')
+      }
+
       const logout = async () => {
+        if (busy) return
         setBusy('logout')
         probeGeneration.current += 1
         try {
@@ -701,6 +805,10 @@ window.__ModuleLoader__.load({
       const usage = status && status.usage
       const loading = status === null && !error
       const connected = Boolean(status && status.loggedIn)
+      const accounts = status && Array.isArray(status.accounts) ? status.accounts : []
+      const currentAccountId = status && status.currentAccountId
+      const currentAccount = accounts.find((account) => account.current === true || account.accountId === currentAccountId)
+      const currentAccountLabel = currentAccount && currentAccount.email ? currentAccount.email : shortAccount(status && status.accountId)
       const pending = Boolean(status && status.loginPending) || watchLogin
       const devicePending = Boolean(status && status.loginMethod === 'device' && status.device)
       const browserPending = Boolean(status && status.loginMethod === 'browser' && status.browser)
@@ -731,7 +839,7 @@ window.__ModuleLoader__.load({
               h('div', { className: 'codexLogo', 'aria-hidden': true }, 'OA'),
               h('div', null,
                 h('h3', { className: 'codexName' }, 'OpenAI Codex 订阅'),
-                h('p', { className: 'codexMeta', title: connected ? status.accountId : '' }, loading ? '正在读取 OpenAI 登录状态' : connected ? shortAccount(status.accountId) : '尚未连接 ChatGPT 账号'),
+                h('p', { className: 'codexMeta', title: connected ? status.accountId : '' }, loading ? '正在读取 OpenAI 登录状态' : connected ? currentAccountLabel : '尚未连接 ChatGPT 账号'),
               ),
             ),
             h('span', { className: 'codexBadge ' + (loading || pending ? 'pending' : connected ? 'connected' : '') },
@@ -751,6 +859,41 @@ window.__ModuleLoader__.load({
                   h('p', { className: 'codexRouteDetail' }, route.detail),
                 )
               : null,
+            !loading && accounts.length > 0
+              ? h('div', { className: 'codexAccounts' },
+                  h('div', { className: 'codexModelVisibilityHead' },
+                    h('strong', null, '已添加账号'),
+                    h('div', { className: 'codexAccountHeaderActions' },
+                      h('span', { className: 'codexMeta' }, accounts.length + ' 个'),
+                      h('button', { type: 'button', className: 'codexButton codexAccountRefresh', disabled: accountUsageBusy, onClick: () => { void refreshAccountUsages() } }, accountUsageBusy ? '刷新中…' : '刷新额度'),
+                    ),
+                  ),
+                  h('p', { className: 'codexModelVisibilityHint' }, '当前账号用于新的 Codex 请求；每个账号的额度仅在打开本页或点击刷新时读取。'),
+                  accountUsageError ? h('p', { className: 'codexAccountQuotaStatus error', role: 'status' }, '额度刷新失败：' + accountUsageError) : null,
+                  accountStatusSyncError ? h('p', { className: 'codexAccountQuotaStatus error', role: 'status' }, accountStatusSyncError) : null,
+                  h('div', { className: 'codexAccountList' }, accounts.map((account) => {
+                    const isCurrent = account.current === true || account.accountId === currentAccountId
+                    const accountBusy = busy === 'current:' + account.accountId || busy === 'remove:' + account.accountId
+                    return h('div', { className: 'codexAccountOption', key: account.accountId },
+                      h('div', { className: 'codexAccountDetails', title: account.accountId },
+                        h('div', { className: 'codexAccountTitle' },
+                          h('strong', null, account.email || shortAccount(account.accountId)),
+                          isCurrent ? h('span', { className: 'codexBadge connected' }, '当前账号') : null,
+                        ),
+                        h('div', { className: 'codexAccountMeta' },
+                          account.email ? h('span', null, shortAccount(account.accountId)) : null,
+                          account.expiresAt ? h('span', null, '到期 ' + new Date(account.expiresAt).toLocaleString()) : null,
+                        ),
+                        h(AccountQuotaSummary, { entry: accountUsages[account.accountId], loading: accountUsageBusy }),
+                      ),
+                      h('div', { className: 'codexActions codexAccountActions' },
+                        !isCurrent ? h('button', { type: 'button', className: 'codexButton', disabled: Boolean(busy), onClick: () => { void setCurrentAccount(account.accountId) } }, accountBusy && busy.startsWith('current:') ? '切换中…' : '设为当前') : null,
+                        h('button', { type: 'button', className: 'codexButton danger', disabled: Boolean(busy), onClick: () => { void removeAccount(account.accountId) } }, accountBusy && busy.startsWith('remove:') ? '移除中…' : '移除'),
+                      ),
+                    )
+                  })),
+                )
+              : null,
             loading
               ? h('div', { 'aria-label': '加载中' }, h('div', { className: 'codexSkeleton' }), h('div', { className: 'codexSkeleton', style: { width: '72%' } }))
               : connected
@@ -848,11 +991,11 @@ window.__ModuleLoader__.load({
               : null,
             h('div', { className: 'codexActions' },
               h('button', { type: 'button', className: 'codexButton primary', disabled: Boolean(busy) || pending || loading, onClick: () => { void startDevice() } },
-                busy === 'device' ? '正在申请设备码…' : connected ? '用设备码重新登录' : '使用设备码登录'),
+                busy === 'device' ? '正在申请设备码…' : connected ? '用设备码添加账号' : '使用设备码登录'),
               h('button', {
                 type: 'button', className: 'codexButton', disabled: Boolean(busy) || pending || loading || !browserAvailable,
                 title: browserAvailable ? '展开 callback 检测，不会自动弹出窗口' : '仅支持 HTTP 127.0.0.1/localhost 入口', onClick: () => { void startBrowser() },
-              }, busy === 'browser' ? '正在准备浏览器登录…' : connected ? '用浏览器重新登录' : '本机浏览器 OAuth'),
+              }, busy === 'browser' ? '正在准备浏览器登录…' : connected ? '用浏览器添加账号' : '本机浏览器 OAuth'),
               pending && !devicePending && !browserPending ? h('button', { type: 'button', className: 'codexButton danger', disabled: Boolean(busy), onClick: () => { void cancel() } }, busy === 'cancel' ? '取消中…' : '取消登录') : null,
               connected ? h('button', { type: 'button', className: 'codexButton', disabled: Boolean(busy), onClick: refresh }, busy === 'refresh' ? '刷新中…' : '刷新用量') : null,
               connected || (status && status.credentialError) ? h('button', { type: 'button', className: 'codexButton danger', disabled: Boolean(busy), onClick: () => { void logout() } }, busy === 'logout' ? '退出中…' : '退出登录') : null,

package/lib/catalog.d.ts

@@ -31,6 +31,11 @@ export interface NativeCodexModel {
     additionalSpeedTiers: readonly string[];
     serviceTiers: readonly NativeCodexServiceTier[];
     defaultServiceTier?: string;
+    /** Requires the model-specific Responses Lite wire contract, not Standard Responses. */
+    useResponsesLite?: boolean;
+    /** Catalog-provided defaults needed to construct the model-specific request. */
+    defaultVerbosity?: string;
+    instructionsTemplate?: string;
     contextWindow?: number;
     inputModalities: readonly string[];
 }

package/lib/catalog.js

@@ -128,6 +128,7 @@ function parseModel(value) {
     const additionalSpeedTiers = strictStringList(row?.additional_speed_tiers);
     const serviceTiers = parseServiceTiers(row?.service_tiers);
     const inputModalities = strictStringList(row?.input_modalities, ['text', 'image']);
+    const useResponsesLite = row?.use_responses_lite ?? false;
     if (slug === undefined
         || displayName === undefined
         || reasoning === undefined
@@ -138,6 +139,7 @@ function parseModel(value) {
         || priority < -2_147_483_648 || priority > 2_147_483_647
         || additionalSpeedTiers === undefined
         || serviceTiers === undefined
+        || typeof useResponsesLite !== 'boolean'
         || inputModalities === undefined
         || !inputModalities.every(value => ['text', 'image', 'audio'].includes(value))) {
         throw invalidCatalog('native Codex catalog contained an invalid model entry');
@@ -160,6 +162,18 @@ function parseModel(value) {
         && nonEmptyString(row.multi_agent_reasoning_effort) === undefined) {
         throw invalidCatalog('native Codex catalog contained an invalid multi-agent reasoning effort');
     }
+    if (row.default_verbosity !== undefined && row.default_verbosity !== null
+        && nonEmptyString(row.default_verbosity) === undefined) {
+        throw invalidCatalog('native Codex catalog contained an invalid default verbosity');
+    }
+    const modelMessages = row.model_messages === undefined || row.model_messages === null
+        ? undefined : record(row.model_messages);
+    if ((row.model_messages !== undefined && row.model_messages !== null && modelMessages === undefined)
+        || (modelMessages?.instructions_template !== undefined
+            && modelMessages.instructions_template !== null
+            && nonEmptyString(modelMessages.instructions_template) === undefined)) {
+        throw invalidCatalog('native Codex catalog contained invalid model instructions');
+    }
     for (const key of ['context_window', 'max_context_window']) {
         if (row[key] !== undefined && row[key] !== null && positiveNumber(row[key]) === undefined) {
             throw invalidCatalog('native Codex catalog contained an invalid context window');
@@ -169,6 +183,8 @@ function parseModel(value) {
     const defaultReasoningLevel = nonEmptyString(row.default_reasoning_level);
     const multiAgentReasoningEffort = nonEmptyString(row.multi_agent_reasoning_effort);
     const defaultServiceTier = nonEmptyString(row.default_service_tier);
+    const defaultVerbosity = nonEmptyString(row.default_verbosity);
+    const instructionsTemplate = nonEmptyString(modelMessages?.instructions_template);
     const contextWindow = positiveNumber(row.context_window) ?? positiveNumber(row.max_context_window);
     return {
         slug,
@@ -183,6 +199,9 @@ function parseModel(value) {
         additionalSpeedTiers,
         serviceTiers,
         ...defaultServiceTier === undefined ? {} : { defaultServiceTier },
+        useResponsesLite,
+        ...defaultVerbosity === undefined ? {} : { defaultVerbosity },
+        ...instructionsTemplate === undefined ? {} : { instructionsTemplate },
         ...contextWindow === undefined ? {} : { contextWindow },
         inputModalities,
     };

package/lib/index.d.ts

@@ -7,12 +7,23 @@ import { CODEX_PROVIDER } from './native-adapter.js';
 export { CODEX_PROVIDER, NATIVE_CODEX_PROVIDER } from './native-adapter.js';
 export { normalizeUsage } from './usage.js';
 export { CODEX_CLIENT_VERSION, TRACKED_CODEX_COMMIT, TRACKED_CODEX_RELEASE, TRACKED_CODEX_REPOSITORY, } from './upstream.js';
-/** Persisted OAuth credential. */
+/** Persisted OAuth credential for one ChatGPT account. */
 export interface OpenAICodexCredential {
     access: string;
     refresh: string;
     expires: number;
     accountId: string;
+    email?: string;
+}
+/** Current multi-account credential document. */
+export interface OpenAICodexCredentialDocument {
+    version: 2;
+    currentAccountId: string | null;
+    accounts: OpenAICodexCredential[];
+}
+interface ParsedCredentialDocument {
+    document: OpenAICodexCredentialDocument;
+    migrated: boolean;
 }
 /** Plugin configuration. */
 export interface Config {
@@ -73,6 +84,8 @@ interface TokenResponse {
     id_token?: unknown;
 }
 declare function parseTokenResponse(value: TokenResponse | null, previous?: OpenAICodexCredential): OpenAICodexCredential;
+declare function parseCredentialDocument(text: string, filename: string): ParsedCredentialDocument;
+declare function currentCredential(document: OpenAICodexCredentialDocument | undefined): OpenAICodexCredential | undefined;
 declare function parseAuthority(authority: string | undefined): URL | undefined;
 declare function isLoopbackHostname(hostname: string): boolean;
 declare function isTrustedHost(authority: string | undefined, trustedHosts: readonly string[]): boolean;
@@ -85,6 +98,8 @@ declare function pollDeviceAuthorization(device: DeviceAuthorization, signal?: A
 declare function resolveCodexRouteStatus(config: NativeRouteConfig, llm: RouteRuntime | undefined): CodexRouteStatus;
 export declare const internals: {
     parseTokenResponse: typeof parseTokenResponse;
+    parseCredentialDocument: typeof parseCredentialDocument;
+    currentCredential: typeof currentCredential;
     parseAuthority: typeof parseAuthority;
     isLoopbackHostname: typeof isLoopbackHostname;
     isTrustedHost: typeof isTrustedHost;
@@ -117,6 +132,8 @@ export declare class OpenAICodexAuth extends Service {
     private usageError;
     private usageRefresh;
     private usageGeneration;
+    private accountUsageRequestGeneration;
+    private readonly accountUsageCredentialRefreshes;
     private directUsageSequence;
     private directUsageAccountId;
     private usageHasDirectDefault;
@@ -138,10 +155,12 @@ export declare class OpenAICodexAuth extends Service {
     private restorePublishedCredential;
     private publicationChangedError;
     private failAfterPublicationRollback;
+    private commitDocument;
+    private upsertCurrentCredential;
     private commitCredential;
-    private resolveManagedCredentialLocked;
-    /** Return a valid managed bearer token, refreshing and persisting it when near expiry. */
+    /** Return the current managed bearer token, refreshing and migrating it when needed. */
     bearerToken(signal?: AbortSignal): Promise<string | undefined>;
+    private managedCredential;
     private externalNativeCredential;
     private resolveNativeCredential;
     private nativeRecoveryError;
@@ -154,8 +173,24 @@ export declare class OpenAICodexAuth extends Service {
     private beginBrowserLogin;
     private createBrowserLogin;
     private cancelLogin;
+    private resetCurrentAccountState;
+    private setCurrentAccount;
+    private logoutAttempt;
     private logout;
     private status;
+    private accountRefreshJournalFilename;
+    private readAccountRefreshJournal;
+    private writeAccountRefreshJournal;
+    private clearAccountRefreshJournal;
+    private removeDeadFileLock;
+    private withAccountRefreshLock;
+    private withAccountRefreshLocks;
+    private reconcileAccountRefreshJournal;
+    private refreshManagedAccount;
+    private persistAccountUsageCredential;
+    private refreshAccountUsageCredential;
+    private accountUsageCredential;
+    private accountUsages;
     private fetchUsage;
     private write;
     private sendJson;
@@ -163,12 +198,16 @@ export declare class OpenAICodexAuth extends Service {
     private trustedManagementRequest;
     private requireCsrf;
     private handleStatus;
+    private handleAccountUsage;
     private handleDeviceStart;
     private handleBrowserStart;
     private handleBrowserPrepare;
     private handleBrowserComplete;
     private handleCallback;
     private handleCancel;
+    private accountIdBody;
+    private handleSetCurrentAccount;
+    private handleAccountLogout;
     private handleLogout;
 }
 export default OpenAICodexAuth;