cdx-manager 0.12.3 → 0.12.4

package/README.md

@@ -1,6 +1,6 @@
 # CDX Manager
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.12.3-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.12.4-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **Run multiple Codex, Claude, Antigravity, and Ollama sessions from one terminal. Switch between accounts instantly.**
 
@@ -373,7 +373,7 @@ cdx history --summary --from 2026-05-01 --to 2026-05-28
 | `cdx disk [profiles] [--candidates] [--json]` | Measure `CDX_HOME`; `profiles` includes per-profile breakdown, and `--candidates` reports reclaimable temporary caches and old logs with evidence |
 | `cdx reset <name> [--yes] [--json]` | Explicitly consume one available banked Codex rate-limit reset; confirmation is required unless `--yes` is supplied |
 | `cdx export <file> [--include-auth] [--sessions a,b] [--passphrase-env VAR\|--passphrase-stdin] [--force] [--json]` | Export sessions to a portable bundle; `--include-auth` encrypts auth data with a passphrase |
-| `cdx import <file> [--sessions a,b] [--passphrase-env VAR\|--passphrase-stdin] [--force] [--json]` | Import sessions from a bundle into the current `CDX_HOME` |
+| `cdx import <file> [--sessions a,b] [--passphrase-env VAR\|--passphrase-stdin] [--force\|--merge] [--allow-authless-force] [--json]` | Import sessions from a bundle into the current `CDX_HOME` |
 | `cdx doctor [--severity OK|WARN|FAIL[,OK|WARN|FAIL...]] [--json]` | Inspect CLI dependencies, provider CLI versions/capability hints, CDX_HOME permissions, missing state, orphan profiles, and pending quarantines; optionally filter issue severities |
 | `cdx repair [--dry-run] [--force] [--json]` | Plan or apply safe repairs for missing state files, quarantines, and orphan profiles |
 | `cdx view [--json] [--lan] [--lan-rw] [--focus <ref>] [--read] [--port <port>] [--host <host>] [--refresh-interval <s>] [--tls] [--tls-cert <path>] [--tls-key <path>] [--open] [--no-open]` | Open the Logics browser/focus viewer by delegating to `logics-manager view`; all viewer flags are forwarded; JSON mode reports diagnostics without launching it |
@@ -527,10 +527,10 @@ cdx import backup-auth.cdx --passphrase-env CDX_BUNDLE_PASSPHRASE
 
 Notes:
 
-- `--include-auth` is encrypted, requires a passphrase, and exports only provider credential files rather than full profile caches or logs.
+- `--include-auth` is encrypted, requires a passphrase, and exports only provider credential files rather than full profile caches, logs, or installed plugins.
 - Without `--passphrase-env`, `cdx` prompts in an interactive terminal. Non-interactive callers can pass `--passphrase-stdin` to read the passphrase from stdin (one line) instead of exposing it in the child environment.
 - `--sessions work,perso` exports or imports only a subset.
-- `--force` allows overwriting existing destination sessions during import or replacing an existing bundle file during export. Import refuses to overwrite existing sessions from a bundle without auth payloads unless `--allow-authless-force` is also passed.
+- `--force` allows overwriting existing destination sessions during import or replacing an existing bundle file during export. Import preserves detected local `plugins/` state when the bundle does not provide it, and refuses to overwrite existing sessions from a bundle without auth payloads unless `--allow-authless-force` is also passed.
 - Auth bundles contain credentials. Treat them like secrets and delete them after transfer.
 
 ---

package/changelogs/CHANGELOGS_0_12_3.md

@@ -3,6 +3,7 @@
 ## Highlights
 
 - GitHub Releases now trigger an automatic checksum asset workflow so `release-archives.json` is regenerated and uploaded for the published tag.
+- `cdx import --force` now preserves detected local Codex plugin state while refreshing sessions from auth-bearing bundles.
 - `cdx run` validation errors now explain what is wrong and how to list or create matching sessions.
 - Provider capacity or runtime failures now keep failed run records queryable instead of dropping them from the run registry.
 
@@ -12,6 +13,10 @@
 
 Publishing a GitHub Release now runs `.github/workflows/upload-release-checksums.yml`. The workflow checks out the release tag, regenerates `checksums/release-archives.json`, and uploads it as the `release-archives.json` release asset with replacement enabled for reruns.
 
+### Force import plugin preservation
+
+Auth-bearing force imports now keep local `plugins/` state when the incoming bundle does not include plugin files, so refreshing credentials does not silently remove locally installed Codex plugins.
+
 ### More actionable run validation
 
 `cdx run` now returns specific guidance for unknown session references and invalid provider selections so users can recover with `cdx configs`, `cdx add`, or a corrected provider argument.

package/changelogs/CHANGELOGS_0_12_4.md

@@ -0,0 +1,18 @@
+# CDX Manager 0.12.4
+
+## Highlights
+
+- `cdx import --force` now preserves local Codex plugins when refreshing from bundles that do not include plugin files.
+
+## Changes
+
+### Force import plugin preservation
+
+Force imports of auth-bearing bundles keep detected local `plugins/` state instead of deleting it when the incoming bundle omits plugin files. This keeps locally installed Codex plugins available after credential refresh imports.
+
+## Validation
+
+- `npm run lint`
+- `npm test`
+- `logics-manager lint --require-status`
+- `logics-manager audit`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.12.3"
+version = "0.12.4"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"

package/src/cli.py

@@ -78,7 +78,7 @@ from .status_view import (
 )
 from .update_check import check_for_update, check_logics_manager_for_update
 
-VERSION = "0.12.3"
+VERSION = "0.12.4"
 
 # Public surface: this module is a facade. Names below are imported above
 # purely to be re-exported (consumed by tests and external callers); listing
@@ -215,7 +215,7 @@ def _print_help(use_color=False):
         f"  {_style('cdx clean [name] [--yes] [--json]', '36', use_color)}",
         f"  {_style('cdx clean profiles (--tmp|--old-logs DAYS) [--yes] [--json]', '36', use_color)}",
         f"  {_style('cdx export <file> [--include-auth] [--sessions a,b] [--passphrase-env VAR|--passphrase-stdin] [--force] [--json]', '36', use_color)}",
-        f"  {_style('cdx import <file> [--sessions a,b] [--passphrase-env VAR|--passphrase-stdin] [--force|--merge] [--json]', '36', use_color)}",
+        f"  {_style('cdx import <file> [--sessions a,b] [--passphrase-env VAR|--passphrase-stdin] [--force|--merge] [--allow-authless-force] [--json]', '36', use_color)}",
         f"  {_style('cdx doctor [--severity OK|WARN|FAIL[,OK|WARN|FAIL...]] [--json]', '36', use_color)}",
         f"  {_style('cdx repair [--dry-run] [--force] [--json]', '36', use_color)}",
         f"  {_style('cdx view [--json]', '36', use_color)}",

package/src/session_service.py

@@ -78,6 +78,7 @@ CLAUDE_STATUS_CACHE_TTL_SECONDS = 10 * 60
 # Each live Codex probe spawns app-server, which can refresh+rotate the OAuth
 # token. Cache longer so routine status calls don't keep triggering refreshes.
 CODEX_STATUS_CACHE_TTL_SECONDS = 5 * 60
+_FORCE_IMPORT_PRESERVED_PROFILE_PATHS = ("plugins",)
 STATUS_PROBE_TIMEOUT_SECONDS = 5
 MAX_STATUS_WORKERS = 8
 LAUNCH_POWER_VALUES = {"minimal", "low", "medium", "high", "xhigh"}
@@ -1427,6 +1428,26 @@ def create_session_service(options=None):
         else:
             store["remove_session"](name)
 
+    def _force_import_preserved_profile_paths(session_root):
+        return [rel_path for rel_path in _FORCE_IMPORT_PRESERVED_PROFILE_PATHS if os.path.exists(os.path.join(session_root, rel_path))]
+
+    def _restore_force_import_profile_paths(name, backup_root, session_root, rel_paths):
+        if not backup_root:
+            return
+        for rel_path in rel_paths:
+            source_path = os.path.join(backup_root, rel_path)
+            dest_path = os.path.join(session_root, rel_path)
+            if not os.path.exists(source_path) or os.path.exists(dest_path):
+                continue
+            try:
+                if os.path.isdir(source_path) and not os.path.islink(source_path):
+                    shutil.copytree(source_path, dest_path)
+                else:
+                    _ensure_private_dir(os.path.dirname(dest_path))
+                    shutil.copy2(source_path, dest_path)
+            except Exception as error:
+                raise CdxError(f"Could not restore local plugin state for session {name}: {rel_path}") from error
+
     def import_bundle(
         file_path,
         passphrase=None,
@@ -1479,9 +1500,11 @@ def create_session_service(options=None):
             backup_root = None
             old_record = None
             old_state = None
+            preserved_profile_paths = []
             if is_existing and force:
                 old_record = store["get_session"](name)
                 old_state = store["read_session_state"](name)
+                preserved_profile_paths = _force_import_preserved_profile_paths(session_root)
                 if os.path.exists(session_root):
                     backup_root = tempfile.mkdtemp(prefix=f".{_encode(name)}.import.", dir=os.path.dirname(session_root))
                     os.rmdir(backup_root)
@@ -1535,6 +1558,7 @@ def create_session_service(options=None):
                     _ensure_private_dir(os.path.dirname(dest_path))
                     # Decrypted credentials: 0o600 from creation, no umask window.
                     atomic_write(dest_path, item["content"], mode=0o600)
+                _restore_force_import_profile_paths(name, backup_root, session_root, preserved_profile_paths)
             except Exception:
                 _restore_import_backup(name, backup_root, session_root, old_record, old_state)
                 raise