cdx-manager 0.18.0 → 0.18.1

package/README.md

@@ -1,6 +1,6 @@
 # CDX Manager
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.18.0-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.18.1-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **Stop guessing which AI account still has quota.** `cdx` tracks the rate-limit window of every Codex and Claude account you own, tells you which one is usable right now, and launches it with isolated auth — in one command.
 

package/changelogs/CHANGELOGS_0_18_1.md

@@ -0,0 +1,50 @@
+# CDX Manager 0.18.1
+
+## Fixes
+
+### `cdx tray install` works against a published release
+
+0.18.0 shipped a tray installer that refused every asset the release published.
+Three separate causes, each of which only appeared when installing from a real
+release rather than from a locally built archive.
+
+**The archive shape was rejected.** Release assets are written with
+`tar -C dir .`, so they carry a member for the directory itself. The guard that
+refuses an archive escaping its install directory treated that member as an
+escape, when it resolves to the destination and nothing else. The destination is
+now accepted; an archive that genuinely writes outside its directory is still
+refused, and a link member still is.
+
+**Windows asked for an asset nobody builds.** CDX looked for
+`x86_64-pc-windows-gnu` while releases are built with the MSVC toolchain, so no
+published checksum ever matched the name it asked for. Every Windows install
+refused for want of a checksum that was published under a different target.
+
+**ARM Linux was offered and never built.** `aarch64-unknown-linux-musl` was a
+target CDX would install and the release did not produce. It is now built and
+published alongside the others.
+
+A test now asserts that every target CDX offers is one the release actually
+builds, so this class of mismatch fails in CI rather than on a user's machine.
+
+### Windows toasts carry the CDX icon
+
+The Start Menu shortcut CDX installs now points at an icon shipped with the
+companion, so a notification shows the CDX logo rather than a generic one.
+Uninstall removes the shortcut along with the companion.
+
+## Release safety
+
+Publishing to npm and PyPI now waits for the tray companion assets to build
+successfully. All four workflows fire on the same release event, so previously
+they ran beside each other: a failed asset build would have left both registries
+carrying a version whose release had no companion to install.
+
+## Validation
+
+- `npm run lint`
+- `npm test` — 771 Python tests
+- `cargo test` — 45 Rust tests; `cargo clippy` clean with zero warnings on three
+  targets
+- `cdx tray install`, `doctor`, `launch` and `uninstall` exercised against the
+  published v0.18.0 assets on macOS arm64, Windows, and Linux under WSL

package/checksums/release-archives.json

@@ -192,6 +192,16 @@
     "v0.17.1": {
       "github_tarball_sha256": "f1cc36d55f17d8e5c8ad0b0ebc419e812b8788742c3e45ce1137303924114dd7",
       "github_zip_sha256": "29acb306ad76535d0db701504a53b9887b8a6b0b95d968634139f85952a34ec3"
+    },
+    "v0.18.0": {
+      "github_tarball_sha256": "ae666d8ec38a74859e1edc5023101474a2fb647ecb3ba285fd746c7b84699854",
+      "github_zip_sha256": "72ecdd02b449c2256a74f77afec7eda8cd9b53b52bb62858e45d3d6000a1bd24",
+      "tray_assets": {
+        "aarch64-apple-darwin": "45aa98624bda29dea26637aeb22a86b22fe018a95fb176bfffd3504c772c9988",
+        "x86_64-apple-darwin": "d310852919cd4e2ddce2108044d0039e088b5bdc3dfa029be4d81ee0df1c420b",
+        "x86_64-pc-windows-msvc": "86e29cbdbcf070aec7fd34e5596343a43f2b5092e634ca094aba96abf1d49884",
+        "x86_64-unknown-linux-musl": "36ef879c0e75f3c367ed48f1f5a67e25698ec5a04c70958b48ae0885f87487d8"
+      }
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.18.0"
+version = "0.18.1"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"

package/src/tray_install.py

@@ -32,7 +32,11 @@ CHECKSUM_LEDGER = os.path.join(
 TARGETS = {
     ("Darwin", "arm64"): "aarch64-apple-darwin",
     ("Darwin", "x86_64"): "x86_64-apple-darwin",
-    ("Windows", "AMD64"): "x86_64-pc-windows-gnu",
+    # msvc, not gnu: this has to name the asset the release actually publishes,
+    # and the release workflow builds on windows-latest with the default MSVC
+    # toolchain. A mismatch here is not a degraded install, it is a refusal —
+    # there is no checksum published under a target nobody built.
+    ("Windows", "AMD64"): "x86_64-pc-windows-msvc",
     ("Linux", "x86_64"): "x86_64-unknown-linux-musl",
     ("Linux", "aarch64"): "aarch64-unknown-linux-musl",
 }
@@ -214,9 +218,14 @@ def _extract(archive, destination):
     """
     names = []
     with tarfile.open(archive, "r:gz") as tar:
+        root = os.path.realpath(destination)
         for member in tar.getmembers():
             resolved = os.path.realpath(os.path.join(destination, member.name))
-            if not resolved.startswith(os.path.realpath(destination) + os.sep):
+            # The destination itself is not an escape. An archive written with
+            # `tar -C dir .` carries a `.` member for the directory, which is
+            # what the release workflow produces — and rejecting it refused
+            # every published asset while the archive was perfectly safe.
+            if resolved != root and not resolved.startswith(root + os.sep):
                 raise TrayInstallError(
                     f"{os.path.basename(archive)} tries to write outside its install directory "
                     f"({member.name}). Nothing was installed."
@@ -254,7 +263,11 @@ def _executable_in(destination, names):
     bundles = [n for n in names if candidate(n).endswith(".app")]
     binaries = [n for n in names if candidate(n) in ("cdx-tray", "cdx-tray.exe")]
     for name in bundles + binaries:
-        path = os.path.join(destination, name.rstrip("/"))
+        # Normalised because an archive written with `tar -C dir .` names its
+        # members `./CDX.app`, and this path is recorded, launched, and removed
+        # later — a `/./` in the middle works but reads like a defect to anyone
+        # looking at the install record or a doctor report.
+        path = os.path.normpath(os.path.join(destination, name.rstrip("/")))
         if os.path.isdir(path):
             return path
         if os.path.isfile(path):