cdx-manager 0.20.11 → 0.20.13

package/README.md

@@ -4,7 +4,7 @@
 
 <br clear="left"/>
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.20.11-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.20.13-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **Stop guessing which AI account still has quota.** `cdx` tracks the rate-limit window of every Codex and Claude account you own, tells you which one is usable right now, and launches it with isolated auth — in one command.
 
@@ -164,7 +164,7 @@ or turn historical tool output into new authorization.
 - **Disk usage and cleanup.** `cdx disk` reports `CDX_HOME` usage, `cdx disk profiles --candidates` identifies reclaimable profile caches/logs with evidence, and `cdx clean profiles ...` applies explicit cleanup actions.
 - **Health and repair.** `cdx doctor` inspects dependencies, permissions, and orphan profiles; `cdx repair` plans or applies safe fixes.
 - **Portable bundles.** `cdx export` / `cdx import` move sessions between machines, with passphrase-encrypted auth data when you ask for it.
-- **Update prompts.** Periodic update checks surface `cdx update` directly in the `cdx`, `cdx status`, and launch output when a newer release is available. When `logics-manager` is installed, `cdx` can also suggest `logics-manager self-update`.
+- **Update prompts.** Periodic update checks surface `cdx update` directly in the `cdx`, `cdx status`, and launch output when a newer release is available. When `logics-manager` is installed, `cdx` can also suggest `logics-manager update`.
 - **Logics viewer shortcut.** `cdx view` opens the Logics browser/focus viewer through `logics-manager view` when the companion CLI is installed. All viewer flags are forwarded: `--lan`, `--lan-rw`, `--focus <ref>`, `--read`, `--port`, `--host`, `--refresh-interval`, `--tls`, `--tls-cert`, `--tls-key`, `--open`, `--no-open`. `cdx view --json` reports availability and update diagnostics without opening the viewer.
 
 ---
@@ -504,7 +504,7 @@ cdx power all default
 cdx model provider:ollama default
 ```
 
-`--model` maps to Codex `--model`, Claude `--model`, and Ollama `ollama run <model>`. `--power` maps to Codex `model_reasoning_effort` and Claude `--effort`; supported values are `minimal`, `low`, `medium`, `high`, and `xhigh`. `--permission` maps to provider-native permission flags. Codex Fast mode is separate from reasoning effort: `--fast on` opts a Codex session into the Codex Fast service tier, while new sessions, `--fast off`, and default launches force the non-Fast `flex` tier. Use `--power low` when you want low reasoning effort without enabling Codex Fast credits. Existing legacy sessions that stored `fast=on` before this split continue to behave as low effort unless the user explicitly sets `--fast on` again. `--priority` is a 0..100 selector preference used as a tie-breaker after readiness and availability. `--rtk on` injects a launch instruction that encourages assistants to use RTK (`rtk <command>`) for noisy terminal commands when RTK is available, while keeping raw commands for exact output. Logics guidance is auto-enabled when `logics-manager` is available; use `--logics off` to disable that guidance for a session, or `--logics on` to pin it explicitly.
+`--model` maps to Codex `--model`, Claude `--model`, and Ollama `ollama run <model>`. `--power` maps to Codex `model_reasoning_effort` and Claude `--effort`; supported values are `minimal`, `low`, `medium`, `high`, and `xhigh`. `--permission` maps to provider-native permission flags. Codex Fast mode is separate from reasoning effort: `--fast on` opts a Codex session into the Codex Fast service tier, while new sessions, `--fast off`, and default launches force the non-Fast `flex` tier. Use `--power low` when you want low reasoning effort without enabling Codex Fast credits. Existing legacy sessions that stored `fast=on` before this split continue to behave as low effort unless the user explicitly sets `--fast on` again. `--priority` is a 0..100 selector preference used as a tie-breaker after readiness and availability. `--rtk on` adds standing guidance that encourages assistants to use RTK (`rtk <command>`) for noisy terminal commands when RTK is available, while keeping raw commands for exact output. Logics guidance is auto-enabled when `logics-manager` is available; use `--logics off` to disable that guidance for a session, or `--logics on` to pin it explicitly. This guidance is passed as instructions, never as a first message: Claude receives it through `--append-system-prompt` and Codex through `-c developer_instructions=...`, appended after any `developer_instructions` already set in the profile's `config.toml` (on Python older than 3.11 without `tomli`, a profile that sets its own is left untouched and gets no cdx guidance). Launching or resuming a session therefore never submits a turn on your behalf. Antigravity and Ollama have no instruction channel and receive no guidance. If you also pass `--append-system-prompt` through `--extra-args`, Claude receives the option twice; prefer putting your own text in the profile's `CLAUDE.md`.
 
 ### Terminal Titles
 

package/VERSION

@@ -1 +1 @@
-0.20.11
+0.20.13

package/changelogs/CHANGELOGS_0_20_12.md

@@ -0,0 +1,18 @@
+# CDX Manager 0.20.12
+
+## Codex launches work again with Codex CLI 0.156
+
+- Stop forcing `service_tier="flex"` on Codex launches when fast mode is off. Codex
+  CLI 0.156.1 requests with that tier are rejected with
+  `400 Unsupported service_tier: flex`, which blocked every `cdx <session>` and
+  `cdx run` launch. The tier is now omitted so the API default applies.
+- Fast mode is unchanged: it still sends `service_tier="fast"` with
+  `features.fast_mode=true`.
+
+## Validation
+
+- 1048 Python tests and project lint pass, with launch-spec tests asserting no service tier is sent
+  when fast mode is off.
+- Verified on a Linux host with Codex CLI 0.156.1: a headless
+  `cdx run` succeeds, while the same request with `service_tier="flex"` reproduces
+  the 400 error.

package/changelogs/CHANGELOGS_0_20_13.md

@@ -0,0 +1,32 @@
+# CDX Manager 0.20.13
+
+## Launches no longer open with a message you never typed
+
+- RTK and Logics guidance used to be passed as the provider's positional prompt,
+  which Claude Code and Codex submit as a user turn: a bare `cdx <session>`
+  opened with that guidance shown as your message plus a model reply to it, and
+  every resume sent it again as a new message.
+- Claude now receives the guidance through `--append-system-prompt`, and Codex
+  through `-c developer_instructions=...`. Launch, resume, and headless runs are
+  all covered, and no turn is ever submitted on your behalf.
+- Codex guidance is appended after any `developer_instructions` already set in
+  the profile's `config.toml` rather than replacing it. When that value cannot be
+  read (Python older than 3.11 without `tomli`), cdx leaves it untouched and adds
+  no guidance.
+- Antigravity has no instruction channel and, like Ollama, no longer receives
+  the guidance.
+- `cdx doctor --check-provider-flags` now verifies the options used to pass it.
+
+## Logics update hint
+
+- The update notice now suggests `logics-manager update` instead of the legacy
+  `logics-manager self-update` alias.
+
+## Validation
+
+- 1055 Python tests and project lint pass.
+- Verified against real CLIs on macOS, Linux (WSL), and Windows: Claude Code
+  (2.1.177, 2.1.283) and Codex CLI (0.156.1, 0.157.1) receive the guidance, and
+  interactive launches and resumes no longer add a user turn to the provider
+  transcript, where 0.20.12 added one. Codex guidance also survives a resumed
+  thread and merges with a profile's own `developer_instructions`.

package/checksums/release-archives.json

@@ -430,6 +430,28 @@
         "x86_64-pc-windows-msvc": "ae8eba39b1d9d7e9b97c3b3026561360a6ec00ca154b5d4d215a283fc5566050",
         "x86_64-unknown-linux-musl": "cfa4245e7704a4c85e4f680275db500c600e46a44aac19d1ec5675deb2be0c58"
       }
+    },
+    "v0.20.11": {
+      "github_tarball_sha256": "361eafcdd5b1eb850bea1ebaf7227c02b3078c5cc4acb50299119bd45a49a9f7",
+      "github_zip_sha256": "b583a444afb3267132786e5431aa36d3895f06368c0a9ac9eb70caa25fb9e1fa",
+      "tray_assets": {
+        "aarch64-apple-darwin": "5efdcd41e3e12c92fc6c0885e6cd27377864bd6ec59527c88ebb322417ccdd11",
+        "aarch64-unknown-linux-musl": "d7f7e0cb79f7149e6106b4d4ba323e31fc2481b7f44011e2d414d4fd4fbd8110",
+        "x86_64-apple-darwin": "525a5cf8cafac5efa1ac8704bacb94a899b453757f6273dbc20120828d2304c8",
+        "x86_64-pc-windows-msvc": "183d28516f764e9a9d494feeab4406de9ad8159330082e12bf88f360f65158ac",
+        "x86_64-unknown-linux-musl": "25274c81ccb3048e4e7c96e7e6fd236bb03486dcf5b429be5c31e8dd6d841c5e"
+      }
+    },
+    "v0.20.12": {
+      "github_tarball_sha256": "463efdea19f037c6e4f04d30d3cc34649ef84e18019f23ecf1752a131437ecba",
+      "github_zip_sha256": "43ddd669cac5ab0fc7aef146d18e84670710128bba56ec39911d179f6b98abdf",
+      "tray_assets": {
+        "aarch64-apple-darwin": "14bef88f478dda41ba8af4fbe54859ff5a9c420ab58cad0168b563d00cfa1385",
+        "aarch64-unknown-linux-musl": "0d78ef10ec531a02a43c5bd059b49142721059daf2803e3d36829886b478ab0c",
+        "x86_64-apple-darwin": "0ae9b837573e35144a7a9f871f030c5445044ba66e09f1d1958d635c2efb6d8f",
+        "x86_64-pc-windows-msvc": "0dad961e2f5e79970645db96ed14ef7a7fcb8b7ce0a4441a06310a3ab16b65a4",
+        "x86_64-unknown-linux-musl": "b317cf53c0c502321662538aef083690e7673d789d91d55181b1bcffbb6d0a2f"
+      }
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.20.11",
+  "version": "0.20.13",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.20.11"
+version = "0.20.13"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"

package/src/health.py

@@ -14,6 +14,7 @@ from .provider_runtime import (
     HEADLESS_CODEX_PERMISSION_ARGS,
     LAUNCH_FEATURE_ARGS,
     LAUNCH_PERMISSION_ARGS,
+    PREFERENCE_INSTRUCTION_ARGS,
     codex_auth_diagnostic,
 )
 from .status_source import _extract_account_identity
@@ -195,6 +196,8 @@ def _mapped_provider_flags(provider):
     for flag in LAUNCH_FEATURE_ARGS.get(provider, []):
         if flag.startswith("-"):
             mappings.setdefault("cdx feature flags", set()).add(flag)
+    for flag in PREFERENCE_INSTRUCTION_ARGS.get(provider, []):
+        mappings.setdefault("cdx feature flags", set()).add(flag)
     for permission, args in interactive.items():
         mappings.setdefault(permission, set()).update(
             arg for arg in args if arg.startswith("-")

package/src/provider_runtime.py

@@ -71,6 +71,15 @@ LAUNCH_FEATURE_ARGS = {
     PROVIDER_OLLAMA: [OLLAMA_USAGE_FLAG],
 }
 
+#: How each provider receives cdx's standing guidance (RTK, logics-manager) as
+#: instructions rather than as a first user message. A provider absent here
+#: gets no guidance. Declared as a table so the provider-flag health check can
+#: verify these options exist in the installed CLI.
+PREFERENCE_INSTRUCTION_ARGS = {
+    PROVIDER_CLAUDE: ["--append-system-prompt"],
+    PROVIDER_CODEX: ["-c"],
+}
+
 LAUNCH_PERMISSION_ARGS = {
     PROVIDER_CLAUDE: {
         "review": ["--permission-mode", "plan"],
@@ -386,7 +395,8 @@ def _codex_fast_enabled(launch):
 def _codex_fast_config_args(launch):
     if _codex_fast_enabled(launch):
         return ["-c", 'service_tier="fast"', "-c", "features.fast_mode=true"]
-    return ["-c", 'service_tier="flex"', "-c", "features.fast_mode=false"]
+    # flex is rejected by the API for current models; omit the tier to get the default
+    return ["-c", "features.fast_mode=false"]
 
 
 def _normalize_reasoning_effort(reasoning_effort=None, power=None, usage="Unsupported reasoning effort."):
@@ -574,19 +584,71 @@ def _logics_enabled(session, env=None):
     return _logics_manager_available(path=env.get("PATH"))
 
 
-def _with_launch_preferences(session, initial_prompt=None, env=None):
-    if session["provider"] == PROVIDER_OLLAMA:
-        return initial_prompt
+def _launch_preferences(session, env=None):
+    """The standing guidance cdx adds to a session, or None.
+
+    It goes to the provider as instructions, never as the conversation's
+    first message: a positional prompt is submitted as a user turn, so a bare
+    `cdx <session>` used to open with guidance the user never typed and a
+    model reply to it. Ollama has no instruction channel and gets none;
+    Antigravity has none either (`--prompt-interactive` is a user turn).
+    """
+    if session["provider"] not in PREFERENCE_INSTRUCTION_ARGS:
+        return None
     prompts = []
     if _rtk_enabled(session):
         prompts.append(RTK_PROMPT)
     if _logics_enabled(session, env=env):
         prompts.append(LOGICS_PROMPT)
-    if not prompts:
-        return initial_prompt
-    if initial_prompt:
-        prompts.append(initial_prompt)
-    return "\n\n".join(prompts)
+    return "\n\n".join(prompts) or None
+
+
+def _codex_configured_developer_instructions(auth_home):
+    """(readable, value) for `developer_instructions` in the profile's config.
+
+    A `-c developer_instructions=...` override replaces the configured value
+    outright, so cdx has to know it to append rather than erase it. `readable`
+    is False only when the key is present but cannot be parsed (no TOML reader
+    on Python < 3.11 without tomli): the caller then leaves it alone.
+    """
+    try:
+        with open(os.path.join(auth_home, "config.toml"), encoding="utf-8") as handle:
+            text = handle.read()
+    except OSError:
+        return True, None
+    if "developer_instructions" not in text:
+        return True, None
+    try:
+        import tomllib
+    except ImportError:
+        try:
+            import tomli as tomllib
+        except ImportError:
+            return False, None
+    try:
+        value = tomllib.loads(text).get("developer_instructions")
+    except ValueError:
+        # Codex refuses an unparsable config itself; there is nothing to keep.
+        return True, None
+    return True, value if isinstance(value, str) and value.strip() else None
+
+
+def _launch_preference_args(session, env=None):
+    preferences = _launch_preferences(session, env=env)
+    _validate_initial_prompt(preferences, label="launch guidance")
+    if not preferences:
+        return []
+    if session["provider"] == PROVIDER_CLAUDE:
+        return ["--append-system-prompt", preferences]
+    readable, configured = _codex_configured_developer_instructions(_get_auth_home(session))
+    if not readable:
+        # Better to go without cdx's guidance than to erase the user's own.
+        return []
+    if configured:
+        preferences = f"{configured.rstrip()}\n\n{preferences}"
+    # json.dumps yields a valid TOML basic string, which is how codex parses
+    # a `-c` value.
+    return ["-c", f"developer_instructions={json.dumps(preferences)}"]
 
 
 def _build_launch_spec(session, cwd=None, env_override=None, initial_prompt=None, capture_transcript=True):
@@ -597,8 +659,7 @@ def _build_launch_spec(session, cwd=None, env_override=None, initial_prompt=None
     for key, value in _shared_tool_cache_overrides(env).items():
         env.setdefault(key, value)
     env.update(launch_notify_env(session, notifications_enabled(session)))
-    initial_prompt = _with_launch_preferences(session, initial_prompt, env=env)
-    _validate_initial_prompt(initial_prompt)
+    preference_args = _launch_preference_args(session, env=env)
     if session["provider"] == PROVIDER_CLAUDE:
         launch = session.get("launch") or {}
         args = ["--name", session["name"]]
@@ -608,6 +669,7 @@ def _build_launch_spec(session, cwd=None, env_override=None, initial_prompt=None
         if launch.get("model"):
             args += ["--model", _claude_cli_model(launch["model"])]
         args += _launch_config_args(session)
+        args += preference_args
         args += _extra_args(session)
         if initial_prompt:
             args.append(initial_prompt)
@@ -664,6 +726,7 @@ def _build_launch_spec(session, cwd=None, env_override=None, initial_prompt=None
     if launch.get("model"):
         args += ["--model", launch["model"]]
     args += _launch_config_args(session)
+    args += preference_args
     if initial_prompt:
         args.append(initial_prompt)
     return _wrap_launch_with_transcript(session, {
@@ -771,8 +834,7 @@ def _build_resume_spec(session, cwd=None, env_override=None, capture_transcript=
     if not capability["resumable"]:
         raise CdxError(f"Provider {session.get('provider')} does not support native resume through cdx.")
 
-    resume_prompt = _with_launch_preferences(session, env=env)
-    _validate_initial_prompt(resume_prompt)
+    preference_args = _launch_preference_args(session, env=env)
 
     if session["provider"] == PROVIDER_CLAUDE:
         launch = session.get("launch") or {}
@@ -791,9 +853,8 @@ def _build_resume_spec(session, cwd=None, env_override=None, capture_transcript=
         if launch.get("model"):
             args += ["--model", _claude_cli_model(launch["model"])]
         args += _launch_config_args(session)
+        args += preference_args
         args += _extra_args(session)
-        if resume_prompt:
-            args.append(resume_prompt)
         auth_home = _get_auth_home(session)
         claude_env = _claude_env(env, auth_home, own_terminal_title=True)
         oauth_token = _read_claude_launch_oauth_token(auth_home)
@@ -821,9 +882,8 @@ def _build_resume_spec(session, cwd=None, env_override=None, capture_transcript=
     if launch.get("model"):
         args += ["--model", launch["model"]]
     args += _launch_config_args(session)
+    args += preference_args
     args += _extra_args(session)
-    if resume_prompt:
-        args.append(resume_prompt)
     return _wrap_launch_with_transcript(session, {
         "command": "codex",
         "args": args,
@@ -834,12 +894,12 @@ def _build_resume_spec(session, cwd=None, env_override=None, capture_transcript=
     }, capture_transcript=capture_transcript, env=env)
 
 
-def _validate_initial_prompt(initial_prompt):
+def _validate_initial_prompt(initial_prompt, label="initial_prompt"):
     if initial_prompt is not None:
         if not isinstance(initial_prompt, str):
-            raise CdxError("initial_prompt must be a string.")
+            raise CdxError(f"{label} must be a string.")
         if len(initial_prompt) > 32768:
-            raise CdxError("initial_prompt exceeds maximum allowed length.")
+            raise CdxError(f"{label} exceeds maximum allowed length.")
 
 
 def _build_headless_launch_spec(session, cwd=None, env_override=None, initial_prompt=None):
@@ -849,8 +909,7 @@ def _build_headless_launch_spec(session, cwd=None, env_override=None, initial_pr
     # Headless runs read the same home, and so the same hooks, as an interactive
     # launch. Their caller already learns of completion from the return value.
     env.update(launch_notify_env(session, enabled=False))
-    initial_prompt = _with_launch_preferences(session, initial_prompt, env=env)
-    _validate_initial_prompt(initial_prompt)
+    preference_args = _launch_preference_args(session, env=env)
     launch = session.get("launch") or {}
     power = _launch_power(session)
     permission = launch.get("permission")
@@ -871,6 +930,7 @@ def _build_headless_launch_spec(session, cwd=None, env_override=None, initial_pr
         if launch.get("fallback_model"):
             args += ["--fallback-model", _claude_fallback_model(launch["fallback_model"])]
         args += _launch_config_args(session)
+        args += preference_args
         args += _extra_args(session)
         if initial_prompt:
             args.append(initial_prompt)
@@ -896,6 +956,7 @@ def _build_headless_launch_spec(session, cwd=None, env_override=None, initial_pr
         args += _codex_fast_config_args(launch)
         if permission:
             args += HEADLESS_CODEX_PERMISSION_ARGS.get(permission, [])
+        args += preference_args
         if initial_prompt:
             args.append(initial_prompt)
         return {

package/src/update_check.py

@@ -229,7 +229,7 @@ def check_logics_manager_for_update(base_dir, env=None, now_fn=None, runner=None
                 "tool": "logics-manager",
                 "latest_version": latest_version,
                 "current_version": current_version,
-                "update_command": "logics-manager self-update",
+                "update_command": "logics-manager update",
                 "url": cached.get("url"),
                 "cached": True,
             }
@@ -255,7 +255,7 @@ def check_logics_manager_for_update(base_dir, env=None, now_fn=None, runner=None
             "tool": "logics-manager",
             "latest_version": latest_version,
             "current_version": current_version,
-            "update_command": "logics-manager self-update",
+            "update_command": "logics-manager update",
             "url": payload["url"],
             "cached": False,
         }