cdx-manager 0.21.1 → 0.21.3

package/README.md

@@ -4,7 +4,7 @@
 
 <br clear="left"/>
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.21.1-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.21.3-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **The right AI coding account, when you need it.** CDX Manager keeps your Codex and Claude accounts in separate profiles, shows which ones have quota, and helps you pick the next usable session from your terminal.
 

package/VERSION

@@ -1 +1 @@
-0.21.1
+0.21.3

package/changelogs/CHANGELOGS_0_21_2.md

@@ -0,0 +1,9 @@
+# CDX Manager 0.21.2
+
+## Fixes
+
+- Keep the tray companion visible to CDX on long runs: macOS purges per-user temp files untouched for about three days, which removed the companion's instance lock. CDX then saw no tray, so an update replaced the binary without stopping the old process and `cdx tray launch` could not start a new one. The companion now restores its lock within a minute when it disappears.
+
+## Release process
+
+- GitHub release titles are exactly their tag (`vX.Y.Z`); the checksum workflow now enforces it on publish.

package/changelogs/CHANGELOGS_0_21_3.md

@@ -0,0 +1,5 @@
+# CDX Manager 0.21.3
+
+## Fixes
+
+- Claude in Chrome now works from CDX Claude profiles (`claude --chrome`, `/chrome`, or `cdx set <name> --extra-args '--chrome'`). Profile isolation redirects HOME, so Claude Code looked for Chrome and its Claude extension inside the profile home, found neither, and never installed its native-messaging host where Chrome reads it. CDX now links the real Chrome directory into each Claude profile home, as it already did for the macOS keychain: `~/Library/Application Support/Google/Chrome` on macOS, `~/.config/google-chrome` on Linux. Windows needed no change: Chrome lives under `%LOCALAPPDATA%` and the host is registered in the registry, neither of which CDX redirects. Profile copies keep the link as a link and never copy the Chrome profile itself.

package/checksums/release-archives.json

@@ -485,6 +485,28 @@
         "x86_64-pc-windows-msvc": "20af5c24d62b673458c1ad7245df58d3cadb0be27116338fa39f66f896cd3d9f",
         "x86_64-unknown-linux-musl": "4f7bc612c378a6e746a5bd737f89763ddaea0398182b49df28a9954e955fcd63"
       }
+    },
+    "v0.21.1": {
+      "github_tarball_sha256": "be99bab2b7b0e86a36db8f891881fdc940631ca7f5b08e9402f1f6d44b614c56",
+      "github_zip_sha256": "06114c024b75125a081c0ca19d794604f259bf1ca9a5e2b8030218d3e58a926e",
+      "tray_assets": {
+        "aarch64-apple-darwin": "80df87fb4f8ed6ecddb5c8719d7f9a18a0dfb46625ea9f6137efe0b5a2cfe7bd",
+        "aarch64-unknown-linux-musl": "3c6b81b39f0abec33309835873f62c7fef37d4b3ddd30a2670081f5e930803c3",
+        "x86_64-apple-darwin": "dd087d256e54aad2a0781b7b98e21a416ba7b14f92344413959d7a26c8a81468",
+        "x86_64-pc-windows-msvc": "c316d753c055be48d74e23537ca66093a1a7c36df8fb8518d6b909484ccb9415",
+        "x86_64-unknown-linux-musl": "f5a034ba301ecf10de33498cd99f00fa3aa6afda94d7c743390af05f4f718790"
+      }
+    },
+    "v0.21.2": {
+      "github_tarball_sha256": "b6225a95b590cc931988260597b870edbff00b3175f5c8091a0e23503d408e5e",
+      "github_zip_sha256": "b0714ed222e17ae9bdd658c37b6ba32b9026ddddfb4d20794783b2203f4ccc88",
+      "tray_assets": {
+        "aarch64-apple-darwin": "c4b8938b62fad445351938f79e0cd42d5342a530e88eeb0f52c51e2fe77e3391",
+        "aarch64-unknown-linux-musl": "6f9c959e4a17a39c3d548b48afe326ca2d68bee0e298f532c4880d080d41eb20",
+        "x86_64-apple-darwin": "f41652aa24d27e2e4deef566cd66c11fc7cb3b5155dc8d5a917433a3e172d33b",
+        "x86_64-pc-windows-msvc": "856f9dc459182adb10f66f2836abc862be82feff1cc3f1cf859764336487d781",
+        "x86_64-unknown-linux-musl": "f1832fdbe7114b4625da21d6a3a0f0c100f18d3a441796e809e568620e4cd345"
+      }
     }
   }
 }

package/docs/operations.md

@@ -29,7 +29,7 @@ Notes:
 
 ## Release checklist
 
-- Name the GitHub Release `CDX Manager X.Y.Z` (for example, `CDX Manager 0.21.0`); use `vX.Y.Z` for its tag and the checked-in versioned changelog for its notes.
+- Name the GitHub Release exactly as its tag, `vX.Y.Z` (for example, `v0.21.1`); use the checked-in versioned changelog for its notes.
 - Before publishing npm or PyPI packages, run `npm run release:validate`.
 - The release tag must match `package.json`, `pyproject.toml`, `src/cli.py`, and `VERSION`.
 - `checksums/release-archives.json` must include the matching `vX.Y.Z` entry with both `github_tarball_sha256` and `github_zip_sha256`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.21.1",
+  "version": "0.21.3",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.21.1"
+version = "0.21.3"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"

package/src/claude_usage.py

@@ -117,36 +117,52 @@ def claude_profile_store_dir(auth_home):
     return os.path.join(auth_home, "credentials")
 
 
-def _link_macos_keychain(auth_home):
-    """Make the operator's login keychain reachable from a redirected home.
-
-    macOS resolves the login keychain through `$HOME/Library/Keychains`.
-    Profile isolation redirects HOME (see `_home_env_overrides`), so that path
-    does not exist: every Claude Code launch then raises a "Keychain Not Found"
-    dialog before falling back to a plaintext credentials file. Linking the
-    real keychain directory into the profile home restores the lookup. Failure
-    is non-fatal, and deliberately quiet: the profile simply keeps the
-    file-based credentials it already used.
+# Real-home directories a redirected profile home must still reach on macOS.
+# Keychains: the login keychain (else a "Keychain Not Found" dialog on every launch).
+# Chrome: Claude in Chrome looks for its extension and installs its native-messaging
+# host under $HOME/Library/Application Support/Google/Chrome; without the link,
+# `claude --chrome` sees no extension and Chrome never finds the host.
+# Linux keeps Chrome under ~/.config (XDG), also resolved from HOME. Windows needs
+# nothing: the host is registered in the registry and Chrome lives in
+# %LOCALAPPDATA%, which profile isolation does not redirect.
+_MACOS_SHARED_DIRS = (
+    ("Library", "Keychains"),
+    ("Library", "Application Support", "Google", "Chrome"),
+)
+_LINUX_SHARED_DIRS = ((".config", "google-chrome"),)
+
+
+def _link_real_home_dirs(auth_home):
+    """Link the real-home directories in `_MACOS_SHARED_DIRS` (or `_LINUX_SHARED_DIRS`) into a redirected home.
+
+    Profile isolation redirects HOME (see `_home_env_overrides`), so these
+    paths do not exist in the profile home. A real directory already there is
+    left alone. Failure is non-fatal, and deliberately quiet: the profile
+    simply keeps working without that integration.
     """
-    if sys.platform != "darwin" or pwd is None:
+    shared = _MACOS_SHARED_DIRS if sys.platform == "darwin" else _LINUX_SHARED_DIRS if sys.platform.startswith("linux") else ()
+    if not shared or pwd is None:
         return
     try:
         real_home = pwd.getpwuid(os.getuid()).pw_dir
     except (KeyError, OSError):
         return
-    source = os.path.join(real_home, "Library", "Keychains")
-    if not os.path.isdir(source):
-        return
-    link = os.path.join(auth_home, "Library", "Keychains")
-    if os.path.realpath(link) == os.path.realpath(source):
-        return
-    try:
-        os.makedirs(os.path.dirname(link), exist_ok=True)
-        if os.path.islink(link):
-            os.unlink(link)
-        os.symlink(source, link)
-    except OSError:
-        return
+    for parts in shared:
+        source = os.path.join(real_home, *parts)
+        if not os.path.isdir(source):
+            continue
+        link = os.path.join(auth_home, *parts)
+        if os.path.realpath(link) == os.path.realpath(source):
+            continue
+        if os.path.exists(link) and not os.path.islink(link):
+            continue
+        try:
+            os.makedirs(os.path.dirname(link), exist_ok=True)
+            if os.path.islink(link):
+                os.unlink(link)
+            os.symlink(source, link)
+        except OSError:
+            continue
 
 
 def _secure_storage_overrides(auth_home):
@@ -167,7 +183,7 @@ def _secure_storage_overrides(auth_home):
     the variable overrides that directory as well as naming the entry. Any
     other value would also move where credentials are read from.
     """
-    _link_macos_keychain(auth_home)
+    _link_real_home_dirs(auth_home)
     return {"CLAUDE_SECURESTORAGE_CONFIG_DIR": os.path.join(auth_home, ".claude")}
 
 

package/src/session_service.py

@@ -35,7 +35,7 @@ from contextlib import nullcontext
 from functools import partial
 
 from .claude_credentials import copy_keychain_credentials, delete_keychain_credentials
-from .claude_usage import _link_macos_keychain
+from .claude_usage import _link_real_home_dirs
 from .codex_usage import fetch_codex_rate_limits
 from .config import (
     MAX_LAUNCH_BUDGET_USD,
@@ -573,8 +573,9 @@ def copy_session(base_dir, store, source_name, dest_name):
         with credential_copy:
             if source["provider"] == PROVIDER_CLAUDE:
                 shutil.copytree(source_root, temp_root, symlinks=True,
-                                ignore=lambda _directory, names: [n for n in names if n == "Keychains"])
-                _link_macos_keychain(os.path.join(temp_root, "claude-home"))
+                                ignore=lambda directory, names: [n for n in names if n == "Keychains" or (
+                                    n == "Chrome" and os.path.islink(os.path.join(directory, n)))])
+                _link_real_home_dirs(os.path.join(temp_root, "claude-home"))
             else:
                 shutil.copytree(source_root, temp_root)
             if existing: