cdx-manager 0.3.3 → 0.4.0

package/README.md

@@ -1,12 +1,15 @@
 # CDX Manager
 
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.4.0-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+
 **Run multiple Codex and Claude sessions from one terminal. Switch between accounts instantly.**
 
 If you use AI coding tools at scale ; multiple accounts, multiple providers : you know the friction: re-authenticating, losing context, juggling environment variables. `cdx` removes all of that.
 
 One command to launch any session. Zero auth juggling.
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.3.3-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+<img width="213" height="227" alt="image" src="https://github.com/user-attachments/assets/f15f449c-d23e-47fe-a455-17c7386f9be2" />
+<img width="645" height="129" alt="image" src="https://github.com/user-attachments/assets/34bcb395-f832-4da6-9247-3e5022e75e56" />
 
 ---
 
@@ -16,7 +19,9 @@ One command to launch any session. Zero auth juggling.
 - [Technical Overview](#technical-overview)
 - [Getting Started](#getting-started)
 - [All Commands](#all-commands)
+- [JSON Output](#json-output)
 - [Available Scripts](#available-scripts)
+- [Windows Support](#windows-support)
 - [Project Structure](#project-structure)
 - [Data Layout](#data-layout)
 - [Troubleshooting](#troubleshooting)
@@ -53,6 +58,7 @@ One command to launch any session. Zero auth juggling.
   - Fallback: `status-source` scans provider JSONL history files and terminal log transcripts, strips ANSI/OSC sequences, and extracts `usage%`, `5h remaining%`, and `week remaining%` via pattern matching.
 - Claude status refreshes are cached briefly by default; pass `--refresh` to force a live rate-limit probe.
 - If `script` is unavailable, Codex launch falls back to running without transcript capture.
+- On Windows, transcript capture is optional. If no compatible `script` wrapper is installed, Codex still launches normally without transcript capture.
 - Auth probe: synchronous subprocess call to `codex login status` or `claude auth status` before any interactive launch.
 - Signal forwarding: `SIGINT`, `SIGTERM`, and `SIGHUP` are forwarded to the child process and produce clean exit codes.
 - Test stack: Python built-in `unittest` runner with no test framework dependency.
@@ -87,16 +93,33 @@ With uv:
 uv tool install cdx-manager
 ```
 
+On Windows with PowerShell:
+
+```powershell
+npm install -g cdx-manager
+```
+
+With the standalone PowerShell installer:
+
+```powershell
+Invoke-WebRequest https://raw.githubusercontent.com/AlexAgo83/cdx-manager/main/install.ps1 -OutFile install.ps1
+# Optional: set CDX_SHA256 before running if you have a trusted checksum
+powershell -ExecutionPolicy Bypass -File .\install.ps1
+```
+
 With the standalone GitHub installer:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/AlexAgo83/cdx-manager/main/install.sh | sh
+curl -fsSL https://raw.githubusercontent.com/AlexAgo83/cdx-manager/main/install.sh -o install.sh
+# Optional: set CDX_SHA256 before running if you have a trusted checksum
+sh install.sh
 ```
 
 For a specific version:
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/AlexAgo83/cdx-manager/main/install.sh | CDX_VERSION=v0.3.3 sh
+curl -fsSL https://raw.githubusercontent.com/AlexAgo83/cdx-manager/main/install.sh -o install.sh
+CDX_VERSION=v0.4.0 sh install.sh
 ```
 
 From source:
@@ -107,6 +130,14 @@ cd cdx-manager
 make install
 ```
 
+From source on Windows:
+
+```powershell
+git clone <repo>
+cd cdx-manager
+npm install -g .
+```
+
 `cdx` is now available globally. Changes to the source take effect immediately — no reinstall needed.
 
 To uninstall:
@@ -115,12 +146,25 @@ To uninstall:
 make uninstall
 ```
 
+To uninstall on Windows after `npm install -g`:
+
+```powershell
+npm uninstall -g cdx-manager
+```
+
 Alternatively, for a non-symlinked global source install:
 
 ```bash
 npm install -g .
 ```
 
+Security note:
+
+- The standalone installers try to resolve official release checksums from `checksums/release-archives.json`.
+- You can still override verification explicitly through `CDX_SHA256`.
+- Prefer `npm`, `pipx`, or `uv` when you want registry-backed install flows.
+- If you use the standalone script, download it first, inspect it, and prefer a release with an official checksum entry.
+
 ### Environment
 
 By default, `cdx` stores all data under `~/.cdx/`. Override with:
@@ -137,6 +181,24 @@ export CDX_SCRIPT_BIN=script
 export CDX_SCRIPT_ARGS='-q -F {transcript}'
 ```
 
+PowerShell equivalents:
+
+```powershell
+$env:CDX_HOME = "C:\cdx-data"
+$env:CDX_CLAUDE_STATUS_MODEL = "claude-haiku-4-5-20251001"
+$env:CDX_SCRIPT_BIN = "script"
+$env:CDX_SCRIPT_ARGS = "-q -F {transcript}"
+```
+
+Command Prompt equivalents:
+
+```cmd
+set CDX_HOME=C:\cdx-data
+set CDX_CLAUDE_STATUS_MODEL=claude-haiku-4-5-20251001
+set CDX_SCRIPT_BIN=script
+set CDX_SCRIPT_ARGS=-q -F {transcript}
+```
+
 ### Quick Start
 
 ```bash
@@ -163,19 +225,23 @@ cdx status
 | Command | Description |
 |---|---|
 | `cdx` | List all sessions with last-updated timestamps |
+| `cdx --json` | List all sessions as a machine-readable JSON payload |
 | `cdx <name>` | Launch a session (checks auth first) |
-| `cdx add [provider] <name>` | Register a new session (`provider`: `codex` or `claude`, default: `codex`) |
-| `cdx cp <source> <dest>` | Copy a session into another session name, overwriting the destination if it exists |
-| `cdx ren <source> <dest>` | Rename a session and move its auth data |
-| `cdx login <name>` | Re-authenticate a session (logout + login) |
-| `cdx logout <name>` | Log out of a session |
-| `cdx rmv <name> [--force]` | Remove a session and its auth data (prompts for confirmation unless `--force`) |
-| `cdx clean [name]` | Clear launch transcript logs for one session or all sessions |
+| `cdx <name> [--json]` | Launch a session; `--json` returns a structured success payload after the interactive run ends |
+| `cdx add [provider] <name> [--json]` | Register a new session (`provider`: `codex` or `claude`, default: `codex`) |
+| `cdx cp <source> <dest> [--json]` | Copy a session into another session name, overwriting the destination if it exists |
+| `cdx ren <source> <dest> [--json]` | Rename a session and move its auth data |
+| `cdx login <name> [--json]` | Re-authenticate a session (logout + login) |
+| `cdx logout <name> [--json]` | Log out of a session |
+| `cdx rmv <name> [--force] [--json]` | Remove a session and its auth data (prompts for confirmation unless `--force`) |
+| `cdx clean [name] [--json]` | Clear launch transcript logs for one session or all sessions |
+| `cdx export <file> [--include-auth] [--sessions a,b] [--passphrase-env VAR] [--force] [--json]` | Export sessions to a portable bundle; `--include-auth` encrypts auth data with a passphrase |
+| `cdx import <file> [--sessions a,b] [--passphrase-env VAR] [--force] [--json]` | Import sessions from a bundle into the current `CDX_HOME` |
 | `cdx doctor [--json]` | Inspect CLI dependencies, CDX_HOME permissions, missing state, orphan profiles, and pending quarantines |
 | `cdx repair [--dry-run] [--force] [--json]` | Plan or apply safe repairs for missing state files, quarantines, and orphan profiles |
-| `cdx notify <name> --at-reset [--poll seconds] [--once]` | Wait for a session reset time and send a desktop notification when due |
-| `cdx notify --next-ready [--poll seconds] [--once]` | Wait until the recommended session is usable or needs a refresh after reset |
-| `cdx status [--json] [--refresh]` | Show token usage table for all sessions; JSON keeps the same row-array shape and writes live Claude refresh warnings to stderr |
+| `cdx notify <name> --at-reset [--poll seconds] [--once] [--json]` | Wait for a session reset time and send a desktop notification when due |
+| `cdx notify --next-ready [--poll seconds] [--once] [--json]` | Wait until the recommended session is usable or needs a refresh after reset |
+| `cdx status [--json] [--refresh]` | Show token usage table for all sessions; JSON returns a versioned payload with structured warnings |
 | `cdx status --small [--refresh]` / `cdx status -s [--refresh]` | Show compact token usage table without provider, blocking quota, credits, and updated columns |
 | `cdx status <name> [--json] [--refresh]` | Show detailed usage breakdown for one session |
 | `cdx --help` | Show usage |
@@ -183,6 +249,90 @@ cdx status
 
 ---
 
+## JSON Output
+
+`cdx-manager` can be consumed by other apps through its CLI JSON contract.
+
+Commands with machine-readable output:
+
+- `cdx --json`
+- `cdx status --json`
+- `cdx status <name> --json`
+- `cdx add ... --json`
+- `cdx cp ... --json`
+- `cdx ren ... --json`
+- `cdx rmv ... --json`
+- `cdx clean ... --json`
+- `cdx export ... --json`
+- `cdx import ... --json`
+- `cdx login ... --json`
+- `cdx logout ... --json`
+- `cdx doctor --json`
+- `cdx repair --json`
+- `cdx notify ... --json`
+
+Success payloads follow a shared envelope:
+
+```json
+{
+  "schema_version": 1,
+  "ok": true,
+  "action": "add",
+  "message": "Created session work (codex)",
+  "warnings": [],
+  "session": {
+    "name": "work"
+  }
+}
+```
+
+Errors use a shared stderr JSON envelope whenever `--json` is present:
+
+```json
+{
+  "schema_version": 1,
+  "ok": false,
+  "error": {
+    "code": "invalid_usage",
+    "message": "Usage: cdx status [--json] [--refresh] | ...",
+    "exit_code": 1
+  }
+}
+```
+
+`status --json` and similar commands also use the same envelope and place non-fatal issues in `warnings` instead of mixing plain-text diagnostics into `stderr`.
+
+This makes `cdx-manager` usable from editor plugins, scripts, and desktop apps without scraping human-readable terminal output.
+
+---
+
+## Backup And Restore
+
+You can move sessions between machines with portable bundles:
+
+```bash
+cdx export backup.cdx
+cdx import backup.cdx
+```
+
+To migrate auth and avoid logging in again, include auth data in an encrypted bundle:
+
+```bash
+export CDX_BUNDLE_PASSPHRASE='choose-a-strong-passphrase'
+cdx export backup-auth.cdx --include-auth --passphrase-env CDX_BUNDLE_PASSPHRASE
+cdx import backup-auth.cdx --passphrase-env CDX_BUNDLE_PASSPHRASE
+```
+
+Notes:
+
+- `--include-auth` is encrypted and requires a passphrase.
+- Without `--passphrase-env`, `cdx` prompts in an interactive terminal.
+- `--sessions work,perso` exports or imports only a subset.
+- `--force` allows overwriting existing destination sessions during import or replacing an existing bundle file during export.
+- Auth bundles contain credentials. Treat them like secrets and delete them after transfer.
+
+---
+
 ## Available Scripts
 
 - `npm test`: run the Python test suite
@@ -193,6 +343,24 @@ cdx status
 
 ---
 
+## Windows Support
+
+- Supported install paths on Windows:
+  - `npm install -g cdx-manager`
+  - `pipx install cdx-manager`
+  - `uv tool install cdx-manager`
+  - `install.ps1`
+- `install.sh` is Unix-only.
+- `make install` and `make uninstall` are Unix-oriented convenience commands, not the default Windows path.
+- `cdx` isolates Claude sessions on Windows by setting `HOME`, `USERPROFILE`, `HOMEDRIVE`, and `HOMEPATH`.
+- Desktop notifications use PowerShell on Windows.
+- Codex transcript capture is optional on Windows:
+  - if a compatible `script` command is available and exposed via `CDX_SCRIPT_BIN`, `cdx` uses it
+  - otherwise Codex launches without transcript capture and the session still works normally
+- `cdx doctor` reports the transcript-capture fallback explicitly so missing `script` on Windows is visible without being treated as a hard failure.
+
+---
+
 ## Project Structure
 
 ```text
@@ -203,6 +371,7 @@ src/
   cli.py                # Top-level command router
   cli_commands.py       # Command handlers and argument handling
   cli_render.py         # Terminal formatting, tables, colors, and errors
+  backup_bundle.py      # Portable session bundle encoding/decoding + auth encryption
   status_view.py        # Status table/detail rendering and priority ranking
   provider_runtime.py   # Provider launch/auth commands, transcripts, signals
   claude_refresh.py     # Claude usage refresh orchestration
@@ -255,6 +424,7 @@ Session names are URL-encoded when used as directory or file names. CLI command
 - **`cdx rmv` says "Removal requires confirmation in an interactive terminal"** — pass `--force` to bypass the prompt in non-interactive environments (scripts, CI).
 - **`cdx login` hangs** — the provider's login flow requires a browser or device code. Follow the on-screen instructions in the terminal that opened.
 - **`make install` says `npm link` is not found** — ensure Node.js and npm are installed and in your PATH.
+- **On Windows, `doctor` warns that `script` is missing** — this is expected on many setups. Codex still launches, but transcript capture stays disabled unless you point `CDX_SCRIPT_BIN` to a compatible wrapper.
 
 ---
 

package/bin/cdx

@@ -8,7 +8,7 @@ ROOT = Path(__file__).resolve().parent.parent
 if str(ROOT) not in sys.path:
     sys.path.insert(0, str(ROOT))
 
-from src.cli import format_error, main  # noqa: E402
+from src.cli import format_error, format_json_error, main, wants_json  # noqa: E402
 from src.errors import CdxError  # noqa: E402
 
 
@@ -16,5 +16,8 @@ if __name__ == "__main__":
     try:
         raise SystemExit(main(sys.argv[1:]))
     except CdxError as error:
-        sys.stderr.write(f"{format_error(error)}\n")
+        if wants_json(sys.argv[1:]):
+            sys.stderr.write(f"{format_json_error(error)}\n")
+        else:
+            sys.stderr.write(f"{format_error(error)}\n")
         raise SystemExit(error.exit_code)

package/changelogs/CHANGELOGS_0_3_4.md

@@ -0,0 +1,31 @@
+# CHANGELOGS_0_3_4
+
+Release date: 2026-04-16
+
+## CDX Manager 0.3.4
+
+CDX Manager 0.3.4 makes the CLI consumable by other applications through a structured JSON contract and rounds out the Windows release surface.
+
+### JSON CLI API
+
+- Added `cdx --json` to list known sessions as a machine-readable payload.
+- Added `--json` support for session-management commands: `add`, `cp`, `ren`, `rmv`, `clean`, `login`, and `logout`.
+- Added a shared success envelope for JSON responses with `ok`, `action`, `message`, and `warnings`.
+- Added a shared stderr error envelope for JSON mode with machine-readable `code`, `message`, and `exit_code`.
+- Documented the JSON contract in the README so editor plugins and desktop apps can integrate without scraping human-readable terminal output.
+
+### Windows release hardening
+
+- Added a native `install.ps1` installer for Windows.
+- Documented supported Windows install paths and the optional transcript-capture fallback.
+- Added targeted `win32` unit coverage for CLI startup, provider environment isolation, notifications, and session-store locking.
+- Added a Windows CI smoke flow that installs the package and exercises core CLI commands with shimmed providers.
+
+### Validation
+
+```bash
+npm run lint
+npm test
+npm_config_cache=/tmp/cdx-npm-cache npm pack --dry-run
+python3 logics/skills/logics.py lint --require-status
+```

package/changelogs/CHANGELOGS_0_4_0.md

@@ -0,0 +1,36 @@
+# CHANGELOGS_0_4_0
+
+Release date: 2026-04-16
+
+## CDX Manager 0.4.0
+
+CDX Manager 0.4.0 adds portable session backup and restore, surfaces cached release-update notices inside the CLI, and tightens Codex status isolation across multiple accounts.
+
+### Portable session bundles
+
+- Added `cdx export <file>` and `cdx import <file>` for moving sessions between machines.
+- Added optional encrypted auth export with `--include-auth` and interactive or environment-driven passphrase handling.
+- Added subset export/import support with `--sessions`.
+- Preserved per-session state alongside session records so imported environments keep their local metadata.
+- Added bundle schema validation and integrity checks during import.
+
+### Update awareness and installer hardening
+
+- Added cached GitHub release checks so the CLI can warn when a newer `cdx-manager` release is available without hitting the network on every command.
+- Surfaced update notices in interactive output and structured JSON warnings.
+- Hardened the standalone install scripts to consume official release-archive checksums when available.
+- Documented the checksum-backed installer flow and backup/restore usage in the README.
+
+### Status isolation fix
+
+- Fixed Codex status parsing so boxed blank lines in TUI transcripts no longer drop the `Account:` context line.
+- Restored account-aware status selection when multiple sessions contain similar `/status` blocks.
+- Added regression coverage for mixed-account transcript selection and bundle export/import flows.
+
+### Validation
+
+```bash
+npm run lint
+npm test
+python3 -m build --no-isolation
+```

package/checksums/release-archives.json

@@ -0,0 +1,9 @@
+{
+  "schema_version": 1,
+  "releases": {
+    "v0.3.4": {
+      "github_tarball_sha256": "8e8111d6ec41b819fc0249800f175b5741cd11b1439c7e88a3feec770774b12d",
+      "github_zip_sha256": "e0bd79f731d86b83787e99b8f2220c8c5fbaa3d7507ebc52823aa5b8d11f0666"
+    }
+  }
+}

package/install.ps1

@@ -0,0 +1,102 @@
+param(
+    [string]$Version = $env:CDX_VERSION,
+    [string]$Prefix = $env:CDX_PREFIX,
+    [string]$Sha256 = $env:CDX_SHA256,
+    [string]$ChecksumsUrl = $env:CDX_CHECKSUMS_URL
+)
+
+$ErrorActionPreference = "Stop"
+
+$repo = "AlexAgo83/cdx-manager"
+if (-not $ChecksumsUrl) {
+    $ChecksumsUrl = "https://raw.githubusercontent.com/$repo/main/checksums/release-archives.json"
+}
+
+function Require-Command {
+    param([string]$Name)
+    if (-not (Get-Command $Name -ErrorAction SilentlyContinue)) {
+        throw "cdx install: missing required command: $Name"
+    }
+}
+
+Require-Command python
+
+if (-not $Prefix) {
+    $Prefix = Join-Path $env:LOCALAPPDATA "cdx-manager"
+}
+
+$binDir = Join-Path $Prefix "bin"
+$installRoot = Join-Path $Prefix "versions"
+
+if (-not $Version) {
+    $release = Invoke-RestMethod -Uri "https://api.github.com/repos/$repo/releases/latest"
+    $Version = $release.tag_name
+}
+
+if ($Version.StartsWith("v")) {
+    $tag = $Version
+} else {
+    $tag = "v$Version"
+}
+
+$tmpRoot = Join-Path ([System.IO.Path]::GetTempPath()) ("cdx-install-" + [guid]::NewGuid().ToString("N"))
+$archivePath = Join-Path $tmpRoot "cdx-manager.zip"
+$extractRoot = Join-Path $tmpRoot "extract"
+$targetDir = Join-Path $installRoot $tag.TrimStart("v")
+$archiveUrl = "https://github.com/$repo/archive/refs/tags/$tag.zip"
+
+New-Item -ItemType Directory -Force -Path $tmpRoot, $extractRoot, $binDir, $installRoot | Out-Null
+
+try {
+    Invoke-WebRequest -Uri $archiveUrl -OutFile $archivePath
+    if (-not $Sha256) {
+        try {
+            $checksums = Invoke-RestMethod -Uri $ChecksumsUrl
+            $Sha256 = $checksums.releases.$tag.github_zip_sha256
+        } catch {
+        }
+    }
+    if ($Sha256) {
+        $actualSha256 = (Get-FileHash -Algorithm SHA256 -Path $archivePath).Hash.ToLowerInvariant()
+        if ($actualSha256 -ne $Sha256.ToLowerInvariant()) {
+            throw "cdx install: checksum mismatch for $tag`nexpected: $Sha256`nactual:   $actualSha256"
+        }
+    } else {
+        Write-Warning "No official checksum available for $tag; continuing without verification."
+    }
+    Expand-Archive -Path $archivePath -DestinationPath $extractRoot -Force
+
+    $sourceDir = Get-ChildItem -Path $extractRoot -Directory | Select-Object -First 1
+    if (-not $sourceDir) {
+        throw "cdx install: failed to extract release archive"
+    }
+
+    if (Test-Path $targetDir) {
+        Remove-Item -Recurse -Force $targetDir
+    }
+    New-Item -ItemType Directory -Force -Path $targetDir | Out-Null
+    Copy-Item -Path (Join-Path $sourceDir.FullName "*") -Destination $targetDir -Recurse -Force
+
+    $launcherPath = Join-Path $binDir "cdx.cmd"
+    $launcher = @"
+@echo off
+set SCRIPT=%~dp0..\versions\${($tag.TrimStart("v"))}\bin\cdx
+where py >nul 2>nul
+if %ERRORLEVEL%==0 (
+  py -3 "%SCRIPT%" %*
+  exit /b %ERRORLEVEL%
+)
+python "%SCRIPT%" %*
+"@
+    Set-Content -Path $launcherPath -Value $launcher -Encoding ascii
+
+    Write-Host "Installed cdx $tag to $targetDir"
+    Write-Host "Created launcher $launcherPath"
+    if (-not (($env:PATH -split ";") -contains $binDir)) {
+        Write-Warning "Add $binDir to PATH to run cdx from anywhere."
+    }
+} finally {
+    if (Test-Path $tmpRoot) {
+        Remove-Item -Recurse -Force $tmpRoot
+    }
+}

package/install.sh

@@ -6,6 +6,7 @@ VERSION="${CDX_VERSION:-}"
 PREFIX="${PREFIX:-$HOME/.local}"
 BIN_DIR="${BIN_DIR:-$PREFIX/bin}"
 INSTALL_ROOT="${CDX_INSTALL_ROOT:-$PREFIX/share/cdx-manager}"
+CHECKSUMS_URL="${CDX_CHECKSUMS_URL:-https://raw.githubusercontent.com/$REPO/main/checksums/release-archives.json}"
 
 need() {
   if ! command -v "$1" >/dev/null 2>&1; then
@@ -18,6 +19,38 @@ need curl
 need tar
 need python3
 
+sha256_file() {
+  if command -v sha256sum >/dev/null 2>&1; then
+    sha256sum "$1" | awk '{print $1}'
+    return
+  fi
+  if command -v shasum >/dev/null 2>&1; then
+    shasum -a 256 "$1" | awk '{print $1}'
+    return
+  fi
+  echo "cdx install: missing checksum tool (sha256sum or shasum)" >&2
+  exit 1
+}
+
+resolve_expected_sha256() {
+  curl -fsSL "$CHECKSUMS_URL" |
+    python3 - "$1" <<'PY'
+import json
+import sys
+
+tag = sys.argv[1]
+try:
+    payload = json.load(sys.stdin)
+except Exception:
+    raise SystemExit(1)
+
+release = (payload.get("releases") or {}).get(tag) or {}
+value = release.get("github_tarball_sha256")
+if value:
+    print(value)
+PY
+}
+
 if [ -z "$VERSION" ]; then
   VERSION="$(
     curl -fsSL "https://api.github.com/repos/$REPO/releases/latest" |
@@ -38,6 +71,24 @@ trap cleanup EXIT INT TERM
 
 ARCHIVE_URL="https://github.com/$REPO/archive/refs/tags/$TAG.tar.gz"
 curl -fsSL "$ARCHIVE_URL" -o "$TMP_DIR/cdx-manager.tar.gz"
+
+EXPECTED_SHA256="${CDX_SHA256:-}"
+if [ -z "$EXPECTED_SHA256" ]; then
+  EXPECTED_SHA256="$(resolve_expected_sha256 "$TAG" 2>/dev/null || true)"
+fi
+
+if [ -n "$EXPECTED_SHA256" ]; then
+  ACTUAL_SHA256="$(sha256_file "$TMP_DIR/cdx-manager.tar.gz")"
+  if [ "$ACTUAL_SHA256" != "$EXPECTED_SHA256" ]; then
+    echo "cdx install: checksum mismatch for $TAG" >&2
+    echo "expected: $EXPECTED_SHA256" >&2
+    echo "actual:   $ACTUAL_SHA256" >&2
+    exit 1
+  fi
+else
+  echo "cdx install: warning: no official checksum available for $TAG; continuing without verification" >&2
+fi
+
 tar -xzf "$TMP_DIR/cdx-manager.tar.gz" -C "$TMP_DIR"
 
 SRC_DIR="$(find "$TMP_DIR" -mindepth 1 -maxdepth 1 -type d | head -n 1)"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",
@@ -25,9 +25,11 @@
   },
   "files": [
     "bin",
+    "checksums",
     "changelogs",
     "src",
     "install.sh",
+    "install.ps1",
     "pyproject.toml",
     "README.md",
     "LICENSE"

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.3.3"
+version = "0.4.0"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"