cdx-manager 0.9.10 → 0.9.12

package/README.md

@@ -1,6 +1,6 @@
 # CDX Manager
 
-[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.9.10-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
+[![License](https://img.shields.io/badge/license-MIT-4C8BF5)](LICENSE) ![Version](https://img.shields.io/badge/version-v0.9.12-4C8BF5) ![Python](https://img.shields.io/badge/python-3.9%2B-3776AB?logo=python&logoColor=white)
 
 **Run multiple Codex, Claude, Antigravity, and Ollama sessions from one terminal. Switch between accounts instantly.**
 

package/changelogs/CHANGELOGS_0_9_11.md

@@ -0,0 +1,44 @@
+# CDX Manager 0.9.11
+
+## Highlights
+
+- Hardened transcript cleanup so captured handoff logs strip ANSI and control-sequence noise before reuse.
+- Broadened lint coverage with Ruff's bugbear rules and fixed the newly surfaced issues.
+- Split the CLI facade into dedicated argument and helper modules, reducing the size of the main command surface without changing user-facing commands.
+
+## Changes
+
+### Transcript and status reliability
+
+Script-captured transcripts now remove additional terminal control noise before they are parsed or copied into handoff context.
+
+Status and session helper internals also gained focused validation coverage for merge behavior, malformed records, and rate-limit parsing.
+
+### CLI maintainability
+
+The CLI command layer now reuses shared JSON, table, and parser helpers from extracted modules. The public CLI entrypoint remains stable, while tests can exercise smaller units directly.
+
+Shared OAuth token cleanup and JWT decoding helpers were deduplicated into the Claude usage path so provider status code uses the same parsing behavior in one place.
+
+### Validation coverage
+
+Ruff now checks a wider rule set, including bugbear rules, while keeping only deferred stylistic exceptions out of the release gate.
+
+New regression tests cover:
+
+- Codex rate-limit payload parsing
+- provider launch argument construction
+- session status merge and validation helpers
+- handoff transcript control-sequence cleanup
+
+## Validation
+
+- `npm run release:validate`
+- `npm run lint`
+- `npm test`
+- `logics-manager lint --require-status`
+- `logics-manager audit`
+- `git diff --check`
+- `npm --cache /private/tmp/cdx-npm-cache pack --dry-run`
+- `python -m build`
+- `python -m twine check dist/*`

package/changelogs/CHANGELOGS_0_9_12.md

@@ -0,0 +1,36 @@
+# CDX Manager 0.9.12
+
+## Highlights
+
+- Prevented accidental concurrent launches that reuse the same provider profile and can invalidate shared OAuth credentials.
+- Made Claude add/login prefer `claude setup-token` so new Claude sessions use the long-lived token flow by default.
+
+## Changes
+
+### Session launch safety
+
+`cdx` now detects when another live session already uses the same provider profile before launching a new one.
+
+On an interactive terminal, the CLI asks for confirmation before starting the second session. In non-interactive contexts, the launch fails with a clear message so automation does not silently create conflicting sessions.
+
+This protects profiles that share one credentials file, where concurrent token refreshes can rotate credentials and log out the other session.
+
+### Claude token setup
+
+Claude add and login flows now route through `claude setup-token` by default, which produces a longer-lived token than the standard login flow.
+
+When this setup-token flow succeeds, stale Claude credentials are removed so the newly configured token is the one used at launch. The existing `--setup-token` flag remains accepted for compatibility.
+
+Regression coverage verifies the default Claude setup-token behavior, stale credential cleanup, and compatibility of the retained flag.
+
+## Validation
+
+- `npm run release:validate`
+- `npm run lint`
+- `npm test`
+- `logics-manager lint --require-status`
+- `logics-manager audit`
+- `git diff --check`
+- `npm --cache /private/tmp/cdx-npm-cache pack --dry-run`
+- `python -m build`
+- `python -m twine check dist/*`

package/checksums/release-archives.json

@@ -104,6 +104,14 @@
     "v0.9.9": {
       "github_tarball_sha256": "092c564803dd9a674250040ac308055de3701aa993237f257676403c24eb1318",
       "github_zip_sha256": "0fbd8de7a97cde5aef14f23036def2e34dd690c2aa78ef93ddfeef0bb3e9547b"
+    },
+    "v0.9.10": {
+      "github_tarball_sha256": "4e876d3552eca1b441492a36606f2f0583bff9523801a923d834fe2a4da3c644",
+      "github_zip_sha256": "b6c9435f7e36558ac8698dbd6d6c4888e58c64a08d2b06c3bcbb45ce2cd25f7c"
+    },
+    "v0.9.11": {
+      "github_tarball_sha256": "8ab8f673af4ad9c0e4fd64110d47285a1de02c095fd0f6d79eb67e061255093d",
+      "github_zip_sha256": "ee5fffa543b8a02c082a180c624d31951c5ff662d492132cd83d4f099da70441"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdx-manager",
-  "version": "0.9.10",
+  "version": "0.9.12",
   "description": "Terminal session manager for Codex and Claude accounts.",
   "license": "MIT",
   "author": "Alexandre Agostini",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cdx-manager"
-version = "0.9.10"
+version = "0.9.12"
 description = "Terminal session manager for Codex and Claude accounts."
 readme = "README.md"
 requires-python = ">=3.9"
@@ -67,4 +67,7 @@ target-version = "py39"
 line-length = 140
 
 [tool.ruff.lint]
-select = ["E9", "F63", "F7", "F82"]
+select = ["E", "F", "W", "I", "UP", "B"]
+# Deferred / stylistic-only: E501 (140-col overflows), E741/E731 naming & lambda
+# style. Not chasing these now; logic-catching rules (F, bugbear B) stay on.
+ignore = ["E501", "E741", "E731"]

package/src/backup_bundle.py

@@ -7,7 +7,6 @@ from datetime import datetime, timezone
 
 from .errors import CdxError
 
-
 BUNDLE_SCHEMA_VERSION = 1
 _SALT_BYTES = 16
 _NONCE_BYTES = 16

package/src/claude_usage.py

@@ -1,10 +1,11 @@
+import base64
 import json
 import os
 import re
 import subprocess
 import sys
-import urllib.request
 import urllib.error
+import urllib.request
 from datetime import datetime, timezone
 
 from .errors import CdxError
@@ -28,10 +29,25 @@ def _clean_oauth_token(token):
     return text
 
 
+def _decode_jwt_claims(token):
+    if not token or "." not in str(token):
+        return {}
+    parts = str(token).split(".")
+    if len(parts) < 2:
+        return {}
+    payload = parts[1]
+    padding = "=" * (-len(payload) % 4)
+    try:
+        decoded = base64.urlsafe_b64decode(payload + padding)
+        return json.loads(decoded.decode("utf-8"))
+    except (ValueError, json.JSONDecodeError, UnicodeDecodeError):
+        return {}
+
+
 def _read_claude_credentials(auth_home):
     cred_path = os.path.join(auth_home, ".claude", ".credentials.json")
     try:
-        with open(cred_path, "r", encoding="utf-8") as f:
+        with open(cred_path, encoding="utf-8") as f:
             data = json.load(f)
         creds = data.get("claudeAiOauth") if isinstance(data, dict) else None
         token = _clean_oauth_token(creds.get("accessToken")) if isinstance(creds, dict) else None
@@ -42,7 +58,7 @@ def _read_claude_credentials(auth_home):
 
     anthropic_cred_path = os.path.join(auth_home, "credentials", "default.json")
     try:
-        with open(anthropic_cred_path, "r", encoding="utf-8") as f:
+        with open(anthropic_cred_path, encoding="utf-8") as f:
             data = json.load(f)
         token = _clean_oauth_token(data.get("access_token") if isinstance(data, dict) else None)
         if token:

package/src/cli.py

@@ -8,38 +8,38 @@ from .cli_commands import (
     API_SCHEMA_VERSION,
     STATUS_USAGE,
     handle_add,
+    handle_can_resume,
     handle_clean,
     handle_config,
     handle_configs,
-    handle_can_resume,
     handle_context,
     handle_copy,
-    handle_doctor,
     handle_disable,
+    handle_doctor,
     handle_enable,
     handle_export,
-    handle_import,
     handle_handoff,
     handle_history,
+    handle_import,
     handle_last,
     handle_launch,
+    handle_launch_setting_alias,
     handle_login,
     handle_logout,
-    handle_launch_setting_alias,
-    handle_notify,
     handle_next,
+    handle_notify,
     handle_remove,
-    handle_repair,
     handle_rename,
+    handle_repair,
     handle_resume,
     handle_run,
     handle_run_report,
     handle_run_status,
     handle_runs,
     handle_select,
+    handle_set,
     handle_stats,
     handle_status,
-    handle_set,
     handle_unset,
     handle_update,
     handle_view,
@@ -66,7 +66,25 @@ from .status_view import (
 )
 from .update_check import check_for_update, check_logics_manager_for_update
 
-VERSION = "0.9.10"
+VERSION = "0.9.12"
+
+# Public surface: this module is a facade. Names below are imported above
+# purely to be re-exported (consumed by tests and external callers); listing
+# them here documents that and stops F401 from treating them as dead imports.
+__all__ = [
+    "STATUS_USAGE",
+    "LOG_ROTATE_BYTES",
+    "_format_blocking_quota",
+    "_format_reset_time",
+    "_format_status_detail",
+    "_format_status_rows",
+    "_pad_table",
+    "_rotate_log_if_needed",
+    "_visible_len",
+    "cli_entry",
+    "format_json_error",
+    "main",
+]
 
 
 _COMMAND_HANDLERS = {
@@ -427,7 +445,7 @@ def cli_entry():
             sys.stderr.write(f"{format_json_error(error)}\n")
         else:
             sys.stderr.write(f"{format_error(error)}\n")
-        raise SystemExit(error.exit_code)
+        raise SystemExit(error.exit_code) from None
 
 
 if __name__ == "__main__":