codex-multi-auth 2.17.3 → 2.19.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-	"version": "2.17.3",
+	"version": "2.19.0",
   "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
   "interface": {
     "composerIcon": "./assets/codex-multi-auth-icon.svg"

package/README.md

@@ -5,10 +5,14 @@
 [![CI](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml/badge.svg)](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml)
 [![MIT license](https://img.shields.io/npm/l/codex-multi-auth.svg)](LICENSE)
 
+<img width="1270" height="729" alt="codex-multi-auth terminal dashboard for Codex CLI multi-account OAuth account status" src="https://github.com/user-attachments/assets/0cecb77e-a6d3-432a-ba48-3577db0c7093" />
+
 `codex-multi-auth` is a multi-account OAuth manager for the official `@openai/codex` CLI. It keeps a named pool of ChatGPT sign-ins on your machine, lets you switch the active account, and — when you run Codex through its optional wrapper — rotates accounts across live requests through a loopback-only proxy. It never installs or shadows a `codex` binary; the official OpenAI install keeps owning that command.
 
 Use it when one Codex account is not enough: you hit rate limits or quota windows, you split work across organizations and workspaces, you want per-project account pools, or you run unattended agents that need JSON diagnostics and safe repair commands instead of one opaque auth file.
 
+Using OpenCode rather than the Codex CLI? The sibling project [`oc-codex-multi-auth`](https://github.com/ndycode/oc-codex-multi-auth) is the plugin that manages the same kind of account pool there.
+
 ## What it does
 
 - **Account pool** — OAuth login for multiple ChatGPT accounts, stored locally under `~/.codex/multi-auth` (files `0600`, directories `0700`), with per-project pools under `projects/<project-key>/`.
@@ -71,7 +75,7 @@ mcodex                          # same wrapper, shorter name
 | Accounts | `login`, `list`, `status`, `switch <i>`, `unpin`, `workspace` | sign in, inspect the pool, pin or switch the active account, pick workspaces |
 | Selection | `forecast`, `best`, `why-selected`, `check`, `limits`, `models` | preview, explain, and probe which account serves the next request |
 | Runtime | `rotation status` `enable` `disable` `bind-app` `unbind-app` `reset-runtime` `reset-rate-limits` | inspect and control live rotation and the app bind |
-| Repair | `fix`, `doctor`, `verify`, `verify-flagged`, `uninstall` | diagnose and repair storage, flagged accounts, and install residue |
+| Repair | `fix`, `doctor`, `report`, `verify`, `verify-flagged`, `uninstall` | diagnose and repair storage, flagged accounts, and install residue; machine-readable health report |
 | Governance | `usage`, `budget`, `account`, `monitor`, `history`, `resets` | usage ledger, budget limits, tags/weights/pause/drain, snapshots |
 | Local clients | `bridge`, `integrations` | bearer tokens and client snippets for the loopback bridge |
 | Config | `config explain` `template`, `init-config`, `debug bundle`, `features` | effective-config report, config templates, sanitized debug bundle |
@@ -81,7 +85,7 @@ Everyday examples:
 ```bash
 codex-multi-auth switch 2                     # pin account #2
 codex-multi-auth report --live --json         # full machine-readable health report
-codex-multi-auth fix --live --model gpt-5.5   # live repair probes with a chosen model
+codex-multi-auth fix --live --model gpt-6.1-sol   # live repair probes with a chosen model
 codex-multi-auth doctor --fix                 # diagnose and apply the safest fixes
 codex-multi-auth usage --since 24h --by model # local usage ledger summary
 codex-multi-auth rotation status              # is live rotation enabled?
@@ -89,7 +93,7 @@ codex-multi-auth rotation status              # is live rotation enabled?
 
 ## Runtime rotation, in one paragraph
 
-With rotation on (the default), request-bearing wrapper commands — `exec`, `review`, `resume`, `fork`, `app`, and the bare TUI — route through a local proxy that picks the healthiest account per request, refreshes tokens as needed, and fails over across the pool on rate limits within a bounded retry budget. The proxy listens on loopback only, authenticates its own clients with a per-process token, forwards only Responses API and model-discovery calls, and never writes account emails or tokens to client headers or logs. Plain `codex` is never touched: rotation exists only inside `codex-multi-auth-codex`/`mcodex` sessions, or inside the packaged desktop app after an opt-in, reversible bind. Turn it off with `codex-multi-auth rotation disable` or `CODEX_MULTI_AUTH_RUNTIME_ROTATION_PROXY=0`.
+With rotation on (the default), request-bearing wrapper commands — `exec`, `review`, `resume`, `fork`, `app`, and the bare TUI — route through a local proxy that picks the healthiest account per request, refreshes tokens as needed, and fails over across the pool on rate limits within a bounded retry budget. The proxy listens on loopback only, authenticates its own clients with a per-process token, forwards only Responses API, model-discovery, image, and thread-goal calls, and never writes account emails or tokens to client headers or logs. Plain `codex` is never touched: rotation exists only inside `codex-multi-auth-codex`/`mcodex` sessions, or inside the packaged desktop app after an opt-in, reversible bind. Turn it off with `codex-multi-auth rotation disable` or `CODEX_MULTI_AUTH_RUNTIME_ROTATION_PROXY=0`.
 
 ## Where state lives
 
@@ -128,10 +132,12 @@ Common symptoms — wrong active account, OAuth callback port `1455` already bou
 | [docs/faq.md](docs/faq.md) | Common questions |
 | [docs/upgrade.md](docs/upgrade.md) | Version and legacy-package migration |
 | [docs/privacy.md](docs/privacy.md) | Data handling and local storage behavior |
+| [config/README.md](config/README.md) | Modern vs. legacy catalog templates |
+| [CHANGELOG.md](CHANGELOG.md) | Release history (short version) |
 
 ## Release notes
 
-- Current stable: [v2.17.3](docs/releases/v2.17.3.md) — `npm i -g codex-multi-auth`
+- Current stable: [v2.19.0](docs/releases/v2.19.0.md) — `npm i -g codex-multi-auth`
 - Earlier stable lines: [v2.6.0](docs/releases/v2.6.0.md), [v2.5.0](docs/releases/v2.5.0.md)
 - Full release archive: [docs/README.md#release-history](docs/README.md#release-history)
 

package/config/README.md

@@ -17,7 +17,7 @@ These files are optional model/provider templates for host/plugin configurations
 
 ## Defaults Included
 
-- Current documented OpenAI/Codex model families: GPT-6 Astra (`gpt-6-astra`, `gpt-6-astra-aeon`), GPT-6 Sol (`gpt-6-sol`) and GPT-6 Luna (`gpt-6-luna`), then `gpt-5.6-sol`/`terra`/`luna`, `gpt-5.5` and `gpt-5.5-pro`. Retired models (`gpt-5.4*`, `gpt-5.3-codex` and older) were removed; their ids still resolve to a replacement, see `docs/configuration.md`
+- Current documented OpenAI/Codex model families: GPT-6.1 Sol (`gpt-6.1-sol`, the default), GPT-6 Astra (`gpt-6-astra`), GPT-6 Sol (`gpt-6-sol`) and GPT-6 Luna (`gpt-6-luna`), then `gpt-5.6-sol`/`terra`/`luna`. Retired models (`gpt-5.5`/`gpt-5.5-pro`, `gpt-5.4*`, `gpt-5.3-codex` and older, plus the leaked `gpt-6-astra-aeon` slug) were removed from the picker; their ids still resolve to a replacement, see `docs/configuration.md`
 - The GPT-6 entries carry `limit.context: 272000`, the `context_window` in the upstream Codex catalog. The GPT-5.6 entries still carry the pre-cut `372000` and were left alone here; change them only alongside a deliberate review, since the value feeds a picker rather than the context budget guard (which refuses to estimate either family)
 - The Daybreak cyber models resolve at the code level but are deliberately absent from these templates, matching their hidden visibility in the upstream Codex picker
 - `store: false`

package/config/codex-legacy.json

@@ -165,8 +165,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-low": {
-          "name": "GPT 6 Astra Aeon Low (OAuth)",
+        "gpt-6.1-sol-low": {
+          "name": "GPT 6.1 Sol Low (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -190,8 +190,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-medium": {
-          "name": "GPT 6 Astra Aeon Medium (OAuth)",
+        "gpt-6.1-sol-medium": {
+          "name": "GPT 6.1 Sol Medium (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -215,8 +215,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-high": {
-          "name": "GPT 6 Astra Aeon High (OAuth)",
+        "gpt-6.1-sol-high": {
+          "name": "GPT 6.1 Sol High (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -240,8 +240,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-xhigh": {
-          "name": "GPT 6 Astra Aeon Extra High (OAuth)",
+        "gpt-6.1-sol-xhigh": {
+          "name": "GPT 6.1 Sol Xhigh (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -265,8 +265,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-max": {
-          "name": "GPT 6 Astra Aeon Max (OAuth)",
+        "gpt-6.1-sol-max": {
+          "name": "GPT 6.1 Sol Max (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -290,8 +290,8 @@
             "store": false
           }
         },
-        "gpt-6-astra-aeon-ultra": {
-          "name": "GPT 6 Astra Aeon Ultra (OAuth)",
+        "gpt-6.1-sol-ultra": {
+          "name": "GPT 6.1 Sol Ultra (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -1014,206 +1014,6 @@
             ],
             "store": false
           }
-        },
-        "gpt-5.5-none": {
-          "name": "GPT 5.5 None (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "none",
-            "reasoningSummary": "auto",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-low": {
-          "name": "GPT 5.5 Low (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "low",
-            "reasoningSummary": "auto",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-medium": {
-          "name": "GPT 5.5 Medium (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "medium",
-            "reasoningSummary": "auto",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-high": {
-          "name": "GPT 5.5 High (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "high",
-            "reasoningSummary": "detailed",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-xhigh": {
-          "name": "GPT 5.5 Extra High (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "xhigh",
-            "reasoningSummary": "detailed",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-pro-medium": {
-          "name": "GPT 5.5 Pro Medium (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "medium",
-            "reasoningSummary": "detailed",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-pro-high": {
-          "name": "GPT 5.5 Pro High (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "high",
-            "reasoningSummary": "detailed",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
-        },
-        "gpt-5.5-pro-xhigh": {
-          "name": "GPT 5.5 Pro Extra High (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "options": {
-            "reasoningEffort": "xhigh",
-            "reasoningSummary": "detailed",
-            "textVerbosity": "medium",
-            "include": [
-              "reasoning.encrypted_content"
-            ],
-            "store": false
-          }
         }
       }
     }

package/config/codex-modern.json

@@ -15,8 +15,8 @@
         "store": false
       },
       "models": {
-        "gpt-6-astra": {
-          "name": "GPT 6 Astra (OAuth)",
+        "gpt-6.1-sol": {
+          "name": "GPT 6.1 Sol (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -63,8 +63,8 @@
             }
           }
         },
-        "gpt-6-astra-aeon": {
-          "name": "GPT 6 Astra Aeon (OAuth)",
+        "gpt-6-astra": {
+          "name": "GPT 6 Astra (OAuth)",
           "limit": {
             "context": 272000,
             "output": 128000
@@ -340,82 +340,6 @@
               "textVerbosity": "medium"
             }
           }
-        },
-        "gpt-5.5": {
-          "name": "GPT 5.5 (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "variants": {
-            "none": {
-              "reasoningEffort": "none",
-              "reasoningSummary": "auto",
-              "textVerbosity": "medium"
-            },
-            "low": {
-              "reasoningEffort": "low",
-              "reasoningSummary": "auto",
-              "textVerbosity": "medium"
-            },
-            "medium": {
-              "reasoningEffort": "medium",
-              "reasoningSummary": "auto",
-              "textVerbosity": "medium"
-            },
-            "high": {
-              "reasoningEffort": "high",
-              "reasoningSummary": "detailed",
-              "textVerbosity": "medium"
-            },
-            "xhigh": {
-              "reasoningEffort": "xhigh",
-              "reasoningSummary": "detailed",
-              "textVerbosity": "medium"
-            }
-          }
-        },
-        "gpt-5.5-pro": {
-          "name": "GPT 5.5 Pro (OAuth)",
-          "limit": {
-            "context": 272000,
-            "output": 128000
-          },
-          "modalities": {
-            "input": [
-              "text",
-              "image"
-            ],
-            "output": [
-              "text"
-            ]
-          },
-          "variants": {
-            "medium": {
-              "reasoningEffort": "medium",
-              "reasoningSummary": "detailed",
-              "textVerbosity": "medium"
-            },
-            "high": {
-              "reasoningEffort": "high",
-              "reasoningSummary": "detailed",
-              "textVerbosity": "medium"
-            },
-            "xhigh": {
-              "reasoningEffort": "xhigh",
-              "reasoningSummary": "detailed",
-              "textVerbosity": "medium"
-            }
-          }
         }
       }
     }

package/config/minimal-codex.json

@@ -9,7 +9,7 @@
       }
     }
   },
-  "model": "openai/gpt-5.3-codex"
+  "model": "openai/gpt-5.6-sol"
 }
 
 

package/dist/lib/account-policy.d.ts

@@ -20,7 +20,9 @@ export declare function getAccountPolicyPath(): string;
 export declare function getAccountPolicyKey(account: Pick<AccountMetadataV3, "accountId" | "email"> & {
     refreshToken?: string | null;
 }, _index?: number): string;
-export declare function loadAccountPolicyStore(): Promise<AccountPolicyStore>;
+export declare function loadAccountPolicyStore(options?: {
+    strict?: boolean;
+}): Promise<AccountPolicyStore>;
 export declare function saveAccountPolicyStore(store: AccountPolicyStore, baseline?: AccountPolicyStore): Promise<void>;
 /**
  * Run a policy-store read→mutate→write inside the write queue (in-process

package/dist/lib/account-policy.js

@@ -1,5 +1,5 @@
 import { createHash } from "node:crypto";
-import { existsSync, promises as fs } from "node:fs";
+import { promises as fs } from "node:fs";
 import { basename, join } from "node:path";
 import { logWarn } from "./logger.js";
 import { getCodexMultiAuthDir } from "./runtime-paths.js";
@@ -100,14 +100,30 @@ export function getAccountPolicyKey(account, _index) {
         (refreshFallback ? `refresh:${refreshFallback}` : "unknown");
     return `sha256:${createHash("sha256").update(identity).digest("hex")}`;
 }
-export async function loadAccountPolicyStore() {
+export async function loadAccountPolicyStore(options = {}) {
     const path = getAccountPolicyPath();
-    if (!existsSync(path))
-        return emptyStore();
     try {
-        return normalizeStore(JSON.parse(await readFileWithRetry(path)));
+        const parsed = JSON.parse(await readFileWithRetry(path));
+        if (options.strict) {
+            if (!isRecord(parsed) || parsed.version !== 1 || !isRecord(parsed.accounts)) {
+                throw new Error("Invalid account policy store");
+            }
+            for (const [key, row] of Object.entries(parsed.accounts)) {
+                if (!key.startsWith("sha256:"))
+                    continue;
+                // Legacy rows may omit flags; explicit malformed values are not OFF.
+                if (!isRecord(row) || ["autoPrime", "paused", "drained"].some(flag => flag in row && typeof row[flag] !== "boolean")) {
+                    throw new Error("Invalid account policy row");
+                }
+            }
+        }
+        return normalizeStore(parsed);
     }
     catch (error) {
+        if (error.code === "ENOENT")
+            return emptyStore();
+        if (options.strict)
+            throw error;
         logWarn(`Failed to load account policies from ${basename(path)}: ${error instanceof Error ? error.message : String(error)}`);
         return emptyStore();
     }

package/dist/lib/codex-manager/commands/history.js

@@ -107,7 +107,9 @@ function parseRollout(rolloutPath, deps, previewLimit) {
         if (typeof record.timestamp === "string") {
             updatedAt = record.timestamp;
         }
-        if (record.type === "session_meta") {
+        // Forked rollouts append the parent's session_meta after their own, so
+        // only the first one describes this rollout.
+        if (record.type === "session_meta" && !hasSessionMeta) {
             const payload = record.payload;
             const metaId = readStringField(payload, "id");
             if (metaId)

package/dist/lib/codex-manager/commands/status.js

@@ -1,3 +1,4 @@
+import { subscriptionStatus, formatSubscriptionStatus } from "../formatters/subscription-status.js";
 import { resetSnapshotQuota } from "../../runtime/reset-credits.js";
 import { resetTargetForStoredAccount } from "../../runtime/account-reset-credits.js";
 import { subscriptionQuotaPreference, compareSubscriptionQuota, usesSubscriptionReserve, SUBSCRIPTION_RESERVE_PERCENT } from "../../runtime/subscription-quota-order.js";
@@ -87,7 +88,8 @@ export async function runStatusCommand(deps) {
     const modelInventory = await deps.loadModelInventory?.();
     const resetCredits = await deps.loadResetCreditState?.().catch(() => null);
     const resetSnapshot = (account) => { const target = resetTargetForStoredAccount(account); return target ? resetCredits?.snapshots[target.key] : undefined; };
-    const accountPolicies = await (deps.loadAccountPolicies ?? loadAccountPolicyStore)().catch(() => ({ version: 1, accounts: {} }));
+    let policiesUnavailable = false;
+    const accountPolicies = await (deps.loadAccountPolicies ?? loadAccountPolicyStore)({ strict: true }).catch(() => { policiesUnavailable = true; return { version: 1, accounts: {} }; });
     if (!deps.json && deps.loadModelInventory)
         for (const line of formatModelInventory(modelInventory ?? null))
             logInfo(line);
@@ -136,6 +138,7 @@ export async function runStatusCommand(deps) {
     const now = deps.getNow?.() ?? Date.now();
     const activeIndex = storage.accounts.length ? deps.resolveActiveIndex(storage, "codex") : -1;
     const quotaCache = await deps.loadQuotaCache?.() ?? null;
+    const subscriptionStatuses = storage.accounts.map(account => subscriptionStatus(account, findQuotaCacheEntryForAccount(quotaCache, account, storage.accounts), policiesUnavailable ? undefined : accountPolicies.accounts[getAccountPolicyKey(account)] ?? {}, now));
     const forecastQuotas = storage.accounts.map(account => {
         const cached = findQuotaCacheEntryForAccount(quotaCache, account, storage.accounts);
         const reset = resetSnapshot(account);
@@ -217,6 +220,7 @@ export async function runStatusCommand(deps) {
             const markers = buildAccountMarkers(account, i, activeIndex, runtimeCurrent, now, quotaCache, storage.accounts, deps.formatRateLimitEntry);
             return {
                 index: i,
+                subscription: subscriptionStatuses[i],
                 resetCreditsAvailable: resetSnapshot(account)?.availableCount ?? null,
                 resetCreditsCheckedAt: resetSnapshot(account)?.updatedAt ?? null,
                 label: formatAccountLabel(account, i),
@@ -335,8 +339,9 @@ export async function runStatusCommand(deps) {
             : `inference not yet recorded; ${activity}`;
         logInfo(`${paint(`${i + 1}. ${label}`, "heading")}${paint(markerLabel, markers.some(m => /disabled|cooldown|exhausted|limited|invalid/.test(m)) ? "warning" : "success")} ${paint(lastUsed, "muted")}`);
         logInfo(`   ${paint(`priority tier: ${accountPolicies.accounts[getAccountPolicyKey(account, i)]?.priority ?? 1}`, "accent")}`);
-        if (accountPolicies.accounts[getAccountPolicyKey(account, i)]?.autoPrime)
-            logInfo("   automatic first-use priming: on (router checks every 15 minutes)");
+        const subscription = subscriptionStatuses[i];
+        if (subscription)
+            logInfo(`   ${formatSubscriptionStatus(subscription)}`);
         if (appBindStatus?.nativeOpenai) {
             const preference = quotaPreferences[i];
             const order = automaticOrder.get(i);

package/dist/lib/codex-manager/formatters/subscription-status.d.ts

@@ -0,0 +1,16 @@
+import type { AccountPolicy } from "../../account-policy.js";
+import type { QuotaCacheEntry } from "../../quota-cache.js";
+import type { AccountMetadataV3 } from "../../storage.js";
+/** Display only observed evidence; never age a placeholder into a running timer. */
+export declare function subscriptionStatus(account: AccountMetadataV3, entry: QuotaCacheEntry | null, policy: Partial<AccountPolicy> | undefined, now: number): {
+    planType: string | null;
+    planLabel: string;
+    selectedWorkspace: string;
+    autoPrime: boolean | null;
+    primingState: "failed" | "unknown" | "awaiting-first-use" | "timer-running" | "used" | "completed" | "not-applicable";
+    primingFailure: "timed out" | "stream ended early" | "upstream failed" | "response too large" | "network error" | null;
+    automaticBlock: string | null;
+    freshness: string;
+    observedAt: number | null;
+};
+export declare function formatSubscriptionStatus(value: ReturnType<typeof subscriptionStatus>): string;

package/dist/lib/codex-manager/formatters/subscription-status.js

@@ -0,0 +1,69 @@
+import { needsSubscriptionFirstUse } from "../../runtime/subscription-first-use.js";
+const PLAN_LABELS = new Map([
+    ["free", "Free"], ["plus", "Plus"], ["pro", "Pro 200"],
+    ["prolite", "Pro 100"], ["promax", "Pro 500"], ["team", "Business"],
+    ["business", "Business"], ["enterprise", "Enterprise"], ["edu", "Edu"],
+]);
+const STATE_LABELS = {
+    unknown: "Priming status unknown",
+    "awaiting-first-use": "Awaiting first use",
+    "timer-running": "Reset timer running",
+    used: "Usage recorded",
+    completed: "First-use completed; timer not yet verified",
+    failed: "Priming failed",
+    "not-applicable": "Priming not applicable",
+};
+/** Display only observed evidence; never age a placeholder into a running timer. */
+export function subscriptionStatus(account, entry, policy, now) {
+    const workspace = account.workspaces?.[account.currentWorkspaceIndex ?? 0];
+    const selectedWorkspace = workspace
+        ? workspace.name?.replace(/\s*\(role:.*$|\s*\[id:.*$/g, "").trim() || "Unnamed workspace"
+        : account.workspaces?.length ? "Invalid workspace selection" : "Stored binding (workspace unknown)";
+    const freshness = !entry ? "missing"
+        : entry.updatedAt > now || now - entry.updatedAt > 30 * 60000 ? "stale" : "fresh";
+    const planType = entry?.planType?.trim().toLowerCase() ?? null;
+    const planLabel = PLAN_LABELS.get(planType ?? "") ?? "Unknown plan";
+    let primingState = "unknown";
+    if (entry && freshness === "fresh" && entry.status === 200) {
+        const windows = [entry.primary, entry.secondary].filter(w => w.windowMinutes !== 0);
+        if (!planType || !PLAN_LABELS.has(planType))
+            primingState = "unknown";
+        else if (!["plus", "pro", "prolite", "promax"].includes(planType))
+            primingState = "not-applicable";
+        else if (entry.primingFailure)
+            primingState = "failed";
+        else if (entry.primingCompleted)
+            primingState = "completed";
+        else if (windows.some(w => typeof w.usedPercent === "number" && w.usedPercent > 0)) {
+            primingState = "used";
+        }
+        else if (windows.some(w => typeof w.windowMinutes === "number" && w.windowMinutes > 0 &&
+            typeof w.resetAtMs === "number" && w.resetAtMs > now &&
+            w.resetAtMs - entry.updatedAt < w.windowMinutes * 60000 - 2000)) {
+            primingState = "timer-running";
+        }
+        else if (needsSubscriptionFirstUse(entry, entry.updatedAt)) {
+            primingState = "awaiting-first-use";
+        }
+    }
+    const automaticBlock = account.enabled === false ? "account disabled"
+        : account.authInvalidatedAt ? "sign-in required"
+            : policy?.paused ? "paused"
+                : policy?.drained ? "drained"
+                    : (account.coolingDownUntil ?? 0) > now ? "cooling down"
+                        : account.workspaces?.length && (!workspace || workspace.enabled === false) ? "workspace unavailable"
+                            : null;
+    return {
+        planType, planLabel, selectedWorkspace,
+        autoPrime: policy ? policy.autoPrime === true : null,
+        primingState, primingFailure: entry?.primingFailure ?? null,
+        automaticBlock, freshness, observedAt: entry?.updatedAt ?? null,
+    };
+}
+export function formatSubscriptionStatus(value) {
+    const freshness = value.freshness === "stale" ? " (stale; run check accounts)"
+        : value.freshness === "missing" ? " (not observed)" : "";
+    const autoPrime = value.autoPrime === null ? "unknown" : value.autoPrime ? "ON" : "OFF";
+    const block = value.automaticBlock ? `; blocked: ${value.automaticBlock}` : "";
+    return `${value.selectedWorkspace} · ${value.planLabel}${freshness} · Auto-prime ${autoPrime} · ${STATE_LABELS[value.primingState]}${block}`;
+}