codex-multi-auth 2.19.0 → 2.20.0

package/.codex-plugin/plugin.json

@@ -1,9 +1,9 @@
-{
-  "name": "codex-multi-auth",
-	"version": "2.19.0",
-  "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
-  "interface": {
-    "composerIcon": "./assets/codex-multi-auth-icon.svg"
-  },
-  "skills": "./skills/"
-}
+{
+  "name": "codex-multi-auth",
+	"version": "2.20.0",
+  "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
+  "interface": {
+    "composerIcon": "./assets/codex-multi-auth-icon.svg"
+  },
+  "skills": "./skills/"
+}

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 ndycode
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 ndycode
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,148 +1,149 @@
-# codex-multi-auth
-
-[![npm version](https://img.shields.io/npm/v/codex-multi-auth.svg)](https://www.npmjs.com/package/codex-multi-auth)
-[![npm downloads](https://img.shields.io/npm/dw/codex-multi-auth.svg)](https://www.npmjs.com/package/codex-multi-auth)
-[![CI](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml/badge.svg)](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml)
-[![MIT license](https://img.shields.io/npm/l/codex-multi-auth.svg)](LICENSE)
-
-<img width="1270" height="729" alt="codex-multi-auth terminal dashboard for Codex CLI multi-account OAuth account status" src="https://github.com/user-attachments/assets/0cecb77e-a6d3-432a-ba48-3577db0c7093" />
-
-`codex-multi-auth` is a multi-account OAuth manager for the official `@openai/codex` CLI. It keeps a named pool of ChatGPT sign-ins on your machine, lets you switch the active account, and — when you run Codex through its optional wrapper — rotates accounts across live requests through a loopback-only proxy. It never installs or shadows a `codex` binary; the official OpenAI install keeps owning that command.
-
-Use it when one Codex account is not enough: you hit rate limits or quota windows, you split work across organizations and workspaces, you want per-project account pools, or you run unattended agents that need JSON diagnostics and safe repair commands instead of one opaque auth file.
-
-Using OpenCode rather than the Codex CLI? The sibling project [`oc-codex-multi-auth`](https://github.com/ndycode/oc-codex-multi-auth) is the plugin that manages the same kind of account pool there.
-
-## What it does
-
-- **Account pool** — OAuth login for multiple ChatGPT accounts, stored locally under `~/.codex/multi-auth` (files `0600`, directories `0700`), with per-project pools under `projects/<project-key>/`.
-- **Switching and selection** — pin an account, pick the forecast-best one, or let health- and quota-aware hybrid selection rotate for you.
-- **Runtime rotation** — a default-on, loopback-only proxy that forwards Responses API and model-discovery traffic through the best available account during wrapper-launched Codex sessions.
-- **Diagnostics and repair** — status, live health checks, quota forecasts, JSON reports, and `fix`/`doctor`/`verify` commands that recover stale or damaged local state.
-- **Local governance** — file-backed usage ledger, budget guards, account tags/weights/pause/drain policies, routing profiles, and an optional loopback bridge with bearer tokens for local OpenAI-compatible clients.
-- **Desktop routing (optional)** — a reversible bind of the packaged Codex app plus user-level launcher helpers; official app binaries are never patched.
-
-## The four binaries
-
-| Binary | Role |
-| --- | --- |
-| `codex-multi-auth` | The account manager. Runs all 31 management subcommands locally (`login`, `status`, `switch`, `forecast`, `rotation`, `fix`, ...). The `auth` prefix is optional: `codex-multi-auth login` ≡ `codex-multi-auth auth login`. |
-| `codex-multi-auth-codex` | Opt-in wrapper. Handles `auth ...` locally and forwards every other command to the official Codex CLI, enabling the rotation proxy for request-bearing commands. |
-| `mcodex` | Convenience launcher over the wrapper, with optional `--monitor` and `--tmux` modes. No account logic of its own. |
-| `codex-multi-auth-app-launcher` | User-level OS launcher routing helper (Windows shortcut, macOS wrapper app, Linux `.desktop`). |
-
-## Install
-
-Requirements: Node.js >= 18.17, and the official Codex CLI on `PATH` (`npm i -g @openai/codex`, Homebrew, or a release binary).
-
-```bash
-npm i -g codex-multi-auth
-```
-
-> [!NOTE]
-> The legacy scoped prerelease `@ndycode/codex-multi-auth` is migration-only. Install `codex-multi-auth` for all new setups; see [docs/upgrade.md](docs/upgrade.md) to migrate.
-
-## Quick start (5 minutes)
-
-```bash
-# 1. Sign in a ChatGPT account (browser OAuth, loopback callback on localhost:1455)
-codex-multi-auth login
-
-# 2. Repeat login to add more accounts, then inspect the pool
-codex-multi-auth status
-
-# 3. Probe account health and preview which account would serve next
-codex-multi-auth check
-codex-multi-auth forecast --live
-```
-
-Headless or remote shell? Use `codex-multi-auth login --device-auth` — no callback port needed. Blocked browser? See [alternate login paths](docs/getting-started.md#log-in).
-
-Run Codex through the wrapper so requests rotate across the pool:
-
-```bash
-codex-multi-auth-codex          # interactive TUI, rotation on by default
-codex-multi-auth-codex exec "summarize this repo"
-mcodex                          # same wrapper, shorter name
-```
-
-## Command map
-
-`codex-multi-auth` ships 31 subcommands. The full surface — every flag, hotkey, and JSON mode — is in [docs/reference/commands.md](docs/reference/commands.md).
-
-| Group | Commands | Purpose |
-| --- | --- | --- |
-| Accounts | `login`, `list`, `status`, `switch <i>`, `unpin`, `workspace` | sign in, inspect the pool, pin or switch the active account, pick workspaces |
-| Selection | `forecast`, `best`, `why-selected`, `check`, `limits`, `models` | preview, explain, and probe which account serves the next request |
-| Runtime | `rotation status` `enable` `disable` `bind-app` `unbind-app` `reset-runtime` `reset-rate-limits` | inspect and control live rotation and the app bind |
-| Repair | `fix`, `doctor`, `report`, `verify`, `verify-flagged`, `uninstall` | diagnose and repair storage, flagged accounts, and install residue; machine-readable health report |
-| Governance | `usage`, `budget`, `account`, `monitor`, `history`, `resets` | usage ledger, budget limits, tags/weights/pause/drain, snapshots |
-| Local clients | `bridge`, `integrations` | bearer tokens and client snippets for the loopback bridge |
-| Config | `config explain` `template`, `init-config`, `debug bundle`, `features` | effective-config report, config templates, sanitized debug bundle |
-
-Everyday examples:
-
-```bash
-codex-multi-auth switch 2                     # pin account #2
-codex-multi-auth report --live --json         # full machine-readable health report
-codex-multi-auth fix --live --model gpt-6.1-sol   # live repair probes with a chosen model
-codex-multi-auth doctor --fix                 # diagnose and apply the safest fixes
-codex-multi-auth usage --since 24h --by model # local usage ledger summary
-codex-multi-auth rotation status              # is live rotation enabled?
-```
-
-## Runtime rotation, in one paragraph
-
-With rotation on (the default), request-bearing wrapper commands — `exec`, `review`, `resume`, `fork`, `app`, and the bare TUI — route through a local proxy that picks the healthiest account per request, refreshes tokens as needed, and fails over across the pool on rate limits within a bounded retry budget. The proxy listens on loopback only, authenticates its own clients with a per-process token, forwards only Responses API, model-discovery, image, and thread-goal calls, and never writes account emails or tokens to client headers or logs. Plain `codex` is never touched: rotation exists only inside `codex-multi-auth-codex`/`mcodex` sessions, or inside the packaged desktop app after an opt-in, reversible bind. Turn it off with `codex-multi-auth rotation disable` or `CODEX_MULTI_AUTH_RUNTIME_ROTATION_PROXY=0`.
-
-## Where state lives
-
-| What | Path |
-| --- | --- |
-| Accounts, settings, quota cache, usage ledger, policies, observability | `~/.codex/multi-auth/` |
-| Per-project account pools | `~/.codex/multi-auth/projects/<project-key>/` |
-| Official Codex state (kept by the official install) | `~/.codex/` |
-| Override the multi-auth root | `CODEX_MULTI_AUTH_DIR=<path>` |
-
-Full path map: [docs/reference/storage-paths.md](docs/reference/storage-paths.md).
-
-## Troubleshooting in 60 seconds
-
-```bash
-codex-multi-auth doctor --fix
-codex-multi-auth check
-codex-multi-auth forecast --live
-```
-
-Common symptoms — wrong active account, OAuth callback port `1455` already bound, Windows/WSL port contention, `EBUSY`/`EPERM` on Windows — are covered in [docs/troubleshooting.md](docs/troubleshooting.md).
-
-## Documentation
-
-| Doc | What it covers |
-| --- | --- |
-| [docs/index.md](docs/index.md) | Product overview — what it does at runtime and who needs it |
-| [docs/README.md](docs/README.md) | Full documentation portal and sitemap |
-| [docs/getting-started.md](docs/getting-started.md) | Install, first login, day-1 commands |
-| [docs/features.md](docs/features.md) | Feature tour |
-| [docs/architecture.md](docs/architecture.md) | Components, request flow, trust boundaries |
-| [docs/configuration.md](docs/configuration.md) | Settings and environment overrides |
-| [docs/reference/commands.md](docs/reference/commands.md) | Every command, flag, and hotkey |
-| [docs/reference/public-api.md](docs/reference/public-api.md) | Public API stability tiers and semver contract |
-| [docs/troubleshooting.md](docs/troubleshooting.md) | Recovery playbooks |
-| [docs/faq.md](docs/faq.md) | Common questions |
-| [docs/upgrade.md](docs/upgrade.md) | Version and legacy-package migration |
-| [docs/privacy.md](docs/privacy.md) | Data handling and local storage behavior |
-| [config/README.md](config/README.md) | Modern vs. legacy catalog templates |
-| [CHANGELOG.md](CHANGELOG.md) | Release history (short version) |
-
-## Release notes
-
-- Current stable: [v2.19.0](docs/releases/v2.19.0.md) — `npm i -g codex-multi-auth`
-- Earlier stable lines: [v2.6.0](docs/releases/v2.6.0.md), [v2.5.0](docs/releases/v2.5.0.md)
-- Full release archive: [docs/README.md#release-history](docs/README.md#release-history)
-
-## Terms and license
-
-`codex-multi-auth` uses OAuth account credentials and is intended for personal development use. It is an independent open-source project, not an official OpenAI product; you are responsible for your own usage and policy compliance, and for production or commercial workloads you should use the OpenAI Platform API. "ChatGPT", "Codex", and "OpenAI" are trademarks of OpenAI.
-
-MIT license — see [LICENSE](LICENSE).
+# codex-multi-auth
+
+[![npm version](https://img.shields.io/npm/v/codex-multi-auth.svg)](https://www.npmjs.com/package/codex-multi-auth)
+[![npm downloads](https://img.shields.io/npm/dw/codex-multi-auth.svg)](https://www.npmjs.com/package/codex-multi-auth)
+[![CI](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml/badge.svg)](https://github.com/ndycode/codex-multi-auth/actions/workflows/ci.yml)
+[![MIT license](https://img.shields.io/npm/l/codex-multi-auth.svg)](LICENSE)
+
+<img width="1270" height="729" alt="codex-multi-auth terminal dashboard for Codex CLI multi-account OAuth account status" src="https://github.com/user-attachments/assets/0cecb77e-a6d3-432a-ba48-3577db0c7093" />
+
+`codex-multi-auth` is a multi-account OAuth manager for the official `@openai/codex` CLI. It keeps a named pool of ChatGPT sign-ins on your machine, lets you switch the active account, and — when you run Codex through its optional wrapper — rotates accounts across live requests through a loopback-only proxy. It never installs or shadows a `codex` binary; the official OpenAI install keeps owning that command.
+
+Use it when one Codex account is not enough: you hit rate limits or quota windows, you split work across organizations and workspaces, you want per-project account pools, or you run unattended agents that need JSON diagnostics and safe repair commands instead of one opaque auth file.
+
+Using OpenCode rather than the Codex CLI? The sibling project [`oc-codex-multi-auth`](https://github.com/ndycode/oc-codex-multi-auth) is the plugin that manages the same kind of account pool there.
+
+## What it does
+
+- **Account pool** — OAuth login for multiple ChatGPT accounts, stored locally under `~/.codex/multi-auth` (files `0600`, directories `0700`), with per-project pools under `projects/<project-key>/`.
+- **Switching and selection** — pin an account, pick the forecast-best one, or let health- and quota-aware hybrid selection rotate for you.
+- **Runtime rotation** — a default-on, loopback-only proxy that forwards Responses API and model-discovery traffic through the best available account during wrapper-launched Codex sessions.
+- **Diagnostics and repair** — status, live health checks, quota forecasts, JSON reports, and `fix`/`doctor`/`verify` commands that recover stale or damaged local state.
+- **Luna Reserve fallback** — treats `gpt-reserve` as a separately metered Luna allowance, automatically falls back after a genuine Luna quota 429, and exposes the Reserve percentage through `limits --json --refresh`.
+- **Local governance** — file-backed usage ledger, budget guards, account tags/weights/pause/drain policies, routing profiles, and an optional loopback bridge with bearer tokens for local OpenAI-compatible clients.
+- **Desktop routing (optional)** — a reversible bind of the packaged Codex app plus user-level launcher helpers; official app binaries are never patched.
+
+## The four binaries
+
+| Binary | Role |
+| --- | --- |
+| `codex-multi-auth` | The account manager. Runs all 31 management subcommands locally (`login`, `status`, `switch`, `forecast`, `rotation`, `fix`, ...). The `auth` prefix is optional: `codex-multi-auth login` ≡ `codex-multi-auth auth login`. |
+| `codex-multi-auth-codex` | Opt-in wrapper. Handles `auth ...` locally and forwards every other command to the official Codex CLI, enabling the rotation proxy for request-bearing commands. |
+| `mcodex` | Convenience launcher over the wrapper, with optional `--monitor` and `--tmux` modes. No account logic of its own. |
+| `codex-multi-auth-app-launcher` | User-level OS launcher routing helper (Windows shortcut, macOS wrapper app, Linux `.desktop`). |
+
+## Install
+
+Requirements: Node.js >= 22.19, and the official Codex CLI on `PATH` (`npm i -g @openai/codex`, Homebrew, or a release binary).
+
+```bash
+npm i -g codex-multi-auth
+```
+
+> [!NOTE]
+> The legacy scoped prerelease `@ndycode/codex-multi-auth` is migration-only. Install `codex-multi-auth` for all new setups; see [docs/upgrade.md](docs/upgrade.md) to migrate.
+
+## Quick start (5 minutes)
+
+```bash
+# 1. Sign in a ChatGPT account (browser OAuth, loopback callback on localhost:1455)
+codex-multi-auth login
+
+# 2. Repeat login to add more accounts, then inspect the pool
+codex-multi-auth status
+
+# 3. Probe account health and preview which account would serve next
+codex-multi-auth check
+codex-multi-auth forecast --live
+```
+
+Headless or remote shell? Use `codex-multi-auth login --device-auth` — no callback port needed. Blocked browser? See [alternate login paths](docs/getting-started.md#log-in).
+
+Run Codex through the wrapper so requests rotate across the pool:
+
+```bash
+codex-multi-auth-codex          # interactive TUI, rotation on by default
+codex-multi-auth-codex exec "summarize this repo"
+mcodex                          # same wrapper, shorter name
+```
+
+## Command map
+
+`codex-multi-auth` ships 31 subcommands. The full surface — every flag, hotkey, and JSON mode — is in [docs/reference/commands.md](docs/reference/commands.md).
+
+| Group | Commands | Purpose |
+| --- | --- | --- |
+| Accounts | `login`, `list`, `status`, `switch <i>`, `unpin`, `workspace` | sign in, inspect the pool, pin or switch the active account, pick workspaces |
+| Selection | `forecast`, `best`, `why-selected`, `check`, `limits`, `models` | preview, explain, and probe which account serves the next request |
+| Runtime | `rotation status` `enable` `disable` `bind-app` `unbind-app` `reset-runtime` `reset-rate-limits` | inspect and control live rotation and the app bind |
+| Repair | `fix`, `doctor`, `report`, `verify`, `verify-flagged`, `uninstall` | diagnose and repair storage, flagged accounts, and install residue; machine-readable health report |
+| Governance | `usage`, `budget`, `account`, `monitor`, `history`, `resets` | usage ledger, budget limits, tags/weights/pause/drain, snapshots |
+| Local clients | `bridge`, `integrations` | bearer tokens and client snippets for the loopback bridge |
+| Config | `config explain` `template`, `init-config`, `debug bundle`, `features` | effective-config report, config templates, sanitized debug bundle |
+
+Everyday examples:
+
+```bash
+codex-multi-auth switch 2                     # pin account #2
+codex-multi-auth report --live --json         # full machine-readable health report
+codex-multi-auth fix --live --model gpt-6.1-sol   # live repair probes with a chosen model
+codex-multi-auth doctor --fix                 # diagnose and apply the safest fixes
+codex-multi-auth usage --since 24h --by model # local usage ledger summary
+codex-multi-auth rotation status              # is live rotation enabled?
+```
+
+## Runtime rotation, in one paragraph
+
+With rotation on (the default), request-bearing wrapper commands — `exec`, `review`, `resume`, `fork`, `app`, and the bare TUI — route through a local proxy that picks the healthiest account per request, refreshes tokens as needed, and fails over across the pool on rate limits within a bounded retry budget. The proxy listens on loopback only, authenticates its own clients with a per-process token, forwards only Responses API, model-discovery, image, and thread-goal calls, and never writes account emails or tokens to client headers or logs. Plain `codex` is never touched: rotation exists only inside `codex-multi-auth-codex`/`mcodex` sessions, or inside the packaged desktop app after an opt-in, reversible bind. Turn it off with `codex-multi-auth rotation disable` or `CODEX_MULTI_AUTH_RUNTIME_ROTATION_PROXY=0`.
+
+## Where state lives
+
+| What | Path |
+| --- | --- |
+| Accounts, settings, quota cache, usage ledger, policies, observability | `~/.codex/multi-auth/` |
+| Per-project account pools | `~/.codex/multi-auth/projects/<project-key>/` |
+| Official Codex state (kept by the official install) | `~/.codex/` |
+| Override the multi-auth root | `CODEX_MULTI_AUTH_DIR=<path>` |
+
+Full path map: [docs/reference/storage-paths.md](docs/reference/storage-paths.md).
+
+## Troubleshooting in 60 seconds
+
+```bash
+codex-multi-auth doctor --fix
+codex-multi-auth check
+codex-multi-auth forecast --live
+```
+
+Common symptoms — wrong active account, OAuth callback port `1455` already bound, Windows/WSL port contention, `EBUSY`/`EPERM` on Windows — are covered in [docs/troubleshooting.md](docs/troubleshooting.md).
+
+## Documentation
+
+| Doc | What it covers |
+| --- | --- |
+| [docs/index.md](docs/index.md) | Product overview — what it does at runtime and who needs it |
+| [docs/README.md](docs/README.md) | Full documentation portal and sitemap |
+| [docs/getting-started.md](docs/getting-started.md) | Install, first login, day-1 commands |
+| [docs/features.md](docs/features.md) | Feature tour |
+| [docs/architecture.md](docs/architecture.md) | Components, request flow, trust boundaries |
+| [docs/configuration.md](docs/configuration.md) | Settings and environment overrides |
+| [docs/reference/commands.md](docs/reference/commands.md) | Every command, flag, and hotkey |
+| [docs/reference/public-api.md](docs/reference/public-api.md) | Public API stability tiers and semver contract |
+| [docs/troubleshooting.md](docs/troubleshooting.md) | Recovery playbooks |
+| [docs/faq.md](docs/faq.md) | Common questions |
+| [docs/upgrade.md](docs/upgrade.md) | Version and legacy-package migration |
+| [docs/privacy.md](docs/privacy.md) | Data handling and local storage behavior |
+| [config/README.md](config/README.md) | Modern vs. legacy catalog templates |
+| [CHANGELOG.md](CHANGELOG.md) | Release history (short version) |
+
+## Release notes
+
+- Current stable: [v2.20.0](docs/releases/v2.20.0.md) — `npm i -g codex-multi-auth`
+- Earlier stable lines: [v2.6.0](docs/releases/v2.6.0.md), [v2.5.0](docs/releases/v2.5.0.md)
+- Full release archive: [docs/README.md#release-history](docs/README.md#release-history)
+
+## Terms and license
+
+`codex-multi-auth` uses OAuth account credentials and is intended for personal development use. It is an independent open-source project, not an official OpenAI product; you are responsible for your own usage and policy compliance, and for production or commercial workloads you should use the OpenAI Platform API. "ChatGPT", "Codex", and "OpenAI" are trademarks of OpenAI.
+
+MIT license — see [LICENSE](LICENSE).

package/assets/codex-multi-auth-icon.svg

@@ -1,39 +1,39 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
-  <defs>
-    <linearGradient id="bg" x1="72" y1="44" x2="440" y2="468" gradientUnits="userSpaceOnUse">
-      <stop offset="0" stop-color="#111827"/>
-      <stop offset="1" stop-color="#020617"/>
-    </linearGradient>
-    <linearGradient id="card" x1="138" y1="152" x2="366" y2="352" gradientUnits="userSpaceOnUse">
-      <stop offset="0" stop-color="#f8fafc"/>
-      <stop offset="1" stop-color="#cbd5e1"/>
-    </linearGradient>
-    <linearGradient id="accent" x1="164" y1="184" x2="344" y2="332" gradientUnits="userSpaceOnUse">
-      <stop offset="0" stop-color="#38bdf8"/>
-      <stop offset="1" stop-color="#22c55e"/>
-    </linearGradient>
-    <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%" color-interpolation-filters="sRGB">
-      <feDropShadow dx="0" dy="18" stdDeviation="16" flood-color="#000000" flood-opacity="0.34"/>
-    </filter>
-  </defs>
-  <rect width="512" height="512" rx="112" fill="url(#bg)"/>
-  <circle cx="256" cy="256" r="176" fill="none" stroke="#1e293b" stroke-width="24"/>
-  <path d="M376 138a176 176 0 0 1 54 116" fill="none" stroke="#38bdf8" stroke-linecap="round" stroke-width="24"/>
-  <path d="M136 374a176 176 0 0 1-54-116" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-width="24"/>
-  <path d="M424 232l20 33 19-34" fill="none" stroke="#38bdf8" stroke-linecap="round" stroke-linejoin="round" stroke-width="18"/>
-  <path d="M88 280l-20-33-19 34" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-linejoin="round" stroke-width="18"/>
-  <g filter="url(#shadow)">
-    <rect x="142" y="158" width="228" height="170" rx="34" fill="#334155" opacity="0.9"/>
-    <rect x="124" y="184" width="228" height="170" rx="34" fill="#475569"/>
-    <rect x="104" y="210" width="228" height="170" rx="34" fill="url(#card)"/>
-  </g>
-  <circle cx="172" cy="278" r="36" fill="url(#accent)"/>
-  <path d="M130 342c12-31 35-47 70-47s58 16 70 47" fill="none" stroke="#0f172a" stroke-linecap="round" stroke-width="22"/>
-  <rect x="210" y="254" width="82" height="18" rx="9" fill="#0f172a" opacity="0.9"/>
-  <rect x="210" y="290" width="58" height="18" rx="9" fill="#0f172a" opacity="0.56"/>
-  <g transform="translate(302 318)">
-    <rect x="0" y="0" width="104" height="74" rx="20" fill="#020617" stroke="#38bdf8" stroke-width="10"/>
-    <path d="M28 26l16 12-16 12" fill="none" stroke="#e2e8f0" stroke-linecap="round" stroke-linejoin="round" stroke-width="10"/>
-    <path d="M56 52h26" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-width="10"/>
-  </g>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
+  <defs>
+    <linearGradient id="bg" x1="72" y1="44" x2="440" y2="468" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#111827"/>
+      <stop offset="1" stop-color="#020617"/>
+    </linearGradient>
+    <linearGradient id="card" x1="138" y1="152" x2="366" y2="352" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#f8fafc"/>
+      <stop offset="1" stop-color="#cbd5e1"/>
+    </linearGradient>
+    <linearGradient id="accent" x1="164" y1="184" x2="344" y2="332" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#38bdf8"/>
+      <stop offset="1" stop-color="#22c55e"/>
+    </linearGradient>
+    <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%" color-interpolation-filters="sRGB">
+      <feDropShadow dx="0" dy="18" stdDeviation="16" flood-color="#000000" flood-opacity="0.34"/>
+    </filter>
+  </defs>
+  <rect width="512" height="512" rx="112" fill="url(#bg)"/>
+  <circle cx="256" cy="256" r="176" fill="none" stroke="#1e293b" stroke-width="24"/>
+  <path d="M376 138a176 176 0 0 1 54 116" fill="none" stroke="#38bdf8" stroke-linecap="round" stroke-width="24"/>
+  <path d="M136 374a176 176 0 0 1-54-116" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-width="24"/>
+  <path d="M424 232l20 33 19-34" fill="none" stroke="#38bdf8" stroke-linecap="round" stroke-linejoin="round" stroke-width="18"/>
+  <path d="M88 280l-20-33-19 34" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-linejoin="round" stroke-width="18"/>
+  <g filter="url(#shadow)">
+    <rect x="142" y="158" width="228" height="170" rx="34" fill="#334155" opacity="0.9"/>
+    <rect x="124" y="184" width="228" height="170" rx="34" fill="#475569"/>
+    <rect x="104" y="210" width="228" height="170" rx="34" fill="url(#card)"/>
+  </g>
+  <circle cx="172" cy="278" r="36" fill="url(#accent)"/>
+  <path d="M130 342c12-31 35-47 70-47s58 16 70 47" fill="none" stroke="#0f172a" stroke-linecap="round" stroke-width="22"/>
+  <rect x="210" y="254" width="82" height="18" rx="9" fill="#0f172a" opacity="0.9"/>
+  <rect x="210" y="290" width="58" height="18" rx="9" fill="#0f172a" opacity="0.56"/>
+  <g transform="translate(302 318)">
+    <rect x="0" y="0" width="104" height="74" rx="20" fill="#020617" stroke="#38bdf8" stroke-width="10"/>
+    <path d="M28 26l16 12-16 12" fill="none" stroke="#e2e8f0" stroke-linecap="round" stroke-linejoin="round" stroke-width="10"/>
+    <path d="M56 52h26" fill="none" stroke="#22c55e" stroke-linecap="round" stroke-width="10"/>
+  </g>
+</svg>

package/assets/readme-hero.svg

@@ -1,31 +1,31 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="300" viewBox="0 0 1200 300" role="img" aria-label="Codex Multi-Auth OAuth">
-  <defs>
-    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
-      <stop offset="0%" stop-color="#0f172a" />
-      <stop offset="100%" stop-color="#1f2937" />
-    </linearGradient>
-    <linearGradient id="accent" x1="0" y1="0" x2="1" y2="0">
-      <stop offset="0%" stop-color="#38bdf8" />
-      <stop offset="100%" stop-color="#22d3ee" />
-    </linearGradient>
-  </defs>
-  <rect width="1200" height="300" rx="28" fill="url(#bg)" />
-  <g opacity="0.12">
-    <circle cx="1020" cy="70" r="120" fill="#38bdf8" />
-    <circle cx="150" cy="260" r="140" fill="#22d3ee" />
-  </g>
-  <g fill="none" stroke="url(#accent)" stroke-width="8" stroke-linecap="round" stroke-linejoin="round">
-    <path d="M160 95 L100 150 L160 205" />
-    <path d="M280 95 L340 150 L280 205" />
-    <path d="M205 80 L235 220" />
-  </g>
-  <text x="420" y="120" fill="#e2e8f0" font-size="42" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif" font-weight="600">
-    Codex Multi-Auth OAuth
-  </text>
-  <text x="420" y="170" fill="#cbd5f5" font-size="24" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
-    ChatGPT Plus/Pro auth for GPT-5.2 and Codex models
-  </text>
-  <text x="420" y="220" fill="#7dd3fc" font-size="18" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
-    One-command install, modern variants, full tool support
-  </text>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="300" viewBox="0 0 1200 300" role="img" aria-label="Codex Multi-Auth OAuth">
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#0f172a" />
+      <stop offset="100%" stop-color="#1f2937" />
+    </linearGradient>
+    <linearGradient id="accent" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#38bdf8" />
+      <stop offset="100%" stop-color="#22d3ee" />
+    </linearGradient>
+  </defs>
+  <rect width="1200" height="300" rx="28" fill="url(#bg)" />
+  <g opacity="0.12">
+    <circle cx="1020" cy="70" r="120" fill="#38bdf8" />
+    <circle cx="150" cy="260" r="140" fill="#22d3ee" />
+  </g>
+  <g fill="none" stroke="url(#accent)" stroke-width="8" stroke-linecap="round" stroke-linejoin="round">
+    <path d="M160 95 L100 150 L160 205" />
+    <path d="M280 95 L340 150 L280 205" />
+    <path d="M205 80 L235 220" />
+  </g>
+  <text x="420" y="120" fill="#e2e8f0" font-size="42" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif" font-weight="600">
+    Codex Multi-Auth OAuth
+  </text>
+  <text x="420" y="170" fill="#cbd5f5" font-size="24" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
+    ChatGPT Plus/Pro auth for GPT-5.2 and Codex models
+  </text>
+  <text x="420" y="220" fill="#7dd3fc" font-size="18" font-family="'IBM Plex Sans','Segoe UI',Arial,sans-serif">
+    One-command install, modern variants, full tool support
+  </text>
+</svg>

package/config/README.md

@@ -1,31 +1,31 @@
-# Config Templates
-
-These files are optional model/provider templates for host/plugin configurations that still load `codex-multi-auth` directly. The normal account-manager workflow uses `codex-multi-auth ...` and does not require these templates.
-
-## Primary (Codex-named)
-
-| File | Purpose |
-| --- | --- |
-| [`codex-modern.json`](./codex-modern.json) | Modern variant-based template |
-| [`codex-legacy.json`](./codex-legacy.json) | Legacy explicit-model template |
-| [`minimal-codex.json`](./minimal-codex.json) | Minimal debug template |
-
-## Notes
-
-- These templates are optional for the OAuth account manager flow and the runtime rotation proxy.
-- Core account-manager commands use `codex-multi-auth login`.
-
-## Defaults Included
-
-- Current documented OpenAI/Codex model families: GPT-6.1 Sol (`gpt-6.1-sol`, the default), GPT-6 Astra (`gpt-6-astra`), GPT-6 Sol (`gpt-6-sol`) and GPT-6 Luna (`gpt-6-luna`), then `gpt-5.6-sol`/`terra`/`luna`. Retired models (`gpt-5.5`/`gpt-5.5-pro`, `gpt-5.4*`, `gpt-5.3-codex` and older, plus the leaked `gpt-6-astra-aeon` slug) were removed from the picker; their ids still resolve to a replacement, see `docs/configuration.md`
-- The GPT-6 entries carry `limit.context: 272000`, the `context_window` in the upstream Codex catalog. The GPT-5.6 entries still carry the pre-cut `372000` and were left alone here; change them only alongside a deliberate review, since the value feeds a picker rather than the context budget guard (which refuses to estimate either family)
-- The Daybreak cyber models resolve at the code level but are deliberately absent from these templates, matching their hidden visibility in the upstream Codex picker
-- `store: false`
-- `include: ["reasoning.encrypted_content"]`
-- Sensible fallback behavior for unsupported model entitlements
-
-## Related Docs
-
-- [`../docs/configuration.md`](../docs/configuration.md)
-- [`../docs/getting-started.md`](../docs/getting-started.md)
-- [`../docs/reference/settings.md`](../docs/reference/settings.md)
+# Config Templates
+
+These files are optional model/provider templates for host/plugin configurations that still load `codex-multi-auth` directly. The normal account-manager workflow uses `codex-multi-auth ...` and does not require these templates.
+
+## Primary (Codex-named)
+
+| File | Purpose |
+| --- | --- |
+| [`codex-modern.json`](./codex-modern.json) | Modern variant-based template |
+| [`codex-legacy.json`](./codex-legacy.json) | Legacy explicit-model template |
+| [`minimal-codex.json`](./minimal-codex.json) | Minimal debug template |
+
+## Notes
+
+- These templates are optional for the OAuth account manager flow and the runtime rotation proxy.
+- Core account-manager commands use `codex-multi-auth login`.
+
+## Defaults Included
+
+- Current documented OpenAI/Codex model families: GPT-6.1 Sol (`gpt-6.1-sol`, the default), GPT-6 Astra (`gpt-6-astra`), GPT-6 Sol (`gpt-6-sol`) and GPT-6 Luna (`gpt-6-luna`), then `gpt-5.6-sol`/`terra`/`luna`. Retired models (`gpt-5.5`/`gpt-5.5-pro`, `gpt-5.4*`, `gpt-5.3-codex` and older, plus the leaked `gpt-6-astra-aeon` slug) were removed from the picker; their ids still resolve to a replacement, see `docs/configuration.md`
+- The GPT-6 entries carry `limit.context: 272000`, the `context_window` in the upstream Codex catalog. The GPT-5.6 entries still carry the pre-cut `372000` and were left alone here; change them only alongside a deliberate review, since the value feeds a picker rather than the context budget guard (which refuses to estimate either family)
+- The Daybreak cyber models resolve at the code level but are deliberately absent from these templates, matching their hidden visibility in the upstream Codex picker
+- `store: false`
+- `include: ["reasoning.encrypted_content"]`
+- Sensible fallback behavior for unsupported model entitlements
+
+## Related Docs
+
+- [`../docs/configuration.md`](../docs/configuration.md)
+- [`../docs/getting-started.md`](../docs/getting-started.md)
+- [`../docs/reference/settings.md`](../docs/reference/settings.md)