codex-multi-auth 2.22.0 → 2.23.0

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-	"version": "2.22.0",
+	"version": "2.23.0",
   "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
   "interface": {
     "composerIcon": "./assets/codex-multi-auth-icon.svg"

package/README.md

@@ -28,7 +28,8 @@ Using OpenCode rather than the Codex CLI? The sibling project [`oc-codex-multi-a
 
 | Binary | Role |
 | --- | --- |
-| `codex-multi-auth` | The account manager. Runs all 31 management subcommands locally (`login`, `status`, `switch`, `forecast`, `rotation`, `fix`, ...). The `auth` prefix is optional: `codex-multi-auth login` ≡ `codex-multi-auth auth login`. |
+| `codex-multi-auth` | The account manager. Runs all management subcommands locally (`login`, `status`, `web`, `switch`, `forecast`, `rotation`, `fix`, ...). The `auth` prefix is optional: `codex-multi-auth login` ≡ `codex-multi-auth auth login`. |
+| `codex-ma` | Short alias for `codex-multi-auth`, including the local real-time web dashboard. |
 | `codex-multi-auth-codex` | Opt-in wrapper. Handles `auth ...` locally and forwards every other command to the official Codex CLI, enabling the rotation proxy for request-bearing commands. |
 | `mcodex` | Convenience launcher over the wrapper, with optional `--monitor` and `--tmux` modes. No account logic of its own. |
 | `codex-multi-auth-app-launcher` | User-level OS launcher routing helper (Windows shortcut, macOS wrapper app, Linux `.desktop`). |
@@ -52,6 +53,7 @@ codex-multi-auth login
 
 # 2. Repeat login to add more accounts, then inspect the pool
 codex-multi-auth status
+codex-ma web --no-open
 
 # 3. Probe account health and preview which account would serve next
 codex-multi-auth check
@@ -139,7 +141,7 @@ Common symptoms — wrong active account, OAuth callback port `1455` already bou
 
 ## Release notes
 
-- Current stable: [v2.22.0](docs/releases/v2.22.0.md) — `npm i -g codex-multi-auth`
+- Current stable: [v2.23.0](docs/releases/v2.23.0.md) — `npm i -g codex-multi-auth`
 - Earlier stable lines: [v2.6.0](docs/releases/v2.6.0.md), [v2.5.0](docs/releases/v2.5.0.md)
 - Full release archive: [docs/README.md#release-history](docs/README.md#release-history)
 

package/config/schema/config.schema.json

@@ -31,6 +31,14 @@
     "pluginConfig": {
       "type": "object",
       "properties": {
+        "locale": {
+          "type": "string",
+          "enum": [
+            "auto",
+            "en",
+            "zh"
+          ]
+        },
         "codexMode": {
           "type": "boolean"
         },

package/dist/lib/api-route-store.d.ts

@@ -17,6 +17,7 @@ declare const routeSchema: z.ZodObject<{
     accessPrograms: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
     modelAccessPrograms: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>>;
 }, z.core.$strip>;
+export declare const MAX_API_ROUTES = 100;
 export type ApiRouteCredential = z.infer<typeof routeSchema>;
 export declare function getApiRoutesPath(): string;
 export declare function loadApiRoutes(path?: string): Promise<ApiRouteCredential[]>;

package/dist/lib/api-route-store.js

@@ -41,9 +41,10 @@ const routeSchema = z.object({
     modelAccessPrograms: z.record(modelId, accessPrograms)
         .refine(value => Object.keys(value).length <= 1000).optional(),
 });
+export const MAX_API_ROUTES = 100;
 const schema = z.object({
     version: z.literal(1),
-    routes: z.array(routeSchema).max(100),
+    routes: z.array(routeSchema).max(MAX_API_ROUTES),
 });
 export function getApiRoutesPath() {
     return join(getCodexMultiAuthDir(), "api-routes.json");

package/dist/lib/auth/account-access.js

@@ -1,5 +1,6 @@
 import { CODEX_BASE_URL } from "../constants.js";
 import { combineSignals } from "../utils.js";
+import { fetchAuth } from "./http.js";
 const ACCOUNTS_CHECK_PATH = "/wham/accounts/check";
 const ACCOUNTS_CHECK_TIMEOUT_MS = 10_000;
 function readString(value) {
@@ -49,7 +50,7 @@ export async function fetchAuthorizedAccounts(accessToken, options = {}) {
     const token = readString(accessToken);
     if (!token)
         return null;
-    const doFetch = options.fetch ?? globalThis.fetch;
+    const doFetch = options.fetch ?? fetchAuth;
     const timeout = AbortSignal.timeout(ACCOUNTS_CHECK_TIMEOUT_MS);
     // combineSignals wraps AbortSignal.any (available on every Node the
     // engines floor, `>=22.19`, permits) with null-tolerance; the native composite also detaches

package/dist/lib/auth/auth.js

@@ -2,6 +2,7 @@ import { randomBytes, webcrypto } from "node:crypto";
 import { logError } from "../logger.js";
 import { safeParseOAuthTokenResponse } from "../schemas.js";
 import { isAbortError } from "../utils.js";
+import { fetchAuth } from "./http.js";
 // OAuth constants (from openai/codex)
 export const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 export const AUTHORIZE_URL = "https://auth.openai.com/oauth/authorize";
@@ -396,7 +397,7 @@ export function parseAuthorizationInput(input) {
  * @returns Token result
  */
 export async function exchangeAuthorizationCode(code, verifier, redirectUri = REDIRECT_URI) {
-    const res = await fetch(TOKEN_URL, {
+    const res = await fetchAuth(TOKEN_URL, {
         method: "POST",
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
         body: new URLSearchParams({
@@ -468,7 +469,7 @@ export function decodeJWT(token) {
 }
 export async function refreshAccessToken(refreshToken, options = {}) {
     try {
-        const response = await fetch(TOKEN_URL, {
+        const response = await fetchAuth(TOKEN_URL, {
             method: "POST",
             headers: { "Content-Type": "application/x-www-form-urlencoded" },
             signal: options?.signal,

package/dist/lib/auth/device-auth.js

@@ -1,4 +1,5 @@
 import { CLIENT_ID, exchangeAuthorizationCode, sanitizeOAuthResponseBodyForLog, } from "./auth.js";
+import { fetchAuth } from "./http.js";
 const DEVICE_AUTH_BASE_URL = "https://auth.openai.com";
 const DEVICE_AUTH_API_BASE_URL = `${DEVICE_AUTH_BASE_URL}/api/accounts`;
 export const DEVICE_AUTH_VERIFICATION_URL = `${DEVICE_AUTH_BASE_URL}/codex/device`;
@@ -14,7 +15,7 @@ const DEVICE_AUTH_TRANSIENT_PENDING_STATUSES = new Set([
     504,
 ]);
 function getFetch(options) {
-    return options.fetchImpl ?? fetch;
+    return options.fetchImpl ?? fetchAuth;
 }
 function getNow(options) {
     return options.now ?? Date.now;

package/dist/lib/auth/http.d.ts

@@ -0,0 +1 @@
+export { fetchWithProxy as fetchAuth } from "../request/proxy-fetch.js";

package/dist/lib/auth/http.js

@@ -0,0 +1 @@
+export { fetchWithProxy as fetchAuth } from "../request/proxy-fetch.js";

package/dist/lib/codex-manager/account-manager-commands.js

@@ -14,6 +14,7 @@ export const ACCOUNT_MANAGER_COMMANDS = new Set([
     "login",
     "list",
     "status",
+    "web",
     "limits",
     "switch",
     "unpin",

package/dist/lib/codex-manager/commands/locale.d.ts

@@ -0,0 +1,12 @@
+import { type OutputLocaleSetting } from "../../locale.js";
+export interface LocaleCommandDeps {
+    loadConfig: () => {
+        locale?: OutputLocaleSetting;
+    };
+    saveConfig: (patch: {
+        locale: OutputLocaleSetting;
+    }) => Promise<void>;
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+}
+export declare function runLocaleCommand(args: string[], deps: LocaleCommandDeps): Promise<number>;

package/dist/lib/codex-manager/commands/locale.js

@@ -0,0 +1,25 @@
+import { localeName, normalizeOutputLocaleSetting, resolveOutputLocale, } from "../../locale.js";
+export async function runLocaleCommand(args, deps) {
+    const logInfo = deps.logInfo ?? console.log;
+    const logError = deps.logError ?? console.error;
+    const requested = args[0]?.trim();
+    if (args.length > 1 || requested === "--help" || requested === "-h") {
+        logInfo("Usage: codex-multi-auth config locale [auto|en|zh]");
+        return requested === "--help" || requested === "-h" ? 0 : 1;
+    }
+    if (!requested) {
+        const configured = deps.loadConfig().locale ?? "auto";
+        const effective = resolveOutputLocale(configured);
+        logInfo(`Locale: ${configured} (effective: ${localeName(effective)})`);
+        return 0;
+    }
+    const locale = normalizeOutputLocaleSetting(requested);
+    if (!locale) {
+        logError(`Unsupported locale: ${requested}. Choose auto, en, or zh.`);
+        return 1;
+    }
+    await deps.saveConfig({ locale });
+    const effective = resolveOutputLocale(locale);
+    logInfo(`Locale saved: ${locale} (effective: ${localeName(effective)})`);
+    return 0;
+}

package/dist/lib/codex-manager/commands/status.d.ts

@@ -7,6 +7,7 @@ import type { QuotaCacheData } from "../../quota-cache.js";
 import { type AppBindRouterStatus } from "../../runtime/app-bind.js";
 import { type RuntimeAccountSignal } from "../../runtime/runtime-current-account.js";
 import type { RuntimeObservabilitySnapshot } from "../../runtime/runtime-observability.js";
+import { type OutputLocale } from "../../locale.js";
 import type { AccountStorageV3, StorageHealthSummary } from "../../storage.js";
 type LoadedStorage = AccountStorageV3 | null;
 export interface StatusCommandDeps {
@@ -31,6 +32,9 @@ export interface StatusCommandDeps {
     logInfo?: (message: string) => void;
     /** When true, emit a single machine-readable JSON object instead of text (cli-manager-03). */
     json?: boolean;
+    /** Compact human-facing summary. Undefined keeps the legacy detailed view for API callers. */
+    compact?: boolean;
+    locale?: OutputLocale;
 }
 export declare function runStatusCommand(deps: StatusCommandDeps): Promise<number>;
 export interface FeaturesCommandDeps {