codex-multi-auth 2.22.0 → 2.24.0

package/dist/lib/codex-manager/help.js

@@ -7,7 +7,8 @@ export function printUsage() {
         "Start here:",
         "  codex-multi-auth login [--device-auth|--manual|--no-browser] [--org <org_id>] [--preserve-selection] [--account <index|email|account_id>]",
         "  codex-multi-auth login --api      (API credentials and visible models)",
-        "  codex-multi-auth status [--json]   (list is the same command)",
+        "  codex-multi-auth status [--json|--details]   (list is the same command)",
+        "  codex-multi-auth web [--port 4317] [--no-open]   (local real-time pool dashboard)",
         "  codex-multi-auth check [accounts|resets|capabilities] [--prime]   (default: all checks)",
         "  codex-multi-auth limits --json [--refresh]   (structured quota windows; refresh is age-gated)",
         "",
@@ -16,10 +17,10 @@ export function printUsage() {
         "  codex-multi-auth switch <index>   (pins the account for runtime routing)",
         "  codex-multi-auth resets list [--refresh] | redeem <account> | auto manual|last-resort",
         "  codex-multi-auth unpin            (clears the manual pin set by switch)",
-        "  codex-multi-auth workspace <account> [workspace]   (list or switch an account's workspaces)",
+        "  codex-multi-auth workspace <account> [workspace]   (list or select; add enable/disable to change availability)",
         "  codex-multi-auth best [--live] [--json] [--model <model>]   (clears any manual pin set by switch)",
         "  codex-multi-auth forecast [--live] [--json] [--explain] [--model <model>] [--no-runtime-overlay]",
-        "  codex-multi-auth account tag|untag|weight|priority|auto-prime|pause|unpause|drain|undrain|note|policy list ...",
+        "  codex-multi-auth account tag|untag|weight|priority|auto-prime|emergency-only|pause|unpause|drain|undrain|note|policy list ...",
         "",
         "Repair:",
         "  codex-multi-auth uninstall [--dry-run] [--json] [--clear-accounts]",
@@ -41,6 +42,7 @@ export function printUsage() {
         "  codex-multi-auth rotation reset-rate-limits [--all | --account <idx>] [--dry-run] [--json]",
         "  codex-multi-auth why-selected [--now|-n | --last|-l] [--json]",
         "  codex-multi-auth history [list|show <id>] [--json]   (all local sessions, ignores /resume provider filtering)",
+        "  codex-multi-auth config locale [auto|en|zh]   (language; auto follows the system locale)",
         "",
         "Advanced:",
         "  codex-multi-auth report [--live] [--json] [--explain] [--model <model>] [--max-accounts <n>] [--max-probes <n>] [--cached-only] [--out <path>]",

package/dist/lib/codex-manager.js

@@ -39,10 +39,13 @@ import { runInitConfigCommand } from "./codex-manager/commands/init-config.js";
 import { runReportCommand } from "./codex-manager/commands/report.js";
 import { runRotationCommand } from "./codex-manager/commands/rotation.js";
 import { runFeaturesCommand, runStatusCommand, } from "./codex-manager/commands/status.js";
+import { runWebCommand } from "./web-dashboard.js";
 import { loadPersistedRuntimeObservabilitySnapshot } from "./runtime/runtime-observability.js";
 import { runSwitchCommand } from "./codex-manager/commands/switch.js";
 import { runHistoryCommand } from "./codex-manager/commands/history.js";
+import { runLocaleCommand } from "./codex-manager/commands/locale.js";
 import { runUnpinCommand } from "./codex-manager/commands/unpin.js";
+import { resolveOutputLocale } from "./locale.js";
 import { runWorkspaceCommand } from "./codex-manager/commands/workspace.js";
 import { runUsageCommand } from "./codex-manager/commands/usage.js";
 import { refreshQuotaCacheForMenu } from "./codex-manager/login-menu-data.js";
@@ -60,7 +63,7 @@ import { loadQuotaCache, saveQuotaCache } from "./quota-cache.js";
 import { readAppRuntimeHelperAccountSignal } from "./runtime/runtime-current-account.js";
 import { fetchCodexQuotaSnapshot, formatQuotaSnapshotLine, } from "./quota-probe.js";
 import { queuedRefresh } from "./refresh-queue.js";
-import { clearAccounts, inspectStorageHealth, getLastAccountsSaveTimestamp, getStoragePath, loadAccounts, loadFlaggedAccounts, saveAccounts, setStoragePath, } from "./storage.js";
+import { clearAccounts, inspectStorageHealth, getLastAccountsSaveTimestamp, getStoragePath, loadAccounts, loadFlaggedAccounts, saveAccounts, setStoragePath, withAccountStorageTransaction, } from "./storage.js";
 // Formatter implementations moved to lib/codex-manager/formatters/ (audit
 // roadmap §4.1.1 phase 1). Re-exported here so existing consumers importing
 // from lib/codex-manager.js keep working unchanged.
@@ -140,6 +143,7 @@ const IMPLEMENTED_FEATURES = [
     { id: 52, name: "Why-selected and monitor diagnostics" },
     { id: 53, name: "Config explain, init-config templates, and debug bundle" },
     { id: 54, name: "mcodex convenience launcher (monitor/tmux/forward)" },
+    { id: 55, name: "Local real-time web pool dashboard" },
 ];
 async function runForecast(args) {
     return runForecastCommand(args, {
@@ -252,6 +256,18 @@ export function buildSelectAccountTraced() {
                 blockedReasonByAccount[index] = AUTH_INVALIDATION_MARKER;
             }
         }
+        // This offline diagnostic cannot establish ordinary-pool exhaustion or
+        // perform permitted reset recovery. Leave emergency capacity reserved;
+        // keep any more specific policy, authentication, or runtime exclusion.
+        for (const account of accountsWithMetrics) {
+            if (policy.emergencyAccountIndexes?.has(account.index) &&
+                account.isAvailable &&
+                !blockedAccountIndexes.has(account.index)) {
+                blockedAccountIndexes.add(account.index);
+                blockedReasonByAccount[account.index] =
+                    "emergency-only: reserved until runtime confirms ordinary capacity and permitted resets are exhausted";
+            }
+        }
         return selectHybridAccountTraced({
             accounts: accountsWithMetrics,
             healthTracker,
@@ -267,31 +283,50 @@ export function buildSelectAccountTraced() {
 /**
  * Shared handler for `list` and `status` (aliases of the same view).
  */
-const runListOrStatusCommand = (rest) => runStatusCommand({
-    loadApiRoutes,
-    loadResetCreditState,
-    loadInferenceRequestTimes,
-    loadModelInventory,
-    setStoragePath,
-    getStoragePath,
-    loadAccounts,
-    inspectStorageHealth,
-    resolveActiveIndex,
-    formatRateLimitEntry,
-    loadRuntimeObservabilitySnapshot: loadPersistedRuntimeObservabilitySnapshot,
-    loadAppBindStatus: async () => getAppBindStatus()
-        .then((status) => status.router ? {
-        ...status.router,
-        // Keep historical diagnostics, but never revive a crashed router's
-        // persisted "running" marker or its account-selection signal.
-        state: status.running ? status.router.state : "stopped",
-        nativeOpenai: status.running && status.state?.nativeOpenai === true,
-    } : null)
-        .catch(() => null),
-    loadAppHelperStatus: readAppRuntimeHelperAccountSignal,
-    loadQuotaCache,
-    json: rest.includes("--json") || rest.includes("-j"),
-});
+function buildStatusCommandDeps(rest, logInfo) {
+    return {
+        loadApiRoutes,
+        loadResetCreditState,
+        loadInferenceRequestTimes,
+        loadModelInventory,
+        setStoragePath,
+        getStoragePath,
+        loadAccounts,
+        inspectStorageHealth,
+        resolveActiveIndex,
+        formatRateLimitEntry,
+        loadRuntimeObservabilitySnapshot: loadPersistedRuntimeObservabilitySnapshot,
+        loadAppBindStatus: async () => getAppBindStatus()
+            .then((status) => status.router ? {
+            ...status.router,
+            // Keep historical diagnostics, but never revive a crashed router's
+            // persisted "running" marker or its account-selection signal.
+            state: status.running ? status.router.state : "stopped",
+            nativeOpenai: status.running && status.state?.nativeOpenai === true,
+        } : null)
+            .catch(() => null),
+        loadAppHelperStatus: readAppRuntimeHelperAccountSignal,
+        loadQuotaCache,
+        json: rest.includes("--json") || rest.includes("-j"),
+        compact: !rest.includes("--details") && !rest.includes("--verbose") && !rest.includes("--json") && !rest.includes("-j"),
+        locale: resolveOutputLocale(loadPluginConfig().locale),
+        ...(logInfo ? { logInfo } : {}),
+    };
+}
+const runListOrStatusCommand = (rest) => runStatusCommand(buildStatusCommandDeps(rest));
+async function loadStatusJsonSnapshot() {
+    let serialized = "";
+    const exitCode = await runStatusCommand(buildStatusCommandDeps(["--json"], (message) => {
+        serialized = message;
+    }));
+    if (exitCode !== 0)
+        throw new Error("Unable to load status snapshot.");
+    const parsed = JSON.parse(serialized);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("Status snapshot is not an object.");
+    }
+    return parsed;
+}
 /**
  * Command registry for the `auth` dispatcher (audit roadmap §4.1.1 phase 2).
  *
@@ -307,6 +342,10 @@ const CLI_COMMAND_HANDLERS = new Map([
     ["login", (rest) => runAuthLogin(rest, { runForecast, createRepairCommandDeps })],
     ["list", runListOrStatusCommand],
     ["status", runListOrStatusCommand],
+    ["web", (rest) => runWebCommand(rest, {
+            getStatus: loadStatusJsonSnapshot,
+            locale: resolveOutputLocale(loadPluginConfig().locale),
+        })],
     [
         "limits",
         (rest) => runLimitsCommand(rest, {
@@ -341,6 +380,7 @@ const CLI_COMMAND_HANDLERS = new Map([
             setStoragePath,
             loadAccounts,
             saveAccounts,
+            withAccountStorageTransaction,
         }),
     ],
     ["check", (rest) => runCheckCommand({
@@ -481,6 +521,12 @@ const CLI_COMMAND_HANDLERS = new Map([
             if (subcommand === "template") {
                 return runInitConfigCommand(configArgs);
             }
+            if (subcommand === "locale") {
+                return runLocaleCommand(configArgs, {
+                    loadConfig: () => loadPluginConfig(),
+                    saveConfig: savePluginConfig,
+                });
+            }
             console.error(`Unknown config command: ${subcommand ?? "(missing)"}`);
             return 1;
         },
@@ -506,6 +552,32 @@ const CLI_COMMAND_HANDLERS = new Map([
     ],
 ]);
 export async function runCodexMultiAuthCli(rawArgs) {
+    const localeArgs = [...rawArgs];
+    const previousLocaleOverride = process.env.CODEX_MULTI_AUTH_LOCALE;
+    let localeOverrideChanged = false;
+    const restoreLocaleOverride = () => {
+        if (!localeOverrideChanged)
+            return;
+        if (previousLocaleOverride === undefined)
+            delete process.env.CODEX_MULTI_AUTH_LOCALE;
+        else
+            process.env.CODEX_MULTI_AUTH_LOCALE = previousLocaleOverride;
+    };
+    for (let i = 0; i < localeArgs.length; i += 1) {
+        const arg = localeArgs[i];
+        if (arg === "--locale" && localeArgs[i + 1]) {
+            process.env.CODEX_MULTI_AUTH_LOCALE = localeArgs[i + 1];
+            localeOverrideChanged = true;
+            localeArgs.splice(i, 2);
+            i -= 1;
+        }
+        else if (typeof arg === "string" && arg.startsWith("--locale=")) {
+            process.env.CODEX_MULTI_AUTH_LOCALE = arg.slice("--locale=".length);
+            localeOverrideChanged = true;
+            localeArgs.splice(i, 1);
+            i -= 1;
+        }
+    }
     // Lazy install setup (audit roadmap §4.5.4): app detection, Codex app bind,
     // and launcher routing moved out of npm postinstall to the first CLI run.
     // ensureFirstRunSetup never throws; the catch is belt-and-braces so no
@@ -515,31 +587,41 @@ export async function runCodexMultiAuthCli(rawArgs) {
     }).catch(() => undefined);
     const startupDisplaySettings = await loadDashboardDisplaySettings();
     applyUiThemeFromDashboardSettings(startupDisplaySettings);
-    const args = rawArgs[0] && rawArgs[0] !== "auth" && ACCOUNT_MANAGER_COMMANDS.has(rawArgs[0])
-        ? ["auth", ...rawArgs]
-        : [...rawArgs];
+    const args = localeArgs[0] && localeArgs[0] !== "auth" && ACCOUNT_MANAGER_COMMANDS.has(localeArgs[0])
+        ? ["auth", ...localeArgs]
+        : [...localeArgs];
     if (args.length === 0) {
+        restoreLocaleOverride();
         printUsage();
         return 0;
     }
     if (args[0] === "--help" || args[0] === "-h") {
+        restoreLocaleOverride();
         printUsage();
         return 0;
     }
     const [root, sub, ...rest] = args;
     if (root !== "auth") {
+        restoreLocaleOverride();
         printUsage();
         return 1;
     }
     const command = sub ?? "login";
     if (command === "--help" || command === "-h") {
+        restoreLocaleOverride();
         printUsage();
         return 0;
     }
     const handler = CLI_COMMAND_HANDLERS.get(command);
     if (handler) {
-        return handler(rest);
+        try {
+            return await handler(rest);
+        }
+        finally {
+            restoreLocaleOverride();
+        }
     }
+    restoreLocaleOverride();
     console.error(`Unknown command: ${command}`);
     printUsage();
     return 1;

package/dist/lib/config.js

@@ -1,6 +1,7 @@
 import { existsSync, promises as fs, readFileSync } from "node:fs";
 import { join } from "node:path";
 import { parseBooleanEnv } from "./env-parsing.js";
+import { normalizeOutputLocaleSetting } from "./locale.js";
 import { stripModelEffortSuffix } from "./constants.js";
 import { withRetry, withRetrySync } from "./fs-retry.js";
 import { logWarn } from "./logger.js";
@@ -113,6 +114,7 @@ function resolvePluginConfigPath() {
  * CODEX_MODE is enabled by default for better Codex CLI parity
  */
 export const DEFAULT_PLUGIN_CONFIG = {
+    locale: "auto",
     codexMode: true,
     codexRuntimeRotationProxy: true,
     codexTuiV2: true,
@@ -1275,6 +1277,7 @@ function normalizeConfigExplainValue(value) {
     return value;
 }
 const CONFIG_EXPLAIN_ENTRIES = [
+    { key: "locale", envNames: ["CODEX_MULTI_AUTH_LOCALE"], getValue: config => normalizeOutputLocaleSetting(process.env.CODEX_MULTI_AUTH_LOCALE?.trim() || config.locale || "auto") ?? "auto" },
     { key: "codexMode", envNames: ["CODEX_MODE"], getValue: getCodexMode },
     {
         key: "codexRuntimeRotationProxy",

package/dist/lib/constants.d.ts

@@ -116,3 +116,5 @@ export type WireReasoningEffort = Exclude<ModelReasoningEffort, "ultra">;
  * untouched.
  */
 export declare function stripModelEffortSuffix(modelId: string): string;
+/** Maximum lifetime of a local quota rejection before upstream revalidation. */
+export declare const RATE_LIMIT_CACHE_TTL_MS: number;

package/dist/lib/constants.js

@@ -136,3 +136,5 @@ export function stripModelEffortSuffix(modelId) {
         return modelId;
     return modelId.replace(EFFORT_SUFFIX_PATTERN, "");
 }
+/** Maximum lifetime of a local quota rejection before upstream revalidation. */
+export const RATE_LIMIT_CACHE_TTL_MS = 60 * 60_000;

package/dist/lib/context-budget-response.js

@@ -17,14 +17,14 @@ function buildPauseMessage(advisory) {
     const windowNote = advisory.windowSource === "override"
         ? "your configured window size"
         : "an estimated window size (unverified — set `contextBudgetGuardModelWindowOverrides` if you know the real limit)";
-    return `[Plugin Notice] Context budget guard paused this session at ${formatPercent(advisory.percent)}% of ${windowNote} for \`${advisory.model}\`, before hitting the model's actual limit.
-
-Please use one of these commands to reduce context size:
-
-• **/compact** - Compress conversation history (recommended)
-• **/clear** - Start fresh with empty context
-• **/undo** - Remove recent messages
-
+    return `[Plugin Notice] Context budget guard paused this session at ${formatPercent(advisory.percent)}% of ${windowNote} for \`${advisory.model}\`, before hitting the model's actual limit.
+
+Please use one of these commands to reduce context size:
+
+• **/compact** - Compress conversation history (recommended)
+• **/clear** - Start fresh with empty context
+• **/undo** - Remove recent messages
+
 Then retry your request. This pause clears itself automatically once your context usage drops back below the threshold.`;
 }
 /**

package/dist/lib/context-overflow.js

@@ -33,16 +33,16 @@ export function isContextOverflowError(status, bodyText) {
 /**
  * The message shown to users when context overflow occurs
  */
-const CONTEXT_OVERFLOW_MESSAGE = `[Plugin Notice] Context is too long for this model.
-
-Please use one of these commands to reduce context size:
-
-• **/compact** - Compress conversation history (recommended)
-• **/clear** - Start fresh with empty context
-• **/undo** - Remove recent messages
-
-Then retry your request.
-
+const CONTEXT_OVERFLOW_MESSAGE = `[Plugin Notice] Context is too long for this model.
+
+Please use one of these commands to reduce context size:
+
+• **/compact** - Compress conversation history (recommended)
+• **/clear** - Start fresh with empty context
+• **/undo** - Remove recent messages
+
+Then retry your request.
+
 Alternatively, you can switch to a model with a larger context window.`;
 /**
  * Creates a synthetic SSE response for context overflow errors.

package/dist/lib/locale.d.ts

@@ -0,0 +1,7 @@
+export type OutputLocale = "en" | "zh";
+export type OutputLocaleSetting = OutputLocale | "auto";
+/** Resolve an explicit locale, environment override, or system language. */
+export declare function resolveOutputLocale(requested?: string | null, env?: NodeJS.ProcessEnv): OutputLocale;
+export declare function normalizeOutputLocaleSetting(value: string): OutputLocaleSetting | null;
+export declare function localized(locale: OutputLocale, en: string, zh: string): string;
+export declare function localeName(locale: OutputLocale): string;

package/dist/lib/locale.js

@@ -0,0 +1,35 @@
+const SUPPORTED_LOCALES = new Set(["auto", "en", "zh"]);
+/** Resolve an explicit locale, environment override, or system language. */
+export function resolveOutputLocale(requested, env = process.env) {
+    const configured = requested?.trim().toLowerCase();
+    const value = (env.CODEX_MULTI_AUTH_LOCALE?.trim() || configured || "auto")
+        .trim()
+        .toLowerCase();
+    if (value === "en" || value.startsWith("en-"))
+        return "en";
+    if (value === "zh" || value.startsWith("zh-"))
+        return "zh";
+    if (value !== "" && value !== "auto" && SUPPORTED_LOCALES.has(value)) {
+        return value === "zh" ? "zh" : "en";
+    }
+    const system = [env.LC_ALL, env.LC_MESSAGES, env.LANG]
+        .find((candidate) => typeof candidate === "string" && candidate.trim())
+        ?.toLowerCase() ?? "";
+    return system.startsWith("zh") ? "zh" : "en";
+}
+export function normalizeOutputLocaleSetting(value) {
+    const normalized = value.trim().toLowerCase();
+    if (normalized === "auto")
+        return "auto";
+    if (normalized === "en" || normalized.startsWith("en-"))
+        return "en";
+    if (normalized === "zh" || normalized.startsWith("zh-"))
+        return "zh";
+    return null;
+}
+export function localized(locale, en, zh) {
+    return locale === "zh" ? zh : en;
+}
+export function localeName(locale) {
+    return locale === "zh" ? "中文" : "English";
+}

package/dist/lib/oauth-success.html

@@ -1,126 +1,126 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Codex Sign-In Complete</title>
-  <style>
-    :root {
-      color-scheme: dark;
-      --bg: #0b0b0b;
-      --panel: #111111;
-      --text: #f2f2f2;
-      --muted: #a3a3a3;
-      --line: #232323;
-      --ok: #7cf0a6;
-    }
-
-    * {
-      box-sizing: border-box;
-    }
-
-    body {
-      margin: 0;
-      min-height: 100vh;
-      display: grid;
-      place-items: center;
-      background: var(--bg);
-      color: var(--text);
-      font-family: "Geist Mono", "GeistMono", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
-      padding: 24px;
-    }
-
-    main {
-      width: min(520px, 100%);
-      background: var(--panel);
-      border: 1px solid var(--line);
-      border-radius: 12px;
-      padding: 20px;
-      display: grid;
-      gap: 14px;
-    }
-
-    h1 {
-      margin: 0;
-      font-size: 20px;
-      font-weight: 600;
-      letter-spacing: -0.02em;
-    }
-
-    p {
-      margin: 0;
-      color: var(--muted);
-      font-size: 14px;
-      line-height: 1.5;
-    }
-
-    .status {
-      display: inline-flex;
-      align-items: center;
-      gap: 8px;
-      color: var(--ok);
-      font-size: 13px;
-    }
-
-    .dot {
-      width: 8px;
-      height: 8px;
-      border-radius: 50%;
-      background: currentColor;
-    }
-
-    dl {
-      margin: 0;
-      display: grid;
-      grid-template-columns: 120px 1fr;
-      gap: 8px 12px;
-      font-size: 13px;
-    }
-
-    dt {
-      color: var(--muted);
-    }
-
-    dd {
-      margin: 0;
-      color: var(--text);
-      word-break: break-word;
-    }
-
-    code {
-      background: #171717;
-      border: 1px solid var(--line);
-      border-radius: 6px;
-      padding: 2px 6px;
-      font-family: inherit;
-      font-size: 12px;
-    }
-
-    @media (max-width: 520px) {
-      dl {
-        grid-template-columns: 1fr;
-      }
-    }
-  </style>
-</head>
-<body>
-  <main role="main" aria-label="OAuth callback received">
-    <h1>Sign-in complete</h1>
-    <p>Return to your terminal to finish Codex login.</p>
-
-    <div class="status" aria-live="polite">
-      <span class="dot" aria-hidden="true"></span>
-      Callback received
-    </div>
-
-    <dl>
-      <dt>Endpoint</dt>
-      <dd><code>localhost:1455</code></dd>
-      <dt>Flow</dt>
-      <dd>OAuth callback captured</dd>
-      <dt>Next</dt>
-      <dd>Close this tab and continue in terminal</dd>
-    </dl>
-  </main>
-</body>
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Codex Sign-In Complete</title>
+  <style>
+    :root {
+      color-scheme: dark;
+      --bg: #0b0b0b;
+      --panel: #111111;
+      --text: #f2f2f2;
+      --muted: #a3a3a3;
+      --line: #232323;
+      --ok: #7cf0a6;
+    }
+
+    * {
+      box-sizing: border-box;
+    }
+
+    body {
+      margin: 0;
+      min-height: 100vh;
+      display: grid;
+      place-items: center;
+      background: var(--bg);
+      color: var(--text);
+      font-family: "Geist Mono", "GeistMono", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
+      padding: 24px;
+    }
+
+    main {
+      width: min(520px, 100%);
+      background: var(--panel);
+      border: 1px solid var(--line);
+      border-radius: 12px;
+      padding: 20px;
+      display: grid;
+      gap: 14px;
+    }
+
+    h1 {
+      margin: 0;
+      font-size: 20px;
+      font-weight: 600;
+      letter-spacing: -0.02em;
+    }
+
+    p {
+      margin: 0;
+      color: var(--muted);
+      font-size: 14px;
+      line-height: 1.5;
+    }
+
+    .status {
+      display: inline-flex;
+      align-items: center;
+      gap: 8px;
+      color: var(--ok);
+      font-size: 13px;
+    }
+
+    .dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+      background: currentColor;
+    }
+
+    dl {
+      margin: 0;
+      display: grid;
+      grid-template-columns: 120px 1fr;
+      gap: 8px 12px;
+      font-size: 13px;
+    }
+
+    dt {
+      color: var(--muted);
+    }
+
+    dd {
+      margin: 0;
+      color: var(--text);
+      word-break: break-word;
+    }
+
+    code {
+      background: #171717;
+      border: 1px solid var(--line);
+      border-radius: 6px;
+      padding: 2px 6px;
+      font-family: inherit;
+      font-size: 12px;
+    }
+
+    @media (max-width: 520px) {
+      dl {
+        grid-template-columns: 1fr;
+      }
+    }
+  </style>
+</head>
+<body>
+  <main role="main" aria-label="OAuth callback received">
+    <h1>Sign-in complete</h1>
+    <p>Return to your terminal to finish Codex login.</p>
+
+    <div class="status" aria-live="polite">
+      <span class="dot" aria-hidden="true"></span>
+      Callback received
+    </div>
+
+    <dl>
+      <dt>Endpoint</dt>
+      <dd><code>localhost:1455</code></dd>
+      <dt>Flow</dt>
+      <dd>OAuth callback captured</dd>
+      <dt>Next</dt>
+      <dd>Close this tab and continue in terminal</dd>
+    </dl>
+  </main>
+</body>
 </html>

package/dist/lib/policy/runtime-policy-cache.js

@@ -168,7 +168,7 @@ export function loadAccountPolicyStoreCached() {
     return loadStoreCached({
         path: getAccountPolicyPath(),
         cache: ACCOUNT_POLICY_CACHE,
-        load: loadAccountPolicyStore,
+        load: () => loadAccountPolicyStore({ strict: true }),
         isEmptyStore: (store) => Object.keys(store.accounts).length === 0,
     });
 }