codex-multi-auth 2.3.0-beta.1 → 2.3.0-beta.3

package/dist/lib/ui/ui-copy.js

@@ -0,0 +1,163 @@
+import { AUTH_REDIRECT } from "../auth/auth.js";
+export const UI_COPY = {
+    mainMenu: {
+        title: "Accounts Dashboard",
+        searchSubtitlePrefix: "Search:",
+        quickStart: "Quick Actions",
+        addAccount: "Add New Account",
+        checkAccounts: "Run Health Check",
+        bestAccount: "Pick Best Account",
+        fixIssues: "Auto-Repair Issues",
+        settings: "Settings",
+        moreChecks: "Advanced Checks",
+        refreshChecks: "Refresh All Accounts",
+        checkFlagged: "Check Problem Accounts",
+        accounts: "Saved Accounts",
+        loadingLimits: "Fetching account limits...",
+        noSearchMatches: "No accounts match your search",
+        dangerZone: "Danger Zone",
+        removeAllAccounts: "Delete All Accounts",
+        helpCompact: "↑↓ Move | Enter Select | / Search | 1-9 Switch | Q Back",
+        helpDetailed: "Arrow keys move, Enter selects, / searches, 1-9 switches account, Q goes back",
+    },
+    accountDetails: {
+        back: "Back",
+        enable: "Enable Account",
+        disable: "Disable Account",
+        setCurrent: "Set As Current",
+        refresh: "Re-Login",
+        remove: "Delete Account",
+        help: "↑↓ Move | Enter Select | S Use | R Sign In | D Delete | Q Back",
+    },
+    oauth: {
+        chooseModeTitle: "Get Started",
+        chooseModeSubtitle: "Choose how you want to continue.",
+        signInHeading: "Sign in",
+        restoreHeading: "Recover saved accounts",
+        openBrowser: "Open Browser (Easy)",
+        manualMode: "Manual / Incognito",
+        restoreSavedBackup: "Restore Saved Backup",
+        loadLastBackup: "Load Last Saved Backup (Recommended)",
+        chooseBackupManually: "Choose Backup Manually",
+        back: "Back",
+        chooseModeHelp: "↑↓ Move | Enter Select | 1 Easy | 2 Manual | Q Back",
+        chooseModeHelpWithBackup: "↑↓ Move | Enter Select | 1 Easy | 2 Manual | 3 Backup | Q Back",
+        restoreBackupTitle: "Restore Saved Backup",
+        restoreBackupSubtitle: "Choose how you want to recover saved accounts.",
+        restoreBackupLatestHint: "Fastest way to recover your saved accounts.",
+        restoreBackupHelp: "↑↓ Move | Enter Select | 1 Latest | 2 Manual | Q Back",
+        manualBackupTitle: "Choose Backup",
+        manualBackupSubtitle: "Pick a saved backup to restore.",
+        manualBackupHelp: "↑↓ Move | Enter Select | Q Back",
+        loadLastBackupHint: (fileName, accountCount, savedAt) => `${fileName} | ${accountCount} account${accountCount === 1 ? "" : "s"} | saved ${savedAt}`,
+        manualBackupHint: (accountCount, savedAt) => `${accountCount} account${accountCount === 1 ? "" : "s"} | saved ${savedAt}`,
+        restoreBackupConfirm: (fileName, accountCount) => `Load ${fileName} (${accountCount} account${accountCount === 1 ? "" : "s"})?`,
+        restoreBackupLoaded: (fileName, accountCount) => `Loaded ${fileName} (${accountCount} account${accountCount === 1 ? "" : "s"}).`,
+        restoreBackupSyncWarning: "Backup loaded locally, but Codex auth sync did not complete. Multi-auth routing will still use the restored account pool.",
+        goTo: "Go to:",
+        copyOk: "Login link copied.",
+        copyFail: "Could not copy login link.",
+        pastePrompt: "Paste callback URL or code here (Q to cancel):",
+        browserOpened: "Browser opened.",
+        browserOpenFail: "Could not open browser. Use this link:",
+        waitingCallback: `Waiting for login callback on ${AUTH_REDIRECT.host}:${AUTH_REDIRECT.port}...`,
+        callbackBypassed: "Manual mode active. Paste the callback URL manually.",
+        callbackUnavailable: "Callback listener unavailable. Paste the callback URL manually.",
+        callbackMissed: "No callback received. Paste manually.",
+        cancelled: "Sign-in cancelled.",
+        cancelledBackToMenu: "Sign-in cancelled. Going back to menu.",
+        callbackInvalid: "That callback URL is missing the code or state parameter. Paste the full URL you were redirected to (it should contain both code= and state=).",
+        callbackStateMismatch: "OAuth state mismatch. That callback URL was generated for a different login attempt. Restart login and paste the callback URL from this attempt.",
+    },
+    returnFlow: {
+        continuePrompt: "Press Enter to go back.",
+        actionFailedPrompt: "Action failed. Press Enter to go back.",
+        autoReturn: (seconds) => `Returning in ${seconds}s... Press any key to pause.`,
+        paused: "Paused. Press any key to continue.",
+        working: "Running...",
+        done: "Done.",
+        failed: "Failed.",
+    },
+    settings: {
+        title: "Settings",
+        subtitle: "Customize menu, behavior, backend, and experiments",
+        help: "↑↓ Move | Enter Select | Q Back",
+        sectionTitle: "Basic",
+        advancedTitle: "Advanced",
+        exitTitle: "Back",
+        accountList: "Account List View",
+        summaryFields: "Summary Line",
+        behavior: "Menu Behavior",
+        theme: "Color Theme",
+        experimental: "Experimental",
+        experimentalTitle: "Experimental",
+        experimentalSubtitle: "Preview sync and backup actions before they become stable",
+        experimentalHelpMenu: "Enter Select | 1 Sync | 2 Backup | 3 Guard | [ - Down | ] + Up | S Save | Q Back",
+        experimentalHelpPreview: "Enter Select | A Apply | Q Back",
+        experimentalHelpStatus: "Enter Select | Q Back",
+        experimentalSync: "Sync Accounts to oc-chatgpt-multi-auth",
+        experimentalApplySync: "Apply Sync",
+        experimentalBackup: "Save Pool Backup",
+        experimentalBackupPrompt: "Backup file name (.json): ",
+        experimentalRefreshGuard: "Enable Refresh Guard",
+        experimentalRefreshInterval: "Refresh Guard Interval",
+        experimentalDecreaseInterval: "Decrease Refresh Interval",
+        experimentalIncreaseInterval: "Increase Refresh Interval",
+        backend: "Backend Controls",
+        back: "Back",
+        previewHeading: "Live Preview",
+        displayHeading: "Options",
+        resetDefault: "Reset to Default",
+        saveAndBack: "Save and Back",
+        backNoSave: "Back Without Saving",
+        accountListTitle: "Account List View",
+        accountListSubtitle: "Choose row details and optional smart sorting",
+        accountListHelp: "Enter Toggle | Number Toggle | M Sort | L Layout | S Save | Q Back (No Save)",
+        summaryTitle: "Account Details Row",
+        summarySubtitle: "Choose and order detail fields",
+        summaryHelp: "Enter Toggle | 1-3 Toggle | [ ] Reorder | S Save | Q Back (No Save)",
+        behaviorTitle: "Return Behavior",
+        behaviorSubtitle: "Control how result screens return",
+        behaviorHelp: "Enter Select | 1-3 Delay | P Pause | L AutoFetch | F Status | T TTL | S Save | Q Back (No Save)",
+        themeTitle: "Color Theme",
+        themeSubtitle: "Pick base color and accent",
+        themeHelp: "Enter Select | 1-2 Base | S Save | Q Back (No Save)",
+        backendTitle: "Backend Controls",
+        backendSubtitle: "Tune sync, retry, and limit behavior",
+        backendHelp: "Enter Open | 1-4 Category | S Save | R Reset | Q Back (No Save)",
+        backendCategoriesHeading: "Categories",
+        backendCategoryTitle: "Backend Category",
+        backendCategoryHelp: "Enter Toggle/Adjust | +/- or [ ] Number | 1-9 Toggle | R Reset | Q Back",
+        backendToggleHeading: "Switches",
+        backendNumberHeading: "Numbers",
+        backendDecrease: "Decrease Focused Value",
+        backendIncrease: "Increase Focused Value",
+        backendResetCategory: "Reset Category",
+        backendBackToCategories: "Back to Categories",
+        baseTheme: "Base Color",
+        accentColor: "Accent Color",
+        actionTiming: "Auto Return Delay",
+        moveUp: "Move Focused Field Up",
+        moveDown: "Move Focused Field Down",
+    },
+    fallback: {
+        addAnotherTip: "Tip: Use private mode or sign out before adding another account.",
+        addAnotherQuestion: (count) => `Add another account? (${count} added) (y/n): `,
+        selectModePrompt: "(a) add, (c) check, (b) best, fi(x), (s) settings, (d) deep, (g) problem, (f) fresh, (q) back [a/c/b/x/s/d/g/f/q]: ",
+        invalidModePrompt: "Use one of: a, c, b, x, s, d, g, f, q.",
+    },
+};
+/**
+ * Builds the "Check Problem Accounts" label, appending the flagged count when greater than zero.
+ *
+ * This function is pure and has no side effects, is safe for concurrent use, performs no filesystem
+ * access (including Windows-specific behavior), and does not perform any token redaction.
+ *
+ * @param flaggedCount - The number of flagged accounts to show; if greater than zero the count is appended in parentheses.
+ * @returns The resulting label string: the base label when `flaggedCount` is 0 or less, otherwise the base label followed by ` (count)`.
+ */
+export function formatCheckFlaggedLabel(flaggedCount) {
+    return flaggedCount > 0
+        ? `${UI_COPY.mainMenu.checkFlagged} (${flaggedCount})`
+        : UI_COPY.mainMenu.checkFlagged;
+}

package/dist/lib/unified-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unified-settings.d.ts","sourceRoot":"","sources":["../../lib/unified-settings.ts"],"names":[],"mappings":"AAcA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AA2bnD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,UAAU,GAAG,IAAI,CAQ/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,UAAU,GAAG,IAAI,CAO1E;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrF;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQ/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CACjD,wBAAwB,EAAE,UAAU,GAClC,OAAO,CAAC,IAAI,CAAC,CAsBf"}
+{"version":3,"file":"unified-settings.d.ts","sourceRoot":"","sources":["../../lib/unified-settings.ts"],"names":[],"mappings":"AAeA,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AA2bnD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,UAAU,GAAG,IAAI,CAQ/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,UAAU,GAAG,IAAI,CAO1E;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBrF;AAED;;;;;;;;GAQG;AACH,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQ/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CACjD,wBAAwB,EAAE,UAAU,GAClC,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/lib/unified-settings.js

@@ -2,6 +2,7 @@ import { copyFileSync, existsSync, mkdirSync, renameSync, readFileSync, unlinkSy
 import { join } from "node:path";
 import { getCodexMultiAuthDir } from "./runtime-paths.js";
 import { sleep } from "./utils.js";
+import { tempPathFor } from "./temp-path.js";
 export const UNIFIED_SETTINGS_VERSION = 1;
 const UNIFIED_SETTINGS_PATH = join(getCodexMultiAuthDir(), "settings.json");
 const UNIFIED_SETTINGS_BACKUP_PATH = `${UNIFIED_SETTINGS_PATH}.bak`;
@@ -341,7 +342,7 @@ async function writeSettingsRecordAsync(record, options) {
     await fs.mkdir(getCodexMultiAuthDir(), { recursive: true });
     const payload = normalizeForWrite(record);
     const data = `${JSON.stringify(payload, null, 2)}\n`;
-    const tempPath = `${UNIFIED_SETTINGS_PATH}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+    const tempPath = tempPathFor(UNIFIED_SETTINGS_PATH);
     await trySnapshotUnifiedSettingsBackupAsync({
         skipBecauseBackupRead: options?.skipBackupSnapshot,
     });
@@ -549,4 +550,3 @@ export async function saveUnifiedDashboardSettings(dashboardDisplaySettings) {
         }
     });
 }
-//# sourceMappingURL=unified-settings.js.map

package/dist/lib/update-notice.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-notice.d.ts","sourceRoot":"","sources":["../../lib/update-notice.ts"],"names":[],"mappings":"AA0CA,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACtB;AA+DD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmBzE;AA0JD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAM1E;AAED,wBAAsB,eAAe,CACpC,KAAK,UAAQ,EACb,cAAc,SAA0B,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAED,wBAAsB,cAAc,CACnC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAUvC"}
+{"version":3,"file":"update-notice.d.ts","sourceRoot":"","sources":["../../lib/update-notice.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,iBAAiB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;CACtB;AA+DD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmBzE;AA0JD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAM1E;AAED,wBAAsB,eAAe,CACpC,KAAK,UAAQ,EACb,cAAc,SAA0B,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAED,wBAAsB,cAAc,CACnC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAUvC"}

package/dist/lib/update-notice.js

@@ -3,6 +3,7 @@ import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createLogger } from "./logger.js";
 import { getCodexCacheDir } from "./runtime-paths.js";
+import { tempPathFor } from "./temp-path.js";
 const log = createLogger("update-notice");
 const PACKAGE_NAME = "codex-multi-auth";
 const NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
@@ -34,7 +35,7 @@ async function writeCacheContents(serialized) {
         if (!existsSync(CACHE_DIR)) {
             mkdirSync(CACHE_DIR, { recursive: true });
         }
-        tempPath = `${CACHE_FILE}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+        tempPath = tempPathFor(CACHE_FILE);
         let lastError = null;
         for (let attempt = 0; attempt < 4; attempt++) {
             try {
@@ -312,4 +313,3 @@ export function clearUpdateCache() {
         }
     });
 }
-//# sourceMappingURL=update-notice.js.map

package/dist/lib/usage/index.js

@@ -2,4 +2,3 @@ export * from "./types.js";
 export * from "./pricing.js";
 export * from "./redaction.js";
 export * from "./ledger.js";
-//# sourceMappingURL=index.js.map

package/dist/lib/usage/ledger.js

@@ -491,4 +491,3 @@ export async function rotateUsageLedger(options = {}) {
 export function resetUsageLedgerQueueForTests() {
     appendQueue = Promise.resolve();
 }
-//# sourceMappingURL=ledger.js.map

package/dist/lib/usage/pricing.js

@@ -64,4 +64,3 @@ export function estimateUsageCostUsd(model, tokens) {
 export function listUsageModelPricing() {
     return structuredClone(MODEL_PRICING);
 }
-//# sourceMappingURL=pricing.js.map

package/dist/lib/usage/redaction.js

@@ -127,4 +127,3 @@ export function normalizeUsageLedgerRow(input) {
 export function usageRowToJsonLine(row) {
     return `${JSON.stringify(row)}\n`;
 }
-//# sourceMappingURL=redaction.js.map

package/dist/lib/usage/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/lib/utils.js

@@ -62,4 +62,3 @@ export function toStringValue(value) {
 export function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-//# sourceMappingURL=utils.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.3.0-beta.1",
+	"version": "2.3.0-beta.3",
 	"description": "Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotation, diagnostics, and recovery tools for @openai/codex",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
@@ -79,6 +79,7 @@
 	},
 	"scripts": {
 		"build": "tsc && node scripts/copy-oauth-success.js",
+		"generate:schema": "npm run build && node scripts/generate-config-schema.mjs",
 		"typecheck": "tsc --noEmit",
 		"typecheck:scripts": "tsc -p tsconfig.scripts.json",
 		"lint": "npm run lint:ts && npm run lint:scripts",
@@ -152,19 +153,17 @@
 		]
 	},
 	"engines": {
-		"node": ">=18.0.0"
-	},
-	"peerDependencies": {
-		"typescript": "^5"
+		"node": ">=18.17.0"
 	},
 	"devDependencies": {
-		"@fast-check/vitest": "^0.2.4",
-		"@types/node": "^25.3.0",
+		"@types/node": "^20.19.42",
 		"@typescript-eslint/eslint-plugin": "^8.56.0",
 		"@typescript-eslint/parser": "^8.56.0",
 		"@vitest/coverage-v8": "^4.1.8",
 		"@vitest/ui": "^4.1.8",
 		"eslint": "^10.0.0",
+		"eslint-import-resolver-typescript": "^4.4.5",
+		"eslint-plugin-import-x": "^4.16.2",
 		"fast-check": "^4.5.3",
 		"husky": "^9.1.7",
 		"lint-staged": "^16.2.7",
@@ -176,12 +175,12 @@
 		"@codex-ai/plugin": "file:vendor/codex-ai-plugin",
 		"@codex-ai/sdk": "file:vendor/codex-ai-sdk",
 		"@openauthjs/openauth": "^0.4.3",
-		"hono": "4.12.18",
+		"hono": "4.12.21",
 		"undici": "6.25.0",
 		"zod": "4.4.3"
 	},
 	"overrides": {
-		"hono": "4.12.18",
+		"hono": "4.12.21",
 		"flatted": "3.4.2",
 		"minimatch": "10.2.4",
 		"picomatch": "4.0.4",

package/scripts/postinstall.js

@@ -2,10 +2,16 @@
 
 // @ts-check
 
-import { existsSync, readdirSync } from "node:fs";
-import { homedir } from "node:os";
-import { join, resolve } from "node:path";
+// Thin, CI-aware install notice (audit roadmap §4.5.4).
+//
+// All app detection, Codex app bind self-heal, and launcher routing that used
+// to run here now run lazily on the first CLI invocation — see
+// lib/runtime/first-run.ts (ensureFirstRunSetup). This script performs no
+// detection and no filesystem mutation: it exits 0 silently in CI/non-TTY
+// contexts and otherwise prints a short notice to stderr.
+
 import process from "node:process";
+import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const TRUE_VALUES = new Set(["1", "true", "yes"]);
@@ -24,6 +30,11 @@ const CI_ENV_KEYS = [
 	"BITBUCKET_BUILD_NUMBER",
 ];
 
+export const INSTALL_NOTICE = [
+	"codex-multi-auth installed. Run `codex-multi-auth --help` to get started.",
+	"App integration (Codex app bind + launcher shortcuts) completes automatically on first run.",
+].join("\n");
+
 /**
  * @param {string | undefined} value
  */
@@ -35,15 +46,6 @@ export function readOptionalBoolean(value) {
 	return null;
 }
 
-/**
- * @param {NodeJS.ProcessEnv} env
- */
-export function isGlobalNpmInstall(env = process.env) {
-	const globalFlag = readOptionalBoolean(env.npm_config_global);
-	if (globalFlag === true) return true;
-	return (env.npm_config_location ?? "").trim().toLowerCase() === "global";
-}
-
 /**
  * @param {NodeJS.ProcessEnv} env
  * @param {string} key
@@ -64,263 +66,39 @@ export function isCiEnvironment(env = process.env) {
 }
 
 /**
- * @param {string} directory
- * @param {string} prefix
- */
-function directoryContainsEntryWithPrefix(directory, prefix) {
-	try {
-		return readdirSync(directory, { withFileTypes: true }).some((entry) =>
-			entry.name.startsWith(prefix),
-		);
-	} catch {
-		return false;
-	}
-}
-
-/**
- * @param {{ env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform, home?: string }} [options]
- */
-export function hasCodexDesktopApp(options = {}) {
-	const env = options.env ?? process.env;
-	const platform = options.platform ?? process.platform;
-	const home = options.home ?? homedir();
-
-	if (platform === "win32") {
-		const localAppData =
-			(env.LOCALAPPDATA ?? "").trim() || join(home, "AppData", "Local");
-		const programFiles =
-			(env.ProgramFiles ?? env.ProgramW6432 ?? "").trim() || "C:\\Program Files";
-		return (
-			directoryContainsEntryWithPrefix(
-				join(localAppData, "Packages"),
-				"OpenAI.Codex_",
-			) ||
-			directoryContainsEntryWithPrefix(
-				join(programFiles, "WindowsApps"),
-				"OpenAI.Codex_",
-			)
-		);
-	}
-
-	if (platform === "darwin") {
-		return (
-			existsSync("/Applications/Codex.app") ||
-			existsSync(join(home, "Applications", "Codex.app"))
-		);
-	}
-
-	return false;
-}
-
-/**
- * @param {{
- *   env?: NodeJS.ProcessEnv,
- *   platform?: NodeJS.Platform,
- *   home?: string,
- *   rotationEnabled: boolean,
- *   appDetected?: boolean,
- * }} options
- */
-export function shouldAutoBindCodexAppOnInstall(options) {
-	const env = options.env ?? process.env;
-	if (isCiEnvironment(env)) return false;
-
-	const bindOverride = readOptionalBoolean(env.CODEX_MULTI_AUTH_APP_BIND);
-	if (bindOverride !== null) return bindOverride;
-
-	const installOverride = readOptionalBoolean(
-		env.CODEX_MULTI_AUTH_APP_BIND_INSTALL,
-	);
-	if (installOverride !== null) return installOverride;
-
-	if (!isGlobalNpmInstall(env)) return false;
-	if (!options.rotationEnabled) return false;
-	return (
-		options.appDetected ??
-		hasCodexDesktopApp({
-			env,
-			platform: options.platform,
-			home: options.home,
-		})
-	);
-}
-
-/**
- * @param {{
- *   env?: NodeJS.ProcessEnv,
- *   rotationEnabled: boolean,
- * }} options
- */
-export function shouldAutoInstallCodexAppLauncherOnInstall(options) {
-	const env = options.env ?? process.env;
-	if (isCiEnvironment(env)) return false;
-
-	const installOverride = readOptionalBoolean(
-		env.CODEX_MULTI_AUTH_APP_LAUNCHER_INSTALL,
-	);
-	if (installOverride !== null) return installOverride;
-
-	if (!isGlobalNpmInstall(env)) return false;
-	return options.rotationEnabled;
-}
-
-async function loadConfigModule() {
-	try {
-		return await import("../dist/lib/config.js");
-	} catch (error) {
-		if (
-			error &&
-			typeof error === "object" &&
-			"code" in error &&
-			error.code === "ERR_MODULE_NOT_FOUND"
-		) {
-			return null;
-		}
-		throw error;
-	}
-}
-
-async function loadAppBindModule() {
-	try {
-		return await import("../dist/lib/runtime/app-bind.js");
-	} catch (error) {
-		if (
-			error &&
-			typeof error === "object" &&
-			"code" in error &&
-			error.code === "ERR_MODULE_NOT_FOUND"
-		) {
-			return null;
-		}
-		throw error;
-	}
-}
-
-/**
- * @param {unknown} configModule
  * @param {NodeJS.ProcessEnv} [env]
+ * @param {boolean} [isTty]
  */
-export function resolveRotationEnabled(configModule, env = process.env) {
-	const envOverride = readOptionalBoolean(
-		env.CODEX_MULTI_AUTH_RUNTIME_ROTATION_PROXY,
-	);
-	if (envOverride !== null) return envOverride;
-	if (
-		!configModule ||
-		typeof configModule.loadPluginConfig !== "function" ||
-		typeof configModule.getCodexRuntimeRotationProxy !== "function"
-	) {
-		return true;
-	}
-	return (
-		configModule.getCodexRuntimeRotationProxy(configModule.loadPluginConfig()) ===
-		true
-	);
-}
-
-function defaultPostinstallLog(message) {
-	console.error(`codex-multi-auth: ${message}`);
-}
-
-/**
- * @param {boolean} rotationEnabled
- */
-async function maybeBindCodexAppOnInstall(rotationEnabled) {
-	const appBindModule = await loadAppBindModule();
-	if (!appBindModule || typeof appBindModule.bindCodexAppRuntimeRotation !== "function") {
-		return;
-	}
-
-	const currentStatus =
-		typeof appBindModule.getAppBindStatus === "function"
-			? await appBindModule.getAppBindStatus().catch(() => null)
-			: null;
-	const appDetected = hasCodexDesktopApp() || currentStatus?.bound === true;
-	if (!shouldAutoBindCodexAppOnInstall({ rotationEnabled, appDetected })) {
-		return;
-	}
-
-	const result = await appBindModule.bindCodexAppRuntimeRotation();
-	if (result?.message) {
-		console.error(`codex-multi-auth: ${result.message}`);
-	}
-}
-
-/**
- * @param {boolean} rotationEnabled
- * @param {(message: string) => void} [log]
- */
-export async function maybeInstallCodexAppLauncherOnInstall(
-	rotationEnabled,
-	log = defaultPostinstallLog,
+export function shouldPrintInstallNotice(
+	env = process.env,
+	isTty = process.stderr.isTTY === true,
 ) {
-	if (!shouldAutoInstallCodexAppLauncherOnInstall({ rotationEnabled })) {
-		return;
-	}
-
-	try {
-		const launcherModule = await import("./codex-app-launcher.js");
-		if (typeof launcherModule.installCodexAppLauncher !== "function") {
-			return;
-		}
-		await launcherModule.installCodexAppLauncher({
-			log,
-		});
-	} catch (error) {
-		log(
-			`app launcher postinstall skipped: ${error instanceof Error ? error.message : String(error)}`,
-		);
-	}
+	if (isCiEnvironment(env)) return false;
+	return isTty === true;
 }
 
 /**
  * @param {{
- *   loadConfigModule?: () => Promise<unknown>,
- *   bindCodexApp?: (rotationEnabled: boolean) => Promise<void>,
- *   installLauncher?: (rotationEnabled: boolean) => Promise<void>,
- *   log?: (message: string) => void,
  *   env?: NodeJS.ProcessEnv,
- * }} [deps]
+ *   isTty?: boolean,
+ *   log?: (message: string) => void,
+ * }} [options]
+ * @returns {number} always 0 — an install notice must never fail an install
  */
-export async function runPostinstallSelfHeal(deps = {}) {
-	const loadConfig = deps.loadConfigModule ?? loadConfigModule;
-	const bindCodexApp = deps.bindCodexApp ?? maybeBindCodexAppOnInstall;
-	const log = deps.log ?? defaultPostinstallLog;
-	const installLauncher =
-		deps.installLauncher ??
-		((rotationEnabled) =>
-			maybeInstallCodexAppLauncherOnInstall(rotationEnabled, log));
-	const configModule = await loadConfig();
-	const rotationEnabled = resolveRotationEnabled(configModule, deps.env);
-
+export function runPostinstall(options = {}) {
 	try {
-		await bindCodexApp(rotationEnabled);
-	} catch (error) {
-		log(
-			`app bind postinstall skipped: ${error instanceof Error ? error.message : String(error)}`,
-		);
-	}
-
-	try {
-		await installLauncher(rotationEnabled);
-	} catch (error) {
-		log(
-			`app launcher postinstall skipped: ${error instanceof Error ? error.message : String(error)}`,
-		);
+		const env = options.env ?? process.env;
+		const isTty = options.isTty ?? process.stderr.isTTY === true;
+		if (shouldPrintInstallNotice(env, isTty)) {
+			const log = options.log ?? ((message) => console.error(message));
+			log(INSTALL_NOTICE);
+		}
+	} catch {
+		// Best-effort notice only.
 	}
 	return 0;
 }
 
-async function main() {
-	return runPostinstallSelfHeal();
-}
-
-function normalizePostinstallExitCode(exitCode) {
-	return Number.isInteger(exitCode) && exitCode >= 0 && exitCode <= 255
-		? exitCode
-		: 0;
-}
-
 const isDirectRun = (() => {
 	try {
 		return resolve(process.argv[1] ?? "") === fileURLToPath(import.meta.url);
@@ -330,14 +108,5 @@ const isDirectRun = (() => {
 })();
 
 if (isDirectRun) {
-	main()
-		.then((exitCode) => {
-			process.exitCode = normalizePostinstallExitCode(exitCode);
-		})
-		.catch((error) => {
-			defaultPostinstallLog(
-				`postinstall self-heal skipped: ${error instanceof Error ? error.message : String(error)}`,
-			);
-			process.exitCode = 0;
-		});
+	process.exitCode = runPostinstall();
 }

package/scripts/preuninstall.js

@@ -62,7 +62,7 @@ export async function runPreuninstallCleanup(deps = {}) {
 	/** @type {"safe" | "uncertain"} */
 	let bunLockState = "uncertain";
 
-	// Unbind Codex app runtime rotation (reverses postinstall bind)
+	// Unbind Codex app runtime rotation (reverses install-time/first-run bind)
 	try {
 		if (deps.unbindCodexApp) {
 			await deps.unbindCodexApp(dryRun);
@@ -85,7 +85,7 @@ export async function runPreuninstallCleanup(deps = {}) {
 		);
 	}
 
-	// Remove OS-level launcher (reverses postinstall launcher install)
+	// Remove OS-level launcher (reverses install-time/first-run launcher install)
 	try {
 		if (deps.removeLauncher) {
 			await deps.removeLauncher({ dryRun, log });