codex-multi-auth 2.3.0 → 2.3.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
   "interface": {
     "composerIcon": "./assets/codex-multi-auth-icon.svg"

package/README.md

@@ -383,7 +383,9 @@ codex-multi-auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v2.3.0.md](docs/releases/v2.3.0.md) — install via `npm i -g codex-multi-auth`
+- Current stable: [docs/releases/v2.3.2.md](docs/releases/v2.3.2.md) — install via `npm i -g codex-multi-auth`
+- Previous stable: [docs/releases/v2.3.1.md](docs/releases/v2.3.1.md)
+- Previous stable: [docs/releases/v2.3.0.md](docs/releases/v2.3.0.md)
 - Previous stable: [docs/releases/v2.2.2.md](docs/releases/v2.2.2.md)
 - Previous stable: [docs/releases/v2.2.1.md](docs/releases/v2.2.1.md)
 - Previous stable: [docs/releases/v2.2.0.md](docs/releases/v2.2.0.md)

package/dist/lib/codex-manager/account-manager-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-manager-commands.d.ts","sourceRoot":"","sources":["../../../lib/codex-manager/account-manager-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aA6BnC,CAAC"}
+{"version":3,"file":"account-manager-commands.d.ts","sourceRoot":"","sources":["../../../lib/codex-manager/account-manager-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,aA8BnC,CAAC"}

package/dist/lib/codex-manager/account-manager-commands.js

@@ -36,6 +36,7 @@ export const ACCOUNT_MANAGER_COMMANDS = new Set([
     "monitor",
     "rotation",
     "why-selected",
+    "history",
     "config",
     "init-config",
     "debug",

package/dist/lib/codex-manager/commands/history.d.ts

@@ -0,0 +1,23 @@
+export interface HistorySessionSummary {
+    id: string;
+    threadName: string;
+    updatedAt: string;
+    provider: string | null;
+    originator: string | null;
+    cwd: string | null;
+    path: string;
+}
+export interface HistorySessionDetail extends HistorySessionSummary {
+    cliVersion: string | null;
+    messages: string[];
+}
+export interface HistoryCommandDeps {
+    getCodexHome?: () => string;
+    readDirRecursive?: (dir: string) => string[];
+    readFile?: (path: string) => string;
+    statMtime?: (path: string) => Date;
+    logInfo?: (message: string) => void;
+    logError?: (message: string) => void;
+}
+export declare function runHistoryCommand(args: string[], deps?: HistoryCommandDeps): number;
+//# sourceMappingURL=history.d.ts.map

package/dist/lib/codex-manager/commands/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../../../lib/codex-manager/commands/history.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IAClE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IAClC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAiVD,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,kBAAuB,GAC3B,MAAM,CA2BR"}

package/dist/lib/codex-manager/commands/history.js

@@ -0,0 +1,312 @@
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { getCodexHomeDir } from "../../runtime-paths.js";
+/**
+ * `codex-multi-auth history` — provider-agnostic local session browser.
+ *
+ * Codex CLI's `/resume` view filters local rollout threads by the model
+ * provider that is currently active in `config.toml`. When runtime rotation /
+ * app bind is enabled the active provider becomes
+ * `codex-multi-auth-runtime-proxy`, so sessions recorded under the native
+ * `openai` provider (or vice versa) become invisible in `/resume` even though
+ * the rollout files still live side-by-side under `~/.codex/sessions/`. Users
+ * perceive this as "history is not shared across accounts" (issue #612), but
+ * the split is by provider name, not by account.
+ *
+ * This command reads the rollout files directly and lists every local session
+ * regardless of the provider it was created under, giving a complete view that
+ * `/resume` cannot. It performs no network calls and never mutates state.
+ */
+const ROLLOUT_FILENAME_PATTERN = /^rollout-\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
+const DEFAULT_PREVIEW_MESSAGE_COUNT = 3;
+const MAX_THREAD_NAME_LENGTH = 80;
+function readStringField(record, key) {
+    const value = record?.[key];
+    return typeof value === "string" && value.trim().length > 0
+        ? value.trim()
+        : null;
+}
+function defaultReadDirRecursive(dir) {
+    const results = [];
+    let entries = [];
+    try {
+        entries = readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return results;
+    }
+    for (const entry of entries) {
+        const entryPath = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            results.push(...defaultReadDirRecursive(entryPath));
+            continue;
+        }
+        if (entry.isFile() && ROLLOUT_FILENAME_PATTERN.test(entry.name)) {
+            results.push(entryPath);
+        }
+    }
+    return results;
+}
+function extractIdFromFilename(fileName) {
+    const match = fileName.match(ROLLOUT_FILENAME_PATTERN);
+    return match?.[1] ?? null;
+}
+/**
+ * Separator-agnostic basename. Rollout paths may carry Windows separators even
+ * when this runs on POSIX (e.g. injected paths in tests, or a CODEX_HOME on a
+ * mounted Windows volume), so split on both `/` and `\` rather than relying on
+ * the platform-specific node:path basename.
+ */
+function baseNameOf(filePath) {
+    const segments = filePath.split(/[\\/]/);
+    return segments[segments.length - 1] ?? filePath;
+}
+/**
+ * Parse a single rollout file into a session summary.
+ *
+ * Mirrors the index-building logic the wrapper uses (scripts/codex.js
+ * parseRolloutIndexEntry) but additionally surfaces the `model_provider` and
+ * `originator` from `session_meta`, which is the field that actually drives the
+ * `/resume` visibility split. Returns null for files without a `session_meta`
+ * record or that cannot be read, so partially-written rollouts are skipped
+ * rather than crashing the listing.
+ */
+function parseRollout(rolloutPath, deps, previewLimit) {
+    const idFromName = extractIdFromFilename(baseNameOf(rolloutPath));
+    if (!idFromName)
+        return null;
+    let content;
+    try {
+        content = deps.readFile(rolloutPath);
+    }
+    catch {
+        return null;
+    }
+    const lines = content.split(/\r?\n/);
+    let id = idFromName;
+    let threadName = "";
+    let updatedAt = null;
+    let provider = null;
+    let originator = null;
+    let cwd = null;
+    let cliVersion = null;
+    let hasSessionMeta = false;
+    const messages = [];
+    for (const line of lines) {
+        if (line.trim().length === 0)
+            continue;
+        let record;
+        try {
+            record = JSON.parse(line);
+        }
+        catch {
+            // Tolerate malformed/partial lines; a single bad line must not drop
+            // the whole session from the listing.
+            continue;
+        }
+        if (typeof record.timestamp === "string") {
+            updatedAt = record.timestamp;
+        }
+        if (record.type === "session_meta") {
+            const payload = record.payload;
+            const metaId = readStringField(payload, "id");
+            if (metaId)
+                id = metaId;
+            provider = readStringField(payload, "model_provider") ?? provider;
+            originator = readStringField(payload, "originator") ?? originator;
+            cwd = readStringField(payload, "cwd") ?? cwd;
+            cliVersion = readStringField(payload, "cli_version") ?? cliVersion;
+            hasSessionMeta = true;
+        }
+        if (record.type === "event_msg") {
+            const payload = record.payload;
+            const payloadType = readStringField(payload, "type");
+            if (!threadName && payloadType) {
+                const message = readStringField(payload, "message");
+                if (message) {
+                    threadName = message;
+                }
+            }
+            if (payloadType === "user_message" &&
+                messages.length < previewLimit) {
+                const message = readStringField(payload, "message");
+                if (message) {
+                    messages.push(message);
+                }
+            }
+        }
+    }
+    if (!hasSessionMeta) {
+        return null;
+    }
+    if (!updatedAt) {
+        try {
+            updatedAt = deps.statMtime(rolloutPath).toISOString();
+        }
+        catch {
+            updatedAt = new Date().toISOString();
+        }
+    }
+    if (!threadName) {
+        threadName = "Codex session";
+    }
+    if (threadName.length > MAX_THREAD_NAME_LENGTH) {
+        threadName = `${threadName.slice(0, MAX_THREAD_NAME_LENGTH - 3)}...`;
+    }
+    return {
+        id,
+        threadName,
+        updatedAt,
+        provider,
+        originator,
+        cwd,
+        cliVersion,
+        messages,
+        path: rolloutPath,
+    };
+}
+function resolveDeps(deps) {
+    return {
+        getCodexHome: deps.getCodexHome ?? getCodexHomeDir,
+        readDirRecursive: deps.readDirRecursive ?? defaultReadDirRecursive,
+        readFile: deps.readFile ?? ((path) => readFileSync(path, "utf8")),
+        statMtime: deps.statMtime ?? ((path) => statSync(path).mtime),
+        logInfo: deps.logInfo ?? ((message) => console.log(message)),
+        logError: deps.logError ?? ((message) => console.error(message)),
+    };
+}
+function collectSessions(resolved, previewLimit) {
+    const sessionsDir = join(resolved.getCodexHome(), "sessions");
+    let files;
+    try {
+        files = resolved.readDirRecursive(sessionsDir);
+    }
+    catch {
+        // A missing or unreadable sessions directory is a normal "no history yet"
+        // state, not an error — return an empty listing rather than crashing.
+        files = [];
+    }
+    const sessions = [];
+    for (const file of files) {
+        const parsed = parseRollout(file, { readFile: resolved.readFile, statMtime: resolved.statMtime }, previewLimit);
+        if (parsed)
+            sessions.push(parsed);
+    }
+    // Most-recent first, matching how /resume presents threads.
+    sessions.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+    return sessions;
+}
+function toSummary(detail) {
+    const { cliVersion: _cliVersion, messages: _messages, ...summary } = detail;
+    void _cliVersion;
+    void _messages;
+    return summary;
+}
+function runHistoryList(args, resolved) {
+    const json = args.includes("--json") || args.includes("-j");
+    const sessions = collectSessions(resolved, DEFAULT_PREVIEW_MESSAGE_COUNT);
+    if (json) {
+        resolved.logInfo(JSON.stringify({ count: sessions.length, sessions: sessions.map(toSummary) }, null, 2));
+        return 0;
+    }
+    if (sessions.length === 0) {
+        resolved.logInfo(`No local Codex sessions found under ${join(resolved.getCodexHome(), "sessions")}.`);
+        return 0;
+    }
+    resolved.logInfo(`Local Codex sessions (${sessions.length}) — all providers, bypassing /resume provider filtering:`);
+    resolved.logInfo("");
+    for (const session of sessions) {
+        const provider = session.provider ?? "unknown-provider";
+        resolved.logInfo(`  ${session.updatedAt}  [${provider}]`);
+        resolved.logInfo(`    id:     ${session.id}`);
+        resolved.logInfo(`    thread: ${session.threadName}`);
+        if (session.cwd) {
+            resolved.logInfo(`    cwd:    ${session.cwd}`);
+        }
+    }
+    resolved.logInfo("");
+    resolved.logInfo("Resume any session with: codex resume <id>  (or `codex resume` for the picker).");
+    return 0;
+}
+function runHistoryShow(args, resolved) {
+    const json = args.includes("--json") || args.includes("-j");
+    const sessionId = args.find((arg) => !arg.startsWith("-"));
+    if (!sessionId) {
+        resolved.logError("Missing session id. Usage: codex-multi-auth history show <session-id> [--json]");
+        return 1;
+    }
+    const sessions = collectSessions(resolved, DEFAULT_PREVIEW_MESSAGE_COUNT);
+    const match = sessions.find((session) => session.id === sessionId);
+    if (!match) {
+        resolved.logError(`Session not found: ${sessionId}`);
+        return 1;
+    }
+    if (json) {
+        resolved.logInfo(JSON.stringify(match, null, 2));
+        return 0;
+    }
+    resolved.logInfo(`Session ${match.id}`);
+    resolved.logInfo(`  provider:   ${match.provider ?? "unknown"}`);
+    resolved.logInfo(`  originator: ${match.originator ?? "unknown"}`);
+    resolved.logInfo(`  updated:    ${match.updatedAt}`);
+    if (match.cliVersion) {
+        resolved.logInfo(`  cli:        ${match.cliVersion}`);
+    }
+    if (match.cwd) {
+        resolved.logInfo(`  cwd:        ${match.cwd}`);
+    }
+    resolved.logInfo(`  file:       ${match.path}`);
+    resolved.logInfo("");
+    if (match.messages.length === 0) {
+        resolved.logInfo("  (no user messages recorded)");
+    }
+    else {
+        resolved.logInfo("  First messages:");
+        for (const message of match.messages) {
+            const firstLine = message.split(/\r?\n/, 1)[0] ?? "";
+            const preview = firstLine.length > 120 ? `${firstLine.slice(0, 117)}...` : firstLine;
+            resolved.logInfo(`    - ${preview}`);
+        }
+    }
+    resolved.logInfo("");
+    resolved.logInfo(`Resume with: codex resume ${match.id}`);
+    return 0;
+}
+function printHistoryUsage(resolved) {
+    resolved.logInfo([
+        "Usage: codex-multi-auth history <list|show> [options]",
+        "",
+        "  list [--json]            List every local session across all providers",
+        "  show <id> [--json]       Show provider metadata and first messages for a session",
+        "",
+        "Lists rollout files under <codex-home>/sessions (default",
+        "~/.codex/sessions, honoring CODEX_HOME) directly, so sessions",
+        "created under a different model provider (e.g. while runtime rotation",
+        "or app bind is active) remain visible even when `codex resume` hides",
+        "them. See docs/troubleshooting.md for background.",
+    ].join("\n"));
+}
+export function runHistoryCommand(args, deps = {}) {
+    const resolved = resolveDeps(deps);
+    const [subcommand, ...rest] = args;
+    if (subcommand === "--help" || subcommand === "-h") {
+        printHistoryUsage(resolved);
+        return 0;
+    }
+    // Default to `list` when no subcommand is given, or when the first arg is a
+    // flag (e.g. `history --json`), so the documented `[list] [--json]` form
+    // works without an explicit `list`. A leading flag is forwarded as a list
+    // argument rather than mistaken for a subcommand.
+    if (!subcommand || subcommand === "list") {
+        return runHistoryList(rest, resolved);
+    }
+    if (subcommand.startsWith("-")) {
+        return runHistoryList([subcommand, ...rest], resolved);
+    }
+    if (subcommand === "show") {
+        return runHistoryShow(rest, resolved);
+    }
+    resolved.logError(`Unknown history command: ${subcommand}`);
+    printHistoryUsage(resolved);
+    return 1;
+}

package/dist/lib/codex-manager/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../lib/codex-manager/help.ts"],"names":[],"mappings":"AAIA,wBAAgB,UAAU,IAAI,IAAI,CAiDjC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAgEtE;AAED,UAAU,cAAc;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,cAAc,IAAI,IAAI,CAgBrC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,cAAc,CAyD5D"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../lib/codex-manager/help.ts"],"names":[],"mappings":"AAIA,wBAAgB,UAAU,IAAI,IAAI,CAkDjC;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAgEtE;AAED,UAAU,cAAc;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,cAAc,IAAI,IAAI,CAgBrC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,cAAc,CAyD5D"}

package/dist/lib/codex-manager/help.js

@@ -35,6 +35,7 @@ export function printUsage() {
         "  codex-multi-auth rotation <enable|disable|status|bind-app|unbind-app>",
         "  codex-multi-auth rotation reset-rate-limits [--all | --account <idx>] [--dry-run] [--json]",
         "  codex-multi-auth why-selected [--now | --last] [--json]",
+        "  codex-multi-auth history [list|show <id>] [--json]   (all local sessions, ignores /resume provider filtering)",
         "",
         "Advanced:",
         "  codex-multi-auth report [--live] [--json] [--explain] [--model <model>] [--out <path>]",

package/dist/lib/codex-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-manager.d.ts","sourceRoot":"","sources":["../../lib/codex-manager.ts"],"names":[],"mappings":"AAoFA,OAAO,EAEN,mBAAmB,EAMnB,sBAAsB,EAGtB,MAAM,qCAAqC,CAAC;AAiD7C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;AA+HvD,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,OAAO,CAAC,CAuGrE;AAuRD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C7E"}
+{"version":3,"file":"codex-manager.d.ts","sourceRoot":"","sources":["../../lib/codex-manager.ts"],"names":[],"mappings":"AAqFA,OAAO,EAEN,mBAAmB,EAMnB,sBAAsB,EAGtB,MAAM,qCAAqC,CAAC;AAiD7C,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;AA+HvD,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,OAAO,CAAC,CAuGrE;AAwRD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C7E"}

package/dist/lib/codex-manager.js

@@ -31,6 +31,7 @@ import { runRotationCommand } from "./codex-manager/commands/rotation.js";
 import { runFeaturesCommand, runStatusCommand, } from "./codex-manager/commands/status.js";
 import { loadPersistedRuntimeObservabilitySnapshot } from "./runtime/runtime-observability.js";
 import { runSwitchCommand } from "./codex-manager/commands/switch.js";
+import { runHistoryCommand } from "./codex-manager/commands/history.js";
 import { runUnpinCommand } from "./codex-manager/commands/unpin.js";
 import { runWorkspaceCommand } from "./codex-manager/commands/workspace.js";
 import { runUsageCommand } from "./codex-manager/commands/usage.js";
@@ -450,6 +451,7 @@ const CLI_COMMAND_HANDLERS = new Map([
             sanitizeEmail,
         }),
     ],
+    ["history", (rest) => runHistoryCommand(rest)],
     [
         "verify",
         (rest) => runVerifyCommand(rest, {

package/dist/lib/runtime/app-bind.d.ts

@@ -44,6 +44,13 @@ export interface AppBindRouterStatus {
 export interface AppBindStatus {
     bound: boolean;
     running: boolean;
+    /**
+     * True when config.toml is bound to the runtime proxy but the app-bind state
+     * file is gone (orphaned bind, #614). In this case `bound` is also true and
+     * `state` is null — the config needs `unbind-app` to recover even though the
+     * normal state-file tracking is missing.
+     */
+    unmanagedBind: boolean;
     state: AppBindState | null;
     router: AppBindRouterStatus | null;
     paths: AppBindPaths;

package/dist/lib/runtime/app-bind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-bind.d.ts","sourceRoot":"","sources":["../../../lib/runtime/app-bind.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAUD,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AA+BD,wBAAgB,2BAA2B,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAMR;AAED,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAKlG;AAgPD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAwB9E;AAkMD,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAW3F;AAED,wBAAsB,2BAA2B,CAChD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+GD,wBAAsB,6BAA6B,CAClD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+DD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CA4BjE"}
+{"version":3,"file":"app-bind.d.ts","sourceRoot":"","sources":["../../../lib/runtime/app-bind.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAUD,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AA+BD,wBAAgB,2BAA2B,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAMR;AAED,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAKlG;AAgPD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAwB9E;AAkMD,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqB3F;AAED,wBAAsB,2BAA2B,CAChD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+GD,wBAAsB,6BAA6B,CAClD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AAsFD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAsCjE"}

package/dist/lib/runtime/app-bind.js

@@ -8,7 +8,7 @@ import process from "node:process";
 import { fileURLToPath } from "node:url";
 import { withFileOperationRetry } from "../fs-retry.js";
 import { getCodexMultiAuthDir } from "../runtime-paths.js";
-import { restoreConfigTomlFromRuntimeRotationProvider, rewriteConfigTomlForRuntimeRotationProvider, } from "./config-toml.js";
+import { configHasRuntimeRotationProvider, restoreConfigTomlFromRuntimeRotationProvider, restoreConfigTomlFromRuntimeRotationProviderWithoutBackup, rewriteConfigTomlForRuntimeRotationProvider, } from "./config-toml.js";
 const APP_BIND_DIR_NAME = "app-bind";
 const APP_BIND_STATE_FILE = "runtime-rotation-app-bind.json";
 const APP_BIND_BACKUP_FILE = "codex-config-backup.json";
@@ -464,9 +464,19 @@ export async function getAppBindStatus(options = {}) {
     const paths = resolveAppBindPaths(options);
     const state = await readAppBindState(paths.statePath);
     const router = await readRouterStatus(paths.statusPath);
+    // When no state file is present, the bind may still be live in config.toml
+    // (orphaned bind, #614). Detect that from the config directly so status and
+    // downstream callers don't report a bound config as "not configured".
+    let unmanagedBind = false;
+    if (state === null) {
+        const current = await readConfigIfExists(paths.configPath);
+        unmanagedBind =
+            current.existed && configHasRuntimeRotationProvider(current.content);
+    }
     return {
-        bound: state !== null,
+        bound: state !== null || unmanagedBind,
         running: router !== null && router.state === "running" && isProcessAlive(router.pid),
+        unmanagedBind,
         state,
         router,
         paths,
@@ -587,6 +597,7 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
         await removeAppBindStartup(state);
     }
     const backup = await readAppBindBackup(paths.backupPath);
+    let selfHealed = false;
     if (backup) {
         const current = await readConfigIfExists(backup.configPath);
         if (state && current.existed && sha256(current.content) !== state.boundConfigHash) {
@@ -606,6 +617,18 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
             await atomicWriteFile(state.configPath, restoreConfigTomlFromAppBind(current.content, ""));
         }
     }
+    else {
+        // Orphaned-bind recovery (#614): no backup and no state file, but the
+        // config may still be bound to the runtime proxy (e.g. the state/backup
+        // were lost while config.toml stayed rewritten). The state-file checks
+        // above can't see this, so consult the config directly and self-heal it
+        // back to a working provider when it is bound.
+        const current = await readConfigIfExists(paths.configPath);
+        if (current.existed && configHasRuntimeRotationProvider(current.content)) {
+            await atomicWriteFile(paths.configPath, restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(current.content));
+            selfHealed = true;
+        }
+    }
     for (const candidate of [
         paths.statePath,
         paths.backupPath,
@@ -619,14 +642,32 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
         }
     }
     const status = await getAppBindStatus(options);
+    let message;
+    if (backup) {
+        message = `Unbound Codex app config ${backup.configPath}`;
+    }
+    else if (selfHealed) {
+        message = `Restored Codex app config ${paths.configPath} from an orphaned runtime-proxy bind (no backup was present)`;
+    }
+    else {
+        message = "Codex app bind was not configured";
+    }
     return {
         status,
-        message: backup
-            ? `Unbound Codex app config ${backup.configPath}`
-            : "Codex app bind was not configured",
+        message,
     };
 }
 export function formatAppBindStatus(status) {
+    if (status.unmanagedBind && !status.state) {
+        return [
+            `Codex app bind: bound but unmanaged (config=${status.paths.configPath} points at the runtime proxy, but no app-bind state/backup is present)`,
+            [
+                "Run `codex-multi-auth rotation unbind-app` to restore the original",
+                "Codex provider/config. This recovers the orphaned bind even though no",
+                "backup was saved (#614).",
+            ].join(" "),
+        ].join("\n");
+    }
     if (!status.bound || !status.state)
         return "Codex app bind: not configured";
     const parts = [

package/dist/lib/runtime/config-toml.d.ts

@@ -3,4 +3,22 @@ export declare function restoreTopLevelModelProvider(currentConfig: string, orig
 export declare function restoreTopLevelResponseStorage(currentConfig: string, originalConfig: string): string;
 export declare function rewriteConfigTomlForRuntimeRotationProvider(rawConfig: string, baseUrl: string, clientApiKey?: string): string;
 export declare function restoreConfigTomlFromRuntimeRotationProvider(currentConfig: string, originalConfig: string): string;
+/**
+ * Detects whether a config.toml is currently bound to the runtime rotation
+ * proxy — either the top-level `model_provider` points at the proxy id, or the
+ * proxy `[model_providers.<id>]` block is present. Used to recover an orphaned
+ * bind whose app-bind state/backup files were lost: in that situation the
+ * state-file-based status check reports "not configured" even though the config
+ * is still bound, so unbind/status must consult the config itself.
+ */
+export declare function configHasRuntimeRotationProvider(rawConfig: string): boolean;
+/**
+ * Restores a bound config when no backup of the user's original config exists
+ * (the orphaned-bind recovery path). Strips the proxy provider block and any
+ * bind-written top-level lines, and — because there is no original
+ * `model_provider` line to bring back — falls back to `defaultProvider`
+ * (Codex's native `"openai"`) so the config is left on a working provider
+ * rather than the dangling proxy id.
+ */
+export declare function restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(currentConfig: string, defaultProvider?: string): string;
 //# sourceMappingURL=config-toml.d.ts.map

package/dist/lib/runtime/config-toml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-toml.d.ts","sourceRoot":"","sources":["../../../lib/runtime/config-toml.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBvD;AA4FD,wBAAgB,4BAA4B,CAC3C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAiCR;AAED,wBAAgB,8BAA8B,CAC7C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAkDR;AA2BD,wBAAgB,2CAA2C,CAC1D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAkBR;AAED,wBAAgB,4CAA4C,CAC3D,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAYR"}
+{"version":3,"file":"config-toml.d.ts","sourceRoot":"","sources":["../../../lib/runtime/config-toml.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBvD;AA4FD,wBAAgB,4BAA4B,CAC3C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAiDR;AAED,wBAAgB,8BAA8B,CAC7C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAkDR;AA2BD,wBAAgB,2CAA2C,CAC1D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAkBR;AAED,wBAAgB,4CAA4C,CAC3D,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAYR;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAoB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,yDAAyD,CACxE,aAAa,EAAE,MAAM,EACrB,eAAe,SAAW,GACxB,MAAM,CAkBR"}

package/dist/lib/runtime/config-toml.js

@@ -121,14 +121,32 @@ export function restoreTopLevelModelProvider(currentConfig, originalConfig) {
         output.push(line);
     }
     if (!handled && originalLine) {
-        // Splice the restored line into the root table — appending at tail
-        // would land it inside whatever section appears last in `output`.
-        const firstSectionIdx = output.findIndex((line) => readTomlTableName(line) !== null);
-        if (firstSectionIdx === -1) {
-            output.push(originalLine);
-        }
-        else {
-            output.splice(firstSectionIdx, 0, originalLine);
+        // Only splice the original line back when the current config has no
+        // top-level model_provider at all (bind stripped it). If a non-proxy
+        // top-level model_provider already exists — e.g. a half-orphaned config
+        // where the proxy block is present but the provider line already points
+        // elsewhere — inserting another line would create a duplicate top-level
+        // key and produce invalid TOML. In that case the existing line is
+        // already correct, so leave it untouched.
+        const hasTopLevelModelProvider = (() => {
+            for (const line of output) {
+                if (readTomlTableName(line) !== null)
+                    return false;
+                if (/^\s*model_provider\s*=/.test(line))
+                    return true;
+            }
+            return false;
+        })();
+        if (!hasTopLevelModelProvider) {
+            // Splice the restored line into the root table — appending at tail
+            // would land it inside whatever section appears last in `output`.
+            const firstSectionIdx = output.findIndex((line) => readTomlTableName(line) !== null);
+            if (firstSectionIdx === -1) {
+                output.push(originalLine);
+            }
+            else {
+                output.splice(firstSectionIdx, 0, originalLine);
+            }
         }
     }
     return output.join(lineEnding);
@@ -204,3 +222,56 @@ export function restoreConfigTomlFromRuntimeRotationProvider(currentConfig, orig
     const withResponseStorage = restoreTopLevelResponseStorage(withoutProvider, originalConfig);
     return ensureTomlTrailingNewline(restoreTopLevelModelProvider(withResponseStorage, originalConfig).replace(/[\r\n]*$/, ""));
 }
+/**
+ * Detects whether a config.toml is currently bound to the runtime rotation
+ * proxy — either the top-level `model_provider` points at the proxy id, or the
+ * proxy `[model_providers.<id>]` block is present. Used to recover an orphaned
+ * bind whose app-bind state/backup files were lost: in that situation the
+ * state-file-based status check reports "not configured" even though the config
+ * is still bound, so unbind/status must consult the config itself.
+ */
+export function configHasRuntimeRotationProvider(rawConfig) {
+    if (rawConfig.length === 0)
+        return false;
+    const providerTable = `model_providers.${RUNTIME_ROTATION_PROXY_PROVIDER_ID}`;
+    let inTopLevel = true;
+    for (const line of rawConfig.split(/\r?\n/)) {
+        const tableName = readTomlTableName(line);
+        if (tableName !== null) {
+            if (tableName === providerTable)
+                return true;
+            inTopLevel = false;
+            continue;
+        }
+        if (inTopLevel &&
+            /^\s*model_provider\s*=/.test(line) &&
+            line.includes(RUNTIME_ROTATION_PROXY_PROVIDER_ID)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Restores a bound config when no backup of the user's original config exists
+ * (the orphaned-bind recovery path). Strips the proxy provider block and any
+ * bind-written top-level lines, and — because there is no original
+ * `model_provider` line to bring back — falls back to `defaultProvider`
+ * (Codex's native `"openai"`) so the config is left on a working provider
+ * rather than the dangling proxy id.
+ */
+export function restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(currentConfig, defaultProvider = "openai") {
+    const lineEnding = currentConfig.includes("\r\n") ? "\r\n" : "\n";
+    // Synthesize a minimal "original" config carrying only the default
+    // top-level model_provider, so the shared restore path rewrites the proxy
+    // line back to a usable provider instead of leaving it dangling.
+    const syntheticOriginal = `model_provider = ${tomlStringLiteral(defaultProvider)}${lineEnding}`;
+    const restored = restoreConfigTomlFromRuntimeRotationProvider(currentConfig, syntheticOriginal);
+    // Normalize line endings to match the input config. The shared restore path
+    // derives its EOL from intermediate state, which can collapse to "\n" when
+    // the bound config was almost entirely proxy content; pin it back to the
+    // original style so a CRLF (Windows-authored) config stays CRLF.
+    if (lineEnding === "\r\n") {
+        return restored.replace(/\r?\n/g, "\r\n");
+    }
+    return restored.replace(/\r\n/g, "\n");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.3.0",
+	"version": "2.3.2",
 	"description": "Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotation, diagnostics, and recovery tools for @openai/codex",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",

package/scripts/codex-routing.js

@@ -24,6 +24,7 @@ const AUTH_SUBCOMMANDS = new Set([
 	"monitor",
 	"rotation",
 	"why-selected",
+	"history",
 	"config",
 	"init-config",
 	"debug",