codex-multi-auth 2.3.1 → 2.3.2

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
   "interface": {
     "composerIcon": "./assets/codex-multi-auth-icon.svg"

package/README.md

@@ -383,7 +383,8 @@ codex-multi-auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v2.3.1.md](docs/releases/v2.3.1.md) — install via `npm i -g codex-multi-auth`
+- Current stable: [docs/releases/v2.3.2.md](docs/releases/v2.3.2.md) — install via `npm i -g codex-multi-auth`
+- Previous stable: [docs/releases/v2.3.1.md](docs/releases/v2.3.1.md)
 - Previous stable: [docs/releases/v2.3.0.md](docs/releases/v2.3.0.md)
 - Previous stable: [docs/releases/v2.2.2.md](docs/releases/v2.2.2.md)
 - Previous stable: [docs/releases/v2.2.1.md](docs/releases/v2.2.1.md)

package/dist/lib/runtime/app-bind.d.ts

@@ -44,6 +44,13 @@ export interface AppBindRouterStatus {
 export interface AppBindStatus {
     bound: boolean;
     running: boolean;
+    /**
+     * True when config.toml is bound to the runtime proxy but the app-bind state
+     * file is gone (orphaned bind, #614). In this case `bound` is also true and
+     * `state` is null — the config needs `unbind-app` to recover even though the
+     * normal state-file tracking is missing.
+     */
+    unmanagedBind: boolean;
     state: AppBindState | null;
     router: AppBindRouterStatus | null;
     paths: AppBindPaths;

package/dist/lib/runtime/app-bind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-bind.d.ts","sourceRoot":"","sources":["../../../lib/runtime/app-bind.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAUD,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AA+BD,wBAAgB,2BAA2B,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAMR;AAED,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAKlG;AAgPD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAwB9E;AAkMD,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAW3F;AAED,wBAAsB,2BAA2B,CAChD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+GD,wBAAsB,6BAA6B,CAClD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+DD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CA4BjE"}
+{"version":3,"file":"app-bind.d.ts","sourceRoot":"","sources":["../../../lib/runtime/app-bind.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAUD,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AA+BD,wBAAgB,2BAA2B,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAMR;AAED,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAKlG;AAgPD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAwB9E;AAkMD,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqB3F;AAED,wBAAsB,2BAA2B,CAChD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AA+GD,wBAAsB,6BAA6B,CAClD,OAAO,GAAE,cAAmB,GAC1B,OAAO,CAAC,aAAa,CAAC,CAKxB;AAsFD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAsCjE"}

package/dist/lib/runtime/app-bind.js

@@ -8,7 +8,7 @@ import process from "node:process";
 import { fileURLToPath } from "node:url";
 import { withFileOperationRetry } from "../fs-retry.js";
 import { getCodexMultiAuthDir } from "../runtime-paths.js";
-import { restoreConfigTomlFromRuntimeRotationProvider, rewriteConfigTomlForRuntimeRotationProvider, } from "./config-toml.js";
+import { configHasRuntimeRotationProvider, restoreConfigTomlFromRuntimeRotationProvider, restoreConfigTomlFromRuntimeRotationProviderWithoutBackup, rewriteConfigTomlForRuntimeRotationProvider, } from "./config-toml.js";
 const APP_BIND_DIR_NAME = "app-bind";
 const APP_BIND_STATE_FILE = "runtime-rotation-app-bind.json";
 const APP_BIND_BACKUP_FILE = "codex-config-backup.json";
@@ -464,9 +464,19 @@ export async function getAppBindStatus(options = {}) {
     const paths = resolveAppBindPaths(options);
     const state = await readAppBindState(paths.statePath);
     const router = await readRouterStatus(paths.statusPath);
+    // When no state file is present, the bind may still be live in config.toml
+    // (orphaned bind, #614). Detect that from the config directly so status and
+    // downstream callers don't report a bound config as "not configured".
+    let unmanagedBind = false;
+    if (state === null) {
+        const current = await readConfigIfExists(paths.configPath);
+        unmanagedBind =
+            current.existed && configHasRuntimeRotationProvider(current.content);
+    }
     return {
-        bound: state !== null,
+        bound: state !== null || unmanagedBind,
         running: router !== null && router.state === "running" && isProcessAlive(router.pid),
+        unmanagedBind,
         state,
         router,
         paths,
@@ -587,6 +597,7 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
         await removeAppBindStartup(state);
     }
     const backup = await readAppBindBackup(paths.backupPath);
+    let selfHealed = false;
     if (backup) {
         const current = await readConfigIfExists(backup.configPath);
         if (state && current.existed && sha256(current.content) !== state.boundConfigHash) {
@@ -606,6 +617,18 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
             await atomicWriteFile(state.configPath, restoreConfigTomlFromAppBind(current.content, ""));
         }
     }
+    else {
+        // Orphaned-bind recovery (#614): no backup and no state file, but the
+        // config may still be bound to the runtime proxy (e.g. the state/backup
+        // were lost while config.toml stayed rewritten). The state-file checks
+        // above can't see this, so consult the config directly and self-heal it
+        // back to a working provider when it is bound.
+        const current = await readConfigIfExists(paths.configPath);
+        if (current.existed && configHasRuntimeRotationProvider(current.content)) {
+            await atomicWriteFile(paths.configPath, restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(current.content));
+            selfHealed = true;
+        }
+    }
     for (const candidate of [
         paths.statePath,
         paths.backupPath,
@@ -619,14 +642,32 @@ async function unbindCodexAppRuntimeRotationLocked(options, paths) {
         }
     }
     const status = await getAppBindStatus(options);
+    let message;
+    if (backup) {
+        message = `Unbound Codex app config ${backup.configPath}`;
+    }
+    else if (selfHealed) {
+        message = `Restored Codex app config ${paths.configPath} from an orphaned runtime-proxy bind (no backup was present)`;
+    }
+    else {
+        message = "Codex app bind was not configured";
+    }
     return {
         status,
-        message: backup
-            ? `Unbound Codex app config ${backup.configPath}`
-            : "Codex app bind was not configured",
+        message,
     };
 }
 export function formatAppBindStatus(status) {
+    if (status.unmanagedBind && !status.state) {
+        return [
+            `Codex app bind: bound but unmanaged (config=${status.paths.configPath} points at the runtime proxy, but no app-bind state/backup is present)`,
+            [
+                "Run `codex-multi-auth rotation unbind-app` to restore the original",
+                "Codex provider/config. This recovers the orphaned bind even though no",
+                "backup was saved (#614).",
+            ].join(" "),
+        ].join("\n");
+    }
     if (!status.bound || !status.state)
         return "Codex app bind: not configured";
     const parts = [

package/dist/lib/runtime/config-toml.d.ts

@@ -3,4 +3,22 @@ export declare function restoreTopLevelModelProvider(currentConfig: string, orig
 export declare function restoreTopLevelResponseStorage(currentConfig: string, originalConfig: string): string;
 export declare function rewriteConfigTomlForRuntimeRotationProvider(rawConfig: string, baseUrl: string, clientApiKey?: string): string;
 export declare function restoreConfigTomlFromRuntimeRotationProvider(currentConfig: string, originalConfig: string): string;
+/**
+ * Detects whether a config.toml is currently bound to the runtime rotation
+ * proxy — either the top-level `model_provider` points at the proxy id, or the
+ * proxy `[model_providers.<id>]` block is present. Used to recover an orphaned
+ * bind whose app-bind state/backup files were lost: in that situation the
+ * state-file-based status check reports "not configured" even though the config
+ * is still bound, so unbind/status must consult the config itself.
+ */
+export declare function configHasRuntimeRotationProvider(rawConfig: string): boolean;
+/**
+ * Restores a bound config when no backup of the user's original config exists
+ * (the orphaned-bind recovery path). Strips the proxy provider block and any
+ * bind-written top-level lines, and — because there is no original
+ * `model_provider` line to bring back — falls back to `defaultProvider`
+ * (Codex's native `"openai"`) so the config is left on a working provider
+ * rather than the dangling proxy id.
+ */
+export declare function restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(currentConfig: string, defaultProvider?: string): string;
 //# sourceMappingURL=config-toml.d.ts.map

package/dist/lib/runtime/config-toml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-toml.d.ts","sourceRoot":"","sources":["../../../lib/runtime/config-toml.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBvD;AA4FD,wBAAgB,4BAA4B,CAC3C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAiCR;AAED,wBAAgB,8BAA8B,CAC7C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAkDR;AA2BD,wBAAgB,2CAA2C,CAC1D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAkBR;AAED,wBAAgB,4CAA4C,CAC3D,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAYR"}
+{"version":3,"file":"config-toml.d.ts","sourceRoot":"","sources":["../../../lib/runtime/config-toml.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBvD;AA4FD,wBAAgB,4BAA4B,CAC3C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAiDR;AAED,wBAAgB,8BAA8B,CAC7C,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAkDR;AA2BD,wBAAgB,2CAA2C,CAC1D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,SAAK,GACf,MAAM,CAkBR;AAED,wBAAgB,4CAA4C,CAC3D,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,MAAM,CAYR;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAoB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,yDAAyD,CACxE,aAAa,EAAE,MAAM,EACrB,eAAe,SAAW,GACxB,MAAM,CAkBR"}

package/dist/lib/runtime/config-toml.js

@@ -121,14 +121,32 @@ export function restoreTopLevelModelProvider(currentConfig, originalConfig) {
         output.push(line);
     }
     if (!handled && originalLine) {
-        // Splice the restored line into the root table — appending at tail
-        // would land it inside whatever section appears last in `output`.
-        const firstSectionIdx = output.findIndex((line) => readTomlTableName(line) !== null);
-        if (firstSectionIdx === -1) {
-            output.push(originalLine);
-        }
-        else {
-            output.splice(firstSectionIdx, 0, originalLine);
+        // Only splice the original line back when the current config has no
+        // top-level model_provider at all (bind stripped it). If a non-proxy
+        // top-level model_provider already exists — e.g. a half-orphaned config
+        // where the proxy block is present but the provider line already points
+        // elsewhere — inserting another line would create a duplicate top-level
+        // key and produce invalid TOML. In that case the existing line is
+        // already correct, so leave it untouched.
+        const hasTopLevelModelProvider = (() => {
+            for (const line of output) {
+                if (readTomlTableName(line) !== null)
+                    return false;
+                if (/^\s*model_provider\s*=/.test(line))
+                    return true;
+            }
+            return false;
+        })();
+        if (!hasTopLevelModelProvider) {
+            // Splice the restored line into the root table — appending at tail
+            // would land it inside whatever section appears last in `output`.
+            const firstSectionIdx = output.findIndex((line) => readTomlTableName(line) !== null);
+            if (firstSectionIdx === -1) {
+                output.push(originalLine);
+            }
+            else {
+                output.splice(firstSectionIdx, 0, originalLine);
+            }
         }
     }
     return output.join(lineEnding);
@@ -204,3 +222,56 @@ export function restoreConfigTomlFromRuntimeRotationProvider(currentConfig, orig
     const withResponseStorage = restoreTopLevelResponseStorage(withoutProvider, originalConfig);
     return ensureTomlTrailingNewline(restoreTopLevelModelProvider(withResponseStorage, originalConfig).replace(/[\r\n]*$/, ""));
 }
+/**
+ * Detects whether a config.toml is currently bound to the runtime rotation
+ * proxy — either the top-level `model_provider` points at the proxy id, or the
+ * proxy `[model_providers.<id>]` block is present. Used to recover an orphaned
+ * bind whose app-bind state/backup files were lost: in that situation the
+ * state-file-based status check reports "not configured" even though the config
+ * is still bound, so unbind/status must consult the config itself.
+ */
+export function configHasRuntimeRotationProvider(rawConfig) {
+    if (rawConfig.length === 0)
+        return false;
+    const providerTable = `model_providers.${RUNTIME_ROTATION_PROXY_PROVIDER_ID}`;
+    let inTopLevel = true;
+    for (const line of rawConfig.split(/\r?\n/)) {
+        const tableName = readTomlTableName(line);
+        if (tableName !== null) {
+            if (tableName === providerTable)
+                return true;
+            inTopLevel = false;
+            continue;
+        }
+        if (inTopLevel &&
+            /^\s*model_provider\s*=/.test(line) &&
+            line.includes(RUNTIME_ROTATION_PROXY_PROVIDER_ID)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Restores a bound config when no backup of the user's original config exists
+ * (the orphaned-bind recovery path). Strips the proxy provider block and any
+ * bind-written top-level lines, and — because there is no original
+ * `model_provider` line to bring back — falls back to `defaultProvider`
+ * (Codex's native `"openai"`) so the config is left on a working provider
+ * rather than the dangling proxy id.
+ */
+export function restoreConfigTomlFromRuntimeRotationProviderWithoutBackup(currentConfig, defaultProvider = "openai") {
+    const lineEnding = currentConfig.includes("\r\n") ? "\r\n" : "\n";
+    // Synthesize a minimal "original" config carrying only the default
+    // top-level model_provider, so the shared restore path rewrites the proxy
+    // line back to a usable provider instead of leaving it dangling.
+    const syntheticOriginal = `model_provider = ${tomlStringLiteral(defaultProvider)}${lineEnding}`;
+    const restored = restoreConfigTomlFromRuntimeRotationProvider(currentConfig, syntheticOriginal);
+    // Normalize line endings to match the input config. The shared restore path
+    // derives its EOL from intermediate state, which can collapse to "\n" when
+    // the bound config was almost entirely proxy content; pin it back to the
+    // original style so a CRLF (Windows-authored) config stays CRLF.
+    if (lineEnding === "\r\n") {
+        return restored.replace(/\r?\n/g, "\r\n");
+    }
+    return restored.replace(/\r\n/g, "\n");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.3.1",
+	"version": "2.3.2",
 	"description": "Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotation, diagnostics, and recovery tools for @openai/codex",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",