codex-sw 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## 0.3.0 - 2026-04-12
+
+- Added `codex-sw` namespaced entrypoint (kept `codex-switcher` compatibility).
+- Added concurrency lock to protect profile pointer mutations.
+- Added safer App lifecycle handling with managed PID tracking.
+- Added status exit code conventions (`0/1/2`).
+- Added pointer recovery command: `codex-sw recover`.
+- Added init/bootstrap command: `codex-sw init`.
+- Added doctor auto-fix mode: `codex-sw doctor --fix`.
+- Added log redaction scanner in `check` / `doctor`.
+- Added install/uninstall scripts and CI workflow.
+- Added expanded smoke tests.
+- Added npm release helper: `npm run release:npm`.
+- Added `publishConfig` (public + npmjs registry) and publish guide docs.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wangxt
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,57 @@
+# codex-sw
+
+`codex-sw` is a lightweight profile switcher for Codex CLI and Codex App.
+It isolates accounts by running each profile in its own `CODEX_HOME` directory.
+
+## Install
+
+### Option A: npm (global)
+
+```bash
+npm i -g codex-sw
+codex-sw check
+```
+
+### Option B: from source checkout
+
+```bash
+./scripts/install.sh
+codex-sw check
+```
+
+## Quick start
+
+```bash
+codex-sw add work
+codex-sw add personal
+
+codex-sw use work
+codex-sw login
+codex-sw exec -- login status
+
+codex-sw app use personal
+```
+
+## Command reference
+
+See plugin guide:
+- `plugins/codex-switcher/README.md`
+
+## Development
+
+```bash
+npm run check
+```
+
+## Publish to npm
+
+```bash
+npm login --registry https://registry.npmjs.org/
+npm run release:npm
+```
+
+## Docs
+
+- `docs/macos-manual-checklist.md`
+- `docs/upgrade.md`
+- `docs/publish.md`

package/docs/macos-manual-checklist.md

@@ -0,0 +1,34 @@
+# macOS Manual Checklist
+
+Run this checklist on a macOS machine with Codex.app installed.
+
+## Setup
+
+- [ ] `codex-sw check` returns `check: ok`
+- [ ] `codex-sw add work` and `codex-sw add personal` succeed
+
+## CLI isolation
+
+- [ ] `codex-sw use work && codex-sw login`
+- [ ] `codex-sw use personal && codex-sw login`
+- [ ] `codex-sw status` shows both profiles logged in when selected as current
+
+## App switching
+
+- [ ] `codex-sw app use work` opens App
+- [ ] `codex-sw app current` prints `work`
+- [ ] `codex-sw app use personal` restarts App under `personal`
+- [ ] `codex-sw app status` reports running when app is open
+- [ ] `codex-sw app stop` stops managed app process
+
+## Recovery and integrity
+
+- [ ] Corrupt pointer file manually and run `codex-sw recover`
+- [ ] `codex-sw doctor --fix` completes successfully
+- [ ] `codex-sw check` passes after recovery
+
+## Security checks
+
+- [ ] `~/.codex-switcher` permission is `700`
+- [ ] `~/.codex-profiles` permission is `700`
+- [ ] no tokens are visible in `~/.codex-switcher/switcher.log`

package/docs/publish.md

@@ -0,0 +1,41 @@
+# npm Publish Guide
+
+This project publishes to npm as:
+
+- package: `codex-sw`
+- command: `codex-sw`
+
+## One-command publish
+
+```bash
+npm login --registry https://registry.npmjs.org/
+npm run release:npm
+```
+
+`release:npm` runs:
+
+1. `npm run check`
+2. `npm pack --dry-run`
+3. login check (`npm whoami --registry ...`)
+4. `npm publish --access public --registry ...`
+
+## Mirror registry note
+
+If your default npm registry is a mirror (for example `https://registry.npmmirror.com`), publishing may fail unless you authenticate against that mirror.
+
+This project forces publish target to npmjs using:
+
+- `package.json` -> `publishConfig.registry = https://registry.npmjs.org/`
+- `scripts/publish-npm.sh` -> `--registry https://registry.npmjs.org/`
+
+## Optional: use a custom registry explicitly
+
+```bash
+NPM_REGISTRY=https://registry.npmjs.org/ npm run release:npm
+```
+
+## Verify publish
+
+```bash
+npm view codex-sw version dist-tags --registry https://registry.npmjs.org/
+```

package/docs/upgrade.md

@@ -0,0 +1,31 @@
+# Upgrade Guide
+
+## Source install users
+
+```bash
+git pull
+./scripts/install.sh
+codex-sw check
+```
+
+## npm users
+
+```bash
+npm i -g codex-sw@latest
+codex-sw check
+```
+
+## Breaking behavior notes
+
+- `codex-sw` is the preferred command namespace.
+- `codex-switcher` remains available for compatibility.
+- `codex-sw app stop` now targets only managed App processes launched by `codex-sw`.
+
+## Recovery
+
+If pointers are corrupted or profile directories are missing:
+
+```bash
+codex-sw recover
+codex-sw status
+```

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "codex-sw",
+  "version": "0.3.0",
+  "description": "Profile-based account switcher for Codex CLI and Codex App using isolated CODEX_HOME directories.",
+  "license": "MIT",
+  "author": "wangxt",
+  "homepage": "https://github.com/wangxt/codex-switcher",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wangxt/codex-switcher.git"
+  },
+  "keywords": [
+    "codex",
+    "codex-cli",
+    "account-switch",
+    "profile",
+    "codex-home"
+  ],
+  "bin": {
+    "codex-sw": "plugins/codex-switcher/scripts/codex-sw",
+    "codex-switcher": "plugins/codex-switcher/scripts/codex-switcher"
+  },
+  "files": [
+    "plugins/codex-switcher/**",
+    "docs/**",
+    "scripts/install.sh",
+    "scripts/uninstall.sh",
+    "CHANGELOG.md",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "lint": "bash -n plugins/codex-switcher/scripts/codex-switcher && bash -n plugins/codex-switcher/scripts/codex-sw",
+    "test": "plugins/codex-switcher/scripts/test-switcher.sh",
+    "check": "npm run lint && npm run test",
+    "prepublishOnly": "npm run check",
+    "release:npm": "./scripts/publish-npm.sh"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}

package/plugins/codex-switcher/.app.json

@@ -0,0 +1,3 @@
+{
+  "apps": []
+}

package/plugins/codex-switcher/.codex-plugin/plugin.json

@@ -0,0 +1,48 @@
+{
+  "name": "codex-switcher",
+  "version": "0.3.0",
+  "description": "Profile-based account switcher for Codex CLI and Codex App without modifying upstream source.",
+  "author": {
+    "name": "wangxt",
+    "email": "noreply@example.com",
+    "url": "https://github.com/wangxt"
+  },
+  "homepage": "https://github.com/wangxt/codex-switcher",
+  "repository": "https://github.com/wangxt/codex-switcher",
+  "license": "MIT",
+  "keywords": [
+    "codex",
+    "account-switching",
+    "profiles",
+    "codex-home"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks.json",
+  "mcpServers": "./.mcp.json",
+  "apps": "./.app.json",
+  "interface": {
+    "displayName": "Codex Switcher",
+    "shortDescription": "Manage Codex App/CLI accounts via CODEX_HOME profiles.",
+    "longDescription": "Use isolated profile directories for Codex CLI and restart Codex App into a selected profile without patching Codex source code.",
+    "developerName": "wangxt",
+    "category": "Productivity",
+    "capabilities": [
+      "Shell Automation",
+      "Account Profile Switching"
+    ],
+    "websiteURL": "https://github.com/wangxt/codex-switcher",
+    "privacyPolicyURL": "https://openai.com/policies/row-privacy-policy/",
+    "termsOfServiceURL": "https://openai.com/policies/row-terms-of-use/",
+    "defaultPrompt": [
+      "Create a new Codex profile for my work account.",
+      "Switch Codex CLI to the personal profile.",
+      "Restart Codex App with the selected account profile."
+    ],
+    "brandColor": "#2563EB",
+    "composerIcon": "./assets/icon.png",
+    "logo": "./assets/logo.png",
+    "screenshots": [
+      "./assets/screenshot1.png"
+    ]
+  }
+}

package/plugins/codex-switcher/.mcp.json

@@ -0,0 +1,3 @@
+{
+  "mcpServers": {}
+}

package/plugins/codex-switcher/README.md

@@ -0,0 +1,70 @@
+# codex-sw
+
+Profile-based account switcher for Codex CLI and Codex App without modifying upstream source code.
+
+## Core idea
+
+- One profile = one isolated `CODEX_HOME` directory: `~/.codex-profiles/<profile>`
+- CLI commands run under selected CLI profile
+- App is restarted under selected App profile
+- Current pointers are stored in `~/.codex-switcher/current_cli` and `~/.codex-switcher/current_app`
+
+## Commands
+
+```bash
+codex-sw add <profile>
+codex-sw remove <profile> [--force]
+codex-sw list
+codex-sw use <profile>
+codex-sw switch <profile>
+codex-sw current [cli|app]
+codex-sw status
+
+codex-sw exec -- <codex args...>
+codex-sw login [profile]
+codex-sw logout [profile]
+codex-sw env [profile]
+
+codex-sw app open [profile]
+codex-sw app use <profile>
+codex-sw app logout [profile]
+codex-sw app status
+codex-sw app stop
+
+codex-sw init [--shell zsh|bash]
+codex-sw recover
+codex-sw check
+codex-sw doctor [--fix]
+```
+
+## Typical flow
+
+```bash
+codex-sw add work
+codex-sw add personal
+
+codex-sw use work
+codex-sw login
+codex-sw exec -- login status
+
+codex-sw app use personal
+```
+
+## Notes
+
+- Codex App is single-instance on macOS; switching App profile requires restart.
+- `codex-sw app stop` only stops app instances started and tracked by `codex-sw`.
+- `codex-sw status` exit codes:
+  - `0`: both current profiles logged in
+  - `1`: at least one current profile not logged in
+  - `2`: pointer/profile integrity issue (run `codex-sw recover`)
+
+## Validation
+
+```bash
+./plugins/codex-switcher/scripts/test-switcher.sh
+```
+
+## Compatibility command
+
+`codex-switcher` is kept as a compatibility entrypoint and maps to the same implementation.

package/plugins/codex-switcher/hooks.json

@@ -0,0 +1,3 @@
+{
+  "hooks": []
+}

package/plugins/codex-switcher/scripts/codex-sw

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+export CODEX_SWITCHER_INVOKED_AS="codex-sw"
+exec "$SCRIPT_DIR/codex-switcher" "$@"