codex-workspaces 0.3.1__tar.gz → 0.3.3__tar.gz

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to `codex-workspaces` will be documented in this file.
 
 This project follows a simple changelog format while it is still pre-release.
 
+## 0.3.3 - 2026-07-04
+
+### Added
+
+- Added best-effort local `auth.json` metadata inspection for account email, account ID, user ID, organization ID, plan, and auth hash without private API calls.
+- Added `accounts refresh-meta <account>|--all [--overwrite]` for manually refreshing parsed account metadata.
+- Added `accounts export` and `accounts import` backup support with meta-only exports by default, explicit `--include-auth` credential export, dry-run import plans, conflict renaming, overwrite with pre-import backup, auth hash validation, and unsafe tar path rejection.
+- Added enhanced local `stats` views for summary, daily usage, top models, workspace aggregation, account aggregation, JSON output, and Markdown output.
+- Added experimental private API provider scaffolding for realtime account quota lookup.
+- Added `quota` for the current active account and `accounts quota <account>` for a specific managed account.
+- Added `accounts list -a` / `accounts list --all-with-quota` for realtime quota display across managed accounts.
+- Added `accounts refresh [account|--all]` for refreshing remote account metadata and quota cache without modifying `auth.json`.
+- Added `config get/set experimental_private_api.*` for explicitly enabling and configuring experimental private API behavior.
+- Added quota cache with TTL and auth-hash invalidation under `~/.codex-workspaces/cache/quota/`.
+
+### Changed
+
+- Improved account list/info metadata enrichment while keeping auth parsing optional and non-blocking.
+- Improved local stats presentation while keeping all statistics local and read-only.
+- Updated README, design, testing, release, and changelog docs for the 0.3.3 workflow.
+
+### Security
+
+- Added explicit warnings for exports that include `auth.json` credentials.
+- Added backup archive validation against path traversal, symlinks, device files, and auth hash mismatches during import.
+- Kept auth inspection local-only: no token refresh, no private API calls, no network requests, and no sensitive token-like fields in normal output.
+- Private API quota/refresh features are disabled by default and must be explicitly enabled.
+- Sensitive auth material is redacted from private API errors, command output, and quota cache.
+- Quota cache stores no tokens, cookies, authorization headers, or raw `auth.json`.
+
+### Notes
+
+- Realtime quota and refresh depend on experimental private Codex/OpenAI interfaces and may break when upstream behavior changes.
+- `stats` remains local historical usage; `quota` is realtime remote lookup and is intentionally separate.
+
 ## 0.3.1 - 2026-07-04
 
 ### Added

{codex_workspaces-0.3.1/src/codex_workspaces.egg-info → codex_workspaces-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-workspaces
-Version: 0.3.1
+Version: 0.3.3
 Summary: Cross-platform Codex workspace switcher with a preserved macOS shell workflow.
 Author: blockchain-project-lives
 Project-URL: Homepage, https://github.com/blockchain-project-lives/codex-workspaces
@@ -47,10 +47,12 @@ On macOS, the Python CLI preserves the original app workflow: stop Codex App, sw
 - Initialize workspace directories with metadata.
 - Add a new account through an isolated temporary login workspace with `accounts add --login`.
 - Temporarily switch the current workspace account with `accounts use`, then restore the workspace default account.
+- Best-effort parse local `auth.json` metadata such as email/account identifiers without network calls.
+- Export and import account snapshot backups with explicit warnings for credential-bearing archives.
 - Inspect workspace/account metadata and run account-focused `doctor` diagnostics.
 - Migrate older `~/.codex-<name>` workspaces and import legacy `~/.codex-accounts` auth snapshots.
 - Keep macOS Codex App stop/start/restart support.
-- Show local token usage stats from Codex `state_*.sqlite` in read-only mode.
+- Show local token usage stats from Codex `state_*.sqlite` in read-only mode, including daily, model, workspace, account, JSON, and Markdown views.
 - Block unsafe operations from a detected Codex built-in terminal when they cannot be delegated safely.
 - Support English and Chinese output through `CODEX_WORKSPACES_LANG`.
 - Package as a Python project with tests, CI, and PyPI publishing workflow.
@@ -159,6 +161,19 @@ codex-workspaces accounts add research --login
 
 This switches `~/.codex` to a temporary `login-<account>` workspace, lets you log in, saves the generated `auth.json` as `acct_<account>`, and restores the previous workspace. If login is interrupted, clean stale temporary workspaces with `codex-workspaces accounts cleanup-login-temp`.
 
+Account metadata such as `email`, `account_id`, `user_id`, `organization_id`, and `plan` is parsed from local `auth.json` on a best-effort basis. Parsing failures are ignored, sensitive token-like fields are never printed, and no private API or network request is used.
+
+Export or import account backups:
+
+```bash
+codex-workspaces accounts export accounts.tar.gz --all
+codex-workspaces accounts export accounts-with-auth.tar.gz --all --include-auth --yes
+codex-workspaces accounts import accounts-with-auth.tar.gz --dry-run
+codex-workspaces accounts import accounts-with-auth.tar.gz --rename-conflicts
+```
+
+Backups created with `--include-auth` contain Codex credentials from `auth.json`. Store them securely and never commit them to git. Without `--include-auth`, export writes metadata only.
+
 Import legacy `codex-accounts` AUTH-mode snapshots:
 
 ```bash
@@ -187,9 +202,62 @@ codex-workspaces current
 codex-workspaces info work
 codex-workspaces doctor
 codex-workspaces stats
+codex-workspaces stats summary --days 30
+codex-workspaces stats daily --format markdown
+codex-workspaces stats models --format json
+codex-workspaces stats workspaces
+codex-workspaces stats accounts
 codex-workspaces stats work --days 14
 ```
 
+`stats` only reads local SQLite state. Missing or unrecognized workspace/account/model data is shown as `unknown`; results are best-effort and depend on the local Codex files available in each workspace.
+
+## Experimental Realtime Quota
+
+`codex-workspaces` can optionally query realtime quota for managed accounts through an experimental private API provider.
+
+This feature is disabled by default. It may break when upstream Codex/OpenAI internals change, may return `401`/`403`/`429`, and is not required for workspace or account switching.
+
+Enable explicitly:
+
+```bash
+codex-workspaces config set experimental_private_api.enabled true
+codex-workspaces config set experimental_private_api.quota_enabled true
+codex-workspaces config set experimental_private_api.refresh_enabled true
+```
+
+Query current account quota:
+
+```bash
+codex-workspaces quota
+codex-workspaces quota --json
+```
+
+Query a specific managed account:
+
+```bash
+codex-workspaces accounts quota acct_work
+```
+
+Query all accounts with quota:
+
+```bash
+codex-workspaces accounts list -a
+codex-workspaces accounts list --all-with-quota --json
+```
+
+Refresh remote account metadata and quota cache:
+
+```bash
+codex-workspaces accounts refresh
+codex-workspaces accounts refresh acct_work
+codex-workspaces accounts refresh --all --json
+```
+
+Realtime quota uses explicit experimental configuration, timeout, serial account iteration, and a local TTL cache under `~/.codex-workspaces/cache/quota/`. The cache stores quota summaries and auth hashes only; it does not store tokens, cookies, authorization headers, or raw `auth.json`.
+
+`stats` and `quota` are different: `stats` is local historical usage from SQLite, while `quota` is a realtime remote lookup. Quota failures do not affect local workspace/account switching.
+
 Switch accounts within the current workspace:
 
 ```bash

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/README.MD

@@ -19,10 +19,12 @@ On macOS, the Python CLI preserves the original app workflow: stop Codex App, sw
 - Initialize workspace directories with metadata.
 - Add a new account through an isolated temporary login workspace with `accounts add --login`.
 - Temporarily switch the current workspace account with `accounts use`, then restore the workspace default account.
+- Best-effort parse local `auth.json` metadata such as email/account identifiers without network calls.
+- Export and import account snapshot backups with explicit warnings for credential-bearing archives.
 - Inspect workspace/account metadata and run account-focused `doctor` diagnostics.
 - Migrate older `~/.codex-<name>` workspaces and import legacy `~/.codex-accounts` auth snapshots.
 - Keep macOS Codex App stop/start/restart support.
-- Show local token usage stats from Codex `state_*.sqlite` in read-only mode.
+- Show local token usage stats from Codex `state_*.sqlite` in read-only mode, including daily, model, workspace, account, JSON, and Markdown views.
 - Block unsafe operations from a detected Codex built-in terminal when they cannot be delegated safely.
 - Support English and Chinese output through `CODEX_WORKSPACES_LANG`.
 - Package as a Python project with tests, CI, and PyPI publishing workflow.
@@ -131,6 +133,19 @@ codex-workspaces accounts add research --login
 
 This switches `~/.codex` to a temporary `login-<account>` workspace, lets you log in, saves the generated `auth.json` as `acct_<account>`, and restores the previous workspace. If login is interrupted, clean stale temporary workspaces with `codex-workspaces accounts cleanup-login-temp`.
 
+Account metadata such as `email`, `account_id`, `user_id`, `organization_id`, and `plan` is parsed from local `auth.json` on a best-effort basis. Parsing failures are ignored, sensitive token-like fields are never printed, and no private API or network request is used.
+
+Export or import account backups:
+
+```bash
+codex-workspaces accounts export accounts.tar.gz --all
+codex-workspaces accounts export accounts-with-auth.tar.gz --all --include-auth --yes
+codex-workspaces accounts import accounts-with-auth.tar.gz --dry-run
+codex-workspaces accounts import accounts-with-auth.tar.gz --rename-conflicts
+```
+
+Backups created with `--include-auth` contain Codex credentials from `auth.json`. Store them securely and never commit them to git. Without `--include-auth`, export writes metadata only.
+
 Import legacy `codex-accounts` AUTH-mode snapshots:
 
 ```bash
@@ -159,9 +174,62 @@ codex-workspaces current
 codex-workspaces info work
 codex-workspaces doctor
 codex-workspaces stats
+codex-workspaces stats summary --days 30
+codex-workspaces stats daily --format markdown
+codex-workspaces stats models --format json
+codex-workspaces stats workspaces
+codex-workspaces stats accounts
 codex-workspaces stats work --days 14
 ```
 
+`stats` only reads local SQLite state. Missing or unrecognized workspace/account/model data is shown as `unknown`; results are best-effort and depend on the local Codex files available in each workspace.
+
+## Experimental Realtime Quota
+
+`codex-workspaces` can optionally query realtime quota for managed accounts through an experimental private API provider.
+
+This feature is disabled by default. It may break when upstream Codex/OpenAI internals change, may return `401`/`403`/`429`, and is not required for workspace or account switching.
+
+Enable explicitly:
+
+```bash
+codex-workspaces config set experimental_private_api.enabled true
+codex-workspaces config set experimental_private_api.quota_enabled true
+codex-workspaces config set experimental_private_api.refresh_enabled true
+```
+
+Query current account quota:
+
+```bash
+codex-workspaces quota
+codex-workspaces quota --json
+```
+
+Query a specific managed account:
+
+```bash
+codex-workspaces accounts quota acct_work
+```
+
+Query all accounts with quota:
+
+```bash
+codex-workspaces accounts list -a
+codex-workspaces accounts list --all-with-quota --json
+```
+
+Refresh remote account metadata and quota cache:
+
+```bash
+codex-workspaces accounts refresh
+codex-workspaces accounts refresh acct_work
+codex-workspaces accounts refresh --all --json
+```
+
+Realtime quota uses explicit experimental configuration, timeout, serial account iteration, and a local TTL cache under `~/.codex-workspaces/cache/quota/`. The cache stores quota summaries and auth hashes only; it does not store tokens, cookies, authorization headers, or raw `auth.json`.
+
+`stats` and `quota` are different: `stats` is local historical usage from SQLite, while `quota` is a realtime remote lookup. Quota failures do not affect local workspace/account switching.
+
 Switch accounts within the current workspace:
 
 ```bash

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/README.zh-CN.md

@@ -19,10 +19,12 @@
 - 初始化带元数据的工作区目录。
 - 通过隔离的临时登录工作区执行 `accounts add --login`，新增账号而不退出当前账号。
 - 通过 `accounts use` 临时切换当前工作区账号，并可恢复工作区默认账号。
+- 从本地 `auth.json` best-effort 解析 email/account 等元信息，不发网络请求。
+- 导出和导入账号快照备份包；包含 auth 的备份会明确提示凭据风险。
 - 查看工作区/账号元数据，并通过 `doctor` 做账号诊断。
 - 迁移旧版 `~/.codex-<name>` 工作区，并导入旧 `~/.codex-accounts` 账号快照。
 - 保留 macOS 上 Codex App 的 `stop`、`start`、`restart`。
-- 以只读方式读取 Codex `state_*.sqlite`，展示本地 token 用量统计。
+- 以只读方式读取 Codex `state_*.sqlite`，展示每日、模型、工作区、账号、JSON 和 Markdown 形式的本地 token 统计。
 - 在检测到 Codex 内置 Terminal 且无法安全转交时，阻止危险操作。
 - 支持中英文输出，可通过 `CODEX_WORKSPACES_LANG` 指定。
 - 提供 Python 包、测试、GitHub CI 和 PyPI 发布工作流。
@@ -131,6 +133,19 @@ codex-workspaces accounts add research --login
 
 它会把 `~/.codex` 临时切到 `login-<账号>` 工作区，让你登录新账号；登录生成 `auth.json` 后保存为 `acct_<账号>`，再恢复原工作区。如果登录中断，可用 `codex-workspaces accounts cleanup-login-temp` 清理残留临时工作区。
 
+账号元信息如 `email`、`account_id`、`user_id`、`organization_id`、`plan` 会从本地 `auth.json` best-effort 解析。解析失败不会影响账号功能，不会打印 token/secret/cookie 等敏感字段，也不会调用私有接口或发起网络请求。
+
+导出或导入账号备份：
+
+```bash
+codex-workspaces accounts export accounts.tar.gz --all
+codex-workspaces accounts export accounts-with-auth.tar.gz --all --include-auth --yes
+codex-workspaces accounts import accounts-with-auth.tar.gz --dry-run
+codex-workspaces accounts import accounts-with-auth.tar.gz --rename-conflicts
+```
+
+使用 `--include-auth` 创建的备份包包含 `auth.json` 里的 Codex 凭据，必须安全保存，不能提交到 git。不带 `--include-auth` 时只导出 meta，不包含 auth。
+
 导入旧 `codex-accounts` 的 AUTH 模式账号快照：
 
 ```bash
@@ -159,9 +174,62 @@ codex-workspaces current
 codex-workspaces info work
 codex-workspaces doctor
 codex-workspaces stats
+codex-workspaces stats summary --days 30
+codex-workspaces stats daily --format markdown
+codex-workspaces stats models --format json
+codex-workspaces stats workspaces
+codex-workspaces stats accounts
 codex-workspaces stats work --days 14
 ```
 
+`stats` 只读取本地 SQLite 状态文件。无法识别的 workspace/account/model 会显示为 `unknown`；统计结果取决于各工作区里实际存在的 Codex 本地文件。
+
+## 实验性实时额度查询
+
+`codex-workspaces` 可以通过实验性 private API provider 查询已管理账号的实时额度。
+
+该功能默认关闭，依赖 Codex/OpenAI 内部接口，可能随上游变化而失效，也可能返回 `401`/`403`/`429`。它不是 workspace/account 本地切换的依赖。
+
+显式开启：
+
+```bash
+codex-workspaces config set experimental_private_api.enabled true
+codex-workspaces config set experimental_private_api.quota_enabled true
+codex-workspaces config set experimental_private_api.refresh_enabled true
+```
+
+查询当前账号额度：
+
+```bash
+codex-workspaces quota
+codex-workspaces quota --json
+```
+
+查询指定账号额度：
+
+```bash
+codex-workspaces accounts quota acct_work
+```
+
+查询所有账号额度：
+
+```bash
+codex-workspaces accounts list -a
+codex-workspaces accounts list --all-with-quota --json
+```
+
+刷新账号远端信息和 quota cache：
+
+```bash
+codex-workspaces accounts refresh
+codex-workspaces accounts refresh acct_work
+codex-workspaces accounts refresh --all --json
+```
+
+实时额度能力使用显式实验配置、请求超时、串行账号遍历和本地 TTL 缓存，缓存目录为 `~/.codex-workspaces/cache/quota/`。缓存只保存额度摘要和 auth hash，不保存 token、cookie、authorization header 或原始 `auth.json`。
+
+`stats` 和 `quota` 不同：`stats` 是本地 SQLite 历史统计，`quota` 是实时远端查询。额度查询失败不会影响本地 workspace/account 切换。
+
 在当前工作区临时切换账号：
 
 ```bash

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/docs/DESIGN.zh-CN.md

@@ -85,11 +85,19 @@ Windows：
 - 切换 workspace 前会保存当前 live `auth.json` 到 `active_account_id` 对应账号快照。
 - `accounts use` 只修改当前 workspace 的 `active_account_id`，不修改 `default_account_id`。
 - 进入 workspace 时按策略恢复账号：`workspace-default` 恢复默认账号，`last-active` 恢复该 workspace 上次活跃账号，`keep-current` 尽量沿用刚才正在使用的账号。
+- `auth.json` 元信息解析只做本地 best-effort 递归扫描，用于补全 email/account_id/user_id/organization_id/plan/auth_hash；解析失败不影响切换和账号功能。
+- auth 解析不会打印 token、secret、credential、authorization、refresh、access、cookie 等敏感字段，不刷新 token，不调用私有接口，不发网络请求。
+- `accounts export` 默认只导出 meta；必须显式 `--include-auth` 并确认后才导出 `auth.json` 凭据。
+- `accounts import` 解包前校验 tar 条目，拒绝路径穿越、绝对路径、symlink、硬链接和设备文件；导入 auth 后保持 0600 权限，覆盖前写入备份。
 - `migrate --dry-run` 只打印计划，不创建目录、不写元数据。
 - `migrate` 会先备份当前 `~/.codex`、旧 workspace 和旧账号目录，再复制到统一目录；旧目录不会被自动删除。
 - 如果当前 `~/.codex` 是真实目录，批量 `migrate` 会拒绝覆盖；应使用 `init <name> --migrate-current` 显式迁移当前目录。
 - `stats` 只以 read-only SQLite URI 读取 `state_*.sqlite`，不写入 Codex 数据库。
-- 不实现 `quota`/`refresh` 这类依赖私有接口或私有行为的功能。
+- `stats` 聚合每日、模型、workspace、account 维度；无法推断的 workspace/account/model 显示为 `unknown`。
+- 默认不启用 `quota`/`refresh` 这类依赖私有接口或私有行为的能力；只作为显式开启的实验功能提供。
+- 实验性 `quota` / `accounts list -a` / `accounts refresh` 是显式开启的 private API capability；默认关闭，失败隔离，不参与 workspace/account 切换。
+- private API provider 只在配置中开启且配置 endpoint 或注入 provider 后使用；请求有 timeout，错误会脱敏，输出和 cache 不包含 token/cookie/authorization。
+- quota cache 存放在 `~/.codex-workspaces/cache/quota/`，按 TTL 和 auth_hash 失效，只保存 quota 摘要。
 - macOS 上迁移前必须确认 Codex App 未运行。
 - Codex 内置 Terminal 中的危险命令要么转交外部 Terminal，要么拒绝。
 - 任何切换都只替换 active link，不删除 workspace 目录。
@@ -110,6 +118,15 @@ Windows：
 - `codex-workspaces accounts add <account> --login`
 - `codex-workspaces accounts login-temp <account>`
 - `codex-workspaces accounts cleanup-login-temp`
+- `codex-workspaces accounts refresh-meta <account>|--all [--overwrite]`
+- `codex-workspaces accounts export <backup.tar.gz> [--all|--account <account>] [--include-auth] [--yes]`
+- `codex-workspaces accounts import <backup.tar.gz> [--dry-run] [--rename-conflicts|--overwrite]`
+- `codex-workspaces stats [summary|daily|models|workspaces|accounts] [--format table|json|markdown]`
+- `codex-workspaces config get/set experimental_private_api.*`
+- `codex-workspaces quota [--json] [--no-cache]`
+- `codex-workspaces accounts quota <account> [--json] [--no-cache]`
+- `codex-workspaces accounts list -a [--json] [--no-cache] [--verbose]`
+- `codex-workspaces accounts refresh [account|--all] [--json]`
 - `codex-workspaces accounts import-workspaces`
 - `codex-workspaces accounts import-legacy <legacy_accounts_dir>`
 

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/docs/RELEASE.zh-CN.md

@@ -88,9 +88,9 @@ permissions:
 1. 更新版本号和 `CHANGELOG.md`。
 2. 本地执行测试和构建检查。
 3. 合并到 `main`。
-4. 创建 Git tag，例如 `v0.3.1`，触发 `Publish to TestPyPI`。
+4. 创建 Git tag，例如 `v0.3.3`，触发 `Publish to TestPyPI`。
 5. 确认 TestPyPI 上传和安装正常。
-6. 从同一个提交创建并推送正式发布分支，例如 `release/v0.3.1`，触发 `Publish to PyPI`。
+6. 从同一个提交创建并推送正式发布分支，例如 `release/v0.3.3`，触发 `Publish to PyPI`。
 7. 如果 `pypi` Environment 配置了 Required reviewers，在 GitHub Actions 里批准部署。
 8. 在 PyPI 页面确认 wheel、sdist 和 README 渲染正常。
 

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/docs/TESTING.zh-CN.md

@@ -7,9 +7,10 @@
 - 文件系统行为：初始化统一目录工作区、切换链接、拒绝覆盖真实目录。
 - CLI 行为：命令别名、工作区名快捷切换、错误路径、帮助输出。
 - 管理行为：诊断、列表元信息、工作区详情、重命名、删除保护、备注读写和账号绑定。
-- 账号行为：账号快照保存、列表/详情增强、备注、重命名、删除保护、临时切换、login-temp 新增账号、默认账号恢复、默认账号设置。
+- 账号行为：账号快照保存、auth 元信息 best-effort 解析、列表/详情增强、备份导出导入、备注、重命名、删除保护、临时切换、login-temp 新增账号、默认账号恢复、默认账号设置。
 - 迁移行为：旧 `~/.codex-<name>` 工作区迁移、旧 `~/.codex-accounts` 导入、dry-run 不落盘、迁移前备份。
-- 统计行为：只读 `state_*.sqlite`，汇总 token、模型、最近会话和每日用量。
+- 统计行为：只读 `state_*.sqlite`，汇总 input/output/total token、模型、最近会话、每日、workspace、account，并覆盖 JSON/Markdown 输出。
+- 实验行为：private API 默认关闭、显式配置、mock provider 成功/失败、quota cache、JSON 输出脱敏、普通切换不触发 private API。
 - 平台行为：macOS App 控制可注入，非 macOS 自动跳过 App 启停，Codex 内置 Terminal 阻止或转交危险操作。
 
 ## 测试结构
@@ -79,6 +80,11 @@ codex-workspaces doctor
 # CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
 # CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
 # codex-workspaces stats personal --days 14
+# codex-workspaces stats summary --days 30
+# codex-workspaces stats daily --format markdown
+# codex-workspaces stats models --format json
+# codex-workspaces stats workspaces
+# codex-workspaces stats accounts
 
 printf '{"account":"personal"}\n' > "$tmp_home/.codex-workspaces/workspaces/personal/auth.json"
 
@@ -98,6 +104,38 @@ CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
 CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
 codex-workspaces accounts info personal
 
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces accounts refresh-meta personal
+
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces accounts export "$tmp_home/accounts-meta.tar.gz" --all
+
+# 包含 auth.json 的备份包含凭据，必须安全保存，不能提交到 git。
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces accounts export "$tmp_home/accounts-with-auth.tar.gz" --all --include-auth --yes
+
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces accounts import "$tmp_home/accounts-with-auth.tar.gz" --dry-run
+
+# 实验性实时额度功能默认关闭；如需手动验收，需要显式开启。
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces config set experimental_private_api.enabled true
+
+CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+codex-workspaces config set experimental_private_api.quota_enabled true
+
+# 需要配置实际 provider endpoint 后才会真实请求；无 endpoint 时会安全失败。
+# CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
+# CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \
+# codex-workspaces quota --json
+# codex-workspaces accounts list -a
+
 # 新账号登录流程会切到临时 login-research 工作区，登录完成后恢复原工作区。
 # CODEX_WORKSPACES_LINK="$tmp_home/.codex" \
 # CODEX_WORKSPACES_ROOT="$tmp_home/.codex-workspaces" \

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codex-workspaces"
-version = "0.3.1"
+version = "0.3.3"
 description = "Cross-platform Codex workspace switcher with a preserved macOS shell workflow."
 readme = "README.MD"
 requires-python = ">=3.9"

{codex_workspaces-0.3.1 → codex_workspaces-0.3.3}/src/codex_workspaces/__init__.py

@@ -1,3 +1,3 @@
 """Codex workspace switching utilities."""
 
-__version__ = "0.3.1"
+__version__ = "0.3.3"

codex_workspaces-0.3.3/src/codex_workspaces/auth_inspector.py

@@ -0,0 +1,125 @@
+from __future__ import annotations
+
+import hashlib
+import json
+import re
+from dataclasses import dataclass, field
+from pathlib import Path
+from typing import Any
+
+
+EMAIL_RE = re.compile(r"^[^@\s]+@[^@\s]+\.[^@\s]+$")
+SENSITIVE_KEY_PARTS = (
+    "token",
+    "secret",
+    "credential",
+    "authorization",
+    "refresh",
+    "access",
+    "cookie",
+)
+
+
+@dataclass
+class AuthInspection:
+    email: str | None = None
+    account_id: str | None = None
+    user_id: str | None = None
+    organization_id: str | None = None
+    plan: str | None = None
+    auth_hash: str | None = None
+    raw_keys: list[str] = field(default_factory=list)
+    warnings: list[str] = field(default_factory=list)
+
+
+def inspect_auth_file(auth_path: Path) -> AuthInspection:
+    result = AuthInspection()
+    try:
+        result.auth_hash = file_hash(auth_path)
+    except OSError as exc:
+        result.warnings.append(f"could not read auth file: {exc}")
+        return result
+
+    try:
+        data = json.loads(auth_path.read_text(encoding="utf-8"))
+    except (OSError, UnicodeDecodeError, json.JSONDecodeError) as exc:
+        result.warnings.append(f"could not parse auth JSON: {exc}")
+        return result
+
+    scan_value(data, result)
+    return result
+
+
+def file_hash(path: Path) -> str:
+    digest = hashlib.sha256()
+    with path.open("rb") as handle:
+        for chunk in iter(lambda: handle.read(1024 * 1024), b""):
+            digest.update(chunk)
+    return "sha256:" + digest.hexdigest()
+
+
+def scan_value(value: Any, result: AuthInspection, key_path: tuple[str, ...] = ()) -> None:
+    if isinstance(value, dict):
+        for key, child in value.items():
+            key_text = str(key)
+            if is_sensitive_key(key_text):
+                continue
+            if key_text not in result.raw_keys:
+                result.raw_keys.append(key_text)
+            scan_key_value(key_text, child, result, key_path)
+            scan_value(child, result, (*key_path, key_text))
+    elif isinstance(value, list):
+        for child in value:
+            scan_value(child, result, key_path)
+
+
+def scan_key_value(key: str, value: Any, result: AuthInspection, key_path: tuple[str, ...]) -> None:
+    if not isinstance(value, (str, int)):
+        return
+    text = str(value).strip()
+    if not text or len(text) > 256:
+        return
+    lower_key = key.lower().replace("-", "_")
+    parent_key = key_path[-1].lower().replace("-", "_") if key_path else ""
+
+    if result.email is None and ("email" in lower_key or EMAIL_RE.match(text)) and EMAIL_RE.match(text):
+        result.email = text
+        return
+
+    if result.account_id is None and (is_account_key(lower_key) or (lower_key == "id" and is_account_key(parent_key))) and looks_like_identifier(text):
+        result.account_id = text
+    if result.user_id is None and (is_user_key(lower_key) or (lower_key == "id" and is_user_key(parent_key))) and looks_like_identifier(text):
+        result.user_id = text
+    if result.organization_id is None and (is_org_key(lower_key) or (lower_key == "id" and is_org_key(parent_key))) and looks_like_identifier(text):
+        result.organization_id = text
+    if result.plan is None and is_plan_key(lower_key):
+        result.plan = text
+
+
+def is_sensitive_key(key: str) -> bool:
+    lower = key.lower()
+    return any(part in lower for part in SENSITIVE_KEY_PARTS)
+
+
+def is_account_key(key: str) -> bool:
+    normalized = key.replace("_", "")
+    return normalized in {"accountid", "account"} or "account" in key
+
+
+def is_user_key(key: str) -> bool:
+    normalized = key.replace("_", "")
+    return normalized in {"userid", "user", "sub"} or "user" in key
+
+
+def is_org_key(key: str) -> bool:
+    return "organization" in key or key == "org" or key.startswith("org_")
+
+
+def is_plan_key(key: str) -> bool:
+    return "plan" in key or "subscription" in key or "tier" in key
+
+
+def looks_like_identifier(value: str) -> bool:
+    if EMAIL_RE.match(value):
+        return False
+    return bool(re.match(r"^[A-Za-z0-9._:@-]{1,128}$", value))