multi-codex 0.8.0__tar.gz → 0.10.0__tar.gz

{multi_codex-0.8.0/src/multi_codex.egg-info → multi_codex-0.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: multi-codex
-Version: 0.8.0
+Version: 0.10.0
 Summary: Run several Codex CLI accounts side by side: separate CODEX_HOME directories, launchers and proxies.
 License: MIT
 Project-URL: Homepage, https://github.com/jakoes-wu/multi-codex
@@ -134,7 +134,7 @@ Without a name, the account is named after the e-mail address in `~/.codex/auth.
 | Open VS Code with an account | `multi-codex code work ~/src/project` | [VS Code and the desktop app](#vs-code-and-the-desktop-app-experimental) |
 | Open the desktop app with an account (macOS) | `multi-codex app work` | [VS Code and the desktop app](#vs-code-and-the-desktop-app-experimental) |
 | Change the account that plain `codex` and the Dock apps use | `multi-codex use work` (after `migrate-default`) | [Default account](#default-account) |
-| Always use one account inside a project | In the project directory: `multi-codex bind work`, then `multi-codex run` | [Directory bindings](#directory-bindings) |
+| Always use one account inside a project | In the project directory: `multi-codex bind work`, then `codex-auto` | [Directory bindings](#directory-bindings) |
 | Set or change an account's proxy | `multi-codex set work --proxy 7901` | [Proxy values](#proxy-values) |
 | Share `AGENTS.md`, skills and rules between accounts | Put them in `~/.codex-shared`, then run `multi-codex set work --shared` | [Shared resources](#shared-resources) |
 | Start a new account with another account's settings | `multi-codex add new --config-from work` | [Copying settings](#copying-settings-from-another-account) |
@@ -142,6 +142,7 @@ Without a name, the account is named after the e-mail address in `~/.codex/auth.
 | Set up all accounts on a new machine | `curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh \| sh -s -- --config accounts.json` | [Declarative setup](#declarative-setup-with-apply) |
 | Get tab completion | `eval "$(multi-codex completion zsh)"` | [Shell completion](#shell-completion) |
 | See what a command would change | add `--dry-run` | [Commands](#commands) |
+| Rename an account | `multi-codex rename work client-a` (the directory and login stay) | [Renaming accounts](#renaming-accounts) |
 | Remove an account | `multi-codex remove work` (the directory is kept) | [Commands](#commands) |
 
 More questions are answered in the [FAQ](#faq).
@@ -159,8 +160,9 @@ More questions are answered in the [FAQ](#faq).
 | ---- | ---- |
 | `multi-codex init [--root DIR] [--bin-dir DIR] [--shared-dir DIR] [--shared-items A,B]` | Create or change global settings. |
 | `multi-codex migrate-default [NAME] [--source DIR] [--copy] [--keep-backup] [--proxy P] [--skip-process-check] [--accept-relogin]` | Turn the default directory into an account. Without NAME, the e-mail address in its `auth.json` is used. |
-| `multi-codex add NAME [--proxy P] [--shared [DIR] \| --no-shared] [--adopt] [--config-from OTHER]` | Add an account, adopt an existing directory, or change its options. `--config-from` copies `config.toml` from another account once. |
-| `multi-codex set NAME [--proxy P] [--shared [DIR] \| --no-shared] [--adopt] [--config-from OTHER]` | Change an existing account; same options as `add`, but never creates one. |
+| `multi-codex add NAME [--proxy P] [--shared [DIR] \| --no-shared] [--shared-exclude ITEM] [--shared-include ITEM] [--adopt] [--config-from OTHER]` | Add an account, adopt an existing directory, or change its options. `--config-from` copies `config.toml` from another account once. |
+| `multi-codex set NAME [same options as add]` | Change an existing account; same options as `add`, but never creates one. |
+| `multi-codex rename OLD NEW` | Rename an account and its launcher; the directory, login and links stay. |
 | `multi-codex login NAME [-- ARGS]` | Run `codex login` with an account's environment; arguments after `--` go to `codex login`. Does not need `~/.local/bin` on `PATH`. |
 | `multi-codex proxy NAME PORT\|URL\|off\|inherit` | Set an account's proxy. |
 | `multi-codex remove NAME` | Unregister an account and delete its launcher. **The account directory is kept.** |
@@ -170,6 +172,7 @@ More questions are answered in the [FAQ](#faq).
 | `multi-codex doctor [--json]` | Check the installation, configuration and accounts. Read-only. |
 | `multi-codex run [NAME] [-- COMMAND ...]` | Run a command (default: `codex`) with an account's environment. Without NAME, the account bound to the current directory is used. |
 | `multi-codex bind [NAME [DIR]]` / `unbind [DIR]` | Bind a directory to an account, list bindings, or remove one. |
+| `multi-codex which [DIR]` | Show which account a directory uses (the same one `codex-auto` and `run` pick). |
 | `multi-codex code NAME [PATH] [-- ARGS]` | Open VS Code for an account (experimental). |
 | `multi-codex app NAME` | Open the Codex desktop app for an account (macOS, experimental). |
 | `multi-codex path NAME` | Print an account's directory. |
@@ -178,7 +181,7 @@ More questions are answered in the [FAQ](#faq).
 | `multi-codex restore NAME [--skip-process-check] [--accept-relogin]` | Undo `migrate-default`: move the account back to `~/.codex`. |
 | `multi-codex completion bash\|zsh\|fish` | Print a shell completion script. |
 
-Every write command accepts `--dry-run`. `init`, `add`, `set`, `proxy`, `remove`, `apply`, `bind`, `unbind` and `env` print only the items they change (or `already up to date`); `-v` / `--verbose` also prints unchanged items. For `list`, `-v` means the full table instead. `list`, `usage` and `doctor` never change anything; with `--json` they print a single JSON object on stdout (with a `"version": 1` field) and keep warnings on stderr. Use `--json` in scripts: the table layout is not guaranteed to stay the same.
+Every write command accepts `--dry-run`. `init`, `add`, `set`, `rename`, `proxy`, `remove`, `apply`, `bind`, `unbind` and `env` print only the items they change (or `already up to date`); `-v` / `--verbose` also prints unchanged items. For `list`, `-v` means the full table instead. `list`, `usage` and `doctor` never change anything; with `--json` they print a single JSON object on stdout (with a `"version": 1` field) and keep warnings on stderr. Use `--json` in scripts: the table layout is not guaranteed to stay the same.
 
 ### Login and usage
 
@@ -216,7 +219,7 @@ Subcommands, options and registered account names (including e-mail addresses) a
 
 ### Running other commands
 
-`multi-codex run NAME -- COMMAND ...` runs any command with exactly the environment of `codex-NAME` (`CODEX_HOME`, proxy, extra variables). Without a command it runs `codex`. Everything after the first `--` is passed through unchanged; the exit code is the command's. `multi-codex path NAME` prints the account directory.
+`multi-codex run NAME -- COMMAND ...` runs any command with exactly the environment of `codex-NAME` (`CODEX_HOME`, proxy, extra variables). Without a command it runs `codex`. Everything after the first `--` is passed through unchanged; the exit code is the command's. `multi-codex path NAME` prints the account directory. For example, to manage an account's MCP servers: `multi-codex run work -- codex mcp list`.
 
 ### Directory bindings
 
@@ -225,14 +228,26 @@ cd ~/work/project && multi-codex bind work     # this directory and everything b
 multi-codex run -- codex resume                # no account name needed here
 multi-codex bind                               # list bindings; * marks the one in effect here
 multi-codex unbind                             # remove the binding of the current directory
+codex-auto                                     # runs codex with the bound account
+multi-codex which                              # prints the account this directory uses
 ```
 
+While at least one binding exists, multi-codex generates `codex-auto` next to the other launchers. It looks up the nearest bound directory exactly like `run` and starts that account's launcher; outside any bound directory it runs plain `codex` (the default account, see [Default account](#default-account)) and says so on stderr. It is updated whenever bindings or accounts change and removed with the last binding. An account named `auto` cannot coexist with bindings: rename it first (`multi-codex rename auto NEW`).
+
 `run` without an account name walks up from the current directory and uses the nearest bound directory. Bindings are stored in `config.json` (not in your project), keyed by the real path of the directory (links resolved, the on-disk letter case used on case-insensitive file systems). `apply -f` keeps the current bindings; removing an account (`remove`, `restore`, `apply -f`) also removes its bindings. Older versions of multi-codex drop the `bindings` field on their next write.
 
 ### Copying settings from another account
 
 `multi-codex add new --config-from work` copies `config.toml` from `work` into `new` once; afterwards the two files are independent. An existing `config.toml` with different content is a conflict (nothing is written), and so is copying into an account that shares `config.toml`. The copy includes everything in the file, such as `cli_auth_credentials_store` or absolute paths that point into the other account.
 
+### Renaming accounts
+
+```sh
+multi-codex rename work client-a
+```
+
+The account and its launcher get the new name (`codex-client-a`; `codex-work` is deleted), and directory bindings, `codex-auto` and the default account follow. The directory stays where it is, so the login, sessions and shared links are kept; `config.json` records it as `"dir": "work"` (in `list --json`, `dir` is the full path instead). A name that is still used as another account's directory, such as `work` after this rename, cannot be given to a new account. Renaming only the letter case is not supported. Before downgrading to a version older than 0.9, rename the account back: older versions ignore `dir` and would use `<root>/client-a`.
+
 ### Per-account environment variables
 
 ```sh
@@ -242,6 +257,8 @@ multi-codex env work --unset TERM_PROGRAM
 multi-codex env work --clear
 ```
 
+Launchers (and `run`, `login`, `code` and `usage --live`, which use the same environment) clear `CODEX_API_KEY`, `CODEX_ACCESS_TOKEN` and `CODEX_SQLITE_HOME` inherited from your shell, so one exported API key or database location does not leak into every account. An account that needs an API key sets it here, for example `multi-codex env work CODEX_API_KEY=sk-…`; per-account variables are applied after the clearing.
+
 The variables are stored in `config.json` (`accounts.<name>.env`) and written into the launcher. Values are used literally (no `$VAR` expansion). `CODEX_HOME` and the proxy variables are reserved: use `multi-codex proxy` for proxies. A launcher with environment variables is readable only by you (mode 0700), and `list --json` shows only the variable names; still, the values are stored in plain text, so do not put secrets there that need stronger protection. Older versions of multi-codex ignore the `env` field and drop it on their next write; run `multi-codex env NAME --clear` before downgrading.
 
 ### VS Code and the desktop app (experimental)
@@ -327,7 +344,7 @@ Progress is recorded in `~/.config/multi-codex/migrate-journal.json`. If the mig
 
 Sockets and FIFOs (runtime files such as `ipc.sock`) are not copied in copy mode. On macOS, copy mode does not preserve extended attributes.
 
-If `CODEX_HOME`, `CODEX_SQLITE_HOME`, `CODEX_API_KEY` or `CODEX_ACCESS_TOKEN` is set in your environment, multi-codex warns you: these variables override or bypass per-account isolation.
+If `CODEX_HOME`, `CODEX_SQLITE_HOME`, `CODEX_API_KEY` or `CODEX_ACCESS_TOKEN` is set in your environment, multi-codex warns you: launchers set or clear them, but plain `codex` still uses them.
 
 ### Undoing a migration
 
@@ -361,6 +378,10 @@ multi-codex creates the missing links and remembers which links it created. Turn
 
 If you already linked an account to the shared directory by hand, `multi-codex set NAME --shared --adopt` takes those links over without recreating them: from then on, turning sharing off removes them as well. Only links that already point to the matching shared item are adopted.
 
+One account can opt out of some shared items: `multi-codex set work --shared-exclude skills` removes the `skills` link multi-codex created in `work` (as if sharing were off for that item) and no longer creates it; `--shared-include skills` undoes that. Both options can be repeated, names match `shared.items` exactly, and `list` shows the exclusions as `yes (not: skills)`. To exclude `config.toml` and then copy another account's settings into it, run `--shared-exclude config.toml` and `--config-from` as two separate commands.
+
+Items that hold one account's own state can never be shared: `shared.items` must not contain the entries marked "No" in the table below. A configuration that lists one fails to load and names the item; remove it from `config.json`.
+
 ### What can be shared
 
 Based on the Codex source code (openai/codex at `6b4daafd`):
@@ -375,7 +396,7 @@ Based on the Codex source code (openai/codex at `6b4daafd`):
 | `history.jsonl` | Prompt history | Yes | Reads and writes are file-locked; the histories of the accounts are merged. |
 | `auth.json`, `secrets/`, `.credentials.json`, `.env` | Credentials | **No** | They are the account. |
 | `installation_id` | Installation identifier | No | Sent with requests; sharing makes several accounts look like one installation. |
-| `*.sqlite` (`state_5.sqlite`, …) | Threads, logs, memories | **No** | `state_5.sqlite` records account IDs. |
+| `*.sqlite`, `*.sqlite-wal`, `*.sqlite-shm` (`state_5.sqlite`, …), `sqlite/` | Threads, logs, memories | **No** | `state_5.sqlite` records account IDs. |
 | `sessions/`, `archived_sessions/`, `session_index.jsonl` | Session logs | No | The index has only an in-process lock; sessions record the account that created them. |
 | `models_cache.json`, `cache/` | Caches | Not needed | Keyed by the account; a mismatch is a cache miss. |
 | `app-server-control/`, `app-server-daemon/`, `packages/`, `tmp/`, `.tmp/`, `log/`, `shell_snapshots/` | Runtime state | No | Per process or per session. |
@@ -438,8 +459,11 @@ Run the installer again; configuration, accounts and launchers are not touched:
 ```sh
 curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh | sh
 multi-codex --version
+multi-codex apply      # after upgrading from 0.8 or older: rewrites the launchers
 ```
 
+0.9 changed what the launchers contain. Until `multi-codex apply` (or any other write command) rewrites them, `list` shows `launcher stale` and `usage --live` refuses to run; the old launchers keep working.
+
 ## Exit codes
 
 | Code | Meaning |
@@ -473,7 +497,7 @@ The tool goes to `~/.local/share/multi-codex` and the `multi-codex` command to `
 curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh | sh -s -- --uninstall    # without a clone
 ```
 
-This removes the tool only. Your configuration, account directories and `codex-<name>` launchers stay; the launchers keep working because they do not depend on multi-codex.
+This removes the tool only. Your configuration, account directories, `codex-<name>` launchers and `codex-auto` stay; they keep working because they do not depend on multi-codex.
 
 ## Contributing
 

{multi_codex-0.8.0 → multi_codex-0.10.0}/README.md

@@ -110,7 +110,7 @@ Without a name, the account is named after the e-mail address in `~/.codex/auth.
 | Open VS Code with an account | `multi-codex code work ~/src/project` | [VS Code and the desktop app](#vs-code-and-the-desktop-app-experimental) |
 | Open the desktop app with an account (macOS) | `multi-codex app work` | [VS Code and the desktop app](#vs-code-and-the-desktop-app-experimental) |
 | Change the account that plain `codex` and the Dock apps use | `multi-codex use work` (after `migrate-default`) | [Default account](#default-account) |
-| Always use one account inside a project | In the project directory: `multi-codex bind work`, then `multi-codex run` | [Directory bindings](#directory-bindings) |
+| Always use one account inside a project | In the project directory: `multi-codex bind work`, then `codex-auto` | [Directory bindings](#directory-bindings) |
 | Set or change an account's proxy | `multi-codex set work --proxy 7901` | [Proxy values](#proxy-values) |
 | Share `AGENTS.md`, skills and rules between accounts | Put them in `~/.codex-shared`, then run `multi-codex set work --shared` | [Shared resources](#shared-resources) |
 | Start a new account with another account's settings | `multi-codex add new --config-from work` | [Copying settings](#copying-settings-from-another-account) |
@@ -118,6 +118,7 @@ Without a name, the account is named after the e-mail address in `~/.codex/auth.
 | Set up all accounts on a new machine | `curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh \| sh -s -- --config accounts.json` | [Declarative setup](#declarative-setup-with-apply) |
 | Get tab completion | `eval "$(multi-codex completion zsh)"` | [Shell completion](#shell-completion) |
 | See what a command would change | add `--dry-run` | [Commands](#commands) |
+| Rename an account | `multi-codex rename work client-a` (the directory and login stay) | [Renaming accounts](#renaming-accounts) |
 | Remove an account | `multi-codex remove work` (the directory is kept) | [Commands](#commands) |
 
 More questions are answered in the [FAQ](#faq).
@@ -135,8 +136,9 @@ More questions are answered in the [FAQ](#faq).
 | ---- | ---- |
 | `multi-codex init [--root DIR] [--bin-dir DIR] [--shared-dir DIR] [--shared-items A,B]` | Create or change global settings. |
 | `multi-codex migrate-default [NAME] [--source DIR] [--copy] [--keep-backup] [--proxy P] [--skip-process-check] [--accept-relogin]` | Turn the default directory into an account. Without NAME, the e-mail address in its `auth.json` is used. |
-| `multi-codex add NAME [--proxy P] [--shared [DIR] \| --no-shared] [--adopt] [--config-from OTHER]` | Add an account, adopt an existing directory, or change its options. `--config-from` copies `config.toml` from another account once. |
-| `multi-codex set NAME [--proxy P] [--shared [DIR] \| --no-shared] [--adopt] [--config-from OTHER]` | Change an existing account; same options as `add`, but never creates one. |
+| `multi-codex add NAME [--proxy P] [--shared [DIR] \| --no-shared] [--shared-exclude ITEM] [--shared-include ITEM] [--adopt] [--config-from OTHER]` | Add an account, adopt an existing directory, or change its options. `--config-from` copies `config.toml` from another account once. |
+| `multi-codex set NAME [same options as add]` | Change an existing account; same options as `add`, but never creates one. |
+| `multi-codex rename OLD NEW` | Rename an account and its launcher; the directory, login and links stay. |
 | `multi-codex login NAME [-- ARGS]` | Run `codex login` with an account's environment; arguments after `--` go to `codex login`. Does not need `~/.local/bin` on `PATH`. |
 | `multi-codex proxy NAME PORT\|URL\|off\|inherit` | Set an account's proxy. |
 | `multi-codex remove NAME` | Unregister an account and delete its launcher. **The account directory is kept.** |
@@ -146,6 +148,7 @@ More questions are answered in the [FAQ](#faq).
 | `multi-codex doctor [--json]` | Check the installation, configuration and accounts. Read-only. |
 | `multi-codex run [NAME] [-- COMMAND ...]` | Run a command (default: `codex`) with an account's environment. Without NAME, the account bound to the current directory is used. |
 | `multi-codex bind [NAME [DIR]]` / `unbind [DIR]` | Bind a directory to an account, list bindings, or remove one. |
+| `multi-codex which [DIR]` | Show which account a directory uses (the same one `codex-auto` and `run` pick). |
 | `multi-codex code NAME [PATH] [-- ARGS]` | Open VS Code for an account (experimental). |
 | `multi-codex app NAME` | Open the Codex desktop app for an account (macOS, experimental). |
 | `multi-codex path NAME` | Print an account's directory. |
@@ -154,7 +157,7 @@ More questions are answered in the [FAQ](#faq).
 | `multi-codex restore NAME [--skip-process-check] [--accept-relogin]` | Undo `migrate-default`: move the account back to `~/.codex`. |
 | `multi-codex completion bash\|zsh\|fish` | Print a shell completion script. |
 
-Every write command accepts `--dry-run`. `init`, `add`, `set`, `proxy`, `remove`, `apply`, `bind`, `unbind` and `env` print only the items they change (or `already up to date`); `-v` / `--verbose` also prints unchanged items. For `list`, `-v` means the full table instead. `list`, `usage` and `doctor` never change anything; with `--json` they print a single JSON object on stdout (with a `"version": 1` field) and keep warnings on stderr. Use `--json` in scripts: the table layout is not guaranteed to stay the same.
+Every write command accepts `--dry-run`. `init`, `add`, `set`, `rename`, `proxy`, `remove`, `apply`, `bind`, `unbind` and `env` print only the items they change (or `already up to date`); `-v` / `--verbose` also prints unchanged items. For `list`, `-v` means the full table instead. `list`, `usage` and `doctor` never change anything; with `--json` they print a single JSON object on stdout (with a `"version": 1` field) and keep warnings on stderr. Use `--json` in scripts: the table layout is not guaranteed to stay the same.
 
 ### Login and usage
 
@@ -192,7 +195,7 @@ Subcommands, options and registered account names (including e-mail addresses) a
 
 ### Running other commands
 
-`multi-codex run NAME -- COMMAND ...` runs any command with exactly the environment of `codex-NAME` (`CODEX_HOME`, proxy, extra variables). Without a command it runs `codex`. Everything after the first `--` is passed through unchanged; the exit code is the command's. `multi-codex path NAME` prints the account directory.
+`multi-codex run NAME -- COMMAND ...` runs any command with exactly the environment of `codex-NAME` (`CODEX_HOME`, proxy, extra variables). Without a command it runs `codex`. Everything after the first `--` is passed through unchanged; the exit code is the command's. `multi-codex path NAME` prints the account directory. For example, to manage an account's MCP servers: `multi-codex run work -- codex mcp list`.
 
 ### Directory bindings
 
@@ -201,14 +204,26 @@ cd ~/work/project && multi-codex bind work     # this directory and everything b
 multi-codex run -- codex resume                # no account name needed here
 multi-codex bind                               # list bindings; * marks the one in effect here
 multi-codex unbind                             # remove the binding of the current directory
+codex-auto                                     # runs codex with the bound account
+multi-codex which                              # prints the account this directory uses
 ```
 
+While at least one binding exists, multi-codex generates `codex-auto` next to the other launchers. It looks up the nearest bound directory exactly like `run` and starts that account's launcher; outside any bound directory it runs plain `codex` (the default account, see [Default account](#default-account)) and says so on stderr. It is updated whenever bindings or accounts change and removed with the last binding. An account named `auto` cannot coexist with bindings: rename it first (`multi-codex rename auto NEW`).
+
 `run` without an account name walks up from the current directory and uses the nearest bound directory. Bindings are stored in `config.json` (not in your project), keyed by the real path of the directory (links resolved, the on-disk letter case used on case-insensitive file systems). `apply -f` keeps the current bindings; removing an account (`remove`, `restore`, `apply -f`) also removes its bindings. Older versions of multi-codex drop the `bindings` field on their next write.
 
 ### Copying settings from another account
 
 `multi-codex add new --config-from work` copies `config.toml` from `work` into `new` once; afterwards the two files are independent. An existing `config.toml` with different content is a conflict (nothing is written), and so is copying into an account that shares `config.toml`. The copy includes everything in the file, such as `cli_auth_credentials_store` or absolute paths that point into the other account.
 
+### Renaming accounts
+
+```sh
+multi-codex rename work client-a
+```
+
+The account and its launcher get the new name (`codex-client-a`; `codex-work` is deleted), and directory bindings, `codex-auto` and the default account follow. The directory stays where it is, so the login, sessions and shared links are kept; `config.json` records it as `"dir": "work"` (in `list --json`, `dir` is the full path instead). A name that is still used as another account's directory, such as `work` after this rename, cannot be given to a new account. Renaming only the letter case is not supported. Before downgrading to a version older than 0.9, rename the account back: older versions ignore `dir` and would use `<root>/client-a`.
+
 ### Per-account environment variables
 
 ```sh
@@ -218,6 +233,8 @@ multi-codex env work --unset TERM_PROGRAM
 multi-codex env work --clear
 ```
 
+Launchers (and `run`, `login`, `code` and `usage --live`, which use the same environment) clear `CODEX_API_KEY`, `CODEX_ACCESS_TOKEN` and `CODEX_SQLITE_HOME` inherited from your shell, so one exported API key or database location does not leak into every account. An account that needs an API key sets it here, for example `multi-codex env work CODEX_API_KEY=sk-…`; per-account variables are applied after the clearing.
+
 The variables are stored in `config.json` (`accounts.<name>.env`) and written into the launcher. Values are used literally (no `$VAR` expansion). `CODEX_HOME` and the proxy variables are reserved: use `multi-codex proxy` for proxies. A launcher with environment variables is readable only by you (mode 0700), and `list --json` shows only the variable names; still, the values are stored in plain text, so do not put secrets there that need stronger protection. Older versions of multi-codex ignore the `env` field and drop it on their next write; run `multi-codex env NAME --clear` before downgrading.
 
 ### VS Code and the desktop app (experimental)
@@ -303,7 +320,7 @@ Progress is recorded in `~/.config/multi-codex/migrate-journal.json`. If the mig
 
 Sockets and FIFOs (runtime files such as `ipc.sock`) are not copied in copy mode. On macOS, copy mode does not preserve extended attributes.
 
-If `CODEX_HOME`, `CODEX_SQLITE_HOME`, `CODEX_API_KEY` or `CODEX_ACCESS_TOKEN` is set in your environment, multi-codex warns you: these variables override or bypass per-account isolation.
+If `CODEX_HOME`, `CODEX_SQLITE_HOME`, `CODEX_API_KEY` or `CODEX_ACCESS_TOKEN` is set in your environment, multi-codex warns you: launchers set or clear them, but plain `codex` still uses them.
 
 ### Undoing a migration
 
@@ -337,6 +354,10 @@ multi-codex creates the missing links and remembers which links it created. Turn
 
 If you already linked an account to the shared directory by hand, `multi-codex set NAME --shared --adopt` takes those links over without recreating them: from then on, turning sharing off removes them as well. Only links that already point to the matching shared item are adopted.
 
+One account can opt out of some shared items: `multi-codex set work --shared-exclude skills` removes the `skills` link multi-codex created in `work` (as if sharing were off for that item) and no longer creates it; `--shared-include skills` undoes that. Both options can be repeated, names match `shared.items` exactly, and `list` shows the exclusions as `yes (not: skills)`. To exclude `config.toml` and then copy another account's settings into it, run `--shared-exclude config.toml` and `--config-from` as two separate commands.
+
+Items that hold one account's own state can never be shared: `shared.items` must not contain the entries marked "No" in the table below. A configuration that lists one fails to load and names the item; remove it from `config.json`.
+
 ### What can be shared
 
 Based on the Codex source code (openai/codex at `6b4daafd`):
@@ -351,7 +372,7 @@ Based on the Codex source code (openai/codex at `6b4daafd`):
 | `history.jsonl` | Prompt history | Yes | Reads and writes are file-locked; the histories of the accounts are merged. |
 | `auth.json`, `secrets/`, `.credentials.json`, `.env` | Credentials | **No** | They are the account. |
 | `installation_id` | Installation identifier | No | Sent with requests; sharing makes several accounts look like one installation. |
-| `*.sqlite` (`state_5.sqlite`, …) | Threads, logs, memories | **No** | `state_5.sqlite` records account IDs. |
+| `*.sqlite`, `*.sqlite-wal`, `*.sqlite-shm` (`state_5.sqlite`, …), `sqlite/` | Threads, logs, memories | **No** | `state_5.sqlite` records account IDs. |
 | `sessions/`, `archived_sessions/`, `session_index.jsonl` | Session logs | No | The index has only an in-process lock; sessions record the account that created them. |
 | `models_cache.json`, `cache/` | Caches | Not needed | Keyed by the account; a mismatch is a cache miss. |
 | `app-server-control/`, `app-server-daemon/`, `packages/`, `tmp/`, `.tmp/`, `log/`, `shell_snapshots/` | Runtime state | No | Per process or per session. |
@@ -414,8 +435,11 @@ Run the installer again; configuration, accounts and launchers are not touched:
 ```sh
 curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh | sh
 multi-codex --version
+multi-codex apply      # after upgrading from 0.8 or older: rewrites the launchers
 ```
 
+0.9 changed what the launchers contain. Until `multi-codex apply` (or any other write command) rewrites them, `list` shows `launcher stale` and `usage --live` refuses to run; the old launchers keep working.
+
 ## Exit codes
 
 | Code | Meaning |
@@ -449,7 +473,7 @@ The tool goes to `~/.local/share/multi-codex` and the `multi-codex` command to `
 curl -fsSL https://raw.githubusercontent.com/jakoes-wu/multi-codex/main/install.sh | sh -s -- --uninstall    # without a clone
 ```
 
-This removes the tool only. Your configuration, account directories and `codex-<name>` launchers stay; the launchers keep working because they do not depend on multi-codex.
+This removes the tool only. Your configuration, account directories, `codex-<name>` launchers and `codex-auto` stay; they keep working because they do not depend on multi-codex.
 
 ## Contributing
 

{multi_codex-0.8.0 → multi_codex-0.10.0}/src/multi_codex/__init__.py

@@ -1,3 +1,3 @@
 """multi-codex：管理多个 Codex CLI 账号目录、启动命令与代理设置。"""
 
-__version__ = "0.8.0"
+__version__ = "0.10.0"

{multi_codex-0.8.0 → multi_codex-0.10.0}/src/multi_codex/accounts.py

@@ -14,7 +14,7 @@
 import os
 from typing import Dict, FrozenSet, Iterable, List, Optional, Sequence, Set, Union
 
-from . import launcher, shared
+from . import launcher, router, shared
 from .actions import (CONFLICT, CREATE, DELETE, SKIP, UNCHANGED, UPDATE, Action, error,
                       has_conflict, info, print_action)
 from .config import Account, Config, config_path, dump_config, save_config
@@ -32,7 +32,27 @@ NO_ORPHANS: FrozenSet[str] = frozenset()
 
 
 def account_dir(config: Config, name: str) -> str:
-    return os.path.join(expand(config.root), name)
+    """账号目录。用账号记录的目录名（rename 后与账号名不同）；未登记的名字按名字本身拼。"""
+    account = config.find(name)
+    return os.path.join(expand(config.root), account.dir_name if account is not None else name)
+
+
+def dir_conflicts(config: Config) -> List[str]:
+    """两个账号会落到同一个目录时的说明文字（规则同 config._check_dir_names）。
+
+    parse_config 只检查读入的文件；这里检查命令算出的新配置，典型是 rename work job 之后 add work。
+    """
+    problems = []
+    for account in config.accounts.values():
+        for other in config.accounts.values():
+            if other is account:
+                continue
+            if account.dir_name.casefold() == other.dir_name.casefold() or \
+                    account.name.casefold() == other.dir_name.casefold():
+                problems.append("account {!r} would use the directory of account {!r}".format(
+                    account.name, other.name))
+                break
+    return problems
 
 
 def plan(old: Config, new: Config, *, config_exists: bool = True,
@@ -60,6 +80,9 @@ def plan(old: Config, new: Config, *, config_exists: bool = True,
                               "cannot change root from {} to {} while accounts are registered".format(
                                   old_root, new_root)))
 
+    for problem in dir_conflicts(new):
+        actions.append(Action(CONFLICT, "config", config_path(), problem))
+
     planned_deletes: Set[str] = set()
     for account in new.accounts.values():
         old_account = old.find(account.name)
@@ -70,7 +93,7 @@ def plan(old: Config, new: Config, *, config_exists: bool = True,
                                   "account {!r} is registered as {!r}; renaming is not supported".format(
                                       account.name, old_account.name)))
             continue
-        directory = os.path.join(new_root, account.name)
+        directory = os.path.join(new_root, account.dir_name)
         actions.extend(_plan_account_dir(directory, assumed))
         actions.extend(_plan_launcher(new_bin, account.name, directory, account.proxy, account.env))
         if old_account is not None and old_bin != new_bin:
@@ -79,11 +102,15 @@ def plan(old: Config, new: Config, *, config_exists: bool = True,
         actions.extend(shared.plan_shared(new, account, directory, old.shared_dir,
                                           adopt=account.name.casefold() in adopt_accounts))
 
+    new_dirs = {account.dir_name.casefold() for account in new.accounts.values()}
     for old_account in old.accounts.values():
         if new.find(old_account.name) is None:
             actions.extend(_plan_launcher_delete(old_bin, old_account.name, planned_deletes,
                                                  "account removed"))
-            actions.extend(shared.plan_remove_links(old_account, os.path.join(old_root, old_account.name),
+            # rename：旧名字从配置里消失，但目录由新名字接着用，共享链接必须留着。
+            if old_account.dir_name.casefold() in new_dirs:
+                continue
+            actions.extend(shared.plan_remove_links(old_account, os.path.join(old_root, old_account.dir_name),
                                                     old.shared_dir))
 
     if orphan_scope:
@@ -94,6 +121,8 @@ def plan(old: Config, new: Config, *, config_exists: bool = True,
                 actions.extend(_plan_launcher_delete(new_bin, name, planned_deletes,
                                                      "orphan launcher", path=path))
 
+    actions.extend(_plan_router(old_bin, new_bin, new, planned_deletes))
+
     config_changed = not config_exists or dump_config(old) != dump_config(new)
     config_action = Action(CREATE if not config_exists else (UPDATE if config_changed else UNCHANGED),
                            "config", config_path())
@@ -121,7 +150,7 @@ def plan_config_copy(config: Config, account: Account, content: str, source_name
     已有不同内容时不覆盖：那可能是用户已经改过的配置。
     """
     target = os.path.join(account_dir(config, account.name), "config.toml")
-    if account.shared and "config.toml" in config.shared_items:
+    if account.shared and "config.toml" in config.shared_items and "config.toml" not in account.shared_exclude:
         return [Action(CONFLICT, "config-file", target,
                        "config.toml is shared for this account and does not need copying")]
     kind = entry_kind(target)
@@ -164,6 +193,44 @@ def _plan_launcher(bin_dir: str, name: str, directory: str, proxy: str,
     return [Action(UPDATE, "launcher", path, run=_write_launcher(path, content, mode))]
 
 
+def _plan_router(old_bin: str, new_bin: str, new: Config, planned_deletes: Set[str]) -> List[Action]:
+    """codex-auto 入口（feature-auto-launcher §5.1.2）：有目录绑定时生成或更新，没有时删除。
+
+    必须放在账号启动命令的删除（含孤儿清理）之后计算：rename / remove / restore 名为 auto 的账号时，
+    codex-auto 原本是它的启动命令，正被删除，这里要把它当作不存在、重建成入口。
+    """
+    actions: List[Action] = []
+    path = router.router_path(new_bin)
+    if old_bin != new_bin:
+        old_path = router.router_path(old_bin)
+        if router.is_router(old_path):
+            actions.append(Action(DELETE, "launcher", old_path, "bin_dir changed", _unlink_file(old_path)))
+    if not new.bindings:
+        if router.is_router(path):
+            actions.append(Action(DELETE, "launcher", path, "no directory bindings", _unlink_file(path)))
+        return actions
+    owner = new.find(router.ROUTER_NAME)
+    if owner is not None:
+        return actions + [Action(CONFLICT, "launcher", path,
+                                 "codex-auto is generated from directory bindings; rename the account named {!r} "
+                                 "(multi-codex rename {} NEW) or remove the bindings".format(owner.name, owner.name))]
+    content = router.render(new)
+    write = _write_launcher(path, content, router.ROUTER_MODE)
+    if entry_kind(path) == KIND_MISSING or router.same_file(path, planned_deletes):
+        return actions + [Action(CREATE, "launcher", path, run=write)]
+    if not router.is_router(path):
+        return actions + [Action(CONFLICT, "launcher", path, "already exists and is not the multi-codex router")]
+    if launcher.launcher_file_ok(path, content, None):
+        return actions + [Action(UNCHANGED, "launcher", path)]
+    return actions + [Action(UPDATE, "launcher", path, run=write)]
+
+
+def _unlink_file(path: str):
+    def run() -> None:
+        os.unlink(path)
+    return run
+
+
 def _write_launcher(path: str, content: str, mode: int):
     def run() -> None:
         atomic_write(path, content, mode=mode)

{multi_codex-0.8.0 → multi_codex-0.10.0}/src/multi_codex/apps.py

@@ -33,15 +33,18 @@ def _private_dir(path: str) -> str:
     return path
 
 
-def gui_data_dir(config: Config, name: str, kind: str) -> str:
-    """返回并创建 <root>/.apps/<名>/<kind>（kind 为 vscode 或 desktop），各级目录都只允许本人访问。"""
+def gui_data_dir(config: Config, dir_name: str, kind: str) -> str:
+    """返回并创建 <root>/.apps/<账号目录名>/<kind>（kind 为 vscode 或 desktop），各级目录都只允许本人访问。
+
+    按目录名而不是账号名存放：rename 后 VS Code 与桌面端的登录状态、窗口与扩展数据都还在原处。
+    """
     apps_root = _private_dir(os.path.join(expand(config.root), ".apps"))
-    account_root = _private_dir(os.path.join(apps_root, name))
+    account_root = _private_dir(os.path.join(apps_root, dir_name))
     return _private_dir(os.path.join(account_root, kind))
 
 
-def desktop_log(config: Config, name: str) -> str:
-    path = os.path.join(expand(config.root), ".apps", name, "desktop.log")
+def desktop_log(config: Config, dir_name: str) -> str:
+    path = os.path.join(expand(config.root), ".apps", dir_name, "desktop.log")
     fd = os.open(path, os.O_CREAT | os.O_APPEND | os.O_WRONLY, 0o600)
     os.close(fd)
     os.chmod(path, 0o600)