v0.5.0

What's new in 0.5.0

Added

• codex-profile lease command for warm-session account rotation. lease begin|swap|end|gc reserves the best-quota profile and seeds a private throwaway CODEX_HOME for a long-lived (warm) Codex session, recording a TTL reservation so two concurrent runs never pick the same account. lease swap hot-rotates the credential to a fresh account in place when the current one hits a usage limit — without losing the warm session; lease end writes the refreshed credential back and tears the lease down (idempotent, trap-safe); lease gc reclaims expired or orphaned lease homes.
• import-auth --non-interactive and --timeout <seconds> — the headless-safe credential write-back path used by lease end.

Fixed

• Lease credential-safety under concurrency. Every read-modify-write of the shared usage cache now runs inside a cross-process lock, so a concurrent writer can no longer drop a just-committed lease. swap/end/gc preserve refreshed credentials, never strand a rotated token, and never resurrect or clobber a concurrent lease.

The notarized DMG is attached below. Homebrew users get the update automatically.