Repository navigation
Releases
Codex Switch 1.44.0 — Familiar tanks, simpler controls
Codex Switch 1.44.0
Your account tanks stay familiar. The titlebar now keeps Add account, Refresh and a single Settings gear. Models, automatic switching, Restart Codex, language and appearance live together in that menu, while each account keeps its direct Switch or Recover action.
Secondary details are quieter and missing subscription dates no longer repeat empty rows. Automatic switching remains visible when enabled. Windows users with more accounts can scroll without squeezing the tank cards.
Image-heavy chats also receive the fixes made since1.43.3: built-in image generation/edit routes use the original OpenAI sign-in, and larger concurrent requests use bounded memory with explicit overload feedback. The gateway keeps the complete conversation and image data; it does not silently remove history or replay generation requests. Provider setup and limits.
Downloads
Choose Windows x64, macOS15+ Apple Silicon/Intel, or Linux x64/ARM64 integration preview. Packages include the reviewed .NET10.0.13runtime; keep the complete extracted folder or app bundle. Codex is installed separately. Existing releases remain available.
Windows and Linux packages are unsigned. Mac bundles are ad-hoc signed, not Developer ID signed or Apple-notarized. Linux remains a preview with supportedAccountHandoff:false. The actual combined desktop model picker, individual external providers and authenticated Linux active-chat handoff retain their separate verification limits. This release does not claim to reproduce the previously reported controller exit.
SHA256SUMS.txt and VERIFICATION.json identify the exact source, native package checks and download hashes. The verification ZIP contains fictional native app evidence only. No personal chat, account or credential data is included.
한국어
잔량을 보여 주는 탱크와 계정별 전환은 그대로 유지했습니다. 타이틀바에는 계정 추가, 새로고침, 톱니 설정만 남기고 모델과 자동 전환, 재시작, 언어와 화면 설정을 한곳에 모았습니다. 카드의 보조 정보는 덜 강조하고 계정이 많을 때는 스크롤로 확인할 수 있습니다.
이미지가 많은 긴 대화의 중계와 동시 요청 처리도 개선했습니다. 기존 대화나 이미지 내용을 임의로 덜어내지 않으며, 용량과 동시 처리 한도를 넘으면 오류를 명확하게 알립니다. 제공자별 호환성과 Linux 지원 범위는 위 제한을 확인해 주세요.
Codex Switch 1.43.3 — Your models together in Codex
Your models, together in Codex
Add a Responses-compatible provider in Models and choose its models alongside your eligible OpenAI models for each chat. Provider keys are stored separately in an encrypted local vault. Connecting or restoring the gateway requires a Codex restart, and Switch must stay running while connected. Sending a conversation to a different provider shares its replayed context with that provider.
You can also restart Codex with the current account, review credit history over a custom date range, and continue past a fully confirmed recovery receipt without leaving unfinished or uncertain work unprotected. Windows now checks the shutdown target and excludes Switch from that Restart Manager session. A previously reported Switch exit has not been reproduced, so this protection is not a confirmed fix for that specific cause.
The model routing tests use the official CLI and fictional upstreams. The actual combined desktop picker and each external provider's streaming, tools and follow-up behavior still need separate compatibility confirmation. An endpoint supporting only Chat Completions is not sufficient. Provider-encrypted history may require a readable handoff to a new chat. See the provider guide before connecting.
Windows x64, macOS 15+ Apple Silicon/Intel and Linux x64/ARM64 preview packages include the runtime. Windows and Linux packages are unsigned. Mac packages are ad-hoc signed and not notarized. Linux remains an integration preview with incomplete authenticated desktop handoff acceptance. SHA256SUMS.txt and VERIFICATION.json describe download integrity and verification scope.
한국어
Models에서 Responses 호환 제공자를 추가하면 사용 가능한 OpenAI 모델과 함께 채팅별로 선택할 수 있습니다. 제공자 키는 별도의 암호화된 로컬 저장소에 보관됩니다. 연결하거나 원래 설정을 복원한 뒤에는 Codex를 재시작해야 하며, 연결된 동안 Switch가 실행 중이어야 합니다. 다른 제공자를 선택하면 대화 문맥이 해당 제공자에게 전달됩니다.
현재 계정으로 Codex를 재시작하고, 크레딧 사용 내역의 기간을 직접 선택할 수 있습니다. 확인이 끝난 복구 기록은 다음 전환을 막지 않으며, 미완료이거나 전송 결과가 불확실한 기록은 계속 보호합니다. Windows에서는 종료 대상을 확인하고 Switch 자신을 해당 종료 작업에서 제외합니다. 이전에 보고된 Switch 종료의 정확한 원인은 아직 재현되지 않았습니다.
모델 중계는 공식 CLI와 가상 제공자로 검증했습니다. 실제 Codex 모델 선택창과 각 외부 제공자의 스트리밍, 도구 사용 및 후속 대화 호환성은 별도 확인이 필요합니다. Chat Completions만 지원하는 주소는 사용할 수 없습니다. 제공자가 암호화한 대화 기록은 새 채팅에 읽을 수 있는 요약을 전달해야 할 수 있습니다. 연결하기 전에 제공자 설정과 제한을 확인해 주세요.
Windows와 Linux 패키지는 미서명이며 Mac 패키지는 임시 서명되어 Apple 공증이 없습니다. Linux는 통합 미리보기입니다. 설치 패키지의 무결성과 검증 범위는 SHA256SUMS.txt와 VERIFICATION.json에서 확인할 수 있습니다.
Codex Switch 1.43.2 — Smoother Windows sign-in cancellation
Cancel sign-in without a temporary-file cleanup error
On Windows, a temporary database file can remain busy briefly after a Codex query ends. Codex Switch now gives that file up to two seconds to release asynchronously, so a short sharing lock no longer turns a cancelled sign-in into a cleanup error.
Files that remain locked and permission failures still report an error. The fix does not force-close another process, change account data or widen permissions. Existing settings and automatic switching behavior are unchanged.
Windows x64, macOS 15+ ARM64/Intel and Linux x64/ARM64 preview downloads include the runtime. Windows/Linux packages are unsigned; Mac is ad-hoc signed and not notarized. Linux remains an integration preview with incomplete account-handoff support. See VERIFICATION.json and SHA256SUMS.txt for source, checks and download integrity.
한국어
Windows에서 로그인 조회가 끝나도 임시 데이터베이스 파일의 잠금이 잠깐 남을 수 있습니다. 이제 최대 2초 동안 비동기로 기다려, 짧은 잠금 때문에 로그인 취소가 정리 오류로 바뀌는 문제를 줄였습니다.
잠금이 계속되거나 권한에 문제가 있으면 오류를 그대로 표시합니다. 다른 프로세스를 강제로 종료하거나 계정 데이터와 권한을 바꾸지 않으며, 기존 설정과 자동 전환 동작은 그대로입니다.
Codex Switch 1.43.1 — Reliable switching at quota reset
Keep switching when a reset is still catching up
If a fresh quota check still reports 0% after the displayed reset time, Auto Switch can now move to another eligible account. The next account stays visible, and an available switch takes priority over a credit-protection pause.
The fix does not assume your quota has replenished. Destination eligibility, fresh readings, custom priorities and recovery safeguards still apply. Existing settings and credit-use defaults are unchanged.
Windows x64, macOS 15+ ARM64/Intel and Linux x64/ARM64 preview downloads include the runtime. Windows/Linux packages are unsigned; Mac is ad-hoc signed and not notarized. Linux remains an integration preview with incomplete account-handoff support. See VERIFICATION.json and SHA256SUMS.txt for source, checks and download integrity.
한국어
초기화 시각이 지났어도 최신 조회가 0%이면 다른 사용 가능한 계정으로 자동 전환할 수 있도록 수정했습니다. 다음 대상 표시가 유지되며, 전환할 계정이 있으면 크레딧 보호를 위한 중단보다 전환을 우선합니다.
한도가 충전됐다고 가정하거나 기존 설정을 바꾸지 않습니다. 대상 계정의 사용 가능 여부와 최신 조회, 사용자 지정 순위, 재개 보호 조건은 그대로 적용됩니다.
Codex Switch1.43.0 — Credit history and safe quota protection
See where your credits go
History now has a separate Credits view showing your balance and observed balance decreases. Unknown readings and top-ups stay distinct; these observations are not a billing statement.
Credit use remains allowed by default. Turn it off to try another eligible account when ordinary quota reaches0%; if switching is unavailable, Codex Switch saves chat recovery information and normally pauses local Codex. Work can resume when ordinary quota or an eligible automatic account becomes available. Other devices and cloud charges are not blocked.
Accounts that remain usable after a reported subscription date has passed retain their expiry priority. Diagnostic files now identify the actual running version.
Windows x64, macOS15+ ARM64/Intel and Linux x64/ARM64 integration-preview downloads include the runtime. Windows/Linux are unsigned; Mac is ad-hoc signed and not notarized. Linux preview does not establish complete account-handoff support. Native tests use fictional accounts and owned processes; live-account/other-device billing enforcement is separate. See VERIFICATION.json and SHA256SUMS.txt for exact source, checks and download integrity.
한국어
히스토리의 크레딧 보기에서 잔액과 관측된 잔액 감소를 별도 그래프로 확인할 수 있습니다. 충전과 미조회 구간을 구분하며 청구 내역으로 단정하지 않습니다.
크레딧 사용은 기본 허용입니다. 허용을 끄면 기본 한도 0%에서 다른 사용 가능한 계정으로 자동 전환을 시도하고, 불가하면 재개 정보를 저장한 뒤 로컬 Codex를 정상 종료합니다. 사용 가능한 과거 만료일 계정의 우선순위와 진단 버전 표기도 개선했습니다. 다른 기기나 클라우드의 과금은 차단하지 않습니다.
v1.42.7 - Linux CLI compatibility
Linux terminal account commands now work with the reviewed standalone Codex CLI0.164.0. You can import a login, choose an encrypted account and resume an explicitly selected CLI session while keeping executable integrity and credential/workspace checks.
This release also refreshes the Windows WMI package and development tools. Existing accounts, settings and recovery checkpoints keep their current format.
Download the complete package for your platform; the .NET runtime is included. Codex itself is installed separately. Linux remains an integration preview. Windows/Linux packages are unsigned; Mac bundles are ad-hoc signed without Apple notarization.
Installation · Linux terminal commands and limits · Native evidence. SHA256SUMS.txt and VERIFICATION.json accompany the downloads.
Linux 터미널 계정 명령이 검토된 Codex CLI0.164.0을 지원합니다. 실행 파일 무결성과 자격 증명 및 작업 공간 검사를 유지하면서 로그인 가져오기, 암호화된 계정 선택과 명시한 CLI 세션 재개를 사용할 수 있습니다.
Windows WMI 패키지와 개발 도구도 갱신했습니다. 기존 계정과 설정 및 복구 체크포인트 형식은 유지합니다. 전체 패키지에 .NET 런타임이 포함되어 있으며 Codex는 별도로 설치해야 합니다. Linux는 통합 프리뷰이고 Windows/Linux는 서명되지 않았으며 Mac은 ad-hoc 서명으로 Apple 공증은 없습니다.
v1.42.6 - Resilient quota selection
Auto Switch remains usable when a rate-limit response contains duplicated or blank quota bucket identifiers. Ambiguous source observations block forecasting and automatic handoff; ambiguous candidates are skipped while valid alternatives retain expiry/custom ordering. The original quota snapshot is preserved. This fixes the reproduced ArgumentException without guessing a quota or swallowing errors. No new runtime dependency, background service or polling is added.
Development-only dependency PR101/Pillow13.0.0 and PR102/official locked CI CLI0.163.0 are reviewed and integrated with their original commit ancestry preserved. Official registry metadata/integrity and Python3.12 compatibility are checked. These tools are not shipped application runtime additions; CI keeps read-only permissions, lifecycle-disabled installs and existing trust/assertion gates.
Native Windows44 assertions retain36 existing account/menu checks and add8 original EN/KO fallback/unavailable confirmations.134 offline policy/account/retry/initialization contracts and all six protected final-head jobs pass. Each Linux architecture retains15 terminal contracts plus a16th native exact0.163.0 initialization/effective-file-policy check. That exact standalone version is reviewed through upstream schemas and full native tests; unreviewed0.163.1/0.164.0 and mismatched home/platform/client headers remain refused. Installed desktop checksum pins and credential/workspace policy parsing are unchanged. The healthy1.42.5 native baseline is distinct from the malformed-input exception reproduced in policy tests. Fictional own-window/backend evidence does not establish authenticated account/client/Continue acceptance. Shared native window/geometry, provider, installed preview lifecycle and package checks have separate evidence.
Nine native packages cover Windows x64, macOS15+ ARM64/Intel and Linux x64/ARM64 DEB/RPM/tar.gz integration previews. Runtime10.0.13, source/merged tree, CI, inventories/licensing/signatures and image hashes are in VERIFICATION.json and the verification ZIP. SHA256SUMS.txt contains release checksums. Uploaded sizes/SHA and all12 anonymous public downloads are verified before delivery is complete.
Windows/Linux are unsigned. macOS uses native ad-hoc signatures without Apple notarization. Linux remains preview with unsupported authenticated desktop handoff. Previous releases and original owner local work/installation/accounts/live Codex/input remain preserved.
v1.42.5 - Expiry-aware Auto Switch and bounded retries
Auto Switch now prioritizes eligible subscriptions with the nearest future Expires date, then minimum remaining quota and a stable account key. Missing/past dates follow future dates, and explicit custom priorities remain authoritative. All freshness, matching quota, headroom, restriction, cooldown and recovery guards remain.
The compact Auto Switch menu contains a persistent On/Off toggle and the next eligible account. The read-only forecast works before the current quota reaches its threshold, never reserves or starts a handoff, and retains a pending recovery target. It updates through existing UI refresh events and menu opening, without extra background polling.
Transient account-switch failures now share two persisted additional retries across backup, normal shutdown, account application, relaunch and chat resumption. Controls stay busy through retries; cancellation, identity mismatch and trust/permission refusals stop. Completed writes/chats and original Continue identities remain; ambiguous delivery is observed without resending. No new dependency, watcher or service is added.
Original native Windows before/retry/success/exhaustion and toggle/next popup frames are included with source/hash provenance.115 offline policy/account/retry contracts,12 unchanged-baseline/30 native retry/36 native menu assertions and all six protected final-head jobs pass. These fictional coordinator/progress/backend fixtures do not prove a real Switch click or authenticated account/client/Continue. Shared native window title/geometry and compilation have separate evidence.
Retry before/after windows use the framework-dependent CI test host with unchanged baseline/current source. Published-app native menu/UI and self-contained runtime packages are verified separately. Startup recovery uses the same pinned10.0.13 self-contained runtime as release packages and retains all12 native manual/timer recovery checks.
Nine native packages cover Windows x64, macOS15+ ARM64/Intel and Linux x64/ARM64 DEB/RPM/tar.gz previews. Runtime10.0.13, exact reviewed source/merged tree, CI, inventories/signatures/licensing and image hashes are in VERIFICATION.json and the verification ZIP. SHA256SUMS.txt contains release checksums. All uploaded assets and anonymous public downloaded bytes are verified before delivery is considered complete.
Windows/Linux remain unsigned. macOS uses native ad-hoc signatures without Apple notarization. Linux remains integration preview with unsupported authenticated desktop handoff. Existing releases and owner installation/accounts/live Codex sessions/input remain preserved.
v1.42.4 - Complete compact Linux header captions
The minimum-width Linux window now shows the complete account-auto-switch feature name and state. The native titlebar allocates that action by content and uses the remaining width for session counters with smaller gaps, preserving the500×360 minimum,34px header height, four account cards and existing actions. No dependency, background task or account behavior was added or changed; Mac/Windows layout is unchanged.
Native Linux checks now require the full caption text layout inside its button, client bounds and no other action/counter overlap in English/Korean, both themes and three window sizes on x64/ARM64. Original1.42.3 before frames and new actual app/OS-frame captures retain fictional-account/source/hash provenance. These are native UI checks, not authenticated Linux handoff acceptance.
The disposable framed-capture harness also waits for its verified own Xfconf configuration writer to stop before temporary-home cleanup, preventing the observed cleanup race. PID/UID/executable/HOME checks and a pidfd prevent stopping an unrelated process. Isolated desktop child failures expose their retained fixture diagnostics and still fail; no trust checks or assertions were relaxed.
Nine native packages cover Windows x64, macOS15+ ARM64/Intel and Linux x64/ARM64 DEB/RPM/tar.gz previews. Runtime10.0.13, reviewed source/merged tree, all six protected jobs, signatures/inventory and image hashes are recorded in VERIFICATION.json and the verification ZIP. SHA256SUMS.txt supplies release checksums. All uploaded and anonymous public downloaded bytes are verified before delivery is considered complete.
Windows/Linux remain unsigned; macOS is ad-hoc signed without Apple notarization. Linux remains an integration preview with unsupported authenticated desktop handoff. Owner installed apps, active Codex sessions, accounts and previous releases remain unchanged.
v1.42.3 - Windows runtime refresh recovery
Windows usage refresh now recovers when a Codex update removes the executable discovered at Switch startup. Manual Refresh or the existing 60-second timer can use the replacement without restarting Switch. Available executable paths stay cached; rediscovery is serialized only when files disappear. An installation gap retains a visible warning and previous usage. Submitted requests are never replayed.
This maintenance release integrates community PR #107 with the current account-automation changes. It adds no dependency, background service, watcher or credential migration. macOS/Linux behavior is unchanged.
Download the complete package for your platform and keep its files together. Windows x64 and macOS15+ ARM64/Intel ZIPs include the runtime. Linux x64/ARM64 DEB/RPM/tar.gz packages remain integration previews; this release does not promote unsupported authenticated Linux desktop handoff.
Verification includes nine isolated runtime-recovery checks and actual hosted Windows same-window Refresh/timer tests against an unchanged 1.42.2 baseline, fictional accounts and offline RPC fixtures. All six protected native checks and ancestry-preserving author-reviewed merge precede publication. VERIFICATION.json, SHA256SUMS.txt and the verification ZIP bind the exact source, merged tree, runtime10.0.13, CI, package and image hashes. A live Microsoft Store update or authenticated account/chat continuation is not claimed.
Windows/Linux are unsigned. macOS bundles are native ad-hoc signed without Apple notarization. No owner installation, active Codex session or real account is changed by this public delivery. Previous releases remain available.
Known existing Linux preview UI detail: at minimum width, the English account-auto-switch caption can be clipped. The same native frame in1.42.2 reproduces it; it remains a separate follow-up, not a Windows recovery regression. Original Linux frames are retained in the verification archive.
Issue #113 / integration PR #114 / original contribution #107.