Repository navigation
v1.42.5 - Expiry-aware Auto Switch and bounded retries
Auto Switch now prioritizes eligible subscriptions with the nearest future Expires date, then minimum remaining quota and a stable account key. Missing/past dates follow future dates, and explicit custom priorities remain authoritative. All freshness, matching quota, headroom, restriction, cooldown and recovery guards remain.
The compact Auto Switch menu contains a persistent On/Off toggle and the next eligible account. The read-only forecast works before the current quota reaches its threshold, never reserves or starts a handoff, and retains a pending recovery target. It updates through existing UI refresh events and menu opening, without extra background polling.
Transient account-switch failures now share two persisted additional retries across backup, normal shutdown, account application, relaunch and chat resumption. Controls stay busy through retries; cancellation, identity mismatch and trust/permission refusals stop. Completed writes/chats and original Continue identities remain; ambiguous delivery is observed without resending. No new dependency, watcher or service is added.
Original native Windows before/retry/success/exhaustion and toggle/next popup frames are included with source/hash provenance.115 offline policy/account/retry contracts,12 unchanged-baseline/30 native retry/36 native menu assertions and all six protected final-head jobs pass. These fictional coordinator/progress/backend fixtures do not prove a real Switch click or authenticated account/client/Continue. Shared native window title/geometry and compilation have separate evidence.
Retry before/after windows use the framework-dependent CI test host with unchanged baseline/current source. Published-app native menu/UI and self-contained runtime packages are verified separately. Startup recovery uses the same pinned10.0.13 self-contained runtime as release packages and retains all12 native manual/timer recovery checks.
Nine native packages cover Windows x64, macOS15+ ARM64/Intel and Linux x64/ARM64 DEB/RPM/tar.gz previews. Runtime10.0.13, exact reviewed source/merged tree, CI, inventories/signatures/licensing and image hashes are in VERIFICATION.json and the verification ZIP. SHA256SUMS.txt contains release checksums. All uploaded assets and anonymous public downloaded bytes are verified before delivery is considered complete.
Windows/Linux remain unsigned. macOS uses native ad-hoc signatures without Apple notarization. Linux remains integration preview with unsupported authenticated desktop handoff. Existing releases and owner installation/accounts/live Codex sessions/input remain preserved.