0.160.1-ma.2 (multi-account fork)

Multi-account fork build. Baseline: upstream rust-v0.160.1.

Install (macOS arm64 / Linux x64):

curl -fsSL https://raw.githubusercontent.com/gps949/codex/feature/native-multi-account/install.sh | bash

Or download the asset for your platform, extract, and keep ALL extracted binaries together in one directory on your PATH (codex spawns its sibling helper binaries by path). Linux builds link against system OpenSSL 3.

0.160.1-ma.1 (multi-account fork)

Multi-account improvements

• Implemented automatic model and thinking-effort selection for new main tasks and eligible subagents. Off by default; choose Preview or Automatic, separate scopes, a 0–100 preference, exact model limits and relative roles.
• Added local rules and an independently consented Jev/Clef task classifier. One configured service is used; tool ranking can stay off. Classification sends only a bounded task description, retains manual choices, respects catalog/context/media/tier constraints, and never enables Ultra, paid inference fallback or reset-credit spending.
• Added direct browser controls, terminal manager M, codex account routing, and the native phone Model selection menu, in English and Chinese. /model auto and Use auto for this thread release a conversation's manual pin. Manual pins survive resume; retries, steering and full-history children keep their model.
• Fixed interrupted reset recovery: explicit review retains the original owner/key/credit and a backup, without claiming success. Phone, terminal and browser managers expose review. A successful quota recovery reconciles stale automatic reset history.
• Fixed browser recovery for multiple original reset operations, including changed or removed owners. Reviewed operations have an explicit browser-only clear action; no credit is spent by review/clear.
• Bound quota-refresh receipts and reset-credit counts to the exact user/workspace identity so relogin cannot display another owner's cached result.
• Preserved exact model allowlists during unrelated browser edits, added local simulation and protected unsaved policy drafts and stale confirmations.

Upstream

Includes official Codex 0.160.1: preserve Windows SYSTEMROOT, TEMP and TMP for remote stdio MCP startup with explicit remote environment variables.

使用说明

本版完整实现主任务／子代理自动选模型及思考强度，默认关闭；可以选择仅预览或自动应用，分别开关主任务与子代理，并设置 0–100 的续航／能力倾向。浏览器账号管理器、终端管理器 M 页、codex account routing 和手机 /account manage 的“模型选择”菜单均可设置，支持中英界面。

本地规则不请求外部服务。Jev 与 Clef 二选一，需要单独同意分享简短任务说明；不会自动打开付费 API、使用重置券或开启 Ultra。手动模型选择优先，/model auto 或手机“此会话恢复自动选择”可明确解除本会话固定。会话恢复、重试和任务中的补充消息保持正确选择来源。

同时修复中断兑券记录长期阻塞、多个原操作恢复、原账号移除后的复核，以及重新登录后刷新回执／券数串账号的问题。复核与清理保留未知结果及原始记录，不会兑券，也不冒充额度已恢复。

已跟进官方 0.160.1 的 Windows 远程 MCP 启动修复。

See the bilingual model-selection guide and account-manager guide. Real iOS rendering/reconnect and subscription savings have not been benchmarked; fixture and package checks do not establish a savings percentage.

0.160.0-ma.6 (multi-account fork)

English

Based on upstream Codex 0.160.0.

• All-exhausted pools can still read the last explicitly selected seat’s quota without reactivating it.
• Remote /account now opens a compact quota and switching menu. Eligible subscription accounts apply directly; automatic selection uses the configured strategy and retains quota cooldowns. /account manage keeps full management.
• Reset confirmation captures the exact account/workspace seat. Lost responses, closed dialogs and restarts recover the original credit and operation ID. Inventory outages still allow explicit recovery of that operation, with unknown counts shown honestly.
• Manual and automatic resets share protection against spending another credit while an operation remains unconfirmed. Historical receipts do not clear later quota refusals. Reviewed automatic records retain complete backups.
• Native menus refresh after sign-in completes and after successful reset retries. A later optional refresh timeout preserves an already received success receipt.
• API selection and paid fallback confirmations bind the exact provider, model and saved key. Changes during confirmation require a fresh review; subscriptions remain the default.
• Added bilingual automatic model selection design. Jev/Clef automatic model and reasoning-effort selection is not implemented in this release; no quota-saving percentage is claimed.

Account manager guide · Installation

简体中文

基于官方 Codex 0.160.0。

• 全池耗尽后仍可查询最后明确选择席位的额度，不会为查询偷偷解除冷却。
• 手机 Remote /account 改为紧凑的额度与切号菜单，可用订阅账号点选后直接生效；自动选择遵循轮换策略并保留额度冷却。完整管理在 /account manage。
• 兑券确认绑定准确账号与 Business 席位。丢回复、关闭弹窗、重启后恢复原券和原操作编号；库存接口不可用时仍可明确重试原操作，并显示数量未知。
• 自动与手动兑券共同防止未确认操作导致再花一张券；旧回执不能抹掉新的额度拒绝。已复核的自动操作归档保留完整备份。
• 手机菜单在登录完成、兑券重试成功后更新；收到成功回执后的可选查询超时不再改显示为失败。
• API 手选与付费兜底确认绑定准确提供商、模型及密钥；确认期间修改目标需重新核对。仍默认优先使用订阅。
• 新增自动选模型设计。本版尚未实现 Jev/Clef 自动选模型与思考强度，也没有声称已测得配额节省比例。

账号管理指南 · 安装说明

0.160.0-ma.5 (multi-account fork)

Based on official Codex 0.160.0.

• Configure one decision service in the account manager: WebUI Choose decision service, terminal D. Jev and Cloudflare Clef/Clef-flash use separate credentials; saved tokens never appear in configuration output or browser storage. Saving is local; connection tests send a built-in example. Disabled by default, with observation and ranking modes. Updated running hosts read settings on later advisor calls.
• Quota refresh reports which windows were actually updated and preserves each window’s real sample age. The mobile account menu shows query results, cooldown and backend reset separately; cached usage below 100% does not override a backend refusal.
• Preserve cross-process retry/probe selection and recover transient credential reload failures. Standby quota reads apply the account’s own requirements even when warmup is disabled.
• Bind manual reset retries to the original account, credit and request ID across restarts; choose the earliest-expiring eligible credit. Share the spending lock with automatic redemption and preserve later quota refusals.
• Keep automatic reset operation IDs stable through cancellation, timeouts and restarts. Confirmed recovery reconciles pending operations so the pool can redeem again in a later quota epoch.
• Show interrupted legacy reset operations with a reviewed backup/archive action in WebUI and terminal J. Owner-bound pending operations remain protected. Terminal reset choices exclude expired, redeemed and non-Codex credits.
• Improve short, bilingual error messages and keep long-form confirmation actions visible on narrow screens.

Decision services can charge separately and receive discovery text/candidate descriptions when enabled. These changes do not claim a measured speedup or quota-saving percentage. Native iOS rendering and real-account redemption have not been exercised in this release verification; validation uses mock services and browser mobile widths. The dedicated account manager provides account-bound credit confirmation; the inherited chat-TUI reset dialog still uses the execution account selected when its RPC begins.

---

基于官方 Codex 0.160.0。

• 管理界面可直接接入 Jev 或 Clef，二选一即可：网页点“选择决策服务”，终端按 D。凭据独立保存，不进入浏览器存储或配置输出。默认关闭，支持观察与实际排序；保存不联网，测试只发内置示例。新版运行中宿主会在后续辅助调用时读取设置。
• 额度刷新准确区分“完整更新 / 部分窗口未更新 / 后端拒绝 / 查询失败”，保留每个窗口真实数据年龄。手机账号菜单分别展示查询结果、本地冷却与后端重置；旧缓存显示不足 100% 不等于后端已允许使用。
• 修复跨进程同步覆盖手动重试选择、临时凭据读取失败后不再恢复的问题。关闭预热时，备用账号查询仍遵守各自的网络要求。
• 手动兑券跨重启保持原账号、原券和原操作编号；优先使用最早过期的合格券，与自动兑券共用消费锁，不清除后续的新拒绝。
• 自动兑券在取消、超时或重启后保持同一请求；独立确认额度恢复后可以结束旧的待确认操作，支持后续额度周期再次使用券。
• 网页和终端 J 提供旧版中断重置记录的复核、备份归档入口；新版绑定账号的待确认记录继续保护。终端过滤过期、已兑换或非 Codex 作用范围的券。
• 补充中英文明确错误提示，长表单与手机宽度下的确认按钮始终可见。

决策服务可能单独收费，开启后会接收搜索文本和候选说明；本版没有宣称实测提速或节省额度的比例。验证使用模拟服务与浏览器手机宽度，未兑换真实账号的券，也尚无原生 iOS 实机验收。独立管理界面的兑券确认绑定明确账号；沿用的聊天 TUI 重置弹窗仍以 RPC 开始时的执行账号为准。

Install / 安装：

curl -fsSL https://raw.githubusercontent.com/gps949/codex/feature/native-multi-account/install.sh | bash

Keep all extracted helper binaries together. / 解包后请将所有辅助程序与 codex 保持在同一目录。

0.160.0-ma.4 (multi-account fork)

Codex multi-account fork · 0.160.0-ma.4

English

• Manage subscriptions inside the official mobile Remote conversation: short headings, readable account descriptions, quota refresh, switching, enable/disable, rename, sign-in, host sign-in and explicitly confirmed reset-credit use. The host supports a nonblocking menu when the app sends /account manage through steering; the app's native toolbar and fonts remain client controlled.
• Browser account actions are easier to reach. Use reset credit preselects the earliest-expiring eligible credit and opens a confirmation naming the account, scope and expiry: normally two clicks. Unconfirmed attempts retain their original credit and retry ID. Common details and settings no longer hide behind extra menus; English and Chinese choices are remembered across restarts and ports.
• Isolate each subscription's saved OAuth credentials from host environment/temporary credentials, including independent Business seats. Saved source, runtime-observed host and Remote connection state are displayed separately.
• Explicit host sign-in changes now apply without restarting Codex and continue an already enabled Remote service. A disabled or explicitly stopped service stays disabled. A new owner may still require device pairing; old relay permissions are retired.
• Improve quota timestamp display, standby warmup evidence, disabled-account guidance, partial removal results and runtime-state cleanup. Canceling a menu or ending its attached task prevents a pending credit check from later launching consumption.
• Add optional Jev/Clef tool-search rankings and separately enabled skill suggestions. They use independent credentials, bounded requests, short deadlines and safe fallbacks; default off. Shadow mode records anonymous timing and differences. These services do not select accounts, redeem credits or grant permissions.

Baseline: official rust-v0.160.0. No real-provider speed or subscription savings percentage is claimed. Native mobile rendering, pairing and real Business quota behavior still require device/account acceptance.

After upgrading, make sure the host Codex/Remote process is running this release. Subsequent host sign-in selection changes do not require a manual restart. See account manager guide and decision service setup.

Validation: exact-source CI passed 1,826 account-pool regressions. All five platform builds and published-archive integrity checks passed; the macOS ARM64 release passed an isolated CLI/WebUI smoke check, including Stop closing its process and port.

简体中文

• 官方手机 App Remote 会话内的账号管理增加可读的短标题、账号说明及交互操作：刷新额度、切号、启停、改名、登录、主登录和明确确认后的用券。App 发送 steering 请求时，主机可打开不阻塞任务的菜单；官方 App 的工具栏入口和字体仍由客户端控制。
• 网页操作更直接。点 使用重置券 自动选择最早到期的可用券，确认页显示账号、范围和到期日，通常两次点击完成。未确认的旧操作保留原券及重试编号。常用详情、设置减少菜单层级，中英语言选择跨重启与端口变化保留。
• 各订阅档案只使用自身保存的 OAuth 凭据，避免宿主环境或临时凭据覆盖独立 Business 席位。界面区分保存的来源、运行中的主登录身份与 Remote 状态。
• 显式切换主登录无需重启 Codex；原本开启的 Remote 会自动接续，已关闭或明确停止的服务保持关闭。身份变化后可能仍需重新配对，旧中继权限不会转移。
• 优化额度时间显示、预热证据、全停用引导、删除部分成功的结果及状态文件清理。关闭菜单或附着任务结束后，等待中的券检查不会迟到启动消费。
• 接入默认关闭的 Jev/Clef 工具搜索辅助排序及独立开启的技能建议。使用独立密钥、有界请求、短超时和失败回退；观察模式记录匿名耗时与差异。不参与切号、用券或权限决定。

基于官方 rust-v0.160.0。尚无真实 Codex 提速、省订阅额度百分比的测量结果；原生手机排版、配对及真实 Business 配额行为仍需实机验收。

升级后请确保主机 Codex/Remote 进程已运行本版本；之后更换主登录来源无需手动重启。参阅中文管理指南及决策服务接入说明。

验证：对应提交 CI 的 1,826 项账号池回归通过，五平台构建与发布包完整性检查通过。macOS ARM64 发布版的隔离 CLI/WebUI 检查通过，包含 Stop 后进程退出与端口关闭。

Installation / 安装

macOS ARM64 and Linux (x64 / ARM64):

curl -fsSL https://raw.githubusercontent.com/gps949/codex/feature/native-multi-account/install.sh | bash

Windows x64 / ARM64: download the matching ZIP below and keep all extracted executables together on your PATH. Manual macOS/Linux installs also need every sibling binary from the archive; Linux requires system OpenSSL 3.

Windows 请下载对应架构 ZIP，并将全部解压程序放在同一目录后加入 PATH。手动安装 macOS/Linux 包也请保留全部配套程序；Linux 需要系统 OpenSSL 3。

0.160.0-ma.3 (multi-account fork)

中文

基于官方 Codex 0.160.0，改进多订阅账号池的恢复、身份分离与管理体验。

• 结束请求前扩大有界配额探测覆盖，避免遗漏普通批次之外已恢复的席位；早先耗尽的账号可以重新接入，重复 429 有有限重试保护。
• 未设置名称时显示完整邮箱，终端数字与 Unicode 文本按显示宽度对齐，窄屏使用清晰卡片。修改优先级不会将邮箱误存为自定义名称。
• 主登录与推理账号池分离。首次添加池账号不再自动导入 legacy-root；旧条目保留，可显式移除且保留根登录凭据。
• 新增 codex account primary status/use/root/logout，WebUI 提供主登录面板，TUI 可按 H 选择主登录。主登录账号被停用调度或额度耗尽，仍可保留登录身份；移除正在用作主登录的档案会被阻止。
• 保留官方客户端外部 token 刷新路径；切换主登录时核对用户与工作区，及时退出旧身份连接。临时主登录策略故障保留身份并关闭网络请求，允许重试；复用同一主账号的云配置服务。
• 补齐中英文说明、名称编辑与主登录确认，修复 WebUI 轮询后的键盘焦点丢失；本地 Remote 启用偏好读取不再触发多余云配置查询。
• 新增中英文 Jev/Clef 研究文档。本版没有启用这些模型，也没有增加付费调用或用 AI 决定切号/用券。

使用示例：

codex account primary use <label-or-email-or-profile-id>
codex account primary status
codex account manage --lang zh-CN

切换主登录身份后，官方手机 App 可能需要重新连接或配对。主机需要升级并重启运行中的 Codex/Remote 服务才会使用新版。验收使用隔离虚拟账号、公开 Remote 协议及浏览器模拟；官方手机 App 实机配对与真实订阅额度行为尚未实测。

English

Based on official Codex 0.160.0, this release improves subscription-pool recovery, host sign-in separation and account management.

• A bounded final quota pass reaches restored seats outside the ordinary batch. Earlier exhausted accounts can re-enter; repeated inference refusals have a retry limit.
• Unnamed accounts display their full email. Human terminal output aligns numbers and Unicode text, with readable narrow-screen cards. Priority edits preserve the raw custom-name field.
• Host sign-in is independent from pool inference. First enrollment no longer imports legacy-root; older entries are retained and can be removed explicitly while keeping root credentials.
• Added codex account primary status/use/root/logout, a WebUI host panel, and TUI H selection. Inference-disabled or exhausted profiles can still identify the host. Removing the selected host profile is blocked.
• Retained client-owned external-token refresh, user/workspace identity checks and retirement of old-owner connections. Temporary policy failures close network requests while preserving login for retries. Cloud configuration services are reused for the same host source.
• Updated English/Chinese guidance, name editing and host confirmations; fixed focus loss during dashboard polling and unnecessary cloud queries when reading local Remote preferences.
• Added bilingual Jev/Clef research. No decision model or additional billed calls are enabled in this release.

Changing the host identity may require reconnection or pairing in the official mobile App. Upgrade and restart the running host Codex/Remote service to activate the new binary. Validation uses isolated synthetic accounts, public Remote protocols and browser mocks; real mobile pairing and live subscription quotas have not been field-tested.

0.160.0-ma.2 (multi-account fork)

中文

基于官方 Codex 0.160.0。本版改进账号查看、中文界面、管理器退出，以及重置券到期提醒。

• 清晰的命令行列表：已用额度和缓存年龄分列显示；数字按终端字符宽度对齐；默认说明缩为两行。超过记录重置时间的旧额度标为 stale，各窗口的记录与重置时间见 codex account list --details。JSON/TSV 格式保持兼容。
• 中文终端管理器：codex account manage --tui --lang zh-CN，或在主菜单按 G 切换语言。WebUI 也支持 --lang zh-CN；省略时保留浏览器偏好。
• App 内原生只读菜单试用入口：在官方手机 Remote 会话输入 /account manage zh-CN。提供概览、分页、详情和语言选择，缓存年龄按窗口分别显示，可跳到后段账号。/account capabilities zh-CN 可检查此连接的界面声明和实际问答响应。菜单不调用模型、不切号、不兑换券；超时、Stop、新消息、断连及后台任务启动会清理菜单。真实 iOS/Android 界面显示与点击效果尚未实机验收，服务端公共 RPC 验证不能证明手机渲染效果。
• WebUI 退出清理：新增“停止管理面板”确认操作，停止监听、取消登录并等待已开始的修改安全收尾。最后一个页面正常关闭后留 30 秒宽限；失联页面五分钟过期后再进入宽限；从未打开的管理器十分钟退出。Ctrl+C 和 Unix SIGTERM 同样支持，其他 Codex 会话继续运行。
• 临期券被动提醒：普通用户回合采用 24/18/12/6/3/1 小时六档，每券最多六次、每回合最多一次；错过档位跳过，重启及重复席位档案不重计。元数据读取有界、共享、按实际席位绑定；券延期也保留原有提醒预算。提醒不进入模型上下文、不消耗推理额度或兑换券。主动问答式用券确认尚未开放；请在独立管理器中明确查看并兑换。

本地已执行针对性功能、原生 RPC、可读性快照和浏览器验证。正式发布由同一提交的 fork-ci 及五平台构建把关。更新请使用 安装说明。

English

Based on official Codex 0.160.0. This release improves account visibility, Chinese interfaces, manager shutdown and expiring-credit notices.

• Readable account tables separate used quota from sample age, align numeric columns and reduce default guidance. Reset-due samples show stale; --details keeps each window's observation/reset evidence. JSON/TSV output stays compatible.
• The terminal manager supports --lang zh-CN and the G language action. WebUI accepts an explicit language while retaining saved preferences when omitted.
• Experimental native read-only Remote menu: /account manage [en|zh-CN], with overview, bounded page selection, detail and language controls. /account capabilities distinguishes declarations, a received answer, timeout and method-not-found. Requests belong to their opening connection, never replay, and clean up before real turns. No inference, account switching or redemption is performed. Actual official iOS/Android rendering remains unverified.
• WebUI Stop manager closes the listener, cancels pending logins and drains started changes. Last-tab close allows a 30-second reopen grace; lost leases expire after five minutes before grace; an unopened manager exits after ten minutes. Ctrl+C and Unix SIGTERM are supported. Other Codex work continues.
• Passive credit-expiry notices use six durable thresholds, skip missed stages, share budgets across duplicate seats and preserve them across extensions. Owner-bound GETs are bounded and shared. Notices do not enter model input or redeem credits. Interactive spending confirmation is not enabled; review and redeem explicitly in the dedicated manager.

0.160.0-ma.1 (multi-account fork)

This release brings the multi-account fork to official Codex 0.160.0 and makes account administration easier to understand.

• Guided account manager: the browser explains pool status and the next useful action, supports English and Simplified Chinese, and keeps advanced settings and paid API controls in separate details. Phone layouts use readable cards. Quota bars show used allowance plus remaining cached allowance, with honest cache age and window-start status.
• Clear terminal management: numbered login tasks and reset credits, live verification codes, readable account details, explicit setting choices and configuration previews. Unconfirmed redemptions retain the same operation ID for review and retry.
• Free subscriptions first: exhausted-account discovery rotates fairly across the pool and shares recent checks. Before automatic credit use or a paid fallback, Codex checks all eligible seats within a bounded metadata pass. Incomplete checks do not authorize automatic spending.
• Safer recovery: steering and cancellation stop pending rescue work; partial output requiring reconciliation does not consume a reset credit. A restored free seat continues the turn instead of returning a stale exhaustion error.
• Consistent API execution: manual and automatic compaction use the captured API provider, exact model and credentials. Disabling or changing an unstarted fallback revokes its permission; already-started tool continuations retain their captured destination.
• Less repeated work: adaptive browser status polling, stable keyboard focus, per-account refresh deduplication, progress and partial-failure summaries.

Open the manager on the host storing your accounts:

codex account manage
# Terminal alternative
codex account manage --tui

Account manager guide · 简体中文指南

Paid fallback and automatic reset-credit use remain opt-in. Third-party endpoints must support native Responses; direct Chat Completions-only endpoints are not supported. Validation: GitHub CI passed 1486/1486 checks; local verification covered 82 focused Core/CLI/app-server checks, 88 account-related TUI checks, and 91 simulated browser checks. Real iOS/Business acceptance has not been established.

---

本版跟进官方 0.160.0，并继续改善多账号管理。

• 网页提供状态概览、下一步操作引导和中英切换；手机布局更清晰，高级设置与付费 API 操作分层展示。
• 终端通过编号选择登录任务与重置券，及时显示验证码，提供可读详情和明确的配置选项。
• 耗尽账号轮转检查、复用近期结果；自动用券和付费兜底前先检查所有符合条件的席位，优先使用已恢复的免费订阅。检查不完整时不会自动支出。
• 新输入和取消操作会停止尚未开始的恢复工作；需要核对的半截输出不会自动花券。
• API 自动压缩和手动 /compact 均保持所选提供商、模型与凭据。等待中撤销兜底会停止尚未开始的付费请求。
• 刷新展示进度和失败摘要，重复点击不重复查询同一账号；后台页面停止轮询。

启动：codex account manage，终端模式加 --tui。实际 iOS 与 Business 场景仍需要实机验收。

Download the package for your platform and keep all extracted binaries together. Verify the package against SHA256SUMS.

0.159.2-ma.7 (multi-account fork)

Subscription quota restored with a reset credit outside Codex is now discovered through fresh, seat-bound usage metadata. Exhausted turns make a bounded passive check, waiting turns keep checking, and older responses cannot override new refusals, relogins or concurrent account changes.

The new standalone manager opens with codex account manage (browser) or codex account manage --tui. It remains usable with an empty or exhausted pool and provides subscription inventory, per-window quota/cache times, refresh results, account editing, login/cancellation, selected-credit redemption, pool settings and separate API accounts. Browser layouts adapt to phones; pairing is bound to the browser origin and port. A remote browser requires an explicit HTTPS origin or a tunnel. The official mobile /status dialog remains controlled by the mobile app.

API accounts require a native Responses endpoint and exact model. Subscription accounts stay the default; paid API use requires manual selection or an explicitly enabled final fallback. Fallback runs after applicable subscription recovery, configured credit rescue and a bounded waiting budget, preserves completed tool results, and respects cancellation, managed policy and quota eligibility. Direct Chat Completions-only Gemini endpoints are not supported in this version. API keys stay in configured credential storage, can be replaced in place, and are absent from account inventory.

Other improvements include display-width aligned CLI tables, narrow terminal cards, explicit JSON/TSV output, accurate paused cooldowns, per-window scheduling freshness, model-specific limit scope, home-wide credit coordination, duplicate-seat enrollment transactions and storage-aware pending cleanup. Device-login cancellation joins started persistence and completion; late success is reported accurately.

English guide: Account manager. 中文指南：账号管理.

Validation: exact-source fork CI passed 1465 tests (one notification test passed on retry); 159 focused local Rust tests, strict scoped Clippy, repository formatting, reviewed terminal snapshots, 40 synthetic Chromium flows, and a live temporary-home management/API CRUD smoke check. Real Business subscriptions and iOS reconnect behavior remain for field validation.

---

外部兑换重置券后的额度恢复，现在通过新鲜、完整、席位匹配的后台信息确认；耗尽的新回合主动检查，正在等待的回合周期检查。新拒绝、重登录和并发修改优先于旧查询，避免旧缓存继续封锁已恢复账号。

新增独立账号管理页：codex account manage；终端入口：codex account manage --tui。账号池为空或耗尽时仍可查看、刷新、编辑、登录/取消、指定账号用券及调整策略。手机浏览器使用卡片布局。配对按浏览器来源和端口隔离，远程访问使用明确允许的 HTTPS 来源或隧道。

API 账号独立于订阅池，要求原生 Responses 接口。默认继续使用订阅；API 仅手动选择或明确开启最终兜底后使用，保留已完成工具结果，并遵守取消和管理策略。此版尚不支持仅有 Chat Completions 的 Gemini 直接兼容接口。key 可原位替换，列表不含密钥。

同时改善 CLI 对齐与窄屏显示、暂停账号的冷却状态、模型限额范围、跨进程用券、重复席位登记和取消登录清理。官方手机 /status 弹框仍由 App 控制，完整管理请使用独立界面。

Install or update (macOS Apple Silicon / Linux x64 and arm64):

curl -fsSL https://raw.githubusercontent.com/gps949/codex/feature/native-multi-account/install.sh | bash
codex --version

For Windows x64/arm64, download the matching ZIP and keep every extracted helper beside codex.exe. Linux packages use system OpenSSL 3. Expected binary version: 0.159.2+ma.7.

0.159.2-ma.6 (multi-account fork)

Multi-account fork based on upstream rust-v0.159.2.

• Recovery waiting now uses one cumulative allowance for each user turn across retries and sampling steps. Cancellation remains immediate, and completed tool actions are not replayed.
• Natural backend resets are stored separately from local retry probes, so reset credits and cooldown messages use the correct evidence, including after restart.
• Primary and weekly quota observations keep independent timestamps. Partial or delayed replies cannot make old windows look fresh or overwrite newer observations.
• CLI, TUI and mobile account details show cached quota ages and distinguish natural resets from retry times.
• Remote account and workspace reads recheck ownership after asynchronous work. Queued account, quota and pool updates are discarded after a switch; unknown quota publishes empty windows instead of stale percentages.
• Mobile pool summaries update for meaningful visible changes without repeating identical warnings. Use /account for individual accounts, pagination and details.
• Same-account token refresh during requirements loading now preserves workspace discovery caching. Ordinary login refresh starts promptly without waiting for unrelated pool initialization.
• English and Simplified Chinese fork guides explain quota freshness, retry timing and cumulative waiting.

The host process must remain running for an automatic wait to continue. The native mobile app controls the status modal layout; the fork provides a compact preview, account summaries and /account detail views.

Install on Apple Silicon macOS or Linux:

curl -fsSL https://raw.githubusercontent.com/gps949/codex/feature/native-multi-account/install.sh | bash

For Windows, download the matching ZIP. Keep all extracted helper binaries beside codex. Linux bundles require system OpenSSL 3.

Guides: English · Simplified Chinese.