Skip to content

v6.21.0

Choose a tag to compare

@ndycode ndycode released this 15 Sep 17:26
· 356 commits to main since this release

https://www.npmjs.com/package/oc-codex-multi-auth/v/6.21.0

npx oc-codex-multi-auth@6.21.0 install

Added

  • The plugin now reloads live account state when another process (or window) changes the accounts file, no restart needed. (#257, thanks @WarGloom)
  • A successful codex-warm request now clears an account's stale cooldown, rate-limit, and family blocks, with quota blocks only cleared after usage confirms the quota actually recovered. (#257, thanks @WarGloom)
  • Reference docs (architecture guides, troubleshooting runbook, tool reference) now match the runtime code, backed by docs-parity tests. (#256)

Fixed

  • A lost half-open circuit-breaker probe no longer bricks the breaker permanently; a stalled probe is now abandoned after a full reset window.
  • A non-429 response mentioning rate_limit_exceeded no longer inherits an uncapped multi-year rate-limit delay, previously up to a year from a single response; reset headers are only honored on genuine 429s.
  • An SSE event split across multiple data: lines is now parsed correctly per spec instead of failing as a truncated stream.
  • The 10MB SSE cap is now counted in bytes instead of UTF-16 code units; a 12MB multibyte body now fails fast with SSE_TOO_LARGE instead of overshooting up to 4x.
  • A hostile reset-credits response (null body or non-array credits) no longer crashes the codex-reset tool.
  • A corrupt or huge persisted timestamp (like 1e308) no longer strands an account forever; stamps beyond the 30-day horizon are dropped, and a genuine block re-stamps on the next 429.
  • The V1-to-V3 migration no longer drops a legacy rate-limit stamp, which used to un-block a migrated account early.
  • A negative x-codex-active-limit header no longer shows a negative count in the quota dialog.
  • Email masking no longer breaks astral characters (like emoji) into garbled output.

Internal

  • getTopCandidates no longer proposes disabled accounts during parallel probing.
  • Added 81 invariant tests covering recovery, request-pipeline, storage, and TUI code against hostile inputs and corruption.

Thanks @WarGloom for the live account recovery work in #257.