- Added a local-only JSONL usage ledger, account policy metadata, routing profiles, and budget guards.
- Added model and account capability matrix views with runtime policy evaluation before account selection.
- Added an optional loopback-only bridge with
/health,/v1/models,/v1/responses, and hashed client-token storage.
- Wrapped remaining
saveAccountscall sites with retry handling. - Redacted proactive-refresh account emails through
maskEmail. - Plugin-config loading now handles non-Error throws.
- Added
rotation reset-rate-limitsto clear stale runtime pool timers.
- Added
codex auth usageandcodex auth monitorfor local usage governance.