Prepare v2.1.3 release

Author: ndycode

CHANGELOG.md

@@ -7,6 +7,29 @@ This repository's current stable release line is `2.x`.
 Current stable release notes live in `docs/releases/`.
 This top-level changelog preserves the foundational `0.x` milestones and points older iteration history to `docs/releases/legacy-pre-0.1-history.md`.
 
+## [2.1.3] - 2026-05-01
+
+Patch release for Codex Desktop app-bind history visibility and merged-main
+runtime session repair. See [docs/releases/v2.1.3.md](docs/releases/v2.1.3.md)
+for full details.
+
+### Fixed
+
+- repaired successful wrapper-launched session index writes when official Codex
+  emits rollout-store noise for missing thread entries
+- serialized concurrent local session-index repair using the existing
+  shadow-home lock and atomic index replacement
+- kept failed forwarded runs from writing synthetic session-index entries
+- resolved app-bind status paths from the active status state before printing
+  Desktop history and speed-control guidance
+
+### Documentation
+
+- documented the Codex Desktop history workaround:
+  `codex auth rotation unbind-app` or `codex auth rotation disable`
+- documented Codex-owned model speed control through
+  `model_reasoning_effort`
+
 ## [2.1.2] - 2026-04-30
 
 Patch release for conflict-free installs alongside the official Codex CLI.

README.md

@@ -359,8 +359,9 @@ codex-multi-auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v2.1.2.md](docs/releases/v2.1.2.md)
-- Previous stable: [docs/releases/v2.1.1.md](docs/releases/v2.1.1.md)
+- Current stable: [docs/releases/v2.1.3.md](docs/releases/v2.1.3.md)
+- Previous stable: [docs/releases/v2.1.2.md](docs/releases/v2.1.2.md)
+- Earlier stable: [docs/releases/v2.1.1.md](docs/releases/v2.1.1.md)
 - Earlier stable: [docs/releases/v2.1.0.md](docs/releases/v2.1.0.md)
 - Earlier stable: [docs/releases/v1.3.2.md](docs/releases/v1.3.2.md)
 - Stable archive: [docs/releases/v1.3.1.md](docs/releases/v1.3.1.md)

docs/README.md

@@ -32,8 +32,9 @@ Public documentation for `codex-multi-auth`.
 
 | Document | Focus |
 | --- | --- |
-| [releases/v2.1.2.md](releases/v2.1.2.md) | Current stable release notes |
-| [releases/v2.1.1.md](releases/v2.1.1.md) | Prior stable release notes |
+| [releases/v2.1.3.md](releases/v2.1.3.md) | Current stable release notes |
+| [releases/v2.1.2.md](releases/v2.1.2.md) | Prior stable release notes |
+| [releases/v2.1.1.md](releases/v2.1.1.md) | Earlier stable release notes |
 | [releases/v2.1.0.md](releases/v2.1.0.md) | Earlier stable release notes |
 | [releases/v2.0.2.md](releases/v2.0.2.md) | Earlier stable release notes |
 | [releases/v2.0.1.md](releases/v2.0.1.md) | Earlier stable release notes |
@@ -83,8 +84,9 @@ Public documentation for `codex-multi-auth`.
 | [reference/storage-paths.md](reference/storage-paths.md) | Canonical and compatibility storage paths |
 | [reference/public-api.md](reference/public-api.md) | Public API stability and semver contract |
 | [reference/error-contracts.md](reference/error-contracts.md) | CLI, JSON, and helper error semantics |
-| [releases/v2.1.2.md](releases/v2.1.2.md) | Current stable release notes |
-| [releases/v2.1.1.md](releases/v2.1.1.md) | Prior stable release notes |
+| [releases/v2.1.3.md](releases/v2.1.3.md) | Current stable release notes |
+| [releases/v2.1.2.md](releases/v2.1.2.md) | Prior stable release notes |
+| [releases/v2.1.1.md](releases/v2.1.1.md) | Earlier stable release notes |
 | [releases/v2.1.0.md](releases/v2.1.0.md) | Earlier stable release notes |
 | [releases/v2.0.2.md](releases/v2.0.2.md) | Earlier stable release notes |
 | [releases/v2.0.1.md](releases/v2.0.1.md) | Earlier stable release notes |

docs/releases/v2.1.3.md

@@ -0,0 +1,49 @@
+# Release v2.1.3
+
+Release line: `stable`
+
+This patch release ships the merged app-bind history repair from PR `#460` and
+documents the explicit Codex Desktop workaround when the app bind makes older
+local history appear hidden under the active provider.
+
+## Scope
+
+- Package version prepared for publish: `2.1.3`
+- Previous stable release: `v2.1.2`
+- Semver rationale: patch release for issue `#459`, covering successful
+  session-index repair, app-bind status guidance, and Desktop history
+  workaround documentation.
+
+## Fixed
+
+- Successful wrapper-launched Codex sessions now repair the local
+  `session_index.jsonl` when official Codex reports the known
+  `failed to record rollout items` thread-store noise.
+- Session-index repair requires real `session_meta` evidence and does not run
+  for failed forwarded sessions.
+- Concurrent repair attempts are serialized through the existing shadow-home
+  lock and replace the index atomically.
+- App-bind status warnings use the resolved active status path before printing
+  history visibility and model speed guidance.
+
+## Documentation
+
+- Added the explicit Desktop history workaround:
+  `codex auth rotation unbind-app` or `codex auth rotation disable`.
+- Clarified that model speed and reasoning control stay with Codex config or
+  CLI flags through `model_reasoning_effort`.
+
+## Validation
+
+- `npm run lint`
+- `npm run typecheck`
+- `npm test -- test/index-retry.test.ts`
+- `npm test -- test/codex-manager-rotation-command.test.ts test/app-bind.test.ts test/codex-bin-wrapper.test.ts`
+- full `npm test`
+- `npm run build`
+- `npm run pack:check`
+- installed-session stress smoke on merged `main`
+
+## Release Notes
+
+- Previous release notes: `docs/releases/v2.1.2.md`

package-lock.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.1.2",
+	"version": "2.1.3",
 	"description": "Multi-account OAuth manager and codex auth wrapper for the official @openai/codex CLI, with switching, health checks, and recovery tools",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",

package.json

@@ -37,9 +37,10 @@ function readPackageVersion(): string {
 let packageVersion = "";
 let currentStableReleaseDoc = "";
 // These stay manual so the docs portal keeps an intentional short stable-history window.
-const previousStableReleaseDoc = "docs/releases/v2.1.1.md";
-const earlierStableReleaseDoc = "docs/releases/v2.1.0.md";
+const previousStableReleaseDoc = "docs/releases/v2.1.2.md";
+const earlierStableReleaseDoc = "docs/releases/v2.1.1.md";
 const stableArchiveReleaseDocs = [
+	"docs/releases/v2.1.0.md",
 	"docs/releases/v2.0.2.md",
 	"docs/releases/v2.0.1.md",
 	"docs/releases/v2.0.0.md",

test/documentation.test.ts

@@ -419,6 +419,7 @@ vi.mock("../lib/auto-update-checker.js", () => ({
 
 describe("OpenAIAuthPlugin rate-limit retry", () => {
 	const envKeys = [
+		"CODEX_AUTH_FAILOVER_MODE",
 		"CODEX_AUTH_RETRY_ALL_RATE_LIMITED",
 		"CODEX_AUTH_RETRY_ALL_MAX_WAIT_MS",
 		"CODEX_AUTH_RETRY_ALL_MAX_RETRIES",
@@ -442,6 +443,7 @@ describe("OpenAIAuthPlugin rate-limit retry", () => {
 
 		for (const key of envKeys) originalEnv[key] = process.env[key];
 
+		process.env.CODEX_AUTH_FAILOVER_MODE = "balanced";
 		process.env.CODEX_AUTH_RETRY_ALL_RATE_LIMITED = "1";
 		process.env.CODEX_AUTH_RETRY_ALL_MAX_WAIT_MS = "5000";
 		process.env.CODEX_AUTH_RETRY_ALL_MAX_RETRIES = "1";