chore: prepare v2.1.10 release

Author: ndycode

README.md

@@ -383,8 +383,9 @@ codex-multi-auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v2.1.9.md](docs/releases/v2.1.9.md)
-- Previous stable: [docs/releases/v2.1.8.md](docs/releases/v2.1.8.md)
+- Current stable: [docs/releases/v2.1.10.md](docs/releases/v2.1.10.md)
+- Previous stable: [docs/releases/v2.1.9.md](docs/releases/v2.1.9.md)
+- Earlier stable: [docs/releases/v2.1.8.md](docs/releases/v2.1.8.md)
 - Earlier stable: [docs/releases/v2.1.7.md](docs/releases/v2.1.7.md)
 - Earlier stable: [docs/releases/v2.1.6.md](docs/releases/v2.1.6.md)
 - Earlier stable: [docs/releases/v2.1.5.md](docs/releases/v2.1.5.md)

docs/README.md

@@ -32,8 +32,9 @@ Public documentation for the `codex-multi-auth` Codex CLI multi-account OAuth ma
 
 | Document | Focus |
 | --- | --- |
-| [releases/v2.1.9.md](releases/v2.1.9.md) | Current stable release notes |
-| [releases/v2.1.8.md](releases/v2.1.8.md) | Prior stable release notes |
+| [releases/v2.1.10.md](releases/v2.1.10.md) | Current stable release notes |
+| [releases/v2.1.9.md](releases/v2.1.9.md) | Prior stable release notes |
+| [releases/v2.1.8.md](releases/v2.1.8.md) | Earlier stable release notes |
 | [releases/v2.1.7.md](releases/v2.1.7.md) | Earlier stable release notes |
 | [releases/v2.1.6.md](releases/v2.1.6.md) | Earlier stable release notes |
 | [releases/v2.1.5.md](releases/v2.1.5.md) | Earlier stable release notes |

docs/releases/v2.1.10.md

@@ -0,0 +1,28 @@
+# v2.1.10
+
+Patch release for issue #479 and the post-merge release audit. Runtime rotation now recovers when disk state says accounts are ready but long-running proxy state has gone stale, and diagnostics now explain pool exhaustion without hiding the recovery path.
+
+## Runtime Rotation
+
+### Bugfixes
+
+- Runtime pool exhaustion on `no-account` now resets volatile runtime trackers, reloads accounts from disk once, and retries selection even when stale in-memory circuit breakers are open. This prevents a long-lived proxy from staying wedged after disk state has recovered.
+- Runtime proxy shutdown now flushes only the active account manager after a stale-state reload, avoiding stale-vs-fresh manager save races during close.
+- Pinned-account hard-fail behavior remains preserved: unavailable pinned accounts still return the explicit pinned-account error instead of silently rotating.
+
+## Diagnostics
+
+### Improvements
+
+- Pool-exhausted 503 responses include per-account runtime skip reasons and a targeted recovery hint.
+- `report` and `doctor` now include persisted quota-cache inputs when computing forecast readiness, so quota-exhausted cache state cannot be reported as ready by those diagnostics.
+- `doctor` keeps the `forecast-runtime-alignment` warning for disk/runtime divergence.
+- `rotation reset-runtime --json` no longer clears runtime diagnostics if the app bind restart fails, preserving evidence needed for follow-up diagnosis.
+
+## Release Hygiene
+
+### Improvements
+
+- The npm package now includes only runtime/install scripts instead of internal benchmark, audit, and maintenance scripts.
+- Production dependency patch lines were refreshed (`undici` and `zod`) while keeping the published package on the current Node 18-compatible runtime line.
+- Release index labels were corrected so older release-note rows are not shown as current stable.