chore(release): prepare v0.1.4

Bump package version to 0.1.4, add release notes, and update documentation/release link assertions.
Validated locally with lint, typecheck, build, full test suite, npm link, and live codex auth command checks.

Co-authored-by: Codex <noreply@openai.com>

Author: ndycode

README.md

@@ -265,9 +265,9 @@ codex auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v0.1.3.md](docs/releases/v0.1.3.md)
-- Previous stable: [docs/releases/v0.1.2.md](docs/releases/v0.1.2.md)
-- Earlier stable: [docs/releases/v0.1.1.md](docs/releases/v0.1.1.md)
+- Current stable: [docs/releases/v0.1.4.md](docs/releases/v0.1.4.md)
+- Previous stable: [docs/releases/v0.1.3.md](docs/releases/v0.1.3.md)
+- Earlier stable: [docs/releases/v0.1.2.md](docs/releases/v0.1.2.md)
 - Archived prerelease: [docs/releases/v0.1.0-beta.0.md](docs/releases/v0.1.0-beta.0.md)
 
 ## License

docs/README.md

@@ -24,9 +24,9 @@ Canonical documentation map for `codex-multi-auth`.
 | [troubleshooting.md](troubleshooting.md) | Deterministic recovery playbooks |
 | [privacy.md](privacy.md) | Data handling and local storage behavior |
 | [upgrade.md](upgrade.md) | Migration from legacy package/path history |
-| [releases/v0.1.3.md](releases/v0.1.3.md) | Stable release notes |
-| [releases/v0.1.2.md](releases/v0.1.2.md) | Previous stable release notes |
-| [releases/v0.1.1.md](releases/v0.1.1.md) | Earlier stable release notes |
+| [releases/v0.1.4.md](releases/v0.1.4.md) | Stable release notes |
+| [releases/v0.1.3.md](releases/v0.1.3.md) | Previous stable release notes |
+| [releases/v0.1.2.md](releases/v0.1.2.md) | Earlier stable release notes |
 | [releases/v0.1.0-beta.0.md](releases/v0.1.0-beta.0.md) | Archived prerelease notes |
 
 ---
@@ -40,7 +40,7 @@ Canonical documentation map for `codex-multi-auth`.
 | [reference/storage-paths.md](reference/storage-paths.md) | Canonical and compatibility storage paths |
 | [reference/public-api.md](reference/public-api.md) | Tiered public API stability and semver contract |
 | [reference/error-contracts.md](reference/error-contracts.md) | CLI, JSON, and helper error semantics contract |
-| [releases/v0.1.3.md](releases/v0.1.3.md) | Current stable release notes |
+| [releases/v0.1.4.md](releases/v0.1.4.md) | Current stable release notes |
 | [releases/v0.1.0-beta.0.md](releases/v0.1.0-beta.0.md) | Archived prerelease reference |
 | [User Guides release notes](#user-guides) | Stable, previous, and archived release notes |
 | [releases/legacy-pre-0.1-history.md](releases/legacy-pre-0.1-history.md) | Archived pre-0.1 changelog history |

docs/releases/v0.1.4.md

@@ -0,0 +1,62 @@
+# Release v0.1.4
+
+Release date: 2026-03-03
+Channel: `latest`
+
+## Highlights
+
+- Merged PR #27 hardening sweep into the main release line.
+- Stabilized `codex auth switch <index>` + host auth sync behavior so local account selection remains deterministic while sync failures are reported clearly.
+- Hardened refresh token normalization and refresh queue stale/timeout recovery paths to reduce stuck lanes and duplicate refresh churn.
+- Expanded deterministic regression coverage across auth, refresh queue, docs integrity, retry/backoff, and CLI routing paths.
+- Added script-level audit allowlist regression coverage for advisory-source edge cases and Windows `cmd.exe` execution path.
+
+## Install
+
+```bash
+npm i -g @openai/codex
+npm i -g codex-multi-auth
+```
+
+## Core Operations
+
+```bash
+codex auth login
+codex auth list
+codex auth switch 2
+codex auth status
+codex auth check
+codex auth forecast --live
+```
+
+## Validation Snapshot
+
+Release gate commands:
+
+- `npm run lint`
+- `npm run typecheck`
+- `npm run build`
+- `npm test`
+- `npm link`
+- `codex auth --help`
+- `codex auth features`
+
+## Merged PRs
+
+- PR #27: Unified supersede branch with final review remediations and release hardening
+
+## Commits
+
+- Included in release tag `v0.1.4`.
+
+## Notes
+
+- Local multi-auth routing remains the source of truth for account selection.
+- CLI help and release docs now point to `v0.1.4` as current stable.
+- Canonical runtime paths remain under `~/.codex/multi-auth`.
+
+## Related
+
+- [../getting-started.md](../getting-started.md)
+- [../upgrade.md](../upgrade.md)
+- [../reference/commands.md](../reference/commands.md)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "OpenAI Codex CLI multi-account OAuth manager with resilient routing and quota-aware diagnostics",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package.json

@@ -1,5 +1,3 @@
-#!/usr/bin/env node
-
 import { spawnSync } from "node:child_process";
 import { pathToFileURL } from "node:url";
 

scripts/audit-dev-allowlist.js

@@ -20,6 +20,9 @@ const userDocs = [
   'docs/reference/error-contracts.md',
   'docs/reference/settings.md',
   'docs/reference/storage-paths.md',
+  'docs/releases/v0.1.4.md',
+  'docs/releases/v0.1.3.md',
+  'docs/releases/v0.1.2.md',
   'docs/releases/v0.1.1.md',
   'docs/releases/v0.1.0.md',
   'docs/releases/v0.1.0-beta.0.md',
@@ -98,9 +101,9 @@ describe('Documentation Integrity', () => {
     const portal = read('docs/README.md');
     expect(portal).toContain('reference/public-api.md');
     expect(portal).toContain('reference/error-contracts.md');
+    expect(portal).toContain('releases/v0.1.4.md');
     expect(portal).toContain('releases/v0.1.3.md');
     expect(portal).toContain('releases/v0.1.2.md');
-    expect(portal).toContain('releases/v0.1.1.md');
     expect(portal).toContain('releases/v0.1.0-beta.0.md');
     expect(portal).toContain('releases/legacy-pre-0.1-history.md');
     expect(portal).toContain('| [User Guides release notes](#user-guides) | Stable, previous, and archived release notes |');