chore(release): cut v2.3.2

Patch release with self-healing recovery for an orphaned runtime-proxy
app-bind (#614, #615). No runtime-rotation, storage, or auth behavior
changed.

- Bump version to 2.3.2 across package.json, package-lock.json,
  .codex-plugin/plugin.json, and AGENTS.md
- Add docs/releases/v2.3.2.md
- Promote v2.3.2 to current stable in README and docs portal; demote
  v2.3.1 to prior stable
- Add CHANGELOG entry

Full suite green (4950 passed, 3 skipped); typecheck clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: ndycode

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-multi-auth",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "Install and operate codex-multi-auth for the official @openai/codex CLI with multi-account OAuth rotation, switching, health checks, and recovery tools.",
   "interface": {
     "composerIcon": "./assets/codex-multi-auth-icon.svg"

AGENTS.md

@@ -4,7 +4,7 @@ Generated: 2026-04-25
 Commit: a87e005
 Validated: 2026-06-10 against commit 98d9819 (repo audit; claims re-checked against the tree, content not regenerated)
 Branch: main
-Package version: 2.3.1
+Package version: 2.3.2
 
 ## OVERVIEW
 

CHANGELOG.md

@@ -7,6 +7,16 @@ This repository's current stable release line is `2.x`.
 Current stable release notes live in `docs/releases/`.
 This top-level changelog preserves the foundational `0.x` milestones and points older iteration history to `docs/releases/legacy-pre-0.1-history.md`.
 
+## [2.3.2] - 2026-06-16
+
+Self-healing recovery for an orphaned runtime-proxy app-bind. No runtime-rotation, storage, or auth behavior changed.
+See [docs/releases/v2.3.2.md](docs/releases/v2.3.2.md) for full details.
+
+### Fixed
+
+- Orphaned app-bind: when `config.toml` was left bound to `codex-multi-auth-runtime-proxy` but the app-bind state/backup files were gone, `rotation status` reported "not configured" and `unbind-app` was a no-op, leaving Codex routed to a dead proxy port. `unbind-app` now self-heals (restoring the provider, falling back to `openai` with no backup), `getAppBindStatus` exposes `unmanagedBind`, and status surfaces "bound but unmanaged" (#614, #615)
+- Duplicate `model_provider` key in the no-backup recovery path for half-orphaned configs (proxy block present, top-level provider already native) — produced invalid TOML; the restore now never inserts a second top-level `model_provider` (#615)
+
 ## [2.3.1] - 2026-06-16
 
 Adds the read-only `codex-multi-auth history` command. No runtime, storage, or auth behavior changed.

README.md

@@ -383,7 +383,8 @@ codex-multi-auth doctor --json
 
 ## Release Notes
 
-- Current stable: [docs/releases/v2.3.1.md](docs/releases/v2.3.1.md) — install via `npm i -g codex-multi-auth`
+- Current stable: [docs/releases/v2.3.2.md](docs/releases/v2.3.2.md) — install via `npm i -g codex-multi-auth`
+- Previous stable: [docs/releases/v2.3.1.md](docs/releases/v2.3.1.md)
 - Previous stable: [docs/releases/v2.3.0.md](docs/releases/v2.3.0.md)
 - Previous stable: [docs/releases/v2.2.2.md](docs/releases/v2.2.2.md)
 - Previous stable: [docs/releases/v2.2.1.md](docs/releases/v2.2.1.md)

docs/README.md

@@ -32,7 +32,8 @@ Public documentation for the `codex-multi-auth` Codex CLI multi-account OAuth ma
 
 | Document | Focus |
 | --- | --- |
-| [releases/v2.3.1.md](releases/v2.3.1.md) | Current stable release notes (install via `npm i -g codex-multi-auth`) |
+| [releases/v2.3.2.md](releases/v2.3.2.md) | Current stable release notes (install via `npm i -g codex-multi-auth`) |
+| [releases/v2.3.1.md](releases/v2.3.1.md) | Prior stable release notes |
 | [releases/v2.3.0.md](releases/v2.3.0.md) | Prior stable release notes |
 | [releases/v2.3.0-beta.3.md](releases/v2.3.0-beta.3.md) | Prior prerelease notes |
 | [releases/v2.3.0-beta.2.md](releases/v2.3.0-beta.2.md) | Prior prerelease notes |

docs/releases/v2.3.2.md

@@ -0,0 +1,18 @@
+## Runtime Rotation / App Bind
+
+### Bugfixes
+
+- Fixed an orphaned app-bind state that could leave `~/.codex/config.toml` pointing at the `codex-multi-auth-runtime-proxy` provider with no way to recover via the CLI. When app-bind rewrote the config but its state/backup files were later lost (cleanup, partial unbind, a marker-less re-run of first-run setup, or a crash), the config stayed bound while `getAppBindStatus` and `rotation unbind-app` — which inferred "bound" purely from the app-bind state files — reported "not configured" and refused to act. The official Codex CLI/Desktop was then routed to a dead proxy port with no automated fix. `unbindCodexAppRuntimeRotation` now self-heals: when there is no backup and no state but `config.toml` is still bound, it strips the proxy provider block, restores the top-level `model_provider` (falling back to `openai` when no original backup exists), and reports the recovery. `getAppBindStatus` now derives `bound` from the config when no state file is present and exposes an `unmanagedBind` flag, and `rotation status` surfaces "bound but unmanaged" with the `unbind-app` remedy instead of "not configured" (#614).
+- Fixed a duplicate `model_provider` key in the no-backup recovery path. A half-orphaned config (proxy block present but the top-level `model_provider` already pointing at a real provider) would have a second `model_provider` line spliced in during restore, producing invalid TOML that Codex refuses to parse. The shared restore now only inserts the original line when no top-level `model_provider` exists; an existing line is left untouched.
+
+## Testing
+
+### Improvements
+
+- Added regression coverage for the recovery path: detection of a bound config from either the top-level provider or the proxy block (including stray-mention and empty-config cases); no-backup restore across full-orphan, half-orphan, block-only, custom-default-provider, and CRLF variants; `disable_response_storage` cleanup; `unmanagedBind` status detection; and integration-level self-heal through `unbindCodexAppRuntimeRotation` for both the full-orphan and half-orphan cases.
+
+## Notes
+
+- Patch release published under the `latest` dist-tag (`npm i -g codex-multi-auth`).
+- No runtime-rotation routing, account-selection, storage, or auth behavior changed; the normal backed-up bind/unbind path is unchanged.
+- If you previously hit the orphaned-bind state, run `codex-multi-auth rotation unbind-app` to restore your config (it now works even without a saved backup).

package-lock.json

@@ -1,6 +1,6 @@
 {
 	"name": "codex-multi-auth",
-	"version": "2.3.1",
+	"version": "2.3.2",
 	"description": "Codex CLI multi-account OAuth manager with account switching, health checks, runtime rotation, diagnostics, and recovery tools for @openai/codex",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",