Migrate legacy installs to the canonical codex-multi-auth workflow on the 0.x release line.
- Package:
codex-multi-auth - Command family:
codex auth ... - Runtime root:
~/.codex/multi-auth
- Install official Codex CLI:
npm i -g @openai/codex- Remove legacy scoped package if present:
npm uninstall -g @ndycode/codex-multi-auth- Install canonical package:
npm i -g codex-multi-auth- Verify routing and status:
codex --version
codex auth status- Rebuild account health baseline:
codex auth login
codex auth check
codex auth forecast --live --model gpt-5-codexcodex auth loginremains the default browser-first path.codex auth login --manualandcodex auth login --no-browserforce manual callback handling for browser-restricted shells.CODEX_AUTH_NO_BROWSER=1suppresses browser launch for automation/headless sessions. False-like values such as0andfalseno longer force manual mode.- In non-TTY/manual shells, provide the full redirect URL on stdin, for example:
echo "http://127.0.0.1:1455/auth/callback?code=..." | codex auth login --manual. - No new npm scripts, storage migrations, or extra upgrade steps were introduced for this auth-flow change.
For the full command/behavior reference, see reference/commands.md.
During upgrades, runtime config source precedence is:
- Unified settings
pluginConfigfromsettings.json(when valid). - Fallback file config from
CODEX_MULTI_AUTH_CONFIG_PATH(or legacy compatibility path) when unified settings are absent/invalid. - Runtime defaults.
After source selection, environment variables still override individual setting values.
For day-to-day operator use, prefer stable overrides documented in configuration.md. For maintainer/debug flows, see advanced/internal controls in development/CONFIG_FIELDS.md.
codex auth login now opens directly into the sign-in menu when the active pool is empty, instead of opening the account dashboard first.
Recover saved accountsappears only when at least one valid named backup exists.- No new CLI flags or npm scripts were added for this flow.
- The backup root remains
~/.codex/multi-auth/backupsby default, or%CODEX_MULTI_AUTH_DIR%\backupswhenCODEX_MULTI_AUTH_DIRis set.
Legacy files may still be discovered during migration-only compatibility checks. They are not canonical for new setups.
See reference/storage-paths.md.
If you used perProjectAccounts=true before worktree identity sharing was added, older worktree-keyed account files are migrated automatically on first load:
- Legacy worktree storage is merged into the canonical repo-shared project file.
- Legacy files are removed only after a successful canonical write.
- If canonical persistence fails, legacy files are retained to avoid data loss.
| Problem | Action |
|---|---|
codex auth not found |
Run where codex (Windows) or which codex (macOS/Linux) |
| Old package still active | Uninstall scoped package and reinstall unscoped package |
| Account pool appears stale | Run codex auth doctor --fix, then re-login impacted accounts |
| Mixed path confusion | Check reference/storage-paths.md |