feat: dashboard login gate for public deployments (#148)

feat: usage stats page with time-series token tracking (#147)

feat: account management page with batch operations (#146)

feat: detect banned accounts and show status in dashboard (#142)

fix: add missing userId field to test fixtures (#128)

fix: allow multiple team accounts sharing same chatgpt_account_id (#126) (#127)

fix: prevent quota-exhausted accounts from cycling back to active (#115)

refactor: decouple AccountPool, split codex-api and web.ts, fix CI (#113)

feat: add sticky rotation strategy (#107) (#110)

test: add plan-based model routing tests (14 cases)

feat: auto-refresh quota with tiered warnings (#92) (#93)

Revert "fix: fall back to all accounts when model plan doesn't match (#91)"

fix: fall back to all accounts when model plan doesn't match (#91)

feat: display secondary rate limit window (weekly cap) in dashboard

fix: use real reset duration from 429 response + auto-fallback to next account (#65)

fix: prevent false window rollover resets in syncRateLimitWindow

feat: add Test Connection diagnostic button (#63)

fix: strict plan filtering in model-aware account routing

feat: model-aware multi-plan account routing (#57)

fix: Electron OAuth login + i18n layout shift + update modal (#53)

fix(auth): add direct-connection fallback for OAuth behind proxy

refactor: extract startServer() + path abstraction for Electron reuse

fix: window counter review issues — opacity modifier, catch-up spam, rounding

feat: add per-window usage counters with time-driven reset

fix: stop resetting local usage counters on rate limit window rollover

feat: add per-account empty response tracking with email in logs

feat: OpenCode platform support, vitest tests, changelog & Docker hardening

refactor: remove dead code, unused config, and fix type violations

fix: proxy_api_key from config not used in frontend or auth validation

refactor: architecture audit fixes (P0-P2 stability & reliability)

refactor: fingerprint alignment, auto-maintenance, Docker deployment

refactor: extract shared proxy handler, eliminate route duplication

fix: remove all `any` types from source code

feat: desktop context injection, multi-turn sessions, TLS impersonation & auto-update

feat: anti-detection hardening — curl TLS, auto-version, jitter & Chromium headers

feat: native OAuth PKCE login with fixed localhost:1455 redirect

feat: architecture audit — disguise hardening, update automation, robustness

refactor: remove dead code, extract hardcoded values into config

Initial commit: Codex Proxy with quota API and Cloudflare bypass