[P0] Fix switching to a usable saved ChatGPT account

[squarepots]

User impact

Public v1.0.8 on Windows still refuses a saved-account switch with Codex closed. It stops before credential replacement and says GSwitch cannot check Codex configuration, although the selected account can be used elsewhere. The current account remains unchanged. This blocks the main purpose of GSwitch.

Reproduction and evidence

1. Install public v1.0.8 and close Codex.
2. Keep a saved current account and a usable saved target account.
3. Select Switch on the target card.
4. GSwitch reports a Codex configuration-check failure before changing the current account.

The maintainer reproduced this with the public installer after PR #124. The screenshot is in the maintainer report; do not attach credentials or raw provider responses.

Current fix

PR #125 prepares v1.0.9. The official installed Codex npm package includes a native Windows executable, while the v1.0.8 App Server launch goes through Node and adds a child process. Repeated attempts left isolated Codex profile directories in GSwitch storage. The PR starts the shipped native executable and distinguishes safe startup, configuration-read, and cleanup failures.

Acceptance

• With Codex closed, the installed public Windows patch can switch to a usable saved target. GSwitch shows the new current identity only after verifying the write.
• The isolated Codex configuration check succeeds without Node in the desktop process PATH and cleans its temporary profile after App Server exit.
• Missing CLI, unreadable configuration, cleanup failure, current credential failure, and target failure have distinct safe English and Chinese messages.
• File-store policy, process checks, current-account protection, rollback, operation lock, and protected recovery remain effective.
• The maintainer verifies switching and account recovery with real accounts before this Issue closes.

Related: account workspace #120.

[squarepots]

PR #124 merged into main at a9166f4e76a2c964dce6a3dfcca2e18cab7fc741. It separates switch preflight failures, checks file-store policy in an isolated Codex profile, and keeps identity, process, rollback, and recovery guards. The PR and merged-main checks passed. This Issue remains open until the maintainer verifies real-account switching and re-sign-in with the public v1.0.8 Windows release.

[squarepots]

Public v1.0.8 is available: https://github.com/ginbing/GSwitch/releases/tag/v1.0.8 . Windows installer: https://github.com/ginbing/GSwitch/releases/download/v1.0.8/GSwitch_1.0.8_x64-setup.exe . Please verify switching with Codex closed and re-signing in to the affected saved account. This Issue remains open for real-account acceptance.

[squarepots]

Maintainer feedback from the installed public v1.0.8 Windows release: switching still stops before credential replacement with a Codex configuration-check error, although the target account is saved and the current account remains unchanged. This fails the real-account acceptance criterion. Investigation found that the packaged Windows launch path may depend on node.exe from the desktop process PATH even though the installed official Codex npm package ships a native codex.exe. Keep this Issue open until a new public build is tested with the affected accounts.

[squarepots]

PR #125 merged into main at 9841471. The Windows Codex CLI preflight now starts the installed native executable directly, and isolated configuration read and cleanup passed locally with Node absent from PATH. The merged-main CI is running. This issue remains open until a public v1.0.9 Windows install is available and the maintainer confirms a real saved-account switch and recovery.

[squarepots]

Public v1.0.9 is available for real-account verification: https://github.com/ginbing/GSwitch/releases/tag/v1.0.9 . Windows installer: https://github.com/ginbing/GSwitch/releases/download/v1.0.9/GSwitch_1.0.9_x64-setup.exe . PR #125 uses the installed native Windows Codex CLI for the pre-switch configuration check; the exact-tag release workflow passed at https://github.com/ginbing/GSwitch/actions/runs/36057637236 . Please retry switching with Codex closed and report whether the current identity changes, or the exact safe error shown. This Issue remains open until the maintainer confirms a real saved-account switch and recovery.

[squarepots]

Maintainer acceptance on the installed public v1.0.9 Windows release: saved-account switching now works. The maintainer explicitly requested closure of this switching issue. This confirms the core switching outcome; it does not claim that every account-recovery flow was exercised. Account workspace feedback remains tracked separately in #120.