fix: Codex streams without a Content-Type, MCP schema and queue gaps, TUI settings and status gaps, thread repair on the global upstream, and a login hint

[MagicalTux]

Nine open issues from the tracker, each fixed where it was reported. Tests for every change; full suite, lint, typecheck and the strict ratchet pass (5 fewer strict diagnostics than master).

• Codex responses are buffered, not streamed, and their tokens aren't counted (backend omits Content-Type) #456 — The ChatGPT backend answers a Codex Responses stream with no Content-Type; keyed on that header alone the relay buffered the whole turn and the usage booking, which lives on the streaming branch, never ran. A headerless success to a request whose body carried stream: true is now relayed as text/event-stream (and told so). TopLevelFieldFinder learns to read a bare scalar for its field, so parseRequestStream finds the top-level stream without mistaking a nested or quoted one for it.
• Array parameters in the MCP tool schemas declare no item type #447 / set_threshold.buckets does not declare its key set, though the validator already knows it #449 — The MCP array parameters declare items: { type: 'string' }, and set_threshold.buckets publishes its key set through propertyNames, so a model learns the constraints the validator already enforces from the schema.
• The MCP write audit line is logged before the tool runs, so a refused call reads like a completed one #448 — The MCP write audit line is logged once the tool has run, as POST /teamclaude/switch does; a refused call is logged as refused.
• The MCP write queue has no depth cap #450 — The MCP write queue takes at most eight pending turns; past that a call is answered at once with a tool error.
• A settings toggle that fails to save keeps the new value in memory and on screen #443 — A settings toggle whose save fails puts the old value back in memory and on screen, and the log line names the setting it left alone. Applied to every gate read live off the shared config (event logging, session titles, sx mode, client mode, auto-redeem, switch threshold, bar percentage). The feat(codex): spend free resets when the Codex pool runs dry #436 test that pinned the opposite is flipped.
• The settings screen has no scroll, so a short terminal drops its tail and the footer with nothing said #445 — The settings body scrolls on a short terminal, following the cursor row, with ↑ N more / ↓ N more markers where it is cut; the footer stays.
• TUI status column doesn't show entitlement cooldown or maxUsage cap. A blocked account reads as active #468 — The TUI status column reads denied 4m for an account under the entitlement cooldown and capped for one over its usage (or, once feat: accounts[].maxSpend, a money cap; the TUI shows what an account has billed #466 lands, spend) cap, live and in attach mode.
• Four tests call _renderAcct on a bare Object.create(TUI.prototype), so any new field it reads breaks them #444 — The four tests that rendered rows on a bare Object.create(TUI.prototype) build a real TUI.
• message-thread repair does not cover a fleet on the global upstream #379 — refusesThreadContinue keys on the effective upstream, so a fleet sent to a third-party host through the global upstream gets the message-thread repair too. The default global upstream is Anthropic's host and stays exempt, so ordinary fleets are untouched. A top-level messageThreads: true is the fleet-wide counterpart of the per-account flag; it applies on reload, and the operator line says which flag arms it off. Docs updated with the note that this is a behaviour change for fleets on a third-party global upstream.
• Base-URL mode fails before reaching proxy when local Claude OAuth expires #395 — Claude Code checks its own login before it sends anything, in either client mode, and a lapsed one exits at once with "OAuth session expired and could not be refreshed" while the pool is fine. run prints a hint naming that login when claude dies within seconds of launch and the local credentials are missing or past their expiry; docs say the two logins are separate.

Closes #379, closes #395, closes #443, closes #444, closes #445, closes #447, closes #448, closes #449, closes #450, closes #456, closes #468.

🤖 Generated with Claude Code