Account identity and smoother switching

Fixed

• Claude Code and Codex identity and usage now follow the same account config folder and environment. Local identity takes precedence; a missing Codex email can use that account's usage response. External-token setups no longer borrow an unrelated login's identity.
• Refresh rereads identity and limits. Local login or config changes invalidate stale usage, and results from an account that changed during a request are discarded. Known local identity stays visible when limits are unavailable.
• With an opt-in account pool enabled, new conversations choose an account automatically. The model picker shows each harness and model once; same-harness model changes keep the current account and resumable conversation.
• Account switches appear as compact, centered Account switched notices. Expand one for the full explanation. Notices persist in saved history and keep their expanded state and keyboard focus as live output becomes saved history, including side threads.
• Account cards fit narrow windows and larger text. Status icons expose complete labels and tooltips, and saving or deleting an account returns keyboard focus to the appropriate action.

Known limitations

• In WebKit, the prompt can briefly shift during a live-response card handoff. This also occurred in the prior release.
• Browser-preview verification does not exercise native sign-in, quota reads, or session handoffs.
• Packaged native installers have not been manually exercised on real hardware for this release.

Installing

• macOS (Apple silicon): open PandaCode-macOS-arm64.dmg and drag PandaCode to Applications. This build is signed and notarized, so macOS opens it without a warning.
• macOS (Intel): the same, with PandaCode-macOS-x64.dmg.
• Windows x64: run PandaCode-Windows-x64-setup.exe. If SmartScreen warns about an unknown publisher, choose More info > Run anyway.
• Windows arm64: run PandaCode-Windows-arm64-setup.exe (same SmartScreen step).
• Linux x64: chmod +x PandaCode-Linux-x86_64.AppImage and run it.
• Linux arm64: chmod +x PandaCode-Linux-aarch64.AppImage and run it.
• Any of the above, from a terminal: npx pandacode downloads, verifies and installs the right build, and signs it locally on macOS, so no Gatekeeper warning appears.

Each file has a .sha256 checksum beside it. Installed copies update themselves from this page. Build from source: see CONTRIBUTING.md.