fix(auth): tighten onboarding backup refresh

Author: ndycode

lib/codex-manager.ts

@@ -4403,20 +4403,22 @@ async function runAuthLogin(): Promise<number> {
 				return 0;
 			}
 			if (signInMode === "restore-backup") {
-				namedBackups = await loadNamedBackupsForOnboarding();
 				const latestAvailableBackup = namedBackups[0] ?? null;
 				if (!latestAvailableBackup) {
+					namedBackups = await loadNamedBackupsForOnboarding();
 					continue;
 				}
 				const restoreMode = await promptBackupRestoreMode(latestAvailableBackup);
 				if (restoreMode === "back") {
+					namedBackups = await loadNamedBackupsForOnboarding();
 					continue;
 				}
 
 				const selectedBackup = restoreMode === "manual"
 					? await promptManualBackupSelection(namedBackups)
 					: latestAvailableBackup;
 				if (!selectedBackup) {
+					namedBackups = await loadNamedBackupsForOnboarding();
 					continue;
 				}
 
@@ -4427,6 +4429,7 @@ async function runAuthLogin(): Promise<number> {
 					),
 				);
 				if (!confirmed) {
+					namedBackups = await loadNamedBackupsForOnboarding();
 					continue;
 				}
 
@@ -4472,6 +4475,7 @@ async function runAuthLogin(): Promise<number> {
 					if ((storageAfterRestoreAttempt?.accounts.length ?? 0) > 0) {
 						continue loginFlow;
 					}
+					namedBackups = await loadNamedBackupsForOnboarding();
 					continue;
 				}
 				continue loginFlow;

test/codex-manager-cli.test.ts

@@ -3220,16 +3220,10 @@ describe("codex manager cli commands", () => {
 			])
 			.mockResolvedValueOnce([
 				{
-					path: "/mock/backups/latest.json",
-					fileName: "latest.json",
-					accountCount: 4,
-					mtimeMs: now,
-				},
-				{
-					path: "/mock/backups/old-manual.json",
-					fileName: "old-manual.json",
-					accountCount: 1,
-					mtimeMs: now - 60_000,
+					path: "/mock/backups/replacement.json",
+					fileName: "replacement.json",
+					accountCount: 2,
+					mtimeMs: now + 60_000,
 				},
 			])
 			.mockResolvedValueOnce([
@@ -3810,7 +3804,7 @@ describe("codex manager cli commands", () => {
 		const exitCode = await runCodexMultiAuthCli(["auth", "login"]);
 
 		expect(exitCode).toBe(0);
-		expect(getNamedBackupsMock).toHaveBeenCalledTimes(2);
+		expect(getNamedBackupsMock).toHaveBeenCalledTimes(1);
 		expect(restoreAccountsFromBackupMock).toHaveBeenCalledWith(
 			"/mock/backups/manual-choice.json",
 			{ persist: false },