jlcodes99/cockpit-tools v0.22.11 on GitHub

更新日志（中文）

Codex Token 管理现已以 Cockpit 账号中心作为唯一真源：受管 Codex 工作流在注入前不再自动把未受管的官方 auth.json 或 Keychain 快照读回 Cockpit，避免旧本地凭证覆盖账号中心里已刷新的 Token。
Codex 受管 CLI 执行现已更可靠地保留轮换后的 refresh token：同一账号的 Token 刷新、投影写入、官方 CLI 执行与执行后同步会串行处理，并只从 Cockpit 标记过的受管 home 回写，确保轮换后的 refresh_token 链在其他受管消费者复用旧值前写回账号中心。
Codex API Key 现已默认隐藏敏感内容：API Key 账号卡片与凭证输入框默认隐藏密钥，仅在用户显式点击时显示；切换账号或受管供应商密钥时会重置显示状态。
仪表盘当前账户卡片现已兼顾只管理账号的用户：当平台已有受管账号但未解析到当前账户时，仪表盘会展示账号数据里的第一个账号，不再让当前账户位置显示为空。

Codex token management now uses Cockpit's account store as the single authority: managed Codex workflows no longer auto-read unmanaged official auth.json or Keychain snapshots back into Cockpit before injection, preventing stale local credentials from overwriting refreshed account-center tokens.
Codex managed CLI runs now preserve rotated refresh tokens more reliably: account-scoped execution serializes token refresh, projection writes, official CLI execution, and post-run token sync from Cockpit-marked managed homes so a rotated refresh_token chain is written back before another managed consumer can reuse the old value.
Codex API Key handling now masks secrets by default: API Key account cards and credential inputs hide keys unless explicitly revealed, and reveal state resets when switching accounts or managed provider keys.
Dashboard current-account cards now stay populated for account-management-only users: when a platform has managed accounts but no resolved current account, the dashboard shows the first account from the account data instead of an empty current-account slot.

Dashboard platform cards now include a quick hide action: platform cards can be hidden directly from the dashboard while using the same dashboard visibility setting managed by Platform Layout.
Codex model preset management is easier to reach from provider configuration: the Codex model provider manager can open the preset editor directly, reducing the steps needed to maintain wake-up model presets.