jlcodes99/cockpit-tools v1.3.48

Cockpit Tools v1.3.48

on GitHub

更新日志（中文）

[1.3.48] - 2026-09-11

变更

• 完善跨平台回归验证与发布质量门禁：PR 验证现在统一运行 TypeScript、release script、Go sidecar 和核心 Rust 回归测试，并在 Windows、Ubuntu x86_64 / ARM64、macOS Intel / Apple Silicon / Universal 构建前执行对应检查。
• 改进安全报告与代码安全扫描：补充真实可执行的漏洞报告指引，明确敏感凭据脱敏要求，并将 Go sidecar 纳入 CodeQL 分析。
• 同步发布文档与实际流程：补充多平台安装包、Tauri updater signing、target manifests、legacy latest.json、SHA256SUMS.txt 和 Homebrew Cask 的当前说明。
• 优化发布状态管理：发布流程在所有平台产物和校验文件准备完成前保持 draft，避免失败时公开不完整的 latest 版本。
• 统一 Codex API 供应商配置：API Key 账号现以已保存的模型供应商为端点、密钥、模型目录、协议和 Responses WebSocket 配置的唯一来源；编辑 API Key 时会展示供应商的协议与 WebSocket 状态，供应商配置仍在模型供应商弹框中统一维护。“添加 Codex 账号”和“编辑 API Key”弹框宽度已与模型供应商弹框对齐。
• 生产环境统一使用内置 Sidecar 作为 Codex API 网关：移除已退役的进程内 legacy 网关及其生产环境中的拒绝字段重试逻辑，保留测试所需的共享传输辅助代码；API 服务请求统一使用单一的路由、账号选择、额度处理和上游错误响应链路。
• 改进 Codex API 传输与故障切换：Responses 流保留官方嵌套错误详情与序号，正确处理被拆分的 CRLF，并保留 WebSocket 预热后续请求和具名工具输出；容量不足与 model_not_found 可正确切换账号，永久拒绝的 OAuth 凭据停止重试，请求规范会话可用于填充自定义请求头，Codex 工具 Schema 会移除不支持的 Unicode 正则，并支持 gpt-image-2.5 变体。Cockpit 专属的 API Key 范围控制、实例网关、Responses Lite、Agent Identity 以及现有 gpt-5.5／gpt-image-2.5 生图默认值保持不变。
• 移除旧版 Codex 指纹与客户端策略控制：移除本地设备／会话／完整指纹改写、“仅官方客户端”限制、“允许第三方客户端”例外、对应账号设置和 Sidecar 元数据下发；历史字段仍可读取，用于备份与导入兼容。API Key 鉴权、账号范围控制、账号凭据、Agent Identity 兼容、导入导出和实例专属网关保持可用。
• 收敛 API 服务日志与超时设置：移除已经不存在的新旧网关标签和筛选项，剩余超时配置统一说明为流式超时。
• 保持启动期间的平台布局持久化非阻塞：界面偏好改为后台加载，保存请求串行执行，使用版本号防止旧窗口覆盖较新布局；读写失败会在当前布局弹框中显示并提供重试，启动迁移不再产生误导性的额外写入。

修复

• 修复 Grok CLI 账号索引恢复和列表读取导致账号消失：索引缺失、为空或损坏时可从加密账号详情恢复，不会删除账号、覆盖更新数据或静默丢弃无法读取的凭据；恢复在 UI 线程之外执行，具备单飞保护和超时限制，失败后保留原数据并允许重试。
• 修复更新后自定义平台顺序丢失：将已有布局迁入持久文件，协调较新的已保存布局并保留启动期间的新调整；偏好在后台加载，不阻塞首屏。

Changelog (English)

[1.3.48] - 2026-09-11

Changed

• Strengthen cross-platform regression checks and release gates: PR validation now runs the TypeScript, release-script, Go sidecar, and core Rust regression suites, with platform-specific checks before Windows, Ubuntu x86_64 / ARM64, and macOS Intel / Apple Silicon / Universal builds.
• Improve security reporting and code scanning: replace the placeholder vulnerability guidance with an actionable reporting policy, clarify credential redaction requirements, and include the Go sidecar in CodeQL analysis.
• Align release documentation with the actual workflow: document the current multi-platform assets, Tauri updater signing, target manifests, legacy latest.json, SHA256SUMS.txt, and Homebrew Cask process.
• Improve release state management: keep releases in draft until all platform assets and verification files are ready, preventing an incomplete latest release from being published after a failed build.
• Unify Codex API provider configuration: API Key accounts now use their saved model provider as the canonical source for endpoints, keys, model catalogs, protocol and Responses WebSocket settings. The API Key editor displays the provider's protocol and WebSocket state, while provider configuration remains managed in the model provider editor. The Add Codex Account and Edit API Key dialogs now match the model provider dialog width.
• Make the bundled sidecar the sole production Codex API gateway: remove the retired in-process legacy gateway and its rejected-field retry path from production, while keeping the shared transport helpers needed by tests. API Service requests now use one consistent routing, account selection, quota handling, and upstream error payload path.
• Improve Codex API transport and failover behavior: Responses streams preserve official nested error details and sequence numbers, handle split CRLF frames, and retain WebSocket prewarm follow-ups and named tool outputs. Capacity and model_not_found failures can rotate accounts correctly, permanently rejected OAuth credentials stop retrying, canonical request sessions can populate custom headers, unsupported Unicode regexes are removed from Codex tool schemas, and the gpt-image-2.5 variants are recognized. Cockpit-specific API-key scoping, instance gateways, Responses Lite, Agent Identity, and the existing gpt-5.5 / gpt-image-2.5 image defaults remain unchanged.
• Remove legacy Codex fingerprint and client-policy controls: remove local device/session/full fingerprint rewriting, official-client-only restrictions, third-party-client exceptions, related account settings, and sidecar metadata projection. Legacy fields remain readable for backup/import compatibility; API-key authentication, account scoping, account credentials, Agent Identity compatibility, import/export, and instance-specific gateways remain available.
• Keep API Service request logs and timeout settings focused on the single gateway: remove obsolete New/Old mode labels and filters, and describe the remaining timeout controls as stream timeouts.
• Keep startup responsive while persisting platform layouts: hydrate durable UI preferences in the background, serialize saves, protect newer revisions from stale windows, and show an in-dialog retry action when loading or saving fails. Platform-layout migrations no longer create misleading writes during startup.

Fixed

• Preserve Grok CLI accounts during index recovery and listing: recover missing, empty, or damaged indexes from encrypted account details without deleting accounts, rewriting newer data, or silently dropping unreadable credentials. Recovery runs off the UI thread with single-flight protection and bounded timeouts, and failures retain the original data for retry.
• Preserve custom platform ordering across updates: migrate existing layouts to durable storage, reconcile newer saved layouts without overwriting changes made during startup, and load preferences without blocking the first screen.