v0.3.25

Agent Companion v0.3.25

修复 acomp resume 在现存 Codex / Dodex 配置下无法启动的问题：

• 停用的 MCP：显式 enabled=false 的定义不再因残留相对命令、工作目录或未使用的 OAuth 配置阻止接力。启动前仍通过原生最终配置核验其保持停用；活跃 MCP 和其他兼容性检查保留。
• 项目配置边界：按原生 Git 根规则扫描项目配置，避免把仓库上方另一账号的 .codex 误当项目设置。空 .git 目录不会遮蔽有效父仓库，worktree 文件标记继续受支持。
• 旧 Dodex 运行程序：先验证现有部署绑定，再允许借用本机官方 App 或固定 standalone 安装中的原生程序，仍严格要求 0.159.3。历史、设置及所选账号来源不变，不升级或替换现有 Codex / Dodex 入口。原生程序可能迁移历史库；临时夹具已验证 0.155.0-alpha.16.4 → 0.159.3 → 旧版 的读取、分页、继续写入和写入锁兼容性。

自动验收：核心 275、主程序 166、acomp 15 项通过，共 456 项；另有 2 项既有真实数据测试保持忽略。CLI 集成 6/6 通过；原生契约 15 项分批通过，其中 13 项使用外层沙箱，另 2 项使用测试自身沙箱以避开 macOS 嵌套沙箱限制。macOS 与 Windows GNU 相关 Clippy、格式和差异检查通过。

macOS 真实来源／账号四组合（Codex/Codex、Dodex/Dodex、Codex/Dodex、Dodex/Codex）均通过原生预检并进入 TUI 输入就绪状态，Ctrl-D 退出码均为 0。未提交新模型请求，未验证订阅计费。Windows 恢复启动仍禁用。 详见接力支持边界和验收记录。

macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

Fix acomp resume startup failures with existing Codex / Dodex configurations:

• Disabled MCP definitions. Explicit enabled=false definitions no longer block resume because of leftover relative commands, working directories or unused OAuth settings. Native effective configuration must still confirm they remain disabled before launch. Active MCP and other compatibility checks remain in place.
• Project configuration boundaries. Follow the native Git-root rules instead of adopting another account's .codex above the repository as project settings. Empty .git directories do not hide a valid parent repository, and worktree file markers remain supported.
• Older Dodex runtimes. After validating the existing deployment binding, allow borrowing a native executable from the local official App or fixed standalone installation. The strict 0.159.3 requirement remains. Original history, settings and selected-account sources stay in use; installed Codex / Dodex entries are not upgraded or replaced. The native runtime may migrate history databases. Disposable fixtures verified reading, pagination, continued writes and writer locks across 0.155.0-alpha.16.4 → 0.159.3 → the older version.

Automated validation: 275 core, 166 main-program and 15 acomp tests passed, totaling 456; 2 existing real-data tests remain ignored. CLI integration passed 6/6. All 15 native contracts passed in separate batches: 13 with an outer sandbox, and 2 using their own test sandbox to avoid macOS's nested-sandbox restriction. Relevant macOS and Windows GNU Clippy checks, formatting and diff checks passed.

All four real macOS source/account combinations (Codex/Codex, Dodex/Dodex, Codex/Dodex and Dodex/Codex) passed native preflight, reached the TUI input prompt, and exited with status 0 via Ctrl-D. No new model request was submitted, and subscription billing was not verified. Windows resume launch remains disabled. See resume support boundaries and the validation record.

The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Build verification / 构建验证

• Source: caaa19c, tag v0.3.25.
• CI and Release build.
• Downloaded both ZIPs; verified SHA-256, contents, architectures and GitHub-hosted provenance against this tag, commit and release workflow. macOS strict code-signature, minimum-OS and isolated version checks passed. Windows version checks ran in the packaging job; Windows GUI was not manually tested.

v0.3.24

Agent Companion v0.3.24

• 额度归属与刷新：额度和历史绑定实际用户、工作区、认证存储与服务来源。换号、登出或身份无法确认时清除旧读数并拒绝晚到响应；正常 token 轮换保留同账号缓存。文件和系统凭据采用非交互核验，不记录凭据或身份指纹。同一认证目录复用自建原生 worker，额度与历史独立超时、独立发布；默认五分钟及 1–60 分钟设置保持不变。
• 旧 Dodex 兼容与隔离：恢复已有隔离配置使用 SQLite/日志默认路径的兼容性，支持旧内置 CLI 的额度查询。macOS 已启用但校验失败的 Dodex 保留卡片和具体原因，停止该实例的数据读取。App、TUI、额度和更新进程统一清理继承的账号、会话及运行程序覆盖；合法提示文本和 -- 参数原样转发，冲突配置不会自动覆盖或绕过。
• App/TUI 入口和成对维护：dodex app、桌面导航和项目打开进入公共 Dodex App；dodex update 接入统一维护。分别对齐 Codex/Dodex App 与 TUI，同版本也迁移已知旧入口修订，未知修改不覆盖，较新版本不降级。更新后重新核验实际版本，保留暂存、切换与恢复记录。Windows 桌面使用精确 Store 产品 ID 的非交互 WinGet 更新及验签，TUI 独立保存完整包。macOS 启动同步或隔离校验失败时停止启动并显示原因，不再继续启动旧 App。
• acomp resume：新增用户级 CLI 安装和交互式会话选择，按当前目录搜索原会话并选择本次额度账号，保留原会话 ID 与历史来源。macOS 原生恢复目前仅开放通过配置与认证核验的 Codex CLI 0.159.3 文件登录组合；Windows 提供安装与历史发现，恢复启动仍禁用。命名 profile、项目配置覆盖、托管策略和其他未验证组合会显示原因并禁用，详见接力说明。
• 桌面与安装细节：macOS 菜单面板在切回其他应用时收起；修复 CLI 安装与接力锁释放竞态及 Windows 隔离启动参数测试。

macOS 已观察双实例额度正常读取、Dodex 手动刷新和 Dodex App/TUI 启动。自动测试包含临时目录、合成凭据、本地服务、两版原生额度协议与原生恢复契约；这些结果不代表订阅计费验收。Windows GUI、完整换号/登出矩阵、真实四组合接力及完整成对升级/恢复仍未完成实机验收。详见验收记录。

macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Account ownership and refresh. Bind quota and history to the actual user, workspace, authentication store and service. Account changes, logout or unverifiable identity clear old readings and reject late responses; ordinary token rotation preserves the same account's cache. File and system credentials are checked without interaction, and credentials or identity fingerprints are not logged. Quota and history share a Companion-owned native worker per authentication directory, with independent deadlines and publication. The five-minute default and 1–60-minute setting remain unchanged.
• Legacy Dodex compatibility and isolation. Accept verified existing profiles that rely on isolated SQLite/log defaults, and restore quota queries with older bundled CLIs. On macOS, an enabled Dodex instance that fails validation keeps its card and specific error while its readers remain disabled. App, TUI, quota and updater processes consistently remove inherited account, session and runtime overrides. Valid prompts and arguments after -- are forwarded unchanged; conflicting settings are neither overwritten nor bypassed.
• App/TUI entries and paired maintenance. Route dodex app, desktop navigation and project opening to the public Dodex App, and dodex update to unified maintenance. Align the Codex/Dodex App and TUI pairs separately, migrate known old entry revisions even at matching versions, preserve unknown modifications and avoid downgrades. Recheck installed versions after updates and retain staging, switch and recovery records. Windows desktop maintenance uses the exact Store product ID with noninteractive WinGet and signature checks; TUI retains a separate complete package. Failed macOS startup synchronization or isolation validation now stops launch with a reason instead of continuing into the old App.
• acomp resume. Add user-level CLI installation and interactive selection of original sessions in the current directory, choosing the account for this run while retaining the original session ID and history. Native resume on macOS currently permits only verified Codex CLI 0.159.3 file-login combinations. Windows supports installation and history discovery, but resume launch remains disabled. Named profiles, project configuration overrides, managed policies and other unverified combinations are disabled with a reason. See resume support boundaries.
• Desktop and installation fixes. Dismiss the macOS menu popup when returning to another app, and fix the CLI installer and resume lock-release races and Windows isolated-launch argument tests.

macOS checks observed both instances' quota, Dodex manual refresh, and Dodex App/TUI startup. Automated coverage includes disposable directories, synthetic credentials, loopback services, quota contracts with two native CLI versions and native resume contracts; it does not establish subscription billing correctness. Windows GUI, the full account-switch/logout matrix, all four real-account resume combinations, and complete paired upgrade/recovery remain unverified on real installations. See the validation record.

The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Full Changelog: v0.3.23...v0.3.24

Release verification

• Source: 75f049aa218ca1310889e08a2f6b384b02bbdec0.
• Final macOS arm64 and Windows MSVC CI: passed.
• Release build: passed.
• Both downloaded ZIPs passed SHA-256, CRC, contents, architecture and provenance verification against this tag, source commit, release workflow and GitHub-hosted runners. macOS ad-hoc signature, executable versions, macOS 14.0 minimum and packaged acomp PTY checks passed. Windows packaged executable version checks passed on the MSVC runner.

v0.3.23

Agent Companion v0.3.23

• macOS Dodex App：从本机签名有效的官方 Codex App 创建独立镜像，使用固定的公开 App 路径、自有名称、图标与本地签名。原生入口在同一进程内启动应用，让 Finder、Dock 与 Companion 跳转使用同一个 App；不修改官方 App。
• 启动同步：轻量比较官方 App 的版本与构建号，一致时直接启动，不复制或重新签名。有更新时先构建并验证副本，再原子替换；来源或更新程序不可用、同步失败时仍打开现有 App。运行中的 Dodex 不会被替换。已有镜像需手动“检查并同步”一次以启用启动检查；实际升级可能再次触发 macOS 钥匙串授权。
• 保留 TUI 与账号环境：已有 TUI 命令、运行程序及更新方式保持不变，继续使用原有第二账号目录、登录、个人配置和会话。App 同步不覆盖这些文件，Companion 接入开关只控制任务与用量监控。新环境不复制原实例账号数据，首次使用需自行登录。
• 双开设置：分别展示 Dodex App、Companion 接入和副账号与 TUI，避免把已有 TUI 当作 App 已安装。打开页面只读取安装信息与保存的路径；该页的 App 校验与同步仅由“安装 Dodex App”或“检查并同步”触发。配置与个人指令仍使用独立的手动同步操作。

本次 App 同步行为仅适用于 macOS Dodex App；Windows 运行程序保持原有行为。macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。详见 Dodex App 说明。

English

• macOS Dodex App. Create a local mirror of the validly signed official Codex App with a stable public path, its own name and icon, and a local signature. A native entry starts the application in the same process, so Finder, Dock and Companion navigation use one App. The official App is untouched.
• Startup synchronization. Compare the official App's version and build with a lightweight check. Matching builds launch without copying or signing again. Changed builds are staged and verified before atomic replacement; an unavailable source or updater, or a failed synchronization, leaves the existing App available to open. Running Dodex processes are never replaced. Existing mirrors need one manual sync to enable startup checks. Actual upgrades may prompt for macOS Keychain access again.
• Existing TUI and account environment. Preserve TUI commands, executables and update behavior, along with the existing second-account directories, login, personal settings and sessions. App synchronization does not overwrite these files, and the Companion switch controls task and usage monitoring only. Fresh environments do not copy the primary account's data and require their own login.
• Dual-instance Settings. Separate Dodex App, Companion monitoring, and the second account and TUI, so an existing TUI no longer implies that the App is installed. Opening the page reads installation metadata and saved paths. App verification and synchronization on that page start only through the install or sync button. Configuration and personal instructions retain their separate manual sync actions.

This App synchronization behavior applies only to macOS Dodex App; Windows runtimes retain their existing behavior. The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization. See the Dodex App guide.

What's Changed

• Release v0.3.23: stable macOS Dodex and manual settings checks by @WXGopher in #25

Full Changelog: v0.3.22...v0.3.23

发布验证 / Verification

• 源码 / Source: e6f8817210aa5a3c951faeefdddcb330f491b630.
• 最终 PR 的 macOS arm64、Windows MSVC 和原生菜单栏 CI 全部通过；正式构建与测试再次通过。 / Final PR CI and release builds/tests passed: CI, Release build.
• 已下载两个正式 ZIP，校验 SHA-256、文件清单、版本与架构；macOS 解压后通过严格签名校验，确认 arm64、macOS 14+ 和 v0.3.23。Windows 三个可执行文件均为 x86_64；主程序版本执行检查在 Windows CI 中通过。 / Downloaded both ZIPs and verified checksums, contents, versions and architectures. The extracted macOS bundle passed strict signature verification and reports v0.3.23, arm64 and macOS 14+. All three Windows executables are x86_64; the main executable's runtime version was checked in Windows CI.
• 两个平台的构建证明均已绑定本仓库、v0.3.23 标签、上述提交及发布工作流，并确认使用 GitHub 托管 runner。 / Both build attestations verified against this repository, tag, source commit and release workflow, requiring GitHub-hosted runners.
• 最近改动、安装包和源码 ZIP 已完成隐私检查；两张旧文档截图的设备标识元数据已移除，像素与颜色数据保持不变。 / Recent changes, release assets and the source ZIP were checked for local private data. Device-identifying metadata was removed from two documentation screenshots without changing their pixels or color data.
• macOS 手动验证已覆盖副账号、内置浏览器、Dock 图标与退出重开。同一构建重开未重复请求钥匙串授权；真实上游升级授权和 Windows 原生桌面操作尚未手动验证。 / Manual macOS checks covered the secondary account, built-in browser, Dock icon and quit/reopen, with no repeated same-build Keychain prompt. A real upstream upgrade authorization flow and native Windows desktop interaction remain manually unverified.

Agent Companion v0.3.22

Agent Companion v0.3.22

• 额度刷新：macOS 与 Windows 使用统一查询服务。启动、定时到期和主动打开面板时查询所有已启用实例，手动刷新仅查询当前实例。默认间隔为 5 分钟，可在设置中调整为 1–60 分钟整数；保存到独立的 usage.json，运行中生效并重新计时。每次刷新只进行必要握手和一次 account/rateLimits/read 业务调用，20 秒超时；不预查登录、不附带历史查询、不创建模型任务、不消耗推理 Token。这不保证 CLI 内部只有一次 HTTP 请求。历史 Token 统计在进入 Usage 或切换该页实例时独立加载，并缓存 5 分钟。
• 读数与失败提示：始终展示最后成功查询值；仅查询失败后在旧值旁加 *，再次成功后清除。无读数时显示 —。经过时间或跨过重置时间不会加星号，也不会将额度推算为 100%；悬停及 Usage 可查看最后成功时间和失败原因。本地会话日志不再更新 GUI 额度，账号查询结果不落盘。
• 呼吸状态：运行状态在亮蓝色 #32B8FF 与灰色 #92979F 之间平滑变化，保持不透明，完整周期为 2 秒；其他呼吸颜色使用相同节奏。蓝色运行、黄色等待或失败、绿色全部完成、灰色空闲或停止的含义不变。
• 设置界面：统一按钮、路径字段和字体，调整亮暗主题的中性色；macOS 设置使用苹方字体，让通用设置、CLI 状态栏和双开配置保持一致。
• 更新提示：主动打开面板时在后台查询 GitHub 正式版本，每 24 小时最多检查一次，成功和失败尝试都计入间隔，记录保存到独立的 updates.json。检查有 4 秒超时，不阻塞面板；失败时保留已有提示。只有更高的正式版本才显示更新入口，点击打开对应 Release 页面，不自动下载或安装。悬停预览不触发检查。

切页、切实例、任务活动、绘制和额度重置不会触发额度查询。相同实例的同类请求合并；成功或失败后均等待设定间隔，不额外重试。关闭面板不取消额度请求，额度刷新不刷新历史统计。

macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Quota refresh. macOS and Windows share one query service. Startup, a due timer and intentionally opening the panel query every enabled instance; manual refresh queries only the selected instance. The default interval is five minutes, configurable to an integer from 1–60 minutes. It is stored separately in usage.json; saving applies immediately and restarts the interval. Each refresh performs the required handshake and one account/rateLimits/read business call with a 20-second timeout. It does not precheck login, bundle history, create a model task or consume inference tokens; this does not guarantee a single HTTP request inside the CLI. Token history loads independently when entering Usage or switching its instance and is cached for five minutes.
• Readings and failures. Keep the last successful reading. A failed query adds * to the retained value until the next success; unavailable readings show —. Elapsed time and quota resets neither add a star nor imply 100% remaining. Hover text and Usage show the last success time and failure reason. Local session logs no longer update GUI quota, and account query results are not saved to disk.
• Breathing status. Running indicators smoothly alternate between bright blue #32B8FF and gray #92979F, remaining opaque through a complete two-second cycle. Other breathing colors use the same timing. Blue still means running, yellow waiting or failure, green all tasks completed, and gray idle or stopped.
• Settings. Align buttons, path fields and typography, with neutral colors for light and dark themes and PingFang on macOS. General settings, the CLI status bar editor and dual-instance configuration share the same presentation.
• Update hints. Intentionally opening the panel checks GitHub for a stable release in the background, at most once every 24 hours. Successful and failed attempts both count toward the interval, persisted separately in updates.json. A four-second timeout keeps failures bounded without delaying the panel; failures retain any known update. Only a newer stable version shows an update button, which opens that version's Release page without downloading or installing it. Hover previews do not check for updates.

Page and instance switches, task activity, rendering and quota resets do not trigger quota queries. Overlapping requests of the same type and instance merge. Success and failure both restart the configured interval without extra retries. Closing the panel does not cancel quota requests, and quota refresh does not reload token history.

The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Build verification

• Source: e5470d66d10d3fad6af7c51f0960f43f77e757b9
• Final PR checks: macOS arm64, Windows MSVC and native menu bar CI
• Release build: signed provenance and platform packages
• Downloaded archives verified against SHA-256 checksums and GitHub build attestations for this tag and source revision. macOS bundle integrity, arm64 architecture, version and minimum OS verified; Windows x86_64 archive contents verified, with executable version checked by the Windows release runner.
• Windows automated tests passed; manual Windows desktop verification was not performed for this release.

Agent Companion v0.3.21

Agent Companion v0.3.21

• 长 TUI 会话状态：大日志首次扫描在 4 MiB 总预算内扣除 metadata 实际读取量，再将余额用于尾部事件，避免较大的工具输出遮住最近的状态事件。已从事件确认的运行／等待任务独立检查 writer lock，不再依赖兼容数据库才能保持十五分钟以上的活动状态。已释放的锁仍表示断开；锁本身不会创建任务或复活已完成任务。
• 临时读取失败：数据库缓存无法重新确认 writer lock 时，撤销存活证明并继续按事件时间判断；不再把“无法判断”直接标为断开并覆盖较新的日志状态。
• 状态顺序与锁协调：在当前进程内保留已确认的停止证据，重获锁或重放旧回合不会把任务重新标为运行；新回合仍可正常开始。日志与数据库按回合和时间精度合并，同一回合的明确完成状态优先。查询分页或暂时读取失败不会丢弃停止证据；锁探针遵循写入协调顺序，避免干扰 TUI 启动。
• macOS 主应用发现：兼容系统或用户“应用程序”目录下的 Codex.app 和 ChatGPT.app。仅接受 Codex 应用身份与预期执行文件，拒绝重定向到其他运行包的路径；保留 Codex 路径优先级。打开应用、桌面任务跳转、额度运行程序发现及首次双开部署使用一致的候选规则，部署继续验证官方签名。

状态颜色含义不变：运行蓝色、等待或失败黄色、全部完成绿色、空闲或停止等状态灰色。圆点表示任务状态，百分比表示每周剩余额度。

读取保持有界：如果最新状态事件在首次读取预算之外，且没有兼容数据库，状态仍可能暂时不可用；新的有效事件到来后可恢复。缺少兼容写入锁时，继续使用十五分钟事件超时策略。不会仅凭进程存在推测任务正在运行。

回归使用合成日志、锁、数据库和应用目录；真实账号、凭据、配置、会话及本机构建产物不纳入发布。发布附件由 GitHub Actions 构建，经过校验和、归档内容、隐私、架构、macOS 完整性签名和构建来源检查后公开。macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Long-running TUI state. Initial scans of large logs use the remaining 4 MiB allowance after metadata reads, so a larger tool result is less likely to hide the latest lifecycle event. Known running or waiting tasks check writer locks independently of compatible history databases and remain visible during long periods without output. Released locks still indicate disconnection; locks alone never create tasks or revive completed work.
• Temporary read failures. Cached database state drops its liveness proof when writer-lock status is unknown and falls back to event age. It no longer interprets an unavailable lock check as a disconnection that overrides newer rollout state.
• Event ordering and lock coordination. Retain confirmed stop evidence within the current process so reacquiring a lock or replaying an old turn cannot restart a finished task. Genuine new turns still start normally. Merge history and rollouts using turn identity and timestamp precision, prioritizing explicit completion of the same turn. Query pagination and temporary read failures preserve stop evidence, and lock probes follow writer coordination to avoid interfering with TUI startup.
• Primary macOS application discovery. Recognize Codex.app and ChatGPT.app in the system or user Applications directory only when they carry the Codex bundle identity and expected executables. Reject redirected paths and preserve Codex path priority. Application opening, desktop navigation, quota executable discovery and fresh second-instance deployment share the candidate rules; deployment still verifies the official signature.

Status colors retain their meanings: blue for running, yellow for waiting or failure, green when all tasks completed, and gray for idle or stopped states. Dots show task activity; percentages show weekly quota remaining.

Reads remain bounded. If the latest lifecycle event is outside the initial read allowance and no compatible database exists, state can remain unavailable until a new valid event arrives. Clients without compatible writer locks retain the fifteen-minute event-age policy. Process presence alone is never treated as a running task.

Regression fixtures use synthetic logs, locks, databases and application directories. Real accounts, credentials, configuration, sessions and locally compiled binaries are excluded from releases. GitHub Actions builds release assets, which are published after checksum, archive-content, privacy, architecture, macOS integrity-signature and provenance checks. The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Build verification

Source: a89322e022f185751ab93456233dc659106540eb.

Build: GitHub Actions release run 36288342239.

The macOS arm64 and Windows x86_64 archives are verified against their SHA-256 checksums and GitHub build provenance. The macOS bundle passes integrity-signature verification. Automated checks passed on both platforms; this does not claim a manual Windows desktop test.

v0.3.20

Agent Companion v0.3.20

• 更清楚的 macOS 菜单栏状态圆点：双行圆点从 5 pt 增至 7 pt，单行从 6 pt 增至 8 pt。蓝、绿、黄使用更鲜明的填色，灰色提亮，深浅双层描边帮助区分壁纸背景。
• 呼吸时保持可见：运行状态延续两秒呼吸周期，不透明度从原来的 45%–100% 调整为 80%–100%。继续遵守“减少动态效果”，隐藏或停止运行时停止动画。
• 保持状态含义与交互：任务优先级、百分比文字、悬停说明、VoiceOver 标签、点击和 Command 拖动继续使用现有行为。弹窗与 Windows 配色未变，账号、配置、额度刷新及双开启动逻辑未改动。

验证：菜单栏专项回归通过，使用合成任务和额度检查浅色、深色、蓝色背景，以及呼吸暗相位；本机 App 签名与启动检查通过。未将完整实机弹窗或 Windows 人工桌面回归标为完成。两平台发布流程继续执行构建、Clippy 与自动测试。

公开预览使用合成数据，PNG 已移除 EXIF 与文本元数据。发布附件由 GitHub Actions 构建，下载后验证校验和、架构、macOS 签名及构建来源再公开；本机配置、凭据、日志、备份和本机构建产物不纳入发布。macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Clearer macOS menu-bar status dots. Increase two-row dots from 5 pt to 7 pt and single-row dots from 6 pt to 8 pt. Use stronger blue, green and yellow fills, brighter gray, and clearer dark/light outlines against wallpaper.
• Stay visible while breathing. Keep the two-second running animation, raising its opacity range from 45%–100% to 80%–100%. Continue respecting Reduce Motion and stopping animation when hidden or no longer running.
• Preserve status meanings and interactions. Task priority, percentage text, tooltips, VoiceOver labels, clicks and Command-drag placement retain their behavior. Popup and Windows palettes, account data, configuration, quota refresh and dual-instance launch logic are unchanged.

Validation: targeted native menu-bar checks passed, using synthetic tasks and quota values on light, dark and blue backgrounds, including the dim animation phase. The local App passed signature and launch checks. Full installed-popup interaction and manual Windows desktop regression are not claimed as completed. Release builds continue to run compilation, Clippy and automated tests on both platforms.

The public preview uses synthetic data and excludes EXIF and text metadata. GitHub Actions builds release assets; downloaded checksums, architectures, macOS signatures and provenance are verified before publication. Local configuration, credentials, logs, backups and locally compiled binaries are excluded. The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Release verification / 发布核验

• Source revision: 184981e18a6e178fe8c56294b0f10c5c42f42d52, tag v0.3.20.
• Successful release build: GitHub Actions run 36259154068. Final PR CI and main CI also passed on macOS and Windows.
• Downloaded both draft packages and verified SHA-256, ZIP integrity, the file allowlist, architectures and build provenance against this repository, tag, commit and release workflow on GitHub-hosted runners.
• macOS: strict ad-hoc signature verification passed; arm64 and 0.3.20 confirmed; Info.plist and Mach-O both require macOS 14.0. The version smoke test used an isolated home/profile. Windows package version was checked on the Windows release runner.
• Independent source and package privacy reviews found no personal identifiers or credentials. The public screenshot uses synthetic data without EXIF/text metadata. Local configuration, logs, backups and locally compiled binaries are excluded; new commits and the annotated tag use a generic project identity.

SHA-256

049876bd2e291a76e11a66ad37ba37a63234c8d921653a9d062dbc8327198909  agent-companion-v0.3.20-macos-arm64.zip
5fe28717a1d918b213d102d6c97c942d5ff0765ee0c964e8461f204ac6d2e271  agent-companion-v0.3.20-windows-x86_64.zip

v0.3.19

Agent Companion v0.3.19

• 修复旧版 Dodex 桌面启动：新增 agent-companion dodex-app 校验和 --repair 显式修复。已审计旧启动器绑定独立配置与桌面目录，TUI 不再被误判为已运行的桌面 App。Companion 创建的环境也支持校验，无需旧版修复。
• 恢复中断的启动器发布：校验迁移清单、目标与备份后继续发布或清理完成标记；冲突文件保留。修复不迁移账号、配置或会话，也不终止运行中的 TUI。
• 兼容 Finder 自定义图标：保留官方身份与资源完整性验证；仅在私有文件系统克隆中去掉已识别的图标元数据，再进行严格签名校验，已安装程序不被改写。
• 可选的旧环境整理工具：源码仓库提供入口合并、主／副 CLI 环境隔离、延后归档旧运行包和 Dock 固定／最近项目清理。保留工作目录、参数、代理和沙箱上下文。新快照与旧布局区分，避免回滚恢复过时路径。

修复与整理仅支持已审计的旧环境；未知版本保留并拒绝覆盖。整理脚本需要源码 checkout，不随 App 安装，也不会在升级时自动执行。写入发布日志前强制终止可能需要人工检查残留目录；自定义图标校验需要支持 macOS 克隆的文件系统。Dock 最近项目仍可能由系统再次加入。

本版没有 Windows 功能改动；两平台仍执行构建、Clippy 和自动测试。回归测试使用合成配置和临时目录，覆盖隔离、签名、进程区分、并发冲突与中断恢复。未将人工 Windows 桌面检查、完整交互式 TUI 回归或无法自动化的 macOS App 界面检查标为完成。

公开源码与安装包不包含个人图标草稿、生成图像元数据、本机记录、配置、凭据或备份。安装包由 GitHub Actions 构建，下载验证校验和、架构、签名与来源证明后公开。macOS 需要 macOS 14+ 和 Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Repair legacy Dodex desktop startup. Add agent-companion dodex-app validation and explicit --repair. Audited legacy launchers bind independent profile and desktop directories without treating a running TUI as a desktop App. Companion-managed environments also validate and need no legacy repair.
• Recover interrupted launcher publication. Validate manifests, destinations and backups before continuing or clearing completion records. Preserve conflicting files. Repair does not migrate accounts, configuration or sessions, or terminate running TUIs.
• Support Finder custom icons. Retain official identity and sealed-resource verification. Remove only recognized icon metadata from a private filesystem clone before strict signature verification; leave the installed program unchanged.
• Optional legacy cleanup tools. The source checkout includes entry consolidation, primary / secondary CLI environment isolation, deferred old-runtime archival and cleanup of known pinned / recent Dock items. Preserve cwd, arguments, proxies and containment context. Separate new snapshots from obsolete layouts to prevent restoring outdated paths.

Repair and consolidation accept only audited legacy versions; unknown files remain untouched. Maintenance scripts require a source checkout and are not installed or automatically executed with the App. A forced exit before the publication journal exists may require inspecting the incomplete directory. Custom-icon validation requires macOS filesystem cloning. macOS may add recent Dock entries again later.

There are no Windows feature changes; builds, Clippy and automated tests still cover both platforms. Regression tests use synthetic configuration and temporary directories for isolation, signatures, process detection, conflicts and interruption recovery. Manual Windows desktop checks, full interactive TUI regression and unavailable macOS App UI automation are not claimed as completed.

Public source and packages exclude personal icon experiments, image-generation metadata, machine records, configuration, credentials and backups. GitHub Actions builds the packages; checksums, architecture, signatures and provenance are verified after download and before publication. macOS requires macOS 14+ and Apple Silicon; its bundle has an ad-hoc integrity signature without Apple notarization.

Release verification / 发布核验

• Source revision: 5e5937ffaaea3162ee7cd9beff4e9058bff18364, tag v0.3.19.
• Successful release build: GitHub Actions run 36256079055. Final PR CI and main CI also passed on macOS and Windows.
• Downloaded both draft ZIPs and verified SHA-256, ZIP integrity, the packaged-file allowlist, architectures and build provenance. Attestations matched this repository, tag, source revision and release workflow on GitHub-hosted runners.
• macOS package: strict ad-hoc signature verification passed; arm64 and version 0.3.19 confirmed; both the Mach-O and Info.plist require macOS 14.0. Version smoke test used an isolated home and profile. Windows packaged executable version was checked on the Windows release runner.
• Independent source and package privacy reviews found no personal identifiers or credentials. Local configuration, logs, backups, icon experiments and locally compiled binaries are excluded. New commit and tag metadata use a generic project identity.

SHA-256

0c7bee0508defb02822f7b1a7736c944449e703e4f1bd6553d93e442588aea47  agent-companion-v0.3.19-macos-arm64.zip
475b5edd85005ee8663d51b169309727dc21d92df376531562799fd172a57fd9  agent-companion-v0.3.19-windows-x86_64.zip

v0.3.18

Agent Companion v0.3.18

• macOS 仅保留菜单栏入口：移除刘海、悬停展开、显示器选择与独立 Dock 入口。旧版隐藏入口偏好不会隐藏菜单栏，原有菜单栏位置继续保留；重新打开应用显示 Tasks 弹窗。
• 完整弹窗与亮暗主题：顶部显示 Agent Companion、构建版本和实际运行数，等待输入另有提示。底部太阳／月亮按钮保存主题选择；切换主题或 Tasks / Usage 保留窗口尺寸、实例选择和滚动状态。
• 两平台统一任务状态颜色：运行蓝色、等待／失败黄色、全部完成绿色、无任务或停止／暂停／未知灰色。混合任务先显示等待，再显示运行；失败不会计为成功完成。Codex／Dodex 独立显示状态，macOS 运行圆点呼吸动画遵守“减少动态效果”。
• 保留额度缓存语义：状态变化与额度刷新独立。69%* 表示上次有效读数为剩余 69%，正在等待新的有效结果；取得有效更新后显示最新百分比并去掉星号。无读数显示 —，不把重置后的额度推算为 100%。
• 配置与全局指令手动双向同步：Codex 双开页显示双方路径，分别提供 Codex → Dodex、Dodex → Codex 覆盖 config.toml 或 CODEX_HOME/AGENTS.md，备份已有目标并显示结果与备份路径。配置中的内嵌密钥会一并复制；不复制 auth.json，保留目标的登录存储、数据库和日志设置。没有自动同步；未保存的状态栏草稿会阻止配置覆盖，AGENTS.override.md 会提示但不会被替换。

升级前退出旧应用及设置窗口，再替换文件。Codex 配置、账号和双开环境继续保留。macOS 需要 macOS 14+ 和 Apple Silicon；安装包使用 ad-hoc 完整性签名，未做 Apple 公证。

本地验证：完整 macOS 原生菜单栏／弹窗测试、29 阶段真实设置窗口测试及核心同步回归通过。文件操作仅使用隔离测试配置。Windows 状态与界面通过无窗口测试及渲染检查，本版未做 Windows 人工桌面回归。已安装的 macOS Settings 窗口已检查，未覆盖真实配置；已安装弹窗的 CUA 获取超时，实机交互仍未验收，AppKit 日志确认其打开与重新打开。

English

• macOS now uses only the menu bar. Remove the notch, hover expansion, display selection and separate Dock entry. Legacy hidden-entry settings cannot hide the menu bar; its saved position is retained. Reopening the app shows the Tasks popup.
• Full popup header and light / dark themes. Show Agent Companion, the build version and actual running count, with a separate input-needed indicator. The sun / moon button saves the chosen theme. Theme and Tasks / Usage switches preserve window size, instance selection and scroll positions.
• Consistent task colors across platforms. Running is blue, waiting/failure yellow, all completed green, and no tasks or stopped/paused/unknown states gray. Waiting takes priority over running; failures never establish successful completion. Codex / Dodex have separate status marks, and macOS running dots respect Reduce Motion.
• Retain cached-quota behavior. Task status and quota refresh independently. 69%* means the cached last reading was 69% remaining, awaiting a valid update. A valid refresh shows the latest percentage without the star. Missing readings show —; a reset never implies 100% remaining.
• Manual configuration and global-instruction sync in both directions. The Codex 双开 tab shows both paths and separate Codex → Dodex / Dodex → Codex overwrites for config.toml or CODEX_HOME/AGENTS.md, with destination backups and visible results. Embedded config secrets are copied; auth.json is never copied, and destination account storage, database and log settings are preserved. There is no automatic sync. Unsaved status-bar drafts block config overwrites; existing AGENTS.override.md files are identified and left unchanged.

Quit the old app and Settings window before replacing the files. Codex configuration, accounts and the second-instance environment remain in place. macOS requires macOS 14+ and Apple Silicon; the bundle uses an ad-hoc integrity signature without Apple notarization.

Local validation: the full native macOS menu/popup suite, the 29-stage real Settings editor and core sync regressions passed. File operations used isolated fixtures. Windows status and UI checks passed headlessly with rendered previews; manual Windows desktop regression was not performed for this version. Installed macOS Settings was inspected without overwriting real profiles. CUA timed out acquiring the installed popup, leaving its live interaction unverified; AppKit logs confirm it opens and reopens.

What's Changed

• Release v0.3.18: menu-bar UI, themes and profile sync by @WXGopher in #19

Full Changelog: v0.3.17...v0.3.18

Release verification

• Source: 014fe35eb3c008fc922be8ef89f3935b6c24497a (PR #19). The merged tree matches the tested final PR revision.
• Final PR CI: Windows MSVC, macOS arm64 and native menu-bar checks passed. The 29-phase Settings fixture passed on the macOS runner in 21.33 seconds.
• Release build: both platforms passed builds, Clippy and automated tests. Downloaded archive checksums, executable architectures, packaged versions, macOS bundle signature/minimum OS, and GitHub-hosted provenance attestations were verified against the tag and source revision.
• The installed macOS executable was updated to 0.3.18 and matches the release asset; both profiles' config.toml and AGENTS.md files remained unchanged. Live popup interaction and Windows manual desktop checks remain unverified as described above.

Known legacy-launcher limitation: an older separately installed Codex B launcher may mistake an active TUI process for an already running desktop App. Launching its Runtime bundle directly also bypasses the Dodex profile bindings. This release preserves legacy launchers rather than replacing them; validate the intended launcher/profile when using a pre-existing Codex B installation.

Agent Companion v0.3.17

Agent Companion v0.3.17

• 修复 macOS 菜单栏在实例闲置、账号缓存超过五分钟且本地缺少有效额度时，直接隐藏该实例用量的问题。
• 菜单栏可见期间按实例每五分钟刷新账号用量，关闭面板后仍继续；后台和用量页共享查询与缓存，避免重复请求。
• 缓存过期、读取失败或额度重置后，保留最后已知数字并显示 *，悬停提示正在等待更新；有效新读数到达后恢复正常显示，不推算重置后的剩余额度。
• Codex / Dodex 的读数继续按实例、配置目录和运行程序隔离；停用实例或替换来源后清理旧读数。

macOS 需要 macOS 14+ 和 Apple Silicon。安装包使用 ad-hoc 完整性签名，未做 Apple 公证。Windows 行为不变。

验证：本地格式检查、Clippy、构建、完整 macOS 原生界面与设置窗口测试、核心服务测试通过。回归覆盖 299／300 秒边界、关闭面板后的刷新、失败重试间隔、过期标记、来源隔离、迟到结果和隐藏／重开缓存。测试使用合成数据及可控时间；未进行真实账号连续闲置或 Windows 人工桌面回归。

English

• Fix a macOS menu-bar quota row disappearing when an idle instance's five-minute account cache expired and no valid local quota was available.
• Refresh account usage every five minutes per instance while the menu bar is visible, including with the panel closed. Background refresh and the Usage page share requests and caches.
• Keep the last known number with * after cache expiry, a failed read or a quota reset. The tooltip identifies readings awaiting an update; a valid new reading restores the normal display. No new-period allowance is inferred.
• Keep Codex and Dodex readings isolated by instance, home and runtime, clearing old data when a source is replaced or an instance is disabled.

macOS requires macOS 14+ and Apple Silicon. The bundle uses an ad-hoc integrity signature without Apple notarization. Windows behavior is unchanged.

Validation: local formatting, Clippy, builds, the full native macOS UI and Settings tests, and core server tests passed. Regressions cover the 299/300-second boundary, closed-panel refresh, retry throttling, stale markers, source isolation, late results and hide/reopen caching. Tests use synthetic data and controlled time; live-account idle tests and manual Windows desktop tests were not performed.

What's Changed

• fix: keep idle macOS quota readings visible (v0.3.17) by @WXGopher in #18

Full Changelog: v0.3.16...v0.3.17

构建与下载核验 / Build and download verification

• 源提交 / Source: 35e3e6f
• 发布构建 / Release build · 主分支 CI / Main CI · PR #18
• 两个平台的构建与自动测试均通过。下载后的两个 ZIP 均通过 SHA-256、压缩包完整性、内容及程序架构检查；macOS 签名、0.3.17 运行版本与最低 macOS 14.0 已核对。
• Both platform builds and automated tests passed. Downloaded ZIPs passed SHA-256, archive integrity, contents and executable architecture checks. The macOS signature, runtime version 0.3.17 and minimum macOS 14.0 were verified.
• 两份构建来源证明均已验证，匹配此源提交、refs/tags/v0.3.17、仓库的 Release workflow，并要求 GitHub 托管 runner。Both provenance attestations were verified against this source commit, tag and Release workflow, requiring GitHub-hosted runners.

v0.3.16

Agent Companion v0.3.16

• Windows 启用 Dodex 支持时自动检查已有环境，缺少时部署，并注册或修复 dodex shell 命令；已有账号、会话和个人配置继续使用。
• 在 PowerShell、cmd 或 Git Bash 中运行 dodex，会在当前终端和工作目录启动第二实例的 Codex CLI。普通参数、--help、--version、resume 和 exec 均传给 Codex。
• 修复 shell 启动器的控制台行为，保留原生参数、标准输入输出、终端环境、Ctrl+C 处理和完整 Windows 退出码，同时隔离账号及会话环境。
• shell 命令优先安装到当前 PATH 中的受支持用户目录，并支持已有托管命令升级。无关同名命令会保留，冲突路径会显示在设置中。
• 更新中英文安装与升级说明，补充命令注册、旧版迁移、参数传递和控制台启动器回归测试。

升级旧版 shell 命令：退出旧版 Companion，替换文件后运行 .\agent-companion.exe dodex --deploy。仅以 --check 或 --deploy 开头时进入环境管理；桌面版仍可通过 打开 Dodex 菜单或 .\agent-companion.exe dodex 启动。

验证范围：自动测试覆盖命令注册、冲突保护、旧版迁移、PE 控制台转换、原生参数与工作目录、标准输入输出、账号环境隔离及完整 Windows 退出码。本版尚未完成 PowerShell、cmd、Git Bash 交互式 CLI 的完整手工回归；Dodex 真实桌面会话跳转仍待实机验收。macOS 需要 macOS 14+ 和 Apple Silicon，安装包使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Enabling Dodex support on Windows now checks the existing environment, deploys one if needed, and registers or repairs the dodex shell command. Existing accounts, sessions and personal settings remain in use.
• In PowerShell, cmd or Git Bash, dodex starts the second-instance Codex CLI in the current terminal and working directory. Regular arguments, --help, --version, resume and exec pass through to Codex.
• Fix shell launcher console behavior, preserving native arguments, standard input/output, terminal settings, Ctrl+C handling and full Windows exit codes while isolating account and session environments.
• Prefer a supported user command directory already on PATH and upgrade previously managed commands. Unrelated commands are preserved, with conflicting paths reported in Settings.
• Update bilingual installation and upgrade guidance, with regression coverage for command registration, migration, argument forwarding and the console launcher.

To upgrade an older shell command, quit Companion, replace its files and run .\agent-companion.exe dodex --deploy. Only a leading --check or --deploy selects environment management. The desktop app remains available through 打开 Dodex or .\agent-companion.exe dodex.

Validation scope: automated coverage includes registration, conflict protection, migration, PE console conversion, native arguments and working directory, standard input/output, account environment isolation and full Windows exit codes. Full manual regression of interactive CLI use in PowerShell, cmd and Git Bash has not been completed for this release. Real Dodex desktop thread navigation still awaits manual verification. macOS requires macOS 14+ and Apple Silicon; its bundle uses an ad-hoc integrity signature without Apple notarization.

What's Changed

• release: v0.3.16 Dodex CLI 启动修复 by @WXGopher in #17

Full Changelog: v0.3.15...v0.3.16

发布验证 / Release verification

• 源码 / Source: fc30b5511762d40b87643aaeb141ab3faa7145eb，来自 PR #17。
• PR CI 与 main CI 的 Windows MSVC、macOS arm64 和 macOS 原生动画检查全部通过。
• Release build 的两平台构建、Clippy、测试、打包与来源证明生成全部通过。
• 已下载两个 ZIP 和 SHA256SUMS.txt；SHA-256、ZIP 完整性、Windows x86_64 / macOS arm64 架构、主程序版本 0.3.16 与 README 一致性均通过校验。
• 两个 ZIP 的来源证明均已验证，限定本仓库、refs/tags/v0.3.16、上述源码提交、release.yml 及 GitHub 托管 runner。
• Windows 下载包通过隔离配置中的 hooks 安装、重复安装、状态查询与卸载，以及 Dodex 管理入口和未部署环境的 CLI 分流检查。
• macOS runner 已用 ditto 解压最终 ZIP，并通过 codesign --verify --strict 和可执行文件版本检查；下载包的 Mach-O 与 Info.plist 均要求 macOS 14.0。

Both downloaded archives passed checksum, ZIP integrity, architecture, version and provenance verification. The Windows package also passed isolated configuration and Dodex dispatch checks. The macOS runner verified the extracted archive's ad-hoc signature and executable version. Manual verification limits are recorded above.