v0.3.24

Agent Companion v0.3.24

• 额度归属与刷新：额度和历史绑定实际用户、工作区、认证存储与服务来源。换号、登出或身份无法确认时清除旧读数并拒绝晚到响应；正常 token 轮换保留同账号缓存。文件和系统凭据采用非交互核验，不记录凭据或身份指纹。同一认证目录复用自建原生 worker，额度与历史独立超时、独立发布；默认五分钟及 1–60 分钟设置保持不变。
• 旧 Dodex 兼容与隔离：恢复已有隔离配置使用 SQLite/日志默认路径的兼容性，支持旧内置 CLI 的额度查询。macOS 已启用但校验失败的 Dodex 保留卡片和具体原因，停止该实例的数据读取。App、TUI、额度和更新进程统一清理继承的账号、会话及运行程序覆盖；合法提示文本和 -- 参数原样转发，冲突配置不会自动覆盖或绕过。
• App/TUI 入口和成对维护：dodex app、桌面导航和项目打开进入公共 Dodex App；dodex update 接入统一维护。分别对齐 Codex/Dodex App 与 TUI，同版本也迁移已知旧入口修订，未知修改不覆盖，较新版本不降级。更新后重新核验实际版本，保留暂存、切换与恢复记录。Windows 桌面使用精确 Store 产品 ID 的非交互 WinGet 更新及验签，TUI 独立保存完整包。macOS 启动同步或隔离校验失败时停止启动并显示原因，不再继续启动旧 App。
• acomp resume：新增用户级 CLI 安装和交互式会话选择，按当前目录搜索原会话并选择本次额度账号，保留原会话 ID 与历史来源。macOS 原生恢复目前仅开放通过配置与认证核验的 Codex CLI 0.159.3 文件登录组合；Windows 提供安装与历史发现，恢复启动仍禁用。命名 profile、项目配置覆盖、托管策略和其他未验证组合会显示原因并禁用，详见接力说明。
• 桌面与安装细节：macOS 菜单面板在切回其他应用时收起；修复 CLI 安装与接力锁释放竞态及 Windows 隔离启动参数测试。

macOS 已观察双实例额度正常读取、Dodex 手动刷新和 Dodex App/TUI 启动。自动测试包含临时目录、合成凭据、本地服务、两版原生额度协议与原生恢复契约；这些结果不代表订阅计费验收。Windows GUI、完整换号/登出矩阵、真实四组合接力及完整成对升级/恢复仍未完成实机验收。详见验收记录。

macOS 包适用于 macOS 14+ Apple Silicon，使用 ad-hoc 完整性签名，未做 Apple 公证。

English

• Account ownership and refresh. Bind quota and history to the actual user, workspace, authentication store and service. Account changes, logout or unverifiable identity clear old readings and reject late responses; ordinary token rotation preserves the same account's cache. File and system credentials are checked without interaction, and credentials or identity fingerprints are not logged. Quota and history share a Companion-owned native worker per authentication directory, with independent deadlines and publication. The five-minute default and 1–60-minute setting remain unchanged.
• Legacy Dodex compatibility and isolation. Accept verified existing profiles that rely on isolated SQLite/log defaults, and restore quota queries with older bundled CLIs. On macOS, an enabled Dodex instance that fails validation keeps its card and specific error while its readers remain disabled. App, TUI, quota and updater processes consistently remove inherited account, session and runtime overrides. Valid prompts and arguments after -- are forwarded unchanged; conflicting settings are neither overwritten nor bypassed.
• App/TUI entries and paired maintenance. Route dodex app, desktop navigation and project opening to the public Dodex App, and dodex update to unified maintenance. Align the Codex/Dodex App and TUI pairs separately, migrate known old entry revisions even at matching versions, preserve unknown modifications and avoid downgrades. Recheck installed versions after updates and retain staging, switch and recovery records. Windows desktop maintenance uses the exact Store product ID with noninteractive WinGet and signature checks; TUI retains a separate complete package. Failed macOS startup synchronization or isolation validation now stops launch with a reason instead of continuing into the old App.
• acomp resume. Add user-level CLI installation and interactive selection of original sessions in the current directory, choosing the account for this run while retaining the original session ID and history. Native resume on macOS currently permits only verified Codex CLI 0.159.3 file-login combinations. Windows supports installation and history discovery, but resume launch remains disabled. Named profiles, project configuration overrides, managed policies and other unverified combinations are disabled with a reason. See resume support boundaries.
• Desktop and installation fixes. Dismiss the macOS menu popup when returning to another app, and fix the CLI installer and resume lock-release races and Windows isolated-launch argument tests.

macOS checks observed both instances' quota, Dodex manual refresh, and Dodex App/TUI startup. Automated coverage includes disposable directories, synthetic credentials, loopback services, quota contracts with two native CLI versions and native resume contracts; it does not establish subscription billing correctness. Windows GUI, the full account-switch/logout matrix, all four real-account resume combinations, and complete paired upgrade/recovery remain unverified on real installations. See the validation record.

The macOS package requires macOS 14+ on Apple Silicon and uses an ad-hoc integrity signature without Apple notarization.

Full Changelog: v0.3.23...v0.3.24

Release verification

• Source: 75f049aa218ca1310889e08a2f6b384b02bbdec0.
• Final macOS arm64 and Windows MSVC CI: passed.
• Release build: passed.
• Both downloaded ZIPs passed SHA-256, CRC, contents, architecture and provenance verification against this tag, source commit, release workflow and GitHub-hosted runners. macOS ad-hoc signature, executable versions, macOS 14.0 minimum and packaged acomp PTY checks passed. Windows packaged executable version checks passed on the MSVC runner.