Cox v0.1.47

Cox 0.1.47

This patch supersedes 0.1.46 with a final narrow-screen model-picker correction.

• Improve narrow-screen navigation with reachable sidebar dismissal, touch-sized panel controls, and a wrapped empty-state prompt.
• Keep model names legible across mobile widths by prioritizing the model name and moving effort details into the existing picker.
• Make floating browser previews easier to use on mobile: persistent open/pop-out/close actions, touch-sized controls, and no competing resize handles.
• Clarify agent browser control handoff with a primary Take control action, compact Release action, localized status text, and a mobile panel exit that returns directly to chat without reopening the floating preview.
• Simplify desktop update settings to one current primary action plus an on-demand actions menu for client and Cox backend updates. Automatic-check controls and install/quit confirmation remain intact.
• Complete English and Chinese interface resources for the updated controls.

Install

npm install -g @doublepi123/cox@0.1.47
cox

The source-with-prebuilt-assets archive requires the pinned Node/pnpm toolchain and pnpm install --frozen-lockfile; it is not a standalone executable. SHA256SUMS covers the source release archive.

This release does not change the native desktop shell version. Existing desktop clients can receive the Cox backend through the normal staged update path. Stable desktop downloads remain available from https://github.com/doublepi123/cox/releases/tag/cox-desktop-latest .

Validation

• The complete Web suite passed all 5,158 tests using the CI worker configuration.
• Root, client-runtime, and server suites passed: 263, 1,239, and 5,697 tests respectively.
• Workspace typecheck, production builds, runtime smoke, and development-launcher smoke passed.
• The source archive passed SHA-256, version/commit identity, frozen-installation, and isolated runtime verification.
• No live local service was restarted or deployed by this publication.

Cox v0.1.46

Cox 0.1.46

• Improve narrow-screen navigation with reachable sidebar dismissal, touch-sized panel controls, a legible model picker, and a wrapped empty-state prompt.
• Make floating browser previews easier to use on mobile: persistent open/pop-out/close actions, touch-sized controls, and no competing resize handles.
• Clarify agent browser control handoff with a primary Take control action, compact Release action, localized status text, and a mobile panel exit that returns directly to chat without reopening the floating preview.
• Simplify desktop update settings to one current primary action plus an on-demand actions menu for client and Cox backend updates. Automatic-check controls and install/quit confirmation remain intact.
• Complete English and Chinese interface resources for the updated controls.

Install

npm install -g @doublepi123/cox@0.1.46
cox

The source-with-prebuilt-assets archive requires the pinned Node/pnpm toolchain and pnpm install --frozen-lockfile; it is not a standalone executable. SHA256SUMS covers the source release archive.

This release does not change the native desktop shell version. Existing desktop clients can receive the Cox backend through the normal staged update path. Stable desktop downloads remain available from https://github.com/doublepi123/cox/releases/tag/cox-desktop-latest .

Validation

• Workspace typecheck, production builds, runtime smoke, and development-launcher smoke passed.
• Root, client-runtime, and server suites passed: 263, 1,239, and 5,697 tests respectively.
• The source archive passed SHA-256, version/commit identity, frozen-installation, and isolated runtime verification.
• No live local service was restarted or deployed by this publication.

Cox v0.1.45

Cox 0.1.45

• Export one completed assistant answer as a locally generated PNG, with preview, save, copy and native file sharing when available. Includes Markdown, code, tables, math, diagrams and images; other messages and tool logs are excluded.
• Model center supports explicit batch model testing, progress and results, ignoring failed models, and restoring ignored models. Tests use saved settings and may incur provider charges; development validation uses fixtures only.
• Desktop integration exposes real download progress, separate backend/client updates, and an independent settings window with synchronized preferences.
• Completes the English/Chinese interface resources for the new desktop and model-testing controls.

Desktop shell changes are released separately as Cox Desktop 0.2.7: https://github.com/doublepi123/cox/releases/tag/desktop-v0.2.7 . Stable desktop downloads: https://github.com/doublepi123/cox/releases/tag/cox-desktop-latest .

Install

npm install -g @doublepi123/cox@0.1.45
cox

The source-with-prebuilt-assets archive requires the pinned Node/pnpm toolchain and pnpm install --frozen-lockfile; it is not a standalone executable. SHA256SUMS covers the source release archive. No live local service is restarted by publication.

Desktop distribution limits

macOS application replacement/restart and matching application/data rollback are included in Desktop 0.2.7. Current macOS packages use ad-hoc signing, not Developer ID/notarization; unsigned Windows packages use the installer wizard. Formal signing and clean-machine acceptance remain distinct from automated CI verification.

Cox v0.1.44

Cox v0.1.44

修复 Model Gateway 失败粘滞

• 移除当前 provider run 内的终态失败缓存，包括失败 Map、读写接口及 cached_failure 快速返回路径。
• 不再根据路径和请求体摘要复用失败。完全相同的 payload 再次到达时，生成新的 Gateway request ID，重新执行独立 recovery 流程与尝试/时间预算。
• invalid_request_error 等非重试错误也不再跨客户端请求缓存；上游恢复后，相同请求可以正常返回 200。
• 保留单次请求内部 retry/hedging、客户端取消、provider run 生命周期、recovery progress 及开始输出后不重放请求的保护。
• 新增 Pi / OpenAI Responses 回归：首次请求耗尽 20 次 HTTP 400 后，保持同一 run 和相同 payload 再次请求，前三次 400、第四次成功；两个请求 ID 不同。

安装与桌面包

npm install --global @doublepi123/cox@0.1.44

本次只更新 Cox，桌面壳版本保持 0.2.4。三平台组合包使用 Desktop 0.2.4 + Cox 0.1.44；macOS 提供 ARM64 / Intel DMG，Windows 提供 x64 EXE，不生成重复的 macOS ZIP 应用包。

三平台组合包、独立校验文件及预构建源码归档均已附在本 Release。桌面固定下载入口也已更新为 Desktop 0.2.4 + Cox 0.1.44，旧组合包和原校验清单保持不变。

已经安装 Desktop 0.2.4 的用户可以手动检查并下载 Cox 更新，下次正常启动后激活，无须升级桌面壳。仅客户端包继续使用 Desktop 0.2.4 的安装器，首次启动安装最新官方 npm Cox。

macOS 仍使用 ad-hoc 签名，尚无 Developer ID 公证，首次打开可能需要系统确认；Windows 安装包尚未进行发布者签名。

本次发布不部署或重启现有本地服务，不修改现场数据。测试只使用合成请求与本地模拟上游，不复放真实 prompt 或调用付费模型。

验证

• Cox 源码提交：9060790eb59ec4b3d3531e7ee2825906d3423cef；桌面壳继续使用既有 desktop-v0.2.4 标签及其源码提交。
• 完整 CI 的 core、server、web、distribution 全部通过。Model Services 模块的 187 个测试覆盖新请求重试、独立 request ID、取消、hedging、生命周期和进度展示。
• npm OIDC 发布 成功；已下载公开 tarball，SHA-512/SHA-1 校验通过，并与 CI 产物逐字节一致。
• 官方 npm 包的隔离安装通过本地模式及密码模式运行时冒烟；已核对预构建源码归档的 SHA-256、版本和源码提交。
• 三平台组合流水线 全部通过，包含 Windows x64、macOS ARM64 / Intel 的实际应用冒烟与 macOS DMG 签名校验。npm 分发同步期间暂缓的流水线在公开包可下载并验证后重跑，未跳过测试。
• 三个组合包及构建元数据已下载并验证，15 份原生构建附件与 GitHub 上传摘要一致，公开下载地址可访问；客户端提交为 237b70b9862237d57ac08cbf4d037a248d1fdff3，内置 Cox 的 npm 完整性摘要匹配本次 0.1.44 发布。
• 桌面 Release 保留全部旧附件与校验数据；新增组合包使用带 Cox 版本的构建元数据文件名，新校验清单同时覆盖新组合包与未变动的仅客户端包。
• 官方 npm 包的来源声明与本次 tag、源码提交、内容摘要匹配；已安装的生产模块确认不再包含 cached_failure 分支。

Cox v0.1.43

Cox v0.1.43

更新内容

• 模型中心新增按服务保存的“重试非常规上游错误（如 HTTP 400）”开关，默认关闭。开启自动重试后，可重试上游请求无效、认证失败等 4xx/5xx 错误。
• 429、上游工具请求仍由各自的独立开关控制；保留尝试次数、时间预算、取消、状态型请求限制，以及开始输出后不重放请求的保护。
• 配合 Desktop 0.2.4，更新提示支持“忽略本版本”和“永久忽略更新”，重启后仍有效；设置中可恢复自动检查，手动检查始终保留。
• 修复后台活动、追问行为、分支命名、主题、提供商探测、空闲压缩和设置搜索等界面的国际化遗漏，支持实时切换语言，不翻译用户或 Agent 原始内容。

安装

npm install --global @doublepi123/cox@0.1.43

桌面组合包使用 Cox Desktop 0.2.4 + Cox 0.1.43。macOS 提供 ARM64、Intel 的 DMG，Windows 提供 x64 EXE，不提供重复的 macOS ZIP 应用包。

仅客户端安装包见 Desktop 0.2.4，首次启动需要联网安装官方 npm Cox。

本 Release 已附带 Desktop 0.2.4 + Cox 0.1.43 的三平台组合包及独立 SHA-256 清单。

源码归档包含预构建 Web 和服务端；解压后使用固定版本的 Node/pnpm，运行 pnpm install --frozen-lockfile，再运行 pnpm start。

macOS 使用 ad-hoc 签名，尚无 Developer ID 公证，Gatekeeper 仍可能要求显式批准；Windows 安装包尚未进行发布者签名。

本次发布不重启或部署现有本地 Cox 服务，不修改现场数据或全局 npm 安装。

验证

• 源码提交：237b70b9862237d57ac08cbf4d037a248d1fdff3。
• 完整 CI 的 core、server、web、distribution 全部通过。
• npm OIDC 发布 通过，公开 tarball 与 CI 产物逐字节一致，SHA-512/SHA-1 校验通过，来源声明的源码提交、tag 及内容摘要匹配。
• 官方 npm 包的隔离安装通过本地模式和密码模式运行时冒烟，覆盖浏览器认证、Cookie、HTTP/WebSocket Origin 校验。
• Desktop 0.2.4 六组原生构建 的 macOS ARM64、Intel、Windows x64 组合包及仅客户端包均通过实际应用冒烟；所有下载附件 SHA-256 校验通过。
• 已下载并核对预构建源码归档的 SHA-256 与发布源码提交。
• Cox/最新桌面客户端组合流水线 已基于 Desktop 0.2.4 重跑通过；三份组合包构建身份、内置 npm 完整性及清单中所有文件的 GitHub 上传摘要匹配。

发布过程中 npm 元数据与 tarball 分阶段同步曾导致一次组合构建 404；人工草稿也遇到了按 tag 查询的 404。公开包和全部桌面附件验证完成后，发布与组合流水线均已重跑通过，未跳过原生测试或修改版本标签。

Cox v0.1.42

Cox v0.1.42

Cox and the desktop client now have independent versions. Desktop installers are explicitly
named cox-desktop; combination filenames include both the client and Cox versions.

• Add desktop-owned Cox installation and update management. Check the official stable npm
  package at startup, every six hours, or manually from Settings → About.
• Verify npm SHA-512 integrity and runtime compatibility before staging an update. Activate
  on the next normal launch without interrupting active coding tasks.
• Snapshot desktop userdata before activation and restore the matching data and previous
  backend if startup or migration fails.
• Support client-only packages: download Cox on first launch, then reuse the verified local
  installation offline. Keep managed backends outside the signed application bundle.
• Show desktop, installed Cox and bundled Cox versions separately, with a themed update dialog.
• Add three subtle animated dots below Cox on the loading screen; respect reduced motion.
• Build latest-Cox/latest-released-desktop combination installers after stable Cox publication.
  Desktop releases also produce separate client-only installers.

Validation

• Release commit: b55c7e8bada869ec465c7bc0941b94d731269b50.

• All four main CI jobs passed: Core, Server, Web and Distribution. The complete suites
  passed 15,458 tests, with 7 skipped: 5,655 Server, 5,095 Web, 3,363 shared packages,
  1,237 client-runtime and 108 root/desktop tests.

• Workspace typechecks, production builds and isolated runtime/development checks passed.

• The CI source archive passed SHA-256, version/commit checks and a fresh frozen-dependency
  installation, including local/password authentication, HTTP/WebSocket origin checks and
  actual development startup with isolated state.

• Main CI

• All six desktop pre-release CI jobs passed, covering bundled and client-only installers
  on macOS Apple Silicon, macOS Intel and Windows x64.

• Client-only native checks exercise fresh first installation and a second offline launch.

• macOS checks verify unpacked and DMG signatures, including the standalone Node binary.

• Desktop tests cover owned backend cleanup, staged activation, matching data/code rollback
  and the macOS forced-shutdown process-group reaping race.

• Desktop packaging preserves relative npm symlinks, keeping signed macOS bundles self-contained.

• Desktop startup waits for asynchronously published ownership data with a cancellable deadline;
  delayed foreign owners and malformed descriptors still fail closed.

• Desktop 0.2.3 pre-release CI

• Desktop 0.2.3 native release builds

• The public npm tarball matches the CI tarball byte-for-byte, passes SHA-512/SHA-1 checks,
  and includes the expected desktop compatibility metadata, licenses and all six platform bridges.
  Provenance source/ref and digest metadata match the release commit.

• Fresh isolated npm installation passes local/password authentication and runtime smoke tests.

• A real official-npm upgrade from Cox 0.1.41 to 0.1.42 stages without disturbing the running
  backend, activates on normal restart, preserves test data and retains a matching pre-upgrade
  SQLite snapshot. No live user service or application data was used.

Desktop downloads

The combination installers attached to this release use Desktop 0.2.3 + Cox 0.1.42.
macOS provides DMG only, with no duplicate ZIP application packages. Windows uses EXE.
Native dialogs and custom menu labels follow the OS language instead of showing bilingual copy.
Update-download dialogs distinguish progress, completion and errors rather than reporting
unfinished downloads as up to date.

Client-only installers are available in the separate
Desktop 0.2.3 release.

Install

npm install --global @doublepi123/cox@0.1.42

For the source archive with prebuilt assets, extract it, run
pnpm install --frozen-lockfile, then pnpm start using the pinned Node and pnpm versions.

Client-only installers require internet on first launch. macOS packages use ad-hoc signing,
without Developer ID notarization; Windows packages are not publisher-signed.

This release does not change or restart an existing local Cox deployment.

Cox v0.1.41

Seven upstream reliability improvements

• Preserve the recent history window when stored interrupt requests and large checkpoint lists compete for bounded-snapshot space. This fixes apparent history truncation without rewriting conversation data. Upstream #31266.
• Always classify stored provider-secret references as sensitive, including older entries with missing or false flags, and preserve the classification on save. Upstream #31403.
• Keep thread branch metadata synchronized with worktree branch changes, including shared and archived threads; ignore detached HEADs, stale events and threads that moved. Upstream #31599.
• Refresh pull-request divergence at turn completion even when background Git polling is paused. Upstream #31342.
• Avoid repeatedly reopening unreadable credential vaults on unrelated settings saves. Retry when vault configuration changes, a reference changes or secrets are explicitly refreshed; keep working instances and Cox model-service materialization intact. Upstream #31226.
• Include Pi sessions stored through an absolute --session-dir argument, including quoted/equals-form paths and instance-home expansion. Keep configured history directories and environment overrides. Upstream #30690.
• Allow snoozing existing unanswered questions without resolving or discarding them. Keep approvals visible, wake for new questions and answers, and retain Cox's asynchronous-question/Working-state distinction. Upstream #20058.

Side-chat permission inheritance, low-priority sidebar layout changes, native-mobile-only features and broad Effect refactors are deliberately excluded. The existing supervised first-turn side-chat policy is unchanged.

Validation

• Release commit: e3dc4ca64b37d70f727f447a50e242820259cafd.
• Local complete suites: 15,419 passed, 6 skipped — 5,655 Server, 5,092 Web, 3,363 shared packages, 1,237 client-runtime and 72 root/desktop tests.
• Full workspace typechecks, changed-file lint/format, production build, Go protocol tests and isolated runtime/development smoke checks passed.
• A fresh source-archive installation with frozen dependencies passed release version/commit checks and isolated runtime/development startup, authentication and HTTP/WebSocket origin checks.
• A fresh local npm-tarball installation passed repeatable runtime patching, native PTY, offline Cursor SDK prewarm and isolated runtime authentication/origin checks.
• No paid inference was started and no live application data was changed.
• All four release CI jobs passed: Core, Server, Web and Distribution. CI independently reproduced 15,419 passed, 6 skipped, including 5,655 Server and 5,092 Web tests.
• All three desktop jobs passed on macOS Apple Silicon, macOS Intel and Windows x64, including packaged backend/native PTY and app-window smoke checks. Both macOS jobs verified unpacked, ZIP and DMG application signatures and the bundled Node signature.
• npm publication succeeded through GitHub OIDC. Public version metadata and latest resolve to 0.1.41; the actual public tarball passed SHA1/SHA512, embedded version, licenses and six-platform protocol-bridge checks. Public SLSA provenance references the exact release commit and public tarball digest.
• The public npm package matches the publishing-workflow artifact byte-for-byte and passed a fresh isolated install, repeatable postinstall, native PTY, offline Cursor SDK and runtime/authentication/origin checks.
• Downloaded desktop workflow artifacts passed their SHA256 sidecars and installer/blockmap structure checks. Both macOS ZIPs contain the expected server version, bundled Node, UI, target protocol bridge and licenses, with other-platform bridges removed.
• All GitHub release assets were independently downloaded from public URLs. SHA256SUMS matches the tested manifest and verifies the source archive, desktop installers, ZIPs, blockmaps, sidecars and build manifests; every downloaded file matches its tested local/workflow artifact byte-for-byte.
• Cox checks
• Desktop packaging
• npm publishing

Install

npm install --global @doublepi123/cox@0.1.41

For the prebuilt source archive, extract it, run pnpm install --frozen-lockfile, then pnpm start.

Desktop packages use an embedded loopback backend and isolated ~/.cox/desktop state. macOS bundles use ad-hoc signatures, not Developer ID signing or Apple notarization; Windows installers are not publisher-signed. OS trust warnings may therefore still apply.

This release does not update or restart an existing local Cox deployment.

Cox Desktop 0.2.7

Desktop client 0.2.7 combined with Cox 0.1.45. Client-only packages install Cox from the official npm registry on first launch.

Cox Desktop 0.2.4

Cox Desktop 0.2.4

更新内容

• Cox 更新提示新增“忽略本版本”“永久忽略更新”，偏好持久保存；仍可手动检查，并从设置或原生菜单恢复自动检查。
• 忽略操作不会退出客户端或中断任务。已经下载的更新仍在下次正常启动生效；仅客户端包首次启动所需的 Cox 安装不受忽略偏好阻止。
• 显式翻译 macOS 默认菜单角色，包括关于、隐藏、退出、编辑、窗口、语音和文本替换等，保留原生快捷键和操作。
• macOS 应用声明英文、简体中文、繁体中文本地化，打包检查验证 DMG 内应用的语言声明与签名结构。
• 配合 Cox 0.1.43，修复多处 Web 设置界面的国际化遗漏，并提供模型中心非常规错误重试开关。

下载

• 组合安装包：Desktop 0.2.4 + Cox 0.1.44。
• 仅客户端安装包：包含桌面壳和 Node/npm，首次启动联网安装官方 npm Cox，后续复用已安装后端。
• macOS：ARM64、Intel DMG；Windows：x64 EXE。macOS 不再提供重复 ZIP 应用包。

内置 Cox 的更新先下载并校验，在下次正常启动激活，不中断运行中的任务；升级前保留匹配的数据快照及代码回退能力。

macOS 使用 ad-hoc 签名，尚无 Developer ID 公证，Gatekeeper 仍可能要求显式批准；Windows 安装包尚未进行发布者签名。

本次发布不重启或部署现有本地 Cox 服务，不修改现场数据或全局 npm 安装。

验证

• 发布源码提交：237b70b9862237d57ac08cbf4d037a248d1fdff3。
• 完整 Cox CI 通过。
• 六组原生构建 覆盖 macOS ARM64、Intel 和 Windows x64 的组合包、仅客户端包，均通过实际应用启动与运行时冒烟；macOS 另外校验 DMG 内应用签名与本地化声明。
• 六份构建元数据中的版本、源码提交、干净源码标记及内置 Cox 的 npm 完整性摘要均通过核对。
• 已下载全部六个安装包与附属文件，完整 SHA-256 清单校验通过，无 macOS ZIP 应用包。
• 官方 npm Cox 0.1.43 公开下载内容与 CI tarball 逐字节一致，SHA-512/SHA-1 校验通过；隔离安装通过本地及密码认证模式的运行时冒烟。

Cox 0.1.44 组合包更新

桌面壳仍为 0.2.4，本次补充内置 Cox 0.1.44 的 macOS ARM64 / Intel DMG 和 Windows x64 EXE。修复 Model Gateway 跨请求缓存终态失败的问题；每次相同请求均创建新的 request ID 和 recovery 流程。

三组原生构建与实际应用冒烟已通过，下载内容与发布摘要匹配。旧 Cox 0.1.43 组合包、原始元数据和旧校验清单保持不变；新增构建元数据采用含 Cox 版本的文件名，避免破坏旧清单。仅客户端安装包保持不变。

• Cox 0.1.44 发布说明
• 三平台组合构建

Cox Desktop 0.2.3

Cox Desktop 0.2.3

macOS releases now provide DMG only, without duplicate ZIP packages.
The previous 442–461 MB Actions artifacts combined a DMG and a ZIP containing the same app;
this was not the size of a single installer.

• Generate and upload only DMG installers for Apple Silicon and Intel Macs.
• Keep Windows x64 EXE installers unchanged.
• Retain bundled and client-only variants, with both version numbers in combination filenames.
• Name release-build artifacts cox-desktop-* consistently.
• Verify signatures of the actual mounted DMG application and its embedded Node runtime.
• Add regression coverage preventing ZIP installers and ZIP sidecars from returning.
• Follow the OS language in native update, permission, quit, startup/error dialogs and custom
  menu labels: Chinese for Chinese system locales, English fallback otherwise. Never show both.
• Wait for ongoing checks/downloads before completing a download request. Distinguish
  checking, downloading, ready, incompatible and failed states instead of reporting them as up to date.

Bundled installers include Cox 0.1.42. Client-only installers include standalone Node/npm and
install the official Cox package on first launch; their first launch requires internet.
Subsequent launches reuse the installed backend offline. Backend updates are staged without
interrupting tasks and activated on the next normal launch, with paired data/code rollback.

Validation

• Source: 7c2e56ce75fe656ee579587b3beb7fb4671882c3.
• Complete main CI.
• Six native pre-release jobs:
  bundled/client-only on macOS ARM, macOS Intel and Windows x64, including real app startup.
• Native release builds verify the distributed DMG signatures before application smoke tests.
• All six native release jobs
  passed before publication.
• Public downloads are checked against their SHA-256 files and build-version/source metadata.

macOS packages currently use ad-hoc signing without Developer ID notarization, so Gatekeeper
may still require explicit approval. Windows packages are not publisher-signed.
This release does not restart or deploy any existing local Cox service.