Cockpit Tools v1.3.28

更新日志（中文）

[1.3.28] - 2026-08-23

修复

• 修复 Linux/Ubuntu 官方 ChatGPT/Codex 桌面端切号失败并补齐实例管理：支持自动识别官方 chatgpt 安装，默认实例和多开实例会使用与 macOS/Windows 一致的凭据检查与刷新、占用保护、桌面运行态关闭、profile 服务停止、凭据写入和重新启动事务；多开通过独立的 CODEX_HOME 与 Electron user-data 目录隔离，并可按实例识别和关闭，在系统提供窗口控制工具时也可定位窗口。
• Codex CLI 模式不再误关闭官方桌面客户端：用户明确选择 CLI 模式时，切号、启动、停止和关闭全部实例只管理对应 profile 服务与配置；macOS、Windows 和 Linux 的 App 模式继续管理各自的官方桌面客户端运行态。
• 修复 Trae Work CN / Trae Solo CN 账号被旧本地会话覆盖或错误归类：运行中会话只在平台一致时同步 Token，并保留 OAuth 生成的平台、Host、scope、设备密钥和 ExchangeToken 上下文；非运行态旧 storage.json 只有确实晚于已保存凭据时才会参与同步，避免账号被错误归入 Trae CN 或丢失新版刷新能力。
• 修复 Trae Work CN 账号刷新后被错误归入 Trae CN：OAuth 完成后的运行时快照只会在账号身份、平台和凭据新旧关系匹配时同步 Token，不再用旧 storage.json 覆盖 platformId、回调信息、设备密钥和 Exchange 上下文；不同 Trae 平台的快照会被明确拒绝，避免账号分类变化或新版认证失效。

新增

• Windows 系统操作增加统一恢复弹框：切号、实例启停、API Service Sidecar、端口清理、备份和导出遇到“拒绝访问”、os error 5、文件占用或程序缺失时，会在最外层弹框显示原始原因和脱敏详情，并提供重试、手动处理后继续、打开位置和复制错误；安全范围内的受支持客户端进程可通过一次性 Windows 授权继续，后台非关键探测不会打扰用户。

变更

• 正式发布构建改为更充分的并行流程：macOS Universal 与各平台包同时构建，校验和与 Homebrew 收尾并行执行，并修复 Cask PR 已可合并时自动合并失败的问题，缩短后续版本的发布等待时间。

Changelog (English)

[1.3.28] - 2026-08-23

Fixed

• Fixed account switching for the official ChatGPT/Codex desktop app on Linux/Ubuntu and completed its instance lifecycle support: Cockpit detects the official chatgpt installation and applies the same transactional credential checks and refresh, occupancy protection, desktop-runtime shutdown, profile-service shutdown, credential writes, and relaunch used on macOS and Windows. Managed instances use isolated CODEX_HOME and Electron user-data directories, can be detected and stopped independently, and can be focused when Linux window-control tools are available.
• Codex CLI mode no longer closes the official desktop client by mistake: when CLI mode is explicitly selected, switching accounts and starting, stopping, or closing all instances manages only the associated profile services and configuration; App mode on macOS, Windows, and Linux continues to manage the official desktop runtime.
• Fixed Trae Work CN / Trae Solo CN accounts being overwritten by stale local sessions or classified as Trae CN: runtime sessions now synchronize tokens only when the platform matches while preserving the OAuth platform, host, scope, device-key, and ExchangeToken context. Non-running storage.json snapshots participate only when they are newer than the saved credentials, preventing platform drift and loss of the current refresh flow.
• Fixed Trae Work CN accounts being reclassified as Trae CN after refresh: runtime snapshots after OAuth now synchronize tokens only when account identity, platform, and credential freshness match. Stale storage.json data can no longer replace platformId, callback metadata, device keys, or Exchange context, and snapshots from another Trae platform are rejected explicitly to prevent reclassification or invalidating the current authentication flow.

Added

• Windows system operations now use a unified recovery dialog: when account switching, instance lifecycle actions, API Service sidecars, port cleanup, backups, or exports encounter access denial, os error 5, file-in-use errors, or missing programs, a top-level dialog shows the original cause and redacted details with retry, manual-resolution, open-location, and copy-error actions. Supported client processes can continue through one-time Windows authorization within a restricted safety boundary, while non-critical background probes remain silent.

Changed

• Official release builds now use more parallel execution: macOS Universal builds alongside the platform packages, checksum and Homebrew finalization run in parallel, and Cask PRs that are already mergeable no longer fail during auto-merge, reducing wait times for later releases.