Cockpit Tools v1.3.4

更新日志（中文）

[1.3.4] - 2026-07-15

新增

• Codex API 服务 Client Key 支持按 Key 配置账号池与模型策略：每个 Key 可继承服务账号池，或使用自定义有序账号池并置顶优先账号；可限制允许/排除模型与模型前缀；绑定 OAuth / 供应商网关的 Key 保持固定账号范围，不会被继承或清空；sidecar 会强制按所选账号池调度，并按 Client Key 隔离会话粘性。感谢 @kin001（#1470）。
• Client Key 支持按 Key 查看今日 / 本周 / 本月用量：每个 Key 展示请求数、紧凑 Token 总量、成功率与估算费用；统计周期按本地日历边界划分（本地零点、周一、每月 1 日）。感谢 @kin001（#1470）。
• Codex API 服务支持随机账号路由：新请求可在符合条件的账号之间随机分配，同时保留会话粘性、冷却、账号健康、配额预留和模型资格规则。
• sidecar 网关支持可选的 SSE 立即返回 200：上游流建立前先提交 200 OK 和 : accepted SSE 注释；默认关闭，上游失败时会在响应头已提交后通过 SSE 错误事件返回。
• Codex API 服务请求日志支持按多开实例筛选与展示：绑定本地 API 服务的实例会写入来源标识；日志列表显示实例名称，筛选以下拉选择实例名称（无需记忆目录 ID）。

变更

• 移除 image_generation 禁用功能：不再使用此前用于规避部分供应商返回 Image generation is not enabled 的请求过滤和 OAuth 本地网关方案；图片生成功能仍可通过正常的 Codex API 路径使用。
• Devin/Windsurf 不再执行后台 Token 保活：用户未操作时不再自动刷新并回写本地登录，避免后台触发 macOS Keychain 授权；手动切号和启动绑定实例时仍会按需注入凭据。

修复

• 修复 Grok CLI 关闭「切号同步官方登录」后账号总览仍显示「当前」标识的问题：关闭该开关时切号不再维护全局当前账号，列表不再展示当前标识；开启后仍按官方登录同步并显示当前账号。
• 修复 Codex API 服务通过 OAuth 使用 Responses Lite 模型时请求失败或生图工具丢失的问题：普通 Lite 请求会过滤不支持的 hosted 工具，生图请求则自动使用完整 Responses，并保留 hosted image_generation、image_gen.imagegen 和 image_gen namespace 工具；纯 API Key 服务行为保持不变。
• 修复 GPT-5.3-Codex-Spark 在模型选择与 profile 目录中缺失的问题：模型选择器与生成的 Codex profile 目录现可识别 Spark，账号上报时也会展示对应配额进度。感谢 @kin001（#1470）。
• 修复绑定 OAuth 与 Codex API 服务生图配置冲突及本地/第三方投影不一致的问题：绑定 OAuth 时使用 requires_openai_auth = true 以保持 OAuth 登录态；本地 loopback API 服务始终可配置生图；第三方供应商仅在模型目录显式包含 gpt-image-2 时写入 actor 等生图配置，目录无该模型时会清除残留 actor header，避免客户端误开生图后卡在 Confirming；多开实例与接管校验与上述规则一致。
• 修复创建多开实例时「复制来源实例」下拉菜单无法展开或点选后立即关闭的问题：下拉改为稳定组件与 portal 挂载，避免父级重渲染导致菜单被拆掉。
• 修复 Windows 特殊挂载目录下 Codex 账号无法批量导入或删除的问题：任务快照目录不可创建时不再阻断批量操作，已有目录也不再重复执行目录创建。
• 修复 Codex 唤醒任务在账号删除后仍列出已删账号的问题：删除账号时会联动清理任务中的 account_ids；加载 / 保存 / 执行时也会过滤不存在的账号；任务账号全部被删后会移除该任务；卡片、编辑与测试列表只展示仍存在的账号。

Changelog (English)

[1.3.4] - 2026-07-15

Added

• Codex API Service Client Keys support per-key account routing and model policy: each key can inherit the service account pool or use a custom ordered pool with a pinned priority account; keys can restrict allowed/excluded models and model prefixes; OAuth-bound and provider-gateway keys keep a fixed account scope instead of inheriting or clearing it; the sidecar enforces the selected pool and isolates session affinity per client key. Thanks @kin001 for #1470.
• Client Keys show per-key usage for today, this week, and this month: each key surfaces request count, compact token totals, success rate, and estimated cost using local calendar boundaries (local midnight, Monday, and the first day of the month). Thanks @kin001 for #1470.
• Codex API Service supports random account routing: new requests can distribute across eligible accounts while preserving session affinity, cooldown, account health, quota reserve, and model eligibility rules.
• Optional immediate SSE 200 responses for the sidecar gateway: commits 200 OK and an : accepted SSE comment before the upstream stream opens; disabled by default, with upstream failures reported as SSE errors after headers are committed.
• Codex API Service request logs can show and filter by multi-instance source: instances bound to the local API service record a source marker; the log list displays the instance name, and the filter is a dropdown of instance names (no need to remember directory IDs).

Changed

• Removed the image_generation disable feature: the previous request filtering and OAuth local-gateway workaround for providers returning Image generation is not enabled are no longer used; image generation remains available through the normal Codex API path.
• Devin/Windsurf no longer participates in background token keepalive: Cockpit will not automatically refresh and write back the local login without an explicit user action, avoiding background macOS Keychain prompts; manual account switching and bound-instance startup still inject credentials when requested.

Fixed

• Fixed Grok CLI still showing a “current” badge when “sync official login on switch” is off: with the switch off, account switches no longer track a global current account and the overview no longer shows the current badge; with it on, official login sync and the current badge still work as before.
• Fixed OAuth-backed Codex API Service requests failing or losing image tools on Responses Lite models: regular Lite requests now filter unsupported hosted tools, while image-generation requests automatically use full Responses and preserve hosted image_generation, image_gen.imagegen, and image_gen namespace tools; pure API-key service behavior remains unchanged.
• Fixed GPT-5.3-Codex-Spark missing from model selection and profile catalogs: Spark now appears in the model selector and generated Codex profile catalogs, with quota progress available when the account reports it. Thanks @kin001 for #1470.
• Fixed OAuth binding conflicting with Codex API Service image-generation settings and inconsistent local/third-party projection: OAuth-bound profiles use requires_openai_auth = true so the OAuth login remains active; local loopback API Service always allows image-generation projection; third-party providers only write actor and related headers when the model catalog explicitly includes gpt-image-2, and clear stale actor headers when it does not, so the client does not open image gen and hang on Confirming; multi-instance profiles and takeover checks follow the same rules.
• Fixed the “copy source instance” dropdown failing to open or closing immediately when creating multi-instance profiles: the control now uses a stable portal-mounted select so parent re-renders no longer tear down the open menu.
• Fixed Codex accounts failing to batch-import or batch-delete under special Windows mount paths: batch operations are no longer blocked when their task snapshot directory cannot be created, and existing directories are no longer recreated.
• Fixed Codex wakeup tasks still listing accounts after they were deleted: deleting accounts now prunes matching account_ids from wakeup tasks; load / save / run also drop missing accounts; tasks with no remaining accounts are removed; cards, edit drafts, and test lists only show accounts that still exist.