OmniProxy v1.2.9-beta.1

v1.2.9-beta.1 - Codex one-click authentication compatibility / Codex 一键配置认证兼容性

This beta fixes Codex CLI startup after one-click configuration when an imported ChatGPT account does not include the plan claim required by newer Codex releases.

本次 beta 修复部分导入的 ChatGPT 账号缺少新版 Codex 所需套餐声明时，一键配置后 Codex CLI 无法启动的问题。

Bug Fixes / 问题修复

• Codex no longer fails during TUI bootstrap with a missing plan type: One-click configuration now verifies that the selected account's ID token contains chatgpt_plan_type before using ChatGPT login.
  • Codex 不再因缺少套餐类型而在 TUI 启动阶段失败：一键配置现在会先确认所选账号的 ID token 包含 chatgpt_plan_type，再使用 ChatGPT 登录。
• Incomplete account metadata falls back safely: If the plan claim is absent, OmniProxy writes the local API login instead. Requests continue to use the OmniProxy auth pool and its existing scheduling behavior.
  • 账号元数据不完整时安全回退：缺少套餐声明时，OmniProxy 会改写为本地 API 登录；请求仍继续使用 OmniProxy auth 池及原有调度逻辑。
• Signed tokens are left untouched: The fallback avoids inserting guessed subscription data into a signed JWT. Accounts with complete plan metadata continue to use ChatGPT login as before.
  • 不修改已签名令牌：回退方案不会向已签名 JWT 写入猜测的套餐信息；套餐元数据完整的账号仍按原方式使用 ChatGPT 登录。
• Regression coverage: Backend tests cover plan extraction, ChatGPT login for complete accounts, and API fallback for accounts without the required claim.
  • 回归测试覆盖：后端测试覆盖套餐解析、完整账号的 ChatGPT 登录，以及缺少必要声明时的 API 回退。

Upgrade Guidance / 升级说明

• After installing this beta, run Codex one-click configuration once more so the existing ~/.codex/auth.json and config.toml are rewritten with the compatible login mode.
  • 安装本 beta 后，请重新执行一次 Codex 一键配置，使现有 ~/.codex/auth.json 与 config.toml 按兼容的登录模式重新写入。
• No account-pool or local-data migration is required.
  • 无需迁移账号池或本地数据。

Breaking Changes / 不兼容更新

• None / 无

Validation / 验证

• cd OmniProxyBackend && go test ./...
• cd OmniProxyBackend && go vet ./...
• cd frontend && npm test (67 tests)
• cd frontend && npm run build
• node scripts/check-lines.mjs
• cd OmniProxyBackend && wails build -clean -ldflags "-X main.appVersion=v1.2.9-beta.1"
• git diff --check

---

Full Changelog / 完整更新日志: v1.2.8...v1.2.9-beta.1

OmniProxy v1.2.8

v1.2.8 - Claude login, local hardening, and streaming performance / Claude 登录、本机加固与流式性能

This stable release consolidates the v1.2.8 beta line. It adds browser-based Claude login and opt-in subscription quota, hardens local listeners and update downloads, restores Codex streaming behavior, and reduces request-history and startup overhead.

本正式版整合 v1.2.8 beta 系列改动：新增 Claude 浏览器登录与可选的订阅额度查询，加固本机监听器和更新下载，恢复 Codex 流式响应，并降低请求历史与启动路径的开销。

Features / 新特性

• Claude browser login: Account Management can open or copy a PKCE authorization link, detect the loopback callback automatically, and import the resulting Claude OAuth account. Expired or unwanted login sessions can be refreshed in place.
  • Claude 浏览器登录：账号管理可打开或复制 PKCE 授权链接，自动检测本机回调并导入 Claude OAuth 账号；过期或不再需要的登录会话可直接刷新。
• Opt-in Claude subscription quota: Claude OAuth accounts can show five-hour and weekly plan windows. The setting is off by default and requires explicit risk acknowledgement because the usage endpoint is undocumented and Anthropic restricts subscription credentials to its own clients.
  • 可选的 Claude 订阅额度：Claude OAuth 账号可显示 5 小时和每周套餐窗口。该功能默认关闭；由于用量接口未公开，且 Anthropic 限制订阅凭据在其自有客户端之外使用，开启前必须明确确认风险。
• Quota failures stay separate from account health: An unavailable or changed Claude usage response reports no quota without marking an otherwise working account invalid.
  • 额度失败不影响账号健康状态：Claude 用量接口不可用或响应结构变化时只报告额度不可用，不会把其他功能正常的账号误判为失效。

Bug Fixes / 问题修复

• Codex chat completions stream again: The compatibility path converts upstream events as they arrive instead of buffering the full response before sending anything to the client.
  • Codex 对话补全恢复流式输出：兼容路径改为边接收边转换上游事件，不再等待完整响应后才向客户端输出。
• Proxy shutdown closes WebSocket bridges: Stopping or restarting the proxy now closes hijacked WebSocket sessions so they cannot continue relaying traffic, recording usage, or holding account reservations.
  • 停止代理时关闭 WebSocket 桥接：停止或重启代理时会关闭已接管的 WebSocket 会话，避免其继续转发流量、记录用量或占用账号。
• Accurate Codex model reporting: Model-catalog polling no longer appears as inference usage, and active WebSocket requests show the model selected by the client.
  • 准确显示 Codex 模型：模型目录轮询不再被统计为推理用量，活动中的 WebSocket 请求会显示客户端实际选择的模型。
• Request history pagination stays put: Periodic refreshes no longer force later history pages back to the first page.
  • 请求历史分页保持当前位置：定时刷新不再把后续历史页强制跳回第一页。
• Codex config backups fail safely: If the original configuration cannot be backed up, one-click configuration now reports the error and leaves the source file unchanged.
  • Codex 配置备份安全失败：原配置无法备份时，一键配置会报告错误并保持源文件不变。
• Clearer Claude quota state: Failed quota requests expose useful status information, and the quota switch remains off until its risk prompt is accepted.
  • 更清楚的 Claude 额度状态：额度请求失败时会显示可用的状态信息，风险提示未确认前额度开关保持关闭。

Security / 安全

• Loopback Host validation: The proxy and control listeners reject non-loopback Host headers, closing a DNS-rebinding path while preserving clients configured to use 127.0.0.1.
  • 回环 Host 校验：代理和控制监听器拒绝非回环 Host 请求，在不影响使用 127.0.0.1 的已配置客户端前提下关闭 DNS 重绑定路径。
• Restricted update downloads: Installer and checksum downloads require HTTPS GitHub release hosts before the downloaded Windows installer can be launched with elevation.
  • 限制更新下载来源：安装包和校验文件必须来自 HTTPS GitHub 发布主机，之后才允许提权启动下载的 Windows 安装包。
• Pinned release toolchain: CI and release workflows use Go 1.26.5 instead of depending on the runner's preinstalled Go version.
  • 固定发布工具链：CI 与发布工作流固定使用 Go 1.26.5，不再依赖 runner 预装的 Go 版本。

Upgrade Guidance / 升级说明

• Existing configuration, account pools, request history, billing summaries, and theme state remain compatible with v1.2.7 and the v1.2.8 beta line.
  • 现有配置、账号池、请求历史、费用汇总和主题状态与 v1.2.7 及 v1.2.8 beta 系列保持兼容。
• Claude subscription quota remains disabled unless the user explicitly accepts its policy and account-risk notice.
  • Claude 订阅额度仅在用户明确接受相关政策与账号风险提示后才会启用。
• Beta users can upgrade directly to v1.2.8. The stable version compares newer than every v1.2.8 beta tag.
  • Beta 用户可直接升级到 v1.2.8；正式版版本顺序高于所有 v1.2.8 beta 标签。
• The macOS universal DMG remains unsigned and not notarized. Quit OmniProxy before replacing the app in Applications.
  • macOS Universal DMG 仍未签名且未公证；替换 Applications 中的应用前请先退出 OmniProxy。

Refactor & Performance / 重构与优化

• Request history uses WAL with synchronous=NORMAL when supported, and pruning runs periodically instead of on every insert with index-friendly retention queries.
  • 请求历史在支持时使用 WAL 与 synchronous=NORMAL，清理从每次写入改为定期执行，并使用可利用索引的保留期查询。
• Realtime polling pauses while the desktop window is hidden, and the default history fetch is bounded to five table pages.
  • 桌面窗口隐藏时暂停实时轮询，默认历史拉取量限制为表格的五页。
• Request model probing avoids full JSON decoding unless a rewrite is needed, OAuth expiry is checked before taking the refresh lock, and startup history probes no longer scan every row twice.
  • 请求模型探测仅在需要改写时才完整解码 JSON，OAuth 到期判断提前到获取刷新锁之前，启动历史探测也不再两次扫描全部记录。

Validation / 验证

• cd OmniProxyBackend && go test -count=1 ./...
• cd OmniProxyBackend && go vet ./...
• cd frontend && npm test (67 tests)
• cd frontend && npm run build
• cd OmniProxyBackend && wails build -clean -ldflags "-X main.appVersion=v1.2.8"
• node scripts/check-lines.mjs
• git diff --check
• v1.2.8-beta.5 Windows, macOS universal, and publish jobs on Go 1.26.5
• SHA256 verification of all four public v1.2.8-beta.5 release assets

---

Full Changelog / 完整更新日志: v1.2.7...v1.2.8

OmniProxy v1.2.7

v1.2.7 - Codex authorization, accurate usage, and responsive desktop UX / Codex 授权、准确用量与响应式桌面体验

This stable release consolidates the v1.2.7 beta line. It automates Codex browser authorization, protects local configuration from expired credentials, corrects live usage and quota statistics, and improves dashboard responsiveness and update-page behavior.

本正式版整合 v1.2.7 beta 系列改动：自动完成 Codex 浏览器授权，避免过期凭据污染本地配置，修正实时用量与额度统计，并完善仪表盘响应式布局和更新发布页行为。

Features / 新特性

• Automatic Codex authorization detection: OmniProxy detects the local OAuth callback, exchanges credentials, and imports the authorized account without requiring an extra confirmation action.
  • 自动识别 Codex 授权结果：OmniProxy 会检测本地 OAuth 回调，自动交换凭据并导入授权账号，无需再次手动确认。
• Refreshable browser login session: The Codex login dialog can invalidate an old PKCE session and generate a fresh authorization link in place.
  • 可刷新的浏览器登录会话：Codex 登录弹窗可直接废弃旧 PKCE 会话并生成新的授权链接。
• Clearer responsive dashboard: Account health uses an aligned three-column summary, while dashboard cards adapt cleanly across wide, medium, and narrow windows.
  • 更清晰的响应式仪表盘：账号健康状态采用对齐的三栏概览，仪表盘卡片可适配宽屏、中等宽度和窄窗口。

Bug Fixes / 问题修复

• Expired Codex auth safeguards: One-click configuration refreshes expired credentials before import, skips credentials that cannot be refreshed, and selects the next usable account when available.
  • Codex 过期凭据保护：一键配置会在导入前刷新过期凭据，跳过无法刷新的凭据，并在可用时自动选择下一个正常账号。
• Accurate WebSocket usage accounting: Long-lived Codex WebSocket sessions count connections and completed-response token usage at the correct lifecycle points and record the actual reported model.
  • 准确的 WebSocket 用量统计：Codex 长连接会在正确生命周期分别统计连接请求和完整响应 token，并记录消息报告的实际模型。
• Exact and safer quota estimates: Decimal upstream quota percentages are preserved, and weekly cost estimates use conservative thresholds and supported pricing assumptions.
  • 精确且更稳妥的额度预估：保留上游小数额度百分比，周费用预估采用更保守的阈值和有依据的价格口径。
• Release page action no longer downloads: “打开发布页” uses only the GitHub Release page URL, while installer downloads remain a separate action.
  • 打开发布页不再触发下载：“打开发布页”只使用 GitHub Release 页面地址，安装包下载保持为独立操作。
• No fixed-width dashboard overflow: The application shell no longer enforces a 1240px minimum width, preventing clipped status information and horizontal overflow.
  • 修复固定宽度溢出：应用外壳不再强制 1240px 最小宽度，避免状态信息裁切和横向溢出。

Breaking Changes / 不兼容更新

• None / 无

Upgrade Guidance / 升级说明

• Existing configuration, account pools, request history, billing summaries, and theme state remain compatible with v1.2.6 and the v1.2.7 beta line.
  • 现有配置、账号池、请求历史、费用汇总和主题状态与 v1.2.6 及 v1.2.7 beta 系列保持兼容。
• Beta users can upgrade directly to v1.2.7. The stable version compares newer than every v1.2.7 beta tag.
  • Beta 用户可直接升级到 v1.2.7；正式版版本顺序高于所有 v1.2.7 beta 标签。
• The macOS universal DMG remains unsigned and not notarized. Quit OmniProxy before replacing the app in Applications.
  • macOS Universal DMG 仍未签名且未公证；替换 Applications 中的应用前请先退出 OmniProxy。

Refactor & Performance / 重构与优化

• Consolidated light and dark theme tokens, removed obsolete cascade overrides, and separated dashboard component styles into focused files.
  • 收敛明暗主题变量，移除过时的层叠覆盖，并将仪表盘组件样式拆分为职责明确的文件。
• Split request counting from token-consumption recording and added a non-blocking OAuth session status API for Wails and the local control API.
  • 拆分请求计数与 token 消耗记录，并为 Wails 和本地控制 API 增加非阻塞 OAuth 会话状态接口。
• Added regression coverage for auth refresh, callback detection, WebSocket accounting, quota estimates, responsive update actions, and release-page URL selection.
  • 补充凭据刷新、回调检测、WebSocket 统计、额度预估、响应式更新操作和发布页地址选择的回归测试。

Validation / 验证

• cd OmniProxyBackend && go test -count=1 ./...
• cd OmniProxyBackend && go vet ./...
• cd frontend && npm test (65 tests)
• cd frontend && npm run build
• cd OmniProxyBackend && wails build
• node scripts/check-lines.mjs
• scripts/verify-release-assets.ps1 against v1.2.7-beta.5
• Windows and macOS universal beta CI
• v1.2.7-beta.5 Windows install, upgrade, in-app update, and uninstall validation
• v1.2.7-beta.5 macOS Apple Silicon launch and replacement-install validation
• git diff --check

---

Full Changelog / 完整更新日志: v1.2.6...v1.2.7

OmniProxy v1.2.6

v1.2.6 - Codex quota workflow and resilient configuration / Codex 额度流程与可靠配置

This stable release consolidates the v1.2.6 beta line. It improves Codex browser login and reset-credit workflows, follows the quota windows actually returned by Codex, refreshes the desktop visual system, and makes proxy configuration changes recover safely.

本正式版整合 v1.2.6 beta 系列改动，完善 Codex 浏览器登录和额度刷新卡流程，根据 Codex 实际返回的窗口展示额度，更新桌面视觉体系，并让代理配置变更具备可靠的失败恢复能力。

Features / 新特性

• Codex login dialog: Browser login now runs through an in-app dialog with visible OAuth state, a copyable authorization link, explicit browser opening, and CPA-compatible credential import.
  • Codex 登录弹窗：浏览器登录通过应用内弹窗展示 OAuth 状态，提供可复制的授权链接、明确的浏览器打开操作，并以 CPA 兼容格式导入凭证。
• Account-level reset credits: Each Codex account exposes a compact reset-credit action with availability, nearest expiry, upstream errors, history, and confirmed redemption details.
  • 账号级额度刷新卡：每个 Codex 账号提供紧凑的刷新卡入口，展示可用数量、最近到期、上游错误、历史记录和确认使用详情。
• Dynamic Codex quota windows: Five-hour and weekly quota are shown only when the corresponding window is returned by the Codex API.
  • 动态 Codex 额度窗口：仅在 Codex API 返回对应窗口时展示 5 小时额度或周额度。

Bug Fixes / 问题修复

• Shared Codex conversation history: Official Codex and OmniProxy gateway profiles use the same built-in provider namespace instead of splitting conversation history.
  • 共享 Codex 对话记录：官方 Codex 与 OmniProxy 网关配置使用相同的内置 provider 命名空间，不再拆分对话记录。
• Transactional proxy-port switch: A new proxy port is bound before the running server is replaced. An unavailable port leaves the existing proxy and persisted configuration intact.
  • 事务式代理端口切换：先成功绑定新代理端口，再替换运行中的服务；端口不可用时保留现有代理和持久化配置。
• Scoped configuration rollback: Failed control-port changes no longer restart an unchanged proxy, and failed runtime changes restore the previous in-memory and persisted configuration.
  • 限定配置回滚范围：控制端口变更失败时不再重启未变化的代理；运行时变更失败会恢复旧的内存配置和持久化配置。
• Stale refresh protection: Older realtime, billing, and history requests can no longer overwrite newer data or report obsolete errors.
  • 过期刷新保护：较旧的实时、账单和历史请求不再覆盖新数据或显示已经过期的错误。
• Account-local reset-credit details: Reset-credit content stays with the selected account and no longer changes the height of the quota-card grid.
  • 账号内刷新卡详情：刷新卡内容保持在所属账号上下文内，不再改变额度卡片网格高度。

Breaking Changes / 不兼容更新

• None / 无

Refactor & Performance / 重构与优化

• Gemini visual system: Unified light and dark theme colors, layered surfaces, shadows, typography fallbacks, spacing, and page hierarchy across the desktop console.
  • Gemini 视觉体系：统一桌面控制台的浅色/深色主题、分层表面、阴影、字体回退、间距和页面层级。
• Bounded upstream responses: Codex and Zo non-streaming response conversion is limited to 32 MiB to avoid unbounded memory consumption.
  • 限制上游响应体：Codex 和 Zo 非流式响应转换限制为 32 MiB，避免无界内存占用。
• Retention and shutdown consistency: History retention updates only after database pruning succeeds, and timed-out proxy shutdowns are force-closed to avoid orphan listeners.
  • 保留与关闭一致性：数据库清理成功后才更新历史保留设置；代理关闭超时后强制清理，避免孤立监听。

Validation / 验证

• cd OmniProxyBackend && go test -count=1 ./...
• Proxy configuration regression tests repeated 20 times
• cd OmniProxyBackend && go vet ./...
• cd frontend && npm test (62 tests)
• cd frontend && npm run build
• node scripts/check-lines.mjs
• Windows and macOS universal CI
• git diff --check

---

Full Changelog / 完整更新日志: v1.2.5...v1.2.6

OmniProxy v1.2.5

v1.2.5 - Codex login and quota reset credits / Codex 登录与额度刷新卡

This stable release consolidates the v1.2.5 beta line. It improves Codex App account setup, adds browser-based Codex login, and brings quota reset-credit availability, history, expiry, and confirmed redemption into each account card.

本正式版整合 v1.2.5 beta 系列改动，完善 Codex App 账号接入，新增 Codex 浏览器登录，并在各账号卡片内提供额度刷新卡数量、记录、到期时间和确认使用入口。

Features / 新特性

• Codex browser login: Account Management can open the OpenAI authorization page, complete a PKCE flow through a loopback-only callback, and automatically add or update the matching OpenAI auth.json account.
  • Codex 浏览器登录：账号管理页可打开 OpenAI 授权页，通过仅本机可访问的回调完成 PKCE 流程，并自动新增或更新对应 OpenAI auth.json 账号。
• Codex App account setup: One-click setup prefers a usable ChatGPT account identity and automatically falls back to local API login when the auth pool has no suitable auth.json account.
  • Codex App 账号接入：一键配置优先使用可用的 ChatGPT 账号身份；auth 池没有合适的 auth.json 账号时，自动回退到本地 API 登录。
• Backend account scheduling: The client login identity does not pin requests to one account. OmniProxy continues to select and inject the real backend credential for each request.
  • 后端账号调度：客户端登录身份不会将请求固定到单个账号；每次请求仍由 OmniProxy 选择并注入真实后端凭据。
• Quota reset credits: Codex quota cards show available reset-credit count and nearest expiry, with account-local history for grant, expiry, redemption time, and current status.
  • 额度刷新卡：Codex 额度卡片展示可用刷新卡数量和最近到期时间，并在所属账号内展示发放、到期、使用时间和当前状态记录。
• Confirmed redemption: Consuming a reset credit requires explicit confirmation, uses an idempotent redemption request ID, and refreshes the five-hour quota and credit details afterwards.
  • 确认后使用：使用刷新卡前需要明确确认，请求采用幂等兑换 ID，成功后自动刷新 5 小时额度和刷新卡详情。

Bug Fixes / 问题修复

• Account-local reset-credit history: The View records action now expands and collapses history inside the corresponding Codex account card instead of rendering it below the entire quota page.
  • 账号内展开刷新卡记录：「查看记录」现在会在对应 Codex 账号卡片内展开或收起记录，不再显示到整个额度页底部。
• Empty auth-pool setup: Codex one-click setup no longer stops with an error when no usable auth.json account is available.
  • 空 auth 池配置：没有可用 auth.json 账号时，Codex 一键配置不再报错中止。
• Windows CI cleanup stability: Proxy tests now flush delayed token persistence before temporary directories are removed, avoiding intermittent cleanup failures on Windows runners.
  • Windows CI 清理稳定性：代理测试会在删除临时目录前刷新延迟 Token 持久化，避免 Windows Runner 偶发清理失败。

Breaking Changes / 不兼容更新

• None / 无

Refactor & Performance / 重构与优化

• Reset-credit detail caching: Detailed credit records are cached briefly and invalidated immediately after redemption, avoiding an extra upstream request on every quota refresh.
  • 刷新卡详情缓存：详细记录会短时缓存，并在使用后立即失效，避免每次额度刷新都额外请求上游。
• Stable release cleanup: Publishing a stable version now removes GitHub Release entries and assets for its matching beta line while preserving beta Git tags and release notes under docs/releases/.
  • 正式版发布清理：正式版发布后会清理同版本线的 Beta GitHub Release 及附件，同时保留 Beta Git 标签和 docs/releases/ 下的发布说明。

Validation / 验证

• cd OmniProxyBackend && go test ./...
• cd frontend && npm test
• cd frontend && npm run build
• node scripts/check-lines.mjs
• git diff --check

---

Full Changelog / 完整更新日志: v1.2.4...v1.2.5

OmniProxy v1.2.4

v1.2.4 - GPT-5.6 model family / GPT-5.6 模型家族适配

This stable release promotes the GPT-5.6 model-family support validated in v1.2.4-beta.1. The Forge provider integration tested in later beta builds is not included.

本次正式版发布在 v1.2.4-beta.1 中验证过的 GPT-5.6 模型家族适配。后续 beta 测试过的 Forge 厂商集成不包含在本正式版中。

Features / 新特性

• GPT-5.6 model family: Added gpt-5.6-sol, gpt-5.6-terra, and gpt-5.6-luna to Codex setup, gateway routing, OpenCode, Pi, and frontend model selectors.
  • GPT-5.6 模型家族：在 Codex 一键配置、网关路由、OpenCode、Pi 和前端模型选择器中新增 gpt-5.6-sol、gpt-5.6-terra 与 gpt-5.6-luna。
• Role-aware defaults: New installations use Sol for flagship Codex workloads and Terra for the balanced OpenAI-compatible route, while previous models remain available.
  • 按角色设置默认模型：新安装使用 Sol 处理旗舰 Codex 工作负载，OpenAI 兼容入口默认使用更均衡的 Terra，同时继续保留旧模型选项。
• GPT-5.6 billing rules: Added Sol, Terra, and Luna token pricing, prompt-cache write/read pricing, and long-context multipliers for billing and weekly quota estimates.
  • GPT-5.6 计费规则：为费用账单和周额度估算新增 Sol、Terra、Luna Token 价格、提示词缓存写入/读取价格及长上下文倍率。

Bug Fixes / 问题修复

• Codex model aliases: Normalize the GPT-5.6 family alias and effort-suffixed model names before forwarding Chat Completions requests to the Codex Responses backend.
  • Codex 模型别名：将 GPT-5.6 家族别名及带 effort 后缀的模型名归一化后，再转发到 Codex Responses 后端。
• Model context profiles: Codex profiles now write the correct 1.05M context for Sol/Terra and 400K context for Luna.
  • 模型上下文配置：Codex profile 现在为 Sol/Terra 写入 1.05M 上下文、为 Luna 写入 400K 上下文。
• Provider scope: Removed Forge configuration, credentials, routing, UI entries, and documentation from the stable build.
  • 厂商范围：正式版已移除 Forge 配置、凭证、路由、界面入口和相关文档。

Breaking Changes / 不兼容更新

• None / 无

Validation / 验证

• cd OmniProxyBackend && go test ./...
• cd frontend && npm test
• cd frontend && npm run build
• node scripts/check-lines.mjs
• git diff --check

---

Full Changelog / 完整更新日志: v1.2.3...v1.2.4

OmniProxy v1.2.3

v1.2.3 - Codex workspace identities and quota UI / Codex 工作区身份与额度页优化

This stable release consolidates the validated v1.2.3 beta line. It improves local gateway operations, preserves multiple Codex workspace credentials under the same ChatGPT email by matching account_id, refines quota-page workspace display and selection, and fixes token record labels for same-email workspaces.

本正式版汇总已验证的 v1.2.3 beta 版本线：增强本地网关运维能力，使用 account_id 区分同一个 ChatGPT 邮箱下的多个 Codex 工作区凭证，优化额度页工作区展示与选择，并修复同邮箱工作区的 token 记录标识问题。

Features / 新特性

• Codex workspace identities: Codex auth.json import and sync now match email together with account_id, allowing multiple workspace credentials under the same ChatGPT account to coexist.
  • Codex 工作区身份：Codex auth.json 导入和同步现在同时匹配邮箱与 account_id，同一个 ChatGPT 账号下的多个工作区凭证可以并存。
• Quota workspace grouping: The quota page groups same-email Codex workspaces into one account card, with workspace switching controls and visible account_id context.
  • 额度页工作区聚合：额度页会把同邮箱 Codex 工作区聚合到同一账号卡片，并提供工作区切换控件和可见的 account_id 上下文。
• Workspace select all: Same-email Codex workspace groups provide 全选, so all enabled workspaces under one account can be selected together.
  • 工作区全选：同邮箱 Codex 工作区分组新增 全选，可一次选中该账号下所有已启用工作区。
• Gateway operations: Added config snapshots, provider model catalog sync, gateway route diagnostics, route strategy presets, and diagnostics bundle export.
  • 网关运维增强：新增配置快照、厂商模型目录同步、网关路由诊断、路由策略预设和诊断包导出。

UX / 体验优化

• Cleaner quota cards: Refined same-email Codex workspace controls into a compact row so workspace numbers, switch buttons, and account status stay aligned.
  • 额度卡片优化：将同邮箱 Codex 工作区控件整理为更紧凑的一行，让工作区编号、切换按钮和账号状态保持对齐。
• Credential visibility: Account and quota views surface Codex account_id without exposing access tokens or API keys.
  • 凭据可见性：账号与额度视图会展示 Codex account_id，同时不暴露 access token 或 API key。
• Dashboard stability: Removed the live active-request panel that could disturb the dashboard grid; current connection counts remain visible in the top metrics.
  • 仪表盘稳定性：移除可能扰乱仪表盘网格的实时“活跃请求”面板，顶部“当前连接”指标仍保留。

Bug Fixes / 问题修复

• Token record identity: Request history, retry logs, WebSocket records, and route diagnostics now use a workspace-aware Codex display name when an account_id is available, avoiding same-email workspaces being visually merged.
  • Token 记录身份：请求历史、重试日志、WebSocket 记录和路由诊断在存在 account_id 时会使用工作区感知的 Codex 展示名，避免同邮箱工作区在记录中混淆。
• Codex auth sync: Re-importing or one-click syncing the same Codex account_id updates the existing credential, while different account_id values remain separate.
  • Codex 凭据同步：重复导入或一键同步相同 Codex account_id 会更新已有凭据；不同 account_id 会保留为独立账号。
• Quota workspace actions: Selecting an account and refreshing quota continue to target the currently displayed workspace credential after same-email grouping.
  • 额度工作区操作：同邮箱聚合后，选择账号与刷新额度仍会作用于当前展示的工作区凭据。

Refactor & Performance / 重构与优化

• Proxy routing structure: Split shared routing and service behavior into smaller focused files for route matching, target resolution, HTTP service handling, retry records, WebSocket proxying, and diagnostics.
  • 代理路由结构：将共享路由与服务逻辑拆分到更聚焦的文件，覆盖路由匹配、目标解析、HTTP 服务处理、重试记录、WebSocket 代理和诊断。
• Quota display model: Added a tested quota grouping helper so API keys and different emails remain separate while same-email Codex workspaces can fold together.
  • 额度展示模型：新增带测试的额度分组工具，API Key 和不同邮箱保持独立，同邮箱 Codex 工作区可折叠展示。
• Dashboard cleanup: Removed unused active-request panel helpers and styles after the layout simplification.
  • 仪表盘清理：布局简化后同步移除未使用的活跃请求面板辅助逻辑和样式。

Breaking Changes / 不兼容更新

• None / 无

Validation / 验证

• cd OmniProxyBackend && go test ./...
• cd frontend && npm run build
• cd frontend && npm test
• cd frontend && npm run check:lines
• git diff --check
• GitHub Actions release builds for v1.2.3-beta.1 through v1.2.3-beta.5

---

Full Changelog / 完整更新日志: v1.2.2...v1.2.3

OmniProxy v1.2.2

v1.2.2 - Model routing, client setup, and release hardening / 模型路由、客户端配置与发布加固

This stable release consolidates the validated v1.2.2 beta line. It separates one-click client setup from backend gateway routing, adds model-level backend chains, improves Codex and Claude Code official model defaults, and hardens beta/stable release assets and update diagnostics.

本正式版汇总已验证的 v1.2.2 beta 版本线：明确一键客户端配置与后端网关路由的职责边界，新增按模型配置后端链，优化 Codex 与 Claude Code 官方默认模型，并加固 beta/正式版发布附件和更新诊断。

Features / 新特性

• Model-level gateway routing: Added model routes that map a client-sent model name to a primary backend and ordered fallback backends.
  • 模型级网关路由：新增按模型名匹配的路由，可为客户端发送的模型配置主后端和有序备用后端。
• Client setup separation: One-click setup now controls which model a coding tool sends; Gateway Routing controls which backend serves that model.
  • 客户端配置职责分离：一键配置只控制编程工具发送的模型；网关路由负责该模型使用哪个后端。
• Codex multi-model setup: Codex one-click setup supports up to four selected models and writes generated profile files for them.
  • Codex 多模型配置：Codex 一键配置最多支持 4 个模型，并写入对应的生成配置文件。
• Official model defaults: Codex defaults to GPT-5.5, GPT-5.4, and GPT-5.4 mini; Claude Code defaults to Anthropic's official default alias.
  • 官方模型默认值：Codex 默认选择 GPT-5.5、GPT-5.4 和 GPT-5.4 mini；Claude Code 默认使用 Anthropic 官方 default 别名。
• DeepSeek 1M option: Added a distinct deepseek-v4-pro[1m] client model for Claude Code 1M context activation.
  • DeepSeek 1M 选项：新增独立的 deepseek-v4-pro[1m] 客户端模型，用于激活 Claude Code 1M 上下文。

UX / 体验优化

• Automatic credential matching: Gateway route credential selectors default to automatic matching, so OmniProxy can choose a usable credential type for the backend.
  • 凭据自动匹配：网关路由凭据选择默认自动匹配，由 OmniProxy 根据后端可用凭据选择类型。
• Preserved route edits: Unsaved gateway route edits are preserved across page navigation and refreshes triggered by other actions.
  • 保留未保存路由编辑：切换页面或其他操作触发刷新时，会保留尚未保存的网关路由修改。
• Simplified routing page: The model routing page now follows a model-first flow: search/select model, choose primary backend, then add ordered fallback backends.
  • 简化路由页面：模型路由页改成模型优先流程：搜索/选择模型、选择主后端、再添加有序备用后端。
• Pure route browsing: Opening the route page or switching selected models no longer creates hidden route entries until the user edits the route.
  • 无副作用浏览路由：打开路由页或切换模型不会隐式创建配置，只有实际编辑时才写入草稿。

Bug Fixes / 问题修复

• Codex automatic credentials: Codex routes in automatic credential mode prefer active Codex auth.json credentials, but fall back to any active OpenAI credential before using low-quota credentials.
  • Codex 自动凭据：Codex 自动凭据模式会优先使用活跃的 Codex auth.json，但会先回退到任意活跃 OpenAI 凭据，再考虑低额度凭据。
• Credential selection persistence: Fixed selected credential types such as Codex auth.json reverting to API key after navigating away and back.
  • 凭据选择持久性：修复选择 Codex auth.json 等凭据类型后，切换页面再回来又变回 API Key 的问题。
• DeepSeek model identity: deepseek-v4-pro[1m] is preserved as an independent client-side model route key while upstream DeepSeek requests normalize to deepseek-v4-pro.
  • DeepSeek 模型身份：deepseek-v4-pro[1m] 会作为独立客户端模型路由键保存，上游 DeepSeek 请求仍归一化为 deepseek-v4-pro。
• Quota and routing guardrails: Fixed model-aware routing edge cases and low-quota selected-account switching behavior found during the beta line.
  • 额度与路由保护：修复 beta 验证中发现的按模型路由边界和已选账号低额度切换问题。

Release & Update / 发布与更新

• macOS DMG assets: Beta and stable releases now publish unsigned universal macOS DMG assets and SHA256 checksum files.
  • macOS DMG 附件：beta 和正式版发布会附加未签名 universal macOS DMG 及 SHA256 校验文件。
• Release workflow validation: Release builds run line-limit checks, backend tests, and frontend tests before packaging assets.
  • 发布流程验证：发布构建在打包前会运行行数限制检查、后端测试和前端测试。
• Update diagnostics: Added user-facing update diagnostics and a release checklist covering beta validation, install/update/uninstall checks, and asset verification.
  • 更新诊断：新增面向用户的更新诊断和发布检查清单，覆盖 beta 验证、安装/更新/卸载检查和附件校验。

Breaking Changes / 不兼容更新

• None / 无

Validation / 验证

• go test ./...
• cmd /c npm test
• cmd /c npm run build
• node scripts/check-lines.mjs
• git diff --check
• GitHub Actions release builds for v1.2.2-beta.1 through v1.2.2-beta.7

---

Full Changelog / 完整更新日志: v1.2.1...v1.2.2

OmniProxy v1.2.1

v1.2.1 - Prem gateway, AnyRouter, and Codex quota refinements / Prem 网关、AnyRouter 与 Codex 额度优化

This stable release consolidates the validated v1.2.1 beta line. It adds AnyRouter and Prem gateway support, improves Codex quota display and cost estimates, and fixes Prem's OpenAI plus Anthropic dual-protocol routing through the official local confidential-proxy.

本正式版汇总已验证的 v1.2.1 beta 版本线，新增 AnyRouter 与 Prem 网关支持，优化 Codex 额度展示和美元预估，并修复 Prem 通过官方本机 confidential-proxy 使用 OpenAI 与 Anthropic 双协议时的路由兼容性。

Features / 新特性

• AnyRouter gateway: Added AnyRouter as a local gateway target with OpenAI/Codex and Anthropic-compatible entrypoints.
  • AnyRouter 网关：新增 AnyRouter 本地网关目标，支持 OpenAI/Codex 与 Anthropic 兼容入口。
• Prem gateway: Added Prem account management, local forwarding, validation, and Codex one-click setup through OmniProxy.
  • Prem 网关：新增 Prem 账号管理、本地转发、账号校验，以及通过 OmniProxy 配置 Codex 的一键接入。
• Prem Claude Code setup: Added a dedicated Claude Code Prem quick action using http://127.0.0.1:<port>/prem/anthropic and the Prem model deepseek-v4-pro.
  • Prem Claude Code 一键配置：新增 Claude Code 的 Prem 快捷配置，使用 http://127.0.0.1:<端口>/prem/anthropic 和 Prem 模型 deepseek-v4-pro。
• Codex quota estimates: Added cache-aware weekly Codex quota cost estimates and clearer quota labels for Codex Team accounts.
  • Codex 额度预估：新增缓存感知的 Codex 周额度美元预估，并为 Codex Team 账号显示更准确的额度标签。

Bug Fixes / 问题修复

• Prem dual-protocol routing: Fixed Prem forwarding so OpenAI-compatible requests route to /openai/v1/... and Anthropic-compatible requests route to /anthropic/v1/... on the local confidential proxy.
  • Prem 双协议路由：修复 Prem 转发路径，OpenAI 兼容请求会转到本机 confidential proxy 的 /openai/v1/...，Anthropic 兼容请求会转到 /anthropic/v1/...。
• Prem proxy startup: Updated automatic Prem startup to run official @premai/api-sdk confidential-proxy --no-attest --compat both and pass enabled Prem API keys through PREM_API_KEY.
  • Prem 代理启动：自动启动 Prem 代理时改为运行官方 @premai/api-sdk confidential-proxy --no-attest --compat both，并通过 PREM_API_KEY 传入启用的 Prem API Key。
• Codex usage stability: Fixed Codex quota estimate edge cases, history storage behavior, and scheduler stability issues found during the beta line.
  • Codex 使用稳定性：修复 beta 验证过程中发现的 Codex 额度预估边界、历史记录存储行为和调度稳定性问题。

Breaking Changes / 不兼容更新

• None / 无

Refactor & Performance / 重构与优化

• Gateway compatibility: Existing saved Prem Base URLs ending in /v1, /openai/v1, or /anthropic/v1 are normalized before forwarding.
  • 网关兼容性：已保存的 Prem Base URL 如果以 /v1、/openai/v1 或 /anthropic/v1 结尾，转发前会自动归一到本机代理根地址。
• Tests and docs: Added focused coverage and help content for AnyRouter, Prem OpenAI/Codex, Prem Anthropic, Prem validation, and one-click client configuration.
  • 测试与文档：补充 AnyRouter、Prem OpenAI/Codex、Prem Anthropic、Prem 校验和一键客户端配置的测试与帮助说明。

Validation / 验证

• git diff --check
• go test ./...
• cmd /c npm test
• cmd /c npm run build
• C:\Users\mimanchi\go\bin\wails.exe build
• GitHub Actions release builds for v1.2.1-beta.1 through v1.2.1-beta.12

---

Full Changelog / 完整更新日志: v1.2.0...v1.2.1

OmniProxy v1.2.0

v1.2.0 - macOS preview, release workflow hardening, and MiMo region routing / macOS 预览、发布流程加固与 MiMo 区域路由

This stable release consolidates the validated v1.2.0 beta line. It adds the initial macOS desktop implementation and credential protection path, hardens the GitHub Actions release workflow, reduces the initial frontend bundle, and fixes Xiaomi MiMo Token Plan routing for all documented service centers.

本正式版汇总已验证的 v1.2.0 beta 版本线，加入初步 macOS 桌面实现与凭据保护路径，加固 GitHub Actions 发布流程，降低前端首包体积，并修复 Xiaomi MiMo Token Plan 在各文档服务中心的路由处理。

Features / 新特性

• macOS desktop platform support: Added a Darwin application bundle configuration, macOS menu bar controls, login launch support, and macOS task automation primitives for existing workflows.
  • macOS 桌面平台支持：新增 Darwin 应用包配置、macOS 菜单栏控制、开机自启支持，并为已有任务流程补充 macOS 自动化能力。
• macOS credential protection: macOS credentials are encrypted through an application master key stored in the current user's Keychain.
  • macOS 凭据保护：macOS 上的账号凭据通过保存在当前用户 Keychain 中的应用主密钥进行加密。
• DMG-aware update handling: macOS update checks can select darwin-universal.dmg assets and open the verified DMG instead of using the Windows restart-install flow.
  • DMG 更新适配：macOS 更新检测可选择 darwin-universal.dmg 资产，并在校验后打开 DMG，而不是使用 Windows 重启安装流程。

Improvements / 优化

• Release workflow hardening: The release workflow now avoids the third-party GitHub Release action, prepares Go directly where needed, and uses newer GitHub Actions runtimes.
  • 发布流程加固：发布流程移除第三方 GitHub Release action，在需要时直接准备 Go 工具链，并使用更新的 GitHub Actions 运行时。
• macOS preview validation: Beta releases now build a universal macOS app and attach an ad-hoc signed unsigned-testing DMG for external validation.
  • macOS 预览验证：Beta 发布现在会构建 universal macOS 应用，并附加 ad-hoc 签名的未签名测试 DMG 供外部验证。
• Frontend bundle split: Page and modal styles were moved into lazy-loaded component chunks, reducing the initial CSS and JavaScript loaded by the desktop UI.
  • 前端拆包：页面与弹窗样式迁移到按需加载的组件 chunk 中，降低桌面 UI 初始加载的 CSS 与 JavaScript。
• Dialog loading optimization: Token editor and batch import dialogs are now async components, so secondary dialog code is loaded only when needed.
  • 弹窗加载优化：账号编辑和批量导入弹窗改为异步组件，相关代码只在需要时加载。

Bug Fixes / 问题修复

• MiMo Token Plan service centers: Xiaomi MiMo Token Plan credentials now explicitly support CN, SGP, and AMS service-center choices.
  • MiMo Token Plan 服务中心：Xiaomi MiMo Token Plan 凭据现在明确支持 CN、SGP 和 AMS 服务中心。
• AMS upstream routing: Added Europe AMS OpenAI-compatible and Anthropic-compatible Base URLs and route Token Plan requests according to the selected account's service center.
  • AMS 上游路由：新增欧洲 AMS 的 OpenAI 兼容和 Anthropic 兼容 Base URL，并根据所选账号所属服务中心转发 Token Plan 请求。
• Configuration defaults: Existing configs load with default AMS endpoints when the new fields are absent.
  • 配置默认值：既有配置缺少新增 AMS 字段时会自动使用默认入口加载。

Compatibility / 兼容性

• Attention: Existing Windows behavior remains unchanged, including DPAPI credential protection and the restart-to-install update handoff.
  • 必读：现有 Windows 行为保持不变，包括 DPAPI 凭据保护和重启安装更新交接流程。
• Attention: The public stable release asset remains Windows-first until a Developer ID signed and notarized macOS package is available. The macOS unsigned DMG remains a beta/testing artifact.
  • 必读：在具备 Developer ID 签名并完成公证的 macOS 安装包前，公开正式版附件仍以 Windows 安装包为主。macOS 未签名 DMG 仍属于 beta / 测试附件。
• Attention: Existing China and SGP MiMo Token Plan accounts keep their current routing behavior; previously accepted overseas/global aliases continue to map to SGP.
  • 必读：已有中国区和 SGP MiMo Token Plan 账号保持原有路由行为；此前接受的 overseas/global 别名继续映射到 SGP。
• Attention: No proxy route or credential format breaking changes are expected in this stable release.
  • 必读：本正式版预计没有代理路由或凭据格式不兼容更新。

Validation / 验证

• go test ./...
• npm test
• npm run build
• git diff --check
• GitHub Actions release builds for v1.2.0-beta.1 through v1.2.0-beta.4
• Local Windows Dev executable build and launch with the omniproxy_dev profile

---

Full Changelog / 完整更新日志: v1.1.8...v1.2.0