v0.5.2

新增从 GitHub Release 选择历史 Codex 版本，以及对 DMG、ZIP、MSIX 离线安装包的原生校验与降级安装。
Adds historical Codex selection from GitHub Releases plus native verification and downgrade installs for offline DMG, ZIP, and MSIX packages.

✨ 亮点 · Highlights

• 选择安装版本：直接读取 Wangnov/codex-app-mirror 的分页 GitHub Release 历史，按当前平台与架构列出可安装版本；确认页会明确展示版本、安装包、来源与更新策略，再执行升级、降级或全新安装。
  Choose an install version: browse the paginated Wangnov/codex-app-mirror GitHub Release history filtered for the current platform and architecture, then confirm the exact version, asset, source, and update policy before upgrading, downgrading, or installing fresh.

• 安装离线 Release 包：可以选择已经从 GitHub Release 下载到本机的 macOS .dmg / .zip 或 Windows .msix。离线路径不请求 GitHub，也不使用 Sparkle；管理器会锁定确认时的 SHA-256，并在安装前再次核对同一文件，同时验证平台签名、包身份、架构与版本。
  Install offline Release packages: select a macOS .dmg / .zip or Windows .msix already downloaded from GitHub Releases. The offline path makes no GitHub request and does not use Sparkle; the manager pins the SHA-256 shown at confirmation, rechecks the same file before installation, and verifies its platform signature, package identity, architecture, and version.

• 真实降级与更新控制：历史安装可同时选择是否阻止 Codex 自更新。macOS 通过原子替换与健康检查完成安装，失败自动回滚；Windows 支持 MSIX 强制降级，并在系统无法部署 MSIX 时使用已验证的便携安装回退。
  Real downgrades with update control: historical installs can also keep Codex self-updates blocked. macOS uses an atomic swap with health checks and automatic rollback, while Windows supports forced MSIX downgrades and a verified portable fallback when MSIX deployment is unavailable.

🐛 修复 · Fixes

• 安装中断后可安全恢复：安装事务会在破坏性重命名和回滚前持久记录状态，并把所选自更新策略与最终安装结果一起恢复，避免崩溃或断电后误判已安装版本、丢失回滚材料或留下错误策略。
  Recover safely after interruption: install transactions now persist state before destructive renames and rollback, and recover the selected self-update policy from the final on-disk verdict, avoiding false success, lost rollback material, or the wrong policy after a crash or power loss.

• 暂停下载锁定原目标：恢复普通更新或历史版本下载时会继续用户最初确认的精确版本、构建、安装路径和 Windows 安装方式；即使后台版本列表已刷新，也不会静默改装成新的最新版。
  Paused downloads retain the confirmed target: resuming either a normal update or a historical install keeps the exact version, build, install path, and Windows route originally approved, even if the latest catalog changes in the meantime.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• chore(deps): bump base64 from 0.22.1 to 0.23.0 in /src-tauri by @dependabot[bot] in #239
• chore(deps-dev): bump globals from 17.7.0 to 17.8.0 by @dependabot[bot] in #244
• chore(deps): bump libc from 0.2.188 to 0.2.189 in /src-tauri by @dependabot[bot] in #242
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.3 to 6.0.4 by @dependabot[bot] in #243
• chore(deps-dev): bump jsdom from 29.1.1 to 30.0.1 by @dependabot[bot] in #241
• fix(themes): harden composer scroll ownership by @Wangnov in #248
• fix(themes): invalidate composer overflow cache by @Wangnov in #249
• chore(deps): bump actions/attest from 4.2.0 to 4.2.1 by @dependabot[bot] in #250
• chore(deps-dev): bump vite from 8.1.5 to 8.2.0 by @dependabot[bot] in #251
• chore(deps-dev): bump @types/react from 19.2.17 to 19.2.18 by @dependabot[bot] in #252
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.4 to 6.0.5 by @dependabot[bot] in #254
• chore(deps-dev): bump @types/react-dom from 19.2.3 to 19.2.4 by @dependabot[bot] in #253
• feat(themes): add CSP-safe motion video intros by @Wangnov in #226
• feat: install historical GitHub Release builds by @Wangnov in #257
• chore(release): bump version to 0.5.2 by @Wangnov in #258

Full Changelog: v0.5.1...v0.5.2

v0.5.1

修复 Codex 26.727 桌面版中的皮肤主画布兼容问题，同时保留旧版 Codex 与既有皮肤包的兼容性。
Restores the themed main canvas on Codex 26.727 while preserving compatibility with older Codex builds and existing skin packages.

🐛 修复 · Fixes

• 恢复新版 Codex 的完整主画布皮肤：Codex 26.727 调整了主内容区的 DOM 标记，并在页面前方加入了另一个 main 元素，导致管理器把皮肤舞台挂到错误节点。现在优先识别新版稳定标记，并为既有 main.main-surface 皮肤规则提供由运行时管理、可安全清理的兼容层；背景大图、人物立绘、Hero、任务页内容样式与响应式布局均会落到正确的主画布。
  Restore the complete themed main canvas on current Codex: Codex 26.727 changed the main-content DOM marker and introduced another main element earlier in the page, causing the skin stage to mount on the wrong node. The manager now prefers the current stable marker and adds a runtime-owned, safely removable compatibility layer for existing main.main-surface rules, keeping wallpapers, character art, hero elements, task content, and responsive layout on the actual canvas.

• 保持旧版与旧皮肤包兼容：旧版 Codex 的 main.main-surface 路径继续作为回退，现有 .codexskin 包无需重新打包；停用或切换皮肤时只移除管理器自己添加的兼容标记。
  Preserve older clients and skin packages: the legacy main.main-surface path remains the fallback, existing .codexskin packages do not need repacking, and disabling or switching skins removes only compatibility markers owned by the manager.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• docs(release): backfill v0.4.1 notes with #213/#214/#215 fixes by @Wangnov in #225
• chore(deps): refresh project dependencies by @Wangnov in #237
• fix(themes): support Codex 26.727 main surface by @Wangnov in #246
• chore(release): bump version to 0.5.1 by @Wangnov in #247

Full Changelog: v0.5.0...v0.5.1

v0.5.0

皮肤管理迎来一次大升级：批量管理、详情、卡片/列表视图、按来源与自定义分组的本地整理、按题材分组的商店浏览，外加预览图缓存与完整工作台居中弹窗；同时跟上 Codex 26.707 / 26.715 的原生主题结构，Windows 更新直接安装已校验的本地包，应用菜单栏也随皮肤主题化。
A big upgrade to skin management — batch actions, details, card/list views, local organizing by source and custom groups, store browsing grouped by theme, plus preview caching and a centered modal in the expanded workbench — while tracking Codex 26.707 / 26.715's native-theme internals, installing verified local packages directly on Windows updates, and theming the Windows app menu bar.

✨ 亮点 · Highlights

• 皮肤批量管理与整理：皮肤页支持卡片 / 列表视图切换、搜索、翻页、全选与批量删除（带确认弹窗），点击可查看每款皮肤的详情。本地页现在按来源自动分区——「商店安装」与「本地」（开发目录里的皮肤）各成一组；你还能新建自定义分组、把任意皮肤归入并重命名 / 删除，分组持久保存，多选模式下一键加入分组或移出。
  Batch management and organizing: the Skins page gains card/list views, search, pagination, select-all and batch delete (with a confirm dialog), plus a details view per skin. The Local tab auto-partitions by source — "Installed" (from the store) and "Local" (your dev directory) — and you can create custom groups, drop any skin into them, rename/delete them (persisted), and add-to-group / remove in multi-select mode.

• 商店按题材分组浏览：商店页顶部新增题材分类（动漫 / 影视明星 / 科技人物 / 国风原创 / 游戏等），配合标签做二级筛选；新增刷新按钮随时重新拉取目录；封面预览图缓存到本地（按皮肤版本失效），再次进入商店更快。分类数据随商店 catalog 逐步补齐。
  Store browsing grouped by theme: theme-category chips (anime / stars / tech icons / guofeng / games…) with tags as a secondary filter, a refresh button to re-fetch the catalog, and cover previews cached on disk (invalidated by skin version) for snappier revisits. Category data fills in as the store catalog is updated.

• 完整工作台下的居中弹窗：在可调整大小的完整工作台窗口里，皮肤详情从底部半屏 sheet 变成真正的居中弹窗；紧凑窗口仍保留顺手的底部 sheet。
  Centered modal in the expanded workbench: skin details open as a proper centered modal instead of a bottom sheet; the compact window keeps the bottom sheet.

• 适配 Codex 26.707 / 26.715 的原生主题结构：Codex 26.715 把设置存储模块挪进了懒加载模块，管理器现在按版本选择适配器读写原生配色，两个适配器都会做结构校验并互相兜底，更新期间的版本漂移也能覆盖，原生主题在新版 Codex 上重新可用。
  Adapt to Codex 26.707 / 26.715's native-settings layout: 26.715 moved its settings storage into a lazy module, so the manager now picks an adapter by version to read/write native palettes, with structural verification and fallback on both — covering version drift during updates. Native theming works again on the newest Codex.

• Windows 更新直装 + 应用菜单主题化：Windows 更新现在直接安装已下载并通过 checksum + 签名校验的本地 MSIX，不再空等 Microsoft Store 重新下载；一次窄范围的 UAC 恢复 + 超时看门狗保证可靠，UAC 被拒时保留运行中的 Codex。此外，Codex 26.715+ 把 Windows 应用菜单（文件 / 编辑 / 视图 / 帮助）放到了独立的 DOM 行，现在这条菜单栏也会跟随皮肤主题化，不再露出原始顶栏。
  Windows updates install directly + the app menu is themed: a Windows update now installs the already-downloaded, checksum-+-signature-verified local MSIX instead of waiting on the Store, with a narrowly scoped UAC recovery + timeout watchdog and the running Codex preserved if UAC is declined. And Codex 26.715+ puts its Windows app menu (File / Edit / View / Help) in a separate DOM row, which the skin now themes too — no more stock top strip.

🐛 修复 · Fixes

• 加固商店皮肤删除：删除时显式拒绝符号链接，避免 store 目录里的链接把删除引向别处；删除完成后键盘焦点落到稳定控件而非页面 body。
  Harden store-skin deletion: refuse a symlink so a link planted in the store can't redirect the delete, and land keyboard focus on a stable control after a delete.

• 原生主题试穿失败时如实报错：此前 native 主题热切换失败会静默降级成「仅 CSS」，试穿看着成功、其实原生配色没生效；现在会明确报错。
  Native try-on fails honestly: a failed native hot-swap used to silently degrade to CSS-only; it now surfaces the error.

• 顶部横幅可手动关闭：操作错误、守护进程错误等顶部横幅新增 ✕，可随时关掉；并修复多选勾选框在悬停时闪烁、中文输入法回车误提交、提交后键盘焦点丢失等一批交互问题。
  Dismissible banners and interaction polish: action/daemon error banners gain a ✕, and a batch of fixes for hover-flickering select checkboxes, IME Enter mis-submits, and post-submit focus loss.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• docs(release): backfill v0.4.1 notes with pet / curl / run-state fixes by @Wangnov in #217
• feat(themes): skin management — views, batch delete, details, bottom-pinned actions by @Wangnov in #218
• fix(themes): refuse symlink store packages on delete + restore focus by @Wangnov in #221
• fix(windows): install verified mirror MSIX without Store wait by @Wangnov in #220
• fix(themes): support Codex 26.707 and 26.715 adapters by @Wangnov in #219
• fix(themes): cover Windows application menu by @Wangnov in #222
• feat(themes): skin management expansion — refresh, cache, grouping, modal by @Wangnov in #223
• chore(release): bump version to 0.5.0 by @Wangnov in #224

Full Changelog: v0.4.1...v0.5.0

v0.4.1

跟上 Codex 26.715 的 ChatGPT 改名：皮肤的风格化标志按 Codex 版本自动匹配，新版显示重制的单行「ChatGPT」标志，旧版仍显示原「ChatGPT WORK」标志。
Keeping up with Codex 26.715's ChatGPT rebrand: a skin's styled wordmark now matches the running Codex version — newer builds show a regenerated single-line "ChatGPT" logo, older ones still show the original "ChatGPT WORK" logo.

🐛 修复 · Fixes

• 适配 Codex 26.715 的工作区标志改名:Codex 26.715 起把工作区标志从「ChatGPT 工作 / ChatGPT Work」精简为「ChatGPT」,皮肤原本按双行「ChatGPT WORK」绘制的风格化标志因此对不上、无法显示。管理器现在在渲染进程内识别 Codex 版本,按版本挑选对应素材——26.715+ 显示重新生成的单行「ChatGPT」标志,≤26.707 仍显示原「ChatGPT WORK」标志,同一套皮肤对新旧 Codex 都正确。
  Adapt to Codex 26.715's workspace-wordmark rename: from 26.715 the workspace title shrank from "ChatGPT 工作 / ChatGPT Work" to a bare "ChatGPT", so a skin's styled logo — drawn for the two-line "ChatGPT WORK" — no longer matched and stopped showing. The manager now detects the Codex version in the renderer and serves the version-appropriate art: 26.715+ shows a regenerated single-line "ChatGPT" logo, ≤26.707 still shows the original "ChatGPT WORK" logo, so one skin package renders correctly on both old and new Codex.

• 在线商店 26 款皮肤同步重制标志:商店全部认证皮肤已更新到 v1.2.0,每套都随包附带重新生成的单行「ChatGPT」标志,并保留原标志向后兼容——在皮肤页更新即可。
  Store skins refreshed with the new logos: all 26 certified store skins are bumped to v1.2.0, each shipping the regenerated single-line "ChatGPT" logo alongside the original for backward compatibility — just update from the Skins board.

• 修复皮肤把桌面宠物染成不透明方块:Codex 的桌面宠物是独立的透明浮层窗口,却和主界面共用 app:// 地址与 Codex 标题,此前换肤会把它当成普通界面一起注入——给浮层加上背景色后,原本透明的宠物就变成一块不透明的实心矩形。管理器现在会识别并跳过宠物浮层渲染器,宠物保持透明,皮肤只作用于主界面。
  Skins no longer paint the desktop pet into an opaque block: Codex's desktop pet is a standalone transparent overlay window that happens to share the app:// scheme and Codex title with the main shell, so theming used to inject into it too — and a background color turned the transparent overlay into a solid rectangle. The manager now detects and skips pet overlay renderers, keeping the pet transparent while the skin applies only to the main UI.

• 消除换肤时闪出的 curl 控制台黑窗(Windows):管理器是 GUI 程序,但拉取皮肤目录和预览要调用系统 curl,此前在 Windows 上每次请求都会弹出一个可见的 curl.exe 控制台黑窗。这些调用现在带上 CREATE_NO_WINDOW 标志静默执行,浏览皮肤商店不再闪黑框。
  No more curl console flashes while theming (Windows): the manager is a GUI app but shells out to system curl to fetch the skin catalog and previews, and on Windows every request used to pop a visible curl.exe console window. Those calls now carry the CREATE_NO_WINDOW flag and run silently, so browsing the Skins board no longer flashes black boxes.

• 更新后不再擅自拉起已关闭的 Codex(Windows):Windows 更新流程会启动一次 Codex 做安装健康检查,此前无论更新前 Codex 是否在运行,这个检查进程都会被保留下来,于是更新前明明关着的 Codex 会在更新后被强行打开。管理器现在会先探测 Codex 的运行状态:原本开着的更新后继续保持打开,原本关着的在健康检查后连整个 Electron 进程树一并关闭。
  Updates no longer force-open a Codex you had closed (Windows): the Windows update flow launches Codex once as an install health check, and it used to keep that process alive no matter whether Codex was running beforehand — so a Codex you had closed would reappear after updating. The manager now probes Codex's run state first: one that was open stays open, and one that was closed has its whole Electron process tree shut down after the health check.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix(themes): exclude pet renderers from injection by @Wangnov in #215
• fix(windows): hide theme curl console windows by @Wangnov in #213
• fix(windows): preserve Codex run state after updates by @Wangnov in #214
• chore(release): bump version to 0.4.1 by @Wangnov in #216

Full Changelog: v0.4.0...v0.4.1

v0.4.0

给 Codex 桌面版换装：全新「皮肤」板块带来素材化 UI 主题、秒级热换肤与在线皮肤商店，管理器窗口也学会了展开成桌面工作台。
Dress up the Codex desktop app: a new Skins board brings asset-based UI themes, instant hot skin switching and an online skin store — and the manager window now expands into a desktop workbench.

✨ 亮点 · Highlights

• 全新「皮肤」板块（macOS 先行）:为官方 Codex 桌面版换上素材化 UI 皮肤——背景、图标、装饰层与配色整体换装。注入只发生在运行中的渲染进程,不改动 Codex 的任何文件与签名,关闭主题即回到原生外观。
  A new Skins board (macOS first): dress the official Codex desktop app in asset-based UI skins — backdrops, icons, chrome layers and palettes as one look. Injection happens only in the live renderer; no Codex file or signature is ever touched, and turning the theme off returns to stock.

• 秒级热换肤,原生外观一起切:试穿、换肤、应用在 Codex 运行时直接热切换,连官方原生配色、代码高亮主题与亮暗模式都随皮肤即时联动,无需重启。试穿随时可还原;「完全恢复」把 config.toml 精确还原到你自己的原生设置,过程带事务与崩溃自恢复。
  Instant hot skin switching, native appearance included: try-on, switch and apply happen live while Codex runs — the official palette, code-highlighting theme and light/dark mode follow the skin instantly, no restart. Try-ons are always revertible, and Full Restore puts config.toml back to your own native settings exactly, guarded by a transaction with crash recovery.

• 在线皮肤商店:内置商店对接 skins.agentsmirror.com,26 款认证皮肤支持截图预览、多字段搜索、一键安装与版本更新,下载全程 sha256 校验。皮肤生态由开放标准仓库 awesome-codex-skins 驱动,欢迎投稿。
  An online skin store: the built-in store talks to skins.agentsmirror.com — 26 certified skins with screenshot previews, multi-field search, one-click install and version updates, every download sha256-verified. The ecosystem is driven by the open-standard awesome-codex-skins repository; submissions welcome.

• .codexskin 皮肤包:皮肤以单文件包分发,拖进窗口或点击导入即可安装;包内自带真实截图预览、作者、版本与验证元数据,导入前完成结构校验。
  The .codexskin package: skins ship as a single file — drop it on the window or click import; packages carry real-screenshot previews plus author/version/verification metadata and are structurally validated before install.

• 桌面工作台形态:紧凑小窗一键展开为可自由缩放的桌面工作台——左侧导航栏、窗口最大化(按钮或双击标题栏)、拖拽调整并记住你的尺寸;皮肤画廊在宽窗下自动多列展示。
  A desktop workbench mode: the compact popover expands into a freely resizable workbench — navigation rail, window maximize (button or title-bar double-click), drag-to-resize with size memory, and the skin gallery flows into more columns on wider windows.

🐛 修复 · Fixes

• 设置页恢复操作更清爽:安装恢复相关的控件重新编排,只在需要时出现对应操作,不再堆满整屏。
  Cleaner recovery controls in Settings: install-recovery actions are reorganized and only surface when applicable, instead of crowding the page.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix(settings): simplify recovery controls by @Wangnov in #199
• feat(shell): expanded workbench window mode with navigation rail by @Wangnov in #200
• feat(themes): Codex UI theme engine with CDP injection and gallery by @Wangnov in #201
• fix(themes): replace reqwest with a raw loopback HTTP reader in the CDP client by @Wangnov in #202
• feat(themes): .codexskin delivery format — metadata, previews, import by @Wangnov in #203
• feat(themes): online skin store wired to skins.agentsmirror.com by @Wangnov in #204
• feat(themes): skin gallery polish — tabs, search, lightbox, single-action cards by @Wangnov in #205
• fix(shell): workbench edge-to-edge, maximize permission, collapsed lists by @Wangnov in #206
• fix(themes): store update tracking, double-click zoom, storage rows by @Wangnov in #208
• chore(deps): refresh project dependencies by @Wangnov in #209
• fix(themes): keep project icons themed across toggles by @Wangnov in #207
• feat(themes): native theme apply as a recoverable transaction, hot-first by @Wangnov in #210
• chore(release): bump version to 0.4.0 by @Wangnov in #211

Full Changelog: v0.3.3...v0.4.0

v0.3.3

Windows 免安装版更新可靠性补丁：残留辅助进程或安全软件短暂占用文件时，目录替换会自动重试并保留精确诊断。
A Windows portable-update reliability patch: directory replacement now retries transient locks from helper processes or security scanners and preserves precise diagnostics.

🐛 修复 · Fixes

• 短暂文件占用不再直接打断更新:Codex 退出或 Defender / EDR 扫描造成 Windows 错误 5、32、33 时，旧版本备份、新版本就位和回滚恢复会进行有界重试，而不是第一次重命名失败就终止。
  Transient file contention no longer aborts an update immediately: when Codex shutdown or Defender / EDR scanning causes Windows errors 5, 32, or 33, backup, replacement, and rollback renames use bounded retries instead of failing on the first attempt.

• 残留辅助进程也会被正确关闭:更新前会识别当前安装目录内的所有可执行进程，不再只依赖 Codex.exe / ChatGPT.exe 文件名；匹配仍严格限定到托管安装根目录，不会影响其他位置的 ChatGPT。
  Leftover helper processes are closed correctly: the updater now discovers every executable process under the managed install root instead of relying only on Codex.exe / ChatGPT.exe names, while the exact-root boundary keeps separate ChatGPT installs out of scope.

• 安装位置校验更贴近真实替换:选择路径时会在父目录执行非空目录重命名探测，并把可能的退避等待移出界面与异步运行线程；失败日志会记录具体操作边界、系统错误码和源/目标目录状态。
  Install-location validation now mirrors the real swap: it probes a non-empty directory rename in the parent directory, keeps retry waits off UI and async runtime threads, and logs the exact operation boundary, OS error code, and source/destination state on failure.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix(windows): harden portable directory replacement by @Wangnov in #197
• chore(release): bump version to 0.3.3 by @Wangnov in #198

Full Changelog: v0.3.2...v0.3.3

v0.3.2

受限 Windows 环境与故障恢复补丁：便携版更新不再依赖 PowerShell 关闭 Codex，任务恢复与镜像交付也更可靠。
A constrained-Windows and recovery patch: portable updates no longer need PowerShell to close Codex, while task recovery and mirror delivery are more reliable.

✨ 亮点 · Highlights

• 原生外壳更稳:原生菜单覆盖 11 种语言；第二次打开应用会恢复被最小化或隐藏的窗口，切换语言也会立即刷新菜单。
  A steadier native shell: native menus cover all 11 locales; opening the app again restores a minimized or hidden window, and language changes refresh menus immediately.

• 故障后接着处理:renderer 崩溃或重载后会重新读取正在进行的任务；安装/卸载部分完成时保留尚未处理的恢复步骤，并用完整本地化文案引导精确重试。
  Recovery without losing the task: after a renderer crash or reload, the app reconnects to the active operation; partial install/uninstall outcomes keep unfinished recovery steps and provide fully localized, targeted retry guidance.

🐛 修复 · Fixes

• 受限 Windows 策略不再卡住更新:Authenticode 与 MSIX 报告兼容 PowerShell ConstrainedLanguage；便携版更新改用原生 Win32 API 关闭当前安装目录内的 Codex，不再因 PowerShell 被策略禁止而报错 786，也不会误关独立的 ChatGPT 应用。
  Restricted Windows policies no longer block updates: Authenticode and MSIX reports work in PowerShell ConstrainedLanguage, while portable updates now close only the Codex process under the managed install root through native Win32 APIs — avoiding policy error 786 without touching the separate ChatGPT app.

• 暂停与取消失败可见、可重试:后端拒绝或请求发送失败时保留真实任务状态与错误提示；旧任务的迟到请求不会影响新的下载或安装。
  Pause and cancel failures stay visible and retryable: backend refusals and delivery failures preserve the real operation state and error, while stale requests from an older task cannot affect a newer download or install.

• 崩溃与 WebView 边界更安全:根界面异常时提供可恢复的静态后备页；正式构建阻止打印、Reload、DevTools、危险导航与意外新窗口，同时保留输入框复制粘贴和受控的外部链接打开。
  Safer crash and WebView boundaries: a recoverable static fallback covers root-renderer failures; production builds block print, reload, DevTools, unsafe navigation, and unexpected windows while preserving text editing and validated external links.

• 镜像最新版不会倒退:R2 作为权威端、IHEP 作为跟随端进行单调版本发布，并在上线前核验两个后端及公开路由，避免 latest.json 降级或双镜像分叉。
  Mirror latest cannot move backward: R2 is the authority and IHEP follows a monotonic promotion, with both backends and public routes verified before publication to prevent latest.json downgrades or split mirrors.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: 本版 CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: This release's CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix(windows): support constrained PowerShell sessions by @Wangnov in #179
• fix(release): prevent latest mirror downgrade and verify both backends by @Wangnov in #176
• fix(i18n): complete safety-critical recovery copy in all 11 locales by @Wangnov in #172
• fix(reliability): keep pause/cancel failures visible and recoverable by @Wangnov in #174
• fix(shell): enforce WebView trust boundaries and root crash recovery by @Wangnov in #173
• feat(shell): align native menus, activation, startup readiness, and macOS smoke by @Wangnov in #175
• docs(signing): publish SignPath application prerequisites by @Wangnov in #180
• fix(windows): remove PowerShell from portable process shutdown by @Wangnov in #182
• chore(release): bump version to 0.3.2 by @Wangnov in #184

Full Changelog: v0.3.1...v0.3.2

v0.3.1

可靠性与诚实状态补丁：操作锁、崩溃可恢复安装、失败可诊断、设置契约与 Windows 健康检查。
Reliability and honest-state patch: operation leases, crash-safe installs, diagnosable failures, settings contract, and Windows launchability checks.

✨ 亮点 · Highlights

• 阶段感知的退出与崩溃恢复:下载/安装有明确阶段;提交中途不可中断退出,崩溃后按事务日志继续/回滚/保留人工材料。
  Phase-aware quit and crash recovery: install/update phases are explicit; point-of-no-return blocks quit, and startup recovers from a durable transaction log.

• 任务丢失后可接回:页面 Reload / renderer 重建后查询 OperationSnapshot,按 operation id 重建进度与操作,迟到事件不会污染新任务。
  Reattach after renderer loss: reload queries an operation snapshot and resubscribes by id so late events cannot corrupt a new task.

• 配置健康与部分成功真相:Settings 展示配置健康并可从 .bak 恢复;安装/卸载附属步骤失败时结构化呈现,支持只重试附属动作(清用户数据仍需确认)。
  Config health and partial outcomes: Settings surfaces config health and restore-from-backup; partial install/uninstall results are structured with ancillary-only recovery (purge still confirms).

🐛 修复 · Fixes

• 启动 Codex 不再卡死 UI:Windows 启动改为 async + 按钮 loading,防止二次点击。
  Launch no longer freezes the UI: Windows launch is async with a loading button to block double-clicks.

• 生产环境隐藏浏览器右键菜单:正式构建不再出现 Print/Reload 等 WebView 菜单;输入框仍可复制粘贴。
  Production context menus: release builds suppress browser chrome menus; text fields keep copy/paste.

• 操作锁贯穿任务全生命周期:已认领的 detached lease 不会仅因 5 分钟墙钟超时被回收。
  Operation leases last the full task: claimed detached leases no longer expire by wall-clock stale timeout alone.

• Windows 装后真能启动:外部探测有超时与清理;MSIX 做真实激活与存活窗口;失败路径会关掉误拉起的进程再回退 portable。
  Windows post-install launchability: bounded probes, real MSIX activation + liveness, and process cleanup before portable fallback.

• 失败面本地化与可访问性:稳定错误码映射 11 语言;详情可展开;弹层在大字号下可滚动;焦点与 live-region 更稳。
  Localized failures and a11y: stable codes map across 11 locales; expandable detail; sheets scroll at large text; focus and live regions improved.

• 设置契约更诚实:加载期间不可误改被覆盖;空自定义源/代理与运行态一致;定时检查/系统代理/自动源文案与真实能力对齐。
  Honest settings contract: no hydration clobber, empty custom modes coerce consistently, and copy matches runtime guarantees.

• 发布质量:CI 独立跑 mac/win engine 测试;Windows 安装包生命周期冒烟与 Authenticode 校验路径已就绪。
  Release quality: CI runs engine crate tests independently; Windows packaged smoke and Authenticode verify path are prepared.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 当前没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 的 Tauri updater 签名只校验更新字节,不代表 Windows 发行者身份。SignPath Foundation 申请仍在审核。参见 代码签名政策与 Windows signing and verification。
Windows signing status: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed, so SmartScreen may warn on first run. The Tauri updater signature in .sig / latest.json verifies update bytes only and is not Windows publisher identity. The SignPath Foundation application is pending. See the code signing policy and Windows signing and verification.

隐私 · Privacy: 隐私政策 · Privacy policy

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix(win): make Codex launch async with button loading state by @Wangnov in #162
• fix(ui): disable browser context menus in production WebViews by @Wangnov in #153
• fix(reliability): keep claimed operation leases valid for the full task lifetime by @Wangnov in #154
• ci(windows): test engine crates and packaged lifecycle, and prepare Authenticode signing by @Wangnov in #161
• fix(settings): align periodic checks and network promises with runtime behavior by @Wangnov in #160
• fix(windows): bound external probes and verify post-install launchability by @Wangnov in #157
• fix(frontend): localize failure surfaces and harden text scaling and focus by @Wangnov in #159
• fix(state): expose configuration health and truthful partial-operation outcomes by @Wangnov in #158
• feat(reliability): add phase-aware quit guards and crash-safe install recovery by @Wangnov in #155
• fix(reliability): reconnect the UI to active operations after renderer loss by @Wangnov in #156
• chore(release): bump version to 0.3.1 by @Wangnov in #165

Full Changelog: v0.3.0...v0.3.1

v0.3.0

跟上上游 Codex 并入 ChatGPT 品牌后的身份变化——按产品身份识别、安装与启动,不再依赖文件名。
Follow Codex through the ChatGPT rebrand: detect, install, and launch by product identity, not by filename.

✨ 亮点 · Highlights

• 兼容 ChatGPT 品牌合并后的 Codex:上游把桌面 Codex 并入 ChatGPT 品牌(macOS 可能是 ChatGPT.app,Windows 入口可能是 ChatGPT.exe),产品身份仍是 com.openai.codex / OpenAI.Codex。Manager 现在按身份识别,不会把 ChatGPT Classic 当成 Codex,也不会漏掉改名后的新版。
  ChatGPT-rebranded Codex support: upstream merged desktop Codex into the ChatGPT brand (ChatGPT.app / ChatGPT.exe are possible on disk, identity remains com.openai.codex / OpenAI.Codex). Manager now keys off identity so Classic is never mistaken for Codex, and renamed installs still work.

• 安装与启动走真实入口:Windows portable/MSIX 从清单解析入口可执行文件,旧布局(Codex.exe)与新布局(ChatGPT.exe)都能检测、启动和健康检查;macOS 安装后仍规范到本地 Codex.app 目录名。
  Real entry resolution: Windows portable/MSIX paths read the manifest entry exe so both legacy (Codex.exe) and rebranded (ChatGPT.exe) layouts detect, launch, and health-check correctly; macOS still normalizes installs to a local Codex.app directory name.

• 歧义安装更安全:多个血统安装并存时会上报歧义并引导明确选择,破坏性操作前重新校验路径、版本与身份;macOS 对仍处于 App Translocation 的实例 fail-closed。
  Safer ambiguous installs: coexisting lineage installs report ambiguity and ask for an explicit pick; destructive steps re-verify path, build, and identity; macOS fails closed on live App Translocation.

• 自研图标与交互动效:界面图标改为自研描边图标,并补上轻量 hover 微动画,视觉更统一。
  In-house icons and micro-motion: UI icons move to a custom stroke set with light hover animations for a more consistent look.

🐛 修复 · Fixes

• Windows 更新服务器连不上(证书吊销离线):当 Schannel 报 CRYPT_E_REVOCATION_OFFLINE 时自动用 --ssl-no-revoke 重试,不再误报“无法连接更新服务器”。
  Windows update fetch when certificate revocation is offline: on Schannel CRYPT_E_REVOCATION_OFFLINE, Manager retries with --ssl-no-revoke instead of a false “cannot reach update server” failure.

• 主题与系统外观:减少启动时主题闪烁,系统浅/深色切换时跨页平滑过渡。
  Theme and system appearance: less FOUC on launch, and smoother cross-page transitions when the OS light/dark theme changes.

• 无障碍:开关与单选组补齐可访问名称与语义,读屏更准确。
  Accessibility: switches and radio groups get proper accessible names and semantics for screen readers.

• Windows 焦点重检:切回 Manager 窗口时会重新核对安装状态,避免界面停留在过时结论。
  Windows focus re-check: returning focus to Manager revalidates install status so the UI does not stick on a stale conclusion.

• 文案与动效细节:标题行间距在动画后恢复正确;退出确认 sheet 的滑出动画锚点更稳;全局错误提示更克制、少误导。
  Copy and motion polish: headline spacing stays correct after animation; quit-confirm sheet slide is better anchored; global error surfaces are calmer and less misleading.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 当前没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 里的 Tauri updater 签名只用于应用内自更新的字节校验,不代表 Windows 发行者信任。详情见 Windows signing and verification。
Windows signing status: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed yet, so SmartScreen may warn on first run; the Tauri updater signature in .sig / latest.json verifies in-app update bytes only and is not Windows publisher trust. See Windows signing and verification.

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• fix: anchor quit sheet slide animation by @Wangnov in #120
• chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in #121
• chore(deps): bump tauri from 2.11.3 to 2.11.4 in /src-tauri by @dependabot[bot] in #122
• chore(deps-dev): bump @tauri-apps/cli from 2.11.3 to 2.11.4 by @dependabot[bot] in #123
• chore(deps): bump lucide-react from 1.21.0 to 1.22.0 by @dependabot[bot] in #124
• chore(deps): bump uuid from 1.23.3 to 1.23.4 in /src-tauri by @dependabot[bot] in #125
• chore(deps-dev): bump vite from 8.1.0 to 8.1.1 by @dependabot[bot] in #126
• feat(ui): in-house stroke icons with hover micro-animations by @Wangnov in #132
• fix(a11y): switch names, real radio semantics, keyboard nav by @Wangnov in #133
• test(home): lock down the Mac/Win home state machines by @Wangnov in #134
• fix(robustness): calmer global errors, contract guards, safer interpolation, event-driven sheet exit by @Wangnov in #135
• chore(ux): fix theme FOUC, live system-theme cross-fade, cleanup by @Wangnov in #136
• refactor(home): extract shared progress/download/focus pieces + Windows focus re-check by @Wangnov in #137
• chore(ci): add ESLint (react-hooks + jsx-a11y) as a blocking frontend gate by @Wangnov in #138
• chore(deps): bump tauri from 2.11.4 to 2.11.5 in /src-tauri by @dependabot[bot] in #128
• chore(deps-dev): bump vitest from 4.1.9 to 4.1.10 by @dependabot[bot] in #129
• chore(deps-dev): bump vite from 8.1.1 to 8.1.3 by @dependabot[bot] in #130
• fix(ui): restore headline spacing after animation by @Wangnov in #141
• fix(win): retry Schannel revocation-offline update fetches by @Wangnov in #143
• fix: follow Codex lineage through the ChatGPT rebrand by bundle/package identity by @Wangnov in #142
• chore(release): bump version to 0.3.0 by @Wangnov in #163

Full Changelog: v0.2.4...v0.3.0

v0.2.4

这一版让 Manager 更容易接管已经存在的 Codex,并把 Windows 更新失败提示变得更可读。
This release makes it easier to adopt an existing Codex install, and makes Windows update failures easier to understand.

✨ 亮点 · Highlights

• 手动选择已有 Codex: 当首页未检测到 Codex 时,现在可以手动选择自定义位置里的 Codex;Manager 会先验证版本信息,再接管后续检查和更新。
  Choose an existing Codex manually: when Home cannot detect Codex, you can point Manager at a custom install location; it verifies the version first, then manages future checks and updates.

• 主屏幕保持干净: 手动选择入口只在“未检测到 Codex”时出现,自动探测仍然保持无感。
  Home stays clean: the manual picker only appears when Codex is not detected, while background probing remains quiet.

🐛 修复 · Fixes

• Windows 更新错误文案: 安装阶段失败时不再把底层英文引擎错误直接显示在主红框里,而是展示稳定、可操作的本地化提示。
  Windows update copy: install-stage failures no longer dump raw English engine text into the main error banner; the app now shows stable, actionable localized copy.

• Windows 目标进程处理: 便携更新会先请求目标 Codex 正常退出;若目标进程仍占用安装目录,会只对该安装目录下的 Codex 进程做强制结束,避免“没有替换任何文件”的失败循环。
  Windows target process handling: portable updates still request a graceful close first; if target Codex processes keep the install directory busy, Manager force-closes only those processes under that install root to avoid the no-files-replaced failure loop.

• 接管记录优先级: Windows 现在和 macOS 一样优先使用最新的接管记录,避免历史记录抢走刚刚手动选择的位置。
  Adoption precedence: Windows now matches macOS by preferring the latest managed record, so older records cannot steal focus from a newly selected install.

📦 安装与升级 · Install & Upgrade

已经安装? 打开应用即可收到本次更新——macOS 只下载版本间的增量,校验失败自动回滚。
Already installed? The app offers this update in-app — macOS pulls only the delta, with automatic rollback.

平台 · Platform	下载 · Download(国内直连 · China-reachable)
macOS · Apple Silicon	CodexAppManager_aarch64.dmg
macOS · Intel	CodexAppManager_x86_64.dmg
Windows · x64	CodexAppManager_x64-setup.exe
Windows · ARM64	CodexAppManager_arm64-setup.exe

Windows 签名状态: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe 当前没有 Authenticode 代码签名,首次运行可能出现 SmartScreen 提示;.sig / latest.json 里的 Tauri updater 签名只用于应用内自更新的字节校验,不代表 Windows 发行者信任。详情见 Windows signing and verification。
Windows signing status: CodexAppManager_x64-setup.exe / CodexAppManager_arm64-setup.exe are not Authenticode-signed yet, so SmartScreen may warn on first run; the Tauri updater signature in .sig / latest.json verifies in-app update bytes only and is not Windows publisher trust. See Windows signing and verification.

核验下载: 本页 Assets 带有 SHA256SUMS;Windows 用 Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 或替换为 ARM64 文件名,macOS 用 shasum -a 256 CodexAppManager_aarch64.dmg,再与 SHA256SUMS 比对。
Verify downloads: This release includes SHA256SUMS in Assets; on Windows run Get-FileHash .\CodexAppManager_x64-setup.exe -Algorithm SHA256 or swap in the ARM64 filename, and on macOS run shasum -a 256 CodexAppManager_aarch64.dmg, then compare with SHA256SUMS.

# macOS · Homebrew
brew install --cask wangnov/tap/codex-app-manager

镜像直链恒指向最新版本;如需本页对应的历史版本,请使用下方 Assets。.app.tar.gz / .sig / latest.json 是自动更新器的工件,手动安装请选 .dmg / .exe。
Mirror permalinks always resolve to the latest release — for this exact version use the assets below. .app.tar.gz / .sig / latest.json belong to the auto-updater; pick the .dmg / .exe for manual installs.

What's Changed

• [codex] Handle Windows Codex internal versions by @Wangnov in #118
• feat: adopt existing Codex installs by @Wangnov in #119

Full Changelog: v0.2.3...v0.2.4