概述
上游仓库 steipete/CodexBar 于 2026-08-09 发布了 v0.49.0，比我们当前基线 UPSTREAM_VERSION=v0.47.0 更新。
当前基线（version.env -> UPSTREAM_VERSION）：v0.47.0（UPSTREAM_SYNC_DATE: 2026-08-03）
本 issue 涵盖版本：v0.49.0（2026-08-09）
v0.49.0 完整 Release Notes（上游原文，2026-08-09）
Added
- Fireworks: track 30-day rated billing spend with an API key and account slug (#2687). Thanks @x0mh0x!
Fixed
- PTY probes: abort output-overflow children through a bounded process-group kill path, avoiding minute-long cleanup stalls under load (refs #2792).
- PTY runner: drain short-lived commands to terminal closure after exit, preventing false empty probe results when output is still buffered.
- Cost store: give the store actor's custom serial executor an
isIsolatingCurrentContext() implementation — macOS 26+ runtimes consult it before checkIsolated(), and its default cannot see through DispatchQueue.sync, so every synchronous store bridge tripped "Incorrect actor executor assumption" and the app died on launch.
- Codex: reject Standard/Fast pricing rows that exceed canonical fork-deduplicated usage, preventing copied fork rows and their Fast surcharge from inflating cost estimates (#2754). Thanks @1328189205 for the report and @Yuxin-Qiao for the initial fix and regression-test approach!
- Claude: stop rotating Claude Code's own refresh-token chain on keychain-only installs — ownership evidence is now tri-state with indeterminate treated as CLI-owned, so delegated refreshes can never invalidate credentials CodexBar cannot read (#2745, refs #2634). Thanks @avenoxai!
- Plugins: run the QuickJS worker and TypeScript transpiler on Thread subclasses instead of Thread(block:) closures — binaries built with the Xcode 26.3 SDK inferred @mainactor on those blocks, and macOS runtimes that enforce dynamic isolation crashed (SIGTRAP) on the first plugin fetch; this was the deterministic macOS CI shard crash since #2775 and could crash shipped builds at runtime.
- Plugins: the QuickJS HTTP/cookie bridge now starts a request's per-call timeout when the transport actually begins executing instead of when it is scheduled, so short deadlines (like OpenRouter's one-second key fast join) no longer fire spuriously under CPU load (refs #2778).
- Codex: preserve recently modified cost-cache sessions across complete local calendar-day windows, avoiding needless rediscovery and rescans (#2764). Thanks @Yuxin-Qiao!
- Claude: restore OAuth usage on Claude Code 2.1.x via an explicit, default-off "Allow reading Claude Code's credentials" opt-in that reopens the direct Keychain read, freshness sync, and refresh verification together, plus an automatic Claude CLI usage fallback (labeled with reduced fidelity) when consent is off (#2634). Thanks @Astro-Han, @kes02, and @Komunikuji for the deep diagnostics!
- Codex: price persisted usage from token classes when reports are read, so a cold rebuild racing the models.dev catalog can no longer permanently bake fallback rates into SQLite (#2772).
- OpenRouter: keep optional key-quota enrichment on its one-second production fast join while making degraded results explicit and preventing loaded CI parity runs from mistaking the fallback snapshot for a golden mismatch (fixes #2778).
- Codex: the SQLite cost store now writes each save cycle inside one transaction, so a crash or kill mid-save can never leave session rows updated against stale day aggregates — the previous state survives intact, matching the old JSON path's atomic file replace (refs #2760).
- Provider plugins: run each QuickJS context on a dedicated 4 MiB-stack thread, refresh stack bounds at every JavaScript entry, and leave 3 MiB of native headroom so deep recursion raises a clean stack-overflow error instead of crashing.
- Codex: SQLite cost saves no longer rescan every stored row and snapshot per file — baseline counts and file lookups are precomputed once, cutting a large-corpus (1,700+ sessions) save pass from minutes of CPU to seconds (refs #2760).
- Codex: restore JSON-cache retention semantics lost in the SQLite cutover — discovery pruning now reaches the scanner's round-tripped payload so deleted files stop resurfacing, the row budget never sacrifices in-window or recently active sessions, and fork-parent protection again drops stale lineage-only parents (refs #2760).
- Codex: the SQLite cost store no longer deletes the whole database on transient failures — lock contention from a concurrent CLI/app writer, disk-full, or a constraint violation now preserve history and only genuine corruption or schema drift triggers a rebuild, which is now logged (refs #2760).
- Claude: stop rotating Claude Code refresh tokens on keychain-only installs, and unblock refresh after the OAuth token lineage changes (#2745, refs #2689, #2634).
- Menu: let long metric reset and pace details wrap to two lines instead of truncating, without clipping cached card heights (#2742). Thanks @Yuxin-Qiao!
- Menu: let compact metric detail and reset rows wrap to a second line instead of truncating, so non-English locales keep the full pace and reset information (refs #2182). Thanks @Yuxin-Qiao!
- Kimi: use official usage lane names and hide the Code 7-day row only when it duplicates the primary seven-day quota (matching percentage and reset) (#2741). Thanks @Yuxin-Qiao!
- Menu bar: keep custom reset-countdown tokens aligned with the opened menu by using the exact display clock instead of rounding to the wall minute (#2735). Thanks @hyuntaedotkim!
- Codex: apply a manual reset even when the provider omits the redeemed credit from the next inventory — both samples must corroborate consumption, and the exemption stays one-shot (#2728). Thanks @endless7!
- CLI: ship and safely resolve the provider-plugin resource bundle beside standalone executables, returning a clean reinstall/update error instead of trapping when it is missing (#2756).
- Claude: the menu-bar indicator now renders the active claude-swap account's usage when the adapter owns account presentation (2+ accounts), instead of drawing empty bars from an ambient snapshot without usable windows (#2731). Thanks @Meldiron for the report!
- z.ai/GLM: parse
CREDIT_LIMIT quota entries from credit-based Coding Plans (lite/standard/pro) so usage no longer sticks at 100% remaining / 0% used and the 5-hour credit window drives the primary percentage and reset time (#2724, #2712). Thanks @stuible!
Changed
- Provider plugins: cut ClinePass usage over to the bundled TypeScript implementation on macOS and Linux.
- Codex: cost history now lives in a single SQLite store — bounded memory at any corpus size, append-linear catch-up, and no more multi-hundred-MB JSON decode on refresh (#2760). Thanks @xx205 for the accumulator design!
- CLI: dashboard snapshot identity now defaults to full; use
--identity redacted to restore redacted emails.
- Provider plugins: run the same bundled JavaScript providers and local plugin CLI on Linux through a sandboxed QuickJS engine, removing the cut-over providers' Linux-only Swift twins.
- Provider plugins: use QuickJS on every platform with byte-identical output and hard interruption for hung scripts; Apple builds retain JavaScriptCore as an explicit rollback engine.
Fixed
- CLI: claude-swap accounts with expired or missing credentials now keep their email on the serve dashboard instead of showing a bare slot number.
iOS 影响初筛（自动生成）
| 变更项 |
iOS 相关性 |
优先级 |
| models.dev cost catalog / Codex history 扫描性能 |
⚠️ Shared 成本扫描或缓存逻辑是否受影响需评估 |
P2 |
| Menu bar / AppKit 菜单性能与交互修正 |
❌ macOS 菜单栏专属，iOS 通常不适用 |
- |
下一步
上游 Release 链接： https://github.com/steipete/CodexBar/releases/tag/v0.49.0
基线以 version.env 的 UPSTREAM_VERSION 字段为准
Auto-generated by upstream-release-monitor workflow
概述
上游仓库 steipete/CodexBar 于 2026-08-09 发布了 v0.49.0，比我们当前基线
UPSTREAM_VERSION=v0.47.0更新。v0.49.0 完整 Release Notes（上游原文，2026-08-09）
Added
Fixed
isIsolatingCurrentContext()implementation — macOS 26+ runtimes consult it beforecheckIsolated(), and its default cannot see throughDispatchQueue.sync, so every synchronous store bridge tripped "Incorrect actor executor assumption" and the app died on launch.CREDIT_LIMITquota entries from credit-based Coding Plans (lite/standard/pro) so usage no longer sticks at 100% remaining / 0% used and the 5-hour credit window drives the primary percentage and reset time (#2724, #2712). Thanks @stuible!Changed
--identity redactedto restore redacted emails.Fixed
iOS 影响初筛（自动生成）
下一步
CodexBarMobile/Shared/和 iOS 用量卡片是否需要同步修正version.env：UPSTREAM_VERSION=v0.49.0，UPSTREAM_SYNC_DATE=2026-08-09上游 Release 链接： https://github.com/steipete/CodexBar/releases/tag/v0.49.0
基线以
version.env的UPSTREAM_VERSION字段为准Auto-generated by upstream-release-monitor workflow