@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.0.8 - 2026-07-21
+
++ [新增] OpenAI 与 Grok 账号导出统一支持 CPA ZIP 和 Sub2API JSON，可分别导出选中账号或全部账号，并保留对应 OAuth/SSO 元数据。
++ [新增] Grok 账号页增加 OAuth 未授权、正常、限流、过期和失效筛选，支持单个或批量加入 OAuth 授权队列，并展示请求额度、Token 额度、探测与恢复状态。
++ [优化] Grok 账号列表改为先安全加载持久化快照、再后台刷新运行时数据；概览统计按来源设置超时和降级状态，运行时繁忙或暂时不可用时页面仍可正常打开。
++ [优化] Grok OAuth 日志从注册日志中独立分流，成功、失败、权限待生效和上传结果统一脱敏；后台恢复队列按本地 Solver 容量使用 2 个 worker，并只重试明确的瞬时错误。
++ [修复] 兼容 xAI `createSession` 新旧嵌套响应、相对 Cookie Setter URL 和直接写入 Cookie 的流程，修复 `missing-host/`；同时解析 RPC 登录错误，账号密码错误不再重复消耗验证码。
++ [修复] Outlook 邮箱池显示本次任务失败邮箱，可勾选指定记录并只释放、重试所选邮箱；“释放全部占用/失败”和“删除未使用邮箱”恢复为各自准确语义。
++ [修复] SQLite 本地账号后端增加连接串行化、WAL 回退和 busy timeout，降低并发读取时的锁冲突；账号导出、运行池同步和恢复时间展示补齐异常兼容。
+
 ## 1.0.7 - 2026-07-20
 
 + [新增] Grok SSO 与 OAuth 后台探测：服务启动后按周期分批验证运行池账号和真实 `grok-4.5` 能力，持久化有效、限流、失效、未知、请求额度和 Token 额度。
 
@@ -27,7 +27,7 @@ GPTGrok2API 是一个自托管的 GPT 与 Grok 统一网关，将已接入的订
 | 本地 Captcha Solver | 源码内置于 `captcha-solver/`，使用 Docker/Xvfb 中的有头 CloakBrowser/Chromium 处理 Grok Turnstile，支持动态并发、代理透传和浏览器资源回收，不需要额外克隆第二个仓库。 |
 | Checkout 提链 | 注册 Checkout 仅保留 UPI 最终支付链接提取；IN Checkout、Provider、Approve 共享同一 sticky 出口，VN Promotion 使用独立代理持续轮换重试。 |
 | 代理与稳定出口 | 支持全局代理、账号代理、代理配置、代理组、节点并发限制、故障反馈、备用出口、WARP、Privoxy、FlareSolverr 和 Clearance 刷新。 |
-| 外部系统接入 | 支持从 Sub2API、远程 CPA、本地 CPA 和 Access Token 导入账号；Grok 注册成功后立即进入 3-worker OAuth 优先级队列，并按配置投递 NovaApi 与 CPA；服务器部署提供 `gptgrok2api` Docker 网络别名。 |
+| 外部系统接入 | 支持从 Sub2API、远程 CPA、本地 CPA 和 Access Token 导入账号；Grok 注册成功后立即进入 2-worker OAuth 优先级队列，并按配置投递 NovaApi 与 CPA；服务器部署提供 `gptgrok2api` Docker 网络别名。 |
 | 管理控制台 | 提供概览、GPT/Grok 账号与运行池管理、iCloud 邮箱、注册任务、Checkout 任务、代理管理、日志、实时监控、图片管理、调试中心和系统设置。 |
 | 存储与备份 | 账号数据支持 JSON、SQLite、PostgreSQL 和 Git 后端；图片支持本地与 WebDAV；备份支持本地归档和 R2。 |
 | 运维与发布 | 支持 Docker Compose、WARP 编排、内置 sidecar、Nginx HTTPS、运行日志、指标趋势、健康检查和 GitHub Releases 更新源。 |
 
@@ -1 +1 @@
-1.0.7
+1.0.8
@@ -30,6 +30,7 @@
 from services.cpa_service import cpa_config, cpa_import_service, list_remote_files
 from services.oauth_login_service import OAuthLoginError, oauth_login_service
 from services.sub2api_service import (
+    build_openai_oauth_export_account,
     list_remote_accounts as sub2api_list_remote_accounts,
     list_remote_groups as sub2api_list_remote_groups,
     sub2api_config,
@@ -70,7 +71,7 @@ class AccountRefreshRequest(BaseModel):
 
 class AccountExportRequest(BaseModel):
     access_tokens: list[str] = Field(default_factory=list)
-    format: Literal["json", "zip"] = "json"
+    format: Literal["json", "zip", "cpa", "sub2api"] = "json"
 
 
 class AccountUpdateRequest(BaseModel):
@@ -755,12 +756,24 @@ async def export_accounts(body: AccountExportRequest, authorization: str | None
             )
 
         timestamp = _download_timestamp()
-        if body.format == "zip":
+        if body.format in {"zip", "cpa"}:
             content = _account_zip_bytes(items)
             return Response(
                 content,
                 media_type="application/zip",
-                headers={"Content-Disposition": f'attachment; filename="codex-accounts-{timestamp}.zip"'},
+                headers={"Content-Disposition": f'attachment; filename="codex-accounts-cpa-{timestamp}.zip"'},
+            )
+
+        if body.format == "sub2api":
+            payload = {
+                "exported_at": datetime.now(timezone.utc).isoformat(),
+                "proxies": [],
+                "accounts": [build_openai_oauth_export_account(item) for item in items],
+            }
+            return Response(
+                json.dumps(payload, ensure_ascii=False, indent=2) + "\n",
+                media_type="application/json",
+                headers={"Content-Disposition": f'attachment; filename="openai-accounts-sub2api-{timestamp}.json"'},
             )
 
         payload: dict[str, str] | list[dict[str, str]] = items[0] if len(items) == 1 else items
 
@@ -1,7 +1,15 @@
 from __future__ import annotations
 
+import io
+import json
 import unittest
+import zipfile
+from unittest.mock import patch
 
+from fastapi import FastAPI
+from fastapi.testclient import TestClient
+
+import api.accounts as accounts_api
 from api.accounts import _account_for_api, _status_matches_filter
 
 
@@ -36,5 +44,62 @@ def test_valid_checkout_filter_requires_ready_final_url_and_future_expiry(self)
         self.assertFalse(_status_matches_filter({**base, "checkout_qr_expires_at": ""}, "valid_checkout"))
 
 
+class AccountExportApiTest(unittest.TestCase):
+    def setUp(self) -> None:
+        app = FastAPI()
+        app.include_router(accounts_api.create_router())
+        self.client = TestClient(app)
+        self.item = {
+            "type": "codex",
+            "email": "person@example.test",
+            "account_id": "chatgpt-account",
+            "access_token": "access-token",
+            "refresh_token": "refresh-token",
+            "id_token": "id-token",
+            "expired": "2030-01-01T00:00:00+00:00",
+            "last_refresh": "2029-01-01T00:00:00+00:00",
+        }
+
+    def test_sub2api_export_uses_standard_account_envelope(self) -> None:
+        with patch.object(accounts_api, "require_admin"), patch.object(
+            accounts_api.account_service,
+            "build_export_items",
+            return_value=[self.item],
+        ):
+            response = self.client.post(
+                "/api/accounts/export",
+                json={"access_tokens": ["access-token"], "format": "sub2api"},
+            )
+
+        self.assertEqual(response.status_code, 200)
+        payload = response.json()
+        self.assertEqual(payload["proxies"], [])
+        self.assertEqual(len(payload["accounts"]), 1)
+        account = payload["accounts"][0]
+        self.assertEqual(account["platform"], "openai")
+        self.assertEqual(account["type"], "oauth")
+        self.assertEqual(account["credentials"]["chatgpt_account_id"], "chatgpt-account")
+        self.assertEqual(account["credentials"]["refresh_token"], "refresh-token")
+
+    def test_cpa_export_is_zip_of_codex_auth_files(self) -> None:
+        with patch.object(accounts_api, "require_admin"), patch.object(
+            accounts_api.account_service,
+            "build_export_items",
+            return_value=[self.item],
+        ):
+            response = self.client.post(
+                "/api/accounts/export",
+                json={"access_tokens": ["access-token"], "format": "cpa"},
+            )
+
+        self.assertEqual(response.status_code, 200)
+        self.assertEqual(response.headers["content-type"], "application/zip")
+        with zipfile.ZipFile(io.BytesIO(response.content)) as archive:
+            self.assertEqual(archive.namelist(), ["person-example.test.json"])
+            exported = json.loads(archive.read(archive.namelist()[0]))
+        self.assertEqual(exported["type"], "codex")
+        self.assertEqual(exported["access_token"], "access-token")
+
+
 if __name__ == "__main__":
     unittest.main()
@@ -33,6 +33,11 @@ class OutlookPoolResetRequest(BaseModel):
     scope: str | None = None
 
 
+class OutlookPoolRetryRequest(BaseModel):
+    provider_id: str = Field(min_length=1, max_length=128)
+    mailbox_ids: list[str] = Field(min_length=1)
+
+
 class GptMailStatusRequest(BaseModel):
     provider: dict | None = None
     force: bool | None = None
@@ -55,6 +60,11 @@ class GrokAccountChatTestRequest(BaseModel):
     model: str | None = Field(default=None, max_length=128)
 
 
+class GrokAccountExportRequest(BaseModel):
+    ids: list[str] = Field(default_factory=list)
+    format: Literal["sub2api", "cpa"] = "sub2api"
+
+
 def _grok_account_ids(values: list[str]) -> list[str]:
     return list(dict.fromkeys(str(value or "").strip() for value in values if str(value or "").strip()))
 
@@ -102,6 +112,22 @@ async def reset_outlook_pool(body: OutlookPoolResetRequest, authorization: str |
         require_admin(authorization)
         return {"register": register_service.reset_outlook_pool(body.scope or "all")}
 
+    @router.post("/api/register/outlook-pool/retry-selected")
+    async def retry_selected_outlook_mailboxes(
+        body: OutlookPoolRetryRequest,
+        authorization: str | None = Header(default=None),
+    ):
+        require_admin(authorization)
+        try:
+            return {
+                "register": register_service.retry_outlook_failed(
+                    body.provider_id,
+                    body.mailbox_ids,
+                )
+            }
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+
     @router.post("/api/register/gptmail/status")
     async def get_gptmail_status(body: GptMailStatusRequest, authorization: str | None = Header(default=None)):
         require_admin(authorization)
@@ -147,6 +173,11 @@ async def list_grok_accounts(
             "runtime_error": str(view.get("runtime_error") or ""),
         }
 
+    @router.post("/api/register/grok/accounts/runtime/snapshot")
+    async def refresh_grok_runtime_snapshot(authorization: str | None = Header(default=None)):
+        require_admin(authorization)
+        return await run_in_threadpool(register_service.refresh_grok_runtime_snapshot)
+
     @router.get("/api/register/grok/accounts/{account_id}/credentials")
     async def get_grok_account_login_credentials(
         account_id: str,
@@ -174,6 +205,17 @@ async def sync_grok_accounts(
             raise HTTPException(status_code=400, detail={"error": "ids is required"})
         return await run_in_threadpool(register_service.sync_grok_accounts, ids)
 
+    @router.post("/api/register/grok/accounts/oauth/authorize")
+    async def authorize_grok_accounts_oauth(
+        body: GrokAccountIdsRequest,
+        authorization: str | None = Header(default=None),
+    ):
+        require_admin(authorization)
+        ids = _grok_account_ids(body.ids)
+        if not ids:
+            raise HTTPException(status_code=400, detail={"error": "ids is required"})
+        return await run_in_threadpool(register_service.authorize_grok_accounts_oauth, ids)
+
     @router.post("/api/register/grok/accounts/runtime/refresh")
     async def refresh_grok_accounts_runtime(
         body: GrokAccountIdsRequest,
@@ -244,26 +286,60 @@ async def delete_grok_accounts(
 
     @router.get("/api/register/grok/accounts/export")
     async def export_grok_accounts(
-        format: Literal["json", "txt"] = "json",
+        format: Literal["sub2api", "cpa"] = "sub2api",
         authorization: str | None = Header(default=None),
     ):
         require_admin(authorization)
         timestamp = datetime.now(timezone.utc).strftime("%Y%m%d-%H%M%S")
-        if format == "txt":
-            return Response(
-                register_service.export_grok_accounts_text(),
-                media_type="text/plain; charset=utf-8",
-                headers={
-                    "Cache-Control": "no-store",
-                    "Content-Disposition": f'attachment; filename="grok-accounts-{timestamp}.txt"',
-                },
-            )
+        try:
+            if format == "cpa":
+                return Response(
+                    register_service.export_grok_accounts_cpa(),
+                    media_type="application/zip",
+                    headers={
+                        "Cache-Control": "no-store",
+                        "Content-Disposition": f'attachment; filename="grok-accounts-cpa-{timestamp}.zip"',
+                    },
+                )
+            payload = register_service.export_grok_accounts_sub2api()
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+        return Response(
+            json.dumps(payload, ensure_ascii=False, indent=2) + "\n",
+            media_type="application/json",
+            headers={
+                "Cache-Control": "no-store",
+                "Content-Disposition": f'attachment; filename="grok-accounts-sub2api-{timestamp}.json"',
+            },
+        )
+
+    @router.post("/api/register/grok/accounts/export")
+    async def export_selected_grok_accounts(
+        body: GrokAccountExportRequest,
+        authorization: str | None = Header(default=None),
+    ):
+        require_admin(authorization)
+        ids = _grok_account_ids(body.ids)
+        timestamp = datetime.now(timezone.utc).strftime("%Y%m%d-%H%M%S")
+        try:
+            if body.format == "cpa":
+                return Response(
+                    register_service.export_grok_accounts_cpa(ids or None),
+                    media_type="application/zip",
+                    headers={
+                        "Cache-Control": "no-store",
+                        "Content-Disposition": f'attachment; filename="grok-accounts-cpa-{timestamp}.zip"',
+                    },
+                )
+            payload = register_service.export_grok_accounts_sub2api(ids or None)
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
         return Response(
-            json.dumps(register_service.export_grok_accounts(), ensure_ascii=False, indent=2) + "\n",
+            json.dumps(payload, ensure_ascii=False, indent=2) + "\n",
             media_type="application/json",
             headers={
                 "Cache-Control": "no-store",
-                "Content-Disposition": f'attachment; filename="grok-accounts-{timestamp}.json"',
+                "Content-Disposition": f'attachment; filename="grok-accounts-sub2api-{timestamp}.json"',
             },
         )