OpenCodex История версий

OpenCodex 2.95.0 выпущен 2026-10-31 и добавляет видимость моделей для каждого клиента, вход через IAM Identity Center и тестирование всех моделей провайдера.

• Список моделей в Desktop теперь может показывать модели для каждого клиента.
• На панель управления добавлен вход через IAM Identity Center.
• Отключённые нативные модели можно исключать при включении соответствующей опции.
• Все модели провайдера можно протестировать сразу, а не прошедшие тест — отключить.
• Запросы корректно завершаются при достижении max_output_tokens.
• Провайдеры CC-Switch можно импортировать без ключей, с предварительным просмотром, применением и восстановлением.
• API Moonshot теперь по умолчанию использует K3.1 Pro, а K2.5 выведен из эксплуатации.
• В обзорах провайдеров отображаются различающиеся состояния первого ответа, а LM Studio получает одно ведущее системное сообщение.

OpenCodex 2.94.0 выпущен 2026-10-29 и добавляет лаунчер ocx codex, интеграцию с T3 Code и расширенную поддержку обновлений Windows CLI.

• Структурные ходы инструментов сохраняются.
• Runcrate присоединяется к бесплатному каталогу.
• Строки бездействующих /v1/models помечаются из modelDisplayNames.
• ocx codex повторяет лаунчер ocx claude.
• T3 Code доступен как клиент экспорта и интеграции.
• Конфигурации Hermes обновляются после изменений каталога.
• Экспорты Hermes и Command Code поддерживают включаемое по желанию именование псевдонимов.
• Обновления POSIX CLI подтверждаются и сообщают устойчивый статус задания.
• Обновления Windows CLI получают планирование, привязанное к доказательствам.
• Обновления Windows CLI используют защищённое хранилище заданий.
• Обновления Windows CLI используют собственные транзакции.
• Windows Remote Link Children несут аттестацию учётных данных.
• Windows Remote Link Children несут аттестацию соединения.
• Ролевые модели LazyCodex восстанавливаются из истории изменений.
• Запомненные сеансы устройств можно отозвать на стороне сервера.
• Доступны переключатели перехвата для каждого источника.
• Используется нативная проверка типов Bun 1.4.4.
• Claude: истёкшие по времени собственные откаты сообщаются как незавершённые.
• Grok 4.5-4.7 публикует самый широкий контекст подписки.
• Загрузки неактивного средства выбора истекают без потери противодавления.
• Рассуждения Mistral сохраняются после воспроизведения.
• Профили OAuth Claude Code 2.1.280 выравниваются.
• Идентификаторы сеансов и устройств изолированы для профилей OAuth Claude Code 2.1.280.
• Пулы с несколькими учетными записями ограничивают охлаждение запросом, который резервирует.
• Привязка сохраняется после перезапусков и обходных путей.
• Деактивированные учетные записи исключаются из пулов с несколькими учетными записями.
• Вытеснение по привязке исключается из пулов с несколькими учетными записями.
• Объединенные окна берутся из удерживаемых строк учетных записей.
• Провайдеры переключаются и охлаждаются при исчерпании вышестоящей квоты.
• Нижняя граница Retry-After соблюдается.
• Запреты по ToS Cloud Code Assist распознаются.
• Образы Qoder CN проходят через общую проекцию.
• Маршрутизация по отказу моделей и обнаружение нескольких учетных записей объединены.
• Восстановление Live Desktop проверяется перед холодным запуском CLI.
• Длинные пути уплотнения укреплены.
• Сохранённые запросы формируются в кадры перед переносимыми контрольными точками компактизации.
• Активное владение перепроверяется перед восстановлением журнала.
• Прерванный postinstall Bun восстанавливается при повторной попытке.
• Диагностика сбоев Windows ACL остаётся ограниченной.
• Фазы записи Windows ожидают стабилизации ACL корневого каталога конфигурации.
• Переопределения корневых путей Windows без буквы диска отклоняются.
• Сбои удаления планировщика с повышенными правами объясняются.
• Проблемы выпуска и наблюдения средства обновления устранены.
• В нативных комбинированных потоках обеспечивается применение обязательных инструментов.
• Входные потоки apply_patch стабильны при завершении.
• Нативные потоки Messages завершаются сбоем, если заканчиваются до message_stop.
• Необработанные рассуждения поступают в клиенты Chat без явного согласия на генерацию.
• Варианты модели разбираются за линейное время.
• Атрибуция отказа от воспроизведения сохраняется при поступлении через WebSocket и сбоях комбинированных потоков.
• Kiro отбрасывает приватный финальный ответ, когда реальный вызов инструмента происходит в том же ходе.
• Сводки квот используют отпечаток CLI.
• Приостановленные учётные записи больше не нарушают обновление квот.

Главное

• Поддержка GPT-6.1 Terra в Codex native, OpenAI API, OpenRouter, Copilot и других провайдерах (кроме Cursor).
• Обязательные вызовы инструментов теперь проверяются в двух местах с разными кодами ошибок: буферизованный дочерний запрос native combo, пропустивший обязательный tool_choice, завершается ошибкой required_tool_contract_unsatisfied (HTTP 502, допускается существующий fallback; HTTP 400 с x-should-retry: false после хостингового эффекта), а переведённый Chat-маршрут — ошибкой required_tool_not_called. Потоковые дочерние запросы native combo пока не покрыты.
• На маршрутах Anthropic маршрутизированное сжатие теперь сохраняет префиксы кэша; поведение при восстановлении после 413 не изменилось.

Новые возможности

• Цена и предустановка Kimi K3.1 Pro в Kimi Code и Moonshot.
• Закрепление сессии JEV отображается в редакторе Combo.
• Опциональное восстановление после cooldown с настраиваемым интервалом.
• Опциональный уровень Flex для подходящих маршрутизируемых моделей.
• Подключение Qoder CN и десктопных версий WorkBuddy.
• Нативный SHA-256 для дайджестов идентичности инструментов и нативный CRC32 для проверки кадров Kiro.
• ocx sync --expect-link и --expect-hub-key теперь отклоняют другой Home.
• Ограничена временная память агрегации таймлайна, исключено переполнение аргументов.

Исправления

• Интеграции подключённого клиента сохраняются после ocx stop; статус теперь указывает ocx sync --restart-codex.
• Переключение аккаунтов при исчерпании сверхквоты и ротация при отказах из-за нехватки кредитов.
• Модель роли сохраняется, если автоназначение находит равные по цене варианты.
• Состояние рассуждений Anthropic изолировано от нативного проброса.
• Исправлены предупреждения Hono и ip-address, выровнен qs, для audit:high закреплены zod 4.6.6 и body-parser 2.4.0.
• happy-dom в GUI обновлён до 21.0.4.
• Завершены турецкие тексты панели и документации.
• Обнаруживается LazyCodex, установленный из маркетплейса.
• Ограничена буферизация заголовков CONNECT и устранено повторное извлечение префикса растущего буфера при декодировании SSE.

Известная проблема

• На Remote Link Child ocx stop оставляет Codex на остановленном Child, поэтому запросы Codex завершаются ошибкой, пока ocx start (или ocx sync --restart-codex) не применит маршрутизацию заново.

Официальные примечания к выпуску

Release notes

• GPT-6.1 Terra support (Codex native, OpenAI API, OpenRouter, Copilot and other providers; not Cursor) (#7779).
• Required tool calls are now enforced in two places, with distinct error codes: a buffered native combo child that skips a required tool_choice fails with required_tool_contract_unsatisfied (HTTP 502, eligible for the existing fallback; HTTP 400 with x-should-retry: false after a hosted effect) (#7741), and a translated Chat route fails with required_tool_not_called (#7463). Streaming native combo children are not covered yet (#7456 stays open).
• Anthropic: routed compaction now preserves cache prefixes; 413 recovery behavior is unchanged (#7749).

Known issue

• On a Remote Link Child, ocx stop leaves Codex pointed at the stopped Child, so Codex requests fail until ocx start (or ocx sync --restart-codex) reapplies routing. This comes from #7564, which keeps a connected client's integrations across stop; restoring native routing on an explicit Child stop is tracked in #7736.

Published to npm as @bitkyc08/opencodex@2.93.0-preview.20261027 with dist-tag preview.

New Features

• Route hard-locked main-account traffic to a configured fallback model (carry #7123) (#7146)
• Configure usage model table row limits (carry #6436) (#7156)
• Show account membership tier badge (carry #5932) (#7157)
• Opt in to remaining included quota (carry #6629) (#7158)
• Require explicit consent for metered targets (carry #6839) (#7159)
• Support per-model prompt-length overrides (carry #6738) (#7160)
• Enroll text-only members in vision sidecar (carry #4932) (#7162)
• Reset-first strategy for generic OAuth pools (carry #5408) (#7167)
• Add DeepSeek Harness authenticated account provider (carry #6293) (#7164)
• Stable replay and capture-only client tools (carry #6566) (#7165)
• Refuse launches when the Claude subscription is exhausted (carry #6566) (#7166)
• Code-display login mode for hosts with no reachable localhost (carry #6239) (#7170)
• Pin generic pool conversations to request-local accounts (#7150)
• Preserve signed-in quota across duplicate pool entries (#7144)
• Accept credential JSON with secure marker lifecycle (carry #6843) (#7139)
• Carry bounded retention and adaptive consultation (#7134, #7124) (#7219)
• Preserve diagnostic per-model quota evidence (carry #6718) (#7163)
• Carry opt-in API key round-robin and per-key pacing (#6937) (#7135)
• Carry Combo visibility, workspace panes, Windows picker and Gentle Shell (#7223)
• Carry compaction capabilities and reasoning retention (#7217)
• Carry usage comparison, log history, restart and Codex controls (#7222)
• Separate custom-tool grammar evidence from representation (#7282)
• Let a combo set its catalog row description (#7229) (#7284)
• Opt-in compression of outbound ChatGPT Responses request bodies (#7285)
• Auto-pause repeated permanent account refusals (#7153)
• Explicit single-model completion test (#7287)
• Opt-in OS desktop notification for low-quota protection (#7286)
• Opt-in advisory quota signals for JEV decisions (P1) (#6814)
• Add explicit enrolled Codex SSH peers (#6891)
• Default prompt-cache TTL to 1h on first-party Anthropic (#7341)
• Passive GET /api/quota-pool (ocx.quota-pool/1 producer) (#7476)
• Advertise peer features from one registry (#7477)
• Parity on apply — restart the Child runtime, record and report the apply (OCX-6) (#7484)
• Name the serving Home in x-opencodex-served-by (OCX-2) (#7490)
• Mark provider list rows active when they serve (OCX-12) (#7492)
• Report each Child version and a compatibility verdict in ocx link status (#7494)
• Passive ocx service status --json and install-method verdict in ocx status --json (#7483)
• OCX-11 fallback off per scope, with home_unreachable on Children (#7482)
• Support x-hermes-conversation-id for Hermes session correlation (carry #7459) (#7542)
• Resolve each API key's project with project "auto" (#7296)
• Opt-in session pin keeps a JEV combo session on its decided target (#7567)
• Add subscription and credit support (#7604)
• Avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) (#7541)
• Read Abliteration credit balance from /v1/credits (#7581)
• Price and seed Kimi K3.1 Pro on Kimi Code and Moonshot (#7657)
• Expose JEV session pin in Combo editor (#7664)
• Use Bun native CRC32 for Kiro frame validation (#7631)
• Avoid input Buffer copies in gzip requests (#7671)
• Avoid repeated growing-buffer prefix extraction in SSE decoding (#7676)
• Seed Kimi K3.1 Pro on the Moonshot API preset (#7695)
• Bound timeline aggregation scratch memory and avoid argument overflow (#7679)
• Validate audit UTF-8 without round-trip Buffer copies (#7672)
• Avoid quadratic copying of fragmented frames (#7673)
• Coalesce queued thought-signature snapshot writes (#7675)
• Skip unchanged partial-tail reads and SQLite metadata rewrites (#7680)
• Ocx sync --expect-link / --expect-hub-key refuses a different Home (#7694) (#7707)
• Use native SHA-256 for tool identity digests (#7670)
• Bound upload waiters and release completed read results (#7661)
• Connect named Hermes profiles (#7674) (#7700)
• Bound CONNECT header buffering and avoid repeated prefix copies (#7663)
• Add opt-in cooldown recovery with configurable interval (#7723)
• Expose opt-in Flex tier for eligible routed models (#7534)
• Connect Qoder CN and WorkBuddy desktop editions (#7665)
• Add AI Stupid Level API-key preset (#7623)
• Add GPT-6.1 Terra alongside GPT-5.6 Terra (non-Cursor providers, catalog, pricing, docs) (#7779)

Bug Fixes

• Fix preview platform packaging (#5527)
• Carry verified checksum and signature repair (#5545)
• Carry Windows checksum record support (#5551)
• Carry the draft-then-publish release fix to preview (#5557)
• Carry the macOS keyring signing fix to preview (#6272)
• Sync preview to main 2.86.0 (#7127)
• Show last Windows desktop build assessment (#7113)
• Preserve context inference through provider edits (#7077)
• Enforce explicit-empty tool catalogs across delivery paths (#7058)
• Select Advisor model from the routed catalog (#7114)
• Keep usage-ledger file ids exact so Windows NTFS ids stop colliding (#7089)
• Serialize shim publication with production process creation (ETXTBSY) (#7106)
• Verify Desktop backup and optional metadata reads (carry #7084) (#7129)
• Pair native beta schemas with effective headers (#7132)
• Preserve operator model policy across reconciliation (#7141)
• Refuse uncertain ownership before publishing sibling runtime (#7142)
• Print fixed CLI login errors instead of provider bodies (#7171)
• Protect the desktop authority key in-process on Windows x64 (#7181)
• Carry canonical subagent limits across modes (#7125) (#7128)
• Preserve uncapped native maximum context windows (#7130)
• Strip Google item metadata from native OpenAI requests (#7131)
• Launch the registered Desktop bundle and executable (#7137)
• Frame retained compaction requests as history (#7138)
• Restore DeepSeek reasoning on native tool continuations (#7118) (#7140)
• Surface Opus 5.5 progress as signed commentary (#7143)
• Isolate service state from the shared startup home (#7161)
• Eliminate intercept integration port reservation race (#7174)
• Bound refresh consumers and retain stale owners (carry #7117) (#7136)
• Recover Muse Keychain login and preserve actionable errors (#7145)
• Fold Advisor into the Subagents row and collapse its notices (#7196)
• Bind Linux health sentinel recovery to pidfd (#7133)
• Keep the desktop app open on codex-restart when its picker is current (#7149)
• Carry Zed, Qoder, and OpenCode Gemini compatibility (#7216)
• Carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) (#7220)
• Carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) (#7215)
• Carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) (#7218)
• Carry OAuth combo cooldown, account rotation and health evidence fixes (#7224)
• Carry Claude translated-lane and usage-metering fixes (VB) (#7225)
• Restore keep-native-v1 qualifier placement (#7237)
• Charge key cooldown to the credential sent (#7240)
• Preserve legacy OpenCode Go configs after native wire pins (#7238)
• Preserve import cycles through macOS path aliases (#7241)
• Preserve retained reasoning across native combo failover (#7239)
• Activate Windows picker after dormant startup (#7243)
• Use standard no-op waker in spawn test (#7246)
• Preserve Codex opt-out, concurrent syncs, and usage ownership (#7244)
• Preserve carry reference numbers across the text window cap (#7252)
• Carry account recovery, server-tool buffer, and usage corrections (#7236)
• Skip unused native Codex ownership probes (#7184)
• Replay Anthropic server-tool exchanges on the translated lane (carry #7205) (#7251)
• Stop leaked Gemini planning from spreading through replayed history (#7254)
• Preserve OpenAI API display name overrides (#7259)
• Price refused-then-served rows in routing analytics (#7253)
• Preserve startup with IPv6 loopback disabled (#7262)
• Return gateway request-history IDs (#7261)
• Reclaim least recently used idle WebSocket at capacity (#7095)
• Route Claude through Anthropic Messages (#7235)
• Recover rejected thinking without local prefix validation (#7147)
• Show the Gemini 4 Argon quota group separately (#7283)
• Honor project and location for API-key inference (#7266)
• Preserve matched and orphan Vertex Argon tool images (#7280)
• Never bake Claude first-party's own intercept proxy (#7327)
• Map provider input overflow to context_length_exceeded (#7352)
• Handle replayed hosted web-search history (#7250, #7269) (#7353)
• Keep tool loops on one target and make failover history safe (#7298) (#7354)
• Absorb community failover fixes (#7317, #7329, #7339, #7320) (#7355)
• Scope an inherited transpiler cache to the Bun version it starts (#7362)
• Scope server children's transpiler cache and keep scoping idempotent (#7364)
• Recover cold opaque state and harden replay, archive and lifecycle paths (#7388)
• Carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) (#7389)
• Renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main (#7393)
• Carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 (#7394)
• Harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) (#7397)
• Gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles (#7396)
• Carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 (#7395)
• Pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition (#7408)
• Stop pool accounts from spending the native main account (#7398) (#7414)
• Keep search replay ID allocation linear (#7419)
• Keep transpiler cache scopes within configured paths (#7422)
• Keep model text out of inferred cooldowns (#7424)
• Read the whoami identity when kiro-cli appends its Profile block (#7455)
• Preserve upgrade-only reasoning inclusion (#7464)
• Clear high-severity audit findings blocking the 2.90.0 release (#7480)
• Arm the real-home write guard when bun test skips the preload (#7467)
• Refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct (#7470)
• Handle Codex 0.164 request controls (#7473)
• Carry Anthropic thinking signatures through reasoning_details (#7469)
• Adopt a concurrent winner's identity instead of refusing it (#7489)
• Scope queue_full to the waiting identity; address #7474 review (#7493)
• Refuse Windows Children with a Hub-mode pointer and explain existing ones (#7496)
• Persist Reserve helper refusal request IDs (#7511)
• Normalize analytics usage rows (#7510)
• Preserve replay-refusal provenance through response finalization (#7458)
• Honor upstream no-retry verdict (carry #7505) (#7538)
• Preserve unrelated authenticated loopback proxies (#7509)
• Reject macOS ACL-exposed state (#7520)
• Finish with length when a Responses upstream reports incomplete reason "length" (#7539)
• Use attested capabilities for local usage comparisons (#7514)
• Distrust picker freshness without binding evidence (#7522)
• Publish Antigravity family quota as decision evidence (carry #7442) (#7549)
• Read the effective SID in-process so service install does not wait on a cold PowerShell (#7548)
• Bind CLI update plans to installation content and pre-dotenv transport (#7546)
• Route models only to accounts whose roster serves them (#7556)
• Refresh dated Token Plan catalogue and metadata (#7555)
• Keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics (#7560)
• Infer message phase for passthrough providers (#7554)
• Backfill Token Plan output limits on roster refresh (#7576)
• Fold developer role to system for moonshot (#7584)
• Isolate retained reasoning state by admitted caller (carry #7523) (#7566)
• Stop guardian refresh of grants persisted as revoked (#7597)
• Keep the stored strategy when combo set replaces targets (#7601)
• Send native ultra effort as max on the wire (#7590) (#7600)
• Keep npm Node cache within inspection lifetime (#7585)
• Revoke usage trials after identity verification fails (#7582)
• Refuse uncertain prefix-local Node observations (#7577)
• Check the first hard-lock combo destination (#7588)
• Always send a title on url_citation and repair old history on replay (#7573)
• Ship Bun 1.4.4 runtime to drop the compromised eMudhra root (#7606)
• Launch native Windows CLIs and refuse empty-arg-dropping dispatchers (#7527)
• Pin zod 4.6.6 and body-parser 2.4.0 for audit:high (#7642)
• Bump gui happy-dom to 21.0.4 (GHSA-834v-8h66-3h79) (#7644)
• Provider-only catalog, replay-envelope refusal and isolated status (#7545)
• List pool accounts without a native home and expose safe slot identity metadata (#7551)
• Rotate on insufficient-credit refusals (#7558)
• Calibrate Business Premium display capacity (#7557)
• Check the first hard-lock profile destination (#7589)
• Bind ownership lease release to its acquisition (#7543)
• Cancel Remote Link sheet focus work (#7611) (#7650)
• Patch Hono and ip-address advisories and align qs (#7647)
• Resolve ACL principal natively without cold PowerShell (#7656)
• Preserve sync edits with canonical sandbox checks (#7659)
• Keep a connected client's integrations across ocx stop; status names ocx sync --restart-codex (#7563) (#7564)
• Keep a role's model when auto-assign finds an equal-priced tie (#7617)
• Validate subagent limit boundaries before writes (#7276)
• Isolate Anthropic reasoning state from native passthrough (#7504)
• Complete Turkish dashboard copy and documentation (#7565)
• Wake the PR gate when attribution-approved is applied (#7698)
• Fail over accounts when overage quota is exhausted (#7687)
• Detect LazyCodex installed from the marketplace (#7692)
• Answer MODEL_NOT_IN_PLAN once as a model-scoped 400 (#7696)
• Bind exception approval labels to the evaluated head (#7699)
• Release detached sweep hooks and preserve replacement timers (#7678)
• Observe Pi prompt failures before acknowledgement (#7669)
• Bound snapshot persistence under sustained updates (#7666)
• Inspect hard-lock fallback without selecting candidates (#7683)
• Honor backpressure in pinned HTTP responses (#7667)
• Select Docker smoke for actual image build inputs (#7689)
• Preserve gateway citations during native compact (#7682)
• Deliver partial response payloads promptly and release terminal sockets (#7662)
• Account for Antigravity direct Chat IR (#7724)
• Classify legacy Desktop aliases before native fallback (#7721)
• Use Bun timeout flag in temporary-file diagnostics (#7715)
• Declare Hermes profile discovery route (#7729)
• Preserve disabled sidecars when targets retire (#7420)
• Preserve destinations when refreshing saved model rosters (#7735)
• Use Bun glob matching for native grep (#7630)
• Notice a Codex WebSocket that dies after the response started (#7725)
• Clamp native efforts to selected model ladder (#7731)
• Preserve literal SSH include names on Bun 1.4.4 (#7629)
• Enforce the Bun patch floor in automatic PATH fallback (#7734)
• Bound closing handshakes for non-reused upstream WebSockets (carry #7681) (#7743)
• Bind usage trials to fresh package proof (#7709)
• Fail unmet required client tool completions (#7463)
• Verify installer signature before administrative extraction (#7421)
• Preserve Windows probe support across Node and Bun (#7722)
• Bind and serialize queue lock ownership (#7508)
• Retain Kiro prompt estimates in hosted tool paths (carry #7620) (#7744)
• Support Vercel JEV decisions and thinking model reasoning replay (#7574)
• Join the Windows npm tree before stage cleanup (#7751)
• Restore official V4 Pro availability (#7591)
• Bound WebSocket close without releasing live ownership (#7635)
• Send local stop requests directly to the loopback runtime (#7754)
• Preserve cache prefixes during routed compaction (#7307) (#7749)
• Move to GA MiniMax-M3.1-Flash and rename the retired preview id (#7746)
• Reject buffered required-tool false successes (#7741)
• Keep Codex routing for the restarted proxy during an update (#7423) (#7747)
• Renew credit evidence for namespace-bound Direct accounts (#7621)
• Separate support, thinking toggles and effort controls (#7531)
• Fence uncertain catalog entry identity (#7610)
• Keep sideband admission until the upstream closes after client cancellation (#7767)
• Preserve credit recovery retry hints and scoped cooldowns (#7622)
• Drain parent ACL flights before intercept secret writes (#7777)
• Skip optional hardening for non-directory homes (#7688)

Documentation

• Clarify the app-server shim transport limit (#7227)
• Record the 2.92.0 sweep wave plan (#7535)
• Explain how spawn_agent fills its five model slots (#7550)
• Show the SignPath attribution and code signing policy on the download section (#7571)
• End release notes with the SignPath code signing attribution (#7570)
• An existing JEV combo keeps its stored decision method (#7602)
• Qualify Qoder native executable precedence across PATH folders (#7615)
• Translate Mistral and OpenGateway provider behavior across locales (#7646)
• Align Korean installation guide with Bun 1.4.4 pin (#7616)
• Correct ADR-7517 contract owner (#7686)

Chores

• Enable Linux package diagnostics on preview (#5523)
• Promote cleaned 2.69.0-preview.20260928 to preview (#6141)
• Allow child generation diagnostics before outer timeout (#7085)
• Use shared Windows attest spawn budgets (#7151)
• End the linger upload pump when the socket closes (#7180)
• Guard Argon thought separation across client protocols (#7188)
• Isolate sibling ensure from the running Desktop app (#7182)
• Derive audio non-readiness case budgets from their deadline (#7183)
• Share opaque transport with desktop relay (#7120)
• Break config-facade import cycles (189 -> 59 static cyclic modules) (#6454)
• Break the ChatGPT OAuth and auth-api import cycles (#6594)
• Fix Windows default-home isolation fixtures (#7242)
• Sign Windows binaries and MSI via SignPath (#7207) (#7356)
• Remove opencode-free and migrate saved configs (#7351)
• Register combo-tool-loop-pin in the core module inventory (#7357)
• Keep ACL subprocess work out of cache and registration assertions (#7358)
• Let the final-EPERM quarantine see through Windows 8.3 TEMP aliases (#7359)
• Await the fallback lease release on both passthrough relays (#7360)
• Compare the default containment result through the native resolver (#7361)
• Hold early client bytes in the socks5 egress fixture (#7363)
• Assert the scoped env and versioned bundled runtime in source oracles (#7365)
• Bound shell integration scenarios independently (#7449)
• Cover Claude CLI JSON schema contract (#7387)
• Make update recovery, messages cancellation, and CLI parity harnesses deterministic (#7468)
• Let the test-scoped Windows ACL belt through the host-free helper (#7487)
• Place PATH-Bun fixtures under a trusted ancestry (#7466)
• Flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) (#7488)
• Expect the platform's exit signal for a replacement that ignores SIGTERM (#7502)
• Make ten Windows-sensitive flaky tests deterministic (#7501)
• Flag process-signal code as Windows-sensitive (#7503)
• Deprecate mimo-free (#7445)
• Move the Abliteration quota test to a shard to restore the layout.json size cap on dev (#7607)
• Settle Windows ACL work and owner locks before fixture removal (#7528)
• Make codex-runtime, client-connect and loopback-listener tests deterministic (#7552)
• Keep cold first-exec and PowerShell start out of two timed cases (#7598)
• Run docker/keyring smoke and React Doctor on PRs only when their inputs change (#7658)
• Isolate agent-task-recovery fixtures (#7613) (#7649)
• Align Bun runner with the 1.4.4 security baseline (#7627)
• Isolate port reclaim fixture identity and clock (#7706)
• Copy launcher module dependencies into activation fixtures (#7733)
• Let the forged sibling-env start bind its own port (#7740)
• Run import-graph tests on pull requests and verify merged batches on dev (#7782)

Other Changes

• Bring preview onto the verified 2.56.0 product tree (#4698)
• Bring preview onto the verified 2.57.0 product tree (#4831)
• Promote main to preview after 2.58.0 (#4917)
• Bring preview onto the verified 2.60.0 product tree (#5250)
• Promote native macOS tray candidate to preview 2.61.0 (#5511)
• Carry native sidecar packaging repair (#5531)
• Carry lipo verification fix (#5536)
• Prepare 2.62.0-preview.20260923 version metadata (#5565)
• Promote the verified tree to preview as 2.63.0-preview.20260923 (#5602)
• Promote verified 2.64.0 preview tree (#5670)
• Promote the verified 2.65.0 preview tree to preview (#5783)
• Promote 2.66.0 to preview as 2.66.0-preview.20260925 (#5854)
• Promote 2.67.0-preview.20260926 to preview (#5899)
• Promote 2.68.0-preview.20260927 to preview (#6054)
• Promote 2.69.0-preview.20260928 to preview (#6137)
• 2.70.0-preview.20260929 (#6211)
• 2.71.0-preview.20260929 (#6227)
• 2.72.0-preview.20260930 (#6245)
• Promote 2.73.0-preview.20260930 to preview (#6265)
• Promote 2.74.0-preview.20260930 to preview (#6318)
• 2.75.0-preview.20261001 (#6352)
• 2.76.0-preview.20261003 (#6467)
• 2.78.0-preview.20261005 (#6630)
• Sync preview to main 2.85.0 (#7096)
• Open dev at 2.87.0 before releasing 2.86.0 (#7109)
• Open dev at 2.88.0 before releasing 2.87.0 (#7248)
• Open dev at 2.89.0 before releasing 2.88.0 (#7263)
• Open dev at 2.90.0 before releasing 2.89.0 (#7371)
• Open dev at 2.91.0 before releasing 2.90.0 (#7475)
• Open dev at 2.92.0 before releasing 2.91.0 (#7532)
• Open dev at 2.93.0 before releasing 2.92.0 (#7633)
• Promote frozen tip 2606f6f922 to preview as 2.93.0-preview.20261027 (#7796)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.92.0...v2.93.0-preview.20261027

• #4698 release: bring preview onto the verified 2.56.0 product tree @lidge-jun
• #4831 release: bring preview onto the verified 2.57.0 product tree @lidge-jun
• #4917 release: promote main to preview after 2.58.0 @lidge-jun
• #5250 release: bring preview onto the verified 2.60.0 product tree @lidge-jun
• #5511 release: promote native macOS tray candidate to preview 2.61.0 @lidge-jun
• #5523 release: enable Linux package diagnostics on preview @lidge-jun
• #5527 release: fix preview platform packaging @lidge-jun
• #5531 release(preview): carry native sidecar packaging repair @lidge-jun
• #5536 release(preview): carry lipo verification fix @lidge-jun
• #5545 release(preview): carry verified checksum and signature repair @lidge-jun
• #5551 release(preview): carry Windows checksum record support @lidge-jun
• #5557 fix(release): carry the draft-then-publish release fix to preview @lidge-jun
• #5565 release: prepare 2.62.0-preview.20260923 version metadata @lidge-jun
• #5602 release: promote the verified tree to preview as 2.63.0-preview.20260923 @lidge-jun
• #5670 release: promote verified 2.64.0 preview tree @lidge-jun
• #5783 release: promote the verified 2.65.0 preview tree to preview @lidge-jun
• #5854 release: promote 2.66.0 to preview as 2.66.0-preview.20260925 @lidge-jun
• #5899 release: promote 2.67.0-preview.20260926 to preview @lidge-jun
• #6054 release: promote 2.68.0-preview.20260927 to preview @lidge-jun
• #6137 release: promote 2.69.0-preview.20260928 to preview @lidge-jun
• #6141 release: promote cleaned 2.69.0-preview.20260928 to preview @lidge-jun
• #6211 release: 2.70.0-preview.20260929 @lidge-jun
• #6227 release: 2.71.0-preview.20260929 @lidge-jun
• #6245 release: 2.72.0-preview.20260930 @lidge-jun
• #6265 release: promote 2.73.0-preview.20260930 to preview @lidge-jun
• #6272 release: carry the macOS keyring signing fix to preview @lidge-jun
• #6318 release: promote 2.74.0-preview.20260930 to preview @lidge-jun
• #6352 release: 2.75.0-preview.20261001 @lidge-jun
• #6454 refactor: break config-facade import cycles (189 -> 59 static cyclic modules) @lcxhh521
• #6467 release: 2.76.0-preview.20261003 @lidge-jun
• #6594 refactor(oauth): break the ChatGPT OAuth and auth-api import cycles @lcxhh521
• #6630 release: 2.78.0-preview.20261005 @lidge-jun
• #6814 feat(combos): opt-in advisory quota signals for JEV decisions (P1) @geunwoojun99
• #6891 feat(messaging): add explicit enrolled Codex SSH peers @phillipod
• #7058 fix(protocols): enforce explicit-empty tool catalogs across delivery paths @luvs01
• #7077 fix(catalog): preserve context inference through provider edits @lcxhh521
• #7085 test(codex): allow child generation diagnostics before outer timeout @luvs01
• #7089 fix(usage): keep usage-ledger file ids exact so Windows NTFS ids stop colliding @lidge-jun
• #7095 fix(responses): reclaim least recently used idle WebSocket at capacity @YayoiNanoka
• #7096 release: sync preview to main 2.85.0 @lidge-jun
• #7106 fix(desktop): serialize shim publication with production process creation (ETXTBSY) @lidge-jun
• #7109 chore(release): open dev at 2.87.0 before releasing 2.86.0 @github-actions[bot]
• #7113 fix(codex): show last Windows desktop build assessment @luvs01
• #7114 fix(gui): select Advisor model from the routed catalog @luvs01
• #7120 refactor(proxy): share opaque transport with desktop relay @lcxhh521
• #7127 release: sync preview to main 2.86.0 @lidge-jun
• #7128 fix(codex): carry canonical subagent limits across modes (#7125) @lidge-jun
• #7129 fix(claude): verify Desktop backup and optional metadata reads (carry #7084) @lidge-jun
• #7130 fix(catalog): preserve uncapped native maximum context windows @lidge-jun
• #7131 fix(responses): strip Google item metadata from native OpenAI requests @lidge-jun
• #7132 fix(anthropic): pair native beta schemas with effective headers @lidge-jun
• #7133 fix(service): bind Linux health sentinel recovery to pidfd @lidge-jun
• #7135 feat(providers): carry opt-in API key round-robin and per-key pacing (#6937) @lidge-jun
• #7136 fix(oauth): bound refresh consumers and retain stale owners (carry #7117) @lidge-jun
• #7137 fix(startup): launch the registered Desktop bundle and executable @lidge-jun
• #7138 fix(responses): frame retained compaction requests as history @lidge-jun
• #7139 feat(vertex): accept credential JSON with secure marker lifecycle (carry #6843) @lidge-jun
• #7140 fix(chat): restore DeepSeek reasoning on native tool continuations (#7118) @lidge-jun
• #7141 fix(oauth): preserve operator model policy across reconciliation @lidge-jun
• #7142 fix(cli): refuse uncertain ownership before publishing sibling runtime @lidge-jun
• #7143 fix(anthropic): surface Opus 5.5 progress as signed commentary @lidge-jun
• #7144 feat(codex): preserve signed-in quota across duplicate pool entries @lidge-jun
• #7145 fix(oauth): recover Muse Keychain login and preserve actionable errors @lidge-jun
• #7146 feat(codex): route hard-locked main-account traffic to a configured fallback model (carry #7123) @lidge-jun
• #7147 fix(anthropic): recover rejected thinking without local prefix validation @lidge-jun
• #7149 fix(codex): keep the desktop app open on codex-restart when its picker is current @lidge-jun
• #7150 feat(oauth): pin generic pool conversations to request-local accounts @lidge-jun
• #7151 test(codex): use shared Windows attest spawn budgets @lidge-jun
• #7153 feat(accounts): auto-pause repeated permanent account refusals @lidge-jun
• #7156 feat(cli): configure usage model table row limits (carry #6436) @lidge-jun
• #7157 feat(antigravity): show account membership tier badge (carry #5932) @lidge-jun
• #7158 feat(codex): opt in to remaining included quota (carry #6629) @lidge-jun
• #7159 feat(combos): require explicit consent for metered targets (carry #6839) @lidge-jun
• #7160 feat(pricing): support per-model prompt-length overrides (carry #6738) @lidge-jun
• #7161 fix(test): isolate service state from the shared startup home @lidge-jun
• #7162 feat(combos): enroll text-only members in vision sidecar (carry #4932) @lidge-jun
• #7163 feat(antigravity): preserve diagnostic per-model quota evidence (carry #6718) @lidge-jun
• #7164 feat(providers): add DeepSeek Harness authenticated account provider (carry #6293) @lidge-jun
• #7165 feat(claude-cli): stable replay and capture-only client tools (carry #6566) @lidge-jun
• #7166 feat(claude-cli): refuse launches when the Claude subscription is exhausted (carry #6566) @lidge-jun
• #7167 feat(oauth): reset-first strategy for generic OAuth pools (carry #5408) @lidge-jun
• #7170 feat(oauth): code-display login mode for hosts with no reachable localhost (carry #6239) @lidge-jun
• #7171 fix(oauth): print fixed CLI login errors instead of provider bodies @lidge-jun
• #7174 fix(claude): eliminate intercept integration port reservation race @lidge-jun
• #7180 test(claude): end the linger upload pump when the socket closes @lidge-jun
• #7181 fix(codex): protect the desktop authority key in-process on Windows x64 @lidge-jun
• #7182 test(cli): isolate sibling ensure from the running Desktop app @lidge-jun
• #7183 test(cli): derive audio non-readiness case budgets from their deadline @lidge-jun
• #7184 fix(startup): skip unused native Codex ownership probes @lidge-jun
• #7188 test(google): guard Argon thought separation across client protocols @lidge-jun
• #7196 fix(gui): fold Advisor into the Subagents row and collapse its notices @lidge-jun
• #7215 fix(service): carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) @lidge-jun
• #7216 fix(providers): carry Zed, Qoder, and OpenCode Gemini compatibility @lidge-jun
• #7217 feat(responses): carry compaction capabilities and reasoning retention @lidge-jun
• #7218 fix(responses): carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) @lidge-jun
• #7219 feat(advisor): carry bounded retention and adaptive consultation (#7134, #7124) @lidge-jun
• #7220 fix(catalog): carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) @lidge-jun
• #7222 feat(cli): carry usage comparison, log history, restart and Codex controls @lidge-jun
• #7223 feat(gui): carry Combo visibility, workspace panes, Windows picker and Gentle Shell @lidge-jun
• #7224 fix: carry OAuth combo cooldown, account rotation and health evidence fixes @lidge-jun
• #7225 fix: carry Claude translated-lane and usage-metering fixes (VB) @lidge-jun
• #7227 docs(chatgpt): clarify the app-server shim transport limit @Ingwannu
• #7235 fix(opencode-zen): route Claude through Anthropic Messages @norths7ar
• #7236 fix: carry account recovery, server-tool buffer, and usage corrections @lidge-jun
• #7237 fix(gui): restore keep-native-v1 qualifier placement @lidge-jun
• #7238 fix(config): preserve legacy OpenCode Go configs after native wire pins @lidge-jun
• #7239 fix(compact): preserve retained reasoning across native combo failover @lidge-jun
• #7240 fix: charge key cooldown to the credential sent @lidge-jun
• #7241 fix(ci): preserve import cycles through macOS path aliases @lidge-jun
• #7242 test: fix Windows default-home isolation fixtures @lidge-jun
• #7243 fix(claude): activate Windows picker after dormant startup @lidge-jun
• #7244 fix: preserve Codex opt-out, concurrent syncs, and usage ownership @lidge-jun
• #7246 fix(desktop): use standard no-op waker in spawn test @lidge-jun
• #7248 chore(release): open dev at 2.88.0 before releasing 2.87.0 @github-actions[bot]
• #7251 fix(claude): replay Anthropic server-tool exchanges on the translated lane (carry #7205) @lidge-jun
• #7252 fix: preserve carry reference numbers across the text window cap @lidge-jun
• #7253 fix(routing): price refused-then-served rows in routing analytics @vadymhimself
• #7254 fix(google): stop leaked Gemini planning from spreading through replayed history @lidge-jun
• #7259 fix(catalog): preserve OpenAI API display name overrides @jdeurt
• #7261 fix(chat): return gateway request-history IDs @lidge-jun
• #7262 fix(cli): preserve startup with IPv6 loopback disabled @lidge-jun
• #7263 chore(release): open dev at 2.89.0 before releasing 2.88.0 @github-actions[bot]
• #7266 fix(vertex): honor project and location for API-key inference @andrew05060414
• #7276 fix(codex): validate subagent limit boundaries before writes @luvs01
• #7280 fix(google): preserve matched and orphan Vertex Argon tool images @Jossi02
• #7282 feat(compatibility): separate custom-tool grammar evidence from representation @lidge-jun
• #7283 fix(antigravity): show the Gemini 4 Argon quota group separately @lidge-jun
• #7284 feat(combos): let a combo set its catalog row description (#7229) @lidge-jun
• #7285 feat(responses): opt-in compression of outbound ChatGPT Responses request bodies @lidge-jun
• #7286 feat(codex): opt-in OS desktop notification for low-quota protection @lidge-jun
• #7287 feat(providers): explicit single-model completion test @lidge-jun
• #7296 feat(vertex): resolve each API key's project with project "auto" @chilung-cgu
• #7327 fix(service): never bake Claude first-party's own intercept proxy @scy7796
• #7341 feat(anthropic): default prompt-cache TTL to 1h on first-party Anthropic @lidge-jun
• #7351 chore(providers): remove opencode-free and migrate saved configs @lidge-jun
• #7352 fix(sidecar): map provider input overflow to context_length_exceeded @lidge-jun
• #7353 fix(responses): handle replayed hosted web-search history (#7250, #7269) @lidge-jun
• #7354 fix(combos): keep tool loops on one target and make failover history safe (#7298) @lidge-jun
• #7355 fix(combos): absorb community failover fixes (#7317, #7329, #7339, #7320) @lidge-jun
• #7356 ci(release): sign Windows binaries and MSI via SignPath (#7207) @lidge-jun
• #7357 test(responses): register combo-tool-loop-pin in the core module inventory @lidge-jun
• #7358 test(windows): keep ACL subprocess work out of cache and registration assertions @lidge-jun
• #7359 test(temp): let the final-EPERM quarantine see through Windows 8.3 TEMP aliases @lidge-jun
• #7360 test(combos): await the fallback lease release on both passthrough relays @lidge-jun
• #7361 test(temp): compare the default containment result through the native resolver @lidge-jun
• #7362 fix(launcher): scope an inherited transpiler cache to the Bun version it starts @lidge-jun
• #7363 test(desktop): hold early client bytes in the socks5 egress fixture @lidge-jun
• #7364 fix(runtime): scope server children's transpiler cache and keep scoping idempotent @lidge-jun
• #7365 test(launcher): assert the scoped env and versioned bundled runtime in source oracles @lidge-jun
• #7371 chore(release): open dev at 2.90.0 before releasing 2.89.0 @github-actions[bot]
• #7387 test: cover Claude CLI JSON schema contract @adirwt852-cloud
• #7388 fix(responses): recover cold opaque state and harden replay, archive and lifecycle paths @lidge-jun
• #7389 fix(responses): carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) @lidge-jun
• #7393 fix(codex): renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main @lidge-jun
• #7394 fix(providers): carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 @lidge-jun
• #7395 fix(providers): carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 @lidge-jun
• #7396 fix(providers): gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles @lidge-jun
• #7397 fix(oauth): harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) @lidge-jun
• #7408 fix(codex): pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition @lidge-jun
• #7414 fix(codex): stop pool accounts from spending the native main account (#7398) @lidge-jun
• #7419 fix(responses): keep search replay ID allocation linear @luvs01
• #7420 fix(config): preserve disabled sidecars when targets retire @luvs01
• #7421 fix(ci): verify installer signature before administrative extraction @luvs01
• #7422 fix(runtime): keep transpiler cache scopes within configured paths @luvs01
• #7424 fix(claude-cli): keep model text out of inferred cooldowns @luvs01
• #7445 chore(providers): deprecate mimo-free @heerey525
• #7449 test: bound shell integration scenarios independently @oliver-mee
• #7455 fix(kiro): read the whoami identity when kiro-cli appends its Profile block @martinbcg
• #7458 fix(logs): preserve replay-refusal provenance through response finalization @norths7ar
• #7463 fix(chat): fail unmet required client tool completions @Ingwannu
• #7464 fix(responses): preserve upgrade-only reasoning inclusion @luvs01
• #7466 test(launcher): place PATH-Bun fixtures under a trusted ancestry @lidge-jun
• #7467 fix(test): arm the real-home write guard when bun test skips the preload @lidge-jun
• #7468 test: make update recovery, messages cancellation, and CLI parity harnesses deterministic @lidge-jun
• #7469 fix(chat): carry Anthropic thinking signatures through reasoning_details @lidge-jun
• #7470 fix(auth): refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct @lidge-jun
• #7473 fix(responses): handle Codex 0.164 request controls @lidge-jun
• #7475 chore(release): open dev at 2.91.0 before releasing 2.90.0 @github-actions[bot]
• #7476 feat(management): passive GET /api/quota-pool (ocx.quota-pool/1 producer) @lidge-jun
• #7477 feat(readyz): advertise peer features from one registry @lidge-jun
• #7480 fix(deps): clear high-severity audit findings blocking the 2.90.0 release @lidge-jun
• #7482 feat(fallback): OCX-11 fallback off per scope, with home_unreachable on Children @lidge-jun
• #7483 feat(service): passive ocx service status --json and install-method verdict in ocx status --json @lidge-jun
• #7484 feat(link): parity on apply — restart the Child runtime, record and report the apply (OCX-6) @lidge-jun
• #7487 test(update): let the test-scoped Windows ACL belt through the host-free helper @lidge-jun
• #7488 ci(windows): flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) @lidge-jun
• #7489 fix(quota-pool): adopt a concurrent winner's identity instead of refusing it @lidge-jun
• #7490 feat(remote): name the serving Home in x-opencodex-served-by (OCX-2) @lidge-jun
• #7492 feat(cli): mark provider list rows active when they serve (OCX-12) @lidge-jun
• #7493 fix(mistral): scope queue_full to the waiting identity; address #7474 review @lidge-jun
• #7494 feat(link): report each Child version and a compatibility verdict in ocx link status @lidge-jun
• #7496 fix(link): refuse Windows Children with a Hub-mode pointer and explain existing ones @lidge-jun
• #7501 test: make ten Windows-sensitive flaky tests deterministic @lidge-jun
• #7502 test(server): expect the platform's exit signal for a replacement that ignores SIGTERM @lidge-jun
• #7503 ci(selector): flag process-signal code as Windows-sensitive @lidge-jun
• #7504 fix(chat): isolate Anthropic reasoning state from native passthrough @luvs01
• #7508 fix(test): bind and serialize queue lock ownership @luvs01
• #7509 fix(service): preserve unrelated authenticated loopback proxies @luvs01
• #7510 fix(routing): normalize analytics usage rows @luvs01
• #7511 fix(chat): persist Reserve helper refusal request IDs @luvs01
• #7514 fix(cli): use attested capabilities for local usage comparisons @luvs01
• #7520 fix(messaging): reject macOS ACL-exposed state @luvs01
• #7522 fix(codex): distrust picker freshness without binding evidence @luvs01
• #7527 fix(coding-agent): launch native Windows CLIs and refuse empty-arg-dropping dispatchers @lidge-jun
• #7528 test: settle Windows ACL work and owner locks before fixture removal @lidge-jun
• #7531 fix(reasoning): separate support, thinking toggles and effort controls @norths7ar
• #7532 chore(release): open dev at 2.92.0 before releasing 2.91.0 @github-actions[bot]
• #7534 feat(codex): expose opt-in Flex tier for eligible routed models @Transient-Onlooker
• #7535 docs(devlog): record the 2.92.0 sweep wave plan @lidge-jun
• #7538 fix(retry): honor upstream no-retry verdict (carry #7505) @lidge-jun
• #7539 fix(chat): finish with length when a Responses upstream reports incomplete reason "length" @lidge-jun
• #7541 perf(sse): avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) @lidge-jun
• #7542 feat(logs): support x-hermes-conversation-id for Hermes session correlation (carry #7459) @lidge-jun
• #7543 fix(service): bind ownership lease release to its acquisition @luvs01
• #7545 fix(qoder): provider-only catalog, replay-envelope refusal and isolated status @lidge-jun
• #7546 fix(codex): bind CLI update plans to installation content and pre-dotenv transport @lidge-jun
• #7548 fix(windows): read the effective SID in-process so service install does not wait on a cold PowerShell @lidge-jun
• #7549 fix(jev): publish Antigravity family quota as decision evidence (carry #7442) @lidge-jun
• #7550 docs(subagents): explain how spawn_agent fills its five model slots @chlwnsgurg
• #7551 fix(codex): list pool accounts without a native home and expose safe slot identity metadata @lidge-jun
• #7552 test: make codex-runtime, client-connect and loopback-listener tests deterministic @lidge-jun
• #7554 fix(responses): infer message phase for passthrough providers @lidge-jun
• #7555 fix(providers): refresh dated Token Plan catalogue and metadata @lidge-jun
• #7556 fix(antigravity): route models only to accounts whose roster serves them @lidge-jun
• #7557 fix(codex): calibrate Business Premium display capacity @lidge-jun
• #7558 fix(command-code): rotate on insufficient-credit refusals @lidge-jun
• #7560 fix(link): keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics @lidge-jun
• #7564 fix(link): keep a connected client's integrations across ocx stop; status names ocx sync --restart-codex (#7563) @lidge-jun
• #7565 fix(i18n): complete Turkish dashboard copy and documentation @ardakrt
• #7566 fix(replay): isolate retained reasoning state by admitted caller (carry #7523) @lidge-jun
• #7567 feat(jev): opt-in session pin keeps a JEV combo session on its decided target @lidge-jun
• #7570 docs(release): end release notes with the SignPath code signing attribution @lidge-jun
• #7571 docs(site): show the SignPath attribution and code signing policy on the download section @lidge-jun
• #7573 fix(responses): always send a title on url_citation and repair old history on replay @inforanger
• #7574 fix(router): support Vercel JEV decisions and thinking model reasoning replay @omar391
• #7576 fix(providers): backfill Token Plan output limits on roster refresh @lidge-jun
• #7577 fix(codex): refuse uncertain prefix-local Node observations @luvs01
• #7581 feat(quota): read Abliteration credit balance from /v1/credits @btorres0318
• #7582 fix(desktop): revoke usage trials after identity verification fails @luvs01
• #7584 fix(providers): fold developer role to system for moonshot @lidge-jun
• #7585 fix(codex): keep npm Node cache within inspection lifetime @luvs01
• #7588 fix(fallback): check the first hard-lock combo destination @luvs01
• #7589 fix(fallback): check the first hard-lock profile destination @luvs01
• #7591 fix(deepseek): restore official V4 Pro availability @norths7ar
• #7597 fix(codex): stop guardian refresh of grants persisted as revoked @lidge-jun
• #7598 test: keep cold first-exec and PowerShell start out of two timed cases @lidge-jun
• #7600 fix(catalog): send native ultra effort as max on the wire (#7590) @lidge-jun
• #7601 fix(cli): keep the stored strategy when combo set replaces targets @lidge-jun
• #7602 docs(cli): an existing JEV combo keeps its stored decision method @lidge-jun
• #7604 feat(workbuddy): add subscription and credit support @terrytan95
• #7606 fix(deps): ship Bun 1.4.4 runtime to drop the compromised eMudhra root @LPFchan
• #7607 test(layout): move the Abliteration quota test to a shard to restore the layout.json size cap on dev @lidge-jun
• #7610 fix(codex): fence uncertain catalog entry identity @luvs01
• #7615 docs(providers): qualify Qoder native executable precedence across PATH folders @lidge-jun
• #7616 docs(getting-started): align Korean installation guide with Bun 1.4.4 pin @mvanhorn
• #7617 fix(codex): keep a role's model when auto-assign finds an equal-priced tie @LilMGenius
• #7621 fix(codex): renew credit evidence for namespace-bound Direct accounts @Caledvwlch
• #7622 fix(codex): preserve credit recovery retry hints and scoped cooldowns @Caledvwlch
• #7623 feat(providers): add AI Stupid Level API-key preset @StudioPlatforms
• #7627 chore(test): align Bun runner with the 1.4.4 security baseline @luvs01
• #7629 fix(link): preserve literal SSH include names on Bun 1.4.4 @luvs01
• #7630 fix(cursor): use Bun glob matching for native grep @luvs01
• #7631 perf(eventstream): use Bun native CRC32 for Kiro frame validation @luvs01
• #7633 chore(release): open dev at 2.93.0 before releasing 2.92.0 @github-actions[bot]
• #7635 fix(live): bound WebSocket close without releasing live ownership @luvs01
• #7642 fix(deps): pin zod 4.6.6 and body-parser 2.4.0 for audit:high @lidge-jun
• #7644 fix(deps): bump gui happy-dom to 21.0.4 (GHSA-834v-8h66-3h79) @lidge-jun
• #7646 docs: translate Mistral and OpenGateway provider behavior across locales @lidge-jun
• #7647 fix(deps): patch Hono and ip-address advisories and align qs @lidge-jun
• #7649 test(server): isolate agent-task-recovery fixtures (#7613) @lidge-jun
• #7650 fix(gui): cancel Remote Link sheet focus work (#7611) @lidge-jun
• #7656 fix(windows): resolve ACL principal natively without cold PowerShell @lidge-jun
• #7657 feat(usage): price and seed Kimi K3.1 Pro on Kimi Code and Moonshot @lidge-jun
• #7658 ci: run docker/keyring smoke and React Doctor on PRs only when their inputs change @lidge-jun
• #7659 fix(codex): preserve sync edits with canonical sandbox checks @lidge-jun
• #7661 perf(socks5): bound upload waiters and release completed read results @luvs01
• #7662 fix(socks5): deliver partial response payloads promptly and release terminal sockets @luvs01
• #7663 perf(proxy): bound CONNECT header buffering and avoid repeated prefix copies @luvs01
• #7664 feat(gui): expose JEV session pin in Combo editor @lidge-jun
• #7665 feat(clients): connect Qoder CN and WorkBuddy desktop editions @Flowershangfromthebranches
• #7666 fix(quota): bound snapshot persistence under sustained updates @luvs01
• #7667 fix(transport): honor backpressure in pinned HTTP responses @luvs01
• #7669 fix(remote-workspace): observe Pi prompt failures before acknowledgement @luvs01
• #7670 perf(adapters): use native SHA-256 for tool identity digests @luvs01
• #7671 perf(responses): avoid input Buffer copies in gzip requests @luvs01
• #7672 perf(codex): validate audit UTF-8 without round-trip Buffer copies @luvs01
• #7673 perf(eventstream): avoid quadratic copying of fragmented frames @luvs01
• #7675 perf(responses): coalesce queued thought-signature snapshot writes @luvs01
• #7676 perf(streams): avoid repeated growing-buffer prefix extraction in SSE decoding @luvs01
• #7678 fix(runtime): release detached sweep hooks and preserve replacement timers @luvs01
• #7679 perf(usage): bound timeline aggregation scratch memory and avoid argument overflow @luvs01
• #7680 perf(history): skip unchanged partial-tail reads and SQLite metadata rewrites @luvs01
• #7682 fix(responses): preserve gateway citations during native compact @luvs01
• #7683 fix(routing): inspect hard-lock fallback without selecting candidates @luvs01
• #7686 docs: correct ADR-7517 contract owner @luvs01
• #7687 fix(kiro): fail over accounts when overage quota is exhausted @martinbcg
• #7688 fix(config): skip optional hardening for non-directory homes @luvs01
• #7689 fix(ci): select Docker smoke for actual image build inputs @luvs01
• #7692 fix(codex): detect LazyCodex installed from the marketplace @LilMGenius
• #7695 feat(providers): seed Kimi K3.1 Pro on the Moonshot API preset @lidge-jun
• #7696 fix(command-code): answer MODEL_NOT_IN_PLAN once as a model-scoped 400 @lidge-jun
• #7698 fix(ci): wake the PR gate when attribution-approved is applied @lidge-jun
• #7699 fix(ci): bind exception approval labels to the evaluated head @lidge-jun
• #7700 feat(integrations): connect named Hermes profiles (#7674) @lidge-jun
• #7706 test(server): isolate port reclaim fixture identity and clock @luvs01
• #7707 feat(sync): ocx sync --expect-link / --expect-hub-key refuses a different Home (#7694) @lidge-jun
• #7709 fix(desktop): bind usage trials to fresh package proof @luvs01
• #7715 fix(scripts): use Bun timeout flag in temporary-file diagnostics @luvs01
• #7721 fix(claude): classify legacy Desktop aliases before native fallback @luvs01
• #7722 fix(service): preserve Windows probe support across Node and Bun @luvs01
• #7723 feat(combos): add opt-in cooldown recovery with configurable interval @artur-safonov
• #7724 fix(protocols): account for Antigravity direct Chat IR @luvs01
• #7725 fix(responses): notice a Codex WebSocket that dies after the response started @FredAmartey
• #7729 fix(management): declare Hermes profile discovery route @luvs01
• #7731 fix(codex): clamp native efforts to selected model ladder @Plamyth
• #7733 test(cli): copy launcher module dependencies into activation fixtures @luvs01
• #7734 fix(cli): enforce the Bun patch floor in automatic PATH fallback @luvs01
• #7735 fix(meta): preserve destinations when refreshing saved model rosters @luvs01
• #7740 test(cli): let the forged sibling-env start bind its own port @lidge-jun
• #7741 fix(combo): reject buffered required-tool false successes @lidge-jun
• #7743 fix(responses): bound closing handshakes for non-reused upstream WebSockets (carry #7681) @lidge-jun
• #7744 fix(usage): retain Kiro prompt estimates in hosted tool paths (carry #7620) @lidge-jun
• #7746 fix(minimax): move to GA MiniMax-M3.1-Flash and rename the retired preview id @lidge-jun
• #7747 fix(update): keep Codex routing for the restarted proxy during an update (#7423) @lidge-jun
• #7749 fix(anthropic): preserve cache prefixes during routed compaction (#7307) @lidge-jun
• #7751 fix(update): join the Windows npm tree before stage cleanup @lidge-jun
• #7754 fix(stop): send local stop requests directly to the loopback runtime @lidge-jun
• #7767 fix(live): keep sideband admission until the upstream closes after client cancellation @lidge-jun
• #7777 fix(claude): drain parent ACL flights before intercept secret writes @lidge-jun
• #7779 feat(models): add GPT-6.1 Terra alongside GPT-5.6 Terra (non-Cursor providers, catalog, pricing, docs) @lidge-jun
• #7782 ci: run import-graph tests on pull requests and verify merged batches on dev @lidge-jun
• #7796 release: promote frozen tip 2606f6f922 to preview as 2.93.0-preview.20261027 @lidge-jun

Code signing

Windows binaries follow the code signing policy. Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Главное

• Поддержка подписок и кредитов.
• Проект каждого API-ключа определяется через project "auto".
• Опциональное закрепление сессии удерживает сессию JEV combo на уже выбранной цели.
• Поддержка x-hermes-conversation-id для сопоставления сессий Hermes.

Новые возможности

• Чтение баланса кредитов Abliteration из /v1/credits.
• Устранены повторное сканирование и выравнивание фрагментированного SSE carry.
• Повторы: учитывается вердикт провайдера о невозможности повтора, а ID отклонённых запросов помощника Reserve сохраняются.

Исправления

• Модели маршрутизируются только в аккаунты, чей список их обслуживает; датированный каталог Token Plan обновляется, его лимиты вывода заполняются.
• Состояние, раскрытое через ACL macOS, отклоняется; свежесть выбора не считается надёжной без подтверждающих данных.
• Причина incomplete "length" от провайдера Responses теперь завершает ответ по длине.
• Квота линейки Antigravity публикуется как основание для решения, а фаза сообщения определяется для провайдеров прямого проброса.
• Посторонние аутентифицированные loopback-прокси сохраняются.
• Планы обновления CLI привязываются к установленному содержимому и транспорту до dotenv.
• Неудачные туннели Home повторяются, состояние связи Child сообщается, диагностика туннеля записывается.
• Роль developer для moonshot сводится к system.
• Нативный уровень ultra отправляется как max.
• В поставку входит рантайм Bun 1.4.4, поэтому скомпрометированный корень eMudhra удалён.
• Для перепубликации 2.92.0 с audit:high закреплены zod и body-parser, happy-dom в GUI обновлён до 21.0.4.

Официальные примечания к выпуску

Published to npm as @bitkyc08/opencodex@2.91.0 with dist-tag latest.

New Features

• Passive GET /api/quota-pool (ocx.quota-pool/1 producer) (#7476)
• Advertise peer features from one registry (#7477)
• Parity on apply — restart the Child runtime, record and report the apply (OCX-6) (#7484)
• Name the serving Home in x-opencodex-served-by (OCX-2) (#7490)
• Mark provider list rows active when they serve (OCX-12) (#7492)
• Report each Child version and a compatibility verdict in ocx link status (#7494)
• Passive ocx service status --json and install-method verdict in ocx status --json (#7483)
• OCX-11 fallback off per scope, with home_unreachable on Children (#7482)

Bug Fixes

• Clear high-severity audit findings blocking the 2.90.0 release (#7480)
• Arm the real-home write guard when bun test skips the preload (#7467)
• Refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct (#7470)
• Handle Codex 0.164 request controls (#7473)
• Carry Anthropic thinking signatures through reasoning_details (#7469)
• Adopt a concurrent winner's identity instead of refusing it (#7489)
• Scope queue_full to the waiting identity; address #7474 review (#7493)
• Refuse Windows Children with a Hub-mode pointer and explain existing ones (#7496)

Chores

• Cover Claude CLI JSON schema contract (#7387)
• Make update recovery, messages cancellation, and CLI parity harnesses deterministic (#7468)
• Let the test-scoped Windows ACL belt through the host-free helper (#7487)
• Place PATH-Bun fixtures under a trusted ancestry (#7466)
• Flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) (#7488)
• Expect the platform's exit signal for a replacement that ignores SIGTERM (#7502)
• Make ten Windows-sensitive flaky tests deterministic (#7501)
• Flag process-signal code as Windows-sensitive (#7503)

Other Changes

• Open dev at 2.91.0 before releasing 2.90.0 (#7475)
• Promote dev 1025acd4b1 to main as 2.91.0 (#7530)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.90.0...v2.91.0

• #7387 test: cover Claude CLI JSON schema contract @adirwt852-cloud
• #7466 test(launcher): place PATH-Bun fixtures under a trusted ancestry @lidge-jun
• #7467 fix(test): arm the real-home write guard when bun test skips the preload @lidge-jun
• #7468 test: make update recovery, messages cancellation, and CLI parity harnesses deterministic @lidge-jun
• #7469 fix(chat): carry Anthropic thinking signatures through reasoning_details @lidge-jun
• #7470 fix(auth): refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct @lidge-jun
• #7473 fix(responses): handle Codex 0.164 request controls @lidge-jun
• #7475 chore(release): open dev at 2.91.0 before releasing 2.90.0 @github-actions[bot]
• #7476 feat(management): passive GET /api/quota-pool (ocx.quota-pool/1 producer) @lidge-jun
• #7477 feat(readyz): advertise peer features from one registry @lidge-jun
• #7480 fix(deps): clear high-severity audit findings blocking the 2.90.0 release @lidge-jun
• #7482 feat(fallback): OCX-11 fallback off per scope, with home_unreachable on Children @lidge-jun
• #7483 feat(service): passive ocx service status --json and install-method verdict in ocx status --json @lidge-jun
• #7484 feat(link): parity on apply — restart the Child runtime, record and report the apply (OCX-6) @lidge-jun
• #7487 test(update): let the test-scoped Windows ACL belt through the host-free helper @lidge-jun
• #7488 ci(windows): flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) @lidge-jun
• #7489 fix(quota-pool): adopt a concurrent winner's identity instead of refusing it @lidge-jun
• #7490 feat(remote): name the serving Home in x-opencodex-served-by (OCX-2) @lidge-jun
• #7492 feat(cli): mark provider list rows active when they serve (OCX-12) @lidge-jun
• #7493 fix(mistral): scope queue_full to the waiting identity; address #7474 review @lidge-jun
• #7494 feat(link): report each Child version and a compatibility verdict in ocx link status @lidge-jun
• #7496 fix(link): refuse Windows Children with a Hub-mode pointer and explain existing ones @lidge-jun
• #7501 test: make ten Windows-sensitive flaky tests deterministic @lidge-jun
• #7502 test(server): expect the platform's exit signal for a replacement that ignores SIGTERM @lidge-jun
• #7503 ci(selector): flag process-signal code as Windows-sensitive @lidge-jun
• #7530 release: promote dev 1025acd4b1 to main as 2.91.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.90.0 with dist-tag latest.

Bug Fixes

• Recover cold opaque state and harden replay, archive and lifecycle paths (#7388)
• Carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) (#7389)
• Renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main (#7393)
• Carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 (#7394)
• Harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) (#7397)
• Gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles (#7396)
• Carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 (#7395)
• Pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition (#7408)
• Stop pool accounts from spending the native main account (#7398) (#7414)
• Keep search replay ID allocation linear (#7419)
• Keep transpiler cache scopes within configured paths (#7422)
• Keep model text out of inferred cooldowns (#7424)
• Read the whoami identity when kiro-cli appends its Profile block (#7455)
• Preserve upgrade-only reasoning inclusion (#7464)
• Promote dev 845ac6b875 to main as 2.90.0 (#7474)
• Carry the dependency-audit fix to main for 2.90.0 (#7481)

Chores

• Bound shell integration scenarios independently (#7449)

Other Changes

• Open dev at 2.90.0 before releasing 2.89.0 (#7371)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.89.0...v2.90.0

• #7371 chore(release): open dev at 2.90.0 before releasing 2.89.0 @github-actions[bot]
• #7388 fix(responses): recover cold opaque state and harden replay, archive and lifecycle paths @lidge-jun
• #7389 fix(responses): carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) @lidge-jun
• #7393 fix(codex): renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main @lidge-jun
• #7394 fix(providers): carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 @lidge-jun
• #7395 fix(providers): carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 @lidge-jun
• #7396 fix(providers): gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles @lidge-jun
• #7397 fix(oauth): harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) @lidge-jun
• #7408 fix(codex): pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition @lidge-jun
• #7414 fix(codex): stop pool accounts from spending the native main account (#7398) @lidge-jun
• #7419 fix(responses): keep search replay ID allocation linear @luvs01
• #7422 fix(runtime): keep transpiler cache scopes within configured paths @luvs01
• #7424 fix(claude-cli): keep model text out of inferred cooldowns @luvs01
• #7449 test: bound shell integration scenarios independently @oliver-mee
• #7455 fix(kiro): read the whoami identity when kiro-cli appends its Profile block @martinbcg
• #7464 fix(responses): preserve upgrade-only reasoning inclusion @luvs01
• #7474 release: promote dev 845ac6b875 to main as 2.90.0 @lidge-jun
• #7481 release: carry the dependency-audit fix to main for 2.90.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.89.0 with dist-tag latest.

New Features

• Separate custom-tool grammar evidence from representation (#7282)
• Let a combo set its catalog row description (#7229) (#7284)
• Opt-in compression of outbound ChatGPT Responses request bodies (#7285)
• Auto-pause repeated permanent account refusals (#7153)
• Explicit single-model completion test (#7287)
• Opt-in OS desktop notification for low-quota protection (#7286)
• Opt-in advisory quota signals for JEV decisions (P1) (#6814)
• Add explicit enrolled Codex SSH peers (#6891)
• Default prompt-cache TTL to 1h on first-party Anthropic (#7341)

Bug Fixes

• Show the Gemini 4 Argon quota group separately (#7283)
• Honor project and location for API-key inference (#7266)
• Preserve matched and orphan Vertex Argon tool images (#7280)
• Never bake Claude first-party's own intercept proxy (#7327)
• Map provider input overflow to context_length_exceeded (#7352)
• Handle replayed hosted web-search history (#7250, #7269) (#7353)
• Keep tool loops on one target and make failover history safe (#7298) (#7354)
• Absorb community failover fixes (#7317, #7329, #7339, #7320) (#7355)
• Scope an inherited transpiler cache to the Bun version it starts (#7362)
• Scope server children's transpiler cache and keep scoping idempotent (#7364)

Chores

• Sign Windows binaries and MSI via SignPath (#7207) (#7356)
• Remove opencode-free and migrate saved configs (#7351)
• Register combo-tool-loop-pin in the core module inventory (#7357)
• Keep ACL subprocess work out of cache and registration assertions (#7358)
• Let the final-EPERM quarantine see through Windows 8.3 TEMP aliases (#7359)
• Await the fallback lease release on both passthrough relays (#7360)
• Compare the default containment result through the native resolver (#7361)
• Hold early client bytes in the socks5 egress fixture (#7363)
• Assert the scoped env and versioned bundled runtime in source oracles (#7365)

Other Changes

• Open dev at 2.89.0 before releasing 2.88.0 (#7263)
• Promote dev 52c326b479 to main as 2.89.0 (#7372)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.88.0...v2.89.0

• #6814 feat(combos): opt-in advisory quota signals for JEV decisions (P1) @geunwoojun99
• #6891 feat(messaging): add explicit enrolled Codex SSH peers @phillipod
• #7153 feat(accounts): auto-pause repeated permanent account refusals @lidge-jun
• #7263 chore(release): open dev at 2.89.0 before releasing 2.88.0 @github-actions[bot]
• #7266 fix(vertex): honor project and location for API-key inference @andrew05060414
• #7280 fix(google): preserve matched and orphan Vertex Argon tool images @Jossi02
• #7282 feat(compatibility): separate custom-tool grammar evidence from representation @lidge-jun
• #7283 fix(antigravity): show the Gemini 4 Argon quota group separately @lidge-jun
• #7284 feat(combos): let a combo set its catalog row description (#7229) @lidge-jun
• #7285 feat(responses): opt-in compression of outbound ChatGPT Responses request bodies @lidge-jun
• #7286 feat(codex): opt-in OS desktop notification for low-quota protection @lidge-jun
• #7287 feat(providers): explicit single-model completion test @lidge-jun
• #7327 fix(service): never bake Claude first-party's own intercept proxy @scy7796
• #7341 feat(anthropic): default prompt-cache TTL to 1h on first-party Anthropic @lidge-jun
• #7351 chore(providers): remove opencode-free and migrate saved configs @lidge-jun
• #7352 fix(sidecar): map provider input overflow to context_length_exceeded @lidge-jun
• #7353 fix(responses): handle replayed hosted web-search history (#7250, #7269) @lidge-jun
• #7354 fix(combos): keep tool loops on one target and make failover history safe (#7298) @lidge-jun
• #7355 fix(combos): absorb community failover fixes (#7317, #7329, #7339, #7320) @lidge-jun
• #7356 ci(release): sign Windows binaries and MSI via SignPath (#7207) @lidge-jun
• #7357 test(responses): register combo-tool-loop-pin in the core module inventory @lidge-jun
• #7358 test(windows): keep ACL subprocess work out of cache and registration assertions @lidge-jun
• #7359 test(temp): let the final-EPERM quarantine see through Windows 8.3 TEMP aliases @lidge-jun
• #7360 test(combos): await the fallback lease release on both passthrough relays @lidge-jun
• #7361 test(temp): compare the default containment result through the native resolver @lidge-jun
• #7362 fix(launcher): scope an inherited transpiler cache to the Bun version it starts @lidge-jun
• #7363 test(desktop): hold early client bytes in the socks5 egress fixture @lidge-jun
• #7364 fix(runtime): scope server children's transpiler cache and keep scoping idempotent @lidge-jun
• #7365 test(launcher): assert the scoped env and versioned bundled runtime in source oracles @lidge-jun
• #7372 release: promote dev 52c326b479 to main as 2.89.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.88.0 with dist-tag latest.

Bug Fixes

• Preserve carry reference numbers across the text window cap (#7252)
• Carry account recovery, server-tool buffer, and usage corrections (#7236)
• Skip unused native Codex ownership probes (#7184)
• Replay Anthropic server-tool exchanges on the translated lane (carry #7205) (#7251)
• Stop leaked Gemini planning from spreading through replayed history (#7254)
• Preserve OpenAI API display name overrides (#7259)
• Price refused-then-served rows in routing analytics (#7253)
• Preserve startup with IPv6 loopback disabled (#7262)
• Return gateway request-history IDs (#7261)
• Reclaim least recently used idle WebSocket at capacity (#7095)
• Route Claude through Anthropic Messages (#7235)
• Recover rejected thinking without local prefix validation (#7147)

Documentation

• Clarify the app-server shim transport limit (#7227)

Other Changes

• Open dev at 2.88.0 before releasing 2.87.0 (#7248)
• Promote dev 7761e04edb to main as 2.88.0 (#7264)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.87.0...v2.88.0

• #7095 fix(responses): reclaim least recently used idle WebSocket at capacity @YayoiNanoka
• #7147 fix(anthropic): recover rejected thinking without local prefix validation @lidge-jun
• #7184 fix(startup): skip unused native Codex ownership probes @lidge-jun
• #7227 docs(chatgpt): clarify the app-server shim transport limit @Ingwannu
• #7235 fix(opencode-zen): route Claude through Anthropic Messages @norths7ar
• #7236 fix: carry account recovery, server-tool buffer, and usage corrections @lidge-jun
• #7248 chore(release): open dev at 2.88.0 before releasing 2.87.0 @github-actions[bot]
• #7251 fix(claude): replay Anthropic server-tool exchanges on the translated lane (carry #7205) @lidge-jun
• #7252 fix: preserve carry reference numbers across the text window cap @lidge-jun
• #7253 fix(routing): price refused-then-served rows in routing analytics @vadymhimself
• #7254 fix(google): stop leaked Gemini planning from spreading through replayed history @lidge-jun
• #7259 fix(catalog): preserve OpenAI API display name overrides @jdeurt
• #7261 fix(chat): return gateway request-history IDs @lidge-jun
• #7262 fix(cli): preserve startup with IPv6 loopback disabled @lidge-jun
• #7264 release: promote dev 7761e04edb to main as 2.88.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.87.0 with dist-tag latest.

New Features

• Route hard-locked main-account traffic to a configured fallback model (carry #7123) (#7146)
• Configure usage model table row limits (carry #6436) (#7156)
• Show account membership tier badge (carry #5932) (#7157)
• Opt in to remaining included quota (carry #6629) (#7158)
• Require explicit consent for metered targets (carry #6839) (#7159)
• Support per-model prompt-length overrides (carry #6738) (#7160)
• Enroll text-only members in vision sidecar (carry #4932) (#7162)
• Reset-first strategy for generic OAuth pools (carry #5408) (#7167)
• Add DeepSeek Harness authenticated account provider (carry #6293) (#7164)
• Stable replay and capture-only client tools (carry #6566) (#7165)
• Refuse launches when the Claude subscription is exhausted (carry #6566) (#7166)
• Code-display login mode for hosts with no reachable localhost (carry #6239) (#7170)
• Pin generic pool conversations to request-local accounts (#7150)
• Preserve signed-in quota across duplicate pool entries (#7144)
• Accept credential JSON with secure marker lifecycle (carry #6843) (#7139)
• Carry bounded retention and adaptive consultation (#7134, #7124) (#7219)
• Preserve diagnostic per-model quota evidence (carry #6718) (#7163)
• Carry opt-in API key round-robin and per-key pacing (#6937) (#7135)
• Carry Combo visibility, workspace panes, Windows picker and Gentle Shell (#7223)
• Carry compaction capabilities and reasoning retention (#7217)
• Carry usage comparison, log history, restart and Codex controls (#7222)

Bug Fixes

• Show last Windows desktop build assessment (#7113)
• Preserve context inference through provider edits (#7077)
• Enforce explicit-empty tool catalogs across delivery paths (#7058)
• Select Advisor model from the routed catalog (#7114)
• Keep usage-ledger file ids exact so Windows NTFS ids stop colliding (#7089)
• Serialize shim publication with production process creation (ETXTBSY) (#7106)
• Verify Desktop backup and optional metadata reads (carry #7084) (#7129)
• Pair native beta schemas with effective headers (#7132)
• Preserve operator model policy across reconciliation (#7141)
• Refuse uncertain ownership before publishing sibling runtime (#7142)
• Print fixed CLI login errors instead of provider bodies (#7171)
• Protect the desktop authority key in-process on Windows x64 (#7181)
• Carry canonical subagent limits across modes (#7125) (#7128)
• Preserve uncapped native maximum context windows (#7130)
• Strip Google item metadata from native OpenAI requests (#7131)
• Launch the registered Desktop bundle and executable (#7137)
• Frame retained compaction requests as history (#7138)
• Restore DeepSeek reasoning on native tool continuations (#7118) (#7140)
• Surface Opus 5.5 progress as signed commentary (#7143)
• Isolate service state from the shared startup home (#7161)
• Eliminate intercept integration port reservation race (#7174)
• Bound refresh consumers and retain stale owners (carry #7117) (#7136)
• Recover Muse Keychain login and preserve actionable errors (#7145)
• Fold Advisor into the Subagents row and collapse its notices (#7196)
• Bind Linux health sentinel recovery to pidfd (#7133)
• Keep the desktop app open on codex-restart when its picker is current (#7149)
• Carry Zed, Qoder, and OpenCode Gemini compatibility (#7216)
• Carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) (#7220)
• Carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) (#7215)
• Carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) (#7218)
• Carry OAuth combo cooldown, account rotation and health evidence fixes (#7224)
• Carry Claude translated-lane and usage-metering fixes (VB) (#7225)
• Restore keep-native-v1 qualifier placement (#7237)
• Charge key cooldown to the credential sent (#7240)
• Preserve legacy OpenCode Go configs after native wire pins (#7238)
• Preserve import cycles through macOS path aliases (#7241)
• Preserve retained reasoning across native combo failover (#7239)
• Activate Windows picker after dormant startup (#7243)
• Use standard no-op waker in spawn test (#7246)
• Preserve Codex opt-out, concurrent syncs, and usage ownership (#7244)

Chores

• Allow child generation diagnostics before outer timeout (#7085)
• Use shared Windows attest spawn budgets (#7151)
• End the linger upload pump when the socket closes (#7180)
• Guard Argon thought separation across client protocols (#7188)
• Isolate sibling ensure from the running Desktop app (#7182)
• Derive audio non-readiness case budgets from their deadline (#7183)
• Share opaque transport with desktop relay (#7120)
• Break config-facade import cycles (189 -> 59 static cyclic modules) (#6454)
• Break the ChatGPT OAuth and auth-api import cycles (#6594)
• Fix Windows default-home isolation fixtures (#7242)

Other Changes

• Open dev at 2.87.0 before releasing 2.86.0 (#7109)
• Promote dev de315e76ad to main as 2.87.0 (#7249)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.86.0...v2.87.0

• #6454 refactor: break config-facade import cycles (189 -> 59 static cyclic modules) @lcxhh521
• #6594 refactor(oauth): break the ChatGPT OAuth and auth-api import cycles @lcxhh521
• #7058 fix(protocols): enforce explicit-empty tool catalogs across delivery paths @luvs01
• #7077 fix(catalog): preserve context inference through provider edits @lcxhh521
• #7085 test(codex): allow child generation diagnostics before outer timeout @luvs01
• #7089 fix(usage): keep usage-ledger file ids exact so Windows NTFS ids stop colliding @lidge-jun
• #7106 fix(desktop): serialize shim publication with production process creation (ETXTBSY) @lidge-jun
• #7109 chore(release): open dev at 2.87.0 before releasing 2.86.0 @github-actions[bot]
• #7113 fix(codex): show last Windows desktop build assessment @luvs01
• #7114 fix(gui): select Advisor model from the routed catalog @luvs01
• #7120 refactor(proxy): share opaque transport with desktop relay @lcxhh521
• #7128 fix(codex): carry canonical subagent limits across modes (#7125) @lidge-jun
• #7129 fix(claude): verify Desktop backup and optional metadata reads (carry #7084) @lidge-jun
• #7130 fix(catalog): preserve uncapped native maximum context windows @lidge-jun
• #7131 fix(responses): strip Google item metadata from native OpenAI requests @lidge-jun
• #7132 fix(anthropic): pair native beta schemas with effective headers @lidge-jun
• #7133 fix(service): bind Linux health sentinel recovery to pidfd @lidge-jun
• #7135 feat(providers): carry opt-in API key round-robin and per-key pacing (#6937) @lidge-jun
• #7136 fix(oauth): bound refresh consumers and retain stale owners (carry #7117) @lidge-jun
• #7137 fix(startup): launch the registered Desktop bundle and executable @lidge-jun
• #7138 fix(responses): frame retained compaction requests as history @lidge-jun
• #7139 feat(vertex): accept credential JSON with secure marker lifecycle (carry #6843) @lidge-jun
• #7140 fix(chat): restore DeepSeek reasoning on native tool continuations (#7118) @lidge-jun
• #7141 fix(oauth): preserve operator model policy across reconciliation @lidge-jun
• #7142 fix(cli): refuse uncertain ownership before publishing sibling runtime @lidge-jun
• #7143 fix(anthropic): surface Opus 5.5 progress as signed commentary @lidge-jun
• #7144 feat(codex): preserve signed-in quota across duplicate pool entries @lidge-jun
• #7145 fix(oauth): recover Muse Keychain login and preserve actionable errors @lidge-jun
• #7146 feat(codex): route hard-locked main-account traffic to a configured fallback model (carry #7123) @lidge-jun
• #7149 fix(codex): keep the desktop app open on codex-restart when its picker is current @lidge-jun
• #7150 feat(oauth): pin generic pool conversations to request-local accounts @lidge-jun
• #7151 test(codex): use shared Windows attest spawn budgets @lidge-jun
• #7156 feat(cli): configure usage model table row limits (carry #6436) @lidge-jun
• #7157 feat(antigravity): show account membership tier badge (carry #5932) @lidge-jun
• #7158 feat(codex): opt in to remaining included quota (carry #6629) @lidge-jun
• #7159 feat(combos): require explicit consent for metered targets (carry #6839) @lidge-jun
• #7160 feat(pricing): support per-model prompt-length overrides (carry #6738) @lidge-jun
• #7161 fix(test): isolate service state from the shared startup home @lidge-jun
• #7162 feat(combos): enroll text-only members in vision sidecar (carry #4932) @lidge-jun
• #7163 feat(antigravity): preserve diagnostic per-model quota evidence (carry #6718) @lidge-jun
• #7164 feat(providers): add DeepSeek Harness authenticated account provider (carry #6293) @lidge-jun
• #7165 feat(claude-cli): stable replay and capture-only client tools (carry #6566) @lidge-jun
• #7166 feat(claude-cli): refuse launches when the Claude subscription is exhausted (carry #6566) @lidge-jun
• #7167 feat(oauth): reset-first strategy for generic OAuth pools (carry #5408) @lidge-jun
• #7170 feat(oauth): code-display login mode for hosts with no reachable localhost (carry #6239) @lidge-jun
• #7171 fix(oauth): print fixed CLI login errors instead of provider bodies @lidge-jun
• #7174 fix(claude): eliminate intercept integration port reservation race @lidge-jun
• #7180 test(claude): end the linger upload pump when the socket closes @lidge-jun
• #7181 fix(codex): protect the desktop authority key in-process on Windows x64 @lidge-jun
• #7182 test(cli): isolate sibling ensure from the running Desktop app @lidge-jun
• #7183 test(cli): derive audio non-readiness case budgets from their deadline @lidge-jun
• #7188 test(google): guard Argon thought separation across client protocols @lidge-jun
• #7196 fix(gui): fold Advisor into the Subagents row and collapse its notices @lidge-jun
• #7215 fix(service): carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) @lidge-jun
• #7216 fix(providers): carry Zed, Qoder, and OpenCode Gemini compatibility @lidge-jun
• #7217 feat(responses): carry compaction capabilities and reasoning retention @lidge-jun
• #7218 fix(responses): carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) @lidge-jun
• #7219 feat(advisor): carry bounded retention and adaptive consultation (#7134, #7124) @lidge-jun
• #7220 fix(catalog): carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) @lidge-jun
• #7222 feat(cli): carry usage comparison, log history, restart and Codex controls @lidge-jun
• #7223 feat(gui): carry Combo visibility, workspace panes, Windows picker and Gentle Shell @lidge-jun
• #7224 fix: carry OAuth combo cooldown, account rotation and health evidence fixes @lidge-jun
• #7225 fix: carry Claude translated-lane and usage-metering fixes (VB) @lidge-jun
• #7237 fix(gui): restore keep-native-v1 qualifier placement @lidge-jun
• #7238 fix(config): preserve legacy OpenCode Go configs after native wire pins @lidge-jun
• #7239 fix(compact): preserve retained reasoning across native combo failover @lidge-jun
• #7240 fix: charge key cooldown to the credential sent @lidge-jun
• #7241 fix(ci): preserve import cycles through macOS path aliases @lidge-jun
• #7242 test: fix Windows default-home isolation fixtures @lidge-jun
• #7243 fix(claude): activate Windows picker after dormant startup @lidge-jun
• #7244 fix: preserve Codex opt-out, concurrent syncs, and usage ownership @lidge-jun
• #7246 fix(desktop): use standard no-op waker in spawn test @lidge-jun
• #7249 release: promote dev de315e76ad to main as 2.87.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.86.0 with dist-tag latest.

New Features

• Add Modelflare API-key preset (#7037)
• Let Codex own the native main refresh when a supported binary exists (#7048)
• Infer custom-provider context windows from model metadata (#7024)
• Expose declared Ultra Fast in the desktop speed picker (#6927)
• Add provider-independent advisor runtime (#5955)
• Add opt-in Windows desktop compatibility controls (#6079)
• Configure CLI tier defaults and explicitly apply user settings (#6934)
• Add Qoder client integration and config export (#5950)
• Antigravity direct lane for Chat (no internal Responses hop) (#7080)
• Gemini 4 Argon + per-account Antigravity lineup (CLI UA for Argon, 4.6/5.5 by account roster) (#7071)
• Antigravity direct lane for Messages, on by default (#7081)

Bug Fixes

• Isolate diagnostic servers from live Codex restart (#7018)
• Bound managed config reads and writes (#7029)
• Preserve home guards in isolated child environments (#7023)
• Require stable numeric health sentinel endpoints (#7031)
• Support an opt-in minimum output-token budget (#7028)
• Parse code-mode declarations in bounded linear time (#7025)
• Terminate requests on negotiated model scope denial (#7026)
• Bound overflow parsing and batch replay scrubs (#7020)
• Safely unlink generated profiles (#7021)
• Verify PATH ancestry and reject temporary app bundles (#7022)
• Serve the in-flight token when a native main save is refused (#7035)
• Preserve distinct Desktop aliases with effort fallback (#7007)
• Let the Codex shim run under OpenCodex Desktop without a competing proxy (#6971) (#7032)
• Credit smd-submitted Start at Login job on macOS (#7019) (#7033)
• Recover runTurn keys on scoped 401/429 failures (#6992)
• Preserve Mistral typed text and thinking blocks (#7047)
• Preserve tool catalog boundaries across inbound wires (#7030)
• Reject non-regular Desktop configuration reads (#7036)
• Bound default bootstrap file reads (#7039)
• Offer Ultrafast for GPT-6 Astra and GPT-6.1 Sol in the speed picker (#7050)
• Recognize TypeScript Agent SDK client identity (#7059)
• Avoid false doctor integrity failure on checkpointed WAL history (#7060)
• Recognize standalone MSI installs in CLI checks (#7063)
• Timestamp and rotate managed service logs (#7064)
• Carry ChatGPT launcher, SOCKS5 TLS deadline and 429 triage docs (#7055, #7056, #6925) (#7065)
• Accept authorized social device grants and quarantine desktop Bad credentials (#7053, #7054) (#7062)
• Preserve shim ownership across APFS reboots (#7061)
• Accept the shared freeform fallback field at the exec gate (#7049) (#7069)
• Forward context management for native Claude clients (#7042) (#7067)
• Recover through launchd/systemd before an unsupervised fallback (#7043) (#7074)
• Rebuild large request-history indexes on a worker thread (#6990) (#7070)
• Answer the main hard lock as a usage limit, clamp retry to pool recovery (#7046) (#7076)
• Dashboard update restarts through launchd/systemd before an unsupervised fallback (#7043) (#7078)
• Remove the shared root causes of flaky Windows CI (#7107)
• Promote dev 494c50d02f to main as 2.86.0 (#7110)

Chores

• Open dev at 2.85.0 before releasing 2.84.0 (#7014)
• Preserve generation diagnostics and wait for tray probe readiness (#7038)
• Run only the fast ubuntu subset on PRs; cross-platform matrix on push to dev/main (#7052)
• Cross-platform CI manual-only on dev (drop dev push); document CI policy (#7057)
• Preserve release-on-cancel admission (#7034)
• Remove PackyCode sponsorship (#7072)
• Stale-ledger build case fails on Windows (ino + 1 loses precision) (#7087)
• Shared-probe cases leak the native-main claim into teardown on Windows (EBUSY) (#7088)
• Stub the in-handler pre-route prime so Windows teardown can remove CODEX_HOME (#7091)

Other Changes

• Open dev at 2.86.0 before releasing 2.85.0 (#7093)
• 2.85.0 (#7094)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.84.0...v2.86.0

• #5950 feat(clients): add Qoder client integration and config export @codingbooo
• #5955 feat: add provider-independent advisor runtime @Flowershangfromthebranches
• #6079 feat(codex): add opt-in Windows desktop compatibility controls @luvs01
• #6927 feat(codex): expose declared Ultra Fast in the desktop speed picker @oocheol
• #6934 feat(claude): configure CLI tier defaults and explicitly apply user settings @GSL-R
• #6992 fix(qoder): recover runTurn keys on scoped 401/429 failures @juzijia
• #7007 fix(claude): preserve distinct Desktop aliases with effort fallback @richardfeiliu-a11y
• #7014 chore(release): open dev at 2.85.0 before releasing 2.84.0 @github-actions[bot]
• #7018 fix(test): isolate diagnostic servers from live Codex restart @luvs01
• #7020 fix(runtime): bound overflow parsing and batch replay scrubs @luvs01
• #7021 fix(codex): safely unlink generated profiles @luvs01
• #7022 fix(launcher): verify PATH ancestry and reject temporary app bundles @luvs01
• #7023 fix(diagnostics): preserve home guards in isolated child environments @luvs01
• #7024 feat(catalog): infer custom-provider context windows from model metadata @lcxhh521
• #7025 fix(responses): parse code-mode declarations in bounded linear time @luvs01
• #7026 fix(copilot): terminate requests on negotiated model scope denial @luvs01
• #7028 fix(azure): support an opt-in minimum output-token budget @lidge-jun
• #7029 fix(integrations): bound managed config reads and writes @lidge-jun
• #7030 fix(responses): preserve tool catalog boundaries across inbound wires @luvs01
• #7031 fix(service): require stable numeric health sentinel endpoints @lidge-jun
• #7032 fix(startup): let the Codex shim run under OpenCodex Desktop without a competing proxy (#6971) @lidge-jun
• #7033 fix(desktop): credit smd-submitted Start at Login job on macOS (#7019) @lidge-jun
• #7034 test(server): preserve release-on-cancel admission @luvs01
• #7035 fix(codex): serve the in-flight token when a native main save is refused @lidge-jun
• #7036 fix(claude): reject non-regular Desktop configuration reads @luvs01
• #7037 feat(providers): add Modelflare API-key preset @lidge-jun
• #7038 test: preserve generation diagnostics and wait for tray probe readiness @luvs01
• #7039 fix(zcode): bound default bootstrap file reads @luvs01
• #7047 fix(openai-chat): preserve Mistral typed text and thinking blocks @adaurban
• #7048 feat(codex): let Codex own the native main refresh when a supported binary exists @lidge-jun
• #7050 fix(codex): offer Ultrafast for GPT-6 Astra and GPT-6.1 Sol in the speed picker @lidge-jun
• #7052 ci: run only the fast ubuntu subset on PRs; cross-platform matrix on push to dev/main @lidge-jun
• #7057 ci: cross-platform CI manual-only on dev (drop dev push); document CI policy @lidge-jun
• #7059 fix(anthropic): recognize TypeScript Agent SDK client identity @lidge-jun
• #7060 fix(codex): avoid false doctor integrity failure on checkpointed WAL history @lidge-jun
• #7061 fix(codex): preserve shim ownership across APFS reboots @lidge-jun
• #7062 fix(kiro): accept authorized social device grants and quarantine desktop Bad credentials (#7053, #7054) @lidge-jun
• #7063 fix(update): recognize standalone MSI installs in CLI checks @lidge-jun
• #7064 fix(service): timestamp and rotate managed service logs @lidge-jun
• #7065 fix: carry ChatGPT launcher, SOCKS5 TLS deadline and 429 triage docs (#7055, #7056, #6925) @lidge-jun
• #7067 fix(anthropic): forward context management for native Claude clients (#7042) @lidge-jun
• #7069 fix(cursor): accept the shared freeform fallback field at the exec gate (#7049) @lidge-jun
• #7070 fix(history): rebuild large request-history indexes on a worker thread (#6990) @lidge-jun
• #7071 feat: Gemini 4 Argon + per-account Antigravity lineup (CLI UA for Argon, 4.6/5.5 by account roster) @lidge-jun
• #7072 chore(sponsors): remove PackyCode sponsorship @lidge-jun
• #7074 fix(update): recover through launchd/systemd before an unsupervised fallback (#7043) @lidge-jun
• #7076 fix(codex): answer the main hard lock as a usage limit, clamp retry to pool recovery (#7046) @lidge-jun
• #7078 fix(update): dashboard update restarts through launchd/systemd before an unsupervised fallback (#7043) @lidge-jun
• #7080 feat(protocols): Antigravity direct lane for Chat (no internal Responses hop) @lidge-jun
• #7081 feat(protocols): Antigravity direct lane for Messages, on by default @lidge-jun
• #7087 test(history): stale-ledger build case fails on Windows (ino + 1 loses precision) @lidge-jun
• #7088 test(compaction): shared-probe cases leak the native-main claim into teardown on Windows (EBUSY) @lidge-jun
• #7091 test(compaction): stub the in-handler pre-route prime so Windows teardown can remove CODEX_HOME @lidge-jun
• #7093 chore(release): open dev at 2.86.0 before releasing 2.85.0 @github-actions[bot]
• #7094 release: 2.85.0 @lidge-jun
• #7107 fix(ci): remove the shared root causes of flaky Windows CI @lidge-jun
• #7110 release: promote dev 494c50d02f to main as 2.86.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.84.0 with dist-tag latest.

New Features

• Pick, clear and auto-assign each LazyCodex role's reasoning effort (#6960)
• Release account pins from the dashboard (#6964)
• GPT-6.1 Sol 500k default context in Codex and Meta Muse Wonder (#7013)

Bug Fixes

• Release eager relay listeners after producer teardown (#6894)
• Refuse upstream diagnostics that repeat a sent credential (#6918)
• Preserve prompt drafts and validate base imports (#6866)
• Bound generated late-tool attribution (#6654)
• Recover Home-initiated links after outages and make Retry reconnect (carry #6900) (#6915)
• Explicitly unlock the CLI record lock before closing (#6917)
• Keep combo capabilities for targets hidden from the picker (#6919)
• Keep coupon callers on an operation that may still be spending (#6916)
• Restore remote hub browser pairing on loopback-bound management ingress (carry #6892) (#6913)
• Keep loopback MCP servers off the intercept proxy with NO_PROXY (#6936) (#6938)
• Omit empty assistant history on native Responses and keep Chat call/result pairs intact (supersedes #6931) (#6947)
• Verify configured credentials by content, route the tray to the connected hub, and make the headerless probe test deterministic (#6949)
• Label alias tier slots in /model; count Anthropic cache tokens as input (#6950)
• Keep the NO_PROXY receipt across a failed removal, and doc follow-ups (#6936) (#6952)
• Preserve shadow-call user turns, honor ZCode dataBaseDir, forward Qoder Global images (#6921, #6932, carry #6906) (#6951)
• Harden hub disable, log filters and service startup diagnostics (#6954)
• Admit reset Anthropic accounts and report OAuth subscription plans (supersedes #6933) (#6953)
• Verify Child runtime relay and add fingerprint-bound CLI enrollment (#6955)
• Preserve remote topology across guarded live saves (#6956)
• Reject unverified picker metadata snapshots (#6965)
• Handle Flash-Next leading-system templates (#6966)
• Save a model-inheriting LazyCodex role's effort without pinning a model (#6975)
• Keep same-organization users as separate accounts (#6641) (#6981)
• Read V1 collaboration tools rendered inside code-mode exec (#6977)
• Dashboard installer on compiled ocx and clearer Desktop Start at Login state (#6963) (#6980)
• Keep the Codex WebSocket error wrapper's 5xx status and record the terminal frame kind (#6974)
• Opt-in health sentinel recovers a hung but listening service proxy (#6671) (#6979)
• Recover API-key credit-balance refusals before output (#6962)
• Carry five contributor fixes for the 2.84.0 train (#7005 #7001 #7003 #7002 #6968) (#7008)
• Land eight owner fixes for 2.84.0 (#7009)
• Detect deferred V1 collaboration tools and bound the picker upload drain (#7010)
• Recognize Desktop supervision on Windows and discover the Codex app CLI on macOS (#7011)

Documentation

• Restore translated LazyCodex role effort guide sections (#6970)
• Describe effort-only role saves in the translated guides (#6976)

Chores

• Make the drip-feed probe and plugin lifecycle tests independent of runner load (#6914)
• Keep the credential-shape case off a same-size rewrite (#6924)
• Split the macOS suite into three shards under the same 20-minute cap (#6983)

Other Changes

• Open dev at 2.84.0 before releasing 2.83.0 (#6902)
• 2.84.0 (#7016)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.83.0...v2.84.0

• #6654 fix(ollama): bound generated late-tool attribution @luvs01
• #6866 fix(codex): preserve prompt drafts and validate base imports @luvs01
• #6894 fix(server): release eager relay listeners after producer teardown @mashfromband
• #6902 chore(release): open dev at 2.84.0 before releasing 2.83.0 @github-actions[bot]
• #6913 fix(link): restore remote hub browser pairing on loopback-bound management ingress (carry #6892) @lidge-jun
• #6914 test: make the drip-feed probe and plugin lifecycle tests independent of runner load @lidge-jun
• #6915 fix(link): recover Home-initiated links after outages and make Retry reconnect (carry #6900) @lidge-jun
• #6916 fix(grok): keep coupon callers on an operation that may still be spending @lidge-jun
• #6917 fix(desktop): explicitly unlock the CLI record lock before closing @lidge-jun
• #6918 fix(logs): refuse upstream diagnostics that repeat a sent credential @lidge-jun
• #6919 fix(gui): keep combo capabilities for targets hidden from the picker @lidge-jun
• #6924 test(usage): keep the credential-shape case off a same-size rewrite @lidge-jun
• #6938 fix(claude): keep loopback MCP servers off the intercept proxy with NO_PROXY (#6936) @lidge-jun
• #6947 fix(kimi): omit empty assistant history on native Responses and keep Chat call/result pairs intact (supersedes #6931) @lidge-jun
• #6949 fix: verify configured credentials by content, route the tray to the connected hub, and make the headerless probe test deterministic @lidge-jun
• #6950 fix(claude): label alias tier slots in /model; count Anthropic cache tokens as input @lidge-jun
• #6951 fix: preserve shadow-call user turns, honor ZCode dataBaseDir, forward Qoder Global images (#6921, #6932, carry #6906) @lidge-jun
• #6952 fix(claude): keep the NO_PROXY receipt across a failed removal, and doc follow-ups (#6936) @lidge-jun
• #6953 fix(accounts): admit reset Anthropic accounts and report OAuth subscription plans (supersedes #6933) @lidge-jun
• #6954 fix(cli): harden hub disable, log filters and service startup diagnostics @lidge-jun
• #6955 fix(link): verify Child runtime relay and add fingerprint-bound CLI enrollment @lidge-jun
• #6956 fix(config): preserve remote topology across guarded live saves @lidge-jun
• #6960 feat(codex): pick, clear and auto-assign each LazyCodex role's reasoning effort @lidge-jun
• #6962 fix(anthropic): recover API-key credit-balance refusals before output @lidge-jun
• #6964 feat(codex): release account pins from the dashboard @luvs01
• #6965 fix(claude): reject unverified picker metadata snapshots @luvs01
• #6966 fix(openai-chat): handle Flash-Next leading-system templates @areslp
• #6970 docs(integrations): restore translated LazyCodex role effort guide sections @lidge-jun
• #6974 fix(logs): keep the Codex WebSocket error wrapper's 5xx status and record the terminal frame kind @lidge-jun
• #6975 fix(codex): save a model-inheriting LazyCodex role's effort without pinning a model @lidge-jun
• #6976 docs(integrations): describe effort-only role saves in the translated guides @lidge-jun
• #6977 fix(responses): read V1 collaboration tools rendered inside code-mode exec @lidge-jun
• #6979 fix(service): opt-in health sentinel recovers a hung but listening service proxy (#6671) @lidge-jun
• #6980 fix(startup): dashboard installer on compiled ocx and clearer Desktop Start at Login state (#6963) @lidge-jun
• #6981 fix(kiro): keep same-organization users as separate accounts (#6641) @lidge-jun
• #6983 ci(macos): split the macOS suite into three shards under the same 20-minute cap @lidge-jun
• #7008 fix: carry five contributor fixes for the 2.84.0 train (#7005 #7001 #7003 #7002 #6968) @lidge-jun
• #7009 fix: land eight owner fixes for 2.84.0 @lidge-jun
• #7010 fix(responses,claude): detect deferred V1 collaboration tools and bound the picker upload drain @lidge-jun
• #7011 fix(service,codex): recognize Desktop supervision on Windows and discover the Codex app CLI on macOS @lidge-jun
• #7013 feat(catalog): GPT-6.1 Sol 500k default context in Codex and Meta Muse Wonder @lidge-jun
• #7016 release: 2.84.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.83.0 with dist-tag latest.

Bug Fixes

• Lower routed custom tools on the Responses wire (#6879)
• Coordinate Grok and link writers (#6869)
• Fill the unset Sonnet tier with claude-sonnet-5-5 (#6874)
• Never discard a rotated native-main refresh token on cancel (#6859)
• Release active-turn admission when the client cancels (#6850)
• Key response tool calls by native id before index (#6858)
• Carry reasoning ladders and image input into the provider_config.json store (#6828)
• Warn once when a custom provider drops replayed plaintext reasoning (#6882)
• Let the empty-completion retry replay a pre-output Vertex malformed call (#6881)
• Release inbound body admission when the client disconnects (#6883)
• Attribute proxy replay refusals as transport-ambiguous (#6887)
• Judge machine-path-conflict from a fresh logon PATH (#6888)
• Negotiate Auto for positively restricted accounts (carry #6472) (#6885)
• Keep recognized bare upstream error classes in synthesized terminals (#6889)
• Promote caller x-session-id on Chat Completions ingress (#6880)
• Keep rediscovering main-account credits after an unavailable observation (#6886)
• Report spend-ledger storage refusals as local 503s (#6890)
• Claim coupon redemptions before dispatch and reconcile uncertain outcomes (#6870)
• Drop credential-shaped upstream diagnostics before they reach log rows (#6903)
• Restore the configured wire before each Auto negotiation (#6904)

Documentation

• Archive 205 landed units from _plan to _fin (#6884)
• Archive release-train coordination records to _fin (#6896)

Chores

• Isolate host settings and bound native Windows fixtures (#6864)
• Report the sibling-recycle child's state when it stalls (#6893)

Other Changes

• Open dev at 2.83.0 before releasing 2.82.0 (#6875)
• 2.83.0 (#6910)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.82.0...v2.83.0

• #6828 fix(zcode): carry reasoning ladders and image input into the provider_config.json store @Blazetes
• #6850 fix: release active-turn admission when the client cancels @vibewriter-hand
• #6858 fix(ollama-native): key response tool calls by native id before index @MarcTCruz
• #6859 fix(codex): never discard a rotated native-main refresh token on cancel @MarcTCruz
• #6864 test: isolate host settings and bound native Windows fixtures @mashfromband
• #6869 fix(config): coordinate Grok and link writers @luvs01
• #6870 fix(grok): claim coupon redemptions before dispatch and reconcile uncertain outcomes @luvs01
• #6874 fix(claude): fill the unset Sonnet tier with claude-sonnet-5-5 @lhj6102
• #6875 chore(release): open dev at 2.83.0 before releasing 2.82.0 @github-actions[bot]
• #6879 fix(opengateway): lower routed custom tools on the Responses wire @lidge-jun
• #6880 fix(chat): promote caller x-session-id on Chat Completions ingress @lidge-jun
• #6881 fix(google): let the empty-completion retry replay a pre-output Vertex malformed call @lidge-jun
• #6882 fix(responses): warn once when a custom provider drops replayed plaintext reasoning @lidge-jun
• #6883 fix(server): release inbound body admission when the client disconnects @lidge-jun
• #6884 docs(devlog): archive 205 landed units from _plan to _fin @lidge-jun
• #6885 fix(copilot): negotiate Auto for positively restricted accounts (carry #6472) @lidge-jun
• #6886 fix(codex): keep rediscovering main-account credits after an unavailable observation @lidge-jun
• #6887 fix(logs): attribute proxy replay refusals as transport-ambiguous @lidge-jun
• #6888 fix(desktop): judge machine-path-conflict from a fresh logon PATH @lidge-jun
• #6889 fix(logs): keep recognized bare upstream error classes in synthesized terminals @lidge-jun
• #6890 fix(responses): report spend-ledger storage refusals as local 503s @lidge-jun
• #6893 test: report the sibling-recycle child's state when it stalls @lidge-jun
• #6896 docs(devlog): archive release-train coordination records to _fin @lidge-jun
• #6903 fix(logs): drop credential-shaped upstream diagnostics before they reach log rows @lidge-jun
• #6904 fix(copilot): restore the configured wire before each Auto negotiation @lidge-jun
• #6910 release: 2.83.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.82.0 with dist-tag latest.

New Features

• Accept Codex thread links in conversation filters (#6734)
• Carry each LazyCodex role's reasoning effort into omo.jsonc (carry #6801) (#6823)
• Own the ocx terminal command on PATH (#6816)
• Hand package launchers off to the Desktop ocx (#6818)
• Refresh already-connected clients after a background catalog change (#6836)
• Treat long windows as 1M on every Claude surface (#6780)
• Add a 200k context-accounting opt-in (#6781)
• Add a Context accounting control to the Claude Code page (#6782)

Bug Fixes

• Compare picker metadata file identity with BigInt stats (#6772)
• Word context overflow as "prompt is too long" so Claude Code compacts (#6778)
• Carry LazyCodex role-model fixes ([codex] mirror, routed effort ladder, omo tab) (#6785)
• Read the Ollama Cloud quota from /api/balance (#6786)
• Keep external task input a user turn in raw-body repairs (carry #6769) (#6795)
• Keep hosted search history as bounded reference notes in portable summaries (carry #6746) (#6799)
• Carry a provider's own encrypted reasoning, bound to its minting route (carry #6741) (#6804)
• Bound and classify ChatGPT token refresh failures (#6792)
• Drain ACL work and close history before Windows fixture removal (#6797)
• Keep catalog probes async and release aborted translator budgets (#6796)
• Pin claude-haiku-5-5 to the Anthropic wire (#6788)
• Refresh Azure vision and token metadata during discovery (#6794)
• Point to a manual download when an update install fails (#6789)
• Apply initial effort to native Chat dispatch (carry #6750) (#6790)
• Retain child-owned prepaid send reservations (carry #6751) (#6798)
• Treat a Desktop-supervised runtime as the authority in status, doctor and resolve (#6802)
• Keep the default Bun transpiler cache inside the test sandbox (#6805)
• Fall back to a validated PATH Bun and warn on lifecycle version skew (#6807)
• Refuse to compete with a Desktop-supervised runtime in service, update, start and stop (#6809)
• Serialize config writers under one canonical lock and bind recovery to it (carry #6774) (#6811)
• Retain operator Ultra Fast declarations across regeneration (#6819)
• Treat a missing Codex home as nothing to restore (#6820)
• Name the reviewed recovery for Aside profiles that read off (stale) (#6825)
• Admit update restart past an inactive service record bound to a full record fingerprint (#6808)
• Keep test processes out of the real Claude config directory (#6835)
• End the translated stream at message_stop (#6826)
• Log requested effort on native Messages requests (#6827)
• Commit explicit account selections atomically (carry #6813) (#6824)
• Expose the durable OCX request id as request-id on Messages (#6831)
• Preflight the selected Bun before baking it into Windows launchers (replaces #6695) (#6812)
• Record main-login responses under the observed main credential (#6830)
• Eject an OAuth account whose access token was revoked (#6832)
• Reclaim spill headroom before refusing a continuation (#6829)
• Warn when Google Drive syncs the state directory (#6846)
• Carry remaining #6723 change (picker CA persistence + log admission test) (#6847)
• Stabilize account health and reuse WS per thread under concurrency (#6860)

Documentation

• Close the N3 test-infra unit (#6840)
• Record the cross-OS probe of the desktop-owned CLI path (#6855)

Chores

• Open dev at 2.82.0 before releasing 2.81.0 (#6770)
• Isolate the remote-prelude tests from a host-installed ocx (#6787)
• Share bounded System One exchange across decision questions (carry #6698) (#6791)
• Keep the rename fixture off provider discovery and serialize its temp homes (#6833)
• Give the native toggle fixture its own service-manager evidence (#6834)
• Make the periodic spill sweep resume case deterministic (#6848)
• Warm the update-badge CLI graph before timing it (#6856)
• Bound Windows shell shim spawns inside the spawn budget (#6862)
• Give cold Windows bun.exe probes room inside the spawn budget (#6863)
• Quarantine a final Windows EPERM instead of failing the case (#6861)
• Expect the env-indirect Bun path in Windows preflight wrappers (#6852)
• Read only marked lines from the real-shell PATH probe (#6851)
• Add portable catalog async contracts and a Windows liveness diagnostic (#6806)

Other Changes

• 2.82.0 (#6878)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.81.0...v2.82.0

• #6734 feat(logs): accept Codex thread links in conversation filters @luvs01
• #6770 chore(release): open dev at 2.82.0 before releasing 2.81.0 @github-actions[bot]
• #6772 fix(claude): compare picker metadata file identity with BigInt stats @lidge-jun
• #6778 fix(claude): word context overflow as "prompt is too long" so Claude Code compacts @lidge-jun
• #6780 feat(claude): treat long windows as 1M on every Claude surface @lidge-jun
• #6781 feat(claude): add a 200k context-accounting opt-in @lidge-jun
• #6782 feat(gui): add a Context accounting control to the Claude Code page @lidge-jun
• #6785 fix(codex): carry LazyCodex role-model fixes ([codex] mirror, routed effort ladder, omo tab) @lidge-jun
• #6786 fix(quota): read the Ollama Cloud quota from /api/balance @lidge-jun
• #6787 test(link): isolate the remote-prelude tests from a host-installed ocx @lidge-jun
• #6788 fix(opencode-go): pin claude-haiku-5-5 to the Anthropic wire @lidge-jun
• #6789 fix(desktop): point to a manual download when an update install fails @lidge-jun
• #6790 fix(jev): apply initial effort to native Chat dispatch (carry #6750) @lidge-jun
• #6791 refactor(jev): share bounded System One exchange across decision questions (carry #6698) @lidge-jun
• #6792 fix(oauth): bound and classify ChatGPT token refresh failures @lidge-jun
• #6794 fix(catalog): refresh Azure vision and token metadata during discovery @lidge-jun
• #6795 fix(responses): keep external task input a user turn in raw-body repairs (carry #6769) @lidge-jun
• #6796 fix(runtime): keep catalog probes async and release aborted translator budgets @lidge-jun
• #6797 fix(test): drain ACL work and close history before Windows fixture removal @lidge-jun
• #6798 fix(responses): retain child-owned prepaid send reservations (carry #6751) @lidge-jun
• #6799 fix(compaction): keep hosted search history as bounded reference notes in portable summaries (carry #6746) @lidge-jun
• #6802 fix(cli): treat a Desktop-supervised runtime as the authority in status, doctor and resolve @lidge-jun
• #6804 fix(claude): carry a provider's own encrypted reasoning, bound to its minting route (carry #6741) @lidge-jun
• #6805 fix(test): keep the default Bun transpiler cache inside the test sandbox @lidge-jun
• #6806 ci: add portable catalog async contracts and a Windows liveness diagnostic @lidge-jun
• #6807 fix(launcher): fall back to a validated PATH Bun and warn on lifecycle version skew @lidge-jun
• #6808 fix(cli): admit update restart past an inactive service record bound to a full record fingerprint @lidge-jun
• #6809 fix(cli): refuse to compete with a Desktop-supervised runtime in service, update, start and stop @lidge-jun
• #6811 fix(codex): serialize config writers under one canonical lock and bind recovery to it (carry #6774) @lidge-jun
• #6812 fix(service): preflight the selected Bun before baking it into Windows launchers (replaces #6695) @lidge-jun
• #6816 feat(desktop): own the ocx terminal command on PATH @lidge-jun
• #6818 feat(cli): hand package launchers off to the Desktop ocx @lidge-jun
• #6819 fix(catalog): retain operator Ultra Fast declarations across regeneration @Anilams
• #6820 fix(codex): treat a missing Codex home as nothing to restore @lidge-jun
• #6823 feat(codex): carry each LazyCodex role's reasoning effort into omo.jsonc (carry #6801) @lidge-jun
• #6824 fix(codex): commit explicit account selections atomically (carry #6813) @lidge-jun
• #6825 fix(cli): name the reviewed recovery for Aside profiles that read off (stale) @lidge-jun
• #6826 fix(anthropic): end the translated stream at message_stop @lidge-jun
• #6827 fix(claude): log requested effort on native Messages requests @lidge-jun
• #6829 fix(responses): reclaim spill headroom before refusing a continuation @lidge-jun
• #6830 fix(quota): record main-login responses under the observed main credential @lidge-jun
• #6831 fix(claude): expose the durable OCX request id as request-id on Messages @lidge-jun
• #6832 fix(anthropic): eject an OAuth account whose access token was revoked @lidge-jun
• #6833 test(combos): keep the rename fixture off provider discovery and serialize its temp homes @lidge-jun
• #6834 test(codex): give the native toggle fixture its own service-manager evidence @lidge-jun
• #6835 fix(test): keep test processes out of the real Claude config directory @lidge-jun
• #6836 feat(catalog): refresh already-connected clients after a background catalog change @lidge-jun
• #6840 docs(devlog): close the N3 test-infra unit @lidge-jun
• #6846 fix(spend): warn when Google Drive syncs the state directory @lidge-jun
• #6847 fix: carry remaining #6723 change (picker CA persistence + log admission test) @lidge-jun
• #6848 test(responses): make the periodic spill sweep resume case deterministic @lidge-jun
• #6851 test(desktop): read only marked lines from the real-shell PATH probe @lidge-jun
• #6852 test(service): expect the env-indirect Bun path in Windows preflight wrappers @lidge-jun
• #6855 docs(devlog): record the cross-OS probe of the desktop-owned CLI path @lidge-jun
• #6856 test(cli): warm the update-badge CLI graph before timing it @lidge-jun
• #6860 fix(codex-pool): stabilize account health and reuse WS per thread under concurrency @lidge-jun
• #6861 test(temp): quarantine a final Windows EPERM instead of failing the case @lidge-jun
• #6862 test(codex): bound Windows shell shim spawns inside the spawn budget @lidge-jun
• #6863 test(cli): give cold Windows bun.exe probes room inside the spawn budget @lidge-jun
• #6878 release: 2.82.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.81.0 with dist-tag latest.

New Features

• Allow an explicit restart drain grace (carry #6703) (#6724)
• Add local Codex queued session messaging (#6544)
• Bridge Codex-owned tools through MCP (#6289)
• Allow arbitrary HTTPS decision endpoints (carry #6384) (#6731)
• Add native Command Code integration and catalog sync (carry #3833) (#6728)
• Add Claude Haiku 5.5 pricing, catalog rows and request contract (#6744)
• Add anthropic2, an independent Anthropic account pool with a green Pool 2 mark (#6743)

Bug Fixes

• Bump @modelcontextprotocol/sdk to 1.31.0 for GHSA-6qxp-vccf-f47h (#6709)
• Keep line breaks in logs explain text output (#6704)
• Demote developer to user for OrcaSAQ-2 leading-system template (#6711)
• Avoid Windows executable lookup in lease diagnostics (carry #6655) (#6715)
• Renew opted-in main credits before expiry (#6692) (#6669)
• Rotate web-search validation refusals (#6710)
• Stop re-attaching the token footer as a user turn (#6714)
• Surface a dead refresh token as needing re-auth (#6716)
• Preserve reported thinking token usage (#6721)
• Serve the desktop bundle's dashboard from an ocx the app did not start (#6722)
• Stop refreshing pool accounts whose refresh grant is already revoked (#6707)
• Close refused picker uploads and keep early replies intact (#6725)
• Require independent sessions and expire revealed API keys (carry #6672) (#6729)
• Ship Bun 1.4.2 and keep the CI test runner on 1.4.0 (#6713)
• Relay undeclared passthrough tool calls on chat and anthropic inbound (#6732)
• Keep Codex's auto-review model so reviews stop falling back to the task model (#6727)
• Drain config-dir ACL hardening before removing picker-startup roots (#6748)
• Bind restore requests to the selected client (#6755)
• Preserve v1 pool history with bounded physical-send accounting (#6763)

Documentation

• Docs-site: mobile homepage polish, persistent GitHub link and star count (#6753)
• Align provider copy and clean contract fixtures (#6756)
• Close the anthropic2 account-pool unit (#6768)

Chores

• Count the web-search sidecar rotation site (#6717)
• Compact layout.json back under the line ratchet (#6733)

Other Changes

• Open dev at 2.81.0 before releasing 2.80.0 (#6705)
• 2.81.0 (#6771)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.80.0...v2.81.0

• #6289 feat(qoder): bridge Codex-owned tools through MCP @juzijia
• #6544 feat(messaging): add local Codex queued session messaging @phillipod
• #6669 fix(codex): renew opted-in main credits before expiry (#6692) @AiriDea
• #6704 fix(cli): keep line breaks in logs explain text output @WOULDU-pres
• #6705 chore(release): open dev at 2.81.0 before releasing 2.80.0 @github-actions[bot]
• #6707 fix(codex): stop refreshing pool accounts whose refresh grant is already revoked @WOULDU-pres
• #6709 fix(deps): bump @modelcontextprotocol/sdk to 1.31.0 for GHSA-6qxp-vccf-f47h @lidge-jun
• #6710 fix(antigravity): rotate web-search validation refusals @bi-boo
• #6711 fix: demote developer to user for OrcaSAQ-2 leading-system template @Dolceandgabanna03aw
• #6713 fix(runtime): ship Bun 1.4.2 and keep the CI test runner on 1.4.0 @lidge-jun
• #6714 fix(claude): stop re-attaching the token footer as a user turn @lidge-jun
• #6715 fix(service): avoid Windows executable lookup in lease diagnostics (carry #6655) @lidge-jun
• #6716 fix(kiro): surface a dead refresh token as needing re-auth @lidge-jun
• #6717 test(oauth): count the web-search sidecar rotation site @lidge-jun
• #6721 fix(anthropic): preserve reported thinking token usage @Ingwannu
• #6722 fix(server): serve the desktop bundle's dashboard from an ocx the app did not start @sungyongcho
• #6724 feat(lifecycle): allow an explicit restart drain grace (carry #6703) @lidge-jun
• #6725 fix(claude): close refused picker uploads and keep early replies intact @lidge-jun
• #6727 fix(catalog): keep Codex's auto-review model so reviews stop falling back to the task model @lidge-jun
• #6728 feat(clients): add native Command Code integration and catalog sync (carry #3833) @lidge-jun
• #6729 fix(auth): require independent sessions and expire revealed API keys (carry #6672) @lidge-jun
• #6731 feat(jev): allow arbitrary HTTPS decision endpoints (carry #6384) @lidge-jun
• #6732 fix(responses): relay undeclared passthrough tool calls on chat and anthropic inbound @lidge-jun
• #6733 test(layout): compact layout.json back under the line ratchet @lidge-jun
• #6743 feat(anthropic): add anthropic2, an independent Anthropic account pool with a green Pool 2 mark @lidge-jun
• #6744 feat: add Claude Haiku 5.5 pricing, catalog rows and request contract @lidge-jun
• #6748 test(claude): drain config-dir ACL hardening before removing picker-startup roots @lidge-jun
• #6753 docs-site: mobile homepage polish, persistent GitHub link and star count @lidge-jun
• #6755 fix(commandcode): bind restore requests to the selected client @lidge-jun
• #6756 docs(commandcode): align provider copy and clean contract fixtures @lidge-jun
• #6763 fix(spend): preserve v1 pool history with bounded physical-send accounting @lidge-jun
• #6768 docs(devlog): close the anthropic2 account-pool unit @lidge-jun
• #6771 release: 2.81.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.80.0 with dist-tag latest.

Bug Fixes

• Accumulate temporary tool declarations linearly (#6656)
• Exclude Claude Code reminders from decision state (#6662)
• Retain ToolSearch references in translated results (#6660)
• Accumulate consecutive tool results without prefix copies (#6657)
• Apply the Qwen3.8-27B template rule to gateway-namespaced ids (#6685)
• Preserve bare client tool names for Claude Code sessions (#6640)
• Name the path and chmod fix when a private shim artifact is group-writable (#6680)
• Credit Linux desktop Start at Login as restart protection in doctor (#6679)
• Retryable restart-drain code and quiet journal no-op recovery (#6686)
• Bump proxy-addr, fast-uri, ip-address and source-map-js for new advisories (#6687)
• Preserve applied effort transitions in combo logs (#6663)
• Use factual tool redirects for Claude-family models (#6664)
• Keep local pacing waits out of the header deadline (#6700)
• 2.80.0 (#6706)
• 2.80.0 dependency audit fix (#6708)

Chores

• Keep recover-history temp paths under Windows MAX_PATH (#6694)

Other Changes

• Open dev at 2.80.0 before releasing 2.79.0 (#6676)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.79.0...v2.80.0

• #6640 fix(cursor): preserve bare client tool names for Claude Code sessions @yeongjunyoo
• #6656 fix(messages): accumulate temporary tool declarations linearly @luvs01
• #6657 fix(devin): accumulate consecutive tool results without prefix copies @luvs01
• #6660 fix(claude): retain ToolSearch references in translated results @Ingwannu
• #6662 fix(jev): exclude Claude Code reminders from decision state @geunwoojun99
• #6663 fix(jev): preserve applied effort transitions in combo logs @geunwoojun99
• #6664 fix(cursor): use factual tool redirects for Claude-family models @geunwoojun99
• #6676 chore(release): open dev at 2.80.0 before releasing 2.79.0 @github-actions[bot]
• #6679 fix(service): credit Linux desktop Start at Login as restart protection in doctor @sungyongcho
• #6680 fix(codex-shim): name the path and chmod fix when a private shim artifact is group-writable @sungyongcho
• #6685 fix(openai-chat): apply the Qwen3.8-27B template rule to gateway-namespaced ids @lidge-jun
• #6686 fix(lifecycle): retryable restart-drain code and quiet journal no-op recovery @lidge-jun
• #6687 fix(deps): bump proxy-addr, fast-uri, ip-address and source-map-js for new advisories @lidge-jun
• #6694 test(cli): keep recover-history temp paths under Windows MAX_PATH @ismell0992-afk
• #6700 fix(web-search): keep local pacing waits out of the header deadline @lidge-jun
• #6706 release: 2.80.0 @lidge-jun
• #6708 release: 2.80.0 dependency audit fix @lidge-jun

Published to npm as @bitkyc08/opencodex@2.79.0 with dist-tag latest.

Bug Fixes

• Strip Claude Code's rotating billing line before Responses instructions (#6634)
• Combine consecutive tool results for one invocation (carry #6584) (#6636)
• Budget batched results per query so none are dropped (#6638)
• Identify decode estimate timing basis (#6582)
• Enforce admission scope on Advisor models (#6617)
• Guide native login switching and manual retry (#6581)
• Synchronize manual account pause across matching main and pool entries (#6624)
• Cover the bounded startup health probe read (#6587)
• Retain approved Desktop picker trust across restarts (#6639)
• Redact terminal reset-replacement errors (#6616)
• Enforce stored-account credit policy through dispatch (#6606)
• Require one-use config write intent for standalone pairing (#6605)
• Delete and reveal API keys from the key table (#6653)
• Accept NTFS file ids above 2^53 in the update restart marker (#6644)
• Migrate legacy Windows local-CA ACLs and stop re-inspecting unchanged files (#6645)
• Read pairing-intent ACLs without PowerShell cmdlet autoload (#6651)
• Let ocx ensure wait for a slow cold start while its child lives (#6681)
• Join client-created voice calls as the caller that owns them (#6678)
• 2.79.0 dependency audit fix (#6688)

Documentation

• Translate the busy-lease guidance on every locale page (#6626)

Chores

• Typecheck gui/ in prepush when the branch changes it (carry #6485, #6592) (#6637)
• Keep the post-refresh replay inside the pacing window on Windows (#6652)
• Stop the lease holder fixture from cold-importing the service graph (#6661)
• Run Windows shards on Windows-sensitive PRs and nightly, with a shared PowerShell module cache (#6670)
• Give the non-readiness cases an isolation budget (#6682)
• Share Bun's transpiler cache across sandboxed homes (#6683)

Other Changes

• Open dev at 2.79.0 before releasing 2.78.0 (#6631)
• 2.79.0 (#6677)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.78.0...v2.79.0

• #6581 fix(gui): guide native login switching and manual retry @luvs01
• #6582 fix(logs): identify decode estimate timing basis @luvs01
• #6587 fix(cli): cover the bounded startup health probe read @Yuxin-Qiao
• #6605 fix(gui): require one-use config write intent for standalone pairing @luvs01
• #6606 fix(codex): enforce stored-account credit policy through dispatch @luvs01
• #6616 fix(responses): redact terminal reset-replacement errors @luvs01
• #6617 fix(messages): enforce admission scope on Advisor models @luvs01
• #6624 fix(codex): synchronize manual account pause across matching main and pool entries @Yuxin-Qiao
• #6626 docs(service): translate the busy-lease guidance on every locale page @lcxhh521
• #6631 chore(release): open dev at 2.79.0 before releasing 2.78.0 @github-actions[bot]
• #6634 fix(claude): strip Claude Code's rotating billing line before Responses instructions @lidge-jun
• #6636 fix(devin): combine consecutive tool results for one invocation (carry #6584) @lidge-jun
• #6637 ci: typecheck gui/ in prepush when the branch changes it (carry #6485, #6592) @lidge-jun
• #6638 fix(web-search): budget batched results per query so none are dropped @lidge-jun
• #6639 fix(claude): retain approved Desktop picker trust across restarts @lidge-jun
• #6644 fix(cli): accept NTFS file ids above 2^53 in the update restart marker @lidge-jun
• #6645 fix(claude): migrate legacy Windows local-CA ACLs and stop re-inspecting unchanged files @lidge-jun
• #6651 fix(gui): read pairing-intent ACLs without PowerShell cmdlet autoload @lidge-jun
• #6652 test(responses): keep the post-refresh replay inside the pacing window on Windows @lidge-jun
• #6653 fix(gui): delete and reveal API keys from the key table @lidge-jun
• #6661 test(update): stop the lease holder fixture from cold-importing the service graph @lidge-jun
• #6670 ci: run Windows shards on Windows-sensitive PRs and nightly, with a shared PowerShell module cache @lidge-jun
• #6677 release: 2.79.0 @lidge-jun
• #6678 fix(live): join client-created voice calls as the caller that owns them @lidge-jun
• #6681 fix(cli): let ocx ensure wait for a slow cold start while its child lives @lidge-jun
• #6682 test(audio): give the non-readiness cases an isolation budget @lidge-jun
• #6683 test(runner): share Bun's transpiler cache across sandboxed homes @lidge-jun
• #6688 release: 2.79.0 dependency audit fix @lidge-jun

Published to npm as @bitkyc08/opencodex@2.78.0 with dist-tag latest.

New Features

• Add native pool preference with explicit opt-out precedence (#6562)
• Audit catalog writes with bounded private records (#6560)
• Heal lost catalog rows only from the idle owner (#6563)
• Icon theme switch sharing a row with the zoom stepper (#6579)
• Name the holder when the runtime mutation lease is busy (#6512)
• Group the sidebar into eight rows and tidy the Claude surface (#6593)
• Make existing management workflows discoverable (#6526)
• Add live provider management and safe editor apply (#6528)
• Add model ordering and routing editor workflows (#6535)
• Complete account policy and runtime settings workflows (#6539)
• Complete integration recovery and maintenance workflows (#6542)
• Complete observation and explicit-key API workflows (#6545)
• One-page Claude Code settings and Desktop model roles (#6596)
• Show the missing-store remedy in the dashboard (#6597)

Bug Fixes

• Promote scoped caller conversation headers (#6554)
• Retain bounded conversation trajectories (#6557)
• Preserve bounded large headers in picker relay (#6551)
• Qualify child trajectories by supplied parent (#6565)
• Share reset replay grants across translated sends (#6555)
• Preserve deferred and inline native tool names (#6552)
• Preserve native Claude requests across pooled dispatch (#6559)
• Require saved config authority for routed removal (#6553)
• Bind catalog writes to home ownership and intent (#6558)
• Preserve additional tool outputs during replay (#6576)
• Say why a dropped chatgptDesktop block reads as off (#6486)
• Honor consented credits after included quota exhaustion (#6572)
• Default config flags-only calls to show (carry #6483) (#6585)
• Release Anthropic refresh intent after a proven-unsent DNS failure (#6586)
• Report the spent primary, not the fallback's own refusal (#6564)
• Skip non-executable POSIX PATH entries in readiness checks (#6493)
• Preserve reasoning defaults after settings normalization (#6577)
• Wait for a complete Bun before restarting onto a replaced package tree (#6569)
• Keep Unix autostart shims off package-manager paths (carry of #6301) (#6589)
• Guard standalone update restart with exact replacement verification (#6556)
• Write DSH routes to the Desktop profile patch it reads (#6522)
• Explain Codex shim overlay migration and activation in status and doctor (#6607)
• Show account health actions, paid-credit consent, and empty-list next steps (#6611)
• Correct help and CLI reference text and show declared flags in leaf help (#6609)
• Stop-first manual reinstall guidance; refresh shim, update-failed, and ZCode guide text (#6619)
• Keep inference ports independent of management ingress (#6601)
• Normalize native upstream session aliases (#6588)
• Short sidebars, Claude sidecar rows, Save errors and legacy #debug after the GUI regroup (#6612)
• Keep armed test processes out of the real Codex home (#6591)
• Serve the Desktop picker over HTTP/2 so SSE streams cannot starve claude.ai (#6511) (#6610)
• Stop echoing values in claude desktop apply argument errors (#6618)
• Keep Claude Desktop role selects inside the Models card (#6625)
• Integration dialog starts on Close; client status failure offers Retry (#6623)
• Name ocx start when integration preview finds no running proxy (#6622)
• Reject arguments to uninstall and redact credential values in argument errors (#6608)
• Honest exit codes and JSON receipts for config, alias, health, update; validate provider add before saving (#6614)
• Name the real cause and next action in restart, update, and management refusals (#6615)

Documentation

• Record 2.77.0 candidate acceptance and publication (#6561)
• Close the CLI update restart unit with its delivery outcome (#6595)
• Sync Connect, Claude settings and DSH profile-patch guides with the dashboard (#6613)

Chores

• Open dev at 2.78.0 before releasing 2.77.0 (#6549)
• Compact the test-layout fixture to restore ratchet headroom (#6583)
• Isolate provider fixture DNS and bound child lifetime (#6578)
• Guard Kilo symlink regression on Windows (#6405)
• Make audio device refusal and login child import portable to Windows (#6599)
• Make the startup-proxy refresh test hold on Windows (#6600)
• Make catalog audit and provider proxy fixture robust on Windows; state unhealthy in-place shim status (#6602)

Other Changes

• 2.78.0 (#6632)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.77.0...v2.78.0

• #6405 test(clients): guard Kilo symlink regression on Windows @imranshaiedi-byte
• #6486 fix(chatgpt): say why a dropped chatgptDesktop block reads as off @lcxhh521
• #6493 fix(codex): skip non-executable POSIX PATH entries in readiness checks @hulkbig
• #6512 feat(service): name the holder when the runtime mutation lease is busy @lcxhh521
• #6522 fix(integrations): write DSH routes to the Desktop profile patch it reads @lcxhh521
• #6526 feat(cli): make existing management workflows discoverable @lidge-jun
• #6528 feat(cli): add live provider management and safe editor apply @lidge-jun
• #6535 feat(cli): add model ordering and routing editor workflows @lidge-jun
• #6539 feat(cli): complete account policy and runtime settings workflows @lidge-jun
• #6542 feat(cli): complete integration recovery and maintenance workflows @lidge-jun
• #6545 feat(cli): complete observation and explicit-key API workflows @lidge-jun
• #6549 chore(release): open dev at 2.78.0 before releasing 2.77.0 @github-actions[bot]
• #6551 fix(claude): preserve bounded large headers in picker relay @lidge-jun
• #6552 fix(anthropic): preserve deferred and inline native tool names @lidge-jun
• #6553 fix(codex): require saved config authority for routed removal @lidge-jun
• #6554 fix(server): promote scoped caller conversation headers @lidge-jun
• #6555 fix(responses): share reset replay grants across translated sends @lidge-jun
• #6556 fix(cli): guard standalone update restart with exact replacement verification @lidge-jun
• #6557 fix(devin): retain bounded conversation trajectories @lidge-jun
• #6558 fix(codex): bind catalog writes to home ownership and intent @lidge-jun
• #6559 fix(anthropic): preserve native Claude requests across pooled dispatch @lidge-jun
• #6560 feat(codex): audit catalog writes with bounded private records @lidge-jun
• #6561 docs: record 2.77.0 candidate acceptance and publication @lidge-jun
• #6562 feat(anthropic): add native pool preference with explicit opt-out precedence @lidge-jun
• #6563 feat(codex): heal lost catalog rows only from the idle owner @lidge-jun
• #6564 fix(combos): report the spent primary, not the fallback's own refusal @vadymhimself
• #6565 fix(devin): qualify child trajectories by supplied parent @lidge-jun
• #6569 fix(server): wait for a complete Bun before restarting onto a replaced package tree @LilMGenius
• #6572 fix(codex): honor consented credits after included quota exhaustion @Ingwannu
• #6576 fix(ollama): preserve additional tool outputs during replay @Ingwannu
• #6577 fix(droid): preserve reasoning defaults after settings normalization @shawn-kim-ai
• #6578 test: isolate provider fixture DNS and bound child lifetime @Hylouis233
• #6579 feat(gui): icon theme switch sharing a row with the zoom stepper @lidge-jun
• #6583 test(layout): compact the test-layout fixture to restore ratchet headroom @lidge-jun
• #6585 fix(cli): default config flags-only calls to show (carry #6483) @lidge-jun
• #6586 fix(oauth): release Anthropic refresh intent after a proven-unsent DNS failure @lidge-jun
• #6588 fix(responses): normalize native upstream session aliases @Yuxin-Qiao
• #6589 fix(codex): keep Unix autostart shims off package-manager paths (carry of #6301) @lidge-jun
• #6591 fix(test): keep armed test processes out of the real Codex home @lcxhh521
• #6593 feat(gui): group the sidebar into eight rows and tidy the Claude surface @lidge-jun
• #6595 docs(devlog): close the CLI update restart unit with its delivery outcome @lidge-jun
• #6596 feat(gui): one-page Claude Code settings and Desktop model roles @lidge-jun
• #6597 feat(integrations): show the missing-store remedy in the dashboard @lcxhh521
• #6599 test(cli): make audio device refusal and login child import portable to Windows @lidge-jun
• #6600 test(oauth): make the startup-proxy refresh test hold on Windows @lidge-jun
• #6601 fix(management): keep inference ports independent of management ingress @Ingwannu
• #6602 test: make catalog audit and provider proxy fixture robust on Windows; state unhealthy in-place shim status @lidge-jun
• #6607 fix(cli): explain Codex shim overlay migration and activation in status and doctor @lidge-jun
• #6608 fix(cli): reject arguments to uninstall and redact credential values in argument errors @lidge-jun
• #6609 fix(cli): correct help and CLI reference text and show declared flags in leaf help @lidge-jun
• #6610 fix(claude): serve the Desktop picker over HTTP/2 so SSE streams cannot starve claude.ai (#6511) @lidge-jun
• #6611 fix(cli): show account health actions, paid-credit consent, and empty-list next steps @lidge-jun
• #6612 fix(gui): short sidebars, Claude sidecar rows, Save errors and legacy #debug after the GUI regroup @lidge-jun
• #6613 docs: sync Connect, Claude settings and DSH profile-patch guides with the dashboard @lidge-jun
• #6614 fix(cli): honest exit codes and JSON receipts for config, alias, health, update; validate provider add before saving @lidge-jun
• #6615 fix(cli): name the real cause and next action in restart, update, and management refusals @lidge-jun
• #6618 fix(cli): stop echoing values in claude desktop apply argument errors @lidge-jun
• #6619 fix(update): stop-first manual reinstall guidance; refresh shim, update-failed, and ZCode guide text @lidge-jun
• #6622 fix(cli): name ocx start when integration preview finds no running proxy @lidge-jun
• #6623 fix(gui): integration dialog starts on Close; client status failure offers Retry @lidge-jun
• #6625 fix(gui): keep Claude Desktop role selects inside the Models card @lidge-jun
• #6632 release: 2.78.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.78.0-preview.20261005 with dist-tag preview.

New Features

• Add Claude subagent force and Remote Link setup recovery (#6489)
• Add explicit help paths and complete reference (#6498)
• Organize help around common tasks (#6500)
• Guide recovery from command typos (#6503)
• Add native pool preference with explicit opt-out precedence (#6562)
• Audit catalog writes with bounded private records (#6560)
• Heal lost catalog rows only from the idle owner (#6563)
• Icon theme switch sharing a row with the zoom stepper (#6579)
• Name the holder when the runtime mutation lease is busy (#6512)
• Group the sidebar into eight rows and tidy the Claude surface (#6593)
• Make existing management workflows discoverable (#6526)
• Add live provider management and safe editor apply (#6528)
• Add model ordering and routing editor workflows (#6535)
• Complete account policy and runtime settings workflows (#6539)
• Complete integration recovery and maintenance workflows (#6542)
• Complete observation and explicit-key API workflows (#6545)
• One-page Claude Code settings and Desktop model roles (#6596)
• Show the missing-store remedy in the dashboard (#6597)

Bug Fixes

• Remove blank tail from account-page scrolling (#6475)
• Register subagents after first-party setup (#6484)
• Forward the Grok conversation as session_id so OpenAI prefixes stay warm (#6482)
• Preserve JSON while escaping human output (#6459)
• Keep backup names out of Windows cmd logging (#6455)
• Preserve legacy cleanup before startup prechecks (#6457)
• Integrate reviewed provider, client, and desktop recovery train (#6487)
• Resolve late train review findings and regression gaps (#6490)
• Normalize short Windows home paths for Scoop npm (#6494)
• Group discovered effort families across versions (#6501)
• Keep restart rechecks within their deadline (#6506)
• Stabilize large native HTTP uploads (carry #6508) (#6513)
• Retain tool batches across assistant commentary (#6519)
• Keep native context failures terminal in Messages (#6516)
• Group Claude 5.5 usage and derive reference prices (#6514)
• Classify revoked native sessions without stale attribution (#6515)
• Preserve Claude identity across token rotation (carry #6378) (#6518)
• Stabilize standalone pairing for Child enrollment (#6517)
• Require pairing for child link join (#6076)
• Preserve stored-main ownership and scoped refresh refusal (#6523)
• Preserve plan-model refusal evidence through error projection (#6527)
• Refuse unbooked dispatches under applicable ceilings (#6538)
• Preserve bounded nested HTTP refusal semantics (#6540)
• Promote scoped caller conversation headers (#6554)
• Retain bounded conversation trajectories (#6557)
• Preserve bounded large headers in picker relay (#6551)
• Qualify child trajectories by supplied parent (#6565)
• Share reset replay grants across translated sends (#6555)
• Preserve deferred and inline native tool names (#6552)
• Preserve native Claude requests across pooled dispatch (#6559)
• Require saved config authority for routed removal (#6553)
• Bind catalog writes to home ownership and intent (#6558)
• Preserve additional tool outputs during replay (#6576)
• Say why a dropped chatgptDesktop block reads as off (#6486)
• Honor consented credits after included quota exhaustion (#6572)
• Default config flags-only calls to show (carry #6483) (#6585)
• Release Anthropic refresh intent after a proven-unsent DNS failure (#6586)
• Report the spent primary, not the fallback's own refusal (#6564)
• Skip non-executable POSIX PATH entries in readiness checks (#6493)
• Preserve reasoning defaults after settings normalization (#6577)
• Wait for a complete Bun before restarting onto a replaced package tree (#6569)
• Keep Unix autostart shims off package-manager paths (carry of #6301) (#6589)
• Guard standalone update restart with exact replacement verification (#6556)
• Write DSH routes to the Desktop profile patch it reads (#6522)
• Explain Codex shim overlay migration and activation in status and doctor (#6607)
• Show account health actions, paid-credit consent, and empty-list next steps (#6611)
• Correct help and CLI reference text and show declared flags in leaf help (#6609)
• Stop-first manual reinstall guidance; refresh shim, update-failed, and ZCode guide text (#6619)
• Keep inference ports independent of management ingress (#6601)
• Normalize native upstream session aliases (#6588)
• Short sidebars, Claude sidecar rows, Save errors and legacy #debug after the GUI regroup (#6612)
• Keep armed test processes out of the real Codex home (#6591)
• Serve the Desktop picker over HTTP/2 so SSE streams cannot starve claude.ai (#6511) (#6610)
• Stop echoing values in claude desktop apply argument errors (#6618)
• Keep Claude Desktop role selects inside the Models card (#6625)
• Integration dialog starts on Close; client status failure offers Retry (#6623)
• Name ocx start when integration preview finds no running proxy (#6622)
• Reject arguments to uninstall and redact credential values in argument errors (#6608)
• Honest exit codes and JSON receipts for config, alias, health, update; validate provider add before saving (#6614)
• Name the real cause and next action in restart, update, and management refusals (#6615)

Documentation

• Update TokenLab docs links (#6474)
• Record native account carry publication (#6536)
• Record scoped release stabilization and verification gates (#6541)
• Record 2.77.0 candidate acceptance and publication (#6561)
• Close the CLI update restart unit with its delivery outcome (#6595)
• Sync Connect, Claude settings and DSH profile-patch guides with the dashboard (#6613)

Chores

• Drain Windows ACL work and startup child output (#6495)
• Isolate release fixtures and release holder leases cooperatively (#6543)
• Open dev at 2.78.0 before releasing 2.77.0 (#6549)
• Compact the test-layout fixture to restore ratchet headroom (#6583)
• Isolate provider fixture DNS and bound child lifetime (#6578)
• Guard Kilo symlink regression on Windows (#6405)
• Make audio device refusal and login child import portable to Windows (#6599)
• Make the startup-proxy refresh test hold on Windows (#6600)
• Make catalog audit and provider proxy fixture robust on Windows; state unhealthy in-place shim status (#6602)

Other Changes

• Open dev at 2.77.0 before releasing 2.76.0 (#6462)
• 2.78.0-preview.20261005 (#6630)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.77.0...v2.78.0-preview.20261005

• #6076 fix(security): require pairing for child link join @luvs01
• #6405 test(clients): guard Kilo symlink regression on Windows @imranshaiedi-byte
• #6455 fix(service): keep backup names out of Windows cmd logging @luvs01
• #6457 fix(claude): preserve legacy cleanup before startup prechecks @luvs01
• #6459 fix(cli): preserve JSON while escaping human output @luvs01
• #6462 chore(release): open dev at 2.77.0 before releasing 2.76.0 @github-actions[bot]
• #6474 docs(providers): update TokenLab docs links @hedging8563
• #6475 fix(gui): remove blank tail from account-page scrolling @lidge-jun
• #6482 fix(grok): forward the Grok conversation as session_id so OpenAI prefixes stay warm @lidge-jun
• #6484 fix(claude): register subagents after first-party setup @lidge-jun
• #6486 fix(chatgpt): say why a dropped chatgptDesktop block reads as off @lcxhh521
• #6487 fix: integrate reviewed provider, client, and desktop recovery train @lidge-jun
• #6489 feat: add Claude subagent force and Remote Link setup recovery @lidge-jun
• #6490 fix: resolve late train review findings and regression gaps @lidge-jun
• #6493 fix(codex): skip non-executable POSIX PATH entries in readiness checks @hulkbig
• #6494 fix(update): normalize short Windows home paths for Scoop npm @lidge-jun
• #6495 test: drain Windows ACL work and startup child output @lidge-jun
• #6498 feat(cli): add explicit help paths and complete reference @lidge-jun
• #6500 feat(cli): organize help around common tasks @lidge-jun
• #6501 fix(antigravity): group discovered effort families across versions @lidge-jun
• #6503 feat(cli): guide recovery from command typos @lidge-jun
• #6506 fix(cli): keep restart rechecks within their deadline @lidge-jun
• #6512 feat(service): name the holder when the runtime mutation lease is busy @lcxhh521
• #6513 fix(responses): stabilize large native HTTP uploads (carry #6508) @lidge-jun
• #6514 fix(antigravity): group Claude 5.5 usage and derive reference prices @lidge-jun
• #6515 fix(codex): classify revoked native sessions without stale attribution @lidge-jun
• #6516 fix(claude): keep native context failures terminal in Messages @lidge-jun
• #6517 fix(security): stabilize standalone pairing for Child enrollment @lidge-jun
• #6518 fix(oauth): preserve Claude identity across token rotation (carry #6378) @lidge-jun
• #6519 fix(ollama-native): retain tool batches across assistant commentary @lidge-jun
• #6522 fix(integrations): write DSH routes to the Desktop profile patch it reads @lcxhh521
• #6523 fix(codex): preserve stored-main ownership and scoped refresh refusal @lidge-jun
• #6526 feat(cli): make existing management workflows discoverable @lidge-jun
• #6527 fix(combos): preserve plan-model refusal evidence through error projection @lidge-jun
• #6528 feat(cli): add live provider management and safe editor apply @lidge-jun
• #6535 feat(cli): add model ordering and routing editor workflows @lidge-jun
• #6536 docs: record native account carry publication @lidge-jun
• #6538 fix(spend): refuse unbooked dispatches under applicable ceilings @lidge-jun
• #6539 feat(cli): complete account policy and runtime settings workflows @lidge-jun
• #6540 fix(combo): preserve bounded nested HTTP refusal semantics @lidge-jun
• #6541 docs: record scoped release stabilization and verification gates @lidge-jun
• #6542 feat(cli): complete integration recovery and maintenance workflows @lidge-jun
• #6543 test: isolate release fixtures and release holder leases cooperatively @lidge-jun
• #6545 feat(cli): complete observation and explicit-key API workflows @lidge-jun
• #6549 chore(release): open dev at 2.78.0 before releasing 2.77.0 @github-actions[bot]
• #6551 fix(claude): preserve bounded large headers in picker relay @lidge-jun
• #6552 fix(anthropic): preserve deferred and inline native tool names @lidge-jun
• #6553 fix(codex): require saved config authority for routed removal @lidge-jun
• #6554 fix(server): promote scoped caller conversation headers @lidge-jun
• #6555 fix(responses): share reset replay grants across translated sends @lidge-jun
• #6556 fix(cli): guard standalone update restart with exact replacement verification @lidge-jun
• #6557 fix(devin): retain bounded conversation trajectories @lidge-jun
• #6558 fix(codex): bind catalog writes to home ownership and intent @lidge-jun
• #6559 fix(anthropic): preserve native Claude requests across pooled dispatch @lidge-jun
• #6560 feat(codex): audit catalog writes with bounded private records @lidge-jun
• #6561 docs: record 2.77.0 candidate acceptance and publication @lidge-jun
• #6562 feat(anthropic): add native pool preference with explicit opt-out precedence @lidge-jun
• #6563 feat(codex): heal lost catalog rows only from the idle owner @lidge-jun
• #6564 fix(combos): report the spent primary, not the fallback's own refusal @vadymhimself
• #6565 fix(devin): qualify child trajectories by supplied parent @lidge-jun
• #6569 fix(server): wait for a complete Bun before restarting onto a replaced package tree @LilMGenius
• #6572 fix(codex): honor consented credits after included quota exhaustion @Ingwannu
• #6576 fix(ollama): preserve additional tool outputs during replay @Ingwannu
• #6577 fix(droid): preserve reasoning defaults after settings normalization @shawn-kim-ai
• #6578 test: isolate provider fixture DNS and bound child lifetime @Hylouis233
• #6579 feat(gui): icon theme switch sharing a row with the zoom stepper @lidge-jun
• #6583 test(layout): compact the test-layout fixture to restore ratchet headroom @lidge-jun
• #6585 fix(cli): default config flags-only calls to show (carry #6483) @lidge-jun
• #6586 fix(oauth): release Anthropic refresh intent after a proven-unsent DNS failure @lidge-jun
• #6588 fix(responses): normalize native upstream session aliases @Yuxin-Qiao
• #6589 fix(codex): keep Unix autostart shims off package-manager paths (carry of #6301) @lidge-jun
• #6591 fix(test): keep armed test processes out of the real Codex home @lcxhh521
• #6593 feat(gui): group the sidebar into eight rows and tidy the Claude surface @lidge-jun
• #6595 docs(devlog): close the CLI update restart unit with its delivery outcome @lidge-jun
• #6596 feat(gui): one-page Claude Code settings and Desktop model roles @lidge-jun
• #6597 feat(integrations): show the missing-store remedy in the dashboard @lcxhh521
• #6599 test(cli): make audio device refusal and login child import portable to Windows @lidge-jun
• #6600 test(oauth): make the startup-proxy refresh test hold on Windows @lidge-jun
• #6601 fix(management): keep inference ports independent of management ingress @Ingwannu
• #6602 test: make catalog audit and provider proxy fixture robust on Windows; state unhealthy in-place shim status @lidge-jun
• #6607 fix(cli): explain Codex shim overlay migration and activation in status and doctor @lidge-jun
• #6608 fix(cli): reject arguments to uninstall and redact credential values in argument errors @lidge-jun
• #6609 fix(cli): correct help and CLI reference text and show declared flags in leaf help @lidge-jun
• #6610 fix(claude): serve the Desktop picker over HTTP/2 so SSE streams cannot starve claude.ai (#6511) @lidge-jun
• #6611 fix(cli): show account health actions, paid-credit consent, and empty-list next steps @lidge-jun
• #6612 fix(gui): short sidebars, Claude sidecar rows, Save errors and legacy #debug after the GUI regroup @lidge-jun
• #6613 docs: sync Connect, Claude settings and DSH profile-patch guides with the dashboard @lidge-jun
• #6614 fix(cli): honest exit codes and JSON receipts for config, alias, health, update; validate provider add before saving @lidge-jun
• #6615 fix(cli): name the real cause and next action in restart, update, and management refusals @lidge-jun
• #6618 fix(cli): stop echoing values in claude desktop apply argument errors @lidge-jun
• #6619 fix(update): stop-first manual reinstall guidance; refresh shim, update-failed, and ZCode guide text @lidge-jun
• #6622 fix(cli): name ocx start when integration preview finds no running proxy @lidge-jun
• #6623 fix(gui): integration dialog starts on Close; client status failure offers Retry @lidge-jun
• #6625 fix(gui): keep Claude Desktop role selects inside the Models card @lidge-jun
• #6630 release: 2.78.0-preview.20261005 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.77.0 with dist-tag latest.

New Features

• Add Claude subagent force and Remote Link setup recovery (#6489)
• Add explicit help paths and complete reference (#6498)
• Organize help around common tasks (#6500)
• Guide recovery from command typos (#6503)

Bug Fixes

• Remove blank tail from account-page scrolling (#6475)
• Register subagents after first-party setup (#6484)
• Forward the Grok conversation as session_id so OpenAI prefixes stay warm (#6482)
• Preserve JSON while escaping human output (#6459)
• Keep backup names out of Windows cmd logging (#6455)
• Preserve legacy cleanup before startup prechecks (#6457)
• Integrate reviewed provider, client, and desktop recovery train (#6487)
• Resolve late train review findings and regression gaps (#6490)
• Normalize short Windows home paths for Scoop npm (#6494)
• Group discovered effort families across versions (#6501)
• Keep restart rechecks within their deadline (#6506)
• Stabilize large native HTTP uploads (carry #6508) (#6513)
• Retain tool batches across assistant commentary (#6519)
• Keep native context failures terminal in Messages (#6516)
• Group Claude 5.5 usage and derive reference prices (#6514)
• Classify revoked native sessions without stale attribution (#6515)
• Preserve Claude identity across token rotation (carry #6378) (#6518)
• Stabilize standalone pairing for Child enrollment (#6517)
• Require pairing for child link join (#6076)
• Preserve stored-main ownership and scoped refresh refusal (#6523)
• Preserve plan-model refusal evidence through error projection (#6527)
• Refuse unbooked dispatches under applicable ceilings (#6538)
• Preserve bounded nested HTTP refusal semantics (#6540)

Documentation

• Update TokenLab docs links (#6474)
• Record native account carry publication (#6536)
• Record scoped release stabilization and verification gates (#6541)

Chores

• Drain Windows ACL work and startup child output (#6495)
• Isolate release fixtures and release holder leases cooperatively (#6543)

Other Changes

• Open dev at 2.77.0 before releasing 2.76.0 (#6462)
• 2.77.0 (#6550)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.76.0...v2.77.0

• #6076 fix(security): require pairing for child link join @luvs01
• #6455 fix(service): keep backup names out of Windows cmd logging @luvs01
• #6457 fix(claude): preserve legacy cleanup before startup prechecks @luvs01
• #6459 fix(cli): preserve JSON while escaping human output @luvs01
• #6462 chore(release): open dev at 2.77.0 before releasing 2.76.0 @github-actions[bot]
• #6474 docs(providers): update TokenLab docs links @hedging8563
• #6475 fix(gui): remove blank tail from account-page scrolling @lidge-jun
• #6482 fix(grok): forward the Grok conversation as session_id so OpenAI prefixes stay warm @lidge-jun
• #6484 fix(claude): register subagents after first-party setup @lidge-jun
• #6487 fix: integrate reviewed provider, client, and desktop recovery train @lidge-jun
• #6489 feat: add Claude subagent force and Remote Link setup recovery @lidge-jun
• #6490 fix: resolve late train review findings and regression gaps @lidge-jun
• #6494 fix(update): normalize short Windows home paths for Scoop npm @lidge-jun
• #6495 test: drain Windows ACL work and startup child output @lidge-jun
• #6498 feat(cli): add explicit help paths and complete reference @lidge-jun
• #6500 feat(cli): organize help around common tasks @lidge-jun
• #6501 fix(antigravity): group discovered effort families across versions @lidge-jun
• #6503 feat(cli): guide recovery from command typos @lidge-jun
• #6506 fix(cli): keep restart rechecks within their deadline @lidge-jun
• #6513 fix(responses): stabilize large native HTTP uploads (carry #6508) @lidge-jun
• #6514 fix(antigravity): group Claude 5.5 usage and derive reference prices @lidge-jun
• #6515 fix(codex): classify revoked native sessions without stale attribution @lidge-jun
• #6516 fix(claude): keep native context failures terminal in Messages @lidge-jun
• #6517 fix(security): stabilize standalone pairing for Child enrollment @lidge-jun
• #6518 fix(oauth): preserve Claude identity across token rotation (carry #6378) @lidge-jun
• #6519 fix(ollama-native): retain tool batches across assistant commentary @lidge-jun
• #6523 fix(codex): preserve stored-main ownership and scoped refresh refusal @lidge-jun
• #6527 fix(combos): preserve plan-model refusal evidence through error projection @lidge-jun
• #6536 docs: record native account carry publication @lidge-jun
• #6538 fix(spend): refuse unbooked dispatches under applicable ceilings @lidge-jun
• #6540 fix(combo): preserve bounded nested HTTP refusal semantics @lidge-jun
• #6541 docs: record scoped release stabilization and verification gates @lidge-jun
• #6543 test: isolate release fixtures and release holder leases cooperatively @lidge-jun
• #6550 release: 2.77.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.76.0 with dist-tag latest.

New Features

• Reuse measured entry strings for the state snapshot (#6360)
• Pick the model for each LazyCodex agent role (carry #6262) (#6366)
• Auto-assign LazyCodex role models by sizing each role (carry #6269) (#6367)
• Suggest a delegation model by sizing the work (carry #6274) (#6389)
• Experimental Zed Hosted AI provider (use at your own risk) (#6362)
• Experimental macOS app-server quota-gate shim (split from #5947) (#6361)
• Carry opt-in Antigravity TLS profile onto provider egress (#6359)
• JEV decision methods — TypeSafe, System One server, or any opencodex model (#6364)
• Window-aware main-account hard-lock thresholds and outside-usage warning (#6363)
• List opencodex models in the Claude Code CLI first-party /model picker (#6418)
• Top-level Claude page with Account, Code, Desktop and Settings tabs (#6430)
• Switch accounts at 100% by default and make spending ChatGPT credits opt-in (#6444)
• Add OpenGateway (Sionic AI) preset with live discovery and Sionic-first ordering (#6448)

Bug Fixes

• Log a stalled or over-cap passthrough stream as a 502 incomplete row (#6354)
• Clamp budget thinking to the model's real output maximum (#6355)
• Enforce model routes for vision and search helpers (#6371)
• Bound type-array schema normalization and preserve pointers (#6369)
• Enforce one sibling rotation across authentication failures (#6372)
• Retry rebuilt requests at the rebuilt destination (#6374)
• Release leases granted across request cancellation (#6377)
• Authorize the Fast wire model across API endpoints (#6373)
• Require owner-only no-follow registry publication (#6375)
• Reject unpaired surrogates in discovered model metadata (#6368)
• Recognize Eliza qwen3-8-27b checkpoint ids in the leading-system template (#6385)
• Preserve canonical path case in project confinement (#6323)
• Keep native login confirmation readable and contained (#6388)
• Surface why macOS proxy "auto" refuses (exception shapes, SOCKS-only) (#6205)
• Relay native Anthropic rate-limit headers (#6356)
• Record first-output timing for tool-only streams (carry #6259) (#6392)
• Verify service manager identity before census delegation (carry #6379) (#6397)
• Rebind continuation ownership after refusal failover (#6376)
• A pool-held 429 must not park the combo target past the pool (#6383)
• Display hosted image results in local Codex clients (carry #6233) (#6394)
• Name the refused ledger file and condition, warn on synced state directories (#6398)
• Preserve policy authorization across fallback redirects (carry #6380) (#6396)
• Exclude macOS Electron helpers from client diagnostics (carry #6296) (#6393)
• Check and pin the npm cache root before staging (#6288) (#6395)
• Tolerate locale dates in Windows service wrappers (carry #6298) (#6391)
• Close the #6361 review follow-ups (over-cap line, docs, structure map) (#6412)
• Build the bundled app-server path with posix.join on every host (#6413)
• Classify synced state paths with POSIX rules on every host (#6414)
• Bound every Windows manager command the guarded stop depends on (#6403)
• Allow Windows guarded takeover to finish within one bounded budget (#6400)
• Release the Bun updater lease around service-manager starts (#5760) (#6407)
• Scope Windows scheduler probes to the root task and re-probe deleted registrations (#6401)
• Release the restart lease before the service refresh (#5760) (#6404)
• Stabilize guarded-stop re-verification and report the failing guard fact (#6402)
• Rebuild a CLI picker snapshot whose rows no longer decode (#6419)
• Start the intercept pair on demand instead of asking for a restart (#6428)
• Conditions-based Claude account-pool and OAuth warning copy (#6440)
• Bind native Claude metadata and client identity to the serving OAuth account (#6442)
• Succeed ensure for validated connected clients (#6427)
• Classify 429s and admit by per-model weekly quota in the Claude account pool (#6443)
• Decode CR, LF and CRLF server-sent events across chunks (carry #6439) (#6446)
• Carry oocheol's CLI validation and diagnostics fixes (#6429 #6431 #6432 #6433 #6434 #6435 #6437 #6438) (#6447)
• Wait out the npm Bun placeholder instead of executing it (#6441)

Documentation

• Close the omo (Codex / LazyCodex) carry unit (#6390)

Chores

• Match the canonical role path in the role-route write-failure test (#6399)
• Canonicalize the owner-registry ACL test root (macOS) (#6411)

Other Changes

• Open dev at 2.76.0 before releasing 2.75.0 (#6351)
• 2.76.0 (#6468)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.75.0...v2.76.0

• #6205 fix(config): surface why macOS proxy "auto" refuses (exception shapes, SOCKS-only) @JinHanAI
• #6323 fix(command-code): preserve canonical path case in project confinement @luvs01
• #6351 chore(release): open dev at 2.76.0 before releasing 2.75.0 @github-actions[bot]
• #6354 fix(claude): log a stalled or over-cap passthrough stream as a 502 incomplete row @sh940701
• #6355 fix(anthropic): clamp budget thinking to the model's real output maximum @vadymhimself
• #6356 fix(claude): relay native Anthropic rate-limit headers @Ingwannu
• #6359 feat(transport): carry opt-in Antigravity TLS profile onto provider egress @lidge-jun
• #6360 perf(responses): reuse measured entry strings for the state snapshot @lidge-jun
• #6361 feat(chatgpt): experimental macOS app-server quota-gate shim (split from #5947) @lidge-jun
• #6362 feat(zed): experimental Zed Hosted AI provider (use at your own risk) @lidge-jun
• #6363 feat(codex): window-aware main-account hard-lock thresholds and outside-usage warning @lidge-jun
• #6364 feat(combos): JEV decision methods — TypeSafe, System One server, or any opencodex model @lidge-jun
• #6366 feat(codex): pick the model for each LazyCodex agent role (carry #6262) @lidge-jun
• #6367 feat(codex): auto-assign LazyCodex role models by sizing each role (carry #6269) @lidge-jun
• #6368 fix(codex): reject unpaired surrogates in discovered model metadata @luvs01
• #6369 fix(gemini): bound type-array schema normalization and preserve pointers @luvs01
• #6371 fix(anthropic): enforce model routes for vision and search helpers @luvs01
• #6372 fix(antigravity): enforce one sibling rotation across authentication failures @luvs01
• #6373 fix(xai): authorize the Fast wire model across API endpoints @luvs01
• #6374 fix(kiro): retry rebuilt requests at the rebuilt destination @luvs01
• #6375 fix(config): require owner-only no-follow registry publication @luvs01
• #6376 fix(kiro): rebind continuation ownership after refusal failover @luvs01
• #6377 fix(kiro): release leases granted across request cancellation @luvs01
• #6383 fix(combos): a pool-held 429 must not park the combo target past the pool @vadymhimself
• #6385 fix(chat): recognize Eliza qwen3-8-27b checkpoint ids in the leading-system template @arikon
• #6388 fix(gui): keep native login confirmation readable and contained @pengusto
• #6389 feat(subagents): suggest a delegation model by sizing the work (carry #6274) @lidge-jun
• #6390 docs(devlog): close the omo (Codex / LazyCodex) carry unit @lidge-jun
• #6391 fix(service): tolerate locale dates in Windows service wrappers (carry #6298) @lidge-jun
• #6392 fix(responses): record first-output timing for tool-only streams (carry #6259) @lidge-jun
• #6393 fix(codex): exclude macOS Electron helpers from client diagnostics (carry #6296) @lidge-jun
• #6394 fix(responses): display hosted image results in local Codex clients (carry #6233) @lidge-jun
• #6395 fix(update): check and pin the npm cache root before staging (#6288) @lidge-jun
• #6396 fix(router): preserve policy authorization across fallback redirects (carry #6380) @lidge-jun
• #6397 fix(codex): verify service manager identity before census delegation (carry #6379) @lidge-jun
• #6398 fix(spend): name the refused ledger file and condition, warn on synced state directories @lidge-jun
• #6399 test(codex): match the canonical role path in the role-route write-failure test @lidge-jun
• #6400 fix(desktop): allow Windows guarded takeover to finish within one bounded budget @devin-ai-integration[bot]
• #6401 fix(service): scope Windows scheduler probes to the root task and re-probe deleted registrations @devin-ai-integration[bot]
• #6402 fix(cli): stabilize guarded-stop re-verification and report the failing guard fact @devin-ai-integration[bot]
• #6403 fix(service): bound every Windows manager command the guarded stop depends on @devin-ai-integration[bot]
• #6404 fix(update): release the restart lease before the service refresh (#5760) @devin-ai-integration[bot]
• #6407 fix(update): release the Bun updater lease around service-manager starts (#5760) @devin-ai-integration[bot]
• #6411 test(config): canonicalize the owner-registry ACL test root (macOS) @lidge-jun
• #6412 fix(chatgpt): close the #6361 review follow-ups (over-cap line, docs, structure map) @lidge-jun
• #6413 fix(chatgpt): build the bundled app-server path with posix.join on every host @lidge-jun
• #6414 fix(spend): classify synced state paths with POSIX rules on every host @lidge-jun
• #6418 feat(claude): list opencodex models in the Claude Code CLI first-party /model picker @lidge-jun
• #6419 fix(claude): rebuild a CLI picker snapshot whose rows no longer decode @lidge-jun
• #6427 fix(cli): succeed ensure for validated connected clients @Ingwannu
• #6428 fix(claude): start the intercept pair on demand instead of asking for a restart @lidge-jun
• #6430 feat(gui): top-level Claude page with Account, Code, Desktop and Settings tabs @lidge-jun
• #6440 fix(gui): conditions-based Claude account-pool and OAuth warning copy @lidge-jun
• #6441 fix(service): wait out the npm Bun placeholder instead of executing it @LilMGenius
• #6442 fix(anthropic): bind native Claude metadata and client identity to the serving OAuth account @lidge-jun
• #6443 fix(anthropic): classify 429s and admit by per-model weekly quota in the Claude account pool @lidge-jun
• #6444 feat(codex): switch accounts at 100% by default and make spending ChatGPT credits opt-in @lidge-jun
• #6446 fix(streaming): decode CR, LF and CRLF server-sent events across chunks (carry #6439) @lidge-jun
• #6447 fix(cli): carry oocheol's CLI validation and diagnostics fixes (#6429 #6431 #6432 #6433 #6434 #6435 #6437 #6438) @lidge-jun
• #6448 feat(providers): add OpenGateway (Sionic AI) preset with live discovery and Sionic-first ordering @lidge-jun
• #6468 release: 2.76.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.76.0-preview.20261003 with dist-tag preview.

New Features

• Reuse measured entry strings for the state snapshot (#6360)
• Pick the model for each LazyCodex agent role (carry #6262) (#6366)
• Auto-assign LazyCodex role models by sizing each role (carry #6269) (#6367)
• Suggest a delegation model by sizing the work (carry #6274) (#6389)
• Experimental Zed Hosted AI provider (use at your own risk) (#6362)
• Experimental macOS app-server quota-gate shim (split from #5947) (#6361)
• Carry opt-in Antigravity TLS profile onto provider egress (#6359)
• JEV decision methods — TypeSafe, System One server, or any opencodex model (#6364)
• Window-aware main-account hard-lock thresholds and outside-usage warning (#6363)
• List opencodex models in the Claude Code CLI first-party /model picker (#6418)
• Top-level Claude page with Account, Code, Desktop and Settings tabs (#6430)
• Switch accounts at 100% by default and make spending ChatGPT credits opt-in (#6444)
• Add OpenGateway (Sionic AI) preset with live discovery and Sionic-first ordering (#6448)

Bug Fixes

• Log a stalled or over-cap passthrough stream as a 502 incomplete row (#6354)
• Clamp budget thinking to the model's real output maximum (#6355)
• Enforce model routes for vision and search helpers (#6371)
• Bound type-array schema normalization and preserve pointers (#6369)
• Enforce one sibling rotation across authentication failures (#6372)
• Retry rebuilt requests at the rebuilt destination (#6374)
• Release leases granted across request cancellation (#6377)
• Authorize the Fast wire model across API endpoints (#6373)
• Require owner-only no-follow registry publication (#6375)
• Reject unpaired surrogates in discovered model metadata (#6368)
• Recognize Eliza qwen3-8-27b checkpoint ids in the leading-system template (#6385)
• Preserve canonical path case in project confinement (#6323)
• Keep native login confirmation readable and contained (#6388)
• Surface why macOS proxy "auto" refuses (exception shapes, SOCKS-only) (#6205)
• Relay native Anthropic rate-limit headers (#6356)
• Record first-output timing for tool-only streams (carry #6259) (#6392)
• Verify service manager identity before census delegation (carry #6379) (#6397)
• Rebind continuation ownership after refusal failover (#6376)
• A pool-held 429 must not park the combo target past the pool (#6383)
• Display hosted image results in local Codex clients (carry #6233) (#6394)
• Name the refused ledger file and condition, warn on synced state directories (#6398)
• Preserve policy authorization across fallback redirects (carry #6380) (#6396)
• Exclude macOS Electron helpers from client diagnostics (carry #6296) (#6393)
• Check and pin the npm cache root before staging (#6288) (#6395)
• Tolerate locale dates in Windows service wrappers (carry #6298) (#6391)
• Close the #6361 review follow-ups (over-cap line, docs, structure map) (#6412)
• Build the bundled app-server path with posix.join on every host (#6413)
• Classify synced state paths with POSIX rules on every host (#6414)
• Bound every Windows manager command the guarded stop depends on (#6403)
• Allow Windows guarded takeover to finish within one bounded budget (#6400)
• Release the Bun updater lease around service-manager starts (#5760) (#6407)
• Scope Windows scheduler probes to the root task and re-probe deleted registrations (#6401)
• Release the restart lease before the service refresh (#5760) (#6404)
• Stabilize guarded-stop re-verification and report the failing guard fact (#6402)
• Rebuild a CLI picker snapshot whose rows no longer decode (#6419)
• Start the intercept pair on demand instead of asking for a restart (#6428)
• Conditions-based Claude account-pool and OAuth warning copy (#6440)
• Bind native Claude metadata and client identity to the serving OAuth account (#6442)
• Succeed ensure for validated connected clients (#6427)
• Classify 429s and admit by per-model weekly quota in the Claude account pool (#6443)
• Decode CR, LF and CRLF server-sent events across chunks (carry #6439) (#6446)
• Carry oocheol's CLI validation and diagnostics fixes (#6429 #6431 #6432 #6433 #6434 #6435 #6437 #6438) (#6447)
• Wait out the npm Bun placeholder instead of executing it (#6441)

Documentation

• Close the omo (Codex / LazyCodex) carry unit (#6390)

Chores

• Match the canonical role path in the role-route write-failure test (#6399)
• Canonicalize the owner-registry ACL test root (macOS) (#6411)

Other Changes

• Open dev at 2.76.0 before releasing 2.75.0 (#6351)
• 2.76.0-preview.20261003 (#6467)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.75.0...v2.76.0-preview.20261003

• #6205 fix(config): surface why macOS proxy "auto" refuses (exception shapes, SOCKS-only) @JinHanAI
• #6323 fix(command-code): preserve canonical path case in project confinement @luvs01
• #6351 chore(release): open dev at 2.76.0 before releasing 2.75.0 @github-actions[bot]
• #6354 fix(claude): log a stalled or over-cap passthrough stream as a 502 incomplete row @sh940701
• #6355 fix(anthropic): clamp budget thinking to the model's real output maximum @vadymhimself
• #6356 fix(claude): relay native Anthropic rate-limit headers @Ingwannu
• #6359 feat(transport): carry opt-in Antigravity TLS profile onto provider egress @lidge-jun
• #6360 perf(responses): reuse measured entry strings for the state snapshot @lidge-jun
• #6361 feat(chatgpt): experimental macOS app-server quota-gate shim (split from #5947) @lidge-jun
• #6362 feat(zed): experimental Zed Hosted AI provider (use at your own risk) @lidge-jun
• #6363 feat(codex): window-aware main-account hard-lock thresholds and outside-usage warning @lidge-jun
• #6364 feat(combos): JEV decision methods — TypeSafe, System One server, or any opencodex model @lidge-jun
• #6366 feat(codex): pick the model for each LazyCodex agent role (carry #6262) @lidge-jun
• #6367 feat(codex): auto-assign LazyCodex role models by sizing each role (carry #6269) @lidge-jun
• #6368 fix(codex): reject unpaired surrogates in discovered model metadata @luvs01
• #6369 fix(gemini): bound type-array schema normalization and preserve pointers @luvs01
• #6371 fix(anthropic): enforce model routes for vision and search helpers @luvs01
• #6372 fix(antigravity): enforce one sibling rotation across authentication failures @luvs01
• #6373 fix(xai): authorize the Fast wire model across API endpoints @luvs01
• #6374 fix(kiro): retry rebuilt requests at the rebuilt destination @luvs01
• #6375 fix(config): require owner-only no-follow registry publication @luvs01
• #6376 fix(kiro): rebind continuation ownership after refusal failover @luvs01
• #6377 fix(kiro): release leases granted across request cancellation @luvs01
• #6383 fix(combos): a pool-held 429 must not park the combo target past the pool @vadymhimself
• #6385 fix(chat): recognize Eliza qwen3-8-27b checkpoint ids in the leading-system template @arikon
• #6388 fix(gui): keep native login confirmation readable and contained @pengusto
• #6389 feat(subagents): suggest a delegation model by sizing the work (carry #6274) @lidge-jun
• #6390 docs(devlog): close the omo (Codex / LazyCodex) carry unit @lidge-jun
• #6391 fix(service): tolerate locale dates in Windows service wrappers (carry #6298) @lidge-jun
• #6392 fix(responses): record first-output timing for tool-only streams (carry #6259) @lidge-jun
• #6393 fix(codex): exclude macOS Electron helpers from client diagnostics (carry #6296) @lidge-jun
• #6394 fix(responses): display hosted image results in local Codex clients (carry #6233) @lidge-jun
• #6395 fix(update): check and pin the npm cache root before staging (#6288) @lidge-jun
• #6396 fix(router): preserve policy authorization across fallback redirects (carry #6380) @lidge-jun
• #6397 fix(codex): verify service manager identity before census delegation (carry #6379) @lidge-jun
• #6398 fix(spend): name the refused ledger file and condition, warn on synced state directories @lidge-jun
• #6399 test(codex): match the canonical role path in the role-route write-failure test @lidge-jun
• #6400 fix(desktop): allow Windows guarded takeover to finish within one bounded budget @devin-ai-integration[bot]
• #6401 fix(service): scope Windows scheduler probes to the root task and re-probe deleted registrations @devin-ai-integration[bot]
• #6402 fix(cli): stabilize guarded-stop re-verification and report the failing guard fact @devin-ai-integration[bot]
• #6403 fix(service): bound every Windows manager command the guarded stop depends on @devin-ai-integration[bot]
• #6404 fix(update): release the restart lease before the service refresh (#5760) @devin-ai-integration[bot]
• #6407 fix(update): release the Bun updater lease around service-manager starts (#5760) @devin-ai-integration[bot]
• #6411 test(config): canonicalize the owner-registry ACL test root (macOS) @lidge-jun
• #6412 fix(chatgpt): close the #6361 review follow-ups (over-cap line, docs, structure map) @lidge-jun
• #6413 fix(chatgpt): build the bundled app-server path with posix.join on every host @lidge-jun
• #6414 fix(spend): classify synced state paths with POSIX rules on every host @lidge-jun
• #6418 feat(claude): list opencodex models in the Claude Code CLI first-party /model picker @lidge-jun
• #6419 fix(claude): rebuild a CLI picker snapshot whose rows no longer decode @lidge-jun
• #6427 fix(cli): succeed ensure for validated connected clients @Ingwannu
• #6428 fix(claude): start the intercept pair on demand instead of asking for a restart @lidge-jun
• #6430 feat(gui): top-level Claude page with Account, Code, Desktop and Settings tabs @lidge-jun
• #6440 fix(gui): conditions-based Claude account-pool and OAuth warning copy @lidge-jun
• #6441 fix(service): wait out the npm Bun placeholder instead of executing it @LilMGenius
• #6442 fix(anthropic): bind native Claude metadata and client identity to the serving OAuth account @lidge-jun
• #6443 fix(anthropic): classify 429s and admit by per-model weekly quota in the Claude account pool @lidge-jun
• #6444 feat(codex): switch accounts at 100% by default and make spending ChatGPT credits opt-in @lidge-jun
• #6446 fix(streaming): decode CR, LF and CRLF server-sent events across chunks (carry #6439) @lidge-jun
• #6447 fix(cli): carry oocheol's CLI validation and diagnostics fixes (#6429 #6431 #6432 #6433 #6434 #6435 #6437 #6438) @lidge-jun
• #6448 feat(providers): add OpenGateway (Sionic AI) preset with live discovery and Sionic-first ordering @lidge-jun
• #6467 release: 2.76.0-preview.20261003 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.75.0 with dist-tag latest.

Bug Fixes

• Bound local installer manifests (#6319)
• Preserve TOML values and routing marker ownership (#6308)
• Bound held signature-type payloads (#6315)
• Score family axes sparsely with own-key targets (#6324)
• Bound XML identifying-attribute scans (#6325)
• Require live credential evidence for pool quota policy (#6326)
• Apply Cognition blocklist rewrites to the system prompt (#6328)
• Give each Claude model its real 128K output maximum (#6329)
• Record why a native passthrough failed, without upstream message text (#6330)
• Apply new-model policy before discovery, sync and export publication (#6331)
• Project drifted discovery reads instead of answering catalog_busy (#6333)
• Report a current Grok CLI version on the OAuth path (#6341)
• Report the current stable Grok CLI 1.0.46 (#6343)
• Preserve Devin answers with late reasoning signatures (#6344)
• Bridge quota popover hover gap and link account management (#6345)
• Accept visible bare native ids in pickerOrder (#6346)
• Fail over on proven pre-output account 403 refusals (#6347)

Documentation

• Keep providers-and-adapters.md within its 600-line budget (#6332)
• Link the TokenLab OpenCodex integration guide (#6342)

Chores

• Follow the renamed refusal rotators in source oracles (#6349)

Other Changes

• 2.75.0 (#6353)

Changelog

Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.74.0...v2.75.0

• #6308 fix(codex): preserve TOML values and routing marker ownership @luvs01
• #6315 fix(devin): bound held signature-type payloads @luvs01
• #6319 fix(cursor): bound local installer manifests @luvs01
• #6324 fix(devin): score family axes sparsely with own-key targets @luvs01
• #6325 fix(redaction): bound XML identifying-attribute scans @luvs01
• #6326 fix(codex): require live credential evidence for pool quota policy @luvs01
• #6328 fix(devin): apply Cognition blocklist rewrites to the system prompt @lidge-jun
• #6329 fix(anthropic): give each Claude model its real 128K output maximum @lidge-jun
• #6330 fix(claude): record why a native passthrough failed, without upstream message text @lidge-jun
• #6331 fix(models): apply new-model policy before discovery, sync and export publication @lidge-jun
• #6332 docs(structure): keep providers-and-adapters.md within its 600-line budget @lidge-jun
• #6333 fix(models): project drifted discovery reads instead of answering catalog_busy @lidge-jun
• #6341 fix(xai): report a current Grok CLI version on the OAuth path @lidge-jun
• #6342 docs(providers): link the TokenLab OpenCodex integration guide @lidge-jun
• #6343 fix(xai): report the current stable Grok CLI 1.0.46 @lidge-jun
• #6344 fix(claude): preserve Devin answers with late reasoning signatures @lidge-jun
• #6345 fix(gui): bridge quota popover hover gap and link account management @lidge-jun
• #6346 fix(subagents): accept visible bare native ids in pickerOrder @lidge-jun
• #6347 fix(anthropic): fail over on proven pre-output account 403 refusals @lidge-jun
• #6349 test(anthropic): follow the renamed refusal rotators in source oracles @lidge-jun
• #6353 release: 2.75.0 @lidge-jun