v1.5.8

Published to npm as @groeponline/opencodex@1.5.8 with dist-tag latest.

What's Changed

Bug Fixes

• fix(droid): write only client-visible models to the Droid overlay by OnlineChef (@ChefGroep) in #378
• fix(ci): remove tracked Serena state blocking PR tests by OnlineChef (@ChefGroep) in #379
• fix(release): run the preflight suite through the canonical test runner by OnlineChef (@ChefGroep) in #380

Chores

• chore: add Serena project configuration by OnlineChef (@ChefGroep) in #365

Commits

• release: v1.5.8 (f407300)
• Merge pull request #380 from GroepOnline/fix/release-preflight-wedge-20261016 (4245446)
• test(release): match the canonical test-runner invocation in the shim (889eb0f)
• fix(release): run the preflight suite through the canonical test runner (4e6e4c0)
• fix(ci): remove tracked Serena state blocking PR tests (#379) (c203100)
• Merge pull request #378 from GroepOnline/fix/droid-client-visible-models-20261015 (6040a0a)
• fix(hygiene): allow only the two deliberate Serena project-config files (d629d82)
• fix(droid): write only client-visible models to the Droid overlay (8ef1d83)
• chore(serena): add project configuration (#365) (5906f47)

Full Changelog: v1.5.7...v1.5.8

v1.5.7

Published to npm as @groeponline/opencodex@1.5.7 with dist-tag latest.

What's Changed

New Features

• perf(codex): avoid no-op account rotation snapshot writes by OnlineChef (@ChefGroep) in #371

Bug Fixes

• fix(update): fail closed on pinned detached CLI checkouts by OnlineChef (@ChefGroep) in #373
• fix(startup): avoid misleading restore advice for external gateways by OnlineChef (@ChefGroep) in #374

Documentation

• docs(omniroute): fleet-rule naar centrale OCX-proxy by MisterWanted in #372

Other Changes

• release: v1.5.7 by OnlineChef (@ChefGroep) in #375

Commits

• release: v1.5.7 (#375) (918ba7c)
• fix(startup): avoid restore advice for external local gateways (#374) (71f3d4a)
• fix(update): fail closed on pinned detached CLI checkouts (#373) (a670216)
• docs(omniroute): fleet-rule naar centrale OCX-proxy (#372) (fb3bba2)
• Merge pull request #371 from GroepOnline/fix/pool-rotation-noop-snapshots-20261014 (26c4b04)
• fix(codex): synchronize persisted sticky state on first pick (a1529c2)
• perf(codex): skip no-op rotation snapshot writes (ab13d51)

Full Changelog: v1.5.6...v1.5.7

v1.5.6

Published to npm as @groeponline/opencodex@1.5.6 with dist-tag latest.

What's Changed

New Features

• feat: publish multi-architecture container images by MisterWanted in #369
• feat(security,codex): credential-source classifier and pool-rotation persistence by MisterWanted in #363

Bug Fixes

• fix(droid): preserve Factory model identities and Codex isolation by OnlineChef (@ChefGroep) in #355
• fix(claude-desktop): clean uninstall, private backups, shared library lock, doctor by MisterWanted in #349
• fix(codex): make built-in managed catalog sync idempotent (#360) by OnlineChef (@ChefGroep) in #366
• fix(cli): respect runtime bind overrides during container startup by MisterWanted in #368
• fix(service): prefer running user unit over abandoned system unit by OnlineChef (@ChefGroep) in #364

Documentation

• docs: reconcile v1.5.5, post-release client fixes and learning by OnlineChef (@ChefGroep) in #362

Chores

• refactor(gui): split Storage page into storage-workspace components by OnlineChef (@ChefGroep) in #353
• refactor(gui): typed route outlet, navigation ownership and i18n guard by OnlineChef (@ChefGroep) in #358
• refactor(gui): feature-scoped Usage components, models and tests by OnlineChef (@ChefGroep) in #359
• test(trace): port local-only trace reader, compact/cache, and websocket coverage by MisterWanted in #367

Commits

• release: v1.5.6 (e2e34ae)
• feat(security,codex): credential-source classifier and pool-rotation persistence (#363) (f699274)
• Publish multi-architecture container images (#369) (ec097d8)
• fix(service): prefer running user unit over abandoned system unit (#364) (73de0c6)
• docs: align v1.5.5 release, client integrations and evidence ledger (#362) (c767123)
• fix(cli): respect runtime bind overrides during container startup (#368) (7384110)
• fix(codex): make built-in managed catalog sync idempotent (#360) (#366) (287dec2)
• test(trace): port local-only trace reader, compact/cache, and websocket coverage (#367) (c53e195)
• refactor(gui): feature-scoped Usage components, models and tests (#359) (91242a7)
• refactor(gui): typed route outlet, navigation ownership and i18n guard (#358) (dc175ca)
• fix(claude-desktop): harden protocol, library sync and doctor (#349) (52bc938)
• refactor(gui): split Storage into reviewable components (#353) (8157822)
• fix(droid): preserve Factory model identities and Codex isolation (#355) (3ddbd9a)

Full Changelog: v1.5.5...v1.5.6

v1.5.5

Published to npm as @groeponline/opencodex@1.5.5 with dist-tag latest.

What's Changed

New Features

• feat(models): reasoning efforts for custom models by OnlineChef (@ChefGroep) in #347
• feat(cli): OCX-first Droid launcher (ocx droid) by OnlineChef (@ChefGroep) in #354

Bug Fixes

• fix(ci): stabilize trusted issue checkouts on jan by OnlineChef (@ChefGroep) in #342
• fix(claude-desktop): harden Desktop integration after v1.5.3 review by MisterWanted in #340
• fix(claude): block stale Desktop aliases from falling back to Codex ChatGPT by OnlineChef (@ChefGroep) in #343
• fix(ci): make issue automation independent of jan runner by OnlineChef (@ChefGroep) in #348
• fix(tests): keep a minimal PATH in the status JSON clamp test by OnlineChef (@ChefGroep) in #350
• fix(codex): make external OCX sync truthful and idempotent by OnlineChef (@ChefGroep) in #357

Documentation

• docs: verified repo review and action plan, fix stale go/ entry in AGENTS.md by MisterWanted in #341
• docs(readme): align with current gateway and remove obsolete media by OnlineChef (@ChefGroep) in #356

Chores

• test(codex): prevent external catalog sync from contacting user OCX by OnlineChef (@ChefGroep) in #339
• refactor(management): isolate guarded Grok API routes by OnlineChef (@ChefGroep) in #344
• refactor(management): isolate Claude Desktop endpoints without altering auth by OnlineChef (@ChefGroep) in #345
• refactor(management): isolate Claude Code settings with auth-mode invariants by OnlineChef (@ChefGroep) in #346

Other Changes

• hardening(oauth, adapters): stronger OAuth login handling and adapter robustness (draft) by MisterWanted in #352

Commits

• release: v1.5.5 (fb7d3a1)
• fix(codex): make external OCX sync truthful and idempotent (#357) (ee9aef5)
• docs(readme): align gateway documentation and retire obsolete assets (#356) (c6bd443)
• feat(cli): launch Droid through OCX with scoped proxy settings (#354) (3e15c18)
• feat(models): persist custom reasoning efforts (#347) (ddbe2ea)
• fix(oauth): harden token handling and preserve account identity (#352) (fc04fed)
• fix: keep a minimal PATH in the status JSON clamp test (#350) (9dc8bfe)
• fix(ci): make issue automation independent of jan runner (#348) (ea6c4ec)
• refactor(management): isolate Claude Code route and auth-mode invariants (#346) (2729726)
• refactor(management): isolate Claude Desktop API route group (#345) (af686e4)
• refactor(management): extract guarded Grok API route group (#344) (d408839)
• fix(claude): block retired Desktop aliases from Codex fallback (#343) (7d483b9)
• fix(claude-desktop): harden integration ownership and rollback (#340) (5903731)
• fix(ci): stabilize issue workflow checkouts on jan (#342) (e21cf77)
• docs(review): verify architecture recommendations and correct proxy security notes (#341) (c00607a)
• docs: add architecture review and LiteLLM patterns (7292e96)
• test(codex): isolate external OCX catalog sync from host credentials (#339) (fcff5f9)

Full Changelog: v1.5.4...v1.5.5

v1.5.4

Published to npm as @groeponline/opencodex@1.5.4 with dist-tag latest.

What's Changed

Bug Fixes

• fix(release): set GH_REPO for the checkout-less rollout job by MisterWanted in #335
• fix(responses): strip safety_identifier in forward mode by MisterWanted in #337

Chores

• chore(release): prepare v1.5.4 with Droid forward compatibility by OnlineChef (@ChefGroep) in #338

Commits

• chore(release): prepare v1.5.4 with Droid forward compatibility (#338) (8960974)
• fix(responses): strip safety_identifier in forward mode (#337) (a91bdca)
• fix(release): set GH_REPO for checkout-less rollout (#335) (58dff38)

Full Changelog: v1.5.3...v1.5.4

v1.5.3

Published to npm as @groeponline/opencodex@1.5.3 with dist-tag latest.

What's Changed

New Features

• feat(auth): support public PKCE and ES256 OIDC by OnlineChef (@ChefGroep) in #295
• feat(providers): add nearai, unorouter, chatanywhere, uncloseai, llm7, navy (clean) by MisterWanted in #326
• feat(gui): PostHog telemetry toggle in Settings by OnlineChef (@ChefGroep) in #324
• feat(gui): consolidate provider readiness and component health by MisterWanted in #328

Bug Fixes

• fix(deps): clear 2026-09-29 advisories and close a CI path-filter blind spot by @freebuff-web[bot] in #284
• fix(errors): sanitize Cloudflare edge HTML in client-facing upstream errors by OnlineChef (@ChefGroep) in #279
• fix(cli): make service usage, status summary, and runtime probing host-independent by @freebuff-web[bot] in #287
• fix(release): make tag creation hook-independent by OnlineChef (@ChefGroep) in #289
• fix(codex): keep native GPT models above external OCX routes by MisterWanted in #293
• fix(codex): separate 5h/weekly quotas and expose reauth by OnlineChef (@ChefGroep) in #291
• fix: Windows proxy-only restart/teardown and MCP SDK audit for v1.5.3 by OnlineChef (@ChefGroep) in #331

Documentation

• docs: retire the leftover dev branch and sync branch policy by @freebuff-web[bot] in #285
• docs: refresh OpenCodex roadmap truth by OnlineChef (@ChefGroep) in #290
• docs(security): fix CODEOWNERS and prerelease governance by MisterWanted in #333

Chores

• chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 by Dependabot (@dependabot)[bot] in #281
• chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 by Dependabot (@dependabot)[bot] in #282
• chore(deps): bump withastro/action from 6.1.2 to 6.1.3 by Dependabot (@dependabot)[bot] in #283
• chore(ci): remove the retired dev lanes and the dormant promotion exception by @freebuff-web[bot] in #286
• ci(release): remove jan dependency for npm OIDC and GHCR publishing by MisterWanted in #332

Other Changes

• security: separate product docs from private runtime state by OnlineChef (@ChefGroep) in #288
• [stack 1/8] feat: make prompt cache behavior measurable by OnlineChef (@ChefGroep) in #304
• [stack 2/8] feat: make native model discovery account-aware and authoritative by OnlineChef (@ChefGroep) in #305
• [stack 3/8] feat(gui): start auth-inspired OpenCodex redesign by OnlineChef (@ChefGroep) in #306
• Expand prompt-cache regression tests and document analyzer helpers by CodeRabbit (@coderabbitai)[bot] in #312
• [stack 4/8] feat(trace): opt-in trace store linked to usage.jsonl by OnlineChef (@ChefGroep) in #307
• Make clients optional and restore authenticated Desktop sync by MisterWanted in #327
• [stack 6/8] feat(trace): cover compact and response-cache hits by OnlineChef (@ChefGroep) in #309
• [stack 7/8] feat(trace): cover Responses WebSocket turns by OnlineChef (@ChefGroep) in #310
• [stack 8/8] feat(trace): cover live call-create HTTP by OnlineChef (@ChefGroep) in #311
• pr-sweep: convergence lane-g-contracts — 1 unique patch + 4 files by MisterWanted in #322
• release: prepare v1.5.3 and repair pinned npm registry probes by MisterWanted in #329

New Contributors

• CodeRabbit (@coderabbitai)[bot] made their first contribution in #312

Commits

• docs(security): fix CODEOWNERS and prerelease governance (#333) (578fbda)
• ci(release): remove jan dependency for npm OIDC and GHCR publishing (#332) (933e898)
• fix(ci): Windows test/restart flakes and MCP SDK security bump (#331) (85f1434)
• Merge release preparation for v1.5.3 (589dff4)
• release: prepare v1.5.3 with pinned npm registry probes (a644e1b)
• Merge product consolidation for provider and component health (6a451f8)
• fix(gui): key provider health rows by stable issue identity (81b4d77)
• fix(gui): type health uptime locale using the shared contract (777f565)
• fix(gui): simplify health projection and preserve CI diagnostics (fe23c14)
• fix(gui): keep standalone lint rule in JavaScript config (c02797b)
• fix(gui): use existing ESTree types for design lint plugin (3606af9)
• feat(gui): consolidate provider readiness and component health (448d7c4)
• fix(health): enforce OAuth readiness and patch dependency advisories (0d70761)
• fix(deps): patch proxy-addr and source-map-js advisories (e378256)
• fix(health): evaluate credentials by authentication mode (9f278eb)
• fix(health): exclude unusable oauth accounts from credential check (b19fb35)
• chore(server): drop unused existsSync import (7309eaf)
• fix(health): report oauth providers without stored credentials as degraded (5bcdb38)
• feat(trace): cover live call create (#311) (08ed718)
• feat(trace): cover responses websocket turns (#310) (df59491)
• [stack 6/8] feat(trace): cover compact and response-cache hits (#309) (be36cdb)
• Merge pull request #327 from GroepOnline/fix/desktop-sync-capabilities-20261005 (ba6f0e1)
• [stack 4/8] feat(trace): opt-in trace store linked to usage.jsonl (#307) (331213f)
• Merge current main after verified prompt-cache regression landing (872c265)
• Merge pull request #312 from GroepOnline/coderabbit/pull-request-tests/cf83be88 (26a9fd2)
• fix: preserve Desktop settings and configured reasoning boundaries (a73efe5)
• merge: retain landed dashboard styles in prompt-cache branch (f4f3da3)
• merge: include landed OpenCodex dashboard redesign (4b5a038)
• fix: align client contracts and clarify CI failures (ca99fb1)
• [stack 3/8] feat(gui): start auth-inspired OpenCodex redesign (#306) (cfcb11e)
• merge: align prompt-cache regressions with current main (e64fc46)
• merge: retain authoritative native discovery from main (a9a8e39)
• feat: decouple gateway clients and restore Desktop sync (3d37be3)
• [stack 2/8] feat: make native model discovery account-aware and authoritative (#305) (dc7d266)
• feat(gui): PostHog telemetry toggle in Settings (#324) (662200d)
• feat(providers): add nearai, unorouter, chatanywhere, uncloseai, llm7, navy (clean v2) (#326) (1f93693)
• Merge pull request #304 from GroepOnline/stack/20261005-01-prompt-cache (9098e38)
• test: cover prompt cache observability and usage analyzer boundaries (1183278)
• docs: document prompt cache observability and usage analyzer helpers (e9ae3a4)
• Merge PR #296 (fix/prompt-cache-observability-20261003) into stack layer 01-prompt-cache (b90389a)
• fix: harden prompt cache evidence parsing (54e565d)
• refactor: reduce prompt cache analysis complexity (e468b0e)
• refactor: harden prompt cache evidence path (8e13e35)
• feat: add prompt cache observability (85443b6)
• feat(auth): support public PKCE and ES256 OIDC (#295) (30221c5)
• fix(codex): separate 5h/weekly quotas and expose reauth (#291) (1c0e0fb)
• fix(codex): keep native GPT models above external OCX routes (#293) (6edb6ae)
• release: v1.5.2 (c007f59)
• docs: refresh OpenCodex roadmap truth (#290) (2908004)
• fix(release): make tag creation hook-independent (#289) (8ba6470)
• security: separate product docs from private runtime state (#288) (a06e7d8)
• fix(cli): make service usage, status summary, and runtime probing host-independent (#287) (e20bf8a)
• chore(ci): remove the retired dev lanes and the dormant promotion exception (#286) (845d29e)
• docs: retire the leftover dev branch and sync branch policy (#285) (9f58049)
• fix(errors): sanitize Cloudflare edge HTML in client-facing upstream errors (#279) (fcb35f1)
• fix(deps): clear 2026-09-29 advisories and close a CI path-filter blind spot (#284) (5770910)
• chore(deps): bump withastro/action from 6.1.2 to 6.1.3 (#283) (4d90043)
• chore(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1 (#282) (72532cd)
• chore(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 (#281) (99791bf)

Full Changelog: v1.5.1...v1.5.3

v1.5.1

Published to npm as @groeponline/opencodex@1.5.1 with dist-tag latest.

npm provenance: gitHead=f7341facc84e4bb2deca52bf106339510506ebd6.

Runtime cutover is a separately verified operation.

What's Changed

New Features

• feat(adapters): AWS Bedrock adapter (SigV4 on OpenAI-compatible wire) by MisterWanted in #280

Bug Fixes

• fix(codex): verify central OCX route before starting client app servers by OnlineChef (@ChefGroep) in #277

Chores

• build(deps): bump the minor-patch group across 1 directory with 4 updates by Dependabot (@dependabot)[bot] in #264
• build(deps-dev): update lint-staged requirement from ^17.4.1 to ^17.5.1 by Dependabot (@dependabot)[bot] in #245
• chore(deps-dev): update React type definitions to 19.3.0 by Dependabot (@dependabot)[bot] in #250
• chore: land closed GUI dependency floors and workspace margin fixes by OnlineChef (@ChefGroep) in #278

Other Changes

• ci: isolate PR validation from dedicated publication runner by MisterWanted in #273
• ci: run PR labeler on GitHub-hosted runner by OnlineChef (@ChefGroep) in #276
• fix(hooks): keep heavyweight prepush checks remote by MisterWanted in #274
• Retire legacy Azure deploy route fail-closed and sync live release evidence by MisterWanted in #270
• chore(deps): synchronize GUI dependency lockfile by MisterWanted in #275
• feat(gui): restore Signaal frontend overhaul by MisterWanted in #271

Full Changelog: v1.5.0...v1.5.1

v1.5.0

Published to npm as @groeponline/opencodex@1.5.0 with dist-tag latest.

Live cutover was not dispatched.

What's Changed

New Features

• feat(api): add versioned provenance and health contracts (salvage lane-g) by MisterWanted in #210
• feat(state): timestamped home backups + schemaVersion stamp + dry-run reconcile (salvage lane-c) by MisterWanted in #211
• feat(claude): dynamically route generated agents by MisterWanted in #239
• feat(gui): unify the component frontend into one finished system with motion by OnlineChef (@ChefGroep) in #238
• feat(observability): add privacy-safe Sentry reporting by OnlineChef (@ChefGroep) in #256
• feat(auth): bind ChefAuth OIDC login to the browser by OnlineChef (@ChefGroep) in #263

Bug Fixes

• Fix dynamic-combo guards + deploy-gate-safe provenance by OnlineChef (@ChefGroep) in #243
• fix(cloud): bootstrap Bun before Cloud Agent install by OnlineChef (@ChefGroep) in #255

Documentation

• docs: publish the Azure Foundry fleet model catalog by OnlineChef (@ChefGroep) in #267

Chores

• refactor(gui): make Overview component-driven by OnlineChef (@ChefGroep) in #212
• test(provenance): expect stamped schemaVersion after saveConfig by OnlineChef (@ChefGroep) in #216
• refactor(gui): integrate component composition stack and repair regressions by MisterWanted in #237
• ci(release): chain GHCR image and opt-in deploy on the release tag; health gate binds runtime version by MisterWanted in #251
• ci: retarget ubuntu-latest workflows to self-hosted opencodex runner by OnlineChef (@ChefGroep) in #260
• ci: run release and Linux CI on the online jan runner by OnlineChef (@ChefGroep) in #266
• ci: drop macOS from the release gate by OnlineChef (@ChefGroep) in #269

Other Changes

• Complete local/dev path and Authentik OIDC placeholders (place lock 1.4.2) by OnlineChef (@ChefGroep) in #259
• Wire product Authentik OIDC consumer (chefgroep-ocx-oidc) by OnlineChef (@ChefGroep) in #261
• release: 1.5.0 browser-bound Authentik OIDC by OnlineChef (@ChefGroep) in #268

Full Changelog: v1.4.2...v1.5.0

v1.4.2

Published to npm as @groeponline/opencodex@1.4.2 with dist-tag latest.

What's Changed

Bug Fixes

• fix(ci): align artifact gates and constrain fleet token access by MisterWanted in #207
• fix(storage): keep scans responsive and release v1.4.2 by MisterWanted in #208

Commits

• test(ci): pin exact-head and rollback mode bindings (529bb6a)
• Merge remote-tracking branch 'origin/main' into fix/storage-release-142-20260908 (d2c4287)
• fix(container): align live Bun with verified package runtime (500782b)
• Merge pull request #207 from GroepOnline/fix/fleet-pipeline-hardening-20260908 (1ee5462)
• fix(storage): abort every active scan and verify read-only parity (dd16a46)
• fix(storage): harden scanner worker lifecycle (01bddeb)
• fix(storage): run management scans off the proxy loop (93b9111)
• docs: describe responsive storage scans and shipped catalog (b767471)
• release: prepare v1.4.2 storage and fleet follow-up (d116d85)
• fix(ci): align artifact gates and constrain fleet token access (b60bef1)

Full Changelog: v1.4.1...v1.4.2

v1.4.1

Published to npm as @groeponline/opencodex@1.4.1 with dist-tag latest.

What's Changed

Bug Fixes

• fix: complete platform release gates and 1.4.1 repairs by MisterWanted in #206

Commits

• Merge pull request #206 from GroepOnline/fix/release-review-followup-20260908 (5724a6a)
• test: cancel delayed SSE fixture timers (ab55b78)
• merge: preserve concurrent regression coverage and portable fixtures (0ed16a5)
• test: cache native release helper fixtures (df28f60)
• test: use native Windows release helper fixtures (38d5b66)
• fix(ci): run every test batch while preserving failures (1470870)
• Add regression tests for release and checkout safeguards (6022ddc)
• test(client): share immutable launcher artifact across behavior cases (b3db530)
• fix(client): canonicalize trusted aliases before containment (2ee6076)
• fix: preserve live checkout guard executable bit (1dcf7ac)
• 📝 Add docstrings to fix/release-review-followup-20260908 (1f18cbd)
• test: declare runtime fixture imports before path constants (4b45745)
• test: allow client artifact builds on Windows (9b12020)
• fix: accept macOS system var alias in client shim (16e7a9e)
• test: use portable shell shebangs in bounded git fixtures (8a39346)
• fix(ci): distinguish jq bindings from shell expansion (b1ce5b9)
• fix(ci): verify the shipped Bun runtime (7dcaf85)
• fix: gate patch releases on complete platform verification (3b09e3b)
• fix: support macOS live checkout checks (a67ce99)
• fix(client): make isolated artifact builds cross-platform (1e75cbb)
• fix(ci): use supported Bun cache input (d133d0e)
• fix: preserve CLI table and review policy gates (261063a)

Full Changelog: v1.4.0...v1.4.1