v2.2.3

What's fixed

• Vault setup no longer hangs on a vault that can't connect plugins. setup --claustrum used to sit silent for minutes, re-sending its request, and then say an approval was pending when none had been created. It now stops at once with a clear message. Other failures back off under a real five-minute limit and show progress, and the final message says whether a request was actually created. No published Claustrum vault supports connecting plugins yet; local mode (npx @cortexkit/opencode-anthropic-auth setup) works meanwhile. (#439)
• A stuck pending enrollment can be cleared. After an unsupported vault refuses the request, setup removes the pending state it wrote, so Reset host enrollment works again. When a request may really still be in progress, the menu now says to quit OpenCode and run setup again, instead of showing a bare refused-pending. (#440)
• The migration-required message runs the current setup. It used to name @2.0.0, so following it installed an old version. (#441)
• A missing private-files addon is reported by name. On Windows, when @cortexkit/private-files didn't load, users saw "Native custody refused: invalid-token". They now see "Private file support didn't load on this machine", with what to do. (#442)
• The OAuth sign-in link opens in a dialog that stays open, on rows of its own so it copies whole, in OpenCode 1 and OpenCode 2. It used to be a toast or a link mid-sentence. (#443)
• /claude explains a missing TUI part. In OpenCode 1's terminal, if the plugin isn't in tui.json, the first text menu in a session now says how to add it. OpenCode Desktop is unchanged. (#398)

Under the hood

• Built on @cortexkit/common-auth 0.24.0.
• Test and tooling updates: Pi SDK 1.3.0, OpenCode SDK 1.19.3 and the OpenCode 1.19.3 test host, Biome 2.5.15, lefthook 2.2.2.

To upgrade, quit OpenCode and Pi and run npx @cortexkit/opencode-anthropic-auth setup, or change the version in your OpenCode config.