v2.6.2
Published to npm as @bitkyc08/opencodex@2.6.2 with dist-tag latest.
Commit log
Changes since v2.6.1:
- feat(lib): add AWS eventstream decoder (kiro/bedrock foundation) (af0f452)
- docs(kiro): phase 2 oauth plan + Backend audit resolution (B1-B4) (c98b65d)
- feat(oauth): add kiro import-first OAuth (SQLite + desktop refresh) (f4bd853)
- docs(kiro): phase 3 adapter plan + Backend audit resolution (Q1-Q4, C1/C2) (6d99795)
- feat(adapter): add kiro adapter (CodeWhisperer over AWS eventstream) (f76b320)
- test(kiro): cover resolveKiroProfileArn + resolveKiroRegion (request-critical resolvers) (eb31f82)
- docs(kiro): phase 5 live smoke PASSED (self-served E2E vs real CodeWhisperer) (a2109bd)
- fix(kiro): ignore Codex-forced reasoning effort (CW has no reasoning field) (b24bdd7)
- fix(kiro): add parseResponse so web_search tool works (kiro-only 500) (dd1d924)
- docs(kiro): devlog 60 — web_search parseResponse fix (kiro-only live failure RCA) (c93e8a5)
- feat(kiro): add heuristic token-estimate sidecar (src/lib/token-estimate.ts) (f1ff2ca)
- feat(kiro): emit estimated usage so Codex usage + auto-compact work (0b26c89)
- fix(shutdown): forward signals to Bun child so Ctrl-C never orphans the proxy (67fe12c)
- test(shutdown): assert Codex config is restored on Ctrl-C (37d5618)
- fix(shutdown): handle SIGHUP gracefully (was forwarded but default-killed) (2872420)
- docs(kiro): phase 6 — full Codex CLI E2E proven (codex exec -> ocx -> kiro) (7b37d21)
- feat(kiro): add per-model context windows from official Kiro catalog (bb3826e)
- fix(codex-inject): restore stripRootContextWindowOverrides (gpt-5.5 1M regression) (391bc5a)
- fix(kiro): report current-turn usage delta (23bd889)
- fix(codex-catalog): pin native Codex context metadata (c363032)
- fix(codex-catalog): allowlist native slugs so legacy models never advertise (b5c4848)
- diag(crash-guard): capture handler-stack + error shape for native-frame rejections (63d0b5f)
- diag(crash-guard): expose JSC throw site via hidden source fields + Bun.inspect (1ec3e0b)
- diag(crash-guard): correlate native-frame rejections with sidecar activity (0a94bb6)
- fix(kiro): keep resumed payloads current-turn only (081c16b)
- diag(crash-guard): add request-path activity breadcrumb (sidecar ruled out) (db7e17f)
- diag(crash-guard): instrument global fetch to capture native-reject origins (abeeab5)
- fix(eventstream): cancel reader on early termination to stop orphaned-read crash (3000397)
- fix(web-search): cancel response body on abort to kill orphaned-read rejection (5f656a9)
- feat(kiro): send images natively via userInputMessage.images (gateway parity) (494be0d)
- fix(crash-guard): classify Bun abort-teardown rejection as benign noise (0fe43c0)
- fix(kiro): treat upstream exception frames as terminal (a913d16)
- feat(kiro): retry transient HTTP failures before stream parse (e3ce888)
- fix(oauth): singleflight refresh and reload Kiro CLI tokens (f5203c8)
- fix(kiro): preserve tool-use context for resumed tool results (f04bce6)
- docs(security): map common hardening phases (4df99db)
- fix(eventstream): bound frame and header parsing (45a40cf)
- docs(security): detail redaction foundation slice (bbba08c)
- fix(kiro): sanitize tool schemas before CodeWhisperer payload (18cf95c)
- fix(gui): format dashboard uptime for readability (5844549)
- feat(security): add shared secret redactor (46f2e21)
- docs(security): detail diagnostic redaction slice (8a2df65)
- fix(security): redact diagnostic sinks (3d91af0)
- docs(security): detail local boundary test slice (6348e30)
- fix(kiro): route leading thinking blocks as reasoning (ea873f1)
- fix(security): preserve origin rejection errors (4210d49)
- docs(devlog): review open PRs and issues (#17,#41-45) (c6679bd)
- docs(security): detail usage privacy slice (5d799df)
- fix(security): allowlist usage log records (9d29a31)
- fix(security): record OAuth credential source safely (68b079f)
- fix(security): validate provider URLs and headers (96a60a2)
- fix(security): normalize OAuth credential store (4566b11)
- docs(kiro): plan auth input hardening (6fe529e)
- fix(oauth): broaden single-account Kiro credential inputs (4c97e0d)
- docs(kiro): record auth hardening evidence (0b3cd86)
- docs(kiro): plan tool fallback hardening (c01db41)
- docs(kiro): account for tool fallback file size (85941e9)
- fix(kiro): sanitize region and upstream error details (931847b)
- fix(kiro): include safe error formatter (e95338e)
- docs(kiro): record auth hardening reaudit (41c4327)
- fix(kiro): harden tool fallback payloads (a63aa76)
- docs(security): exclude Kiro from common hardening evidence (60e5af5)
- docs(kiro): record tool fallback evidence (bbdefbb)
- docs(kiro): plan model catalog resolver (833419d)
- fix(openai-chat): strip bracketed [1m] suffix from wire model id (0b8d95c)
- docs(openai-chat): note GLM-5.2 1M [1m] suffix handling for issue #41 (377c4ad)
- docs(kiro): record model resolver evidence (b349601)
- docs(kiro): plan actionable error mapping (51ff241)
- docs(storage): promote issue #42 to 500_ epic with phased plan (c9cac17)
- fix(kiro): map upstream failures to actionable errors (a038784)
- docs(kiro): record actionable error evidence (452625b)
- docs(kiro): plan truncation detection (744df4b)
- docs(storage): expand #42 epic to jawdev granularity (11751d9)
- docs(kiro): revise truncation plan for bridge heartbeat (4891bab)
- docs(kiro): specify fail-closed truncation errors (b926254)
- fix(kiro): surface truncated tool-call streams (c3b10c9)
- docs(kiro): record truncation recovery evidence (c11fa84)
- docs(kiro): plan estimated usage diagnostics (5e3ebd2)
- docs(issue-45): trace reasoning render through codex-rs consumer (25c047a)
- fix(kiro): mark heuristic usage as estimated (e50ca23)
- docs(kiro): record estimated usage evidence (4006f37)
- docs(kiro): plan final parity audit (0a232e6)
- fix(logs): finalize native passthrough SSE usage (2481c80)
- docs(merge): record PR #46 cherry-pick into feat/kiro-on-dev (af6304e)
- fix(kiro): log full-context estimated usage (45272b2)
- docs(kiro): record final parity audit (dc848ae)
- fix(catalog): harden model-catalog sync against stale picker entries (13c03e6)
- docs(catalog): record catalog-sync hardening plan (gap A+B) (1041159)
- fix(kiro): show estimated log tokens for account labels (ac833be)
- fix(logs): show numeric estimated Kiro tokens (baf876c)
- fix(kiro): use context usage percentage for totals (7374c3a)
- fix(ci): allow explicit privacy test fixtures (2164c42)