v2.6.8
Published to npm as @bitkyc08/opencodex@2.6.8 with dist-tag latest.
Commit log
Changes since v2.6.7:
- feat(redact): add redactUserPath to mask home-path usernames (61ddc9b)
- feat(codex-plugins): read-only bundled-marketplace staleness diagnostic (a1398a0)
- feat(status): surface codexPlugins diagnostic in ocx status (f538306)
- test(codex-plugins): cover stale/healthy/non-Windows + CRLF and inline comments (d9ba82e)
- docs(issue-43): plan + phase1 completion for bundled-plugin diagnostic (4baedc3)
- fix(codex-plugins): close secret-leak and malformed-entry gaps (84f6db7)
- docs(issue-43): record verification-gap fixes (secret-leak, malformed entry) (db5df22)
- feat(codex-plugins): locate live bundled marketplace and flag path mismatch (0254b66)
- docs(issue-43): record live locator and path-mismatch diagnostics (de37c3e)
- feat(provider): add google-vertex (Vertex AI) provider port (ae13346)
- docs(140): pin CLIProxyAPI + secondary vertex/antigravity reference repos (34f3091)
- docs(140): copy-paste-ready vertex(11/12) + antigravity(21/22) hardening specs (13d5185)
- feat(vertex): HTTP hardening — retry/timeout + classified, redacted errors (6aed3db)
- feat(vertex): fail-closed truncation + reported usage + hardened ADC token exchange (fdef577)
- feat(antigravity): OAuth + project discovery + CCA envelope + response-unwrap + HTTP hardening (b13c971)
- feat(antigravity): thoughtSignature reasoning-replay + Claude inline signature sanitization (44dcd56)
- docs(140): mark vertex+antigravity hardening specs implemented (42dd45f)
- fix(antigravity): persist projectId, onboard transient-retry, wire clear-on-invalid replay + redaction polish (42a9e9d)
- fix(google): non-stream CCA unwrap, usage-only chunk, quota no-retry, ADC source-change, history thoughtSignature (7457cf7)
- fix(google): never forward synthetic fc_ id as thoughtSignature; invalidate ADC cache on in-place file change (cf7e398)
- fix(google): router backfills googleMode; replay keyed by functionCall identity; fail login w/o project; tighten signature denylist (0a51738)
- fix(antigravity): recursive canonical key for replay args; observe signatures on non-stream responses (263dac9)
- fix(google): per-source ADC in-flight dedup; non-stream fail-closed truncation (2d07335)
- feat(models): global context cap value + set-all backend (095629e)
- feat(models): cap value dropdown + single set-all toggle UI (75ec1b8)
- test(models): cover global cap value and set-all toggles (3d7cf63)
- feat(antigravity): bundle agy model list + google-family brevity steering (2a38d8a)
- feat(usage): 7d bar chart, locale token units, in-box table scroll (11a5186)
- fix(history): non-destructive native restore to prevent session rollback (a846251)
- test(google): replace hardcoded PII with allowed placeholders for privacy scan (064b607)
- fix(kiro): strip validation-only schema keywords rejected by runtimeservice (#50) (c49fb9e)