v2.93.0-preview.20261027

Release notes

• GPT-6.1 Terra support (Codex native, OpenAI API, OpenRouter, Copilot and other providers; not Cursor) (#7779).
• Required tool calls are now enforced in two places, with distinct error codes: a buffered native combo child that skips a required tool_choice fails with required_tool_contract_unsatisfied (HTTP 502, eligible for the existing fallback; HTTP 400 with x-should-retry: false after a hosted effect) (#7741), and a translated Chat route fails with required_tool_not_called (#7463). Streaming native combo children are not covered yet (#7456 stays open).
• Anthropic: routed compaction now preserves cache prefixes; 413 recovery behavior is unchanged (#7749).

Known issue

• On a Remote Link Child, ocx stop leaves Codex pointed at the stopped Child, so Codex requests fail until ocx start (or ocx sync --restart-codex) reapplies routing. This comes from #7564, which keeps a connected client's integrations across stop; restoring native routing on an explicit Child stop is tracked in #7736.

Published to npm as @bitkyc08/opencodex@2.93.0-preview.20261027 with dist-tag preview.

New Features

• Route hard-locked main-account traffic to a configured fallback model (carry #7123) (#7146)
• Configure usage model table row limits (carry #6436) (#7156)
• Show account membership tier badge (carry #5932) (#7157)
• Opt in to remaining included quota (carry #6629) (#7158)
• Require explicit consent for metered targets (carry #6839) (#7159)
• Support per-model prompt-length overrides (carry #6738) (#7160)
• Enroll text-only members in vision sidecar (carry #4932) (#7162)
• Reset-first strategy for generic OAuth pools (carry #5408) (#7167)
• Add DeepSeek Harness authenticated account provider (carry #6293) (#7164)
• Stable replay and capture-only client tools (carry #6566) (#7165)
• Refuse launches when the Claude subscription is exhausted (carry #6566) (#7166)
• Code-display login mode for hosts with no reachable localhost (carry #6239) (#7170)
• Pin generic pool conversations to request-local accounts (#7150)
• Preserve signed-in quota across duplicate pool entries (#7144)
• Accept credential JSON with secure marker lifecycle (carry #6843) (#7139)
• Carry bounded retention and adaptive consultation (#7134, #7124) (#7219)
• Preserve diagnostic per-model quota evidence (carry #6718) (#7163)
• Carry opt-in API key round-robin and per-key pacing (#6937) (#7135)
• Carry Combo visibility, workspace panes, Windows picker and Gentle Shell (#7223)
• Carry compaction capabilities and reasoning retention (#7217)
• Carry usage comparison, log history, restart and Codex controls (#7222)
• Separate custom-tool grammar evidence from representation (#7282)
• Let a combo set its catalog row description (#7229) (#7284)
• Opt-in compression of outbound ChatGPT Responses request bodies (#7285)
• Auto-pause repeated permanent account refusals (#7153)
• Explicit single-model completion test (#7287)
• Opt-in OS desktop notification for low-quota protection (#7286)
• Opt-in advisory quota signals for JEV decisions (P1) (#6814)
• Add explicit enrolled Codex SSH peers (#6891)
• Default prompt-cache TTL to 1h on first-party Anthropic (#7341)
• Passive GET /api/quota-pool (ocx.quota-pool/1 producer) (#7476)
• Advertise peer features from one registry (#7477)
• Parity on apply — restart the Child runtime, record and report the apply (OCX-6) (#7484)
• Name the serving Home in x-opencodex-served-by (OCX-2) (#7490)
• Mark provider list rows active when they serve (OCX-12) (#7492)
• Report each Child version and a compatibility verdict in ocx link status (#7494)
• Passive ocx service status --json and install-method verdict in ocx status --json (#7483)
• OCX-11 fallback off per scope, with home_unreachable on Children (#7482)
• Support x-hermes-conversation-id for Hermes session correlation (carry #7459) (#7542)
• Resolve each API key's project with project "auto" (#7296)
• Opt-in session pin keeps a JEV combo session on its decided target (#7567)
• Add subscription and credit support (#7604)
• Avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) (#7541)
• Read Abliteration credit balance from /v1/credits (#7581)
• Price and seed Kimi K3.1 Pro on Kimi Code and Moonshot (#7657)
• Expose JEV session pin in Combo editor (#7664)
• Use Bun native CRC32 for Kiro frame validation (#7631)
• Avoid input Buffer copies in gzip requests (#7671)
• Avoid repeated growing-buffer prefix extraction in SSE decoding (#7676)
• Seed Kimi K3.1 Pro on the Moonshot API preset (#7695)
• Bound timeline aggregation scratch memory and avoid argument overflow (#7679)
• Validate audit UTF-8 without round-trip Buffer copies (#7672)
• Avoid quadratic copying of fragmented frames (#7673)
• Coalesce queued thought-signature snapshot writes (#7675)
• Skip unchanged partial-tail reads and SQLite metadata rewrites (#7680)
• Ocx sync --expect-link / --expect-hub-key refuses a different Home (#7694) (#7707)
• Use native SHA-256 for tool identity digests (#7670)
• Bound upload waiters and release completed read results (#7661)
• Connect named Hermes profiles (#7674) (#7700)
• Bound CONNECT header buffering and avoid repeated prefix copies (#7663)
• Add opt-in cooldown recovery with configurable interval (#7723)
• Expose opt-in Flex tier for eligible routed models (#7534)
• Connect Qoder CN and WorkBuddy desktop editions (#7665)
• Add AI Stupid Level API-key preset (#7623)
• Add GPT-6.1 Terra alongside GPT-5.6 Terra (non-Cursor providers, catalog, pricing, docs) (#7779)

Bug Fixes

• Fix preview platform packaging (#5527)
• Carry verified checksum and signature repair (#5545)
• Carry Windows checksum record support (#5551)
• Carry the draft-then-publish release fix to preview (#5557)
• Carry the macOS keyring signing fix to preview (#6272)
• Sync preview to main 2.86.0 (#7127)
• Show last Windows desktop build assessment (#7113)
• Preserve context inference through provider edits (#7077)
• Enforce explicit-empty tool catalogs across delivery paths (#7058)
• Select Advisor model from the routed catalog (#7114)
• Keep usage-ledger file ids exact so Windows NTFS ids stop colliding (#7089)
• Serialize shim publication with production process creation (ETXTBSY) (#7106)
• Verify Desktop backup and optional metadata reads (carry #7084) (#7129)
• Pair native beta schemas with effective headers (#7132)
• Preserve operator model policy across reconciliation (#7141)
• Refuse uncertain ownership before publishing sibling runtime (#7142)
• Print fixed CLI login errors instead of provider bodies (#7171)
• Protect the desktop authority key in-process on Windows x64 (#7181)
• Carry canonical subagent limits across modes (#7125) (#7128)
• Preserve uncapped native maximum context windows (#7130)
• Strip Google item metadata from native OpenAI requests (#7131)
• Launch the registered Desktop bundle and executable (#7137)
• Frame retained compaction requests as history (#7138)
• Restore DeepSeek reasoning on native tool continuations (#7118) (#7140)
• Surface Opus 5.5 progress as signed commentary (#7143)
• Isolate service state from the shared startup home (#7161)
• Eliminate intercept integration port reservation race (#7174)
• Bound refresh consumers and retain stale owners (carry #7117) (#7136)
• Recover Muse Keychain login and preserve actionable errors (#7145)
• Fold Advisor into the Subagents row and collapse its notices (#7196)
• Bind Linux health sentinel recovery to pidfd (#7133)
• Keep the desktop app open on codex-restart when its picker is current (#7149)
• Carry Zed, Qoder, and OpenCode Gemini compatibility (#7216)
• Carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) (#7220)
• Carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) (#7215)
• Carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) (#7218)
• Carry OAuth combo cooldown, account rotation and health evidence fixes (#7224)
• Carry Claude translated-lane and usage-metering fixes (VB) (#7225)
• Restore keep-native-v1 qualifier placement (#7237)
• Charge key cooldown to the credential sent (#7240)
• Preserve legacy OpenCode Go configs after native wire pins (#7238)
• Preserve import cycles through macOS path aliases (#7241)
• Preserve retained reasoning across native combo failover (#7239)
• Activate Windows picker after dormant startup (#7243)
• Use standard no-op waker in spawn test (#7246)
• Preserve Codex opt-out, concurrent syncs, and usage ownership (#7244)
• Preserve carry reference numbers across the text window cap (#7252)
• Carry account recovery, server-tool buffer, and usage corrections (#7236)
• Skip unused native Codex ownership probes (#7184)
• Replay Anthropic server-tool exchanges on the translated lane (carry #7205) (#7251)
• Stop leaked Gemini planning from spreading through replayed history (#7254)
• Preserve OpenAI API display name overrides (#7259)
• Price refused-then-served rows in routing analytics (#7253)
• Preserve startup with IPv6 loopback disabled (#7262)
• Return gateway request-history IDs (#7261)
• Reclaim least recently used idle WebSocket at capacity (#7095)
• Route Claude through Anthropic Messages (#7235)
• Recover rejected thinking without local prefix validation (#7147)
• Show the Gemini 4 Argon quota group separately (#7283)
• Honor project and location for API-key inference (#7266)
• Preserve matched and orphan Vertex Argon tool images (#7280)
• Never bake Claude first-party's own intercept proxy (#7327)
• Map provider input overflow to context_length_exceeded (#7352)
• Handle replayed hosted web-search history (#7250, #7269) (#7353)
• Keep tool loops on one target and make failover history safe (#7298) (#7354)
• Absorb community failover fixes (#7317, #7329, #7339, #7320) (#7355)
• Scope an inherited transpiler cache to the Bun version it starts (#7362)
• Scope server children's transpiler cache and keep scoping idempotent (#7364)
• Recover cold opaque state and harden replay, archive and lifecycle paths (#7388)
• Carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) (#7389)
• Renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main (#7393)
• Carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 (#7394)
• Harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) (#7397)
• Gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles (#7396)
• Carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 (#7395)
• Pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition (#7408)
• Stop pool accounts from spending the native main account (#7398) (#7414)
• Keep search replay ID allocation linear (#7419)
• Keep transpiler cache scopes within configured paths (#7422)
• Keep model text out of inferred cooldowns (#7424)
• Read the whoami identity when kiro-cli appends its Profile block (#7455)
• Preserve upgrade-only reasoning inclusion (#7464)
• Clear high-severity audit findings blocking the 2.90.0 release (#7480)
• Arm the real-home write guard when bun test skips the preload (#7467)
• Refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct (#7470)
• Handle Codex 0.164 request controls (#7473)
• Carry Anthropic thinking signatures through reasoning_details (#7469)
• Adopt a concurrent winner's identity instead of refusing it (#7489)
• Scope queue_full to the waiting identity; address #7474 review (#7493)
• Refuse Windows Children with a Hub-mode pointer and explain existing ones (#7496)
• Persist Reserve helper refusal request IDs (#7511)
• Normalize analytics usage rows (#7510)
• Preserve replay-refusal provenance through response finalization (#7458)
• Honor upstream no-retry verdict (carry #7505) (#7538)
• Preserve unrelated authenticated loopback proxies (#7509)
• Reject macOS ACL-exposed state (#7520)
• Finish with length when a Responses upstream reports incomplete reason "length" (#7539)
• Use attested capabilities for local usage comparisons (#7514)
• Distrust picker freshness without binding evidence (#7522)
• Publish Antigravity family quota as decision evidence (carry #7442) (#7549)
• Read the effective SID in-process so service install does not wait on a cold PowerShell (#7548)
• Bind CLI update plans to installation content and pre-dotenv transport (#7546)
• Route models only to accounts whose roster serves them (#7556)
• Refresh dated Token Plan catalogue and metadata (#7555)
• Keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics (#7560)
• Infer message phase for passthrough providers (#7554)
• Backfill Token Plan output limits on roster refresh (#7576)
• Fold developer role to system for moonshot (#7584)
• Isolate retained reasoning state by admitted caller (carry #7523) (#7566)
• Stop guardian refresh of grants persisted as revoked (#7597)
• Keep the stored strategy when combo set replaces targets (#7601)
• Send native ultra effort as max on the wire (#7590) (#7600)
• Keep npm Node cache within inspection lifetime (#7585)
• Revoke usage trials after identity verification fails (#7582)
• Refuse uncertain prefix-local Node observations (#7577)
• Check the first hard-lock combo destination (#7588)
• Always send a title on url_citation and repair old history on replay (#7573)
• Ship Bun 1.4.4 runtime to drop the compromised eMudhra root (#7606)
• Launch native Windows CLIs and refuse empty-arg-dropping dispatchers (#7527)
• Pin zod 4.6.6 and body-parser 2.4.0 for audit:high (#7642)
• Bump gui happy-dom to 21.0.4 (GHSA-834v-8h66-3h79) (#7644)
• Provider-only catalog, replay-envelope refusal and isolated status (#7545)
• List pool accounts without a native home and expose safe slot identity metadata (#7551)
• Rotate on insufficient-credit refusals (#7558)
• Calibrate Business Premium display capacity (#7557)
• Check the first hard-lock profile destination (#7589)
• Bind ownership lease release to its acquisition (#7543)
• Cancel Remote Link sheet focus work (#7611) (#7650)
• Patch Hono and ip-address advisories and align qs (#7647)
• Resolve ACL principal natively without cold PowerShell (#7656)
• Preserve sync edits with canonical sandbox checks (#7659)
• Keep a connected client's integrations across ocx stop; status names ocx sync --restart-codex (#7563) (#7564)
• Keep a role's model when auto-assign finds an equal-priced tie (#7617)
• Validate subagent limit boundaries before writes (#7276)
• Isolate Anthropic reasoning state from native passthrough (#7504)
• Complete Turkish dashboard copy and documentation (#7565)
• Wake the PR gate when attribution-approved is applied (#7698)
• Fail over accounts when overage quota is exhausted (#7687)
• Detect LazyCodex installed from the marketplace (#7692)
• Answer MODEL_NOT_IN_PLAN once as a model-scoped 400 (#7696)
• Bind exception approval labels to the evaluated head (#7699)
• Release detached sweep hooks and preserve replacement timers (#7678)
• Observe Pi prompt failures before acknowledgement (#7669)
• Bound snapshot persistence under sustained updates (#7666)
• Inspect hard-lock fallback without selecting candidates (#7683)
• Honor backpressure in pinned HTTP responses (#7667)
• Select Docker smoke for actual image build inputs (#7689)
• Preserve gateway citations during native compact (#7682)
• Deliver partial response payloads promptly and release terminal sockets (#7662)
• Account for Antigravity direct Chat IR (#7724)
• Classify legacy Desktop aliases before native fallback (#7721)
• Use Bun timeout flag in temporary-file diagnostics (#7715)
• Declare Hermes profile discovery route (#7729)
• Preserve disabled sidecars when targets retire (#7420)
• Preserve destinations when refreshing saved model rosters (#7735)
• Use Bun glob matching for native grep (#7630)
• Notice a Codex WebSocket that dies after the response started (#7725)
• Clamp native efforts to selected model ladder (#7731)
• Preserve literal SSH include names on Bun 1.4.4 (#7629)
• Enforce the Bun patch floor in automatic PATH fallback (#7734)
• Bound closing handshakes for non-reused upstream WebSockets (carry #7681) (#7743)
• Bind usage trials to fresh package proof (#7709)
• Fail unmet required client tool completions (#7463)
• Verify installer signature before administrative extraction (#7421)
• Preserve Windows probe support across Node and Bun (#7722)
• Bind and serialize queue lock ownership (#7508)
• Retain Kiro prompt estimates in hosted tool paths (carry #7620) (#7744)
• Support Vercel JEV decisions and thinking model reasoning replay (#7574)
• Join the Windows npm tree before stage cleanup (#7751)
• Restore official V4 Pro availability (#7591)
• Bound WebSocket close without releasing live ownership (#7635)
• Send local stop requests directly to the loopback runtime (#7754)
• Preserve cache prefixes during routed compaction (#7307) (#7749)
• Move to GA MiniMax-M3.1-Flash and rename the retired preview id (#7746)
• Reject buffered required-tool false successes (#7741)
• Keep Codex routing for the restarted proxy during an update (#7423) (#7747)
• Renew credit evidence for namespace-bound Direct accounts (#7621)
• Separate support, thinking toggles and effort controls (#7531)
• Fence uncertain catalog entry identity (#7610)
• Keep sideband admission until the upstream closes after client cancellation (#7767)
• Preserve credit recovery retry hints and scoped cooldowns (#7622)
• Drain parent ACL flights before intercept secret writes (#7777)
• Skip optional hardening for non-directory homes (#7688)

Documentation

• Clarify the app-server shim transport limit (#7227)
• Record the 2.92.0 sweep wave plan (#7535)
• Explain how spawn_agent fills its five model slots (#7550)
• Show the SignPath attribution and code signing policy on the download section (#7571)
• End release notes with the SignPath code signing attribution (#7570)
• An existing JEV combo keeps its stored decision method (#7602)
• Qualify Qoder native executable precedence across PATH folders (#7615)
• Translate Mistral and OpenGateway provider behavior across locales (#7646)
• Align Korean installation guide with Bun 1.4.4 pin (#7616)
• Correct ADR-7517 contract owner (#7686)

Chores

• Enable Linux package diagnostics on preview (#5523)
• Promote cleaned 2.69.0-preview.20260928 to preview (#6141)
• Allow child generation diagnostics before outer timeout (#7085)
• Use shared Windows attest spawn budgets (#7151)
• End the linger upload pump when the socket closes (#7180)
• Guard Argon thought separation across client protocols (#7188)
• Isolate sibling ensure from the running Desktop app (#7182)
• Derive audio non-readiness case budgets from their deadline (#7183)
• Share opaque transport with desktop relay (#7120)
• Break config-facade import cycles (189 -> 59 static cyclic modules) (#6454)
• Break the ChatGPT OAuth and auth-api import cycles (#6594)
• Fix Windows default-home isolation fixtures (#7242)
• Sign Windows binaries and MSI via SignPath (#7207) (#7356)
• Remove opencode-free and migrate saved configs (#7351)
• Register combo-tool-loop-pin in the core module inventory (#7357)
• Keep ACL subprocess work out of cache and registration assertions (#7358)
• Let the final-EPERM quarantine see through Windows 8.3 TEMP aliases (#7359)
• Await the fallback lease release on both passthrough relays (#7360)
• Compare the default containment result through the native resolver (#7361)
• Hold early client bytes in the socks5 egress fixture (#7363)
• Assert the scoped env and versioned bundled runtime in source oracles (#7365)
• Bound shell integration scenarios independently (#7449)
• Cover Claude CLI JSON schema contract (#7387)
• Make update recovery, messages cancellation, and CLI parity harnesses deterministic (#7468)
• Let the test-scoped Windows ACL belt through the host-free helper (#7487)
• Place PATH-Bun fixtures under a trusted ancestry (#7466)
• Flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) (#7488)
• Expect the platform's exit signal for a replacement that ignores SIGTERM (#7502)
• Make ten Windows-sensitive flaky tests deterministic (#7501)
• Flag process-signal code as Windows-sensitive (#7503)
• Deprecate mimo-free (#7445)
• Move the Abliteration quota test to a shard to restore the layout.json size cap on dev (#7607)
• Settle Windows ACL work and owner locks before fixture removal (#7528)
• Make codex-runtime, client-connect and loopback-listener tests deterministic (#7552)
• Keep cold first-exec and PowerShell start out of two timed cases (#7598)
• Run docker/keyring smoke and React Doctor on PRs only when their inputs change (#7658)
• Isolate agent-task-recovery fixtures (#7613) (#7649)
• Align Bun runner with the 1.4.4 security baseline (#7627)
• Isolate port reclaim fixture identity and clock (#7706)
• Copy launcher module dependencies into activation fixtures (#7733)
• Let the forged sibling-env start bind its own port (#7740)
• Run import-graph tests on pull requests and verify merged batches on dev (#7782)

Other Changes

• Bring preview onto the verified 2.56.0 product tree (#4698)
• Bring preview onto the verified 2.57.0 product tree (#4831)
• Promote main to preview after 2.58.0 (#4917)
• Bring preview onto the verified 2.60.0 product tree (#5250)
• Promote native macOS tray candidate to preview 2.61.0 (#5511)
• Carry native sidecar packaging repair (#5531)
• Carry lipo verification fix (#5536)
• Prepare 2.62.0-preview.20260923 version metadata (#5565)
• Promote the verified tree to preview as 2.63.0-preview.20260923 (#5602)
• Promote verified 2.64.0 preview tree (#5670)
• Promote the verified 2.65.0 preview tree to preview (#5783)
• Promote 2.66.0 to preview as 2.66.0-preview.20260925 (#5854)
• Promote 2.67.0-preview.20260926 to preview (#5899)
• Promote 2.68.0-preview.20260927 to preview (#6054)
• Promote 2.69.0-preview.20260928 to preview (#6137)
• 2.70.0-preview.20260929 (#6211)
• 2.71.0-preview.20260929 (#6227)
• 2.72.0-preview.20260930 (#6245)
• Promote 2.73.0-preview.20260930 to preview (#6265)
• Promote 2.74.0-preview.20260930 to preview (#6318)
• 2.75.0-preview.20261001 (#6352)
• 2.76.0-preview.20261003 (#6467)
• 2.78.0-preview.20261005 (#6630)
• Sync preview to main 2.85.0 (#7096)
• Open dev at 2.87.0 before releasing 2.86.0 (#7109)
• Open dev at 2.88.0 before releasing 2.87.0 (#7248)
• Open dev at 2.89.0 before releasing 2.88.0 (#7263)
• Open dev at 2.90.0 before releasing 2.89.0 (#7371)
• Open dev at 2.91.0 before releasing 2.90.0 (#7475)
• Open dev at 2.92.0 before releasing 2.91.0 (#7532)
• Open dev at 2.93.0 before releasing 2.92.0 (#7633)
• Promote frozen tip 2606f6f to preview as 2.93.0-preview.20261027 (#7796)

Changelog

Full Changelog: v2.92.0...v2.93.0-preview.20261027

• #4698 release: bring preview onto the verified 2.56.0 product tree @lidge-jun
• #4831 release: bring preview onto the verified 2.57.0 product tree @lidge-jun
• #4917 release: promote main to preview after 2.58.0 @lidge-jun
• #5250 release: bring preview onto the verified 2.60.0 product tree @lidge-jun
• #5511 release: promote native macOS tray candidate to preview 2.61.0 @lidge-jun
• #5523 release: enable Linux package diagnostics on preview @lidge-jun
• #5527 release: fix preview platform packaging @lidge-jun
• #5531 release(preview): carry native sidecar packaging repair @lidge-jun
• #5536 release(preview): carry lipo verification fix @lidge-jun
• #5545 release(preview): carry verified checksum and signature repair @lidge-jun
• #5551 release(preview): carry Windows checksum record support @lidge-jun
• #5557 fix(release): carry the draft-then-publish release fix to preview @lidge-jun
• #5565 release: prepare 2.62.0-preview.20260923 version metadata @lidge-jun
• #5602 release: promote the verified tree to preview as 2.63.0-preview.20260923 @lidge-jun
• #5670 release: promote verified 2.64.0 preview tree @lidge-jun
• #5783 release: promote the verified 2.65.0 preview tree to preview @lidge-jun
• #5854 release: promote 2.66.0 to preview as 2.66.0-preview.20260925 @lidge-jun
• #5899 release: promote 2.67.0-preview.20260926 to preview @lidge-jun
• #6054 release: promote 2.68.0-preview.20260927 to preview @lidge-jun
• #6137 release: promote 2.69.0-preview.20260928 to preview @lidge-jun
• #6141 release: promote cleaned 2.69.0-preview.20260928 to preview @lidge-jun
• #6211 release: 2.70.0-preview.20260929 @lidge-jun
• #6227 release: 2.71.0-preview.20260929 @lidge-jun
• #6245 release: 2.72.0-preview.20260930 @lidge-jun
• #6265 release: promote 2.73.0-preview.20260930 to preview @lidge-jun
• #6272 release: carry the macOS keyring signing fix to preview @lidge-jun
• #6318 release: promote 2.74.0-preview.20260930 to preview @lidge-jun
• #6352 release: 2.75.0-preview.20261001 @lidge-jun
• #6454 refactor: break config-facade import cycles (189 -> 59 static cyclic modules) @lcxhh521
• #6467 release: 2.76.0-preview.20261003 @lidge-jun
• #6594 refactor(oauth): break the ChatGPT OAuth and auth-api import cycles @lcxhh521
• #6630 release: 2.78.0-preview.20261005 @lidge-jun
• #6814 feat(combos): opt-in advisory quota signals for JEV decisions (P1) @geunwoojun99
• #6891 feat(messaging): add explicit enrolled Codex SSH peers @phillipod
• #7058 fix(protocols): enforce explicit-empty tool catalogs across delivery paths @luvs01
• #7077 fix(catalog): preserve context inference through provider edits @lcxhh521
• #7085 test(codex): allow child generation diagnostics before outer timeout @luvs01
• #7089 fix(usage): keep usage-ledger file ids exact so Windows NTFS ids stop colliding @lidge-jun
• #7095 fix(responses): reclaim least recently used idle WebSocket at capacity @YayoiNanoka
• #7096 release: sync preview to main 2.85.0 @lidge-jun
• #7106 fix(desktop): serialize shim publication with production process creation (ETXTBSY) @lidge-jun
• #7109 chore(release): open dev at 2.87.0 before releasing 2.86.0 @github-actions[bot]
• #7113 fix(codex): show last Windows desktop build assessment @luvs01
• #7114 fix(gui): select Advisor model from the routed catalog @luvs01
• #7120 refactor(proxy): share opaque transport with desktop relay @lcxhh521
• #7127 release: sync preview to main 2.86.0 @lidge-jun
• #7128 fix(codex): carry canonical subagent limits across modes (#7125) @lidge-jun
• #7129 fix(claude): verify Desktop backup and optional metadata reads (carry #7084) @lidge-jun
• #7130 fix(catalog): preserve uncapped native maximum context windows @lidge-jun
• #7131 fix(responses): strip Google item metadata from native OpenAI requests @lidge-jun
• #7132 fix(anthropic): pair native beta schemas with effective headers @lidge-jun
• #7133 fix(service): bind Linux health sentinel recovery to pidfd @lidge-jun
• #7135 feat(providers): carry opt-in API key round-robin and per-key pacing (#6937) @lidge-jun
• #7136 fix(oauth): bound refresh consumers and retain stale owners (carry #7117) @lidge-jun
• #7137 fix(startup): launch the registered Desktop bundle and executable @lidge-jun
• #7138 fix(responses): frame retained compaction requests as history @lidge-jun
• #7139 feat(vertex): accept credential JSON with secure marker lifecycle (carry #6843) @lidge-jun
• #7140 fix(chat): restore DeepSeek reasoning on native tool continuations (#7118) @lidge-jun
• #7141 fix(oauth): preserve operator model policy across reconciliation @lidge-jun
• #7142 fix(cli): refuse uncertain ownership before publishing sibling runtime @lidge-jun
• #7143 fix(anthropic): surface Opus 5.5 progress as signed commentary @lidge-jun
• #7144 feat(codex): preserve signed-in quota across duplicate pool entries @lidge-jun
• #7145 fix(oauth): recover Muse Keychain login and preserve actionable errors @lidge-jun
• #7146 feat(codex): route hard-locked main-account traffic to a configured fallback model (carry #7123) @lidge-jun
• #7147 fix(anthropic): recover rejected thinking without local prefix validation @lidge-jun
• #7149 fix(codex): keep the desktop app open on codex-restart when its picker is current @lidge-jun
• #7150 feat(oauth): pin generic pool conversations to request-local accounts @lidge-jun
• #7151 test(codex): use shared Windows attest spawn budgets @lidge-jun
• #7153 feat(accounts): auto-pause repeated permanent account refusals @lidge-jun
• #7156 feat(cli): configure usage model table row limits (carry #6436) @lidge-jun
• #7157 feat(antigravity): show account membership tier badge (carry #5932) @lidge-jun
• #7158 feat(codex): opt in to remaining included quota (carry #6629) @lidge-jun
• #7159 feat(combos): require explicit consent for metered targets (carry #6839) @lidge-jun
• #7160 feat(pricing): support per-model prompt-length overrides (carry #6738) @lidge-jun
• #7161 fix(test): isolate service state from the shared startup home @lidge-jun
• #7162 feat(combos): enroll text-only members in vision sidecar (carry #4932) @lidge-jun
• #7163 feat(antigravity): preserve diagnostic per-model quota evidence (carry #6718) @lidge-jun
• #7164 feat(providers): add DeepSeek Harness authenticated account provider (carry #6293) @lidge-jun
• #7165 feat(claude-cli): stable replay and capture-only client tools (carry #6566) @lidge-jun
• #7166 feat(claude-cli): refuse launches when the Claude subscription is exhausted (carry #6566) @lidge-jun
• #7167 feat(oauth): reset-first strategy for generic OAuth pools (carry #5408) @lidge-jun
• #7170 feat(oauth): code-display login mode for hosts with no reachable localhost (carry #6239) @lidge-jun
• #7171 fix(oauth): print fixed CLI login errors instead of provider bodies @lidge-jun
• #7174 fix(claude): eliminate intercept integration port reservation race @lidge-jun
• #7180 test(claude): end the linger upload pump when the socket closes @lidge-jun
• #7181 fix(codex): protect the desktop authority key in-process on Windows x64 @lidge-jun
• #7182 test(cli): isolate sibling ensure from the running Desktop app @lidge-jun
• #7183 test(cli): derive audio non-readiness case budgets from their deadline @lidge-jun
• #7184 fix(startup): skip unused native Codex ownership probes @lidge-jun
• #7188 test(google): guard Argon thought separation across client protocols @lidge-jun
• #7196 fix(gui): fold Advisor into the Subagents row and collapse its notices @lidge-jun
• #7215 fix(service): carry log rotation identities, Windows lock folder and remote-list RFC (#7186, #7203, #6157) @lidge-jun
• #7216 fix(providers): carry Zed, Qoder, and OpenCode Gemini compatibility @lidge-jun
• #7217 feat(responses): carry compaction capabilities and reasoning retention @lidge-jun
• #7218 fix(responses): carry incomplete reasons, terminal refusals, offline continuation tests and MiMo envelope repair (#7122, #7152, #7068, #7214) @lidge-jun
• #7219 feat(advisor): carry bounded retention and adaptive consultation (#7134, #7124) @lidge-jun
• #7220 fix(catalog): carry Ultra Fast discovery, vision sidecar, model alias ids and auto-review override (#7115, #7126, #7173, #6867) @lidge-jun
• #7222 feat(cli): carry usage comparison, log history, restart and Codex controls @lidge-jun
• #7223 feat(gui): carry Combo visibility, workspace panes, Windows picker and Gentle Shell @lidge-jun
• #7224 fix: carry OAuth combo cooldown, account rotation and health evidence fixes @lidge-jun
• #7225 fix: carry Claude translated-lane and usage-metering fixes (VB) @lidge-jun
• #7227 docs(chatgpt): clarify the app-server shim transport limit @Ingwannu
• #7235 fix(opencode-zen): route Claude through Anthropic Messages @norths7ar
• #7236 fix: carry account recovery, server-tool buffer, and usage corrections @lidge-jun
• #7237 fix(gui): restore keep-native-v1 qualifier placement @lidge-jun
• #7238 fix(config): preserve legacy OpenCode Go configs after native wire pins @lidge-jun
• #7239 fix(compact): preserve retained reasoning across native combo failover @lidge-jun
• #7240 fix: charge key cooldown to the credential sent @lidge-jun
• #7241 fix(ci): preserve import cycles through macOS path aliases @lidge-jun
• #7242 test: fix Windows default-home isolation fixtures @lidge-jun
• #7243 fix(claude): activate Windows picker after dormant startup @lidge-jun
• #7244 fix: preserve Codex opt-out, concurrent syncs, and usage ownership @lidge-jun
• #7246 fix(desktop): use standard no-op waker in spawn test @lidge-jun
• #7248 chore(release): open dev at 2.88.0 before releasing 2.87.0 @github-actions[bot]
• #7251 fix(claude): replay Anthropic server-tool exchanges on the translated lane (carry #7205) @lidge-jun
• #7252 fix: preserve carry reference numbers across the text window cap @lidge-jun
• #7253 fix(routing): price refused-then-served rows in routing analytics @vadymhimself
• #7254 fix(google): stop leaked Gemini planning from spreading through replayed history @lidge-jun
• #7259 fix(catalog): preserve OpenAI API display name overrides @jdeurt
• #7261 fix(chat): return gateway request-history IDs @lidge-jun
• #7262 fix(cli): preserve startup with IPv6 loopback disabled @lidge-jun
• #7263 chore(release): open dev at 2.89.0 before releasing 2.88.0 @github-actions[bot]
• #7266 fix(vertex): honor project and location for API-key inference @andrew05060414
• #7276 fix(codex): validate subagent limit boundaries before writes @luvs01
• #7280 fix(google): preserve matched and orphan Vertex Argon tool images @Jossi02
• #7282 feat(compatibility): separate custom-tool grammar evidence from representation @lidge-jun
• #7283 fix(antigravity): show the Gemini 4 Argon quota group separately @lidge-jun
• #7284 feat(combos): let a combo set its catalog row description (#7229) @lidge-jun
• #7285 feat(responses): opt-in compression of outbound ChatGPT Responses request bodies @lidge-jun
• #7286 feat(codex): opt-in OS desktop notification for low-quota protection @lidge-jun
• #7287 feat(providers): explicit single-model completion test @lidge-jun
• #7296 feat(vertex): resolve each API key's project with project "auto" @chilung-cgu
• #7327 fix(service): never bake Claude first-party's own intercept proxy @scy7796
• #7341 feat(anthropic): default prompt-cache TTL to 1h on first-party Anthropic @lidge-jun
• #7351 chore(providers): remove opencode-free and migrate saved configs @lidge-jun
• #7352 fix(sidecar): map provider input overflow to context_length_exceeded @lidge-jun
• #7353 fix(responses): handle replayed hosted web-search history (#7250, #7269) @lidge-jun
• #7354 fix(combos): keep tool loops on one target and make failover history safe (#7298) @lidge-jun
• #7355 fix(combos): absorb community failover fixes (#7317, #7329, #7339, #7320) @lidge-jun
• #7356 ci(release): sign Windows binaries and MSI via SignPath (#7207) @lidge-jun
• #7357 test(responses): register combo-tool-loop-pin in the core module inventory @lidge-jun
• #7358 test(windows): keep ACL subprocess work out of cache and registration assertions @lidge-jun
• #7359 test(temp): let the final-EPERM quarantine see through Windows 8.3 TEMP aliases @lidge-jun
• #7360 test(combos): await the fallback lease release on both passthrough relays @lidge-jun
• #7361 test(temp): compare the default containment result through the native resolver @lidge-jun
• #7362 fix(launcher): scope an inherited transpiler cache to the Bun version it starts @lidge-jun
• #7363 test(desktop): hold early client bytes in the socks5 egress fixture @lidge-jun
• #7364 fix(runtime): scope server children's transpiler cache and keep scoping idempotent @lidge-jun
• #7365 test(launcher): assert the scoped env and versioned bundled runtime in source oracles @lidge-jun
• #7371 chore(release): open dev at 2.90.0 before releasing 2.89.0 @github-actions[bot]
• #7387 test: cover Claude CLI JSON schema contract @adirwt852-cloud
• #7388 fix(responses): recover cold opaque state and harden replay, archive and lifecycle paths @lidge-jun
• #7389 fix(responses): carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) @lidge-jun
• #7393 fix(codex): renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main @lidge-jun
• #7394 fix(providers): carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 @lidge-jun
• #7395 fix(providers): carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 @lidge-jun
• #7396 fix(providers): gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles @lidge-jun
• #7397 fix(oauth): harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) @lidge-jun
• #7408 fix(codex): pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition @lidge-jun
• #7414 fix(codex): stop pool accounts from spending the native main account (#7398) @lidge-jun
• #7419 fix(responses): keep search replay ID allocation linear @luvs01
• #7420 fix(config): preserve disabled sidecars when targets retire @luvs01
• #7421 fix(ci): verify installer signature before administrative extraction @luvs01
• #7422 fix(runtime): keep transpiler cache scopes within configured paths @luvs01
• #7424 fix(claude-cli): keep model text out of inferred cooldowns @luvs01
• #7445 chore(providers): deprecate mimo-free @heerey525
• #7449 test: bound shell integration scenarios independently @oliver-mee
• #7455 fix(kiro): read the whoami identity when kiro-cli appends its Profile block @martinbcg
• #7458 fix(logs): preserve replay-refusal provenance through response finalization @norths7ar
• #7463 fix(chat): fail unmet required client tool completions @Ingwannu
• #7464 fix(responses): preserve upgrade-only reasoning inclusion @luvs01
• #7466 test(launcher): place PATH-Bun fixtures under a trusted ancestry @lidge-jun
• #7467 fix(test): arm the real-home write guard when bun test skips the preload @lidge-jun
• #7468 test: make update recovery, messages cancellation, and CLI parity harnesses deterministic @lidge-jun
• #7469 fix(chat): carry Anthropic thinking signatures through reasoning_details @lidge-jun
• #7470 fix(auth): refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct @lidge-jun
• #7473 fix(responses): handle Codex 0.164 request controls @lidge-jun
• #7475 chore(release): open dev at 2.91.0 before releasing 2.90.0 @github-actions[bot]
• #7476 feat(management): passive GET /api/quota-pool (ocx.quota-pool/1 producer) @lidge-jun
• #7477 feat(readyz): advertise peer features from one registry @lidge-jun
• #7480 fix(deps): clear high-severity audit findings blocking the 2.90.0 release @lidge-jun
• #7482 feat(fallback): OCX-11 fallback off per scope, with home_unreachable on Children @lidge-jun
• #7483 feat(service): passive ocx service status --json and install-method verdict in ocx status --json @lidge-jun
• #7484 feat(link): parity on apply — restart the Child runtime, record and report the apply (OCX-6) @lidge-jun
• #7487 test(update): let the test-scoped Windows ACL belt through the host-free helper @lidge-jun
• #7488 ci(windows): flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) @lidge-jun
• #7489 fix(quota-pool): adopt a concurrent winner's identity instead of refusing it @lidge-jun
• #7490 feat(remote): name the serving Home in x-opencodex-served-by (OCX-2) @lidge-jun
• #7492 feat(cli): mark provider list rows active when they serve (OCX-12) @lidge-jun
• #7493 fix(mistral): scope queue_full to the waiting identity; address #7474 review @lidge-jun
• #7494 feat(link): report each Child version and a compatibility verdict in ocx link status @lidge-jun
• #7496 fix(link): refuse Windows Children with a Hub-mode pointer and explain existing ones @lidge-jun
• #7501 test: make ten Windows-sensitive flaky tests deterministic @lidge-jun
• #7502 test(server): expect the platform's exit signal for a replacement that ignores SIGTERM @lidge-jun
• #7503 ci(selector): flag process-signal code as Windows-sensitive @lidge-jun
• #7504 fix(chat): isolate Anthropic reasoning state from native passthrough @luvs01
• #7508 fix(test): bind and serialize queue lock ownership @luvs01
• #7509 fix(service): preserve unrelated authenticated loopback proxies @luvs01
• #7510 fix(routing): normalize analytics usage rows @luvs01
• #7511 fix(chat): persist Reserve helper refusal request IDs @luvs01
• #7514 fix(cli): use attested capabilities for local usage comparisons @luvs01
• #7520 fix(messaging): reject macOS ACL-exposed state @luvs01
• #7522 fix(codex): distrust picker freshness without binding evidence @luvs01
• #7527 fix(coding-agent): launch native Windows CLIs and refuse empty-arg-dropping dispatchers @lidge-jun
• #7528 test: settle Windows ACL work and owner locks before fixture removal @lidge-jun
• #7531 fix(reasoning): separate support, thinking toggles and effort controls @norths7ar
• #7532 chore(release): open dev at 2.92.0 before releasing 2.91.0 @github-actions[bot]
• #7534 feat(codex): expose opt-in Flex tier for eligible routed models @Transient-Onlooker
• #7535 docs(devlog): record the 2.92.0 sweep wave plan @lidge-jun
• #7538 fix(retry): honor upstream no-retry verdict (carry #7505) @lidge-jun
• #7539 fix(chat): finish with length when a Responses upstream reports incomplete reason "length" @lidge-jun
• #7541 perf(sse): avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) @lidge-jun
• #7542 feat(logs): support x-hermes-conversation-id for Hermes session correlation (carry #7459) @lidge-jun
• #7543 fix(service): bind ownership lease release to its acquisition @luvs01
• #7545 fix(qoder): provider-only catalog, replay-envelope refusal and isolated status @lidge-jun
• #7546 fix(codex): bind CLI update plans to installation content and pre-dotenv transport @lidge-jun
• #7548 fix(windows): read the effective SID in-process so service install does not wait on a cold PowerShell @lidge-jun
• #7549 fix(jev): publish Antigravity family quota as decision evidence (carry #7442) @lidge-jun
• #7550 docs(subagents): explain how spawn_agent fills its five model slots @chlwnsgurg
• #7551 fix(codex): list pool accounts without a native home and expose safe slot identity metadata @lidge-jun
• #7552 test: make codex-runtime, client-connect and loopback-listener tests deterministic @lidge-jun
• #7554 fix(responses): infer message phase for passthrough providers @lidge-jun
• #7555 fix(providers): refresh dated Token Plan catalogue and metadata @lidge-jun
• #7556 fix(antigravity): route models only to accounts whose roster serves them @lidge-jun
• #7557 fix(codex): calibrate Business Premium display capacity @lidge-jun
• #7558 fix(command-code): rotate on insufficient-credit refusals @lidge-jun
• #7560 fix(link): keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics @lidge-jun
• #7564 fix(link): keep a connected client's integrations across ocx stop; status names ocx sync --restart-codex (#7563) @lidge-jun
• #7565 fix(i18n): complete Turkish dashboard copy and documentation @ardakrt
• #7566 fix(replay): isolate retained reasoning state by admitted caller (carry #7523) @lidge-jun
• #7567 feat(jev): opt-in session pin keeps a JEV combo session on its decided target @lidge-jun
• #7570 docs(release): end release notes with the SignPath code signing attribution @lidge-jun
• #7571 docs(site): show the SignPath attribution and code signing policy on the download section @lidge-jun
• #7573 fix(responses): always send a title on url_citation and repair old history on replay @inforanger
• #7574 fix(router): support Vercel JEV decisions and thinking model reasoning replay @omar391
• #7576 fix(providers): backfill Token Plan output limits on roster refresh @lidge-jun
• #7577 fix(codex): refuse uncertain prefix-local Node observations @luvs01
• #7581 feat(quota): read Abliteration credit balance from /v1/credits @btorres0318
• #7582 fix(desktop): revoke usage trials after identity verification fails @luvs01
• #7584 fix(providers): fold developer role to system for moonshot @lidge-jun
• #7585 fix(codex): keep npm Node cache within inspection lifetime @luvs01
• #7588 fix(fallback): check the first hard-lock combo destination @luvs01
• #7589 fix(fallback): check the first hard-lock profile destination @luvs01
• #7591 fix(deepseek): restore official V4 Pro availability @norths7ar
• #7597 fix(codex): stop guardian refresh of grants persisted as revoked @lidge-jun
• #7598 test: keep cold first-exec and PowerShell start out of two timed cases @lidge-jun
• #7600 fix(catalog): send native ultra effort as max on the wire (#7590) @lidge-jun
• #7601 fix(cli): keep the stored strategy when combo set replaces targets @lidge-jun
• #7602 docs(cli): an existing JEV combo keeps its stored decision method @lidge-jun
• #7604 feat(workbuddy): add subscription and credit support @terrytan95
• #7606 fix(deps): ship Bun 1.4.4 runtime to drop the compromised eMudhra root @LPFchan
• #7607 test(layout): move the Abliteration quota test to a shard to restore the layout.json size cap on dev @lidge-jun
• #7610 fix(codex): fence uncertain catalog entry identity @luvs01
• #7615 docs(providers): qualify Qoder native executable precedence across PATH folders @lidge-jun
• #7616 docs(getting-started): align Korean installation guide with Bun 1.4.4 pin @mvanhorn
• #7617 fix(codex): keep a role's model when auto-assign finds an equal-priced tie @LilMGenius
• #7621 fix(codex): renew credit evidence for namespace-bound Direct accounts @Caledvwlch
• #7622 fix(codex): preserve credit recovery retry hints and scoped cooldowns @Caledvwlch
• #7623 feat(providers): add AI Stupid Level API-key preset @StudioPlatforms
• #7627 chore(test): align Bun runner with the 1.4.4 security baseline @luvs01
• #7629 fix(link): preserve literal SSH include names on Bun 1.4.4 @luvs01
• #7630 fix(cursor): use Bun glob matching for native grep @luvs01
• #7631 perf(eventstream): use Bun native CRC32 for Kiro frame validation @luvs01
• #7633 chore(release): open dev at 2.93.0 before releasing 2.92.0 @github-actions[bot]
• #7635 fix(live): bound WebSocket close without releasing live ownership @luvs01
• #7642 fix(deps): pin zod 4.6.6 and body-parser 2.4.0 for audit:high @lidge-jun
• #7644 fix(deps): bump gui happy-dom to 21.0.4 (GHSA-834v-8h66-3h79) @lidge-jun
• #7646 docs: translate Mistral and OpenGateway provider behavior across locales @lidge-jun
• #7647 fix(deps): patch Hono and ip-address advisories and align qs @lidge-jun
• #7649 test(server): isolate agent-task-recovery fixtures (#7613) @lidge-jun
• #7650 fix(gui): cancel Remote Link sheet focus work (#7611) @lidge-jun
• #7656 fix(windows): resolve ACL principal natively without cold PowerShell @lidge-jun
• #7657 feat(usage): price and seed Kimi K3.1 Pro on Kimi Code and Moonshot @lidge-jun
• #7658 ci: run docker/keyring smoke and React Doctor on PRs only when their inputs change @lidge-jun
• #7659 fix(codex): preserve sync edits with canonical sandbox checks @lidge-jun
• #7661 perf(socks5): bound upload waiters and release completed read results @luvs01
• #7662 fix(socks5): deliver partial response payloads promptly and release terminal sockets @luvs01
• #7663 perf(proxy): bound CONNECT header buffering and avoid repeated prefix copies @luvs01
• #7664 feat(gui): expose JEV session pin in Combo editor @lidge-jun
• #7665 feat(clients): connect Qoder CN and WorkBuddy desktop editions @Flowershangfromthebranches
• #7666 fix(quota): bound snapshot persistence under sustained updates @luvs01
• #7667 fix(transport): honor backpressure in pinned HTTP responses @luvs01
• #7669 fix(remote-workspace): observe Pi prompt failures before acknowledgement @luvs01
• #7670 perf(adapters): use native SHA-256 for tool identity digests @luvs01
• #7671 perf(responses): avoid input Buffer copies in gzip requests @luvs01
• #7672 perf(codex): validate audit UTF-8 without round-trip Buffer copies @luvs01
• #7673 perf(eventstream): avoid quadratic copying of fragmented frames @luvs01
• #7675 perf(responses): coalesce queued thought-signature snapshot writes @luvs01
• #7676 perf(streams): avoid repeated growing-buffer prefix extraction in SSE decoding @luvs01
• #7678 fix(runtime): release detached sweep hooks and preserve replacement timers @luvs01
• #7679 perf(usage): bound timeline aggregation scratch memory and avoid argument overflow @luvs01
• #7680 perf(history): skip unchanged partial-tail reads and SQLite metadata rewrites @luvs01
• #7682 fix(responses): preserve gateway citations during native compact @luvs01
• #7683 fix(routing): inspect hard-lock fallback without selecting candidates @luvs01
• #7686 docs: correct ADR-7517 contract owner @luvs01
• #7687 fix(kiro): fail over accounts when overage quota is exhausted @martinbcg
• #7688 fix(config): skip optional hardening for non-directory homes @luvs01
• #7689 fix(ci): select Docker smoke for actual image build inputs @luvs01
• #7692 fix(codex): detect LazyCodex installed from the marketplace @LilMGenius
• #7695 feat(providers): seed Kimi K3.1 Pro on the Moonshot API preset @lidge-jun
• #7696 fix(command-code): answer MODEL_NOT_IN_PLAN once as a model-scoped 400 @lidge-jun
• #7698 fix(ci): wake the PR gate when attribution-approved is applied @lidge-jun
• #7699 fix(ci): bind exception approval labels to the evaluated head @lidge-jun
• #7700 feat(integrations): connect named Hermes profiles (#7674) @lidge-jun
• #7706 test(server): isolate port reclaim fixture identity and clock @luvs01
• #7707 feat(sync): ocx sync --expect-link / --expect-hub-key refuses a different Home (#7694) @lidge-jun
• #7709 fix(desktop): bind usage trials to fresh package proof @luvs01
• #7715 fix(scripts): use Bun timeout flag in temporary-file diagnostics @luvs01
• #7721 fix(claude): classify legacy Desktop aliases before native fallback @luvs01
• #7722 fix(service): preserve Windows probe support across Node and Bun @luvs01
• #7723 feat(combos): add opt-in cooldown recovery with configurable interval @artur-safonov
• #7724 fix(protocols): account for Antigravity direct Chat IR @luvs01
• #7725 fix(responses): notice a Codex WebSocket that dies after the response started @FredAmartey
• #7729 fix(management): declare Hermes profile discovery route @luvs01
• #7731 fix(codex): clamp native efforts to selected model ladder @Plamyth
• #7733 test(cli): copy launcher module dependencies into activation fixtures @luvs01
• #7734 fix(cli): enforce the Bun patch floor in automatic PATH fallback @luvs01
• #7735 fix(meta): preserve destinations when refreshing saved model rosters @luvs01
• #7740 test(cli): let the forged sibling-env start bind its own port @lidge-jun
• #7741 fix(combo): reject buffered required-tool false successes @lidge-jun
• #7743 fix(responses): bound closing handshakes for non-reused upstream WebSockets (carry #7681) @lidge-jun
• #7744 fix(usage): retain Kiro prompt estimates in hosted tool paths (carry #7620) @lidge-jun
• #7746 fix(minimax): move to GA MiniMax-M3.1-Flash and rename the retired preview id @lidge-jun
• #7747 fix(update): keep Codex routing for the restarted proxy during an update (#7423) @lidge-jun
• #7749 fix(anthropic): preserve cache prefixes during routed compaction (#7307) @lidge-jun
• #7751 fix(update): join the Windows npm tree before stage cleanup @lidge-jun
• #7754 fix(stop): send local stop requests directly to the loopback runtime @lidge-jun
• #7767 fix(live): keep sideband admission until the upstream closes after client cancellation @lidge-jun
• #7777 fix(claude): drain parent ACL flights before intercept secret writes @lidge-jun
• #7779 feat(models): add GPT-6.1 Terra alongside GPT-5.6 Terra (non-Cursor providers, catalog, pricing, docs) @lidge-jun
• #7782 ci: run import-graph tests on pull requests and verify merged batches on dev @lidge-jun
• #7796 release: promote frozen tip 2606f6f to preview as 2.93.0-preview.20261027 @lidge-jun

Code signing

Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.