OpenCodex: régebbi verziók és összes kiadás

Published to npm as @bitkyc08/opencodex@2.97.0 with dist-tag latest.
New Features
- Home ocx sync fans out to linked Children (sync.home-fanout/1) (#8100)
- Orchestrated ocx update plan/apply contract (update.orchestrated/1) (#8103)
- Batch consumed stream chunk removal (#8049)
Bug Fixes
- Show both 5-hour and weekly meters for Max and Team accounts (#8088)
- Place round-robin conversations on accounts with quota headroom (#8092)
- Honest affinity labels and opt-in request-owned conversation affinity (#8080) (#8096)
- Bind header-less Messages bridge turns to one Codex pool account (carry #8028) (#8094)
- Keep Codex pool session pins across proxy restarts (#8098)
- Refuse links at SQLite store paths on Windows and rebalance CI shards for the new affinity tests (#8102)
- Keep Windows containment refusal at 126; correct the #8100 fan-out test fixture (#8106)
- Make the Windows batch shards green after #8103 (#8109)
- Reject inherited writes at Windows creation parents (#8011)
- Preserve quota-code provenance across wrappers and policy fallback (#8013)
- Honor web-search tool choice scope (#8018)
- Scope tool authority to current turn (#8027)
- Bound canonical patch prefix scanning (#8012)
- Serialize automatic v1 reconciliation with CLI updates (#8014)
- Read Artificial Analysis free model list before sunset (#8112)
- Count lowered hosted tool_search as declared (#8123)
- Retire a pool account's carried monthly window when WHAM shows none (#8120)
- Route local compaction checkpoints (#8119)
- Drop the unsupported output.encrypted_content include on Kimi Code Responses (#8122)
- Report prompt_eval_cached_count as cache-read input (#8124)
- Account for normalized inbound JSON (#8026)
- Require paired dashboard session for CLI updates (#8008)
- Export declared effort ladder and default to Kimi Code (#8126)
- Stop sibling discovery after revocation (#8024)
- Answer uncoded context-window refusals as prompt too long (#8128)
- Attest Codex listener before token injection (#8007)
- Report monthly Coding Plan quota (#8077)
- Keep profile keys OpenCodex does not manage (#8074)
- Report content-filter stops as non-retryable refusals (#8072)
- Avoid double charging live NDJSON buffers (#8047)
- Restore owned integrations before native signal exit (#8036)
- Hold selection ownership through dashboard feature toggles (#8009)
- Keep untyped assistant messages inside their tool-call turn (#8064)
- Unwrap one extra executable freeform body wrapper (#8048)
- Resubmit a finished answer on the completion retry (#8070)
- Fix non-ASCII Codex turn metadata headers (#8040)
Other Changes
- Open dev at 2.97.0 before releasing 2.96.0 (#8068)
- Serve an Ollama-compatible inbound API (#8099)
- Normalize upstream error details in request logs and Retry-After advice (#8104)
- Normalize Chat Completions client error bodies (#8108)
- Promote frozen tip 7b3bb7a257 to main as 2.97.0 (#8134)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.96.0...v2.97.0
- #8007 fix(cli): attest Codex listener before token injection @luvs01
- #8008 fix(security): require paired dashboard session for CLI updates @luvs01
- #8009 fix(codex): hold selection ownership through dashboard feature toggles @luvs01
- #8011 fix(security): reject inherited writes at Windows creation parents @luvs01
- #8012 fix: bound canonical patch prefix scanning @luvs01
- #8013 fix(responses): preserve quota-code provenance across wrappers and policy fallback @luvs01
- #8014 fix(codex): serialize automatic v1 reconciliation with CLI updates @luvs01
- #8018 fix(advisor): honor web-search tool choice scope @luvs01
- #8024 fix(antigravity): stop sibling discovery after revocation @luvs01
- #8026 fix(server): account for normalized inbound JSON @luvs01
- #8027 fix(responses): scope tool authority to current turn @luvs01
- #8036 fix(link): restore owned integrations before native signal exit @luvs01
- #8040 Fix non-ASCII Codex turn metadata headers @visualbridge7188
- #8047 fix(command

Published to npm as @bitkyc08/opencodex@2.96.0 with dist-tag latest.
New Features
- Add opt-in MCP tools for stored Codex queues (#7999)
- Count fragmented NDJSON bytes incrementally (#8015)
Bug Fixes
- Exclude Meta for direct hosted tool choices (#8010)
- Honor disable and shutdown during startup sync (#8017)
- Bound CN PNG raster dimensions (#8021)
- Preserve server-issued batch for role suggestion --apply (#8022)
- Strip rejected reasoning toggle from native passthrough (#8025)
- Strip safety_identifier at the canonical ChatGPT forward destination (#8030)
- Support Ultra quota windows and show subscription names (#8055)
- Isolate Pool installation identity per account (#8065)
Chores
- Verify handle closure without racy fd probes (#8058)
- Await sibling startup completion instead of a polling deadline (#8062)
Other Changes
- Open dev at 2.96.0 before releasing 2.95.0 (#8033)
- Promote frozen tip 007dbfd895 to main as 2.96.0 (#8069)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.95.0...v2.96.0
- #7999 feat(messaging): add opt-in MCP tools for stored Codex queues @HojooonKim
- #8010 fix(combo): exclude Meta for direct hosted tool choices @luvs01
- #8015 perf(ollama): count fragmented NDJSON bytes incrementally @0disoft
- #8017 fix(grok): honor disable and shutdown during startup sync @luvs01
- #8021 fix(qoder): bound CN PNG raster dimensions @luvs01
- #8022 fix(cli): preserve server-issued batch for role suggestion --apply @luvs01
- #8025 fix(responses): strip rejected reasoning toggle from native passthrough @luvs01
- #8030 fix(adapters): strip safety_identifier at the canonical ChatGPT forward destination @harshav167
- #8033 chore(release): open dev at 2.96.0 before releasing 2.95.0 @github-actions[bot]
- #8055 fix(anthropic): support Ultra quota windows and show subscription names @lidge-jun
- #8058 test(messaging): verify handle closure without racy fd probes @lidge-jun
- #8062 test(cli): await sibling startup completion instead of a polling deadline @lidge-jun
- #8065 fix(codex): isolate Pool installation identity per account @lidge-jun
- #8069 release: promote frozen tip 007dbfd895 to main as 2.96.0 @lidge-jun
Code signing
Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Published to npm as @bitkyc08/opencodex@2.92.0 with dist-tag latest.
New Features
- Support x-hermes-conversation-id for Hermes session correlation (carry #7459) (#7542)
- Resolve each API key's project with project "auto" (#7296)
- Opt-in session pin keeps a JEV combo session on its decided target (#7567)
- Add subscription and credit support (#7604)
- Avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) (#7541)
- Read Abliteration credit balance from /v1/credits (#7581)
Bug Fixes
- Persist Reserve helper refusal request IDs (#7511)
- Normalize analytics usage rows (#7510)
- Preserve replay-refusal provenance through response finalization (#7458)
- Honor upstream no-retry verdict (carry #7505) (#7538)
- Preserve unrelated authenticated loopback proxies (#7509)
- Reject macOS ACL-exposed state (#7520)
- Finish with length when a Responses upstream reports incomplete reason "length" (#7539)
- Use attested capabilities for local usage comparisons (#7514)
- Distrust picker freshness without binding evidence (#7522)
- Publish Antigravity family quota as decision evidence (carry #7442) (#7549)
- Read the effective SID in-process so service install does not wait on a cold PowerShell (#7548)
- Bind CLI update plans to installation content and pre-dotenv transport (#7546)
- Route models only to accounts whose roster serves them (#7556)
- Refresh dated Token Plan catalogue and metadata (#7555)
- Keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics (#7560)
- Infer message phase for passthrough providers (#7554)
- Backfill Token Plan output limits on roster refresh (#7576)
- Fold developer role to system for moonshot (#7584)
- Isolate retained reasoning state by admitted caller (carry #7523) (#7566)
- Stop guardian refresh of grants persisted as revoked (#7597)
- Keep the stored strategy when combo set replaces targets (#7601)
- Send native ultra effort as max on the wire (#7590) (#7600)
- Keep npm Node cache within inspection lifetime (#7585)
- Revoke usage trials after identity verification fails (#7582)
- Refuse uncertain prefix-local Node observations (#7577)
- Check the first hard-lock combo destination (#7588)
- Always send a title on url_citation and repair old history on replay (#7573)
- Ship Bun 1.4.4 runtime to drop the compromised eMudhra root (#7606)
- Pin zod/body-parser for 2.92.0 audit:high republish (#7643)
- Bump gui happy-dom to 21.0.4 for 2.92.0 (GHSA-834v-8h66-3h79) (#7645)
Documentation
- Record the 2.92.0 sweep wave plan (#7535)
- Explain how spawn_agent fills its five model slots (#7550)
- Show the SignPath attribution and code signing policy on the download section (#7571)
- End release notes with the SignPath code signing attribution (#7570)
- An existing JEV combo keeps its stored decision method (#7602)
Chores
- Deprecate mimo-free (#7445)
- Move the Abliteration quota test to a shard to restore the layout.json size cap on dev (#7607)
Other Changes
- Open dev at 2.92.0 before releasing 2.91.0 (#7532)
- Promote frozen tip 03bcf789e9 to main as 2.92.0 (#7634)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.91.0...v2.92.0
- #7296 feat(vertex): resolve each API key's project with project "auto" @chilung-cgu
- #7445 chore(providers): deprecate mimo-free @heerey525
- #7458 fix(logs): preserve replay-refusal provenance through response finalization @norths7ar
- #7509 fix(service): preserve unrelated authenticated loopback proxies @luvs01
- #7510 fix(routing): normalize analytics usage rows @luvs01
- #7511 fix(chat): persist Reserve helper refusal request IDs @luvs01
- #7514 fix(cli): use attested capabilities for local usage comparisons @luvs01
- #7520 fix(messaging): reject macOS ACL-exposed state @luvs01
- #7522 fix(codex): distrust picker freshness without binding evidence @luvs01
- #7532 chore(release): open dev at 2.92.0 before releasing 2.91.0 @github-actions[bot]
- #7535 docs(devlog): record the 2.92.0 sweep wave plan @lidge-j

Published to npm as @bitkyc08/opencodex@2.91.0 with dist-tag latest.
New Features
- Passive GET /api/quota-pool (ocx.quota-pool/1 producer) (#7476)
- Advertise peer features from one registry (#7477)
- Parity on apply — restart the Child runtime, record and report the apply (OCX-6) (#7484)
- Name the serving Home in x-opencodex-served-by (OCX-2) (#7490)
- Mark provider list rows active when they serve (OCX-12) (#7492)
- Report each Child version and a compatibility verdict in ocx link status (#7494)
- Passive ocx service status --json and install-method verdict in ocx status --json (#7483)
- OCX-11 fallback off per scope, with home_unreachable on Children (#7482)
Bug Fixes
- Clear high-severity audit findings blocking the 2.90.0 release (#7480)
- Arm the real-home write guard when bun test skips the preload (#7467)
- Refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct (#7470)
- Handle Codex 0.164 request controls (#7473)
- Carry Anthropic thinking signatures through reasoning_details (#7469)
- Adopt a concurrent winner's identity instead of refusing it (#7489)
- Scope queue_full to the waiting identity; address #7474 review (#7493)
- Refuse Windows Children with a Hub-mode pointer and explain existing ones (#7496)
Chores
- Cover Claude CLI JSON schema contract (#7387)
- Make update recovery, messages cancellation, and CLI parity harnesses deterministic (#7468)
- Let the test-scoped Windows ACL belt through the host-free helper (#7487)
- Place PATH-Bun fixtures under a trusted ancestry (#7466)
- Flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) (#7488)
- Expect the platform's exit signal for a replacement that ignores SIGTERM (#7502)
- Make ten Windows-sensitive flaky tests deterministic (#7501)
- Flag process-signal code as Windows-sensitive (#7503)
Other Changes
- Open dev at 2.91.0 before releasing 2.90.0 (#7475)
- Promote dev 1025acd4b1 to main as 2.91.0 (#7530)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.90.0...v2.91.0
- #7387 test: cover Claude CLI JSON schema contract @adirwt852-cloud
- #7466 test(launcher): place PATH-Bun fixtures under a trusted ancestry @lidge-jun
- #7467 fix(test): arm the real-home write guard when bun test skips the preload @lidge-jun
- #7468 test: make update recovery, messages cancellation, and CLI parity harnesses deterministic @lidge-jun
- #7469 fix(chat): carry Anthropic thinking signatures through reasoning_details @lidge-jun
- #7470 fix(auth): refuse Codex runtime AgentAssertion auth and scope dual_header assertions to Direct @lidge-jun
- #7473 fix(responses): handle Codex 0.164 request controls @lidge-jun
- #7475 chore(release): open dev at 2.91.0 before releasing 2.90.0 @github-actions[bot]
- #7476 feat(management): passive GET /api/quota-pool (ocx.quota-pool/1 producer) @lidge-jun
- #7477 feat(readyz): advertise peer features from one registry @lidge-jun
- #7480 fix(deps): clear high-severity audit findings blocking the 2.90.0 release @lidge-jun
- #7482 feat(fallback): OCX-11 fallback off per scope, with home_unreachable on Children @lidge-jun
- #7483 feat(service): passive ocx service status --json and install-method verdict in ocx status --json @lidge-jun
- #7484 feat(link): parity on apply — restart the Child runtime, record and report the apply (OCX-6) @lidge-jun
- #7487 test(update): let the test-scoped Windows ACL belt through the host-free helper @lidge-jun
- #7488 ci(windows): flag Windows-sensitive PRs for a lane=all dispatch (policy unchanged) @lidge-jun
- #7489 fix(quota-pool): adopt a concurrent winner's identity instead of refusing it @lidge-jun
- #7490 feat(remote): name the serving Home in x-opencodex-served-by (OCX-2) @lidge-jun
- #7492 feat(cli): mark provider list rows active when they serve (OCX-12) @lidge-jun
- #7493 fix(mistral): scope queue_full to the waiting identity; address #7474 review @lidge-jun
- #7494 feat(link): report each Child version and a compatibility verdict in ocx lin

Published to npm as @bitkyc08/opencodex@2.90.0 with dist-tag latest.
Bug Fixes
- Recover cold opaque state and harden replay, archive and lifecycle paths (#7388)
- Carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) (#7389)
- Renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main (#7393)
- Carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 (#7394)
- Harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) (#7397)
- Gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles (#7396)
- Carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 (#7395)
- Pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition (#7408)
- Stop pool accounts from spending the native main account (#7398) (#7414)
- Keep search replay ID allocation linear (#7419)
- Keep transpiler cache scopes within configured paths (#7422)
- Keep model text out of inferred cooldowns (#7424)
- Read the whoami identity when kiro-cli appends its Profile block (#7455)
- Preserve upgrade-only reasoning inclusion (#7464)
- Promote dev 845ac6b875 to main as 2.90.0 (#7474)
- Carry the dependency-audit fix to main for 2.90.0 (#7481)
Chores
- Bound shell integration scenarios independently (#7449)
Other Changes
- Open dev at 2.90.0 before releasing 2.89.0 (#7371)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.89.0...v2.90.0
- #7371 chore(release): open dev at 2.90.0 before releasing 2.89.0 @github-actions[bot]
- #7388 fix(responses): recover cold opaque state and harden replay, archive and lifecycle paths @lidge-jun
- #7389 fix(responses): carry WS dispatch override, pooled key rotation, usage accounting and Kiro refusal hop (B3) @lidge-jun
- #7393 fix(codex): renew pool credit evidence, recheck predicted-reset hard locks, and scope Direct fallback to the locked main @lidge-jun
- #7394 fix(providers): carry Gemini, MiMo, DeepSeek, Mistral, opencode-go and audio adapter fixes for 2.90 @lidge-jun
- #7395 fix(providers): carry Mistral rate-limit recovery and OpenGateway tool-result handling for 2.90 @lidge-jun
- #7396 fix(providers): gate MiMo bare-call recovery on a terminal signal and limit DeepSeek upload roles @lidge-jun
- #7397 fix(oauth): harden OAuth login/import, quota diagnostics, service/update paths and shim token handling (B5) @lidge-jun
- #7408 fix(codex): pin Windows shim refresh identities on Linux and record the bypass-token cold-spawn disposition @lidge-jun
- #7414 fix(codex): stop pool accounts from spending the native main account (#7398) @lidge-jun
- #7419 fix(responses): keep search replay ID allocation linear @luvs01
- #7422 fix(runtime): keep transpiler cache scopes within configured paths @luvs01
- #7424 fix(claude-cli): keep model text out of inferred cooldowns @luvs01
- #7449 test: bound shell integration scenarios independently @oliver-mee
- #7455 fix(kiro): read the whoami identity when kiro-cli appends its Profile block @martinbcg
- #7464 fix(responses): preserve upgrade-only reasoning inclusion @luvs01
- #7474 release: promote dev 845ac6b875 to main as 2.90.0 @lidge-jun
- #7481 release: carry the dependency-audit fix to main for 2.90.0 @lidge-jun

Published to npm as @bitkyc08/opencodex@2.89.0 with dist-tag latest.
New Features
- Separate custom-tool grammar evidence from representation (#7282)
- Let a combo set its catalog row description (#7229) (#7284)
- Opt-in compression of outbound ChatGPT Responses request bodies (#7285)
- Auto-pause repeated permanent account refusals (#7153)
- Explicit single-model completion test (#7287)
- Opt-in OS desktop notification for low-quota protection (#7286)
- Opt-in advisory quota signals for JEV decisions (P1) (#6814)
- Add explicit enrolled Codex SSH peers (#6891)
- Default prompt-cache TTL to 1h on first-party Anthropic (#7341)
Bug Fixes
- Show the Gemini 4 Argon quota group separately (#7283)
- Honor project and location for API-key inference (#7266)
- Preserve matched and orphan Vertex Argon tool images (#7280)
- Never bake Claude first-party's own intercept proxy (#7327)
- Map provider input overflow to context_length_exceeded (#7352)
- Handle replayed hosted web-search history (#7250, #7269) (#7353)
- Keep tool loops on one target and make failover history safe (#7298) (#7354)
- Absorb community failover fixes (#7317, #7329, #7339, #7320) (#7355)
- Scope an inherited transpiler cache to the Bun version it starts (#7362)
- Scope server children's transpiler cache and keep scoping idempotent (#7364)
Chores
- Sign Windows binaries and MSI via SignPath (#7207) (#7356)
- Remove opencode-free and migrate saved configs (#7351)
- Register combo-tool-loop-pin in the core module inventory (#7357)
- Keep ACL subprocess work out of cache and registration assertions (#7358)
- Let the final-EPERM quarantine see through Windows 8.3 TEMP aliases (#7359)
- Await the fallback lease release on both passthrough relays (#7360)
- Compare the default containment result through the native resolver (#7361)
- Hold early client bytes in the socks5 egress fixture (#7363)
- Assert the scoped env and versioned bundled runtime in source oracles (#7365)
Other Changes
- Open dev at 2.89.0 before releasing 2.88.0 (#7263)
- Promote dev 52c326b479 to main as 2.89.0 (#7372)
Changelog
Full Changelog: https://github.com/lidge-jun/opencodex/compare/v2.88.0...v2.89.0
- #6814 feat(combos): opt-in advisory quota signals for JEV decisions (P1) @geunwoojun99
- #6891 feat(messaging): add explicit enrolled Codex SSH peers @phillipod
- #7153 feat(accounts): auto-pause repeated permanent account refusals @lidge-jun
- #7263 chore(release): open dev at 2.89.0 before releasing 2.88.0 @github-actions[bot]
- #7266 fix(vertex): honor project and location for API-key inference @andrew05060414
- #7280 fix(google): preserve matched and orphan Vertex Argon tool images @Jossi02
- #7282 feat(compatibility): separate custom-tool grammar evidence from representation @lidge-jun
- #7283 fix(antigravity): show the Gemini 4 Argon quota group separately @lidge-jun
- #7284 feat(combos): let a combo set its catalog row description (#7229) @lidge-jun
- #7285 feat(responses): opt-in compression of outbound ChatGPT Responses request bodies @lidge-jun
- #7286 feat(codex): opt-in OS desktop notification for low-quota protection @lidge-jun
- #7287 feat(providers): explicit single-model completion test @lidge-jun
- #7327 fix(service): never bake Claude first-party's own intercept proxy @scy7796
- #7341 feat(anthropic): default prompt-cache TTL to 1h on first-party Anthropic @lidge-jun
- #7351 chore(providers): remove opencode-free and migrate saved configs @lidge-jun
- #7352 fix(sidecar): map provider input overflow to context_length_exceeded @lidge-jun
- #7353 fix(responses): handle replayed hosted web-search history (#7250, #7269) @lidge-jun
- #7354 fix(combos): keep tool loops on one target and make failover history safe (#7298) @lidge-jun
- #7355 fix(combos): absorb community failover fixes (#7317, #7329, #7339, #7320) @lidge-jun
- #7356 ci(release): sign Windows binaries and MSI via SignPath (#7207) @lidge-jun
- #7357 test(responses): register combo-tool-loop-pin in the core module inventory @li