Published to npm as @bitkyc08/opencodex@2.100.0 with dist-tag latest.
New Features
- Add lightweight Rust ocx-child ephemeral Child relay and offline journal (#8237)
- Zero-preinstall SSH ocx-child planting, --purge detach, and #remote UX (#8255)
- Index filtered ledger queries and resume append ingestion (#8391)
- Sync route intent and materialize clients per device (#8274) (#8276)
- Add an opt-in thinking display policy per provider and model (#8392)
- Re-land #8392: feat(anthropic): add an opt-in thinking display policy per provider and model (#8406)
- Extend opt-in cache continuation diagnostics (#7479)
- Add cheapaimodel API-key preset (#7899)
- Default-on anonymous telemetry core with a human-only consent boundary (#8300)
- Windows installer page to disclose telemetry and opt out at install time (#8348)
- Telemetry consent popup on first run and after updates, with an Advanced toggle (#8303)
- Cloudflare Worker + D1 collector and public stats API (#8304)
- Public usage dashboard at opencodex.me/dashboard (#8308)
- Opt-in public profile and personal usage rank (#8393)
- Add jevEffortMode to keep JEV from re-tiering a cache-sensitive target (#8041)
- Add Claude Fable 5.2 pricing, fast mode and provider rows (#8466)
Bug Fixes
- Configure Google Vertex ADC (#8311)
- Show WorkBuddy credit balance in quota bar (#8323)
- Stop the prompt-cache usage leak — replay native Messages on Anthropic children (#7374)
- Release preview and stable from verified dev commits (#8328)
- Fix Windows release attachment contract test harness (#8335)
- Show verified Claude account in provider overview (#8334)
- Diagnose Windows native-main claim setup failures (#8341)
- Accept one leading UTF-8 BOM (#8205)
- Count supplementary Han in token estimates (#8207)
- Stop after the first terminal event (#8209)
- Preserve final citation titles (#8198)
- Serialize Lab public-evidence mutation with an OS-held lock and compare Lab file identity with bigint stat (#8035)
- Keep Codex metadata frames from committing a combo child (#8107) (#8152)
- Show subscription quota in provider reports (#7916)
- Show Claude account email when privacy.maskEmails is false (#8364)
- Stream progress while watching a dispatched release (#8367)
- Support native image input through stable replay (#7978)
- Replace repeated text-done snapshots (#8197)
- Name the active Claude account in the provider Overview (#8296)
- Keep Aside aggregate current when unselected profiles are absent (#8373)
- Serve ocx link status over a private local control socket (#8370)
- Raise Child preflight output cap and name the limit (#8380)
- Explain a refused Remember instead of reporting the admin token unverifiable (#8374)
- Retry a read-only Windows catalog replacement (#8382)
- Report an unavailable provider preset as a usage error (#8310)
- Read Kimi Coding Plan usage from the regional kimi.ai origin (#8399)
- Probe the app-bundled CLI when no Codex CLI resolves (#8395)
- Show the Child's own reason when ocx link add fails (#8390)
- Keep Auto negotiation off real DNS in tests and survive a mid-negotiation account switch (#8389)
- Keep bun's postinstall enabled on npm 11 and diagnose a skipped one (#8387)
- Recover Aside overwrite previews instead of failing silently (#8384)
- Stop warning about an uninstalled owned client on every model toggle (#8353)
- Reclaim stale shim restore lock with several dead owners (#8349)
- Report an untyped SSE error envelope as response.failed (#8299)
- Clear replayed thought signatures on a real HTTP 400 (#8054) (#8150)
- Prove an unbound non-loopback address absent by binding it (#8045) (#8046)
- Re-land #8399: fix(quota): read Kimi Coding Plan usage from the regional kimi.ai origin (#8403)
- Re-land #8395: fix(codex): probe the app-bundled CLI when no Codex CLI resolves (#8404)
- Re-land #8390: fix(link): show the Child's own reason when ocx link add fails (#8407)
- Re-land #8389: fix(copilot): keep Auto negotiation off real DNS in tests and survive a mid-negotiation account switch (#8408)
- Re-land #8387: fix(update): keep bun's postinstall enabled on npm 11 and diagnose a skipped one (#8409)
- Re-land #8384: fix(gui): recover Aside overwrite previews instead of failing silently (#8410)
- Re-land #8353: fix(integrations): stop warning about an uninstalled owned client on every model toggle (#8411)
- Re-land #8349: fix(codex): reclaim stale shim restore lock with several dead owners (#8413)
- Re-land #8150: fix(google): clear replayed thought signatures on a real HTTP 400 (#8054) (#8414)
- Let T3 Code start opencodex models with an effort (#8085)
- Honor native OpenAI display name overrides (#8234)
- Extend streaming protocol support and allow ten-minute recordings (#8232)
- Keep OpenGateway lifecycle output_text from reading as an empty completion (#8376)
- Stop killing blocked Claude Keychain reads (#8327)
- Fix encrypted orphan reasoning replay for opted-in Ark Kimi endpoints (#8097)
- Borrow the app-bundled catalog only when no Codex CLI resolved (#8419)
- Preserve Chat tool defaults on OpenAI Responses routes (#8144)
- Keep a Claude Code session's cache key and pooled account across turns (#8371)
- Wait out a manual launchd bootout before reporting failure (#8385)
- Classify Meta's Muse Code refusal as a plan restriction (#8396)
- Wait for complete owner metadata during first registration (#8270)
- Run the install serving the Child before Desktop or PATH copies (#8424)
- Preserve Codex client metadata on routed requests (#8193)
- Wait for a concurrently created filter index instead of calling it foreign (#8439)
- Preserve provider drafts and bind saves to their dashboard target (#8438)
- Keep the filter index's WAL sidecars so filtered queries stop churning the config directory (#8442)
Documentation
- GOAT link, official-API commercial note, account pool under Advanced usage (#8006)
- Plan automatic update parity (#8275)
- Add offline signed-update verification and checkpoint codec (#8294)
- Plan default-on (opt-out) telemetry and the opencodex.me usage dashboard (#8293)
- Design Child-to-Home account move over Remote Link (OCX-4) (#7495)
- Describe history reconciliation and attested resume (#8346)
- Scope the Remember proxy refusal to standalone dashboards and list its code (#8394)
- Add custom gateway verification guide (#8350)
- Re-land #8394: docs: scope the Remember proxy refusal to standalone dashboards and list its code (#8405)
- Re-land #8350: docs(providers): add custom gateway verification guide (#8412)
- Follow-ups to the re-landed Remember, custom gateway and owned-refresh changes (#8418)
- Note that the per-turn tk token is dropped from session identity (#8421)
- Telemetry and privacy guide plus configuration reference (#8305)
- Redesign landing, navigation, and theme (#8005)
Chores
- Add targeted Windows native claim diagnostic lane (#8345)
- Use independent expected paths in the Windows release PATH contract (#8366)
- Run heavy Linux jobs on the lidge self-hosted pool for trusted runs (#8369)
- Pin release evidence policy to the current ci.yml (#8377)
- Remove retired release branch references (#8381)
- Restore Overview account-label test globals exactly (#8375)
- Skip sockets when checking assertion persistence (#8400)
- Add offline schema fixtures for Issue #6469 (#8078)
- Revert 14 PRs admin-merged on CI alone without required review (#8402)
- State the filter index availability contract Windows can reach (#8440)
- Run the attach step from a script file so Windows keeps its backslashes (#8437)
- Review the signed-update verification modules in the update lint (#8445)
- Give each Desktop lifecycle case the budget its child process already has (#8441)
- Name the input that moved when the warm aggregate rebuilds (#8459)
- Derive toolchain homes from the rustup proxy and report them on failure (#8458)
- Refresh the Windows shard durations from batch 42694893702 (#8463)
- Read the warm base after the stage's work and name a Windows ChangeTime move (#8462)
- Refresh the shared shard durations from Ubuntu and macOS logs (#8465)
Changelog
Full Changelog: 0627a2c...v2.100.0
- #7374 fix(combo): stop the prompt-cache usage leak — replay native Messages on Anthropic children @vadymhimself
- #7479 feat(usage): extend opt-in cache continuation diagnostics @yuanyuanlove
- #7495 docs(devlog): design Child-to-Home account move over Remote Link (OCX-4) @lidge-jun
- #7899 feat(providers): add cheapaimodel API-key preset @nicho810
- #7916 fix(claude-cli): show subscription quota in provider reports @wtfsayo
- #7978 fix(claude-cli): support native image input through stable replay @nickdavis
- #8005 docs(site): redesign landing, navigation, and theme @Ingwannu
- #8006 docs(readme): GOAT link, official-API commercial note, account pool under Advanced usage @lidge-jun
- #8035 fix: serialize Lab public-evidence mutation with an OS-held lock and compare Lab file identity with bigint stat @lidge-jun
- #8041 feat(combo): add jevEffortMode to keep JEV from re-tiering a cache-sensitive target @andrew05060414
- #8046 fix(start): prove an unbound non-loopback address absent by binding it (#8045) @andrew05060414
- #8078 test(claude-cli): add offline schema fixtures for Issue #6469 @adirwt852-cloud
- #8085 fix(t3code): let T3 Code start opencodex models with an effort @mushikingh
- #8097 Fix encrypted orphan reasoning replay for opted-in Ark Kimi endpoints @hyperdai
- #8144 fix: preserve Chat tool defaults on OpenAI Responses routes @Simon-Opopeee
- #8150 fix(google): clear replayed thought signatures on a real HTTP 400 (#8054) @Ingwannu
- #8152 fix(combos): keep Codex metadata frames from committing a combo child (#8107) @Ingwannu
- #8193 fix(responses): preserve Codex client metadata on routed requests @ParsifalC
- #8197 fix(sidecars): replace repeated text-done snapshots @oocheol
- #8198 fix(sidecars): preserve final citation titles @oocheol
- #8205 fix(jsonc): accept one leading UTF-8 BOM @oocheol
- #8207 fix(usage): count supplementary Han in token estimates @oocheol
- #8209 fix(sidecars): stop after the first terminal event @oocheol
- #8232 fix(dictation): extend streaming protocol support and allow ten-minute recordings @colthreepv
- #8234 fix(exports): honor native OpenAI display name overrides @colthreepv
- #8237 feat(link): add lightweight Rust ocx-child ephemeral Child relay and offline journal @lidge-jun
- #8255 feat(link): zero-preinstall SSH ocx-child planting, --purge detach, and #remote UX @lidge-jun
- #8270 fix(config): wait for complete owner metadata during first registration @luvs01
- #8275 docs: plan automatic update parity @lidge-jun
- #8276 feat(link): sync route intent and materialize clients per device (#8274) @lidge-jun
- #8293 docs(devlog): plan default-on (opt-out) telemetry and the opencodex.me usage dashboard @lidge-jun
- #8294 Add offline signed-update verification and checkpoint codec @lidge-jun
- #8296 fix(gui): name the active Claude account in the provider Overview @afgonullu
- #8299 fix(relay): report an untyped SSE error envelope as response.failed @Ingwannu
- #8300 feat(telemetry): default-on anonymous telemetry core with a human-only consent boundary @lidge-jun
- #8303 feat(gui): telemetry consent popup on first run and after updates, with an Advanced toggle @lidge-jun
- #8304 feat(telemetry-collector): Cloudflare Worker + D1 collector and public stats API @lidge-jun
- #8305 docs(telemetry): telemetry and privacy guide plus configuration reference @lidge-jun
- #8308 feat(docs-site): public usage dashboard at opencodex.me/dashboard @lidge-jun
- #8310 fix(cli): report an unavailable provider preset as a usage error @shu-chen-dot-ca
- #8311 fix(gui): configure Google Vertex ADC @lidge-jun
- #8323 fix(gui): show WorkBuddy credit balance in quota bar @lidge-jun
- #8327 fix(oauth): stop killing blocked Claude Keychain reads @gaurav0107
- #8328 Release preview and stable from verified dev commits @lidge-jun
- #8334 fix(gui): show verified Claude account in provider overview @lidge-jun
- #8335 Fix Windows release attachment contract test harness @lidge-jun
- #8341 Diagnose Windows native-main claim setup failures @lidge-jun
- #8345 ci: add targeted Windows native claim diagnostic lane @lidge-jun
- #8346 docs(release): describe history reconciliation and attested resume @MannXo
- #8348 feat(desktop): Windows installer page to disclose telemetry and opt out at install time @lidge-jun
- #8349 fix(codex): reclaim stale shim restore lock with several dead owners @Ingwannu
- #8350 docs(providers): add custom gateway verification guide @lidge-jun
- #8353 fix(integrations): stop warning about an uninstalled owned client on every model toggle @lidge-jun
- #8364 fix(gui): show Claude account email when privacy.maskEmails is false @lidge-jun
- #8366 test: use independent expected paths in the Windows release PATH contract @lidge-jun
- #8367 fix(release): stream progress while watching a dispatched release @lidge-jun
- #8369 ci: run heavy Linux jobs on the lidge self-hosted pool for trusted runs @lidge-jun
- #8370 fix(link): serve ocx link status over a private local control socket @lidge-jun
- #8371 fix(claude): keep a Claude Code session's cache key and pooled account across turns @vadymhimself
- #8373 fix(integrations): keep Aside aggregate current when unselected profiles are absent @lidge-jun
- #8374 fix(gui): explain a refused Remember instead of reporting the admin token unverifiable @lidge-jun
- #8375 test(gui): restore Overview account-label test globals exactly @lidge-jun
- #8376 fix(responses): keep OpenGateway lifecycle output_text from reading as an empty completion @lidge-jun
- #8377 ci: pin release evidence policy to the current ci.yml @lidge-jun
- #8380 fix(link): raise Child preflight output cap and name the limit @lidge-jun
- #8381 chore: remove retired release branch references @lidge-jun
- #8382 fix(codex): retry a read-only Windows catalog replacement @lidge-jun
- #8384 fix(gui): recover Aside overwrite previews instead of failing silently @lidge-jun
- #8385 fix(service): wait out a manual launchd bootout before reporting failure @lidge-jun
- #8387 fix(update): keep bun's postinstall enabled on npm 11 and diagnose a skipped one @lidge-jun
- #8389 fix(copilot): keep Auto negotiation off real DNS in tests and survive a mid-negotiation account switch @lidge-jun
- #8390 fix(link): show the Child's own reason when ocx link add fails @lidge-jun
- #8391 perf(usage): index filtered ledger queries and resume append ingestion @lidge-jun
- #8392 feat(anthropic): add an opt-in thinking display policy per provider and model @lidge-jun
- #8393 feat(telemetry): opt-in public profile and personal usage rank @lidge-jun
- #8394 docs: scope the Remember proxy refusal to standalone dashboards and list its code @lidge-jun
- #8395 fix(codex): probe the app-bundled CLI when no Codex CLI resolves @lidge-jun
- #8396 fix(providers): classify Meta's Muse Code refusal as a plan restriction @lidge-jun
- #8399 fix(quota): read Kimi Coding Plan usage from the regional kimi.ai origin @lidge-jun
- #8400 test(responses): skip sockets when checking assertion persistence @lidge-jun
- #8402 Revert 14 PRs admin-merged on CI alone without required review @lidge-jun
- #8403 Re-land #8399: fix(quota): read Kimi Coding Plan usage from the regional kimi.ai origin @lidge-jun
- #8404 Re-land #8395: fix(codex): probe the app-bundled CLI when no Codex CLI resolves @lidge-jun
- #8405 Re-land #8394: docs: scope the Remember proxy refusal to standalone dashboards and list its code @lidge-jun
- #8406 Re-land #8392: feat(anthropic): add an opt-in thinking display policy per provider and model @lidge-jun
- #8407 Re-land #8390: fix(link): show the Child's own reason when ocx link add fails @lidge-jun
- #8408 Re-land #8389: fix(copilot): keep Auto negotiation off real DNS in tests and survive a mid-negotiation account switch @lidge-jun
- #8409 Re-land #8387: fix(update): keep bun's postinstall enabled on npm 11 and diagnose a skipped one @lidge-jun
- #8410 Re-land #8384: fix(gui): recover Aside overwrite previews instead of failing silently @lidge-jun
- #8411 Re-land #8353: fix(integrations): stop warning about an uninstalled owned client on every model toggle @lidge-jun
- #8412 Re-land #8350: docs(providers): add custom gateway verification guide @lidge-jun
- #8413 Re-land #8349: fix(codex): reclaim stale shim restore lock with several dead owners @lidge-jun
- #8414 Re-land #8150: fix(google): clear replayed thought signatures on a real HTTP 400 (#8054) @lidge-jun
- #8418 docs: follow-ups to the re-landed Remember, custom gateway and owned-refresh changes @lidge-jun
- #8419 fix(codex): borrow the app-bundled catalog only when no Codex CLI resolved @lidge-jun
- #8421 docs(claude-code): note that the per-turn tk token is dropped from session identity @lidge-jun
- #8424 fix(link): run the install serving the Child before Desktop or PATH copies @lidge-jun
- #8437 test(release): run the attach step from a script file so Windows keeps its backslashes @lidge-jun
- #8438 fix(gui): preserve provider drafts and bind saves to their dashboard target @lidge-jun
- #8439 fix(usage): wait for a concurrently created filter index instead of calling it foreign @lidge-jun
- #8440 test(usage): state the filter index availability contract Windows can reach @lidge-jun
- #8441 test(clients): give each Desktop lifecycle case the budget its child process already has @lidge-jun
- #8442 fix(usage): keep the filter index's WAL sidecars so filtered queries stop churning the config directory @lidge-jun
- #8445 test(update): review the signed-update verification modules in the update lint @lidge-jun
- #8458 test(rust): derive toolchain homes from the rustup proxy and report them on failure @lidge-jun
- #8459 test(usage): name the input that moved when the warm aggregate rebuilds @lidge-jun
- #8462 test(usage): read the warm base after the stage's work and name a Windows ChangeTime move @lidge-jun
- #8463 ci: refresh the Windows shard durations from batch 42694893702 @lidge-jun
- #8465 ci: refresh the shared shard durations from Ubuntu and macOS logs @lidge-jun
- #8466 feat(anthropic): add Claude Fable 5.2 pricing, fast mode and provider rows @lidge-jun
Code signing
Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.