lidge-jun/opencodex v2.100.3 on GitHub

Published to npm as @bitkyc08/opencodex@2.100.3 with dist-tag latest.

New Features

Carry Claude Code's Advisor server tool on the translated Messages path (#8516)
Record the Anthropic pool account tag on each attempt (#8520)
Say why an API-key balance is unknown and when it was last read (#8519)
Opt-in admit policy for curated selections and honest arrival status (#8511)
Update, sync and restart Codex on linked Children from the Home (#8513)
Remember devices behind an operator-named reverse proxy (#8518)
Opt-in per-provider alias templates (#8512)
Ocx sync --child and --restart-children for linked Children (#8526)
Opt-in pool-only policy keeps automatic Pool routing off native main (#8536)
Record Child tunnel transitions in the diagnostics file (#8539)
Scope custom tools by model (#7507)
Codex CLI update tab over the existing plan/apply/jobs API (#8540)
Add opt-in question-only consultations (#7526)
Opt-in SSH log capture for Remote Link tunnels (#8551)
Read-only Remote Link diagnostics viewer (CLI, route, dashboard) (#8555)
Hand the stop deadline to ocx stop and read the Windows stop reasons (#7771 slice 3) (#8560)
Checked Windows stop primitives and operations, unwired (#7771 slice 1) (#8564)
Fan out Home catalog changes to Children automatically; ocx link policy (#8557)
Child versions, actions and automation policy on the Remote Link page (#8581)
Add read-only existing-session resume preflight (#8273)
Choose which Claude reset grant to spend (#8595)
Measure the bytes each Remote Link carries and record request body size on log rows (#8584)
Compress Child request bodies with zstd for a Home that accepts it (#8594)
The Home accepts the Responses WebSocket over a Remote Link, behind a closed release gate (#8593)
Let a Remote Link use several SSH routes, preferring direct ones over the relay (#8602)
Add, remove and reorder a Remote Link's routes with ocx link routes (#8603)
Let a Remote Link carry an explicit, exclusive SSH route (#8615)
GUI pairing local step-up authorization for Desktop mutations (#8427)
Teach a Child its Home's link WebSocket state and open the Home leg (not wired yet) (#8614)
Device-code login for Grok accounts on headless hosts (#8436)
Wire the checked Windows stop into every stop path (#7771 slice 2) (#8573)
Journal ocx link add and revoke under an operation id, with --require-ephemeral (#8623)
A Child carries Codex's Responses WebSocket over its link when the Home advertises it (behind a closed Child gate) (#8619)
Route Gemini 4 Hydrogen's discovered xhigh tier through the CLI User-Agent (#8636)
Provider cache affinity for multi-key routes (#7738)
Support live Publisher Models discovery, gemini-4-carbon, and gemini-4-hydrogen (#8583)
Add opt-in plaintext V2 subagent mode (#7376)
Child link WebSocket counters and a Child-local opt-out (#8620)
Recover a force-revoked ephemeral Child by its link id (ocx-child owner record /2, detach --expect-link, ocx link recover) (#8612)
Fill ocx-child builds under ocx-child-builds/ when an upgraded Home starts, from digests in its verified package (#8624)
Sync route intent and materialize clients per device (re-land #8276) (#8416)
Carry Codex's Responses WebSocket over the Remote Link when the Home advertises it (closed gate) (#8653)
Try the WebSocket upgrade when the Child has no answer from its Home yet (closed gate) (#8682)
Register the Morph Ultra plan preset (#8663)
An explicit route may name its SSH identity file (link.route/2) (#8714)

Bug Fixes

Refuse the provider-table switch on Codex 0.166+ with paginated openai threads (#8510)
Find a Claude Code session by any turn's user_id (#8423)
Name the earliest cooldown recovery in combo_unavailable (#8522)
Read Windows process command lines in process (#8487)
Keep a next-line comment out of the v2 thread limit (#8478)
Lift 429 quota cooldowns from a background usage read (carry #8504) (#8531)
Admit integration and client-disconnect writes after config-root ACL work (#8532)
Preserve explicit persisted cooldown clears (#8514)
Release an interrupted Windows update marker once its supervisor is gone (#8534)
Read management health and link the account-mode badge (#8535)
Let Claude Code auto mode's server review through the native OAuth lane (#8507)
Strip replayed reasoning_content from message history for Mistral Chat (#8432)
Stop a quoted memory-citation tag from truncating answers (#8044)
Resolve omitted output caps by Claude model id, not row name (#8533)
Name a witnessless update marker and its recovery on refusal (#8541)
Keep a comment out of the GUI endpoint parity sweep (#8544)
Repair the Windows installer tests broken by #8534 (#8548)
Wait once for the config-root ACL flight before a CLI command writes (#8547)
Windows dev-red from #8541 and #8551 (hint path separator, capture queue flood) (#8559)
Yield between costly ledger rows (#8455)
Page filtered index reads in offset order (#8479)
Recover a same-host record left by an earlier lifetime of this PID (#8562)
Keep health probes responsive under contention (#8456)
Replay the tool result as root text for Auto and guard its envelope echo (#8567)
Serve /v1/hub-state on hub-link for standalone Homes (#8550)
Children owned by the desktop app or a service can leave and re-link from the Home (#8529)
Never spawn the Claude Keychain lookup synchronously (#8161) (#8569)
Keep an Anthropic refresh retryable when its first connection is refused (#8578)
Restore the short filter-index busy back-off (#8580)
Warn once per session on eagerly expanded Codex MCP catalogs (#8133)
Flag a Codex pool account flipping between two weekly windows (#8579)
Make Identity Center login work in the dashboard (#8084)
Fix native Responses recovery after prelude-only EOF (#8292)
Count reset selection against the buffered turn ceiling (#8430)
Fallback on provider moderation refusal (#8428)
Fix nested model selectors in Pi exports (#8287)
Refuse a prepared relay body that ends before its declared Content-Length (#8611)
Cap a late grant at the first deadline and keep the orphan flag for an unreadable pidfile (#8610)
Decode the hold check's body copy only after the request is accepted, under the resolved inbound limit (#8613)
Keep a multi-route link blocked while an unreadable pidfile or a reload may hide an earlier tunnel (#8616)
Enable Claude Messages replay consultation (#8484)
Send the full tool contract and native effort to Kiro Claude models (#8451)
Show passive API-key rate-limit headroom (#8297)
Keep the orphan checks working when a stale pidfile cannot be removed, and check a gained link's pidfile even without a flag (#8621)
Name the leftover link key and trust-file refusals on the Remote Link page (#8617)
While the link WebSocket feature is on, a stalled Remote Link reader no longer makes the Home read 32 MiB ahead, and no turn keeps a second parsed copy of its request (#8622)
Settle a gaining link from its pidfile when a reload restarts it, and let every pidfile removal fail softly (#8626)
Send SIGKILL to a one-route ssh that ignores SIGTERM, keep a stopped one-route child owned until it exits, and fix orphan wording (#8640)
Name the Windows purge for a Windows Child and show Child commands as chips (#8637)
The link WebSocket's memory acceptance passes: a link socket no longer re-serializes its create, and the HTTP relay reports its own stall (#8625)
Warn once when a stopped one-route child's exit stays unseen, and describe the tunnel drain accurately (#8643)
Verify pnpm global-store installs against the store pnpm names (#8331)
Warn once when a draining stop holds the lifecycle queue on an exit never seen, and finish the drain wording (#8646)
Operation journal follow-ups: a link kept down (and shown) after an uncertain revoke, durable revoke marks, and a journal that cannot lock a Home out (#8638)
Report an untyped SSE error envelope as response.failed (re-land #8299) (#8415)
Let max and ultra select Hydrogen's xhigh tier and record its CCA verification (#8644)
Recover waits while another link names the alias, and a forced revoke's tombstone no longer outlives a revoke that threw (#8661)
A link with an explicit route reads no ssh_config (#8657)
Drain Child link sockets before a restart stops the tunnel, and count only sockets Codex opened (#8658)
Link WebSocket readiness follow-ups: settled memory acceptance, the Home counts link sockets, and the review nits of #8622 and #8625 (#8647)
Keep test git off the developer's repository when GIT_DIR is inherited (#8652)
The CLI explains journal refusals and unfinished revokes from a truth table; the operation journal keeps replays for at least 2 hours (#8654)
Remote Link recovery texts never send the operator to disconnect a Child another link owns (#8685)
A revoke names its link (disconnect --expect-link), and no revoke removes a tombstone it did not write (#8662)
Remedies check the machine before any disconnect, and a bound detach finishes its own interrupted attach (#8691)
Bind every failed-enrollment step to the attempt's link id, and finish a bound detach killed while restoring its own attach (#8694)
Stop the local-credential observer when the runtime recycles to standalone (#8710)
Read the CLI update job ledger again when a concurrent write replaced it (#8712)
Refuse an identity file in a directory others can write, and correct the missing-key docs (#8718)
Identity-file refusal advice never reads as changing /tmp (#8722)

Documentation

Add Homebrew Cask installation guide across locales (#8076)
Correct PR hygiene trusted-ref comment and policy history (#8426)
Point compaction combos at cooldown recovery (#8537)
Design for a Windows service stop that frees the port (#8546)
Add Spanish website and documentation (#7559)
Mirror English changes that landed after the Spanish docs base (#8633)
Mirror the Gemini 4 Hydrogen Antigravity sentence from #8636 (#8639)
Mirror English changes that landed after the previous parity fix (#8648)
Move the link WebSocket gate-opening work to a devlog unit, and make the fingerprints test assert the exact count after each change of state (#8679)

Chores

Run the unsharded macOS control only on its own lane (#8521)
Require service evidence before packaging starts (#8523)
Read the native-main auth.json through one module (#7345 part 1a) (#7918)
Run the three PR gates as one pull_request_target workflow (#8542)
Register advisor-question in the core module inventory (#8553)
Follow the stop message through described() after #8560 (dev-red) (#8565)
Make the ssh runner test guard a hang guard, not a timing race (#8582)
Expect Pi's server-owned refresh after #8287 (#8606)
Run Windows tests in fourteen shards with refreshed weights (#8605)
Control ACL time in the concurrent config-edit merge cases (#8629)
Run the activity-holds directory-sync seam on Windows too (#8628)
Hold large socket writes so pending-upload cases hold on Windows (#8627)
Record how the cert-trust warm-up child ended (#8631)
Run the npm orchestration scenarios under separate timeouts (#8641)
Install Rust for the Linux test shards and test-changed (#8630)
Lint and test ocx-child as a Linux step of the remote-helper job (#8635)
Hold the clock in the overflow-throttle cancellation case (#8660)
Supply Windows restart proof in cleanup fixtures (#8665)
Scope the async stdout-pipe probes to POSIX and pin the Windows outcome (#8666)
Select the inspection tee in its stalled-reader cases (#8671)
Retry the Reserve ingress fixture's start on a port collision (#8659)
Build pnpm store fixtures on native canonical paths (#8672)
Align the Windows restart entry of the update import inventory (#8673)
Wait for the activity holds state, not for one file event, in the link WebSocket fingerprints test (#8675)
Verify activity-holds crash points portably on Windows (#8669)
Record the attested digest of the pinned Codex for the link WebSocket release gate (#8668)
Report the Child's HTTP relay waiting for its reader to a test-only observer (#8680)
Hold the large Child write so the relay overload case holds on Windows (#8670)
Pin the Child relay wait observer across Home failures, queued aborts and cancels, and correct its comments (#8683)
Release-gate harness for the link WebSocket: a no-Origin assertion, the gate scenarios through the real Child, a Child restart measurement, and the Autobahn client conformance run (#8681)
The ocx-child cache fill tests account for a Windows Home, which never fills (#8687)
The Child's link WebSocket memory acceptance (design 6.3, 11.2-9), opt-in (#8686)
Skip the Cargo link WebSocket runs on Windows, where the link_websocket target does not finish (#8689)
Compare the linked worktree config with native canonical paths (#8690)
Import the retirement module by file path in subprocess cases (#8692)
Journal the Codex catalog path exactly as the fixture writes it (#8693)
Spread the real connect module in the route-intent recovery mock (#8700)
Make the revoke journal unreadable the same way on every platform (#8701)
Keep route-intent scenario children off real Windows ACL processes (#8707)
Compare the release-gate binary by native canonical path, and bound the cold ocx-child build apart from its conformance run (#8711)
Stop spawning POSIX binaries in two cases that run on Windows (#8713)
Answer requests the code under test did not send with 404 in the Droid default fixtures (#8715)
Give each macOS shard 30 minutes (owner decision) (#8717)
Wait for the switched target's read before counting it (#8719)
Fake the Windows manager stop in the parent-stop fixture too (#8716)
A POSIX identity-file check on Windows metadata refuses, as it must (#8724)

Changelog

Full Changelog: v2.100.2...v2.100.3

#7376 feat: add opt-in plaintext V2 subagent mode @luvs01
#7507 feat(responses): scope custom tools by model @Platinum-Scripts
#7526 feat(advisor): add opt-in question-only consultations @wanqianquexiaobai
#7559 docs(i18n): add Spanish website and documentation @federicorv25
#7738 feat(providers): provider cache affinity for multi-key routes @harshav167
#7918 refactor(codex): read the native-main auth.json through one module (#7345 part 1a) @MarcTCruz
#8044 fix(bridge): stop a quoted memory-citation tag from truncating answers @andrew05060414
#8076 docs(desktop): add Homebrew Cask installation guide across locales @Yuxin-Qiao
#8084 fix(kiro): make Identity Center login work in the dashboard @mushikingh
#8133 fix(responses): warn once per session on eagerly expanded Codex MCP catalogs @atinseau
#8273 feat(messaging): add read-only existing-session resume preflight @HojooonKim
#8287 Fix nested model selectors in Pi exports @lidge-jun
#8292 Fix native Responses recovery after prelude-only EOF @lidge-jun
#8297 Show passive API-key rate-limit headroom @lidge-jun
#8331 fix(update): verify pnpm global-store installs against the store pnpm names @lidge-jun
#8415 fix(relay): report an untyped SSE error envelope as response.failed (re-land #8299) @lidge-jun
#8416 feat(link): sync route intent and materialize clients per device (re-land #8276) @lidge-jun
#8423 fix(logs): find a Claude Code session by any turn's user_id @vadymhimself
#8426 docs(ci): correct PR hygiene trusted-ref comment and policy history @MannXo
#8427 feat(desktop): GUI pairing local step-up authorization for Desktop mutations @luvs01
#8428 fix(combo): fallback on provider moderation refusal @omar391
#8430 fix(responses): count reset selection against the buffered turn ceiling @lidge-jun
#8432 fix(chat): strip replayed reasoning_content from message history for Mistral Chat @Masih-0x3
#8436 feat(xai): device-code login for Grok accounts on headless hosts @vadymhimself
#8451 fix(kiro): send the full tool contract and native effort to Kiro Claude models @svc-aibot-363
#8455 fix(usage): yield between costly ledger rows @atinseau
#8456 fix(service): keep health probes responsive under contention @atinseau
#8478 fix(codex): keep a next-line comment out of the v2 thread limit @YashvanthSankar
#8479 fix(usage): page filtered index reads in offset order @lidge-jun
#8484 fix(advisor): enable Claude Messages replay consultation @lidge-jun
#8487 fix(config): read Windows process command lines in process @LilMGenius
#8507 fix(anthropic): let Claude Code auto mode's server review through the native OAuth lane @david-wang-0
#8510 fix(codex): refuse the provider-table switch on Codex 0.166+ with paginated openai threads @lidge-jun
#8511 feat(catalog): opt-in admit policy for curated selections and honest arrival status @lidge-jun
#8512 feat(aliases): opt-in per-provider alias templates @lidge-jun
#8513 feat(link): update, sync and restart Codex on linked Children from the Home @lidge-jun
#8514 fix(combos): preserve explicit persisted cooldown clears @medking82
#8516 feat(claude): carry Claude Code's Advisor server tool on the translated Messages path @lidge-jun
#8518 feat(dashboard): remember devices behind an operator-named reverse proxy @lidge-jun
#8519 feat(quota): say why an API-key balance is unknown and when it was last read @lidge-jun
#8520 feat(logs): record the Anthropic pool account tag on each attempt @lidge-jun
#8521 ci: run the unsharded macOS control only on its own lane @lidge-jun
#8522 fix(combos): name the earliest cooldown recovery in combo_unavailable @luvs01
#8523 ci(release): require service evidence before packaging starts @lidge-jun
#8526 feat(sync): ocx sync --child and --restart-children for linked Children @lidge-jun
#8529 fix(link): Children owned by the desktop app or a service can leave and re-link from the Home @lidge-jun
#8531 fix(anthropic-pool): lift 429 quota cooldowns from a background usage read (carry #8504) @lidge-jun
#8532 fix(config): admit integration and client-disconnect writes after config-root ACL work @lidge-jun
#8533 fix(anthropic): resolve omitted output caps by Claude model id, not row name @lidge-jun
#8534 fix(update): release an interrupted Windows update marker once its supervisor is gone @lidge-jun
#8535 fix(dashboard): read management health and link the account-mode badge @lidge-jun
#8536 feat(codex): opt-in pool-only policy keeps automatic Pool routing off native main @lidge-jun
#8537 docs(compaction): point compaction combos at cooldown recovery @lidge-jun
#8539 feat(link): record Child tunnel transitions in the diagnostics file @lidge-jun
#8540 feat(dashboard): Codex CLI update tab over the existing plan/apply/jobs API @lidge-jun
#8541 fix(update): name a witnessless update marker and its recovery on refusal @lidge-jun
#8542 ci: run the three PR gates as one pull_request_target workflow @lidge-jun
#8544 fix(dashboard): keep a comment out of the GUI endpoint parity sweep @lidge-jun
#8546 docs(devlog): design for a Windows service stop that frees the port @lidge-jun
#8547 fix(cli): wait once for the config-root ACL flight before a CLI command writes @lidge-jun
#8548 fix(update): repair the Windows installer tests broken by #8534 @lidge-jun
#8550 fix(link): serve /v1/hub-state on hub-link for standalone Homes @xdober
#8551 feat(link): opt-in SSH log capture for Remote Link tunnels @lidge-jun
#8553 test(responses): register advisor-question in the core module inventory @lidge-jun
#8555 feat(link): read-only Remote Link diagnostics viewer (CLI, route, dashboard) @lidge-jun
#8557 feat(link): fan out Home catalog changes to Children automatically; ocx link policy @lidge-jun
#8559 fix: Windows dev-red from #8541 and #8551 (hint path separator, capture queue flood) @lidge-jun
#8560 feat(desktop): hand the stop deadline to ocx stop and read the Windows stop reasons (#7771 slice 3) @lidge-jun
#8562 fix(start): recover a same-host record left by an earlier lifetime of this PID @lidge-jun
#8564 feat(service): checked Windows stop primitives and operations, unwired (#7771 slice 1) @lidge-jun
#8565 test(desktop): follow the stop message through described() after #8560 (dev-red) @lidge-jun
#8567 fix(cursor): replay the tool result as root text for Auto and guard its envelope echo @lidge-jun
#8569 fix(claude): never spawn the Claude Keychain lookup synchronously (#8161) @lidge-jun
#8573 feat(service): wire the checked Windows stop into every stop path (#7771 slice 2) @lidge-jun
#8578 fix(oauth): keep an Anthropic refresh retryable when its first connection is refused @lidge-jun
#8579 fix(quota): flag a Codex pool account flipping between two weekly windows @lidge-jun
#8580 fix(usage): restore the short filter-index busy back-off @lidge-jun
#8581 feat(gui): Child versions, actions and automation policy on the Remote Link page @lidge-jun
#8582 test(link): make the ssh runner test guard a hang guard, not a timing race @lidge-jun
#8583 feat(google-vertex): support live Publisher Models discovery, gemini-4-carbon, and gemini-4-hydrogen @xdober
#8584 feat(link): measure the bytes each Remote Link carries and record request body size on log rows @lidge-jun
#8593 feat(link): the Home accepts the Responses WebSocket over a Remote Link, behind a closed release gate @lidge-jun
#8594 feat(link): compress Child request bodies with zstd for a Home that accepts it @lidge-jun
#8595 feat(gui): choose which Claude reset grant to spend @lidge-jun
#8602 feat(link): let a Remote Link use several SSH routes, preferring direct ones over the relay @lidge-jun
#8603 feat(link): add, remove and reorder a Remote Link's routes with ocx link routes @lidge-jun
#8605 ci: run Windows tests in fourteen shards with refreshed weights @lidge-jun
#8606 test(sync): expect Pi's server-owned refresh after #8287 @lidge-jun
#8610 fix(link): cap a late grant at the first deadline and keep the orphan flag for an unreadable pidfile @lidge-jun
#8611 fix(link): refuse a prepared relay body that ends before its declared Content-Length @lidge-jun
#8612 feat(link): recover a force-revoked ephemeral Child by its link id (ocx-child owner record /2, detach --expect-link, ocx link recover) @lidge-jun
#8613 fix(link): decode the hold check's body copy only after the request is accepted, under the resolved inbound limit @lidge-jun
#8614 feat(link): teach a Child its Home's link WebSocket state and open the Home leg (not wired yet) @lidge-jun
#8615 feat(link): let a Remote Link carry an explicit, exclusive SSH route @lidge-jun
#8616 fix(link): keep a multi-route link blocked while an unreadable pidfile or a reload may hide an earlier tunnel @lidge-jun
#8617 fix(gui): name the leftover link key and trust-file refusals on the Remote Link page @lidge-jun
#8619 feat(link): a Child carries Codex's Responses WebSocket over its link when the Home advertises it (behind a closed Child gate) @lidge-jun
#8620 feat(link): Child link WebSocket counters and a Child-local opt-out @lidge-jun
#8621 fix(link): keep the orphan checks working when a stale pidfile cannot be removed, and check a gained link's pidfile even without a flag @lidge-jun
#8622 fix(responses): while the link WebSocket feature is on, a stalled Remote Link reader no longer makes the Home read 32 MiB ahead, and no turn keeps a second parsed copy of its request @lidge-jun
#8623 feat(link): journal ocx link add and revoke under an operation id, with --require-ephemeral @lidge-jun
#8624 feat(link): fill ocx-child builds under ocx-child-builds/ when an upgraded Home starts, from digests in its verified package @lidge-jun
#8625 fix(link): the link WebSocket's memory acceptance passes: a link socket no longer re-serializes its create, and the HTTP relay reports its own stall @lidge-jun
#8626 fix(link): settle a gaining link from its pidfile when a reload restarts it, and let every pidfile removal fail softly @lidge-jun
#8627 test(link): hold large socket writes so pending-upload cases hold on Windows @lidge-jun
#8628 test(link): run the activity-holds directory-sync seam on Windows too @lidge-jun
#8629 test(claude): control ACL time in the concurrent config-edit merge cases @lidge-jun
#8630 ci: install Rust for the Linux test shards and test-changed @lidge-jun
#8631 test(desktop): record how the cert-trust warm-up child ended @lidge-jun
#8633 docs(es): mirror English changes that landed after the Spanish docs base @lidge-jun
#8635 ci: lint and test ocx-child as a Linux step of the remote-helper job @lidge-jun
#8636 feat(antigravity): route Gemini 4 Hydrogen's discovered xhigh tier through the CLI User-Agent @lidge-jun
#8637 fix(remote-link): name the Windows purge for a Windows Child and show Child commands as chips @lidge-jun
#8638 fix(link): operation journal follow-ups: a link kept down (and shown) after an uncertain revoke, durable revoke marks, and a journal that cannot lock a Home out @lidge-jun
#8639 docs(es): mirror the Gemini 4 Hydrogen Antigravity sentence from #8636 @lidge-jun
#8640 fix(link): send SIGKILL to a one-route ssh that ignores SIGTERM, keep a stopped one-route child owned until it exits, and fix orphan wording @lidge-jun
#8641 test(update): run the npm orchestration scenarios under separate timeouts @lidge-jun
#8643 fix(link): warn once when a stopped one-route child's exit stays unseen, and describe the tunnel drain accurately @lidge-jun
#8644 fix(antigravity): let max and ultra select Hydrogen's xhigh tier and record its CCA verification @andrew05060414
#8646 fix(link): warn once when a draining stop holds the lifecycle queue on an exit never seen, and finish the drain wording @lidge-jun
#8647 fix(link): link WebSocket readiness follow-ups: settled memory acceptance, the Home counts link sockets, and the review nits of #8622 and #8625 @lidge-jun
#8648 docs(es): mirror English changes that landed after the previous parity fix @lidge-jun
#8652 fix(test): keep test git off the developer's repository when GIT_DIR is inherited @lidge-jun
#8653 feat(ocx-child): carry Codex's Responses WebSocket over the Remote Link when the Home advertises it (closed gate) @lidge-jun
#8654 fix(link): the CLI explains journal refusals and unfinished revokes from a truth table; the operation journal keeps replays for at least 2 hours @lidge-jun
#8657 fix(link): a link with an explicit route reads no ssh_config @lidge-jun
#8658 fix(link): drain Child link sockets before a restart stops the tunnel, and count only sockets Codex opened @lidge-jun
#8659 test(server): retry the Reserve ingress fixture's start on a port collision @lidge-jun
#8660 test(xai): hold the clock in the overflow-throttle cancellation case @lidge-jun
#8661 fix(link): recover waits while another link names the alias, and a forced revoke's tombstone no longer outlives a revoke that threw @lidge-jun
#8662 fix(link): a revoke names its link (disconnect --expect-link), and no revoke removes a tombstone it did not write @lidge-jun
#8663 feat(providers): register the Morph Ultra plan preset @lidge-jun
#8665 test(uninstall): supply Windows restart proof in cleanup fixtures @lidge-jun
#8666 test(claude-cli): scope the async stdout-pipe probes to POSIX and pin the Windows outcome @lidge-jun
#8668 test(link): record the attested digest of the pinned Codex for the link WebSocket release gate @lidge-jun
#8669 test(link): verify activity-holds crash points portably on Windows @lidge-jun
#8670 test(link): hold the large Child write so the relay overload case holds on Windows @lidge-jun
#8671 test(responses): select the inspection tee in its stalled-reader cases @lidge-jun
#8672 test(update): build pnpm store fixtures on native canonical paths @lidge-jun
#8673 test(update): align the Windows restart entry of the update import inventory @lidge-jun
#8675 test(server): wait for the activity holds state, not for one file event, in the link WebSocket fingerprints test @lidge-jun
#8679 docs(link): move the link WebSocket gate-opening work to a devlog unit, and make the fingerprints test assert the exact count after each change of state @lidge-jun
#8680 test(link): report the Child's HTTP relay waiting for its reader to a test-only observer @lidge-jun
#8681 test(link): release-gate harness for the link WebSocket: a no-Origin assertion, the gate scenarios through the real Child, a Child restart measurement, and the Autobahn client conformance run @lidge-jun
#8682 feat(link): try the WebSocket upgrade when the Child has no answer from its Home yet (closed gate) @lidge-jun
#8683 test(link): pin the Child relay wait observer across Home failures, queued aborts and cancels, and correct its comments @lidge-jun
#8685 fix(link): Remote Link recovery texts never send the operator to disconnect a Child another link owns @lidge-jun
#8686 test(link): the Child's link WebSocket memory acceptance (design 6.3, 11.2-9), opt-in @lidge-jun
#8687 test(link): the ocx-child cache fill tests account for a Windows Home, which never fills @lidge-jun
#8689 test(ocx-child): skip the Cargo link WebSocket runs on Windows, where the link_websocket target does not finish @lidge-jun
#8690 test(git): compare the linked worktree config with native canonical paths @lidge-jun
#8691 fix(link): remedies check the machine before any disconnect, and a bound detach finishes its own interrupted attach @lidge-jun
#8692 test(link): import the retirement module by file path in subprocess cases @lidge-jun
#8693 test(link): journal the Codex catalog path exactly as the fixture writes it @lidge-jun
#8694 fix(link): bind every failed-enrollment step to the attempt's link id, and finish a bound detach killed while restoring its own attach @lidge-jun
#8700 test(clients): spread the real connect module in the route-intent recovery mock @lidge-jun
#8701 test(link): make the revoke journal unreadable the same way on every platform @lidge-jun
#8707 test(clients): keep route-intent scenario children off real Windows ACL processes @lidge-jun
#8710 fix(client): stop the local-credential observer when the runtime recycles to standalone @lidge-jun
#8711 test: compare the release-gate binary by native canonical path, and bound the cold ocx-child build apart from its conformance run @lidge-jun
#8712 fix(codex): read the CLI update job ledger again when a concurrent write replaced it @lidge-jun
#8713 test: stop spawning POSIX binaries in two cases that run on Windows @lidge-jun
#8714 feat(link): an explicit route may name its SSH identity file (link.route/2) @lidge-jun
#8715 test(responses): answer requests the code under test did not send with 404 in the Droid default fixtures @lidge-jun
#8716 test(service): fake the Windows manager stop in the parent-stop fixture too @lidge-jun
#8717 ci: give each macOS shard 30 minutes (owner decision) @lidge-jun
#8718 fix(link): refuse an identity file in a directory others can write, and correct the missing-key docs @lidge-jun
#8719 test(gui): wait for the switched target's read before counting it @lidge-jun
#8722 fix(link): identity-file refusal advice never reads as changing /tmp @lidge-jun
#8724 test(link): a POSIX identity-file check on Windows metadata refuses, as it must @lidge-jun

Code signing

Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.