Published to npm as @bitkyc08/opencodex@2.6.18 with dist-tag latest.
Commit log
Changes since v2.6.17-preview.20260701:
- feat(cursor): add safe runTurn scaffold (d096dbd)
- feat(cursor): add connect framing helpers (aa8b06a)
- feat(cursor): add disabled oauth shell (2523037)
- feat(cursor): add mocked runTurn transport (85a9d3b)
- feat(cursor): expose safe static provider metadata (3400a40)
- test(cursor): add live smoke credential gate (572e1c6)
- feat(cursor): expose safe dashboard preset (107d1ad)
- feat(cursor): expand static model catalog (0521f60)
- fix(cursor): show complete static catalog (f6c2572)
- fix(cursor): preserve native codex catalog rows (9f941b2)
- feat(cursor): enable live transport bridge (08bc640)
- feat(cursor): complete native exec bridge coverage (e28efb4)
- fix(router): prefer OpenAI for bare GPT models (2e40aef)
- fix(cursor): preserve split connect frames (32117af)
- fix(cursor): treat empty Connect end-stream frame as success, not error (d825bc0)
- feat(oauth): implement standalone Cursor OAuth PKCE flow (d1338e9)
- feat(oauth): register Cursor as a standalone OAuth provider (3415a0e)
- feat(cli): show OAuth login status (incl cursor) in ocx status (d1405af)
- test(cursor): guard token precedence (managed apiKey beats forwarded header) (819f380)
- fix(cursor): send rootPromptMessagesJson as blob IDs (fixes 'Blob not found') (1ba87b3)
- fix(cursor): map reasoning effort into the model-id suffix (fixes bare-model not_found) (887b4f3)
- fix(cursor): map reasoning effort per-model to the real tier ceiling (ee1b4eb)
- fix(cursor): align claude catalog ids with the real Cursor names + advertise effort (2edb210)
- fix(cursor): de-speculate gpt/grok/gemini catalog to real Cursor bases (853d55a)
- feat(cursor): live GetUsableModels — filter the catalog to the account's models (81c3a64)
- fix(cursor): correct gpt-5.1-codex base to gpt-5.1-codex-max/-mini (cc17eea)
- feat(cursor): real MCP tool executor — make MCP tool-calls work end-to-end (74cfcfb)
- test(cursor): strengthen MCP executor coverage from independent review (aeaab09)
- feat(cursor): honest computer-use / record-screen executor hooks (61bffca)
- test(cursor): cover recordScreen dispatcher-boundary throw containment (a8aaa9b)
- feat(cursor/mcp): pass real MCP image bytes through + live stdio integration test (ae72ea9)
- fix(cursor/mcp): listMcpResources returns honest error when no executor is wired (d034db3)
- feat(cursor): bridge Responses tools through Cursor provider (6d2a4f4)
- fix(cursor): route Responses tools through request context (9487676)
- fix(cursor): decode native exec tool calls for Responses (03020ef)
- fix(cursor): continue synthetic Responses tool calls (abf195b)
- fix(cursor): preserve Responses tool result continuations (a6c4df6)
- test(oauth): use unregistered provider id for unsupported-provider assertion (3f5049f)
- fix(router): explicit defaultModel outranks known-model pattern routing (66550cb)
- fix(cursor): reconcile tool args + commit no-arg calls + fail closed on overlap (a46da53)
- test(cursor): pin native-exec no-arg advertised tool-call branch (b504ff7)
- feat(cursor): transport retry on pre-commit failures + first-frame timeout (2d9e28a)
- feat(cursor): actionable error classification + secret/path redaction (3136a02)
- fix(cursor): fail-closed truncation when turn ends with open tool calls (35c02a2)
- feat(cursor): mark usage as estimated + extend provider check (acec60f)
- feat(cursor): schema-aware tool-arg key normalization (c198cf1)
- feat(cursor): harden token refresh with timeout + bounded retry (d7495fe)
- fix(cursor): buffer client-tool args, normalize once at completion (e6abd28)
- fix(cursor): add composer-2.5-fast and align static catalog limits to jawcode SOT (5346fa1)
- fix(cursor): serialize parallel tool calls via deferred atomic emission (81a4a98)
- fix(cursor): stop double-counting context usage (absolute totalTokens vs additive output) (95c467a)
- fix(cursor): heartbeat during silent tool-call assembly to avoid upstream_stall_timeout (56a9052)
- fix(cursor): suppress post-terminal heartbeats with a state terminated guard (f264634)
- feat(models): remove per-provider All on/off buttons (3714d18)
- fix(cursor): make client tool calling round-trip via multi-turn continuation (6961b1c)
- fix(cursor): complete client tool round-trip via turn-1 done + full prompt replay (7a79953)
- fix(cursor): revocable grace finalize closes parallel client-tool race (6a9f89a)
- fix(cursor): report checkpoint context as visible usage (1edf197)
- fix(codex): cap spark context window (e0a1134)
- fix(usage): fold ChatGPT pool and OpenAI passthrough into one openai usage row (cc1af90)
- feat(adapters): tool-catalog nudge for non-OpenAI models + cursor live model discovery (cc59cc5)
- fix(google): list Generative Language models via x-goog-api-key + /v1beta (84cef2f)
- feat(net): outbound proxy support + models fetch failure cooldown (6cb379b)
- fix(platform): Windows/Linux deploy stability — encoding, graceful stop, loopback, spawn hardening (ff6916a)
- fix(platform): loop 2 — catalog .cmd probe, OAuth dual-bind, hostname-aware stop, ~ expansion, Git-Bash shim (bc77469)
- fix(lifecycle): loop 3 — identity-checked runtime-first liveness, stale-path detection, stop-before-update (6fa9d95)
- fix(lifecycle): loop 4 — review findings: update transaction hardening, IPv6 probe URLs, ~ parity (ce4e526)
- fix(lifecycle): loop 5 — service-aware update stop gate, purge install state on helper uninstall (49f9700)
- feat(gui): add maintenance sync and update actions (29177a3)
- fix(lifecycle): loop 6 — stale-pid purge, orphan-proxy recovery, IPv6 URL/NO_PROXY parity (a635b09)
- fix(platform): loop 7 — OAuth ::1 conflict fallback, bind-race retry, Windows service write order (5b8e9e2)
- fix(history): surface skipped Codex history restore instead of silent no-op, retry on lock (73e12b8)
- feat(cli): ocx restore back — reverse switch onto the running proxy (c63b5b5)
- fix(lifecycle): loop 8 — adversarial-review findings on loops 6-7 (858f14f)
- fix(cursor): loop 9 — answer interactionQuery, complete shellResult frames, WP2b/WP1/P0 (9340872)
- feat(cursor): WP3 — refuse native file mutations when apply_patch is advertised (72c9c9f)
- test(cursor): privacy-scan-safe fixtures in cursor-errors redaction tests (5c77524)