Published to npm as @bitkyc08/opencodex@2.6.28-preview.20260707 with dist-tag preview.
Commit log
Changes since v2.6.27-preview.20260705:
- feat: decode zstd/gzip/deflate request bodies on /v1/responses (c1c73b6)
- fix: tighten decodeRequestBody input type for tsc (db263ad)
- feat: Design B injection - point built-in openai provider at the proxy (eea62f1)
- fix: honest inject message when a user-owned openai_base_url blocks routing (b7db948)
- test+docs: Design B integration tests, README note, devlog closeout (27ff84f)
- docs: narrow the history-safe injection claim to what actually ships (48fc188)
- feat: background history-migration guardian for the Design B upgrade path (c39bf12)
- fix: guardian re-counts before stopping; honest deferred-migration message (29b8a64)
- fix: set gpt-5.4 default context_window to 1M (was inheriting 272k from template) (07bc8f0)
- fix: Windows/Linux hardening - readonly steady-state history gate + CRLF-preserving injection (22561a4)
- fix(anthropic): image-limit guard + assistant-tail continue nudge (30d1752)
- feat(responses): codex-rs wire compat, continuation cache, remote compaction v1+v2 (38d1fea)
- feat(auth): multi-account OAuth store + API-key pool with management API (12aff01)
- feat(providers): thinkingToggleModels — vendor thinking on/off ladder (d102a12)
- fix(server): WS 426 gate, /v1/* JSON 404 guard, request-log terminal metadata (a8675ce)
- feat(responses): ocxr1 reasoning-envelope scaffold (parked WIP) (316147b)
- feat(gui): multiauth account dropdowns, key pool UI, token formatting, responsive fixes (616a443)
- chore(tests,docs): CODEX_HOME isolation for cli-provider tests; gitignore test tmp dirs; structure docs refresh (9fb90e2)
- refactor(src): restructure top-level modules into semantic folders (e322f40)
- fix(update): package launcher path after src/update/ move (3ce0a83)
- refactor(server): split index.ts into responsibility modules (87e1d00)
- docs(structure): align maintainer docs with the src restructure and server split (7816b45)
- docs(site): restructure paths, multiauth + API key pool guides (en/ko/zh) (ddd74a7)
- feat(anthropic): extended-thinking signature round-trip (ocxr1 envelope) (4a59dbc)
- feat(providers): add anthropic-apikey built-in for direct Anthropic API-key billing (5695d5b)
- fix(anthropic): send adaptive thinking for models that reject thinking.type enabled (b630941)
- fix(ci): mark preview releases as prerelease so GitHub latest stays stable (27005fa)
- fix(ci): update workflow paths after src restructure (0e7a584)
- fix(tests): privacy-scan-safe fixtures in multiauth/key-pool tests (f76066d)
- fix(tests): fail-fast sqlite busy timeout knob for history sync tests (77a91ec)
- feat(providers): multi-key 429 failover with cooldown-aware rotation (c134c4f)
- fix(server): production hardening from security + robustness audit (3b82b16)
- fix(tests): explicit timeouts for Windows-CI-slow sqlite and child-spawn suites (810fa11)
- fix(catalog): advertise image input for vision-sidecar-covered models (fb363e6)
- fix(sidecar): web-search 429 failover + timeouts, vision fail-closed, coverage drift (852ab04)
- fix(web-search): preserve signed thinking in synthetic web_search replay (2c149fa)
- fix(server): stabilization sweep — failover CAS, compaction cache exclusion, compact pool auth (e1701b8)
- fix(tests): timeout headroom for install-scripts on slow Windows runners (484fb71)
- test(coverage): web-search failover/timeout, WS 426 HTTP fallback, compact v1 error path (b75718a)
- fix(migration): dev->dev-B side-effect closure — deterministic legacy oauth ids, cli.ts compat stub, image-guard unknown-dim trim, freeform input streaming (6948376)
- docs(devlog): final migration-audit report + stabilization evidence ledger update (7ec1c9a)
- docs(devlog): record ABSOLUTE PASS gate verdict + sol re-rebase evidence (fe4e778)