Published to npm as @bitkyc08/opencodex@2.92.0 with dist-tag latest.
New Features
- Support x-hermes-conversation-id for Hermes session correlation (carry #7459) (#7542)
- Resolve each API key's project with project "auto" (#7296)
- Opt-in session pin keeps a JEV combo session on its decided target (#7567)
- Add subscription and credit support (#7604)
- Avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) (#7541)
- Read Abliteration credit balance from /v1/credits (#7581)
Bug Fixes
- Persist Reserve helper refusal request IDs (#7511)
- Normalize analytics usage rows (#7510)
- Preserve replay-refusal provenance through response finalization (#7458)
- Honor upstream no-retry verdict (carry #7505) (#7538)
- Preserve unrelated authenticated loopback proxies (#7509)
- Reject macOS ACL-exposed state (#7520)
- Finish with length when a Responses upstream reports incomplete reason "length" (#7539)
- Use attested capabilities for local usage comparisons (#7514)
- Distrust picker freshness without binding evidence (#7522)
- Publish Antigravity family quota as decision evidence (carry #7442) (#7549)
- Read the effective SID in-process so service install does not wait on a cold PowerShell (#7548)
- Bind CLI update plans to installation content and pre-dotenv transport (#7546)
- Route models only to accounts whose roster serves them (#7556)
- Refresh dated Token Plan catalogue and metadata (#7555)
- Keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics (#7560)
- Infer message phase for passthrough providers (#7554)
- Backfill Token Plan output limits on roster refresh (#7576)
- Fold developer role to system for moonshot (#7584)
- Isolate retained reasoning state by admitted caller (carry #7523) (#7566)
- Stop guardian refresh of grants persisted as revoked (#7597)
- Keep the stored strategy when combo set replaces targets (#7601)
- Send native ultra effort as max on the wire (#7590) (#7600)
- Keep npm Node cache within inspection lifetime (#7585)
- Revoke usage trials after identity verification fails (#7582)
- Refuse uncertain prefix-local Node observations (#7577)
- Check the first hard-lock combo destination (#7588)
- Always send a title on url_citation and repair old history on replay (#7573)
- Ship Bun 1.4.4 runtime to drop the compromised eMudhra root (#7606)
- Pin zod/body-parser for 2.92.0 audit:high republish (#7643)
- Bump gui happy-dom to 21.0.4 for 2.92.0 (GHSA-834v-8h66-3h79) (#7645)
Documentation
- Record the 2.92.0 sweep wave plan (#7535)
- Explain how spawn_agent fills its five model slots (#7550)
- Show the SignPath attribution and code signing policy on the download section (#7571)
- End release notes with the SignPath code signing attribution (#7570)
- An existing JEV combo keeps its stored decision method (#7602)
Chores
- Deprecate mimo-free (#7445)
- Move the Abliteration quota test to a shard to restore the layout.json size cap on dev (#7607)
Other Changes
- Open dev at 2.92.0 before releasing 2.91.0 (#7532)
- Promote frozen tip 03bcf78 to main as 2.92.0 (#7634)
Changelog
Full Changelog: v2.91.0...v2.92.0
- #7296 feat(vertex): resolve each API key's project with project "auto" @chilung-cgu
- #7445 chore(providers): deprecate mimo-free @heerey525
- #7458 fix(logs): preserve replay-refusal provenance through response finalization @norths7ar
- #7509 fix(service): preserve unrelated authenticated loopback proxies @luvs01
- #7510 fix(routing): normalize analytics usage rows @luvs01
- #7511 fix(chat): persist Reserve helper refusal request IDs @luvs01
- #7514 fix(cli): use attested capabilities for local usage comparisons @luvs01
- #7520 fix(messaging): reject macOS ACL-exposed state @luvs01
- #7522 fix(codex): distrust picker freshness without binding evidence @luvs01
- #7532 chore(release): open dev at 2.92.0 before releasing 2.91.0 @github-actions[bot]
- #7535 docs(devlog): record the 2.92.0 sweep wave plan @lidge-jun
- #7538 fix(retry): honor upstream no-retry verdict (carry #7505) @lidge-jun
- #7539 fix(chat): finish with length when a Responses upstream reports incomplete reason "length" @lidge-jun
- #7541 perf(sse): avoid rescanning and flattening fragmented SSE carry (carry #7497, #7498) @lidge-jun
- #7542 feat(logs): support x-hermes-conversation-id for Hermes session correlation (carry #7459) @lidge-jun
- #7546 fix(codex): bind CLI update plans to installation content and pre-dotenv transport @lidge-jun
- #7548 fix(windows): read the effective SID in-process so service install does not wait on a cold PowerShell @lidge-jun
- #7549 fix(jev): publish Antigravity family quota as decision evidence (carry #7442) @lidge-jun
- #7550 docs(subagents): explain how spawn_agent fills its five model slots @chlwnsgurg
- #7554 fix(responses): infer message phase for passthrough providers @lidge-jun
- #7555 fix(providers): refresh dated Token Plan catalogue and metadata @lidge-jun
- #7556 fix(antigravity): route models only to accounts whose roster serves them @lidge-jun
- #7560 fix(link): keep retrying failed Home tunnels, report Child link readiness, record tunnel diagnostics @lidge-jun
- #7566 fix(replay): isolate retained reasoning state by admitted caller (carry #7523) @lidge-jun
- #7567 feat(jev): opt-in session pin keeps a JEV combo session on its decided target @lidge-jun
- #7570 docs(release): end release notes with the SignPath code signing attribution @lidge-jun
- #7571 docs(site): show the SignPath attribution and code signing policy on the download section @lidge-jun
- #7573 fix(responses): always send a title on url_citation and repair old history on replay @inforanger
- #7576 fix(providers): backfill Token Plan output limits on roster refresh @lidge-jun
- #7577 fix(codex): refuse uncertain prefix-local Node observations @luvs01
- #7581 feat(quota): read Abliteration credit balance from /v1/credits @btorres0318
- #7582 fix(desktop): revoke usage trials after identity verification fails @luvs01
- #7584 fix(providers): fold developer role to system for moonshot @lidge-jun
- #7585 fix(codex): keep npm Node cache within inspection lifetime @luvs01
- #7588 fix(fallback): check the first hard-lock combo destination @luvs01
- #7597 fix(codex): stop guardian refresh of grants persisted as revoked @lidge-jun
- #7600 fix(catalog): send native ultra effort as max on the wire (#7590) @lidge-jun
- #7601 fix(cli): keep the stored strategy when combo set replaces targets @lidge-jun
- #7602 docs(cli): an existing JEV combo keeps its stored decision method @lidge-jun
- #7604 feat(workbuddy): add subscription and credit support @terrytan95
- #7606 fix(deps): ship Bun 1.4.4 runtime to drop the compromised eMudhra root @LPFchan
- #7607 test(layout): move the Abliteration quota test to a shard to restore the layout.json size cap on dev @lidge-jun
- #7634 release: promote frozen tip 03bcf78 to main as 2.92.0 @lidge-jun
- #7643 fix(deps): pin zod/body-parser for 2.92.0 audit:high republish @lidge-jun
- #7645 fix(deps): bump gui happy-dom to 21.0.4 for 2.92.0 (GHSA-834v-8h66-3h79) @lidge-jun
Code signing
Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.