Published to npm as @bitkyc08/opencodex@2.94.0 with dist-tag latest.
New Features
- Preserve structural tool turns (#7561)
- Add Runcrate to the free directory (#7726)
- Avoid rescanning fragmented SSE records (#7766)
- Refresh connected Hermes configs after catalog changes (#7704) (#7719)
- Add confirmed POSIX CLI updates and durable job status (#7586)
- Label routed /v1/models rows from modelDisplayNames (#7817)
- Add
ocx codexlauncher mirroringocx claude(#7346) - Windows Remote Link Children and Child credential/connection attestation (#7832)
- Restore LazyCodex role models from a change history (#7693)
- Add proof-bound Windows CLI update planning (#7596)
- Use Bun 1.4.4 native type checking (#7632)
- Add T3 Code as an export and integration client (#7529)
- Revocable server-side remembered device sessions (#7593)
- Add protected Windows CLI update job storage (#7626)
- Apply Windows CLI updates with owned transactions (#7648)
- Add opt-in alias naming for Hermes and Command Code exports (#7867)
- Add per-source interception toggles (#7760)
Bug Fixes
- Report a timed-out first-party rollback as incomplete (#7781)
- Publish the subscription lane's widest context rung for Grok 4.5-4.7 (#7701)
- Expire idle picker uploads while preserving backpressure (#7784)
- Preserve native Mistral thinking on replay (#7814)
- Preserve bounded ACL failure diagnostics (#7773)
- Preserve append-only client tool discovery on opted-in Responses routes (#7453)
- Frame retained requests before portable compaction checkpoints (#7822)
- Scope cooldown reprobes to reserving request (#7764)
- Honor Retry-After floor and recognize the Cloud Code Assist ToS account ban (#7819)
- Guard the MiniMax stale-roster refresh to official destinations (#7829)
- Forward Qoder CN images through shared coding-agent projection (#7536)
- Verify live Desktop recovery before CLI cold start (#7797)
- Harden long compaction recovery paths with the extended spelling (#7823)
- Expose native Fast selectors with 1M context (#7748)
- Align Claude Code 2.1.280 OAuth profile and isolate session/device IDs (#7838)
- Isolate pooled installation IDs, scrub turn-state on account switch, and align JSON token refresh (#7840)
- Isolate Antigravity session/replay and Cursor H2 pool/JWT sub scope (#7842)
- Harden multi-account pool cooldowns, affinity eviction, and deactivated exclusion (#7844)
- Relay OpenAI tool calls instead of ending on the first sentence (#7599)
- Explain elevated scheduler uninstall failures on Windows (#7825)
- Preserve replay refusal attribution on WebSocket ingress (#7830)
- Deliver upstream raw reasoning to Chat clients without a generation opt-in (#7833)
- Request quota summary with the CLI fingerprint so Argon usage shows (#7804)
- Consolidate multi-account discovery and model-denial routing (#7835)
- Enforce required tools in native combo streams (#7831)
- Reclaim inbound body capacity with a configurable budget (#7428)
- Attest connected-stop preflight reads (#7762)
- Keep pool session affinity across restarts and transient detours (#7828)
- Preserve native source priority behind featured subagent models (#7839)
- Keep native main available after keyring migration (#7774)
- Gate config and Desktop writer phases on config-root ACL settlement (#7826)
- Provide paired authority for compatibility controls (#7775)
- Land ten small jsonc, search, retry, plain-data and stream fixes (#7821)
- Recognize exact case-insensitive media types (#7768)
- Export a known output limit as
maxTokens(#7763) - Preserve captured caller admission scope (#7718)
- Keep captured usage on an invalid negotiated completion (#7849)
- Validate macOS app trust at execution boundaries (#7758)
- Keep replay-refusal attribution through combo failures (#7864)
- Stream completion-stable canonical apply_patch input (#7506)
- Compute pooled windows from held account rows (#7862)
- Restore local routing when a Link Child stops (#7736)
- Hop and cool provider on upstream account quota exhaustion (#7625)
- Avoid quota refresh failures from paused accounts (#7628)
- Reject drive-less rooted Windows path overrides (#7824)
- Recheck live ownership before journal recovery (#7851)
- Disable header-arrival deadline for local upstreams by default (#7472)
- Keep a protected recovery copy before persisting the opencode-free retirement (#7836)
- Preserve service-home authority during recovery (#7154)
- Admit local config writer phases after config-root ACL settlement (#7869)
- Recover interrupted Bun postinstalls on retry (#7898)
- Keep the bun install retry working on macOS bash 3.2 (#7900)
- Avoid repeat ACL propagation for lifecycle roots (#7903)
- Recover interrupted Codex CLI child publication (#7909)
- Retire drained parent ownership and preserve bind scope (#7874)
- Address Windows updater release and observation reviews (#7875)
- Show provider connection and model tests on the served dashboard (#7922)
- Fail native Messages streams that end before message_stop (#7928)
- Parse model variants in linear time (#7938)
Documentation
- Clarify subagent spawn_agent fill behavior in order hint (#7537)
- Keep the provider configuration reference under the file-size cap (#7856)
- Register and document citation replay coverage (carry #7608) (#7865)
- Generate a client support matrix from the client registries (#7924)
- Lead with one local gateway for every coding tool (#7925)
- Record runtime-verified client results on the support page (#7927)
Chores
- Open dev at 2.94.0 before releasing 2.93.0 (#7795)
- Take every Bun pin from package.json (#7818)
- Fix ASL server fixture cleanup and budgets (#7778)
- Reserve distinct remote fixture ports (#7820)
- Stop rebinding released loopback ports (#7847)
- Isolate Windows fixture children from the account-wide runtime namespace (#7852)
- Assert the specific refusal gate in the fixture preload tests (#7861)
- Stop restarting the proxy per row in the bearer admission matrix (#7866)
- Isolate the Desktop lifecycle lock in first-party fixtures (#7868)
- Bound frozen installs and retry only deadline stalls (#7870)
- Isolate the remaining Desktop lifecycle-lock fixtures (#7877)
- Tolerate delayed desktop compatibility fixture port release (#7897)
- Copy macOS bundle binary in remote workspace fixture (#7901)
- Expose Windows recovery proof state and drain failed fixtures (#7902)
- Separate recovery PID evidence and budget cold Windows fetches (#7915)
- Fix config-root seed and macOS history-probe fixtures after #7903/#7900 (#7914)
- Partition Windows apply coverage and rebalance hosted shards (#7917)
- Stop racing a 250ms deadline in the Windows Child HTTP success case (#7921)
- Refresh shard weights and restore job-time headroom (#7923)
- Make dead-upstream CONNECT fixture deterministic (#7929)
- Stabilize native recovery fixture compilation (#7930)
- Split suite across four weighted shards (#7926)
Other Changes
- Treat lane=all as a batched dev check, not a per-PR gate (#7855)
- Kiro: drop the private final answer when a real tool call shares the turn (#7434)
- Promote frozen tip dc75a3e to main as 2.94.0 (#7940)
Changelog
Full Changelog: v2.93.0...v2.94.0
- #7154 fix(update): preserve service-home authority during recovery @luvs01
- #7346 feat(cli): add
ocx codexlauncher mirroringocx claude@garysassano - #7428 fix(server): reclaim inbound body capacity with a configurable budget @oocheol
- #7434 Kiro: drop the private final answer when a real tool call shares the turn @hedging8563
- #7453 fix(claude): preserve append-only client tool discovery on opted-in Responses routes @gitrvc-hub
- #7472 fix: disable header-arrival deadline for local upstreams by default @eschcam
- #7506 fix: Stream completion-stable canonical apply_patch input @Platinum-Scripts
- #7529 feat(clients): add T3 Code as an export and integration client @stevyhacker
- #7536 fix(qoder): forward Qoder CN images through shared coding-agent projection @chilung-cgu
- #7537 docs(gui): clarify subagent spawn_agent fill behavior in order hint @chilung-cgu
- #7561 feat(responses): preserve structural tool turns @Platinum-Scripts
- #7586 feat(codex): add confirmed POSIX CLI updates and durable job status @luvs01
- #7593 feat(dashboard): revocable server-side remembered device sessions @x3M3x
- #7596 feat(codex): add proof-bound Windows CLI update planning @luvs01
- #7599 fix(zed): relay OpenAI tool calls instead of ending on the first sentence @andrew05060414
- #7625 fix(router,combos): hop and cool provider on upstream account quota exhaustion @omar391
- #7626 feat(codex): add protected Windows CLI update job storage @luvs01
- #7628 fix(gui): avoid quota refresh failures from paused accounts @chilung-cgu
- #7632 perf(tooling): use Bun 1.4.4 native type checking @luvs01
- #7648 feat(codex): apply Windows CLI updates with owned transactions @luvs01
- #7693 feat(codex): restore LazyCodex role models from a change history @LilMGenius
- #7701 fix(xai): publish the subscription lane's widest context rung for Grok 4.5-4.7 @andrew05060414
- #7718 fix(advisor): preserve captured caller admission scope @luvs01
- #7719 feat(integrations): refresh connected Hermes configs after catalog changes (#7704) @rrmlima
- #7726 feat(providers): add Runcrate to the free directory @heydryft
- #7736 fix(link): restore local routing when a Link Child stops @luvs01
- #7748 fix(claude): expose native Fast selectors with 1M context @jbamlee
- #7758 fix(codex): validate macOS app trust at execution boundaries @luvs01
- #7760 feat(shadow-call): add per-source interception toggles @robin-bially
- #7762 fix(cli): attest connected-stop preflight reads @luvs01
- #7763 fix(dsh): export a known output limit as
maxTokens@daisylovekris - #7764 fix(combos): scope cooldown reprobes to reserving request @luvs01
- #7766 perf(google): avoid rescanning fragmented SSE records @luvs01
- #7768 fix(responses): recognize exact case-insensitive media types @luvs01
- #7773 fix(windows): preserve bounded ACL failure diagnostics @luvs01
- #7774 fix(codex): keep native main available after keyring migration @luvs01
- #7775 fix(desktop): provide paired authority for compatibility controls @luvs01
- #7778 test(providers): fix ASL server fixture cleanup and budgets @luvs01
- #7781 fix(claude): report a timed-out first-party rollback as incomplete @lidge-jun
- #7784 fix(claude): expire idle picker uploads while preserving backpressure @luvs01
- #7795 chore(release): open dev at 2.94.0 before releasing 2.93.0 @github-actions[bot]
- #7797 fix(startup): verify live Desktop recovery before CLI cold start @luvs01
- #7804 fix(antigravity): request quota summary with the CLI fingerprint so Argon usage shows @junhoi-pk
- #7814 fix(openai-chat): preserve native Mistral thinking on replay @adaurban
- #7817 feat(claude): label routed /v1/models rows from modelDisplayNames @david-wang-0
- #7818 chore(ci): take every Bun pin from package.json @lidge-jun
- #7819 fix(google): honor Retry-After floor and recognize the Cloud Code Assist ToS account ban @lidge-jun
- #7820 test(messaging): reserve distinct remote fixture ports @lidge-jun
- #7821 fix: land ten small jsonc, search, retry, plain-data and stream fixes @lidge-jun
- #7822 fix(responses): frame retained requests before portable compaction checkpoints @lidge-jun
- #7823 fix(windows): harden long compaction recovery paths with the extended spelling @lidge-jun
- #7824 fix(clients): reject drive-less rooted Windows path overrides @lidge-jun
- #7825 fix(service): explain elevated scheduler uninstall failures on Windows @lidge-jun
- #7826 fix(windows): gate config and Desktop writer phases on config-root ACL settlement @lidge-jun
- #7828 fix(anthropic): keep pool session affinity across restarts and transient detours @lidge-jun
- #7829 fix(providers): guard the MiniMax stale-roster refresh to official destinations @lidge-jun
- #7830 fix(logs): preserve replay refusal attribution on WebSocket ingress @lidge-jun
- #7831 fix(responses): enforce required tools in native combo streams @lidge-jun
- #7832 feat(link): Windows Remote Link Children and Child credential/connection attestation @lidge-jun
- #7833 fix(chat): deliver upstream raw reasoning to Chat clients without a generation opt-in @lidge-jun
- #7835 fix(antigravity): consolidate multi-account discovery and model-denial routing @lidge-jun
- #7836 fix(config): keep a protected recovery copy before persisting the opencode-free retirement @lidge-jun
- #7838 fix(anthropic): align Claude Code 2.1.280 OAuth profile and isolate session/device IDs @lidge-jun
- #7839 fix(codex): preserve native source priority behind featured subagent models @lidge-jun
- #7840 fix(codex): isolate pooled installation IDs, scrub turn-state on account switch, and align JSON token refresh @lidge-jun
- #7842 fix(google,cursor): isolate Antigravity session/replay and Cursor H2 pool/JWT sub scope @lidge-jun
- #7844 fix(oauth): harden multi-account pool cooldowns, affinity eviction, and deactivated exclusion @lidge-jun
- #7847 test: stop rebinding released loopback ports @lidge-jun
- #7849 fix(openai-chat): keep captured usage on an invalid negotiated completion @xubenqiang
- #7851 fix(cli): recheck live ownership before journal recovery @lidge-jun
- #7852 test: isolate Windows fixture children from the account-wide runtime namespace @lidge-jun
- #7855 docs(agents): treat lane=all as a batched dev check, not a per-PR gate @lidge-jun
- #7856 docs: keep the provider configuration reference under the file-size cap @lidge-jun
- #7861 test: assert the specific refusal gate in the fixture preload tests @lidge-jun
- #7862 fix(quota-pool): compute pooled windows from held account rows @lidge-jun
- #7864 fix(responses): keep replay-refusal attribution through combo failures @lidge-jun
- #7865 docs(responses): register and document citation replay coverage (carry #7608) @lidge-jun
- #7866 test: stop restarting the proxy per row in the bearer admission matrix @lidge-jun
- #7867 feat(integrations): add opt-in alias naming for Hermes and Command Code exports @lidge-jun
- #7868 test(claude): isolate the Desktop lifecycle lock in first-party fixtures @lidge-jun
- #7869 fix(windows): admit local config writer phases after config-root ACL settlement @lidge-jun
- #7870 ci: bound frozen installs and retry only deadline stalls @lidge-jun
- #7874 fix(restart): retire drained parent ownership and preserve bind scope @luvs01
- #7875 fix(codex): address Windows updater release and observation reviews @luvs01
- #7877 test(claude): isolate the remaining Desktop lifecycle-lock fixtures @lidge-jun
- #7897 test: tolerate delayed desktop compatibility fixture port release @lidge-jun
- #7898 fix(ci): recover interrupted Bun postinstalls on retry @lidge-jun
- #7900 fix(ci): keep the bun install retry working on macOS bash 3.2 @lidge-jun
- #7901 test: copy macOS bundle binary in remote workspace fixture @lidge-jun
- #7902 test: expose Windows recovery proof state and drain failed fixtures @lidge-jun
- #7903 fix(windows): avoid repeat ACL propagation for lifecycle roots @lidge-jun
- #7909 fix(windows): recover interrupted Codex CLI child publication @lidge-jun
- #7914 test: fix config-root seed and macOS history-probe fixtures after #7903/#7900 @lidge-jun
- #7915 test: separate recovery PID evidence and budget cold Windows fetches @lidge-jun
- #7917 test: partition Windows apply coverage and rebalance hosted shards @lidge-jun
- #7921 test(link): stop racing a 250ms deadline in the Windows Child HTTP success case @lidge-jun
- #7922 fix(gui): show provider connection and model tests on the served dashboard @lidge-jun
- #7923 ci(windows): refresh shard weights and restore job-time headroom @lidge-jun
- #7924 docs: generate a client support matrix from the client registries @lidge-jun
- #7925 docs: lead with one local gateway for every coding tool @lidge-jun
- #7926 ci(macos): split suite across four weighted shards @lidge-jun
- #7927 docs: record runtime-verified client results on the support page @lidge-jun
- #7928 fix(claude): fail native Messages streams that end before message_stop @lidge-jun
- #7929 test(claude): make dead-upstream CONNECT fixture deterministic @lidge-jun
- #7930 test(service): stabilize native recovery fixture compilation @lidge-jun
- #7938 fix(cursor): parse model variants in linear time @lidge-jun
- #7940 release: promote frozen tip dc75a3e to main as 2.94.0 @lidge-jun
Code signing
Windows binaries follow the code signing policy.
Free code signing provided by SignPath.io, certificate by SignPath Foundation.