[WRONG BRANCH] release: promote dev to main for 2.28.0 - #2186

Merged

lidge-jun merged 124 commits into

mainfrom

codex/promote-2.28.0

Aug 20, 2026

Commits on Aug 19, 2026

fix(responses): stop requiring a ChatGPT credential for routed providers
lidge-jun
committed
8752441
fix(responses): drop the retired prompt_cache_retention for gpt-5.6
lidge-jun
committed
5904178
fix(routing): resolve model-keyed lookups the way the runtime resolves them
lidge-jun
committed
f9c224b
fix(codex): retain the K12 short-window quota end to end
lidge-jun
committed
9b0c5a0
fix(codex): gate account-native models by entitlement
lidge-jun
committed
0bce951
fix(xai): stream OAuth Grok through Responses
lidge-jun
committed
7cd270d

Commits on Aug 20, 2026

fix(subagents): keep a saved roster slot listed when its model is disabled
lidge-jun
committed
5df624b
docs(devlog): plan the bug-PR backlog consolidation as one stack plus siblings
lidge-jun
committed
06e1313
docs(devlog): correct the stack premise — the absorbed bug PRs are disjoint
lidge-jun
committed
d527c12
docs(devlog): record #2130 merged, so #2029 is superseded in fact
lidge-jun
committed
a83ee51
docs(devlog): adjudicate the late auditor FAIL verdict
lidge-jun
committed
92178ea
docs(devlog): banner 010 so the shipped predicate cannot be reverted
lidge-jun
committed
ed6de17
docs(devlog): log wp2 and wp3 shipped state
lidge-jun
committed
f639a45
docs(devlog): log wp4 through wp6 and the campaign state
lidge-jun
committed
8c8fe80
docs(devlog): log wp7 and close the absorb campaign
lidge-jun
committed
06e0ac0
docs(devlog): record CI state and the campaign end state
lidge-jun
committed
0a720d1
docs(devlog): log wp8 and wp9, including the one real stack layer
lidge-jun
committed
c253ce0
docs(devlog): log wp10 through wp12, including both security holds resolved
lidge-jun
committed
4a04ff9
docs(devlog): close the campaign with the final PR state and both scoring corrections
lidge-jun
committed
df94a43
fix(providers): identify opencode-free with the client User-Agent it claims
lidge-jun
committed
095db44
fix(anthropic): frame the opening turn so AgentRouter stops blocking non-English
lidge-jun
committed
057e857
docs(devlog): record the residual bug-PR dispositions and the wp15 outcome
lidge-jun
committed
a19140a
docs(devlog): record wp16 and the staticHeaders delivery bug it uncovered
lidge-jun
committed
9e38620
docs(devlog): record wp17 and plan wp18
lidge-jun
committed
4b9814c
fix(quota): identify OpenCode Go by where it routes, not what it is named
lidge-jun
committed
293494c
fix(openai-chat): treat a non-string repeat as padding once that field is known
lidge-jun
committed
772d375
test(ws-upstream): hold the eager-relay marker to the win32 rule, not to a constant
ntdatt812
committed
9a9c090
test(ws-upstream): prove the rewrite chain through handleResponses, not the factory
ntdatt812
committed
7bfcec4
Merge pull request #2129 from ntdatt812/fix/ws-relay-eager-marker-win32
Ingwannu
authored
31ee7a6
fix(responses): backfill missing ids on output items for strict decoders
lidge-jun
committed
8ff77e1
fix(responses): bridge routed tool_search through the Responses passthrough
lidge-jun
committed
16345ab
fix(responses): give synthesized ids a namespace that cannot collide
lidge-jun
committed
713dce9
fix(responses): keep tool-search item classification past output_item.done
lidge-jun
committed
8b7b65c
fix(google): preserve and replay thought signatures across stream chunks
lidge-jun
committed
1adcfde
fix(chat): apply the Fast capability gate to the native passthrough
lidge-jun
committed
647b98e
fix(chat): let decideTier own the absent-decision fallback too
lidge-jun
committed
ef7efac
fix(claude): gate the shell hook on an installed Claude Code CLI
lidge-jun
committed
a0635ea
fix(claude): remove a CRLF hook block instead of reporting a false success
lidge-jun
committed
b394b03
fix(providers): allow a baseUrl override for Anthropic and Antigravity
lidge-jun
committed
d2493a1
fix(oauth): reject superseded login credential commits
lidge-jun
committed
f4ad139
fix(subagents): keep a saved roster slot listed when its model is disabled
lidge-jun
committed
d8e98d4
docs(devlog): plan the bug-PR backlog consolidation as one stack plus siblings
lidge-jun
committed
75ad378
docs(devlog): correct the stack premise — the absorbed bug PRs are disjoint
lidge-jun
committed
2558902
docs(devlog): record #2130 merged, so #2029 is superseded in fact
lidge-jun
committed
d1db92c
docs(devlog): adjudicate the late auditor FAIL verdict
lidge-jun
committed
899c03d
docs(devlog): banner 010 so the shipped predicate cannot be reverted
lidge-jun
committed
a155fc9
docs(devlog): log wp2 and wp3 shipped state
lidge-jun
committed
831cd1c
docs(devlog): log wp4 through wp6 and the campaign state
lidge-jun
committed
8b4f1a6
docs(devlog): log wp7 and close the absorb campaign
lidge-jun
committed
3c77c10
docs(devlog): record CI state and the campaign end state
lidge-jun
committed
bb38c4d
docs(devlog): log wp8 and wp9, including the one real stack layer
lidge-jun
committed
5a77d63
docs(devlog): log wp10 through wp12, including both security holds resolved
lidge-jun
committed
ef91d14
docs(devlog): close the campaign with the final PR state and both scoring corrections
lidge-jun
committed
2700b0e
docs(devlog): record the residual bug-PR dispositions and the wp15 outcome
lidge-jun
committed
4e80632
fix(providers): identify opencode-free with the client User-Agent it claims
lidge-jun
committed
5e4ec14
docs(devlog): record wp16 and the staticHeaders delivery bug it uncovered
lidge-jun
committed
6ef9c08
fix(anthropic): frame the opening turn so AgentRouter stops blocking non-English
lidge-jun
committed
06cdbc1
docs(devlog): record wp17 and plan wp18
lidge-jun
committed
7e7954a
test(anthropic): pin the AgentRouter framing across every user-content shape
lidge-jun
committed
6a4efb8
fix(quota): identify OpenCode Go by where it routes, not what it is named
lidge-jun
committed
5445ce3
fix(openai-chat): treat a non-string repeat as padding once that field is known
lidge-jun
committed
64ba54e
fix(logs): persist shadow helper attribution

Ingwannu
authored and
lidge-jun
committed
02a5648
fix(logs): sanitize the shadow helper marker at the logging layer
lidge-jun
committed
e4f0eec
docs(devlog): record wp18-wp20 and the six-layer stack end state
lidge-jun
committed
6499919
fix(logs): sanitize at the addRequestLog ingress so both surfaces agree
lidge-jun
committed
70cebd4
fix(responses): leave the compact wire format out of the id backfill
lidge-jun
committed
26a15ee
Merge pull request #2134 from lidge-jun/codex/fix-subagent-roster-truncation
lidge-jun
authored
930840c
Merge pull request #2160 from lidge-jun/codex/absorb-opencode-free-static-headers
lidge-jun
authored
114e9e5
Merge pull request #2162 from lidge-jun/codex/absorb-agentrouter-language-framing
lidge-jun
authored
087c3c3
Merge pull request #2164 from lidge-jun/codex/absorb-opencode-go-quota-siblings
lidge-jun
authored
31750b0
Merge pull request #2165 from lidge-jun/codex/absorb-openai-chat-padding-repeats
lidge-jun
authored
41689b3
Merge remote-tracking branch 'origin/dev' into codex/absorb-shadow-helper-attribution
lidge-jun
committed
d1f0c43
Merge pull request #2166 from lidge-jun/codex/absorb-shadow-helper-attribution
lidge-jun
authored
5fbe655
Merge pull request #2137 from lidge-jun/codex/fix-bearer-admission-2132
lidge-jun
authored
be12328
Merge pull request #2146 from lidge-jun/codex/absorb-account-entitlement-stacked
lidge-jun
authored
aa07bc3
Merge pull request #2138 from lidge-jun/codex/consolidate-prompt-cache-retention
lidge-jun
authored
81492fd
Merge pull request #2140 from lidge-jun/codex/absorb-capability-evidence
lidge-jun
authored
3ad9c7b
Merge pull request #2141 from lidge-jun/codex/absorb-k12-short-window
lidge-jun
authored
1cc35c5
Merge pull request #2142 from lidge-jun/codex/absorb-responses-id-backfill
lidge-jun
authored
52a463d
Merge pull request #2144 from lidge-jun/codex/absorb-claude-shell-hook-gate
lidge-jun
authored
8c8a668
Merge pull request #2145 from lidge-jun/codex/absorb-tool-search-passthrough
lidge-jun
authored
83d5ffa
Merge pull request #2147 from lidge-jun/codex/absorb-xai-oauth-streaming
lidge-jun
authored
7fc5084
Merge remote-tracking branch 'origin/dev' into codex/absorb-baseurl-override
lidge-jun
committed
bfbfa4e
Merge pull request #2148 from lidge-jun/codex/absorb-baseurl-override
lidge-jun
authored
86ed9ed
Merge pull request #2149 from lidge-jun/codex/absorb-oauth-superseded-commit
lidge-jun
authored
17e8e91
Merge pull request #2150 from lidge-jun/codex/absorb-antigravity-thought-signatures
lidge-jun
authored
9a78015
Merge pull request #2151 from lidge-jun/codex/absorb-fastwire-native-chat
lidge-jun
authored
a584890
fix(codex): stop the background main refresh from retracting a reauth quarantine
ntdatt812
committed
e921346
fix(codex): keep the identity-change retry from upgrading a background refresh
ntdatt812
committed
bbf2aad
fix(logs): record the configured shadow prefix, not the caller's model string
lidge-jun
committed
e928ed7
fix(auth): key admission-bearer substitution on transport, not provider name
lidge-jun
committed
b8710a7
Merge pull request #2169 from lidge-jun/codex/fix-admission-bearer-transport
lidge-jun
authored
00e333d
Merge pull request #2167 from ntdatt812/fix/main-reauth-quarantine-background-refresh
lidge-jun
authored
c5fc969
fix(guards): close the core/Lab directory bypass and the release dry-run dead end
lidge-jun
committed
8cde997
Merge pull request #2171 from lidge-jun/codex/harden-core-lab-guard
lidge-jun
authored
8aca338
docs(devlog): record the main..dev release-safety audit and its three fixes
lidge-jun
committed
0637a35
Merge pull request #2172 from lidge-jun/codex/devlog-audit
lidge-jun
authored
b9dfc78
fix(responses): give tool_search_call and custom_tool_call their own id prefixes
lidge-jun
committed
8e2d42b
docs(devlog): record the release-safety audit of the main..dev range
lidge-jun
committed
bf5b35c
fix(devlog): unbreak privacy:scan on dev
lidge-jun
committed
35ab42b
Merge pull request #2175 from lidge-jun/codex/fix-privacy-scan-devlog
lidge-jun
authored
5bcc91d
Merge pull request #2170 from lidge-jun/codex/audit-shadow-marker-leak
lidge-jun
authored
9eb6647
Merge pull request #2173 from lidge-jun/codex/audit-tool-search-id
lidge-jun
authored
b2878f8
Merge pull request #2174 from lidge-jun/codex/audit-record
lidge-jun
authored
12c14d5
docs(devlog): close the release audit with the merged fixes and the verified dev state
lidge-jun
committed
025dfcb
Merge pull request #2176 from lidge-jun/codex/audit-closeout
lidge-jun
authored
4813181
fix(devlog): stop the audit record from breaking its own privacy gate
lidge-jun
committed
fabc448
Merge pull request #2177 from lidge-jun/codex/fix-audit-record-scan
lidge-jun
authored
749ab22
fix(ci): give the Windows leg the budgets and the crash retry it never had
lidge-jun
committed
2e1c211
feat(gui): show and filter intercepted helper requests in Logs
lidge-jun
committed
491e106
fix(ci): key the Bun crash retry on the signature that is actually stable
lidge-jun
committed
b954c93
docs(devlog): attach the #2157 Logs screenshots for the PR gate
lidge-jun
committed
0bc42a5
fix(gui): keep the intercepted-helper badge on one line
lidge-jun
committed
3723b3c
fix(openai-chat): heartbeat while buffering tool-call deltas
lidge-jun
committed
85fbf9a
fix(responses): do not retain adapter heartbeats in the terminal guard
lidge-jun
committed
9a93497
docs(openai-chat): stop attributing the heartbeat to #2156
lidge-jun
committed
2a8b81e
test(i18n): allow the intercepted-helper badge to stay English
lidge-jun
committed
d28213d
fix(ci): give the Windows leg the budgets and the crash retry it never had
lidge-jun
committed
8f04c9a
fix(ci): key the Bun crash retry on the signature that is actually stable
lidge-jun
committed
0776683
Merge pull request #2178 from lidge-jun/codex/fix-windows-ci-shards
lidge-jun
authored
3204d43
Merge pull request #2179 from lidge-jun/codex/logs-intercepted-helper-attribution
lidge-jun
authored
8f974f0
Merge pull request #2180 from lidge-jun/codex/openai-chat-tool-call-heartbeat
lidge-jun
authored
649912c
fix(ci): stop the Windows leg from truncating and mismeasuring its own shards
lidge-jun
committed
88c4f15
Merge pull request #2182 from lidge-jun/codex/windows-shard-truncation-and-budgets
lidge-jun
authored
96f288d