[WRONG BRANCH] chore(release): promote verified candidate to 2.43.0 - #3678

Merged

lidge-jun merged 373 commits into

mainfrom

codex/promote-main-243-01a07240

Sep 5, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 5, 2026

Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
9c280b6
fix(subagents): make Astra first and 5.5 last on upgrade (#3609)

lidge-jun
and
t
authored
4734c78
fix(combos): revalidate cooldown waits and reject malformed quota evidence (#3614)
lidge-jun
authored
00139c1
fix(discovery): carry scheme-bound Mihomo IPv6 fake-IP admission (#3615)
lidge-jun
authored
7a704e3
fix(service): carry stable launchd launcher ownership (#3554) (#3616)
lidge-jun
authored
4e2246c
fix(integrations): carry truthful Codex toggle semantics (#3556) (#3617)
lidge-jun
authored
3b3fe21
fix(docker): validate copied compatibility snapshot bytes (#3619)
lidge-jun
authored
808b3dc
fix(discovery): preserve canonical TUN discovery alongside proxy-bound IPv6 (#3489) (#3618)
lidge-jun
authored
55395a9
Merge remote-tracking branch 'origin/dev' into codex/provider-usage-attribution
t
committed
b621a71
merge: preserve current dev quota readers in account quota layer
t
committed
140c49a
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
c279976
fix(ci): reconcile quota routes and integration fixtures (#3622)
lidge-jun
authored
1505cb1
test(update): expose detached recovery failure evidence (#3623)
lidge-jun
authored
1c1ca06
docs: plan provider model-selection onboarding
t
committed
d8c96f6
Merge verified quota parent after dev conflict reconciliation
t
committed
f2de6b8
Merge dev and reconcile the concurrent quota fixture repair
t
committed
225ca85
fix(quota): reconcile reset integration contracts
t
committed
63510ff
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
7126993
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
209a9e1
docs(windows): archive verified six-shard stabilization evidence
t
committed
b9c3b77
Merge pull request #3610 from lidge-jun/codex/win-7-postmerge-stability
lidge-jun
authored
5ab8aa9
Merge pull request #3613 from lidge-jun/codex/win-8-eager-caller-cancel
lidge-jun
authored
be81013
Merge remote-tracking branch 'origin/dev' into codex/provider-usage-attribution
t
committed
6ba4093
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
7e5c264
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
671a071
Merge remote-tracking branch 'origin/dev' into codex/provider-usage-attribution
t
committed
cc6bd7c
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
6c70347
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
e676200
docs: plan external-client image roundtrip repair
t
committed
78e0144
fix(chat): preserve image detail and screenshot tool results
t
committed
d752746
test(chat): cover user image forms and ship their contract
t
committed
9e80ee1
feat(models): initialize large new provider catalogs with switches off
t
committed
13c7e9b
docs: clarify model row counts and registration lifecycle
t
committed
f3ad2bc
Merge branch 'codex/provider-registration-roadmap' into codex/provider-registration-models
t
committed
9687943
fix(models): reset orphaned selections on provider re-registration
t
committed
f4c5baf
docs(chat): scope tool image placement to its adapter
t
committed
4a9a125
fix(models): cover effective auth and batch provider registration
t
committed
4198c22
test(models): expect registration state in new batch provider rows
t
committed
8699a6e
Merge remote-tracking branch 'origin/dev' into codex/provider-registration-roadmap
t
committed
69ca801
Merge branch 'codex/provider-registration-roadmap' into codex/provider-registration-models
t
committed
287cc19
docs(quota): clarify webhook fixture evidence
t
committed
4a97027
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
e76e09a
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
638f2b8
feat(codex): add window-aware 99% main-account hard lock (#3552)

authored
9fe986d
test(models): use valid baseline configurations for registration cases
t
committed
2cc90b4
test(windows): canonicalize native fixtures and own per-process readiness
t
committed
9a280a7
test(lab): isolate output byte limit from timeout fixtures
t
committed
30faf65
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
772ed02
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
eb18ad7
Merge remote-tracking branch 'origin/dev' into codex/provider-usage-attribution
t
committed
908815c
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
3d1b5f5
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
b8d90fe
Merge pull request #3586 from lidge-jun/codex/external-image-parts
lidge-jun
authored
c514a32
fix(models): keep registration metadata out of JSON editor writes
t
committed
c5ad48c
feat(gui): add confirmed 99% main-account protection controls (#3560)

lidge-jun
and
t
authored
a537751
test(windows): bound cold inject and restore process lifetimes
t
committed
2a30c9a
fix(diagnostics): preserve bounded launcher failure evidence
t
committed
2ea9ba7
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
ae07a49
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
dbf40c2
Merge current dev into Windows fixture repair before final verification
t
committed
d6c03b1
Cascade updated Windows fixture parent into process-bound repair
t
committed
1e68556
feat(onboarding): guide registrations to model selection
t
committed
87adf52
docs(windows): record current-base process fixture verification
t
committed
6ad49c8
test(onboarding): match the account pool add action
t
committed
936ec02
Merge pull request #3624 from lidge-jun/codex/provider-registration-roadmap
lidge-jun
authored
a687eb7
test(update): use explicit synthetic redaction paths
t
committed
0efd0c1
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
b76390b
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
77b95a8
fix(protocols): make unsupported image references explicit
t
committed
b8be33a
test(protocols): cover external image wire roundtrips
t
committed
da1e5dd
fix(vision): align tool image captions with parsed references
t
committed
1c0735f
test(state): isolate late-spill ordering from wall-clock reserve
t
committed
5060ac8
test(server): reserve loopback ports during public allocation
t
committed
7484cc5
fix(adapters): preserve orphan tool image carriers
t
committed
75dc09e
fix(cursor): attach external tool screenshot provenance
t
committed
59efbee
test(cursor): measure decoded screenshot source labels
t
committed
8809175
fix(cursor): prepare active tool screenshot batches
t
committed
01e3cfb
fix(onboarding): include explicit native model commands
t
committed
fa0ca6b
docs: plan isolated port-probe disposal prerequisite
t
committed
c6abff4
docs: add sequential readiness-probe reproduction evidence
t
committed
3f152f8
docs: close port-probe audit and record serial CI coordination
t
committed
ee7be1a
Merge pull request #3629 from lidge-jun/codex/win-native-fixture-fix
lidge-jun
authored
0a9815c
docs: record final Windows six-shard green evidence
t
committed
39459ad
Merge pull request #3637 from lidge-jun/codex/win-restore-readiness
lidge-jun
authored
6b85485
test(update): isolate recovery child Codex home
t
committed
b378414
test: stage isolated port-probe peer lifecycle regressions
t
committed
0ea491e
fix(server): dispose accepted peers in temporary port probes
t
committed
0d9b6c2
docs: replan explicit probe listener registration from Bun source proof
t
committed
30238bb
fix(server): register probe connection disposal before listening
t
committed
f47a8e3
docs: plan canonical upstream WS protocol parity
t
committed
e0f7e25
docs: record upstream WS roadmap review outcome
t
committed
793e509
docs: keep investigation records outside public devlog
t
committed
e0eb1e0
fix(codex): preserve native metadata across upstream WS transport
t
committed
9e27c5e
fix(codex): observe upstream quota before dispatch
t
committed
f722e5d
fix(codex): close WS metadata precedence and family bounds
t
committed
a04d129
docs: include binding parent decisions in plan verification
t
committed
d2b4a81
fix(server): carry final port-probe peer disposal
t
committed
8a31d16
docs: plan phase-correct reconstruction of reviewed status split
t
committed
632cd20
docs(providers): clarify reliable initial discovery
t
committed
f6aeb7a
refactor(cli): reconstruct reviewed status split on verified prerequisite
t
committed
a032750
docs: record user-authorized admin landing after verified CI
t
committed
eb0301f
Merge pull request #3640 from lidge-jun/codex/fix-port-probe-peer-disposal
lidge-jun
authored
ebb0e5e
Merge remote-tracking branch 'origin/dev' into codex/provider-registration-models
t
committed
34620a7
Merge branch 'codex/provider-registration-models' into codex/provider-registration-guidance
t
committed
083e78d
docs: keep status layer on dev after prerequisite landing
t
committed
12a9247
Merge pull request #3626 from lidge-jun/codex/provider-registration-models
lidge-jun
authored
3068f4a
Merge pull request #3636 from lidge-jun/codex/provider-registration-guidance
lidge-jun
authored
cfe95ee
docs: plan final verified dev integration for status layer
t
committed
bea18d4
fix(models): reject selection edits during initial discovery
t
committed
b86aa27
test(models): verify pending Desktop filtering through the API
t
committed
3c4ff93
docs: pin conditional verified input for status integration
t
committed
b78293a
docs(codex): bind protocol landing to final dev integration
t
committed
3790cf6
Merge commit 'cfe95eea0f776a5a5d5bad5f41408cd98ba98ff7' into codex/260905-upstream-ws-parity
t
committed
8166ae5
docs: supersede outdated status integration input
t
committed
da641c2
fix(models): preserve preset validation precedence
t
committed
bb05473
docs: align status delivery and fresh mutation-check plan
t
committed
c4e6799
docs: pin status candidate after WS CI slot return
t
committed
f04e973
Merge pull request #3645 from lidge-jun/codex/provider-selection-pending-write-fence
lidge-jun
authored
45f3bed
Merge commit '45f3bed84be10a7e045a20aae1db46ab822bf7d0' into codex/split-cli-status
t
committed
8bc931e
docs: reconcile split topology and residual exceptions
t
committed
df92323
docs: finalize independent provider stack integration plan
t
committed
263fba9
Merge commit '45f3bed84be10a7e045a20aae1db46ab822bf7d0' into codex/provider-usage-attribution
t
committed
e0aadb6
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
947e8bd
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
86258ce
Merge branch 'codex/provider-quota-parity' into codex/provider-ci-isolation-followup
t
committed
675fad5
docs: align fixture follow-up with independent landing
t
committed
d7e67e9
docs(codex): retain failed CI evidence and refresh delivery plan
t
committed
89b67e8
Merge commit '45f3bed84be10a7e045a20aae1db46ab822bf7d0' into codex/260905-upstream-ws-parity
t
committed
9086c44
Merge pull request #3633 from lidge-jun/codex/split-cli-status
lidge-jun
authored
09335d7
docs(codex): pin refreshed protocol integration checkpoint
t
committed
e311661
Merge commit '09335d7d451335a74ad1c02e88ee37ef89f5a007' into codex/260905-upstream-ws-parity
t
committed
fded48f
docs: plan final-head image stack delivery
t
committed
23630d1
Merge remote-tracking branch 'origin/dev' into codex/image-stack-l2-38cb
t
committed
1775a4c
Merge branch 'codex/image-stack-l2-38cb' into codex/image-stack-l3-38cb
t
committed
85c1e9a
Merge branch 'codex/image-stack-l3-38cb' into codex/image-stack-l4-38cb
t
committed
055cedb
Merge branch 'codex/image-stack-l4-38cb' into codex/image-stack-l5-38cb
t
committed
8d05059
Merge branch 'codex/image-stack-l5-38cb' into codex/image-stack-delivery-38cb
t
committed
8da918a
docs: record final dev freshness requirement
t
committed
e7517bb
Merge commit '09335d7d451335a74ad1c02e88ee37ef89f5a007' into codex/provider-usage-attribution
t
committed
f58260a
Merge branch 'codex/provider-usage-attribution' into codex/provider-account-quota-api
t
committed
616e5b5
Merge branch 'codex/provider-account-quota-api' into codex/provider-quota-parity
t
committed
c299797
Merge branch 'codex/provider-quota-parity' into codex/provider-ci-isolation-followup
t
committed
e5c791c
Merge pull request #3643 from lidge-jun/codex/260905-upstream-ws-parity
lidge-jun
authored
87083e0
Merge remote-tracking branch 'origin/dev' into codex/image-stack-l2-38cb
t
committed
d6f63ac
Merge branch 'codex/image-stack-l2-38cb' into codex/image-stack-l3-38cb
t
committed
94df1ef
Merge branch 'codex/image-stack-l3-38cb' into codex/image-stack-l4-38cb
t
committed
a244ba8
Merge branch 'codex/image-stack-l4-38cb' into codex/image-stack-l5-38cb
t
committed
083488e
Merge branch 'codex/image-stack-l5-38cb' into codex/image-stack-delivery-38cb
t
committed
400e8c8
Merge pull request #3589 from lidge-jun/codex/external-image-wire-contract
lidge-jun
authored
e463e21
Merge pull request #3591 from lidge-jun/codex/image-reference-boundaries
lidge-jun
authored
b078747
Merge pull request #3593 from lidge-jun/codex/orphan-image-carriers
lidge-jun
authored
ebad8eb
Merge pull request #3595 from lidge-jun/codex/cursor-tool-image-prep
lidge-jun
authored
5aefbc8
Merge pull request #3596 from lidge-jun/codex/cursor-tool-screenshots
lidge-jun
authored
0aae940
Merge pull request #3582 from lidge-jun/codex/provider-usage-attribution
lidge-jun
authored
4083722
Merge pull request #3584 from lidge-jun/codex/provider-account-quota-api
lidge-jun
authored
bd82f8e
Merge pull request #3598 from lidge-jun/codex/provider-quota-parity
lidge-jun
authored
7977df4
Merge pull request #3655 from lidge-jun/codex/provider-ci-isolation-followup
lidge-jun
authored
ba9a455
docs: audit explicit Reserve compatibility and review prerequisites
t
committed
a777622
feat(codex): add explicit owned Reserve compatibility with routed models
t
committed
e084890
fix(codex): retain latest genuine Reserve metadata across sync
t
committed
9553a2c
test(codex): isolate Reserve authorization between auth fixtures
t
committed
8a663f9
fix(codex): scope Reserve compatibility to trusted request ingress
t
committed
5bbdf2f
test(codex): align ingress fixtures with public selector and admission contracts
t
committed
389bcd0
fix(codex): retain live policy authority through Claude replay
t
committed
94181ba
docs: lock bottom-up quota protection delivery gates
t
committed
4ab8385
fix(codex): align Reserve loopback target with server normalization
t
committed
9145c2b
docs: record runtime landing and preserve mixed-pool follow-up
t
committed
0ab0d74
docs: record verified settings landing and final Reserve base
t
committed
9be3f2b
fix(codex): reject terminal vision helpers at Reserve dispatch boundaries
t
committed
3baa47c
test(codex): preserve Reserve guards across WS metadata integration
t
committed
b51369b
Merge pull request #3578 from lidge-jun/codex/luna-reserve-compatibility
lidge-jun
authored
feee1a4
docs(devlog): design the release version line so dev never inherits red

jun
authored and
t
committed
e116aaa
feat(release): extract one shared version algebra into scripts/version-line.ts

jun
authored and
t
committed
44f8f32
feat(release): add --bump and move the dev version PR before the release

jun
authored and
t
committed
a61037f
docs(release): correct the release order and record the closed-patch-line policy

jun
authored and
t
committed
4a1b58f
fix(release): resolve rebased layout and origin tag review gaps
t
committed
d0a4a00
Merge pull request #3481 from lidge-jun/codex/260905-release-version-line
lidge-jun
authored
bf58ef1
docs(codex): bind WS lifecycle plan to landed protocol guards
t
committed
1f9de60
test(codex): specify same-turn upstream socket reuse
t
committed
639ea4b
docs: plan cutoff rebase and final-head regression closure
t
committed
86264c0
docs: require two main-to-dev regression cycles before final delivery
t
committed
71c7c6d
refactor(lib): isolate redaction lexical folding (split S01 L1/3)
t
committed
e80b8aa
test(lib): cover the redact-folding leaf (split S01 L1/3)
t
committed
3914ccc
refactor(providers): isolate OpenAI destination classification (split S02 L1/4)
t
committed
ada8582
test(providers): cover the openai-tiers-destination leaf (split S02 L1/4)
t
committed
a4f0118
refactor(adapters): isolate xAI schema analysis (split S05 L1/3)
t
committed
2e89de1
test(xai): cover the schema-analysis leaf (split S05 L1/3)
t
committed
ac31bde
refactor(server): isolate the shell-hook side of system-env (split S09 L1/3)
t
committed
8171014
test(server): cover the system-env shell seam (split S09 L1/3)
t
committed
96daae4
refactor(codex): extract encoding, revision, paths, and TOML leaves from prompt-layers (split S10 L1/2)
t
committed
805660e
test(codex): cover the prompt-layers leaf seams (split S10 L1/2)
t
committed
5724351
refactor(codex): trim trailing blank lines left by the prompt-layers move (split S10 L1/2)
t
committed
2ef91f4
refactor(log-guard): isolate the canonical logs schema check (split S12 L1/3)
t
committed
7c23db9
test(log-guard): cover the inspect-schema seam (split S12 L1/3)
t
committed
990b1ba
refactor(combos): isolate combo identifier helpers (split S11 L1/5)
t
committed
ec66f8c
test(combos): cover the identifiers leaf seam (split S11 L1/5)
t
committed
848a0d4
refactor(combos): trim the trailing blank line left by the identifiers move (split S11 L1/5)
t
committed
3f75e5d
docs(clients): carry audited split plan for config-export foundation
t
committed
b1cfd25
refactor(adapters-cursor): isolate desktop executor type contract (split S04 L0/5)

jun
authored and
t
committed
ce2b8b6
refactor(clients): extract low-fanout config export formats
t
committed
1d4fcd9
test(cursor): guard the desktop executor contract edge (split S04 L0/5)
t
committed
426724e
refactor(anthropic): isolate the image normalize codec and cache (split S03 L1/3)
t
committed
c4a9c53
refactor(claude): split records, model options, and content options out of the inbound translator (split S08 L1/2)
t
committed
529d6fc
test(anthropic): cover the image codec seam (split S03 L1/3)
t
committed
812a741
test(claude): cover the inbound leaf seams and the moved tool_choice error (split S08 L1/2)
t
committed
a14bff2
docs(clients): declare quota verification prerequisite for split layer
t
committed
78cf783
docs(clients): label superseded verification basis as historical
t
committed
37aa480
docs(clients): record verified prerequisite and rebased review anchor
t
committed
f581297
refactor(cursor): split tool-definitions into naming, schema, and guidance leaves (split S04 L1/5)
t
committed
3435d03
test(cursor): cover the tool-definitions leaf seams (split S04 L1/5)
t
committed
6205c7b
test(cursor): make the tool-naming root guard quote-agnostic (split S04 L1/5)
t
committed
024d146
docs(clients): restore dev base after verification prerequisite landed
t
committed
ed70041
docs(closeout): pin current dev and retain Reserve admission during rebase
t
committed
0e9b5c4
refactor(vision): split planning and image rewriting out of the vision index (split S06 L1/2)
t
committed
2b15325
refactor(responses): split content, tool, and text-format parsing out of the request parser (split S07 L1/4)
t
committed
e8d2009
test(vision): cover the plan and image-rewrite seams (split S06 L1/2)
t
committed
a86bb32
test(responses): cover the parser leaf seams (split S07 L1/4)
t
committed
953985f
docs(clients): reconcile stack depth and isolated verification instructions
t
committed
2c3175c
Merge branch 'codex/closeout-pr-3559' into codex/closeout-split-train
t
committed
6c94ab9
Merge branch 'codex/closeout-pr-3566' into codex/closeout-split-train
t
committed
fc16ef8
Merge branch 'codex/closeout-pr-3574' into codex/closeout-split-train
t
committed
9729f4d
Merge branch 'codex/closeout-pr-3585' into codex/closeout-split-train
t
committed
a600f1a
Merge branch 'codex/closeout-pr-3590' into codex/closeout-split-train
t
committed
c77709d
Merge branch 'codex/closeout-pr-3594' into codex/closeout-split-train
t
committed
af8797f
Merge branch 'codex/closeout-pr-3599' into codex/closeout-split-train
t
committed
e6dbcb6
Merge branch 'codex/closeout-pr-3611' into codex/closeout-split-train
t
committed
edcf24d
Merge branch 'codex/closeout-pr-3557' into codex/closeout-split-train
t
committed
8baef54
Merge branch 'codex/closeout-pr-3570' into codex/closeout-split-train
t
committed
3350b95
style(vision): remove trailing blank line after index extraction
t
committed
7f91bd7
Merge branch 'codex/closeout-pr-3567' into codex/closeout-split-train
t
committed
287a686
Merge branch 'codex/closeout-pr-3583' into codex/closeout-split-train
t
committed
fdb1158
Merge branch 'codex/closeout-pr-3577' into codex/closeout-split-train
t
committed
74d3249
Merge branch 'codex/closeout-pr-3580' into codex/closeout-split-train
t
committed
1cd0ed1
docs(closeout): record fourteen rebases and passing remote baselines
t
committed
3a420d2
docs(closeout): preserve reviewed split records and defer unfinished plans
t
committed
e052a87
feat(responses): retain bounded canonical upstream WS sessions
t
committed
76fdacc
feat(gui): unify quota activation in Advanced settings (#3662)

lidge-jun
and
t
authored
c470193
docs(closeout): plan bounded HTTP fixture transport isolation
t
committed
93e7a3a
fix(responses): preserve multiline WS errors in SSE framing
t
committed
4bf8d40
docs(closeout): fold constructor fence audit findings
t
committed
a8312dd
test(server): isolate native WS fallback in HTTP auth fixtures
t
committed
3218fa9
test(server): cover scheme delegation in fixture fence
t
committed
ef7914d
docs(closeout): apply user-directed delivery-first sequence
t
committed
b88397d
docs(closeout): record verified aggregate before delivery
t
committed
0d071d8
Merge pull request #3664 from lidge-jun/codex/260905-upstream-ws-lifecycle
lidge-jun
authored
ef9c538
Merge commit 'ef9c538f36f94f0e95c7f4833642e5b03bd29e2e' into codex/closeout-split-train
t
committed
de9d164
docs(closeout): record required integration refresh after dev advanced
t
committed
c923cb2
Merge pull request #3668 from lidge-jun/codex/closeout-split-train
lidge-jun
authored
6585e6a
feat: enable Fast selectors by default for external clients (#3674)

lidge-jun
and
t
authored
0b7f60e
feat(xai): restore Grok Responses default with persistent Chat opt-in (#3670)

lidge-jun
and
t
authored
af50c6d