[WRONG BRANCH] release: promote 2.47.0-preview.20260908 to preview - #3928

Merged

lidge-jun merged 151 commits into

codex/release-247-preview

Sep 7, 2026

Commits on Sep 7, 2026

chore(release): open dev at 2.47.0 before releasing 2.46.0
github-actions[bot]
committed
2dd7b43
Merge pull request #3850 from lidge-jun/codex/dev-version-2.47.0
lidge-jun
authored
6cf38b5
docs(devlog): plan code-mode host contract for routed models
lidge-jun
committed
ec799db
docs(devlog): fold audit round 1 into the code-mode host contract roadmap
lidge-jun
committed
041aec0
docs(devlog): fold audit round 2 into the code-mode host contract roadmap
lidge-jun
committed
d375916
docs(devlog): fold audit round 3 into the code-mode host contract roadmap
lidge-jun
committed
3bcb9aa
docs(devlog): record live Codex host probe evidence for the code-mode contract
lidge-jun
committed
5b70ddd
fix(code-mode): state the host contract for nested helpers before the first call
lidge-jun
committed
adafd12
fix(code-mode): name the broken host rule on exec results that carry a host failure string
lidge-jun
committed
1633780
docs: record the routed code-mode host contract
lidge-jun
committed
6bdcba5
Merge pull request #3854 from lidge-jun/codex/code-mode-host-contract
lidge-jun
authored
ece556a
docs(devlog): make CI completion check fail closed [skip ci]

Ingwannu
authored and
t
committed
f1604c6
fix(kiro): gate request diagnostics behind the debug check [skip ci]

luvs01
authored and
t
committed
3e4a01c
fix(copilot): route Responses-only GPT, Grok and MAI models correctly [skip ci]

t
and
chilung-cgu
committed
98564bd
test(kiro): isolate and restore every debug setting the diagnostics gate reads [skip ci]

t
and
luvs01
committed
6061dcc
fix(responses): bound the streaming citation marker span [skip ci]

luvs01
authored and
t
committed
25689e1
fix(responses): keep an oversized citation span verbatim before a later marker in the same delta [skip ci]

t
and
luvs01
committed
00b74c7
fix(providers): refuse keychain restore across provider ownership [skip ci]

luvs01
authored and
t
committed
924b657
fix(management): expose the effective web-search sidecar enabled state

t
and
louis-tepe
committed
6eadb16
Merge pull request #3865: release-train M layer 1 [skip ci]
lidge-jun
authored
7f2fb92
Merge pull request #3866: release-train M layer 2 [skip ci]
lidge-jun
authored
dcec717
Merge pull request #3867: release-train M layer 3 [skip ci]
lidge-jun
authored
0ef7d29
Merge pull request #3868: release-train M layer 4 [skip ci]
lidge-jun
authored
99451df
Merge pull request #3869: release-train M layer 5 [skip ci]
lidge-jun
authored
0719457
Merge pull request #3870: release-train M layer 6 [skip ci]
lidge-jun
authored
d00615d
docs: record lane B manual delivery roadmap [skip ci]
t
committed
61a775c
fix(codex): sustain quota window activation [skip ci]

terrytan95
authored and
t
committed
1386e3d
test(codex): cover quota activation regressions [skip ci]

terrytan95
authored and
t
committed
c386770
fix(transport): admit Mihomo IPv6 fake-IP under TUN transparency exception for canonical URLs

hualiny
authored and
t
committed
6bcf864
fix(transport): retain IPv6 pinning across proxy mismatches [skip ci]

t
and
hualiny
committed
bdd4e46
test(transport): run DNS fixture in the Bun test loader [skip ci]

t
and
hualiny
committed
a814dd3
fix(codex): fence main quota activation recovery [skip ci]

t
and
terrytan95
committed
3955e10
test(transport): pass the test-run lease to the child fixture [skip ci]

t
and
hualiny
committed
b67f452
Merge pull request #3871: sustain Codex quota window activation (carry #3856) [skip ci]
lidge-jun
authored
62fe747
Merge pull request #3872: admit Mihomo IPv6 fake-IP under TUN (carry #3849) [skip ci]
lidge-jun
authored
ddee5e8
fix(opencode-go): carry session affinity through Pi native chat [skip ci]

makesomethingshit
authored and
t
committed
edd396c
test(opencode-go): define inbound opaque session identity contract [skip ci]

makesomethingshit
authored and
t
committed
effba4c
fix: admit reasoning envelope allocations before materialization [skip ci]

Ingwannu
authored and
t
committed
5b3df2e
fix(pi): scope generated session affinity to the Pi client [skip ci]

makesomethingshit
authored and
t
committed
eb8cc9a
fix: admit final Claude request copies before serialization [skip ci]

authored and
t
committed
7541517
test: pin Go affinity identity and header precedence [skip ci]

authored and
t
committed
697a500
fix: fall back from native compact 404 to routed compaction [skip ci]

authored and
t
committed
e0e8d26
fix: share envelope admission budgets and release transient request copies [skip ci]

authored and
t
committed
d8b18b1
docs: include Pi session affinity in every guide example [skip ci]

authored and
t
committed
feb1855
docs: describe native compact 404 fallback in route table [skip ci]

authored and
t
committed
c84cc3b
Merge pull request #3879: admit reasoning-envelope allocations before materialization (carry #3862) [skip ci]
lidge-jun
authored
b0bcb4b
Merge pull request #3880: carry Pi/OpenCode Go session affinity through native Chat (carry #3858) [skip ci]
lidge-jun
authored
dac7e28
Merge pull request #3881: routed compaction fallback for native compact 404 (reimplements #3769 residual) [skip ci]
lidge-jun
authored
76436a3
fix(responses): make whole-string citation stripping agree with the streaming filter

t
and
luvs01
committed
e96b5c5
docs(providers): describe OpenCode Go session affinity and the Pi compat flag [skip ci]

t
and
makesomethingshit
committed
413600d
Merge pull request #3882: align whole-string citation stripping with the streaming filter [skip ci]
lidge-jun
authored
6389787
Merge pull request #3888: providers guide OpenCode Go affinity docs [skip ci]
lidge-jun
authored
522ce5f
feat gui: expose subagent fallback settings [skip ci]

x3M3x
authored and
t
committed
451fbff
docs: record lane C manual-chain roadmap [skip ci]
t
committed
2e6ef45
feat(gui): add opt-in Codex Desktop sign-in toggle [skip ci]

RobinBially
authored and
t
committed
eb5ff6c
docs: add subagent fallback settings screenshot [skip ci]

x3M3x
authored and
t
committed
2b14053
fix(web-search): bound the Anthropic sidecar SSE and error bodies [skip ci]

luvs01
authored and
t
committed
a815f23
fix(gui): retain pending Desktop preference when sync is skipped [skip ci]

t
and
RobinBially
committed
c1f96f0
fix(gui): preserve fallback choices and explain native-parent V2 compatibility [skip ci]

t
and
x3M3x
committed
f8d3545
docs: pin lane C health wiring handoff [skip ci]
t
committed
7131528
fix(vision): bound the Anthropic vision sidecar SSE and error bodies [skip ci]

luvs01
authored and
t
committed
2b158e9
fix(service): carry startup-health cache portion of #3863 [skip ci]

x3M3x
authored and
t
committed
9d8d11a
fix(gui): retain unapplied Desktop status across settings polls [skip ci]

t
and
RobinBially
committed
734d41c
fix(gui): guard fallback hydration races and preserve row focus [skip ci]

t
and
x3M3x
committed
ffcd7ab
test(web-search): cover bounded partial frames and detached cancellation [skip ci]

t
and
luvs01
committed
51b4437
test(vision): pin capped descriptions and non-settling error-body cancel [skip ci]

t
and
luvs01
committed
8eaa564
fix(service): preserve fresh health and contain detached probe failures [skip ci]

t
and
x3M3x
committed
91b54b7
docs: translate code-mode host rules; docs handoff from lane E [skip ci]
t
committed
abbdb22
fix(gui): keep fallback render identities in state [skip ci]

t
and
x3M3x
committed
f1b8f2d
Merge pull request #3873: bound Anthropic web-search sidecar bodies (carry #3839) [skip ci]
lidge-jun
authored
f46a7f4
Merge pull request #3874: bound Anthropic vision sidecar bodies (carry #3841) [skip ci]
lidge-jun
authored
3f07e09
Merge pull request #3875: unblock settings load from the Windows health probe (carry #3863) [skip ci]
lidge-jun
authored
686cb12
Merge pull request #3876: default-off Codex Desktop sign-in preference (carry #3860) [skip ci]
lidge-jun
authored
2eec04f
Merge pull request #3878: sub-agent fallback settings GUI with V2 compatibility guidance (carry #3252, #1533) [skip ci]
lidge-jun
authored
d0fca4a
fix(release): recover registry reads after acknowledged publication [skip ci]
t
committed
1ca1a56
fix(release): bind registry checks to package metadata [skip ci]
t
committed
56f356d
Merge pull request #3864: recover release registry smoke after an accepted publish [skip ci]
lidge-jun
authored
f4a4b46
docs: plan lane D manual release chain [skip ci]
t
committed
609105c
docs: record lane D roadmap audit decisions [skip ci]
t
committed
b462cc5
fix(usage): resolve account prices through provider identity [skip ci]

t
and
rrmlima
committed
bf15366
fix(claude): preserve legacy thinking block order [skip ci]

t
and
lidge-jun
committed
c35b5a6
fix(models): guard edits during unknown receipt recovery [skip ci]

t
and
lidge-jun
committed
c5fb7e3
test(usage): use approved synthetic email domains [skip ci]

t
and
rrmlima
committed
c44c6de
feat(models): edit manual token prices and preserve explicit zero [skip ci]

t
and
nordz0r
committed
341d71d
fix(models): validate price receipts and redact CLI failures [skip ci]

t
and
nordz0r
committed
062e9cb
fix(models): start price reload state from user actions [skip ci]

t
and
nordz0r
committed
a6e1227
docs: record code-mode delivery and qualify Desktop model switching [skip ci]
t
committed
568a3e8
docs: complete Raycast status and model-name recovery guidance [skip ci]
t
committed
e0a1a88
docs: qualify Desktop model switching in translated guides [skip ci]
t
committed
f8c8f6d
fix(models): isolate async price-read state callbacks [skip ci]

t
and
nordz0r
committed
209c88b
feat(usage): add inclusive custom time windows [skip ci]

t
and
Manson2438
committed
c492474
docs: define lane D verification and handoff [skip ci]
t
committed
089320e
fix(usage): preserve dates across timezone calendar gaps [skip ci]

t
and
Manson2438
committed
e346d7a
test(models): scope price errors to their dialog [skip ci]

t
and
nordz0r
committed
5669413
fix(usage): encode custom report identity as a tuple [skip ci]

t
and
Manson2438
committed
fe94603
Merge pull request #3877: preserve signed and redacted thinking ordering (#3719 slice) [skip ci]
lidge-jun
authored
4fe4ad8
Merge pull request #3902: guard unknown display-name receipt recovery [skip ci]
lidge-jun
authored
d05250d
Merge pull request #3903: resolve account labels through pricing identity (#3817) [skip ci]
lidge-jun
authored
cb1113f
Merge pull request #3904: edit manual prices and honor explicit zero (#3667) [skip ci]
lidge-jun
authored
29405d3
Merge pull request #3905: select inclusive custom usage time windows (#3379 slice, from #2956) [skip ci]
lidge-jun
authored
da707cc
Merge pull request #3883: release-246 docs follow-ups (Raycast copy, CLI text tests, locale editor sections, French fix) [skip ci]
lidge-jun
authored
1649247
Merge pull request #3884: code-mode delivery record, Desktop /model caveat, locale translations [skip ci]
lidge-jun
authored
74089fd
feat(gui): add guarded routed model picker drag ordering [skip ci]

t
and
leonclab
committed
8ecf91f
fix(gui): reconcile picker lifecycle outside synchronous effects [skip ci]

t
and
leonclab
committed
dd8fb50
test(gui): preserve read-after-write picker fixture state [skip ci]

t
and
leonclab
committed
3fb08ec
Merge pull request #3887: drag-and-drop model picker ordering (#3774 slice, carry) [skip ci]
lidge-jun
authored
1e188b7
feat(router): add per-model pinned reasoning effort overrides [skip ci]

authored and
t
committed
524985f
fix(router): unify effort validation with isDeclaredReasoningEffort, support native chat path, and key-level merge in PUT\n\n- unify effort validation across policy and routes to use isDeclaredReas…

authored and
t
committed
331e68f
fix(router): enforce effort cap after pin in native chat and normalize whitespace in model keys [skip ci]

authored and
t
committed
24149f3
fix: adapt pinned effort carry to current config and wire contracts [skip ci]

t
and
Liang-Psych
committed
5865367
fix: preserve price writes across concurrent provider replacement [skip ci]

t
and
Liang-Psych
committed
c145a70
test: use a valid provider config for effort-cap API fixtures [skip ci]

t
and
Liang-Psych
committed
eeb5501
Merge pull request #3892: per-model pinned reasoning effort overrides (carry #3336) [skip ci]
lidge-jun
authored
f802f71
docs: publish the sponsorship rule set (SPONSORS.md + README section) (#3910)
lidge-jun
authored
8bc9e4e
docs(devlog): rank 27 next-release landing recommendations for dev after v2.46.0
t
committed
6744571
docs(devlog): plan release train 260907 lanes and merge protocol [skip ci]
t
committed
93abd0f
docs(devlog): amend release-train ownership for i18n and how-it-works [skip ci]
t
committed
0fbfcf8
docs(devlog): record release-train wp1 dispatch and main chain [skip ci]
t
committed
8c5cf59
docs(devlog): record M chain landing on dev [skip ci]
t
committed
c1419de
docs(devlog): record B landing and CI serialization policy [skip ci]
t
committed
6415f4d
docs(devlog): record A and M7/M8 landings [skip ci]
t
committed
0d419a2
docs(devlog): record C and E#3864 landings [skip ci]
t
committed
6a788c6
docs(devlog): record D landing [skip ci]
t
committed
d79e6e7
docs(devlog): record E docs landing [skip ci]
t
committed
2fbaf48
docs(devlog): record #3887 landing [skip ci]
t
committed
4c0f46e
docs(devlog): record final chain landing and train-head CI [skip ci]
t
committed
768c7d1
docs(devlog): release-train readiness record for dev after v2.46.0 [skip ci]
t
committed
f502afd
Merge pull request #3913: 260907 release-train devlog record [skip ci]
lidge-jun
authored
273a3ab
docs(readme): one-line Sponsors slot, sponsorship summary and contact at the bottom (#3918)
lidge-jun
authored
aeefb3a
feat(providers): OrcaRouter PKCE account login and live catalog (carry #3908) (#3921)

lidge-jun
and
akf66
authored
c41232a
docs(readme): one sponsor line pointing at SPONSORS.md (#3923)
lidge-jun
authored
17d2a17
fix(pricing): preserve concurrent rates when resetting the last live price
t
committed
c4725b2
fix(adapters): require host error context before recovery guidance
t
committed
0aef26c
fix(oauth): accept documented Orca key grants and clarify private endpoint consent
t
committed
e9d72e0
fix(gui): serialize OAuth restarts behind pending cancellation
t
committed
cb24485
chore(release): open dev at 2.48.0 before releasing 2.47.0 (#3925)
github-actions[bot]
authored
09f669a
fix(cursor): preserve tool results outside verified code-mode errors
t
committed
7768800
fix(gui): retain unapplied Desktop preference state across refreshes
t
committed
e7173ed
fix(usage): reject custom reports with missing or mismatched window receipts
t
committed
3baad73
fix(gui): keep subagent roster usable when fallback settings fail
t
committed
7d8082c
docs: record release regression persistence and response contracts
t
committed
ba5e4e8
Merge remote-tracking branch 'origin/dev' into codex/release-247-regressions
t
committed
7df1b9e
docs: explain custom report confirmation and price reset scope
t
committed
18b8890
refactor(gui): chain cancellation barriers without an await loop
t
committed
713be5c
test(gui): observe dashboard hook state after React commits
t
committed
4437cd8
release: prepare 2.47.0-preview.20260908 from audited regression candidate
t
committed
63fb304
refactor(gui): give settings polling and mutation explicit reducer ownership
t
committed
42f2afd
fix(gui): guard polling input and precompute model membership
t
committed
48ab3e1
Merge commit '48ab3e1e66cfa6e0c873de2fafa4540ac61d6c7d' into codex/release-247-preview
t
committed
665ef82
test(gui): follow the shared OAuth cancellation request owner
t
committed
5725219
Merge commit '57252193b' into codex/release-247-preview
t
committed
d2ec06b