[WRONG BRANCH] release: promote verified 2.51.0 product tree to main - #4271

Merged

lidge-jun merged 158 commits into

mainfrom

codex/release-251-main

Sep 11, 2026

Commits on Sep 10, 2026

Commits on Sep 11, 2026

fix(qoder): stop forwarding the region between a suppressed block and a refusal
lidge-jun
committed
9cdcb43
fix(qoder): close three more scaffolding leaks in the routed-output guard
lidge-jun
committed
99028b6
Merge pull request #4233 from lidge-jun/codex/260911-l3-account-attribution
lidge-jun
authored
160a58f
Merge pull request #4235 from lidge-jun/codex/260911-l4-service-cli
lidge-jun
authored
55c74ac
Merge pull request #4232 from lidge-jun/codex/260911-l6-streaming-tools
lidge-jun
authored
9341de0
Merge pull request #4239 from lidge-jun/codex/260911-l7-docs
lidge-jun
authored
271a0ab
Merge pull request #4238 from lidge-jun/codex/260911-l3-pool-plan-policy
lidge-jun
authored
59f3778
Merge pull request #4237 from lidge-jun/codex/260911-l4-stop-refusal
lidge-jun
authored
bb17773
Merge pull request #4234 from lidge-jun/codex/260911-l6-qoder-scaffold
lidge-jun
authored
0589579
Merge pull request #4241 from lidge-jun/codex/260911-l7-remote-hub
lidge-jun
authored
09e99eb
Merge pull request #4240 from lidge-jun/codex/260911-l4-client-catalog
lidge-jun
authored
babb764
fix(service): make macOS repair verify, roll back, and stop evicting healthy jobs

lidge-jun
and
claude
committed
7ff8d07
test(service): cover the launchd repair protocol and the load tri-state

lidge-jun
and
claude
committed
13ca31d
docs(devlog): record the launchd repair/status lane

lidge-jun
and
claude
committed
1b98b68
fix(service): repair on the tri-state probe, and evict both launchd domains

lidge-jun
and
claude
committed
6b62524
test(service): cover the probe-driven repair, PATH reuse and both domains

lidge-jun
and
claude
committed
cef096d
docs(devlog): record the review round of the launchd repair lane

lidge-jun
and
claude
committed
5a8bffe
docs(devlog): name both unguarded writers of the live launchd assets

lidge-jun
and
claude
committed
3d2e957
fix(service): make ocx service restart restart a healthy launchd job

lidge-jun
and
claude
committed
ee6a20a
test(service,doctor): restart is its own verb and the skew advice names it

lidge-jun
and
claude
committed
8e669ec
fix(gui): open the local management ingress on a hub instead of the tailnet-bound proxy origin

lidge-jun
and
claude
committed
95b95b6
feat(server): bind a same-port loopback companion on a non-loopback hub

lidge-jun
and
claude
committed
cdd64f3
fix(codex): honor the companion port everywhere, and name the hub gate instead of the toggle

lidge-jun
and
claude
committed
06a506c
test(server,cli): pin the companion listener, the drift set, and the hub-gate sentences

lidge-jun
and
claude
committed
d015bc7
test(clients): give the extracted handleEnsure harness its new startup-line helper

lidge-jun
and
claude
committed
98dc39b
docs(devlog): record the hub single-port companion unit (PR2)

lidge-jun
and
claude
committed
62b905e
fix(codex): report the hub gate only when the toggle is on, and refuse every wildcard spelling

lidge-jun
and
claude
committed
e958961
feat(server): admit the hub's own client wires on the loopback listener

lidge-jun
and
claude
committed
195158b
test(service): point the gui-url source oracle at selectDefaultGuiUrl

lidge-jun
and
claude
committed
216032d
feat(service): provision the hub's data-plane token instead of demanding it

lidge-jun
and
claude
committed
d64b10d
feat(cli): load the installed data-plane token before a foreground start binds

lidge-jun
and
claude
committed
3055a2f
feat(config): add the optional hub.dataPublicOrigin advertised data origin

lidge-jun
and
claude
committed
65ec21a
feat(cli): add ocx hub invite and one hub block in ocx status

lidge-jun
and
claude
committed
bf7fed2
docs(cli): document the hub topology, invites, and token auto-provisioning

lidge-jun
and
claude
committed
e933af6
fix(claude): resolve a local client's two destinations instead of one port

lidge-jun
and
claude
committed
0dc12be
test(service,cli): pin token provisioning, the hub block, and invite refusals

lidge-jun
and
claude
committed
5387377
docs(remote-hub): the one-port recipe, invite flow, and launchd semantics (en+ko)

lidge-jun
and
claude
committed
eda6356
test(claude,server,vision): pin both local destinations per module

lidge-jun
and
claude
committed
4d044d6
docs(devlog): record the hub token UX unit (PR4)

lidge-jun
and
claude
committed
cd58bd1
docs(skill): teach the ocx skill the one-port hub, invites, and launchd no-ops

lidge-jun
and
claude
committed
de8674f
docs(devlog): record the hub local-clients unit (PR3)

lidge-jun
and
claude
committed
83ce218
test(service): drop the installLaunchd import the restack left unused

lidge-jun
and
claude
committed
08b5f03
docs(cli): say that a macOS restart is a no-op and that --management-url only confirms

lidge-jun
and
claude
committed
a3dde46
fix(lib,claude,server,vision): fall back to the bind address for local inference

lidge-jun
and
claude
committed
0e37f38
fix(cli): refuse a loopback data origin and name the origin an invite binds

lidge-jun
and
claude
committed
926c62e
docs(devlog): record the docs and skill unit (PR5)

lidge-jun
and
claude
committed
7bc6647
feat(server): admit POST /v1/messages/count_tokens on the loopback listener

lidge-jun
and
claude
committed
6d555ff
fix(service,cli): re-check the admin-token collision on the reused token file

lidge-jun
and
claude
committed
db3a899
docs(remote-hub): reconcile with PR4's review round across both locales and the skill

lidge-jun
and
claude
committed
1db8136
docs(structure,devlog): record the local-destination review round

lidge-jun
and
claude
committed
59c45c1
test(cli,service): pin the review-round refusals and the admin-collision state

lidge-jun
and
claude
committed
8142a85
docs(remote-hub): ocx service restart now restarts a healthy launchd job

lidge-jun
and
claude
committed
7d6b5b4
test(server): the translated wires now prove Reserve admission on the listener

lidge-jun
and
claude
committed
0fd205f
docs(devlog): record the PR4 review round

lidge-jun
and
claude
committed
902fc02
docs(cli): lifecycle reference no longer calls restart an alias of repair

lidge-jun
and
claude
committed
eff7204
feat(server): serve the hub's provider, login and roster state on the data plane

lidge-jun
and
claude
committed
2a53d7e
feat(client): read hub state over the data plane, and never degrade to local state

lidge-jun
and
claude
committed
a9ea013
feat(cli): ocx status on a connected client reports the hub, and labels what is local

lidge-jun
and
claude
committed
e832345
fix(claude): write the roster on a connected client, from the hub's list

lidge-jun
and
claude
committed
60d9e5d
feat(cli): label a client in ocx config show and stop printing the catalog blob

lidge-jun
and
claude
committed
bb67373
docs(devlog): record the client hub-state unit (PR6)

lidge-jun
and
claude
committed
da65f9c
fix(server,client): hub state exports only enabled providers and names every failure

lidge-jun
and
claude
committed
44b256c
fix(cli,client): observe a client's connection, and drop its hub-state cache on disconnect

lidge-jun
and
claude
committed
d4680d9
test(server): pin that /v1/hub-state stays off the unauthenticated loopback listener

lidge-jun
and
claude
committed
fe65afe
docs(devlog,structure): record the PR6 review round and name hub-state ownership

lidge-jun
and
claude
committed
af7c114
Merge pull request #4249 from lidge-jun/codex/260911-l4-launchd-repair
lidge-jun
authored
fee6e88
Merge pull request #4250 from lidge-jun/codex/260911-l4-hub-loopback-companion
lidge-jun
authored
24ef1ec
Merge pull request #4251 from lidge-jun/codex/260911-l4-hub-local-clients
lidge-jun
authored
c3419e5
Merge pull request #4252 from lidge-jun/codex/260911-l4-hub-token-ux
lidge-jun
authored
5557612
Merge pull request #4254 from lidge-jun/codex/260911-l7-hub-docs-skill
lidge-jun
authored
6d8ed37
Merge pull request #4255 from lidge-jun/codex/260911-l4-client-hub-state
lidge-jun
authored
42184ea
fix(codex): emit max/ultra efforts unconditionally and expire stale clamp diagnostics
lidge-jun
committed
60cec19
docs(devlog): record the catalog presentation and effort projection unit
lidge-jun
committed
9d0f493
docs(devlog): close the catalog presentation and effort projection cycle
lidge-jun
committed
dac34a6
fix(codex): repair an orphaned exempt default instead of advertising an unselectable one
lidge-jun
committed
b4a3a80
Merge pull request #4257 from lidge-jun/codex/260911-clamp-expiry
lidge-jun
authored
18e553a
provider: seed GLM-5.3-Flash on the BigModel Responses preset
lidge-jun
committed
846dfad
docs(providers): seed Flash in the BigModel Responses roster the page describes
lidge-jun
committed
c838ff5
Merge pull request #4244 from lidge-jun/codex/260911-r2-catalog-pool
lidge-jun
authored
a8f7619
pool: name the account when a refresh fails or its models vanish
lidge-jun
committed
d277926
Merge pull request #4248 from lidge-jun/codex/260911-r2-pool-account-attribution
lidge-jun
authored
ac3c3d6
client: report local Codex readiness instead of bare connected state
lidge-jun
committed
635a3d1
client: fold adversarial review into the readiness report
lidge-jun
committed
efefde4
client: give the write-time gate the same observer in production
lidge-jun
committed
87f5b52
client: keep ocx config show out of the local Codex probe
lidge-jun
committed
6b04f13
Merge pull request #4246 from lidge-jun/codex/260911-r2-client-display
lidge-jun
authored
75d4cde
docs(i18n): make the remote hub guide runnable in every locale
lidge-jun
committed
9cc825f
Merge pull request #4247 from lidge-jun/codex/260911-r2-docs-locales
lidge-jun
authored
b550d24
fix(responses): keep the retryable main-refresh refusal an overload, not a bad key
lidge-jun
committed
b83a0db
Merge pull request #4269 from lidge-jun/codex/260911-main-refresh-classification
lidge-jun
authored
42fcf9a
release: promote verified 2.51.0 product tree to main
lidge-jun
committed
cf456e8