@oonacode/win32-x64 0.3.207 → 0.3.208

package/oona.exe

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/oona.exe
-size: 112223232 bytes
-sha256: f70cefe0da0bbba1e026c7df4eb21385dbb263fac4621a527938c15fdaeea9c6
+size: 112228352 bytes
+sha256: 06e08d926a50920d9a34ac44774210709e7cbff19d9fc4c4564537ab672b473b

package/oonacode-release.json

@@ -1,13 +1,13 @@
 {
     "name":  "oonacode",
-    "version":  "0.3.207",
+    "version":  "0.3.208",
     "channel":  "stable",
     "platform":  "win32",
     "arch":  "x64",
     "mode":  "bun",
     "launcherRuntime":  "bun 1.4.1",
-    "commit":  "9a94d909",
-    "builtAt":  "2026-10-04T18:17:19.9144125Z",
+    "commit":  "7e4b31e7",
+    "builtAt":  "2026-10-04T21:16:40.8801735Z",
     "engine":  "engine-store",
     "engineVersion":  "0.3.280",
     "siteOrigin":  "https://oonacode.oonak.ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oonacode/win32-x64",
-  "version": "0.3.207",
+  "version": "0.3.208",
   "description": "OonaCode native binaries for Windows x64: oona.exe (CLI + headless host service), the pinned oonaclaude.exe engine sidecar, local web UI assets. Installed automatically as an optional dependency of `oonacode`.",
   "license": "UNLICENSED",
   "homepage": "https://oonacode.oonak.ai",

package/registry.json

@@ -386,8 +386,21 @@
         "header": "authorization-bearer"
       },
       "models": [
+        {
+          "id": "grok-4.7",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
+          "displayName": "Grok 4.7",
+          "contextWindow": 500000,
+          "supportsTools": true,
+          "supportsThinking": true,
+          "supportsVision": false,
+          "inputPricePerM": 4,
+          "outputPricePerM": 12,
+          "notes": "xAI's newest frontier model (SuperGrok's proxy lists it alone, 2026-10-04). Read from api.x.ai /v1/models with the pool's key that night: 500,000 context, prices identical to grok-4.6, reasoning effort low/medium/high/xhigh. TIERED upstream: this is the >=200k price; below 200k prompt tokens xAI charges half of it ($2 in / $0.50 cached / $6 out). The cheaper tier is `models.price_tier_rule` (migration 0163 copies grok-4.6's rows)."
+        },
         {
           "id": "grok-4.6",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
           "displayName": "Grok 4.6",
           "contextWindow": 500000,
           "supportsTools": true,
@@ -399,6 +412,7 @@
         },
         {
           "id": "grok-4.5",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
           "displayName": "Grok 4.5",
           "contextWindow": 500000,
           "supportsTools": true,
@@ -453,10 +467,10 @@
           "notes": "Grok 4.20 (0309 build) without reasoning: same prices, faster, no thinking. TIERED upstream: this is the >=200k price; below 200k prompt tokens xAI charges half of it ($1.25 in / $0.20 cached / $2.50 out). The cheaper tier is `models.price_tier_rule` (migration 0099). Read from docs.x.ai/docs/models on 2026-09-18 (owner: \"read x.ai/pricing and add all models\"). NOT LISTED: `grok-4.20-multi-agent-0309` — every request from the engine carries tools and xAI answers `400 Client-side tools for multi-agent models require beta access` (measured 2026-09-19 through the pool on the owner's SuperGrok); delisted by migration 0100 until xAI opens that beta."
         }
       ],
-      "defaultModel": "grok-4.6",
+      "defaultModel": "grok-4.7",
       "modelAliases": {
-        "opus": "grok-4.6",
-        "sonnet": "grok-4.6",
+        "opus": "grok-4.7",
+        "sonnet": "grok-4.7",
         "haiku": "grok-4.3"
       },
       "capabilities": {
@@ -472,7 +486,8 @@
         "stripCacheControl": true,
         "allowedBetas": [],
         "anthropicVersion": "2023-06-01",
-        "toolDescriptionRequired": true
+        "toolDescriptionRequired": true,
+        "keepOutputConfig": true
       },
       "directCapable": true,
       "phase": 1,
@@ -508,13 +523,15 @@
             "signInLabel": "Sign in with SuperGrok",
             "referrer": "oonacode"
           },
-          "notes": "A SuperGrok / X Premium token is NOT accepted by the developer API: api.x.ai bills it against the account's prepaid API credits and answers 402 personal-team-blocked:spending-limit (measured 2026-09-18). The surface a subscription belongs to is xAI's Grok CLI chat proxy, https://cli-chat-proxy.grok.com — the host Grok Build itself talks to — which serves the same Grok models from the subscription's weekly pool, speaks the Anthropic Messages shape at /v1/messages (thinking blocks and all; measured), and wants the Grok CLI identity headers (x-xai-token-auth, x-grok-client-identifier, x-grok-client-version — the proxy refuses versions older than what the current grok binary sends, so bump the version when it does). A FREE account gets a small quota there (21 requests / 1M tokens per window, measured); `grok-build` answers 403 'requires a Grok subscription' until the plan is paid. The operator's own SuperGrok / X Premium subscription in the pool (owner, 2026-09-18: \"the server should use it for oonacode pool models\"). Signed in from the admin's Subscription tab with the same OAuth device-code flow the app uses for a user's subscription (`xai-subscription`) — Grok Build's public client id; the gateway keeps the access + refresh pair as one sealed secret and refreshes it two minutes before expiry, so the row needs no pasted key and no expiry date. The token is an ordinary bearer for api.x.ai: the same pass-through as the API key, on the subscription lane first. operatorOnly: a user's own SuperGrok is `xai-subscription`, direct from the PC (guardrail 4).",
+          "notes": "A SuperGrok / X Premium token is NOT accepted by the developer API: api.x.ai bills it against the account's prepaid API credits and answers 402 personal-team-blocked:spending-limit (measured 2026-09-18). The surface a subscription belongs to is xAI's Grok CLI chat proxy, https://cli-chat-proxy.grok.com — the host Grok Build itself talks to — which serves the same Grok models from the subscription's weekly pool, speaks the Anthropic Messages shape at /v1/messages (thinking blocks and all; measured), and wants the Grok CLI identity headers (x-xai-token-auth, x-grok-client-identifier, x-grok-client-version, and since Grok CLI 1.x x-authenticateresponse and x-grok-client-mode — the proxy refuses versions older than what the current grok binary sends, so bump the version when it does: 0.2.111 was refused with 426 \"update to version 1.0.13 or later\" on 2026-10-04, when Grok Build was at 1.0.45; 1.0.46 recorded from the real CLI that night). A FREE account gets a small quota there (21 requests / 1M tokens per window, measured); `grok-build` answers 403 'requires a Grok subscription' until the plan is paid. The operator's own SuperGrok / X Premium subscription in the pool (owner, 2026-09-18: \"the server should use it for oonacode pool models\"). Signed in from the admin's Subscription tab with the same OAuth device-code flow the app uses for a user's subscription (`xai-subscription`) — Grok Build's public client id; the gateway keeps the access + refresh pair as one sealed secret and refreshes it two minutes before expiry, so the row needs no pasted key and no expiry date. The token is an ordinary bearer for api.x.ai: the same pass-through as the API key, on the subscription lane first. operatorOnly: a user's own SuperGrok is `xai-subscription`, direct from the PC (guardrail 4).",
           "baseUrl": "https://cli-chat-proxy.grok.com",
           "extraHeaders": {
             "x-xai-token-auth": "xai-grok-cli",
+            "x-authenticateresponse": "authenticate-response",
+            "x-grok-client-mode": "interactive",
             "x-grok-client-identifier": "grok-pager",
-            "x-grok-client-version": "0.2.111",
-            "user-agent": "grok-pager/0.2.111 grok-shell/0.2.111 (windows; x86_64)"
+            "x-grok-client-version": "1.0.46",
+            "user-agent": "grok-pager/1.0.46 grok-shell/1.0.46 (windows; x86_64)"
           }
         }
       ]
@@ -531,14 +548,28 @@
         "header": "authorization-bearer",
         "extraHeaders": {
           "x-xai-token-auth": "xai-grok-cli",
+          "x-authenticateresponse": "authenticate-response",
+          "x-grok-client-mode": "interactive",
           "x-grok-client-identifier": "grok-pager",
-          "x-grok-client-version": "0.2.111",
-          "user-agent": "grok-pager/0.2.111 grok-shell/0.2.111 (windows; x86_64)"
+          "x-grok-client-version": "1.0.46",
+          "user-agent": "grok-pager/1.0.46 grok-shell/1.0.46 (windows; x86_64)"
         }
       },
       "models": [
+        {
+          "id": "grok-4.7",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
+          "displayName": "Grok 4.7",
+          "contextWindow": 500000,
+          "supportsTools": true,
+          "supportsThinking": true,
+          "supportsVision": false,
+          "inputPricePerM": 4,
+          "outputPricePerM": 12
+        },
         {
           "id": "grok-4.6",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
           "displayName": "Grok 4.6",
           "contextWindow": 500000,
           "supportsTools": true,
@@ -549,6 +580,7 @@
         },
         {
           "id": "grok-4.5",
+          "effortLevels": ["low", "medium", "high", "xhigh"],
           "displayName": "Grok 4.5",
           "contextWindow": 500000,
           "supportsTools": true,
@@ -596,10 +628,10 @@
           "notes": "Served from the subscription pool through the Grok CLI chat proxy; no per-token price — the weekly pool is what it costs."
         }
       ],
-      "defaultModel": "grok-4.6",
+      "defaultModel": "grok-4.7",
       "modelAliases": {
-        "opus": "grok-4.6",
-        "sonnet": "grok-4.6",
+        "opus": "grok-4.7",
+        "sonnet": "grok-4.7",
         "haiku": "grok-4.3"
       },
       "capabilities": {
@@ -615,7 +647,8 @@
         "stripCacheControl": true,
         "allowedBetas": [],
         "anthropicVersion": "2023-06-01",
-        "toolDescriptionRequired": true
+        "toolDescriptionRequired": true,
+        "keepOutputConfig": true
       },
       "phase": 1,
       "enabled": true,
@@ -632,7 +665,7 @@
         "referrer": "oonacode"
       },
       "docsUrl": "https://x.ai/news/grok-opencode",
-      "notes": "A SuperGrok / X Premium token is NOT accepted by the developer API: api.x.ai bills it against the account's prepaid API credits and answers 402 personal-team-blocked:spending-limit (measured 2026-09-18). The surface a subscription belongs to is xAI's Grok CLI chat proxy, https://cli-chat-proxy.grok.com — the host Grok Build itself talks to — which serves the same Grok models from the subscription's weekly pool, speaks the Anthropic Messages shape at /v1/messages (thinking blocks and all; measured), and wants the Grok CLI identity headers (x-xai-token-auth, x-grok-client-identifier, x-grok-client-version — the proxy refuses versions older than what the current grok binary sends, so bump the version when it does). A FREE account gets a small quota there (21 requests / 1M tokens per window, measured); `grok-build` answers 403 'requires a Grok subscription' until the plan is paid. The user's own SuperGrok / X Premium subscription (owner, 2026-09-18: \"lets do xai first because it works with token and refresh token only\"). Signed in with the OAuth device-code flow xAI opened to third-party coding agents (its OpenCode announcement; Hermes, Kilo Code, Warp and pi ship the same flow) using Grok Build's own PUBLIC client id, taken from xai-org/grok-build crates/codegen/xai-grok-login/src/config.rs - a device-code client has no secret. The access token is an ordinary bearer for api.x.ai, so the engine runs the same pass-through as an xAI API key; the host injects the CURRENT token per request through its loopback upstream and refreshes it (the refresh token rotates) two minutes before expiry. route=direct: the token never reaches the gateway (guardrail 4) and this entry seeds no server rows. Some $30 SuperGrok tiers answer 403 from the OAuth backend (reported by Hermes users) - the provider page shows that refusal in words. Prices are the API list (a subscription is flat-rate; the figures only size the catalogue)."
+      "notes": "A SuperGrok / X Premium token is NOT accepted by the developer API: api.x.ai bills it against the account's prepaid API credits and answers 402 personal-team-blocked:spending-limit (measured 2026-09-18). The surface a subscription belongs to is xAI's Grok CLI chat proxy, https://cli-chat-proxy.grok.com — the host Grok Build itself talks to — which serves the same Grok models from the subscription's weekly pool, speaks the Anthropic Messages shape at /v1/messages (thinking blocks and all; measured), and wants the Grok CLI identity headers (x-xai-token-auth, x-grok-client-identifier, x-grok-client-version, and since Grok CLI 1.x x-authenticateresponse and x-grok-client-mode — the proxy refuses versions older than what the current grok binary sends, so bump the version when it does: 0.2.111 was refused with 426 \"update to version 1.0.13 or later\" on 2026-10-04, when Grok Build was at 1.0.45; 1.0.46 recorded from the real CLI that night). A FREE account gets a small quota there (21 requests / 1M tokens per window, measured); `grok-build` answers 403 'requires a Grok subscription' until the plan is paid. The user's own SuperGrok / X Premium subscription (owner, 2026-09-18: \"lets do xai first because it works with token and refresh token only\"). Signed in with the OAuth device-code flow xAI opened to third-party coding agents (its OpenCode announcement; Hermes, Kilo Code, Warp and pi ship the same flow) using Grok Build's own PUBLIC client id, taken from xai-org/grok-build crates/codegen/xai-grok-login/src/config.rs - a device-code client has no secret. The access token is an ordinary bearer for api.x.ai, so the engine runs the same pass-through as an xAI API key; the host injects the CURRENT token per request through its loopback upstream and refreshes it (the refresh token rotates) two minutes before expiry. route=direct: the token never reaches the gateway (guardrail 4) and this entry seeds no server rows. Some $30 SuperGrok tiers answer 403 from the OAuth backend (reported by Hermes users) - the provider page shows that refusal in words. Prices are the API list (a subscription is flat-rate; the figures only size the catalogue)."
     },
     {
       "id": "deepseek",
@@ -1265,6 +1298,32 @@
           "inputPricePerM": 0.75,
           "outputPricePerM": 3.75,
           "notes": "Google lists one model per level — gemini-3.7-flash-high, -medium and -low (fetchAvailableModels, 2026-10-03: 1,048,576 context / 65,536 output each); OonaCode shows ONE model and the chat’s effort picker fills the level (upstreamId template; xhigh and max read as high; no effort = high). Cost = Google’s Gemini API list price for gemini-3.7-flash: $0.75 in / $0.075 cached / $3.75 out per 1M through 2026-12-31, DOUBLING to $1.50 / $0.15 / $7.50 from 2027-01-01 (ai.google.dev/gemini-api/docs/pricing, updated 2026-10-01) — move the cost cells on the model page then."
+        },
+        {
+          "id": "claude-opus-5-5",
+          "displayName": "Claude Opus 5.5 (Antigravity)",
+          "upstreamId": "claude-opus-5-5-{effort:high}",
+          "contextWindow": 250000,
+          "maxOutputTokens": 64000,
+          "supportsTools": true,
+          "supportsThinking": true,
+          "supportsVision": true,
+          "inputPricePerM": 4,
+          "outputPricePerM": 20,
+          "notes": "Google-hosted Claude through the operator's Antigravity sign-in, the SAME id as Anthropic's row, so the pool folds the two into one entry whose Providers name both, and a new chat goes to the provider with more quota left (owner, 2026-10-04). Google serves it per level — `agy models` (1.2.16, 2026-10-04) lists -low, -medium and -high — and the chat's effort fills the template (xhigh/max read as high). Window 250,000 / 64,000 output as Google gave Claude 4.6 on 2026-10-03 (fetchAvailableModels); the 5.5 figure is to be read from fetchAvailableModels after the operator's server sign-in, and the pool keeps a chat whose prompt exceeds it on Anthropic's 1M. Cost = Anthropic's list price (Google publishes none for its hosted Claude), so a user pays the same on either provider. Anthropic's price: $4 / $0.20 cached / $20 per 1M."
+        },
+        {
+          "id": "claude-sonnet-5-5",
+          "displayName": "Claude Sonnet 5.5 (Antigravity)",
+          "upstreamId": "claude-sonnet-5-5-{effort:high}",
+          "contextWindow": 250000,
+          "maxOutputTokens": 64000,
+          "supportsTools": true,
+          "supportsThinking": true,
+          "supportsVision": true,
+          "inputPricePerM": 2,
+          "outputPricePerM": 10,
+          "notes": "Google-hosted Claude through the operator's Antigravity sign-in, the SAME id as Anthropic's row, so the pool folds the two into one entry whose Providers name both, and a new chat goes to the provider with more quota left (owner, 2026-10-04). Google serves it per level — `agy models` (1.2.16, 2026-10-04) lists -low, -medium and -high — and the chat's effort fills the template (xhigh/max read as high). Window 250,000 / 64,000 output as Google gave Claude 4.6 on 2026-10-03 (fetchAvailableModels); the 5.5 figure is to be read from fetchAvailableModels after the operator's server sign-in, and the pool keeps a chat whose prompt exceeds it on Anthropic's 1M. Cost = Anthropic's list price (Google publishes none for its hosted Claude), so a user pays the same on either provider. Anthropic's price: $2 / $0.20 cached / $10 per 1M."
         }
       ],
       "defaultModel": "gemini-3.8-flash",