[antauth-alfonso]

Version bump to 2.2.3 for Core, OpenCode and Pi, lockfile synced, CHANGELOG heading (Dependencies line corrected: E2E host now 1.19.3, Biome, lefthook, common-auth 0.24.0), and the release notes in .cortexkit/release-notes/2.2.3.md. No code changes. Publishing approved by Ufuk.

---

Summary by cubic

Release 2.2.3 for @cortexkit/anthropic-auth-core, @cortexkit/opencode-anthropic-auth, and @cortexkit/pi-anthropic-auth. No code changes: bumps package versions, syncs bun.lock, moves the CHANGELOG to the 2.2.3 heading, and adds release notes. Dependencies move together: @cortexkit/common-auth 0.24.0, E2E OpenCode host 1.19.3, Biome 2.5.15, lefthook 2.2.2.

Bug Fixes

• Vault setup no longer hangs on a vault that can't connect plugins and stops with a clear message about whether a request was created.
• A stuck pending enrollment is cleared after the vault refuses, so Reset host enrollment works and the menu no longer shows a bare refused-pending.
• The migration-required message runs the current setup instead of naming @2.0.0.
• A missing private-files addon is reported by name instead of invalid-token.
• The OAuth sign-in link opens in a dialog that stays open; /claude explains a missing TUI part in OpenCode 1.

^{Written for commit cc6435e. Summary will update on new commits.}