main
fix(inference): surface & demote OpenRouter revoked-key 401 'User not found.' (#4074) (#4101)
fix(runtime): apply 16 MiB worker stack to desktop core + agent CLI runtimes (#3159) (#3175)
feat(tokenjuice): Headroom-inspired content router, compressors, CCR + savings (#4123)
fix: hardening audit pass 1 — core RPC auth, inference resilience, secrets, deep-link CSRF (#3652)
feat(agentbox): GMI Cloud AgentBox marketplace adapter (#3620) (#3651)
Improve inline autocomplete reliability, sanitization, and debug logging (#407)
Fix memory letterhead source formatting (#4051)
refactor(inference): retire local_ai rpc namespace (#3476)
fix(rpc): handle legacy namespaced method calls (#3875)
feat: tighten runtime policy + transport guards (#2331)
fix(security): replace wildcard CORS on core RPC
fix(tinyplace): classify wallet-not-configured as expected user-state (#3964) (#3974)
fix(rpc): alias legacy tool_registry.diagnostics to canonical method (#3294) (#3973)
fix(reset): release log file handle + queue locked entries on Windows reboot (#2668)
feat(security): explicit agent turn origin + fail-closed approval gate + memory provenance (#3227)
feat(subconscious): add scratchpad deep research loop (#3439)
fix(observability): demote Ollama Cloud hosted-inference 500 flood (TAURI-RUST-5MV) (#4069)
🧪 Add tests for `summarize_rpc_result` (#1418)
test: expand agent harness coverage (#513)
feat(agent): track session token costs (#4136)
refactor(subconscious): structured memory_diff → prepare_context → decide tick (#4107)
feat: tighten runtime policy + transport guards v3 (#3306)