v0.14.0

0.14.0 (2026-05-23)

Features

• diagnostics: show request payload size breakdown (#1237) (0aff8de)
• opengateway: require API key on /v1/* and switch to bearer auth (#1322) (0fbfc12)
• xai: add xAI/Grok OAuth provider (browser + device-code) (#1284) (326f082)

Bug Fixes

• add 5-minute timeout to QueryGuard to prevent infinite spinner (#1255) (23254c2)
• allow non-OpenAI providers to skip OPENAI_API_KEY check (#1207) (4897d59)
• bash: preserve captured stdout in error message on non-zero exit (#1236) (a44a83f)
• compact: clear native tool results after time compaction (#1278) (9b3c904)
• grpc: register built-in agents so Agent tool isn't always empty (#1296) (c366f70)
• harden XAA OAuth callback state handling (#1299) (bafc2a1)
• input: preserve split utf8 keypresses (#1241) (a9f8642)
• MiMo remove unsupported body fields and preserve reasoning content (#1253) (aab2fbc)
• monitor: close permission dialog after selection (#1225) (1aa8aab)
• query: stop repeated tool-failure loops (#1219) (f71e769)
• recovery: keep thinking blocks on resume for reasoning-echo providers (#1248) (0d3c157)
• retry: adjust max_tokens on OpenRouter 402 credit shortfall (#1263) (892c054), closes #1125
• stdin,mcp: guard rawModeEnabledCount and defer MCP connections to prevent input freeze (#603) (#1268) (90360d3)
• TaskListV2: revert overflowX hidden that hides task text labels (#1215) (0fba154)
• treat blank Read.pages as omitted (#1269) (eca9dba)
• xml: guard escapeXml/escapeXmlAttr against null and undefined (#1250) (03f8791)