Koder v0.4.7

Highlights

Much faster start. Cold start no longer waits on optional sign-in checks (Codex, Claude, Cursor) — the prompt is ready right away and those run in the background. First launch dropped from ~25s to ~1s.
A model picker that helps you choose. Browse and compare models instead of guessing at an id.
Know when Koder needs you. The terminal rings and the title shows a badge when a run needs your input or finishes while you're in another window.

Sign-in works. "Open aixplain in your browser" now opens reliably on Mac, and the link is always shown with a Copy button if it doesn't.
Exporting a transcript works — it no longer printed the data and then falsely said "session not found."
Clear content-filter message. When the provider's safety filter stops a response, Koder now explains that plainly and keeps the partial reply instead of dropping everything.
Dialogs fit their content. Small dialogs (Export, Rename, Remember) are compact again instead of a large half-empty box; long ones still scroll.
Sessions from earlier builds. Koder reliably finds and offers to adopt sessions from other channels, including on Linux.
Steadier long turns. Stream cut-offs are retried sensibly instead of failing, and pressing Stop during a Codex turn stops it cleanly and lets the next turn work.
Cursor uses the model you pick instead of the account default.
Safe Auto asks before changes, as intended.
The TUI got a clearer model indicator, a queued-message preview and timer, and several rendering fixes.

Logs are private. Prompts, commands and answers are no longer written to the log, log files are readable only by you, and koder debug config hides API keys.
The terminal can't be spoofed. Model and tool output in the transcript and approval prompts can no longer inject control characters to fake buttons or hide text.
Tighter Codex permissions. Reading outside the workspace, secret files and browser data each ask as they should, and a command can't escape the workspace through a symlinked folder.
Approvals name what they are. A declined or un-evaluable request reads correctly instead of looking like you declined it.