v0.15.0

Highlights

• End-to-end encrypted task documents — task docs are now encrypted on the client before they ever leave your machine. Encryption keys are set up automatically on login, and document keys are stored locally.
• Sharing-ready key architecture — reworked document keying to per-task keys wrapped by a master key, laying the groundwork for sharing a task with someone else without re-encrypting your data.

Codex improvements

• Surface Codex context occupancy so you can see how full a session's context window is.
• Account for Codex CLI cached input in token totals.
• Realign Codex desktop token buckets for accurate accounting.
• Track the latest model used in a Codex session.

Fixes

• Auth tests no longer open a real browser.