v1.197.0

1.197.0 (2026-09-05)

Features

• agent: a run under a spending ceiling tells the model how much room is left (#1514) (51f6b22)
• knowledge: a passage carries where it came from into the index (#1513) (c38b07e)
• llm: per-turn context as a turn-scoped system message (#1519) (e93768e)
• llm: the OAuth path carries per-turn context like the others (#1522) (326dd35)
• llm: xAI and MiniMax count their own tokens (#1515) (c20786f)

Bug Fixes

• agent: tool schemas stop travelling once they crowd out the conversation (#1505) (674397e)
• cache: an advisable compaction waits while the prefix cache is warm (#1506) (ebac1eb)
• cli: per-run state that is per run, and a seal that counts once stored (#1521) (28b1ebe)
• cli: per-turn context follows what the model still reads (#1520) (8be6b7d)
• cli: reasoning blocks are part of a journaled message identity (#1516) (ab8cf28)
• coder: a write may not leave the workspace, and the denylist works on macOS (#1510) (d4b822d)
• config: every variable the code reads is visible in /config, enforced by a test (#1509) (4edce44)
• context: the per-turn block stops repeating itself into the window (#1504) (1cf4cdf)
• context: the provider engine reaches Bedrock and can summarize server-side (#1507) (3d9c2c0)
• cost: the calibration sample measures what the request actually sent (#1508) (287b44d)
• ctxmgr: refresh adopts the current segmenter and situating seals (#1517) (cba6a56)
• gateway: an inbound message with no valid signature is refused (#1511) (c4f516a)
• llm: a turn-scoped system message goes where the provider accepts it (#1523) (ed0afec)
• llm: cache decisions hold for the conversation, thresholds follow the window (#1526) (0366ccf)
• llm: reasoning blocks travel back with the turn that produced them (#1501) (19d2aef)
• llm: the cache breakpoint survives a trailing system message (#1524) (0c66e4d)
• llm: the effort a turn asks for reaches the request on every provider (#1503) (46cdfd7)
• llm: the task budget travels, on both providers that read it (#1525) (1239580)
• server: refuse to serve an unauthenticated API on a reachable address (#1512) (c1af13a)