v3.15.0

3.15.0 (2026-11-08)

Features

• a bookkeeping-only step now triggers a batching reminder (#1194) (0046c75)
• bash: hand long-running commands off to durable background jobs (#1200) (ea71f77), closes #1101
• compact on return from an idle gap, when the prompt cache is already cold (#1202) (f02e251)
• enforce bookkeeping batching — annotate results past the nudge cap, auto-finalize the checklist at turn end (#1204) (4b28d8c)
• github_pr_checks waits for CI in a background job instead of blocking (#1188) (b663366)
• irreversible actions ask in every mode again; /audit (#1125) (#1201) (4a3f180)
• models: per-profile caps, guardrail thresholds and config overrides (#999) (#1203) (e728ffe)
• optional intent-based model routing for light turns, with per-turn model attribution in cost-debug.jsonl (#1189) (ea250f4)
• per-turn outcome labels, requestId join keys, and direct provider attribution in cost-debug.jsonl (#1197) (9aa8a24)
• the stall guardrail ends runaway turns that make no file progress (#1182) (3914677)

Bug Fixes

• bash: block recursive sweeps of the home directory and filesystem root (#1191) (37e7af8)
• config: serialize config writes so concurrent patches don't clobber each other (#1207) (89cb734)
• dl: show the free tier's dl_only refusal as the service words it (#1185) (b69083a)
• memory and subagent gates log why they fire, and the exit flush survives its deadline (#1192) (62adcdb)
• security: install the cell runtime with --ignore-scripts (#1196) (3f19133)
• security: pin camouflage-tui to an exact version (#1190) (279618d)
• the GitHub proxy's close() destroys held-open connections (#1199) (48bede5)

Performance

• tool output reduction actually reduces (2% savings to real caps) (#1186) (0d86b09)