AlphaCode v1.0.93

AlphaCode 1.0.93 has been rebuilt with the desktop, session, tool-runtime and release-pipeline fixes below. Replace the complete Windows installation directory so AlphaCode.Desktop.exe stays beside alphacode.exe, and restart existing daemons after upgrading.

• Shared gold theme across terminal banners, session chrome and desktop controls; block-style banners adapt to normal narrow terminals.
• Smaller desktop composer, consistent focus animation, readable model picker, and models restricted to available connected-provider routes.
• Settings provider connections reuse CLI browser/device/API-key authentication and credential storage. API keys and verification input are masked and excluded from GUI preferences/process arguments.
• /copy tolerates older daemons with an explicitly labeled saved-snapshot fallback, and reports when a daemon restart is needed.
• Security-report checks flag unqualified absence claims; hunt guidance keeps untested actor cells and blocked work explicit instead of repeating conclusions.
• Fresh-session todo/plan caches reset; remote plans require session participation.
• Missing security-research/finding-validation and six other manuals now ship in the compiled skill catalog.
• Tool allowlist failures return explicit paired tool errors without misleading provider fallback; Windows diagnostic echo is covered by an execution regression.
• Browser open recovers missing tab targets by creating an owned tab. Curl endpoint/method operands no longer masquerade as destructive local commands; protected paths remain checked.
• Scope matching and evidence-first investigation guidance improved, with no claims of guaranteed findings or severity quotas.
• Windows archives include the separate desktop host and version metadata, and the release checks for nested PE images. All eight platform archives have SHA-256 checksums.

Upstream free-provider 429 availability and antivirus vendor verdicts are not guarantees this release can make. Windows binaries remain unsigned until a publisher certificate is configured. See the developer-report audit in the source tree for evidence and remaining external limitations.