Release v0.37.0

0.37.0 (2026-08-27)

Features

• compress: session-aware /v1/compress (sidecar mode) + /v1/usage relay (#3270) (4fa8802)
• proxy: self-limiting session state for the compression-cache registry (#3261) (826b600)
• proxy: unify proxy and sidecar compression on one session engine (#3271) (d12ea50)

Bug Fixes

• cache/semantic: don't semantic-match an empty query across contexts (#3226) (455f4f2)
• copilot: preserve native enterprise model routing (#2998) (997a479)
• kimi: route managed Kimi Code through the proxy (#3223) (701e461)
• learn: surface Codex analysis failures (#3016) (632cb81)
• mcp: add explicit Serena reconciliation (#3222) (7550efb)
• proxy/anthropic: authenticate and attribute buffered Copilot turns (#3277) (4f2e70a)
• proxy: enforce HEADROOM_PROXY_TOKEN on WebSocket handshakes (#3305) (27b4e2d)
• proxy: make output-savings flush atomic and keep it off the event loop (#3231) (b9d7dcc)
• proxy: protect file reads from lossy compression on the Responses API path (Copilot view + HEADROOM_PROTECT_READS) (#3238) (4408e88)
• transforms: stop compression garbling mixed subagent output (#3286) (8884d87)
• transforms: stop folding datetime-prefixed user messages as search results (#3221) (7784bb1)
• vertex: validate location region to close a path-parameter SSRF (#3304) (7c0b886)
• windows: terminate native proxy process tree (#3313) (91d4fc8)
• wrap: stop concurrent wrap sessions clobbering settings.local.json (#3232) (f27f235)