v2026.6.4

Added

• resolveLLMForSystem chokepoint (E9 · SG-PROVIDER-AUTH-UNIFICATION) — the single system-of-use → profile → credential resolution path so every LLM call routes through one address-resolve seam instead of the prior 4-resolver sprawl. (provenance: T11749; #945)
• Catalog-driven default model selection plus profile/use validation (E8) — the curated model catalog now seeds the default model and validates profile/use bindings against known capabilities. (provenance: T11773; #947)
• Exodus now archives all six legacy databases after validation, writes a completion marker, and cleo doctor gained a stranded-residue check for partially-migrated projects. (provenance: T11777; #949)

Changed

Fixed

• Exodus write-reliability — rollback connection isolation, brain_weight_history Infinity recovery, a deterministic verify digest, and non-fatal per-table handling so a single bad row no longer aborts the whole migration. Fixes the live cleo write-loss path this release closes. (provenance: T11782; #950)
• autoRecoverFromBackup is now serialized with withLock plus a double-checked re-query, stopping the cleo.db WAL corruption that DHQ-052 hit when a project carried a tasks.db backup (kodomeet). (provenance: T11662; #948)
• Anthropic OAuth redirect_uri consistency across the authorize/token exchange, and the real upstream error body is now surfaced instead of a generic failure. (provenance: T11774; #946)

Deprecated

Removed

Security

BREAKING CHANGES