v2.7.28

What's new

• CI: react-doctor fork PR fix + local eslint gate (#172)
• Proxy: stall timeout 90s→300s with NaN-safe fallback (#170)
• Antigravity: stop forwarding Responses item ids as thoughtSignature (#182)
• Providers: rename qwen-portal → Qwen Cloud + fix baseUrl (#185)
• GUI: OAuth ToS warning modal with focus trap + Anthropic-specific wording (#176)
• GUI: read-only Storage diagnostics page Phase 1 (#173)
• Providers: Re-authenticate for OAuth/Codex accounts + provider-keyed login (#171)
• Observability: tok/s + estimated cost columns, detail dialog, TTFT
• Security: allowPrivateNetwork opt-in across GUI, API, CLI (#175)