v0.1.193

What's Changed

• ci: cancel superseded same-ref CI runs (concurrency, cancel-in-progress) by @ranxianglei in #2635
• fix: 客户端断开后阻止 preflight 继续转发正式请求 by @overFloweee in #2541
• fix(#2652): derive plugin-tool compress wait from the external-summary budget by @ranxianglei in #2654
• docs(#2602): pin deferred MINOR intents from the v0.1.190 release review (#2581) by @ranxianglei in #2603
• feat: config-surface guard CI blocking undocumented config additions (#2643) by @ranxianglei in #2651
• ci: trim CI queue load without quality loss (#2637) by @ranxianglei in #2641
• Archive-then-fold: default folding for archivable media (Closes #2607, Fixes #2609) by @ranxianglei in #2640
• fix(#2658): dsh native-compaction rebase fallback on anthropic/google lanes by @ranxianglei in #2664
• kernel: swap the JSON-poisoning phrases in the compress copy for escape hints (#2587) by @ranxianglei in #2647
• fix: fold-reconcile survives cross-model re-serialization churn (pi model switch) — assistant-turn key + image-capability variant passes by @ranxianglei in #2644
• test: add model-switch phase to the identity proof matrix (#2636) by @ranxianglei in #2692
• fix: cover the DSH lane with the #2354 host-title channel (#2604) by @ranxianglei in #2615
• fix: quiet #1158 notice for recognized pi-web-access first install (#2685) by @ranxianglei in #2687
• fix: passthrough anthropic requests carrying a global-scope system block (#2648) by @ranxianglei in #2650
• fix: dsh native-compaction detector requires user/text carrier + novelty (#2621) by @ranxianglei in #2628
• fix(#2626): key decompress image-mode dispatch on a valid imageRef by @ranxianglei in #2633
• refactor(#2607): remove compress.stripImages — default media folding replaces it by @ranxianglei in #2688
• fix: 让压缩图片历史先减量，再检查发送字节预算 by @overFloweee in #2613
• fix: apply the effective render strategy consistently across all lanes (#2483) by @ranxianglei in #2485
• fix(#2698,#2699,#2697): repair stripImages-removal race — typecheck + budget tests + doc by @ranxianglei in #2702
• ci: 每个发布渠道都必须在发布 sha 上完整跑完全套 CI 才能发布 by @ranxianglei in #2693
• fix: reap zombie fold blocks after unannounced host history deletion (#2695) + host-compaction cache proofs by @ranxianglei in #2707
• fix: sync package-lock.json version metadata + add lock-sync CI guard by @ranxianglei in #2711
• fix: anthropic legacy-completion stream error emits a well-formed block lifecycle with index (#2689) by @ranxianglei in #2691
• fix: atomic CCR content-store companion write (#2674) by @ranxianglei in #2679
• fix: keep Responses turn separators out of fold coverage (#2627) by @ranxianglei in #2710
• fix(#2580): salvage invalid compress tool-call args on the plugin verbatim lane (#1518 stage 2) by @ranxianglei in #2591
• test(#2668): isolate responses-instructions-drift suite from machine-global XDG state by @ranxianglei in #2673
• test(#2653): pin the #2648 global-scope cache_control ordering constraint in the wire-contract ledger (WC-016) by @ranxianglei in #2655
• fix(pi-native): self-heal ACP tools dropped by a mid-session registry rebuild (#2708) by @ranxianglei in #2713
• fix(#2709): guard the unattributed passthrough lane against dsh native compaction by @ranxianglei in #2722
• fix(#2709): attribute framing-absent dsh native compaction via refusal ledger (inferred tier) by @ranxianglei in #2715
• test: host-compaction cache proof across all four wires (#2695) by @ranxianglei in #2720
• test: prove self-update keeps live compression state across the OLD->NEW hop (proof-coverage audit gap 1) by @ranxianglei in #2724
• fix(#2694): scope pi-subagent child detection to system carriers by @ranxianglei in #2696
• fix(#2601): absorb header-corroborated model-drift into the persona anchor by @ranxianglei in #2727
• fix(#2601): model-switch lineage — churn-tolerant chain continuity + persona-fork routing follow by @ranxianglei in #2719
• fix(#2701): threads continue-turns survive the compress loop by @ranxianglei in #2718
• fix: accept the kernel BLOCKED sentinel in plugin snapshot/fork validation (#2620) by @ranxianglei in #2625
• fix+test(#2676): dsh durable-guard lane keeps fork adoption usable by @ranxianglei in #2686
• test: session-continuity proof for the two branch scenarios (model switch = one session; fork = copied state) by @ranxianglei in #2729
• fix(web): derive tokensSaved from active blocks; label frozen context/ledger windows by @ranxianglei in #2734
• Per-wire continuity proofs + reasoning-drop tolerance (model-switch / fork-adoption / mode-upgrade) by @ranxianglei in #2732
• Consumer-path audit proofs: ledger drop-fraction + honest decompress failure for reaped blocks by @ranxianglei in #2738
• fix(#2592): pin the rebase ref floor + name the rebase in stale-ref receipts by @ranxianglei in #2742
• fix(pi-subagents): poke fleet widget when a run enters running (#2737) by @ranxianglei in #2739
• fix: withhold prompt_cache_key stamp when OMP's Cowork transport bypasses fetch interception (#2583) by @ranxianglei in #2589
• test: account for the #2592 rebase ref-floor pin in the #2658 rig (unred master) by @ranxianglei in #2747
• test: adversarial byte-fidelity corpus for tool-call arguments, all four wires by @ranxianglei in #2743
• test: two-live-instance proofs over one sessions dir (#394/#405/#2401) by @ranxianglei in #2744
• kernel: selector screens live carriers; withdrawal judged on original array class (#2663) by @ranxianglei in #2669
• fix(#2598): wire #1001 unannounced-history-rewrite detection into the google lane by @ranxianglei in #2618
• fix(kernel): fold summaries may never precede the pinned first user message (#2733) by @ranxianglei in #2755
• feat(#2446): durable-state carriers become virtual tool paths (Config.messagePathOf) by @ranxianglei in #2736
• fix: don't arm the auto-fold backoff on pure queue-drops (#2662) by @ranxianglei in #2665
• test: pin the re-fold generation cache contract across all four wires (#2741, #2733) by @ranxianglei in #2762
• fix: hard-protect MCP-prefixed compress/acp_rule tools (#2578) by @ranxianglei in #2584
• chore: sync master version metadata to v0.1.192 (Release drift guard) by @ranxianglei in #2765
• Unified SQLite storage: corpus pins + parity core + shadow dry-run + drop-in read path (#2671 Phases 1 & 1.5) by @ranxianglei in #2690
• fix: survive a corrupt unified index by degrading to legacy-only (#2771) + storage-engine proof battery by @ranxianglei in #2772
• Storage review fixes: authoritative refs/blocks, corrupt-index guard, BEGIN IMMEDIATE, restore 409 + CCR sidecar (#2690 review) by @ranxianglei in #2768
• fix(#2756): degenerate-turn gate asks for ANSWER text, not visible bytes by @ranxianglei in #2764
• fix(#2766): durable classifiers refuse assistant-role messages — model echo cannot take over a durable identity by @ranxianglei in #2774
• test(storage): close index.db handles before rmrf — fix Windows EBUSY in storage-engine-proofs (#2772 follow-up) by @ranxianglei in #2781
• fix(storage): close the SQLite handle when UnifiedStore.open fails on a corrupt index (#2771 follow-up) by @ranxianglei in #2788
• fix(#2592): sniff the unattributed raw-URL branch for the dsh compaction envelope by @ranxianglei in #2763
• fix: cache ledger narrates co-flipped identity dimensions as one cause (#2784) by @ranxianglei in #2795
• feat: surface identity-loss takeovers with an identity-orphan conflict event (#2791) by @ranxianglei in #2802
• fix(sessions): wire-neutral affinity hashing for cross-protocol continuity (#2791) by @ranxianglei in #2807
• fix(affinity): append-continuation rung + hv2 ladder preference (#2807 regressions) by @ranxianglei in #2812
• release v0.1.193 by @github-actions[bot] in #2767

Full Changelog: v0.1.191...v0.1.193