v0.1.203

What's Changed

• [PR] fix: no longer falsely shows "client-native compression in effect" banner on dsh restart with new ID (#3806 family, #270 | fix: dsh 重启换 id 不再误报"客户端自带压缩已落地"横幅(#3806 家族,#2709 校准) by @ranxianglei in #3815
• [PR] feat(pi-subagents): jump to start/end of the fleet inspector transcript by @WKBae in #3161
• [PR] ci: retry a shard once on the fail-0/cancelled>0 event-loop-drain shape | Windows CI 偶发假红：零断言失败仅 cancelled 的 shard 自动重跑一次 by @ranxianglei in #3710
• [PR] fix(ci): non-ci:full label events no longer cancel in-flight CI runs by @ranxianglei in #3828
• [PR] fix(#3838): high-cost plugin banner no longer warns for explicitly disabled cordis.patch.yml entries by @ranxianglei in #3840
• [PR] fix: mask private relay hosts in the diagnostics blob before it is pasted publicly (#3811) by @ranxianglei in #3832
• [PR] snapshot render: seam hardening — no silent truncation on repeated short texts (#3812) by @ranxianglei in #3817
• [PR] fix: alarm loudly when the dsh compaction-disable overlay cannot latch (#3806) by @ranxianglei in #3820
• [PR] fix: ladder off config-drifted same-lane proxies instead of failing the launch (#3801) by @ranxianglei in #3814
• [PR] fix: v0.1.202 review leftovers — zcode watchdog hot-retry, Responses pck ablation, pck-probe bounds, diagnostics single-read by @ranxianglei in #3825
• [PR] feat: dsh settings panel guides remote users to security.adminRelay (#3816) by @ranxianglei in #3834
• [PR] fix: carry the acp_delegate prompt as a system-prompt section so pi-claude-bridge forwards it by @WKBae in #3822
• [PR] fix: surface SQLite bootstrap cooldown expiry and force-retry lever in storage diagnostics by @ranxianglei in #3790
• [PR] Bound output-budget restore & clamp by the model's declared output ceiling (#3833) by @ranxianglei in #3836
• [PR] storage: default unified mode flips to full + six #3135 cleanups (#3818) by @ranxianglei in #3819
• [PR] fix: attribute host reasoning-effort flips to a named cache cause, not a rebuild seam (#3803) by @ranxianglei in #3809
• [PR] fix: finalize external-summary SSE line endings at EOF by @yanhuojiyusheng in #3795
• [PR] Detect context_limit errors from the agnes/cch gateway to enable overflow self-recovery. | 识别 agnes/cch 网关的上下文溢出报错（context_limit），让溢出自救生效 by @ranxianglei in #3792
• [PR] fix: make upstream TLS trust failures self-diagnosable; add network.caFile (#3776) by @ranxianglei in #3786
• [PR] fix: salvage double-escaped newline in compress line-form string content by @ranxianglei in #3785
• [PR] Record install attribution persistently and log effective update settings at startup (#3754) by @ranxianglei in #3755
• [PR] fix: cold load after provider switch recovers the session fold ledger across routes (#3399) by @ranxianglei in #3765
• [PR] feat(hermes): add /acp + /acp-cache in-session slash commands by @ranxianglei in #3705
• [PR] fix: name the output-headroom config key in the [headroom] log line (#3837) by @ranxianglei in #3850
• [PR] dsh authored client compaction: answer the #1729 guard locally with the bili snapshot (#3733) by @ranxianglei in #3737
• [PR] fix: green the two red CI static gates (unused-exports + docs-sync) #3870 by @ranxianglei in #3887
• [PR] fix(ci): unblock master static gates - drop orphaned export and stale duplicate doc rows by @ranxianglei in #3871
• [PR] feat: dsh client Context tab with accurate post-compression stats (#3862) by @ranxianglei in #3886
• [PR] fix: hash-free lite fold anchors for past-cap tool cores (#3752) by @ranxianglei in #3753
• [PR] fix: preserve main folds across expanded short Responses requests by @0XCocoa in #3845
• [PR] fix(storage): name OS-level suspects in win32 CANTOPEN degrade output (#3823) by @ranxianglei in #3855
• [PR] fix(logger): log file open failure now warns + falls back to stderr instead of total silent loss by @ranxianglei in #3858
• [PR] Snapshot Rendering Shadow Reconciliation: The outbound snapshot engine defaults to dry-run; alerts are raised only for m | 快照渲染影子对账:出站快照引擎默认干跑,机械可证错误才报警 by @ranxianglei in #3865
• [PR] fix: restore public registry URLs for two lockfile entries by @yanhuojiyusheng in #3892
• [PR] docs: document running bili from a source checkout by @yanhuojiyusheng in #3899
• [PR] fix: book upstream-stated overflow counts into the fold target (#3450) by @ranxianglei in #3453
• [PR] fix(preflight): compare foldable mass to deficit on one calibrated scale (#3645) by @ranxianglei in #3650
• [PR] fix: count masked mid-history sys/dev items in responses estimates (#3713) by @ranxianglei in #3717
• [PR] fix: persona conversation keys survive proxy restarts; management calls follow the fork holding cited refs (#3397) by @ranxianglei in #3405
• [PR] fix: log-only detection of message-shaped attachment fabrication (#3456) by @ranxianglei in #3459
• [PR] fix: propagate system removal in native incremental turns by @yanhuojiyusheng in #3797
• [PR] fix: recognize host rewind/undo (tail truncation) in fold reconciliation (#3724) by @ranxianglei in #3734
• [PR] fix: re-sign CodeArts traffic under the request's own account (#3106) by @ranxianglei in #3335
• [PR] fix: add recovery guidance to the dsh compaction refusal message (#3499) by @ranxianglei in #3502
• [PR] fix: dsh 0.2.x code-mode omnibus code_run reads as compress-reachable (#3884) by @ranxianglei in #3885
• [PR] pi-native: re-assert the active tool loadout after a /tree rewind (compress etc. no longer silently die) | pi-native: /tree rewind 后重断言活动工具 loadout（compress 等工具不再静默失效） by @ranxianglei in #3545
• [PR] Storage wrap-up, nine items in one batch: GC/archive + reap ledger + media CAS + incremental pointers + dsh generation c | 存储收尾九项一车:GC/archive + reap 台账 + 媒体 CAS + 增量指针 + dsh 代压缩默认开 + 多实例文档 (#3901) by @ranxianglei in #3911
• [PR] fix: tier-recovery candidate search slides past over-budget pairs instead of declaring all tiers exhausted by @ranxianglei in #3649
• [PR] fix: anthropic lane nudge names the /
  envelope fai… by @huzilin in #3903
• [PR] storage: GC archive as one append-only JSONL log (follow-up to #3911) by @ranxianglei in #3927
• [PR] fix: stop takeover-broken banner false alarm from agentless sidecar lanes (#3651) by @ranxianglei in #3653
• [PR] fix(hermes-plugin): report endpoint model output limits by @yanhuojiyusheng in #3934
• [PR] verif module kickoff: sub-language guard for kernel decision core + TS→z3 symbolic executor MVP + counterexample replay | verif 模块起步:kernel 决策核的子语言守卫 + TS→z3 符号执行器 MVP + 反例回放锁(#3848) by @ranxianglei in #3853
• [PR] fix: opencode V2 manifest serves nested OpenAI tools but fetchManifest parsed them flat (#2656) by @ranxianglei in #2659
• [PR] fix: make inert https:// provider keys on the MITM lane loud (#3632) by @ranxianglei in #3636
• [PR] Remove the allowDshCompaction escape hatch: dsh native compaction refused unconditionally (#3666) by @ranxianglei in #3672
• [PR] [Pi/Responses] consume announced native-compaction boundary in the /v1/responses lane by @ranxianglei in #3480
• [PR] fix: explicit plugin host identity outranks Codex UA guessing for host-side policy (#3686) by @ranxianglei in #3696
• [PR] fix: defer post-restart follow-latest install until the advisory first check lands (#2456) by @ranxianglei in #2461
• [PR] fix: strip inherited internal launcher channels from child envs (#3521) by @ranxianglei in #3549
• [PR] test: use saturation barrier to make queue-drop test case deterministic (fixes #3708) | test: 用饱和屏障让 queue-drop 用例确定性（修 #3708） by @yanhuojiyusheng in #3709
• [PR] feat: add Dockerfile + docs for container deployments (#3389) by @ranxianglei in #3392
• [PR] docs(codex): Codex Desktop Composer predictions — custom-provider threads are ineligible (#3408) by @ranxianglei in #3409
• [PR] feat(web): add session filters and pagination by @tgazer933-boop in #3566
• [PR] storage: StorageBackend contract (step 1) — sqlite through the registry, mysql a registered stub (#3931) by @ranxianglei in #3932
• [PR] docs: AGENTS.md add Issue classification and labeling rules (p1-p3/lane/scope/status/topic A-N) | docs: AGENTS.md 增补 Issue 分类与标签规则(p1-p3/车道/scope/状态/主题 A-N) by @ranxianglei in #3914
• [PR] feat(web): per-request cache hit-rate line chart with drop-cause markers by @ranxianglei in #3523
• [PR] storage: MySQL backend — step 2 of the pluggable-storage plan (#3931) by @ranxianglei in #3946
• [PR] storage: mysql on the proxy hot path (async shadow facade, #3388 step 3) by @ranxianglei in #3955
• [PR] kernel/tests: Stub PR — fold boundary + pin down wire unknown-part behavior (#3939 prerequisite, no src changes) | kernel/tests: 打桩 PR — 折叠边界 + wire 未知 part 行为钉死(#3939 前置, 无 src 改动) by @ranxianglei in #3941
• [PR] feat: invariant judge GA — default-on L1 advisory, egress chokepoint, loop continuity, bounded exemptions (#3938 PR-A) by @ranxianglei in #3944
• [PR] fix(deps): declare mysql2 + restore registry lock URLs; land the stranded step-3 merge (#3955) by @ranxianglei in #3966
• [PR] fix(storage): per-runtime SQLite engine artifacts + refuse-before-load Node floor (#3894, rebase of #3896) by @ranxianglei in #3963
• [PR] docs: regenerate config reference after the engine-tiering seeds (#3963) by @ranxianglei in #3969
• [PR] Add regression test: SQLite engine bootstrap reports failed+cooldown when a downloaded engine won't register by @ranxianglei in #3930
• [PR] kernel: consolidate all mid-flight rewrites into fold-boundary transactions (#3939 ①–⑤, fixes #3003/#3691/#3769/#3805) | kernel: 中途重写全部收敛到折叠边界事务(#3939 ①–⑤, 修 #3003/#3691/#3769/#3805) by @ranxianglei in #3956
• [PR] kernel: Fix two byte-stability defects uncovered by verif — truncation must actually shorten + BLOCKED binding collision | kernel: 修 verif 挖出的两个字节稳定性缺陷 — 截断必须真变短 + BLOCKED 绑定撞车保护 (#3935, #3945) by @ranxianglei in #3972
• [PR] feat: CLI surface for storage maintenance — bili sessions ls/rm/archive/restore + bili storage gc (#3928) by @ranxianglei in #3958
• [PR] storage: shadow DIGEST DRIFT now names the diverged dimension and slot; prefix rewrites fail soft at the delta boundary by @ranxianglei in #3948
• [PR] kernel: wire byte fidelity — anthropic unknown-block passthrough + openai/google stability pins (#3410) by @ranxianglei in #3961
• [PR] fix(verif): emit str.substr so cvc5 can parse slice queries — 3691 harness was silently solver-dead by @ranxianglei in #3980
• [PR] ci: run PR lanes on agent-relay-based PRs by @ranxianglei in #3469
• [PR] Stale item cleanup: Document transitional feature flag registry + CI guard (BILI_* outside registry → immediate red) | [PR] 陈年件清理:过渡开关台账进文档 + CI 守卫(台账外 BILI_* 直接红) by @ranxianglei in #3256
• [PR] fix: close the judge's echo normalization to the filter's strip set (#3938 PR-D) by @ranxianglei in #3985
• [PR] docs: backfill LIFECYCLE.md — register the 22 unledgered BILI_* env vars (fixes lifecycle-ledger-guard red) by @ranxianglei in #3995
• [PR] Batch-B integration: fold budget/eligibility — merge #3353 #3943 #3952 #3867 #2660 #3677 (#3916) by @ranxianglei in #3971
• [PR] fix: rescue DSH-lane mid-band max_tokens collapses that slip past the <=200 restore trigger by @ranxianglei in #3677
• [PR] fix: remember local preflight 413 refusals so estimate demotion cannot reopen oversized forwards by @ranxianglei in #3867
• [PR] fix(#3923): when two bili processes serve one session, the log names both sides (was silent) by @ranxianglei in #3952
• [PR] fix(#2638): stop preflight re-nominating structurally-dead spans every turn by @ranxianglei in #2660
• [PR] fix: refuse coverage-regressing folds before commit (#3322) by @ranxianglei in #3353
• [PR] Truncate at boundaries when a compression range spans protected messages rather than punching holes (#3953) | 压缩区间跨越受保护消息时在边界截断,不再挖洞 (#3953) by @ranxianglei in #3986
• [PR] fix(dist): load mysql2 lazily at backend-open time + generalize the dist external-import gate (#4008) by @ranxianglei in #4013
• [PR] fix: bare-id loadSync hydrates pooled envelopes without the unified index (master CI flake, #4014) by @ranxianglei in #4015
• [PR] test(preflight): cover calibrated exhaustion on the DSH Responses lane by @lisihao in #3968
• [PR] fix(util): parse the window out of CJK context-overflow rejections by @DadayaSuwen in #3950
• [PR] feat(web): compression-structure tab with tier tree, graph view and l… by @vegetable86 in #3924
• [PR] fix(ci): gate-plugins ghost red run — step-level secrets-if corrupts workflow registration, switch to GITHUB_ENV gating | fix(ci): gate-plugins 幽灵红 run — step 级 secrets-if 让 workflow 注册损坏,改 GITHUB_ENV 门控(#3967) by @ranxianglei in #4017
• [PR] fix(gate): Lane U — --tag latest, publish fail-loud (distinguish conflict wording), assert bounded polling and other upd | fix(gate): Lane U — --tag latest、publish fail-loud(区分冲突措辞)、断言有界轮询等更新周期(#4020) by @ranxianglei in #4022
• [PR] fix: snapshot-render — covered rows no longer accept signature binds (#4052) by @ranxianglei in #4057
• [PR] verif judges batch 2: view-latch / anthropic / google / conflict-watch / snapshot-render + engine soundness fixes — finds #4052 | verif 判官第二批 + 引擎健全性修复 by @ranxianglei in #4071
• [PR] verif: flip #4052 pin to fixed expectation after #4057 + object-destructuring for-of | verif: #4057 落地后翻转 #4052 回归钉 + for-of 对象解构支持 by @ranxianglei in #4073
• [PR] fix(ci): Storage mode isolation — #3769 pin both to full, plugin-fork CCR cold recovery removes sidecar, same assertion | fix(ci): 存储模式隔离 — #3769 双件钉 full,plugin-fork CCR 冷恢复删 sidecar,两模式同断言 by @ranxianglei in #4077
• [PR] fix(verif): drop dev-machine absolute paths in wire harnesses + gate solver-dependent anthropic round-trip tests by @ranxianglei in #4084
• [PR] fix(ci): close store1 before dropping index.db in #3769 pooled-bare-load — Windows EBUSY by @ranxianglei in #4087
• [PR] fix(ci): flush the v2 envelope synchronously in the #3818 drift test by @ranxianglei in #4097
• [PR] fix(ci): poll for upstream socket destroy in the abort x proxy-json case by @ranxianglei in #4100
• [PR] chore: post-merge green check (empty — verify master red cleared) by @ranxianglei in #4095
• [PR] fix: egress window fuse — stop provably-doomed bodies at the last send site (#4079) by @ranxianglei in #4090
• [PR] fix(#3900): overflow 400s teach the calibration ring — the estimator learns from rejections, not only successes by @ranxianglei in #4093
• [PR] dsh: session identity rides the request object (llm/stream attribution, #4082) by @ranxianglei in #4101
• [PR] #3862: Context tab embeds the web UI's own session page by @ranxianglei in #4086
• [PR] verif: responses-ingress judge (#3837 family) + path-guarded mutation replay by @ranxianglei in #4103
• [PR] dsh: negotiated session recall for unattributed retries (#4082) by @ranxianglei in #4094
• [PR] fix: name permanent resident-eviction compress refusals and keep progressing preflight exhaustion retryable (#3918) by @ranxianglei in #3943
• [PR] compress-from-store: evicted sessions fold against the unified-store view instead of refusing forever (#3982) by @ranxianglei in #3983
• [PR] remove the #726 dead-end cooldown; expire #3846 local-refusal records after 10m (#4079) by @ranxianglei in #4105
• [PR] test: pin storage mode in compress-from-store (CI red — same class as #4076) by @ranxianglei in #4113
• [PR] gate: isolate npm metadata cache per run (Lane U stale-latest false red) by @ranxianglei in #4114
• [PR] dsh Context tab: bind the embedded frame to THIS conversation (#4117) by @ranxianglei in #4118
• [PR] fix(#4109): negotiated recall — one lane key for raw and routed by @ranxianglei in #4116
• [PR] fix(#4110): recall fingerprint — include tool_calls, refuse degenerate boundaries by @ranxianglei in #4115
• [PR] fix(#4111): dsh unattributed gate — core-text byte math, stop billing base64 media as text by @ranxianglei in #4119
• [PR] release v0.1.203 by @github-actions[bot] in #4122

New Contributors

• @WKBae made their first contribution in #3161
• @yanhuojiyusheng made their first contribution in #3795
• @huzilin made their first contribution in #3903
• @tgazer933-boop made their first contribution in #3566
• @lisihao made their first contribution in #3968
• @DadayaSuwen made their first contribution in #3950
• @vegetable86 made their first contribution in #3924

Full Changelog: v0.1.202...v0.1.203