Releases

Every published release: when it shipped and which components changed.

Your console's update banner links here whenever a newer version is available. To see the version a deployment is running, open its console (the footer shows it) or call GET /admin/health (schema.version and the build tag). For how an update actually rolls out on each platform (one-click on Docker Compose, helm upgrade on Kubernetes, a redeploy on Railway or ECS), see Updates.

How to read this page

Each entry lists a version, its date, and the notable changes in each component with their pull-request references. It is written when the release is cut, from the commit log for that release window: a change is listed under the component it landed in, and a component that shipped a new version with only internal work behind it (CI, tests, refactors) is named under Also updated rather than given bullets. Anyray publishes a new line most nights; a release with nothing customer-visible shows as a maintenance release.

v1.10.530

Released 2026-10-26

Gateway (v1.17.366)

• Regions in management: region tokens, sync routes, hidden Regions page (#4826)
• Accept holdout sizing and baseline source on the metering block (#4859)
• A held turn's replay keeps its fail-open memo entries, and evictions are counted (#4864)
• Apply person and agent routes to key-signed requests (#4852)
• Session-gate holdout for the hook lane and tool deferral (#4857)
• Bill the session-clamped savings from the 2026-11 period (#4851)
• Constant context phase 2, a recorded working state after each compaction (#4853)
• Usage charts and tables read the Tokens saved tile's units (#4854)
• Tell a Claude Code CLI host from an Agent SDK app, so the card opens the tab that fixes it (#4849)

Console (v0.4.299)

• Tell a foreign anyray MCP entry apart by shape (#4862)

Anyray Connect (v0.11.474)

• Change the Claude Code settings file while it is on, Required included (#4855)
• Choose Bedrock or subscription per Claude session (#4847)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.529

Released 2026-10-26

Gateway (v1.17.365)

• Routes per person and per agent: store, validator and admin API (#4846)

Optimizer (v0.3.279)

• Split cache lint system divergence into first and later blocks (#4830)
• Census classifies line-numbered file reads as source, not prose (#4829)

Shared libraries

• The session-survival read aggregates traces once, not once per session (#4848)

Also updated: Docs.

v1.10.528

Released 2026-10-26

Gateway (v1.17.364)

• Savings on client-test sessions are not invoiced (#4828)
• Client-test results disclose shadow kinds evaluated in the test (#4827)
• After a Claude Code compaction, the transcript before it stays retrievable (#4823)
• Hoist a subagent's shared context into the system array (#4815)
• Verify client keys from an in-memory snapshot (#4813)
• Admin config changes reach every replica in about 1 s (#4811)
• Per-heavy-user tenant policy lines (RFC 0029) (#4783)
• Bind every console sign-in to its own deployment (#4810)
• Client test results carry quality parity, so a cost win can't hide a quality loss (#4807)

Console (v0.4.298)

• The Measure receipt shows your check's pass counts; docs follow the budget-only plan (#4819)

Anyray Connect (v0.11.470)

• Choose Claude Code settings file from the tray (#4835)
• Claude Code reclaims any anyray MCP entry Connect generated (#4817)
• Auto mode never rides a seat login on an agent host (#4809)

Docs

• Set subscription fallback through the API; the console card is hidden (#4834)

Also updated: Optimizer, Shared libraries.

v1.10.527

Released 2026-10-25

Gateway (v1.17.363)

• The tenant policy learner reports why a tenant has no version (#4785)

Optimizer (v0.3.277)

• A decision's messageIndex is vacuous on a prompt-only body (#4784)

Anyray Connect (v0.11.466)

• Back out per-entry batch skips and the Codex 20k ceiling (#4806)
• A ranged batch skips an entry that fails on its own; Codex gets a 20k ceiling (#4801)
• Admin mcp install --client codex|cursor (#4795)

Also updated: Shared libraries, Docs.

v1.10.526

Released 2026-10-25

Gateway (v1.17.362)

• Refuse a whitespace-only provider key on every write path (#4804)

Docs

• Close the remaining redaction shape gaps (#4805)

v1.10.525

Released 2026-10-25

Gateway (v1.17.361)

• Remote admin MCP secure-input handoff (#4803)
• References-only routing save binds override_params, guardrail order and mutators (#4796)
• Credit wrapped Codex batch prints; name each failed batch read by code (#4802)
• A provider-key save sends only the fields the admin changed (#4794)
• Answer binary_response for a non-JSON success on both MCP transports (#4799)
• Bedrock guardrail manifest names the credentials the plugin reads (#4797)

Anyray Connect (v0.11.463)

• No read-batch reminder for a one-file search outside the workspace (#4798)

Also updated: Console, Shared libraries, Docs.

v1.10.524

Released 2026-10-24

Gateway (v1.17.360)

• Token-only spend-connector update keeps a concurrent pause (#4790)
• Judge an upstream gateway's custom values on the built request (#4792)
• Routing writes whose credentials are all references (#4788)
• Redact provider keys by shape, AWS key ids and suffix-named credentials (#4787)
• Never silently replace an unreadable provider-key store (#4786)
• Meter DeepSeek's prompt_cache_hit_tokens as the cached read (#4782)
• Scope held-key files, batches and stored responses to their creator (#4769)
• Read the open tail, not the month, and keep settled days only while the database agrees (#4699)
• Migrate Vercel example to patched Zod and AI SDK 7 (#4772)
• Judge a strategy per client tool (#4701)
• Judge a held key's API root per attempt (#4759)
• A held key's proxy lane forwards only model listing (#4750)
• Prompts, server instructions and the anyray-admin skill from one playbook source (#4749)

Console (v0.4.296)

• Guide team pilots across supported AI tools (#4755)

Anyray Connect (v0.11.461)

• Test-key accepts the user key the gateway mints, not only ark_svc_ (#4780)

Docs

• Run Anyray from your AI agent, generated admin prompts, no console hand-offs (#4757)

Also updated: Optimizer, Shared libraries.

v1.10.523

Released 2026-10-24

Gateway (v1.17.359)

• The proxy route no longer reaches a held key's control plane (#4747)
• Secure secret input and output for agent-driven admin setup (#4744)
• Close the gaps between MDM and regular enrollment (#4721)
• Vertex file routes no longer read Cloud Storage with the org's credential (#4728)
• Setup status API; the gateway builds the employee install command (#4727)
• Provider-key writes return key ids only; the admin MCP refuses credential input (#4723)
• Admin CLI shows gateway error detail; --all, --force, describe (#4726)
• A server-held key runs only under the admin's account; a caller's auth_passthrough is ignored (#4724)
• Read routing credentials sealed at rest; nothing is sealed yet (#4719)
• Remote admin MCP at /mcp/admin as an AuthKit resource (#4718)
• A stale conditional routing save over masked references answers 409 (#4717)
• Mask guardrail plugin credentials on routing reads; saves resolve them by reference (#4716)
• Forwarded headers never replace a server-held key's account headers (#4714)
• An agent's provider-key map requires providerkeys:manage (#4712)

Console (v0.4.295)

• Add User modal rework, Get started card, sidebar trims (#4713)

Also updated: Anyray Connect, Docs.

v1.10.522

Released 2026-10-23

Gateway (v1.17.358)

• Routing reads mask inline provider credentials; saves round-trip them by reference (#4711)
• A new outbound host for a server-held key requires providerkeys:manage (#4710)

Also updated: Console, Shared libraries, Docs.

v1.10.521

Released 2026-10-22

Console (v0.4.293)

• Redesign the /download page and the Add people modal with OS icons (#4709)
• Every Tokens saved number reads the console's estimate (#4705)

Anyray Connect (v0.11.448)

• Admin sign-in and the admin MCP from the Connect tray (#4698)

Also updated: Gateway, Shared libraries.

v1.10.520

Released 2026-10-22

Gateway (v1.17.356)

• Sync the Desktop Artifacts page on MDM-managed seats, and report the lane's outcome (#4694)
• Trigger a soft update through the gateway API (#4700)
• Price a prompt-length tier in cost, never in savings (#4696)
• CLI admin login for emailed-code console orgs (#4695)
• An alias named revision is an alias, not the concurrency token (#4685)
• Bound the monthly rollup's concurrency and timeout so a large tenant's usage is not zeroed (#4678)
• The admin MCP acts as the signed-in person; x-returns-content marker (#4677)
• CLI admin console session via /sso/cli purpose=admin (#4665)
• Shared pages on MDM-managed Claude Desktop (#4674)
• V1 secret markers, key-grade scope ceiling, typed bodies, bearer logout (#4667)
• A self-serve client-test key minted through Connect, and its /connect/test routes (#4661)
• A request never waits on a slow spend store before upstream (#4664)
• The Tokens saved tile is the Savings bars summed (#4663)
• Scope the Usage page Breakdown to the custom date range (#4662)
• Client-test sessions evaluate shadowed kinds (#4660)
• See a busy database, long-running queries and slow dispatch (#4658)

Optimizer (v0.3.275)

• Capture prices a fold handover on the bytes the fold replayed (#4697)
• The tool-output census names PowerShell and cmd commands (#4689)

Console (v0.4.292)

• Home first-run setup panel for a new deployment; retire the dead checklist (#4703)
• Add people hands out the desktop download link; Required tools on Organization (#4688)
• Download app link for every role and a Sessions install screen (#4683)
• One Client strategies block per person, no disclaimer prose (#4675)
• Date filters follow the page's calendar and range on Sessions and Home (#4669)

Anyray Connect (v0.11.446)

• Effective managed Desktop policy; blocked_by_policy share state; static seats get the anyray server (#4690)
• Test-key says why a gateway refused, for 409 and 503 as well as 403 (#4693)
• Turning Claude Code off sends new sessions direct (#4681)
• Connectors never exits while waiting on the browser opener (#4686)
• Open URLs on Windows with explorer.exe, never through cmd (#4684)
• The managed-Desktop shared-pages verdict reads with Desktop's own credential (#4676)
• Anyray-connect admin commands and the anyray-admin MCP (#4668)
• Anyray-connect test-key writes the kit's client-test key (#4659)

Docs

• The bootstrap replaces the MDM profile for the keys it can set (#4682)

Also updated: Shared libraries.

v1.10.519

Released 2026-10-22

Gateway (v1.17.355)

• Add a plugin marketplace by GitHub repository (#4630)

Shared libraries

• Hash the kit-session lookup once per statement (#4655)

Also updated: Console, Docs.

v1.10.518

Released 2026-10-22

Gateway (v1.17.354)

• Learn each tenant's decision policy per client tool, in shadow (RFC 0029) (#4632)

Console (v0.4.290)

• Savings tooltip reads Saved; Tokens saved by client opens on 24h (#4652)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.517

Released 2026-10-22

Gateway (v1.17.353)

• TwinOf on client test results, release rows in vendor-admin, a twins workflow on every release (#4646)
• Publish how often each savings prediction was right, per shape (#4645)
• Share React and SVG artifacts (#4643)
• Desktop Artifacts sync follow-ups (1478, 1479, 1466, 1475) (#4641)
• Store and meter content-free client test results, keep kit traffic out of the holdout (#4637)
• Org-shared pages appear in Claude Desktop's Artifacts page (#4634)

Console (v0.4.289)

• Value created breakdown, Cost saving rename, drop card subtitles (#4631)
• Show the client's test result on the Measurement card (#4639)

Anyray Connect (v0.11.436)

• The walk search fallback honors path globs like ripgrep -g (#4628)
• Share org artifacts from MDM-managed Desktop seats (#4642)
• Stop the tray's status poll launching the VS Code CLI every 15 s (#4626)

Docs

• Measure on your traffic, the anyray-test guide and kit command reference (#4644)
• Lead the Benchmarks page with paired agent sessions, demote the replay suite (#4638)

Also updated: Shared libraries.

v1.10.516

Released 2026-10-21

Gateway (v1.17.352)

• Refuse to build any image on a Node below 24.22.1 (#4635)
• Recognize Codex run by T3 Code from its originator (#4627)
• Opt-in compact trace rows (fields=list) for the Sessions page (#4624)
• Import every plugin layout Claude Code accepts from GitHub (#4616)
• Switch Claude Code and Codex to direct when the gateway is down (#4593)
• List and open org-shared pages from Claude (#4615)
• A claimed identity never counts toward the named seat's usage, cap or allowance (#4613)
• Name the failing org plugins in the vendor view (#4612)

Console (v0.4.288)

• Savings bars draw the Total saving estimate; vendor admin Raw tokens tile (#4618)

Anyray Connect (v0.11.431)

• Windows Claude Desktop registers retrieval in the Claude-3p profile; non-ASCII user folders no longer break the helper (#4625)

Shared libraries

• Per-table autovacuum insert threshold on anyray_traces (#4623)
• Decode trace metadata once per row in the live session rollup (#4621)
• Serve the Sessions filter dropdowns from the summary; tool, provider and effort arrays on the hour rows (#4617)

Docs

• Clean-up pass (2026-10-18 to 2026-10-21) (#4619)

Also updated: Optimizer.

v1.10.515

Released 2026-10-21

Gateway (v1.17.351)

• Tee into an owner-only temp dir when a Codex sandbox blocks ~/.anyray (#4585)

Also updated: Console, Docs.

v1.10.514

Released 2026-10-21

Gateway (v1.17.350)

• Index spend hook rows, parallel trace count, 5-min facets cache (#4605)
• A claimed identity never seeds a seat's hook-lane price hint (#4608)

Console (v0.4.286)

• Sessions prefetches the next page and keeps rows while paging (#4606)
• Treemap subtitle no longer claims the full request on Codex continuation turns (#4607)

Anyray Connect (v0.11.427)

• Status --json reports the Claude seat token (#4600)

Shared libraries

• Serve user, model and viewer-scoped session lists from the summary as a candidate set (#4609)

Also updated: Docs.

v1.10.513

Released 2026-10-21

Gateway (v1.17.349)

• Request breakdown for Codex (Responses API) traces (#4602)
• Price untreated cache writes at the tier the provider billed (#4601)
• Images API rows stop teaching the hook-lane price hint (#4599)
• Settle every strategy warm turn's Total saving, calibrated or not (#4595)

Console (v0.4.285)

• Trace modal shows why content is hidden + Change content mode CTA (#4598)
• Trace modal: Raw-first content, folded messages, kind treemap (#4586)

Anyray Connect (v0.11.426)

• A background re-apply of Claude Desktop never opens the seat approval; APPLY_REVISION 15 delivers the 5-minute helper TTL (#4597)

Also updated: Shared libraries, Docs.

v1.10.512

Released 2026-10-21

Gateway (v1.17.348)

• Admin switch to turn off sharing with the whole organization (#4591)
• Codex seat turns reach the tool-output census (#4590)
• Price image-output models at their image rate (#4534)
• Default Claude Messages to InvokeModel and forward supported betas (#4576)
• Total saving % is correct live, not the next day (#4584)
• Personal LiteLLM key check, switch-off cleanup, OpenCode routing (#4583)
• Split the census's MCP tool output by server (#4581)

Optimizer (v0.3.272)

• Columnar_fold leaves two-column tables as written (#4587)

Also updated: Console, Anyray Connect, Shared libraries, Docs.

v1.10.511

Released 2026-10-20

Gateway (v1.17.347)

• Both log_read arms carry their arm in strategyCohorts only (#4579)
• The log_read treated arm stays out of the whole-optimizer holdout read (#4578)
• Align Anyray skills and agent onboarding guidance (#4577)
• Tokens saved count 1:1, cache tiers only in dollar savings (#4573)
• Record when Anthropic rejects a Claude Desktop subscription token and tell connect (#4567)
• Tiles that calculate the same quantity agree across console and vendor admin (#4563)
• Make the log_read holdout measurable (#4552)

Console (v0.4.283)

• Approve a rejected Claude subscription from the Anyray app (#4562)
• Open Health from the account menu (#4566)
• $0-actual days no longer spike the Total saving sparkline to 100% (#4554)
• Hide Artifacts from the sidebar (#4560)

Anyray Connect (v0.11.421)

• Set a rejected Claude Desktop seat token aside, approve again from anywhere, refresh Desktop within 5 minutes (#4565)
• A scoped revert stops printing the shell-unset and repo-config warnings (#4572)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.510

Released 2026-10-20

Optimizer (v0.3.270)

• Spec-trim note no longer sends gpt-4.1 to undeclared endpoints (#4558)

Also updated: Gateway, Console, Shared libraries, Docs.

v1.10.509

Released 2026-10-20

Console (v0.4.281)

• Structured trace content, and what the cache read vs what was new (#4549)

Also updated: Anyray Connect, Shared libraries, Docs.

v1.10.508

Released 2026-10-20

Gateway (v1.17.345)

• Share an HTML or Markdown file from Claude Desktop or Claude Code with anyray_share (#4545)
• Session savings calibrate Claude Code turns; dashboard reports why a turn did not (#4547)
• Preserve calibrated session credits (#4546)
• Tell clients when org artifacts can be published and return the console link (#4541)
• Org artifacts are on by default (#4544)
• Align savings metrics and reuse overview aggregates (#4537)

Console (v0.4.280)

• Artifacts page, sandboxed viewer and the admin switch (#4543)
• Link the claude.ai admin page for the member-export setting and the Owner's Export data button (#4542)
• Desktop selection copy names the Team and Enterprise export step (#4539)
• Import plugins from GitHub and manage marketplaces in the Plugins tab (#4509)
• Show installed seats per plugin in the Plugins tab (#4508)

Anyray Connect (v0.11.418)

• Managed updates, auto-lane caching, transient re-enroll, Linux uninstall (#4498)

Docs

• Say where a Primary Owner's claude.ai export is and that migrate cannot use it yet (#4540)
• Team and Enterprise members need an Owner to allow exports before migrate (#4538)

Also updated: Shared libraries.

v1.10.507

Released 2026-10-20

Gateway (v1.17.344)

• Docs(observability),test(gateway): follow-up, the falling savings path and a pinned prose count (#4532)

Also updated: Shared libraries, Docs.

v1.10.506

Released 2026-10-19

Gateway (v1.17.343)

• Measure the test-log Read lane in production: seat status, regret guard, holdout (#4527)
• Reuse cached console savings across replicas (#4526)
• The test-log Read lane is a strategy: its own kind, named declines, console entry (#4523)
• Keep the prompt anatomy out of metadata so trace lists and sessions read fast again (#4524)
• RFC 2397 data URIs and estimate wording as the code reads it (#4522)
• One price for a reply image, data URIs by shape, and the estimate's rollout against v1.10.504 (#4521)
• Estimate follow-ups: the gateway's -1 tool index, whole start blocks, no opaque or encrypted data, a generated-image rate (#4519)

Optimizer (v0.3.269)

• App-state trim and fold also read a trailing user state message (#4530)
• Opt-in first-appearance dictionary lanes in columnar_fold (#4402)

Shared libraries

• Count a re-sent generated image as one input image in the estimate (#4531)

Also updated: Console, Anyray Connect, Docs.

v1.10.505

Released 2026-10-19

Updated: Anyray Connect.

v1.10.504

Released 2026-10-19

Gateway (v1.17.342)

• Estimates count only generated output, including streamed tool arguments, reasoning, speed and advisor cost (#4496)
• Per-class session pair and closed-month restatement, so admin matches console (#4511)
• Turn the test-log Read lane (hooks.logRead) on by default (#4516)

Also updated: Console, Shared libraries, Docs.

v1.10.503

Released 2026-10-19

Gateway (v1.17.341)

• Response-schema trim on by default for app agents; exact fold credit that never raises a bill (#4491)
• A refused served round reads its reply only when it reported no output (#4513)
• A refused served round's reported output is billed as reported, whether or not its reply was read (#4503)
• A refused served round keeps its reported output and speed when its reply can't be read (#4499)
• Import org plugins from public GitHub repos and manage Desktop marketplaces (#4489)
• A served round an output guardrail refused is estimated and netted when it reported no input (#4495)
• An estimate never counts a reply's usage metadata as output, and sizes the attempt that answered (#4478)
• Stabilize test lifecycles and remove redundant suite work (#4476)
• A cached served round 1 with no counts publishes the live rounds' sum (#4482)
• Report each org plugin's install state per seat (#4470)
• Claude Desktop MDM enrollment, handover and uninstall gaps (#4469)

Optimizer (v0.3.268)

• Columnar_fold optionalFields off by default (#4514)
• Columnar_fold folds keyed record maps, ragged record lists and JSON Lines (#4504)

Console (v0.4.277)

• Console and admin read the same Total saving and Extra capacity rules (#4501)
• Switch for the API response-schema trim on the Columnar fold card (#4483)
• Per-client Total saving reads the session dollar pair (#4472)

Anyray Connect (v0.11.412)

• Three checks that keep main red, a SIGPIPE race and two POSIX-only connect tests (#4506)
• The test-log Read lane digests a passing run to its verdicts (#4510)
• The test-log Read lane recognizes a command that starts with cd "$(…)" && (#4497)
• Add and update the personal LiteLLM key after sign-in and from Tools, Warnings and Settings (#4468)
• Definition-first Symbol context and hints (main) (#4471)
• Migrate keeps an artifact whose last claude.ai edit failed (#4481)
• Keep a hand-written LiteLLM config on the person's own key (#4467)
• Migrate restores a claude.ai artifact edited after creation as its full latest version (#4461)
• Migrate --export keeps claude.ai artifacts as files in each restored chat (#4452)
• Stop declining Explore spawns at the Agent tool (#4448)
• OpenCode 2 support for trims and the ChatGPT and Copilot subscription lanes (#4445)

Shared libraries

• Decode active session metadata once for the sessions list (#4502)

Also updated: Docs.

v1.10.502

Released 2026-10-19

Optimizer (v0.3.267)

• Opt-in OpenAPI response-schema trim for app tool loops (#4465)

Also updated: Console, Shared libraries, Docs.

v1.10.501

Released 2026-10-19

Gateway (v1.17.340)

• A served turn whose first round reports no usage prices every round (#4466)
• Session savings estimate calibrates long and tool-search sessions (#4449)
• A refused served round is netted from the trims it paid for (#4463)
• Chart the service across deploys, not just the running replicas (#4455)

Optimizer (v0.3.266)

• No prompt_cache_key for app tool loops on OpenAI (#4454)

Console (v0.4.275)

• Plugins tab to upload, inspect and remove org plugins (#4458)
• Lead with the verdict, show each window's worst, one wide chart per section (#4456)

Also updated: Shared libraries, Docs.

v1.10.500

Released 2026-10-19

Gateway (v1.17.339)

• Settle hook trims' session savings over the turns that followed (#4447)
• Savings calibration anchors on the attempt the usage describes (#4451)
• Setup tab lists aliases by their original id and points installer hosts at the plugin (#4450)
• Personal LiteLLM keys setting (#4441)
• Org plugins: store, validate and serve full Claude plugins (#4418)
• An upstream URL never leaves the host the route names (#4405)
• Transaction ID age chart and database maintenance problems (#4440)
• Trace modal input breakdown from a content-free prompt anatomy (#4414)
• Savings calibration reads the attempts after the response drained (#4443)
• Revert reasoning session evidence gate (#4406) (#4415)
• Org plugins store admits a plugin kind and the reader skips it (#4416)
• Health series drops running replicas + Health page redesign (#4420)
• People open org artifacts shared with them; content:manage removes any (#4407)

Console (v0.4.274)

• Ask for the personal LiteLLM key the org policy names (#4442)
• Trim Measurement modal, Harness retrieval callout, Total saving tooltip (#4417)

Shared libraries

• Keep expired cached shares out of savedTokensCached (#4439)

Also updated: Optimizer, Anyray Connect, Docs.

v1.10.499

Released 2026-10-19

Gateway (v1.17.338)

• Session savings cover explicit-cache routes; restore Home sparklines (#4419)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.498

Released 2026-10-18

Gateway (v1.17.337)

• Estimate session-level prompt-cache savings (#4408)
• Require current session evidence for reasoning edits (#4406)
• Refuse a Jest run whose workers would start Jest again (#4410)
• The built-in seat host is authorized for pass-through traffic only (#4401)
• Skills and Guidance cannot carry plugin hooks, MCP servers or other auto-run components (#4399)
• Publish org artifacts with POST /connect/artifacts behind an admin switch (#4394)
• A caller never makes the gateway mint its own Azure identity token (#4397)
• Partner redactions cover the whole conversation, the same bytes every turn (#4395)
• Shadow kinds report whether a strategy would apply (#4327)
• An Azure check never sends the gateway's own identity off Azure (#4388)
• The gateway client key never reaches a provider, whatever its auth mode (#4351)
• Guardrails stop over-blocking: no text passes, a positive rewrite list, boolean failOnError (#4380)
• Input guardrails before the optimizer on VS Code, Connect hook and batch lanes (#4382)
• Persist the savings audit's vocabulary factor and roll it up per model (#4243)
• Only a cached first round of a served turn saves (#4372)
• Preserve certified lossless replay without retrieval (#4364)
• Cache_prefix follow-ups from the second audit pass (owned gate, keep-warm netting, bypassed turns, keyed digests) (#4293)
• Publish the audited holdout's reading beside Value created (#4187)

Optimizer (v0.3.263)

• Columnar_fold keeps every column in every row (#4409)
• Result-local JSON dictionary codec and content-free fold census (#4379)
• Client strategy tests match the notes #4373 dropped (#4392)
• Plain copy for Symbol context and Read-only workflows (#4373)
• Repeat_factor anchors repeats on replayed spans (#4229)
• Reconcile floors with what the committed config ships (#4376)
• Measure the shipped posture: encrypted durable stash and an established session gate (#4367)

Anyray Connect (v0.11.394)

• Opt-in count_and_top_k projection for read-only workflows (#4371)
• Claude Desktop turns on and off cleanly from the tray (#4374)
• Reopening the running app shows the window (#4368)
• The integration lock waits out a delete-pending name on Windows (#4362)
• The tee stash's past-cap rewrite gets a fresh birth time on NTFS (#4361)

Shared libraries

• Org artifacts store on the trace ledger (#4391)
• The observability source-scan mirrors build @anyray/observability first (#4385)

Docs

• Clean-up pass (2026-10-12 to 2026-10-18) (#4386)

Also updated: Console.

v1.10.497

Released 2026-10-18

Gateway (v1.17.336)

• Input guardrails run before the optimizer on the hooked dispatch (#4355)

Optimizer (v0.3.262)

• Expose client strategy setup requirements (#4363)

Also updated: Console, Docs.

v1.10.496

Released 2026-10-18

Gateway (v1.17.335)

• A served turn the cache answered in part prices each round on its own (#4354)
• Azure token logs, Copilot refusal body, bounded Codex read, cache key names the upstream (#4350)
• A redaction that returns an error under failOnError blocks its hook (#4346)
• A fallback or retry bills every attempt the provider billed, each at its own model (#4341)
• A response-cache hit is billed as a semantic-cache hit (#4342)
• Send the restated limit units for closed months to the portal (#4340)
• A refused request whose redaction did not finish keeps no request text (#4338)
• Manage Symbol context and read-only workflows (#4334)
• A request never runs on credentials its route did not name (#4337)
• A partner check that errors fails its hook when failOnError is set (#4335)
• Codex gets a held stream cut at the cap as a 400 (#4330)
• Codex WebSocket frames other than response.create meet the guardrails (#4326)
• Restate old hook rows' limit units with the cache-read credit (#4323)
• 64 MB held-stream cap, a 128 MB stream frame limit, linear framing (#4322)
• Pass-through traffic runs the org's guardrails (#4320)
• Price a guardrail-denied answer at what the provider billed (#4321)
• Codex gets a guardrail denial as a 400, a seat route with no branch runs the rules above it (#4318)
• A redacted request is traced redacted when a check denies it (#4319)
• The Bedrock check refuses an unsafe region, encodes its STS query and refuses redirects (#4316)
• A cache-hit stream replay no longer leaves an unhandled rejection (#4315)
• A retried 446 reports only its own output verdicts; guardrail regex tests assert work, not time (#4314)
• Cockpit user modal Subscription efficiency gauge + Activity/Volume rework (#4296)

Console (v0.4.270)

• Console: Batch read On after Repeat factor, shorter provider modal text (#4317)

Anyray Connect (v0.11.389)

• Correct strategy recovery and benchmark evidence (#4348)
• A live MCP session hands over to the build Connect.app swapped in (#4308)
• Add symbol context and read-only workflows (#4298)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.495

Released 2026-10-17

Gateway (v1.17.334)

• Subscription seat lanes run the org's guardrails (#4310)
• Guardrails check every request type, and a hook that throws fails closed (#4311)
• Cap a held stream at 32 MB and fail closed past it (#4309)
• Partner plugins log labels and stop carrying the partner key and request body (#4307)
• A redaction rewrites the whole conversation the same way every turn, remembered per user (#4304)
• Hold a stream an output deny or redaction applies to, check it, then send (#4303)
• Count the jsonSchema validator's work before it runs (#4302)

Console (v0.4.269)

• Remove the "already cached" line from the Tokens saved tile (#4305)
• Usage page (was Cockpit): hero Cost/Tokens toggle, KPI band removed, new default columns (#4295)

Also updated: Docs.

v1.10.494

Released 2026-10-16

Gateway (v1.17.333)

• A target's hooks run in addition to the inherited ones, never instead (#4300)
• Guardrail checks read the latest turn, and redactions write back where they read (#4299)
• Caller hook_results carry verdicts only, never what a check matched (#4297)

Also updated: Docs.

v1.10.493

Released 2026-10-15

Gateway (v1.17.332)

• Claude Desktop built-in connectors Desktop 2.37 accepts, Web search through the gateway (#4287)
• A guardrail that could not test its text fails instead of passing (#4290)
• Remove the 0.75 write allowance from Extra capacity (#4285)
• Claude Desktop's retrieval MCP names its launch owner, so its deferred turns keep their savings (#4286)
• The built-in anyray skill's front matter names the skill (#4281)
• The model menu narrows a conditional route on an optimizer-mutable key (#4279)
• Broker connector sign-in for MCP servers on the 2025-03-26 auth spec (#4255)
• Credit the prompt-cache hits the gateway causes (cache_prefix lane) (#4250)
• MDM Claude Desktop gets the Anyray retrieval tools from the bootstrap (#4271)
• Bound the jsonSchema guardrail's regexes (#4275)
• /v1/models answers from the catalog when the route's provider cannot list models, so Desktop's picker is not empty on Bedrock (#4253)
• Record every priced horizon decision for offline replay (#4247)
• Deployment Health tab on the shared health UI, with the retained history (#4252)
• Allow i, refuse slow-scaling rules up front, cap regex checks (#4236)
• The hook savings budget bounds billed value, not just tokens (#4249)
• Database pool events and full probe for deployment health (#4239)
• Cache only clean answers and run output guardrails on hits (#4237)
• Desktop policy refusals say which key and where it belongs, never echo values (follow-up) (#4241)
• Evidence tests wait deterministically (main CI flake) (#4238)
• Price a hook trim's forgone cache reads at the turn it fired on (#4242)
• Enable online per-user calibration by default (#4232)
• Claude Desktop lane cleanups (skill front matter, served temp files, doctor profile path, Node 22 test, bootstrap helper) (#4226)
• Bill large Claude trims from the recount and credit hook-lane cache reads by default (#4235)
• Count a retained handle pin or the durable stamp as stable lazy retrieval tools (#4234)
• Stop false Warnings in machine health: no_org_key and a stale routing verdict (#4228)
• …and 20 further changes.

Optimizer (v0.3.260)

• Per-tool slope-table horizon default, off until its paired bench (#4205)
• Score every session-horizon assumption on real lives (#4195)

Console (v0.4.268)

• Claude Desktop built-in connectors with their IDs, Web search key, per-row state (#4291)
• A refused Skill or Guidance save says why, and Skill edits refuse a stale tab (#4280)
• Name a desktop app update failure instead of install_error (#4283)
• A queued Claude Desktop setup never mints a seat token without a terminal (#4268)
• Show what an MDM Mac gets from Claude Desktop, and switch the retrieval tools (#4270)
• Sessions content export saves a CSV file (#4225)
• Doctor and the console see Claude Desktop's skills (#4221)
• The Deployment Health page on real data (#4163)

Anyray Connect (v0.11.382)

• Recognize our apiKeyHelper at a Windows path again (#4282)
• The Desktop carry copies a plugin's on/off from cowork_settings.json (#4278)
• Hook removal keeps a developer's hook in a shared entry; Windows hook commands run in PowerShell (#4261)
• History and migrate fail when their steps fail (#4259)
• Windows Claude Desktop running check, revert token, auth lane and HKCU parity (#4267)
• Org skills only overwrite or remove skill files connect wrote (#4265)
• Claude Code checks read every managed-policy source; env precedence gaps closed (#4263)
• An incomplete policy does not withdraw the org marketplace (#4264)
• The integration lock is broken only when its holder is gone (#4262)
• Claude Code revert removes its backup and approvals; ~/.claude.json writes check for concurrent edits (#4260)
• Desktop carry keeps a receipt and recovers from a failed Cowork copy (#4258)
• Project import stays inside the Projects root and keeps the rest of spaces.json (#4257)
• Org MCP sync records ownership, keeps to the enrolled gateway, and withdraws per client (#4266)
• A Desktop reconnect queued after a disconnect is recorded at quit; no false scheme warning on revert (#4276)
• Detect Claude Desktop's bundled Claude Code for hooks (#4269)
• A Desktop setup finished at quit lands the org connector; a default auth scheme still reads as routed (#4248)
• Record update outcomes, show a failing updater in doctor, retry with backoff (#4219)
• Claude Desktop helper targets the stable path, migration carries what it claims (#4223)

Shared libraries

• Org skills size cap holds when two replicas save at once (#4284)

Docs

• Claude Desktop guide routes through the desktop app and says what you get (#4198)

v1.10.492

Released 2026-10-15

Gateway (v1.17.331)

• Refuse client $regex routing and bound admin patterns (#4179)
• Columnar_fold and prompt_compression report their already-cached share (#4173)
• Resolve hook plugin dispatch by own key, allowlist plugin env, explicit outbound body (#4175)
• A target's own custom_host wins over its key's Base URL in every spelling (#4169)
• Price Bedrock's 10% regional premium into cost (#4153)
• Hook builds reach the control plane and the vendor rows (#4171)
• The OpenClaw default counts traffic sent through an alias (#4174)
• Unreadable stream rows are failed attempts; chat-dialect Claude streams bill restated usage (#4167)
• The generated config defaults to the model the agent runs, not the first lane (#4165)
• Bill a pin read past its fired deadline to loop lag, not the read (#4157)
• Export trace content for a time window (#4149)
• Refuse and drop config keys that camelCase to proto (#4161)
• Record the build each tool's hook ran as, per key and seat (#4148)
• The gateway collects deployment health and serves a time-ranged series (#4146)
• Bedrock discovery picks the regional profile whatever the list order (#4141)
• Stash writes may run to the request's deadline only when its budget is wire-debited (#4136)

Optimizer (v0.3.259)

• Factor repeated user context by default (#4162)
• Find profitable compatible plans within the existing budget (#4138)

Console (v0.4.267)

• Routing keeps lane and top-level dispatch fields on Save (#4176)
• Release the desktop app; Add user and MDM hand it out without ?desktop (#4155)
• Hide the Client keys card on the Users page (#4158)
• Errors modal rail + pane, plain explanations, machine warnings (#4159)
• Routing shows a kept custom_host read-only on its row (#4156)
• Sessions saved % + token buckets, drop trace Saved column (#4145)
• Email domains beside SSO; desktop app download needs a verified domain (#4143)

Anyray Connect (v0.11.362)

• Copy local Claude Desktop data on Macs whose MDM policy routes Desktop through Anyray (#4134)

Also updated: Shared libraries, Docs.

v1.10.491

Released 2026-10-14

Gateway (v1.17.330)

• Bedrock model menu leaves out Claude Fable (#4137)
• Report when each tool's hook last ran, and name passing hook states (#4135)
• Codex seat lane: connectors deferred behind tool search (on), code-mode decode, paired bench (#4119)
• Read a one-target single default; model $regex lanes ignore ASCII case (#4133)
• /v1/me/models answers a service key's own menu (#4126)
• Anyray-default answers with Claude Sonnet 5.5 instead of Sonnet 4.5 ($2/$10 per MTok, was $3/$15); set ANYRAY_DEFAULT_MODEL to keep another model (#4123)
• Agent binding menu lists bound-provider aliases and current Bedrock/Gemini families (#4121)
• Defer MCP tools into a client's own tool search (#4085)
• Heartbeat sends the optimizer's tool-output census (#4103)

Optimizer (v0.3.258)

• Repeat_factor fixes (pin discards, cleared anchors) and on by default (#4131)
• The optimizer reports its own deployment health (#4118)

Console (v0.4.266)

• Save keeps the default's custom_host and other dispatch fields (#4140)
• Add user Desktop app tab as download cards + Required-tool chips (#4125)
• Split routing family lanes, several agents per Apply (#4127)

Anyray Connect (v0.11.358)

• Hide Cursor from the tray (#4132)

Also updated: Shared libraries, Docs.

v1.10.490

Released 2026-10-14

Gateway (v1.17.329)

• Keep GPT-5.6+ cache writes on served-retrieval rows (#4117)
• Price xAI reasoning tokens at the output rate (#4116)
• Serve GPT on /v1/messages and refuse unsupported providers with a 400 (#4108)
• Built-in anyray-default follows the org's routing tree (#4109)

Docs

• Regex lanes list their priced matches (#4115)

Also updated: Shared libraries.

v1.10.489

Released 2026-10-13

Gateway (v1.17.328)

• Admin route for the org's model menu, per agent, with provider (#4107)
• Keep the shadow horizon verdicts per strategy (#4106)
• Shared deployment health core, storage and migration (#4091)
• Adopt a developer's existing LiteLLM upstream and key (#4097)
• Bound and retry proxied AWS credential connections (#4095)
• Bedrock default-chain credentials go through the forward proxy (#4090)

Optimizer (v0.3.257)

• Plan dedupe candidates with competing edits (#4096)

Console (v0.4.265)

• OpenClaw Setup tab lists the org's models from its routing (#4101)

Anyray Connect (v0.11.354)

• A sub-1 gateway limit no longer publishes maxTokens 0 (#4104)
• Pin OpenClaw seeds to the gateway default; plugin ships anyray-default (#4100)
• Check the gateway certificate and trust what the OS trusts (#4094)
• Approve Claude subscriptions by themselves under macOS MDM (#4098)
• A device-managed machine can reconnect after Disconnect (#4086)
• Clear stale hook warnings after recovery (#4083)

Also updated: Shared libraries, Docs.

v1.10.488

Released 2026-10-13

Gateway (v1.17.327)

• Egress proxy follow-up: one deadline across the DNS pre-check and fetch, bounded seat pre-checks (#4087)
• Lane values match ignoring letter case (#4084)
• Agent binding key under x-anyray-provider; client-caused 400 not blamed on the optimizer (#4071)
• Egress proxy round 3: org MCP sign-in behind a proxy, bounded DNS pre-check, refusal parity (#4082)
• Route outbound traffic through HTTPS_PROXY / NO_PROXY with SSRF policy unchanged (#4072)
• An sdk MCP source for Agent SDK apps, lean tools plus a batch-read hint (#4064)
• Ship every client's retrieval evidence in the optimizer-health bins and triage (#4056)
• Codex auto-compact threshold (#4040) (#4060)
• Record a refused Codex seat WebSocket turn as a failed row (#4053)
• Codex batch reads are served from code mode and billed at Codex's own rate (#4050)
• Say whether each runtime invoked the current anyray skill (#4045)
• Codex compacts earlier from a gateway-served threshold, default off (#4040)
• A Claude Code early return forwards its optimized turns' tools (#4032)

Optimizer (v0.3.256)

• Widen planner candidate alternatives (#4068)
• A toolless seat turn's mint decline reads seat_toolless_turn (#4049)
• Price the fleet read-back gate as a digest bet (#4042)
• Reserve one read turn before warm rewrites (#3989)
• Price a marked header as read and ship quartileGrowth on (markedHeaderRead + quartileGrowth on by default) (#4012)

Console (v0.4.264)

• MDM seats auto-update by moving into the per-user install (#4080)
• Hide org-wide account-menu entries from self-scoped viewers (#4044)

Anyray Connect (v0.11.346)

• The refresh spawn gate reads the version the spawn runs (#4066)
• A Codex digest names its tee or is not sent (#4074)
• The MDM binary owner follows settings changes and only names a binary this user can run (#4059)
• The Codex batch-read reminder is on by default (#4062)
• One owner for Claude Code's registrations on MDM seats (#4055)
• Mirror the console's skill_load labels, so the tray lane and the release gate go green (#4052)
• Batch read serves absolute paths inside the workspace (#4047)

Also updated: Shared libraries, Docs.

v1.10.487

Released 2026-10-13

Maintenance release — no application component changed.

v1.10.486

Released 2026-10-12

Gateway (v1.17.326)

• Say whether each agent runtime loaded the anyray skill; an absent read path is a wiring gap (#4027)
• Drop Claude Code's safeguards field and its beta on the native invoke lane (#4030)
• Say whether a seat's anyray skill is loaded, not only on disk (#4023)
• Record whether app agents see and load the anyray skill, and roll it up to triage (#4025)
• Per-tool versions of the anyray skill; Claude Code's names anyray_read_batch (#4021)
• Count_tokens 501 tells the Claude CLI not to retry (#4020)
• Let the Responses WebSocket handshake carry optimization headers (#4018)
• Trim Codex seat WebSocket deltas and replay them on every full frame (#4010)
• Claude Agent SDK guide installs the anyray skill; skill stops vouching for the hook footer on app agents (#3986)
• HarnessRetrieval on by default; migration 0172 turns it on everywhere (#3990)
• App tool loops claim lazy retrieval tools under harnessRetrieval (#4013)
• Session-held x-anyray-harness-retrieval header (#4003)
• Say whether a forwarded-unchanged agent has its read path ready (#3988)
• Correct chars-only savings on OpenAI models, downward only (#4006)
• Record whether the anyray skill is listed to the model (#4002)
• Keep a lazy session's retrieval tools on every replica once one wires them (#3985)

Optimizer (v0.3.255)

• Complete plans with certified fresh additions (#3984)
• Preserve profitable edits in request planning (#3980)
• Name the mask's empty scan and tail-only declines under the request planner (#3979)

Console (v0.4.263)

• Sessions newest-first + active dot, shorter session filters, Add user trims (#4026)
• Every onboarding target states its read path, anyray skill and retrieval (#4007)
• Notifications an admin can act on, one row per problem (#3982)
• OpenClaw onboarding makes Anyray the only model route (#3981)

Anyray Connect (v0.11.337)

• Write each skills dir its tool's skill variant (#3987)

Also updated: Shared libraries, Docs.

v1.10.485

Released 2026-10-12

Gateway (v1.17.325)

• Per-session hook evidence on the session spend read (#3973)
• Calibrate retrieval by class and cap survival payback (#3963)
• Let the gateway attest a baseline retrieval activation instead of guessing it from text (#3961)
• Count cached-prefix re-writes per strategy class, split by whether a mint priced them (#3957)

Optimizer (v0.3.254)

• The request planner reports mint_declined_tokens for unselected in-prefix offers (#3975)
• Recover profitable plans with unused search budget (#3969)
• Columnar_fold writes a large repeated object once in app tool loops (#3977)
• Replay the shipped history editors on a Claude Code seat, per gateway evidence rule (#3974)
• Replay the request-wide planner on a digestible thread, and withhold a verdict from an arm that edited nothing (#3966)
• Credit savings to surviving handle edits (#3972)
• Guard quartile horizons against recent growth bursts (#3962)
• Calibrate summary recovery with served retrieval counts (#3960)
• Charge a lazy-tool activation only to an edit that mints a handle (#3956)

Console (v0.4.262)

• A fleet alert's seat link opens the developer in the customer console (#3968)

Anyray Connect (v0.11.333)

• Name the evidence behind doctor's source trim state (#3958)

Docs

• One-route Claude Desktop MDM guide, managed-devices wording (#3978)

Also updated: Shared libraries.

v1.10.484

Released 2026-10-12

Anyray Connect (v0.11.332)

• Connect-tray: Overview page rework (#3950)

Docs

• Clean-up pass (2026-10-07 to 2026-10-12) (#3954)

v1.10.483

Released 2026-10-12

Gateway (v1.17.324)

• Deduplicate repeated test coverage (#3933)
• Price Azure OpenAI cache writes (#3929)

Optimizer (v0.3.253)

• Name why a request plan aborted, what its search spent, and which term lost (#3952)
• OpenAI GPT-5.6+ on first-party endpoints now report cache writes (#3948)

Shared libraries

• Materialize the session-summary rebuild CTEs and back off sessions that time out (#3951)

Docs

• Remove the endpoint agent and endpoint-control (#3925)

Also updated: Console, Anyray Connect.

v1.10.482

Released 2026-10-11

Gateway (v1.17.323)

• Per-user usage dashboard, served by one KPI function; retire the device page (#3947)
• No batch-read credit for a session that handed work to a sub-agent (#3941)
• Judge Responses-lane cache lifetime by the route (#3932)
• Book blocked Gemini prompts correctly (#3931)

Optimizer (v0.3.252)

• Price GPT-5.6+ implicit-cache rewrites at the write tier (#3939)
• Redesign optimizer admission around a shared request-wide economic plan (#3930)
• Price Mistral models instead of the fallback rate (#3928)

Console (v0.4.260)

• Machine status tab merges tools and checks; Users table and modal trims (#3946)
• App sign-in turns on only locked tools; the person chooses the rest (#3923)

Shared libraries

• Claim session-summary rebuilds in short, bounded transactions (#3943)

Also updated: Anyray Connect, Docs.

v1.10.481

Released 2026-10-11

Gateway (v1.17.322)

• Region-cache probe and cached-token normalization for DeepSeek/Gemini/Azure (#3921)
• Stamp prompt_cache_key on Mistral routes (#3922)
• Classify Groq gpt-oss and Mistral prompt caching (#3918)
• Honest fixes in the Connect app; tools are Required or Available (#3907)
• Draw the shadow-baseline sample from the CSPRNG (#3902)
• Keep complete lifetimes across the survival window (#3897)
• Stop underestimating session lifetimes from optimizer trims (#3895)
• Gateway tool deferral on by default, with a one-time migration (#3889)

Optimizer (v0.3.251)

• Refresh token counts between priced strategies (#3914)
• Share retrieval activation across atomic edit groups (#3905)
• Align pre-edit horizon with hidden turn geometry (#3912)
• Honor cold cache policy for suffix activation (#3906)
• Correct cache activation costs and grouped reuse horizons (#3900)
• Recover profitable activation subsets and remove phantom costs (#3898)
• Admit profitable fresh-tail groups atomically by default (#3896)
• Recover profitable edit subsets by default (#3890)

Console (v0.4.259)

• Machines live under each user; retire the Machines page (#3894)

Anyray Connect (v0.11.328)

• Find lines in source files before batch-reading them (#3911)
• The tool switch shows the developer's choice, not routing health (#3899)

Also updated: Shared libraries, Docs.

v1.10.480

Released 2026-10-11

Gateway (v1.17.321)

• A new tenant's gated strategies get a measurement arm (#3769)
• One tail-lookback miss no longer latches strict pricing for a day (#3768)
• Machines page: one status per person, grouped causes, less noise (#3759)

Optimizer (v0.3.250)

• Regret guard trips on a confidence bound, one session cannot open it (#3766)

Console (v0.4.258)

• Tidy the Add agent and user detail modals (#3859)

Also updated: Anyray Connect, Shared libraries, Docs.

v1.10.479

Released 2026-10-11

Maintenance release — no application component changed.

v1.10.478

Released 2026-10-11

Gateway (v1.17.320)

• Serve the measured horizon and report both ranged verdicts and the arrival-only trims, shadow only (#3883)

Anyray Connect (v0.11.323)

• A profile read finds the staged copy while Windows holds the legacy name delete-pending (#3885)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.477

Released 2026-10-10

Gateway (v1.17.319)

• Measure subagent thread lengths and shadow a subagent curve (#3884)
• A mistyped admin key at sign-in is rejected, not stored (#3879)
• Price ranged hook trims on the gateway's real rates as a shadow, behind hooks.rangedArrival, off by default (#3877)
• A wrong admin token next to a valid credential counts as a guess (#3871)
• Serve retrieval priors from live measurement (#3876)
• Record seat usage-limit utilization on every seat spend row (#3874)
• Report the client tool on every hook savings event (#3873)
• Compaction-aware main-thread survival curve, measured quartile, and a shadow switch (#3875)
• Hold tool deferral for a Claude Code session's life (#3870)
• Shadow-measure per-IP keys behind appending proxies before enforcing them (#3866)
• Drop a cut field only on a connector structure, redact ark_ keys in place (#3863)
• Verify and self-heal managed integrations (#3865)
• Close the erase residues: queued budget alerts, late connect-health writes, the crash window (#3832)
• Erase reaches the seat-hash-keyed tables, seat hashes move off the audit row (#3817)
• Drop redundant whole-body copies on the Messages pass-through (#3853)

Console (v0.4.257)

• AI activity weeks run Sunday to Saturday (#3864)

Anyray Connect (v0.11.321)

• Small test runs pass through the digest, and a summary that reports failures is never digested without them (#3869)
• A failing-run digest on the trim pipe points at a rerun, not the whole tee (#3860)
• Migrating a legacy ~/.anyray profile is safe under parallel hooks (#3855)
• The trim pipe's shown-size bounds respect Claude Code's BASH_MAX_OUTPUT_LENGTH (#3858)
• Promote the WebFetch refusal note to main (dev #3841, #3842, #3847, #3851) (#3854)
• Shell-rewrite follow-ups: hint and note see through a rewrite, conservative passing count, stand-aside baseline, hint counts (#3850)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.476

Released 2026-10-10

Gateway (v1.17.318)

• Promote dev #3840 to main: lazy retrieval tools on Claude Code subagent threads (#3849)
• Page the host list so a fleet past 100 shows every host (#3843)
• Look up userName by one row and page GET /Users in SQL (#3838)
• Keep the streamed export bounded under ?pretty and for connector rows (#3844)
• Stream the user export a bounded page at a time (#3831)
• Read one key by id and push list filters into SQL (#3829)
• Keyset cursor, page-depth cap and default window for the trace list (#3828)
• A wrong admin token at sign-in counts as a guess in the per-IP auth-failure guard (#3830)
• Bound Claude token counting on the post-response path (#3823)
• Cheap probe at optimizer boot, hour-aligned default session window (#3826)
• AI activity card in the person modal, with time zones and cache warmth API (#3791)
• Record OTLP rows with a [1m] model; one model shape for the hook lane (#3812)
• Promote verified dev fixes to main: batch_read reasons, lazy retrieval tools on main threads, turn-cap work mode (#3822)
• A malformed sign-in body gets 401, not a 500 (#3816)
• Price Haiku 5.5, Gemini Flash-Lite and GLM-5.3; correct Sonnet 5.5 cache reads and five borrowed rates (#3808)
• Malformed bodies get the route's normal answer, not a 500 (#3807)
• Retire the seatOverflow switch for the subscription fallback policy (#3805)
• One included allowance per person under the ASCII fold (#3796)
• A non-string model still records its spend row, trace and stream event (#3793)
• The live request stream carries metadata only, by allowlist (#3782)
• Admin job to scrub connector credentials captured before redaction (#3785)
• A hook-savings beacon with an object-valued count is ignored, not a 500 (#3804)
• Count an active seat once per person under the ASCII fold (#3787)
• Erase reaches auth events, console caches, connect health and the legacy connector bridges (#3797)
• Close four erase leftovers found (#3788)
• …and 3 further changes.

Optimizer (v0.3.247)

• Census the request prefix: system, tools, MCP tools, first message (#3819)

Console (v0.4.256)

• Declare the database volume size on the Privacy page (#3803)

Anyray Connect (v0.11.310)

• Windows lock waiter retries a delete-pending lock dir (#3837)
• The Claude test-run rewrite accepts a trailing 2>&1 and single-quoted literals, behind shellRewrite (#3836)
• Promote dev #3821 to main: remind an agent to batch the ranges a search just located (#3833)
• Promote dev #3820 to main: the work-mode hint pairs each batch read with the next search (#3825)
• Use one policy snapshot across Connect configuration (#3813)

Docs

• PostToolUseFailure passes failed output through; describe Claude Code's head+tail cut (#3818)

Also updated: Shared libraries.

v1.10.475

Released 2026-10-09

Gateway (v1.17.317)

• Redact hosted MCP connector credentials before capture (#3780)
• File-store mint and revoke read the store inside their queue slot (#3779)

Anyray Connect (v0.11.301)

• Verify the VS Code extension is on disk before skipping its install (#3781)

Also updated: Shared libraries, Docs.

v1.10.474

Released 2026-10-09

Gateway (v1.17.316)

• Erasing a delegating agent's end user reaches its stash rows (#3777)
• Erasing a person unassigns their agents (#3775)
• Attest cache expiry after a sibling of the stamped request (#3774)
• Session-gate looks spend alpha by information, not by look count (#3771)
• A ctx_ pointer answers its key and that key's owner, nobody else (#3744)

Optimizer (v0.3.246)

• The net_outcome regret verdict does not depend on which pod served the retrieve (#3767)
• The tail-admission horizon never falls below the no-evidence quartile (#3761)

Also updated: Console, Shared libraries, Docs.

v1.10.473

Released 2026-10-08

Gateway (v1.17.315)

• No_followup_expected needs real evidence, not one ended session (#3765)
• Gh run log digest family behind hooks.ghRunLog, off by default (#3763)

Optimizer (v0.3.245)

• A rerun after an edit is not a regret (#3762)
• The measured retrieval rate is per retrieval class (#3764)

Anyray Connect (v0.11.299)

• MCP and Hooks rows never contradict the tool status (#3757)
• A tool switch holds its new state until the re-poll lands (#3760)

Also updated: Console, Shared libraries, Docs.

v1.10.472

Released 2026-10-08

Gateway (v1.17.314)

• Fleet read-back evidence reaches connect, decision off by default (#3758)
• Attest live cache-anchor tails for anchored trims (#3751)
• Credit a hosted /mcp connector only when it presents the request's key (#3752)
• Deferred retrieval tools surface with tool_addition instead of a prefix re-write (#3749)
• One economics layer for activation decisions (#3734)
• Tray shows live tool traffic, stops killing its resident (#3740)
• Build the session survival curve from the session summary (#3705)
• Report hook tee bets and read-backs; router versions reach the trace (#3745)
• Sessions open on last activity; sortable requests in an expanded session (#3746)
• Check the tail-lookback window at runtime (#3736)
• Add opt-in search with exact source context (#3733)
• Minute-resolution cache warmth from request rows, no pings (#3731)
• Only a fork launch holds back cold-turn attestation (#3727)

Optimizer (v0.3.244)

• QuartileGrowth sizes the horizon's context ceiling on the upper-quartile turn (#3756)
• Tail-lookback mint pricing is opt-in per strategy, default off (#3754)
• Anchored trims price deep masks from an attested earlier tail (#3750)
• Replay a pinned retrieval handle as sent, owner-folded or not (#3743)
• Tail-lookback probe runs Claude Code-shaped turns (#3725)
• Command_digest on by default (lossless lane) with numbered-Read fold; observation_mask cold-write credit on (#3732)
• Observation_mask prices retrieval at dogfood's measured pull rate (#3723)
• Content_census sizes tool output by command family (#3721)

Anyray Connect (v0.11.297)

• Converge tools, skill and MCP right after an update (#3735)
• The Claude trim-stdin lane records its bets in the tee ledger (#3728)
• Never pipe a watch mode spelled as a subcommand or script (#3724)
• Keep the user menu on the sign-in screen so Uninstall stays reachable (#3716)
• Open Anyray Connect when the installer finishes (#3719)
• Expose opt-in batch search to Claude Code (#3714)

Docs

• Claude Code main threads keep the retrieval tools lazy (#3713)

Also updated: Console, Shared libraries.

v1.10.471

Released 2026-10-08

Anyray Connect (v0.11.288)

• Prototype opt-in batch search (#3712)

Also updated: Docs.

v1.10.470

Released 2026-10-07

Gateway (v1.17.313)

• Claude Code main threads go back to lazy retrieval tools (reverts #3699) (#3711)

Also updated: Optimizer, Shared libraries.

v1.10.469

Released 2026-10-07

Gateway (v1.17.312)

• A count_tokens call no longer holds a Claude Code session lazy (#3699)
• Bump next to 15.5.27 in vercel cookbook (#3709)
• One honest health summary per tool (#3681)
• A sub-agent launch stops refusing cache expiry once the parent row's sibling clock is provably complete (#3698)
• A session's stored cache lifetime restarts on an attest… (#3707)
• Hold the prompt-cache lifetime and keep-warm lane off in this release (#3701)
• Send per-user hourly cache warmth on the meter (#3695)
• Back to pass-through cache markers and no keep-warm everywhere; stored 5m, auto and refresh move off (#3693)
• A turn a gateway lane credited reads applied (#3692)
• Prove keep-warm off so a paused session attests cold by its lifetime alone (#3688)
• Telemetry-only client keys for the Claude telemetry receiver (#3683)
• Bound hour-long keep-warm reach so a cold main thread can attest; name a row that lost its marker (#3679)
• Claude telemetry spend connector receives OTLP logs (#3677)
• Fail-open replays the first-sight lanes (#3675)
• Batch read credits the measured native read rate, in house units on every model (#3672)

Optimizer (v0.3.242)

• Long-thread replay bench for thinking_trim (#3704)
• Tail-lookback probe measures an anchored deep edit (#3684)
• Cache_optimizer: no tail write for a session that replaces its conversation (#3671)
• Invite tool picker trim + short Optimizer card descriptions (#3674)

Console (v0.4.252)

• A Measurement card on the Optimizer page (audited holdout and session-length pricing) (#3702)
• Doctor run through npx reports the seat, not the npx cache (#3697)
• MDM hands out the desktop app and its uninstall command behind ?desktop (#3680)
• Add user gets a Desktop app tab with installer downloads and tool policy (#3645)
• Harness retrieval switch on the Optimizer page (#3673)

Anyray Connect (v0.11.287)

• Copy the sign-in verification code with one click (#3703)
• The readBatchMainHint decline covers Explore spawns only, and reads as a setting, not the user declining (#3682)
• Retry app ownership with backoff when a step is unavailable (#3670)

Docs

• Clean-up pass (2026-10-01 to 2026-10-07) (#3676)

Also updated: Shared libraries.

v1.10.468

Released 2026-10-07

Anyray Connect (v0.11.283)

• The main agent's work mode (readBatchMainHint) ships on (#3667)
• Under readBatchMainHint, the Agent tool declines Explore and general-purpose spawns (#3666)

Also updated: Docs.

v1.10.467

Released 2026-10-07

Maintenance release — no application component changed.

v1.10.466

Released 2026-10-07

Optimizer (v0.3.241)

• Cache_optimizer: chat-format system breakpoint, documented cache floors, first-follow-up continuation (#3647)
• One coldTurn config block for cold-turn pricing; mintColdPremium removed before release (#3643)

Console (v0.4.251)

• Speed up initial Home startup (#3635)

Anyray Connect (v0.11.282)

• The main agent's switchable hint becomes a work-mode hint (trace the workspace yourself, don't spawn Explore subagents) (#3664)
• The main agent's batch-read hint becomes a switch, readBatchMainHint, off by default (#3653)
• Re-arm the batch-read nudge after 6 reads and parse the Bash shapes subagents emit (#3660)
• Subagents read source through the batch tool by default (#3658)
• A word containing ark_ no longer reads as a stale client key (#3648)

Shared libraries

• Batch read credits a Claude Code call only after the agent has read a file itself (#3649)
• CacheByUser SQL rollup applies the TS fold's read guards (#3646)

Also updated: Docs.

v1.10.465

Released 2026-10-06

Gateway (v1.17.311)

• Drop the Claude Code tool keys Bedrock InvokeModel refuses per model (#3634)
• Per-user 5m vs 1h prompt-cache economics on the spend row and the meter report (#3636)
• Cut console Errors noise; connect self-heals stale tool keys (#3627)
• Make Home, Cockpit and Sessions load faster (#3623)

Optimizer (v0.3.240)

• Columnar_fold folds the record lists an app tool loop writes into its own messages (#3633)
• Record the tail-lookback probe run on Bedrock (#3631)
• MintColdPremium opt-in for code_graph and command_digest (#3625)
• Observation_mask takes over folded spans; columnar_fold on by default everywhere (#3626)

Anyray Connect (v0.11.281)

• The window's failing-check rules follow the console again (#3638)

Also updated: Console, Shared libraries, Docs.

v1.10.464

Released 2026-10-06

Gateway (v1.17.310)

• Count attested cache-expired turns with an expiry_attested ledger row (#3624)
• Default the prompt-cache lifetime to client while refresh is off (#3618)
• OpenAI-wire Claude on an agent's own route gets its pin session (#3617)

Optimizer (v0.3.239)

• FirstSightOnly lanes for context_dedupe, command_digest and context_compression, default off (#3620)
• Tail-lookback probe for Anthropic-wire hosts (#3616)

Anyray Connect (v0.11.280)

• Uninstall removes app leftovers and asks to restart apps that still route (#3606)

Also updated: Console, Shared libraries, Docs.

v1.10.463

Released 2026-10-06

Gateway (v1.17.309)

• Raise batch read credit to 1.5 native reads per turn (#3615)
• Stdio setup states its container prerequisites; LangChain stdio block builds its own client (#3614)
• Stdio MCP entries use connect's absolute path; prove the server by its heartbeat (#3613)
• Default cache refresh to Off for every deployment (#3610)
• LangGraph savings: columnar_fold on for app harnesses that cannot retrieve; prompt caching for OpenAI-wire Claude (#3608)
• LangGraph follow-ups: keep app tool order, bound the integration-level read, credit batch reads on OpenAI wires (#3594)
• A keep-warm ping credits only the cache of the credential it went out on (#3604)

Optimizer (v0.3.238)

• Columnar_fold leaves its scope only on the retrieval signal (#3609)

Docs

• Drop sign-in steps, simplify deployment-token line (#3605)

Also updated: Console, Shared libraries.

v1.10.462

Released 2026-10-06

Gateway (v1.17.308)

• Credit cache_keep_warm only when a ping still held the cache at the turn (#3601)

Also updated: Shared libraries, Docs.

v1.10.461

Released 2026-10-06

Gateway (v1.17.307)

• Price native mint writes at the dispatched cache tier (#3602)

Optimizer (v0.3.237)

• Relevance_filter scans its pinned band on a cache-expired turn (#3598)

Also updated: Docs.

v1.10.460

Released 2026-10-05

Gateway (v1.17.306)

• Mint evidence names the load-balance target dispatch deals the conversation (#3599)
• Meter Batch read savings across request APIs (#3600)
• Show Batch read alongside strategies across the console (#3595)
• Expose per-agent completion evidence (#3583)
• Preserve retrieval mode across chat rotations (#3582)
• Preserve client beta headers on routed Anthropic requests (#3589)
• Per-agent provider key map (#3588)
• Judge every custom-host spelling a client config can use (#3587)
• HarnessRetrieval admin switch for app tool loops; drop ANYRAY_MCP (#3572)
• A 400 the client caused no longer holds the session; Bedrock drops message-level output_config (#3584)

Optimizer (v0.3.236)

• Price mint regions by their cache TTL (#3597)
• Distinguish profitable mint batch holds (#3596)

Console (v0.4.247)

• Hide the 'no working way to serve a request' health finding (#3592)

Anyray Connect (v0.11.279)

• The test-run hint and note see past cd "$(pwd)" && (#3579)
• A passing test run Claude Code saved to a file gets a "no need to read it" note (#3577)

Shared libraries

• Session Saved total counts gateway lane credits (#3591)

Also updated: Docs.

v1.10.459

Released 2026-10-05

Optimizer (v0.3.235)

• The force_off memo window is per block, not one turn (#3576)
• Force_off names only a kind the session treats; document the memo window (#3575)
• The session gate's force_off is a kill switch, not a freeze (#3571)

Console (v0.4.246)

• Routing model pickers list every model, not just recent ones (#3570)
• Name agent-id routing rules by the agent, not its key id (#3569)

Anyray Connect (v0.11.278)

• A failing test run Claude Code cut short gets a failures-only hint (#3556)

Also updated: Shared libraries, Docs.

v1.10.458

Released 2026-10-05

Gateway (v1.17.305)

• Span-pin replay honours the stash-row licence, a per-lane latch and the verdict cap (follow-up) (#3566)
• A fail-open turn replays the session's span pins through the shared renderers (#3565)
• A coding-agent prompt for every Add agent harness (#3563)
• A non-streaming provider request waits for its headers as long as a body may take (#3554)
• A row settles its session's held mint add before its own debt check (#3553)
• A mint turn's shortfall is a per-session debt later rows pay first (#3552)

Optimizer (v0.3.234)

• Freeze warm-session edits across cooloff, config and breakpoint flips (#3564)
• Every mint producer reports the prefix rewrite its edit forces (#3547)

Console (v0.4.245)

• Hide the Turns avoided tile on Home (#3546)

Anyray Connect (v0.11.277)

• The macOS app finishes its handover, and stops flagging itself as residue (#3567)
• Green means connected, and no silent dead ends (..799) (#3548)

Also updated: Shared libraries, Docs.

v1.10.457

Released 2026-10-05

Maintenance release — no application component changed.

v1.10.456

Released 2026-10-04

Gateway (v1.17.304)

• Net a mint turn's forced prefix rewrite out of its savings (#3528)
• A test-log digest says what it cut, and the skill vouches for it (#3523)

Anyray Connect (v0.11.276)

• The main agent gets the batch-read hint; searches keep the read streak (#3527)
• The batch nudge counts only workspace reads, and a refused path names Read (#3526)
• LogRead shortens the test-log Reads that cost most (#3510)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.455

Released 2026-10-04

Console (v0.4.243)

• A wider Sessions column shows more of its cell (#3521)

v1.10.454

Released 2026-10-04

Gateway (v1.17.303)

• Anchor the first-appearance marker at the last assistant message (#3514)
• Record the provider's thinking-binding outcome on trace metadata (#3511)

Also updated: Console, Shared libraries, Docs.

v1.10.453

Released 2026-10-04

Gateway (v1.17.302)

• Ship parity for base-URL tool loops; served retrieval is opt-in for no_discovery (#3504)
• Price GPT-6.1 Sol, Gemini 3.x and DeepSeek (#3503)
• Unmatched JSON POST under /v1/* answers 404, and bare /v1 sits behind the access gates (#3502)
• Services read their release version from /etc/anyray/release.json (#3499)
• Source-trim and call_id replay for the Codex seat lane (inert until enabled) (#3498)
• Net served-retrieval rounds out of a row's savings (#3494)
• Resizable, content-fitted Sessions columns and search within a session (#3496)
• A simple Tools page; saved tool lists follow the default (#3491)
• LangChain client polish: /v1/v1 404, DELETE /mcp, trace id header, MCPAdapter snippet (#3489)
• Look past Claude Code's trailing system reminder for batch reads and guardrails (#3492)
• Surface retrieval read-back on the Agents card, alert sweep and anyray-ops (M2) (#3488)
• Groundwork for optimizing the Codex seat WebSocket lane (no byte change) (#3485)
• A stream that fails after a 200 books no savings (#3474)
• Retrieval read-back per client tool and agent key (M1) (#3476)
• Show how many model turns batch reads avoided (#3473)
• LangChain and LangGraph as Add-agent targets, with a docs guide (#3472)

Optimizer (v0.3.232)

• Mask, filter and graph edit binding-model history by default; protectThinkingBinding and protectClientManagedCache are the per-tenant revert (#3512)

Console (v0.4.241)

• Per-tool switches in the Connect app (#3479)
• Base URL key dialog no longer says "public URL not set" while loading or after a failed read (#3495)
• Sessions list as two-line cards on phones (#3486)
• Phone layout: no zoomed-out pages, date picker and modal close on screen (#3484)
• Rework the Prompt cache tile and modal (#3480)

Anyray Connect (v0.11.275)

• Two tests that only pass on POSIX broke the Windows CI lane (#3505)
• LogRead digests a page of a test log, never a window the model aimed at (#3506)
• Keep the batch tool's ranged description as shipped before #3500 (#3501)
• A batch read skips an oversized file instead of failing the whole batch (#3500)
• Codex fallback keeps the anyray provider pointing direct (#3481)
• A Codex nudge toward batch reads, off by default (#3477)
• Codex revert moves Anyray-era threads so they still resume (#3475)

Docs

• Size the single-VM disk at 200 GB, the default the installers ship (#3483)
• K8s secret takes its namespace from -n; ArgoCD example drops the stale chart pin (#3482)

Also updated: Shared libraries.

v1.10.452

Released 2026-10-04

Gateway (v1.17.301)

• Auto-update falls back to the replica when the spend store stays unreachable (#3467)
• Batch reads are a billed savings kind, replacing the unbilled turn estimate (#3461)
• Estimate and show the model turns anyray_read_batch saves (unbilled) (#3449)
• Price mint payback on each tenant's measured session survival (default off) (#3420)

Optimizer (v0.3.231)

• A withheld seat mint is named, not read as an unproven route (#3468)
• Catch batch-read crediting drift between connect and the detector (header and tool-name mirrors) (#3465)
• Build @anyray/observability before the optimizer/bench mirror prepare (#3462)
• Reasoning_budget injects Anthropic effort for Bedrock model ids (#3455)
• Repeat_factor prices file-read folds against a measured re-read and never folds a file under edit (#3434)

Anyray Connect (v0.11.274)

• One status in the header, Quick actions on Overview, Settings/Diagnostics/Quit in the footer menu (#3447)
• One unverifiable tool no longer turns a routed machine orange (#3448)
• Warnings page for the seat's own client checks + in-app state for every background action (#3436)

Docs

• Rename Anyray Portal to Anyray Billing App (#3457)
• Hide the reasoning_budget example from the strategy library (#3452)
• Animated prompt-cache walkthrough and a strategy library built on it (#3442)

Also updated: Console, Shared libraries.

v1.10.451

Released 2026-10-04

Maintenance release — no application component changed.

v1.10.450

Released 2026-10-04

Gateway (v1.17.300)

• Digest a full Read of a test log the session wrote, behind hooks.logRead (default off) (#3432)

Anyray Connect (v0.11.273)

• Two logRead tests assumed POSIX paths and kept main's Windows lane red (#3443)
• LogRead latches a file raw after a read-back and passes green logs through (#3441)
• The digest passes a file printed through the shell through whole (#3429)

Also updated: Console, Docs.

v1.10.449

Released 2026-10-03

Gateway (v1.17.299)

• Keep declared retrieval tools on the wire from a session's first request (#3421)

Optimizer (v0.3.230)

• Context_dedupe collapses ranged re-reads contained in an earlier Read (#3417)
• Mint retrieval class reads content for spans no tool call produced (#3404)

Console (v0.4.238)

• Redesign the sign-in page layout (#3398)

Anyray Connect (v0.11.272)

• Pass a failing test run through when the digest finds no failure block (#3427)
• A ranged batch over its bound returns the entries that fit (#3426)
• Trim a nested Read in a subagent that holds the session's MCP tools (#3416)
• Take Claude Code's Read line count for a file ending in a newline (#3419)

Also updated: Shared libraries, Docs.

v1.10.448

Released 2026-10-03

Gateway (v1.17.298)

• Reasoning_budget holds Anthropic effort for the whole session (#3403)
• Ship the async-retry patch in the image via pnpm patchedDependencies (#3400)

Console (v0.4.237)

• Correct update notes per deployment type (#3401)

Also updated: Optimizer, Docs.

v1.10.447

Released 2026-10-03

Gateway (v1.17.297)

• Clarify when SDK agents need retrieval MCP (#3384)
• Judge a lowered session's cache expiry by the lifetime sent and its recorded pings (#3375)
• Serve anyray_read_batch from the signed macOS binary (batch-read series from dev) (#3385)
• A Codex seat turn relayed over the WebSocket records why the optimizer never ran (#3372)

Optimizer (v0.3.228)

• A user message Claude Code wrote itself does not end a thinking loop (port to main) (#3391)
• Bound the opt-in cold write credit to bytes with evidence of being cold (off by default) (#3378)
• Cache_lint locates where the prefix diverged and why tools changed (#3369)

Anyray Connect (v0.11.270)

• Console-style window, short tray menu, favicon icons, reliable notifications (#3328)

Docs

• Served retrieval on /v1/responses also needs store: false, which the SDKs omit (#3364)

Also updated: Console, Shared libraries.

v1.10.446

Released 2026-10-02

Gateway (v1.17.296)

• A trace row says why the optimizer rewrote nothing (#3339)
• An admin can opt /v1/responses into served retrieval for no_discovery (#3350)
• Paused tenants get no pin replay on any replica, and an end-to-end test for fail-open replay (port of #3330) (#3333)
• An admin can mint a passthrough-only key where SSO is required (#3317)
• Attest prompt-cache expiry only past the last delivery and any keep-warm ping (#3304)
• Replay thinking_trim's FILTER pins on fail-open (port of #3299) (#3309)
• Send the enabled strategy list at the standard heartbeat tier only (#3305)
• Strategy-dark names a strategy that is on and never executes (#3298)
• Seat key carried in the base URL path, passthrough-only (#3295)
• Record why served retrieval stood aside (#3283)
• Prompt_compression savings count tokens, not characters removed (#3296)
• Time keep-warm pings from when the provider took the request (#3281)

Optimizer (v0.3.227)

• Relevance_filter edits the last completed exchange on cached routes (#3362)
• Relevance_filter ranks against the latest tool call when the turn has no matching term (#3346)
• Context_dedupe collapses a live user re-paste at arrival on auto-caching providers (#3345)
• Opt-in credit for the write a cache-expired turn's mint avoids (off by default) (#3353)
• Thinking_trim reads each block's unbilled envelope from its own signature (#3334)
• Context_dedupe never claims an anchor observation_mask already masked (#3343)
• Observation_mask masks settled observations on routes with no prompt cache (#3342)
• Relevance_filter yields a code read only when code_graph saves more (#3336)
• Observation_mask roles param, opt-in assistant carrier (#3337)
• Relevance_filter reads LangGraph's assistant-role carrier (#3322)
• Stop shipping relevance_filter keepRecentToolMessages 3 (#3313)
• Thinking_trim credits a replayed signature at its bill, not above it (#3316)
• Gate relevance_filter folds on real token savings (#3297)
• The mint gate sizes the request body once per turn (#3303)
• Opus 5.5 and Sonnet 5.5 bind replayed thinking to the prefix (#3300)
• Markerless-cached floor for the four cacheBusting strategies (#3279)
• Code_graph de-gutters under the tool-read header line (#3270)

Console (v0.4.235)

• Mint and label a base-URL-only seat key (#3308)

Anyray Connect (v0.11.269)

• A subagent's tool call is no longer read as the main agent's (#3347)
• Silent macOS self-update for admin users, with a user toggle (#3318)
• Claude Code installs org Skills added after registration (#3269)

Shared libraries

• Memoize resolvePrice per catalog (#3338)

Docs

• The budget notice stays off, with the paired run that says why (#3352)
• Remove non-functional image-mirror env vars from local-vm install (#3312)
• Say that the session gate draws with the audited holdout off, and what turns it off (#3291)

v1.10.445

Released 2026-10-01

Console (v0.4.234)

• Prompt cache as an Optimizer tile with a settings modal (#3273)
• Hide Prompt cache, Tool deferral and budget notice cards from Optimizer (#3264)

Anyray Connect (v0.11.268)

• Doctor stops telling a native-lane tool to register a retrieval MCP server (#3276)

Docs

• Clean-up pass (2026-09-26 to 2026-10-01) (#3266)

v1.10.444

Released 2026-09-30

Anyray Connect (v0.11.267)

• Keep writing ENABLE_TOOL_SEARCH for Claude Code (reverts #3228) (#3259)

Also updated: Docs.

v1.10.443

Released 2026-09-30

Gateway (v1.17.295)

• Restore Claude Code's token-budget notice behind the gateway, default off (#3255)
• Keep-warm defaults to tool+idle on every lane (#3254)
• Opt-in tool deferral via server-side tool search (#3211)
• ClaudeCodeRemoteMcp setting advertises /mcp to Claude Code seats, default off (CC HTTP MCP, PR D1) (#3250)
• License ctx_t_ transcript handles only for connect's stdio reader (CC HTTP MCP, PR C) (#3246)
• Doctor reads the gateway's per-key record from /connect/self-check (#3243)
• Count /mcp tool calls toward the adoption bins (CC HTTP MCP, PR A) (#3244)
• Per-class opt-in for served retrieval, plus /v1/responses support (#3234)
• Retire connect's Claude Code paste hook; potentialPaste reads paste_gap (#3233)
• Gateway serves the VS Code extension and OpenClaw plugin to connect (#3223)
• Write pending 5m-tier debt on graceful shutdown; de-flake its retry tests (#3229)
• Keep a seat session's cache tier across overflow turns; net ping cost from kept-warm credits (#3225)
• Surface connect seats that stopped checking in (#3226)
• Hook stash lane for command digests (off by default) (#3218)
• Zero-install phase 1 (gateway-first defaults, per-key health, paste_gap) (#3216)
• Store the 5m cache-tier re-write debt durably, and tighten cache credits (#3221)
• Dev + cache-tier audit fixes (#3215) into main

Optimizer (v0.3.226)

• Replay and first-sight strips credit what is billed (#3251)
• Per-family signature billing for Anthropic models (#3249)
• Code_graph recognizes the arrow line-number gutter (Claude Code Read) (#3241)
• A deferred user paste never releases below the cache anchor (#3238)
• Credit Opus 5.5 signatures at billed mass (#3242)
• Context_compression compresses tool output at arrival when lossless (cache-safe) (#3237)
• Context_dedupe collapses near-duplicates at arrival (cache-safe) (#3227)

Console (v0.4.233)

• Cockpit filter rework, modal rail dim, small UI cleanups (#3214)

Anyray Connect (v0.11.266)

• Claude Code seats take the gateway /mcp when the policy offers it, inert by default (CC HTTP MCP, PR D2) (#3253)
• Stop writing ENABLE_TOOL_SEARCH for Claude Code (#3228)
• New terminals trigger the refresh on shell-env seats (#3222)

Shared libraries

• IAM path adds the RDS roots to the default trust set (#3235)
• Trust the RDS roots on password auth with sslmode=verify-full (#3231)

Docs

• Document auto-sized DbInstanceClass and EnableAutoscaling (#3245)
• Billing: credit the 5-minute cache lifetime and keep-warm as savings (#3210)

v1.10.442

Released 2026-09-30

Optimizer (v0.3.225)

• Observation_mask keeps source reads inline, masks noisy output (#3207)
• Count native-tool re-fetches of masked observations (#3208)
• Repeat_factor refuses to first-fold what was already sent (#3179)
• Thinking_trim live-loop lane keeps recent reasoning and prices re-derive turns (#3188)
• Short, backed-off store cooldown on a budget overrun; bounded backlog release (#3198)
• A Claude Code task notification does not end a thinking loop (#3200)
• Observation_mask prices mints at the session's own retrieve-back rate (#3199)
• Keep replaying settled handle-bearing masks under the regret guard (#3197)

Anyray Connect (v0.11.265)

• Wait out ETXTBSY before a resident test execs its script (#3213)

Also updated: Gateway, Console, Shared libraries, Docs.

v1.10.441

Released 2026-09-29

Gateway (v1.17.293)

• Client_prefix_compression: name the skip guard in the result header; Claude Code 2.1.282 table entries (#3171)
• Price and wire Claude Sonnet 5.5 (#3168)
• A header-enabled kind passes every guard a configured kind does (#3165)

Optimizer (v0.3.224)

• Regret guard can count a retrieve by its net outcome (#3191)
• Regret guard always resolves half_open (#3192)
• Opt-in warmPrefix 'act' for client_prefix_compression (#3193)
• Dot and dash spellings price as the same model (#3178)
• Batch region-priced observation_mask mints (#3176)
• Observation_mask payback horizon follows the session's expected length (#3174)
• Confirm settled handles on retrieval rollback instead of reverting them (#3173)

Console (v0.4.231)

• Light/dark theme, favicon nav logo, calmer controls (#3175)

Anyray Connect (v0.11.264)

• Nested Read trim fires once retrieval is available, not only after use (#3182)
• Cache the org hook policy on service-key seats (#3181)
• Stop writing CLAUDE_CODE_MAX_CONTEXT_TOKENS for Claude Code aliases (#3180)

Shared libraries

• OpenAI gpt-5 line at its published rates (#3170)

Also updated: Docs.

v1.10.440

Released 2026-09-29

Gateway (v1.17.292)

• Price a cache-expired turn's mint rewrite at zero premium (#3152)
• Narrow the default strategy set to six and migrate existing configs (#3162)

Optimizer (v0.3.223)

• Price thinking_trim's cached strips as mints (#3153)

Also updated: Console, Shared libraries, Docs.

v1.10.439

Released 2026-09-29

Gateway (v1.17.291)

• First-appearance hash treats a lone text block as its string (#3163)
• 1h prompt-cache policy on Bedrock for models that keep the hour (#3158)
• GDPR export includes the user's team-policy overrides (#3155)
• Opt-in 1h prompt-cache TTL for Claude Code sessions, with a measured recommendation (#3147)
• GDPR erase removes the user from team-policy override maps (#3144)
• Add optional per-request optimization selection (#3140)
• One team-policy switch per Claude Code hook (#3141)
• Transcript-resolved retrieval handles under content mode off (#3137)
• Optimistic concurrency + full audit for optimizer config saves (lost experiment rules) (#3136)
• Read Claude Code's nested Read shape, behind hooks.readTrim (default off) (#3138)
• Price fast mode and advisor-tool iterations (#3133)
• Block forged x-anyray-test optimization header leaks (#3131)
• The Bedrock Converse lane keeps the 1h cache ttl (#3130)
• The Bedrock Converse lane drops body betas it rejects (#3127)
• Answer count_tokens on the Bedrock lane (#3125)
• Bedrock sends the resolved model id, not the canonical Anthropic id (#3123) (#3124)
• The Bedrock Converse lane keeps tool_reference results (#3121)

Optimizer (v0.3.222)

• Thinking_trim never rewrites cached thinking (warm-prefix guard) (#3151)
• Context_dedupe off by default, migrated for every deployment (#3150)
• RunOnBilledLane param, on by default, for prompt_compression and context_dedupe (#3146)
• Name observation_mask's silent stand-downs and show strategyDeclines on traces (#3142)
• Thinking_trim never trims the current tool loop by default (#3139)
• Keep agent tools available during tool_pruning (#3132)
• Thinking_trim, observation_mask and repeat_factor run on api-key lanes again (#3129)
• Client_prefix_compression stands aside on a warm client prefix (Rule 0) (#3126)

Anyray Connect (v0.11.263)

• A corrupt profile keeps team-disabled hooks off (#3149)
• Stdio MCP heartbeat authenticates on API-key Claude Code seats (#3135)
• Claude Code tool search on only for large tool catalogs (auto:4) (#3120)

Also updated: Console, Shared libraries, Docs.

v1.10.438

Released 2026-09-28

Gateway (v1.17.290)

• Show subagent share of each Claude Code session's cost (#3119)

Docs

• Claude Code subagents inherit the MCP server and send more requests than turns (#3116)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries.

v1.10.437

Released 2026-09-27

Optimizer (v0.3.220)

• Context_compression yields to the cache anchor (#3100)
• Repeat_factor stands aside on billed api-key lanes (Rule 0) (#3101)

Console (v0.4.227)

• Route a Desktop-only Claude seat, and make a refused Desktop apply say why (#3099)

Also updated: Anyray Connect, Docs.

v1.10.436

Released 2026-09-27

Gateway (v1.17.289)

• A provider's Base URL authorizes its own private host (#3097)
• Subscription-extra cache gate, orphaned span claims, prefix-memo pairing and fairness (/650/651/653) (#3048)
• Module-relative config path, cross-dialect cache serving, schema data vs prose (/660/661) (#3055)
• The native Bedrock lane drops context_management Bedrock rejects (#3090)

Optimizer (v0.3.219)

• Observation_mask stands aside on billed api-key lanes (Rule 0) (#3098)
• Retire a dead mutex mechanism, bound the glob memo, replay in pipeline order (#3053)
• Retire code_graph's dead params and skeletonizeMessage, document maxParseChars (#3063)
• One verdict per pin path, peer-owned spans, and the budget in the yield probe (/657/658) (#3051)
• Admit line-numbered source reads, clamp three operator numerics (#3043)
• Semantic-cache purge fence is fleet-wide, sealed, and required on write-back (#3096)
• A malformed tool input cannot fail a turn, and a failed strategy keeps its pins (#3044)
• Stop four content-destroying misclassifications (/641/642/643) (#3041)
• Purge and erase epoch clear semantic-cache mint records and tree-sitter parse trips (#3093)

Anyray Connect (v0.11.259)

• Report a machine-wide Windows install that shadows the owner, and name the admin step (#3095)

Also updated: Console, Docs.

v1.10.435

Released 2026-09-27

Gateway (v1.17.288)

• A seat whose Claude Code hooks arrive without inference no longer reads routing ok (#3087)

Optimizer (v0.3.218)

• Thinking_trim stands aside on billed api-key lanes (Rule 0) (#3091)
• Purge and erase epoch clear the embedding cache and cacheLint session hashes (#3092)
• Purge and erase epoch clear the code_graph and tree-sitter parse caches (#3088)

Also updated: Console, Shared libraries, Docs.

v1.10.434

Released 2026-09-27

Gateway (v1.17.287)

• Share endpoint remediation cooldowns and auto-update attempts across replicas (#3084)
• Share console session revocation and enrollment nonces across replicas (#3083)
• Aggregate deployment health and connect versions across gateway replicas (#3079)
• Provider-key and team-policy saves read-modify-write from the DB (#3078)
• Hold-back streaming for the served-retrieval lane, OpenAI wire (#2912)

Optimizer (v0.3.217)

• Six ledger-gap dispositions, and a quadratic path the sweep found (#3060)
• Sentence dedup treats a record region as data, not repeated prose (#3070)
• The pin-thrash cooloff no longer reverts the session's handles (#3069)

Console (v0.4.224)

• Console: compact targeting rules, Anyray connector modal, Skills and Routing updates (#3045)

Anyray Connect (v0.11.258)

• A declined or reverted tool stays off on the next sweep (#3086)

Also updated: Shared libraries, Docs.

v1.10.433

Released 2026-09-27

Gateway (v1.17.286)

• Deleting a tenant erases its deployment's context stash automatically (#3075)
• Send providerKeys file_only on the heartbeat now the control plane accepts it (#3071)

Optimizer (v0.3.216)

• Share the regret guard's evidence and verdict across replicas (#3073)

Also updated: Shared libraries, Docs.

v1.10.432

Released 2026-09-26

Gateway (v1.17.285)

• Retry an optimizer call once on a pre-response socket reset (#3064)
• Hold readiness until the first stash-policy and session-gate reads land (#3065)
• Await in-flight spend/trace writes before exiting on SIGTERM (#3062)

Optimizer (v0.3.215)

• Clear every optimizer replica on purge; receipt no longer claims a fleet-complete purge (#3068)

Docs

• Lock the boot schema apply and re-template the policy pack forward only (#3067)

Also updated: Console, Shared libraries.

v1.10.431

Released 2026-09-26

Gateway (v1.17.284)

• Size the hot-path memos for 1M-token sessions and report their hit rates (#3057)
• One Postgres connection budget per process (#3061)
• Offboarding a tenant erases its context stash immediately (#3047)
• The Codex seat HTTPS lane relays bytes unchanged, like the WebSocket lane (#3046)
• Stream the Responses-to-chat bridge live (#3050)
• A day the spend store proves empty re-ships as an explicit zero row (#3040)
• Cap hook savings per user per hour across both hook lanes (#3042)
• The global error handler stops logging 4xx HTTPExceptions as server errors (#3039)
• SSE fidelity for streaming SDK clients (#3010)

Optimizer (v0.3.214)

• Three unbounded-CPU paths on request-controlled input (#3049)
• Turn requestPatch on by default (#3052)

Anyray Connect (v0.11.257)

• Add direct-provider outage fallback (#3027)

Docs

• Kubernetes defaults to 2 replicas per service (chart 0.8.0) (#3054)
• Trim 26 pages to short, dev-friendly reference (#3037)

Also updated: Shared libraries.

v1.10.430

Released 2026-09-26

Gateway (v1.17.283)

• Per-user folds keep users named constructor or toString; refuse proto on client keys and SCIM (ANY-626) (#3035)
• Sessions user multi-select, trace modal rail layout, compact connector modals (#3025)
• Report the self-updater's outcome to the fleet (ANY-622) (#3032)

Anyray Connect (v0.11.256)

• Probe the packaged engine with --version --local at startup (ANY-337) (#3034)

Billing app

• Release impact never names an erased user (ANY-623) (#3033)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.429

Released 2026-09-26

Gateway (v1.17.282)

• Answer /v1/optimize with a request patch instead of the full echo (#3030)
• Rate-limit unverified connect health reports and the console sign-in start (#3029)
• Only a verified client key records hook savings (#3023)

Anyray Connect (v0.11.255)

• Treat Fleet as the refresh driver only while its script has actually run recently (#3022)
• Start Windows PowerShell without PowerShell 7's module path (#3028)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.428

Released 2026-09-26

Gateway (v1.17.281)

• Blank-admin-token follow-ups: honest health, actionable errors, 401 not 503 (#3019)
• Roster connect version reflects the installed build, not a days-old session process (#3017)
• Never write stash content under a key derived from the public placeholder token (#3018)
• A proto team or user id is refused with a clear error instead of silently dropped (#3016)
• Responses requests threaded by conversation stay sessionless instead of minting a pin row per turn (#3011)

Optimizer (v0.3.211)

• Memoize command_digest's pure per-output analysis across turns (#3013)

Anyray Connect (v0.11.254)

• Accept a production distribution marker for the stable desktop build (#3014)
• A Codex seat keeps a refresh tick even when its MCP entry is lost (#3009)

Also updated: Console, Docs.

v1.10.427

Released 2026-09-26

Gateway (v1.17.280)

• A blank admin token closes only the token path, not SSO or API-key sessions (#3008)
• Reuse unchanged first-appearance rows across a session's turns (#3007)
• The Codex seat model-list fallback is decodable and counted on the heartbeat (#3004)

Anyray Connect (v0.11.253)

• Superseded CI reads cancelled; stop the real openclaw CLI locking the co-writer temp home (#3005)

Also updated: Optimizer, Console, Docs.

v1.10.426

Released 2026-09-26

Gateway (v1.17.279)

• The wire debit steps only after five agreeing medians, so two unequal optimizer pods stop flapping it (#3000)
• A bare session header can no longer collide with a subagent pin session (#2995)
• Finish an in-flight Codex WebSocket turn before the lifetime close (#2994)
• Skip the per-request SCIM roster lookup when the key read proves the tenant has no roster (#2998)
• Refuse upstream 3xx on Node, not only opaqueredirect; reject a hash on the Codex seat host (#2997)

Optimizer (v0.3.209)

• Keep a replayed handle's vouch through a store cooldown (#2996)
• Never serve an erased stash row from memory while the store read fails (#2987)

Console (v0.4.219)

• A hook-usage walk that runs out of budget answers unknown, never "unused" (#3001)

Anyray Connect (v0.11.252)

• Keep the org MCP block's BEGIN marker through a Codex orphan repair (#2993)
• Stop the Windows reinstall-gate test hanging CI for 25 minutes (#2992)
• Purge the retired anyray-fallback unit that crash-loops on pre-v1.10.302 seats (#2989)
• Bump the extension to 0.1.32 and stop a background handoff from launching VS Code (#2990)

Also updated: Shared libraries, Docs.

v1.10.425

Released 2026-09-25

Gateway (v1.17.278)

• Name the Codex seat provider "OpenAI" so its prefix stays cached (#2984)
• Give Claude Code subagents their own pin session (#2979)

Optimizer (v0.3.208)

• Correct the session cooloff lengths in CACHE-SAFETY.md (#2982)

Anyray Connect (v0.11.251)

• Stop a Codex re-apply from deleting its own routing block (#2980)

Also updated: Console, Shared libraries, Docs.

v1.10.424

Released 2026-09-25

Gateway (v1.17.277)

• Relay the Codex seat backend's model list on /v1/models (#2974)
• Fix queued refresh erase fence and deepen recent regression coverage (#2972)
• Pin sessions for generic OpenAI-wire agent clients, resolved from the route (#2964)
• Put the secret states on the heartbeat (part 2 of 2) (#2951)
• Preserve WebSocket accounting and add regression coverage (#2970)

Console (v0.4.217)

• Clear two stale red checks one doctor run left for a week (#2976)
• Client-check warnings, tool picker chips, Configure MDM modal (#2961)

Anyray Connect (v0.11.250)

• Stop the Fleet retire lane and owner convergence flapping the refresh scheduler (#2973)
• Stop ACP hosts re-repairing a working launcher every day (#2975)

Docs

• Ingress-nginx 1.12+ needs chart 0.7.39 or newer (#2971)

Also updated: Optimizer, Shared libraries.

v1.10.423

Released 2026-09-25

Gateway (v1.17.276)

• Stop discarded whole-transcript passes from starving the event loop (#2966)
• Relay Codex's Responses WebSocket on the seat lane (#2963)
• Price replayed thinking signatures on their own measured ruler (#2960)
• Pin-read deadline grace + loop-starvation telemetry (#2962)
• Report MCP tool adoption on the agent roster (part 2 of 2) (#2956)
• Held turns replay vouched handle-bearing masks instead of busting the cache (#2954)
• Address Greptile on #2950 (per-replica lease_missing, alert copy, mirror) (#2952)
• Accept the gateway's secret states and alert on them (part 1 of 2) (#2950)
• Backwards-compatible admin-token hardening; report secrets on /admin/health (#2948)
• Cover recent Sessions and Connect regressions (#2942)
• Keep honouring a private conf.json admin_token (follow-up) (#2945)
• The admin token comes only from ANYRAY_ADMIN_TOKEN (#2943)
• Bind email-lane console sessions to the deployment tenant + real-life coverage for email sign-in (#2885) (#2940)
• Vertex Claude served retrieval under-billed + real-life coverage for the #2925 spend-audit follow-ups (#2936)
• Refuse to boot on a blank ANYRAY_ADMIN_TOKEN (#2932)
• Rollup cache version and session summary bounds + real-life coverage for #2904, #2905, #2913, #2917 (#2928)
• Four agent-retrieval alert bugs + real-life coverage for #2916, #2908, #2890 (#2927)
• Wire debit tracks the current median + real-life coverage for the optimizer budget, cooloff and hosted MCP (#2899, #2910, #2911, #2915) (#2926)
• Synthesized chat stream keeps the cache-inclusive total + real-life coverage for /547/546/554 and /mcp/org (#2925)
• Break total savings down per model (#2902)

Optimizer (v0.3.206)

• An erase is never undone by a re-mirror or a queued refresh (#2957)
• Run every tree-sitter parse in a killable worker (#2934)
• Cut tree-sitter hangs at any payload size + real-life coverage for #2914, (#2930)

Console (v0.4.216)

• Clean up Routing page UI, grey actions, one caret size (#2949)
• A gateway with no provider key is the deployment's finding, not every developer's (#2946)
• proto ids dropped on save, own replica missing from Health, stale session pages, old-gateway Members error + real-life coverage for #2870, #2883, #2885, #2893, #2900 (#2938)
• 4 bugs (unattributed seats, latency round trip, "1m 60s", prototype-named teams) + real-life coverage for #2893, #2896, #2919 (#2923)
• Health error dismissal ignores its cause + real-life coverage for agent snippets, liveness, Errors, Sessions (#2922)

Anyray Connect (v0.11.249)

• Skip the Codex PreToolUse hook on Windows (#2958)
• No load-then-save writer saves over an unreadable profile + real-life coverage for offboard, tray, MDM enroll, update (#2937)
• Never save a profile from a failed read; unreadable queue entry is unknown; dates and MACs are content in log dedup (#2933)

Shared libraries

• Keep the live 'default' pin row in the boot heal + real-life rollout coverage for /545 (#2924)

Also updated: Docs.

v1.10.422

Released 2026-09-24

Gateway (v1.17.275)

• Let orgs without SSO sign in to the console by email with a role (#2885)
• Serve Dashboard and Usage stale while they refresh in the background (#2917)

Console (v0.4.215)

• Docs+console: lead with the charts.anyray.ai Helm repo (#2920)
• Errors sidebar item, simpler Sessions table (#2918)

Also updated: Shared libraries, Docs.

v1.10.421

Released 2026-09-23

Console (v0.4.214)

• Ship the SPA as one self-contained index.html (#2919)

Also updated: Docs.

v1.10.420

Released 2026-09-23

Gateway (v1.17.274)

• Retire ANYRAY_OPTIMIZER_TIMEOUT_MS; the hook budget travels with the image (#2915)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries, Docs.

v1.10.419

Released 2026-09-23

Gateway (v1.17.273)

• Serve the Sessions list from per-session hourly rollups (#2913)
• 1200ms optimizer budget, shorter session cooloff, bigger optimizer (#2911)
• A hosted MCP connector is retrieval evidence only where the upstream runs it (#2910)
• Answer "has traffic" with a LIMIT 1 probe, not a COUNT on every page (#2905)
• An agent with no tool calls is not "MCP disconnected" (#2908)
• Answer unsupported /mcp/org methods over JSON-RPC, not 404 (#2903)
• Load Sessions filter options on demand, bounded to the list's window (#2904)
• Keep OpenAI cached-token details in the synthesized stream (#2909)

Optimizer (v0.3.204)

• Bound every tree-sitter parse; the tsx grammar never returns on some inputs (#2914)

Console (v0.4.212)

• Tell the admin when an agent routes without retrieval (part 1) (#2907)
• The agent snippet that routes also registers retrieval (#2906)

Also updated: Shared libraries, Docs.

v1.10.418

Released 2026-09-23

Gateway (v1.17.272)

• Fleet off-switch for the hook's local command digest (#2900)
• Scale the optimizer hook budget with request content (#2899)
• Label toolless subscription turns toolless_turn, not no_retrieve (#2897)
• Split request latency into waiting, reasoning and response (#2891)
• Gemini/Vertex thinking tokens are billed as output; thinking-model spend rises (#2895)
• Sessions replaces Traces: one table of sessions with their requests, search and filters (#2883)
• Streamed latency covers the stream, not just the headers (#2889)

Optimizer (v0.3.203)

• Finish the optimizer-pin two-part identity (#2887)

Console (v0.4.211)

• Subscriptions inside Routing, as a fallback chain (#2893)
• Show a person's client checks in the Users modal (#2896)

Anyray Connect (v0.11.247)

• Collapse id- and timing-only log repeats, keep indentation (#2898)
• The daily self-check reports routing, so one failed doctor run stops lingering for a week (#2894)
• Clear a failure-only check on a later clean report (#2890)

Docs

• GitOps install turns on automatic updates by default (#2892)

Also updated: Shared libraries.

v1.10.417

Released 2026-09-23

Gateway (v1.17.271)

• Price xAI mints at the whole prefix; its cache does not survive a mid-prefix edit (#2886)

Console (v0.4.210)

• Mobile-friendly admin shells (#2884)
• One shared invite link many people can use, shown again on every Add user open (#2882)

Anyray Connect (v0.11.246)

• Repair a stale user launcher on Windows instead of refusing (#2881)

Docs

• Say Windsurf where a customer looks for it (#2879)

Also updated: Optimizer.

v1.10.416

Released 2026-09-22

Gateway (v1.17.270)

• Opus 5.5 cache-floor family, and the comment drift around it (#2878)
• Price Claude Opus 5.5 and the gpt-6 sol/luna pair (#2877)

Console (v0.4.209)

• Take Health off the sidebar, keep the signal (#2872)

Anyray Connect (v0.11.244)

• Stop re-opening VS Code while a handoff waits on the developer (#2876)
• Find a JetBrains IDE installed under the x86 Program Files root (#2875)
• Authenticate the hook lane when Claude settings hold no key (#2874)
• Price grok-4.7 from xAI's published rates (#2873)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.415

Released 2026-09-22

Gateway (v1.17.269)

• Say WHY a store leg failed, and stop a dying idle connection crashing the process (#2871)
• Show the org admin the deployment health we already watch ourselves (#2870)
• OpenClaw pin sessions fragment on every compaction, and the telemetry that hid it (#2868)
• Give two live instruments a reader (#2864)

Optimizer (v0.3.200)

• A budget stop keeps the mint it already priced (#2867)
• Cache_lint per-model + per-tenant keying, and name the shape behind a stand-down (#2843)

Console (v0.4.208)

• Clear the seven todos #2808 pinned, one by rejecting it (#2869)
• Report whether Anyray's skill reached the seat (#2855)

Anyray Connect (v0.11.243)

• Verify the MCP tool approvals we write (#2858)

Also updated: Shared libraries, Docs.

v1.10.414

Released 2026-09-22

Gateway (v1.17.268)

• Count a Codex reasoning item as half a turn, not a whole one (#2865)
• feat(gateway,fleet): the heartbeat carries machine state, not just software state (#2856)
• feat(gateway,console): a fallback policy for a throttled subscription (#2863)
• feat(console,gateway): route one person from their own row (#2854)

Optimizer (v0.3.199)

• Keep thinking_trim earning on binding models (first-sight sticky, default on) (#2833)

Anyray Connect (v0.11.242)

• Stop a successful helper write from failing the MSI install (#2842)
• Uninstall withdraws the org MCP key; macOS removal via an uninstaller pkg (#2841)
• Stop stranding a fleet seat between two update mechanisms (#2857)

Also updated: Console, Shared libraries, Docs.

v1.10.413

Released 2026-09-21

Maintenance release: no application component changed.

v1.10.412

Released 2026-09-20

Gateway (v1.17.267)

• Price hidden wire bytes at the rate each is billed (#2832)

Optimizer (v0.3.198)

• One abandoned tool call no longer strands a whole session (#2834)

Anyray Connect (v0.11.241)

• Stop reporting watcher_dead on a watcher we just revived (#2835)
• A managed layout we cannot write is not a managed install (#2838)
• Install both CPU variants of koffi so the universal build links (#2840)
• Report MSI custom-action failure reasons on stdout (#2839)
• Surface sign-in refusals and stop three false "all clear" reports (#2836)

Shared libraries

• Give the wide console rollups their own pool (#2837)

Also updated: Docs.

v1.10.411

Released 2026-09-20

Maintenance release: no application component changed.

v1.10.410

Released 2026-09-20

Gateway (v1.17.266)

• Constrain the jsonb columns at the source (#2823)
• Three more unconstrained-timestamp guards (#2820)

Anyray Connect (v0.11.240)

• Omp and OpenCode say when they skip the retrieval MCP server (#2813)
• Stop shipping the dev's gateway key to chatgpt.com from OpenCode (#2824)
• Tie a lock reclaim to the owner it judged stale (#2831)

Docs

• Rewrite strategy sections short and plain (#2829)

Also updated: Shared libraries.

v1.10.409

Released 2026-09-19

Gateway (v1.17.265)

• Close the Jest empty-describe hole and the claudeDesktopPolicy filter gap (#2812)

Optimizer (v0.3.197)

• Recall renews owned handles, on the row's own clock (#2816)
• Per-tenant config lands on the volume, not the image layer (#2814)

Anyray Connect (v0.11.239)

• A Devin revert must not destroy the backup it could not use (#2817)
• Give every OpenCode seat-route state its own reported value (#2822)
• Give every McpUnregisteredReason its own reported state (#2818)

Also updated: Console, Shared libraries.

v1.10.408

Released 2026-09-18

Gateway (v1.17.264)

• Close four follow-ups from the coverage audit (486, 487, 489) (#2810)
• Close eleven findings from the 48-hour test-coverage audit (#2806)

Optimizer (v0.3.196)

• Validate the BYO record body at the boundary (#2811)
• Repeat_factor busts the prompt cache every turn (#2809)

Anyray Connect (v0.11.238)

• Anchor every managed marker to its line, not to a substring (#2807)
• A null frame must not end the MCP session (#2803)
• Own every refresh-hook shape the writer emits (#2799)

Also updated: Console, Shared libraries.

v1.10.407

Released 2026-09-18

Maintenance release: no application component changed.

v1.10.406

Released 2026-09-18

Console (v0.4.204)

• Plot Subscription coverage in dollars, not tokens (#2773)

Also updated: Gateway, Optimizer, Anyray Connect, Shared libraries, Docs.

v1.10.405

Released 2026-09-17

Gateway (v1.17.262)

• Meter the optimizer trims on Batch API input uploads (#2769)
• Learn the hook's read-back rate deployment-wide, and hand it to the ranged rule (#2768)
• Keep a colon out of the skill description so the front matter parses (#2767)
• Let a decision's sizes survive the content gate and the redacted read (#2753)
• Tell an agent how to call the gateway, and what not to hand-roll (#2763)
• Merge dev: Railway dev stack + OpenCode ChatGPT seat route (#2728)
• Serve Message Batches instead of 500ing, and meter them (#2755)
• Move Claude Desktop skills off the deprecated organizationPluginsUrl (#2756)
• Keep affordable strategies reachable after admission (#2758)
• Make MCP tool adoption measurable: heartbeat counts, read-batch state, service-key Connect version (#2759)
• Withhold a session's measured wire from the optimizer's advertised budget (default off) (#2699)
• Name every run that claims nothing, and report the ones we still can't (#2743)
• Attest custom route cache semantics (#2722)
• Agents onboard themselves: a branching runbook that ends in a key-authenticated self-check (#2754)
• Name api-key users on the Users page: add the missing pseudonym channel (#2747)
• Price a mint's rewrite over the bytes it re-sends (#2734)
• Count minted handles apart from pin replays (part 1) (#2740)

Optimizer (v0.3.194)

• Name which term sank a mint, instead of one label for both (#2738)

Console (v0.4.203)

• Mirror the built-in skill version bump from #2767 (#2770)
• Mirror the gateway's built-in skill version, unbreaking main (#2766)
• Tell the read-only signal rows apart, and show every trim's before/after (#2750)

Anyray Connect (v0.11.236)

• Let the ranged trim lane fire, by measuring read-backs correctly (#2764)
• Pre-approve Anyray's MCP tools on every host that has a usable mechanism (#2744)

Docs

• The SOC 2 Type I attestation is issued, not in progress (#2745)

Also updated: Shared libraries.

v1.10.404

Released 2026-09-17

Gateway (v1.17.261)

• Route a hook-tee footer through the id, and name the ranged marker (#2730)
• Show retrieval per runtime on an agent key, and verify every runtime before Add agent finishes (#2732)

Anyray Connect (v0.11.235)

• Pre-approve Anyray's own MCP tools so an unattended agent can call them (#2731)
• Trim Codex command output at the source, on the PreToolUse seam (#2737)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.403

Released 2026-09-17

Gateway (v1.17.260)

• SSO users see their own traces, not the whole org's (#2719)
• Enforce principal ownership on exact reads (#2721)
• Deliver and verify the Anyray skill on every supported tool and agent host (#2725)
• Resolve handles on any replica, with or without a content key (#2724)
• Attest configured passthrough cache routes (#2720)

Optimizer (v0.3.192)

• Count unsigned /v1/retrieve calls (#2729)

Console (v0.4.201)

• Pick which tools an enrollment configures, with icons (#2712)

Also updated: Anyray Connect, Shared libraries, Docs.

v1.10.402

Released 2026-09-16

Optimizer (v0.3.191)

• Restore code graph and enable exact test-output folding (#2717)

Anyray Connect (v0.11.233)

• Report a shadowed Connect install instead of only printing it (#2716)

Also updated: Docs.

v1.10.401

Released 2026-09-16

Gateway (v1.17.259)

• Every waiting connector is findable by name, and a Desktop-only one says so (#2714)

Anyray Connect (v0.11.232)

• Batch reads on by default, reachable on every client (#2711)

Also updated: Optimizer, Console, Docs.

v1.10.400

Released 2026-09-16

Optimizer (v0.3.189)

• Reduce tool-output costs with retrieval-aware admission and exact folding (#2673)

Also updated: Anyray Connect, Docs.

v1.10.399

Released 2026-09-16

Optimizer (v0.3.188)

• Never hand a retrieval handle to a client that cannot resolve one (#2707)

Console (v0.4.199)

• Let an admin include Claude desktop in an enrollment (#2708)

Also updated: Anyray Connect, Docs.

v1.10.398

Released 2026-09-16

Gateway (v1.17.258)

• Developer rows track real activity and current checks (#2698)

Anyray Connect (v0.11.229)

• Keep the seat token the setup-token drain was eating (#2705)

Also updated: Shared libraries, Docs.

v1.10.397

Released 2026-09-15

Gateway (v1.17.257)

• Make the Anyray Skill load on the hook footer, and bound what it vouches for (#2702)
• Codex calls get distinct signatures and mints price the bytes the shadow hides (#2697)
• Pin relevance_filter's uncached trims, cap OpenAI mask payback, add idle-gap cache telemetry (#2695)
• A Desktop seat that cannot read its Keychain must say so (#2684)
• Name the two unowned legs of the optimizer hook (#2685)
• Decide the session gate on session rank tests, not noise thresholds (#2687)
• Savings audit by model and provider, Claude tokenizer, drift trend (#2688)
• Name every mint-gate decline and give Claude pass-through seats mint evidence (#2663)
• Attribute every hook saving to a strategy (#2683)

Console (v0.4.198)

• Claude Desktop gets the org connectors, and the console hands out their address (#2686)

Anyray Connect (v0.11.228)

• Render desktop helpers without adopting the app engine (#2701)
• Bound how long Desktop caches a rotated connector bearer (#2700)
• Stop reporting tools nobody routes as failing (#2691)
• Restyle the status window on the console's design system (#2690)
• Drop the Orbit UpgradeVersion Maximum that ICE61 rejects, so the MSI links (#2692)
• Use native desktop sign-in callbacks and repair macOS uninstall (#2681)
• Reorder the tray menu and move destructive actions to the window's danger zone (#2682)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.396

Released 2026-09-15

Anyray Connect (v0.11.227)

• Keep the MSI custom-action targets under 255 chars so light links (#2679)

v1.10.395

Released 2026-09-15

Gateway (v1.17.256)

• Backfill anyrayAuth so the sign-in tool reaches existing connectors (#2674)
• Show an unauthorized org MCP connector as a sign-in tool instead of hiding it (#2672)
• Connector tools read the vendor name once (#2678)
• Serve /v1/models locally when a seat lane has no org key (#2675)
• Hand out the org MCP endpoint instead of printing it; name it anyray-connectors (#2668)
• Employees authorize org MCP connectors in the browser, no terminal (#2669)
• A new OAuth connector says nobody has signed in (#2665)

Optimizer (v0.3.186)

• Refresh every replayed retrieval handle; report toolless turns as their own cause (#2657)

Console (v0.4.197)

• Name the connector button for what it does (#2680)
• Hide the org MCP endpoint section completely (#2676)
• Expose Connectors in the nav as a page (#2677)

Anyray Connect (v0.11.226)

• Queue Claude Desktop routing for the next quit (#2666)

Also updated: Shared libraries, Docs.

v1.10.394

Released 2026-09-14

Gateway (v1.17.255)

• Stop third-party setup taking Auto mode and tool search away (#2658)
• Unwrap the SSE form of a streamable-HTTP tools/list (#2661)

Optimizer (v0.3.185)

• Record why observation_mask is dark, and the three fixes that fail (#2641)
• OpenAI barely bills replayed reasoning: the thinking_trim port is dead on cached Codex routes (11.78x over-credit) (#2646)

Console (v0.4.196)

• The org endpoint is an address, not a three-step checklist (#2662)
• An unconfigured SSO lane is optional, not a blocker (#2656)

Anyray Connect (v0.11.225)

• The Codex retrieve approval gets a repair lane (#2655)
• Make ambient self-healing land instead of flapping (#2652)

Docs

• Follow Claude Desktop's Home tab rename (#2659)

v1.10.393

Released 2026-09-14

Gateway (v1.17.254)

• Stop lossy hook-lane trims costing more than pass-through (#2650)
• Windows relaunch and autostart survive the move to Program Files\Anyray (#2608)

Optimizer (v0.3.184)

• Observation_mask declines fresh mints while the durable store is not ready (#2653)

Anyray Connect (v0.11.223)

• Trim failing test runs on Claude Code before they enter the transcript (#2647)

Docs

• The Connectors page is a URL, not an account-menu entry (#2654)

Also updated: Console, Shared libraries.

v1.10.392

Released 2026-09-14

Gateway (v1.17.253)

• Retire the storage fall-through claim the undeclared lane deleted (#2648)
• An unmeasurable storage ceiling reads as unknown, not as 70% full (#2645)

Optimizer (v0.3.183)

• Semantic_cache off by default (0.20% hit rate, 7% of hook CPU) (#2651)
• Context_dedupe never collapses an error tool result (#2649)
• Let a pinned mint repay its rewrite over the turns the session will reach (#2640)
• Size a mint's cached prefix once per request (#2638)
• Keep each test failure's assertion in command_digest (#2635)

Anyray Connect (v0.11.222)

• Re-land the macOS preinstall sweep with tolerant failure paths and a fleetd ownership gate (#2642)
• Automate Windows Copilot CLI setup (#2643)
• Revert "feat(connect-tray): macOS preinstall sweeps the CLI pkg and fleetd by receipt (#2607)" (#2619)

Docs

• Cut the API reference pages down to scannable reference (#2600)

Also updated: Console, Shared libraries.

v1.10.391

Released 2026-09-14

Gateway (v1.17.252)

• Canonicalize the transcript once per turn, and split the pin-read leg (#2618)
• Put the hook budget's tail on the board (#2617)

Anyray Connect (v0.11.221)

• MacOS preinstall sweeps the CLI pkg and fleetd by receipt (#2607)

Also updated: Shared libraries, Docs.

v1.10.390

Released 2026-09-13

Gateway (v1.17.251)

• Serve anyray_retrieve for clients without the MCP server (#2614)

Also updated: Console, Shared libraries, Docs.

v1.10.389

Released 2026-09-13

Gateway (v1.17.250)

• Price a first lazy-tool activation instead of declining the mint (#2613)
• Latch Codex retrieval on a client-scoped approval, not the catalog (PR B) (#2612)
• Mint evidence follows the org default route, not only a header pin (#2605)
• Report install residue convergence cannot remove (#2591)
• Unbreak main's CI, and stop the tray Mac job stranding every PR (#2599)

Anyray Connect (v0.11.220)

• Anyray-connect uninstall with tray and window entry points (#2593)
• MacOS pkg scripts live with the app (#2597)
• Stop reinstalling the CLI refresh scheduler when the tray app is gone (#2592)
• Linux packages replace fleet-osquery and ship uninstall.sh (#2590)
• Windows MSI install dir, Orbit sweep and uninstall.ps1 (#2589)

Docs

• Upgrade a clone with fetch + reset --keep, not git pull (#2588)
• Trim strategy internals and simplify 11 guide pages (#2594)

Also updated: Optimizer, Console, Shared libraries.

v1.10.388

Released 2026-09-11

Maintenance release: no application component changed.

v1.10.387

Released 2026-09-11

Docs

• House the control-plane override rationale here, not in the public repo (#2585)

v1.10.386

Released 2026-09-10

Gateway (v1.17.249)

• Seed a fresh deployment's session gate instead of parking it at shadow (#2579)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.385

Released 2026-09-10

Gateway (v1.17.248)

• The connectors panel reports what the gateway serves, not what the console saved (#2575)
• One connect tool makes a waiting org connector visible, off by default (#2578)
• Serve org connectors regardless of the Desktop profile flag (#2573)
• /mcp initialize re-mints a resumed session instead of refusing it (#2576)

Optimizer (v0.3.180)

• Stop cached context compression mints and evaluate source savings (#2563)
• The suppression reason token decides whether pinned bytes survive (#2581)
• Context_compression stands aside on warm explicit-cache routes (#2580)
• Cut the body-walk that dominates hook CPU, and alert when a deployment misses the budget (#2562)

Anyray Connect (v0.11.219)

• Make anyray_retrieve callable on Codex, and report that it is (PR A) (#2577)

Also updated: Console, Shared libraries, Docs.

v1.10.384

Released 2026-09-10

Gateway (v1.17.247)

• Stand code_graph and context_compression aside on billed implicit-cache routes (#2565)
• Stop thinking_trim breaking 5.1 preserved-thinking signatures (#2571)
• Answer an unroutable /v1 path 404, and log the silent socket closes (#2568)

Also updated: Optimizer, Docs.

v1.10.383

Released 2026-09-10

Gateway (v1.17.246)

• Revert "Codex seats get reversible eliders again": turn-varying billed_lane busts the prefix (#2569)
• Codex seats get reversible eliders again (#2564)
• Stop partial leading-hour bins overwriting complete optimizer-health hours (#2559)

Optimizer (v0.3.178)

• Admit observation_mask on mint economics when pressure is unknowable (#2561)

Also updated: Shared libraries, Docs.

v1.10.382

Released 2026-09-10

Maintenance release: no application component changed.

v1.10.381

Released 2026-09-10

Maintenance release: no application component changed.

v1.10.380

Released 2026-09-10

Gateway (v1.17.245)

• A cache_control marker is only a boundary if the route carries it (#2556)

Optimizer (v0.3.177)

• Stop injecting cache breakpoints into routes that discard them (#2558)

Console (v0.4.189)

• Fold the source-trim status pills into Active (#2555)

Also updated: Shared libraries, Docs.

v1.10.379

Released 2026-09-09

Optimizer (v0.3.176)

• Restrict code graph to uncached source and preserve replay (#2553)

Console (v0.4.188)

• Name the two routing tables, and split an agent's models in one step (#2557)

Also updated: Docs.

v1.10.378

Released 2026-09-09

Docs

• The installer download can be interrupted (#2552)

v1.10.377

Released 2026-09-09

Gateway (v1.17.244)

• Stop the hook before the abort, and get the body walk off the hot path (#2551)
• Replay conversation rewrites on fail-open turns (#2546)
• Show when an agent routes traffic but never trims at source (#2511)
• Keep each agent key sealed at rest and show it back (#2549)

Optimizer (v0.3.175)

• Code_graph names the declarations it was blind to, and stops naming statements (#2550)

Console (v0.4.187)

• Rework the Users and Agents modals around what is left to do (#2535)

Also updated: Anyray Connect, Shared libraries, Docs.

v1.10.376

Released 2026-09-09

Maintenance release: no application component changed.

v1.10.375

Released 2026-09-09

Gateway (v1.17.243)

• Log class name only for messagesHandler request-path errors (#2519)
• Make context compression replay-safe on cached traffic (#2545)
• Keep retrieval tools when a history tool_addition/tool_removal names them (#2538)
• Stop asserting two wall clocks are the same millisecond (#2543)

Optimizer (v0.3.174)

• Discharge pin-thrash strikes when a cooloff is served (#2547)

Anyray Connect (v0.11.217)

• Improve OpenClaw MCP resilience diagnostics (#2544)

Also updated: Shared libraries, Docs.

v1.10.374

Released 2026-09-08

Gateway (v1.17.242)

• Time every leg of the hook, and start the write budget at receipt (#2537)
• Stop deleting a dev's own upstream pins, and wire --upstream on the OpenAI lane (#2539)
• Stop granting the 10s vision budget to clients that can't run vision (#2534)
• Native desktop login and resident maintenance (#2524)
• Add agent monitoring (#2529)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries, Docs.

v1.10.373

Released 2026-09-08

Gateway (v1.17.241)

• A schema AHEAD of the replica reading it is not drift (#2525)

Console (v0.4.185)

• One place to edit model aliases, on the provider that serves them (#2521)

Anyray Connect (v0.11.215)

• Resolve conflicting launchers and verify updates (#2518)

Also updated: Shared libraries, Docs.

v1.10.372

Released 2026-09-08

Maintenance release: no application component changed.

v1.10.371

Released 2026-09-08

Gateway (v1.17.240)

• Sampled ground-truth savings audit, calibrated per model (#2515)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.370

Released 2026-09-08

Maintenance release: no application component changed.

v1.10.369

Released 2026-09-08

Gateway (v1.17.239)

• Replace magic-number decisions with request-derived logic (#2512)
• Install source hooks on every managed lane, not just the SSO one (#2510)
• Let an operator read provider metadata, and refuse a stale alias save (#2514)
• Stop putting the client's anthropic-beta header into Converse (#2507)
• Name why an upstream rejected us, without asking the customer (#2499)
• One Email domains source for SSO, MDM, and desktop sign-in, DNS-proven (#2454)
• Unblind the cache-bust detector on OpenAI-dialect providers (#2500)
• Make cache_optimizer reach the OpenClaw/xAI lane (#2504)

Console (v0.4.183)

• Give operators a route to the model menu they own (#2509)
• Narrow a routing lane with a second test (#2508)

Docs

• Trim ten pages to steps, tables and accordions (#2493)

Also updated: Optimizer, Anyray Connect, Shared libraries.

v1.10.368

Released 2026-09-07

Gateway (v1.17.238)

• Drive the OpenClaw model menu from gateway admin config, and stop the request URL writing free text into the content-free stores (#2497)
• Name why a turn was skipped, not just that it was (#2495)
• Rate upstream spike alerts against the inference lane (#2494)
• Add pi and omp harness targets (#2490)
• Let operators name their own upstream endpoint paths (#2489)

Optimizer (v0.3.170)

• Record what sizes the mask threshold, and what does not (#2501)
• Make paired verdicts trustworthy, and retire the adaptive holdout (#2486)

Console (v0.4.182)

• Pi/omp brand marks, honest retrieval state, sharper docs (#2496)
• Ship OpenClaw retrieval in the config that routes it (#2491)

Anyray Connect (v0.11.213)

• Never run the medium band on a subagent transcript (#2498)
• One engine owns the machine, repointed every pass, stale persistence retired (#2456)

Also updated: Shared libraries, Docs.

v1.10.367

Released 2026-09-07

Optimizer (v0.3.169)

• Make code_graph admission and rejected parse work cheap (#2488)

Also updated: Gateway, Console, Anyray Connect, Shared libraries, Docs.

v1.10.366

Released 2026-09-07

Gateway (v1.17.236)

• Refuse the SSO MCP lane instead of looping a login it cannot finish (#2465) (#2468)

Docs

• Trim enrollment and how-it-works pages (#2462)

v1.10.365

Released 2026-09-06

Gateway (v1.17.235)

• Let an operator set any body field their upstream defines (#2466)
• Name the real network errno instead of collapsing every fetch failure into TypeError (#2467)

Also updated: Console, Docs.

v1.10.364

Released 2026-09-06

Gateway (v1.17.234)

• Restore the retrieval read path for four elision markers (#2463)
• Batch durable stash within optimize budget (#2457)

Optimizer (v0.3.168)

• Stand aside on the tool block when a foreign tool shares it (#2464)

Also updated: Anyray Connect, Shared libraries.

v1.10.363

Released 2026-09-06

Gateway (v1.17.233)

• Ship an Anyray Skill to every enrolled machine, and a runbook for agent hosts (#2448)

Optimizer (v0.3.167)

• Withhold one strategy per session (#2453)
• Size code_graph's parse budget for customer hardware (#2459)
• Stop observation_mask emitting retrieve handles nothing can honor (#2445)

Console (v0.4.179)

• Make /connectors a live URL with no visible link (#2455)
• Gate the per-day saving % on the kept side, not the base (#2452)

Anyray Connect (v0.11.210)

• Desktop app self-update reusing the CLI trust model (#2447)
• Tray short-polls admin directives every two minutes (#2446)

Docs

• Teach the retrieval loop as three steps on the SDK guide (#2449)

v1.10.362

Released 2026-09-06

Gateway (v1.17.232)

• Omit redundant MCP instructions and preserve handle recovery (#2443)

Shared libraries

• Unstall the agent lanes: bound the request, move off GLM-5.1, declare the real 1M window (#2441)

Also updated: Docs.

v1.10.361

Released 2026-09-06

Gateway (v1.17.231)

• Serve the organization MCP endpoint from the gateway, and delete the hub service (#2431)

Also updated: Console, Anyray Connect, Shared libraries, Docs.

v1.10.360

Released 2026-09-06

Maintenance release: no application component changed.

v1.10.359

Released 2026-09-06

Maintenance release: no application component changed.

v1.10.358

Released 2026-09-06

Gateway (v1.17.230)

• Per-tenant, per-strategy session gate: a strategy runs on a customer only after it has won on that customer's own sessions (#2433)

Optimizer (v0.3.166)

• Confirm the durable stash refresh before replaying a handle on a gate stand-down (#2435)
• Instrument recall candidate truncation (#2428)
• Long-horizon paired benchmark for Rule 0 (RFC 0024) (#2432)

Anyray Connect (v0.11.208)

• Two default-off source trims in the PostToolUse hook (green collapse, re-read stub) (#2430)

Also updated: Console, Shared libraries, Docs.

v1.10.357

Released 2026-09-05

Gateway (v1.17.229)

• Prepare cache lookback for 86,295 re-written tokens in V5/V6 (#2427)
• Claude on Bedrock over InvokeModel with the native Anthropic body (#2422)
• A tools change re-writes the whole cached context, not one prefix (#2425)

Console (v0.4.176)

• Move Content privacy, Diagnostics and Connectors into account-menu modals (#2423)

Also updated: Optimizer, Docs.

v1.10.356

Released 2026-09-05

Gateway (v1.17.228)

• Reduce console API response latency (#2420)

Optimizer (v0.3.164)

• Client_prefix_compression back to opt-in (Rule 0 on a real repository) (#2424)

Console (v0.4.175)

• Five more directory brand marks, and honest tile counts (#2421)

Also updated: Shared libraries, Docs.

v1.10.355

Released 2026-09-05

Optimizer (v0.3.163)

• Context_dedupe and prompt_compression stand aside on every billed lane (Rule 0) (#2419)

Also updated: Docs.

v1.10.354

Released 2026-09-05

Gateway (v1.17.227)

• SSRF-guard the org MCP hub connector registration path (#2410)

Optimizer (v0.3.162)

• The shipped Claude Code prefix table is the system half only (Rule 0) (#2418)

Console (v0.4.174)

• Connectors page with Skills rail, brand marks, relay health dialog (#2407)

Anyray Connect (v0.11.207)

• Codex fetches its key per request instead of baking one in (#2416)

Docs

• Retire the last two pointers to the deleted security-hardening page (#2415)

v1.10.353

Released 2026-09-05

Gateway (v1.17.226)

• Forward the retrieval tools only from a session's first marker on (#2412)

Optimizer (v0.3.161)

• Six defects that made fleet health read wrong (#2413)

Console (v0.4.173)

• Recover a connector from an upstream trailing escape, and stop validating one string while emitting another (#2409)

Anyray Connect (v0.11.206)

• Report which mechanism will actually move a seat's binary (#2406)

Also updated: Docs.

v1.10.352

Released 2026-09-05

Gateway (v1.17.225)

• Price gpt-6-astra from OpenAI's published rates (#2398)
• Automate WorkOS MCP SSO readiness (#2394)

Console (v0.4.172)

• Grow the connector catalog into the full Claude directory (#2405)

Docs

• Trim and restructure the docs site (#2404)

Also updated: Shared libraries.

v1.10.351

Released 2026-09-05

Optimizer (v0.3.160)

• Prompt_compression and context_dedupe stand aside on api-key no-retrieve lanes (Rule 0) (#2402)
• The signing source-scan follows the optimizer transport extraction (#2403)

Anyray Connect (v0.11.205)

• Sweeping an orphan must not fuse the user's own lines (#2387)

Also updated: Gateway, Docs.

v1.10.350

Released 2026-09-05

Gateway (v1.17.223)

• Keep process error diagnostics content-free (#2381)

Optimizer (v0.3.159)

• Drop the schema swaps from the shipped Claude Code prefix table (#2389)

Console (v0.4.171)

• Traces fits its card, and the Effort column shows data (#2386)

Anyray Connect (v0.11.203)

• Recover a profile an older version already half-broke (#2383)

v1.10.349

Released 2026-09-05

Maintenance release: no application component changed.

v1.10.348

Released 2026-09-05

Optimizer (v0.3.158)

• Revision 13 also flips the rows the file lane self-healed under v1.10.346 (#2377)

Console (v0.4.170)

• Give the Traces Effort column a width (#2376)

Anyray Connect (v0.11.201)

• Recover the other two marker blocks from a lost end marker (#2375)

v1.10.347

Released 2026-09-05

Gateway (v1.17.222)

• Add agent-native deployment onboarding (#2372)
• Add MCP connectors hub UI (#2370)
• Preserve production cache usage accounting (#2367)

Optimizer (v0.3.157)

• Client_prefix_compression on by default, measured against the task's own variance (#2374)
• Claude_code_mixed tier of the curated Claude Code prefix table (opt-in) (#2373)
• Compact tier and input-schema swaps for the curated Claude Code prefix table (opt-in) (#2371)

Anyray Connect (v0.11.200)

• Doctor catches a config frozen at a stale client key (#2366)

Also updated: Console, Shared libraries, Docs.

v1.10.346

Released 2026-09-04

Optimizer (v0.3.156)

• Client_prefix_compression ships opt-in, with a defaults migration for persisted configs (Rule 0) (#2369)

Also updated: Docs.

v1.10.345

Released 2026-09-04

Gateway (v1.17.221)

• Fold Claude Code's mid-conversation system turns on the Bedrock lane (#2363)
• Bedrock streams signature-only thinking as thinking; count_tokens answers 501 (#2365)
• Reasoning effort as a first-class dimension in Traces and Cockpit (#2359)

Optimizer (v0.3.155)

• Prefix-rewrite strategies report cachedSavedFraction; positional tool share; prefix remainder prices fresh (#2364)

Anyray Connect (v0.11.199)

• Recover a Codex block whose end marker was lost, and record a refused apply (#2362)

Also updated: Console, Shared libraries, Docs.

v1.10.344

Released 2026-09-04

Gateway (v1.17.220)

• Curated Claude Code prefix table + gateway prefix memo for fail-open turns (#2360)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.343

Released 2026-09-04

Maintenance release: no application component changed.

v1.10.342

Released 2026-09-04

Gateway (v1.17.219)

• Complete a per-user connector OAuth grant on a loopback redirect (#2357)
• Warn that a claim code hands over the grant, on the page that shows it (#2356)

Optimizer (v0.3.153)

• Stand aside on base-URL-only Claude Code lanes; api-key no-retrieve lanes skip irreversible eliders (#2358)

Also updated: Anyray Connect, Docs.

v1.10.341

Released 2026-09-03

Gateway (v1.17.218)

• Carry local Claude Desktop config into the 3P profile on the MDM lane (#2347)
• Per-user connector OAuth grants (#2355)

Console (v0.4.166)

• Find a connector by name, and restore one from a file (#2350)

Also updated: Anyray Connect, Shared libraries, Docs.

v1.10.340

Released 2026-09-03

Gateway (v1.17.217)

• Ship offboardedAt on the meter seat roster (follow-up) (#2351)
• Keep an authorized grant through a transient failure, and tell the truth when a policy write fails (#2348)
• Configure a tool a developer installs after their machine enrolled (#2346)
• Broker a connector's OAuth grant from the console (#2344)
• Read the OAuth challenge a connector answers with, and tell 401 from 403 (#2342)

Optimizer (v0.3.152)

• Never prune the tool-search loader out from under deferred tools (#2349)

Console (v0.4.165)

• Hide Tools and Machines from the sidebar (#2352)

Anyray Connect (v0.11.196)

• Keep older runtimes a skipped tool still names, and let a newer Connect send its own daily report (#2354)
• The admin's tool policy decides what an MDM enrollment applies and reverts (#2353)

Also updated: Shared libraries, Docs.

v1.10.339

Released 2026-09-03

Gateway (v1.17.216)

• The context stash was silently exempt from user erasure (#2345)
• Ask every OpenAI-compatible upstream for its streaming usage frame (#2340)
• Surface Tools and Machines in the nav, move per-user machines off Users (#2310)
• Add an MCP connector from its address, probed for its real name and tools (#2336)

Optimizer (v0.3.151)

• Content-off must stop capture, not shred captured spans (#2343)

Console (v0.4.164)

• Three connector-add defects that shipped in #2336 (#2338)

Anyray Connect (v0.11.195)

• Sign in window, personal-link fallback, single instance (phase 3 of 3) (#2331)
• --sign-in carrier for the desktop app (phase 2 of 3) (#2314)
• Enroll a managed machine on first start and say when it connected (phase 2 of 2) (#2313)
• Classify the MDM preference and expose enroll-rejected on the managed enroll carrier (phase 1 of 2) (#2312)

Also updated: Shared libraries, Docs.

v1.10.338

Released 2026-09-03

Gateway (v1.17.215)

• Surface per-strategy optimizer wall time in the health bins (0085) (#2334)
• Let a shared agent file spend under the people it serves (#2330)
• Record per-key liveness so the console can tell a connected agent from one that never was (#2321)

Console (v0.4.163)

• Tell people their enrollment link is also the prompt for their coding agent (#2324)
• Say whether an agent is connected, and give its host one command (#2322)

Anyray Connect (v0.11.194)

• Name the service-key lane for agent hosts (#2323)

Docs

• Enroll from your coding agent, and let llms.txt point agents at it (#2328)

Also updated: Shared libraries.

v1.10.337

Released 2026-09-03

Gateway (v1.17.214)

• A policy save answers with the hub summary taken after its sync round starts (#2325)
• Org Skills and Connectors cards say where they reach, and show the org MCP hub (#2320)

Anyray Connect (v0.11.193)

• Finish every apply by seeding the org's skills and connectors (#2317)

Also updated: Console, Docs.

v1.10.336

Released 2026-09-02

Gateway (v1.17.213)

• Write the org MCP hub entry into every managed tool (#2307)
• Org MCP hub relay for console-managed connectors (#2305)
• Register the org skills marketplace in Claude Code (#2302)
• Org skills reach every managed tool on the daemon tick (#2300)
• Add Tensormesh as a gateway provider: KV-cached open-weight inference with $0 cached tokens (#2298)
• Anchor the xAI cache-affinity id on the original body (#2294)
• Semantic cache shadow tier: measure streamed and non-servable lanes, persist counters (#2295)

Optimizer (v0.3.150)

• Cap relevance_filter lexical scan with a byte budget (#2308)

Anyray Connect (v0.11.192)

• Refuse to write into a config.toml codex cannot parse (#2316)
• Carry the MCP conflict class through codex and copilot-cli (#2309)
• Classify a foreign OpenCode MCP slot as mcp_foreign (#2306)
• Register the retrieval MCP server for OpenClaw (#2304)

Docs

• Put the retrieval server in the config people copy (#2319)

Also updated: Console, Shared libraries.

v1.10.335

Released 2026-09-02

Optimizer (v0.3.149)

• Cache code_graph parses across turns and bound its parse work (#2289)

Also updated: Anyray Connect.

v1.10.334

Released 2026-09-02

Gateway (v1.17.212)

• Per-generation Claude output ceilings, not per-family (#2284)
• Price Claude Fable 5.1, fix Sonnet 5's cancelled rise, and make exact match beat family (#2283)
• Org Skills & Guidance served as a plugin marketplace (#2287)
• Make a refused request say which side is misconfigured (#2281)

Console (v0.4.160)

• Near-zero-effort claude.ai connector migration (#2280)

Anyray Connect (v0.11.190)

• Current Claude models in the catalog, real ceilings in the seed (#2286)
• Machine-readable enrollment (--json) for --sso, --enroll and --claim (#2279)
• Ship signed desktop installers to staging (#2275)

Shared libraries

• Claude-sonnet-5 moves to its announced standard rate (#2285)

Also updated: Docs.

v1.10.333

Released 2026-09-01

Console (v0.4.159)

• Org-wide Connectors section with catalog and claude.ai import (/272/273) (#2278)

Also updated: Docs.

v1.10.332

Released 2026-09-01

Optimizer (v0.3.148)

• Close the command_digest guard gap, remediate persisted config on boot, add fleet monitoring (#2274)
• Remove provider_context_trim from TURN_VARYING_HISTORY_KINDS (#2268)
• The no-retrieve degrade: name its cause, and stop destroying the span (#2257)

Docs

• Reconcile client tool list + Google provider label (#2271)

v1.10.331

Released 2026-09-01

Optimizer (v0.3.147)

• The live user turn is untouchable on an irreversible run (#2269)

Console (v0.4.158)

• Structured Connectors editor on the Claude Desktop policy panel (#2272)

Also updated: Docs.

v1.10.330

Released 2026-09-01

Gateway (v1.17.211)

• Stop a 200 we cannot parse becoming a blank Claude turn (#2265)

Optimizer (v0.3.146)

• Let a deployment refuse elision it can never undo (#2267)

Also updated: Docs.

v1.10.329

Released 2026-09-01

Gateway (v1.17.210)

• Align the agentContinuationV1 handshake with the resolved tool catalog (#2266)

Also updated: Optimizer, Docs.

v1.10.328

Released 2026-09-01

Gateway (v1.17.209)

• Trim retrieval-guardrail follow-ups (#2258)
• Skip the self-heal sweep assertion while day 1 is still unsettled (#2263)

Also updated: Optimizer, Anyray Connect.

v1.10.327

Released 2026-09-01

Gateway (v1.17.208)

• Guard retrieval-dependent optimization automatically (#2256)
• Document POST /mcp in the OpenAPI spec, and close the prefix hole that hid it (#2254)

Optimizer (v0.3.143)

• Make context_dedupe prompt-cache safe by deciding once at arrival (#2259)
• Parse code_graph structure with tree-sitter when the lexical scan fails (#2260)

Anyray Connect (v0.11.188)

• Emit the security allow-list as a pushable manifest (#2255)
• Re-derive the refresh-scheduler need instead of trusting the stored flag (#2246)

Also updated: Shared libraries, Docs.

v1.10.326

Released 2026-08-31

Gateway (v1.17.207)

• Route a TRANSLATED /v1/messages to an endpoint-shaped custom_host (#2250)
• Pass a client's own body fields through to their gateway (#2251)

Shared libraries

• Weekly comment-sweep lane on GLM-5.3-Flash (#2252)

Also updated: Console, Docs.

v1.10.325

Released 2026-08-31

Gateway (v1.17.206)

• Make the billing detector's findings readable (#2248)

Console (v0.4.156)

• Remove the Retrieval card from the console Home dashboard (#2249)

Docs

• Seat fleets enroll through the MDM lanes; the hooks-only file is Claude Code only (#2253)

Also updated: Optimizer, Shared libraries.

v1.10.324

Released 2026-08-31

Console (v0.4.155)

• Route users to the preferred configuration (#2230)

Docs

• Split oversized pages and tighten prose for a dev-first read (#2229)

v1.10.323

Released 2026-08-30

Gateway (v1.17.205)

• Billing policy as auditable data, and a wrong value made visible (#2224)
• Credit a hosted MCP connector aimed at our own /mcp as retrieve evidence (#2222)

Optimizer (v0.3.141)

• The mask's walk-count guard could pass green with the bug back (follow-up) (#2219)
• Settle thinking_trim's cache tier by position, not by pinsReplayed (#2225)

Anyray Connect (v0.11.187)

• Print a command the user can actually run (#2227)

Docs

• Name the PATH fallback where migrate is introduced (#2226)

Also updated: Console, Shared libraries.

v1.10.322

Released 2026-08-30

Anyray Connect (v0.11.186)

• Stop gating the Desktop seam on a key Connect only clears (#2220)

v1.10.321

Released 2026-08-30

Gateway (v1.17.204)

• The gateway serves its retrieval tools over MCP: no install, no code (#2214)
• Move the Claude Desktop policy under the MDM macOS lane (#2215)
• Span ownership across strategies (trajectory-trim mutex) (#2209)
• : bill asserted-identity savings in full instead of scaling them to $0 (#2211)
• Stop the caller's own key from overwriting the provider credential (#2210)
• Route to a custom_host that already names the inference endpoint (#2208)
• User/ts index for the 60s month resync + TTL-gap prunes (#2200)
• Tell a Claude Code dev WHY the upstream refused, not "request failed" (#2202)
• Scope-native minting for scoped admin API keys (#2205)
• /admin/health reports whether the deployment can serve inference (#2198)

Optimizer (v0.3.140)

• Observation_mask is O(body²): hoist the window-fill gate out of the candidate loop (#2218)

Anyray Connect (v0.11.185)

• Self-heal a wiped managed enrollment on refresh instead of reporting it broken (#2207)

Shared libraries

• Connect to RDS the way the gateway does (#2217)

Also updated: Console, Docs.

v1.10.320

Released 2026-08-30

Gateway (v1.17.203)

• An admin-configured upstream authorizes its own host (#2204)
• Stop measuring elastic stores against the bundled 10Gi volume (#2191)

Console (v0.4.152)

• Rework the Providers, Routing and connector editors (#2199)

Anyray Connect (v0.11.184)

• Tell a dev the org-key lane is dead BEFORE configuring them onto it (#2194)

Docs

• The Bedrock policy could not complete its own use-case attestation (#2197)

Also updated: Shared libraries.

v1.10.319

Released 2026-08-29

Gateway (v1.17.202)

• Route one agent across several upstream accounts (#2192)

Anyray Connect (v0.11.183)

• Refuse an ambiguous devcontainer match before any credential moves (#2196)

Also updated: Console, Shared libraries, Docs.

v1.10.318

Released 2026-08-29

Gateway (v1.17.201)

• Load balancing is sticky per conversation, not per request (#2190)

Anyray Connect (v0.11.181)

• Remote apply over devcontainer, WSL, and Codespace carriers (RFC 0021 phase 2) (#2195)

Also updated: Docs.

v1.10.317

Released 2026-08-29

Gateway (v1.17.200)

• Fleet-owned update policy for EDR-managed fleets (#2172)

Console (v0.4.150)

• Offer the Homebrew install as an EDR-blocked fallback (#2193)

Anyray Connect (v0.11.179)

• remote <ssh-host> configures a discovered SSH remote from the local run (RFC 0021 phase 1) (#2189)
• Unit_deleted needs evidence a unit was ever installed (#2188)
• Interactive apply shows its full plan -- tools, environment, and the remote environments it cannot reach (#2187)
• Cut the synthetic app bundle, disclose the update surface (#2178)
• Verify the downloaded binary instead of executing it (#2183)

Also updated: Docs.

v1.10.316

Released 2026-08-29

Gateway (v1.17.199)

• Measure storage_pressure against the real volume, not a 10Gi guess (#2176)
• Drain the optimizer on SIGTERM and share its audit trail (#2177)

Anyray Connect (v0.11.176)

• Doctor names bind-mounted config files, and the docs explain the shape (#2185)
• Publish in place when the destination cannot be renamed over (#2181)
• Send the MCP-registration failure reason to connect-health (#2179)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.315

Released 2026-08-28

Maintenance release: no application component changed.

v1.10.314

Released 2026-08-28

Gateway (v1.17.198)

• Bind an agent to its own provider key, on its own row (#2174)
• Add Windows and Linux zero-click MDM enrollment (#2160)

Anyray Connect (v0.11.172)

• Prove the Claude Code MCP registration landed, and name why when it didn't (#2175)

Also updated: Console, Shared libraries, Docs.

v1.10.313

Released 2026-08-28

Gateway (v1.17.197)

• Api-v1 follow-ups: console skew shim, Zod echo hygiene, slug guard, doc anchors (#2164)
• Network-trusted identity mode (RFC 0019) (#2145)

Anyray Connect (v0.11.170)

• Doctor flags a Cursor BYOK lane with no model bound to it (#2166)

Also updated: Console, Docs.

v1.10.312

Released 2026-08-28

Gateway (v1.17.196)

• Drop fast-xml-parser from the image tree, unblocking the release (#2163)
• Management API v1: /admin/v1 twins with URL-derived scopes (RFC 0019) (#2143)

Console (v0.4.147)

• The quality gate is wrong about UI test runners, and the console mirror was unguarded (#2162)

Also updated: Shared libraries, Docs.

v1.10.311

Released 2026-08-28

Gateway (v1.17.195)

• Support AWS RDS IAM database authentication, no new env var (#2158)
• Accept MDM-provisioned certs under required SSO (#2159)
• Make Cursor BYOK behave like Claude Code with Anyray (#2157)
• Send x-grok-conv-id so xAI prompt caching can hit (#2148)
• Bucket modern runtime default User-Agents as shell-env (#2146)
• Fail the semantic-cache signature and caller partition closed (#2140)

Console (v0.4.146)

• Simplify the MDM add-user lanes to download, add, sync (#2150)

Docs

• Lead with the BYOK lane for organizations, with what it does and does not cover (#2141)

Also updated: Optimizer, Anyray Connect, Shared libraries.

v1.10.310

Released 2026-08-27

Console (v0.4.145)

• Plain macOS managed enrollment via managed preferences (#2147)

Also updated: Optimizer, Anyray Connect, Docs.

v1.10.309

Released 2026-08-27

Gateway (v1.17.194)

• Route per agent, and attribute every server-held key that pays (#2149)
• Resolve the team from the IdP: Directory Sync and SAML (#2139)

Console (v0.4.144)

• Cockpit User-tab: last-active recency, long-model clip, saving-rate sort header (#2144)

Also updated: Docs.

v1.10.308

Released 2026-08-27

Gateway (v1.17.193)

• Attribute spend and routing to the effective team (#2134)

Optimizer (v0.3.136)

• Ship cache-safe thinking trim Option A (#2114)
• Preserve observation pin ownership (#2123)

Docs

• Auto-update is a one-line opt-in, not the chart default (#2133)
• Document automatic image updates via the Helm chart (#2131)

v1.10.307

Released 2026-08-27

Gateway (v1.17.192)

• Let a keyless upstream work without a placeholder key (#2129)

Console (v0.4.143)

• Per-row detail modals for Users, Agents and Admin API keys (#2125)

Also updated: Docs.

v1.10.306

Released 2026-08-27

Gateway (v1.17.191)

• Sign gateway→optimizer requests with a split Ed25519 pair (#2120)
• Multiple API keys per provider, routable via provider_key_id (#2118)
• Verify the entitlement lease before serving /v1/* (#2115)
• Stop re-sending the whole month's byDay trend every meter round (#2091)

Optimizer (v0.3.135)

• Detect unreported optimization (#2119)

Console (v0.4.142)

• Simplify Mac MDM enrollment (#2117)
• Stop the spend screens rendering "$NaN" and "$-0.00" (#2116)

Anyray Connect (v0.11.167)

• Read VS Code mcp.json as JSONC, not strict JSON (#2124)
• Opt-in gatewayRouting flag routes Grok via the org routing config (#2122)
• Key the macOS device identity on an app group (#2121)

Also updated: Shared libraries, Docs.

v1.10.305

Released 2026-08-26

Optimizer (v0.3.134)

• Hand a whole-file code read to code_graph instead of line-filtering it (#2107)

Shared libraries

• Price the gpt-5.6 family from OpenAI's published rates (#2108)

Also updated: Docs.

v1.10.304

Released 2026-08-26

Gateway (v1.17.190)

• Add macOS MDM device identity enrollment (#2111)
• Use errorLabel for request-path error logging (privacy invariant) (#2101)

Also updated: Console, Anyray Connect, Shared libraries, Docs.

v1.10.303

Released 2026-08-26

Gateway (v1.17.189)

• Route bare /v1/models through the deployment's default route (#2109)

Anyray Connect (v0.11.164)

• Keep a shared install executable and its fleet helpers current (#2110)

Also updated: Docs.

v1.10.302

Released 2026-08-25

Gateway (v1.17.188)

• Serve the API explorer and OpenAPI spec from the gateway itself (#2105)
• Traces: filterable, sortable list with server-side filters + facets (#2104)
• Fleet-managed update lane: gateway-directed connect updates over the directive queue (#2097)

Console (v0.4.140)

• Merge admin API key minting into the Add agent flow (#2106)
• Route bare kimi model ids to the Moonshot brand mark (#2103)
• Weight cache reads at 0.1× in the Total-saving base (#2102)
• Cockpit Breakdown: sortable, filterable, column-configurable User tab (#2099)

Anyray Connect (v0.11.163)

• Stable machine verb surface for Fleet-driven seat maintenance (#2094)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.301

Released 2026-08-25

Maintenance release: no application component changed.

v1.10.300

Released 2026-08-24

Optimizer (v0.3.132)

• Raise the two weakest measured benchmark rows (#2087)

Also updated: Docs.

v1.10.299

Released 2026-08-24

Gateway (v1.17.187)

• Split trace retention from spend retention (#2078)
• Fold aggregateMonth's three scans into one (#2085)

Shared libraries

• Trace-store migration ledger + replace-not-upsert write path (#2083)

Also updated: Optimizer, Console, Docs.

v1.10.298

Released 2026-08-24

Gateway (v1.17.186)

• Scoped admin API keys + capability bundles for console SSO (#2022)
• Lane-aware fleet Claude Desktop credential + 424 for missing provider key (#2084)
• Stop the Cockpit paying two cold dashboard scans per load (#2079)

Console (v0.4.138)

• Tell the customer when their spend store goes dark (#2088)

Anyray Connect (v0.11.162)

• Record that we stay on the individual signing identity (#2086)
• Show "Anyray" in Login Items instead of the signing certificate name (#2080)
• Add marketplace icon and README (#2075)

Docs

• Document the database credential fix and how to get it (#2090)
• Sign customer images and the Helm chart with cosign (#2077)

Also updated: Shared libraries.

v1.10.297

Released 2026-08-24

Gateway (v1.17.185)

• Allow MDM enrollment alongside SSO with a managed-device gate (#2044)

Console (v0.4.137)

• Admin + console small fixes: gateway version-change Logs event, grok xAI mark, Home first-load spinner (#2053)

Also updated: Optimizer, Anyray Connect, Shared libraries, Docs.

v1.10.296

Released 2026-08-24

Maintenance release: no application component changed.

v1.10.295

Released 2026-08-23

Gateway (v1.17.184)

• Put the Extra capacity numerator in limit units (#2062)

Console (v0.4.136)

• Name the Windows publisher on the enroll flows (#2060)

Docs

• Say where ANYRAY_CLIENT_KEY comes from (#2065)
• A multi-vendor menu does not route itself (#2064)
• OCI model list, and cover Opus/Sonnet/Grok/GPT (#2063)
• Config variants per provider, and fix CodeGroup tab labels (#2061)
• Lead with the sandboxed Grok-on-Oracle route (#2059)

Also updated: Shared libraries.

v1.10.294

Released 2026-08-23

Gateway (v1.17.183)

• Fold model-id spellings at the read grain, not per view (#2058)
• Add litellm and truefoundry as first-class providers (#2024)

Console (v0.4.135)

• Clamp the money path and fold model-id aliases (#2054)
• Add an OpenClaw tab to the enroll-agent flow (#2052)

Docs

• Windows binaries are signed now (#2057)
• Document the zero-install sandbox route (#2051)

Also updated: Anyray Connect, Shared libraries.

v1.10.293

Released 2026-08-23

Gateway (v1.17.182)

• Stop the hook lane poisoning the model hint it reads (#2047)
• Surface xAI's string-error bodies instead of 'request failed' (#2049)

Also updated: Console, Shared libraries.

v1.10.292

Released 2026-08-23

Gateway (v1.17.181)

• Attribute connect hook-lane savings to the seat's model (#2046)
• Share the entitlement lease across replicas and recover from a meter 429 (#2040)
• Pricing overhaul: provider-dimensioned rates, price provenance, and the Kimi family (#2038)

Optimizer (v0.3.129)

• Judge prompt-cache health per class, not by an absolute rate (#2045)
• Two lossless structural strategies (columnar_fold, repeat_factor) (#2029)

Also updated: Console, Shared libraries, Docs.

v1.10.291

Released 2026-08-22

Console (v0.4.132)

• Console Home: per-user Top Savers, Saving rate by model, green Savings card, subtle blue team/user charts (#2043)
• Cockpit loading spinner + shorter Add-user copy + stepped MDM pane (#2041)

v1.10.290

Released 2026-08-21

Gateway (v1.17.180)

• Give a stashed original a lifetime that matches its marker: sliding expiry on retrieve (#2030)

Optimizer (v0.3.128)

• Stop truncating JSON arrays by default (#2025)

Also updated: Shared libraries, Docs.

v1.10.289

Released 2026-08-20

Optimizer (v0.3.127)

• Trim Optimizer strategy docs and hide niche cards (#2027)
• Gate optimizer savings in CI + fix the harness's toolless-turn artifact (#2011)

Console (v0.4.131)

• Retire Usage page for Cockpit, add per-model saving-rate bars (#2026)
• Hide the success rate tile on the Home dashboard (#2023)

Docs

• Trim wordy pages and remove privacy-reassurance asides (#2028)

v1.10.288

Released 2026-08-19

Maintenance release: no application component changed.

v1.10.287

Released 2026-08-18

Gateway (v1.17.179)

• Surface a client fleet checked by a stale pack (#2021)
• Name the cause when a spend connector poll fails (#2018)
• Per-user drill-down charts, own timeframe, and range-scoped usage (#2012)
• Price codex-auto-review, and document the two ids left unlisted (#2017)
• Success rate tile on the dashboard (#2015)
• Say when the fleet is being checked by a stale policy pack (#2016)
• Authenticate Bedrock model discovery in apiKey auth mode (#2014)

Optimizer (v0.3.126)

• Stop anyray_retrieve answering "expired" when the bytes are right there (#2020)
• Report the optimizer version on the admin settings API (#2004)

Docs

• Document output_shaping in the strategy library (#1998)
• Publish the gateway TLS page and de-duplicate its Compose recipe (#2010)

Also updated: Console, Anyray Connect, Shared libraries.

v1.10.286

Released 2026-08-18

Console (v0.4.129)

• Show brand names for traces that predate the provider slug (#2007)

v1.10.285

Released 2026-08-18

Gateway (v1.17.178)

• Show which provider served each request (#2006)
• Add Oracle (OCI Generative AI) as a first-class provider (#1993)
• Carry the warm-turn cache split by strategy class to the fleet view (#1992)
• Non-root gateway container, pnpm supply-chain policy, and the two AWS gaps (#1990)
• Let the routed provider outrank the model id for implicit-cache detection (#1989)
• Repair the vacuous implicit-cache mirror guard, and the drift it let through (#1987)

Console (v0.4.128)

• Plot the present day in the KPI sparklines again (#1988)

Anyray Connect (v0.11.156)

• Stamp real attribution, and clear the catalog sidecar (#1995)

Docs

• Size the datastore for 90-day retention, and lead with self-authored values (#2000)

Also updated: Optimizer, Shared libraries.

v1.10.284

Released 2026-08-17

Gateway (v1.17.177)

• XAI Grok support end to end (#1970)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries, Docs.

v1.10.283

Released 2026-08-16

Gateway (v1.17.176)

• Manage Claude Desktop organization policy (#1833)
• Retry rejected optimized bodies on the generic chat lane; name the rejected field fleet-wide (#1965)
• Derive a pin session for markerless implicit-cache chat (#1960)
• Stop silently discarding a Copilot plan tier we hadn't enumerated (#1958)
• See a billing lane that goes dark behind the zero-token seat lane (#1956)
• Name the two savings scopes that meet on a decision row (#1957)

Optimizer (v0.3.123)

• Measure the in-prefix mint mass the payback gate declines (#1966)
• Require replay for prefix-busters on the boundary branch too (#1963)
• RFC 0017 pre-work: decision-turn strata census + candidate 2 behind a default-off param (#1962)
• Refresh two stale defaults that models outgrew, with migrations (#1952)

Console (v0.4.126)

• Cockpit codex series, user-modal model table, beta banner (#1954)
• Clamp KPI sparklines to the tenant's active span (#1953)

Docs

• Link the public plugin repo and state the version floor (#1968)

Also updated: Anyray Connect, Shared libraries.

v1.10.282

Released 2026-08-16

Maintenance release: no application component changed.

v1.10.281

Released 2026-08-16

Optimizer (v0.3.122)

• Credit the cross-turn thinking a new billing measurement proved is billed (#1950)

Console (v0.4.125)

• Make the Cockpit breakdown readable at fleet size, and drill into a user (#1949)
• Stop the KPI sparklines reading the weekend as a collapse (#1948)

Also updated: Anyray Connect, Docs.

v1.10.280

Released 2026-08-16

Gateway (v1.17.175)

• Stop 11 admin catch-alls echoing an error message into the response (#1945)
• One errorLabel, 50 call sites, and a demonstrated key leak closed (#1944)

Optimizer (v0.3.121)

• Reject a malformed strategy result before it overwrites the last good request (#1939)

Console (v0.4.124)

• Render trace-store elision as storage, not strategy output (#1943)

v1.10.279

Released 2026-08-15

Maintenance release: no application component changed.

v1.10.278

Released 2026-08-14

Console (v0.4.123)

• @types/node, so the release image build typechecks (#1938)

Also updated: Anyray Connect.

v1.10.277

Released 2026-08-14

Optimizer (v0.3.120)

• Stop thinking_trim reverting a cached strip under a thrash cooloff (#1934)

Also updated: Gateway, Console, Anyray Connect, Shared libraries.

v1.10.276

Released 2026-08-14

Maintenance release: no application component changed.

v1.10.275

Released 2026-08-13

Gateway (v1.17.173)

• Resolve the effective team from the SCIM roster at policy time (#1927)
• Conditional routing evaluates the verified identity, not the client header (#1926)
• Nudge seat machines through the RFC 0014 local endpoint-control lane (#1925)

Anyray Connect (v0.11.150)

• Stop doctor inventing an Agents-window problem it cannot see (#1924)

Also updated: Docs.

v1.10.274

Released 2026-08-13

Anyray Connect (v0.11.149)

• Write the Agents-window settings from connect, not the extension (#1922)
• Repair four defects an adversarial review found (#1921)
• Record absence as a snapshot, so revert stops restoring our own config (#1919)

Also updated: Docs.

v1.10.273

Released 2026-08-13

Anyray Connect (v0.11.148)

• Make the Agents window actually show Anyray models (#1916)
• A desktop redirect we cannot read is held, not a routing failure (#1918)
• Put Anyray models in the VS Code Agents window (#1914)

Docs

• Make the managed Claude Desktop path self-serve, and correct a claim the fix invalidated (#1915)

v1.10.272

Released 2026-08-13

Gateway (v1.17.172)

• Strip the whole first-party-only field class, not one field (#1913)

v1.10.271

Released 2026-08-13

Anyray Connect (v0.11.147)

• Stop refusing Claude Desktop on a managed Mac that has no Claude profile (#1912)

v1.10.270

Released 2026-08-13

Gateway (v1.17.171)

• Strip a message-level global cache scope too, and pin the lane rules (#1911)
• Make --revert actually remove the VS Code extension and its staged keys (#1910)
• Let an admin assign the billing lane per user and per team (#1903)
• Per-strategy audited holdout + two-sided output-token verdict (#1897)

Optimizer (v0.3.119)

• Keep thinking blocks that display:omitted left empty (#1896)

Anyray Connect (v0.11.146)

• Hand managed fleets a deployable Claude Desktop profile, and stop sweeping Desktop into --yes (#1908)
• Let a Windows seat reap the refresh task an EDR killed mid-apply (#1905)

Docs

• The standalone binary now reads the OS trust store (#1904)
• Document mixing subscription and org lanes in one org (#1901)
• Correct the undated-model-id claim from #1898 (#1899)
• Document the real setup path, and correct two stale claims (#1898)

Also updated: Console, Shared libraries.

v1.10.269

Released 2026-08-13

Gateway (v1.17.170)

• Resolve undated Claude ids on Bedrock (#1895)

Also updated: Docs.

v1.10.268

Released 2026-08-13

Maintenance release: no application component changed.

v1.10.267

Released 2026-08-12

Optimizer (v0.3.118)

• Keep cache_control out of window_budget's pin identity (#1888)
• Upgrade legacy thinking_trim KEEP pins instead of echoing them (#1889)

Anyray Connect (v0.11.145)

• Supersede staged handoffs by identity, not by mtime (#1892)

v1.10.266

Released 2026-08-12

Gateway (v1.17.169)

• Never rewrite the slash-command body a coding client injects (#1880)

Optimizer (v0.3.117)

• A strategy's savings ceiling must survive refinement (#1883)

Anyray Connect (v0.11.144)

• Stop reconfiguring VS Code every half hour while a seat waits to reload (#1881)
• Stop reading a tenant id as an enrollment token, and say which flag owns it (#1878)

Also updated: Shared libraries, Docs.

v1.10.265

Released 2026-08-12

Optimizer (v0.3.116)

• Ship tool_pruning off by default (#1874)

Also updated: Docs.

v1.10.264

Released 2026-08-12

Optimizer (v0.3.115)

• Stop cache_lint counting a moved breakpoint as prefix churn (#1873)
• Read a code fence the way a renderer does, in one place (#1871)

Anyray Connect (v0.11.143)

• Let the reload finish a VS Code handoff the URI hop could not deliver (#1872)

Docs

• Make MDM the recommended path on an EDR-managed fleet (#1861)

v1.10.263

Released 2026-08-12

Gateway (v1.17.168)

• Serve Bedrock the model id it actually wants, and stop Bedrock rows pricing at the fallback (#1867)

Optimizer (v0.3.114)

• Let cache_lint read the session the gateway actually sends (#1863)
• Keep window_budget's turn-varying victim order out of the cached prefix (#1869)
• Pin code_graph's KEEP verdict, not just its outline (#1866)

Anyray Connect (v0.11.141)

• Say which leg of the VS Code handoff broke, not "VS Code did not confirm" (#1870)
• Say which step of the VS Code handoff broke, instead of one message for three faults (#1868)

Also updated: Shared libraries, Docs.

v1.10.262

Released 2026-08-12

Gateway (v1.17.167)

• Stop Anyray damaging the conversations it optimizes (#1862)

Also updated: Optimizer, Anyray Connect, Docs.

v1.10.261

Released 2026-08-12

Gateway (v1.17.166)

• Stop rejecting the Codex seat backend our own CLI pins (#1857)

Anyray Connect (v0.11.139)

• Make the scheduler suppression survive being killed mid-apply (#1859)

Also updated: Docs.

v1.10.260

Released 2026-08-12

Anyray Connect (v0.11.138)

• Find the VS Code server's own launcher, and stop telling a remote seat to install one (#1858)

Also updated: Docs.

v1.10.259

Released 2026-08-12

Gateway (v1.17.165)

• Report distinct attributed users, so "0 seats" stops meaning two different things (#1851)

Console (v0.4.120)

• Put the enrollment pages on the portal's design system, and close three framing gaps (#1852)

Anyray Connect (v0.11.137)

• Quieten the DEFAULT enrollment, and prove the Windows policy lane on a real host (#1856)
• Give Windows a refresh policy lane that can actually run (#1855)
• Stop one developer's identity from standing in for the whole fleet (#1853)

Also updated: Shared libraries, Docs.

v1.10.258

Released 2026-08-12

Gateway (v1.17.164)

• Close RFC 0016's open questions, and stop an opt-out latching forever (#1848)
• Let Anyray author endpoint policies without a client upgrade (RFC 0016) (#1846)

Also updated: Console, Anyray Connect, Docs.

v1.10.257

Released 2026-08-12

Anyray Connect (v0.11.134)

• Don't write the login items an EDR quarantines when Fleet will drive refresh (#1845)

Also updated: Docs.

v1.10.256

Released 2026-08-12

Gateway (v1.17.163)

• Restore the Output button, surface policy logic, and fix a no-op remediation (#1842)
• Name why a machine's compliance can't be joined, instead of claiming it isn't enrolled (#1841)

Console (v0.4.118)

• Hand out the enrollment LINK, not a curl one-liner (#1844)

Also updated: Docs.

v1.10.255

Released 2026-08-11

Optimizer (v0.3.112)

• Name anyray_retrieve in the mask marker (#1838)

Anyray Connect (v0.11.133)

• Say WHY the control plane was unreachable, not just that it was (#1840)
• Accept the short /i/<code> enrollment URL in --enroll and --sso (#1839)

Also updated: Docs.

v1.10.254

Released 2026-08-11

Optimizer (v0.3.111)

• Count the tool catalog toward the mask window-fill gate (#1836)

Anyray Connect (v0.11.132)

• Give every lossy hook trim a way back, not just digests (#1837)

Also updated: Docs.

v1.10.253

Released 2026-08-11

Gateway (v1.17.162)

• Name the endpoint-control version skew that blanks per-user machine compliance (#1828)

Optimizer (v0.3.110)

• Pair the mask fill gate with an absolute token floor (#1835)
• Only mask observations once the context is filling (#1834)

Anyray Connect (v0.11.131)

• Enroll from the browser: sign in first, then one command (RFC 0015 P0/P2/P3) (#1822)
• Bound MCP output and keep Claude retrieval-only (#1832)
• Bound every MCP tool result under the host's ceiling (#1831)

Also updated: Console, Docs.

v1.10.252

Released 2026-08-11

Console (v0.4.116)

• Make both end-point surfaces pop-ups off the Users page (#1827)

Also updated: Docs.

v1.10.251

Released 2026-08-11

Gateway (v1.17.161)

• Expose policy logic, remediation code, and opt-in script output (#1824)

Docs

• Refuse to boot a shipped image with no store, and write down what the rollout actually reaches (#1821)

Also updated: Console.

v1.10.250

Released 2026-08-11

Gateway (v1.17.160)

• Put machine compliance on the Users page, under each user (#1818)

Also updated: Console, Docs.

v1.10.249

Released 2026-08-11

Gateway (v1.17.159)

• Make cooloff escalation session-wide, not per-replica (#1820)
• Stop corrupting structured tool output, stale KEEP pins, and 15-min holds (#1815)
• DELETE /admin/endpoint-fleet retires the 0054 fleetdm config (RFC 0014 phase F) (#1810)

Console (v0.4.113)

• Hide Cockpit from the sidebar (#1809)

Docs

• Fix the endpoint-governance page after the hosted-placement removal (#1816)
• Drop the Anyray-hosted endpoint-control placement (#1814)
• Reconcile endpoint pages with the RFC 0014 client-operated surface (#1811)

Also updated: Optimizer, Anyray Connect, Shared libraries.

v1.10.248

Released 2026-08-11

Gateway (v1.17.158)

• Self-heal local-lane enrollment and org gateway on lane changes (RFC 0014 §11 F3/A5) (#1808)

Also updated: Shared libraries, Docs.

v1.10.247

Released 2026-08-11

Gateway (v1.17.157)

• Gate unattended apply on having an applier, not on being compose (#1804)

Also updated: Console, Docs.

v1.10.246

Released 2026-08-11

Gateway (v1.17.156)

• Resolve the end-point fleet through the in-deployment endpoint-control (RFC 0014) (#1803)

Also updated: Console, Docs.

v1.10.245

Released 2026-08-10

Gateway (v1.17.155)

• Let end-point evidence be deleted, and say where it lives (#1790)
• See the managed keys that switch our own hook lane off (#1794)

Anyray Connect (v0.11.128)

• Say why endpoint enrollment was rejected, not just the status (#1795)

Also updated: Docs.

v1.10.244

Released 2026-08-10

Gateway (v1.17.154)

• Give a migrated org its end-point view back (#1786)

Optimizer (v0.3.108)

• Say that the holdout panel is per-replica, not the experiment (#1791)

Console (v0.4.110)

• Optional --user alongside --team on the shared invite command (#1792)
• Optional --team on the shared invite command (#1788)

Anyray Connect (v0.11.127)

• Drop bundled npm from the vendor images; unescape the plist URL in writer order (#1784)

Also updated: Docs.

v1.10.243

Released 2026-08-10

Gateway (v1.17.153)

• One shared command that installs and configures the end-point agent (#1737)
• Fleet usage cockpit with per-client, per-user, and per-team attribution (#1760)
• Bill no-evidence saved tokens at the fresh input rate (#1770)
• Make a fleet revert stick, and stop it reading as a broken machine (#1765)
• Give a keyless optimizer its shared config store, and say when it has none (#1774)
• Enable context management for Copilot Claude (#1763)

Optimizer (v0.3.107)

• Preserve Codex 0.147 namespace tools (#1766)

Console (v0.4.109)

• Custom date range picker on the Home page (#1769)

Anyray Connect (v0.11.126)

• Stop a healthy BYO upstream reading as unknown when LiteLLM never names itself (#1781)
• Build the tarball on pack, so publish-connect stops failing (#1779)
• Make anyray_search answer phrase queries instead of losing to grep (#1776)

Docs

• Shorten OpenClaw, desktop-apps, Copilot, OpenCode, and Cursor pages (#1780)
• Document the install footprint, and stop tables shredding code ids (#1778)

Also updated: Shared libraries.

v1.10.242

Released 2026-08-10

Optimizer (v0.3.106)

• Show strategy examples as a diff, so devs can see what is kept (#1761)

Docs

• Correct the Kubernetes availability page, and document output_externalize (#1758)
• Rename thinking_trim's display name to "Thinking replay trim" (#1759)

Also updated: Gateway, Console, Anyray Connect, Shared libraries.

v1.10.241

Released 2026-08-10

Maintenance release: no application component changed.

v1.10.240

Released 2026-08-09

Gateway (v1.17.151)

• Ship native Anyray Fleet branding (#1742)

v1.10.239

Released 2026-08-09

Optimizer (v0.3.105)

• Cut thinking_trim on externalization, not exact containment (#1739)

Also updated: Docs.

v1.10.238

Released 2026-08-09

Gateway (v1.17.150)

• Read Codex 0.147's Responses envelope, which had gone dark to the optimizer (#1738)
• Take the console dashboard off the hot-path pool, share it across replicas, and fold nine panels into one scan (#1736)

Anyray Connect (v0.11.123)

• Migrate claude.ai org-managed Claude Desktop config through the 3P switch (#1651)
• Stop doctor reading a healthy BYO upstream as a failed auth probe (#1735)

Also updated: Shared libraries, Docs.

v1.10.237

Released 2026-08-09

Optimizer (v0.3.104)

• Scope thinking_trim's error-turn skip to the current loop (#1733)

Anyray Connect (v0.11.122)

• Own an MCP registration by its argv tail, not its binary path (#1732)

v1.10.236

Released 2026-08-09

Optimizer (v0.3.103)

• Restore the conversation cache breakpoint for thinking_trim (#1730)

v1.10.235

Released 2026-08-09

Maintenance release: no application component changed.

v1.10.234

Released 2026-08-09

Gateway (v1.17.149)

• Stop a holdout turn erasing session pins, and clear a forgeable session id (#1726)
• Forward the verified session so the holdout actually samples sessions (#1725)
• Restore Codex Responses optimizations (#1718)
• Measure 30% gross cost objective (#1706)

Optimizer (v0.3.102)

• Make holdout fraction bound request share, not cohort-key count (#1722)
• Keep thinking on a final assistant turn (thinking_trim) (#1712)

Also updated: Console, Shared libraries, Docs.

v1.10.233

Released 2026-08-09

Gateway (v1.17.148)

• Auto-identify and auto-fix a dark hook lane (#1710)
• Self-heal the shared config store, and stop logging pg connection detail (#1711)

Also updated: Optimizer, Anyray Connect, Shared libraries, Docs.

v1.10.232

Released 2026-08-09

Optimizer (v0.3.100)

• Guard evidence that survives window rolls (#1708)
• Guard adapts to traffic volume and relapse history (#1704)

Docs

• Describe savings tiers as measured, not tail-only (#1705)

v1.10.231

Released 2026-08-08

Maintenance release: no application component changed.

v1.10.230

Released 2026-08-08

Gateway (v1.17.147)

• Decline the Cursor double-hook phantom leg: evidence-gated, all version bands verified (#1702)
• Thinking_trim: drop replayed thinking blocks from history (#1701)
• First-appearance shadow measurement: evidence-verified fresh-region counterfactual (#1700)

Optimizer (v0.3.99)

• Derived guard minFired can never be non-finite (#1703)

Also updated: Console, Shared libraries, Docs.

v1.10.229

Released 2026-08-08

Gateway (v1.17.146)

• Strip savedTier from optimizer wire decisions (#1698)
• Bind the connect identity tenant on every recording /connect route (#1696)

Optimizer (v0.3.98)

• Census replayed thinking-block mass by loop position (#1699)

v1.10.228

Released 2026-08-08

Gateway (v1.17.145)

• Credit provably never-cached trims; complete per-strategy attribution (#1694)

Also updated: Optimizer, Anyray Connect, Shared libraries.

v1.10.227

Released 2026-08-08

Maintenance release: no application component changed.

v1.10.226

Released 2026-08-07

Maintenance release: no application component changed.

v1.10.225

Released 2026-08-07

Docs

• Lead with Infrastructure-as-Code; drop the one-click template (#1686)
• Stop promising a version bound the template cannot keep (#1685)

v1.10.224

Released 2026-08-07

Gateway (v1.17.144)

• Make the spend-schema boot gate explicitly fatal (#1680)
• Move fleetd installers to the shared DB, freeing the PVC (#1677)
• A liveness signal, and a drain the LB actually honors (#1674)

Optimizer (v0.3.96)

• Move the runtime config to the shared DB, so peers agree (#1678)

Also updated: Shared libraries, Docs.

v1.10.223

Released 2026-08-07

Gateway (v1.17.143)

• Stop publishing Anyray source in the public images and npm package (#1676)

Also updated: Optimizer, Anyray Connect.

v1.10.222

Released 2026-08-07

Maintenance release: no application component changed.

v1.10.221

Released 2026-08-07

Anyray Connect (v0.11.118)

• Give the installed binary a name, and spawn children from the launcher (#1667)

v1.10.220

Released 2026-08-07

Gateway (v1.17.142)

• Persist the 1h cache-write subset so a row's cost is re-derivable (#1663)
• Price 1-hour cache writes at 2x, and capture the TTL split (#1659)

Also updated: Console, Shared libraries, Docs.

v1.10.219

Released 2026-08-06

Gateway (v1.17.141)

• Bound the 429 body read that classifies a long-context refusal (#1655)
• Price a decision's already-cached and never-cached trims apart (#1646)

Also updated: Optimizer, Shared libraries, Docs.

v1.10.218

Released 2026-08-06

Gateway (v1.17.140)

• Surface Anthropic's long-context credits 429 instead of overflowing it (#1652)
• Clamp max_tokens down to the model's output ceiling on the Anthropic org lanes (#1640)

Anyray Connect (v0.11.117)

• Write the openclaw plugin hash separator as an escape, not a raw NUL (#1653)
• Scaffold the Anyray OpenClaw provider plugin (#1641)

Also updated: Docs.

v1.10.217

Released 2026-08-06

Gateway (v1.17.139)

• Fix hook savings strategy attribution (#1649)
• Bound the Postgres pools so a DB outage fails fast, not as a bare 500 (#1642)

Anyray Connect (v0.11.116)

• Seed a routed fallback model alongside OpenClaw's primary seed (#1638)
• OpenClaw tool adapter: org API-key lane, cache-retention seed, beta-header restore (#1631)

Shared libraries

• Gzip before encrypting stored content (v3 blobs) (#1645)
• Cap trace fields at 25k chars, not 100k (#1644)

Also updated: Docs.

v1.10.216

Released 2026-08-06

Gateway (v1.17.138)

• Stop the false-alarm provider-key probe on subscription-only fleets (#1630)
• Measure cooloff re-arm rate to calibrate SESSION_COOLOFF_MS (#1629)
• Give the anth- session lane a tool_use discriminator (#1627)
• Linear trailing-slash strip on the fleetUrl path (#1632)
• Stop cutting streaming turns at the 20s shutdown drain (#1621)

Optimizer (v0.3.93)

• Usage date-range picker; client-key status modals; copy trims (#1557)

Anyray Connect (v0.11.115)

• Stop doctor claiming an org provider key exists on a 401 (#1624)

Docs

• Private load balancer on AWS, deploy draining on Railway (#1625)

Also updated: Console.

v1.10.215

Released 2026-08-05

Gateway (v1.17.137)

• User USD budget never hard-blocks subscription seats (#1614)

Anyray Connect (v0.11.114)

• Endpoint-v2 surface gates on Anyray's Fleet, not any fleetd (BC hardening) (#1617)

Docs

• Document the 3P vs claude.ai org-management boundary (#1616)

Also updated: Console.

v1.10.214

Released 2026-08-05

Gateway (v1.17.136)

• Copy the endpoint-policies package into the image build (#1613)
• Retention-prune the machine-seats join table (BC-audit follow-up) (#1610)

Anyray Connect (v0.11.113)

• Gate the endpoint-v2 client surface on fleetd, not just enrollment (#1612)

v1.10.213

Released 2026-08-05

Gateway (v1.17.135)

• Webhook interval 1h, threaded through gitops + pack + sync (#1602)
• Multi-org end-point fleet view via metering rollups (endpoint v2 phase E) (#1599)
• Gateway-native pack sync + fleet management console surface — endpoint v2 phase C (#1600)

Anyray Connect (v0.11.112)

• Probe with the body dialect the endpoint expects (#1609)
• The Claude Desktop export step in installer form (#1607)
• Revert removes the Copilot sign-in we minted, and say so in docs (#1604)
• Daemonless runtime — retire resident units behind a fleetd gate, wire directives + machine report (endpoint v2 phase F) (#1601)

Docs

• Plain-voice the style guides that were seeding the em dashes back (#1608)
• Plain-voice the sign-in note that landed in #1604 (#1606)
• Drop em dashes and AI cadence across the product docs (#1605)

Also updated: Console.

v1.10.212

Released 2026-08-05

Gateway (v1.17.134)

• Level-triggered fleet sweep, machine↔seat join (0055), directives over heartbeat: endpoint v2 phase B (#1594)

Console (v0.4.101)

• See and fix an MDM-managed Claude Code host (#1593)

Anyray Connect (v0.11.111)

• Carry the editor identity in the block, so old gateways work too (#1598)
• Report a managed-settings value that outranks the route we wrote (#1597)
• Probe the wire the model actually uses; let our own sign-in beat a stale org lane (#1596)

Also updated: Shared libraries, Docs.

v1.10.211

Released 2026-08-05

Maintenance release: no application component changed.

v1.10.210

Released 2026-08-05

Gateway (v1.17.133)

• Send the editor identity CAPI demands with an exchanged token (#1591)
• Fleet failed-policy webhook receiver: endpoint self-healing loop (#1589)
• Mark the Copilot mint cache key as a false-positive password hash (#10) (#1584)

Console (v0.4.100)

• End-point fleet card on Connect coverage (#1590)

Anyray Connect (v0.11.110)

• A full --revert must not leave a watcher running (#1588)
• Stop installing the refresh services on seats that cannot lapse (#1585)
• Reap orphaned key-refresh units, pin the persistence-swap gate (#1583)

Docs

• Show --revert in installer one-liner form (#1587)

Also updated: Shared libraries.

v1.10.209

Released 2026-08-05

Console (v0.4.99)

• Docs(desktop),feat(enroll): warn about MDM-managed Claude Desktop before it bites (#1577)

Anyray Connect (v0.11.109)

• Write a forwardable IT handoff when MDM owns Claude Desktop (#1582)

Also updated: Docs.

v1.10.208

Released 2026-08-04

Anyray Connect (v0.11.108)

• Verify a new Copilot sign-in through the gateway, not direct CAPI (#1581)
• Point BOTH CLI-app sign-ins at copilot-login, not just the file one (#1580)
• Read the Copilot CLI Keychain item under the name it actually has (#1579)

v1.10.207

Released 2026-08-04

Anyray Connect (v0.11.107)

• Mint our own Copilot sign-in: the OAuth app decides the models (#1578)
• Report every setup blocker at once, and route IT-owned ones to the admin (#1575)
• A migration that half-worked must not report total failure (#1570)

Also updated: Docs.

v1.10.206

Released 2026-08-04

Optimizer (v0.3.92)

• Protect actively-edited files from both eliders (#1572)

Also updated: Anyray Connect, Docs.

v1.10.205

Released 2026-08-04

Anyray Connect (v0.11.105)

• Make Claude Desktop lifecycle MDM-safe and minimal (#1569)

Also updated: Docs.

v1.10.204

Released 2026-08-04

Gateway (v1.17.132)

• Editor-style CAPI token exchange on the Copilot carrier lane (#1573)
• Stop elision-marker bait for retrieve-incapable agents (#1568)
• Persist automatic pseudonym secret (#1565)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries, Docs.

v1.10.203

Released 2026-08-04

Optimizer (v0.3.90)

• Code_graph never outlines actively-edited files (#1564)

Also updated: Docs.

v1.10.202

Released 2026-08-04

Anyray Connect (v0.11.103)

• Read the seat model catalog via the enrolled gateway first (#1567)
• Session-driven self-heal on remote machines (#1556)

Also updated: Docs.

v1.10.201

Released 2026-08-04

Gateway (v1.17.131)

• Open the Copilot plan-host label set: template, not enum (#1562)

Also updated: Anyray Connect, Docs.

v1.10.200

Released 2026-08-04

Anyray Connect (v0.11.101)

• Restore Claude Code's native 1M windows, and deliver it (#1560)

Also updated: Docs.

v1.10.199

Released 2026-08-04

Anyray Connect (v0.11.100)

• Follow the seat's plan-specific Copilot API host (#1561)

Also updated: Docs.

v1.10.198

Released 2026-08-04

Anyray Connect (v0.11.99)

• Self-repair Claude Code direct Bedrock/Vertex mode (was: warn only) (#1558)

Also updated: Docs.

v1.10.197

Released 2026-08-04

Anyray Connect (v0.11.98)

• Apply the same per-key policy rule on Windows (#1559)
• Write the pinned seat model's token caps too (#1555)
• Gate Claude Desktop's managed-policy refusal on contested keys (#1554)

v1.10.196

Released 2026-08-04

Anyray Connect (v0.11.97)

• anyray-connect models: the Copilot model picker the CLI can't be (#1553)

Also updated: Docs.

v1.10.195

Released 2026-08-04

Anyray Connect (v0.11.96)

• Validate the seat startup model with a live chat probe through the lane (#1551)

Docs

• Cover TLS-inspecting proxies breaking npm/npx (#1549)

v1.10.194

Released 2026-08-04

Gateway (v1.17.130)

• Revert undici to 7.29.0: the 8.x major crossed the dependabot hold (#1547)
• TTL-aware session-cooloff release, capped by the routed provider (#1524)

Optimizer (v0.3.89)

• Never bait a tool call on a turn the model cannot make one (#1525)

Anyray Connect (v0.11.95)

• Read ~/.copilot/config.json as raw text: the CLI writes a JSONC banner (#1548)
• Heal ambient hook and MCP drift (#1526)

Docs

• Add the LiteLLM front-topology integration page (#1522)

Also updated: Shared libraries.

v1.10.193

Released 2026-08-04

Console (v0.4.97)

• Point the login admin-key hint at every install path (#1521)

v1.10.192

Released 2026-08-03

Anyray Connect (v0.11.94)

• Start the Copilot CLI seat lane on the plan's own default model (#1519)

Also updated: Docs.

v1.10.191

Released 2026-08-03

Gateway (v1.17.129)

• Price saved tokens at the cache tier they would have hit (#1486) (#1513)
• Name the provider in a relayed upstream 5xx error body (#1515)

Anyray Connect (v0.11.93)

• Migrate a Claude-only hand-rolled OpenCode route onto the managed lane (#1518)
• Read the Copilot CLI's own ~/.copilot/config.json seat store (#1517)
• Make the Copilot CLI seat hold readable off macOS (#1514)

Also updated: Optimizer, Console, Shared libraries, Docs.

v1.10.190

Released 2026-08-03

Maintenance release: no application component changed.

v1.10.189

Released 2026-08-03

Gateway (v1.17.128)

• Stop publish-chart shipping a stale chart, stop mislabelling updater 403s (#1497)

v1.10.188

Released 2026-08-02

Gateway (v1.17.127)

• Opt into the context-management beta on the OAuth passthrough lane (#1496)

Docs

• Stamp published OpenAPI spec with the release version (#1495)
• Trim strategy and install pages, fold Evaluation into Guardrails (#1494)

v1.10.187

Released 2026-08-02

Console (v0.4.95)

• Apply the Extra capacity write allowance at the window aggregate (#1493)

v1.10.186

Released 2026-08-02

Console (v0.4.94)

• Weight cached tokens in the Extra capacity seat base (#1492)

Anyray Connect (v0.11.92)

• Unify auto-update across npx and standalone installs (#1491)

Docs

• Match the template's new defaults (#1490)

v1.10.185

Released 2026-08-02

Gateway (v1.17.126)

• Make the soft-update applier pluggable, not compose-only (#1489)
• Durable per-seat connect presence on every credential call (#1477)
• Move the per-user connect-health window to the shared spend DB (#1487)
• Replay settled command digests (#1485)
• Move the connect-health window to the shared spend DB (#1484)
• Correct LiteLLM cache token accounting (#1479)
• Partial CCR retrieval: slice/grep on anyray_retrieve, chunk-indexed ranged recall (#1469)

Optimizer (v0.3.87)

• Mint profitable observation suffixes (#1482)

Console (v0.4.93)

• Surface fleet-policy compliance on Connect coverage (#1488)
• Split the Usage "Total tokens" bar into cached / fresh / saved (#1472)

Anyray Connect (v0.11.91)

• Report fleet-policy compliance in connect-health events (#1483)
• Enrollment-first wizard and quieter CLI output (#1476)
• Report the offline fleet-reconcile plan in doctor (#1481)
• Reap leftover proxy service after a failed post-commit uninstall (#1475)
• Verify BYO upstreams and bind user identity (#1474)
• Stop reporting every unrouted Copilot Chat as the same failure (#1471)

Docs

• Fix ImageTag drift: template pins immutable vX.Y.Z, rejects latest (#1478)
• Reconcile strategy off-by-default annotations + add OpenRouter/Nebius provider table rows (#1467)

Also updated: Shared libraries.

v1.10.184

Released 2026-08-02

Maintenance release: no application component changed.

v1.10.183

Released 2026-08-02

Anyray Connect (v0.11.90)

• Quit macOS apps by bundle id; surface API error messages (#1466)

v1.10.182

Released 2026-08-01

Maintenance release: no application component changed.

v1.10.181

Released 2026-07-31

Gateway (v1.17.125)

• Hook calls never touch session pin state (#1453 follow-up) (#1455)

Anyray Connect (v0.11.89)

• Name the sign-in in Desktop migration messaging (#1464)

Docs

• State the required order before anyray-connect migrate (#1462)
• Trim connect operate pages and dedupe install rollout sections (#1460)

v1.10.180

Released 2026-07-31

Maintenance release: no application component changed.

v1.10.179

Released 2026-07-31

Gateway (v1.17.124)

• Runtime settings on the shared Postgres (RFC 0011 A2) (#1454)
• Heartbeat reports durable-store size for storage runway (#1459)
• Unblock relevance_filter on the hook's reversible read branch (#1449 follow-up) (#1453)
• Default routing config on the shared Postgres (RFC 0011 A1) (#1445)
• Close the same two write-vs-read races in four config stores (#1452)

Docs

• Railway volume-fill sweep + k8s Postgres sizing warning (#1458)
• Document upgrade downtime and fix a non-existent values key (#1441)

Also updated: Optimizer, Shared libraries.

v1.10.178

Released 2026-07-30

Gateway (v1.17.123)

• Recover elider savings lost to the Jul 29 drop: rotation-proof retrieve latch + hook medium band (#1449)
• Surface seat-lane usage instead of "no user activity" (#1447)

Also updated: Optimizer, Console, Anyray Connect, Shared libraries, Docs.

v1.10.177

Released 2026-07-30

Gateway (v1.17.122)

• Agent key budgets spend real dollars, and are settable in the UI (#1443)

Also updated: Console, Anyray Connect, Docs.

v1.10.176

Released 2026-07-30

Gateway (v1.17.121)

• Block spend ceilings with 402, show budgets on Usage (#1439)
• Hook digest traces match the strategy filter; hook savings meter rides durable rows (#1437)

anyray-connect CLI (v0.11.86)

• Add version update check (#1436)
• Read prompts from a real terminal, not the /dev/tty clone (#1434)

Also updated: Console, Shared libraries, Docs.

v1.10.175

Released 2026-07-30

Maintenance release: no application component changed.

v1.10.174

Released 2026-07-30

Gateway (v1.17.120)

• Direct routing with stable key heartbeat (#1429)
• Bootstrap pins for cached LiteLLM chat (#1431)

anyray-connect CLI (v0.11.85)

• Stop macOS background-item notification spam, and clean up what earlier builds left behind (#1430)

Docs

• Name the fixed connect version, not the last broken one (#1432)

Also updated: Optimizer.

v1.10.173

Released 2026-07-30

Gateway (v1.17.119)

• Alarm on gateway-origin 5xx, not provider-relayed ones (#1428)
• RFC 0010 P1: admin-owned tool policy (#1165, #1166) + doctor --quick (#1416)

anyray-connect CLI (v0.11.83)

• Restore ENABLE_TOOL_SEARCH on the org-key shell lane (#1427)

Also updated: Console, Shared libraries, Docs.

v1.10.172

Released 2026-07-30

Maintenance release: no application component changed.

v1.10.171

Released 2026-07-29

Gateway (v1.17.118)

• End the stale client-key 401 loop, and make it name itself (#1425)
• Client-observed VS Code turn stages, end to end (#1424)

Optimizer (v0.3.83)

• Read the litellm message-level cache_control breakpoint (#1426)

Also updated: anyray-connect CLI, Shared libraries.

v1.10.170

Released 2026-07-29

anyray-connect CLI (v0.11.81)

• Coalesce streamed text parts into fewer broker crossings (#1422)

v1.10.169

Released 2026-07-29

Gateway (v1.17.117)

• Stop fleet telemetry losing rounds, miscounting requests, and inventing spikes (#1413)

anyray-connect CLI (v0.11.80)

• Memoize the Copilot token count the prompt builder repeats (#1421)
• Stop the reconcile tick bouncing a draining daemon (#1417)
• Persist the stable launcher path, never a pruned version (#1412)

Also updated: Shared libraries.

v1.10.168

Released 2026-07-29

Gateway (v1.17.116)

• Make tool search route-aware, enable it fleet-wide (#1404)

anyray-connect CLI (v0.11.79)

• Stop the per-token-count SecretStorage read stalling remote Copilot turns (#1418)
• Write the stable bin path into persistent registrations (#1415)
• Stop the log digest collapsing distinct file paths (#1409)
• Stop the unit repair booting out a draining daemon (#1408)

Docs

• Document the evaluation rigor behind the quality claim (#1411)
• Backfill per-component bullets for v1.10.111–v1.10.167 (#1410)
• Render the docs changelog per component from the commit log (#1407)

v1.10.167

Released 2026-07-29

Optimizer (v0.3.82)

• Stop relevance_filter re-writing bytes the provider already cached (#1403)

anyray-connect CLI (v0.11.78)

• Drain in-flight requests before a self-update bounce (#1405)
• Stop third-party mode silently narrowing Claude Desktop (#1406)

Docs

• Tighten the key-refresh daemon page (#1400)

v1.10.166

Released 2026-07-29

Docs

• Pin every npx anyray-connect example to @latest (#1402)

Also updated: anyray-connect CLI.

v1.10.165

Released 2026-07-28

Gateway (v1.17.115)

• Stop raw NUL bytes making source files unreviewable (#1401)
• Per-user USD spend budgets, enforced end to end (#1385)
• Never re-trim anyray_retrieve/anyray_recall results (#1390)

Console (v0.4.88)

• Complete deferred work when the app quits, not when the user remembers (#1391)

anyray-connect CLI (v0.11.76)

• Make remote and ephemeral machines first-class (#1397)
• Stop Remote-SSH boxes silently routing to a dead org lane, and make doctor prove it (#1395)
• Heal a rejected key from the gateway's answer, not a timer (#1394)
• Preserve existing tool configurations (#1393)
• Daemon lifecycle: no-op bounce skip, graceful drain, supervisor windows, bind retry (#1388)
• Daemon error-path resilience (restart 502s, torn-read 401s, wake-fragile refresh) (#1387)

Docs

• Sync stale references to code (#1398)
• Add CLI commands + AI agent enrollment pages, fix stale npx guidance (#1392)

Also updated: Shared libraries.

v1.10.164

Released 2026-07-28

Console (v0.4.87)

• Revert "feat(console): per-user budget modal on the Users roster (UI only)"
• Per-user budget modal on the Users roster (UI only)

v1.10.163

Released 2026-07-27

Gateway (v1.17.114)

• Roll the DevCert forward, and make revocation the offboarding control (#1375)
• Self-updating binary, real version reporting, fleet view (#1377)

anyray-connect CLI (v0.11.74)

• Full Claude Desktop migration onto Anyray (#1380)
• Make history restore work on Windows (#1373)

Also updated: Console, Docs.

v1.10.162

Released 2026-07-27

Optimizer (v0.3.81)

• Fold repeated grep hits in command_digest instead of restating them (#1372)

anyray-connect CLI (v0.11.73)

• Redirect Cursor's built-in Read (its tool_input spells the target targetFile) (#1370)
• Stop the claude carrier from re-optimizing (and re-billing) Cursor's tool outputs (#1371)

Also updated: Docs.

v1.10.161

Released 2026-07-27

anyray-connect CLI (v0.11.72)

• Run the Anyray provider in Copilot Chat's extension host (#1369)

Also updated: Docs.

v1.10.160

Released 2026-07-27

anyray-connect CLI (v0.11.71)

• Redirect Cursor's bulky built-in Read/Grep to the Anyray tools (#1366)
• Never register an OS supervisor from a redirected HOME (#1368)
• Deliver the 1M window through the [1m] alias, not a dead env key (#1367)
• Warn when an already-open VS Code makes the copilot-cli block a no-op (#1362)

Also updated: Gateway, Optimizer, Console, Docs.

v1.10.159

Released 2026-07-26

Gateway (v1.17.112)

• Keep Claude Code's real context window behind the gateway (#1348)
• Attribute a mid-stream upstream close to the provider (#1347)
• Match the Claude 5 family in three model-id matchers (#1346)

anyray-connect CLI (v0.11.69)

• Lower the bundled VS Code extension floor to 1.121 (#1345)
• Seat-billed gateway lane for GitHub Copilot CLI (#1343)

Docs

• Add the three Remote-SSH gotchas that block the model picker (#1344)

Also updated: Optimizer.

v1.10.158

Released 2026-07-26

Gateway (v1.17.111)

• Pin relevance_filter's KEEP verdict, not just its TRIM (#1340)
• Customer health cockpit (#1332)
• Add the missing claude-opus-5 OFFICIAL_PRICING entry (#1339)
• Drop the provider-direct fallback lane, keep refresh-only (#1334)
• Pin anyray_retrieve results against context_dedupe re-collapse (#1329)
• Adapt Codex context budget to model window (#1327)

Optimizer (v0.3.78)

• Stop a no-verdict turn from resetting the pin-thrash guard (#1342)
• Honor the claimedSpans mutex in relevance_filter (#1337)

anyray-connect CLI (v0.11.68)

• Restore the Claude Desktop sidebar, and archive history for recall (#1338)
• Explain Claude Desktop's third-party profile switch (#1335)

Also updated: Shared libraries, Docs.

v1.10.157

Released 2026-07-26

Gateway (v1.17.110)

• Attribute Anthropic upstream failures (#1322)

Optimizer (v0.3.77)

• Disable window budget by default (#1324)

Console (v0.4.85)

• Add SDK usage examples to the Enroll agent modal (#1317)

anyray-connect CLI (v0.11.67)

• Catch stale refresh-proxy exports after revert (#1323)
• Write the Cursor steering rule into the repo automatically (#1321)
• Relay slow upstream errors in refresh-only mode (#1316)

Docs

• Refresh example model ids to gpt-5 / claude-sonnet-5 (#1319)

v1.10.156

Released 2026-07-26

Maintenance release: no application component changed.

v1.10.155

Released 2026-07-26

Gateway (v1.17.109)

• managed --print --out + zero-install MDM commands on all three OSes (#1309)
• Guard the Codex client-ceiling margin, document the calibration shift (#1303)

anyray-connect CLI (v0.11.66)

• Verify Claude Desktop's config seam locally instead of a hardcoded release list (#1311)
• Seamless Cursor steering: default the anyray context tools (#1310)
• Route the standalone Copilot CLI through the gateway (BYOK) (#1307)

Also updated: Optimizer, Console, Docs.

v1.10.154

Released 2026-07-26

Maintenance release: no application component changed.

v1.10.153

Released 2026-07-25

Gateway (v1.17.108)

• Bound Codex context before compaction (#1301)

Also updated: Optimizer, Docs.

v1.10.152

Released 2026-07-24

Gateway (v1.17.107)

• Gateway error-source headers, standalone connect installer default, per-user caps (#1293)
• Correct 4xx/5xx classification and stop leaking error text on the gateway (#1289)
• Per-user connect-health + remediation directive foundation (RFC 0009 §4) (#1292)
• Attribution-drift panel on the spend dashboard (#1211)
• anyray_search + anyray_read context-broker MCP tools (#1291)

Optimizer (v0.3.74)

• Clamp cache_control breakpoints to Anthropic's max of 4 (#1288)

Console (v0.4.83)

• Fix optimizer console rule editor and align strategy displays (#1297)
• Remove imported-usage section and retitle spend-connectors card (#1296)
• Role-gate enrollment surfaces, rework Add-user modal, drop user detail modal (#1281)

anyray-connect CLI (v0.11.65)

• Universal per-user OS scheduler for seamless ark_ key refresh (#1300)
• Register retrieval MCP on remote VS Code server over Remote-SSH (#1298)
• Accept --yes/-y as a no-op in the managed subcommand grammar (#1286)

Also updated: Shared libraries, Docs.

v1.10.151

Released 2026-07-24

Gateway (v1.17.106)

• Bump next to 15.5.21 in vercel cookbook (#1279)

anyray-connect CLI (v0.11.64)

• Quote Windows hook paths so Git Bash doesn't mangle them (#1285)
• BYO upstream key support for the OpenCode adapter (#1282)

Also updated: Docs.

v1.10.150

Released 2026-07-23

Gateway (v1.17.105)

• Stabilize the content session anchor against injected dates (#1278)
• Bootstrap decision-pins so the Copilot carrier stops busting its cache (#1277)

v1.10.149

Released 2026-07-23

Maintenance release: no application component changed.

v1.10.148

Released 2026-07-22

Gateway (v1.17.104)

• Preserve Copilot and Anthropic tool-result turns (#1274)
• Derive pin session for Copilot OpenAI-dialect lanes (#1276)
• Enforce user caps + key budgets on Copilot/Cursor carrier lanes (#1275)
• Derive pin session for Copilot subscription Messages lane (#1273)

Also updated: anyray-connect CLI, Docs.

v1.10.147

Released 2026-07-22

Gateway (v1.17.103)

• Fleet connect-health telemetry + monitoring (#1270)
• Meter VS Code optimize-only lane savings into the spend store (#1266)
• Optimize every Copilot turn: sidecar translation + decision-pin session for the VS Code lane (#1262)

Console (v0.4.82)

• Fix the no-SSO Add-user flow (#1265)
• Optimize native Cursor Team context and surface imported usage (#1251)

anyray-connect CLI (v0.11.61)

• BYO-upstream mode: per-user upstream keys (--upstream / --upstream-key) (#1267)
• Fully uninstall the local fallback proxy on --revert (#1264)
• Restore the DI profileKeyResolver dropped in #1261's merge (#1263)
• Faster fallback failover + proactive credential refresh (#1261)
• Cursor legacy-backup migration + idempotent VS Code handoff (#1259)

Docs

• Anthropic two-path rewrite + new Anyray Connect page (#1260)

Also updated: Optimizer, Shared libraries.

v1.10.146

Released 2026-07-22

Also updated: Docs.

v1.10.145

Released 2026-07-22

Console (v0.4.81)

• Catch bad form input before save instead of raw 400s or silent drops (#1250)

anyray-connect CLI (v0.11.60)

• Make the local fallback proxy opt-in again (off by default) (#1256)

Also updated: Docs.

v1.10.144

Released 2026-07-22

Gateway (v1.17.102)

• Raise request body cap 10→32 MiB (#1255)
• Enroll AI agents as first-class seat-exempt identities (#1243)
• Match OpenCode's single-underscore anyray_retrieve MCP tool (#1247)
• Surface paused optimization to customers + alert unreachable lapses (#1244)
• Label Cursor traces and group its sessions (#1223)
• Patch Next.js Dependabot alerts (#1241)

Console (v0.4.80)

• Show SSO "Connected" only for a live IdP connection (#1246)

anyray-connect CLI (v0.11.59)

• Daemon-side seamless client-key refresh (no mid-session 401) (#1253)
• Tolerate Windows fsync EPERM in atomic config writes (#1245)

Also updated: Optimizer, Docs.

v1.10.143

Released 2026-07-21

Gateway (v1.17.101)

• Anthropic seat-overflow lane: throttled seats replay over the org API key (#1235)

Also updated: Docs.

v1.10.142

Released 2026-07-21

Gateway (v1.17.100)

• Cap Anthropic seat throttle at five seconds (#1240)
• Optimize Copilot Responses requests (#1237)
• Resolve Dependabot alerts (js-yaml, protobufjs, brace-expansion) (#1234)

anyray-connect CLI (v0.11.58)

• Reject enrollment flags during revert (#1238)
• Fall back on transient gateway failures (#1236)
• Recover SSO with npx
• Clarify SSO refresh reconnect

Docs

• Refresh SSO enrollment page for new console Users UI (#1239)

v1.10.141

Released 2026-07-21

Maintenance release: no application component changed.

v1.10.140

Released 2026-07-20

Gateway (v1.17.99)

• Users page: streamlined UI + audit fixes (#1233)

Docs

• SSO enrollment audit + Kubernetes accordions (#1230)

Also updated: Console.

v1.10.139

Released 2026-07-20

Gateway (v1.17.98)

• Latch headerless Anthropic seat throttles (#1229)
• Show before/after request in Copilot optimize-hook traces (#1226)
• Don't reshape a passthrough body the optimizer didn't substantively change (#1224)

anyray-connect CLI (v0.11.57)

• Resolve VS Code launcher from the app bundle when not on PATH (#1225)
• Steer SSO orgs to --sso in doctor enrollment hints (#1227)
• Guide remote-devcontainer devs when the VS Code GUI is absent (#1228)

Also updated: Console.

v1.10.138

Released 2026-07-20

Gateway (v1.17.97)

• Route Copilot Claude /messages to GitHub's /v1/messages (#1222)

anyray-connect CLI (v0.11.56)

• Verify Claude Desktop 1.22209.3 for native local setup (#1220)

Docs

• Streamline "Before you install" on choose-your-setup (#1221)

Also updated: Console.

v1.10.137

Released 2026-07-20

Console (v0.4.76)

• Bake the gateway URL into the onboard login command (#1219)
• Carry runtime deps into the durable npx runtime (#1218)

Also updated: anyray-connect CLI, Docs.

v1.10.136

Released 2026-07-20

Gateway (v1.17.96)

• Preserve Claude subscription header shape (#1215)
• Latch Anthropic seat rate limits
• Optimizer-health dashboard: fleet + per-org charts, gross saved (#1212)

anyray-connect CLI (v0.11.53)

• Route CLI diagnostics to stderr (#1214)

Also updated: Console, Docs.

v1.10.135

Released 2026-07-20

Gateway (v1.17.95)

• Enforce requireSso on every human key path (#1183)
• Shareable (email-less) enrollment link (#1180)
• Service keys for agents/CI with per-key budgets (#1181)
• SCIM v2 provisioning + identity source/type enum (#1182)
• Consolidate Vertex @version model ids into one dashboard bucket (#1209)
• Derive Claude Code pin-session key from metadata.user_id (#1205)
• CLI-initiated SSO device-code login (#1161)
• Don't cool off optimization on non-body-reject upstream failures (#1179)
• Open-ended custom attribution properties (#1158)
• Widen /connect/policy with routing, team attribution, enabled tools (#1162)

Optimizer (v0.3.71)

• Pin-thrash guard: suppress busters when session pins keep missing (#1208)

Console (v0.4.74)

• SSO-aware Users onboarding for people & agents (#1171)

Shared libraries

• Correct cache-token metering + Vertex @version pricing on /v1/chat/completions (#1207)

Also updated: anyray-connect CLI, Docs.

v1.10.134

Released 2026-07-20

Gateway (v1.17.94)

• Adapt Claude seat concurrency after 429 (#1199)

v1.10.133

Released 2026-07-20

Gateway (v1.17.93)

• Unbreak optimizer-health rollup on stale spend view (#1178)
• Unbreak the Copilot BYOK lane on current VS Code (#1164)

Also updated: Optimizer, Console, anyray-connect CLI, Shared libraries, Docs.

v1.10.132

Released 2026-07-19

Gateway (v1.17.92)

• Honor Claude retry-after throttles (#1176)
• Don't count expired/revoked keys as brute-force guesses (#1170)
• Bill Cursor BYOK in-flight traffic as a subscription seat (#1160)
• OpenAI cached-input cache-read pricing + Codex passthrough hardening (#1159)

Console (v0.4.72)

• Assign console RBAC roles by SSO group (#1173)

anyray-connect CLI (v0.11.50)

• Put ~/.anyray/bin on PATH so anyray-connect runs after curl|sh (#1175)
• Inject client key past a passthrough seat OAuth in the fallback proxy (#1174)

Shared libraries

• Keep heuristic savings for content-free replay decisions (#1168)

Docs

• Restore fuller intro subtitle (#1169)
• Clarify subscription optimizer + MCP-unlocked retrieval (#1157)

v1.10.131

Released 2026-07-19

Maintenance release: no application component changed.

v1.10.130

Released 2026-07-18

Gateway (v1.17.91)

• Full optimization coverage and subscription hardening (#1142)
• Show client tool on request traces (#1139)
• Derive a session id for Claude Desktop so warm-turn optimization activates (#1140)

Console (v0.4.71)

• Show trace detail as a URL-addressable modal (#1130)
• Providers page redesign: brand-logo grid, per-provider credential modal (#1156)

Docs

• Reconcile, tighten, and restructure the docs rules (#1138)

Also updated: Optimizer, anyray-connect CLI, Shared libraries.

v1.10.129

Released 2026-07-18

Gateway (v1.17.90)

• Default bare /v1/models to anthropic so the picker populates (#1137)

v1.10.128

Released 2026-07-18

Gateway (v1.17.89)

• Return empty model list for a provider-less /v1/models (#1136)

Optimizer (v0.3.68)

• Survive key rotation and replica restarts, make recall reachable (#1134)

anyray-connect CLI (v0.11.48)

• Register Claude Desktop retrieval MCP in the Claude-3p config (#1135)

Also updated: Console, Shared libraries, Docs.

v1.10.127

Released 2026-07-18

Maintenance release: no application component changed.

v1.10.126

Released 2026-07-17

Gateway (v1.17.88)

• Optimizer-health bins on the meter payload + vendor-side ingest (#1129)
• Four correctness fixes surfaced by full-local simulation (#1128)

Docs

• Configure-page audit fixes, one-line subtitles, enrollment-page tightening (#1126)
• Note the issued SOC 2 Type I attestation (#1127)

Also updated: Optimizer, Shared libraries.

v1.10.125

Released 2026-07-17

Gateway (v1.17.87)

• Fix optimizer token savings pipeline (#1118)

Optimizer (v0.3.66)

• Unlock real-traffic savings: quantum 8, degradable context_compression, PCT on subscription, precision fixes (#1116)

anyray-connect CLI (v0.11.47)

• RFC 0007 P3: VS Code extension sign-in via the connect gate (#1124)
• Scale dev-key refresh-ahead window to the key TTL (#1123)
• Claude Desktop subscription pass-through via on-machine helper (#1120)

Docs

• Sync stale references after the automation sprint (#1119)

Also updated: Shared libraries.

v1.10.124

Released 2026-07-17

Gateway (v1.17.86)

• Capture optimizer outcome on spend rows and strategy timings on trace spans (#1103)

Optimizer (v0.3.65)

• Turn-aware clamp of client-set reasoning effort in reasoning_budget (#1104)

Console (v0.4.69)

• Self-healing: doctor --repair, refresh-path drift repair, failing-connector banner (#1105)

anyray-connect CLI (v0.11.46)

• RFC 0007 P2: fallback-proxy enrollment gate + fleet daemon artifacts (#1117)
• RFC 0007 P1: deferred enrollment on the Cursor prompt hook (#1115)
• RFC 0007 P0: deferred enrollment on the ACP launcher + fleet bootstrap file (#1114)
• Probe hardening from the first live runs: Desktop workflow YAML + Cursor composition matching (#1112)
• Claude Desktop release probe: verified-build list + auto-bump PR (verifies 1.22209.0) (#1110)
• Fleet artifacts beyond Claude Code: managed --tool jetbrains|shell (#1107)

Docs

• Tighten Copilot & Desktop pages, unlist connector/air-gapped pages (#1108)

Also updated: Shared libraries.

v1.10.123

Released 2026-07-16

Gateway (v1.17.85)

• Command-aware trim digest in the PostToolUse hook (#1094)

anyray-connect CLI (v0.11.45)

• Install the VS Code provider into every registered profile (#1102)
• Make the Cursor apply unconditional: built-in SQLite + queued write + shape probe (#1097)

Also updated: Docs.

v1.10.122

Released 2026-07-16

Gateway (v1.17.84)

• Add supported automatic fleet routing and spend visibility (#1088)
• Decide elider availability in code; retire the transcript-policy env (#1093)
• Sidebar Updates modal + end-to-end update-flow hardening (#1089)
• Stop fleet-wide preflight_blocked from the safe-unset transcript env (#1084)

anyray-connect CLI (v0.11.44)

• Close revert-symmetry + overwrite-safety gaps in config writers (#1083)

Docs

• Tighten pages and add cross-provider attribution section (#1071)

Also updated: Optimizer, Console, Shared libraries.

v1.10.121

Released 2026-07-16

Gateway (v1.17.83)

• Copilot seat-spend connector: meter unroutable Copilot seats (#1072)
• Seat-spend connector: pull per-seat usage for no-seam subscription lanes (#1069)

anyray-connect CLI (v0.11.43)

• Host JetBrains BYOK-seed plugin, auto-run installPlugins (#1076)
• Auto-write JetBrains AI Assistant BYOK config (connect side) (#1074)
• JetBrains ACP slice: auto-route Claude/ChatGPT seats in AI Chat (#1065)
• Retarget Windsurf adapter to Devin Desktop; drop dead Roo Code bridge (#1062)
• MacOS desktop --apply writes the config library (#1060)
• Cursor auto-config writes the exact override cells (#1057)
• Cursor recognizer hardening + Windows Claude Desktop desktop --apply (#1053)
• Auto-register the retrieval MCP server for Claude Desktop (#1052)

Docs

• Tighten desktop apps page + add settings screenshot (#1051)

Also updated: Shared libraries.

v1.10.120

Released 2026-07-15

Gateway (v1.17.82)

• Preserve cache economics across turns (#1040)
• Reversibility telemetry: markers emitted vs anyray_retrieve calls (#1034) (#1048)
• Retrieve/recall CLI verbs: human read path for the externalize loop (#1041)

Optimizer (v0.3.63)

• Keep embedding off the /v1/optimize hot path (#1046)
• Clamp retired strategy kinds out of persisted overrides on load (#1050)

anyray-connect CLI (v0.11.42)

• Add Claude Desktop Developer Mode + Apply-locally steps (#1043)
• Recognize Copilot subscription-seat installs in status/doctor (#1037)

Docs

• Drop the "Apps you can't route" section from desktop-apps (#1049)
• Tighten desktop-apps page for concision and accuracy (#1044)

Also updated: Console, Shared libraries.

v1.10.119

Released 2026-07-15

Gateway (v1.17.81)

• Don't count credential-less 401s toward the auth lockout (#1039)

Docs

• Tighten desktop-apps page, focus on Claude/Codex apps (#1038)

Also updated: Console.

v1.10.118

Released 2026-07-15

Gateway (v1.17.80)

• DB-timeout cache-flip incident: SG fix, stash budget, session cooloff (#1032)

anyray-connect CLI (v0.11.41)

• Make --revert actually revert (#1031)

Also updated: Shared libraries, Docs.

v1.10.117

Released 2026-07-15

Maintenance release: no application component changed.

v1.10.116

Released 2026-07-14

Gateway (v1.17.79)

• Soft/hard update split + unattended apply of soft updates (default on) (#1007)

anyray-connect CLI (v0.11.40)

• E2E both desktop apps + expand docs + force manual steps (#1029)

Also updated: Console, Docs.

v1.10.115

Released 2026-07-14

Gateway (v1.17.78)

• Trial lapse pauses optimization instead of blocking (passthrough) (#1013)

Optimizer (v0.3.62)

• Skip context compression for no-retrieve clients (#997)

Also updated: Docs.

v1.10.114

Released 2026-07-14

Gateway (v1.17.77)

• Deflake metering round-serialization test (#1021)

Optimizer (v0.3.61)

• KeepRecentToolMessages must not spare user pastes (relevance_filter + context_compression) (#1022)

v1.10.113

Released 2026-07-14

Optimizer (v0.3.60)

• Don't treat gpt-oss as an implicit-cache provider (#1020)

anyray-connect CLI (v0.11.39)

• Refresh Claude Code gateway key across idle sessions (SSO cold-start 401) (#1019)

Also updated: Docs.

v1.10.112

Released 2026-07-14

Maintenance release: no application component changed.

v1.10.111

Released 2026-07-13

Gateway (v1.17.76)

• Prevent optimizer growth in trace savings (#1005)
• Carry prompt_cache_key onto the Responses optimizer shadow (#1002)
• Capture device-capture conversation content (credential-guarded) (#998)
• Guard Claude Desktop retrieval strategies (#999)

Optimizer (v0.3.59)

• Skip scanning content suffix-safe strategies cannot edit (#996)

anyray-connect CLI (v0.11.37)

• Harden 0.11.36 after rollback (#1003)
• Release 0.11.35 (sudo-guard for agent lifecycle) (#1001)
• Refuse sudo for per-user agent lifecycle commands (#1000)

Docs

• Enrich all release entries with per-component change bullets (#1008)
• Add /changelog Releases page + auto-append on release cut (#1006)
• Dedicated API reference section + reference/guardrails/optimizer revisions (#995)

Also updated: Console, Shared libraries.

v1.10.110

Released 2026-07-13

Optimizer (v0.3.58)

• Disabled output_shaping by default to prevent agents flagging in-content advisory as prompt injection (#990)

Console (v0.4.63)

• Fixed brand logo rendering in the admin UI (#992)

Connect (v0.11.34)

• Fixed tunnel WebSocket upgrades on the capture-agent MITM path (#993)

v1.10.109

Released 2026-07-13

Gateway (v1.17.74)

• Exempt /v1/meter request bodies from managed WAF rules, fixing real metering 403 errors (#974)
• Sync gateway custom-host allowlist with device-capture agent origin hosts (#969)
• Route the device-capture agent proxy through the active network interface (#970)
• Include a User-Agent header in metering calls so the WAF no longer blocks phone-home requests (#972)

v1.10.108

Released 2026-07-12

Gateway (v1.17.73)

• Remove HTTP 429 status from reshape retry logic, reducing unnecessary retries (#952)

v1.10.107

Released 2026-07-12

Optimizer (v0.3.57)

• Health-check probe now resolves correctly by adding /nodejs/bin to the PATH (#964)
• Runtime upgraded to Ubuntu 24.04, addressing glibc CVE-2026-5450 (#963)
• Added shape-aware mask yielding with code-graph degrade mode and support for mint economics (P1) (#962)

v1.10.106

Released 2026-07-12

Gateway (v1.17.72)

• Default SSO re-enrollment window to 30 days (gateway-version gated) (#961)

v1.10.105

Released 2026-07-12

Gateway (v1.17.72)

• Return an actionable re-enroll hint when a client-key request receives a 401 response (#948)

Console (v0.4.61)

• Volume-weight KPI calculations now include Extra Capacity and Total Saving metrics (#951)

v1.10.104

Released 2026-07-12

Console (v0.4.60)

• Route operators to the monitoring console (#949)

v1.10.103

Released 2026-07-12

Gateway (v1.17.71)

• Fix SSO tenant binding on multi-tenant gateways to prevent 401 authentication errors (#939)

Optimizer (v0.3.54)

• Cap window-budget savings to the billable window headroom, avoiding over-estimation of savings (#953)

v1.10.102

Released 2026-07-12

Gateway (v1.17.70)

• Added CloudWatch monitoring for the gateway stack (#940)

Docs

• Updated docs to clarify the tenant-scoped erase gap (#941)

v1.10.101

Released 2026-07-12

Gateway (v1.17.70)

• Scanning now authenticates to public ECR repositories and distinguishes authentication errors from actual findings, improving error clarity. (#938)

v1.10.100

Released 2026-07-12

Maintenance release: no application component changed.

v1.10.99

Released 2026-07-12

Gateway (v1.17.70)

• SSRF custom-host block diagnostics are now available (#925)
• BYOK authorization fallback added for keyless inline-provider routing configs (#923)

Console (v0.4.59)

• UI improvements and spend trend graphs now align to UTC days and show zero-filled data (#917)

v1.10.98

Released 2026-07-12

Optimizer (v0.3.53)

• Updated the optimizer image to bundle the patched OpenSSL 3.0.20 library, resulting in zero scan findings (#932)
• Changed the optimizer ECS health-check to use an exec-form command, ensuring compatibility with distroless containers (#931)

v1.10.97

Released 2026-07-12

Maintenance release: no application component changed.

v1.10.96

Released 2026-07-12

Optimizer (v0.3.51)

• Run the optimizer in a distroless container, eliminating Debian-related CVE exposure (#927)

v1.10.95

Released 2026-07-12

Gateway (v1.17.68)

• Remove unused curl to address Alpine curl CVE (#922)
• Clear HIGH/CRITICAL image-scan findings in Gateway and Proxy (#921)

v1.10.94

Released 2026-07-12

Optimizer (v0.3.49)

• Enforce optimizer entitlement checks, ensuring only entitled accounts can run the optimizer. (#914)

v1.10.93

Released 2026-07-11

Gateway (v1.17.66)

• Reconciliation 403 responses are now logged as warnings instead of errors, reducing noise for billing issues (#913)

v1.10.92

Released 2026-07-11

Gateway (v1.17.62)

• Serialize meter rounds to close a double-billing race (#910)
• Scope metering 400-degrade to health-implicating rejections (#892)
• Never attribute a presented-but-unknown key to the metadata user (#892, #893)
• Release manifest, env drift-guard, and continuous update preflight (#903)
• Reason-coded auth events for developer diagnostics (#888, #904)
• Deployment heartbeat: content-free health telemetry (#892)
• Optimize Codex /v1/responses traffic, cache-safely (#907)

Optimizer (v0.3.45)

• reasoning_budget effort governor with session parameter pins (#901)
• cache_lint: read-only per-session prefix-churn sensor (#900)
• Cache-stewardship and pin-telemetry research batch (#894)

Console (v0.4.57)

• Per-user usage page plus account-menu and tooltip polish (#897)
• Addressable-tokens KPI card and saved-% (#864)
• Tokens-saved-by-model and per-user trend breakdowns (#887)
• Diagnose panel with reason-coded auth events (#898)

Connect (v0.11.31)

• Desktop-app gateway coverage (Claude Code desktop and the Codex app) (#895)
• Deferred SSO enrollment gate for MDM-managed subscription fleets (#905)
• Meter AI-client subscription overage (#906)
• Edit OpenCode's existing config instead of a shadow file (#867)

Shared libraries

• Auth-events table and subscription-extra usage coverage (#888)
• Heartbeat columns, alert fingerprints, and support-bundle storage (#892, #908, #910)
• Swagger/OpenAPI for all services (#889)

Docs

• Air-gapped / private-registry install page, Artifact Hub listing, and Gateway API docs (#878, #881)

v1.10.91

Released 2026-07-11

Gateway (v1.17.65)

• Add Swagger/OpenAPI documentation and production readiness for the Gateway API (#889)

Optimizer (v0.3.47)

• Add Swagger/OpenAPI documentation and production readiness for the Optimizer API (#889)

Console (v0.4.56)

• Add Swagger/OpenAPI documentation and production readiness for the Console API (#889)

Connect (v0.11.30)

• Warn OpenCode subscription developers about API-key-only mode (#891)
• Add Swagger/OpenAPI documentation and production readiness for the Connect API (#889)

v1.10.90

Released 2026-07-10

Console (v0.4.56)

• Add Addressable Tokens KPI card and show saved-percentage on addressable denominator (#864)

Connect (v0.11.29)

• Fix OpenCode-specific org-key advice when provider rejects verification (#883)
• Fix OpenCode Connect shadow configuration handling (#867)

v1.10.89

Released 2026-07-09

Console (v0.4.55)

• Updated billing portal UI with visual polish (#857)

Connect (v0.11.28)

• Pass client key via x-anyray-api-key header in OpenCode configuration (#862)

v1.10.88

Released 2026-07-09

Gateway (v1.17.63)

• Accept ark_ client keys in the x-api-key header, improving compatibility with certain clients (#861)

Optimizer (v0.3.45)

• Introduce tool-pruning decision pins for finer-grained pruning control (#835)

v1.10.87

Released 2026-07-09

Maintenance release: no application component changed.

v1.10.86

Released 2026-07-09

Maintenance release: no application component changed.

v1.10.85

Released 2026-07-09

Gateway (v1.17.61)

• Consolidate OpenAI streaming tool-call fragments into a single tool_use block for more reliable execution. (#831)
• Prevent AnyRay version drift between the gateway and deployed services. (#823)

v1.10.84

Released 2026-07-08

Optimizer (v0.3.42)

• Degrade context compression and command digest on seats without retrieval instead of skipping (#817)
• Make prompt compression deterministic by adding a booking-only minSavedChars gate and removing cache busting (#814)
• Lower code-graph default thresholds to minChars=200 and minBodyLines=2 for improved graph generation (#812)

Console (v0.4.52)

• Revert saved-% metric to use billed-token denominator and simplify the traces saved column (#813)

Connect (v0.11.25)

• Fix crash on startup for the standalone Connect binary (#819)

v1.10.83

Released 2026-07-08

Maintenance release: no application component changed.

v1.10.82

Released 2026-07-07

Gateway (v1.17.59)

• Add durable, centralized admin/GDPR audit trail in the shared database (#805)
• Enforce per-user and organization spend caps across the fleet-wide total in multi-replica deployments (#795)
• Fix model-alias rewrite to ensure proper provider routing (#784)

Optimizer (v0.3.41)

• Restore subscription savings by un-deadlocking pin minting and degrading the observation mask instead of skipping (#787)
• Count only fresh tool outputs in content census, ignoring re-sent history (#776)
• Enforce cache optimizer to retain recent turns when conversationStableTurns > observation_mask (#774)
• Add model-aware window-budget fitting (#766)

Console (v0.4.51)

• Mirror customer console KPIs on the admin-tenant page (#764)

---

Releases before v1.10.82 predate this changelog. A deployment's exact running version is always in its console footer and on GET /admin/health; roll back by re-pinning the previous ANYRAY_IMAGE_TAG and re-pulling (see Schema and data migrations).