Changelog

Fixes

• CI: avoid duplicate release dispatch (#71)

Fixes

• CI: honor contributor whitelist (#68)

Fixes

• CI: handle Release Please PR references (#64, closes #63)
• Use durable session identity for Hermes routing controls (#60)

Features

• Enable automatic Hermes turn routing

Features

• Add native Hermes integration (#49, closes #47)

Fixes

• Trust repository GitHub Actions PRs (#46)

Features

• Execute tasks through OpenCode sessions (#39)
• Integrate Veto routing with OpenCode (#42)

Fixes

• Polish animated routing flow (#43)

Features

• Add a versioned redacted event ledger (#26)
• Add bounded OpenRouter catalog cache (#28)
• Add governed feedback reporting (#33)
• Add OpenRouter browser login with PKCE (#32)
• Discover OpenCode runtimes (#36)
• Explain routing with an animated flow (#29)
• Shortlist the dynamic OpenRouter catalog (#31)

Fixes

• Allow Release Please through contributor governance (#35)
• Polish responsive project site (#24)
• Preserve event ledger correlation semantics (#27)
• Report the routable OpenRouter catalog honestly (#22)

Features

• Automate releases and interactive updates (#14)

Fixes

• Publish Homebrew formula from releases (#12)
• Restore real-provider routing (#13)

Added

• Multi-provider filtering, adaptive ranking, structured admission, route-only JSON output, bounded task execution, multi-step plans, and fail-closed acceptance review.
• Anthropic, OpenAI, OpenRouter, xAI, Claude subscription CLI, and local OpenAI-compatible model transports with transport-derived tool capabilities.
• veto doctor for side-effect-free installation and local-state diagnostics, with explicit safe repair through --fix.
• Six-platform release archives plus archive and extracted-binary SHA-256 manifests.
• Versioned Go installation and optional Homebrew tap publication support.

Security

• Explicit traversal-safe output files, approved skill-source boundaries, restrictive local-state permissions, bounded release downloads, hostile archive rejection, and rollback-protected official-binary replacement.

Known limitations

• This is a beta. Provider availability, model IDs and pricing, confidence calibration, routing quality, and savings require account-specific and human validation. Checksums are not signatures.