@seemseam/ccb 8.6.9 → 8.6.11

package/README/zh.md

@@ -6,7 +6,7 @@
 **让 Codex、Claude、Gemini 等 CLI Agent 可见、可控、可接管地协同工作**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.6.9-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.6.11-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -230,9 +230,9 @@ ccb update mobile
 <details>
 <summary><b>Mobile App 详情、安全边界和源码</b></summary>
 
-CCB 8.6.9 已把 Flutter 版 CCB Mobile 源码放入 [`mobile/`](../mobile/)，并在 GitHub Release 中发布 Android APK：
+CCB 8.6.11 已把 Flutter 版 CCB Mobile 源码放入 [`mobile/`](../mobile/)，并在 GitHub Release 中发布 Android APK：
 
-- [下载 CCB Mobile v8.6.9 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.6.9/ccb-mobile-v8.6.9.apk)
+- [下载 CCB Mobile v8.6.11 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.6.11/ccb-mobile-v8.6.11.apk)
 - App 源码：[`mobile/app`](../mobile/app)
 - 服务端 gateway 源码：[`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -321,6 +321,25 @@ CCB 支持 [Agent Roles Spec](https://github.com/SeemSeam/agent-roles-spec)：
 ## 新版本记录
 
 <details open>
+<summary><b>v8.6.11</b> - Provider 认证与隔离的 Windows 稳定性修复</summary>
+
+- 恢复 Codex CLI `0.149.0` 显式自定义 provider 的 bearer 认证，同时让只有 route 的本地 gateway 继续保持无认证模式。
+- 支持按 Agent 投影 Codex model catalog 并覆盖全局 model，保留 reconnect 与自定义 tmux 配置行为，并让 Pi clear 创建新上下文（PRs #321、#322、#325、#326）。
+- 将 Herdr 生命周期同步和原生 UTF-8 启动限制在 Windows-owned 实现中，不新增共享层到 Windows 实现的 import（PRs #320、#323）。
+- 升级后请重启受管 Codex Agent 与 CCB 项目。无需迁移项目、对话、配对或配置。
+
+</details>
+
+<details>
+<summary><b>v8.6.10</b> - Claude OAuth 重登录隔离</summary>
+
+- 外部 OAuth 重新登录后，受管重启会刷新 Agent 私有 Claude Keychain 凭据，避免继续使用已撤销 token（Issue #319）。
+- 继承源凭据未变化时保留 Claude 私有 Keychain 自行刷新的值；外部 Claude Keychain service 始终只读。
+- CCB 凭据投影为 symlink 或私有 Keychain 检查异常时 fail closed。无需迁移项目、对话、配对或配置。
+
+</details>
+
+<details>
 <summary><b>v8.6.9</b> - DeepSeek Harness、AGY 启动与 Windows 隔离</summary>
 
 - 以独立 Developer Preview provider `dsh` 接入官方 DeepSeek Harness，通过 loopback HTTP/WebSocket 服务与精确 native turn 证据工作。

package/README.md

@@ -6,7 +6,7 @@
 **Coordinate Codex, Claude, Gemini, and other CLI agents in visible, controllable workflows you can take over**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.6.9-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.6.11-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL%20%7C%20Windows%20beta-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -261,9 +261,9 @@ This command guides installation and configuration.
 <details>
 <summary><b>Mobile App details, safety boundary, and source</b></summary>
 
-CCB 8.6.9 includes the Flutter CCB Mobile source in [`mobile/`](mobile/) and publishes the Android APK through GitHub Releases:
+CCB 8.6.11 includes the Flutter CCB Mobile source in [`mobile/`](mobile/) and publishes the Android APK through GitHub Releases:
 
-- [Download CCB Mobile v8.6.9 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.6.9/ccb-mobile-v8.6.9.apk)
+- [Download CCB Mobile v8.6.11 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.6.11/ccb-mobile-v8.6.11.apk)
 - App source: [`mobile/app`](mobile/app)
 - Server gateway source: [`lib/mobile_gateway`](lib/mobile_gateway)
 
@@ -352,6 +352,25 @@ Thanks to [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar) fo
 ## Release Notes
 
 <details open>
+<summary><b>v8.6.11</b> - Provider authentication and isolated Windows reliability</summary>
+
+- Restore bearer authentication for explicit Codex CLI `0.149.0` custom providers while keeping route-only local gateways unauthenticated.
+- Add per-Agent Codex model catalog projection and model override support, preserve reconnect and custom tmux configuration behavior, and make Pi clear start a fresh context (PRs #321, #322, #325, and #326).
+- Keep Herdr lifecycle synchronization and UTF-8 native startup inside Windows-owned implementations, without adding shared-to-Windows imports (PRs #320 and #323).
+- Restart managed Codex Agents and CCB projects after upgrading. No project, conversation, pairing, or configuration migration is required.
+
+</details>
+
+<details>
+<summary><b>v8.6.10</b> - Claude OAuth re-login isolation</summary>
+
+- Refresh an existing Agent-private Claude Keychain credential after an external OAuth re-login, so a stopped managed restart does not keep using a revoked token (Issue #319).
+- Preserve a Claude-private Keychain refresh when the inherited source credential is unchanged; external Claude Keychain services remain read-only.
+- Fail closed for symlinked CCB credential projections and private Keychain inspection errors. No project, conversation, pairing, or configuration migration is required.
+
+</details>
+
+<details>
 <summary><b>v8.6.9</b> - DeepSeek Harness, AGY startup, and Windows isolation</summary>
 
 - Add the official DeepSeek Harness as the separate Developer Preview provider `dsh`, using its loopback HTTP/WebSocket service and exact native turn evidence.

package/VERSION

@@ -1 +1 @@
-8.6.9
+8.6.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seemseam/ccb",
-  "version": "8.6.9",
+  "version": "8.6.11",
   "description": "Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, DeepSeek, and other CLI agents.",
   "license": "AGPL-3.0-only",
   "homepage": "https://github.com/SeemSeam/claude_codex_bridge#readme",