What's new.

⛰️ Features

• (sdk) Clarify request timing metrics (#738)
• (tui) Scrollable PTY panes (host scrollback + mouse forwarding) (#734)
• (tui) Wire MCP and skills gateways into harnesses (#732)
• (tui) Composite manager (#715)

🐛 Bug Fixes

• (fleet) Non-blocking spawn/prompt so long turns don't time out (#737)
• (sdk) Isolate protocol request extras (#733)

🚜 Refactor

• (tui) Split state.rs into a state/ module (#730)

⛰️ Features

• (acp) Route spawn sub-agents through daemon by default (#705)
• (cli) Add cloud API command (#718)
• (routing) Adaptive, self-optimizing policy-table routing (#710)

🐛 Bug Fixes

• (sdk) Preserve upstream bad requests (#716)

🚜 Refactor

• Remove attestation, fold plugins/ into crates/ (#701)
• Relocate bitrouter-mcp crate under crates/ (#704)

⚙️ Miscellaneous Tasks

• Refresh Rust dependencies and MSRV (#699)

🐛 Bug Fixes

• (sdk) Preserve streaming preflight errors (#696)
• (update) Detect npm installs in self-updater (#689)
• Record canonical stream timing and OTEL latency (#697)

⛰️ Features

• (agents) Add pi-acp to the ACP catalog (#685)
• (providers) Add SuperGrok BYO subscription (#676)
• Ship Claude Code and Codex agent plugins (#683)
• Add AWS Bedrock, Azure, Vertex built-in providers (#647)

🐛 Bug Fixes

• (sdk) Preserve token limits and upstream errors (#692)

⛰️ Features

• Make registry dist runtime-only (#641)
• Refactor registry provider variants (#639)

🐛 Bug Fixes

• Preserve stream error settlement (#656)

⛰️ Features

• Make registry dist runtime-only (#641)
• Refactor registry provider variants (#639)

🐛 Bug Fixes

• Preserve stream error settlement (#656)

⛰️ Features

• (cli) Spawn codex agent (#631)
• (cli) Route update through the JSON output layer (#620)
• (cli) JSON output layer with a uniform error envelope (#610)
• (server-tools) Built-in web_fetch tool (BYOK) (#612)
• (server-tools) Add Tavily web_search backend, drop Perplexity (#608)
• (server-tools) Built-in web_search with BYOK backends (#603)
• (update) Add bitrouter update self-updater (#607)

🐛 Bug Fixes

• (codex) Harden Codex spawn checks (#632)
• (config) Don't expand ${VAR} inside YAML comments (#609)
• (observe) Stop the settle span double-counting as a telemetry event (#605)

📚 Documentation

• Align docs with current CLI (#637)

⚙️ Miscellaneous Tasks

• Migrate registry into OSS dist (#636)

⛰️ Features

• (cli) Wait for daemon readiness on start; auto-start it on spawn (#597)
• (telemetry) Live account-bearer refresh + $lib/$screen_name attributes (#598)

⛰️ Features

• (claude-code) Route Claude Code traffic to a dedicated subscription provider (#593)
• (messages) Preserve thinking-block signature through the streaming round-trip (#592)
• (observe) Opt-in first-party telemetry export (#588)
• (providers) Source built-ins from the registry snapshot (#591)
• (registry) Registry-backed model resolution (#589)
• (spawn) Launch coding agents through BitRouter via bitrouter spawn (#584)
• (telemetry) Account-authenticated exports + anonymous opt-out (#596)
• Read the existing Claude Code session for Claude subscription auth (#590)

🐛 Bug Fixes

• (claude-code) Detect subscription traffic by the agent-profile beta (#594)

⛰️ Features

• (attestation) NEAR confidential-inference verification (L1 + L1.5) (#563)
• (config) JSON Schema + config validate for IaC (#575)
• (fusion) Multi-model deliberation server tool + alias (#574)
• (mcp) Answer the MCP initialize/ping handshake at the gateway (#561)
• (sdk) Expose server-tool usage for observability (#568)

🐛 Bug Fixes

• (attestation) [breaking] Pin & assert TDX base MRs (#567) (#578)
• (attestation) Enforce DCAP TCB status floor (#573)
• (chat) Buffer streamed tool call until name arrives (#577)

🚜 Refactor

• (server-tools) Move advisor/sub-agent into the SDK (#576)

⛰️ Features

• (server-tools) Router-executed server-side tool loop (#555)
• (server-tools) Replace owned provider-defined tools on inject (#559)
• (server-tools) Pass ToolContext to RouterToolset (#558)
• Protocol-native routing (#554)

🐛 Bug Fixes

• (chat) Drop provider-defined tools (no chat wire form) (#553)

⛰️ Features

• (language-model) LanguageModelV3 parity for the canonical IR (#548)
• (metering) Context-tier ("staged") pricing (#551)

🐛 Bug Fixes

• (protocol) Don't fragment streamed tool calls (#552)

⛰️ Features

• (mcp) Origin MCP server for BitRouter (#526) (#530)

🐛 Bug Fixes

• (protocol) Translate tool_choice across protocols (#549)

⛰️ Features

• (capabilities) Extend Capability vocabulary (tools, reasoning, web_search, logprobs) (#536)

🐛 Bug Fixes

• (pipeline) Run non-streaming requests to completion (#538)
• (stream) Bill prompt tokens on client disconnect (#537)

⛰️ Features

• (capabilities) Capability-aware routing primitives + typed structured-output fields (B4) (#528)
• (observe) [breaking] Forward cloud span attrs + content capture (#535)
• (sdk) Surface MCP upstream 401/403 auth challenges (UpstreamAuth) (#534)
• (sdk) Implement VirtualModel priority/cascade strategy (#521)

🐛 Bug Fixes

• [breaking] Pre-1.0 security audit fixes + dead-code cleanup (#523)

🚜 Refactor

• (cli) [breaking] Subcommand cleanup (placeholders + auth) (#524)

⛰️ Features

• (providers) Claude & Codex OAuth subscriptions (#519)

⛰️ Features

• (sdk) [breaking] Per-target Messages auth scheme (x-api-key | Bearer) (#516)

⛰️ Features

• (skills) [breaking] Converge marketplace.json on Claude Code native schema (#512)

⛰️ Features

• (cloud-sdk) Namespace-scoped management client + CLI (#508)
• (messages) Integrate Opus 4.8 Messages API parameters (#509)
• (observe) [breaking] Split otel feature into transport sub-features (#506)
• (skills) Skills gateway client — bitrouter-skills crate + CLI (#511)

⛰️ Features

• (guardrails) [breaking] Plugin + per-account rule resolution (#503)
• (observe) [breaking] GenAI-semconv trace hierarchy + outbound traceparent (#495)
• (sdk) [breaking] Streaming gen_ai.response.id via StreamPart::ResponseStarted (#500)

🚜 Refactor

• (sdk) [breaking] Rename API protocols to spec names (#504)

⛰️ Features

• (bitrouter) Windows support for the daemon control surface (#490)
• (sdk/mcp) Expose headers, set_caller, evict for auth (#494)

🐛 Bug Fixes

• (sdk/anthropic) Fold cache buckets into prompt_tokens (Usage subset contract) (#492)

⛰️ Features

• (cli) Bitrouter cloud subcommand for /v1/* management (#489)
• (cli) OAuth 2.0 device-flow auth subcommand (#480)
• (mcp) Aggregation + caching + SSE + sampling-deny (#484)
• (observe) Migrate to OpenTelemetry with multi-tenant attribution (#475)
• Bitrouter-cloud SDK + LLM provider with OAuth or API-key onboarding (#486)
• PKCE OAuth login for Anthropic and OpenAI Codex (#481)

🐛 Bug Fixes

• (bitrouter) Drop duplicate reqwest dep entry (#485)

⛰️ Features

• (routing) Multiple accounts per provider — failover + load-balance (#473)
• (sdk) Structured outputs (response_format) for all 4 protocols (#472)
• (sdk) Add RouterOptions to opt out of built-in routes (#478)
• (sdk) Derive JsonSchema on wire types (#467) (#469)

🐛 Bug Fixes

• (daemon) Re-apply built-in provider catalog on file reload (#476)

🚜 Refactor

• (db) Sea-orm migrations + all backends, no concrete driver (#474)