• 46a09a8: Fix waitlist sync reading email from session instead of empty tenant field, rename table to waitlist_claims

• b2b95f0: Preserve route metadata on streamed provider errors so message logs keep model and provider fields.

• 3dd41a1: fix: Gemini adapter — strip unsupported schema keywords, merge parallel tool responses, and inject missing thought signatures

  The Gemini adapter now strips additional JSON Schema keywords that Google’s function_declarations parameter schema rejects (propertyNames, uniqueItems, multipleOf, contains/minContains/maxContains, prefixItems, additionalItems, readOnly, writeOnly, deprecated, and $comment/$anchor/$dynamicRef/$dynamicAnchor/$vocabulary).

  It merges consecutive parallel tool responses into a single Gemini user turn, matching Google’s requirement that N functionCall parts be answered by exactly N functionResponse parts in one turn.

  When a functionCall part has no thought_signature from the client or cache (e.g. after a fallback from another model), the adapter now injects the documented dummy signature so Gemini 3.x does not reject the request with “Function call is missing a thought_signature”.

• 3b2bbd9: Self-hosted waitlist claims now sync to the cloud instance

• 4e3fdde: Report Claude Opus 4.8 with a 1M context window for Anthropic subscription routing.
• a0f5549: Preserve Responses reasoning summaries when Copilot responses-only models are used through Chat Completions.
• aafa8d4: Record DeepSeek prompt cache hits from prompt_cache_hit_tokens.
• 6ce3a9d: Send Fireworks prompt cache keys from Manifest sessions.
• 4c9335e: Mark MiniMax Coding Plan subscriptions as prompt-cache capable.
• ff48cfb: Send Moonshot prompt cache keys and record Kimi cached tokens.
• 884170d: Preserve author-prefixed Ollama model IDs when proxying requests.
• a4fd8aa: Stop forwarding Anthropic-style thinking params to Ollama endpoints.
• d329f57: Send Qwen cache-control markers and mark Qwen subscriptions cacheable.
• 09d904a: Remove the proxy message-count limit so long agent sessions are bounded by request body limits instead.
• f1a5243: Mark Xiaomi MiMo Token Plan subscriptions as prompt-cache capable.
• 0cc5520: Mark Z.ai Coding Plan subscriptions as prompt-cache capable.

• 7ca120b: Enable prompt caching support metadata for Anthropic subscriptions and send first-party subscription requests with Anthropic automatic cache control.
• a46c3dc: Mark Gemini subscriptions as supporting prompt caching in shared provider metadata.
• dc3c4a9: Send stable prompt cache keys to Mistral when callers do not provide one.
• abec177: Mark OpenAI subscriptions as supporting prompt caching in shared provider metadata.
• fb63274: Add OpenRouter prompt cache breakpoints for Gemini and Qwen model families.
• 22a15a4: Send prompt cache keys to xAI Responses requests from Manifest session affinity.

• fef144a: Show explicit SDK model overrides as Direct in Messages.
• 5572692: Update the shipped modal for OpenAI-compatible model discovery and direct model calls.
• f8a5a5d: Lead README, Docker docs, and app meta tags with connecting agents to any provider instead of cost savings.

• 8956f43: Stop storing full message request/response bodies. The Messages page keeps the per-message metadata view (status, model, provider, tokens, cost, routing, request headers, model parameters) but the recorded-body drawer is removed. A migration drops the message_recordings table and the unused llm_calls / tool_executions / agent_logs tables, significantly reducing database storage.

🐛 Patch Changes

• b27a16e: Stop index migrations from deadlocking deploys against live traffic. The agent_messages index migrations used blocking DDL (plain CREATE/DROP INDEX), which takes an ACCESS EXCLUSIVE lock and deadlocked against live INSERTs while the previous deployment was still serving — failing every deploy and leaving the schema (and the dashboard perf work) unshipped. Those migrations now run CONCURRENTLY (SHARE UPDATE EXCLUSIVE, which does not conflict with writes) outside a transaction, and the migration runner uses per-migration (‘each’) transactions. The covering index also builds without a write stall.
• 88a8590: Add a timestamp-leading partial index for cross-tenant error scans. The Cloud control plane’s hourly error-insights rollup scans agent_messages by time window across all tenants, but the only error index was tenant-leading — so each run scanned every error row ever recorded (cost growing with total accumulated errors), which turned into multi-minute scans that saturated the database. A timestamp-leading partial index over error rows turns those into windowed range scans (measured 110ms/29k buffers down to 2ms/274 buffers on ~2M error rows). The index stays partial so write amplification on ingest is negligible.
• 29ee8be: Speed up the dashboard, message log, and provider/subscription lists for high-volume tenants. Distinct model/provider lookups now use an index skip-scan instead of scanning a tenant’s whole history, and the Overview derives its summary cards from the timeseries it already fetches (one fewer full-range scan). A covering index lets the Overview summary, timeseries, and cost-by-model aggregations run as index-only scans on every install (previously self-hosted had none). Postgres planner defaults (JIT off, larger work_mem, SSD-tuned random_page_cost) plus tighter autovacuum on agent_messages keep those aggregations off the heap, and a redundant index is dropped to lighten ingest.
• 46c88c2: Lazy-load hidden token and cost chart series on agent overview.
• 1591e53: Name the affected agent when provider disconnect is blocked by routing.
• 8fb56c1: Speed up provider disconnect route checks and ignore disabled route rows.
• e266b8e: Support large OpenAI-compatible inline image requests on /v1/* with route-scoped body parsing, clear body-size errors, and redacted inline image data for routing and message recordings.
• 49ef687: Start retiring complexity and task-specific routing. Agents that never configured them now see only Default and Custom routing, so the routing page is simpler for new and unconfigured agents. Agents already using complexity tiers or task-specific categories keep everything working and see a banner explaining the change.
• 0501bb0: Improve the agent routing empty state contrast in dark mode.
• 5eec940: Stop deploys from deadlocking on database migrations. Migrations ran on every replica’s boot over PgBouncer, so multi-replica deploys with pending migrations could deadlock acquiring locks on agent_messages and fail. Migrations now run once in a pre-deploy step over the direct connection (with an advisory lock so overlapping deploys serialize), before any replica starts. App-boot migration is now configurable (RUN_MIGRATIONS_ON_BOOT, default on for dev and single-instance self-hosted). The migration runner also uses the committed migration list instead of a compiled-file glob, so stale build artifacts from deleted migrations can never run.
• 100a3b4: Run database migrations under a Postgres advisory lock so concurrent runners serialize instead of deadlocking. When more than one process ran migrations at once (overlapping deployments, or replicas across regions), they could deadlock acquiring DDL locks on the high-churn agent_messages table and fail the deploy. The deploy migration step now takes a single advisory lock over the direct migration connection: the first runner applies every pending migration, the rest wait and then find nothing pending. Single-instance and self-hosted deploys are unaffected.
• ca62d7b: Clarify Xiaomi MiMo Basic API-key setup by linking directly to the API Keys console and validating the documented sk-xxxxx pay-as-you-go key shape separately from Token Plan tp- credentials.

• e30e0e9: Add global provider pages (ConnectProvider, ProviderDetail, AgentProviders tab) and lift provider connections from per-agent to user-scoped. Remove agent H1 header block from AgentDetail shell.
• 21f0981: Tenant-canonical scoping: every resource now belongs to a tenant instead of a user. The user_providers table is renamed to tenant_providers (junction column user_provider_id → tenant_provider_id), api_keys, email_provider_configs, and custom_providers are re-keyed by tenant_id, and the remaining user_id scope columns are dropped from routing/notification/playground tables (kept only as nullable created_by_user_id audit columns). Self-host operators querying the database directly should note the table/column renames; migrations run automatically on boot and abort with a clear message if orphaned rows are found (set MANIFEST_MIGRATION_FORCE=1 to delete them instead).

🐛 Patch Changes

• e30e0e9: “View more” on a harness’s recent messages now opens the global Messages log pre-filtered to that harness.
• e30e0e9: The per-agent Overview now breaks usage down by provider (chart + provider filter), matching the global Overview.
• e30e0e9: Restructure agent detail view into a horizontal-tabbed shell (Overview / Routing / Guardrails / Settings) with back-link navigation. Unify sidebar to a single global nav (Overview / Messages / Agents) rendered identically on every authenticated route; remove the agent-scoped MONITORING/MANAGE/RESOURCES sub-nav.
• 7aa49e5: A newly added provider key no longer shows another key’s usage on its connection page — per-connection analytics now attribute every message to the exact connection that served it, instead of grouping by provider, auth type, and label.
• 19b9b9e: Add AWS Bedrock as an API-key provider using Bedrock Mantle’s OpenAI-compatible endpoints. Bedrock vendor-prefixed model IDs now resolve model parameters, pricing, and capabilities through the underlying provider metadata while keeping the original Bedrock ID for inference.
• 548a836: Fix Claude Code subscription routing for Anthropic Messages requests by capping Manifest-added cache_control markers at Anthropic’s four-block limit, enabling the context_management beta header expected by recent Claude Code clients, and downgrading output_config.effort: "xhigh" when routing resolves to Sonnet.
• e30e0e9: Custom providers now display their name and models consistently across Messages, Overview, graphs and cost tables — the literal “custom:” prefix is gone and names resolve on global pages too (the backend resolves them, so deleted providers degrade gracefully).
• 550d2a4: Restore the “Add custom provider” button on the Usage-based page and use a dedicated modal for creating and editing custom providers
• 30539c2: Deleting a custom provider can no longer leave orphaned key or routing data behind: the link between custom providers and their stored keys is now enforced by the database (with automatic cleanup of any pre-existing orphans), and creating or deleting a custom provider is atomic.
• 8df85b4: Speed up global overview and Messages by collapsing overview usage timeseries queries and letting Messages load rows before exact totals/filter metadata.
• fd5bc63: Connecting a provider right after creating your first agent no longer fails with “Tenant not found” for several minutes — newly created workspaces are now visible to the dashboard immediately. When a database migration fails on startup, the logs now show the real migration error instead of a misleading “Unable to connect to the database” retry loop.
• e30e0e9: Add global dashboard with Overview, Messages, and Agents navigation for tenant-wide usage analytics.
• e30e0e9: Local providers (sidebar tab, page and overview card) are hidden on cloud — they only apply to self-hosted installs.
• 0efdb6b: Add Kiro IAM Identity Center start URL and region options to the subscription login flow.
• e30e0e9: Fix token/cost limits never blocking (or alerting) when the server’s timezone isn’t UTC. computePeriodBoundaries/computePeriodResetDate built their window in UTC, but agent_messages.timestamp rows are stored in the process’s local time — so on a non-UTC host the window’s upper bound sat behind the stored rows by the TZ offset and the consumption SUM read ~0, meaning hard limits silently never tripped and threshold alerts never fired. Boundaries are now computed in local time (matching computeCutoff), via a new toLocalSqlTimestamp helper.
• 2f2c8e1: Harden provider connection attribution and analytics before release. A subscription a user removed is no longer silently brought back by an agent’s background re-registration. Pre-upgrade message history now attributes to the right connection for users who had the same provider on multiple agents. The dashboard overview keeps Playground traffic out of every card and chart consistently, and the provider-key cache is no longer bypassed on the proxy path.
• 28dbedb: Provider connections lifted from per-agent keys now get clearer names (e.g. “from Agent A”) instead of the bare agent name.
• 3bb50ae: Provider migrations can now be rolled back without dropping connected providers.
• ed58472: Removed the leftover savings/baseline cost tracking (database columns and proxy-side computation) now that the dashboard no longer shows savings.
• e30e0e9: Removed the Subscription Savings card, chart, explainer and its API endpoints.
• 97b401a: Rename the agent_provider_access table to agent_enabled_providers so the database, API routes, and dashboard all use the same “enabled providers” naming. The migration is a pure rename — no data is modified — and rolls back cleanly.
• e30e0e9: Fix the post-create “Set up harness” modal showing the full harness picker instead of the harness you just chose. AgentGuard now refetches the agent list when the viewed agent changes, so a newly created agent’s platform reaches the setup modal (previously the stale, source-less list left the platform unset whenever the agent was created from the always-present sidebar while another agent was open).
• 2492e76: Harden the tenant-scoping upgrade for large production databases. The provider-lift migration now skips rows whose agent was already deleted instead of aborting the whole upgrade with a foreign-key error, and the multi-million-row agent-message attribution backfill runs as a throttled, resumable post-deploy job (npm run backfill:message-providers) instead of inside the boot transaction — so upgrading no longer holds a long lock on agent_messages.
• d6748ad: Close a cross-tenant read path in message-detail logs (the llm_calls/agent_logs/tool_executions child queries are now tenant-scoped), and harden dashboard reliability: reject API keys past their own expiry from the auth cache, stop reporting routing-override saves that didn’t persist, keep a demo-seed failure from aborting boot, and add a retryable error state to the connection page.
• 8d7f916: Add a one-time “What we just shipped” dialog for existing users that announces global providers: connect a provider once across all harnesses, scope access per harness, and track subscription vs usage-based spend per provider and harness. Dismissal is remembered locally.

• a29a705: Add a per-auth-type breakdown to the public provider-tokens endpoint. Each provider now carries an auth_types array ({ auth_type, total_tokens, model_count }) alongside the existing models list, so a provider that is used both with an API key and a subscription (e.g. OpenAI API key vs ChatGPT subscription) can be listed once per auth method. Usage with no recorded auth type is counted as api_key. The existing provider/total_tokens/models fields are unchanged, so the addition is backwards compatible.
• 43e06c6: Add Xiaomi MiMo as an API-key provider with MiMo Token Plan subscription routing.

🐛 Patch Changes

• 17d7fd5: Fix the Anthropic subscription model catalog. Drop the claude-*-fast ids it pulled from the pricing cache — those 404 at api.anthropic.com because fast mode is an anthropic-beta header on the base Opus model, not a model id. Also add claude-fable-5 (Claude Fable 5), a new subscription model that didn’t match the existing claude-*-4 prefixes.
• 6eb902d: Forward OpenAI-compatible image inputs as Anthropic image content blocks when routing Chat Completions or Responses requests to Claude.
• abbf574: Inject cache_control prompt-caching breakpoints for Anthropic subscription OAuth requests. The skip dated from a misdiagnosed 400 that was actually caused by the missing Claude Code identity block, so subscription users were re-paying their full prompt prefix in quota on every request.
• 6dc6c07: Filter ChatGPT subscription model discovery to models the Codex backend accepts with a ChatGPT account.
• 00870bf: Make Anthropic Claude Code subscription OAuth and routing match the Claude Code flow: exchange tokens through the Claude Code API host, avoid connect-time probes, and use Claude Code-compatible request headers. Also fix Anthropic OAuth pending-flow consumption so the saved provider keeps the correct agent and user IDs.
• 392efe2: Allow adaptive-only Anthropic thinking mode parameters to be reset to unset from the model parameter dialog.
• 04782c1: Restore prompt-cache hits on the ChatGPT subscription backend: send the session affinity headers the Codex CLI sends (session-id/thread-id, x-codex-turn-state replay, stable prompt_cache_key), and forward the caller’s prompt_cache_key on OpenAI /responses conversions
• 4ea4872: Allow self-hosted installs to tune streaming warmup timeout with STREAM_WARMUP_MS.
• 3f59cc4: Route Copilot subscription models using their advertised supported endpoints so responses-only models use /responses directly instead of failing on /chat/completions.
• 96eba2d: Resolve subscription provider aliases before checking subscription support so Gemini subscriptions stored or registered as “google” remain usable for routing.
• 09a7379: Strip unsupported exclusiveMinimum and exclusiveMaximum JSON Schema fields from Google/Gemini tool declarations so function-calling requests do not fail validation.
• 8cbc0da: Forward OpenAI-compatible image inputs as Gemini inline or file data parts when routing requests to Google.
• d018cb4: Fix custom (header) routing tiers keeping stale account pins after disconnecting one of several accounts on the same provider. Provider-reference cleanup only updated complexity and specificity tiers, so disconnecting an account, renaming a key, or deactivating all providers left header-tier routes pointing at a removed account (the account chip then rendered blank). relabelOverrides, cleanupProviderReferences, and deactivateAllProviders now clean header_tiers routes the same way.
• cb48cc0: Fix OAuth subscription tokens getting permanently invalidated (#2012). Providers like OpenAI now rotate refresh tokens on every refresh, so the previous “refresh then persist” path could brick an account when parallel proxy requests refreshed the same credential at once, or when the DB write failed after the provider had already rotated. Lazy refreshes are now coordinated per credential: concurrent refreshes coalesce into a single round-trip, the freshest token is re-read from the database before refreshing, and the rotated token is persisted with retries. Applies to all subscription OAuth providers (OpenAI, Gemini, Anthropic, MiniMax, xAI, Kiro).
• 2ee31b3: Route already-resolved OpenAI o3-deep-research API-key requests through the Responses endpoint, matching the existing deep-research handling for o4-mini-deep-research without adding unavailable models to discovery. Preserve non-streaming mode when forwarding Chat Completions-shaped requests to OpenAI Responses, and surface collected Responses SSE error events as upstream failures instead of empty successful completions.
• 6677b95: Fix the Playground sending MiniMax subscription requests to the default region endpoint. The OAuth resource_url (which encodes the chosen region) was only applied for Gemini and dropped for MiniMax; it is now turned into a minimax-subscription base-URL override the same way the proxy does, so Playground requests hit the correct region. Follow-up to #2110 (cubic-flagged).
• 4a7e1fa: Normalize provider reasoning stream aliases such as Copilot’s reasoning_text to OpenAI-compatible reasoning_content for chat-completions clients while preserving provider-specific replay safeguards.
• 642b162: Prevent OpenAI Responses-backed subscription streams from ending as interrupted client streams: forward terminal upstream error / response.failed events as OpenAI-compatible SSE error payloads, convert response.incomplete (max_output_tokens / content filter) into a proper length / content_filter finish chunk, surface upstream stream errors to /v1/messages clients as native Anthropic error events instead of a fabricated empty end_turn message, and stop the provider request timeout from aborting healthy streaming response bodies after headers have arrived.
• 34febf8: Fix the Playground using the wrong endpoint for region-based providers (qwen, zai) and forwarding vendor-prefixed model ids for copilot/zai. The proxy’s endpoint + model resolution (region overrides for minimax/qwen/zai, prefix stripping for copilot/minimax/zai, custom-provider endpoints) is now a shared resolveForwardEndpoint helper used by both the proxy and the Playground, so the two paths can no longer drift.
• 6154127: Try configured tier fallback routes before the auto-assigned route when a manual override model is unavailable.

• 2d7541b: Resolve model parameter specs through the providerless modelparams.dev by-model endpoint so gateway routes such as GitHub Copilot can expose the underlying model’s thinking and reasoning controls.
• 5006434: Speed up the dashboard and lower proxy overhead: unbuffered SSE streaming, smaller render-blocking CSS, lazy-loaded modals, cached per-agent model lookups, and new indexes for hot queries.
• aad3033: Fix native /v1/responses forwarding so typed non-message input items such as reasoning and item_reference are preserved without a role, preventing ChatGPT subscription Codex backend 400 errors on multi-turn Codex requests.

• e2ec0a6: Add BytePlus ModelArk Coding Plan as a subscription provider.
• 90e7af5: Add Command Code subscription routing with dynamic model discovery and OpenAI/Anthropic Provider API forwarding.
• c78f6fb: Persist refreshed OAuth subscription tokens to the same provider account label that supplied the token.
• 4884967: Add Qwen Token Plan as a subscription option for the Alibaba Cloud provider.
• 6cdd23d: Add a Z.ai GLM Coding Plan endpoint selector for outside-China and China Mainland subscription routing.

• 50e7ecd: Add OpenCode Zen as an API-key provider. OpenCode Zen exposes an OpenAI-compatible /v1/models catalog and /v1/chat/completions proxy endpoint, plus a native Anthropic /v1/messages endpoint for Claude models. Manifest now discovers Zen models on connect and routes Claude requests through /v1/messages (with x-api-key auth) and everything else through /v1/chat/completions (with Bearer auth).

🐛 Patch Changes

• 0eff607: Keep same-name models from different providers available in the routing model picker.
• d950469: Add Fireworks AI as an official API-key routing provider.
• d439884: Add Kimi Coding Plan subscription routing for Moonshot/Kimi with the kimi-for-coding model.
• 31383c5: Refresh OAuth subscription credentials once when the upstream rejects a stored access token.

• 65bca08: Fix token-cost calculation for providers that report cache-read prompt tokens. Manifest now uses models.dev cache-read/cache-write prices when available, so cached DeepSeek input tokens are billed at the cache-hit rate instead of the full input-token rate.
• 08f9c6f: Fix /v1/responses streaming to emit the full OpenAI Responses API event lifecycle when bridging a Chat Completions upstream. The converter now opens a message item and content part (response.output_item.added / response.content_part.added) before the text deltas and closes them (response.output_text.done / response.content_part.done / response.output_item.done) with a populated response.completed, instead of emitting bare output_text.delta + response.completed{output:[]}. Strict Responses API clients (Pi, OpenClaw-style) previously dropped the deltas and rendered empty assistant messages.

• c86ab75: Record cumulative Anthropic streamed input and cache token counts when they are reported on message_delta events.
• 191170c: fix(charts): pad bar chart x-scale by half a bin so the last bar is fully visible (#1756)
• 3471514: Speed up the dashboard’s first load. Heavy code now loads on demand instead of up front: the syntax highlighter is a slim 6-language build, charts load per tab, and the markdown renderer loads when the first message renders. Dev-only tooling no longer ships in production bundles.
• 26f3458: Limit the OAuth callback-URL tutorial video on the provider sign-in screen to OpenAI. Other OAuth providers (Gemini, etc.) no longer show the OpenAI-specific video.
• 72a398b: Separate model selector capabilities from input and output modality columns.
• d3b742f: Fix OpenCode Go reasoning-tier routing by sending qwen3.7 models through the provider’s Anthropic-compatible endpoint, keeping Mimo on the OpenAI-compatible endpoint, and hardening streamed reasoning_content caching for tool-call continuations.
• 1a4063d: Replace the Routing page’s empty pricing catalog panel with a concise warning toast that avoids naming implementation-specific upstream pricing sources.
• 259951e: Parse provider SSE streams with a spec-compliant parser so keepalive comments remain comments instead of being forwarded as data payloads.
• 3434f64: Close an SSRF hole where a custom provider URL written as an IPv4-mapped IPv6 literal (for example https://[::ffff:169.254.169.254]) slipped past the guard and could reach cloud metadata or private hosts. The carrier-grade NAT range (100.64.0.0/10, used by managed Kubernetes and Tailscale) is now blocked too. Separately, MiniMax, Kiro, and Copilot OAuth errors no longer echo refresh tokens or client secrets into logs.
• 690de8d: Request exact token usage for every supported OpenAI-compatible streamed provider by moving stream_options.include_usage behind endpoint capability metadata, including Kilo and NVIDIA NIM.

• ba08e72: Support adding and managing multiple GitHub Copilot subscription accounts.
• 9109d10: Keep connected subscription add-account flows visible for OAuth and device-code providers.

• 19e2d5b: Kiro subscriptions now connect in Manifest Cloud. Kiro previously used a local-only CLI flow (reading the kiro-cli token cache off the backend’s own disk), so it only worked when self-hosting. It now uses the AWS SSO OIDC device authorization flow server-side — register → show a user code + verification link → poll for the token — exactly like the GitHub Copilot and MiniMax subscriptions, working identically on a laptop and in the cloud.

🐛 Patch Changes

• 8061e86: Show capability badges for gateway models in the model picker. A gateway model like opencode-go/glm-5.1 now resolves its capabilities from the underlying provider’s models.dev metadata (zai / glm-5.1) instead of showing “Capabilities unknown”. The resolution is gateway-generic — it keys off the shared gateway-prefix abstraction, so any gateway added later inherits it automatically.
• b13ac3d: Add Grok subscription provider support with xAI OAuth login and dynamic xAI model discovery.
• 20c7c40: Add NVIDIA NIM as an official API-key routing provider.
• f71c741: Show OpenCode Go’s per-request cost in the model picker and tier cards. OpenCode Go bills a per-request slice of its dollar quota rather than a flat fee, so models with a published cost now display e.g. $0.0136/req instead of the generic “Included in subscription” label. The available-models API surfaces cost_per_request (from the OpenCode Go catalog) for gateway models; flat-fee subscriptions are unchanged.

• b6920d3: refactor(proxy): forward Anthropic Messages requests to Anthropic upstreams without OpenAI translation

  When a POST /v1/messages request resolves to an Anthropic upstream, the proxy now forwards the original Anthropic body directly with only additive mutations applied (cache_control on the last system block and last tool, subscription identity injection for OAuth, default max_tokens, cached extended-thinking replay). The OpenAI-shaped chatBody is retained for the routing/scoring layer but no longer feeds the wire request.

  Closes the lossy-roundtrip class of bugs that previously dropped Anthropic- native fields (server-tool type discriminators, top_k, native stop_sequences form, future Anthropic-only parameters) through the Anthropic → OpenAI → Anthropic translation. Replaces the targeted _anthropicServerTools stash workaround.

• 07bc952: Set Claude Code setup snippets to use Manifest’s auto model by default and expose it through /v1/models.

• 610c408: Show captured assistant responses as the final turn in recorded OpenAI Chat and Responses API message log conversations.

• 58dd78c: Show configured task-specific and custom tiers in the Messages tier filter and route those selections to the matching message-log filters.

• ebb1e2b: Use modelparams.dev parameter descriptions in the Model parameters dialog instead of local hardcoded hints.

• 534ff60: Refresh the Model parameters dialog with grouped cards, inline descriptions, a compact slider with min/max markers, and a synced number field. Disabled parameters now keep their description and gain a help icon explaining how to enable them, while remembering the last user value for when they become available again.

• 6cd59c7: Resolve modelparams.dev provider aliases such as Z.ai’s z-ai catalog ID when loading configurable model parameters.

• ec47903: Keep the OpenAI OAuth callback paste field visible while an OAuth flow is active, align the OpenAI authorize request with the current Codex CLI flow, and persist pending OpenAI OAuth exchanges across backend instances.

• 261769d: fix(proxy): re-inject cached reasoning_content for OpenAI-compatible tool turns

  When reasoning providers return reasoning_content alongside tool calls, Manifest now caches the field and restores it on the next request if an OpenAI-compatible client dropped it from the assistant history. The replay is guarded to DeepSeek/Kimi/OpenCode Go-compatible targets and strict providers still have the field stripped.

• 130eb3c: Remove the recorded-only filter from the messages dashboard.

• 96cdd40: Persist cached reasoning_content for DeepSeek-compatible tool-call turns in Postgres so cloud deployments with multiple backend instances can re-inject the required field on follow-up requests.

• 2bf3734: Render recorded OpenAI Responses API request input in the message log conversation tab instead of falling back to the raw-body hint.

• d061461: fix(proxy): route xAI Responses API requests to xAI’s native /v1/responses endpoint

  Adds native xAI Responses API forwarding and routes xAI multi-agent Grok models through /v1/responses instead of filtering them out of model discovery.

• 9d3f743: Stop recording Railway and proxy noise headers on every message. Headers injected by the hosting edge (x-railway-, x-forwarded-, x-real-ip, etc.) are dropped before storage, so the message Headers tab only shows headers the agent actually sent.
• 1173e30: Performance: bound the public usage-stats aggregations, add a composite (key_prefix, is_active) index for agent-key auth lookups, reuse uPlot chart instances in place on data refresh instead of rebuilding them, and memoize the message log’s feedback overrides.

• 400c195: Add opt-in per-agent message recording. Toggle in Settings → Recording captures the full request body, response body, and response headers for subsequent proxy calls. Recorded rows show a record-dot icon in the Messages log; clicking it opens a formatted modal with Parameters, Conversation turns, Tool calls, Reply, Usage pills, and Headers. Payloads capped at 2 MB and kept out of the hot message-list query via a separate message_recordings table. Defaults off; never included in anonymous telemetry.

• 3b345e7: Fix provider disconnect cleanup so removing an OAuth subscription clears routes pinned to that auth type even when an API-key credential for the same provider remains connected.
• 492cf46: Preserve provider key labels and priorities when duplicating agents.
• 045907d: Preserve native Google generationConfig fields when routing requests to Gemini, while keeping existing OpenAI-compatible generation aliases as explicit overrides.
• 9438035: Serve model parameter specs from the MPS catalog API and support scoped per-route defaults.
• 4e780be: Make saved Manifest model parameters authoritative over overlapping client request parameters while preserving client parameters that Manifest does not configure.
• bea267e: Fetch model parameter specs per-model on demand instead of downloading the full MPS catalog on every Routing-page load, and add an ETag conditional GET to the catalog refresh. Keeps the dashboard payload flat as the catalog grows.
• 680feca: Stop slow startup model-catalog syncs from stalling boot past the deploy healthcheck. The OpenRouter, models.dev, GitHub, and modelparameters.dev fetches now run in the background instead of blocking app.listen(), and the two that lacked a timeout (OpenRouter, GitHub) now abort after 10s. The pricing cache still warms up with real data once those fetches land.

• c4571f7: Add Playground page: compare LLM responses from multiple models side by side for cost, output tokens, and latency. Includes request-headers popover, history drawer with replay, and markdown rendering of responses.

🐛 Patch Changes

• f2074dd: Make Anthropic OAuth token exchange diagnostics safe when fields are missing.
• 3ff3087: Persist Anthropic OAuth pending state in Postgres so production exchanges survive reloads, restarts, and multi-instance routing.
• 7913169: Align Anthropic OAuth state handling with the Claude Code PKCE flow.
• ed05898: Add Claude Code-compatible Anthropic OAuth token headers and safe request-shape diagnostics.
• 0421e0a: Fall back to the OAuth state when Anthropic pending verifier data is missing.
• d00e52b: Fix custom providers in the Playground. Selecting a model from a custom (OpenAI/Anthropic-compatible) provider now resolves its endpoint instead of failing with “Provider request failed”.
• 2b1c9b5: Hide the misleading empty “tier” label in the Playground model picker. The subtitle now only shows when a real routing tier applies.

• 24832a3: Add Nanobot to the supported personal AI agents list. The setup screen renders a paste-ready ~/.nanobot/config.json block that points the manifest provider at the Manifest endpoint and selects model auto by default.

• d7dc183: Move request body defaults (today: DeepSeek’s thinking toggle) from tier-scoped storage to per-route storage. Settings now travel with the model identity (agent_id, provider, auth_type, model_name) wherever the model appears — default tier primary, specificity fallback, header-tier primary, anywhere. Behavior change: Manifest no longer auto-disables DeepSeek’s thinking mode on simple/standard/complex tiers. Users who never configured a value will see the provider’s natural default (thinking enabled) instead of Manifest’s previous cost-saving override. To get the old behavior back, configure thinking explicitly per-model from the Routing page once the frontend ships. Migration backfills the existing per-tier config to every compatible route in the assignment (primary + fallbacks) so no per-model setting is silently lost. Adds new endpoints GET/PUT/DELETE /api/v1/routing/:agent/model-params for the upcoming frontend.

• 4cba5b3: Routing UI: every model row (primary chip, fallback row, header-tier primary, header-tier fallback) now exposes the per-model Parameters affordance for any provider whose API consumes a known knob (today: DeepSeek’s thinking). Settings travel with the model identity wherever it appears — saving DeepSeek’s thinking mode on one slot updates every other slot showing the same model. Closes the long-standing gap on the “custom” (header-tier) routing surface, which previously had no params support at all. Wires the new GET/PUT/DELETE /api/v1/routing/:agent/model-params endpoints shipped in the backend PR.

• a8e907e: Add full OAuth flow for the Anthropic Claude Pro / Max subscription. Connecting your Claude subscription is now a one-click “Sign in with Claude” → paste the authorization code, instead of running claude setup-token in a separate terminal. Tokens auto-refresh through the same blob/refresh path used by OpenAI.

  Internally the OAuth code in routing/oauth/ was split into shared core/ primitives (PKCE, token-blob storage, pending-state TTL, callback HTML) plus per-provider files. The OpenAI service now delegates to the same primitives, and a new oauth/anthropic/ package implements the paste-code flow.

🐛 Patch Changes

• a254c32: Add OpenCode to the Coding Assistant setup flow. The setup screen now renders a paste-ready OpenCode config block for the global or project config, registers Manifest as an OpenAI-compatible provider, and selects manifest/auto by default.

• 6f52fdd: Normalize Chat Completions image_url parts to Responses API input_image parts before forwarding to /v1/responses.

• bbcfa50: Stop filtering the canonical gemini-3.1-flash-lite-preview (and similar non-dated flash-lite-preview aliases) from Gemini model discovery. The previous regex was meant to drop deprecated dated snapshots like gemini-2.5-flash-lite-preview-09-2025 but over-matched and removed live preview models too. Tightened to require a -MM-YYYY date suffix so dated snapshots still get filtered while canonical previews surface.

• 91088e2: Fix “Add another key” button for OAuth subscription providers

• cedeba2: Extract Wingman to a standalone hosted SPA at wingman.manifest.build. The dashboard’s bottom drawer stays dev-only (dead-code-eliminated from production / self-hosted bundles) and now embeds the hosted build by default. Contributors can still point it at a local Wingman with VITE_WINGMAN_URL. Dev-mode CORS allow-lists the hosted origin so contributors can use the hosted SPA against a local backend; production never enables CORS, so nothing Wingman-related ships to self-hosted deployments. The packages/wingman/ workspace is removed; source moves to https://github.com/mnfst/wingman.

• abf3c15: Show a small “Last used” badge on the sign-in and sign-up pages so returning visitors can see at a glance which method (email or one of the social providers) they used last time. The hint is stored per-browser in localStorage and is best-effort: it falls back silently when storage is unavailable.

• 9b4a586: Accept MiniMax Coding Plan sk-cp- tokens on the MiniMax subscription tile alongside the device-code OAuth flow. The region picker now applies to both paths, so CN Coding Plan tokens route to api.minimaxi.com for both model discovery and proxied requests. Closes #1467.

• d9e6232: Improve the dashboard layout on phone-sized screens with a compact navigation drawer, tighter header chrome, and mobile-sized chart stats.

• 828812c: Patch five high-severity Dependabot alerts in transitive dependencies.

  • fast-uri 3.1.0 → 3.1.2 (path traversal + host confusion, dev-only via @nestjs/schematics).
  • kysely 0.28.14 → 0.28.17 via better-auth 1.4 → 1.6 (JSON-path injection in JSONPathBuilder, runtime).
  • undici 5.x → 6.25 via @codecov/vite-plugin 1 → 2 (HTTP smuggling + CRLF injection, dev/build only).

  No behavior change. Better Auth bump is patch-compatible (1.4 → 1.6) — login, register, OAuth round-trips verified locally.

• 7792ef8: Coerce unknown Anthropic Messages tool types to custom tools instead of forwarding unsupported server-tool tags, and normalize missing array items in forwarded tool schemas for OpenAI compatibility.

• 504a7af: Route Anthropic and MiniMax subscription disconnects through provider-specific OAuth cleanup endpoints

• 47d143c: Rename the personal agent category label to “AI agents”.

• ee47ba7: Strip adaptive thinking when Anthropic Messages requests are routed to Claude Haiku.

• f4fb104: Preserve OpenCode Go reasoning content for known non-DeepSeek reasoning model families.

• 74f6fb3: Add GET /api/v1/public/agent-tokens public endpoint. Mirrors the shape of /provider-tokens but groups daily-token usage by (agent_category, agent_platform) instead of by LLM provider, so the marketing site can show per-agent (OpenClaw, Claude Code, OpenAI SDK, etc.) charts alongside the existing per-provider ones. Excludes the other platform bucket and custom:* models server-side. Gated by MANIFEST_PUBLIC_STATS and cached for 24h, same posture as the rest of the public-stats endpoints.

🐛 Patch Changes

• c1fe19a: Fix GitHub Copilot routing for GPT-5 Codex models. Copilot serves Codex variants (gpt-5-codex, gpt-5.2-codex, gpt-5.3-codex) only via /responses, so chat-completions requests now swap to that endpoint instead of returning “Unsupported API for model”. Also rewrites max_tokens to max_completion_tokens for the GPT-5 / o-series family on Copilot, fixing the “Unsupported parameter: ‘max_tokens’” error reported alongside.

• 786dd76: Preserve Responses stream classification during stream warm-up.

• ae56a30: fix(proxy): preserve Anthropic server tools through /v1/messages double-conversion (#1886)

  Claude Code requests routed through POST /v1/messages to an Anthropic upstream failed with tools.N.custom.input_schema: Field required because server tools (web_search, bash, text_editor, computer, code_execution) lost their type tag during the Anthropic → OpenAI → Anthropic translation and were re-emitted as custom tools missing the required input_schema. Server tools are now stashed on the translated body and re-emitted unchanged when the upstream is Anthropic.

• d25320a: Preserve DeepSeek reasoning_content on every follow-up turn, regardless of which provider proxies it (OpenCode Go, custom providers, future aggregators). Fixes a hard failure on OpenCode Go’s deepseek-v4-pro (“The reasoning_content in the thinking mode must be passed back to the API”) — issue #1862.

• e7cdfa1: Strip the non-standard ref JSON Schema keyword (no $ prefix) from Google Gemini tool parameters. Some tool emitters drop the $ prefix because Protobuf and similar parsers reject dollar-prefixed field names; without this fix Manifest forwarded ref verbatim and Google rejected the request with Invalid JSON payload received. Unknown name "ref".

• f21584a: Fix prompt-caching token counters on /v1/messages. cache_control markers always reached Anthropic (caching was working server-side), but the chat → Anthropic-Messages conversion in toAnthropicUsage hardcoded cache_creation_input_tokens: 0, and the parseUsageObject Anthropic branch read cache reads from the wrong key. Result: client responses lost cache creation counts, and agent_messages rows recorded 0 for both cache creation and cache reads even when Anthropic actually hit the cache.

  Also fixes the recorder’s duplicate-write detector, which summed input_tokens + cache_read_tokens + cache_creation_tokens when computing a row’s total prompt tokens — input_tokens already stored the chat-shape total, so the sum double-counted caches and caused legitimate duplicates to bypass dedup. And toAnthropicUsage now reads OpenAI-compat nested prompt_tokens_details.cached_tokens as a fallback so /v1/messages requests routed to OpenAI / DeepSeek / Z.AI / MiniMax / Mistral surface their cached-input counts too.

• 9f64594: Update MiniMax “Where to get an API key” link to point to the actual key page (/user-center/basic-information/interface-key) instead of the API docs overview.

• 562d105: Fix Groq model attribution in the routing UI so Groq-served prefixed model IDs stay selectable and show the Groq provider.

• 00784e3: Show the Model Parameters button on a routing tier when any route in the tier — primary or fallback — uses a params-compatible provider. Previously the button was gated to the primary route only, so a tier with DeepSeek configured as a fallback hid the toggle even though the proxy already applies tier-level param_defaults to whichever provider an attempt actually targets. The dialog’s provider-default hint follows the first compatible route in the ordered (primary, …fallbacks) list.

• ef46fa0: Per-assignment request body defaults: each tier and specificity slot now carries an optional param_defaults JSONB column that the proxy merges into the outbound provider request before forwarding. Initial knob is DeepSeek’s thinking-mode toggle ({ thinking: { type: 'enabled' | 'disabled' } }) — fixes empty-content responses on DeepSeek V4 Flash/Pro that consume the max_tokens budget on reasoning. Precedence is presence-based: client-supplied fields in the request body always win, so explicit per-call overrides keep working.

  Configure from the routing UI via a new “Parameters” button on each model chip; persisted via PATCH /api/v1/routing/:agent/tiers/:tier/params and …/specificity/:category/params.

• 085431c: Per-message model parameter telemetry. Each agent_messages row now carries a request_params JSONB snapshot of the effective request body parameters that hit the provider (today: DeepSeek’s thinking toggle; future provider knobs and user-defined custom-provider params land here without a schema change). The dashboard’s expanded message detail shows a new “Model Parameters” accordion next to Request Headers, with an info tooltip explaining the field. Existing rows stay NULL — back-compat is preserved.

• d3b551f: Per-provider model refresh: a small refresh button next to each provider in the Connect Providers detail view and next to each section header in the model picker. Toasts now report the actual count or upstream error instead of a blanket “Models refreshed” lie. Empty discovery results no longer wipe a non-empty cache, so a transient API hiccup can’t silently empty the model list. The model picker subtitle now shows “Default tier” instead of just “tier”.

🐛 Patch Changes

• ec7fc12: Restore the per-tier (and per-specificity) Model Parameters dialog that was inadvertently dropped during a stacked-PR merge. The sliders icon is back on every primary model chip in Routing for providers that consume known params (today: DeepSeek’s thinking toggle). The dialog persists per-assignment, so a single configured value applies to the primary model AND every fallback the proxy tries — without per-route schema changes. Multi-key compatible: pinning a different key on the same route does not affect the stored params, and switching keys mid-flight keeps using whatever the proxy resolved for that iteration.

  Adds back: PATCH /api/v1/routing/:agent/tiers/:tier/params, …/specificity/:category/params, TierService.setParamDefaults, SpecificityService.setParamDefaults, frontend setTierParamDefaults / setSpecificityParamDefaults, and ModelParamsDialog.

• c446856: fix(routing): attribute models by their connection’s provider, not by model-id prefix

  The routing UI used to derive a model’s logo from the prefix of its model id, which broke for any provider that redistributes other vendors’ models. Most visibly, a Groq connection serving qwen/qwen3-32b rendered with the Qwen logo and Qwen-on-OpenRouter pricing (≈$0.08/$0.24 per 1M) instead of Groq’s own pricing ($0.29/$0.59).

  Two changes:

  • Frontend (RoutingTierCard.providerIdForModel): when a model row has a stored provider that resolves to a registered first-party provider, that wins over prefix inference. OpenRouter remains the documented exception because its rows really do represent vendor-prefixed models served on behalf of those vendors.
  • Backend (ModelDiscoveryService.enrichModel): known-model-prices.ts is now consulted before models.dev and the OpenRouter cache, so curated per-provider prices win over upstream catalogs that may attribute the same model id to a different (cheaper) inference provider. Behaviour change for the existing entries (moonshot-v1, gemma-3-1b-it, gemini-pro-latest): they become authoritative instead of last-resort, which matches their intent.

  Builds on #1772, which introduced route.provider as the routing identity.

• ab9f0cb: Add an Anthropic Messages-compatible endpoint at POST /v1/messages. Anthropic SDK clients (Claude Code, @anthropic-ai/sdk) can now point ANTHROPIC_BASE_URL at a Manifest gateway and route through Manifest’s tier/specificity pipeline like any OpenAI client. The implementation translates Anthropic Messages requests into the internal chat-completions form (and back on the response side), reusing the existing routing, scoring, fallback, and recording machinery.
• 1627493: Add a “Coding Assistant” category in the agent picker and move Claude Code into it. The Connect Agent / Change Agent Type modal now shows three columns instead of two: Personal AI Agent | App AI SDK | Coding Assistant. Claude Code is no longer mis-bucketed under personal agents — it sits in the new column with the existing copper-orange Claude mark. Picker order, icons, and the existing Claude Code setup wizard are unchanged.
• fb7d921: Add support for multiple API keys per provider per agent. Users with several accounts for the same provider (a personal + work OpenAI key, two ChatGPT Plus subscriptions, two Anthropic Pro tokens) can attach all credentials and pin specific tiers or fallback rows to a specific labeled key. Multi-key applies to both api_key and subscription providers; local providers (Ollama, LM Studio) stay single-row since they don’t carry credentials. Cap is 5 active keys per (agent, provider, auth_type). Single-key users see no UI change — the chip + “+ Add another key” affordance only appear once a provider has 2+ active keys.
• c6efb87: Add Wingman, an in-dashboard gateway tester for contributors. Embedded as a half-screen iframe drawer behind a floating action button in dev mode, stripped from Docker / cloud bundles. Lets contributors send one-shot requests at the gateway while impersonating OpenClaw, Hermes, OpenAI SDK, Vercel AI SDK, LangChain, cURL, or Raw — with editable code panels that actually execute via stubbed SDKs.

🐛 Patch Changes

• 9a0e8c3: Fix silent failure when adding a fallback that shares a provider with an existing route. Adding an OpenAI API key model as a fallback to an OpenAI subscription model (or any other same-provider, different-auth combination) now persists correctly instead of showing a success toast and dropping the change. The frontend now sends the explicit (provider, authType, model) tuple alongside the model name so the backend can disambiguate when the same model id is offered by two connected providers. Affects both complexity tier and specificity (“custom”) routing.

• 30d19ab: Stop silently wiping the saved fallback list when an unresolvable model is added (issue #1790).

  buildFallbackRoutes() in tier, specificity, and header-tier services used to return null whenever any single model couldn’t be resolved to a unique (provider, authType, model) tuple. setFallbacks then persisted that null, so the user’s existing fallback_routes row was overwritten with null and the controller returned []. The toast still said “Fallback added” — the only visible result was the previously-saved fallbacks disappearing.

  PR #1825 already plugged the most common trigger by sending an explicit routes payload from the add handlers. This change removes the underlying footgun: buildFallbackRoutes now throws 400 Bad Request instead of returning null, so the row is left untouched on resolution failure and the frontend shows the error.

  Scoped strictly to the backend wipe path. Does not change input validation, the authType !== undefined guard in the add handlers, or the discovery-fallback shape of buildFallbackRoutes.

• 022529a: Fix MiniMax Token Plan activation redirecting to the homepage. The MiniMax /oauth/code endpoint returns a verification_uri pointing at https://www.minimax.io/oauth-authorize?..., which 307-redirects to the homepage with no instructions. The real authorize page lives on platform.minimax.io (and platform.minimaxi.com for the CN region). The MiniMax OAuth start flow now rewrites the host before returning the URI, so users land on the actual page where their 6-digit code can be entered. Closes #1796.

• cf98f70: Fix OpenAI subscription model discovery so newer Codex CLI models (e.g. gpt-5.5) appear. The hardcoded client_version=0.99.0 query param made https://chatgpt.com/backend-api/codex/models silently return only the older subset; bump it to 0.128.0 and lift Codex/Copilot client identifiers into a shared constants file so future bumps are a one-line change.
• a7a9c3b: Fix fallback success rows recording the primary route’s auth_type instead of the fallback’s, which caused cost_usd to be miscomputed on mixed-auth chains (subscription fallbacks were charged, api_key fallbacks were stored as $0).
• be679c4: Strip Codex-unsupported parameters on the OpenAI subscription proxy path. Requests forwarded to chatgpt.com/backend-api/codex/responses now drop temperature, top_p, max_output_tokens, metadata, safety_identifier, prompt_cache_retention, and truncation before the upstream call, and force store: false. Previously these fields propagated through and Codex returned 400 unsupported_parameter, breaking OpenAI-SDK clients that set sampling defaults. Closes #1791.

• e8162c3: Security hardening across the build pipeline and runtime: every GitHub Action is now pinned by commit SHA, the awesome-free-llm-apis data feed is pinned to an immutable commit and validated for HTTPS shape before render, the encryption-key cache no longer keeps the raw secret as a Map key, the Google Gemini API key moves from ?key= query param to the x-goog-api-key header (so it stays out of upstream proxy/LB access logs), OpenAI OAuth error logs run through scrubSecrets, the OAuth backendUrl now prefers BETTER_AUTH_URL over the request Host header, the dev-loopback agent fallback prefers the seeded tenant over picking the first active key, rejected agent keys log only the fixed mnfst_ prefix, and migrations log via the TypeORM logger instead of console.log. npm audit fix resolved vite + postcss CVEs. A boot-time check counts active legacy static-salt API-key hashes and warns if any remain (no forced rotation). MANIFEST_ENCRYPTION_KEY is now documented and threaded through docker-compose.yml; if unset the runtime still falls back to BETTER_AUTH_SECRET.

• f0082d5: Fix: detect Podman and Kubernetes as self-hosted runtimes. Manifest now reads /run/.containerenv (Podman) and KUBERNETES_SERVICE_HOST in addition to /.dockerenv, so rootless Podman and Kubernetes installs no longer fall back to cloud-mode SSRF rules and reject http:// URLs to local LLM servers.

  Also narrows the cloud-metadata SSRF block to the actual IMDS addresses (169.254.169.254, 169.254.169.253, 100.100.100.200, fd00:ec2::254) instead of the entire 169.254.0.0/16 link-local range, so self-hosted users can reach host.containers.internal (which Podman maps to 169.254.x.y under pasta/slirp4netns). Cloud mode is unchanged: link-local space is still rejected via the private-IP guard.

• d4675ba: Drop the legacy routing identity columns from tier_assignments, specificity_assignments, and header_tiers. The structured route shape introduced in #1772 is now the only persistence form.

  Schema: 13 columns dropped (override_model, override_provider, override_auth_type, fallback_models from all three tables; auto_assigned_model from tier and specificity tables). Migration 1784000000000-DropLegacyRoutingColumns runs on boot. down() re-adds the columns nullable but data is one-way lost — backup before upgrading if you maintain a hot-standby.

  API breaking change: POST /api/v1/routing/resolve no longer returns the flat model, provider, auth_type, fallback_models fields. External callers must read route.model, route.provider, route.authType, and fallback_routes instead.

  Internals: removes the legacy inference cascade in proxy-fallback.service.ts, the dual-write paths in routing services, and the ?? legacy reads throughout. Same model name on different auth types stays correctly distinct (the #1708 fix).

✨ Minor Changes

• 1ce8ed9: Stable error codes for the proxy. Every user-facing [🦚 Manifest] message now embeds an M### code (M001–M500) and a docs link at manifest.build/errors/M###. Companion encyclopedia pages live in mnfst/docs.
• 1d37134: Routing identity is now backed by a structured ModelRoute = (provider, authType, model) shape stored alongside the existing legacy columns on tier_assignments, specificity_assignments, and header_tiers. Reads prefer the new shape and fall back to legacy, so existing rows keep working without intervention. Selecting the same model name under different auth types (e.g. gpt-4o on subscription and on api_key) is now correctly treated as two distinct routes — fixes #1708. The /api/v1/routing/resolve response gains additive route and fallback_routes fields without breaking the existing flat shape. Per-fallback-attempt auth_type is now recorded on agent_messages instead of inheriting the primary’s. No UI, API contract, or data is removed in this release; legacy columns and fields stay populated for one cycle before being dropped in a follow-up.

🐛 Patch Changes

• 4e7843a: Recreating an agent with a previously used name now produces a clean slate without losing the deleted agent’s history. Agent deletion is soft (the row stays with deleted_at set, telemetry rows are preserved) and per-agent analytics scope to the live agent’s id, so the new agent starts at zero while the old data remains queryable in storage.
• 2d4a06e: Show the Manifest version in the bottom-right corner of self-hosted Docker installs. Baked into the image at build time, no API call.

• 992ae47: Add saved cost metric to the Overview dashboard showing how much money routing saves compared to using a single model

🐛 Patch Changes

• 7394235: Mark Manifest’s canned setup-prompt and limit responses as Failed in the Messages list. Requests that hit no_provider, no_provider_key, limit_exceeded, or friendly_error (the [🦚 Manifest] … stubs) now show a red Failed badge with a tooltip explaining why, instead of an ambiguous green Success.
• 4bd4039: Fix two routing regressions caused by agent-wrapped user messages. Strip leading metadata envelopes (e.g. Sender (untrusted metadata): blocks emitted by OpenClaw, NanoBot, Hermes) before scoring so simple greetings like “say hello” no longer route to standard/complex (#1766). Tighten coding specificity signals so generic agent tools (read, write, edit, bash, etc.) and tiny envelope code fences no longer hijack every prompt to the coding tier (#1767).