fix: force secure cookie on HF Spaces

fix: bypass dashboard auth on HF Spaces

feat: dashboard login gate for public deployments (#148)

fix: model list not updating at startup — fast-retry on auth race (#149)

feat: usage stats page with time-series token tracking (#147)

feat: account management page with batch operations (#146)

fix: exclude test files from tsc build to unbreak Docker CI

fix: write runtime cache to data/ instead of git-tracked config/ (#138)

feat: detect banned accounts and show status in dashboard (#142)

fix: handle new Responses SSE lifecycle events (#137)

fix: remove isCodexCompatibleId whitelist — trust backend model list (#129)

fix: add missing userId field to test fixtures (#128)

fix: allow multiple team accounts sharing same chatgpt_account_id (#126) (#127)

fix: prevent quota-exhausted accounts from cycling back to active (#115)

fix: clear quota warnings when account is deleted (#100) (#102)

refactor: decouple AccountPool, split codex-api and web.ts, fix CI (#113)

fix: make instructions optional in /v1/responses for client compatibility (#71) (#112)

feat: add sticky rotation strategy (#107) (#110)

fix: handle stream disconnection properly in curl transport and proxy handler (#108)

feat: add POST /admin/refresh-models endpoint + plan routing integration tests (#104)

test: add plan-based model routing tests (14 cases)

feat: add quota settings UI to dashboard (#101)

fix: macOS Electron login error -86 (EBADARCH) due to wrong-arch curl binary (#96) (#98)

fix: disable desktop context injection by default (#95) (#97)

feat: auto-refresh quota with tiered warnings (#92) (#93)

Revert "fix: fall back to all accounts when model plan doesn't match (#91)"

fix: fall back to all accounts when model plan doesn't match (#91)

fix: skip proxy update checker in Electron mode (#89)

fix: dynamic import `ws` to prevent Electron ESM startup crash (#88)

fix: server-side export filtering and JSON parse safety

feat: bulk account import/export with selective export (#82)

feat: WebSocket transport + previous_response_id for multi-turn (#84)

fix: add Cache-Control headers to prevent stale frontend after update (#79)

feat: tuple schema (prefixItems) support for structured outputs (#77)

feat: model list auto-sync + theme contrast fix

feat: Docker image auto-publish to GHCR + Watchtower support

fix: mode-specific update hints for Docker and Electron

fix: simplify hardRestart — remove helper script, spawn directly with EADDRINUSE retry

feat: SSE update progress + reliable restart on Windows

fix: dark mode tabs, StableText bilingual width, self-update reliability

fix: StableText uses both en+zh references for stable button width

fix: model store dual index, desktop UI fallback, dynamic port support

fix: self-update restart with graceful close + 3s timeout fallback

fix: server restart hanging when active SSE connections exist

feat: display secondary rate limit window (weekly cap) in dashboard

refactor: use toErrorStatus() instead of inline duplicate

fix: use real reset duration from 429 response + auto-fallback to next account (#65)

fix: prevent false window rollover resets in syncRateLimitWindow

fix: review improvements — schema walker, status helper, UI i18n, CI version skip

fix: recursive additionalProperties injection + upstream error status propagation