fix: force secure cookie on HF Spaces

feat: dashboard login gate for public deployments (#148)

feat: usage stats page with time-series token tracking (#147)

feat: account management page with batch operations (#146)

feat: detect banned accounts and show status in dashboard (#142)

fix: clear quota warnings when account is deleted (#100) (#102)

refactor: decouple AccountPool, split codex-api and web.ts, fix CI (#113)

fix: make instructions optional in /v1/responses for client compatibility (#71) (#112)

feat: add sticky rotation strategy (#107) (#110)

fix: handle stream disconnection properly in curl transport and proxy handler (#108)

feat: add POST /admin/refresh-models endpoint + plan routing integration tests (#104)

feat: add quota settings UI to dashboard (#101)

feat: auto-refresh quota with tiered warnings (#92) (#93)

fix: server-side export filtering and JSON parse safety

feat: bulk account import/export with selective export (#82)

feat: WebSocket transport + previous_response_id for multi-turn (#84)

fix: add Cache-Control headers to prevent stale frontend after update (#79)

feat: tuple schema (prefixItems) support for structured outputs (#77)

feat: Docker image auto-publish to GHCR + Watchtower support

fix: mode-specific update hints for Docker and Electron

fix: dark mode tabs, StableText bilingual width, self-update reliability

fix: model store dual index, desktop UI fallback, dynamic port support

feat: display secondary rate limit window (weekly cap) in dashboard

refactor: use toErrorStatus() instead of inline duplicate

fix: use real reset duration from 429 response + auto-fallback to next account (#65)

fix: review improvements — schema walker, status helper, UI i18n, CI version skip

fix: recursive additionalProperties injection + upstream error status propagation

feat: add Test Connection diagnostic button (#63)

feat: add Structured Outputs support (response_format → text.format)

fix: pass through cached_tokens from Codex API (#58)

feat: model-aware multi-plan account routing (#57)

feat: editable proxy_api_key from Dashboard settings panel

fix: Electron OAuth login + i18n layout shift + update modal (#53)

feat: auto-release pipeline + multi-mode update system + commit hash display

fix: preserve model name suffixes (-fast, -high, etc.) in API responses

docs: add comment explaining stream:true hardcoding in responses route

feat: /v1/responses passthrough endpoint + missing SSE event types + Docker docs fix (#37, #38)

feat: proxy assignment management page with bulk operations (#34)

fix: update checker shows correct status + version display + dark mode fixes

feat: proxy pool add form with separate protocol/host/port/auth fields

fix: proxy pool review fixes — security, validation, robustness

feat: add proxy pool for per-account proxy routing

feat: GitHub Star badge + check-for-updates in dashboard header

fix: move /v1/models/catalog route before :modelId param route

feat: add gpt-5.4 + codex-spark support, matrix model selector, extended reasoning efforts

fix: remove unsupported previous_response_id parameter (#30)

refactor: extract startServer() + path abstraction for Electron reuse

feat: add reasoning/thinking output support for OpenAI and Anthropic routes

feat: add per-window usage counters with time-driven reset

feat: add per-account empty response tracking with email in logs