release: prepare v0.23.0

BunsDev · BunsDev · commit 78734b1d4774 · 2026-04-13T10:16:59.000-05:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.23.0] - 2026-04-13
+
+See [docs/releases/v0.23.0.md](docs/releases/v0.23.0.md) for full notes and [docs/releases/v0.23.0/assets.md](docs/releases/v0.23.0/assets.md) for release asset inventory.
+
+### Added
+
+- Add GitHub Copilot provider support.
+- Add language switcher and Openclaw auth proxy.
+- Add API auth seamline and minimal Claude proxy.
+- Split SME chat list and add auto-scroll handling.
+- Add configurable browser preview start page.
+- Add provider availability settings and picker filtering.
+- Add in-app browser helper for Tweakcn settings.
+- Add hotkey settings editor and keybinding reset support.
+
+### Changed
+
+- Extract OpenClaw gateway settings flow.
+- Trim PR review history fetch and clean typecheck blockers.
+- Stabilize runtime event and config refresh handling.
+- Switch SME Chat to direct Anthropic messaging.
+- Show recent PR review activity in the dashboard.
+- Cache PR lookups and tighten project matching.
+- Support Claude auth tokens and OAuth failure handling.
+- Split settings into subroutes with shared shell.
+- Okcode/auth settings providers.
+- Update gateway connect handshake payload.
+- Restore default permission mode for chat turns.
+
+### Fixed
+
+- Fix main branch lint and typecheck regressions.
+- Resolve PR 432 merge conflicts against current main.
+- Resolve PR #395 merge conflicts against main.
+- Resolve PR #395 conflicts and integrate pr-365-merge fixes.
+
 ## [0.22.1] - 2026-04-10
 
 See [docs/releases/v0.22.1.md](docs/releases/v0.22.1.md) for full notes and [docs/releases/v0.22.1/assets.md](docs/releases/v0.22.1/assets.md) for release asset inventory.
@@ -691,3 +727,4 @@ First public version tag. See [docs/releases/v0.0.1.md](docs/releases/v0.0.1.md)
 [0.21.0]: https://github.com/OpenKnots/okcode/releases/tag/v0.21.0
 [0.22.0]: https://github.com/OpenKnots/okcode/releases/tag/v0.22.0
 [0.22.1]: https://github.com/OpenKnots/okcode/releases/tag/v0.22.1
+[0.23.0]: https://github.com/OpenKnots/okcode/releases/tag/v0.23.0
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/desktop",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "private": true,
   "main": "dist-electron/main.js",
   "scripts": {
diff --git a/apps/mobile/android/app/build.gradle b/apps/mobile/android/app/build.gradle
@@ -8,7 +8,7 @@ android {
         minSdkVersion rootProject.ext.minSdkVersion
         targetSdkVersion rootProject.ext.targetSdkVersion
         versionCode 1
-        versionName "0.22.1"
+        versionName "0.23.0"
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         aaptOptions {
              // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.
diff --git a/apps/mobile/ios/App/App.xcodeproj/project.pbxproj b/apps/mobile/ios/App/App.xcodeproj/project.pbxproj
@@ -306,7 +306,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.22.1;
+				MARKETING_VERSION = 0.23.0;
 				OTHER_SWIFT_FLAGS = "$(inherited) \"-D\" \"COCOAPODS\" \"-DDEBUG\"";
 				PRODUCT_BUNDLE_IDENTIFIER = com.openknots.okcode.mobile;
 				PRODUCT_NAME = "$(TARGET_NAME)";
@@ -331,7 +331,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.22.1;
+				MARKETING_VERSION = 0.23.0;
 				PRODUCT_BUNDLE_IDENTIFIER = com.openknots.okcode.mobile;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "";
diff --git a/apps/mobile/package.json b/apps/mobile/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/mobile",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/server/package.json b/apps/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "okcodes",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/apps/web/package.json b/apps/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/web",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/docs/releases/README.md b/docs/releases/README.md
@@ -9,6 +9,7 @@ Use this directory for versioned release notes and asset manifests only:
 
 | Version              | Summary                                                                                                   | Assets                        |
 | -------------------- | --------------------------------------------------------------------------------------------------------- | ----------------------------- |
+| [0.23.0](v0.23.0.md) | Copilot support, provider/auth hardening, richer settings controls, and release-stability cleanup         | [manifest](v0.23.0/assets.md) |
 | [0.22.1](v0.22.1.md) | Sidebar density controls, notification diagnostics, decision workspace groundwork, and OpenClaw hardening | [manifest](v0.22.1/assets.md) |
 | [0.22.0](v0.22.0.md) | Provider-aware SME auth, refreshed SME chat, settings navigation, and websocket redaction                 | [manifest](v0.22.0/assets.md) |
 | [0.21.0](v0.21.0.md) | Terminal startup and project continuity improvements, SME auth recovery, and release alignment            | [manifest](v0.21.0/assets.md) |
diff --git a/docs/releases/v0.23.0.md b/docs/releases/v0.23.0.md
@@ -0,0 +1,50 @@
+# OK Code v0.23.0
+
+**Date:** 2026-04-13
+**Tag:** [`v0.23.0`](https://github.com/OpenKnots/okcode/releases/tag/v0.23.0)
+
+## Summary
+
+This release expands provider coverage, hardens auth and gateway setup, and cleans up the configuration and review flows needed for the next OK Code release train.
+
+## Highlights
+
+- **Add GitHub Copilot provider support.**
+- **Add language switcher and Openclaw auth proxy.**
+- **Add API auth seamline and minimal Claude proxy.**
+- **Split SME chat list and add auto-scroll handling.**
+- **Add configurable browser preview start page.**
+- **Add provider availability settings and picker filtering.**
+- **Add in-app browser helper for Tweakcn settings.**
+- **Add hotkey settings editor and keybinding reset support.**
+
+## Detailed changes
+
+- **Providers and auth**
+  GitHub Copilot support now ships alongside the existing provider stack, and Claude/OpenClaw setup flows received additional auth proxy and token-handling work so provider onboarding is more reliable.
+- **Settings and configuration**
+  Provider availability controls, picker filtering, browser preview defaults, and hotkey editing all land in the same train, which makes the settings surface materially more capable without requiring separate follow-up migrations.
+- **Runtime and review flow**
+  The PR review dashboard now trims recent review fetches to the smaller operational window we actually need, and the provider runtime event feed coverage was cleaned up so release gating stays predictable.
+- **Release stability**
+  Current `main` release blockers found during local prep were fixed before this train, including the `main`-branch lint/typecheck regressions that would otherwise have left the branch non-green by default.
+
+## Breaking changes
+
+- None.
+
+## Upgrade and install
+
+- **CLI:** `npm install -g okcodes@0.23.0` (after the package is published to npm manually).
+- **Desktop:** Download from [GitHub Releases](https://github.com/OpenKnots/okcode/releases/tag/v0.23.0). Filenames are listed in [assets.md](v0.23.0/assets.md).
+- **iOS:** Available via TestFlight (uploaded automatically by the Release iOS workflow).
+
+## Known limitations
+
+OK Code remains early work in progress. Expect rough edges around session recovery, streaming edge cases, and platform-specific desktop behavior. Report issues on GitHub.
+
+## Release operations
+
+- Review the [asset manifest](v0.23.0/assets.md) to confirm every expected GitHub Release attachment is present.
+- Use the [rollout checklist](v0.23.0/rollout-checklist.md) to walk the coordinated release from preflight through post-release verification.
+- Use the [soak test plan](v0.23.0/soak-test-plan.md) to validate the highest-risk surfaces after the tag is live.
diff --git a/docs/releases/v0.23.0/assets.md b/docs/releases/v0.23.0/assets.md
@@ -0,0 +1,57 @@
+# v0.23.0 — Release assets (manifest)
+
+Binaries are **not** stored in this git repository; they are attached to the [GitHub Release for `v0.23.0`](https://github.com/OpenKnots/okcode/releases/tag/v0.23.0) by the [Release Desktop workflow](../../.github/workflows/release.yml).
+
+The GitHub Release also includes **documentation attachments** (same content as in-repo, stable filenames for download):
+
+| File                        | Source in repo                        |
+| --------------------------- | ------------------------------------- |
+| `okcode-CHANGELOG.md`       | [CHANGELOG.md](../../../CHANGELOG.md) |
+| `okcode-RELEASE-NOTES.md`   | [v0.23.0.md](../v0.23.0.md)           |
+| `okcode-ASSETS-MANIFEST.md` | This file                             |
+
+After the workflow completes, expect **installer and updater** artifacts similar to the following (exact names may include the product name `OK Code` and version `0.23.0`).
+
+## Desktop installers and payloads
+
+| Platform            | Kind           | Typical pattern |
+| ------------------- | -------------- | --------------- |
+| macOS Apple Silicon | DMG (signed)   | `*.dmg` (arm64) |
+| macOS Intel         | DMG (signed)   | `*.dmg` (x64)   |
+| macOS               | ZIP (updater)  | `*.zip`         |
+| Linux x64           | AppImage       | `*.AppImage`    |
+| Windows x64         | NSIS installer | `*.exe`         |
+
+### macOS code signing and notarization
+
+All macOS DMG and ZIP payloads are **code-signed** with an Apple Developer ID certificate and **notarized** via the Apple notarization service. Gatekeeper will verify the signature on first launch. The hardened runtime is enabled with entitlements defined in `apps/desktop/resources/entitlements.mac.plist`.
+
+## Electron updater metadata
+
+| File               | Purpose                                                   |
+| ------------------ | --------------------------------------------------------- |
+| `latest-mac.yml`   | macOS update manifest (merged from per-arch builds in CI) |
+| `latest-linux.yml` | Linux update manifest                                     |
+| `latest.yml`       | Windows update manifest                                   |
+| `*.blockmap`       | Differential download block maps                          |
+
+## iOS (TestFlight)
+
+The iOS build is uploaded directly to App Store Connect / TestFlight by the [Release iOS workflow](../../.github/workflows/release-ios.yml). No IPA artifact is attached to the GitHub Release.
+
+| Detail            | Value                                      |
+| ----------------- | ------------------------------------------ |
+| Bundle ID         | `com.openknots.okcode.mobile`              |
+| Marketing version | `0.23.0`                                   |
+| Build number      | Set from `GITHUB_RUN_NUMBER` at build time |
+
+## Checksums
+
+SHA-256 checksums are not committed here; verify downloads via GitHub's release UI or `gh release download` if you use the GitHub CLI.
+
+## Operational references
+
+| File                                         | Purpose                                                           |
+| -------------------------------------------- | ----------------------------------------------------------------- |
+| [rollout-checklist.md](rollout-checklist.md) | Step-by-step release playbook from preflight through post-release |
+| [soak-test-plan.md](soak-test-plan.md)       | Structured release validation for the highest-risk surfaces       |
diff --git a/docs/releases/v0.23.0/rollout-checklist.md b/docs/releases/v0.23.0/rollout-checklist.md
@@ -0,0 +1,65 @@
+# v0.23.0 Rollout Checklist
+
+Step-by-step playbook for the v0.23.0 release. Each phase must complete before advancing.
+
+## Phase 0: Pre-flight
+
+- [ ] Verify all release package versions are `0.23.0`:
+  - `apps/server/package.json`
+  - `apps/desktop/package.json`
+  - `apps/web/package.json`
+  - `apps/mobile/package.json`
+  - `packages/contracts/package.json`
+- [ ] Verify Android `versionName` and iOS `MARKETING_VERSION` both match `0.23.0`.
+- [ ] Confirm `CHANGELOG.md` has `## [0.23.0] - 2026-04-13`.
+- [ ] Confirm `docs/releases/v0.23.0.md` exists with Summary, Highlights, Upgrade and install, and Release operations sections.
+- [ ] Confirm `docs/releases/v0.23.0/assets.md` exists and lists every expected attachment class.
+- [ ] Confirm `docs/releases/v0.23.0/rollout-checklist.md` and `docs/releases/v0.23.0/soak-test-plan.md` exist.
+- [ ] Confirm `docs/releases/README.md` includes the v0.23.0 row.
+- [ ] Run `bun run release:validate 0.23.0`.
+- [ ] Confirm the working tree is clean.
+- [ ] Confirm you are on `main`.
+
+### Quality gates
+
+- [ ] `bun run fmt:check`
+- [ ] `bun run lint`
+- [ ] `bun run typecheck`
+- [ ] `bun run test`
+- [ ] `bun run --cwd apps/web test:browser`
+- [ ] `bun run test:desktop-smoke`
+- [ ] `bun run release:smoke`
+
+## Phase 1: Publish
+
+- [ ] Push the release-prep commit to `main`.
+- [ ] Create and push tag `v0.23.0`.
+- [ ] Verify the coordinated `release.yml` workflow starts.
+- [ ] Monitor the pipeline through Preflight, Desktop builds, iOS signing preflight, optional iOS TestFlight, Publish GitHub Release, Finalize release, and optional CLI publish if started through manual dispatch.
+
+### Asset verification
+
+- [ ] GitHub Release body matches `docs/releases/v0.23.0.md`.
+- [ ] `okcode-CHANGELOG.md` is attached.
+- [ ] `okcode-RELEASE-NOTES.md` is attached.
+- [ ] `okcode-ASSETS-MANIFEST.md` is attached.
+- [ ] macOS release artifacts are attached: DMG, ZIP, updater manifest, and blockmaps.
+- [ ] Linux release artifacts are attached: AppImage and updater manifest if generated.
+- [ ] Windows release artifacts are attached: installer, updater manifest, and blockmaps.
+- [ ] If the Intel compatibility workflow is run, confirm the x64 macOS DMG is attached separately.
+
+## Phase 2: Post-release verification
+
+- [ ] `npx --yes okcodes@0.23.0 --version` returns `0.23.0`.
+- [ ] macOS installer launches and passes Gatekeeper.
+- [ ] Linux AppImage launches.
+- [ ] Windows installer installs and launches.
+- [ ] Desktop auto-update metadata is present for supported platforms.
+- [ ] If iOS signing was enabled, confirm the new TestFlight build appears.
+- [ ] Confirm the finalize job did not need to push another version-alignment commit, or review its no-op output if versions were already aligned before tagging.
+
+## Phase 3: Follow-through
+
+- [ ] Trigger the Intel compatibility workflow if macOS x64 artifacts are required for this train.
+- [ ] Update external release references or announcements.
+- [ ] Monitor reports for regressions in Copilot onboarding, provider auth setup, settings navigation, PR review activity, and desktop update flows.
diff --git a/docs/releases/v0.23.0/soak-test-plan.md b/docs/releases/v0.23.0/soak-test-plan.md
@@ -0,0 +1,39 @@
+# v0.23.0 Soak Test Plan
+
+Structured validation plan for the highest-risk surfaces in v0.23.0.
+
+## 1. Provider onboarding and auth recovery
+
+| Step                                                      | Expected                                                                    | Pass |
+| --------------------------------------------------------- | --------------------------------------------------------------------------- | ---- |
+| Configure Codex, Claude, and Copilot from Settings        | Provider setup screens save cleanly and the active provider choices persist | [ ]  |
+| Exercise OpenClaw auth with a valid gateway configuration | Shared secret and device-token flows complete without stale state           | [ ]  |
+| Reload the app and reopen provider settings               | Saved credentials and availability toggles restore correctly                | [ ]  |
+| Intentionally trigger a provider auth failure             | Error messaging stays actionable and secrets remain redacted                | [ ]  |
+
+## 2. Settings and configuration surfaces
+
+| Step                                                            | Expected                                                         | Pass |
+| --------------------------------------------------------------- | ---------------------------------------------------------------- | ---- |
+| Change provider availability and picker filtering               | Available providers update immediately without stale selections  | [ ]  |
+| Set a default browser preview start page and reopen the preview | The new default is applied consistently across sessions          | [ ]  |
+| Edit hotkeys and run the reset action                           | Shortcut changes persist and reset returns the expected defaults | [ ]  |
+| Open the Tweakcn helper from Settings                           | The helper flow opens without breaking app navigation or focus   | [ ]  |
+
+## 3. Runtime and review workflows
+
+| Step                                                                   | Expected                                                                | Pass |
+| ---------------------------------------------------------------------- | ----------------------------------------------------------------------- | ---- |
+| Run a provider turn that emits runtime events and reconnect mid-stream | Event feeds remain coherent after reconnect and resume                  | [ ]  |
+| Open the PR review dashboard on a repo with activity                   | Recent reviews load quickly and the dashboard reflects current activity | [ ]  |
+| Switch between project threads during active work                      | Cached project and PR lookups keep navigation responsive                | [ ]  |
+| Review a thread with browser preview and workspace updates             | The UI avoids flicker, blocked input, or stale panes                    | [ ]  |
+
+## 4. Desktop, CLI, and release packaging
+
+| Step                                                                    | Expected                                               | Pass |
+| ----------------------------------------------------------------------- | ------------------------------------------------------ | ---- |
+| Run `bun run test:desktop-smoke` on the release branch                  | Desktop packaging smoke remains green                  | [ ]  |
+| Run `bun run release:smoke` before and after tagging                    | Release-specific checks stay green                     | [ ]  |
+| Verify a packaged desktop artifact launches and reports the new version | Installed app opens cleanly and reports v0.23.0        | [ ]  |
+| Verify the CLI package after publish or from a packed tarball           | `okcode --version` and help commands resolve correctly | [ ]  |
diff --git a/packages/contracts/package.json b/packages/contracts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/contracts",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "private": true,
   "files": [
     "dist"
diff --git a/scripts/pre-release-validate.ts b/scripts/pre-release-validate.ts
diff --git a/scripts/prepare-release.ts b/scripts/prepare-release.ts

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/desktop",`
`3`		`- "version": "0.22.1",`
	`3`	`+ "version": "0.23.0",`
`4`	`4`	`"private": true,`
`5`	`5`	`"main": "dist-electron/main.js",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/mobile",`
`3`		`- "version": "0.22.1",`
	`3`	`+ "version": "0.23.0",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "okcodes",`
`3`		`- "version": "0.22.1",`
	`3`	`+ "version": "0.23.0",`
`4`	`4`	`"license": "MIT",`
`5`	`5`	`"repository": {`
`6`	`6`	`"type": "git",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/web",`
`3`		`- "version": "0.22.1",`
	`3`	`+ "version": "0.23.0",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`