• [changed] Auth init treats a present, unexpired cached token as current: default_auth_method_id is cached_token, auth_mode is Oidc, and method priority records that cached_token overrides xai.api_key.
• [new] Auth method list for ACP includes cached_token alongside xai.api_key and grok.com; cached-token handler sets the session API key (SessionToken).
• [new] Runtime events: auth cached_token check, auth init user_info check, auth method priority: cached_token overrides xai.api_key for default_auth_method_id, auth: cached_token handler set api_key (SessionToken).
• [changed] Cached-token / init checks report has_current=true, is_expired=false, needs_user_info=false, and a user_id when user-info is already satisfied.
• [removed] Expired-session path events: auth 401 attribution, auth lock acquire/attempt, disk-token-expired recovery, refresh-from-authority failure, permanent-failure set/refresh, refresh-chain short-circuit, prepare_sampling_config without session key, and the OIDC refresh enter/attempt/terminal-error sequence.
• [changed] Model catalog path notifies clients (current_model_id, model_count) when a real catalog is present; auth refresh watcher starts with had_real_catalog=true instead of fetch/fail with no auth.
• [removed] model catalog: fetching and model catalog refresh failed on the basic path.
• [changed] trace.upload.decision follows remote settings: uploads enabled, telemetry_source/trace_upload_source remote, upload_reason=proxy (previously default/off).
• [new] Home layout gains bundled/ with manifest.json, agents (explore, general-purpose, plan), personas and roles TOML sets, and skills (including build-with-ai, code-review, create-skill/workflow, design, docx + scripts, execute-plan, game-* packs, imagine, implement, pptx, pr-babysit, resume-*, review, shared/resume-session).
• [new] Top-level home names: bundled, upload_queue, managed_config.lock, managed_config_cache.json, requirements.toml, worktrees.db.
• [removed] auth.json.lock no longer left on disk.
• [new] shell.turn.inference_done carries ttft_ms (null when unset).