release: prepare v0.26.4

BunsDev · BunsDev · commit 4c65c3d0798e · 2026-04-22T17:17:30.000-05:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.26.4] - 2026-04-22
+
+See [docs/releases/v0.26.4.md](docs/releases/v0.26.4.md) for full notes and [docs/releases/v0.26.4/assets.md](docs/releases/v0.26.4/assets.md) for release asset inventory.
+
+### Added
+
+- Add out-of-memory session recovery.
+
+### Changed
+
+- Bundle diffs into the server cli.
+- Inline diff parsing for cli release.
+
+### Fixed
+
+- Publish cli from cjs bin.
+- Make npm publish rerun-safe.
+- Verify published cli with okcode bin.
+- Verify published cli with temp install.
+
 ## [0.26.2] - 2026-04-21
 
 See [docs/releases/v0.26.2.md](docs/releases/v0.26.2.md) for full notes and [docs/releases/v0.26.2/assets.md](docs/releases/v0.26.2/assets.md) for release asset inventory.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/desktop",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "private": true,
   "main": "dist-electron/main.js",
   "scripts": {
diff --git a/apps/mobile/android/app/build.gradle b/apps/mobile/android/app/build.gradle
@@ -8,7 +8,7 @@ android {
         minSdkVersion rootProject.ext.minSdkVersion
         targetSdkVersion rootProject.ext.targetSdkVersion
         versionCode 1
-        versionName "0.26.2"
+        versionName "0.26.4"
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
         aaptOptions {
              // Files and dirs to omit from the packaged assets dir, modified to accommodate modern web apps.
diff --git a/apps/mobile/ios/App/App.xcodeproj/project.pbxproj b/apps/mobile/ios/App/App.xcodeproj/project.pbxproj
@@ -306,7 +306,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.26.2;
+				MARKETING_VERSION = 0.26.4;
 				OTHER_SWIFT_FLAGS = "$(inherited) \"-D\" \"COCOAPODS\" \"-DDEBUG\"";
 				PRODUCT_BUNDLE_IDENTIFIER = com.openknots.okcode.mobile;
 				PRODUCT_NAME = "$(TARGET_NAME)";
@@ -331,7 +331,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				MARKETING_VERSION = 0.26.2;
+				MARKETING_VERSION = 0.26.4;
 				PRODUCT_BUNDLE_IDENTIFIER = com.openknots.okcode.mobile;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "";
diff --git a/apps/mobile/package.json b/apps/mobile/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/mobile",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/server/package.json b/apps/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "okcodes",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "license": "MIT",
   "repository": {
     "type": "git",
diff --git a/apps/web/package.json b/apps/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/web",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/docs/releases/README.md b/docs/releases/README.md
@@ -9,6 +9,7 @@ Use this directory for versioned release notes and asset manifests only:
 
 | Version              | Summary                                                                                                   | Assets                        |
 | -------------------- | --------------------------------------------------------------------------------------------------------- | ----------------------------- |
+| [0.26.4](v0.26.4.md) | Out-of-memory session recovery and CLI release hardening                                                  | [manifest](v0.26.4/assets.md) |
 | [0.26.2](v0.26.2.md) | Release with 1 new feature(s), 4 fix(es), 3 improvement(s)                                                | [manifest](v0.26.2/assets.md) |
 | [0.26.0](v0.26.0.md) | File-content search, desktop terminal docking, transport sna                                              | [manifest](v0.26.0/assets.md) |
 | [0.25.0](v0.25.0.md) | Project icon file picker, gateway auth terminology cleanup,                                               | [manifest](v0.25.0/assets.md) |
diff --git a/docs/releases/v0.26.4.md b/docs/releases/v0.26.4.md
@@ -0,0 +1,38 @@
+# OK Code v0.26.4
+
+**Date:** 2026-04-22
+**Tag:** [`v0.26.4`](https://github.com/OpenKnots/okcode/releases/tag/v0.26.4)
+
+## Summary
+
+Re-cut release after `v0.26.3` was already present on npm; ships the same branch state with out-of-memory session recovery and CLI release hardening.
+
+## Highlights
+
+- **Add out-of-memory session recovery.**
+- **Bundle diffs into the server cli.**
+- **Inline diff parsing for cli release.**
+- **Publish cli from cjs bin.**
+- **Make npm publish rerun-safe.**
+- **Verify published cli with okcode bin.**
+- **Verify published cli with temp install.**
+
+## Breaking changes
+
+- None.
+
+## Upgrade and install
+
+- **CLI:** `npm install -g okcodes@0.26.4` once the desktop/CLI release workflow finishes.
+- **Desktop:** Download from [GitHub Releases](https://github.com/OpenKnots/okcode/releases/tag/v0.26.4). Filenames are listed in [assets.md](v0.26.4/assets.md).
+- **iOS:** Available via TestFlight after the separate Release iOS workflow is dispatched for this tag.
+
+## Known limitations
+
+OK Code remains early work in progress. Expect rough edges around session recovery, streaming edge cases, and platform-specific desktop behavior. Report issues on GitHub.
+
+## Release operations
+
+- Review the [asset manifest](v0.26.4/assets.md) to confirm every expected GitHub Release attachment is present.
+- Use the [rollout checklist](v0.26.4/rollout-checklist.md) to walk the desktop/CLI release plus the separate iOS TestFlight dispatch through post-release verification.
+- Use the [soak test plan](v0.26.4/soak-test-plan.md) to validate the highest-risk surfaces after the tag is live.
diff --git a/docs/releases/v0.26.4/assets.md b/docs/releases/v0.26.4/assets.md
@@ -0,0 +1,57 @@
+# v0.26.4 — Release assets (manifest)
+
+Binaries are **not** stored in this git repository; they are attached to the [GitHub Release for `v0.26.4`](https://github.com/OpenKnots/okcode/releases/tag/v0.26.4) by the [Release workflow](../../.github/workflows/release.yml).
+
+The GitHub Release also includes **documentation attachments** (same content as in-repo, stable filenames for download):
+
+| File                        | Source in repo                        |
+| --------------------------- | ------------------------------------- |
+| `okcode-CHANGELOG.md`       | [CHANGELOG.md](../../../CHANGELOG.md) |
+| `okcode-RELEASE-NOTES.md`   | [v0.26.4.md](../v0.26.4.md)           |
+| `okcode-ASSETS-MANIFEST.md` | This file                             |
+
+After the workflow completes, expect **installer and updater** artifacts similar to the following (exact names may include the product name `OK Code` and version `0.26.4`).
+
+## Desktop installers and payloads
+
+| Platform            | Kind           | Typical pattern |
+| ------------------- | -------------- | --------------- |
+| macOS Apple Silicon | DMG (signed)   | `*.dmg` (arm64) |
+| macOS Intel         | DMG (signed)   | `*.dmg` (x64)   |
+| macOS               | ZIP (updater)  | `*.zip`         |
+| Linux x64           | AppImage       | `*.AppImage`    |
+| Windows x64         | NSIS installer | `*.exe`         |
+
+### macOS code signing and notarization
+
+All macOS DMG and ZIP payloads are **code-signed** with an Apple Developer ID certificate and **notarized** via the Apple notarization service. Gatekeeper will verify the signature on first launch. The hardened runtime is enabled with entitlements defined in `apps/desktop/resources/entitlements.mac.plist`.
+
+## Electron updater metadata
+
+| File               | Purpose                                                   |
+| ------------------ | --------------------------------------------------------- |
+| `latest-mac.yml`   | macOS update manifest (merged from per-arch builds in CI) |
+| `latest-linux.yml` | Linux update manifest                                     |
+| `latest.yml`       | Windows update manifest                                   |
+| `*.blockmap`       | Differential download block maps                          |
+
+## iOS (TestFlight)
+
+The iOS build is uploaded directly to App Store Connect / TestFlight by the separately dispatched [Release iOS workflow](../../.github/workflows/release-ios.yml). No IPA artifact is attached to the GitHub Release.
+
+| Detail            | Value                                      |
+| ----------------- | ------------------------------------------ |
+| Bundle ID         | `com.openknots.okcode.mobile`              |
+| Marketing version | `0.26.4`                                   |
+| Build number      | Set from `GITHUB_RUN_NUMBER` at build time |
+
+## Checksums
+
+SHA-256 checksums are not committed here; verify downloads via GitHub's release UI or `gh release download` if you use the GitHub CLI.
+
+## Operational references
+
+| File                                         | Purpose                                                           |
+| -------------------------------------------- | ----------------------------------------------------------------- |
+| [rollout-checklist.md](rollout-checklist.md) | Step-by-step release playbook from preflight through post-release |
+| [soak-test-plan.md](soak-test-plan.md)       | Structured release validation for the highest-risk surfaces       |
diff --git a/docs/releases/v0.26.4/rollout-checklist.md b/docs/releases/v0.26.4/rollout-checklist.md
@@ -0,0 +1,67 @@
+# v0.26.4 Rollout Checklist
+
+Step-by-step playbook for the v0.26.4 release. Each phase must complete before advancing.
+
+## Phase 0: Pre-flight
+
+- [ ] Verify all release package versions are `0.26.4`:
+  - `apps/server/package.json`
+  - `apps/desktop/package.json`
+  - `apps/web/package.json`
+  - `apps/mobile/package.json`
+  - `packages/contracts/package.json`
+- [ ] Verify Android `versionName` and iOS `MARKETING_VERSION` both match `0.26.4`.
+- [ ] Confirm `CHANGELOG.md` has `## [0.26.4] - 2026-04-22`.
+- [ ] Confirm `docs/releases/v0.26.4.md` exists with Summary, Highlights, Upgrade and install, and Release operations sections.
+- [ ] Confirm `docs/releases/v0.26.4/assets.md` exists and lists every expected attachment class.
+- [ ] Confirm `docs/releases/v0.26.4/rollout-checklist.md` and `docs/releases/v0.26.4/soak-test-plan.md` exist.
+- [ ] Confirm `docs/releases/README.md` includes the v0.26.4 row.
+- [ ] Run `bun run release:validate 0.26.4`.
+- [ ] Confirm the working tree is clean.
+- [ ] Confirm you are on `main`.
+
+### Quality gates
+
+- [ ] `bun run fmt:check`
+- [ ] `bun run lint`
+- [ ] `bun run typecheck`
+- [ ] `bun run test`
+- [ ] `bun run --cwd apps/web test:browser`
+- [ ] `bun run test:desktop-smoke`
+- [ ] `bun run release:smoke`
+
+## Phase 1: Publish
+
+- [ ] Push the release-prep commit to `main`.
+- [ ] Create and push tag `v0.26.4`.
+- [ ] Verify the coordinated `release.yml` workflow starts.
+- [ ] Trigger `release-ios.yml` manually for `v0.26.4` (or the matching release ref if the tag is unavailable).
+- [ ] Monitor `release.yml` through Preflight, Desktop builds, Publish CLI, Publish GitHub Release, and Finalize release.
+- [ ] Monitor `release-ios.yml` through Preflight, iOS signing preflight, and iOS TestFlight.
+
+### Asset verification
+
+- [ ] GitHub Release body matches `docs/releases/v0.26.4.md`.
+- [ ] `okcode-CHANGELOG.md` is attached.
+- [ ] `okcode-RELEASE-NOTES.md` is attached.
+- [ ] `okcode-ASSETS-MANIFEST.md` is attached.
+- [ ] macOS release artifacts are attached: DMG, ZIP, updater manifest, and blockmaps.
+- [ ] Linux release artifacts are attached: AppImage and updater manifest if generated.
+- [ ] Windows release artifacts are attached: installer, updater manifest, and blockmaps.
+- [ ] If the Intel compatibility workflow is run, confirm the x64 macOS DMG is attached separately.
+
+## Phase 2: Post-release verification
+
+- [ ] `npm exec --yes --package okcodes@0.26.4 -- okcode --version` returns `0.26.4`.
+- [ ] macOS installer launches and passes Gatekeeper.
+- [ ] Linux AppImage launches.
+- [ ] Windows installer installs and launches.
+- [ ] Desktop auto-update metadata is present for supported platforms.
+- [ ] If iOS signing was enabled, confirm the new TestFlight build appears.
+- [ ] Confirm the finalize job did not need to push another version-alignment commit, or review its no-op output if versions were already aligned before tagging.
+
+## Phase 3: Follow-through
+
+- [ ] Trigger the Intel compatibility workflow if macOS x64 artifacts are required for this train.
+- [ ] Update external release references or announcements.
+- [ ] Monitor reports for regressions in provider onboarding, auth flows, release packaging, and cross-platform install/update behavior.
diff --git a/docs/releases/v0.26.4/soak-test-plan.md b/docs/releases/v0.26.4/soak-test-plan.md
@@ -0,0 +1,39 @@
+# v0.26.4 Soak Test Plan
+
+Structured validation plan for the highest-risk surfaces in v0.26.4.
+
+## 1. Provider onboarding and auth flows
+
+| Step                                                              | Expected                                                                     | Pass |
+| ----------------------------------------------------------------- | ---------------------------------------------------------------------------- | ---- |
+| Configure each primary provider from Settings                     | Provider setup screens save cleanly and validation messages stay actionable  | [ ]  |
+| Exercise Claude and OpenClaw auth flows after reload              | Saved credentials and provider state restore without stale or conflicting UI | [ ]  |
+| Start a Codex or Copilot-backed conversation after provider setup | Turn creation, streaming, and provider selection remain consistent           | [ ]  |
+| Trigger an auth failure intentionally                             | Errors surface clearly without leaking secrets or breaking follow-up retries | [ ]  |
+
+## 2. Settings and configuration surfaces
+
+| Step                                                       | Expected                                                              | Pass |
+| ---------------------------------------------------------- | --------------------------------------------------------------------- | ---- |
+| Open the settings route on desktop and narrow layouts      | Navigation stays stable and each section is reachable                 | [ ]  |
+| Change provider availability and default options           | Picker filtering and availability controls update without stale state | [ ]  |
+| Use hotkey configuration controls and reset actions        | Shortcuts persist, restore, and do not regress the editor UI          | [ ]  |
+| Open the browser-preview-related settings and helper links | The helper flow launches correctly and does not break the app shell   | [ ]  |
+
+## 3. Runtime and review workflows
+
+| Step                                                            | Expected                                                           | Pass |
+| --------------------------------------------------------------- | ------------------------------------------------------------------ | ---- |
+| Run a thread that emits runtime events and reconnect mid-stream | Session state and event feeds remain consistent after reconnect    | [ ]  |
+| Open the PR review dashboard with recent review history         | Dashboard loads quickly and shows the expected recent activity     | [ ]  |
+| Navigate between threads, projects, and restored sessions       | Cached lookups, projections, and route transitions stay responsive | [ ]  |
+| Trigger browser preview and workspace activity during a turn    | The app avoids flicker, stale panes, and blocked input             | [ ]  |
+
+## 4. Desktop, CLI, and release packaging
+
+| Step                                                                    | Expected                                               | Pass |
+| ----------------------------------------------------------------------- | ------------------------------------------------------ | ---- |
+| Run `bun run test:desktop-smoke` on the release branch                  | Desktop packaging smoke remains green                  | [ ]  |
+| Run `bun run release:smoke` before and after tagging                    | Release-specific workflow checks remain green          | [ ]  |
+| Verify a packaged desktop artifact launches and reports the new version | Installed app opens cleanly and reports v0.26.4        | [ ]  |
+| Verify the CLI package after publish or from a packed tarball           | `okcode --version` and help commands resolve correctly | [ ]  |
diff --git a/packages/contracts/package.json b/packages/contracts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okcode/contracts",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "private": true,
   "files": [
     "dist"

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/desktop",`
`3`		`- "version": "0.26.2",`
	`3`	`+ "version": "0.26.4",`
`4`	`4`	`"private": true,`
`5`	`5`	`"main": "dist-electron/main.js",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/mobile",`
`3`		`- "version": "0.26.2",`
	`3`	`+ "version": "0.26.4",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "okcodes",`
`3`		`- "version": "0.26.2",`
	`3`	`+ "version": "0.26.4",`
`4`	`4`	`"license": "MIT",`
`5`	`5`	`"repository": {`
`6`	`6`	`"type": "git",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@okcode/web",`
`3`		`- "version": "0.26.2",`
	`3`	`+ "version": "0.26.4",`
`4`	`4`	`"private": true,`
`5`	`5`	`"type": "module",`
`6`	`6`	`"scripts": {`