0.3.30

fix(ai): omit temperature for Kimi (K2.x rejects non-default values)

Kimi K2.6 returns 400 "invalid temperature: only 1 is allowed for this
model" on any temperature != 1 — same pattern as OpenAI's reasoning /
Pro models. Omitting the field lets Kimi use its default and the
request goes through.

Bumps to 0.3.30.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

0.3.28

chore: bump version to 0.3.28

Ships since 0.3.27:
- Kimi (Moonshot) as a first-class AI provider — kimi-k2.6 default,
  full model list, per-provider key + model, cost tracking
- CodeQL #15 resolved — tightened OpenAI host check to exact + dot-
  subdomain match (evilopenai.com no longer slips through)
- Share2 icon added to the host's lucide bridge for future pro-bundle
  use (doesn't change current behavior)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

0.3.27

fix(pro-auth): move refresh single-flight lock to main (0.3.27)

When two Studio windows are open, each renderer runs its own proLoader
with its own in-flight lock — but those locks don't see each other.
Both windows race on the /refresh POST with the same single-use refresh
token, and the auth service revokes the session as replay. User-visible
symptom: "Your Coherence session expired" within ~15 min of opening
two windows, even right after sign-in.

The lock has to live somewhere only one instance exists, which means
main. Add a `pro-refresh-token` IPC handler that:
  - reads the refresh token from the shared secure store
  - holds an inFlightProRefresh promise for the duration of the POST
  - coalesces concurrent renderer requests onto that promise
  - persists new access + rotated refresh tokens atomically
  - returns the new access token to all callers

proLoader.refreshAccessToken now delegates to this IPC (keeping its
own per-window lock purely as an optimization) and hydrates its
in-memory caches from the result + disk.

Also bumps to 0.3.27 so the ffmpeg-music fix + this cross-window fix
ship together.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

0.3.26

chore: bump version to 0.3.26

Ships the ffmpeg-path fix (music now muxes into exports + showcase
uploads) and the cross-process refresh-token race fix (stops "Coherence
session expired" toasts mid-edit).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

0.3.25

v0.3.25

chore: bump version to 0.3.25

0.3.19

v0.3.19

chore: bump version to 0.3.19

0.3.18

v0.3.18

chore: bump version to 0.3.18

0.3.8

v0.3.8

chore: bump version to 0.3.8

0.3.7

v0.3.7

chore: bump version to 0.3.7

0.3.6

chore: bump version to 0.3.6

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>