cjhyy · Nov 12, 2026 · Nov 12, 2026 · Nov 12, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,7 +8,55 @@ breaking.
 
 ## [Unreleased]
 
-## [0.10.1] - Unreleased
+## [0.11.0-rc.1] - 2026-11-12
+
+Release candidate. Mimi's notice system phase 2 and the settings rework have not
+been verified on a real device yet.
+
+### Changed (breaking)
+
+- Mimi follow-ups are now schedule rules in the notice rule table. On first
+  start the old `follow-ups.json` store and its scheduled jobs are removed;
+  existing follow-ups are not migrated.
+
+### Added
+
+- Mimi notices for Codex / Claude Code sessions run by the desktop and for
+  sub-agents: `NotifyMe`, `ReportToMimi`, completion outcomes, and approvals and
+  questions answerable over IM. Codex permission approvals now grant the
+  requested permissions for the turn (previously "allow" granted nothing).
+- Owners answer IM prompts in their own words: replies are interpreted by a
+  model, checked by the host, and never parsed with fixed commands. Goal pauses,
+  limit stops and failures can be continued, stopped, retried or handed to Mimi
+  from IM, and finished results can be opened on the desktop.
+- Recurring follow-ups, morning and evening briefs, a heartbeat, fixed digest
+  slots and "not now" deferral, all as rules on one scheduler (briefs and
+  heartbeat off by default).
+- Mimi settings page with sections; IM channel binding moved into Mimi settings;
+  one trigger list to pause, resume or delete every rule.
+- Mimi tools `Notices`, `Triggers`, `ManageTrigger` and `NotificationSettings`
+  (including a temporary snooze), available only in the owner's own turns.
+- External providers as defaults for new chats and WeChat; local usage provider
+  discovery with independent quota queries; bounded Anthropic native tool
+  discovery.
+
+### Changed
+
+- Follow-up reminders, `ReportToMimi` replies and `WatchSession` go through the
+  notice router, so quiet hours and rate limits apply.
+- Tool schemas are frozen per session and discovery results are appended;
+  unified usage reporting; a more stable question composer.
+- Faster cron next-occurrence search; at the DST fall-back, fixed-time
+  expressions fire once.
+
+### Fixed
+
+- Goal lifecycle authority and remote Goal controls; Goal tool eligibility and
+  session routing; Claude tool caching through OpenRouter; mixed native
+  references in complex schemas; external runtime workspace switching; removed
+  synchronous history scans from send and maintenance.
+
+## [0.10.1] - 2026-11-11
 
 ### Fixed
 
@@ -19,12 +67,6 @@ breaking.
   files cannot invalidate a previously signed target. Preserve the signing order
   and Node integrity checks, and strictly verify the helper executable.
 
-### Release status
-
-- This patch is prepared but has not been published. The failed `v0.10.0` release
-  attempt did not create a GitHub Release and skipped npm publishing; its existing
-  tag remains unchanged.
-
 ## [0.10.0] - 2026-11-11
 
 ### Changed (breaking)

diff --git a/bun.lock b/bun.lock
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Code Shell — meta package. Installs @cjhyy/code-shell-core and @cjhyy/code-shell-tui.",
   "type": "module",
   "packageManager": "bun@1.3.11",

diff --git a/packages/browser-devtools/package.json b/packages/browser-devtools/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-browser-devtools",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "private": true,
   "description": "Host-independent bounded browser diagnostics through an injected page surface.",
   "type": "module",

diff --git a/packages/chat/package.json b/packages/chat/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-chat",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "A standalone, transport-agnostic multi-channel chat gateway for Node.js and Bun.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/coding/package.json b/packages/coding/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-capability-coding",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Coding capability pack for the generic code-shell agent core.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-core",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Core engine for code-shell — agent orchestration, tool execution, hooks, protocol. UI-agnostic.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/core/src/version.ts b/packages/core/src/version.ts
@@ -1,2 +1,2 @@
 /** Release-managed runtime version; safe to import without loading public SDK exports. */
-export const VERSION = "0.10.1";
+export const VERSION = "0.11.0-rc.1";
diff --git a/packages/desktop/package.json b/packages/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-desktop",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "private": true,
   "license": "MIT",
   "description": "Electron desktop client for CodeShell — the full desktop agent app.",

diff --git a/packages/desktop/scripts/windows-nsis-acceptance.mjs b/packages/desktop/scripts/windows-nsis-acceptance.mjs
@@ -58,7 +58,8 @@ export function assertProductionNsis(pkg) {
   assert.equal(pkg.build.appId, NSIS_IDENTITY.appId);
   assert.equal(pkg.build.productName, NSIS_IDENTITY.product);
   assert.equal(pkg.name, "@cjhyy/code-shell-desktop");
-  assert.match(pkg.version, /^\d+\.\d+\.\d+$/);
+  // Same grammar as scripts/release.ts: X.Y.Z, X.Y.Z-rc.N or X.Y.Z-beta.N.
+  assert.match(pkg.version, /^\d+\.\d+\.\d+(?:-(?:rc|beta)\.\d+)?$/);
   assert.deepEqual(pkg.build.win.target, ["nsis"]);
   assert.equal(pkg.build.directories.buildResources, "build");
   assert.deepEqual(pkg.build.nsis, {

diff --git a/packages/desktop/scripts/windows-nsis-acceptance.test.mjs b/packages/desktop/scripts/windows-nsis-acceptance.test.mjs
@@ -337,6 +337,16 @@ test("the committed production NSIS settings remain intact and reject unreviewed
   const associations = clone(pkg);
   associations.build.fileAssociations = [{ ext: "owned" }];
   assert.throws(() => assertProductionNsis(associations));
+  for (const version of ["1.2.3", "1.2.3-rc.4", "1.2.3-beta.1"]) {
+    const copy = clone(pkg);
+    copy.version = version;
+    assert.equal(assertProductionNsis(copy), `code-shell-Setup-${version}.exe`);
+  }
+  for (const version of ["1.2", "1.2.3-alpha.1", "1.2.3-rc", "1.2.3 ", "1.2.3-rc.1;x"]) {
+    const copy = clone(pkg);
+    copy.version = version;
+    assert.throws(() => assertProductionNsis(copy));
+  }
 });
 
 test("direct Node vectors preserve silent current-user/raw final tails without a shell", () => {

diff --git a/packages/host/package.json b/packages/host/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-host",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Host-neutral capability registry and worker request dispatch for CodeShell hosts.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/link/package.json b/packages/link/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-link",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Framework-independent provider manifests and authorization guides for CodeShell Link.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/optimization-lab/package.json b/packages/optimization-lab/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-capability-optimization-lab",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "private": true,
   "description": "Optimization Lab capability for CodeShell — budgeted, reviewable Skill optimization experiments.",
   "type": "module",

diff --git a/packages/pet/package.json b/packages/pet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-pet",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Pet (top-level personal assistant) capability for CodeShell — projection state machine, DelegateWork contract, Mimi behavior profile.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/server/package.json b/packages/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",

diff --git a/packages/tui/package.json b/packages/tui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-tui",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "Terminal UI for code-shell — Ink-based REPL on top of @cjhyy/code-shell-core.",
   "license": "MIT",
   "repository": {

diff --git a/packages/web/package.json b/packages/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-web",
-  "version": "0.10.1",
+  "version": "0.11.0-rc.1",
   "description": "CodeShell browser client — reusable state, stream reducers, reconnecting WebSocket and authorization helpers, plus the full web/app SPA built to dist-app for Server hosting and reused by Desktop mobile. Browser-only; no Electron or Node runtime.",
   "type": "module",
   "main": "./dist/index.js",