## Core
### Bugfixes
- Provider configs and API responses now accept models marked as `active`.
- Read tool permission rules now match worktree-relative paths, so read allowlists and denylists apply correctly.
- Workspace-routed HTTP API endpoints no longer reject valid `directory` and `workspace` query params.
## TUI
### Bugfixes
- Startup errors now report every failed bootstrap request instead of only the first one.
- Opening a session no longer crashes when the messages request fails.
## Desktop
### Bugfixes
- Older migrated sessions with missing diff file details load again.
- Older migrated sessions with missing diff patches load again. (@OpeOginni)
## SDK
### Bugfixes
- `throwOnError: true` now throws a real `Error` with the server message and preserves the response body in `cause`.
## Extensions
### Improvements
- TUI plugins using the deprecated `api.command` API keep working while you migrate to `api.keymap`.
### Bugfixes
- Provider plugins can no longer mutate shared provider model state for the rest of the app.
**Thank you to 1 community contributor:**
- @OpeOginni:
- fix(sessions): allow optional patch field in diff for migrated sessions (#26574)