## Houston 0.4.12

First release on top of v0.4.11. Codex on ChatGPT accounts is unblocked, the OpenAI model picker no longer offers a model that doesn't exist, and a run of mission-control + onboarding + platform improvements ships in one cut.

### Fixed

- **Codex sign-in, sign-out, and mission runs work again on ChatGPT accounts.** `codex login` and `codex logout` were aborting with `unknown variant 'xhigh'` whenever a newer codex CLI had written `model_reasoning_effort = "xhigh"` into `~/.codex/config.toml`. Houston now passes `-c model_reasoning_effort=high` to both, matching what the runner already did.
- **Phantom `gpt-5.5-codex` model removed from the OpenAI picker.** OpenAI never shipped that SKU; every call came back with a 400 `"not supported when using Codex with a ChatGPT account"` regardless of plan. Catalog now lists only `gpt-5.5`. Stored configs that point at the retired model fall back to `gpt-5.5` automatically the next time the chat panel reads them.
- **Mission panel stays open through the model picker** and closes cleanly on Esc when the new-mission field is empty.
- **Connect-phone copy is cross-platform** in English, Spanish, and Portuguese, instead of using macOS-only wording on Windows.
- **Plus icon and left-aligned model picker** restored after the previous chat header refactor.
- **Workspace index self-heals** when corrupted, and writes use a per-call tmp filename so two concurrent writes can't clobber each other.
- **Sessions no longer vanish or stick on "running"** after an unexpected provider exit.
- **Agent files browser renders correctly on Windows** including empty folders.

### Changed

- **Per-agent provider + model storage.** Workspace-level defaults are retired; each agent now carries its own provider and model in its `.houston/config/config.json`. Existing workspaces migrate idempotently on next launch.
- **Create-with-AI for new agents.** Type a sentence describing what you want the agent to do; the provider you pick generates a CLAUDE.md, suggests Composio integrations, and proposes a starting routine.
- **Paste images straight from the OS clipboard** into chat.
- **Global keyboard shortcuts** across mission control, board, and chat, plus a command-palette-style sidebar Commands menu and a chat attach menu.
- **"Finder" renamed to "File Manager"** throughout the UI so Windows users see terminology that matches their OS.
- **Gemini provider paused** in the picker while the engine adapter is hardened. Existing Gemini agents keep working; new agents can't select it until it returns.
- **Settings sidebar shows the app version** at the bottom so bug reports include it without users having to dig.

### Before you upgrade

- **Mac:** quit Houston before installing. macOS does not always replace a running app cleanly. If in doubt, remove `/Applications/Houston.app` and drag the new copy in.
- **Windows x64:** auto-update from 0.4.7 or later pulls you forward automatically. The MSI is still not OS-code-signed (SignPath integration still pending).
- **Windows ARM64:** there is no auto-update path from an emulated x64 install. Download the ARM64 MSI manually, uninstall the x64 build first, then install the ARM64 one.

### Known limitations

- **Windows MSI not yet OS-code-signed.** SignPath integration still pending.
- **"Continue with Microsoft" sign-in for Houston itself remains hidden** while we reconcile the Supabase Azure provider with the production callback URL. Google sign-in is unaffected.
- **Mobile companion is still beta.** Expect occasional reconnect hiccups.
