API Changes
- Add Task-native budget enforcement via new TaskBudget and TaskRecord CRDs. TaskBudget uses label selectors to match Tasks and enforces daily cost/token limits based on durable TaskRecord accounting. Blocked Tasks wait in Waiting phase with a BudgetBlocked condition. Task.status.usage provides structured cost and token data. Removes TaskSpawner-specific budgetPolicy in favor of the namespace-scoped TaskBudget design. (#1426, @knechtionscoding @gjkim42)
- Workspace.spec.ghproxy now opts a Workspace into a workspace-scoped ghproxy; Workspaces without spec.ghproxy no longer create ghproxy resources by default. (#1425, @gjkim42)
Features
- Update claude-code image from 2.1.198 to 2.1.202 (#1419, @app/kelos-bot)
- Update opencode image from 1.17.13 to 1.17.14 (#1430, @app/kelos-bot)
- OpenCode agents now map OPENCODE_API_KEY to ZHIPU_API_KEY for zai/* models. (#1424, @gjkim42)