fylorn · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026 · Oct 5, 2026
diff --git a/package.json b/package.json
@@ -2,7 +2,7 @@
   "name": "thinkwatch-lite",
   "private": true,
   "description": "Desktop app for a local AI API gateway on macOS, Windows and Linux",
-  "version": "2026.10.4",
+  "version": "2026.10.5",
   "type": "module",
   "packageManager": "pnpm@11.13.0",
   "scripts": {

diff --git a/release-notes/2026.10.5.md b/release-notes/2026.10.5.md
@@ -0,0 +1,26 @@
+**Upgrade notes:**
+- The bundled core is now 0.62.0, which speaks control-plane protocol 38. A remote server has to run core 0.62.0 too: this version does not connect to 0.61.0, and 2026.10.4 and earlier do not connect to 0.62.0.
+- Request history is kept.
+- A key's model scope now also applies when no upstream reports a model list, on WebSocket connections such as Codex's, and to every backup in failover. A client that used a model outside its key's scope through one of these gaps is now refused.
+
+**Model aliases:**
+- Upstreams has a new Aliases tab. An alias is another name for the same model: list the names the model has on each upstream, and every upstream that offers one of them can serve it under its own name, as backups for one another.
+- When the same Claude model has different names across upstreams (official, Bedrock, Vertex, OpenRouter), the tab and the new-alias dialog suggest grouping them, and a dot on the tab shows there is a suggestion.
+- An alias can also be created from an upstream's model list. The dialog shows which upstream receives which name, and warns when the name takes over another upstream's model or when a connected client treats the name specially.
+- Clients see aliases in their model lists, and answers carry the name the client asked for.
+- In a key's model scope, allowing an upstream model also allows the aliases that list it.
+
+**Routing:**
+- A rule can forward to specified models: an upstream and one of its models, with backups tried in order. The model is sent as written.
+- A model condition written for an upstream model also matches the aliases that list it.
+- Traffic marks requests sent under an alias or to a specified model, and shows the model each attempt sent.
+
+**Claude Desktop:**
+- Takeover follows the model-name rule of the current Claude Desktop, including 1M spellings.
+- When no upstream offers a Claude model, takeover asks which upstream model Claude Desktop should use and adds a routing rule for its own key. Cancelling the takeover removes the rule.
+
+**Also:**
+- Tool-call inspection has a new built-in rule, "Read or change ThinkWatch's own data", for tool calls whose path or command points into ThinkWatch's data directory, where every upstream key is kept. A document that only mentions the directory does not count.
+- Model lists sent to clients carry each model's context window, which Claude Desktop, Hermes and others use to size conversations.
+- Upstream addresses that end in their own API version, such as Zhipu's `…/api/paas/v4` and Ark's `…/api/v3`, work without a second `/v1`.
+- System notifications name every built-in tool-call rule; two used to show their internal id.
diff --git a/scripts/shots/core/en/dryrun.json b/scripts/shots/core/en/dryrun.json
@@ -1,5 +1,15 @@
 [
   {
+    "candidate_models": [
+      {
+        "provider": "relay",
+        "sent_model": "claude-sonnet-5"
+      },
+      {
+        "provider": "anthropic",
+        "sent_model": "claude-sonnet-5"
+      }
+    ],
     "candidates": [
       "relay",
       "anthropic"

diff --git a/scripts/shots/core/en/security.json b/scripts/shots/core/en/security.json
@@ -493,6 +493,21 @@
         "on_by_default": true,
         "why": "Sends a credential to a host that is neither local nor the credential's own provider"
       },
+      {
+        "action": "cut",
+        "custom": false,
+        "default_action": "cut",
+        "enabled": true,
+        "id": "thinkwatch-data",
+        "kind": "command",
+        "matcher": {
+          "check": "thinkwatch-data",
+          "kind": "builtin"
+        },
+        "name": "Read or change ThinkWatch's own data",
+        "on_by_default": true,
+        "why": "Reads or changes ThinkWatch's data directory, which holds every upstream key in plain text and the settings of these protections"
+      },
       {
         "action": "cut",
         "custom": false,

diff --git a/scripts/shots/core/en/status.json b/scripts/shots/core/en/status.json
@@ -1,5 +1,5 @@
 {
-  "api_version": 37,
+  "api_version": 38,
   "clients": 4,
   "config_path": "",
   "gateway_addr": null,

diff --git a/scripts/shots/core/zh/dryrun.json b/scripts/shots/core/zh/dryrun.json
@@ -1,5 +1,15 @@
 [
   {
+    "candidate_models": [
+      {
+        "provider": "relay",
+        "sent_model": "claude-sonnet-5"
+      },
+      {
+        "provider": "anthropic",
+        "sent_model": "claude-sonnet-5"
+      }
+    ],
     "candidates": [
       "relay",
       "anthropic"

diff --git a/scripts/shots/core/zh/security.json b/scripts/shots/core/zh/security.json
@@ -493,6 +493,21 @@
         "on_by_default": true,
         "why": "Sends a credential to a host that is neither local nor the credential's own provider"
       },
+      {
+        "action": "cut",
+        "custom": false,
+        "default_action": "cut",
+        "enabled": true,
+        "id": "thinkwatch-data",
+        "kind": "command",
+        "matcher": {
+          "check": "thinkwatch-data",
+          "kind": "builtin"
+        },
+        "name": "Read or change ThinkWatch's own data",
+        "on_by_default": true,
+        "why": "Reads or changes ThinkWatch's data directory, which holds every upstream key in plain text and the settings of these protections"
+      },
       {
         "action": "cut",
         "custom": false,

diff --git a/scripts/shots/core/zh/status.json b/scripts/shots/core/zh/status.json
@@ -1,5 +1,5 @@
 {
-  "api_version": 37,
+  "api_version": 38,
   "clients": 4,
   "config_path": "",
   "gateway_addr": null,

diff --git a/scripts/shots/mock/config.ts b/scripts/shots/mock/config.ts
@@ -193,6 +193,7 @@ export function providerModels(name: string): ProviderModelsView | null {
       price,
       price_source: price ? priceSource(name) : null,
       estimated: false,
+      aliases: [],
     };
   });
   return {
@@ -209,7 +210,10 @@ export function providerModels(name: string): ProviderModelsView | null {
 export function knownModels() {
   const by = new Map<string, string[]>();
   for (const p of providers()) for (const m of catalogOf(p)) by.set(m, [...(by.get(m) ?? []), p.name]);
-  return [...by.entries()].map(([id, ps]) => ({ id, providers: ps })).sort((a, b) => a.id.localeCompare(b.id));
+  // 示例配置里没有别名
+  return [...by.entries()]
+    .map(([id, ps]) => ({ id, providers: ps, aliases: [] }))
+    .sort((a, b) => a.id.localeCompare(b.id));
 }
 
 // ───────────────────────────────────────── 概览、密钥、安全、价格

diff --git a/scripts/shots/mock/core.ts b/scripts/shots/mock/core.ts
@@ -137,6 +137,13 @@ export const CORE: { [N in WebviewEndpoint]: Handler<N> } = {
   UpdateGroup: refuse,
   DeleteGroup: refuse,
   KnownModels: () => knownModels(),
+  // 示例配置里没有别名
+  Aliases: () => ({ aliases: [], suggestions: [] }),
+  CreateAlias: refuse,
+  UpdateAlias: refuse,
+  DeleteAlias: refuse,
+  PreviewAlias: () => notFound("The alias preview"),
+  AliasUsage: (_req, [name]) => notFound(`The alias ${name}`),
   // 没给时间窗就是今天：本地零点到现在（`Window` 的默认）
   // 没给时间窗就是最近 7 天（`UpstreamHealth` 的默认）
   UpstreamHealth: (req) => upstreamHealth(req.from_ms ?? NOW - 7 * DAY, req.to_ms ?? Date.now()),

diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "thinkwatch-lite"
-version = "2026.10.4"
+version = "2026.10.5"
 edition = "2024"
 # **这个数决定依赖能升到哪一版。**edition 2024 的解析器只挑声明的 Rust
 # 版本编得动的依赖：写 1.85 的时候，`cargo update` 一直停在旧的 time 和
@@ -26,12 +26,12 @@ license = "MIT"
 # twcore 二进制必须和这里编译进去的协议镜像来自同一个 core 版本 —— 打包脚本正是
 # 从 tw-api 锁到的 tag 去取二进制的（见 scripts/fetch-core.sh）。
 [workspace.dependencies]
-tw-api = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
-tw-types = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
-tw-yaml = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
-tw-guard = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
-tw-watch = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
-tw-link = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.61.0" }
+tw-api = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
+tw-types = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
+tw-yaml = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
+tw-guard = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
+tw-watch = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
+tw-link = { git = "https://github.com/ThinkWatchProject/ThinkWatch-Core.git", tag = "v0.62.0" }
 
 [lib]
 name = "thinkwatch_lite_lib"

diff --git a/src-tauri/crates/tw-adopt/src/cloud.rs b/src-tauri/crates/tw-adopt/src/cloud.rs
@@ -304,8 +304,9 @@ pub fn unpinned_models(home: &Path, settings: &str, around: &Around) -> Vec<&'st
     out
 }
 
-/// Claude Code 的模型别名（model-config 一页的表）。带 `[1m]` 的也是
-fn is_alias(m: &str) -> bool {
+/// Claude Code 的模型别名（model-config 一页的表）。带 `[1m]` 的也是。它请求之前先换成完整的
+/// 模型名 —— 网关的模型别名起成这些名称，Claude Code 的请求用不到（Lite 的 `aliases` 据此提示）
+pub fn is_alias(m: &str) -> bool {
     let m = m.trim().to_ascii_lowercase();
     let m = m.strip_suffix("[1m]").unwrap_or(&m);
     matches!(