v10.13.7: fix hash stripping, image bloat, thread safety, response logging

codex-launcher-gui

@@ -27,7 +27,11 @@ model_catalog_json = ""
 """
 
 CHANGELOG = [
-    ("10.13.6", "2026-05-27", [
+    ("10.13.7", "2026-05-27", [
+        "Fix: strip timestamps from loop hash (<current_date> broke cross-session tracker)",
+        "Fix: strip base64 image data from tool outputs in normalizer (multi-MB payload bloat)",
+        "Fix: thread-safe file tracker (was unprotected dict in ThreadingHTTPServer)",
+        "Fix: response logging for finalize and budget-cap paths",
         "Anti-loop: cross-session tracker, tool-call budget (150), file read-loop detection",
         "Auto 401 token refresh with retry (v2 + OA compat)",
         "Model-aware idle timeout: flash models 120s, pro 300s",
@@ -36,8 +40,6 @@ CHANGELOG = [
         "Anti-stall fix: no longer kills own parent/process group",
         "Codex Desktop Updater: check/install/rollback/manual rebuild",
         "Fix Codex CLI 0.134.0 profiles: separate .config.toml files",
-        "Fix compaction: max_input_items 60->200 for 1M-token models",
-        "Auto 401 token refresh on transient auth errors",
         "E2E test suite: bash test-antigravity.sh [--task]",
         "Merge cobra91 PR #17: MSIX Desktop launch, button state",
     ]),