Zoo-Code-Org · murd0cc · Aug 9, 2026 · Aug 11, 2026 · Aug 11, 2026 · Aug 11, 2026
@@ -150,6 +150,12 @@ jobs:
               if: github.event_name != 'pull_request' || steps.e2e-marker.outputs.cache-hit != 'true'
               run: xvfb-run -a pnpm --filter @roo-code/vscode-e2e test:ci:mock
 
+            - name: Run mocked restart-persistence E2E test
+              # Reuse the runner built by the full mocked suite; this direct invocation avoids
+              # test:run's dotenv loading and does not repeat the bundle or webview build.
+              if: github.event_name != 'pull_request' || steps.e2e-marker.outputs.cache-hit != 'true'
+              run: TEST_FILE=restart-persistence.test USE_MOCK=true xvfb-run -a pnpm --filter @roo-code/vscode-e2e exec node ./out/runTest.js
+
             - name: Explain skipped mocked E2E pass marker
               if: steps.e2e-marker.outputs.cache-hit != 'true' && steps.run-e2e.outcome == 'success' && steps.vscode-fallback.outputs.used == 'true'
               run: echo "Skipping mocked E2E pass marker because tests ran against a stale cached VS Code binary (VS Code download endpoints unreachable)."

@@ -5,6 +5,13 @@ on:
     pull_request:
         types: [opened, reopened, ready_for_review, synchronize]
         paths:
+            - "apps/vscode-e2e/package.json"
+            - "apps/vscode-e2e/src/theme-fixtures/**"
+            - "packages/types/src/api.ts"
+            - "packages/types/src/vscode-extension-host.ts"
+            - "src/core/webview/ClineProvider.ts"
+            - "src/core/webview/webviewMessageHandler.ts"
+            - "src/extension/api.ts"
             - "webview-ui/**"
             - "src/shared/**"
             - "package.json"
@@ -55,3 +62,32 @@ jobs:
                       webview-ui/playwright-report
                       webview-ui/test-results
                   if-no-files-found: ignore
+
+    theme-fixtures:
+        runs-on: ubuntu-latest
+        timeout-minutes: 15
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+              with:
+                  persist-credentials: false
+            - name: Setup Node.js and pnpm
+              uses: ./.github/actions/setup-node-pnpm
+              with:
+                  install-args: "--frozen-lockfile"
+            - name: Install xvfb
+              run: sudo apt-get install -y xvfb
+            - name: Get pinned VS Code version
+              id: vscode-version
+              run: |
+                  VERSION=$(node -p 'require("./apps/vscode-e2e/package.json").devDependencies["@types/vscode"]')
+                  echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+            - name: Cache pinned VS Code
+              uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+              with:
+                  path: apps/vscode-e2e/.vscode-test/
+                  key: vscode-theme-fixtures-${{ runner.os }}-${{ steps.vscode-version.outputs.version }}-v1
+            - name: Test theme fixture serialization
+              run: pnpm --filter @roo-code/vscode-e2e themes:test
+            - name: Check generated VS Code theme fixtures
+              run: xvfb-run -a pnpm --filter @roo-code/vscode-e2e themes:check
@@ -1,5 +1,47 @@
 # Zoo Code Changelog
 
+## [3.78.0]
+
+### Minor Changes
+
+- Add NanoGPT as a configurable provider with dynamic model discovery, streaming and prompt completions, and routing preferences for speed, price, latency, throughput, tool support, and caching (PR #1239 by @taltas)
+- Add the new Gemini 3.7 Flash model to Google Gemini and Vertex AI with a 1M context window, multimodal input, prompt caching, and configurable reasoning (PR #1241 by @app/zoomote)
+- Add the new GLM 5.3 model to Z AI coding plans and OpenCode Go with a 1M context window, prompt caching, and extended reasoning controls (PR #1244 by @app/zoomote)
+- Add the new Qwen3.8 Max model to OpenCode Go with multimodal input, caching, streamed reasoning, and Anthropic Messages routing (PR #1245 by @app/zoomote)
+- Fix Azure OpenAI resource endpoints and improve Azure-specific setup guidance in OpenAI Compatible settings (#1191 by @edelauna, PR #1192 by @app/zoomote)
+- Preserve task-history titles when rapidly navigating away before a task's messages finish loading (#1180 by @edelauna, PR #1181 by @edelauna)
+- Correct Kimi Code output-token defaults and honor model limits returned by the server (#1215 by @myk1yt, PR #1217 by @myk1yt)
+- Update DeepSeek V4 Pro reasoning efforts and normalize medium, high, and extended reasoning mappings (#1235 by @WHMHammer, PR #1236 by @WHMHammer)
+- Correct DeepSeek V4 pricing and expand provider coverage for the V4 Pro 0813 checkpoint (PR #1237 by @app/zoomote)
+- Rename the default settings import/export file to `zoo-code-settings.json` throughout the extension (#1176 by @Rafael-Silva-Oliveira, PR #1177 by @Rafael-Silva-Oliveira)
+- Add Destructive Command Guard support for Intel-based macOS systems (PR #1213 by @app/zoomote)
+- Update `undici` to 6.28.0 to address security vulnerabilities (PR #1161 by @app/renovate)
+- Update Mermaid to 11.16.1 to address a prototype-pollution vulnerability (PR #1193 by @app/renovate)
+- Record tool usage centrally to prevent duplicate telemetry and sanitize raw tool names (PR #1073 by @edelauna)
+- Canonicalize shared provider settings identifiers and add registry-alignment coverage (PR #1109 by @WebMad)
+- Canonicalize provider identifiers across CLI configuration, environment mappings, and model selection (PR #1110 by @WebMad)
+- Complete the webview migration to canonical provider identifiers across provider settings and routing (PR #1141 by @WebMad)
+- Use canonical provider identifiers throughout API options and add focused interaction coverage (PR #1146 by @WebMad)
+- Canonicalize provider model configuration identifiers and provider-specific settings behavior (PR #1147 by @WebMad)
+- Migrate model-selection UI hooks to canonical provider identifiers (PR #1148 by @WebMad)
+- Reuse the retired Roo provider identifier registry while preserving migration compatibility (PR #1166 by @WebMad)
+- Introduce typed shared test utilities for API options, filesystem mocks, reset operations, VS Code doubles, and webview rendering (PR #1171 by @app/zoomote)
+- Reuse shared API option factories across Requesty, OpenRouter, and Vercel AI Gateway provider tests (PR #1178 by @app/zoomote)
+- Reuse the shared Responses client mock in X.AI provider tests (PR #1182 by @app/zoomote)
+- Reuse shared VS Code context, URI, and reset helpers in custom-mode configuration tests (PR #1190 by @app/zoomote)
+- Reuse shared reset helpers across code-index embedder tests (PR #1194 by @app/zoomote)
+- Reuse shared config test helpers and remove obsolete lint suppressions (PR #1195 by @app/zoomote)
+- Reuse shared webview render helpers across focused chat tests (PR #1196 by @app/zoomote)
+- Reuse shared reset helpers across terminal integration tests (PR #1197 by @app/zoomote)
+- Reuse shared VS Code and reset helpers in settings import/export tests (PR #1198 by @app/zoomote)
+- Reuse shared reset helpers across additional code-index tests (PR #1199 by @app/zoomote)
+- Complete another batch of shared reset-helper adoption in code-index tests (PR #1200 by @app/zoomote)
+- Finish reset-helper adoption in Semble and terminal test suites (PR #1201 by @app/zoomote)
+- Complete shared reset-helper adoption across provider tests (PR #1202 by @app/zoomote)
+- Reuse shared webview render helpers across chat and settings tests (PR #1203 by @app/zoomote)
+- Complete shared webview render-helper adoption in the remaining settings tests (PR #1204 by @app/zoomote)
+- Merge the v3.76.0 release preparation branch into `main` (PR #1173 by @navedmerchant)
+
 ## [3.76.0]
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 # Zoo Code Privacy Policy
 
-**Last Updated: May 13th, 2026**
+**Last Updated: August 15th, 2026**
 
 Zoo Code respects your privacy and is committed to transparency about how we
 handle your data. Below is a simple breakdown of where key pieces of data
@@ -32,14 +32,18 @@ go—and, importantly, where they don't.
 - **API Keys & Credentials**: If you enter an API key (e.g., to connect an AI
   model), it is stored locally on your device and never sent to us or any third
   party, except the provider you have chosen.
-- **Telemetry (Usage Data)**: We collect feature usage and error data to help
-  us improve Zoo Code. This telemetry is powered by PostHog and includes your
-  VS Code machine ID, feature usage patterns, and exception reports. The VS Code
+- **Telemetry (Usage Data)**: We collect feature usage and error data to help us
+  improve Zoo Code. This telemetry is powered by PostHog and includes your VS
+  Code machine ID, feature usage patterns, and exception reports. The VS Code
   machine ID is a persistent identifier and may be considered personal data in
   some jurisdictions; we use it only for product analytics and error grouping.
-  We retain telemetry only as long as needed for product analytics and debugging.
-  Telemetry does **not** collect your code or AI prompts, and you can opt out at
-  any time through the settings.
+  PostHog event data is retained for 12 months under our current project
+  configuration. This PostHog-based telemetry does **not** collect your code or AI
+  prompts. Telemetry is on by default. To turn it off, choose "Disabled" in
+  the settings or in the notice shown on first use. The notice remains until
+  you explicitly Accept or Decline. Telemetry also follows VS Code's own
+  global telemetry setting: if you turn that off, Zoo Code stops sending
+  telemetry right away, even if the Zoo Code setting says "Enabled."
 - **Marketplace Requests**: When you browse or search the Marketplace for Model
   Configuration Profiles (MCPs) or Custom Modes, Zoo Code makes a secure API
   call to Zoo Code's backend servers to retrieve listing information. These

@@ -46,13 +46,13 @@ Zoo Code builds on the foundation created by Roo Code and continues to expand it
 - **More dependable terminal and editing workflows** — fixes for premature terminal completion, task-state races, context management, diff editing, and provider-specific tool use.
 - **More control over your workspace** — rules management, per-mode MCP restrictions, multi-root path controls, model reasoning options, and completion change review actions.
 
-## What's New in v3.76.0
+## What's New in v3.78.0
 
-- **Run longer, uninterrupted tasks with Destructive Command Guard (DCG)** — DCG blocks dangerous commands while letting Zoo keep working without you continuously pressing approval buttons, backed by hardened managed-binary downloads and installation.
-- **Better provider controls and reliability** — choose OpenAI Codex response speed, use updated DeepSeek configurations, and benefit from stronger isolation between provider-profile changes and running tasks.
-- **Critical terminal execution fix** — Zoo now waits for terminal commands to finish before starting the next step, preventing overlapping work and premature model continuation.
-- Smarter batching groups related tool approvals while keeping unrelated requests separate.
-- Telemetry delivery and model-cache fetching are more resilient under failures and concurrent requests.
+- **Three major new models have arrived** — use the brand-new Gemini 3.7 Flash, GLM 5.3, and Qwen3.8 Max models, plus updated DeepSeek V4 reasoning, pricing, and provider coverage.
+- **Connect to NanoGPT** — use dynamic model discovery, streaming and prompt completions, and routing preferences for speed, price, latency, throughput, tool support, and caching.
+- **More reliable providers and tasks** — fixes improve Azure OpenAI endpoint setup, Kimi Code output limits, task-history title preservation, and Zoo settings import/export.
+- Destructive Command Guard now supports Intel-based Macs.
+- Security updates address vulnerabilities in `undici` and Mermaid.
 
 <details>
   <summary>🌐 Available languages</summary>

@@ -14,6 +14,7 @@ describe("getContextWindow", () => {
 		[providerIdentifiers.vercelAiGateway, "vercelAiGatewayModelId"],
 		[providerIdentifiers.opencodeGo, "opencodeGoModelId"],
 		[providerIdentifiers.kenari, "kenariModelId"],
+		[providerIdentifiers.nanogpt, "nanoGptModelId"],
 		[providerIdentifiers.zooGateway, "zooGatewayModelId"],
 	] as const)("uses the provider-specific model field for %s", (provider, modelField) => {
 		const config = { apiProvider: provider, [modelField]: "selected-model" } as ProviderSettings

@@ -56,6 +56,8 @@ function getModelIdForProvider(config: ProviderSettings): string | undefined {
 			return config.opencodeGoModelId
 		case providerIdentifiers.kenari:
 			return config.kenariModelId
+		case providerIdentifiers.nanogpt:
+			return config.nanoGptModelId
 		case providerIdentifiers.zooGateway:
 			return config.zooGatewayModelId
 		case providerIdentifiers.anthropic:

@@ -0,0 +1,18 @@
+{
+	"fixtures": [
+		{
+			"match": {
+				"userMessage": "RESTART_PERSISTENCE_SMOKE"
+			},
+			"response": {
+				"toolCalls": [
+					{
+						"name": "attempt_completion",
+						"arguments": "{\"result\":\"RESTART_PERSISTENCE_MARKER\"}",
+						"id": "call_restart_persistence_done"
+					}
+				]
+			}
+		}
+	]
+}
@@ -9,6 +9,10 @@
 		"test:ci:mock": "pnpm -w bundle && pnpm --filter @roo-code/vscode-webview build && USE_MOCK=true pnpm test:run",
 		"test:record": "AIMOCK_RECORD=true pnpm test:ci",
 		"test:run": "rimraf out && tsc -p tsconfig.json && dotenv -e .env.local -- node ./out/runTest.js",
+		"themes:build": "pnpm -w bundle && pnpm --filter @roo-code/vscode-webview build && rimraf out && tsc -p tsconfig.json",
+		"themes:update": "pnpm themes:build && node ./out/theme-fixtures/generate.js update",
+		"themes:check": "pnpm themes:build && node ./out/theme-fixtures/generate.js check",
+		"themes:test": "pnpm --filter @roo-code/types build && rimraf out && tsc -p tsconfig.json && node --test ./out/theme-fixtures/fixtures.test.js",
 		"clean": "rimraf out .turbo"
 	},
 	"devDependencies": {

@@ -0,0 +1,107 @@
+import * as path from "path"
+import * as fs from "fs/promises"
+
+import { createWriteStream } from "fs"
+
+export const PHASE_RESULT_VERSION = 1 as const
+
+export type RestartPhase = "create" | "verify"
+export type PhaseStatus = "passed" | "failed"
+
+export type PhaseError = {
+	message: string
+	stack?: string
+}
+
+export type PhaseResult = {
+	version: typeof PHASE_RESULT_VERSION
+	phase: RestartPhase
+	status: PhaseStatus
+	values?: Record<string, string>
+	error?: PhaseError
+}
+
+const phaseResultNames: Record<RestartPhase, string> = {
+	create: "01-create.json",
+	verify: "02-verify.json",
+}
+
+export function getPhaseResultPath(resultsDir: string, phase: RestartPhase): string {
+	const resolvedResultsDir = path.resolve(resultsDir)
+	const resultPath = path.resolve(resolvedResultsDir, phaseResultNames[phase])
+	if (path.dirname(resultPath) !== resolvedResultsDir) {
+		throw new Error(`Phase result path escaped the results directory: ${phase}`)
+	}
+	return resultPath
+}
+
+export function serializePhaseError(error: unknown): PhaseError {
+	if (error instanceof Error) {
+		return {
+			message: error.message.slice(0, 2_000),
+			...(error.stack && { stack: error.stack.slice(0, 4_000) }),
+		}
+	}
+
+	return { message: String(error).slice(0, 2_000) }
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+	return typeof value === "object" && value !== null
+}
+
+export function validatePhaseResult(value: unknown): asserts value is PhaseResult {
+	if (!isRecord(value) || value.version !== PHASE_RESULT_VERSION) {
+		throw new Error("Invalid phase result version")
+	}
+	if (value.phase !== "create" && value.phase !== "verify") {
+		throw new Error("Invalid phase result phase")
+	}
+	if (value.status !== "passed" && value.status !== "failed") {
+		throw new Error("Invalid phase result status")
+	}
+	if (value.values !== undefined) {
+		if (!isRecord(value.values) || Object.values(value.values).some((entry) => typeof entry !== "string")) {
+			throw new Error("Phase result values must be string-valued")
+		}
+	}
+	if (value.error !== undefined) {
+		if (!isRecord(value.error) || typeof value.error.message !== "string") {
+			throw new Error("Invalid phase result error")
+		}
+		if (value.error.stack !== undefined && typeof value.error.stack !== "string") {
+			throw new Error("Invalid phase result error stack")
+		}
+	}
+}
+
+export async function writePhaseResult(resultsDir: string, result: PhaseResult): Promise<void> {
+	validatePhaseResult(result)
+	const targetPath = getPhaseResultPath(resultsDir, result.phase)
+	const temporaryPath = `${targetPath}.${process.pid}.${Date.now()}.tmp`
+	try {
+		await writeJsonAtomically(temporaryPath, result)
+		await fs.rename(temporaryPath, targetPath)
+	} finally {
+		await fs.rm(temporaryPath, { force: true })
+	}
+}
+
+async function writeJsonAtomically(filePath: string, value: PhaseResult): Promise<void> {
+	await fs.mkdir(path.dirname(filePath), { recursive: true })
+	await new Promise<void>((resolve, reject) => {
+		const stream = createWriteStream(filePath, { encoding: "utf8" })
+		stream.once("error", reject)
+		stream.once("finish", resolve)
+		stream.end(JSON.stringify(value))
+	})
+}
+
+export async function readPhaseResult(resultsDir: string, phase: RestartPhase): Promise<PhaseResult> {
+	const result = JSON.parse(await fs.readFile(getPhaseResultPath(resultsDir, phase), "utf8")) as unknown
+	validatePhaseResult(result)
+	if (result.phase !== phase) {
+		throw new Error(`Phase result does not match requested phase: ${phase}`)
+	}
+	return result
+}
@@ -0,0 +1,58 @@
+import * as os from "os"
+import * as path from "path"
+import * as fs from "fs/promises"
+
+const SCENARIO_ROOT_PREFIX = "roo-vscode-e2e-restart-"
+
+export type ScenarioWorkspace = {
+	root: string
+	workspace: string
+	userData: string
+	extensions: string
+	results: string
+}
+
+function childPath(root: string, name: string): string {
+	const resolvedRoot = path.resolve(root)
+	const resolvedChild = path.resolve(resolvedRoot, name)
+	if (path.dirname(resolvedChild) !== resolvedRoot) {
+		throw new Error(`Scenario path escaped its root: ${name}`)
+	}
+	return resolvedChild
+}
+
+export async function createScenarioWorkspace(): Promise<ScenarioWorkspace> {
+	const root = await fs.mkdtemp(path.join(os.tmpdir(), SCENARIO_ROOT_PREFIX))
+	const scenarioWorkspace: ScenarioWorkspace = {
+		root,
+		workspace: childPath(root, "workspace"),
+		userData: childPath(root, "user-data"),
+		extensions: childPath(root, "extensions"),
+		results: childPath(root, "results"),
+	}
+
+	await Promise.all(
+		[
+			scenarioPath(scenarioWorkspace, "workspace"),
+			scenarioPath(scenarioWorkspace, "userData"),
+			scenarioPath(scenarioWorkspace, "extensions"),
+			scenarioPath(scenarioWorkspace, "results"),
+		].map((directory) => fs.mkdir(directory, { recursive: true })),
+	)
+
+	return scenarioWorkspace
+}
+
+function scenarioPath(scenarioWorkspace: ScenarioWorkspace, key: "workspace" | "userData" | "extensions" | "results") {
+	return scenarioWorkspace[key]
+}
+
+export async function removeScenarioWorkspace(scenarioWorkspace: ScenarioWorkspace): Promise<void> {
+	const root = path.resolve(scenarioWorkspace.root)
+	const tempRoot = path.resolve(os.tmpdir())
+	if (path.dirname(root) !== tempRoot || !path.basename(root).startsWith(SCENARIO_ROOT_PREFIX)) {
+		throw new Error(`Refusing to remove an unowned scenario root: ${scenarioWorkspace.root}`)
+	}
+
+	await fs.rm(root, { recursive: true, force: true })
+}