Update Release 2 reconnect notes

docs/release-notes.md

@@ -28,6 +28,7 @@ On Windows, extract the complete ZIP and run `Codev.Avalonia.exe`. On macOS or L
 - Regression coverage now exercises Auto-mode file application and command execution, MCP activity, and scoped profile behavior across hosted Windows, Linux, and macOS checks.
 - Auto falls back to Ask when saved project permission data cannot be read or safely written, and the review explains why. Repeated identical tool calls no longer trigger an extra prompt in Auto; the shared per-turn step limit and exact project Deny rules still apply.
 - Conversations and child sessions can be dragged to reorder within their sidebar group, with order remembered after restart.
+- Hosted-provider reconnect is enabled by default when first connecting with a saved key, and the explicit opt-out is remembered across restarts. Keys remain in the operating system credential store.
 
 ## Included capabilities
 

docs/release-plan-2026-10.md

@@ -40,7 +40,7 @@ The Release 1 ledger leaves 65 manual workflows open, including native macOS/Lin
 
 ## Release 2: early stabilization
 
-**Current main checkpoint (2026-10-09, merge head `f6df70a`).** PRs #41–#60 are merged. Recent work includes broader Auto command execution with exact Deny rules, persisted conversation and child-session sidebar reordering, scoped profile path normalization, and transcript search interaction coverage across Windows/Linux/macOS. PR #45's drag/drop feature passed Windows/Linux/macOS CI [#37957023785](https://github.com/jay23606/codev/actions/runs/37957023785) and the four-target packaged preview [#37957023813](https://github.com/jay23606/codev/actions/runs/37957023813). PR #48 made Markdown-only PRs skip packaged previews while retaining cross-platform CI; PRs #49–#52 recorded download, checkpoint, and release-note updates. PR #53 added a cross-group drop rejection test, PR #54 documented its boundary coverage, PR #55 normalized scoped profile read paths, and PR #56 added traversal-denial tests. PR #57's exact-head Windows/Linux/macOS CI [#37981218664](https://github.com/jay23606/codev/actions/runs/37981218664) and four-RID package preview [#37981218523](https://github.com/jay23606/codev/actions/runs/37981218523) passed; post-merge main CI [#37982990888](https://github.com/jay23606/codev/actions/runs/37982990888) passed. PR #58 refreshed this checkpoint; its seven Windows/Linux/macOS CI jobs [#37984193779](https://github.com/jay23606/codev/actions/runs/37984193779) and post-merge main CI [#37984535251](https://github.com/jay23606/codev/actions/runs/37984535251) passed. PR #59 strengthened before/after drag and reload-persistence tests across pinned, recent, and child rows; its Windows/Linux/macOS CI [#37986169061](https://github.com/jay23606/codev/actions/runs/37986169061) and post-merge main CI [#37986596692](https://github.com/jay23606/codev/actions/runs/37986596692) passed, and the test-only packaged-preview skip worked as designed. PR #60 records this regression evidence and the preview-trigger behavior; post-merge main CI [#37987466547](https://github.com/jay23606/codev/actions/runs/37987466547) passed at `f6df70a`. No local packaged smoke was run. GitHub lists no open issues or pull requests at this check; keep collecting install reports through the release's normal feedback channels. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below.
+**Current main checkpoint (2026-10-09, merge head `ecacccb`).** PRs #41–#62 are merged. Recent work includes broader Auto command execution with exact Deny rules, persisted conversation and child-session sidebar reordering, scoped profile path normalization, transcript search interaction coverage across Windows/Linux/macOS, and persisted hosted-provider reconnect preferences. PR #45's drag/drop feature passed Windows/Linux/macOS CI [#37957023785](https://github.com/jay23606/codev/actions/runs/37957023785) and the four-target packaged preview [#37957023813](https://github.com/jay23606/codev/actions/runs/37957023813). PR #48 made Markdown-only PRs skip packaged previews while retaining cross-platform CI; PRs #49–#52 recorded download, checkpoint, and release-note updates. PR #53 added a cross-group drop rejection test, PR #54 documented its boundary coverage, PR #55 normalized scoped profile read paths, and PR #56 added traversal-denial tests. PR #57's exact-head Windows/Linux/macOS CI [#37981218664](https://github.com/jay23606/codev/actions/runs/37981218664) and four-RID package preview [#37981218523](https://github.com/jay23606/codev/actions/runs/37981218523) passed; post-merge main CI [#37982990888](https://github.com/jay23606/codev/actions/runs/37982990888) passed. PR #58 refreshed this checkpoint; its seven Windows/Linux/macOS CI jobs [#37984193779](https://github.com/jay23606/codev/actions/runs/37984193779) and post-merge main CI [#37984535251](https://github.com/jay23606/codev/actions/runs/37984535251) passed. PR #59 strengthened before/after drag and reload-persistence tests across pinned, recent, and child rows; its Windows/Linux/macOS CI [#37986169061](https://github.com/jay23606/codev/actions/runs/37986169061) and post-merge main CI [#37986596692](https://github.com/jay23606/codev/actions/runs/37986596692) passed, and the test-only packaged-preview skip worked as designed. PR #60 records this regression evidence; PR #61 refreshed the documentation. PR #62 makes first-time hosted-provider reconnect default on while preserving a deliberate opt-out; its cross-platform tests [#37991522654](https://github.com/jay23606/codev/actions/runs/37991522654) and four-target packaged preview [#37991522656](https://github.com/jay23606/codev/actions/runs/37991522656) passed. Post-merge main CI [#37992412448](https://github.com/jay23606/codev/actions/runs/37992412448) passed on merge head `ecacccb`. No local packaged smoke was run. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below.
 
 Target Release 2 for **Tuesday, October 13, 2026** (Day 5 after the October 8 publication; acceptable window: Day 3–5). On October 9–10 (Days 1–2), collect install reports, triage reproducible issues, and fix release blockers. On October 11 (Day 3), freeze the candidate and run exact-head Windows/Linux/macOS CI plus all four packaged desktop/CLI checks. The desktop-preview workflow runs for version tags, explicit candidate dispatches, and pull requests not limited to the skipped paths. PRs limited to Markdown documentation, test projects, or the release-preview workflow still run Windows/Linux/macOS CI but skip the four packaged interaction smokes. Regular merges to `main` do not repeat the packaged previews. Dispatch that workflow once against the frozen main commit before tagging. Use a local desktop smoke only if a release-critical interaction is not covered by hosted UI checks and focused tests; routine local runs stay disabled. Publish on October 12–13 only if exact-head checks pass, update the release notes for verified changes and remaining limitations, and confirm all eight README latest-download links. If a blocker moves the candidate, move Release 2 to Day 3–5 after the verified fix.