@@ -7,26 +7,9 @@ file is the human-readable summary of what changed and why.
 
 ## Unreleased
 
-### TUI
+## 1.18.4-3
 
-- **No more duplicated agent · model line** — the trailer under the last
-  assistant reply (`▣ Build · MiniMax/MiniMax-M2.7 · 3m`) used to repeat the
-  agent and model the prompt footer already shows one line below. When they
-  match the current selection, the `▣` marker and the agent/model text are now
-  hidden and only the elapsed time remains, shown as `Baked for 3m`. Older
-  messages in the transcript, and the last message after you switch agent or
-  model, keep the full trailer.
-
-- **Auto-approve now asks for consent** — launching with `--auto` (or its
-  hidden aliases) no longer enables auto-approve silently: a confirm dialog
-  warns that permission requests not explicitly denied will be approved
-  automatically and that this is dangerous — the word in red, like the `auto`
-  badge — and the mode turns on only after you confirm, followed by a warning
-  toast restating it in one line. The dialog
-  opens on Cancel, so a stray return declines instead of granting it.
-  Switching into auto mode with `shift+tab` goes through the same dialog and
-  toast the first time; consent is remembered for the rest of the run, so later
-  toggles are instant. Declining or dismissing the dialog stays in manual mode.
+### TUI
 
 - **The conversation survives quitting** — on exit the TUI prints the session
   transcript to the terminal scrollback in a compact format: user prompts
@@ -39,6 +22,26 @@ file is the human-readable summary of what changed and why.
   italic, inline code, code fences, list bullets, links). Also fixes a
   teardown race that could swallow the epilogue entirely.
 
+- **Permission mode is always shown, `shift+tab` toggles it, and auto-approve
+  asks for consent** — the prompt footer now labels the mode next to the agent
+  name: gray `manual` in normal mode, red `auto` when permissions are
+  auto-approved (`--auto`, previously a gray `auto` shown only in that mode).
+  `shift+tab` cycles between the two, configurable as the new
+  `permission_mode_cycle` keybind, and the idle footer advertises it with a
+  `shift+tab modes` hint next to `tab agents`. Its former default,
+  previous-agent (`agent_cycle_reverse`), is now unbound by default — `tab`
+  still cycles agents forward. Turning auto-approve on is no longer silent,
+  whether it comes from `--auto` (or its hidden aliases) or from `shift+tab`: a
+  confirm dialog warns that permission requests not explicitly denied will be
+  approved automatically and that this is dangerous — the word in red, like the
+  `auto` badge — and the mode turns on only after you confirm, followed by a
+  warning toast restating it in one line. The dialog opens on Cancel, so a
+  stray return declines instead of granting it. Consent is remembered for the
+  rest of the run, so later toggles are instant; declining or dismissing the
+  dialog stays in manual mode.
+  ([#133](https://github.com/quickbeard/codev-code/pull/133),
+  [#131](https://github.com/quickbeard/codev-code/pull/131))
+
 ### Provider setup
 
 - **Images reach the gateway instead of being dropped** — the provider block
@@ -53,15 +56,6 @@ file is the human-readable summary of what changed and why.
   one more pass through the configure flow (or a CoDev Hub config rewrite,
   which does the same since hub PR #219) to pick the declaration up.
 
-- **The gateway provider is now netGate** — the SSO configure flow (and its
-  manual key-paste branch) writes the provider block as `provider.netgate`
-  with display name `netGate` instead of `provider.aigateway` / `AI Gateway`,
-  matching CoDev Hub's rename. Existing configs keep working: a pre-rename
-  `provider.aigateway` block is left in place (config updates only merge,
-  never delete) and both entries show in the model picker until CoDev Hub's
-  next config rewrite converges the file. Hub releases older than its own
-  rename (PR #212) can't attribute a `netgate` config as CoDev-managed.
-
 - **Custom providers get a name, not an id** — the "Custom provider" flow now
   asks for an optional provider _name_ ("Acme AI Gateway") instead of a raw
   id. The id is slugged from the name (`acme-ai-gateway`, `[a-z0-9-]`, 32
@@ -70,20 +64,6 @@ file is the human-readable summary of what changed and why.
   bare id. Leaving the field empty (or typing something with no usable
   characters) falls back to `ai-gateway` / `AI Gateway`.
 
-## 1.18.4-2
-
-### TUI
-
-- **Permission mode is always shown, and `shift+tab` toggles it** — the prompt
-  footer now labels the mode next to the agent name: gray `manual` in normal
-  mode, red `auto` when permissions are auto-approved (`--auto`, previously a
-  gray `auto` shown only in that mode). `shift+tab` cycles between the two,
-  configurable as the new `permission_mode_cycle` keybind, and the idle footer
-  advertises it with a `shift+tab modes` hint next to `tab agents`. Its former default,
-  previous-agent (`agent_cycle_reverse`), is now unbound by default — `tab`
-  still cycles agents forward.
-  ([#131](https://github.com/quickbeard/codev-code/pull/131))
-
 ### CodeGraph
 
 - **`codev codegraph enable` wires the CodeGraph MCP server** — for standalone