v1.53.0

## ✨ Features

- Resizable Picture-in-Picture window for MCP Apps [#12417](https://github.com/aaif-goose/goose/pull/12417)
- Fetch model metadata from models.dev live with bundled fallback [#12560](https://github.com/aaif-goose/goose/pull/12560)
- Quoting action to append selected conversation text to composer [#12536](https://github.com/aaif-goose/goose/pull/12536)
- Lean ACP-only Goose binary [#11961](https://github.com/aaif-goose/goose/pull/11961)
- Model discovery API for GDK Provider [#12497](https://github.com/aaif-goose/goose/pull/12497)
- Meta Muse Code provider [#11765](https://github.com/aaif-goose/goose/pull/11765)
- Support for Opus 5.5, GPT-6-sol, GPT-6-luna [#12447](https://github.com/aaif-goose/goose/pull/12447)
- Session rename command in CLI [#12236](https://github.com/aaif-goose/goose/pull/12236)
- Show working directory in session remove command [#12232](https://github.com/aaif-goose/goose/pull/12232)
- GDK agent loop runs on wasm32 [#12569](https://github.com/aaif-goose/goose/pull/12569)

## 🐛 Bug Fixes

- Session naming and "none" reasoning effort for GPT-6.1-sol [#12605](https://github.com/aaif-goose/goose/pull/12605)
- Strip inert parameters from session snapshots in recipes [#11988](https://github.com/aaif-goose/goose/pull/11988)
- Preserve session context across reply lifecycle [#12516](https://github.com/aaif-goose/goose/pull/12516)
- Report max_tokens truncation and flush tool calls for Bedrock [#11872](https://github.com/aaif-goose/goose/pull/11872)
- Require a terminal for elicitation input in CLI [#12542](https://github.com/aaif-goose/goose/pull/12542)
- Keep tool results consecutive when OpenAI-compatible tool images are emitted [#12233](https://github.com/aaif-goose/goose/pull/12233)
- GDK tools with no args still advertise empty params input schema [#12527](https://github.com/aaif-goose/goose/pull/12527)
- Passing thinking effort to Ollama models [#12555](https://github.com/aaif-goose/goose/pull/12555)
- Estimate costs through canonical provider aliases [#11916](https://github.com/aaif-goose/goose/pull/11916)
- Resolve vision support from the canonical catalog for all providers [#12522](https://github.com/aaif-goose/goose/pull/12522)
- Send Databricks v2 Claude model services through the Anthropic route [#12486](https://github.com/aaif-goose/goose/pull/12486)
- Show tool output for tools without a priority annotation [#12436](https://github.com/aaif-goose/goose/pull/12436)
- Treat an unavailable prompt classifier as no signal [#12452](https://github.com/aaif-goose/goose/pull/12452)
- Guard MCP streamable-HTTP client redirects against SSRF [#11501](https://github.com/aaif-goose/goose/pull/11501)
- Resolve vision support from the canonical catalog in GDK so tool result images reach the model [#12440](https://github.com/aaif-goose/goose/pull/12440)
- Prevent Extension Manager from disabling itself [#12270](https://github.com/aaif-goose/goose/pull/12270)
- Rename deepseek-v4-flash to deepseek-flash [#12269](https://github.com/aaif-goose/goose/pull/12269)
- Auto-compact at tool boundaries in the unrolled agent loop [#12444](https://github.com/aaif-goose/goose/pull/12444)
- Remediate GHSA-6mg9-3cvh-9939 security vulnerability [#12537](https://github.com/aaif-goose/goose/pull/12537)

## 🔧 Improvements

- Suppress warning when ending on a successful tool call [#12468](https://github.com/aaif-goose/goose/pull/12468)
- Update rmcp to 3.4.1 [#12483](https://github.com/aaif-goose/goose/pull/12483)
- Remove MCP sampling code [#12193](https://github.com/aaif-goose/goose/pull/12193)
- Remove production code only reachable from tests [#12504](https://github.com/aaif-goose/goose/pull/12504)
- Pin remaining GitHub Actions to commit SHAs [#11989](https://github.com/aaif-goose/goose/pull/11989)

## 📚 Documentation

- Warn about keyring hang in unattended ACP environments [#12173](https://github.com/aaif-goose/goose/pull/12173)