fix(codex-link): isolate model transfers and widen local connection capacity

apps/desktop/assets/codex-bridge/README.md

@@ -27,6 +27,35 @@ Run: `python bridge.py --home <data dir> --hermes-home <agent home>`. The IDE wr
 
 Tests: `python -m unittest discover` in this directory.
 
+## Version 11: isolated routes and cross-provider preparation
+
+- Pure subscription chats and native voice retain their ChatGPT route. Added
+  models use the separate AITURK worker; model selection never globally changes
+  the provider for another chat.
+- Cross-provider history repairs custom tool IDs and unwraps old AITURK summaries
+  before sending them to OpenAI. Real OpenAI encrypted compaction is interpreted
+  by OpenAI before transfer; unreadable context stops the transfer instead of
+  silently dropping it. The saved transcript is not rewritten.
+- Old context above 70% of the target window is summarized through AITURK, with
+  instructions, tools, recent messages and complete tool pairs protected. Output
+  allowance is reserved. Unknown windows use a conservative guard. Summaries are
+  approximate; if protected content alone cannot fit, a visible error keeps the
+  source history intact. No middle-of-message truncation is used by this path.
+- Preparation emits SSE keep-alive comments while it waits. The status version
+  matches the IDE, avoiding needless healthy-process restarts on reconnect.
+- Both HTTP listeners accept a burst queue of 128 instead of Python 3.11's five;
+  disk logging and transfer records no longer share the request-counter lock.
+  This is local capacity, not a change to any provider's rate or account limits.
+- The catalog cap is 1000; native entries retain their order, followed by combos
+  A–Z and provider/model A–Z. The official desktop picker owns submenus: this
+  bridge does not patch the Codex app or promise provider folders.
+- Turning Codex Link off restores its owned config line. If that write fails,
+  the working bridge remains alive and the UI does not claim restoration.
+
+Acceptance covers socket routing (including native voice endpoints), 50 concurrent
+synthetic requests, tool-ID regression, context budgets and summary failures.
+Microphone/audio and public installer acceptance are separate release checks.
+
 ## Version 8 (IDE beta.27): changing the model by saying so
 
 Measured on a live voice chat (11 Oct 2026): a model picked on the phone reaches this machine only with a typed