Summary

• prepare local release metadata for v0.8.38 across Cargo, Cargo.lock, and the npm wrapper
• scope denied tool approvals to exact canonical calls while keeping approve-for-session tool grants
• include the green fix(streaming): preserve all tool_calls in OpenAI batch responses #1686 OpenAI batch tool-call streaming fix in the v0.8.38 changelog
• include the diagnostics tool: null passed instead of array, causing 400 on every turn #1685 diagnostics empty-required schema fix in the v0.8.38 changelog
• move the current release notes into the v0.8.38 changelog section with contributor credits

Fixes #1617
Fixes #1685

Contributor credit

• Harvests the narrow exact-call approval-key work from fix(tui): keep denied approvals scoped to exact calls #1624 with credit to Nightt / @nightt5879.
• Credits lalala / @lalala-233 for the approval denial regression report in Bug in deny tool use #1617.
• Credits hexin / @h3c-hexin for fix(streaming): preserve all tool_calls in OpenAI batch responses #1686.
• Credits chennest / @chennest for the diagnostics schema report in diagnostics tool: null passed instead of array, causing 400 on every turn #1685.
• Preserves existing v0.8.38 changelog credits for fix: validate API key before terminal init to prevent garbled output #1630, feat: image vision analysis, fix first-message 400, fix /model default reset #1642, Fix provider-aware /model picker catalogs #1201, fix(tui): default composer_arrows_scroll to true on Windows (#1255) #1578, [codex] fix Windows PowerShell flicker #1591, and Checklist 工具 + LoopGuard 死循环 Bug 分析 #1574.

Checks

• cargo fmt --all -- --check
• git diff --check
• ./scripts/release/check-versions.sh
• cargo test -p deepseek-tui --bin deepseek-tui approval_cache --locked
• cargo test -p deepseek-tui --bin deepseek-tui session_denied_cache_matches_only_approval_key --locked
• cargo test -p deepseek-tui --bin deepseek-tui session_approved_cache_keeps_tool_name_session_grants --locked
• cargo test -p deepseek-tui --bin deepseek-tui batch_tool_calls_preserve_all_tool_use_indices --locked
• cargo test -p deepseek-tui --bin deepseek-tui diagnostics_schema_has_empty_required_array --locked
• cargo clippy -p deepseek-tui --bin deepseek-tui --tests --locked -- -D warnings
• cargo check --workspace --all-targets --locked
• node --test npm/deepseek-tui/test/install.test.js npm/deepseek-tui/test/postinstall.test.js npm/deepseek-tui/test/run.test.js

No tag, publish, GitHub Release, crates/npm/GHCR/CNB/Homebrew release, or external package push is included.