- charmbracelet/crush#2693 (merge-after-nits): stdio MCP server
  config 'args' weren't run through resolver.ResolveValue, so
  '$VESTIGE_DB' reached the subprocess as a literal. Fix
  threads each arg through the same resolver that already
  handles 'command'. Fallback-to-literal on resolve failure is
  a footgun for credential-bearing args — should fail loud.

- anomalyco/opencode#24259 (merge-as-is): one-line ecosystem doc
  addition for opencode-simple-notify (Linux/Mac desktop
  notifications plugin). Standard supply-chain hygiene applies
  on the maintainer side.

- OpenHands/OpenHands#14099 (merge-after-nits): branch-search
  router previously hard-rejected page!=1 with 400. Fix threads
  page through every provider's search_branches with the
  provider's native idiom (page-param for GitLab/Bitbucket,
  start-offset for BB-DC, slice for Forgejo/AzDO). GitHub uses
  cursor walk through 'after: $cursor' which is O(page) — needs
  a clamp to bound adversarial deep-page requests.

- cline/cline#10403 (request-changes): adds Abliteration.ai as
  first-class provider. Handler/proto/UI plumbing follows the
  established pattern cleanly, but maxTokens: -1 sentinel
  in the model registry will produce wrong cost/budget
  calculations downstream (no other provider uses -1), and
  supportsTools() is hardcoded true rather than reading
  model.info. Both are 1-line fixes.

Lede counter through-drip-38 → through-drip-40. Eight new rows
spliced into per-repo tables for openai/codex, BerriAI/litellm,
continuedev/continue, ollama/ollama, charmbracelet/crush,
anomalyco/opencode, All-Hands-AI/OpenHands, cline/cline.

PRs: openai/codex#19526, BerriAI/litellm#26495,
continuedev/continue#12206, ollama/ollama#15808,
charmbracelet/crush#2693, anomalyco/opencode#24259,
OpenHands/OpenHands#14099, cline/cline#10403.