Model routing you can see and price, and models that fail over on their own

This release rebuilds how you pick and pay for models. The desktop app's routing drawer becomes a Models & routing dialog: three presets, Best, Balanced, Frugal . That resolve against the keys you actually have and are priced live from the models.dev catalog, next to a map of where every lane's tokens go and what each one cost you over the last month. Underneath, every surface learns to fail over: hand a model a fallback chain and Empryo rides it down on its own when a provider falters, resuming mid-stream without dropping what already streamed. The desktop app also starts notifying you properly and wears real provider logos, and the website it deploys alongside is largely new.

New

• Models & routing, redesigned. (desktop) The routing drawer is now a Models & routing dialog built around a single dial, Best, Balanced, or Frugal. The presets aren't hardcoded model names, they're relationships to your chat model, resolved live against the keys you've configured and priced from the models.dev catalog, so they work for any provider, including LLM Gateway's full catalog. A token flow map shows where each lane's tokens go, chat, the subagents it dispatches, on-demand web research, after-edit cleanup and review, the goal-loop judge, and background work, with price bands and 30-day spend per lane. Routing, Behaviors and Failover each get their own tab.
• Automatic model failover, on every surface. Give a model a fallback chain and Empryo fails over on its own: it orders the candidates by health, resumes mid-stream without losing streamed output or completed tool calls, and sends permanent provider errors (401, 400, 404) straight down the chain instead of retrying a lost cause. A user abort always wins. Configure no chains and nothing about your setup changes.
• Notifications that reach you. (desktop) Delivery is now platform-correct, background turns can chime when they finish, and a short what's-new recap greets you after an update.
• Provider brand marks throughout. (desktop) Real provider logos now appear in the topbar model trigger, every picker, the wizard steps, and the routing and failover chips. Lazy-loaded, so boot stays light. Alongside them: dialogs and drawers are lighter glass, selection rings are crisp insets, pickers are roomier, and list surfaces take type-to-search.
• Smaller conveniences. /cost is now an alias for /usage. The stash janitor prunes anything older than 30 days and caps the store at 200 rows. And a debug bundle plus a hang sampler make a stuck run far easier to report.

Fixed

• Desktop polish. The restore toast and the message composer each got a round of fixes.

Under the hood

• empryo.com ships with this release. The deploy brings a new Spore landing page, the benchmarks program with console-verified round pages and two accompanying blog posts, site-wide ⌘K search, live GitHub star counts, a providers page that leads with LLM Gateway, and raw-markdown mirrors of every docs and blog page plus an llms-full.txt so agents can read the site directly. It also fixes a hydration error on the documentation pages that has been live in production.
• Every macOS and Linux build is still executed before it ships, empryo doctor must load the native runtime and parse real code inside a Linux container, and under Rosetta for Intel macOS.