v0.7.0

portable-devshell v0.7.0

0.7.0 is a major architecture update. Existing v0.6.20 installations can upgrade in place with the normal release installer; running Control and controller-managed instances are restored after replacement.

Upgrade notes

1. Instance configuration is now version 4. Version 2/3 files are migrated automatically. The retired [mcp.tools] group/capability policy is removed during migration.
2. MCP tools/list is a fixed runtime catalog. Instance lifecycle management is no longer exposed as dynamic MCP tools; instance_connect remains the Context attach primitive.
3. Model-facing extensibility now uses the Context-bound devshell available inside bash_run / tmux_run. The bundled default [extensions].model allowlist is artifact, instance, mcp, secret, and skill.
4. Model devshell never falls back to native/builtin commands. Native Control operations such as devshell stop remain unavailable to models unless an explicit model Extension command exists.
5. Artifact management and transfer are provided by the real builtin Artifact Extension. The native devshell artifact ... interface remains available; the old Artifact transfer MCP surface is retired.
6. Instance management remains a native builtin CLI responsibility. The Instance Extension supplies the restricted model-facing inspection/log interface.
7. Extension API v4 adds real sandboxed builtin Extensions, generation-owned capabilities/registrations, public Artifact/Instance capabilities, and invocation-scoped CLI streaming I/O.

If you maintain instance files manually, let 0.7.0 migrate version 2/3 documents once and keep the resulting version 4 structure. Do not reintroduce [mcp.tools]; review [extensions].model instead when controlling model-accessible Extension commands.

See docs/operations/configuration.md, docs/concepts/mcp.md, and docs/concepts/extensions.md for the current contracts.

Full Changelog: v0.6.20...v0.7.0