v0.10.0

0.10.0 (2026-10-15)

Features

• notify: make permission-prompt alerts on by default and discoverable (#1001) (7f8e5f0)
• npm: publish as @twigpine/zero (#1142) (530563a)
• providers: add GMI Cloud provider preset and partner listing (#1127) (1335ca6)
• providers: opt-in ZERO_RESPONSE_HEADER_TIMEOUT override for slow first-byte deployments (#1106) (ddc45f2)
• runtime: add process-local per-model RPM admission limits (#1116) (eebb384)
• sessions: add zero sessions prune, which never removes a session another process has open (#1089) (23c27e0)

Bug Fixes

• acp: persist the session permission mode across restarts (#1134) (bb96206), closes #1125
• acp: persist token usage events for ACP sessions (#1137) (300cf62), closes #1118
• acp: publish sub-run sessions loaded over ACP as view-only (#1078) (7f11491)
• agent: retry mid-stream transport aborts before tool dispatch (#1076) (b9ef1d2)
• config: sync atomic config replacements (#1093) (4d2e9f0)
• cron: bound run history and read recent records from the tail (#1094) (42eb6ab)
• cron: preserve newer claims when overlapping runs complete (#1090) (2eb9d94)
• daemon: bound pending sessions and prune on completion (#1091) (8a68660)
• daemon: do not retry workers that finished with a final exit code (#1112) (eefa978), closes #1100
• daemon: stop worker process groups by their launch-time identity (#1088) (ab018b3), closes #861
• deps: refresh the lockfile to patched hono and @hono/node-server (#1080) (aa52040)
• deps: refresh the lockfile to patched shell-quote (#1131) (c56a4c4)
• execution: reserve process capacity before launching (#1092) (bb3346a)
• mcp: forward image tool results on the existing image channel (#1077) (0324c1d)
• mcp: refresh OAuth tokens for discovered endpoints and registered clients (#1113) (571af70), closes #1101
• oauth: give every loopback callback server the bounded shutdown (#1079) (5473301)
• providers: send stable session headers to OpenCode (#1060) (99721c7)
• redaction: redact adjacent AWS keys glued end to end (#1095) (df67ede)
• redaction: redact credentials split by an invisible character (#1067) (e20b762)
• sandbox: say when a session's sandbox enforcement is degraded (#1082) (6b5852d)
• search: redact every text field of session metadata, not ten of thirty (#1073) (9520f2b)
• security: harden shell flag parsing, write roots, and formatters (#1066) (ac5fe0d)
• sessions: keep a session lease for the life of the process, not of the Store (#1144) (883e5be)
• tools: hint when Windows resolves POSIX paths under root (#1063) (0c6f179)
• tui: bound live dictation regions (#985) (feb9927)
• tui: show provider ownership in Recent and Favorites (#1083) (1697b7a)
• tui: stop held peer message Allow/Deny from deadlocking Update (#1111) (a195e88), closes #1099
• unbreak main CI (cron claim tests, Go 1.26.9) (#1124) (2c418fc)