v0.5.1

Patch fixes / 补丁修复

This patch hardens existing network and task boundaries and corrects verification and accounting gaps. The existing single-Agent and opt-in team behavior remains the product scope.

本次为补丁更新，重点修复现有网络、安全边界、资源清理和计量问题，并补齐工程验收门禁。

• Bind public-resource connections to validated DNS addresses for web search, page reads, Skill downloads and Git clones. Preserve the original Host/TLS identity and revalidate every redirect.
• Keep HTTP/HTTPS proxy CONNECT targets bound to approved IPs, isolate proxy authentication and refuse insecure/direct fallbacks.
• Close response bodies, dispatchers, Git tunnels and owned processes on failure or cancellation; prevent inherited Git rewrites, proxies and credential helpers from changing approved targets.
• Correct approval cancellation propagation and team benchmark usage rollups; preserve unknown usage and stop evaluation on isolation or cleanup failures.
• Enforce Oxlint correctness checks and the ordered typecheck → lint → test → build gates on Windows/Linux. Pin the patched native dependency and verify clean source installation, CLI/SDK startup and PTY lifecycle.

网页与远程 Skill 请求现在将 DNS 校验结果绑定到实际连接；HTTP/HTTPS 代理与 Git 转发器使用相同批准目标。保持 TLS 证书校验，代理失败不静默直连；Git 配置注入、取消竞态和响应释放边界具有真实本地网络回归。

Validation: local typecheck, lint, 1,135 tests (1,132 passed, 3 platform skips), build and whitespace checks; clean source installation and native PTY lifecycle checks. Windows/Linux CI is verified against the tagged commit before publication. Real local native isolation evidence is retained; hosted skips do not substitute for containment evidence.

当前支持仓库内 pnpm 源码安装。独立安装包/npm 分发仍需解决补丁交付，不把 pnpm pack 成功视为消费者安装通过。本次 GitHub Release 不执行 npm publish。

Current-candidate offline team preflight and scoring evidence do not establish live-model quality, speed or cost improvements. No paid model calls were made; live evaluation still needs explicit model/profile and numerical task/campaign authorization.

离线评测准备不能转记为真实模型验收。本次没有付费模型调用，也不宣称团队更快、更省或成功率更高。