v0.2.5

What's Changed

• Intercept raw-IP HTTPS endpoints on declared ports by @divybot in #611
• fix: drive relay recv/send through SyscallConn.Read/Write (cl-0jsq) by @arnauorriols in #585
• feat: per-agent HITL channel routing, device-page pending bar, Slack verdict sync by @littledivy in #613
• Add schema_version to gateway config by @piscisaureus in #616
• run: forward wrapped-cmd 127.0.0.0/8 connects to host loopback (cl-1clt) by @arnauorriols in #589
• fix: resolve credential before rule matching on HTTPS path by @magurotuna in #619
• feat: configurable body caps for rules engine and actions table (cl-ipw8) by @arnauorriols in #623
• feat: passthrough credential type for credential-less endpoints (cl-snuf) by @arnauorriols in #621
• fix: stop k8s tunnel jump pods leaking (cl-acxv) by @arnauorriols in #627
• ci: set DO_NOT_TRACK=1 to keep CI out of telemetry by @ry in #628
• telemetry: drop dev-version pings on both ends by @ry in #629
• dashboard: require typed confirmation to change device profile by @ry in #631
• Add ssh-family security rules by @piscisaureus in #618
• docs: document the gateway { } block in config-reference by @ry in #632
• fix: enable Claude Code /remote-control under clawpatrol env pushdown by @divybot in #576
• Block requests like this by @ry in #614
• rules: fail closed via viral CEL unknowns instead of dispatch gates by @piscisaureus in #633

Full Changelog: v0.2.4...v0.2.5