v0.7.0

0.7.0 (2026-10-22)

Features

• engine: turn the bash sandbox on by default and harden the tool gate (e0f07d5)

Bug Fixes

• cli: list the current trust-only keys in the help (21cad2d)
• cli: show --continue in the chat usage (d6d64a9)
• config: tighten project trust and the global config (9cd20d7)
• engine: drop symlinked home grants to credentials; refuse unsandboxed bash without a permission config (7d71952)
• engine: fix the sandbox and protected paths on macOS and Windows (02abebb)
• engine: protect more credential files without blocking ordinary project paths (a087e6f)
• install: require an absolute install dir without shell metacharacters (c6f40b0)
• mcp: bound messages and calls, refuse duplicate ids, harden resources/read (f584a2d)
• setup: refresh the fallback list of free OpenRouter models (8e73bb4)

Documentation

• bring every page in line with the code (29b7a94)
• describe the default sandbox, trust keys and MCP limits (2b29438)