v1.78.0

This release improves MCP server connectivity, adds model thinking level controls, and enhances tool installation safety with checksum verification.

What's New

• Adds ability to cycle model thinking level with Shift+Tab in the TUI
• Adds title_model configuration field for delegating session title generation to a different model
• Adds checksum verification for tool auto-install downloads to ensure binary integrity
• Adds support for version_overrides in tool auto-install for better package configuration

Improvements

• Updates remote MCP examples to prefer Streamable HTTP transport over SSE
• Exposes embeddable TUI components (toolconfirm, StaticSessionState, Stopper) for downstream integration
• Allows loading agent from localhost HTTP URLs for local development
• Adds Docker Desktop JWT authentication when pulling agent from .docker.com URLs

Bug Fixes

• Fixes reconnection of remote MCP toolsets after clean idle SSE connection closes
• Fixes crash during elicitation channel close by guarding against in-flight sends
• Fixes panic in ScriptToolSet.Instructions() when tool argument descriptions are missing
• Fixes GitHub transport change that was causing test assertion failures

Technical Changes

• Always allowlists models.dev in sandbox proxy for model catalog resolution
• Restricts localhost HTTP redirects to localhost-only targets for security
• Removes non-working Supabase and Tally entries from MCP catalog documentation

---

What's Changed

• docs: update remote MCP examples to prefer Streamable HTTP over SSE by @aheritier in #3065
• docs: update configuration, sandbox, tools, Go SDK, and MCP catalog docs by @aheritier in #3068
• Cycle model thinking level with shift+tab by @rumpl in #3067
• fix: reconnect remote MCP toolsets after clean idle SSE close by @aheritier in #3064
• fix: guard type assertions in ScriptToolSet.Instructions() against missing description by @simonferquel-clanker in #3072
• fix: guard elicitation channel close against in-flight sends by @aheritier in #3070
• Allow pulling agent from localhost http URL for local dev by @gtardif in #3075
• docs: update CHANGELOG.md for v1.77.0 by @docker-read-write[bot] in #3062
• Bump Go dependencies by @dgageot in #3076
• docs: update CHANGELOG.md for v1.76.0 by @docker-read-write[bot] in #3061
• Add Docker Desktop JWT when pulling agent from a .docker.com URL by @gtardif in #3077

Full Changelog: v1.77.0...v1.78.0