v0.4.0

0.4.0 (2026-08-21)

Features

• factory: Add --yes confirmation guard for destructive commands (#537) (07d27ac)
• Load json filenames from schema manifests (#557) (4cf1a22)

Bug Fixes

• Binaries (#556) (db973d9)
• ci: Write Cloud config to 0600 temp file with cleanup trap (#536) (e4f407c)
• cli: Parse post-agent-builder-converse-async SSE responses (#548) (f09b10e)
• cli: Report mistyped subcommand before options (#504) (477bbd9)
• cloud: Redact credential responses unless --show-credentials is passed (#533) (759470b)
• Disambiguate colliding version schema flags (#561) (749bcb9)
• docs: Correct version command schema and config nav hierarchy (#555) (8103cd4)
• docs: Remove frontmatter from cli/index.md rendered as body text (#558) (5018375)
• es: Clarify bulk ingest source format is decorative (#521) (91f261c)
• es: Reject empty, dot, dotdot path segments (#522) (1a317ce)
• extension: Add --ignore-scripts to npm install and update calls (#539) (4dc87ca)
• extension: Resolve symlinks in containment check (#523) (db5fea8)
• extension: Scrub ambient credentials from extension subprocess environment (#538) (7950cb0)
• release: Pin packaging tools and remove cache from release workflow (#526) (7db2ce3)
• secret-store: Pass secrets via stdin instead of argv on macOS and Windows (#534) (0d304a2)
• Tolerate sigpipe truncating large ai review diffs (#547) (abcfcee)
• Upgrade @elastic/schemas to 0.6.2 (#531) (a9c1a64)
• Validate name and use registry path in uninstallExtension (#527) (e7db6ae)
• Warn to stderr when secrets passed as CLI flags (#535) (82cae94)