v0.8.4

What's Changed

• Make skills frictionless, and follow symlinks in read-only checks by @fuseraft in #9
  • cd no longer needs its own approval: it doesn't count as a program for always/--allow, and cd into a folder inside the directory counts as read-only. A skill script run as cd scripts && bash x.sh now needs only bash approved.
  • Read-only checks now resolve relative arguments through symlinks, so cat docs/x asks first when docs links outside the directory. When the workspace has symlinks that lead outside, a command that could pass through one (after cd, through a glob, or with a flag that follows links while recursing) asks first.
  • In -p mode, a refused action is reported to the model as refused in a non-interactive run, not as declined by the user, so the model reports what it couldn't do.
• fix(repl): the context percentage in the status line updates after each model reply instead of staying frozen through tool calls, and /clear resets it (105de39)
• Split Repl and Tui by concern, and give each area its own line budget by @fuseraft in #10
• docs: the screenshot shows the anchor before model messages (31d18ab)

Full Changelog: v0.8.3...v0.8.4