v0.6.0

New Features

• Memory graph viewer with offline reports and search (#49)
• Skills dialog for viewing and toggling agent skills, plus a skill details viewer (#42, 7ee1808)
• phosphor-cron-jobs skill with validation of job session_mode at load (#41)

Security

Hardening pass closing all 10 findings from the 2026-10-20 security audit:

• Egress firewall now validates resolved IP addresses by default (DNS-rebinding defense), and bracketed IPv6 literals no longer bypass the raw-IP block (#50)
• Wire-level redaction extended to tool-call inputs and tool results; Summarize/GenerateTitle route through the same redaction path (#50)
• Wrapper-aware bash command deny list (env curl, xargs wget, find -exec, absolute paths, .exe suffixes no longer slip past) (#51)
• fetch, download, agentic_fetch, and web_search all share the secured egress client; allow_raw_ips/ip_allow_list config is honored by every network tool (#51, #52)
• write/append now run the write-path secret gate; web_fetch allow-list race fixed; per-agent redaction policy replaces process-global state (#51)
• Residual findings: csync.Map copylocks defect resolved, stale security-doc paths corrected (#52)

Fixes

• Coerce schema type mismatches in tool-call inputs before execution (#48)
• Refresh the sidebar git branch; stabilize client session test (#39)
• Clear message when pasting an image into a text-only model
• Surface cron job events; speed up cron tests (#37)

Chores

• Sharded test suite across 3 jobs per platform (#38)
• Dependency upgrades resolving open code scanning alerts (#43)