v0.7.0

Added

• roba config lint -- static config checks with typed exit (closes #266) (#301)
• resolve a short session-id prefix for -c/--resume, git-style (closes #304) (#305)
• default-on single-turn agent advisory + orchestrator hand-off docs (closes #302, #303) (#306)

Fixed

• agent-check stall warning requires resolved write tools (closes #264) (#265)
• derive builtin-subcommand names from the clap tree (closes #268) (#277)
• audit batch -- four verified findings (closes #269, #272, #273, #275) (#278)
• shell-quote alias args interpolated into $() regions -- SECURITY (closes #287) (#290)
• render structured output on the --json-schema default path (closes #280) (#291)
• validate --session-id; document + explain the optional-value swallow (closes #284, #285) (#292)
• --quiet suppresses the spinner, matching its contract (closes #282) (#293)
• dim the [roba] session: line so it reads as metadata, not conversation (closes #294) (#295)
• prompt.rs robustness -- idle-stdin hang, {{VAR}} warn, attach size-guard (closes #288, #286, #271) (#296)
• --show-permissions surfaces --add-dir and resolves allow/deny conflicts (closes #283) (#297)
• remove session_id from the Profile schema -- per-invocation only (closes #270) (#298) (BREAKING)
• show --wait timeout exits 4, not generic 1 (closes #289) (#299)

Maintenance

• untrack the local roba.toml swept in by #278; ignore project-local config (#279)
• un-pin macOS CI -- macos-latest rustup verified fixed (closes #274) (#300)