Version 0.5.0

Added

• Permission gate with allow/deny rules for tool calls (--allow, --deny, --interactive-approval on devagent run)
• PermissionManager with glob pattern matching (e.g. --allow write_file:src/**)
• Agent loop pauses and prompts before executing unmatched tool calls
• POST /api/v1/sessions/{id}/approve now resolves live pending tool calls via call_id
• ApprovalNeededEvent emitted by the loop when approval is required
• Session-keyed permission registry so the REST API can reach the active manager

Changed

• devagent serve upgraded to FastAPI + uvicorn with full REST and WebSocket support
• WS /ws/v1/{session_id} streams live events from DB at 500ms polling
• GET /api/v1/sessions, /events, /memory, /orchestrate/graph endpoints added
• Session context auto-compression and multi-agent orchestration (devagent orchestrate)

Fixed

• Session store schema now initialised on app startup, fixing CI failures on fresh environments