v0.9.0
What's Changed
- feat(egress): prove the air-gap in CI + close web_fetch redirect SSRF by @mrdushidush in #40
- feat(api): stream SSE on the OpenAI-compat (LM Studio) path by @mrdushidush in #41
- feat(tui): prompt for DangerFullAccess tools instead of silently denying by @mrdushidush in #42
- feat(doctor+startup): first-run remediation + VRAM-aware brain picker by @mrdushidush in #43
- feat(safety): action transcript + /undo + trash for destructive ops by @mrdushidush in #44
- fix(api): case-insensitive SSE Content-Type detection + pin test by @mrdushidush in #45
- feat(repo_map): add mode=refs - exhaustive deduped reference scan by @mrdushidush in #46
- fix(undo): never clobber newer content on restore (roast critical) by @mrdushidush in #47
- release: v0.9.0 — production-readiness pass by @mrdushidush in #48
Full Changelog: v0.8.9...v0.9.0