v0.7.0

Added

• Added mediated egress commands and browser wiring so Linux desktop leases can proxy selected app traffic through the operator machine via the coordinator bridge.
• Added WebVNC portal clipboard controls for sending local clipboard text into the remote session and copying remote clipboard text back to the local browser.
• Added lease sharing for individual users or the owning org, including crabbox share, crabbox unshare, API access checks, and a portal share control on lease detail pages.

Fixed

• Fixed egress start --coordinator so live public-route egress starts work when the local default coordinator is Cloudflare Access-protected.
• Fixed Tailscale exit-node bootstrap paths to prefer tailnet metadata and fail clearly when remote exit-node egress is not active.
• Fixed run --no-sync timing summaries so they report sync_skipped=true.
• Fixed native Windows command output so first-use PowerShell progress records do not leak CLIXML into run logs.
• Fixed Islo provider sync so crabbox run --provider islo uploads the local workspace, uses the correct /workspace/<workdir>, and falls back to chunked exec upload while the archive API returns server errors.
• Fixed Code and WebVNC bridge websocket auth so upgraded brokers receive short-lived bridge tickets in the Authorization header instead of logging them in URL query strings, while preserving query fallback for older brokers.
• Fixed managed AWS macOS desktop leases so readiness and WebVNC use a writable ec2-user work root, call crabbox-ready by absolute path, and read the generated Screen Sharing password via sudo.