v6.0.0

What's Changed

• fix(claude): prevent forged Bash approval prompts by @herikwebb in #415
• docs(changelog): describe readiness and perf diagnostics per chat mode by @pjdoland in #416
• fix(acp): let full access edit the workspace by @pjdoland in #418
• fix(settings): keep hand-set Claude settings when the settings tabs save by @pjdoland in #420
• fix(acp): show a useful label in the ACP session picker by @pjdoland in #421
• fix(claude): skip auto-complete when no Anthropic credential resolves (#425) by @pjdoland in #426
• perf(ollama): defer and bound the chat-model enumeration (#427) by @pjdoland in #428
• feat: add Chatbook natural-language notebook cells by @mbektas in #406
• fix(deps): stop JupyterLab 4.6 flagging the launcher dependency by @pjdoland in #422
• fix(acp): keep an NBI-supplied API key from spreading through Codex by @pjdoland in #424
• fix(watcher): keep the open-file revert off a running kernel and announce it (#429) by @pjdoland in #430
• fix(capabilities): let disabled_providers suppress a provider's models (#431) by @pjdoland in #432
• fix(mcp): tolerate a malformed mcpServers or participants section (#433) by @pjdoland in #434
• fix(config): parse NBI_ENABLED_PROVIDERS with split_csv (#435) by @pjdoland in #436
• docs(admin): document the provider config shape that actually exists (#438) by @pjdoland in #440
• fix(chat): gate response-stream commands behind an allowlist by @pjdoland in #443
• fix(deps): patch HIGH-severity fast-uri and js-yaml CVEs by @ajayrgb in #445
• docs(agents): add AGENTS.md with repo conventions for coding agents by @pjdoland in #446
• chore: remove two dead TS helpers from utils.ts by @ajayrgb in #447
• fix(acp): stop serving client file reads and writes to ACP agents by @pjdoland in #419
• fix(acp): show what an ACP approval would run by @pjdoland in #423
• fix(inline): require a live suggestion for Tab, and identify responses per request by @pjdoland in #444
• feat(chatbook): gate Chatbook with a standard admin feature policy by @pjdoland in #448
• fix(mcp): bound the MCP handshake so a bad server entry cannot spin the backend by @pjdoland in #456
• fix(chatbook): keep the mention menu from outliving the cell that opened it by @pjdoland in #457
• fix(chatbook): stop numbering cells whose generated code never ran by @pjdoland in #458
• fix(settings): report a blank required model instead of answering Ready by @pjdoland in #459
• fix(mcp): stop deleting a temp file the config editor has not created yet by @pjdoland in #460
• fix(perf): name the provider that served a turn instead of always copilot by @pjdoland in #461
• a11y(settings): hide the decorative tab icons from the accessibility tree by @pjdoland in #462
• fix(chat): let Enter send a message that starts with an unmatched @ or / by @pjdoland in #464
• fix(mcp): report a JSON syntax error when saving the MCP config editor by @pjdoland in #470
• fix(settings): keep the settings content pane usable in a narrow window by @pjdoland in #471
• fix(ui): keep icon button labels inside the button by @pjdoland in #472
• fix(chat): say so in the transcript when a response was stopped by @pjdoland in #474
• fix(providers): actually stop generating when a streaming turn is cancelled by @pjdoland in #479
• fix(chat): cancel every turn that is running, not just the sidebar's by @pjdoland in #477
• fix(chat): stop a streaming turn from reverting the rest of the transcript by @pjdoland in #478
• Chatbook touch ups by @mbektas in #480
• docs: bring every doc current for 6.0 by @pjdoland in #482
• feat(chatbook): record generation turns in performance diagnostics by @pjdoland in #488
• fix(chatbook): match kernel-scoped rules against the backend kernel by @pjdoland in #487
• fix(copilot): only log into Copilot when it will serve a request by @pjdoland in #490
• chore(deps): raise dependency floors past known-vulnerable releases by @pjdoland in #492
• improve chatbook system prompt by @mbektas in #493

Full Changelog: v5.4.0...v6.0.0