Release v0.7.0 · Voice message transcripts · rerun-build/rerun

Minor release: read Upgrade before updating.

Highlights

Voice messages show their transcript under the bubble, with Transcript and Copy transcript actions; words already heard darken during playback.
OpenCode (Go and Console) as a model provider, in preview behind NEXT_PUBLIC_OPENCODE_ENABLED, off by default.

Processes started for an agent (shell, stdio MCP servers, MCP package installs, Codex, desktop apps) no longer inherit the engine's secrets such as RERUN_API_KEY.
File tools, file routes and skill import resolve symbolic links, so a link inside a workspace can no longer reach files outside it. Agent config.json and MCP token files are written 0600.
Tools that take a URL (web_fetch, download, browser navigation, takeover) only accept http(s) to public hosts and re-check every redirect: no more file://, loopback or LAN targets.
Anonymous sign-in goes through the captcha and a rate limit, no longer reveals whether an email has an account, and only redirects to paths on the same host after sign-in.
Team cursors on a board use a private Realtime channel restricted to workspace members.

Upgrade recommended.

Database: 1 new migration (Realtime policies for team cursors). Run npx supabase db push before starting the new images, otherwise team cursors stay silent.
Engine: migrates its data directory on first start (tightens the mode of agent secret files). Back it up first; there is no downgrade.