v0.5.0

Changelog

• abd80d9 Add ACP model and session controls (#388)
• 7ac2fcc Add GA document tools and Python helpers (#225)
• f62921a Add JSON receipts for one-shot runs (#271)
• e2466db Add JSONL session activity exports (#266)
• d506215 Add OAuth 2.1 support for remote MCP servers Wires the OAuth 2.1 authorization-code + PKCE client already vendored in the pinned modelcontextprotocol/go-sdk (RFC 8707 resource indicators, RFC 9728 protected-resource discovery, refresh) into HTTPClient, gated behind a new auth = oauth server config. Adds /mcp auth|logout and yottacode mcp auth|logout, persists tokens to ~/.yottacode/mcp-auth/.json, and keeps the live session transport non-interactive (a missing/expired/revoked token fails fast with guidance instead of popping a browser during unattended background startup or a mid-turn tool call) — only the explicit /mcp auth command runs the interactive browser flow. Verified against Google's live Gmail MCP protected-resource-metadata endpoint; targets Google's Workspace MCP servers as the first real consumer. (#329)
• 54560ae Add PDF OCR and document search (#242)
• a0b8fcb Add TUI terminal title status (#277)
• e24cd04 Add build-tagged deadlock detection (#348)
• 0c464d3 Add conservative worktree cleanup command (#344)
• bfd5fba Add default commit and PR attribution (#315)
• 2496b1c Add deterministic deep research workflow (#382)
• f275a43 Add experimental browser automation tools (#320)
• be5347e Add explicit Code Map context assembly (#319)
• 6323a85 Add fine-grained permission grants (#283)
• 674b5c0 Add hashline edit reliability (#280)
• 8480498 Add headless memory recall command (#311)
• eaf37d9 Add interactive session inspect view (#387)
• 53f07ec Add models.dev usage cost estimates (#325)
• 845f980 Add official sandbox image (#253)
• 6cff55a Add pptx table extraction (#241)
• e99e5ca Add provider headers and OpenRouter setup preset (#314)
• 0b6d3c5 Add provider setup issue template (#269)
• 20c34e4 Add shell job transcript logs (#397)
• 2c65093 Add structured JSON output for oneshot runs (#317)
• fe4a468 Add system permissions policy (#349)
• 5f25160 Add worktree exit cleanup prompt (#267)
• aae068f Align TUI doctor with CLI diagnostics (#369)
• c88f4cc Avoid real podman probes in sandbox picker test (#229)
• 5504908 Block interactive privilege prompts in run_bash (#300)
• a080350 Bound TUI live preview rendering work (#347)
• 9f3d710 Bound ffmpeg resource usage for media tools (#296)
• 11ffd58 Coalesce foreground subagent progress in TUI (#365)
• 4332f8f Compact approval cards on wide terminals (#368)
• ddfa632 Default sandbox networking to host (#268)
• 20bc9b7 Dim cmdline cursor while agent is working (#361)
• f40f94a Enhance document image metadata extraction (#273)
• 27e8860 Enrich session list stats (#276)
• 6d7ab79 Expand browser automation capabilities (#352)
• 45c7d06 Fix ACP cancel test start signal flake (#262)
• 770105c Fix PR Markdown formatting in TUI (#334)
• 68112c8 Fix PR update formatting and approval spacing (#330)
• e1da4e5 Fix TUI approval and popup state cleanup (#379)
• bdcef50 Fix approval modal bash layout (#383)
• 2173eb5 Fix clipped approval modal previews (#250)
• e386a6a Fix clipped approval modal previews (#275)
• 9734c33 Fix context compaction recovery and exit timeout (#265)
• f9c91f6 Fix core edit integrity and tool reliability (#390)
• d4adde9 Fix custom endpoint key field and clip validation glyph to width (#309)
• 721c8d5 Fix duplicate approval modal title (#264)
• d6e064f Fix git push for mismatched worktree upstreams (#355)
• 7718810 Fix lazy sandbox profile recovery (#238)
• 915792f Fix memory browser pagination and popup sizing (#378)
• 1fb04c3 Fix openai-auth 401s from missing chatgpt-account-id header (#371)
• 80023c5 Fix pasting into TUI popups after bubbletea v2 migration (#306)
• 38748a3 Fix raw GitHub URL skill installs and add Custom catalog tab Private-repo raw.githubusercontent.com URLs carry a ?token=... query string that only authorizes that one blob fetch, but install routed them through the codeload.github.com archive path, which discards the token and 404s. Route query-bearing raw URLs through the single-file fetch instead. Also: CLI installs of official/local skills now persist into config.toml's [skills] default_on so they're enabled next session without a separate /skills trip, matching the in-TUI install path. Adds a Custom tab to /skills > Catalog for skills installed from anything other than the official catalog (previously invisible there), plus an -bound local rescan on Bundled/Custom so a CLI install shows up in an already-open session without restarting. Claude-Session: https://claude.ai/code/session_01VmadWnhkUyMigu6ff4J7Pb (#326)
• 8626dc2 Fix sandbox DNS and Go test temp dirs (#270)
• 09f2e66 Fix stale router pair lockout via graceful degradation (#307)
• de98760 Fix startup update check blocking TUI (#285)
• a46b94e Fix welcome hover after clear (#223)
• a7d87b9 Graduate command sandbox to GA (#240)
• acaf255 Harden ACP session, memory, and context handling (#384)
• 8b6880c Harden MCP transports and lifecycle management (#321)
• 6b8aea6 Harden agent loop and subagent lifecycle against races and leaks (#327)
• b44a272 Harden background subagent permissions (#336)
• 0f8f583 Harden browser automation and add human handoff (#356)
• e9c5c65 Harden browser stealth and tab setup (#374)
• 492a3bb Harden compaction and concurrent mutations (#340)
• fe60be0 Harden edit tool recovery and validation (#389)
• 9d0f31f Harden edit tools and native web search (#396)
• 80c2b83 Harden file reads and anchored edits (#362)
• 646df88 Harden nested Bash permission matching (#350)
• 8912857 Harden offline syntax range selection (#316)
• 431414e Harden recall search query sanitization (#398)
• cefae41 Harden receipt-based edit reliability (#394)
• 0324926 Harden run_bash timeouts and background jobs (#395)
• 7e34c3d Harden sandbox credential secret lifecycle (#364)
• 4b00cb1 Harden sandbox image release workflow (#259)
• db98138 Harden structured edit and patch workflows (#342)
• 17ce875 Harden subagent dispatch safety (#274)
• b03104a Harden subagent resource cleanup (#323)
• 0d35ee1 Harden subprocess cancellation and blocking waits (#346)
• e53bec5 Improve advisor routing status and setup (#335)
• 470661c Improve approval command layout (#400)
• a00e324 Improve doctor output summary (#301)
• 5bd6aee Improve pull request result cards (#343)
• be16e6b Improve subagent code search efficiency (#318)
• bf1735e Instrument /inspect session turn diagnostics (#338)
• 835f0cd Isolate polluted host shell environments (#297)
• 1c139ed Keep host Go test artifacts out of repo (#288)
• 5479441 Limit TUI mouse handling to transcript scrolling (#237)
• 5f03d87 Make approval modals keyboard-only (#236)
• 2a3f8fd Make media rendering safer for desktops (#299)
• a15aacc Migrate browser automation from Rod to chromedp (#360)
• 80fbd95 Move plan approval labels inside dialog (#341)
• 794674d Offer saved approval rules for chained bash, worktrees and commits (#376)
• 23ff828 Persist permissions at repository root from worktrees (#366)
• e92cc95 Persist sandbox Go caches across sessions (#279)
• a9b1415 Polish Ollama memory setup flow (#345)
• 3b7e202 Polish approval modal layout (#339)
• ae14124 Polish approval popup rendering (#399)
• 3a19989 Polish first-contributor guide (#227)
• 3a449f7 Polish permission warnings and sandbox limits (#272)
• bd7f807 Polish setup wizard review actions (#222)
• b4c91bd Prepare v0.5.0 release (#401)
• 09f0bb6 Prepare v0.5.0-rc.1 release (#353)
• 8f2fcf8 Prepare v0.5.0-rc.2 release (#358)
• 18da3f9 Prevent inherited worktree upstreams (#337)
• 5407e3f Prune abandoned running sandbox containers (#286)
• 131181d Publish Homebrew formula for stable releases (#363)
• d4918b4 Quiet expected dispatch panic test output (#298)
• 8d7aed5 Quiet expected panic recovery tests (#304)
• 25fcd86 Recover deleted session working directories (#375)
• 17a765e Reduce tool context growth (#324)
• e168138 Refine git issue implementation gate (#261)
• 1cecbd4 Refresh README for launch positioning (#303)
• 9195bf7 Refresh README hero and quickstart flow (#239)
• b03ec53 Refresh indirect Go dependencies (#263)
• af146f8 Reload permissions before showing picker (#284)
• 5567722 Remove loop exit close glyph (#249)
• 25b46b0 Repair orphaned tool calls before every request; fix a git-editor hang (#328)
• 6eefca9 Report sandbox Go cache components in doctor (#370)
• 17d9e1e Restore copyable OpenAI auth URLs (#313)
• f299625 Revert clear hero reset to avoid mouse lag (#234)
• f8cb88f Route sandbox commands by tool profile (#228)
• 7bbc2be Schedule weekly vulnerability scan (#354)
• 591515b Silence expected recall validation usage (#331)
• 5280142 Skip redundant mouse motion updates (#235)
• 21c6d41 Stop /mcp auth tests from popping a real browser (#332)
• 9012cbf Unify anchored edit permissions and diagnostics (#333)
• e3025a6 Upgrade Anthropic SDK (#256)
• 8291095 Upgrade Goldmark dependency (#260)
• 2f25754 Upgrade SQLite dependency (#255)
• b1a258a Upgrade UI rendering dependencies (#254)
• 7babc84 Upgrade low-risk Go dependencies (#252)
• d9f61c3 Validate permission policies with doctor (#351)
• e10c0b1 dap: add Debug Adapter Protocol client (#281)
• f01d875 dap: fix response-vs-close race reporting spurious session-closed/timeout errors (#308)
• 069282e feat: 5-phase code map roadmap + Go import precision (#310)
• fd24794 fix sandbox test artifact pollution (#278)
• 98a49a1 fix(tui): remove close glyphs from confirmation cards (#247)
• 9f1e4a5 tools: add Go debug session tools via Delve (#282)