v0.1.18 — Permission control, draft attachments, and faster turns

You decide what agents can run. Permission control (beta) routes gated tool calls through an approval prompt, and a per-project allowlist lets trusted commands run without interrupting you. Approvals hold mid-turn now, so an agent can pause for your call and pick up exactly where it left off.

Stage files before you send. Draft attachments let you attach files to a chat message while you're still composing it, review them in the Edits Bar, and only commit them when you hit send. Drafts are preserved until the send actually succeeds, so a hiccup no longer eats your composer.

Faster follow-ups. Warm-idle session pooling keeps agents primed between turns, so your next message starts working sooner instead of waiting on a cold start.

More control over running agents. Press Escape to stop a working agent (with an optional skip-confirm), usage-limit detection retries with a model fallback instead of stalling, and a corrupt resume now hands off to a fresh session on the same model rather than dropping the run.

Onboarding & telemetry. First-run setup gets a provider grid and an opt-in for anonymous error and usage reporting, so you can help us catch crashes and rough edges — entirely on your terms.

Plugins & reliability. Richer plugin manifests power a fuller plugin detail panel, workflow and permission cards render inline in the feed, and wedged reconnects now escalate while the boot UI waits on the initial load instead of flashing a half-loaded state.