chore(main): release 0.5.0

[github-actions]

🤖 I have created a release beep boop

0.5.0 (2026-07-22)

Features

• plugins: add zero plugins info command (#773) (2479884)
• sandbox: disable the sandbox via config (#687) (#746) (a21a052)
• sandbox: unify command execution and enforcement (#781) (96859c9)
• tui: add /undo as an alias for /rewind (#698) (#747) (8c6d302)
• tui: add isolated /btw conversations (#748) (2e267bd)
• tui: permission prompt takes free-text feedback inline (#780) (3967d49)

Bug Fixes

• agent: stop write_stdin session_id probing thrash (#702) (#749) (fbf8598)
• cli: warn when ZERO_PROVIDER overrides a providers-use selection (#767) (3524f79)
• doctor: detect missing native binary during runtime checks (#450) (7796022)
• lsp: make the real-gopls check opt-in so a broken gopls can't fail the suite (#684) (#766) (b1f4173)
• make extension installs transactional (#762) (baa4be1)
• oauth: refuse redirects on credential POSTs (#729) (#741) (974fc03)
• oauth: validate discovered endpoints before merge/use (#511) (#739) (ce4a996)
• perfbench: absolutize the bench binary and make errored tasks first-class (#730) (dbd9443)
• perfbench: grant write tools so mutating tasks measure real edits (#763) (e1975c1)
• perfbench: keep the stamped answer file out of negative oracle greps (#737) (015452c)
• providers: stop "provider not found" for env-derived profiles (#716) (4cbd144)
• sandbox: AST second opinion for interactive-command bypasses (#473) (#745) (f079b90)
• sandbox: bind Windows elevated ACL setup to one no-follow handle (#765) (4945684)
• sandbox: don't auto-allow shell when re-entrancy skips wrapping (#727) (#744) (6849011)
• tools: give write_stdin's invalid-session errors the same recovery guidance (#749 follow-up) (#768) (da9fb50)
• tools: read_file recovers a backwards line range instead of erroring (#779) (89bdc67)
• tui: cache settled alt-screen transcript (#647) (d74ceb1)
• tui: model rows labelled by id when the description is prose; keep the sidebar under the / palette (#775) (b30c397)
• tui: stop the permission card clashing on cool themes (#778) (722bb31)

Performance Improvements

• agent: concurrent read-only tool batches via capability gate (#715) (31d45d5)
• agent: execution profiles with one-shot posture escalation (PR10b+PR10c) (#740) (378d538)
• agent: posture-escalation signals and controller (PR10a) (#736) (af875df)
• agent: preserve prompt cache prefixes (#760) (739a47e)
• openai: optimized turn session — background prewarm and prefix telemetry (PR8) (#723) (60dc84e)
• output: add token-aware semantic output budgeting (PR11) (#717) (e5670c4)
• providers: provider capabilities and default turn-session adapter (PR7) (#720) (30e2c3f)
• turn-bench: Phase 0 — strengthen oracles so pass rate can't be misread as correctness (#712) (727ad4d)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Zero automated PR review

Verdict: No blockers found

Blockers

• None found.

Validation

• [pass] Diff hygiene: git diff --check
• [pass] Tests: go test ./...
• [pass] Build: go run ./cmd/zero-release build
• [pass] Smoke build: go run ./cmd/zero-release smoke

Scope

Head: 40e78e72926d
Changed files (4): .release-please-manifest.json, CHANGELOG.md, package-lock.json, package.json

This deterministic review checks validation status and basic diff hygiene. A human reviewer still owns product judgment and design quality.

[github-actions]

🤖 Created releases:

• v0.5.0

🌻