zero 0.5.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

## [0.5.0](https://github.com/Gitlawb/zero/compare/v0.4.0...v0.5.0) (2026-07-22)
Features

plugins: add zero plugins info command (#773) (2479884)
sandbox: disable the sandbox via config (#687) (#746) (a21a052)
sandbox: unify command execution and enforcement (#781) (96859c9)
tui: add /undo as an alias for /rewind (#698) (#747) (8c6d302)
tui: add isolated /btw conversations (#748) (2e267bd)
tui: permission prompt takes free-text feedback inline (#780) (3967d49)

Bug Fixes

agent: stop write_stdin session_id probing thrash (#702) (#749) (fbf8598)
cli: warn when ZERO_PROVIDER overrides a providers-use selection (#767) (3524f79)
doctor: detect missing native binary during runtime checks (#450) (7796022)
lsp: make the real-gopls check opt-in so a broken gopls can't fail the suite (#684) (#766) (b1f4173)
make extension installs transactional (#762) (baa4be1)
oauth: refuse redirects on credential POSTs (#729) (#741) (974fc03)
oauth: validate discovered endpoints before merge/use (#511) (#739) (ce4a996)
perfbench: absolutize the bench binary and make errored tasks first-class (#730) (dbd9443)
perfbench: grant write tools so mutating tasks measure real edits (#763) (e1975c1)
perfbench: keep the stamped answer file out of negative oracle greps (#737) (015452c)
providers: stop "provider not found" for env-derived profiles (#716) (4cbd144)
sandbox: AST second opinion for interactive-command bypasses (#473) (#745) (f079b90)
sandbox: bind Windows elevated ACL setup to one no-follow handle (#765) (4945684)
sandbox: don't auto-allow shell when re-entrancy skips wrapping (#727) (#744) (6849011)
tools: give write_stdin's invalid-session errors the same recovery guidance (#749 follow-up) (#768) (da9fb50)
tools: read_file recovers a backwards line range instead of erroring (#779) (89bdc67)
tui: cache settled alt-screen transcript (#647) (d74ceb1)
tui: model rows labelled by id when the description is prose; keep the sidebar under the / palette (#775) (b30c397)
tui: stop the permission card clashing on cool themes (#778) (722bb31)

Performance Improvements

agent: concurrent read-only tool batches via capability gate (#715) (31d45d5)
agent: execution profiles with one-shot posture escalation (PR10b+PR10c) (#740) (378d538)
agent: posture-escalation signals and controller (PR10a) (#736) (af875df)
agent: preserve prompt cache prefixes (#760) (739a47e)
openai: optimized turn session — background prewarm and prefix telemetry (PR8) (#723) (60dc84e)
output: add token-aware semantic output budgeting (PR11) (#717) (e5670c4)
providers: provider capabilities and default turn-session adapter (PR7) (#720) (30e2c3f)
turn-bench: Phase 0 — strengthen oracles so pass rate can't be misread as correctness (#712) (727ad4d)

View the full release notes at https://github.com/Gitlawb/zero/releases/tag/v0.5.0.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.