chore(main): release 0.10.0

[github-actions]

🤖 I have created a release beep boop

0.10.0 (2026-10-15)

Features

• notify: make permission-prompt alerts on by default and discoverable (#1001) (7f8e5f0)
• npm: publish as @twigpine/zero (#1142) (530563a)
• providers: add GMI Cloud provider preset and partner listing (#1127) (1335ca6)
• providers: opt-in ZERO_RESPONSE_HEADER_TIMEOUT override for slow first-byte deployments (#1106) (ddc45f2)
• runtime: add process-local per-model RPM admission limits (#1116) (eebb384)
• sessions: add zero sessions prune, which never removes a session another process has open (#1089) (23c27e0)

Bug Fixes

• acp: persist the session permission mode across restarts (#1134) (bb96206), closes #1125
• acp: persist token usage events for ACP sessions (#1137) (300cf62), closes #1118
• acp: publish sub-run sessions loaded over ACP as view-only (#1078) (7f11491)
• agent: retry mid-stream transport aborts before tool dispatch (#1076) (b9ef1d2)
• config: sync atomic config replacements (#1093) (4d2e9f0)
• cron: bound run history and read recent records from the tail (#1094) (42eb6ab)
• cron: preserve newer claims when overlapping runs complete (#1090) (2eb9d94)
• daemon: bound pending sessions and prune on completion (#1091) (8a68660)
• daemon: do not retry workers that finished with a final exit code (#1112) (eefa978), closes #1100
• daemon: stop worker process groups by their launch-time identity (#1088) (ab018b3), closes #861
• deps: refresh the lockfile to patched hono and @hono/node-server (#1080) (aa52040)
• deps: refresh the lockfile to patched shell-quote (#1131) (c56a4c4)
• execution: reserve process capacity before launching (#1092) (bb3346a)
• mcp: forward image tool results on the existing image channel (#1077) (0324c1d)
• mcp: refresh OAuth tokens for discovered endpoints and registered clients (#1113) (571af70), closes #1101
• oauth: give every loopback callback server the bounded shutdown (#1079) (5473301)
• providers: send stable session headers to OpenCode (#1060) (99721c7)
• redaction: redact adjacent AWS keys glued end to end (#1095) (df67ede)
• redaction: redact credentials split by an invisible character (#1067) (e20b762)
• sandbox: say when a session's sandbox enforcement is degraded (#1082) (6b5852d)
• search: redact every text field of session metadata, not ten of thirty (#1073) (9520f2b)
• security: harden shell flag parsing, write roots, and formatters (#1066) (ac5fe0d)
• sessions: keep a session lease for the life of the process, not of the Store (#1144) (883e5be)
• tools: hint when Windows resolves POSIX paths under root (#1063) (0c6f179)
• tui: bound live dictation regions (#985) (feb9927)
• tui: show provider ownership in Recent and Favorites (#1083) (1697b7a)
• tui: stop held peer message Allow/Deny from deadlocking Update (#1111) (a195e88), closes #1099
• unbreak main CI (cron claim tests, Go 1.26.9) (#1124) (2c418fc)

---

This PR was generated with Release Please. See documentation.

[euxaristia]

Verified version-bumps-only (manifest, changelog, package files); it ships whatever main holds, so no interaction with the unmerged sandbox PRs. Twelve days stale but harmless.

[github-actions]

Zero automated PR review

Verdict: No blockers found

Blockers

• None found.

Validation

• [pass] Diff hygiene: git diff --check
• [pass] Tests: go test ./...
• [pass] Build: go run ./cmd/zero-release build
• [pass] Smoke build: go run ./cmd/zero-release smoke

Scope

Head: 892d8bab9a27
Changed files (4): .release-please-manifest.json, CHANGELOG.md, package-lock.json, package.json

This deterministic review checks validation status and basic diff hygiene. A human reviewer still owns product judgment and design quality.

[kevincodex1]

LGTM

[github-actions]

🤖 Created releases:

• v0.10.0

🌻