Improved
- Command sandboxing is available to all users via /sandbox and --sandbox.
Fixed
- Run safe /user commands immediately during active turns, reject unsafe remote commands during active turns without opening dialogs, and queue commands advertised by relay hosts
- Plugin skill commands stay available after reloading enabled plugins
- Sandbox local-network allowlists now include localhost and loopback hosts.