• feat: add sandbox-aware permissions pipeline with security-scoped bookmarks and distribution-aware UI surfaces
• feat: bundle default provider templates and refresh Providers/Codex settings flows for quicker onboarding
• feat: introduce repository browser mode inside Git Review with stage/unstage, open, and reveal actions
• refactor: split GitChangesPanel into focused SwiftUI extensions to tame compile times and navigation
• fix: tolerate fractional timestamps in session loaders to prevent timeline parsing failures
• build: set up CodMate (Direct)/(MAS) schemes and scripts for notarized DMG, MAS, and aggregate macOS builds
• build: disable App Sandbox for Direct configs so language servers and subprocess tooling can spawn normally
• build: auto-select scheme/config and switch to manual signing when SANDBOX=off in macOS build script