What's Changed
- fix: infer default routing from configured provider by @jamiepine in #266
- Sandbox hardening: dynamic mode, env sanitization, leak detection by @jamiepine in #259
- Secret store: credential isolation, encryption at rest, output scrubbing by @jamiepine in #260
- feat: auto-download Chrome via fetcher, unify Docker image, fix singleton lock by @jamiepine in #268
- fix: preserve conversation history and improve worker retrigger reliability by @jamiepine in #270
- Add interface CI workflow by @marijnvdwerf in #267
- Split channel.rs and standardize adapter metadata keys by @jamiepine in #271
- fix: allow trustd mach service in macOS sandbox for TLS cert verification by @jamiepine in #272
- feat: add OpenRouter app attribution headers by @l33t0 in #264
- feat: implement link channels as task delegation (v3) by @jamiepine in #255
Full Changelog: v0.2.1...v0.2.2