Release v0.5.0

[x7c1]

Summary

Write the release summary here. It becomes the body of the GitHub Release.
Delete the marker comment above once written.

Features

• feat(canary): gate the real-codex canaries and make the gate runnable on macOS (#384)
• feat(sessions): close a session that is still starting (#379)
• feat(sessions): list live sessions before closed ones (#377)
• feat(transcript): always show thinking blocks instead of collapsing them (#375)
• feat(navigator): show the originating pull request on the session card instead of last activity (#373)
• feat(web): restrict resource loading with a Content-Security-Policy (#365)
• feat(status): keep restored usage visible as stale instead of blanking it after an hour (#362)
• feat(sends): queue a send to a still-spawning session and hand its text back if the launch fails (#361)
• feat(sessions): accept a new Codex session before its worktree and agent are launched (#360)
• feat(codex): merge every selected config launch option and union the worktree git grant into it (#358)
• feat(sessions): focus a new session the moment its first send is accepted (#356)
• feat(api): ship built-in launch options and stop truncating long values (#346)
• feat(web): add prompt templates — a registry, a Settings editor, and one-click insertion from the composer (#344)

Bug Fixes

• fix(codex): keep a mid-turn send from overwriting the previous user prompt (#380)
• fix(hooks): bind a fresh spawn whose transcript directory does not exist yet (#378)
• fix(transcript): keep CJK punctuation out of autolinked URLs (#376)
• fix: harden temp-file creation, stop logging conversation excerpts, and guard raw-HTML sinks (#372)
• fix(api): mark safety-bypassing launch options as dangerous and never default-enable them (#371)
• fix(trust): only pre-accept Claude Code trust for Delta's own worktrees (#370)
• fix(hooks): authenticate hook callbacks and confine the transcript path they supply (#369)
• fix(git): reject ref and repo names that git could parse as flags (#368)
• fix(server): require a per-run bearer token on the API and live sockets (#367)
• fix(server): reject cross-site Origin and non-loopback Host on every route (#366)
• fix(attribution): clear a background subagent's running indicator when its result is retrieved via TaskOutput (#363)
• fix(session-actor): clear the pending PostToolUse agent-id buffer once the agent process is gone (#359)
• fix(sessions): fail a launch whose worktree landed off its planned path, and make the preparation deadline configurable (#357)
• fix(sends): stop a send from sticking, re-sending or vanishing when Claude Code rewrites its echo (#353)

Refactoring

• refactor(store): group the spawning-insert arguments into a SpawningSession struct (#374)
• refactor(attribution): split the fold integration test into one file per test (#364)
• refactor(server): move the router tests out of app.rs into a tests/ directory module (#347)

Documentation

• docs: remove internal planning labels from code comments and test fixtures (#381)

Chores

• chore: rename the real-claude canary targets to e2e-real-claude / e2e-real-gate (#383)
• chore(codex-agent): re-vendor the app-server schema against codex-cli 0.153.4 (#382)

Changelog

• v0.4.0...v0.5.0