# PatchPilot v0.1.0

## Highlights

- Public preview of the local-first coding agent TUI with Ollama, Gemini, and Codex provider support.
- Guided onboarding window with dedicated provider/auth/model setup instead of inline chat-only configuration.
- Interactive slash-command palette with arrow-key navigation, quick apply, and numbered host/model shortcuts.
- Runtime hardening for workspace boundaries, config storage, prompt replay, and safer shell execution defaults.

## Fixed

- Symlink-based workspace escapes are blocked for reads, listings, and writes.
- PatchPilot no longer writes API keys into the current repository by default; it stores config in `~/.patchpilot/.env`.
- Absolute workspace paths are no longer injected into primary prompts and advisor metadata.
- The shell runner now rejects metacharacters, blocked interpreters, absolute paths, and parent-directory traversal.

## Improved

- Model discovery uses a TTL cache to avoid avoidable provider roundtrips on repeated selections.
- Repo search prefers `rg` when available for lower latency on real projects.
- GPU polling now negative-caches missing `nvidia-smi` instead of probing forever on unsupported systems.
- CI now runs on Node 22 and 24, audits dependencies, verifies package contents, and includes CodeQL analysis.

## Pull Requests

- Internal integration from runtime telemetry, macOS Ollama, Gemini/Codex provider, connect-aware agents, and release-readiness hardening work.
