diff --git a/.changeset/brave-pugs-shake.md b/.changeset/brave-pugs-shake.md
new file mode 100644
index 0000000..317b952
--- /dev/null
+++ b/.changeset/brave-pugs-shake.md
@@ -0,0 +1,15 @@
+---
+"crosscode": minor
+---
+
+Release 0.7.0 with opt-in error monitoring plus reliability and security hardening.
+
+- Add opt-in Sentry error monitoring (`@sentry/node`) for the CLI.
+- Security: increase projectId entropy to prevent tunnel enumeration attacks.
+- Fix tunnel client double-reconnect, add a heartbeat, and auto-restart dropped named tunnels.
+- Fix OpenCode v2 startup on Windows and repair tier display / v2 health checks.
+- Fix port detection hanging when the OpenCode process exits early.
+- Fix the keypress listener leak and clean it up properly.
+- Harden the git remote username check with a timing-safe comparison.
+- Refactor `cli.ts` into focused modules (auth, config, log, proxy, providers, sentry, util, qr).
+- Build: bundle `@crosscode/shared` via the tsup config and list it as a devDependency so the private workspace package is not published as a runtime dependency.
diff --git a/packages/crosscode/package.json b/packages/crosscode/package.json
index a80fc7c..d0a1d2b 100644
--- a/packages/crosscode/package.json
+++ b/packages/crosscode/package.json
@@ -23,6 +23,7 @@
   "author": "snhsish",
   "license": "MIT",
   "devDependencies": {
+    "@crosscode/shared": "workspace:^",
     "@types/cross-spawn": "^6.0.6",
     "@types/node": "^26.0.0",
     "@types/qrcode": "^1.5.6",
@@ -31,7 +32,6 @@
     "typescript": "^5.4.0"
   },
   "dependencies": {
-    "@crosscode/shared": "workspace:^",
     "@sentry/node": "^10",
     "chalk": "^5.6.2",
     "cross-spawn": "^7.0.6",