diff --git a/Cargo.lock b/Cargo.lock
index a73dc899..0da72216 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -34,7 +34,7 @@ dependencies = [
 
 [[package]]
 name = "aither"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-agent",
  "aither-apple",
@@ -70,7 +70,7 @@ dependencies = [
 
 [[package]]
 name = "aither-acp"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-agent",
  "aither-core",
@@ -90,7 +90,7 @@ dependencies = [
 
 [[package]]
 name = "aither-agent"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-attachments",
  "aither-command",
@@ -132,7 +132,7 @@ dependencies = [
 
 [[package]]
 name = "aither-apple"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "async-channel",
@@ -152,7 +152,7 @@ dependencies = [
 
 [[package]]
 name = "aither-attachments"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "async-fs",
  "const-hex",
@@ -166,7 +166,7 @@ dependencies = [
 
 [[package]]
 name = "aither-browser"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-agent",
  "aither-core",
@@ -177,7 +177,7 @@ dependencies = [
 
 [[package]]
 name = "aither-claude"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-models",
@@ -195,7 +195,7 @@ dependencies = [
 
 [[package]]
 name = "aither-cli"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-acp",
  "aither-agent",
@@ -216,7 +216,7 @@ dependencies = [
 
 [[package]]
 name = "aither-cloud"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-claude",
  "aither-codex",
@@ -232,7 +232,7 @@ dependencies = [
 
 [[package]]
 name = "aither-codex"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-models",
@@ -255,7 +255,7 @@ dependencies = [
 
 [[package]]
 name = "aither-command"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
@@ -266,7 +266,7 @@ dependencies = [
 
 [[package]]
 name = "aither-copilot"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-models",
@@ -286,7 +286,7 @@ dependencies = [
 
 [[package]]
 name = "aither-core"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-derive",
  "anyhow",
@@ -303,7 +303,7 @@ dependencies = [
 
 [[package]]
 name = "aither-derive"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "convert_case 0.11.0",
  "proc-macro2",
@@ -313,7 +313,7 @@ dependencies = [
 
 [[package]]
 name = "aither-fs"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
@@ -327,7 +327,7 @@ dependencies = [
 
 [[package]]
 name = "aither-gemini"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-attachments",
  "aither-core",
@@ -355,7 +355,7 @@ dependencies = [
 
 [[package]]
 name = "aither-llama"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "async-channel",
@@ -372,7 +372,7 @@ dependencies = [
 
 [[package]]
 name = "aither-mcp"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-sandbox",
@@ -395,7 +395,7 @@ dependencies = [
 
 [[package]]
 name = "aither-mem0"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-gemini",
@@ -414,7 +414,7 @@ dependencies = [
 
 [[package]]
 name = "aither-models"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "async-fs",
@@ -425,7 +425,7 @@ dependencies = [
 
 [[package]]
 name = "aither-openai"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-attachments",
  "aither-core",
@@ -451,7 +451,7 @@ dependencies = [
 
 [[package]]
 name = "aither-ort"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "async-channel",
@@ -464,7 +464,7 @@ dependencies = [
 
 [[package]]
 name = "aither-patch"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "tempfile",
  "thiserror 2.0.20",
@@ -473,7 +473,7 @@ dependencies = [
 
 [[package]]
 name = "aither-rag"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
@@ -500,7 +500,7 @@ dependencies = [
 
 [[package]]
 name = "aither-sandbox"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
@@ -551,7 +551,7 @@ dependencies = [
 
 [[package]]
 name = "aither-search"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "aither-rag",
@@ -576,7 +576,7 @@ dependencies = [
 
 [[package]]
 name = "aither-skills"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "async-fs",
  "futures-lite",
@@ -589,7 +589,7 @@ dependencies = [
 
 [[package]]
 name = "aither-webfetch"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
@@ -614,7 +614,7 @@ dependencies = [
 
 [[package]]
 name = "aither-websearch"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aither-core",
  "anyhow",
diff --git a/Cargo.toml b/Cargo.toml
index fd01c7f6..ac6b1c01 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -33,7 +33,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.9.0"
+version = "0.9.1"
 edition = "2024"
 authors = ["Lexo Liu <me@lexo.cool>"]
 license = "MIT"
@@ -72,32 +72,32 @@ clippy.multiple_crate_versions = { level = "allow", priority = 1}
 [workspace.dependencies]
 tracing = "0.1.44"
 zenwave = { version = "0.7", default-features = false }
-aither-core = { path = "./core", version = "0.9.0" }
-aither-apple = { path = "./apple", version = "0.9.0" }
-aither-derive = { path = "./derive", version = "0.9.0" }
-aither-ort = { path = "./ort", version = "0.9.0" }
-aither-skills = { path = "./skills", version = "0.9.0" }
-aither-attachments = { path = "./attachments", version = "0.9.0" }
-aither-browser = { path = "./tools/browser", version = "0.9.0" }
-aither-websearch = { path = "./tools/websearch", version = "0.9.0" }
-aither-webfetch = { path = "./tools/webfetch", version = "0.9.0" }
-aither-search = { path = "./tools/search", version = "0.9.0" }
-aither-fs = { path = "./tools/fs", version = "0.9.0" }
-aither-command = { path = "./tools/command", version = "0.9.0" }
-aither-mcp = { path = "./mcp", version = "0.9.0" }
-aither-acp = { path = "./acp", version = "0.9.0" }
-aither-sandbox = { path = "./sandbox", version = "0.9.0" }
-aither-agent = { path = "./agent", version = "0.9.0" }
-aither-openai = { path = "./openai", version = "0.9.0" }
-aither-claude = { path = "./claude", version = "0.9.0" }
-aither-cloud = { path = "./cloud", version = "0.9.0" }
-aither-gemini = { path = "./gemini", version = "0.9.0" }
-aither-llama = { path = "./llama", version = "0.9.0" }
-aither-copilot = { path = "./copilot", version = "0.9.0" }
-aither-codex = { path = "./codex", version = "0.9.0" }
-aither-models = { path = "./models", version = "0.9.0" }
-aither-rag = { path = "./rag", version = "0.9.0" }
-aither-mem0 = { path = "./mem0", version = "0.9.0" }
+aither-core = { path = "./core", version = "0.9.1" }
+aither-apple = { path = "./apple", version = "0.9.1" }
+aither-derive = { path = "./derive", version = "0.9.1" }
+aither-ort = { path = "./ort", version = "0.9.1" }
+aither-skills = { path = "./skills", version = "0.9.1" }
+aither-attachments = { path = "./attachments", version = "0.9.1" }
+aither-browser = { path = "./tools/browser", version = "0.9.1" }
+aither-websearch = { path = "./tools/websearch", version = "0.9.1" }
+aither-webfetch = { path = "./tools/webfetch", version = "0.9.1" }
+aither-search = { path = "./tools/search", version = "0.9.1" }
+aither-fs = { path = "./tools/fs", version = "0.9.1" }
+aither-command = { path = "./tools/command", version = "0.9.1" }
+aither-mcp = { path = "./mcp", version = "0.9.1" }
+aither-acp = { path = "./acp", version = "0.9.1" }
+aither-sandbox = { path = "./sandbox", version = "0.9.1" }
+aither-agent = { path = "./agent", version = "0.9.1" }
+aither-openai = { path = "./openai", version = "0.9.1" }
+aither-claude = { path = "./claude", version = "0.9.1" }
+aither-cloud = { path = "./cloud", version = "0.9.1" }
+aither-gemini = { path = "./gemini", version = "0.9.1" }
+aither-llama = { path = "./llama", version = "0.9.1" }
+aither-copilot = { path = "./copilot", version = "0.9.1" }
+aither-codex = { path = "./codex", version = "0.9.1" }
+aither-models = { path = "./models", version = "0.9.1" }
+aither-rag = { path = "./rag", version = "0.9.1" }
+aither-mem0 = { path = "./mem0", version = "0.9.1" }
 
 [dependencies]
 aither-core.workspace = true
diff --git a/sandbox/CHANGELOG.md b/sandbox/CHANGELOG.md
index 1952d425..c1770736 100644
--- a/sandbox/CHANGELOG.md
+++ b/sandbox/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.1](https://github.com/lexoliu/aither/compare/sandbox-v0.9.0...sandbox-v0.9.1) - 2026-10-16
+
+### Other
+
+- Run a prepared command in the container acceptance test
+- Grant the container heel run execute on the prepared tools directory
+
 ## [0.9.0](https://github.com/lexoliu/aither/compare/sandbox-v0.8.0...sandbox-v0.9.0) - 2026-10-15
 
 ### Fixed