fix(agent-pool): route async binder failures through onError (#95)

fix(web): wire codex panel status setter into action composition

Keep fast indicator visible without thinking

Share native Piclaw bridge helpers

test(agent): smoke pi backend path

fix(deps): declare whatsapp runtime packages

fix(deps): declare whatsapp runtime packages

spike(agent): harden acp backend config

docs(web-push): document delivery routing and debug labels

fix(web-push): repair rebased typecheck and env-aware test

web-push: per-device per-chat notification presence routing

web-push: subscription + VAPID foundation and service worker

fix(web-push): repair rebased typecheck and env-aware test

fix(reload): harden manual restarts and IPC writers

fix(m365): handle graph retry and no-content responses

fix(cdp): treat non-JSON transport responses as invalid

fix(web): honor trusted markdown sanitize bypass

fix(workspace-search): index bare dotenv files by basename

fix(remote): allow first-contact pair confirms without epoch

fix(keychain): scope injected shell secrets to references

fix(db): sweep dangling media links before orphan cleanup

fix(web): keep side-prompt SSE streams alive

fix(web-ui): prune stale per-chat bridge state

fix(web-terminal): ignore detached client writes

fix(web): remember origin only after auth passes

fix(whatsapp): reflush queued messages after reconnect races

fix(scheduler): align shell output truncation accounting

fix(agent-pool): refresh runtime after in-place session changes

fix(agent-pool): harden side session setup

fix(dream): preserve live lock owners on EPERM

fix(portainer): reject unsafe container id prefixes

fix(queue): cancel retry timers during shutdown

fix(startup): queue resume-pending IPC during bootstrap

fix(ipc): harden task parsing and shutdown handling

fix(docker): pin Homebrew bootstrap installer

fix(make): discover active supervisord config on restart

fix(entrypoint): reseed shipped supervisor defaults on upgrade

test(docker-compose): cover loopback default port binding

fix(m365): escape sync pattern text before glob regex conversion

fix(office-tools): support ZIP data-descriptor entries

fix(azure-openai): honor Retry-After on 429 responses

fix(web): bound refresh-state growth

fix(web): guard remote display websocket sends by readyState

fix(web): resync after SSE reconnect before replaying deltas

fix(web): keep AgentStatus hook order stable

fix(utils): avoid surrogate-pair truncation splits

fix(tool-output): cap chunkText buffering for long lines

fix(tools): preserve abort signal and toolCallId in exec_batch

fix(tools): stream tracked-bash output instead of buffering all of it

fix(db): coalesce NULL token-usage aggregates to zero

fix(web): stop extending rate-limit windows on blocked requests

fix(webauthn): stop login enumeration and preserve challenges

fix(web-sse): require chat scope matches for chat events

fix(scheduler): anchor cron timezone calculations to next_run

fix(agent-pool): bound waitForSessionIdle with a timeout

fix(agent-pool): scope attachment registry state per pool

fix(agent-pool): route async binder failures through onError

fix(scripts): replace eval with argv-safe execution in audit runner

fix(docker): pin and verify tailscale installation

fix(docker): clean up restic installer temp dirs on failure

fix(supervisor): stop managed process groups cleanly

fix(skills): delete source VM only after restore succeeds

fix(drawio): validate postMessage source and origin before saves

fix(web): harden HTML attachment preview sandboxing

fix(web): remove unsafe long-press workspace delete gesture

fix(web): render provisional popout labels as text

fix(proxmox): replace blocking sync requests with timeout-aware async calls

fix(db): preserve message row identity on upsert

fix(web): serve SVG media as attachments

fix(session-rotation): restore cancelled sessions

fix(agent-pool): ignore late timeout aborts

fix(runtime): advance lastAgentTimestamp after successful turns

fix(cli): stop global flags from swallowing subcommands

fix(agent-pool): re-read rotated session before prompt

fix(skills): restore proxmox lifecycle wrappers

fix(web): force SSE reconnect after iOS resume

docs(web-push): document delivery routing and debug labels