- Changed bash() to allow read-only pipelines (head, tail, grep, wc, jq, sort, uniq) instead of rejecting every pipe.
- Changed bash() command refusals to name the Python call or flag that fixes them, including a correction for each remaining pipeline refusal.
- Fixed bash() refusing kill, pkill, and killall commands that can reach processes outside the command's own process group, including kills inside remote ssh commands.
- Fixed bash() children inheriting the launcher's developer environment, with the POSIX default utility path when the launcher supplies no PATH.
- Fixed a daemon-created session starting with only PATH in its environment instead of the launching shell's full environment, which broke toolchains such as cargo and nix.