Summary

The release closes trust-gate and bystander gaps in the local-files bridge, rejects an unlimited cgroup sentinel for ACP child heaps and adds transient network retries. It also adds an explicit VS Code session-source switch, improves hook handling and reaps surviving Windows hook process trees.

Why it matters

These changes address practical isolation, recovery and lifecycle problems that affect the safety of terminal and IDE coding agents.

Sources