Changelog
- dce3b3a Merge pull request #6076 from SivanCola/chore/internalize-windows-sandbox
- e38623e Merge pull request #6077 from SivanCola/fix/new-session-running-guard
- 28d0ab8 fix(sandbox): clean up Windows helper availability checks
- 203ab34 fix(control): gate summarizeAt through the rotation gate
- bb0dd15 Merge pull request #6085 from esengine/codex/session-trash-missing-path
- 387cc22 fix(sandbox): route the Windows helper in the desktop app and fail closed without it
- 1e408f5 fix(desktop): drop partial trash copy when source vanishes mid-copy
- 252ff75 fix(control): route all session mutations through the rotation gate
- a6f96dc fix(control): close the NewSession/ClearSession rotation TOCTOU window
- c79a15d fix(desktop): make session trash tolerate missing artifacts
- 395aa3d fix(control): refuse NewSession while a turn is running
- 52cc819 Merge pull request #6082 from SivanCola/fix/recovery-chain-depth-cap
- 67bd9f1 Merge pull request #6080 from SivanCola/fix/snapshot-conflict-trigger-telemetry
- bd33d51 Merge pull request #6074 from SivanCola/fix/session-recovery-handoff-serialization
- 790d06c Merge pull request #6079 from SivanCola/ci/cache-impact-desktop-watchlist
- 5ceab67 fix(control): truncate the cancel flush under the snapshot handoff lock
- 909bea3 Merge pull request #6073 from SivanCola/fix/readiness-permission-loop
- 82a9d86 fix(agent): cap recovery chain depth and force-save at the cap
- e4afe93 fix(agent): harden readiness loop-guard pass and blocked-storm detection
- 89b7555 fix(control): serialize session swaps with the snapshot handoff
- 3b723f8 feat(control): log snapshot-conflict triggers with the revision ledger
- 4ce5764 ci(cache-impact): watch desktop session prompt swap and environment probes
- 95f592a Merge pull request #6075 from SivanCola/fix/desktop-session-cost-scope
- 5fe20eb chore: internalize Windows sandbox backend
- 4da3f3e fix(desktop): key tab usage telemetry to its session
- c69b4d9 fix(control): serialize session recovery snapshots
- 4d1998b fix(agent): stop readiness permission loops
- 3d2ed10 Merge pull request #6063 from SivanCola/fix/session-exact-append-stale-baseline
- f4591d7 fix(agent): let a same-content foreign stamp keep rewrite ownership
- 895972d fix(agent): anchor stale-baseline session saves to the persisted baseline
- 190a522 Merge pull request #6062 from esengine/codex/desktop-release-latest
- 7f94919 fix(agent): allow safe session append from stale revision baseline
- 97c7466 fix(release): keep desktop as latest release
- 0f4e3f3 Merge pull request #6056 from SivanCola/fix/desktop-meta-git-branch-async
- b922cb2 Merge pull request #6057 from esengine/codex/hydrate-performance-breadcrumbs
- 53138c7 test(desktop): close probe release channel once to fix test race
- b1c3578 fix(desktop): clear branch refresh flag even if the probe unwinds
- 345212f test: assert stale hydrate metadata is ignored
- d60c52e fix(desktop): refresh metadata git branch asynchronously