Bug Fixes
- Bun install & sharp native modules: Fixed stale native module cache issues on Bun updates, added
node-addon-apias a dev dependency required by sharp (#1140) - PendingMessageStore consolidation: Deduplicated PendingMessageStore initialization in worker-service; added session-scoped filtering to
resetStaleProcessingMessagesto prevent cross-session message resets (#1140) - Gemini empty response handling: Fixed silent message deletion when Gemini returns empty summary responses — now logs a warning and preserves the original message (#1138)
- Idle timeout session scoping: Fixed idle timeout handler to only reset messages for the timed-out session instead of globally resetting all sessions (#1138)
- Shell injection in sync-marketplace: Replaced
execSyncwithspawnSyncfor rsync calls to eliminate command injection via gitignore patterns (#1138) - Sharp cache invalidation: Added cache clearing for sharp's native bindings when Bun version changes (#1138)
- Marketplace install: Switched marketplace sync from npm to bun for package installation consistency (#1140)