🎯 Goals, Compaction, & Secrets

Unified goal tool — Goal creation, lookup, updates, and storage now share one multi-action tool while preserving the /goal command, API, goal strip, and active-goal response behavior.
Resumable chat compaction — Compaction preserves authorization, evidence, pending work, loaded skills, and secret references in a fixed resumable-state summary, then clears stale context-window state.
Credential-focused redaction — Runtime masking now targets API keys and login credentials without corrupting ordinary settings, while global and project secrets remain protected.

🛠️ Shell & Task Lifecycle

Shell exits are definitive completion — Terminated local, SSH, and TTY shells now report completion reliably, expose shared termination and exit-code helpers, and recreate only when the next command needs them.
Deferred task cleanup — Completed and cancelled tasks release callables, arguments, and child-task references so finished work does not retain unnecessary resources.
Paramiko traceback retention fixed — A stale optional-import traceback no longer keeps the code-execution tool-loading stack and its first agent in memory.

Chrome Web Store installs recover safely — Same-version reinstalls are skipped, updates stage before replacement, and active Browser runtimes restart safely when needed.
Internal Docker Browser rendering stabilized — Navigation now returns after the initial document commit, command deadlines align with socket timeouts, and invalid screencast frames are rejected before they can stretch the viewport.
Page-tail connector history — Interactive clients can request a bounded history tail and page backward with a cursor, while clients without history hints continue to receive complete replay.

Malformed responses repair cleanly — Missing or malformed response arguments now enter the existing repair path instead of exposing a KeyError; fenced or structurally broken tool intent no longer leaves streamed chats thinking indefinitely.
Inline extension deletion confirmation — Extension removal now uses the shared in-page confirmation UI, with safe escaping of extension names.
Stable WebUI mount geometry — The shell reserves a responsive desktop sidebar slot, yields to the mounted left panel, collapses cleanly on mobile, and keeps the welcome composer at its final height while nested inputs hydrate.
Launcher links refreshed — README download and release links now point to the published A0 Launcher v1.4 artifacts.