v1.5.21

Fixed

• set_value with no field name or role types nothing. It fell back to typing
  into the window's largest editable field (seen live: the browser's
  address bar) and reported Set "" = … chars. It now fails and says to
  name the field, pass a compile_ui reference, or use type.
• macOS: a failed screen capture at startup no longer breaks every tool
  (#244). With no screenshot helper and no Screen Recording grant, the
  startup probe failed and took window, key and accessibility down
  with it. The screen size now comes from NSScreen; only screenshots and OCR
  fail, and they say how to fix it.
• Windows: copy_all_text no longer returns lines of placeholder
  characters. UIA TextPattern marks each embedded object (an image, a
  link, a frame) with U+FFFC; they are dropped, as on Linux.
• Preferences seeding for the agent's own browser profile no longer checks
  for the file before reading it (CodeQL js/file-system-race).

Changed

• Dependencies: vitest 5, playwright 1.64, ws 8.22, supertest 7.3.
• Security: follow-redirects 1.16.1 (GHSA-q3jh-wrc6-jgq8, high), deep under
  nut-js, reachable only through jimp's font loader, which clawdcursor does
  not use.