v0.9.0 — the dock release

The webui grows up: a VS Code-style dock, a reworked composer, and a
tools layer rebuilt around one idea — every tool is a domain with
dotted actions.

149 commits, 216 files changed (+25,808 / −2,367) since v0.8.0.

Dock & layout

• Panes everywhere: drag tabs within and between sidebars, into the
  main pane, and back — sessions stays locked to the left sidebar
• Dock chrome: rounded tab corners matching pane fillets, +320 snap
  ladder (320/640/960/...), divider close/push restored
• The main pane is never closable as the last pane; hover-only X
• Inspector: seven tabs (Files, Cron, Logs, Skills, Tools, Settings,
  Kanban) — settings lives here now, no menubar gear

Chat

• Composer rework: morphing send/stop/retry button, + attach button
  vertically centered on the first line
• Stacked appearance: your question pins at the top while the agent
  body scrolls — and survives appearance switches mid-scroll
• Copy message on hover (raw markdown, never the render)
• Tool result display: auto / expanded / collapsed; a running row
  expands, collapses when done, a manual click pins it
• File tree rows get VS Code-style glyphs

Sessions & surfaces

• Archived sessions group renders last, muted
• + new focuses the existing draft tab instead of stacking drafts
• Kanban board as a webui tab (SQLite store + /tasks endpoints)
• Settings: 28+ knobs, live theme hot-pickup, api_key masked

Under the hood

• Tools action protocol: one tool per domain with dotted actions
  (files.write, delegate.task) — labeled sub-actions in the prompt,
  dotted sub-rows in the webui, legacy names still aliased
• True batch atomicity: snapshot + rollback for multi-file writes
  and memory batches
• Databases move to <home>/data/ with boot-time migration
  (move-not-copy, idempotent)
• Attach-image SSRF hardening: the internal-address guard now checks
  every redirect hop, not just the first URL
• Atomic file writes everywhere (temp + rename): a crash or power
  loss can no longer truncate memory or session files
• shell.run output capped at 1 MB before buffering; cron fires get
  the same 30-min wall-clock cap as chat runs; delegated subagents
  kill their whole process group on timeout
• Windows build fixed and smoke-tested on real hardware
• CI runs on every dev push; CONTRIBUTING carries the 9-rule PR
  admission gate; the embedded SPA bundle now regenerates through a
  single lane so parallel webui work can never collide

Upgrading

omega update — or grab a prebuilt binary from the releases page.
Databases migrate automatically into data/ on first boot. Windows
binaries are back and healthy.