KitchenSink4Web 1.0.4

A security and reliability release.

• Confirmations now need an explicit Allow. Every confirmation prompt asks for a required choice between Don't allow and Allow, and only Allow lets the action go ahead. An answer with nothing chosen, a cancelled or timed-out prompt, or a reply sent by moving on in the chat now refuses. In some clients with automatic approval turned on, high-risk actions such as payments, sign-ins and deletions could previously go ahead without anyone choosing; they are now refused, and a session that answers instantly with nothing chosen is treated as unattended and refuses without asking. Routine actions can still be approved in advance with KS4WEB_PREAUTH, and routine prompts offer an optional Remember box (off by default) that lasts 30 minutes. KS4WEB_REMEMBER=off removes it.
• Prompts that some clients could not display now appear.
• The server keeps working when a client never reads its error output. Log output is drained by the server itself, so it no longer stops answering, hangs at exit or blocks the browser. Log lines are now one short line each.
• Documentation, test fixtures and package metadata were updated; the metadata now lists KitchenSink4AI as the author.

Install or upgrade with pip install -U kitchensink4web, or use uvx kitchensink4web. Claude Desktop users can install the .mcpb file attached below. See the README for every install route.