Release v0.21.12-preview.4

What's Changed

• fix(web-shell): preserve standalone session target by @ytahdn in #9038
• feat(web-shell): support workspace file uploads by @ytahdn in #8874
• chore(deps): bump sharp to ^0.35.0 to resolve GHSA-f88m-g3jw-g9cj by @yiliang114 in #8952
• fix(ci): let both bot PATs approve the release PR, no human needed by @yiliang114 in #9056
• test(webui): drain the batched transcript dispatch with two timer hops by @wenshao in #9058
• fix(core): Preserve OTel session ownership in daemons by @doudouOUC in #9077
• fix(desktop): reserve scrollbar gutter so sidebar project rows don't jitter by @yiliang114 in #9073
• feat(autofix): brake review-round diff growth with per-window src/test budgets by @wenshao in #8981
• feat(serve): adaptively grow live-journal caps before truncating mid-turn replay by @wenshao in #8905
• fix(review): close the inline-quotation gap and harden the layer gate by @wenshao in #9020
• fix(ci): make autofix verification gates hermetic to runner git config by @wenshao in #8961
• feat(review): require an executed witness on every confirmed Critical by @wenshao in #9065
• feat(review): carry the incremental anchor sha in the posted ledger marker by @wenshao in #9067
• feat(cli): Add review settings for attribution, default effort, and default comment by @wenshao in #8994
• perf(serve): Restore large sessions selectively by @doudouOUC in #9055
• feat(core): inject request metadata for alicloudapi.com gateways by @yiliang114 in #9103
• fix(web-shell): render a single archive action in the session toolbar by @yiliang114 in #9066
• fix(desktop): open external URL artifacts and markdown links by @yiliang114 in #9069
• fix(desktop): hide the Windows runtime terminal and align reduced-motion startup by @yiliang114 in #9064
• fix(desktop): bridge Electron users on Windows and Linux by @yiliang114 in #9079
• feat(cli): Correlate daemon logs with OpenTelemetry spans by @doudouOUC in #9084
• fix(ci): reduce ENOSPC and load-sensitive test flakes by @yiliang114 in #8982
• feat(core): write per-agent transcripts for workflow dispatches by @qqqys in #8971
• fix(cli): close three review-comment gaps from the #9027 CI review by @wenshao in #9102
• fix(install): avoid Get-FileHash for Windows checksums by @MichaelYochpaz in #9112
• chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard by @yiliang114 in #9008
• feat(review): close unbounded finding classes instead of enumerating them by @wenshao in #9095
• fix(autofix): hold autofix rounds while review-pr is in flight by @yiliang114 in #8899
• fix(daemon): reduce subagent live replay journal by @ytahdn in #9057
• fix(desktop): open remaining external links through the shell opener by @yiliang114 in #9111
• fix(web-shell): soften tool execution failure hints by @ytahdn in #9053
• refactor(cli): Generalize the Conversations runtime foundation by @doudouOUC in #8890

New Contributors

• @MichaelYochpaz made their first contribution in #9112

Full Changelog: v0.21.11...v0.21.12-preview.4