v3.0.22

Core

• fix(session): gate coauthor reminder on an actual git working tree (#1303) (@yzxoi)
• fix(session): guard malformed reasoning stream boundaries (#1300) (@marzich)
• fix(app): stop sidebar project list jump on unrelated navigation (#1301) (@yzxoi)
• feat(app): default workspace HTML files to an in-panel preview iframe (#1298) (@SII-jake)
• feat(browser): complete recovery, settle, evidence, and observability loop (#1294) (@EricSanchezok)
• fix(server): accept reverse-proxy and allowlisted origins on the global event ws (#1296) (@SII-jake)
• fix(session): publish rollback invalidation before replacement root (#1295) (@yzxoi)
• fix(mcp): isolate OAuth ownership from background connects and harden observability (#1292) (@EricSanchezok)
• feat: open workspace HTML files in a sandboxed browser tab (#1290) (@SII-jake)
• feat(app): open HTML attachments in the user's browser via new tab (#1289) (@SII-jake)
• fix(theme): register plugin themes globally to stop session-switch skin flips (#1288) (@yzxoi)
• perf(server): gzip-compress API responses (#1285) (@SII-jake)
• fix(scope): filter ephemeral test worktrees from sidebar and archive existing artifacts (#1284) (@EricSanchezok)
• fix(plugin): deduplicate concurrent runtime starts (#1282) (@marzich)
• fix(channel): persist Clarus task acceptance and Holos base paths (#1278) (@clarus-jarvis)
• fix(command): remove ungated shell expansion from command templates (#1280) (@synergy-agent[bot])
• fix(session): sanitize non-JSON-safe provider metadata in prompt projection (#1276) (@EricSanchezok)
• Harness-Core layering refactor (S0-S10): L1 zero product/assembly edges, acyclic product layer, error gates (#1277) (@yzxoi)
• perf(server): serve global session search from nav indexes (#1274) (@yzxoi)
• feat(config): add synergy config export with secret redaction (#1271) (@SII-jake)
• fix(workspace): canonicalize symlinks in isPathContained to block escape (#1254) (@TTAWDTT)
• fix(provider): gate Anthropic thinking by generation with envelope-safe budgets (#1266) (@yzxoi)
• fix(util): reclaim stale file locks by process start identity (#1265) (@yzxoi)
• refactor(agent): narrow preamble messages to key moments (#1259) (@EricSanchezok)
• fix(library): drive UCB1 recall exploration from retrieval_count pulls (#1253) (@synergy-agent[bot])
• feat(settings): persist default workspace preference for new sessions (#1262) (@yzxoi)
• fix(plugin): use shared atomic writer for marketplace registry (#1256) (@TTAWDTT)
• fix(test): restore global fetch after module-level script-identity stub (#1263) (@yzxoi)
• feat(skill): absorb external agent authoring skills into built-in skill catalog (#1260) (@EricSanchezok)
• docs: require external implementation provenance (#1258) (@EricSanchezok)

App

• feat(app): add close-other-tabs action to workbench tab surfaces (#1302) (@SII-jake)
• fix(app): restore expanded workspace folders on file explorer mount (#1299) (@SII-jake)
• fix(app): make workbench markdown preview scrollbar visible (#1297) (@SII-jake)
• test(app): make open-in-browser DOM fixture hermetic for the Coverage gate (#1293) (@yzxoi)
• feat: restyle composer as the prompt dock's floating surface (#1287) (@yzxoi)
• feat(app): draggable persisted sidebar width and top-bar outline (#1286) (@yzxoi)
• fix(app): derive Blueprint sidebar audit state from bound audit sessions (#1273) (@yzxoi)
• feat(ui): show subagent detail when expanding delegated activity steps (#1269) (@yzxoi)
• feat(sidebar): mark sessions with unsent prompt drafts (#1268) (@yzxoi)
• fix(app): expect New Session Workspace row in settings catalog test (#1267) (@yzxoi)
• feat(app): calm prompt input hover, lighten transition card, truncate trace titles (#1261) (@EricSanchezok)

SDK

• perf(dev): cache Prettier and scope generate.ts formatting to its own outputs (#1291) (@SII-jake)