v0.108.1

Fixed

• Reliable watch --stream-to. Streaming validates the destination URL and flush interval before startup, never prints URL paths, queries or credentials in status/error lines, keeps OTLP queries in the right place, refuses redirects, survives failed posts, and waits a bounded time for final events while reporting any that were not confirmed sent. (#370)
• Completed stream workers are joined. EventStreamer.stop() now returns only after a worker that set its done event has actually exited. (#376)
• Truthful PR comment and share cost. When a trace has no recorded model or token usage, summaries say cost was not captured instead of pricing event payload size at a default model. Available values are labeled as estimates. (#371)
• Consistent file evidence. PR summaries count shell read and write targets with the same evidence used by Scope, and show files relative to the session working directory. (#371)
• Portable trace bytes. Trace-store writers use LF line endings on every OS. Legacy CRLF traces still verify, and rollback preserves their original bytes. (#372)
• Agent PID reuse. watch --agent-pid, approval approve and approval deny record the agent's start time and refuse to stop, resume or kill a PID that now belongs to another process. The decision is still recorded. Older approval records and Windows keep the old behavior. On macOS, reuse within the same second is not detected. (#375)
• record-http with HTTPS upstreams. Closing the proxy now interrupts a stalled TLS handshake instead of waiting the full shutdown timeout. Certificate and host checks are unchanged and now tested. Trust a private CA with SSL_CERT_FILE. (#373)

Release

• All core, plugin, marketplace and MCP Registry metadata is synchronized at 0.108.1. The independent VS Code extension remains at 0.5.0 and no vscode-v* tag is included.

Full changelog: v0.108.0...v0.108.1