v1.0.232

This release makes background work in cockpit actually reliable: long-running run_in_background commands now survive across turns, finish on their own, and wake the agent when they're done — instead of being quietly killed the moment the turn ended.

✨ New: Background tasks that finish on their own

Previously, anything an agent launched with run_in_background was tied to that single turn. The moment the turn produced its answer the underlying process was torn down, so the task never really finished — the next turn just inherited a "stopped / previous process exited" post-mortem, and the agent had to give up and re-run things in the foreground.

Now the claude process stays resident while a background task is still in flight. When the task completes, cockpit receives a real completion notification, renders it as a live system-event row, and the agent automatically resumes — reads the output, reports the result — with no manual nudge. It's on-demand: a normal turn with no background task closes out exactly as before.

🐛 Fix: Injected messages no longer masquerade as your chat

Skill loads, image annotations, background-task notifications, and context-compaction notices were being rendered as if you had typed them — big right-aligned "user" bubbles full of machine text. They now show as muted system-event rows (click one for the full detail), and a loaded skill's body folds into its Skill tool call instead of dumping a wall of text into the conversation. Fixed for both live streaming and reloaded history.

✨ New: Console browser hints

The Console's browser bubbles now surface a hint when a page can't be embedded (iframe blocked by the site) or when a session needs a cookie re-login — a blank frame is no longer a silent mystery.

🐛 Fix: Notes stop growing phantom checkboxes

The global Note no longer accumulates junk empty-checkbox lines ([ ]) across saves. Round-tripping note content through markdown was regenerating and duplicating empty task-list items on every edit; that's fixed.

📦 Misc: Dependency security sweep

Patched a batch of vulnerable transitive dependencies (ws, hono, linkify-it, qs, markdown-it, and the e2b demo's undici), clearing the outstanding high/medium Dependabot advisories. Lockfile-only — no API changes.