v0.8.2

Drop-in app platform

• Folder picker capability. A served drop-in that declares "hostCapabilities": ["pick-folder"] can ask the user to choose a directory via POST /app-host/pick-folder. The dialog is host-owned and directory-only; the app receives exactly the folder the user selected — nothing else. Same-origin gated per app, one dialog at a time, paths never in URLs or logs.
• App-owned editor surfaces. A served drop-in can declare "editor": { "entry", "label" } to render its own management UI inside the Editor (sandboxed iframe on the loopback origin with _surface=editor and theme parameters — no Node, IPC, or preload access). Apps like Folder Sync manage their jobs from the desktop without app-specific editor code in the host.

Housekeeping

• apps.json catch-up for the v0.8.1 developer-apps removal (the 0.8.1 binaries already shipped correct; this aligns the repository).