v0.10.0 — never type over the human

IAK v0.10.0 — never type over the human

First release since June 10, and the theme is respect for the human at the keyboard. It came out of a real incident: on 2026-07-13 our own wake nudges started typing into sentences while a human was mid-message. Everything here makes sure that can never happen, and that a deferred wake never loses a message. Every change was reviewed adversarially by a second, different model before merge.

Keyboard safety (the headline)

• A human-idle guard (HIDIdleTime, fail-closed) gates every path that can type. Garbage or zero thresholds clamp to a safe default and never authorize injection.
• Wake scripts recheck idle immediately before every click, keypress, and Enter, so a human who returns mid-wake aborts the injection instead of being typed over.
• Every abort restores the human's frontmost window. The old "type it anyway" fallback is gone.

Delivery that never loses a message

• Ack-after-success: a wake that aborts is retried next cycle, tracked so an already-woken session is not re-nudged.
• room_ack now clears only the lines it actually consumed, so a message that arrives between reading and acking survives.

Hygiene and security

• Pre-commit secret scanner blocks accidental key leaks in this public repo.
• Watchdog roster is config and env driven; no machine paths or private IPs in the tree.

Upgrade notes

• Wake scripts may legitimately take up to ~5 minutes when a human is actively using the machine. Raise external supervisor timeouts to 320s or more.