v2.1.1

2.1.0 was tagged but did not publish (audit + Windows CI). This release is that work plus the two CI blockers.

Fixed

• cancel with force: true can be retried after a kill that did not observe an exit. stop() no longer memoizes that false, which had made every later force a no-op.
• Force-kill unregisters only the handles it actually stopped, so a resume that registers during teardown stays cancellable instead of running untracked.
• Todo cancelled is kept and counted in todoProgress.cancelled instead of being stripped.
• contextFiles aliases (Win32 case, realpath) are sent once.
• doctor reports agent.error when --version exits non-zero, probes .mjs/.cjs launchers with Node, quotes the resolved command, and includes launcher/timeout env knobs.
• Transitive fast-uri and qs advisories that failed npm audit --audit-level=high.
• Stderr capture slices an oversized first pipe read so retained memory stays one cap.

Changed

• Permission notes in TECHNICAL.md match the router: no allow option → cancelled, never the first offered reject.