v0.23.4

First release with the git tag aligned to the package version, unblocking the npm publish, platform-archive, and Homebrew formula pipelines. Intended as the first published npm release of cuttlefish-cli.

Features

• Collaboration chat routes and UI.
• Orchestration workers data view with end-to-end coverage.
• CLI registers the orchestration command groups.
• Releasable Windows (win32-x64) install path: scripts/install.ps1, portable zip artifact, and operator docs in docs/INSTALL.md.

Security

• Hardened gateway session, org, and upload handling.
• Fixed auth provider validation and added security regression coverage.
• Bounded security reviewer runs during screening.
• js-yaml bumped to 4.3.0.

Bug Fixes

• CLI limits command preserves JSON stdout.
• Ollama assistant output stays canonical.
• Checkpoints return coherent decision session state and reject conflicting terminal decisions.
• Gateway accounts completed web session turns.
• Skill installs report idempotent outcomes.

Internal

• Chat sidebar refactored into a project session tree.
• better-sqlite3 raised to ^12.6.2 for Node 24 Windows prebuilds.

See CHANGELOG.md for details.