v0.0.0-nightly.20260814

• fix(toolargs): enforce hard artifact data budget
• fix(toolargs): bound scanner-native artifacts at their sole birth point
• test(node): websocket 存活测试并入 proto_connection_test
• fix(node): 尾随 artifact 按"已结算 call"丢弃，并覆盖取消路径
• fix(node): 工具 terminal 后丢弃流式工具的尾随 artifact
• fix(runner): sanitize AOP tool text at UTF-8 boundary
• refactor(agent): separate harness prompt from scan skill
• refactor(node): derive websocket recovery timings
• refactor(node): simplify websocket connection lifecycle
• feat(web): automate agent quick connect
• feat(web): add contextual chat input guide
• fix(node): surface enrollment rejection reasons
• feat(node): advertise runner process instance identity
• fix(node): classify websocket connection failures
• fix(node): enforce websocket liveness deadlines
• fix(node): reset reconnect backoff after stable sessions
• fix(deps): pin race-free zombie runner
• test(tmux): isolate offset reads from PTY timing
• fix(build): strip local release-profile binaries
• test(web): synchronize terminal reconnect teardown
• test(arch): follow portable recorder shell contract
• chore(release): finalize v1 gates and cleanup
• chore: ignore local agent and browser artifacts
• fix(web): update cyber-ui record card focus
• build: align full profile with static re2
• refactor: clean v1 compatibility and package boundaries
• fix(ci): unify nightly and release workflows
• fix(ci): export Windows recorder link environment
• fix(build): fetch x264 from GitHub mirror
• fix(ci): fall back to building recorder SDK
• fix(build): detect Windows MSYS hosts
• feat(browser): expand reusable headless automation
• refactor(record): consolidate native SDK tooling
• ci: validate native RE2 and name Windows artifacts
• fix(build): restore static native RE2 for full artifacts
• fix(ci): persist recorder link environment on Windows
• fix(ci): export Windows recorder SDK paths
• feat(record): add native desktop capture tool
• fix(node): clean up panicked operations before reporting
• fix(runner): make run wait include cleanup
• fix(protocol): pin canonical loot and file range schemas
• feat(record): add native media capture transport
• feat(skills): add ioa finding publishing convention
• test: stabilize concurrent PTY option isolation
• refactor: make shell command adapter transparent
• fix: reclaim exited Windows bridge runtimes
• refactor: keep command bridge as a PTY adapter
• feat: add optional shell command bridge
• feat(config): reuse shared LLM environment
• feat(scan): emit native artifacts with correlated loot
• fix embedded IOA and tool panic boundaries