NativeAgent 0.4.2

NativeAgent 0.4.2

A calmer, more honest Mac chat

The Mac chat surface was rebuilt around one idea: the conversation should tell
you the truth about what the agent is doing, and nothing else.

• One durable turn card replaces the old thinking rows, typing chips, and
  progress chrome — in the main window and every detached session window. An
  accepted turn renders exactly one card. Terminal states are evidence-based:
  a proven completed, failed, or canceled turn resolves its card away because
  the transcript already carries the result, while an outcome-unknown turn
  keeps its card rather than pretending it ended.
• The card shows the approval it is waiting on. When a turn stops on a
  confirmation-tier tool, the approval now appears inline on the turn card with
  the decision offered right in the conversation — previously the request sat
  in Activity and the chat just looked idle. The card is a projection of the
  same approval inbox every other surface uses; there is no second authority.
• Live turn activity is carried into the chat while a turn runs, so long
  work is visible instead of silent.
• Fenced code blocks survive the transcript. Multi-line code used to arrive
  as one mangled line (fence markers eaten, newlines collapsed); code now
  renders in a real code block with its language label and copy support.
• Chat links are scheme-allowlisted. Only http, https, and mailto links are
  live; a javascript: or file: link loses its linkness and keeps its
  visible label, failing closed on anything unknown.
• Native transcript search and a simplified composer, plus session
  provenance and active-session navigation, and a calmer session rail.
• An accessibility acceptance pass across the Mac chat surface.

GitHub can watch, but it cannot start work

• The GitHub integration is now watcher-only. Refreshes update watcher and
  Desk state, read models, and notifications — no GitHub event can start a
  provider, a tool, or a bridge turn on its own. Explicit user requests still
  work exactly as before.
• Actionable events claim one durable, deduplicated notification
  ("GitHub needs attention") instead of re-notifying on every no-op refresh.
• The check classifier now separates executable CI failures from
  maintainer-controlled review gates, so a PR that is waiting on a human
  maintainer stops being routed as a technical failure and stops consuming
  agent capacity. Lost bridge wakes are recovered from durable state instead
  of being silently marked as handled.

Requires macOS 26 (Tahoe) or later, unchanged from 0.4.1.