Bloks 2.5.35

A reliability release: turns that fail settle cleanly, saves survive a crash, and the app holds its trust boundaries tighter

• Safer by default.
  • Only the app's own window now counts as the app. A page from another local port, or a sandboxed page such as an agent's HTML artifact, is treated like any other website.
  • Your approval rules about commands and files now apply to Codex, Gemini CLI, OpenCode, Grok and Pi, and check every file a request touches.
  • An agent can only schedule routines for itself.
  • Saved secrets can no longer use names the system reads for itself.
• Turns that fail before they start no longer leave things hanging. A workflow step, job, routine or email whose turn could not start is now marked failed instead of staying "running", and two turns can no longer start in the same conversation at once.
• Your settings and rooms survive a crash. Saves are written whole, and a file that will not open is kept aside instead of being saved over.
• Engines.
  • The backup takes over when Pi reports its limit a moment after an empty reply (#233).
  • A slow Codex or Pi compaction no longer cuts off or leaks into the next reply (#234).
  • Room speakers wait for each other however long a turn runs.
• The app.
  • Errors show wherever you are.
  • A message that fails to send comes back to the box.
  • Drafts stay with the conversation they were written in.
  • A conversation opened on another device shows its own messages.
  • Quick Ask tells you when a message did not send.
• Telegram. A very long line no longer stalls the server.

Thanks to @rpavlovs, @pycckuu and @mixo44 for the reports behind several of these.