chore(release): v0.22.1

[ralyodio]

Summary

• harden tmux-backed /new pit tabs after the v0.22.0 feature merge
• keep private workspaces on predictable Ctrl-b window bindings
• number visible tabs 1 and 2 and keep the status bar at the bottom
• clean up private tmux servers when attachment fails
• bump moshcode to v0.22.1

Verification

• focused tab/TUI/help suite: 61 passed
• real PTY smoke test: independent pits, bottom tabs, Ctrl-b switching, native inherited TTY
• GitHub CI required before merge

[github-actions]

ThreatCrush Security Scan

92 finding(s)

HIGH/CRITICAL: 50 | MEDIUM: 42

Severity	Rule	Location
HIGH	manifest-typosquat	apps/pwa/package.json:19
HIGH	js-ssrf-outbound-request	apps/pwa/public/sw.js:45
HIGH	secret-generic-credential	apps/pwa/test/apikey-bearer-scheme.test.mjs:30
HIGH	secret-generic-credential	apps/pwa/test/apikey-mask.test.mjs:38
HIGH	secret-generic-credential	apps/pwa/test/apikey-reveal.test.mjs:35
HIGH	secret-generic-credential	apps/pwa/test/approvals-context.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/approvals-credits.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/approvals-notify.test.mjs:26
HIGH	secret-generic-credential	apps/pwa/test/approvals-resolve-race.test.mjs:20
HIGH	secret-generic-credential	apps/pwa/test/auth-form-email.test.mjs:29
HIGH	secret-generic-credential	apps/pwa/test/auth-form-email.test.mjs:33
HIGH	secret-generic-credential	apps/pwa/test/auth-page-error.test.mjs:36
HIGH	secret-generic-credential	apps/pwa/test/cli-device-token.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/cli-pages-balance.test.mjs:32
HIGH	secret-generic-credential	apps/pwa/test/cli-token.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/credits-pack.test.mjs:51
HIGH	secret-generic-credential	apps/pwa/test/credits-webhook-event-match.test.mjs:35
HIGH	secret-generic-credential	apps/pwa/test/credits-webhook.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/csrf-input-escaping.test.mjs:31
HIGH	secret-generic-credential	apps/pwa/test/csrf-input-escaping.test.mjs:101
HIGH	secret-generic-credential	apps/pwa/test/logout-csrf.test.mjs:29
HIGH	secret-generic-credential	apps/pwa/test/moshpit-api-key.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/moshpit-bulk-claim.test.mjs:23
HIGH	secret-generic-credential	apps/pwa/test/moshpit-claim-full-name.test.mjs:29
HIGH	secret-generic-credential	apps/pwa/test/moshpit-crawlable.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/moshpit-ending-page.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/moshpit-pins.test.mjs:22
HIGH	secret-generic-credential	apps/pwa/test/moshpit-pit-page.test.mjs:33
HIGH	secret-generic-credential	apps/pwa/test/moshpit-records-page.test.mjs:23
HIGH	secret-generic-credential	apps/pwa/test/moshpit-records.test.mjs:23
HIGH	secret-generic-credential	apps/pwa/test/moshpit-registry.test.mjs:20
HIGH	secret-generic-credential	apps/pwa/test/moshpit-related-endings.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/moshpit-sales.test.mjs:16
HIGH	secret-generic-credential	apps/pwa/test/moshpit-search.test.mjs:74
HIGH	secret-generic-credential	apps/pwa/test/moshpit-terms.test.mjs:19
HIGH	secret-generic-credential	apps/pwa/test/moshpit-tlds-pagination.test.mjs:28
HIGH	secret-generic-credential	apps/pwa/test/passkey-register-duplicate.test.mjs:38
HIGH	secret-generic-credential	apps/pwa/test/require-auth-next.test.mjs:31
HIGH	secret-generic-credential	apps/pwa/test/require-auth-next.test.mjs:35
HIGH	secret-generic-credential	apps/pwa/test/sessions-output-seq.test.mjs:30
HIGH	secret-generic-credential	apps/pwa/test/sessions-paste.test.mjs:24
HIGH	secret-generic-credential	apps/pwa/test/sessions-stream-replay.test.mjs:34
HIGH	secret-generic-credential	apps/pwa/test/sessions.test.mjs:24
HIGH	secret-generic-credential	apps/pwa/test/signature.test.mjs:6
HIGH	secret-generic-credential	test/auth.test.mjs:13
HIGH	secret-generic-credential	test/auth.test.mjs:63
HIGH	secret-generic-credential	test/console-cookie-malformed.test.mjs:15
HIGH	secret-generic-credential	test/console.test.mjs:12
HIGH	secret-generic-credential	test/mirror.test.mjs:37
HIGH	secret-generic-credential	test/mirror.test.mjs:77

…and 42 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.