BonsAI v1.4.9

Fixed

• Board names and connector credentials now persist reliably. A failed rename stays editable
  instead of appearing saved, while connector API tokens live in the macOS Keychain and migrate
  from the legacy private JSON file only after every credential round-trips successfully.
• Stopping an Agent turn or quitting BonsAI can no longer freeze the board or abandon the CLI.
  Agent processes are reaped asynchronously, escalate from SIGTERM to SIGKILL after a bounded
  grace period, and cannot append stale output after a stop or replacement turn.
• Changing appearance or language no longer resets an in-progress board. BonsAI now retains
  the working board, undo/redo history, and pan/zoom across canvas remounts, flushing pending text
  and geometry before the view is replaced.
• Web pages can no longer drive an open board through the loopback API. Every app launch now
  rotates a private capability, validates loopback hosts and browser origins before handling a
  request, and gives local agents a protected discovery file instead of an open CORS endpoint.
• Boards no longer lose data when opened by an older or incompatible build. Saved boards now
  carry a format version, preserve unknown element records across autosaves, and keep unreadable
  payloads write-protected with a recovery copy.
• Drawing-only boards stay in history. Freehand strokes, shapes, images, equations, and
  structured cards now count as board content even when their text mirror is empty.