v0.3.20

What's Changed

• docs: update Prisma workflow guidance for generated-output guardrail by @detail-app[bot] in #1621
• docs: correct stale periodic task recovery notes in CONCERNS.md by @detail-app[bot] in #1619
• docs: add runScriptPostRunCommand to state-ownership-matrix by @detail-app[bot] in #1620
• Fix #1636: Recover validation-failed chat messages by @martin-purplefish in #1637
• Fix #1625: Reuse ACP permission bridges by @martin-purplefish in #1639
• Fix #1623: Respect running startup scripts by @martin-purplefish in #1640
• Fix #1629: Treat blank optional env vars as unset by @martin-purplefish in #1638
• Respect empty initial session prompts by @martin-purplefish in #1647
• Refactor single writer test fixtures by @martin-purplefish in #1649
• Fix #1624: Prevent concurrent auto-iteration resume loops by @martin-purplefish in #1650
• Fix #1635: Prevent rejected chat recovery session leak by @martin-purplefish in #1641
• Fix #1626: Preserve completed session status on stop by @martin-purplefish in #1645
• Fix #1634: clean up failed session starts by @martin-purplefish in #1644
• Scope untracked Prisma drift files by @martin-purplefish in #1648
• Fix #1631: prevent stale lock cleanup from deleting valid locks by @martin-purplefish in #1642
• Fix #1627: Reject malformed attachment dispatches by @martin-purplefish in #1643
• Add default provider effort settings by @martin-purplefish in #1651
• Fix Dependabot dependency alerts by @martin-purplefish in #1652
• Fix #1628: Restart Electron backend after stop failure by @martin-purplefish in #1653
• Fix #1635: Harden rejected chat recovery by @martin-purplefish in #1656
• Fix #1633: Dispatch queued messages after init retry by @martin-purplefish in #1655
• Fix #1632: Stop waiting on signal-killed run scripts by @martin-purplefish in #1654
• Fix #1630: clean up timed-out ACP prompts by @martin-purplefish in #1657
• Fix CodeQL findings in websocket tests by @martin-purplefish in #1646
• Fix #1622: Validate websocket origins by @martin-purplefish in #1658
• Fix duplicate linked issues in Todo by @martin-purplefish in #1659
• Prepare 0.3.20 patch release by @martin-purplefish in #1660
• docs: fix stale docs after initScriptPid addition by @detail-app[bot] in #1663
• docs: correct WebSocket origin validation coverage in CONCERNS.md by @detail-app[bot] in #1661
• docs: update WebSocket origin check and CLI structure docs by @detail-app[bot] in #1662
• Fix Codex tool call transcript rendering by @martin-purplefish in #1664
• Update changelog for latest changes by @martin-purplefish in #1665

Full Changelog: v0.3.19...v0.3.20