Terminals the agent gets right, and work that survives a restart

Fixed

• Wrong or lost terminals. A program’s own replies (cursor reports, focus events) no longer count as you taking a terminal back, so the agent is not paused for nothing. Opening a terminal tab never replaces a running shell, terminal numbers stay unique across restarts, and the agent works from a live list of your terminals: which one you focused last, what is running in each and who has it.
• Terminals failing to open. Opening several terminals at once could fail on macOS. They now open one at a time.
• Worktree work lost on relaunch. Restarting removed Worktree lanes whose edits had not been applied yet. They now come back for review.
• Patches and SSH drops. Accepting a patch while an SSH host was unreachable could write to the same path on your Mac, and a patch that failed could disappear. An unreachable host now stops the write with an error, and a failed patch goes back on the shelf.
• Queued follow-ups. Messages you queued are kept across a restart and wait for you instead of sending themselves.
• Early sends. Switching chats while a message was being prepared could drop it, and Stop did nothing in that moment. The message now goes to its own chat and Stop works.
• MCP servers loaded uninvited. Saying “I’m signed in” loaded every connected MCP server. Servers now load only when the conversation names them.
• Checks rerun on wording. A failed check could rerun without an edit just because its command mentioned something like docker or wait. It now reruns only when it was cut short or something else ran since.
• Security updates. Updated dependencies with published advisories, including the zip extractor, the HTML sanitizer used for diagrams, and Tauri 2.12 with its updater plugin, which now verifies an update’s bytes before installing it.