### Security And Audit Hardening - Fixed Docker webhook env corruption prevention: inspect Config.Env arrays are converted safely and cannot become numeric env keys. - Hardened Docker registry credential resolution and private registry behavior. - Tightened database credential/update handling. - Hardened sandbox runner artifact path and network policy checks. - Redacted one-time secret-returning AI tool results from persistence/model copies. - Clarified docker:containers:config as read-only config visibility, no raw config edit scope. - Preserved MCP infinite-token design while keeping expiring refresh-token OAuth behavior separate. ### AI Assistant - Added backend AI runtime, persisted conversations, folders/projects, deterministic retrieval, live draft/runtime state, approvals, queued tool flow, and provider adapter. - Added lite-mode assistant experience, runtime indicators, sidebar state, background run handling, and restored-message ordering fixes. - Expanded AI tool coverage across Docker, databases, proxy, domains, logging, PKI, settings, notifications, folders, and system operations. - Added sandbox runner settings, artifacts, policies, console command tools, and safer tool filtering/discovery. - Fixed chat retrieval/indexing failures, hidden tool discovery, question option preservation, runtime merge/stream sync, and REST refetch storms. ### Resource And UI - Added shared foldered resource infrastructure for Docker, nodes, databases, domains, logging, admin groups/users, and related lists. - Standardized resource list/table/panel primitives and moved many pages to shared UI surfaces. - Added Docker volume detail page and improved Docker file operations. - Improved node/nginx logs, proxy detail, dashboard cards, settings sections, status page settings, and lite-mode page headers. - Removed duplicate inline add buttons from Docker env/secrets rows; header add remains. ### Backend And Data - Added migrations through 0047, covering AI conversations/runtime/search, sandbox jobs, folders, OAuth token expiry shape, node appearance, logging/domain/admin folders, and runtime fixes. - Split and expanded API services/types across frontend modules. - Improved app body limits, audit context redaction, feature flags, system settings, housekeeping, and event streaming. - Added/updated extensive tests for AI runtime, API clients, Docker, OAuth, sandbox, notifications, logging, status pages, databases, and resource folders. ### Daemons And Deployment - Updated Docker daemon file operations and client behavior. - Updated nginx daemon log tailing and generated proto bindings. - Added shared lifecycle node file helpers. - Adjusted Dockerfiles/install scripts and backend dockerignore. - Included monitoring daemon binary artifact.