- Stabilize Secure Link relay transport under sustained load with orphan-tunnel cleanup, directional half-close handling, bounded session admission, and versioned policy projection - Prevent health-check storms by reserving daemon capacity and treating busy probes as indeterminate - Harden Docker update, recreate, environment, metadata, migration, and replacement-identity workflows with rollback-aware task tracking - Preserve container lifecycle compatibility with Docker daemons that predate task-status polling - Return the complete scoped MCP tool registry in extended compatibility mode - Consolidate AI Workspace and Gateway Inference access under feat:ai:use and migrate existing grants - Recover interrupted Plan Mode drafting, validation, execution, and verification runs - Preserve AI Workspace navigation, user preferences, chat tool-group state, and OAuth consent routing - Add a collision-safe built-in guest group with authenticated account-only access - Align HTTP traffic counters with the chart window and improve Nginx worker and uptime metrics - Improve Docker-backed proxy-template updates and remove the deprecated external-branding visibility flag