release: v0.15.0

[yetone]

Cuts v0.15.0. Sixteen contributor PRs landed today, the first release since v0.14.2.

Correctness / data integrity

• fix(realtime): a body cut mid-emoji must not roll back the message #185 — a message body cut mid-emoji produced a lone surrogate that Postgres rejected as invalid JSON, rolling back the entire message transaction. The realtime outbox now strips lone surrogates on serialize.
• fix(seed): a fresh install must survive its own first boot #184 — a fresh install crash-looped on first boot: seed.ts inserted conversations without the company_id that migration 0002 made NOT NULL.
• fix(runtime): record company_id on FUSE workspace and CLI agent state #207 — the FUSE workspace endpoints and the CLI's agent_log / agent_tasks / agent_climate writes recorded a NULL tenant, so agent state escaped company scoping.
• fix(agents): a model-supplied id must not be a LIKE wildcard #196 — an agent-supplied memory/skill id went into a LIKE pattern unescaped, so _ and % matched anything; memory list also truncated ids to 10 chars while they are 16 wide, so list → pin/delete could never round-trip.
• fix(push): an agent's reply must reach the phone too #199 — an agent's reply never fired a push, so a phone stayed silent for exactly the messages you'd most want to hear about.

Calendar

• fix(calendar): fast-forward stale recurring events in a single step #208 — a recurring event more than MAX_CATCHUP_MS behind is now fast-forwarded to the next real occurrence in one step instead of firing its way through every missed slot.
• fix(calendar): eliminate monthly and leap-year recurrence drift in frontend views #183 — the desktop and mobile views had their own recurrence stepper that drifted on month-ends and leap years; both now share the server's indexed math (fixes fix(calendar): recurrence drift on month-end and leap years in desktop/mobile calendar views #182).

BYOA

• fix(byoa): Anthropic's own base URL is not a custom provider #194 — Anthropic's own base URL was being classified as a custom provider, suppressing the fast-model path.
• fix(byoa): --stop must not kill a running --doctor #203 — agent computer --stop killed a running --doctor; the one-shot flag list is now the single source of truth.
• test(byoa): the Claude settings tests must not read the developer's shell #193 — the Claude settings tests read the developer's own shell environment.

Desktop / UI

• fix(electron): the tray unread dot never updates on Windows or Linux #195 — the tray unread dot never updated on Windows or Linux (the call sat after a darwin-only early return).
• fix(electron): the window must reopen at the size it was left #204 — the window no longer reopens at the wrong size, and restores on the display it was left on.
• fix(electron): the loopback must not report a sign-in it dropped #205 — the loopback reported success for a sign-in it had actually dropped.
• fix(ui): an expired mute must stop hiding unread, on every counter #202 — an expired mute kept hiding unread counts.
• fix(ui): a roster event from another workspace must not join this one #197 — a roster event from another workspace could join the active one.
• fix(markdown): repair CJK link boundaries #188 — CJK punctuation adjacent to a URL was swallowed into the link.

Verified on merged main before tagging: lint, typecheck, server:typecheck, all three guards (big-brain, llm-tracked, engine-registry), and 1179/1179 unit tests.

https://claude.ai/code/session_0126NkM9crkemuV6Ho4LWv59