Secret Scan / scan (push) Successful in 13s
Build App (Preview) / compute-version (pull_request) Successful in 12s
Build App (Preview) / create-release (pull_request) Successful in 13s
Secret Scan / scan (pull_request) Successful in 12s
Build App (Preview) / build-macos (pull_request) Successful in 3m40s
Build App (Preview) / test (pull_request) Successful in 5m39s
Build App (Preview) / build-linux (pull_request) Successful in 6m1s
Build App (Preview) / build-windows (pull_request) Successful in 18m30s
Build App (Preview) / prune-previews (pull_request) Successful in 11s
- ExecSessionManager::get_target replaces get_container_id, so image paste, file drop and the audio bridge reuse the session's own target instead of rebuilding a Docker one; the web terminal builds its target per project. - Drop the error-prefix rewriting helper: download/backup/run-now errors now carry the host layer's own message after their prefix. - Remove the now-unused create_attached_exec and MAX_ONESHOT_OUTPUT re-export. - The boundary test's allowlist is down to migration (Docker-only) and container_watch (phase 1b). CLAUDE.md documents the host layer. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>