Ship isolated Linux and Windows hosts with transcript recall

[gitcommit90]

Summary

1Helm 0.0.6 makes the product's runtime match its core resident-agent contract:

• every ordinary Linux channel owns a persistent unprivileged LXC computer;
• the accepted Windows implementation owns a private WSL 2 distribution per channel, with public artifacts withheld until Authenticode signing is available;
• residents can search their own raw prior-session transcripts semantically, by exact text/date, or recency, then hydrate a complete session on demand;
• agents receive concise factual capability awareness rather than behavioral manifestos;
• the Feedback control is durable, attachment-capable, privacy-bounded, and visible in the Captain inbox;
• new and assigned skills update open Arsenal/Channel Settings views without a reload;
• SkillsMD discovery exposes the open registry without browse-time filtering or a hidden result cap;
• host updates, terminal keepalive/reconnection, and Linux host-contract migration are covered end to end.

Server/tool boundaries enforce channel ownership, guest isolation, credential scope, install-time skill integrity, VM lifecycle safety, and exact destructive targets.

Type of change

• Fix
• Feature
• Docs / governance
• Refactor (no intended behavior change)
• Chore / CI
• Deploy / release tooling

Release notes

See the complete 0.0.6 entry in CHANGELOG.md.

Verification

• npm run typecheck
• npm run build
• npm test — 115/115 native-world assertions; 64 passed, 1 browser transport test explicitly skipped without local Chrome
• npm run test:onboarding-browser — 20/20
• npm run test:brief-browser — 29/29
• disposable production-data browser contract — 18/18
• cold-start health probe on a source/data root with no Mnemosyne runtime — ready in about one second
• real Linux LXC lifecycle/migration acceptance on the retained host
• real Windows WSL 2 lifecycle/isolation acceptance
• git diff --check
• no secrets, private keys, or data dumps
• local/installer impact considered

The first CI attempt exposed a real cold-host startup issue: optional Mnemosyne dependency installation blocked the HTTP event loop. Commits 687322d and d1e4c0f make runtime preparation asynchronous, cancel it cleanly during shutdown, and give cold CI one explicit pinned disposable Mnemosyne runtime instead of racing per-process installers.

Post-merge

• required CI green on exact head
• merge commit deployed to demo and standalone site
• exact merged Linux and signed/notarized/stapled macOS artifacts published and independently verified