gstack 1.68.0.0

/scrape and /skillify now carry the untrusted-content processing rules. $B cdp allows Emulation.setCPUThrottlingRate and Network.emulateNetworkConditions for perf measurement. Transcript ingest honors the per-remote trust store: deny and read-only remotes are skipped with per-tier counts. The gbrain source worktree advances on the daily sync. gstack-gbrain-repo-policy get --batch for one spawn classifying every remote. gstack-config get now exits 1 with empty output. The brain-sync queue is a maildir-style spool: writer and drainer never share an inode. --probe in memory-ingest counts through the same attribution and policy gates as --bulk. /gstack-upgrade fast-forwards with autostash first; the destructive fallback runs only on a provably-clean tree. Skill completion always reviews the session for durable learnings. /codex documents the measured session-overhead reality. MCP scope resolution is project-first everywhere. plan-tune refuses never-ask on one-way question ids at write time. A typo'd gstack-redact subcommand exits 1 with usage instead of silently scanning stdin. One ambiguous ref no longer kills the whole annotated screenshot. gstack-version-bump repair refuses to write a fabricated 0.0.0.0 into package.json. The session-update lock records the live holder, heartbeats during long pulls, expires on a hard TTL. gstack-slug resolves the canonical owner-repo slug even when a stray marker directory sits above the repo. /review checklist paths resolve from the installed skill root. Windows: every Bun.spawn in browse carries windowsHide. Project-scoped brains resolve on backslash paths.