v3.3.0 Release

Features

• Chat system revamp — tool call cards (collapsible), session list, model switcher, banner suppression (-Q flag)
• RBAC v2 — 28 permissions across 12 groups (admin/viewer/custom roles)

Security

• XSS fix in home cards (escapeHtml)
• Admin gate on plugins API
• Terminal exec rate limiter (30/min per IP)
• Token cleanup interval (setInterval)

Fixes

• Notification dismiss endpoint
• Sidebar responsive CSS
• Session ID regex (new + old format support)
• Favicon 404 loop (moved to public/)
• Skills uninstall/check updates

Docs

• Security audit report (12 categories, 7.0/10 score)
• Screenshots (dark + light themes)