Fresh-install fixes: the dashboard home view no longer returns an error after first sign-in on a clean database, and the seeded evaluation accounts (admin / agent1) work immediately after running the install SQL.
Licensing refresh: current license files are issued in the new format, compatible signed legacy licenses are still accepted, the localhost trial license ships in the package, and license host checks validate against the real request host.
Reliability: session creation is serialized to prevent duplicate rows during fast visitor and agent reconnects, webhook delivery is bounded so slow receivers cannot stall the outbox, and abrupt agent disconnects are treated as real offline events for presence and notifications.
Security and privacy: live-message HTML is sanitized so only same-server attachment links render, secret-bearing webhook URLs are redacted in admin and audit responses, visitor page URLs and referrers are sanitized before storage, and privileged admin actions are covered by the audit log.
Performance: reduced tracking overhead on read-heavy dashboard queries, bounded background queues during end-session bursts, and long transcripts stay focused on the most recent messages in chronological order.