- decouple authentication endpoints from forwarding configuration - support multiple external Agent endpoints and NyaTerm stored keys - add shared fingerprint allowlist and AllowAll policies - add Agent broker with protocol limits, signing controls, timeouts, and key-change invalidation - migrate legacy Agent forwarding settings - update runtime IPC, import/snapshot handling, UI, i18n, documentation, tests