- Added `ROBOMP_TASK_TIMEOUT_HARD_GRACE_SECONDS` and `Settings.task_timeout_hard_grace_seconds` with a 60s default.
- Updated triage/replay to await terminal completion, default `--wait-timeout` from timeout+grace, and return timed_out JSON.
- Added hard-timeout worker handling with per-slot TMPDIRs and RPC stop on expiry to avoid stuck runs.
- Added SlotPool `slot_uids` exposure and queue/sandbox cleanup to reap configured or stale slot processes before release.
- Added tests for new timeout parsing, manual triage waits, queue slot reaping, sandbox process cleanup, and worker hard-timeout behavior.
- Added SlotPool initialization to queue test helpers to align WorkerPool fixtures with slot-aware execution.
- Updated cancellation and shutdown queue tests with slot_uid-aware _dispatch stubs.
- Added sandbox tests covering _chown_workspace root/non-root and Linux/non-Linux behavior.
- Added ensure_workspace test coverage that it forwards slot_uid into _chown_workspace calls.
- Expanded _run_rpc_blocking tests to verify HOME/token env handling and slot_uid user/group mapping.
- Added cancellation context helpers and hooks to track current events and safely arm/disarm handlers.
- Added cancel hooks and pre-cancel semantics in `WorkerPool` to execute cancel actions and mark canceled runs failed.
- Added dashboard cancel controls and `/api/cancel` endpoint with token validation and failure handling for bad deliveries.
- Updated gh_open_pr guidance and implementation to run `bun run fix`, commit style diffs, then `bun check`, and retry as needed.
- Added tests for gh_open_pr fix/check behavior and queue cancel edge cases, including pre-arm and unknown-delivery cases.
can1357