- Deployment: reject `..` and `/` in remote names and sync paths, keep
excluded paths root-relative, never delete a mapping's remote root,
apply excludes to Sync steps
- SSH: connect per configuration so an unreachable host doesn't block
others; `--` before the host in ssh arguments; read timeout on askpass
- Run targets: export the environment for shell command lines; map the
project folder only as a whole path
- Remote development: use the server's resolved project root; give
streaming channels connection-wide ids; per-install `.part` files;
probe output between markers; require the server's SHA-256; unique
download staging folders; stop runs, terminals and language servers
when the server exits
- JSON-RPC: deliver a response after the notifications sent before it
- Release: build the aarch64 musl server with musl-gcc