- Emit socket disconnect events so clients can detect drops
- Add listConversations API to prevent subscriber JWT scraping
- Fix several issues: sourceMessageId propagation, AgentCardPart typing, MCP card merging behavior, and run error delivery to web‑chat subscribers