docs: refresh transcript sanitization mirrors

docs/platforms/android.md

@@ -138,8 +138,10 @@ Pairing details: [Pairing](/channels/pairing).
 The Android Chat tab supports session selection (default `main`, plus other existing sessions):
 
 - History: `chat.history` (display-normalized; inline directive tags are
-  stripped from visible text, pure `NO_REPLY` assistant rows are omitted, and
-  oversized rows can be replaced with placeholders)
+  stripped from visible text, plain-text tool-call XML payloads and leaked
+  ASCII/full-width model control tokens are stripped, pure `NO_REPLY`
+  assistant rows are omitted, and oversized rows can be replaced with
+  placeholders)
 - Send: `chat.send`
 - Push updates (best-effort): `chat.subscribe` → `event:"chat"`
 

docs/platforms/mac/webchat.md

@@ -31,8 +31,10 @@ agent (with a session switcher for other sessions).
 - Data plane: Gateway WS methods `chat.history`, `chat.send`, `chat.abort`,
   `chat.inject` and events `chat`, `agent`, `presence`, `tick`, `health`.
 - `chat.history` returns display-normalized transcript rows: inline directive
-  tags are stripped from visible text, pure `NO_REPLY` assistant rows are
-  omitted, and oversized rows can be replaced with placeholders.
+  tags are stripped from visible text, plain-text tool-call XML payloads and
+  leaked ASCII/full-width model control tokens are stripped, pure `NO_REPLY`
+  assistant rows are omitted, and oversized rows can be replaced with
+  placeholders.
 - Session: defaults to the primary session (`main`, or `global` when scope is
   global). The UI can switch between sessions.
 - Onboarding uses a dedicated session to keep first‑run setup separate.