Release 1.12.10
Summary
- Escaped OAuth callback response HTML and added callback regression coverage.
- Redacted sensitive prompt/provider/log payloads and bounded note-content prompt injection surfaces.
- Preserved mobile manifest support while gating Node-only streaming paths to desktop runtime.