Release v3.12.2

What's Changed

• Don't create clients for members and guests by @ignaciojimenezr in #5588
• Document admin-only client creation restriction by @mintlify[bot] in #5591
• Harden hosted diagnostics (MJ-001) by @chelojimenez in #5571
• Harden response headers (MJ-016) by @chelojimenez in #5567
• Harden sandbox proxy (MJ-014) by @chelojimenez in #5565
• Harden request metering (MJ-012) by @chelojimenez in #5572
• Harden telemetry (MJ-015) by @chelojimenez in #5581
• Harden tool approval (MJ-008) by @chelojimenez in #5574
• Harden organization API keys (MJ-010) by @chelojimenez in #5573
• Harden project fields (MJ-013) by @chelojimenez in #5566
• Harden conversation history (MJ-009) by @chelojimenez in #5583
• Harden error responses (MJ-020, MJ-021) by @chelojimenez in #5577
• Reap Railway preview environments whose PR is closed by @chelojimenez in #5592
• Harden artifact delivery (MJ-005) by @chelojimenez in #5568
• Harden session revocation (MJ-011) by @chelojimenez in #5570
• Harden uploads (MJ-006) by @chelojimenez in #5578
• Harden hosted diagnostic logs (MJ-001) by @chelojimenez in #5595
• Offer sign-in where the backend refuses a guest, instead of hiding the surface by @chelojimenez in #5235
• Document sign-in requirement for eval run insights by @mintlify[bot] in #5603
• models: P1-2 add ModelSelection beside HostConfigV2.modelId by @chelojimenez in #5563
• models: P1-5 runner and pickers write/read model selections by @chelojimenez in #5564
• models: P2-2 show execution provenance by @chelojimenez in #5575
• models: P3-2 client uses catalog observations by @chelojimenez in #5576
• models: P3-3 one picker for judges and environment models by @chelojimenez in #5580
• models: P3-5 catalog maintenance without manual churn by @chelojimenez in #5582
• models: P0-4 hosted dotted default and example model ids by @chelojimenez in #5560
• models: P0-6 explain provider_not_allowlisted without an API-key remedy by @chelojimenez in #5561
• models: P0-1 version-keyed harness model support, no emulated swap by @chelojimenez in #5559
• models: P3-4 BYOK discovery through provider adapters by @chelojimenez in #5579
• Saved credentials: backend-decided, held to their origin on the wire by @chelojimenez in #5554
• Update credential error docs for new messages by @mintlify[bot] in #5615
• Forward the caller's hashed IP on share-link redeem by @chelojimenez in #5616
• Offer sign-in on the server-quality card when a guest is refused by @chelojimenez in #5617
• Ask MCPJam on MCPJam's dime: send the attested claim and pin the model (I1) by @chelojimenez in #5287
• Harden chat-history error tests (MJ-020) by @chelojimenez in #5604
• Preserve workload admission for local organization model turns by @chelojimenez in #5621
• Read every page of the WorkOS preview lists before calling them clean by @chelojimenez in #5619
• Add a *.mcpjam.dev router for PR previews that verifies its upstream by @chelojimenez in #5622
• Exempt registerPreviewIdentityRoute from entry-point parity (fixes red main) by @SebasKoria in #5624
• Eval suites run only from environments (inspector) by @chelojimenez in #5569
• Retry desktop update downloads without trapping users by @ignaciojimenezr in #5596
• OAuth debugger: don't report a server's bad probe reply as our error by @ignaciojimenezr in #5613
• Feat/server check queue by @ignaciojimenezr in #5597
• Let extra prompts be removed from an eval case by @chelojimenez in #5627
• Complete local chat admission and refresh admitted eval models by @chelojimenez in #5623
• Swarms: say when a session never ran, and why by @SebasKoria in #5600
• Changelog: swarm sessions that never ran by @mintlify[bot] in #5630
• Grey out pricey models for guests only by @ignaciojimenezr in #5618
• Docs: guest-only model gating + new tooltip text by @mintlify[bot] in #5631
• Stop the eval run when its suite or run is deleted, in production too by @ignaciojimenezr in #5633

Full Changelog: v3.12.1...v3.12.2