0.124.0

Added

• From @wirecat/cli-core 0.648.0 (was 0.633.0): images read <ref> has your coding agent read the text of one
  picture and keeps it for search; schedule agent starts gemini, cursor, opencode, openclaw, hermes, grok and kimi
  as well as claude and codex, and schedule agents list says which are on PATH; contacts unlink --from <person>.

Changed — may break callers

• Local only keeps every model call on this computer (cli-core 0.648.0). With the switch on
  (memo models local-only set on), tg's model calls, remote embeddings and OpenAI transcription refuse any address
  that is not this computer before anything is sent (local-only.refused).
• Plain http goes only to this computer, for every model call. Enrichment, search harder, linking, reply drafts,
  attachment OCR and remote embeddings refuse an http:// address on another machine (model.address-refused); use
  https, or run the model on this computer.
• Voice messages are heard by the downloaded model first. auto uses the local speech model when it is downloaded
  and asks Telegram only when it is not, and never under local only.
• Every agent schedule must be saved again (cli-core 0.648.0). A schedule saved before is refused with
  agent.refused and a hint to save it again; a codex schedule needs --allow-dangerous.
• stats tasks show has no --chat any more (cli-core 0.648.0): name the chat in the query,
  tg personal stats tasks show 'chat:"Project room"'.
• A mistyped profile is not_found with reason profile.unknown and the profiles on this computer, where it was
  "not signed in" (cli-core 0.648.0). tg serve under a service unit is not restarted after that exit (6), as after a
  missing login (4); a unit installed before keeps its old setting until server install runs again.
• store reset is no longer offered over MCP, and store restore and store recover run need mcp.authority
  (cli-core 0.648.0). doctor reports create --output refuses to overwrite a file.

Fixed

• The archive and search pages say that messages sync --all leaves out muted chats, and show --with-muted.

Security

• tg session end in a run with moved folders keeps the owner's login. With only TG_CONFIG_DIR or
  TG_CACHE_DIR moved, the state folder is still the owner's, and session end logged that login out on Telegram
  and deleted its file. It now answers ended: false with kept: "owners-sign-in" and changes nothing.
  account remove in such a run keeps the owner's session file and bots folder too. A moved run whose state folder
  is its own forgets its session file but never logs out on Telegram (logged_out: false): a file copied there
  would still be the owner's login.