v0.12.0

• Discover the standard local host for every command that needs one rather than only for fetch --takeover: with no --endpoint-url the local host container is inspected read-only, its token read from its own data volume, and /health verified before anything is sent
• Never start or recreate a container while discovering, keep inline the default so a plain fetch needs no host at all, never second-guess an explicit --endpoint-url, and let fetch --profile discover instead of erroring when no endpoint is given
• Let --token-secret name where a token lives rather than only carry it: env:NAME, file:PATH#DOT_PATH, container:NAME and literal:TOKEN, with container:NAME covering the host token in a named volume that no path on the machine can address
• Classify token sources while argv is projected and read them only at connect time, so a rejected invocation never opens a file or spawns a container runtime and no error can echo what it read
• Adopt the shared value-source grammar in place of a private copy, so an unaccepted source is refused as cli_invalid_argument_value at exit 2 while argv resolves, --token-secret prompt answers with what it does accept, and the syntax is rendered from the declaration instead of repeated across every reference row
• Carry a resolved token as a secret-typed value end to end, exposing the bytes only where they are needed and rendering every other debug output as redacted
• Require afhttp host to name the source of the token it demands from callers, with no environment fallback, so a server never inherits what it accepts from an ambient variable
• Replace the private takeover handoff store with an Agent-First UI access token, gaining constant-time comparison and a revoke path the crate never had, and cleanup that no longer runs only when a credential is minted
• Add afhttp ui takeover, which opens the takeover panel in an Agent-First UI window so the window closing is the signal that the person finished instead of the agent guessing
• Emit a runnable client command from container install and status and from the entrypoint banner, instead of an AFHTTP_TOKEN_SECRET= template to paste