v0.12.0

• Fail a refused SSH setting instead of falling back to a direct local connection
• Validate every SSH positional and reject options the SSH bridge cannot honor
• Limit explicit SSH options to an allowlist and custom container runtimes to locked profiles
• Keep a failed or lost transaction blocking the session until rollback
• Drain streamed one-shot output while the query runs
• Reject work on a full session queue instead of blocking stdin
• Bound shutdown with one five-second deadline
• Send a cancel once, and release a driver whose server stops answering
• Never suggest rerunning a write to recover truncated RETURNING output
• Upgrade to Agent-First UI 0.6.1 and Agent-First Data 0.35.0