v0.12.1

What's Changed

• fix(acp): deduplicate tool definitions and flush after native tool loop by @bug-ops in #827
• fix(acp): flush on error and filter whitespace text blocks in Claude API by @bug-ops in #828
• improve(tools,skills): preserve hunk headers in git_diff, restructure github skill by @bug-ops in #829
• reduce release binary size by 58% by @bug-ops in #852
• security(vault): zeroize secret material on drop by @bug-ops in #898
• optimize build speed: sccache, CI profile, schemars feature gate by @bug-ops in #899
• refactor(core): extract ContextManager, ToolOrchestrator, LearningEngine from Agent by @bug-ops in #900
• refactor(deps): dependency hygiene for workspace by @bug-ops in #901
• security: input validation hardening (#854) by @bug-ops in #903
• security(a2a,gateway): warn when bearer auth is disabled by @bug-ops in #904
• ci: run build-tests in parallel with lint jobs by @bug-ops in #905
• refactor(type-safety): replace stringly-typed fields with enums, audit dead code by @bug-ops in #902
• refactor(binary): split main.rs and bootstrap.rs into focused modules by @bug-ops in #906
• security(tools): harden shell sandbox against process substitution and here-string bypass by @bug-ops in #907
• security(tools): SSRF redirect chain defense (#857) by @bug-ops in #908
• perf(zeph-llm): cache serialized ToolDefinitions in ClaudeProvider by @bug-ops in #910
• security(core,llm): enforce unsafe_code deny and deterministic vault serialization by @bug-ops in #909
• perf(memory): covering index on messages and load_history_filtered CTE refactor by @bug-ops in #911
• perf(core): hot-path CPU reduction in agent loop by @bug-ops in #912
• replace default model mistral:7b with qwen3:8b by @bug-ops in #915
• perf(core,memory): reduce heap allocations in message processing by @bug-ops in #913
• perf(core,memory,tui): eliminate blocking I/O in async hot paths by @bug-ops in #914
• release: v0.12.1 by @bug-ops in #916

Full Changelog: v0.12.0...v0.12.1