v0.12.2-rc.2

What's Changed

• fix(signing): sign each part of a split request from its own input (0.12.1 backport of #34247) by @bolichen97 in #34249
• fix(desktop): ship macOS bytecode caches for the startup set only (0.12.1 backport of #34252) by @bolichen97 in #34254
• fix: v0.12.2 hotfix batch 1 (82 fixes from main) by @bolichen97 in #34375
• fix: v0.12.2 hotfix batch 2 (65 fixes from main plus release tooling) by @bolichen97 in #34586
• fix: v0.12.2 hotfix batch 3 (8 security and data-loss fixes) by @bolichen97 in #34737
• fix: v0.12.2 hotfix batch 4 (four more of our fixes, adapted to release) by @bolichen97 in #34746
• fix(kas): backport #31892 #33045 #33478 to 0.12 (allowedCommands regex, read allowedPaths) by @buluoray in #34820
• fix: 0.12.2 batch 5 (7 fixes from main) by @bolichen97 in #34923
• fix(kas): withhold a model pin the session's model select does not list [0.12.1 backport of #34090] by @buluoray in #34300
• fix(security): let Outlook's own webLink through the link guard (0.12.2 backport of #34034) by @buluoray in #34567
• fix(acp): share a KAS MCP server's launch reference (backport #34542) by @buluoray in #34610
• fix(security): judge a shell call's recovered command under policy commands (backport #34862) by @buluoray in #35059
• fix(agents): refuse a model pin the KAS model select does not list (backport #34062) by @buluoray in #35050
• fix: linked slack thread runtime and challenge prompt echo (backport #34832, #34905) by @buluoray in #35078
• fix(cron): stop promising a next run to a paused job's cut run (0.12.0 backport) by @buluoray in #35109
• fix(chat): stop mermaid label images loading on render (backport #30925) by @buluoray in #35138
• fix(kas): keep shell allowlist grants when a policy pins built-in rules (0.12.x) by @buluoray in #35154
• fix: mark ssh tunnel as unsupported on a windows gateway (backport #30777) by @buluoray in #35162
• fix(chat): keep the reply that streamed before a harness compaction (backport #34072) by @buluoray in #35171
• fix(acp): let a project agent file switch a user-level MCP server off on KAS (backport #34061) by @buluoray in #35181
• fix(kas): backport #35244 #35262 #35272 #35278 to 0.12 by @buluoray in #35389
• fix(acp): say 'update Kiro CLI' once when it rejects --auth-method (backport #30587) by @buluoray in #35304
• fix(desktop): kill a hung renderer by pid when running under rosetta by @buluoray in #35419
• fix: 0.12.x backport batch 3 (account popup sign-in, linked image, folder agent) by @buluoray in #35470
• fix: 0.12.x backport batch 4 (kas sign-in error text) by @buluoray in #35490
• fix: 0.12.2 batch 6 (update fix, SageMaker option) and the 0.12.2 version by @bolichen97 in #35596
• fix: four 0.12.2-rc.1 release-line reds by @bolichen97 in #35623

Full Changelog: v0.12.1...v0.12.2-rc.2