v4.12.0

4.12.0 (2026-05-22)

Features

• cli: add sync freshness hints to generated CLIs (#1819) (5f6b1cf)
• cli: add sync-param-drop gate against browser-sniff capture (#1644) (c94e190)
• cli: add x-path-template-env-vars spec extension (#1401) (f83bd31)

Bug Fixes

• cli: accept root mcp in OpenAPI parser (#1777) (4cea5a1)
• cli: add OAuth scope coverage dogfood check (#1809) (ceafd83)
• cli: add verifier happy args annotations (#1841) (340d5a0)
• cli: allow dogfood error path opt-outs (#1839) (c3a3313)
• cli: credit cookie auth in scorecard (#1787) (b7481c0)
• cli: derive multispec resource names from titles (#1792) (428c720)
• cli: exclude hidden MCP endpoint mirrors from description gates (#1826) (c60982d)
• cli: honor HTML extraction in sync (#1793) (475a641)
• cli: improve generated parent command shorts (#1805) (231b957)
• cli: improve generated parent grouper shorts (#1794) (f0f928c)
• cli: merge compatible auth metadata across specs (#1811) (f183bd1)
• cli: normalize FastAPI operation ids (#1788) (a85a397)
• cli: preflight framework narrative flags (#1780) (0d03604)
• cli: preserve all-apiKey composed auth headers (#1828) (fa8e109)
• cli: preserve generated catalog display names (#1855) (a6d956e)
• cli: respect cobratree framework command depth (#1806) (c0e45d1)
• cli: retry busy dogfood command execs (#1785) (fa6d2bb)
• cli: scope framework collision renames (#1778) (16a01ca)
• cli: select OpenAPI auth by operation usage (#1816) (21dadbd)
• cli: serialize DELETE request bodies (#1842) (25c503b)
• cli: set generation category for non-catalog runs (#1817) (730cd53)
• cli: stub missing local schema refs in lenient mode (#1827) (2f96ee9)
• cli: support id-walk sync for capped POST queries (#1847) (95d28c1)
• cli: tighten scoreTypeFidelity flag-decl regex and drop MarkFlagRequired reward (#1795) (ef00173)
• cli: write mutation responses to local store (#1818) (8de833d)
• mcp: correct code-orchestration write-body shapes (double-marshal, query/body split, bare-array) (#1662) (2bbccd6)