v0.1.2

Changelog

• bf5190c ci: gate on govulncheck (its own job + make vuln target); safe on go1.26 unlike golangci-lint
• 02b7e73 chore(gitignore): ignore the private security-sweep note
• c6bf058 serve: surface the non-loopback exposure warning to the operator's terminal, not just the daemon log
• 3fa7c23 chore(gitignore): guard mcpvessel local state files against an accidental VESSEL_HOME=. commit
• 5710ae5 cli: introspection stderr presents as [introspect], and logs says so when a run recorded no output
• 70809fa cli: input-flag parity for call and replay record, per-instance --budget for serve, JSON tool results pass through REST/SSE as real JSON, and store prune for untagged bundles
• 1560527 cli: name the image in the per-agent build label
• 3284983 cli: unknown subcommands of group commands error with exit 1 instead of printing help with exit 0
• 6971895 cli: attribute caged-server stderr with a [name] prefix, label the two BuildKit streams, prompt and hint only at a terminal
• 3d05899 cli: errors name the remedy (no internal daemon paths, daemon hints only when unreachable, expired-login and duplicate-version messages say what to do)
• e437e04 test: track the new stop and daemon-stop confirmation wording
• 591190c cli: one confirmation voice (past-tense verb first, name what changed) across config, login, stop, daemon, and secrets
• e70eaca cli: one table and empty-state vocabulary (internal/cliout) for every list command, and a ps that puts live runs first over the last 10 finished with -a for full history
• 76e8c3b docs(security): advertise the rotated signing key dbb184de32d2 and the trust rm recovery for the old pin
• 5633210 fix: egress-proxy boot crash on hostless sub-agents, run-id visibility, live spend/budget for serve instances, pull registry-name resolution, phantom secret-scope warning, stats empty state
• d62cd52 chore: remove accidentally committed import outputs (github-mcp-server, mcp-server-fetch)
• dc4f71b security: close deferred residuals (root secret off argv, signature tag-binding, SSE write deadline, per-agent egress scoping, scope-keyed verified marker, configurable body caps)
• 17d8f32 docs: add the demo (notes-server fixture + GIF) and fix the eval --secret example to use a tool credential, not a provider key