v0.12.1

What's Changed

• Pin instructions where the model actually reads them by @teamchong in #155
• fix(openai-history): keepTail:0 in mixed Responses collapse protected every message by @dex0shubham in #154
• feat(warp): run agents through a CONNECT proxy instead of ANTHROPIC_BASE_URL by @teamchong in #156
• Remove claude-opus-5 from pxpipe default model list by @teamchong in #163
• Fix polynomial ReDoS in request-text parsing, tighten token file mode by @teamchong in #176
• warp: match routes on host:port, add --route by @teamchong in #175
• fix(openai-history): stop refusals and empty messages from forcing page breaks by @teamchong in #178
• Strip the billing header wherever it appears, not just line 1 by @teamchong in #180
• security: add disclosure policy, threat model, and CI audit gate by @mkhalid-s in #164
• fix(cache): keep the per-turn billing line out of the cached prefix (+3 attribution fixes) by @qbq-leo-martens in #161
• build(ci): pin trusted supply-chain inputs by @mkhalid-s in #169
• fix(transform): collapse history before imaging tool results by @rldyourmnd in #198
• fix(transform): classify total_tokens as a dynamic block by @rldyourmnd in #202
• fix(proxy): bound inbound request bodies before allocating by @rldyourmnd in #199
• fix(proxy): decide OpenAI-route credentials by an explicit policy by @rldyourmnd in #200
• docs: state the model default the runtime actually applies by @rldyourmnd in #203
• fix(restart): only stop the proxy serving this checkout's port by @rldyourmnd in #205
• fix(transform): budget decoded image bytes, not just image count by @rldyourmnd in #201

New Contributors

• @qbq-leo-martens made their first contribution in #161

Full Changelog: v0.11.1...v0.12.1