chore(main): release 0.12.0

[github-actions]

🤖 I have created a release beep boop

0.12.0 (2026-07-02)

Features

• config: vf config memory accepts builtin|claude-mem|off (#505) (41aad5e), closes #490
• gates: ADR-004 machine-verifiable evidence standard (phase 1: warn) (#469) (b8f3653)
• gates: ADR-004 phase 2 — unverifiable-evidence is now a gate failure (#474) (74bf0f6)
• init: add engine to logic gen tool + change question get hooks (#428) (d8cf278)
• init: add skip option to hooks setup menu (#402) (72b562a)
• init: usage guide (#387) (d25789b)
• issue-438: add Dart/Flutter language detection to scanner (#444) (d2f7439), closes #438
• issue-440: add Flutter toolchain detection to vf verify (#446) (d35dc41)
• issue-441: seed knowledge/log.md during vf init (#447) (e258b41), closes #441
• memory: bun:sqlite FTS5 index layer — zero dep BM25 recall (#494) (14f5091)
• memory: inject recall block into dispatch prompt (Skills→memory→Constraints) (#501) (200bd01), closes #487
• memory: MemoryProvider seam types (MemoryHit, MemoryTier, MemoryProvider) (#493) (54c347e), closes #481
• memory: parse decisions.md into indexable entries (#496) (a32d15a)
• memory: provider factory + prompt block renderer (#500) (e2e06d2)
• memory: wire recall into makeDispatcher + vf plan; fix bun:sqlite bundle leak (#506) (99c10f4), closes #488 #489
• orchestrate: ADR-001 reviewer context isolation — buildReviewerPrompt (#471) (5c44e8a)
• orchestrate: ADR-002 spec-first test generation stub + hook protection (#473) (403b90f)
• settings: memory mode union (false|builtin|claude-mem), legacy true→builtin (#492) (651da09), closes #480
• skills: add vf skills verify to promote local skills to verified (closes #424) (#433) (49cdbb0)
• skills: surface unverified local matches as available instead of missing (closes #425) (#435) (c272ced)
• ui: done toast notification + log session dividers (#460) (#466) (58bcc91)
• ui: engine radio + recommendation badge + capability hints (#458) (#465) (eeadd14)
• ui: explain disabled Plan/Save + gate failure fix commands (#457 #461) (#464) (60b7430)
• ui: hook approval modal + auto-pilot/yolo modes (#462) (#468) (792960a)
• ui: project list status badges + always-visible action buttons (#459) (#463) (9adb25f)
• verify: ADR-003 behavioral goal-eval gate stub (#ADR-003) (#470) (236090c)

Bug Fixes

• address reviewer backlog from PRs #443–#454 (#456) (8f21592)
• build: mark bun:sqlite external to fix Node smoke test; update size-waiver to #503 (#502) (f5fc538)
• cli,skills: route state+coord commands, fix skills sync trailing arrow (#420) (9b9ee03)
• config,help: distinct feedback for memory toggle, add demo command help (#423) (946e0d1)
• doctor,hooks: add missing { level: error } to failure summary lines (#431) (6c0f5be)
• doctor,tools: replace embedded \n with separate out("vf") blank-line calls (#410) (e1cdc94)
• help: add missing pr and decision commands to vf --help (#419) (cb034ea)
• help: add state and coord commands to vf --help (#422) (bf7bca2)
• help: align command description column in vf --help (#434) (a00616b)
• hooks,help: show guardrail status after install, fix init alignment (#426) (4304703)
• hooks,init: blank line in hooks status, remove ➥ spinner prefix (#416) (07a5d50)
• init-ai: replace embedded \n with separate out("vf") blank-line calls (#413) (b6db330)
• init,doctor: level consistency, missing blank line, leftover embedded \n (#414) (35d888a)
• init,tools: replace embedded \n with separate out("vf") blank-line calls (#409) (f1743b8)
• init: fix 3 terminal UX concerns observed in vf init (#404) (cf436dd)
• init: normalize output formatting — panels and blank lines (#407) (04041d8)
• init: remove blank line noise and duplicate Copilot instructions (#405) (4817f8b)
• init: remove index-present noise, normalize Copilot blank line (#408) (3208c92)
• init: repair main CI red from #428 (test label + hook-branch coverage) (#430) (c6bf013)
• issue-437: npm wrapper unquoted Windows path in global install (#443) (c1f475f)
• issue-439: quote engine probe path with spaces on Windows (#445) (f1ec376), closes #439
• issue-448: reject control characters in unit names (#449) (e1f0bd3), closes #448
• issue-451: reject path separators in unit names (#453) (f22762c), closes #451
• memory: wrap full ensureIndexed in try/catch; add throw-coverage test; remove builtin.ts waiver (#495) (#498) (14d7d94)
• orchestrate,run,hooks,tools-detect: replace embedded \n with separate out("vf") calls (#412) (e7a4bd6)
• run,protection,init-artifacts: \n cleanup, missing level annotations (#415) (9b397d2)
• server: wire DELETE /api/projects through CSRF guard in isWrite whitelist (cb0604c)
• server: wire DELETE /api/projects through CSRF guard in isWrite whitelist (#455) (4b4e4fa)
• skills: improve validate message when no skills exist (#418) (a86d379)
• state: route 'vf state brief' to brief() and remove level:error from usage (#421) (c0dfd60)
• ui: comprehensive UX/UI audit — 40+ rounds (#450) (3856271)
• verify,units: \n cleanup and level annotation in tools-detect, units (#417) (5ac9751)
• workflow: replace embedded \n with separate out("vf") blank-line calls (#411) (c63472a)

Documentation

• add hook approval modal + auto-pilot/yolo docs and skills (#462) (#467) (03180f4)
• memory: document builtin recall; update COMMAND_REFERENCE, USER_GUIDE, MASTER_SPEC, GENERATED_FILES; add memory.db to gitignore (#507) (72e29fb), closes #491

Tests

• init: add regression guard for writeToolConfigs engine gating (closes #427) (#432) (4f6ae54)

---

This PR was generated with Release Please. See documentation.