v1.4.7 — restart-safe updates (TSU-74)
Highlights
- Atomic binary swap (write
.new+ rename, never in-place truncate) — a relay self-update no longer SIGBUSes the live stdio MCP pipe. The owner-reported MCP-kill is fixed. - Staged restart —
restartServicepolls the port free before bootstrap (no EADDRINUSE→fatal dead-relay race);--no-restart/--stagefor auto-trigger safety.
Full diff: #119 (TSU-74).