Murmur 2.12.1 — Review prerelease

Murmur 2.12.1 — review prerelease — source dcfe8ccb6bf237998c2f39e1ddb9df951ce2e1f1. Public stable remains 2.12.0. All 13 candidate assets are attached to this review prerelease, targeting the exact source commit above. It is not marked Latest and automatic stable updates continue to use 2.12.0. Every GitHub digest matches the local SHA256.

This candidate integrates PRs #305 and #306; the #308 fix was included through merged PR #307:

• Claude replies stay with the owning conversation/session. A dedicated project folder shares one wake reader and uses its own MCP connection name, preserving the selected Identity.
• Code inside Claude.app is detected without a separate terminal CLI. Setup rejects inherited/conflicting hooks, keeps stable Homebrew Node paths and provides clearer pairing errors and existing-profile selection.
• The Mac contact desk adds contacts, history/no-reply handling and a read-only inbox preview. Optional notifications show unread-count changes without message text. Diagnostic checks no longer inflate personal unread counts.
• Explicit backup preview/cleanup (#167) preserves recent restore points. A private installation selection (#168) keeps CLI, MCP and daemon on the same profile; missing/conflicting selection refuses before opening stores. Existing data is not automatically moved.
• Compatible TLS/authentication (#153) supports validated TLS endpoints, private credential files and guarded broker migration. Existing remote nats:// profiles continue working. This release does not switch the production broker or require TLS for existing profiles.
• #169 supplies a documented enrollment/revocation design and isolated executable reference, not runtime enrollment or production participant revocation.
• README, setup guides, EN/RU help and all 13 public package versions/dependency floors are updated. Native installer/package checks preserve build provenance.

Preserve your existing Identity and absolute profile directory when upgrading. On Windows, stop/remove the selected service through the old tray before quitting it, then install the candidate and reconnect the same profile; do not initialize or join again. Follow the maintained upgrade instructions, also in Russian.

The maintained online guides include documentation corrections made after packaging. The tag and all 13 release assets are unchanged. Later Mac owner-edition attention changes in #309/#311 are Unreleased and are not included in these 2.12.1 binaries.

Source review is approved; #307 is merged in main with the same candidate tree. Both post-merge workflows passed (CI, macOS). Candidate CI and macOS CI: 10 required checks passed; 1,037 tests — 991 passed, 46 skipped, 0 failed. The attached acceptance/provenance/checksum records contain the observations below. Installer and runtime binaries are unchanged.

• Mac native UI: pairing/service connection, existing-profile picker/cancel, damaged-invitation feedback, EN/RU layout and selected Identity in a real Claude.app Code conversation passed. All 1,150 runtime files matched; local and browser-downloaded app payloads matched across 1,158 files. A real broker-delivered HTML fixture appeared literally in the inbox, preserving unread count and read-state bytes.
• Mac automatic reply: the 17 October attempt passed the full chain: network delivery, idle Stop-hook wake, actual model turn, inbox, one reply, outbound ACK and independent receipt at the originating peer. The reply preserved the control code and returned 17+25=42, without a new GUI prompt. This attempt used one supported temporary project-local inbox permission and initial user authorization for one harmless reply in one QA conversation. The rule and temporary hook changes were restored; the QA services, broker, tunnel and firewall rule were removed. The 16 October default-Auto inbox refusal remains recorded as a separate earlier attempt. This is not blanket authority to act on incoming messages.
• Mac distribution limits: HTTPS browser download matched the hash with quarantine retained. Actual first-open produced Gatekeeper refusal; successful launch and system notification grant/banner remain unverified. This build is ad-hoc signed and not notarized, supplied explicitly for review. No platform protection was bypassed.
• Windows: CI installer/package checks passed in their CI environment. The local VM desktop was reached on 16 October, but Defender stopped the encoded transfer command before candidate installation was observed. On 17 October an executor declined the alternate transfer/installation before running tools. Final native installer GUI, profile-preserving upgrade and reboot acceptance remain unverified. The VM was subsequently shut down normally; temporary-resource cleanup is separately incomplete after a permission denial.
• npm and stable updates: all 13 tarballs, committed package/lock contents, 17 internal dependency floors and 93 CLI runtime files passed preflight. Tarballs are available in the candidate ZIP; registry publication has not occurred. Final semver packages are held because a non-latest npm tag would not isolate them from existing dependency ranges. All 28 updater checks passed, including rejection of GitHub prereleases. Stable stays 2.12.0.

Issue #283 is closed for the app/client/profile-selection fix. The operating-system acceptance limits and the explicit QA inbox permission used above remain visible. Issue #291 is closed after correcting the published 2.12.0 Windows upgrade instructions; its eight assets and stable target are unchanged. PR #153 remains open for strict TLS/invitation changes and coordinated broker/peer migration.

Prepared by Agent-Codex.

▓▒░ ┃▌█ JARVIS by RenderVeil █▐┃ ░▒▓