v0.4.0.1: Open trusted-LAN swarm

0.4.0.1: Open trusted-LAN swarm (DMG promise fix)

Patch release: multi-Mac mesh works without cluster tokens or CLI recovery steps on a trusted home LAN.

Default: open LAN swarm

• Menubar / welcome LAN mode applies local_spillover + subnet_scan with no cluster_token minted
• netllm init --swarm upgrades existing configs in place (no --force); open mesh by default
• netllm serve persists mesh defaults on LAN bind via ensure_lan_mesh_defaults
• Peers pair via mDNS / subnet scan; heartbeats stay open when token is empty

Optional secured pairing

• Settings → Require cluster token — generates token on save, Copy join command for other Macs
• CLI: netllm init --swarm --secure, netllm swarm-token --create, netllm swarm-token --rotate
• netllm join URL --token T unchanged for secured swarms

Doctor and messaging

• Missing cluster token on LAN is not a doctor failure (informational note instead)
• netllm swarm-token on open LAN exits 0 with guidance (no silent --rotate requirement)

Verify (two Macs, trusted LAN)

1. Install app on both machines, enable Listen on LAN, restart agent on each
2. Point clients at http://<either-LAN-IP>:11400/v1
3. ./netllm peers / Settings Peers tab should show both agents

Secured LAN: enable Require cluster token on the leader, copy join command, run once on the peer.

Previous release

• v0.4.0 notes