v0.12.5

Highlights

• Serve a prepared Birdclaw archive in an explicit, opt-in read-only deployment mode.

Changes

• Add BIRDCLAW_DEPLOYMENT_READ_ONLY=1 for cached archive deployments, using strict database readers and suppressing automatic backup synchronization and cache population.
• Reject mutating HTTP operations, live-generation routes, and transport subprocesses while retaining cached archive and authenticated MCP reads.
• Hide unavailable navigation, reply composers, and sync controls in read-only mode, including automatic sync timers, while preserving normal interactive behavior and recovery pages.

Verification

• SSH-signed annotated tag v0.12.5 points to release commit af84ecde157e203e44b45acfbb9b7f7c94aa46e0; GitHub reports the signature as verified.
• npm package and registry tarball, published at 2026-09-12T02:48:06.124Z with latest set to 0.12.5.
• Registry integrity, verified against the downloaded tarball: sha512-UbiHoJXorFexUQg4n0nMnf9LFrZ7PfgkWkV7oijT9OCxAgTGxvSpq5UNgz2ppvuFe346ymQMASnkHuhQumA6dw==.
• Tarball SHA-256: c74bfdf3768bfd9db95d20f28edcdee831941d759461993265c53a7f78bbd739. All 99 packaged files match the release build.
• Release CI passed Bun/Istanbul and Node/V8 coverage, production builds, installed-package checks under both runtimes, and Playwright.
• Local installed-package smoke passed under Node 26.8.2 and the checksum-pinned Bun canary. Synthetic browser checks verified read-only Home and DMs, normal controls, and recovery when status is unavailable.