ma-browser v0.12.1 — M4 discovery + version bump

Highlights

• Includes M4 discovery (A1–A4) already on main: site_recommend by active tab, catalog heat reorder, Capabilities tab, CommandLog.
• Semver bump to 0.12.1 across package / Cargo / tauri / zip naming (D6).

Portable zip

• ma-browser-tray-portable-v0.12.1.zip
• SHA-256: 2319d36d60e5a332bbfce97b2c7dc3dea1c139bacaac143f752885247f571cad

Notes

• Does not modify Release v0.12.0.
• Merged via PR #14 (feat/v0.12.1-patch → main).

ma-browser v0.12.0 — security plane + portable tray

Highlights

• M1 security plane: daemon default bind 127.0.0.1; /ping never returns token; CORS default-off; token not logged; body size cap; default MCP/tray scope no-eval; CONNECT_ONLY when daemon.json exists; safer git/adapter handling; PRIVACY.md aligned.
• M2 release alignment: single semver 0.12.0 across package / Cargo / tauri / About / zip naming; docs + CONNECT_ONLY sync; communityUpdateBlocker.
• M3 portable packaging: Windows portable zip with security-hardened tray packaging (W1–W5).

Verify portable zip

sha256sum ma-browser-tray-portable-v0.12.0.zip
# expect: 1faa998fa3416d6853bf39d9dc6d7fd136202ee084aa8b676bc1084fca8a690a

Notes

• Merged via PR #12 (feat/v0.12-security → main).
• Stale tag ma-browser-v0.12.0 (→ ac3ba54) left untouched; this release uses v0.12.0 on main.