Task: Build 1.2.1 from newest main

Identity

Build and verify the Windows x64 1.2.1 installer from the latest local main commit (143aaec3d6770dd263bf1e418e89bf722989caef). No source changes are in scope; the deliverable is the packaged artifact and its verification evidence.

Use the pinned pnpm toolchain and frozen lockfile. Produce the unsigned Windows x64 NSIS installer, preserving the repository's existing Electron/Pi runtime packaging contracts and current main-branch behavior.
On 2026-09-01 the human explicitly authorized codex-root to take over this completed task solely to preserve and commit its known untracked task record, then release the occupied main worktree for the separately verified Conversation-abort integration. Do not rebuild, relabel, overwrite, or otherwise change the existing 1.2.1 artifact during this closure.

Produced release\Makelore-1.2.1-win-x64.exe from main at 143aaec3d6770dd263bf1e418e89bf722989caef (295,115,852 bytes).
Packaged artifact contains version 1.2.1, Learning code, Web Search and Marketplace code, .makelore/project.json integration, and no legacy learning-player files.
Pi product artifact verification passed for Pi 0.84.2, 130 packages, 6 assets, packaged plugin/runtime closure, and resolver/runtime checks.
Human-authorized closure preserved the task record on main without changing product source, dependencies, release output, installed data, or artifact bytes.

pnpm install --frozen-lockfile passed.
pnpm run package:stage:win-x64 passed.
Electron Builder Windows x64 build passed.
pnpm run verify:publish-runtime passed (npm 11.6.2).
pnpm run verify:artifact:win -- --allow-dirty --installer .\\release\\Makelore-1.2.1-win-x64.exe passed; Electron 43.4.0, Node 24.18.1, Python/uv/npm resources and native modules verified.
pnpm run verify:artifact:pi -- --app-exe .\\release\\win-unpacked\\Makelore.exe --samples 2 passed; final result pass with cold/warm readiness and packaged closure evidence.
ASAR inspection passed: version 1.2.1, learningEnabled=true, Web Search/Marketplace/config markers present, legacyLearningPlayerFiles=false.
Installer SHA-256: 3578A3643BF715C57EF924D75819240D97D2387DB7300546735384DA06B26E49; Authenticode status NotSigned (local unsigned build).
smoke:pi:real and perf:pi:release were not rerun; their existing harness still asserts two parent process IDs while current main intentionally uses one long-lived parent Agent Server with logical runs/leases.

External code signing and publication remain follow-ups if a distributable signed release is required.
Align the Pi smoke/performance harness assertion with the one-parent Agent Server architecture before claiming those checks as passing.