[callumalpass]

Prepare the reserved 0.1.0-beta.149 release with pnpm version:set. The Connect cohort, SDK manifest/npm lock and Obsidian SDK peer/local lock agree on that exact version. The generator assembles the pending notes, refreshes architecture counters and consumes changelog/growth fragments, including second-computer approval (#982), daemon credential-store retry (#1086), and enforced tag/asset integrity (#1091).

The candidate includes main f531326198d64a7e5658730db91d43b619037958. The later daemon-only change and integrity documentation leave the application WASM inputs unchanged from e161f426a521c39adf8ca057255fa940338f7de4. Refresh the SDK application WASM pin from those inputs using Rust 1.94.0, locked Binaryen and the publication workflow's canonical path remaps: 3,720,400 bytes, SHA-256 643eef6203bc7d394c76f9e305faa8977ea97785758b9cb076efda05d4f4d83f. Regenerate the native method inventory and update its packaged-asset expectation and documentation. This addresses the stale-pin failure in SDK build run 41126172862; the new CI source build must independently reproduce the digest.

Replace a 5 ms abort in the pending-setup test with an observed native pending poll. The original timer could abort before a review existed, making its cancel assertion race with setup. Cancellation still must reject, send cancel, issue no apply and retain no mutation ID; production code is unchanged by this test fix.

Main carried consistent beta.147 metadata after the runtime import; this advances directly to the reserved beta.149. Deployed beta.148 remains the predecessor. Production trust remains the exact beta.141 asset (840 bytes; SHA-256 7912e40838213e60b65848350d319a48019021317b112e3326429b250f0133d7). Publication remains tag-gated and requires independent production verification. There are no Worker, trust, policy-key or migration changes, and no waivers.

Validation:

• Version consistency, generated changelog, architecture absolute limits and whitespace checks passed.
• The application WASM built through rcargo with canonical source/Cargo remaps; the pinned optimizer reproduced CI's 3,720,400-byte length. Actual-WASM SQLite and backfill smokes passed.
• All three source-built SDK archives passed canonical trust verification and cold npm installs, strict declarations and public-import checks.
• SDK typecheck, all 174 SDK test files (2,320 tests), 64 registered packaging tests and 20 SDK publication tests passed. The abort test's original race was reproduced and repaired before the complete suite passed.
• Refreshed full node-tier pnpm ci:local --node, including remote builds/typechecks/tests and package audit, passed.
• Full root Rust formatting, resolved feature graph, CI helper tests, Clippy and workspace tests/doctests passed on the original release preparation using the exact pinned engine 95f6f36d5f0de87ec03be5a5045a84f25fc8229b. No root Rust source changed during this refresh; PR and exact-merge CI remain required.

All PR workflows must pass before this candidate enters the normal merge queue. Passing the single required Qualification check alone does not establish SDK, Runtime or Desktop qualification. No tag, deployment or publication has occurred.