[rennf93]

Release 0.2.5: what merged since 0.2.4 (#17 and #18). This PR only sets the version and dates the CHANGELOG section.

What changed

1. package.json and package-lock.json: 0.2.4 to 0.2.5.
2. CHANGELOG.md: the [Unreleased] content becomes [0.2.5] - 2026-10-21, and an empty [Unreleased] stays on top. Footer: [Unreleased] compares v0.2.5...HEAD, and [0.2.5] links the tag. What the section covers:
   • MCP server reconnects after the broker connection drops #17: the MCP server reconnects when its broker connection drops, instead of exiting.
   • Choice verdict, sandbox-safe socket handling, live restart checks, link fixes #18: the choice verdict.
   • Choice verdict, sandbox-safe socket handling, live restart checks, link fixes #18: a murmur command that a CLI sandbox blocks from the socket fails with socket_denied, and no longer starts a broker that removes the live one's socket.

Issue

No issue. #17 and #18 carry the details.

How it was verified

• make coverage: make exit 0, Tests 508 passed (508), 100 percent on statements (2308/2308), branches (1292/1292), functions (426/426) and lines (2233/2233). tsc --noEmit exit 0, typos exit 0, markdownlint 0 issues.
• The release workflow's notes step (the same awk), run locally for 0.2.5, prints the Added, Changed and Fixed sections above.
• npm pack --dry-run: murmur-it, 0.2.5, murmur-it-0.2.5.tgz, 21 files.
• Live checks for MCP server reconnects after the broker connection drops #17 and Choice verdict, sandbox-safe socket handling, live restart checks, link fixes #18 are in those PRs: reconnect on the real bus after the broker was killed, the broker-restart phase on claude, opencode, hummin and codex, and codex's sandbox before and after the fix. Gemini was not run (no GEMINI_API_KEY), and zcode is not installed.

Behavior changes

Sessions keep their murmur tools across a broker restart. verdictTally has a choice key. A permission-denied socket exits 1 with socket_denied instead of 2 with "broker is down", and a broker refuses to start when its probe of an existing socket is denied.