diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e1f2038..84d8d39 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.2.6"
+  ".": "1.2.7"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 35c6cd2..10b5793 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,15 @@
 
 当前版本以 `package.json` 和 Release Please manifest 为准。提交推送到 `master` 后，Release Please 会在有待发布变更时创建发布 PR，并同步更新版本文件与本日志；合并发布 PR 后会生成对应 Git tag 和 GitHub Release。
 
+## [1.2.7](https://github.com/Sandyzzx/codex-zcode-bridge/compare/codex-zcode-bridge-v1.2.6...codex-zcode-bridge-v1.2.7) (2026-10-19)
+
+
+### Bug Fixes
+
+* harden Windows process ownership and cleanup ([628984c](https://github.com/Sandyzzx/codex-zcode-bridge/commit/628984ca625a4d307b859d9f32d49e52e2d21ee6))
+* harden Windows process ownership, lock cleanup and root validation ([73af9d6](https://github.com/Sandyzzx/codex-zcode-bridge/commit/73af9d60ff9bbcbbc1ae1d7b1f9b9fb9fca48bb0))
+* preserve claimant evidence across process generations ([73d4a73](https://github.com/Sandyzzx/codex-zcode-bridge/commit/73d4a731c5e8d34e4ff6f8ec146eb07c8598778b))
+
 ## [1.2.6](https://github.com/Sandyzzx/codex-zcode-bridge/compare/codex-zcode-bridge-v1.2.5...codex-zcode-bridge-v1.2.6) (2026-10-16)
 
 
diff --git a/package-lock.json b/package-lock.json
index e2fcec4..253559a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "codex-zcode-bridge",
-  "version": "1.2.6",
+  "version": "1.2.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-zcode-bridge",
-      "version": "1.2.6",
+      "version": "1.2.7",
       "license": "Apache-2.0",
       "dependencies": {
         "@modelcontextprotocol/server": "^2.1.0",
diff --git a/package.json b/package.json
index ef91cd6..402bd2e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codex-zcode-bridge",
-  "version": "1.2.6",
+  "version": "1.2.7",
   "private": true,
   "description": "本地 Codex 插件与 MCP 服务，用于委派和审查 ZCode 开发任务。",
   "type": "module",
diff --git a/plugins/codex-zcode-bridge/.codex-plugin/plugin.json b/plugins/codex-zcode-bridge/.codex-plugin/plugin.json
index e5248c3..d23be95 100644
--- a/plugins/codex-zcode-bridge/.codex-plugin/plugin.json
+++ b/plugins/codex-zcode-bridge/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "codex-zcode-bridge",
-  "version": "1.2.6",
+  "version": "1.2.7",
   "description": "让 Codex 通过本地 Bridge 委派、跟进并审查 ZCode 开发任务。",
   "license": "Apache-2.0",
   "repository": "https://github.com/Sandyzzx/codex-zcode-bridge",
diff --git a/plugins/codex-zcode-bridge/dist/bridge.mjs b/plugins/codex-zcode-bridge/dist/bridge.mjs
index 4d5ece8..19048fe 100644
--- a/plugins/codex-zcode-bridge/dist/bridge.mjs
+++ b/plugins/codex-zcode-bridge/dist/bridge.mjs
@@ -27426,7 +27426,7 @@ function formatDuration(durationMs2) {
 
 // src/mcp/server.ts
 var SERVER_NAME = "codex-zcode-bridge";
-var SERVER_VERSION = "1.2.6"; // x-release-please-version
+var SERVER_VERSION = "1.2.7"; // x-release-please-version
 var EXECUTION_NOT_VERDICT = "Results describe Bridge/ZCode execution only: status 'completed' means the invocation and report normalization finished, NOT that the calling host accepted the work. the calling host must independently review the workspace diff and checks before deciding PASS.";
 function okResult2(data) {
   return {
diff --git a/plugins/codex-zcode-bridge/plugin.json b/plugins/codex-zcode-bridge/plugin.json
index af8b036..49d2e59 100644
--- a/plugins/codex-zcode-bridge/plugin.json
+++ b/plugins/codex-zcode-bridge/plugin.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "codex-zcode-bridge",
-  "version": "1.2.6",
+  "version": "1.2.7",
   "description": "Let Codex delegate development tasks to your local ZCode runtime and review their progress and results.",
   "author": {
     "name": "Sandy"
diff --git a/src/mcp/server.ts b/src/mcp/server.ts
index 75bcd63..10213eb 100644
--- a/src/mcp/server.ts
+++ b/src/mcp/server.ts
@@ -45,7 +45,7 @@ import { registerLedgerTools } from "../ledger/mcp.js";
 import { renderTaskFeedback } from "../feedback/renderer.js";
 
 export const SERVER_NAME = "codex-zcode-bridge";
-export const SERVER_VERSION = "1.2.6"; // x-release-please-version
+export const SERVER_VERSION = "1.2.7"; // x-release-please-version
 
 export interface BridgeServerOptions {
   taskManager: TaskManager & Partial<Pick<ProgressTaskManager, "getEvents" | "getFeedback" | "replyToInteraction">>;