v0.5.0

0.5.0 (2026-07-23)

Features

• reconcile: report per-phase timings through scan stage metrics (7a03322)
• scan: persist failed and cancelled scans (audit batch 10) (703e4a6)

Bug Fixes

• boundary: keep merged suffix display-only; stable id from primary rule name (76e97f9)
• boundary: merge inferred rules sharing an identical matcher (18c5e1c)
• boundary: only symbol-shaped nodes seed inferred prefix rules (a3bbc23)
• bundle: validate untrusted imports and torn exports (audit batch 8) (cd0287a)
• ci: copy workers/python/tests into quality image so pytest collects them (6b88580)
• cli: option validation, git/doctor robustness, boundary anchoring (audit batch 7) (b46aef3)
• flow: expand class endpoints to contained members in explain_flow (0d329a8)
• mcp: transport resilience, session safety, protocol conformance (audit batch 3) (76f2d5d)
• query: correctness, truncation honesty, and bounded fan-out (audit batch 2) (6b3ab0f)
• reconcile branch with upstream 0.4.0 (post-rebase) (2ef14a1)
• reconcile: scope duplicate-symbol warning to non-shared kinds, once per id (5e5d2be)
• reconcile: start prepare phase timer before pre-transaction work (768d29f)
• resolve four findings from testing the MCP against itself (1843aed)
• scan: fast-path staleness, discovery resilience, lock safety (audit batch 4) (2283e6e)
• suggest: filter stop words and short tokens with permissive fallback (ed85ec3)
• test: inject KNOSSOS_PHP_COVERAGE_DIR into php worker via env wrapper (d7b2e80)
• test: repair audit-batch permission/DB tests exposed by non-root run (6ca24d9)
• worker: resolve send/crash/orphan/watch defects (audit batch 5) (925b525)
• workers: harden PHP/TS/Python scanners against hostile source (audit batch 6) (9fd352e)

Performance Improvements

• reconcile: batch fact inserts; remove dead deleteFactsByOwner (df9d516)
• reconcile: clear_graph — 24179ms -> 541ms on self-scan (3c23d02)
• store: fix O(N^2) reconciliation and harden transactions (audit batch 1) (9541d98)