Skip to content

v0.5.0

Choose a tag to compare

@Magnus-Gille Magnus-Gille released this 10 Jul 09:46
· 142 commits to main since this release

Added

  • Encrypted offsite cloud backup of the memory DB with verified rclone crypt, consistent SQLite snapshots, retention, integrity checks, and Heimdall heartbeat reporting (#172).
  • Owner-only untracked_namespace convention proposals and orient maintenance signals, preserving human confirmation before taxonomy changes (#163).
  • Owner-only memory_health with a versioned dashboard contract covering embeddings, size, retrieval, classification, maintenance, consolidation, and security events (#156, #159, #161).
  • Per-principal conventions, configurable tracked-namespace taxonomies, profile-based onboarding, and multi-user isolation hardening (#157, #164, #5).

Security

  • Added defense-in-depth prompt-injection controls: namespace-wide delete is disabled by default, direct and aggregate reads carry untrusted-content envelopes, and consolidation treats untrusted stored content as data (#150).
  • Closed derived classification leaks in orient synthesis, insights previews, and retrieved-unused aggregate signals (#184).
  • Cleared production npm audit advisories for Hono and protobufjs, plus the dev-only form-data advisory.

Changed

  • Consolidated the Pi deployment topology into one git source checkout, one git-free service artifact, and a separate ~/munin-ops runtime for backup jobs (#174, #175).
  • Conformed memory_health to schema version 2 and added latency percentiles plus access-denied telemetry (#159, #161).
  • Changed the default embedding model to Xenova/bge-small-en-v1.5, with automatic re-embedding and a mixed-model vector-space guard (#148).
  • Improved AI-facing tool descriptions and added memory_orient.getting_started guidance (#147, #195).

Fixed

  • Runtime version reporting now follows package.json; the MCP handshake, memory_status, and munin-bridge report v0.5.0 instead of the historical hard-coded v0.1.0.
  • Embedding workers reclaim orphaned processing rows on startup (#155).
  • Consolidation validates its OpenRouter key at startup (#168).
  • memory_update_status rejects transport-markup corruption and unsafe partial updates of legacy free-form statuses (#167, #177).
  • memory_health.embedding.coverage_pct is null for an empty corpus instead of a misleading zero (#159).

Full details: CHANGELOG.md