Repository navigation
v0.5.0
Added
- Encrypted offsite cloud backup of the memory DB with verified rclone crypt, consistent SQLite snapshots, retention, integrity checks, and Heimdall heartbeat reporting (#172).
- Owner-only
untracked_namespaceconvention proposals and orient maintenance signals, preserving human confirmation before taxonomy changes (#163). - Owner-only
memory_healthwith a versioned dashboard contract covering embeddings, size, retrieval, classification, maintenance, consolidation, and security events (#156, #159, #161). - Per-principal conventions, configurable tracked-namespace taxonomies, profile-based onboarding, and multi-user isolation hardening (#157, #164, #5).
Security
- Added defense-in-depth prompt-injection controls: namespace-wide delete is disabled by default, direct and aggregate reads carry untrusted-content envelopes, and consolidation treats untrusted stored content as data (#150).
- Closed derived classification leaks in orient synthesis, insights previews, and retrieved-unused aggregate signals (#184).
- Cleared production npm audit advisories for Hono and protobufjs, plus the dev-only form-data advisory.
Changed
- Consolidated the Pi deployment topology into one git source checkout, one git-free service artifact, and a separate
~/munin-opsruntime for backup jobs (#174, #175). - Conformed
memory_healthto schema version 2 and added latency percentiles plus access-denied telemetry (#159, #161). - Changed the default embedding model to
Xenova/bge-small-en-v1.5, with automatic re-embedding and a mixed-model vector-space guard (#148). - Improved AI-facing tool descriptions and added
memory_orient.getting_startedguidance (#147, #195).
Fixed
- Runtime version reporting now follows
package.json; the MCP handshake,memory_status, andmunin-bridgereport v0.5.0 instead of the historical hard-coded v0.1.0. - Embedding workers reclaim orphaned
processingrows on startup (#155). - Consolidation validates its OpenRouter key at startup (#168).
memory_update_statusrejects transport-markup corruption and unsafe partial updates of legacy free-form statuses (#167, #177).memory_health.embedding.coverage_pctis null for an empty corpus instead of a misleading zero (#159).
Full details: CHANGELOG.md