Release b675

feat(db): run FTS optimize nightly instead of every 6h

OPTIMIZE INDEX takes ~10 minutes on a 17GB audit database and slows reads while it runs. Schedule it once per day at a configurable local time (DB_FTS_OPTIMIZE_AT, default 04:00) and keep DB_FTS_OPTIMIZE_INTERVAL_SEC as an explicit legacy override.

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b673

perf(db): reuse pooled reader connections

Opening a connection re-scans the FTS index directory; on NFS the attribute cache expires after ~60s, so the first dashboard request after idle stalled 10-40s. Keep readers open and hand them back on drop.

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b671

fix(handlers): keep empty-message filtering role-agnostic

Release b669

fix(handlers): preserve consecutive user messages

Release b667

fix(db): detect active rollup rotation via cursor timestamp

overlayfs may reuse inodes, so identity alone misses rotation; also compare the TimeMs of the cursor row and reset when it changes.

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b665

perf(records): serve facet values from active rollup

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b663

fix(db): gate active rollup on complete-day coverage

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b661

perf(metrics): serve unfiltered dimension queries from rollups

Ultraworked with Sisyphus

Co-authored-by: Sisyphus clio-agent@sisyphuslabs.ai

Release b657

fix(models): resolve per-backend api_key for upstream /v1/models

Client Authorization/x-api-key now takes precedence, with each backend's
configured api_key as fallback, so authenticated upstreams work when the
client sends no credential.

The /v1/models cache key is now derived from the effective per-backend key
set instead of the raw client credential, preventing different upstream
credentials from sharing a cached list.

Release b655

Merge remote-tracking branch 'origin/main'