0.1.17

0.1.17 Latest

New Features

• tighten knowledge wiki guidance
• hard-cut webhook receipt persistence
• support explicit codex homes
• hard-cut hosted sql privacy surface
• add contact privacy rotation
• hard-cut canonical session payload
• hard-cut canonical event attachments
• add root model command
• hard-cut preview metadata to postgres
• hard-cut delivery-only outbox
• add invite send-code flow
• cut member identifiers to private state
• schedule delayed review-gpt sends
• add format-version upgrade flow
• hard cut hosted member privacy state
• cut hosted member privacy surfaces
• add canonical memory surface

Bug Fixes

• harden hosted runtime parsing
• land remaining cleanup worktree
• retry telegram auto-replies after codex limits
• get repo checks green
• clarify privy 429 signup retry copy
• restore workout format save structured input
• reconcile recurring auto-log cron state
• simplify staged payload storage
• align staged payload ids
• move hosted stripe activation effects post-commit
• simplify route-aware prompt guidance
• start invite cooldown on confirm
• hard-cut ai usage debug persistence
• delegate device-sync runtime snapshot contract
• wire private control seam into tests
• strip tsbuildinfo from packed tarballs
• harden invite send-code recovery
• stop ordinary device-sync runtime reads
• share vault metadata validation gate
• add gateway projection descriptor
• harden hosted wake replay
• remove legacy reply-key auth remnants
• cut webhook receipts over to staged dispatch refs
• serialize privy reconciliation
• validate sender and suspended access
• gate wallet requirement to revnet
• harden loopback and minimize webhook traces
• restore green verification baseline
• collapse billing to subscription-only
• relax non-revnet wallet prerequisites
• enforce unique linq chat binding
• hard-cut document and meal read ids
• use canonical family read ids
• isolate device-sync schema cutover
• finish versioned local state cleanup
• require inline share packs for accepted shares
• land final cleanup patch
• tighten capability tool bindings
• shorten transient retention
• shorten replay tombstone retention
• correct homepage privacy retention copy
• project tool catalogs from registries

Documentation

• unify public-origin callback config
• mention murph model
• document hosted platform seam
• skip default verification for review-only tasks
• document upgrade seam
• align onboarding identity docs
• harden vault versus assistant runtime boundary
• cut smoke manifests to memory automation and runtime

Changelog
Full Changelog: v0.1.16...HEAD

• refactor(workout): route writes through core primitives (7c3c201)
• fix(device-sync): harden hosted runtime parsing (7cf3744)
• refactor(query): centralize bank registry projection metadata (92dc365)
• refactor(data-model): collapse duplicate contract owners (243cf09)
• refactor(boundaries): tighten package ownership seams (0fac8ba)
• refactor(web): hard-cut hosted legacy contact privacy fallbacks (f1bdc1e)
• refactor(hosted-onboarding): split hosted member stores (f817e47)
• fix(repo): land remaining cleanup worktree (c2b5f1a)
• fix(assistant): retry telegram auto-replies after codex limits (c595b25)
• fix(verify): get repo checks green (7f9efaa)
• fix(web): clarify privy 429 signup retry copy (3910527)
• fix(cli): restore workout format save structured input (657d98c)
• test(smoke): align query projection scenario surface (ce224db)
• fix(food): reconcile recurring auto-log cron state (5401687)
• fix(hosted-execution): simplify staged payload storage (e55d2e1)
• fix(web): align staged payload ids (7cdf338)
• feat(assistant): tighten knowledge wiki guidance (78ce1ff)
• fix(web): move hosted stripe activation effects post-commit (ab23c08)
• fix(assistant): simplify route-aware prompt guidance (a406427)
• test(assistant): cover startup cron catch-up (2ceee72)
• refactor(memory): remove memory search surface (201d6e2)
• feat(hosted-web): hard-cut webhook receipt persistence (a22c11a)
• refactor(hosted-web): simplify stripe billing durability (b6a014c)
• refactor(hosted-execution): keep seam transport-only (ffc9068)
• refactor(hosted-share): remove live share pack reads (64ed294)
• docs(hosted-web): unify public-origin callback config (ba871f9)
• fix(hosted-onboarding): start invite cooldown on confirm (e29cb02)
• docs(readme): mention murph model (1bd1055)
• refactor(cli): share model default helpers (4e7a564)
• refactor(assistant-engine): split codex event parsing (0277633)
• feat(cli): support explicit codex homes (bfc8fd5)
• fix(hosted): hard-cut ai usage debug persistence (20aeb52)
• refactor(assistant): tighten boundary imports (a744d34)
• refactor(core): unify event spine internals (093f870)
• fix(hosted-execution): delegate device-sync runtime snapshot contract (c22aaf2)
• refactor(core): finalize legacy event staging path (5161591)
• refactor(core): simplify legacy event builder path (9270962)
• fix(hosted-execution): wire private control seam into tests (338a83f)
• refactor(hosted-execution): hard-cut cloudflare control seam (70f9b3b)
• refactor(cli): reuse extracted assistant wizard for model (de1c6b4)
• refactor(hosted-onboarding): simplify member aggregate shape (91dcbac)
• refactor(hosted-share): drop greenfield share compat shim (ecc5580)
• refactor(hosted-auth): split auth by principal (a24bb6e)
• docs(runtime): document hosted platform seam (366d95c)
• feat(device-sync): hard-cut hosted sql privacy surface (47d5034)
• refactor(hosted-share): hard-cut claim-time pack reads (2ee2a64)
• feat(hosted-onboarding): add contact privacy rotation (6e27feb)
• refactor(cloudflare): inject hosted runtime platform (99f4b04)
• refactor(hosted-telegram): minimize hosted telegram payloads (11df36e)
• chore(license): migrate to apache-2.0 (6853156)
• feat(workouts): hard-cut canonical session payload (43c93a9)
• refactor(relations): canonicalize write-side links (13f340b)
• feat(vault): hard-cut canonical event attachments (17f499d)
• refactor(cli): simplify model command summaries (981da90)
• test(hosted-web): guard hosted member owner-table schema (5e90b77)
• refactor(profile): treat current profile as generated view (0486fc4)
• feat(cli): add root model command (5f071c0)
• refactor(hosted-share): shrink preview metadata contract (315b172)
• refactor(hosted-onboarding): move member private state into web (dbcef98)
• fix(release): strip tsbuildinfo from packed tarballs (5bdfb60)
• fix(hosted-onboarding): harden invite send-code recovery (44f68c1)
• refactor(hosted)!: move vercel-cloudflare auth app-local (4888ff3)
• fix(web): stop ordinary device-sync runtime reads (acc11fd)
• feat(hosted-share): hard-cut preview metadata to postgres (af96da8)
• refactor: narrow hosted execution seam (3a3419d)
• feat(hosted-execution): hard-cut delivery-only outbox (2c1bc8b)
• feat(hosted-onboarding): add invite send-code flow (4a3e77e)
• refactor(assistant-engine): hide hosted share signing behind hosted client (e3c5024)
• fix(query): share vault metadata validation gate (1d071ee)
• fix(runtime-state): add gateway projection descriptor (67d32e9)
• refactor(hosted-onboarding): centralize member-core persistence (786bcc2)
• refactor(vault): hard-cut metadata contract (2624903)
• refactor(query): hard-cut projection compatibility (33643aa)
• chore(agent-docs): close onboarding hard-cut lane (4ad847d)
• refactor(hosted-onboarding): hard-cut lifecycle state (f31fef2)
• refactor(query): finish projection cleanup and audit routing (45fc01d)
• chore: bump @cobuild/review-gpt to 0.5.48 (35fc3a6)
• refactor(query): hard-cut shared projection store (5bf371a)
• refactor(runtime-state): replace portability allowlist with descriptors (e396194)
• docs(workflow): skip default verification for review-only tasks (1fca443)
• refactor(assistant-runtime): hard-cut operator config subpaths (cd5aa01)
• refactor(gateway-local): hard-cut projection compatibility (af0aae5)
• refactor(assistant-engine): finish vault-inbox owner collapse (8846ef1)
• feat(hosted): cut member identifiers to private state (3380ff4)
• refactor(assistant-runtime): hard-cut operator-config owners (1c2cbb7)
• refactor(gateway-local): unify source event persistence (96954d6)
• refactor(vault-inbox): hard-cut shared leaves to assistant-engine (b193b60)
• fix(device-sync): harden hosted wake replay (68bf585)
• fix(hosted-email): remove legacy reply-key auth remnants (b9854f6)
• chore(cloudflare): clarify deploy and email helper state (d019c53)
• refactor(cloudflare): simplify deploy helper paths (abbf032)
• refactor(cloudflare): split hosted email routing helpers (968c88f)
• refactor(data-model): align shared ownership seams (d6f2b77)
• feat(tooling): schedule delayed review-gpt sends (fbb8870)
• chore(deps): bump review-gpt to 0.5.45 (edbfef6)
• chore(repo): canonicalize v1 docs and hosted schema baseline (f2a5d43)
• chore(deps): bump review-gpt to 0.5.44 (47be4ee)
• refactor(release): narrow public package surface (b09458e)
• refactor(package-boundaries): cut wrapper seams (967baf3)
• fix(web): cut webhook receipts over to staged dispatch refs (046d2af)
• docs(vault): document upgrade seam (506d8b2)
• feat(vault): add format-version upgrade flow (6c79783)
• refactor(core): add vault upgrade seam (9967b7b)
• refactor(assistant): hard-cut assistant-core owners (9000fe6)
• fix(hosted-onboarding): serialize privy reconciliation (bf084bd)
• fix(hosted-share): validate sender and suspended access (712293d)
• refactor: split operator-config from assistant-core (07ff5d8)
• build(deps): bump review-gpt to 0.5.43 (1b53977)
• fix(hosted-onboarding): gate wallet requirement to revnet (eae09a2)
• refactor(cloudflare): split worker and runner owner surfaces (263b42b)
• fix(device-syncd): harden loopback and minimize webhook traces (0c1b91c)
• fix(repo): restore green verification baseline (fc09eb0)
• docs(hosted): align onboarding identity docs (27c9bc6)
• fix(hosted-onboarding): collapse billing to subscription-only (3155190)
• refactor(web): hard cut hosted member privacy naming (c3e9a3f)
• fix(hosted-onboarding): relax non-revnet wallet prerequisites (442dd4a)
• fix(hosted-onboarding): enforce unique linq chat binding (c854196)
• refactor(cloudflare): simplify hosted storage state access (aa778ae)
• chore(web): squash hosted member privacy migrations (e8d9b9d)
• refactor(cloudflare): hard-cut hosted finalize callback seam (4a28194)
• feat(web): hard cut hosted member privacy state (9562bca)
• fix(query): hard-cut document and meal read ids (a6c6b09)
• refactor(cloudflare-gateway): tighten permission override handling (0290319)
• refactor(cloudflare-gateway): remove dead legacy compatibility paths (e98fec1)
• fix(query): use canonical family read ids (b1c90a2)
• feat(web): cut hosted member privacy surfaces (44ecad8)
• fix(web): isolate device-sync schema cutover (d08cad0)
• docs(architecture): harden vault versus assistant runtime boundary (e91bda3)
• refactor(web): move hosted device-sync runtime ownership to cloudflare (f16c882)
• refactor(assistant): share assistant runtime path ownership (4961d23)
• docs(assistant): cut smoke manifests to memory automation and runtime (f45297a)
• refactor(assistant): hard cut state into canonical memory automation and runtime (9f8a75b)
• test(tests): harden brittle mock seams (0e413ff)
• test(cloudflare): replace abort mock with runner hook (976daf2)
• test(assistant-runtime): replace brittle share mock with real vault import (fa0b5e9)
• test(tests): dedupe seam-local helpers (47dc1e4)
• refactor(hosted-execution): collapse runner callback hosts (e3a91f3)
• test(device-syncd): dedupe shared test setup (86a6fbb)
• refactor(device-syncd): hard-cut legacy local store schema (decd9ce)
• feat(memory): add canonical memory surface (37e3b85)
• refactor(runtime-state): move assistant runtime under vault (7be2648)
• refactor(hosted): remove residual legacy cleanup seams (4b8b4df)
• refactor(cloudflare): hard cut hosted storage fallback readers (ac13c97)
• refactor(device-syncd): split local authority storage (8732004)
• refactor(assistant): hard-cut local state envelopes (cfe03e6)
• refactor(hosted-execution): hard cut to a single vault bundle (31b40ca)
• fix(assistant): finish versioned local state cleanup (4fca3df)
• fix(hosted): require inline share packs for accepted shares (e5f06f7)
• fix(hosted): land final cleanup patch (1f77309)
• fix(assistant-core): tighten capability tool bindings (1b870e1)
• refactor(gateway-local): persist source projections only (a99c10d)
• test(verify): defer vitest worker selection to config (fa8c728)
• refactor(inboxd): canonicalize inbox intake on capture ledger (e837caf)
• refactor(runtime-state): add hosted snapshot portability axis (db290aa)
• refactor(verify): reuse shared workspace helpers (57c5e55)
• build(verify): make coverage the acceptance lane (1c6f8a6)
• refactor(runtime-state): hard cut compatibility fallbacks (6d37cf6)
• fix(hosted): shorten transient retention (5da1936)
• fix(cloudflare): shorten replay tombstone retention (cf51de2)
• fix(web): correct homepage privacy retention copy (6ef77ba)
• build(verify): add low-risk repo fast path (0f22bdc)
• chore(test): quiet sqlite warning noise (8981ad5)
• refactor(hosted): land architecture cleanups (c7f185f)
• build(verify): parallelize workspace typecheck (6127c0a)
• refactor(assistant-core): simplify capability tool runtime (9550d5e)
• refactor(runtime-state): land local-state architecture cleanups (fd6cc4e)
• refactor(openclaw-plugin): rename unpublished package (29ce66c)
• refactor(assistant-core): hard-cut capability host selection (cf0d4d5)
• test(cli): stabilize shim stdin coverage (bda6ae2)
• refactor(assistant-core): centralize inbox routing capability selection (8707d9f)
• refactor(assistant-core): allow multi-host capability bindings (6534fa9)
• fix(assistant-core): project tool catalogs from registries (b3493ca)