MemPlumb v0.13.2 Preview - Unsigned Preview

MemPlumb v0.13.2 Preview

MemPlumb v0.13.2 is a correctness and operator-reliability release for the
local-first Agent MemoryOps control plane.

What changed

• The MemoryOps Console now offers natural-language and deterministic
  structured-Facts ingestion. Operators can submit multiple facts with
  kind, key, value, confidence, sensitivity, and optional validity
  bounds without pretending that Event persistence alone proves a Memory was
  created.
• Structured-Facts drafts, row count, selected mode, entered values, and
  advanced-field state survive English/Chinese locale changes. An Event that
  produces no Decision or Memory presents a direct structured-Facts recovery
  action.
• Explicit source_trust: 0 is retained instead of being replaced by the
  default trust value. Credential-sensitive facts remain rejected by the
  default Memory Policy.
• New Console, Pipeline, and HTTP ingestion rejects an invalid, zero-length,
  or reversed validity window before Event or idempotency persistence.
  Newly written Write Decision Observations enforce the same rule, while
  existing v1 observations remain readable for compatibility.
• The TypeScript SDK adds bounded retries for read-only, read-only
  materialization, state-idempotent or lease-fenced control operations, and
  writes protected by MemPlumb's idempotency contract. A logical call retains
  its body, request ID, idempotency key, and review lease token across retries.
• SDK retries cover network and response-stream failures, 429, 5xx, and
  REQUEST_IN_PROGRESS; exponential backoff and Retry-After are capped.
  Non-idempotent mutations are still sent once. Node 18 compatibility uses
  node:crypto rather than relying on a global Web Crypto implementation.
• Extraction, retrieval, and temporal benchmark inputs reject duplicate
  non-empty Case IDs both when loading JSONL and when called directly. Empty
  datasets fail closed instead of passing vacuously.
• Context Policy comparison now exposes explicit dataset_non_empty and
  no_regression checks. A regression or empty comparison cannot pass, and
  an empty extraction benchmark blocks release approval.

Compatibility

This patch does not add an HTTP path or database migration. OpenAPI 1.13.0
with 72 paths, Memory Store Contract v20, SQLite schema v26, PostgreSQL
migration v32, Workspace Snapshot v17, Actor export schema v14, and Release
Artifact v12 remain the compatibility boundary. Artifact v8-v11 verification
remains supported.

Verification

• GitHub quality CI passed all three jobs for the release candidate: Node 18
  TypeScript SDK compatibility, the complete verification suite with
  PostgreSQL 17 plus pgvector, and the container readiness/auth/write smoke.
• Node: 625 passed, 0 skipped, 0 failed in CI. Cloud Runtime: 3 passed. Python
  SDK: 20 passed. The Node 18.20.8 TypeScript SDK suite passed 14 tests.
• TypeScript and Python strict checks, mypy, ruff, wheel construction,
  OpenAPI 1.13.0 with 72 paths, and all four quality benchmarks passed.
• The release workflow rebuilds the Windows executable from the tagged source,
  runs the clean-directory product gate, and requires an independent
  byte-for-byte reproducibility build before publishing it.

Five-minute path

Download memplumb-0.13.2-windows-x64.zip, verify SHA256SUMS, extract it,
and run memplumb.exe. The default local Runtime stores data under the current
Windows profile and does not require Docker.

The full walkthrough is available at https://memplumb.com/#quickstart.

Preview boundary

This Windows artifact is reproducible and integrity-addressed but is not
Authenticode signed. Windows may display a reputation warning. It is an
evaluation build, not a generally available production release.

Shared production self-hosting uses the Node Runtime with PostgreSQL. The
experimental Cloudflare Worker + D1 adapter is not the shared production
control plane.

Verify before use

Compare the executable digest with the release SHA256SUMS and
manifest.json. Do not use an executable whose digest differs.

Preview use is governed by the attached EULA.md.

Build and distribution

Unsigned Preview: the Windows executable is integrity-addressed but does not carry an Authenticode publisher signature. Expect Windows SmartScreen warnings.

Artifacts

• Windows x64 portable executable and ZIP, with manifest.json and SHA256SUMS
• Python SDK wheel
• TypeScript SDK package
• Container image: ghcr.io/funnaz/memplumb@sha256:ca53b95c2d0d3a6daa7803ac135808251afcd0238c5f15c79d902dc96b48d69f

The container is published by immutable digest with BuildKit provenance and an SBOM. The mutable latest tag is intentionally not published for v0.x.

Source revision: funnaz/memplumb@db351d3291bfc57d9e50f01bb218e173275aa329

Verify downloaded files with release-assets-SHA256SUMS. The Windows manifest records the post-signing executable digest and signing state.