v0.5.0

✨ Headline — first-party memory system

A durable memory vault so context, decisions, and preferences survive across sessions. Ships on by default and fully
configurable via the memory.* config block.

• Three agent tools — memory (record), memory_search (recall), memory_read (load a stored value by id).
• Structured entries — typed facts with closed-menu categories, plus thread , tags , and scope ; entries are
tombstoned, not deleted via supersede / retire , so history stays answerable.
• Controllable autonomy (dials, validated at load) — write approval ask / balanced / auto , proactive_recall off /
hint / on , cross_session isolated / related / transcript , and human_edits authoritative / advisory .
Consequential writes (e.g. decisions) can be held for confirmation by policy.
• Tamper-evident vault (HMAC integrity seal) — every entry sealed with a keyed digest so poisoned/tampered content is
refused; seal key managed via /memory key . On by default.
• Learned-secret memory — detected secrets are remembered by keyed hash and scrubbed on reappearance (on by default).
• Context safety — the always-injected block is hard byte-capped so memory can never crowd the window; a budget floor
skips model-spending memory work when you're low on quota.
• Subagent guard — only the primary agent may write memory; subagents run write-guarded so throwaway or cron-style
prompts can't contaminate the shared vault.
• Opt-in distillation, auto-reindex on vault changes, and contended-write replay for concurrent instances.
• TUI — a /memory slash command, a review dialog, and human-readable frontmatter titles.
• Evals & coverage — a retrieval eval harness plus tests for invariants, integrity, drift, concurrency, and gate
behavior.

✦ Agent & TUI output fixes

• Fixed agent responses rendering with thinking mixed into the final answer — reasoning and the final response now
display distinctly (rode along with the memory work).
• Various tool-call and agent-turn correctness fixes landed alongside the memory phases.

✦ Search, indexing & commands

• Fixed autocomplete tab selection, the workspace index, and the /compact command.
• Added doc types to the FTS5 index; assorted structural_search improvements.