Skip to content

v0.6.4 — Hardening + Export/Import

Choose a tag to compare

@heyhayes heyhayes released this 22 Feb 17:49
· 37 commits to main since this release

What's new

Export/Import CLIannal export --project X writes JSONL to stdout, annal import --project X file.jsonl reads it back. Safe data portability without touching the vector backend directly.

Bug fixes & hardening

  • XSS fix: Dashboard tag pills now use data-tag attributes + event delegation instead of inline onclick handlers
  • Thread safety: _tag_cache protected with threading.Lock; pool shutdown snapshots watchers under lock before iterating
  • 9x overfetch fixed: Removed store-level 3x multiplier that compounded with backend-level 3x
  • delete_memory: Now returns "not found" instead of silent success on missing IDs
  • Default search mode: Changed from full to summary — cheaper for agents that just need a quick scan
  • Dead code removed: json.loads fallbacks, json_mod alias
  • SSE hardening: Newline stripping prevents injection in event stream
  • Dashboard: Page param validation, watcher path warnings

Stats

212 tests passing, 11 files changed, +339 −63 lines.