Skip to content

v1.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Nov 21:47
· 14 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.7.0
2bbb050
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • d8a656e LLM-27: Content-Security-Policy for the admin, with templates compiled at build time (#397)
  • f51a54e LLM-583: close the open security alerts (6 Dependabot + ReDoS + timer overflow) (#310)
  • a7e9b87 LLM-584: an explicit 0 in config means 0, not the default (#315)
  • 774bb89 LLM-607: a one-way transfer is not a debt, in the dream ledger (#314)
  • 15c74e0 LLM-642: conversation retention in the app, with quota accounting and tombstones (#334)
  • 9ad4fab LLM-667: no server retry for salem wait=true ticks; Anthropic adapter request shape (#345)
  • 5fccdb4 LLM-668: dashboard stops sending superadmin-only saves for regular users (#346)
  • 486bf16 LLM-669: virtual agent that cannot reply now says so; API key made prominent (#347)
  • 0cab52d LLM-670: link another account by proving its password (#348)
  • 890eda8 LLM-671: wrong current password on change-password returns 400, not 401 (#349)
  • caba670 LLM-672: Anthropic provider supports Claude 5-generation models (#350)
  • 0312d12 LLM-673: deleting a virtual agent clears its LLM call log (#351)
  • f9c917b LLM-683: dream from notes when an account has no conversation logs (#354)
  • 08585d0 LLM-684: signup tells claude.ai users to paste a load-memory block (#355)
  • fcd710c LLM-687: chat/send accepts history_scope 'scene' for scene-scoped direct-chat history (#399)
  • d53b832 LLM-687: scene-scoped history only when the caller asks for it (#402)
  • 2f9792a LLM-695: the salem-magistrate VA — court framing, scene-scoped history, dream narration (#364)
  • 054cab4 LLM-729: connect page on /authorize for claude.ai users (#372)
  • b471241 LLM-731: drop the mcp_sessions purge from db-cleanup.sh (#384)
  • 678f3e8 LLM-731: serve /mcp on the v2 MCP SDK, stateless for both protocol eras (#383)
  • a293c6f LLM-732: signup guide opens on claude.ai; load-memory block right after the connector step (#375)
  • 3f24201 LLM-733: claude.ai connector with only the URL — CIMD/DCR public clients and a login on /authorize (#376)
  • 2590ab0 LLM-734: signup funnel — guide events, connection and tool-call stamps, admin view (#374)
  • fd9a898 LLM-735: open signup keeps the access-form code (#373)
  • bda0969 LLM-741: memory-api listens on 127.0.0.1 only (#377)
  • 0fab19a LLM-815: add Claude Haiku 5.5 to the Anthropic model registry (#385)
  • 01590a7 LLM-816: cache the replayed tool-loop history on Anthropic calls (#391)
  • 6eaef75 LLM-818: magistrate names who paid whom and affirms no family ties (MEM-153) (#390)
  • bd04472 LLM-819: replay the whole court hearing (500-row history cap for court agents) (#392)
  • 3cb3a85 LLM-820: run the VPS on Node 24 (Node 20 is end of life) (#393)
  • 858fada LLM-821: weekly staleness check mails pending upgrades and EOL warnings (#394)
  • fbe891d LLM-822: staleness check reports a pending reboot (#395)
  • 7660bab LLM-824: PostgreSQL survives a missing conf.d at boot (#396)
  • a5dd158 LLM-825: TLS certificate expiry in the weekly staleness check (#400)
  • 0a808f8 LLM-826: turn off systemd-resolved's LLMNR listener (#401)
  • 5e2f73b LLM-829: Memories view loads every tree and every share in one request each (#398)
  • 6ee9a69 LLM-843: narrate the noticed_omen action row in the dream distiller (#410)
  • 529a5c6 LLM-871: add gpt-6.1-sol, gpt-6.1-terra and gpt-6-luna to the OpenAI provider (#403)
  • 0b12225 LLM-874: dashboard stops running the chat and system-message queries (#409)
  • 0c27d60 LLM-891: staleness check reads apt lines that end with the broken-packages list (#411)
  • 1141683 LLM-900: the dream remembers a ward put up at home (#412)
  • 92f9d8f LLM-903: Go server base (module, config, pool, logging, auth, permissions, /health) (#417)
  • b567c7d LLM-904: build the Go server and the admin UI in CI; deploy the per-commit build (#418)
  • a2498aa LLM-906: make the LLM provider and embedding API base URLs configurable (#420)
  • e385437 LLM-907: override @hono/node-server to ^2.1.3 (GHSA-rmxm-3fg6-px4f) (#419)
  • 2eb8822 LLM-908: re-baseline migrations from a prod schema dump plus a seed (#422)
  • a5fe188 LLM-909: contract harness (Node vs Go: responses, rows, provider calls) (#424)
  • f0c0c88 LLM-910: refresh sfw as root before the app_user npm install (#421)
  • 1aaed3d LLM-912: pg_hba template names the salem database and login (#423)
  • 0bc5352 LLM-914: track Go updates (govulncheck in CI, Dependabot for go/server, go/client off Go 1.22) (#425)
  • 6ad68dd LLM-915: pgx 5.12.0 in go/server, with pgxmock v6 for the tests (#428)
  • c11289c LLM-916: Dependabot auto-merge uses a GitHub App token so its merges run main CI (#432)
  • 6b1651b LLM-917: Go search pipeline and the /v1/memory routes (#429)
  • 4aad087 LLM-918: ingest/status without a namespace: own namespace, wildcard reader (#456)
  • 8c3e8d7 LLM-919: serialize concurrent ingests of one source file (Node and Go) (#466)
  • c835d25 LLM-920: Go notes service and /v1/documents save, list, read, delete, restore, edit, move (#430)
  • 21342d0 LLM-921: Go grep with JavaScript regex semantics (jsregex) (#431)
  • 28c7af5 LLM-923: weekly check for version pins Dependabot does not watch (#433)
  • 4e88ac3 LLM-924: Go mail service and the eight /v1/mail routes (#434)
  • 565b270 LLM-927: Go chat service and the four /v1/chat routes (#436)
  • 9bf4eb3 LLM-928: Go LLM provider adapters (internal/providers) (#435)
  • 0063bb5 LLM-929: Go OAuth and registration routes (#437)
  • a26df57 LLM-930: provider fixes in Node and Go (flex on /v1/responses, responses tool pairing, Gemini thinking tokens) (#465)
  • 193fa13 LLM-931: registration re-checks the namespace under a documents lock (Node and Go) (#473)
  • fd9ad21 LLM-932: contract settle waits for busy database connections; fsync off in CI (#438)
  • e063e4b LLM-933: Go virtual-agent core and invokeAgent (step 8b, PR 1 of 3) (#440)
  • 91bac3b LLM-933: Go virtual-agent direct chat (step 8b, PR 3 of 3) (#447)
  • 8c54d5b LLM-933: Go virtual-agent direct mail (step 8b, PR 2 of 3) (#444)
  • be0c0a6 LLM-934: Go /v1/agent routes (all but memory-sync, tick, rate-limit) (#439)
  • c506c9f LLM-934: Go /v1/agent/memory/sync (#441)
  • 1463cbc LLM-934: Go /v1/agent/tick and /v1/agent/rate-limit (#448)
  • 8466817 LLM-936: Go /v1/discussion routes (PR 1 of 2) (#443)
  • 4912b54 LLM-936: Go discussion service functions (PR 2 of 2) (#446)
  • be40110 LLM-937: Go cleanup job, node-cron schedule port, stale-activity sweep (step 9a, PR 1 of 2) (#442)
  • 9b57801 LLM-937: Go staleness check, memory-api staleness-check (step 9a, PR 2 of 2) (#445)
  • 5843188 LLM-938: drop chk_discussion_participants_status so discussion defer works (#451)
  • 33bb8fe LLM-939: Go /mcp chat, mail, agent and activity tools (step 5, PR 2 of 3) (#461)
  • df6d939 LLM-939: Go /mcp discussion and vote tools (step 5, PR 3 of 3) (#463)
  • 6f84105 LLM-939: Go /mcp endpoint, protocol layer and note tools (step 5, PR 1 of 3) (#454)
  • 52c77f0 LLM-940: Go /admin/notes/move-prefix (step 10B, PR 3) (#464)
  • 50669e4 LLM-940: Go admin content routes: notes, shares, comms, logs, dashboard, funnel (step 10B, PR 2) (#458)
  • 5707963 LLM-940: Go admin live events, the /admin/ws WebSocket (step 10B, PR 1) (#450)
  • 91c18a3 LLM-941: Go admin actor routes and virtual-agent access (step 10A, PR 2) (#457)
  • 22dde64 LLM-941: Go admin actors/create and agents routes (step 10A, PR 3) (#468)
  • e73f83d LLM-941: Go admin router mount, account routes, config, providers, /v1/auth/verify (step 10A, PR 1) (#449)
  • 5c42e24 LLM-941: Go admin templates, access requests and invite codes (step 10A, PR 4) (#469)
  • 55cc1cc LLM-942: Go virtual agents in discussions (step 8d) (#453)
  • bd38204 LLM-943: Go dream job (step 9b) (#452)
  • b4f82a7 LLM-945: admin actor delete clears every row that points at the actor's discussions (Node and Go) (#476)
  • a40b00b LLM-946: Go /v1/sim routes (step 6b) (#455)
  • dad7e31 LLM-947: PostgreSQL tuning conf.d file and pg_stat_statements (#479)
  • 4651ee5 LLM-948: ack every VA tool-result delivery, sim chat retention, stop storing tools_offered (#459)
  • 6a70e07 LLM-948: ack persist_only tool-result deliveries on insert (#460)
  • 67de40b LLM-948b: drop chat_message_texts.tools_offered (#470)
  • afe3fe7 LLM-949: split the contract suite into 4 shard jobs (#462)
  • 23c515e LLM-950: Go port of note enrichment (#467)
  • be3a02d LLM-951: admin routes check what the caller may see (Node and Go) (#474)
  • 9d2e5f0 LLM-952: discussion join writes its chat rows in a fixed order (Node and Go) (#471)
  • a36722a LLM-953: admin routes run their checks and writes on a detached context (#472)
  • dc5f325 LLM-954: MCP tool-call stamp is written before the tool runs (Node and Go) (#478)
  • 2c355ce LLM-955: admin actor create claims the namespace under the documents lock (Node and Go) (#475)
  • a52439d LLM-956: /v1 session lookup outlives a client hang-up; drop the redundant admin detach (#477)
  • 90cb734 LLM-957: memory_api_backend switches production between Node and Go (default node, no-op) (#481)
  • 38a6705 LLM-957: switch production to the Go server (memory_api_backend: go) (#485)
  • 25dab96 LLM-958: Go port of /admin/dream/consolidate-people; fix the Node listing bug (#482)
  • 4a70366 LLM-959: Go port of POST /v1/system/error/report (#480)
  • b03490a LLM-960: Go port of POST /api/access-request (#483)
  • 2ceb900 LLM-961: settle the background last_seen writes before the admin dashboard read (#484)
  • 2cb32f9 LLM-972: remove the Node server code and the Contract harness (#489)
  • 5f7de3d LLM-972: the deploy installs only the Go server (#488)
  • 0efa657 LLM-973: memory-api create-user subcommand replaces scripts/create-user.js (#486)
  • f4695ca LLM-974: TestVerify uses the fixed test clock for its session (#487)
  • a9088cd LLM-976: deploy by release tag; verify build provenance with cosign before installing (#491)
  • 2bbb050 LLM-976: separate release lines: server-v* for the server, v* for the client tools (#493)
  • 777cbdb LLM-976: v* releases ship the server and admin UI; build provenance attestations (#490)
  • 80b1a01 MEM-146: soul writer keeps what an open matter taught, not the matter (#362)
  • a204186 MEM-147: dream-sim snapshot states an open matter once, as what happened (#363)
  • 26a0d84 build(deps): bump @modelcontextprotocol/node in /node/api (#408)
  • 34c7f30 build(deps): bump @modelcontextprotocol/sdk in /node/api (#358)
  • ef94017 build(deps): bump @modelcontextprotocol/sdk in /node/api (#369)
  • f491055 build(deps): bump @modelcontextprotocol/server in /node/api (#406)
  • 0442299 build(deps): bump actions/setup-go from 6 to 7 (#291)
  • dca409a build(deps): bump dompurify from 3.4.12 to 3.4.13 in /node/api (#320)
  • e458c2c build(deps): bump dompurify from 3.4.13 to 3.4.14 in /node/api (#329)
  • 5148232 build(deps): bump dompurify from 3.4.14 to 3.4.15 in /node/api (#342)
  • e9e0f1e build(deps): bump dompurify from 3.4.15 to 3.4.16 in /node/api (#359)
  • 05cd431 build(deps): bump dompurify from 3.4.16 to 3.4.17 in /node/api (#389)
  • 5f8ee7b build(deps): bump express from 5.2.1 to 5.3.0 in /node/api (#378)
  • 0f016e1 build(deps): bump fast-uri (#335)
  • 022556c build(deps): bump github.com/jackc/pgx/v5 in /go/server (#426)
  • 28a7250 build(deps): bump golang.org/x/text from 0.41.0 to 0.43.0 in /go/server (#427)
  • f63b45a build(deps): bump hono (#352)
  • 774c8c4 build(deps): bump ip-address (#311)
  • 8c5f4db build(deps): bump ip-address (#353)
  • 51ad841 build(deps): bump katex (#382)
  • b14d6c9 build(deps): bump lucide-static from 1.27.0 to 1.28.0 in /node/api (#313)
  • 4aa6eac build(deps): bump lucide-static from 1.28.0 to 1.30.0 in /node/api (#317)
  • d9bce7c build(deps): bump lucide-static from 1.30.0 to 1.31.0 in /node/api (#324)
  • 33e88ed build(deps): bump lucide-static from 1.31.0 to 1.33.0 in /node/api (#326)
  • 258a7de build(deps): bump lucide-static from 1.33.0 to 1.37.0 in /node/api (#331)
  • fe55073 build(deps): bump lucide-static from 1.37.0 to 1.41.0 in /node/api (#336)
  • 8715911 build(deps): bump lucide-static from 1.41.0 to 1.45.0 in /node/api (#338)
  • cdfd1fe build(deps): bump lucide-static from 1.45.0 to 1.47.0 in /node/api (#344)
  • ca38b6d build(deps): bump lucide-static from 1.47.0 to 1.48.0 in /node/api (#357)
  • 78d61cb build(deps): bump lucide-static from 1.48.0 to 1.51.0 in /node/api (#366)
  • 404fba3 build(deps): bump lucide-static from 1.51.0 to 1.55.0 in /node/api (#379)
  • 83b7702 build(deps): bump lucide-static from 1.55.0 to 1.59.0 in /node/api (#387)
  • 40ebaba build(deps): bump lucide-static from 1.59.0 to 1.61.0 in /node/api (#407)
  • 5015fc5 build(deps): bump lucide-static from 1.61.0 to 1.66.0 in /node/api (#413)
  • 80a1130 build(deps): bump marked from 18.0.10 to 18.0.11 in /node/api (#330)
  • 6308431 build(deps): bump marked from 18.0.11 to 18.0.13 in /node/api (#339)
  • 1453300 build(deps): bump marked from 18.0.13 to 18.0.14 in /node/api (#360)
  • de25d0f build(deps): bump marked from 18.0.14 to 18.1.0 in /node/api (#380)
  • 3716a0b build(deps): bump marked from 18.0.7 to 18.0.9 in /node/api (#323)
  • fefa353 build(deps): bump marked from 18.0.9 to 18.0.10 in /node/api (#327)
  • c9eb0db build(deps): bump marked from 18.1.0 to 18.1.1 in /node/api (#386)
  • fc52657 build(deps): bump marked from 18.1.1 to 18.1.2 in /node/api (#415)
  • 780f3ad build(deps): bump mermaid from 11.16.1 to 11.17.0 in /node/api (#325)
  • 1aff03c build(deps): bump mermaid from 11.17.0 to 11.17.2 in /node/api (#333)
  • cf0e7eb build(deps): bump pg from 8.22.0 to 8.23.0 in /node/api (#318)
  • 03d3041 build(deps): bump pg from 8.23.0 to 8.23.1 in /node/api (#368)
  • ea6b755 build(deps): bump qs (#337)
  • 011f338 build(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#316)
  • 858004a build(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#416)
  • 833e6d5 build(deps): bump the npm_and_yarn group across 1 directory with 3 updates (#371)
  • f17cff4 build(deps): bump vue from 3.5.40 to 3.5.41 in /node/api (#321)
  • 5920c39 build(deps): bump vue from 3.5.41 to 3.5.42 in /node/api (#332)
  • 4ab8199 build(deps): bump vue from 3.5.42 to 3.5.43 in /node/api (#343)
  • d437852 build(deps): bump vue from 3.5.43 to 3.5.44 in /node/api (#388)
  • b99a5ae build(deps): bump ws from 8.21.1 to 8.21.3 in /node/api (#322)
  • ed47580 build(deps): bump ws from 8.21.3 to 8.22.0 in /node/api (#361)
  • 26b9ef7 build(deps): bump ws from 8.22.0 to 8.22.1 in /node/api (#414)
  • a44cc2b build(deps-dev): bump @modelcontextprotocol/client in /node/api (#405)
  • e615dee build(deps-dev): bump vite from 8.1.5 to 8.2.0 in /node/api (#312)
  • ec80c7b build(deps-dev): bump vite from 8.2.0 to 8.2.1 in /node/api (#319)
  • 7d8f309 build(deps-dev): bump vite from 8.2.1 to 8.2.2 in /node/api (#328)
  • fa2c6e4 build(deps-dev): bump vite from 8.2.2 to 8.3.0 in /node/api (#341)
  • e22f372 build(deps-dev): bump vite from 8.3.0 to 8.3.1 in /node/api (#356)
  • 90a5a3b build(deps-dev): bump vite from 8.3.1 to 8.3.2 in /node/api (#365)
  • 36eb2fb build(deps-dev): bump vite from 8.3.2 to 8.3.4 in /node/api (#381)
  • 39eabaf build(deps-dev): bump vite from 8.3.4 to 8.3.5 in /node/api (#404)
Assets 22
Loading