Memory Vault v0.28.0-alpha.0.1 — Native TypeScript HTTP contacts

Native TypeScript open HTTP contact preview

Native TypeScript now runs an independent finite HTTP node and joins the explicit open contact profile through the existing Agent. It can publish and discover signed contacts across Python and TypeScript using the same identities, client configuration and protected transport SQLite format. DNS answers, pinned sockets, TLS hostnames, request deadlines and incoming resource limits are enforced by the native runtime.

This is a contact-discovery preview. Open messaging, first-contact consent, ciphertext leases and sender-offline repair remain pending under the full alpha.1 milestone. Routing kernels and maintenance budgets are unchanged. Previously published assets and private installations are preserved.

Source/tag: 0ddf0c5ac6aa8d12562c1df2a26ee25aeb851ed3. Normally merged in PR #33 as db8260ffa7bc8b585c454d9da7583a98b2981e8a; the merged tree is identical to this reviewed source/tag. Actual 6 Pro code, packaging and final CI evidence review passed with no remaining blockers in the reviewed scope. The reviewer independently ran 18 packaging/core methods; native integration evidence comes from the exact-source cloud run below.

Validation:

• Exact-source 99-method cloud regression and three-platform protocol CI passed. Full reports were downloaded: zero failures, errors or skips; every recorded source hash matches Git. Artifact 10046978942, ZIP SHA256 59b3d810026b08cbcad243aea5531953363f169a106144b927bcb0fb2b6552e4.
• Real HTTP acceptance uses seven synthetic mixed-language nodes plus one native client. It covers cold response-derived multihop lookup, original bootstrap exit, alternate-language endpoint/directory restart, TLS/DNS refusal, pending capacity and unchanged original Memory bytes/proofs. Child-process delegation is forbidden inside native drivers.
• The actual final client ZIP was extracted and verified: 56 modules, three synthetic canonical records, save/recall/Experience/idempotence/hooks and byte-preserving backup/restore; restored capture remains disabled. No private data, host installation or network was used by this separate package smoke.
• Four ZIPs contain 725 members, including 351 review sources. Every member was checked against the exact committed public source or validated generated manifest. SHA256SUMS covers seven payload assets; the eighth asset is the checksum file itself.

These are local synthetic and cloud-run process tests, not real models, cross-region operation or independent physical fault domains. No new 100-node scale experiment was run. Prior failed CI reports remain preserved; the final passing result does not relabel earlier failures.

Eight assets accompany this preview. Check release-manifest.json for exact source and asset digests. The network-test template retains the private profile and unconfigured service trust; it is not an open-message demonstration. Checksums are not publisher signatures. No automatic private migration or installation is performed.