Skip to content

v1.0.15

Choose a tag to compare

@github-actions github-actions released this 15 Oct 04:24
82e41ed

Respire CLI 1.0.15

Stable release.

Changes since v1.0.12.

Features

  • feat(sdk): gate bounded model streaming behind an explicit SDK contract (240db145)
  • feat(cli): add `rsrs extract` to import coding-agent sessions into memory — Extract the process data 26 local coding agents already save (Codex, OpenCode, Claude Code, senpi, oh-my-pi, gajae-code, openclaw, droid, amp, gemini, kimi, qwen, codebuff, roo/kilo-code, cline, kodu, cursor-cli, aider, kilo-cli, hermes, goose, crush, zed, kiro, aside) and convert it into encrypted rsrs memories. Extract is a raw ingester: it writes roots; organizing is left to an AI tidy pass. (78eefb94)
  • feat(npm): add short rsrs install entry — Forward to the exact scoped CLI version so native package validation and arguments retain existing behavior. Build separately and publish after the matching scoped package; preserve the original install entry. (26f853a8)

Fixes

  • fix(npm): bound actual resolver propagation [manual-release] — fix(npm): wait for actual resolver propagation during clean install (b9d277eb)
  • fix(npm): bound clean-install retries for fresh release indexes — DEV12 proved the HTTP install-index guard can pass before npm resolves the same pinned release. Force npm freshness and retry only structured ETARGET for the exact six source-bound package versions, twice at most within the shared ten-minute install deadline. Revalidate the active source before each attempt and preserve failures without replaying publication. (139f5bb6)
  • fix(npm): bound alias propagation and verify offline failure paths [manual-release] — Give the alias the same thirty-minute wait as scoped packages and extend publisher/receipt observers to cover both waits plus a clean install. Respect npm abbreviated metadata optional SHA512 without weakening exact metadata or downloaded-tarball integrity checks. (997da889)
  • fix(npm): forward propagation budget through publisher and parent waits [manual-release] — Address AI review findings: the scoped worker discarded timeout options, the scoped install-index verification still capped at fifteen minutes, and null dependency maps were accepted. Forward publication options, share thirty-minute verification budget, reject malformed present maps, and extend matching alias job/receipt waits without changing identities or permissions. (9b2d650a)
  • fix(npm): wait for matching install index before clean install [manual-release] — dev.11 exposed accepted scoped publication exceeding ten minutes and ETARGET after exact metadata became visible. Verify abbreviated install-index identity, digest, URL and dependencies; wait up to thirty minutes for scoped propagation while preserving single submission and fail-closed errors. (21c6a6ec)
  • fix(revision): preserve read-only polling on current TCP runtime (206dca52)
  • fix(diary): validate authors with compatible local profile identity (5186c544)
  • fix(diary): resolve daily tracks by stable identity (98b470c4)
  • fix(login): clarify HTTPS origin and restore blank fallback [manual-release] (#105) (6095ff34)
  • fix(release): resume verified dev.6 publication [manual-release] (#106) — * [manual-release] Bound publication metadata subprocess output (d69de692)
  • fix(release): normalize staged notice permissions [manual-release] (#104) (f0002c41)
  • fix(core-sdk): identify recovery for custom CPU model files (229bdb56)
  • fix(dev): preserve diagnostics without a data directory override (d6f65d88)
  • fix(dev): share validated CPU container across synthetic profiles (5339e4f8)
  • fix(session-import): preserve unsynced edits during refresh (9869901b)
  • fix(session-import): scrub secrets and retain WAL updates and sync notifications (a34e4316)
  • fix(session-import): keep the sync notification when the import cursor write fails — When a chunk's on_commit callback fails (e.g. the cursor file cannot be written), the already-committed rows were left without the closing auto_sync(). Notify sync for those chunks before returning the callback error, matching the success path. (cea20653)
  • fix(session-import): embed outside the write transaction and commit in chunks — Two-phase import: seal every session first with no database lock held, then write in committed chunks, so the SQLite write lock is never held across embedding and other writers can interleave. import_entries now returns per-entry completion so callers advance the cursor only for written entries; the cursor is persisted per chunk, so a failure resumes near where it stopped, and deleted rows are skipped. The cursor temporary file gets a per-save id and is removed when the rename fails. (f2067dc7)
  • fix(session-import): address second maintainer review — Redaction: accept quoted/JSON keys and --flag<value> forms; scrub the title and JSON preview before truncating and scrub path/cwd. Re-import: keep the tidy parent and edited title, skip deleted rows, and stop bypassing the LWW guard via --force. --tui: reject extraction options and --json instead of silently ignoring them. Claude: restore the content fallback in prompt_text and use it for subagent tasks. MCP: document the batch write + auto-sync, reject a negative limit, and require confirm. CI/config: RUST_MIN_STACK 16MB and revert the repo-wide docstring gate. Cursor/date: re-import once a stamp appears, pid-scoped temp file, strict date_bound. (2513c6d5)
  • fix(session-import): fall back to created_at when updated_at is unparseable — ScanOptions::matches now parses updated_at first and only falls back to created_at when updated_at is missing or invalid, so an undated-looking session with a valid created_at is still in range. (fc813d13)
  • fix(session-import): address CodeRabbit follow-up — - ScanOptions::matches: when --since/--until is set, drop sessions with no usable timestamp (they were admitted and could import outside the range). (d7ca116a)
  • fix(session-import): address maintainer review — - scrub: only mask when a secret keyword is adjacent to =/:/: (so token-stats and timestamps are not truncated); add full-width colon + Chinese keywords, Bearer-without-separator, and github_pat_/glpat-/xoxa-/eyJ prefixes; strict -----BEGIN…PRIVATE KEY----- detection; scrub before truncation; scrub the derived title and JSON previews. (3cd86ae0)
  • fix(session-import): address review (cursor atomicity, input validation, scrub, tool_result, perf, no-unwrap tests) — - cursor: atomic temp+rename save; TUI surfaces save failure via Work::Failed (5f29108a)
  • fix: retain provider diagnostics in isolated worker health (61eaf2af)
  • fix: supervise native Core work in a shared child process (c874a896)
  • fix(bench): evaluate pending sources through resident retrieval [manual-release] — * fix(bench): evaluate pending sources through resident retrieval [manual-release] (a8eff24e)
  • fix(release): cumulative stable-baseline notes and diagnostics [manual-release] — * ci: retain resident stress metrics on validation failure [manual-release] (c67b41c3)
  • fix(recall): keep resident retrieval responsive during background indexing [manual-release] — Pin the verified dual-session Core SDK and retain immutable retrieval views with incremental source/artifact refresh. Queue foreground and background inference independently; commit ordinary writes under a short host gate and SQLite source check, then fill missing indexes in the background. Preserve concurrent readers, stale-source rejection and atomic diary merging. (e98646e1)
  • fix(release): wait for npm dependency propagation [manual-release] — The DEV4 Release completed successfully before its scoped npm version became visible, causing the automatic primary-entry publisher to fail with HTTP 404. Wait up to five minutes only for that confirmed propagation condition; retain HTTP failures, exact version, receipt digests and Release identity checks. (1db255e2)
  • fix(recall): keep indexed memories available during background sync [manual-release] — * fix(recall): retain indexed candidates during background sync [manual-release] (6e81fb38)
  • fix(release): normalize npm12 primary-entry receipts [manual-release] — npm 12 pack --json returns an object keyed by package name, while older npm returns an array. The primary-entry workflow assumed an array, so its first DEV publish succeeded but an identical repeat would fail during digest comparison. (2c09292b)
  • fix(release): automatically publish primary npm entry [manual-release] — DEV publication omitted rsrs-cli, the primary public npm install entry, because its trusted-publisher workflow was manual and accepted only stable versions. After each completed Release, automatically publish the exact receipt version with dev for DEV and latest for stable releases. (3387e628)
  • fix(sync): prevent SQLite snapshot promotion failures [manual-release] — fix(sync): prevent SQLite snapshot promotion failures (5ed9923d)
  • fix(release): reject full regression with legacy evidence reuse — Fail at the initial reuse check instead of waiting for skipped regression jobs. Full acceptance publication always requires fresh tests from the current run. (2289a2fd)
  • fix(release): allow full DEV acceptance before publication — Add an explicit manual DEV regression gate using the existing stable checks. A main merge marked [manual-release] keeps source CI enabled and suppresses automatic DEV allocation, so the exact merged source can build, pass full regression and publish once. (a358db52)
  • fix(sync): reserve SQLite writes before conflict snapshot reads — Use immediate transactions for conflict classification, explicit resolution and received-state materialization. This prevents SQLITE_BUSY_SNAPSHOT when another connection commits between reads and the first write, while retaining atomic rollback and existing sync guards. (498b0c29)
  • fix(release): accept the single npm12 version result — npm 12 returns a one-item array for the exact public version. Preserve the strict matching dependency gate while accepting that supported output shape so rsrs-cli 1.0.12 can publish. (c9b029f0)

Other changes

  • Release CLI 1.0.15 [manual-release] — Promote the validated DEV14 product source to stable1.0.15 by aligning only CLI release metadata. Exact candidate CI and full AI review passed. The stable tag retains all native, cloud, API and public-install publication gates. (82e41ed1)
  • Prepare CLI 1.0.15 stable release metadata — Align the CLI package, lockfile and npm artifact manifest with the approved 1.0.15 stable tag. Keep the product code and SDK pins identical to validated DEV14; stable publication still requires the full native, cloud, API and public-install gates. (aae4512a)
  • Merge PR #109: stream CPU model input [manual-release] — Reduce default CPU model initialization memory with bounded input streaming and SDK 10. Preserve host integrity checks, legacy modes and cleanup; final CI, four-platform product-code checks and full AI review passed. Shared OVH results are reference data and show no consistent warm RSS reduction. (07540ca0)
  • Clarify successful stream response validation scope (5439416c)
  • Validate model stream response identity before accepting results — Reuse the existing schema and request ID validation for all upload operations. Contract 1 uses an empty JSON request ID and ABI tickets/offsets; document exact SDK pin requirements. (795e9396)
  • Enable bounded CPU model streaming with the verified SDK 10 release — Pin all seven SDK targets to the independently checked source d2ea2f7 and enable the stream contract for the default CPU-owned ORT path. Preserve legacy profiling/GPU/NPU behavior. Shared OVH ABBA shows exact output equality and about 437–447 MiB lower startup RSS with throughput/p95 within 1%; warm RSS is not reduced. Follow provenance and measurements in Core acceptance run 38590194021. (ae18c87d)
  • Preserve the original streaming candidate ancestry after porting to main — Merge the already-applied Draft 109 source without changing its resulting tree so the existing PR can advance without force-pushing. (dcb99db8)
  • Port bounded model input streaming onto current CLI main — Reuse the reviewed Draft 109 upload guard and host-side length/digest checks while preserving current resident and index-status behavior. Streaming stays opt-in until the matching SDK and fresh performance acceptance pass; failures are diagnosable at the model-input boundary. (52b7df29)
  • Merge PR #114: wait for npm install-index propagation [manual-release] — Published dev.11 exposed two failures: an accepted scoped publication exceeded its ten-minute visibility wait; the short entry then passed exact-version metadata/tarball checks while the install index still lacked that version, causing a fresh-cache ETARGET. (17482f5a)
  • Merge PR #113: bounded index readiness and memory copies [manual-release] — Ship the reviewed dispatcher and memory improvements together in one explicitly dispatched DEV release. Preserve total worker deadlines and error precedence; warm model memory is unchanged. (b771ebbf)
  • Merge PR #112: wake runtime dispatcher [manual-release] — Preserve reviewed dispatcher wakeups and combine with the memory candidate in one explicitly dispatched DEV release. (9bdd8e85)
  • perf: bound index status payloads and transient catalog copies [manual-release] — Validate native index readiness in 128-item or 4MiB batches inside one worker deadline. Preserve later host error precedence and never replay native failures; stream executable SHA256 and attach artifacts without duplicating full ciphertext catalogs. (6585960b)
  • perf: wake runtime dispatcher when read slots become available (85ab57c0)
  • Merge pull request #14: add read-only memory revision [manual-release] — Add read-only memory revision contract for Client refresh (4549184e)
  • Merge pull request #60: verify safe auth salt migration [manual-release] — Test real OneMemory authentication salt migration and fresh CLI login (4996a11d)
  • Merge pull request #97: validate redaction reporters [manual-release] — Test credential redaction in both DEV failure reporters (a398d024)
  • test: gate full releases on migrated v2 memory writes [manual-release] (c2de065c)
  • test: isolate TTY fixtures and preserve native profile imports [manual-release] (35cc09ea)
  • test: secure legacy authentication fixtures with hidden Linux TTY input [manual-release] (e9a02c44)
  • test: preserve complete OS failure diagnostics (4e477f89)
  • test: assert owned runtime stop command in DEV failure reporters (eecfa76e)
  • Merge pull request #108: reduce runtime memory copies [manual-release] — perf(resident): release empty catalog buffers [manual-release] (af20f9ff)
  • test(dev-api): assert excluded cancellation route identity [manual-release] (5dd1fc43)
  • [manual-release] integrate conservative memory SDK dev.9 and reviewed DEV API contract — Keep SDK source3be310e provenance; additional238b tests and seven-platform build are separate evidence. Preserve current DEV8 main and the66-route CLI baseline. Exclude streaming and allocator experiments. (99a63711)
  • [manual-release] fix(ci): align reviewed DEV API vault contract (#111) — [manual-release] test(dev-api): review deployed vault generation contract (f1eb9645)
  • docs(test): explain reviewed API contract assertions — Document touched functions after the AI docstring coverage warning. Executable AST is unchanged after stripping docstrings; all 16 Python regressions still pass. (f95f21a5)
  • test(dev-api): review vault generation contract for server 7f0b107 — Preserve the 66 baseline routes and enforce their fingerprint. Exercise stable vault identity, generation changes, idempotency, same-URK rewrap, and rejected-write atomicity. Explicitly distinguish separate browser and Passkey coverage. Keep all source/environment/approval guards strict. (648b17de)
  • test(remember): assert exact pending merge candidate [manual-release] (8846f8e2)
  • test(resident): integrate dev8 baseline and verify retained-reader cleanup [manual-release] (97c0a1ed)
  • [manual-release] fix(diary): preserve daily identity after title edits (#110) — fix(diary): preserve daily identity after title edits (10546b8d)
  • perf(resident): release empty catalog buffers [manual-release] (bcf6ce17)
  • perf(release): overlap platform publication verification [manual-release] (#107) (d4a03a54)
  • chore(core-sdk): integrate dev.8 memory SDK [manual-release] (#103) (028d0a86)
  • ci: gate release completion on verified short npm package [manual-release] — * Gate release completion on verified short npm entry (c5748064)
  • perf(core-sdk): release payload before synchronous FFI [manual-release] (bd7aaaf9)
  • ci: retain Actions artifacts for one day [manual-release] — * ci: retain Actions artifacts for one day (e948b4e9)
  • [manual-release] Synchronize resident overlap regression (#99) — Keep the original 101-request workload and every release gate. Add bounded real foreground probes, require same-heartbeat active-lane overlap, preserve deadline/error/cleanup guarantees, and retain complete diagnostics. (9800a7d2)
  • [manual-release] Use TCP-only RPC and verified CPU model mirrors (#98) — Remove legacy Unix-domain and Windows named-pipe RPC listeners, clients, fallback probes, framing and interprocess dependencies. Preserve loopback HTTP authorization, Core worker anonymous stdin/stdout, and existing SQLite ownership. Acquire library ownership before readiness and retain installation ownership across active profiles and ports. (ae8b9412)
  • test(dev): verify both CLI failure reporters redact credentials (b7af6d82)
  • [manual-release] Fix DEV migration fixtures for shared CPU containers (#96) — The CPU container is installed in the installing profile's owned cache, while migration fixtures share an explicit ONNX/tokenizer directory across distinct data directories. Subsequent profiles cannot find the new default CPU container: the first direct remember fails before migration with os error 2. The same failure was reproduced on TB16P with the exact e00a3c4 release artifact; sharing the SHA-256/size-verified container made the same synthetic account's first write succeed. (77749d49)
  • [manual-release] Integrate extract and shared CPU model memory improvements (#95) — [manual-release] Integrate extract with default CPU memory optimization (e00a3c4b)
  • Qualify the transport count used by CPU preparation (571fcb44)
  • Keep empty-library runtime startup free of model downloads (f6143b28)
  • Keep the thin SDK package inventory explicit and diagnostic (ea3535b3)
  • Pin the final seven-platform CPU SDK and version its binding (af81c133)
  • Integrate reviewed extract PR91 with default CPU memory candidate (c246bbf5)
  • Verify CPU readiness and share mode selection with preparation (5056112a)
  • Prepare pinned CPU ORT model and enable shared CPU runtime (0175f0c3)
  • Recover Host model cache after failed session replacement (2ddffb87)
  • Borrow Core ABI requests and move validated response results (9ccaa29c)
  • Move isolated worker frames and serialize borrowed payloads (9920ee5f)
  • docs: add bilingual CLI/runtime contribution templates (#94) — Add project-specific issue forms, PR template and contribution guide. Template and Markdown-only paths are excluded by the existing Release workflow. Existing CLI CI check passed; manual-only native/model jobs were skipped. (fc71e37f)
  • [manual-release] Merge PR92: bound native fixture inspection and sampling — Bound native regression waits and preserve Windows hang diagnostics (365745e7)
  • Reduce continuous fixture sampler overhead and record phase timings (827645bb)
  • ci: give the test process more stack; exclude extract_tui from coverage — - RUST_MIN_STACK=32MB for the check job: clap builds the whole command tree on the test thread, and the CLI enums need the same headroom that main() already gives its worker thread (the bench capture test overflowed under llvm-cov). (dec1bb40)
  • chore(review): disable CodeRabbit docstring-coverage gate; document public session_import API — The repo already disables the docstring finishing touch; the pre-merge docstring check was left at its 80% default. Set reviews.pre_merge_checks.docstrings.mode: off and add English docstrings to the module's public surface (platform definitions, FnScanner, SqlVal accessors). (9fe60819)
  • Observe concurrent health independently and pin fixed Windows inspection source (e70274d1)
  • Persist native fixture failures before cleanup and fail on reap errors (a7cf2611)
  • Merge remote-tracking branch 'origin/main' into feat/rsrs-extract — # Conflicts: # crates/app/src/lib.rs (c86fd144)
  • Bound native regression inspection and retain hang diagnostics (a607b651)
  • [manual-release] Merge PR90: supervise native inference and async runtime waiters — fix: keep concurrent runtime responsive and recover native inference (d9a4673b)
  • Verify supervised worker ownership throughout native upgrade regressions (1e2f9834)
  • Retain worker ownership on cleanup failures and fence host callbacks (486d0401)
  • test: reject native fixtures through the Clap version gate (a17e5ce6)
  • Prepare sync snapshots on the existing sync worker (61aee00d)
  • Keep socket backpressure outside command scheduling and expose uncertain outcomes (e71a941a)
  • Allow RPC callers to expire requests before execution (966875b6)
  • Avoid transport waiter threads and expire queued runtime commands (efb28343)
  • Merge pull request #89 from risense-ai/fix/performance-model-fixture-path-20261010 — Correct model preparation for matched benchmark (eee4c9b3)
  • Use hash-verified pinned M3 assets at the actual ONNX path — The first benchmark stopped before measurements because model installation does not populate the override directory. Download the fixed revision directly and validate onnx/model_quantized.onnx and tokenizer.json. Log synthetic seeding progress without vault secrets. (fe62a9e2)
  • Merge pull request #88 from risense-ai/fix/published-performance-comparison-20261010 — Add matched published-binary performance comparison (dc1a79de)
  • Benchmark published stable and dev binaries on matched CPU fixtures — Compare Recall and show latency, successful throughput, failures and runtime memory at 1/4/16 concurrency. Use immutable release metadata and hash-verified M3 assets; keep all fixtures in CI-owned directories and preserve raw samples. (b4349961)
  • Publish the primary DEV entry after verified publication (#87) — Allow manual recovery while independent regressions still run. Keep successful plan and publish jobs, exact npm receipt integrity, and public-release checks required. (68c44cf4)
  • Limit CLI releases to four mainstream targets [manual-release] — Remove Linux ARM64 and Windows ARM64 from build, regression, package manifests and launcher routing. Keep Windows x64, Linux x64 GNU/musl and macOS ARM64. Match publication gates to four native regressions and twelve verified assets while retaining three-system and API acceptance. Historical releases and the Core SDK compatibility contract remain intact. (6b1debc7)
  • test(runtime): await derived index before strict offline doctor [manual-release] — Asynchronous remember persists before its index is ready. The owned runtime fixture stopped its worker immediately after session recovery, making offline doctor correctly fail the model index check. Recall the persisted source and await healthy worker completion before stopping it. Retain model index and runtime version statuses in failure reports. Production code and doctor failure handling are unchanged. (f8ff324f)
  • Keep recall responsive with resident indexes and dual inference sessions [manual-release] (#82) — fix(recall): resident retrieval, independent inference sessions and short writes (e8bfb760)
  • Add inference and Recall benchmark with explicit global progress [manual-release] — Separate SDK-reported probe time from complete RPC timings and show first-call, repeated-call and percentile results. Stop subsequent rounds when leaving the form, and report index changes and empty-candidate limitations. (634cbbe6)
  • Merge pull request #73 from risense-ai/fix/release-plan-metadata-20261009 — fix(release): resume exact DEV publication with independent regressions (56d6b88c)
  • Reserve DEV allocator changes for explicit release dispatch — Keep release orchestration updates from starting an unrelated automatically numbered DEV build before the requested 1.0.13-dev.2 run. (4ddf3dc0)
  • Fix explicitly requested DEV version and restore independent regressions — Permit 1.0.13-dev.N from the published 1.0.12 source while retaining tag, npm and draft ownership checks. DEV waits for exact-source CI and build/package gates; stable still waits for all native, cloud and API regressions. Historical metadata projections prevent ENOBUFS during planning. (77241da8)
  • Merge published 1.0.12 baseline into DEV release recovery (ac4e16e7)
  • Merge pull request #75 from risense-ai/fix/prompt-alias-npm12-20261009 — fix(release): unblock rsrs-cli 1.0.12 with npm12 version output (a6d3664c)
  • Merge pull request #74 from risense-ai/fix/prompt-hotfix-source-ci-20261009 — fix: restore mandatory prompt gates and publish the planned 1.0.12 (c606a2b6)
  • Merge current main prompt fixes into exact DEV release recovery (168e510c)
  • Project release planning metadata before buffering GitHub responses — The exact DEV recovery plan exceeded the child-process output limit when full historical release assets were buffered. Query only the requested draft fields and active run IDs, preserving ownership, empty-draft and completed-run checks. (340a7a6a)
  • Merge pull request #72 from risense-ai/fix/prompt-workbuddy-reference-20261009 — fix: preserve WorkBuddy policy reference and prepare 1.0.14 (4dfc4c39)
  • Allow an exact DEV version and resume empty unpublished drafts (#71) — * Allow explicitly requested DEV versions after unpublished candidate failures (54f8dedb)
  • Merge pull request #70 from risense-ai/fix/prompt-hard-constraints-policy-claim-20261009 — fix: retain prompt hard gates and prepare validated 1.0.13 (354609cd)
  • Merge pull request #69 from risense-ai/fix/prompt-hard-constraints-20261009 — Restore mandatory prompt constraints and preserve them for 1.0.12 (7f00026c)
  • Show connected runtime version in doctor and TUI (#68) — * Show connected runtime version in doctor and TUI (1e734c74)
  • Integrate research retrieval controls, routing receipts and write decisions (#67) — * Integrate research retrieval controls and candidate decision receipts (c6d73e0c)
  • Restore rsrs-cli as the requested npm installation entry (#66) — Keep the rsrs command and matching scoped CLI dependency; manage the unscoped entry through the rsrsai organization team. (35e53401)
  • Merge pull request #65 from risense-ai/feat/npm-rsrs-ai-entry-20261009 — Use rsrs-ai as the public npm install entry (4bc8cc32)
  • Use rsrs-ai as the requested public npm entry — Replace the unpublished rsrs-cli entry while keeping the rsrs command and exact matching scoped CLI dependency. (623decb8)
  • Merge pull request #64 from risense-ai/feat/npm-short-entry-20261009 — Add rsrs-cli npm entry with independent trusted publication (6a19fd3f)
  • Pin the npm publisher to verified npm 12.2.0 (23b5354b)
  • Use rsrs-cli as the primary npm installation entry — Keep the rsrs executable and exact scoped dependency; reserve the separate rsrs package name without an executable. (a29dbad9)
  • ci(npm): publish the short entry independently — Require the matching public formal scoped package and a dedicated rsrs trusted publisher. Skip native rebuilds for alias-only changes so the existing release artifacts remain unchanged. (76d5a8bf)
  • Report only the required cases for the focused authentication scope (ab7272d7)
  • Verify CLI login through its server-issued session instead of an optional local salt field (29b1e112)
  • Create the parent directory for the focused authentication fixture (355ad4ad)
  • Test real legacy authentication salt migration and fresh CLI login — Store and validate OneMemory authentication on DEV before explicit migration, then reject the old hash and verify original credentials, data keys and memory access. Add a focused workflow scope that reuses verified release artifacts without publishing. (be7078b1)
  • Add profile-scoped read-only memory revision contract (3499bf80)

Commits

Commit Change
82e41ed1 Release CLI 1.0.15 [manual-release]
aae4512a Prepare CLI 1.0.15 stable release metadata
07540ca0 Merge PR #109: stream CPU model input [manual-release]
5439416c Clarify successful stream response validation scope
795e9396 Validate model stream response identity before accepting results
ae18c87d Enable bounded CPU model streaming with the verified SDK 10 release
dcb99db8 Preserve the original streaming candidate ancestry after porting to main
52b7df29 Port bounded model input streaming onto current CLI main
b9d277eb fix(npm): bound actual resolver propagation [manual-release]
139f5bb6 fix(npm): bound clean-install retries for fresh release indexes
17482f5a Merge PR #114: wait for npm install-index propagation [manual-release]
997da889 fix(npm): bound alias propagation and verify offline failure paths [manual-release]
9b2d650a fix(npm): forward propagation budget through publisher and parent waits [manual-release]
21c6a6ec fix(npm): wait for matching install index before clean install [manual-release]
b771ebbf Merge PR #113: bounded index readiness and memory copies [manual-release]
9bdd8e85 Merge PR #112: wake runtime dispatcher [manual-release]
6585960b perf: bound index status payloads and transient catalog copies [manual-release]
85ab57c0 perf: wake runtime dispatcher when read slots become available
4549184e Merge pull request #14: add read-only memory revision [manual-release]
4996a11d Merge pull request #60: verify safe auth salt migration [manual-release]
a398d024 Merge pull request #97: validate redaction reporters [manual-release]
c2de065c test: gate full releases on migrated v2 memory writes [manual-release]
206dca52 fix(revision): preserve read-only polling on current TCP runtime
35cc09ea test: isolate TTY fixtures and preserve native profile imports [manual-release]
e9a02c44 test: secure legacy authentication fixtures with hidden Linux TTY input [manual-release]
4e477f89 test: preserve complete OS failure diagnostics
eecfa76e test: assert owned runtime stop command in DEV failure reporters
af20f9ff Merge pull request #108: reduce runtime memory copies [manual-release]
5dd1fc43 test(dev-api): assert excluded cancellation route identity [manual-release]
99a63711 [manual-release] integrate conservative memory SDK dev.9 and reviewed DEV API contract
f1eb9645 [manual-release] fix(ci): align reviewed DEV API vault contract (#111)
f95f21a5 docs(test): explain reviewed API contract assertions
648b17de test(dev-api): review vault generation contract for server 7f0b107
8846f8e2 test(remember): assert exact pending merge candidate [manual-release]
97c0a1ed test(resident): integrate dev8 baseline and verify retained-reader cleanup [manual-release]
10546b8d [manual-release] fix(diary): preserve daily identity after title edits (#110)
5186c544 fix(diary): validate authors with compatible local profile identity
98b470c4 fix(diary): resolve daily tracks by stable identity
240db145 feat(sdk): gate bounded model streaming behind an explicit SDK contract
bcf6ce17 perf(resident): release empty catalog buffers [manual-release]
6095ff34 fix(login): clarify HTTPS origin and restore blank fallback [manual-release] (#105)
d4a03a54 perf(release): overlap platform publication verification [manual-release] (#107)
d69de692 fix(release): resume verified dev.6 publication [manual-release] (#106)
f0002c41 fix(release): normalize staged notice permissions [manual-release] (#104)
028d0a86 chore(core-sdk): integrate dev.8 memory SDK [manual-release] (#103)
c5748064 ci: gate release completion on verified short npm package [manual-release]
bd7aaaf9 perf(core-sdk): release payload before synchronous FFI [manual-release]
e948b4e9 ci: retain Actions artifacts for one day [manual-release]
9800a7d2 [manual-release] Synchronize resident overlap regression (#99)
ae8b9412 [manual-release] Use TCP-only RPC and verified CPU model mirrors (#98)
b7af6d82 test(dev): verify both CLI failure reporters redact credentials
77749d49 [manual-release] Fix DEV migration fixtures for shared CPU containers (#96)
229bdb56 fix(core-sdk): identify recovery for custom CPU model files
d6f65d88 fix(dev): preserve diagnostics without a data directory override
5339e4f8 fix(dev): share validated CPU container across synthetic profiles
e00a3c4b [manual-release] Integrate extract and shared CPU model memory improvements (#95)
571fcb44 Qualify the transport count used by CPU preparation
f6143b28 Keep empty-library runtime startup free of model downloads
ea3535b3 Keep the thin SDK package inventory explicit and diagnostic
af81c133 Pin the final seven-platform CPU SDK and version its binding
c246bbf5 Integrate reviewed extract PR91 with default CPU memory candidate
5056112a Verify CPU readiness and share mode selection with preparation
0175f0c3 Prepare pinned CPU ORT model and enable shared CPU runtime
2ddffb87 Recover Host model cache after failed session replacement
9ccaa29c Borrow Core ABI requests and move validated response results
9920ee5f Move isolated worker frames and serialize borrowed payloads
9869901b fix(session-import): preserve unsynced edits during refresh
a34e4316 fix(session-import): scrub secrets and retain WAL updates and sync notifications
cea20653 fix(session-import): keep the sync notification when the import cursor write fails
f2067dc7 fix(session-import): embed outside the write transaction and commit in chunks
fc71e37f docs: add bilingual CLI/runtime contribution templates (#94)
2513c6d5 fix(session-import): address second maintainer review
fc813d13 fix(session-import): fall back to created_at when updated_at is unparseable
d7ca116a fix(session-import): address CodeRabbit follow-up
365745e7 [manual-release] Merge PR92: bound native fixture inspection and sampling
3cd86ae0 fix(session-import): address maintainer review
827645bb Reduce continuous fixture sampler overhead and record phase timings
dec1bb40 ci: give the test process more stack; exclude extract_tui from coverage
9fe60819 chore(review): disable CodeRabbit docstring-coverage gate; document public session_import API
e70274d1 Observe concurrent health independently and pin fixed Windows inspection source
a7cf2611 Persist native fixture failures before cleanup and fail on reap errors
c86fd144 Merge remote-tracking branch 'origin/main' into feat/rsrs-extract
5f29108a fix(session-import): address review (cursor atomicity, input validation, scrub, tool_result, perf, no-unwrap tests)
a607b651 Bound native regression inspection and retain hang diagnostics
78eefb94 feat(cli): add `rsrs extract` to import coding-agent sessions into memory
d9a4673b [manual-release] Merge PR90: supervise native inference and async runtime waiters
1e2f9834 Verify supervised worker ownership throughout native upgrade regressions
486d0401 Retain worker ownership on cleanup failures and fence host callbacks
61eaf2af fix: retain provider diagnostics in isolated worker health
a17e5ce6 test: reject native fixtures through the Clap version gate
c874a896 fix: supervise native Core work in a shared child process
61aee00d Prepare sync snapshots on the existing sync worker
e71a941a Keep socket backpressure outside command scheduling and expose uncertain outcomes
966875b6 Allow RPC callers to expire requests before execution
efb28343 Avoid transport waiter threads and expire queued runtime commands
eee4c9b3 Merge pull request #89 from risense-ai/fix/performance-model-fixture-path-20261010
fe62a9e2 Use hash-verified pinned M3 assets at the actual ONNX path
dc1a79de Merge pull request #88 from risense-ai/fix/published-performance-comparison-20261010
b4349961 Benchmark published stable and dev binaries on matched CPU fixtures
68c44cf4 Publish the primary DEV entry after verified publication (#87)
6b1debc7 Limit CLI releases to four mainstream targets [manual-release]
f8ff324f test(runtime): await derived index before strict offline doctor [manual-release]
a8eff24e fix(bench): evaluate pending sources through resident retrieval [manual-release]
c67b41c3 fix(release): cumulative stable-baseline notes and diagnostics [manual-release]
e8bfb760 Keep recall responsive with resident indexes and dual inference sessions [manual-release] (#82)
e98646e1 fix(recall): keep resident retrieval responsive during background indexing [manual-release]
634cbbe6 Add inference and Recall benchmark with explicit global progress [manual-release]
1db255e2 fix(release): wait for npm dependency propagation [manual-release]
6e81fb38 fix(recall): keep indexed memories available during background sync [manual-release]
2c09292b fix(release): normalize npm12 primary-entry receipts [manual-release]
3387e628 fix(release): automatically publish primary npm entry [manual-release]
5ed9923d fix(sync): prevent SQLite snapshot promotion failures [manual-release]
2289a2fd fix(release): reject full regression with legacy evidence reuse
a358db52 fix(release): allow full DEV acceptance before publication
498b0c29 fix(sync): reserve SQLite writes before conflict snapshot reads
56d6b88c Merge pull request #73 from risense-ai/fix/release-plan-metadata-20261009
4ddf3dc0 Reserve DEV allocator changes for explicit release dispatch
77241da8 Fix explicitly requested DEV version and restore independent regressions
ac4e16e7 Merge published 1.0.12 baseline into DEV release recovery
a6d3664c Merge pull request #75 from risense-ai/fix/prompt-alias-npm12-20261009
c9b029f0 fix(release): accept the single npm12 version result
c606a2b6 Merge pull request #74 from risense-ai/fix/prompt-hotfix-source-ci-20261009
168e510c Merge current main prompt fixes into exact DEV release recovery
340a7a6a Project release planning metadata before buffering GitHub responses
4dfc4c39 Merge pull request #72 from risense-ai/fix/prompt-workbuddy-reference-20261009
54f8dedb Allow an exact DEV version and resume empty unpublished drafts (#71)
354609cd Merge pull request #70 from risense-ai/fix/prompt-hard-constraints-policy-claim-20261009
7f00026c Merge pull request #69 from risense-ai/fix/prompt-hard-constraints-20261009
1e734c74 Show connected runtime version in doctor and TUI (#68)
c6d73e0c Integrate research retrieval controls, routing receipts and write decisions (#67)
35e53401 Restore rsrs-cli as the requested npm installation entry (#66)
4bc8cc32 Merge pull request #65 from risense-ai/feat/npm-rsrs-ai-entry-20261009
623decb8 Use rsrs-ai as the requested public npm entry
6a19fd3f Merge pull request #64 from risense-ai/feat/npm-short-entry-20261009
23b5354b Pin the npm publisher to verified npm 12.2.0
a29dbad9 Use rsrs-cli as the primary npm installation entry
76d5a8bf ci(npm): publish the short entry independently
26f853a8 feat(npm): add short rsrs install entry
ab7272d7 Report only the required cases for the focused authentication scope
29b1e112 Verify CLI login through its server-issued session instead of an optional local salt field
355ad4ad Create the parent directory for the focused authentication fixture
be7078b1 Test real legacy authentication salt migration and fresh CLI login
3499bf80 Add profile-scoped read-only memory revision contract

Full comparison

Install

npm install -g rsrs-cli@1.0.15 --registry=https://registry.npmjs.org
rsrs --version

Source and validation