v0.0.337

Changelog

• 56784ae charts: the server and worker startup probes allow 600 s, so the store migrations that run before the health listener (0099/0100 index builds) cannot be killed mid-file and restart from zero (slice 135, C1) (#756)
• adc6f18 Select focused local checks for verified release deployments (#755)
• 387745e docs: explain account closure subscription cancellation (#754)
• 4134332 chore: roll serving cell to v0.0.336 (#753)
• 0be0c1a fix(release): refresh retired Intel age package revision (#752)
• ef138e9 Roll backup cell to v0.0.336 for account-closure billing protection (#751)

v0.0.336

Changelog

• 70b12c0 fix(release): verify backup image pins on both architectures (#750)

v0.0.334

Changelog

• 0388dbd control plane: the backup scheduler reaches every account in order across slots, and an overrunning pass pages (slice 121) (#719)
• d289ad2 mcp: tool input schemas match what the handlers already do (#717)
• 8b63bc1 monitoring: prepare the collector alert group; identity-at-limit never reaches PagerDuty (slice 124 part A) (#716)
• 2d05ce2 server: an off-by-default per-account request budget answers a flooding account with 429 rate_limited (slice 123) (#715)
• 2f3687c control plane: value-free signup-funnel and verification-email metrics on /metrics/probes (slice 119 part A) (#714)
• cd22597 test: every cell route has a cross-tenant matrix row, and CI fails when a route has none (slice 122 part A) (#713)
• 54c64dd plans: undelivered paid features are marked coming soon in the catalog, CLI and docs (slice 118) (#712)
• fe2b3d9 monitoring: PostgreSQL OOM and restart alerts, memory near limit, node working set and volume-fill forecast (slice 117) (#711)
• 3d0a202 support: alert on a new ticket, a four-hour unanswered ticket and an urgent waiting ticket (slice 120 part B) (#710)
• d2480a0 support: the cell exports newest-unanswered age and urgent-unanswered count (slice 120 part A) (#709)
• e56880c Roll civo-sandbox-use1-serving to v0.0.333 (wave 2)
• dcd18ee Roll civo-sandbox-use1-backup to v0.0.333 (wave 1)

v0.0.333

Changelog

• 324eeb9 store: imports keep less state per transcript entry, decode each row once, and hand retained raw email to PostgreSQL as bytes (#706)
• fd8c172 export: the archive reader streams each entry row by row; the exporter reuses one chunk buffer (#705)
• 23fa593 gitops: production server requests 50m CPU / 128Mi and a 512Mi memory limit (#704)
• 0a385f7 Roll civo-sandbox-use1-serving to v0.0.332 (wave 2)
• 859727f Roll civo-sandbox-use1-backup to v0.0.332 (wave 1)

v0.0.332

Changelog

• d637e12 test: satisfy golangci-lint v2.14.0 (unused upgrader parameter, tagged switch) (#701)
• 5421aa9 cloudflare: move the shared wrangler pin to 4.147.0 with the four Worker packages (#700)
• 4b1dbc3 monitoring: the nightly account export no longer pages; long exports get their own threshold (#699)
• bc539fa gitops: the apps chart passes witself-server resources through when a cell sets them (#698)
• 3fd6da4 monitoring: page when witself-server or witself-worker is OOM-killed (#697)
• 0e5dae1 Roll civo-sandbox-use1-serving to v0.0.331 (wave 2)
• 97f0e53 Roll civo-sandbox-use1-backup to v0.0.331 (wave 1)

v0.0.331

Changelog

• b1a26ad ci: golangci-lint v2.14.0, which reads Go 1.27.2 export data (#694)
• c2eeade build(deps): bump the minor-and-patch group (#693)
• 266b81f build(deps): bump anchore/sbom-action/download-syft (#692)
• de5bfa6 build(deps): bump github.com/anthropics/anthropic-sdk-go (#690)
• 275c3ab Roll civo-sandbox-use1-serving to v0.0.330 (wave 2)
• 2bb0c43 Roll civo-sandbox-use1-backup to v0.0.330 (wave 1)

v0.0.330

Changelog

• fd94f63 memory recall: tell agents how a query matches; every word must appear unless the words are joined with OR (#687)
• bf63ff7 mcp: input schemas advertise every field the handler always requires, pinned for every tool (#686)
• 7db6327 control plane: a failed restore drill never records an empty error, and finish tests assert storage (#685)
• 4d940ca backup image: pin age 1.3.2-r0, which replaced 1.3.1-r6 in Alpine v3.24 (#684)
• e134170 monitoring: the memory backlog-age rule matches Prometheus 3's normalized le labels, and a guard rejects integer-only le matchers (#683)
• 742914a Roll civo-sandbox-use1-serving to v0.0.329 (wave 2)
• 7d029a1 Roll civo-sandbox-use1-backup to v0.0.329 (wave 1)

v0.0.329

Changelog

• 22fc9ad capture: identity-mismatched events stay queued for their binding and no longer fail the flush (#673) (#679)
• dbbd23e witself-infra: redact file-sourced passphrases, bound the remove-cell registry refusal, stop echoing token-file values, and refuse command-only flags elsewhere (#678)
• 1fc93e8 release train: verify an already merged wave 2 on --resume, retry a transient health failure, and say what is retried (#677)
• 7f8d899 mcp: curation tool text names the conflict reason, the run_not_open exception and what a coverage window authorizes (#676)
• bbe2e38 test: provider CLI tests bound a hung fake at 30 seconds instead of one (#675)
• d454f58 docs: narrative-memory status, curation error shapes and the witself-infra dashboard match the code (#674)
• af39a7f Roll civo-sandbox-use1-serving to v0.0.328 (wave 2)
• 1e43d2c Roll civo-sandbox-use1-backup to v0.0.328 (wave 1)

v0.0.328

Changelog

• 85cdac6 release train: retry the live version guard's reads, and read the release run from push events only (#670)
• 3fc3705 release train: run_before's timer is stopped with KILL, so a fast read is never reported as timed out (#669)
• 3cb0f39 avatar acceptance: the restore-drill leg starts the drill with wait:false and polls its record (#660) (#668)
• c50e056 mcp: curation.get defaults to 24 KiB pages, and preflight publishes the page-byte range (#667)
• ea0aec4 test: the hydration-ledger concurrency test no longer depends on winning a 100 ms lock budget under load (#666)
• 769ff35 Roll civo-sandbox-use1-serving to v0.0.327 (wave 2)
• 8ac6fbd Roll civo-sandbox-use1-backup to v0.0.327 (wave 1)

v0.0.327

Changelog

• d4219b0 test: the restore-drill Worker tests wait for the drill record and the driver bind by condition, not by a fixed number of event-loop turns (#663)
• 59bdf3b control plane: an alarm-driven restore drill on its own Durable Object instance, so a client disconnect can no longer cancel it (#662)
• 60a5d50 cell: asynchronous rollback-only backup validation with start and status actions, so the restore drill no longer needs a connected request (#661)
• 0494e2d docs: an active client disconnect cancels the restore drill in either framing; keep the client connected and identify the attempt's own record (#659)
• e5f119b Roll civo-sandbox-use1-serving to v0.0.326 (wave 2)
• 342c496 Roll civo-sandbox-use1-backup to v0.0.326 (wave 1)