@vaur94/agz-memory 0.5.0 → 0.5.1

package/ARCHITECTURE.md

@@ -1,6 +1,6 @@
 # AGZ Memory Architecture
 
-This document describes the `0.5.0` runtime and SQLite schema v11.
+This document describes the `0.5.1` runtime and SQLite schema v11.
 
 ## System Boundaries
 
@@ -20,7 +20,7 @@ OpenCode V2 beta-18743
 
 SQLite outbox
   -> optional derived retrieval backend
-      -> disabled in 0.5.0; backend = none
+      -> disabled in 0.5.1; backend = none
 ```
 
 The MCP adapter owns tool schemas, annotations, and result envelopes. The core
@@ -133,7 +133,7 @@ original OpenCode context unchanged.
 
 Semantic providers implement an optional backend contract: project-filtered
 query, idempotent upsert, deterministic delete, full project purge, and health.
-No provider is enabled in `0.5.0`. The SQLite lexical/graph path remains fully
+No provider is enabled in `0.5.1`. The SQLite lexical/graph path remains fully
 functional without one.
 
 ## Derived Index Outbox

package/CHANGELOG.md

@@ -3,6 +3,23 @@
 All notable changes to AGZ Memory are recorded here. The project follows
 [Semantic Versioning](https://semver.org/).
 
+## [0.5.1] - 2026-09-04
+
+> Candidate metadata only; no npm publication, Git tag, or merge is claimed.
+
+### Changed
+
+- Hardened Phase 1 stabilization with the migration-root fix, shared limits and
+  typed errors, bounded pagination, strict default-off plugin configuration,
+  bounded late attachment/shutdown, and resumable administrative reindexing.
+- Added the 10-sample p95 migration timing artifact, safe clean/evidence
+  tooling, and keyed quarantine HMAC rotation with Windows fail-closed behavior.
+
+### Security
+
+- Preserved exactly nine MCP tools, SQLite schema 11, semantic backend `none`,
+  and inert plugin defaults.
+
 ## [0.5.0] - 2026-09-02
 
 ### Added

package/README.md

@@ -10,6 +10,9 @@ as two independently usable packages that advance at the same version:
 - `@vaur94/agz-memory-plugin`: an optional OpenCode V2 adapter for bounded
   retrieval and deliberately staged automatic capture.
 
+**0.5.1 status:** This repository documents a candidate only. It does not claim
+npm publication, a Git tag, or a merge.
+
 The MCP server is ready for normal use. The plugin starts inert: no project is
 created, no session is captured, and no context is injected until an explicit
 binding and rollout mode are configured.
@@ -32,8 +35,8 @@ binding and rollout mode are configured.
 
 | Component | Supported version |
 |---|---|
-| Core and MCP | `0.5.0` |
-| OpenCode plugin | `0.5.0` |
+| Core and MCP | `0.5.1` |
+| OpenCode plugin | `0.5.1` |
 | OpenCode V2 | `0.0.0-beta-18743` |
 | `@opencode-ai/plugin` | `0.0.0-beta-18743` |
 | Bun | `>=1.3.14` |
@@ -47,7 +50,7 @@ itself unless the running OpenCode version exactly matches the supported beta.
 Run the server directly:
 
 ```sh
-bunx @vaur94/agz-memory@0.5.0
+bunx @vaur94/agz-memory@0.5.1
 ```
 
 Or register it in OpenCode V2 under `mcp.servers`:
@@ -55,13 +58,13 @@ Or register it in OpenCode V2 under `mcp.servers`:
 ```jsonc
 {
   "skills": [
-    "https://raw.githubusercontent.com/ugur-murat-alt/agz-memory/v0.5.0/skills/"
+    "https://raw.githubusercontent.com/ugur-murat-alt/agz-memory/v0.5.1/skills/"
   ],
   "mcp": {
     "servers": {
       "agz-memory": {
         "type": "local",
-        "command": ["bunx", "@vaur94/agz-memory@0.5.0"],
+        "command": ["bunx", "@vaur94/agz-memory@0.5.1"],
         "environment": {
           "OPENCODE_MEMORY_DATABASE_PATH": "{env:OPENCODE_MEMORY_DATABASE_PATH}"
         },
@@ -130,7 +133,7 @@ options:
 {
   "plugins": [
     {
-      "package": "@vaur94/agz-memory-plugin@0.5.0",
+      "package": "@vaur94/agz-memory-plugin@0.5.1",
       "options": {
         "mode": "off",
         "autoCreateProjects": false,
@@ -203,11 +206,11 @@ quality, and latency gates.
 The admin CLI reads the same `OPENCODE_MEMORY_DATABASE_PATH`:
 
 ```sh
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin doctor
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin backup
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin upgrade --to 11
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin capture status
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin outbox status
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin doctor
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin backup
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin upgrade --to 11
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin capture status
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin outbox status
 ```
 
 Upgrades take an exclusive migration lock and create a verified backup before
@@ -216,7 +219,7 @@ restore. Restore and backup deletion use dry-run output plus explicit
 confirmation values; never guess them.
 
 Use [the backup and restore runbook](docs/backup-restore-runbook.md) for a full
-rehearsal. Final `0.5.0` backup manifests use `agz-memory-backup/1`; prerelease
+rehearsal. Final `0.5.1` backup manifests use `agz-memory-backup/1`; prerelease
 manifests must be handled by the prerelease that created them.
 
 ## Security Model

package/README.tr.md

@@ -10,6 +10,9 @@ Aynı sürümde ilerleyen, birbirinden bağımsız kullanılabilen iki paket sun
 - `@vaur94/agz-memory-plugin`: sınırlı geri çağırma ve bilinçli olarak aşamalı
   otomatik yakalama için isteğe bağlı OpenCode V2 bağdaştırıcısı.
 
+**0.5.1 durumu:** Bu depo yalnızca aday sürüm metadata'sını belgeler; npm
+yayımlama, Git etiketi veya birleştirme iddiası içermez.
+
 MCP sunucusu normal kullanım için hazırdır. Eklenti hareketsiz başlar: açık bir
 eşleme ve devreye alma modu verilene kadar proje oluşturmaz, oturum yakalamaz ve
 bağlam eklemez.
@@ -32,8 +35,8 @@ bağlam eklemez.
 
 | Bileşen | Desteklenen sürüm |
 |---|---|
-| Çekirdek ve MCP | `0.5.0` |
-| OpenCode eklentisi | `0.5.0` |
+| Çekirdek ve MCP | `0.5.1` |
+| OpenCode eklentisi | `0.5.1` |
 | OpenCode V2 | `0.0.0-beta-18743` |
 | `@opencode-ai/plugin` | `0.0.0-beta-18743` |
 | Bun | `>=1.3.14` |
@@ -47,7 +50,7 @@ MCP sunucusu bir OpenCode beta sürümüne bağlı değildir. İsteğe bağlı e
 Sunucuyu doğrudan çalıştırın:
 
 ```sh
-bunx @vaur94/agz-memory@0.5.0
+bunx @vaur94/agz-memory@0.5.1
 ```
 
 Ya da OpenCode V2 içinde `mcp.servers` altına kaydedin:
@@ -55,13 +58,13 @@ Ya da OpenCode V2 içinde `mcp.servers` altına kaydedin:
 ```jsonc
 {
   "skills": [
-    "https://raw.githubusercontent.com/ugur-murat-alt/agz-memory/v0.5.0/skills/"
+    "https://raw.githubusercontent.com/ugur-murat-alt/agz-memory/v0.5.1/skills/"
   ],
   "mcp": {
     "servers": {
       "agz-memory": {
         "type": "local",
-        "command": ["bunx", "@vaur94/agz-memory@0.5.0"],
+        "command": ["bunx", "@vaur94/agz-memory@0.5.1"],
         "environment": {
           "OPENCODE_MEMORY_DATABASE_PATH": "{env:OPENCODE_MEMORY_DATABASE_PATH}"
         },
@@ -132,7 +135,7 @@ ayarlarla ekleyin:
 {
   "plugins": [
     {
-      "package": "@vaur94/agz-memory-plugin@0.5.0",
+      "package": "@vaur94/agz-memory-plugin@0.5.1",
       "options": {
         "mode": "off",
         "autoCreateProjects": false,
@@ -205,11 +208,11 @@ kapılarından geçene kadar `semanticBackend` değeri `none` olmalıdır.
 Yönetim aracı aynı `OPENCODE_MEMORY_DATABASE_PATH` değerini okur:
 
 ```sh
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin doctor
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin backup
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin upgrade --to 11
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin capture status
-bunx --package @vaur94/agz-memory@0.5.0 agz-memory-admin outbox status
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin doctor
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin backup
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin upgrade --to 11
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin capture status
+bunx --package @vaur94/agz-memory@0.5.1 agz-memory-admin outbox status
 ```
 
 Yükseltmeler özel bir geçiş kilidi alır ve veritabanını değiştirmeden önce
@@ -218,7 +221,7 @@ dener. Geri yükleme ve yedek silme işlemleri önce deneme çıktısı, sonra a
 onay değerleri ister; bu değerleri tahmin etmeyin.
 
 Tam prova için [yedekleme ve geri yükleme runbook'unu](docs/backup-restore-runbook.tr.md)
-kullanın. Final `0.5.0` yedek manifestleri `agz-memory-backup/1` kullanır;
+kullanın. Final `0.5.1` yedek manifestleri `agz-memory-backup/1` kullanır;
 ön sürüm manifestleri onları oluşturan ön sürümle işlenmelidir.
 
 ## Güvenlik Modeli