ltcai 10.6.2 → 10.6.3

package/README.md

@@ -11,7 +11,7 @@
 [![CI Status](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-![v10.6.2 Living Brain walkthrough](output/release/v10.6.2/gifs/v10.6.2-living-brain-walkthrough.gif)
+![v10.6.3 Living Brain walkthrough](output/release/v10.6.3/gifs/v10.6.3-living-brain-walkthrough.gif)
 
 Chat, files, folders, notes, and web pages all flow into one durable knowledge
 graph on your computer. Any model — local MLX or cloud — can speak with that
@@ -24,10 +24,10 @@ memory. Nothing leaves your machine without explicit consent.
 
 | | |
 | --- | --- |
-| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v10.6.2/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v10.6.2/screenshots/05-memory-graph.png) |
-| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v10.6.2/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v10.6.2/screenshots/12-review-center.png) |
-| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v10.6.2/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v10.6.2/screenshots/10-admin-console.png) |
-| **Watch a file become memory** — three named steps, not a pipeline diagram ![Material to memory](output/release/v10.6.2/screenshots/11-knowledge-journey.png) | **Say how much it may do alone** — one dial in plain words; dangerous actions stay blocked either way ![Settings](output/release/v10.6.2/screenshots/08-system.png) |
+| **Chat with a Brain that remembers** — every conversation grows durable, source-linked memory ![Brain Chat](output/release/v10.6.3/screenshots/04-brain-chat-home.png) | **See how knowledge connects** — a real relationship graph, not a file list ![Memory Graph](output/release/v10.6.3/screenshots/05-memory-graph.png) |
+| **Capture anything** — files, whole folders, notes, screenshots, web pages ![Capture](output/release/v10.6.3/screenshots/06-capture.png) | **Automate with review** — agent changes become proposals you approve first ![Review Center](output/release/v10.6.3/screenshots/12-review-center.png) |
+| **Pick a model in one click** — recommended local models for your hardware ![Recommended Models](output/release/v10.6.3/screenshots/02-recommended-models.png) | **Stay in control** — audit, roles, retention in a separate admin surface ![Admin Console](output/release/v10.6.3/screenshots/10-admin-console.png) |
+| **Watch a file become memory** — three named steps, not a pipeline diagram ![Material to memory](output/release/v10.6.3/screenshots/11-knowledge-journey.png) | **Say how much it may do alone** — one dial in plain words; dangerous actions stay blocked either way ![Settings](output/release/v10.6.3/screenshots/08-system.png) |
 
 ## Why Lattice AI
 
@@ -58,14 +58,14 @@ First-run flow — wake the Brain, pick the owner, load a recommended model:
 
 | | | |
 | --- | --- | --- |
-| ![Login](output/release/v10.6.2/screenshots/01-login.png) | ![Model install](output/release/v10.6.2/screenshots/03-install-load-progress.png) | ![Model library](output/release/v10.6.2/screenshots/07-model-library.png) |
+| ![Login](output/release/v10.6.3/screenshots/01-login.png) | ![Model install](output/release/v10.6.3/screenshots/03-install-load-progress.png) | ![Model library](output/release/v10.6.3/screenshots/07-model-library.png) |
 
 Screenshot index and capture notes:
-[output/release/v10.6.2/SCREENSHOT_INDEX.md](output/release/v10.6.2/SCREENSHOT_INDEX.md)
+[output/release/v10.6.3/SCREENSHOT_INDEX.md](output/release/v10.6.3/SCREENSHOT_INDEX.md)
 
 ## Current Release
 
-The current release is **10.6.2 — Ask First**:
+The current release is **10.6.3 — Loud Limits**:
 
 10.6.1 rebuilt five screens, and the Brain home is the one it only half
 rebuilt: the order changed, the shape did not. A large Brain and a centred
@@ -114,13 +114,13 @@ sharing a card with the first.
 
 Release notes: [RELEASE.md](RELEASE.md) · Full history: [docs/CHANGELOG.md](docs/CHANGELOG.md)
 
-Expected artifacts for 10.6.2 release must use exact filenames:
+Expected artifacts for 10.6.3 release must use exact filenames:
 
-- `dist/ltcai-10.6.2-py3-none-any.whl`
-- `dist/ltcai-10.6.2.tar.gz`
-- `ltcai-10.6.2.tgz`
-- `dist/ltcai-10.6.2.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_10.6.2_aarch64.dmg`
+- `dist/ltcai-10.6.3-py3-none-any.whl`
+- `dist/ltcai-10.6.3.tar.gz`
+- `ltcai-10.6.3.tgz`
+- `dist/ltcai-10.6.3.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_10.6.3_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
@@ -155,6 +155,7 @@ See [ARCHITECTURE.md](ARCHITECTURE.md) for details and
 
 | Version | Theme |
 | --- | --- |
+| 10.6.3 | Loud Limits |
 | 10.6.2 | Ask First |
 | 10.6.1 | First Things |
 | 10.6.0 | Promoted Panels |

package/docs/CHANGELOG.md

@@ -4,6 +4,25 @@ The top entry is either the current unreleased main-branch work or the current
 release line. Older entries are historical and may describe behavior as it
 existed at that release.
 
+## [10.6.3] - 2026-08-04
+
+### Security
+- CSRF Origin/Referer 가드 (`latticeai/core/csrf.py`), `LATTICEAI_CSRF_TRUSTED_ORIGINS`
+- workspace 스코프 해석 단일화 — 선택자 불일치 시 403 (`latticeai/api/workspace_scope.py`)
+
+### Changed
+- 벡터 검색이 부분 스캔을 리포트 (`LATTICEAI_VECTOR_MAX_CANDIDATES`, `0`=전체)
+- 백그라운드 수집 잡이 SQLite에 영속화되어 재시작 후 재개
+- 파일 쓰기 도구 fail-closed, 모델 스트림 실패를 `ModelStreamError`로 구분
+- 백업 임포트 직후 벡터 인덱스 재정렬
+
+### Added
+- 프론트 빌드 신선도 게이트 (`scripts/check_frontend_build_freshness.mjs`)
+- SSE 스트리밍 파서 분리 (`frontend/src/api/eventStream.ts`)
+
+### Fixed
+- 대화 자동 하단 고정이 jsdom/표준모드에서 동작하지 않던 문제
+
 ## [10.6.2] - 2026-08-03
 
 The Brain home, re-shaped rather than re-ordered. 10.6.1 gave this screen a new

package/docs/COMMUNITY_AND_PLUGINS.md

@@ -1,6 +1,6 @@
 # Community And Plugins
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 LatticeAI defines the path from a strong local-first framework (8.4.0
 action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation

package/docs/DEVELOPMENT.md

@@ -3,7 +3,7 @@
 > **Status: canonical** — current contributor guidance, kept in sync with the
 > current release.
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 This document is for contributors working on the local-first Digital Brain
 codebase. Product positioning and quick start stay in `README.md`; release

package/docs/ONBOARDING.md

@@ -1,6 +1,6 @@
 # Lattice AI Onboarding
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 The first-run goal is a five-minute path from "I opened the app" to "my Brain
 has a source, a question, and proof." This page is the product contract behind

package/docs/OPERATIONS.md

@@ -1,4 +1,4 @@
-# Lattice AI — Operations Guide (v10.6.2)
+# Lattice AI — Operations Guide (v10.6.3)
 
 > **Status: canonical** — kept in sync with the current release. Storage layout
 > below reflects the SQLite live Brain store and workspace scoping, not the

package/docs/TRUST_MODEL.md

@@ -1,6 +1,6 @@
 # Lattice AI Trust Model
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 Lattice AI is local-first, explicit about external communication, and honest
 when a capability is unavailable.

package/docs/WHY_LATTICE.md

@@ -1,6 +1,6 @@
 # Why Lattice AI Exists
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 **Lattice AI is a local-first Digital Brain that keeps your knowledge durable
 across any AI model.**

package/docs/kg-schema.md

@@ -1,6 +1,6 @@
 # Knowledge Graph Schema
 
-Current release: **10.6.2 — Ask First**.
+Current release: **10.6.3 — Ask First**.
 
 명세 출처: `lattice_ai_full_spec.pptx` 슬라이드 20·21·22
 구현: `lattice_brain/graph/schema.py`

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "10.6.2"
+__version__ = "10.6.3"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/runtime/multi_agent.py

@@ -47,7 +47,7 @@ from typing import Any, Callable, Dict, List, Optional
 from ..utils import now_iso as _now
 from .contracts import multi_agent_contract
 
-MULTI_AGENT_VERSION = "10.6.2"
+MULTI_AGENT_VERSION = "10.6.3"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "10.6.2"
+__version__ = "10.6.3"

package/latticeai/core/legacy_compatibility.py

@@ -13,7 +13,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Dict, List
 
-LEGACY_COMPATIBILITY_VERSION = "10.6.2"
+LEGACY_COMPATIBILITY_VERSION = "10.6.3"
 
 
 @dataclass(frozen=True)

package/latticeai/core/marketplace.py

@@ -10,7 +10,7 @@ from __future__ import annotations
 from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
-MARKETPLACE_VERSION = "10.6.2"
+MARKETPLACE_VERSION = "10.6.3"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent", "ingestion_bridge")
 
 

package/latticeai/core/workspace_os_constants.py

@@ -10,7 +10,7 @@ from __future__ import annotations
 
 from typing import Dict
 
-WORKSPACE_OS_VERSION = "10.6.2"
+WORKSPACE_OS_VERSION = "10.6.3"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/latticeai/services/architecture_readiness.py

@@ -16,7 +16,7 @@ from typing import Any, Dict, List
 
 from latticeai.core.legacy_compatibility import legacy_shim_report
 
-ARCHITECTURE_VERSION_TARGET = "10.6.2"
+ARCHITECTURE_VERSION_TARGET = "10.6.3"
 
 PREFERRED_REFACTORING_ORDER = [
     "agent-runtime",

package/latticeai/services/product_readiness.py

@@ -18,7 +18,7 @@ from typing import Any, Dict, List
 
 from latticeai.services.architecture_readiness import architecture_readiness
 
-PRODUCT_VERSION_TARGET = "10.6.2"
+PRODUCT_VERSION_TARGET = "10.6.3"
 
 
 @dataclass(frozen=True)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ltcai",
-  "version": "10.6.2",
+  "version": "10.6.3",
   "description": "Lattice AI — local-first Digital Brain that keeps your knowledge durable across any AI model.",
   "homepage": "https://github.com/TaeSooPark-PTS/LatticeAI#readme",
   "repository": {

package/scripts/check_current_release_docs.mjs

@@ -6,7 +6,7 @@ const root = process.cwd();
 const pkg = JSON.parse(readFileSync(path.join(root, "package.json"), "utf8"));
 const version = pkg.version;
 const releaseDir = `output/release/v${version}`;
-const releaseTheme = "Ask First";
+const releaseTheme = "Loud Limits";
 const title = `${version} — ${releaseTheme}`;
 const escapedVersion = version.replaceAll(".", "\\.");
 

package/src-tauri/Cargo.lock

@@ -1584,7 +1584,7 @@ dependencies = [
 
 [[package]]
 name = "lattice-ai-desktop"
-version = "10.6.2"
+version = "10.6.3"
 dependencies = [
  "plist",
  "serde",

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "lattice-ai-desktop"
-version = "10.6.2"
+version = "10.6.3"
 description = "Lattice AI Digital Brain desktop shell"
 authors = ["TaeSoo Park"]
 edition = "2021"

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Lattice AI",
-  "version": "10.6.2",
+  "version": "10.6.3",
   "identifier": "ai.lattice.desktop",
   "build": {
     "beforeDevCommand": "npm run frontend:dev",

package/static/app/asset-manifest.json

@@ -1,47 +1,47 @@
 {
-  "version": "10.6.2",
+  "version": "10.6.3",
   "generated_at": "vite",
   "entrypoints": {
-    "app": "/static/app/assets/index-mLP0-YNO.js"
+    "app": "/static/app/assets/index-yNtiRyw3.js"
   },
   "assets": {
     "../node_modules/@tauri-apps/api/core.js": "/static/app/assets/core-CwxXejkd.js",
-    "_BrainSignals-RVMlmTGC.js": "/static/app/assets/BrainSignals-RVMlmTGC.js",
-    "_LivingBrain-FlHFfu9i.js": "/static/app/assets/LivingBrain-FlHFfu9i.js",
-    "_ReviewCard-BHj86h2Z.js": "/static/app/assets/ReviewCard-BHj86h2Z.js",
-    "_activity-7_ZmZqN0.js": "/static/app/assets/activity-7_ZmZqN0.js",
-    "_arrow-left-Dv2Tiwhe.js": "/static/app/assets/arrow-left-Dv2Tiwhe.js",
-    "_bot-D1gX4xks.js": "/static/app/assets/bot-D1gX4xks.js",
-    "_brain-Dn_bDfl4.js": "/static/app/assets/brain-Dn_bDfl4.js",
-    "_button-DPFZ9lGw.js": "/static/app/assets/button-DPFZ9lGw.js",
-    "_circle-pause-B2P72YOO.js": "/static/app/assets/circle-pause-B2P72YOO.js",
-    "_circle-play-BiC8z2vg.js": "/static/app/assets/circle-play-BiC8z2vg.js",
-    "_cpu-Cx-wRR_V.js": "/static/app/assets/cpu-Cx-wRR_V.js",
-    "_download-CKxlzxsK.js": "/static/app/assets/download-CKxlzxsK.js",
-    "_folder-open-Bbjju0tt.js": "/static/app/assets/folder-open-Bbjju0tt.js",
-    "_hard-drive-Bon1VBvq.js": "/static/app/assets/hard-drive-Bon1VBvq.js",
-    "_input-DrMc0Xns.js": "/static/app/assets/input-DrMc0Xns.js",
-    "_permissionCopy-BGUsI7vw.js": "/static/app/assets/permissionCopy-BGUsI7vw.js",
-    "_primitives-CEMTjBz1.js": "/static/app/assets/primitives-CEMTjBz1.js",
-    "_search-HsIji1wY.js": "/static/app/assets/search-HsIji1wY.js",
-    "_share-2-D7THHq5K.js": "/static/app/assets/share-2-D7THHq5K.js",
-    "_shield-alert-BoU4_8r9.js": "/static/app/assets/shield-alert-BoU4_8r9.js",
-    "_textarea-rU1Lb7ia.js": "/static/app/assets/textarea-rU1Lb7ia.js",
-    "_useFocusTrap-BgvK4Nkx.js": "/static/app/assets/useFocusTrap-BgvK4Nkx.js",
-    "_useQuery-CT2ChyuU.js": "/static/app/assets/useQuery-CT2ChyuU.js",
-    "_users-DlbfHBQV.js": "/static/app/assets/users-DlbfHBQV.js",
-    "_utils-fEGWreKB.js": "/static/app/assets/utils-fEGWreKB.js",
-    "_workspace-ClDBz_0f.js": "/static/app/assets/workspace-ClDBz_0f.js",
-    "index.html": "/static/app/assets/index-mLP0-YNO.js",
+    "_BrainSignals-BYxDqBH3.js": "/static/app/assets/BrainSignals-BYxDqBH3.js",
+    "_LivingBrain-CTokkZn1.js": "/static/app/assets/LivingBrain-CTokkZn1.js",
+    "_ReviewCard-uAII_l9v.js": "/static/app/assets/ReviewCard-uAII_l9v.js",
+    "_activity-C_7182GG.js": "/static/app/assets/activity-C_7182GG.js",
+    "_arrow-left-BQCpWR37.js": "/static/app/assets/arrow-left-BQCpWR37.js",
+    "_bot-CkrHFdUl.js": "/static/app/assets/bot-CkrHFdUl.js",
+    "_brain-CdPX7svt.js": "/static/app/assets/brain-CdPX7svt.js",
+    "_button-Ic6omIbs.js": "/static/app/assets/button-Ic6omIbs.js",
+    "_circle-pause-DBaaUR08.js": "/static/app/assets/circle-pause-DBaaUR08.js",
+    "_circle-play-Dz0OLYN9.js": "/static/app/assets/circle-play-Dz0OLYN9.js",
+    "_cpu-N8uE9ono.js": "/static/app/assets/cpu-N8uE9ono.js",
+    "_download-CCjhOjms.js": "/static/app/assets/download-CCjhOjms.js",
+    "_folder-open-Bld9TtHp.js": "/static/app/assets/folder-open-Bld9TtHp.js",
+    "_hard-drive-BMIqDSyY.js": "/static/app/assets/hard-drive-BMIqDSyY.js",
+    "_input-DW1tXtc0.js": "/static/app/assets/input-DW1tXtc0.js",
+    "_permissionCopy-Djpwn54H.js": "/static/app/assets/permissionCopy-Djpwn54H.js",
+    "_primitives-B6WtkLgB.js": "/static/app/assets/primitives-B6WtkLgB.js",
+    "_search-CkHYuKpY.js": "/static/app/assets/search-CkHYuKpY.js",
+    "_share-2-DR5L1qRc.js": "/static/app/assets/share-2-DR5L1qRc.js",
+    "_shield-alert-CVE5eXsl.js": "/static/app/assets/shield-alert-CVE5eXsl.js",
+    "_textarea-DdaVFgvk.js": "/static/app/assets/textarea-DdaVFgvk.js",
+    "_useFocusTrap-B5TyGaiB.js": "/static/app/assets/useFocusTrap-B5TyGaiB.js",
+    "_useQuery-CiRdTQlD.js": "/static/app/assets/useQuery-CiRdTQlD.js",
+    "_users-pZqCRxdD.js": "/static/app/assets/users-pZqCRxdD.js",
+    "_utils-C3rXoa-U.js": "/static/app/assets/utils-C3rXoa-U.js",
+    "_workspace-DfxKEttN.js": "/static/app/assets/workspace-DfxKEttN.js",
+    "index.html": "/static/app/assets/index-yNtiRyw3.js",
     "assets/index-DYUs0cWy.css": "/static/app/assets/index-DYUs0cWy.css",
-    "src/components/ProductFlow.tsx": "/static/app/assets/ProductFlow-CFUNDOHu.js",
-    "src/features/admin/AdminConsole.tsx": "/static/app/assets/AdminConsole-QiCTH68K.js",
-    "src/features/brain/BrainHome.tsx": "/static/app/assets/BrainHome-B4Ar3atu.js",
-    "src/features/command/CommandPalette.tsx": "/static/app/assets/CommandPalette-bW5WxWWZ.js",
-    "src/pages/Act.tsx": "/static/app/assets/Act-aNud-lKL.js",
-    "src/pages/Brain.tsx": "/static/app/assets/Brain-CMFh5q6k.js",
-    "src/pages/Capture.tsx": "/static/app/assets/Capture-DEBo-0vZ.js",
-    "src/pages/Library.tsx": "/static/app/assets/Library-5gFexm83.js",
-    "src/pages/System.tsx": "/static/app/assets/System-CeNHoZRu.js"
+    "src/components/ProductFlow.tsx": "/static/app/assets/ProductFlow-Bmted2ys.js",
+    "src/features/admin/AdminConsole.tsx": "/static/app/assets/AdminConsole-C8yz1Cs_.js",
+    "src/features/brain/BrainHome.tsx": "/static/app/assets/BrainHome-D3t45_D4.js",
+    "src/features/command/CommandPalette.tsx": "/static/app/assets/CommandPalette-Cj7z-qUE.js",
+    "src/pages/Act.tsx": "/static/app/assets/Act-05uZSgyw.js",
+    "src/pages/Brain.tsx": "/static/app/assets/Brain-jjMYTdnU.js",
+    "src/pages/Capture.tsx": "/static/app/assets/Capture-DKgu7fB0.js",
+    "src/pages/Library.tsx": "/static/app/assets/Library-CO76FWeO.js",
+    "src/pages/System.tsx": "/static/app/assets/System-PUMzDmof.js"
   }
 }