Garry Tan d13aa742fd v0.51.0.0 feat: make concurrent writes durable and revision-safe (#5149) ...

* Add typed mutation receipts and preserve pending write errors

* Add canonical page revisions, snapshot reads, and composable transaction guards

* fix: add portable native writer locks and runtime gates

* Route PGLite operations through bounded local persistence IPC

* Add durable mutation admission and recoverable canonical page publication

* Prepare CLI mutations before connecting and preserve replay intent

* Wire resident writer ingress and fence unmanaged canonical mutation

* Fence derived projections by canonical revision and persist withdrawal rebuild work

* Expose principal-scoped durable write receipts without widening grants

* fix: retain datastore ownership through shutdown and fence lease cleanup

* Journal memory verbs and publish semantic fact updates under canonical guards

* Coordinate semantic page mutations and seal only current sanitized projections

* Administer resident writers through authenticated local CLI IPC

* Journal takes mutations and share long-hold budgets across physical pools

* Route take mutations through replayable operations before opening PGLite

* Compose canonical projections with publication and retry transient database contention

* Document concurrent write guarantees and explicit receipt grant migration

* test: exercise durable persistence schedules and process crash recovery

* Apply shared persistence limits and compact permanent receipts with exact accounting

* fix: honor explicit direct routes for generic Postgres poolers

* Retain original page visibility ceilings and intentional sandbox persistence

* test: verify pooler capacity and owner incarnation fencing

* Preserve canonical projection round trips and timeline detail through recovery

* Wire persistence distribution guards and refresh public operation documentation

* Retry postcommit effects and recover withdrawal mirrors independently

* Include outbox schema in snapshot identities and isolate fresh test brains

* Fence legacy canonical writers and require revision-safe imports

* Activate managed persistence only after explicit quiescence and durable fencing

* Require honest median-of-three read latency under public writer load

* Require writer progress during read latency samples

* Compose graph reconciliation with canonical publication and retain writer ceilings

* Exercise source-scoped takes and duplicate fences with durable principals

* Preserve transaction receivers when restoring extraction test stubs

* Install revision-bound retrieval fixtures and preserve strict projection gates

* Keep engine test overrides composable across transaction clones

* Assert atomic readback rollback and public failed write receipts

* Settle definite publication failures and preserve typed receipts across CLI boundaries

* Restore bounded fact extraction receipts and durable postpublication scheduling

* Share activation fixtures within explicit engine lifecycles

* Model scoped read transactions and publish complete retrieval fixtures

* Coordinate resumable owner-scoped Markdown sync through durable page receipts

* Exercise page source and privacy boundaries with durable writer fixtures

* Publish complete search fixtures and assert composable scoped SQL routing

* fix: retain archived alias reads and expose writer ingress diagnostics

* Exercise managed writer activation in persistence validation workloads

* Publish revision-bound ranker and max-pool retrieval fixtures

* test: bind engine fixtures to coherent page projections and durable writes

* fix: compare enrichment against its original page snapshot

* fix: preserve withdrawal markers across legacy history and projection rebuilds

* fix: authenticate resident sync ingress and prevent writer starvation

* fix: durably acknowledge recovery and advance missing-file withdrawal effects

* Retain mutation identity and revision through internal caller retries

* Preserve contextual wrapping for deferred coordinated embeddings

* Install coherent retrieval fixtures and inspect raw chunk state explicitly

* fix: budget and fairly schedule standalone publication recovery

* Keep privacy and image fixtures aligned with projection visibility

* Bind embedding provenance to the prepared provider context

* Publish complete relational and search regression fixtures

* Preserve raw registry write checks and seal deferred embedding fixtures

* Retry coordinated imports when source policy cannot be read

* Preserve legacy migration data and exercise revision-aware public writers

* Coordinate managed source lifecycle and durable clone recovery

* fix: bind owner identity to the physical canonical checkout

* fix: reserve control capacity during source lifecycle publication

* fix: preserve delegated sync recovery and deferred embed ownership

* Verify lifecycle staging identity and preserve bounded recovery

* fix: account for pending clone requests in shared admission quotas

* test: align retrieval and replay fixtures with durable publication

* Release clone reservations exactly once and recheck source routing

* Require PostgreSQL lifecycle and recovery contracts in CI

* test: require physical-root refusal in the deployment matrix

* Route source administration through resident ownership and retained identities

* fix: retain captured canonical file routing under registered ownership

* test: exercise authenticated atomic take publication and retained replay IDs

* Retry confirmed admission aborts and preserve direct CLI conflict receipts

* Fix revision-safe import revival and preserve identity deduplication

* test: publish embedding migration fixtures before re-embedding

* Exercise durable publication with the actual release executable

* Exercise conditional embedding updates with coherent serial fixtures

* Verify clean resident EOF shutdown in the release smoke

* Seal search fixtures and assert durable side-effect outcomes

* Bound recovery preparation and exercise admission timeout receipts

* fix: retain delegated ownership and enforce take receipt holder grants

* Restore tombstoned pages consistently and preserve unexpected local files

* Preserve deletion state in canonical page versions

* Retry withdrawals after releasing the complete transaction

* Keep canonical version deletion schema bootstraps consistent

* Keep canonical version types beside page state

* Filter protected timeline content from remote version history

* Require PostgreSQL version history privacy coverage

* Require explicit native test timeouts in every CI entry point

* Bind Windows native locks to the active runtime API

* Test fact authorization with durable source grants

* Wait for authenticated persistence readiness in compiled CLI smoke

* Seal search fixtures against their canonical page revisions

* Refresh managed lifecycle fixtures and reviewed canonical writer inventory

* Measure staging bytes in clone metadata quota regression

* Preserve canonical write provenance and typed storage failures

* Measure durable admission through stable warmed workload instrumentation

* Require both engines in durable admission instrumentation regression

* Preserve bounded soak failure diagnostics and test fixtures

* Exercise timeout preflight in local CI execution fixtures

* Verify tombstone restoration values and stable no-op bytes

* Keep native workflow coverage checks compatible with explicit timeouts

* fix: bind local IPC safely across long paths and concurrent owners

* Require IPC ownership and path tests on every native target

* fix: preserve inaccessible IPC owners when Bun loses connect errno

* Isolate PgBouncer fixtures from test database guards and shard resets

* ci: isolate native-only dispatches from full persistence validation

* Keep agent seed worktrees outside their coordination state

* Seal expert search fixtures at their canonical page revision

* test: exercise durable PostgreSQL take publication and replay

* fix: retain native ownership across Windows IPC listeners

* fix: serve admin SPA from hidden checkout directories

* fix: derive Windows pipe claims from NT Unicode upcasing

* test: match Unicode IPC aliases to actual Windows pipe equality

The four Windows runners in run35037789501 proved dotless-i and I are
separate pipe names: kernel_alias=false, CompareStringOrdinal=3, with
identical NT and invariant-locale case tables. Keep both independent
providers in coverage and require genuine sigma/accent aliases to share
one live provider and native claim. Preserve the native API oracle.

Restore the exact native source, build recipe, manifest and artifacts from
2a703bb9875f214708d0c23b070fdd188ed3b459; the provisional NT upcase change
was unnecessary. All six non-Windows artifacts remain byte-identical.

Input SHA256:
before b86ba93886091ab6b8dbba48c891966680ed3484b5d815ac31684da401f1ec73
after  4759bdd927c0c0fa29c2d5af30e42972a183f9be006d595144d73b6ca1111636
Windows x64 SHA256:
before f5c9d45e261757b510979534b447bb118e95d5699c3dd6e8f1ec31200c6372aa
after  0b494ec94896219a3b142b6f216bf12c9ee94d27fa7e7399bcdab707ca60212e
Windows ARM64 SHA256:
before 74fe0d4e8205738675ba5dcccf55edbf5bb250ec96724b84b3490c30e3e27bf2
after  e8315b4453dce3df775eeb76c73e8895c273390e64b16a2c255e10790fa75dd7

* Repair merged fixtures for revision-bound chunk reads

* Require local legacy-chunk reads to honor projection seals

* Account for reviewed upstream canonical write references

* Isolate ambient keyset fixture page clocks from fact writes

* fix: settle publication failures beneath blocked file ancestors

* Match TTL vector fixture to the initialized fact column

* Record coordinated purge in canonical writer census

* docs: align concurrent persistence contracts and sync guidance

* fix: fence projection replacement to its originating snapshot

* fix: bound unit shard processes without dropping coverage

* fix: publish embedding vectors and contextual completion atomically

* test: isolate thin-client health and write fixtures

* test: isolate healthy doctor checks from retained E2E grants

* test: isolate each local unit file in its own Bun process

* fix: keep persistence parameter schemas free of registry cycles

* test: restore thin-client routing exit state

* style: consolidate page operation engine imports

* fix: isolate purge validator from generic flag scans

* test: isolate Postgres bootstrap ownership fixture

* test: isolate open-loop engine parity database

* chore: bump version and changelog (v0.51.0.0)

Document the coordinated concurrent-writer upgrade and synchronize the
release manifests, migration guide, generated stamps and skills lock.

Co-Authored-By: Codex <noreply@openai.com>

* docs: update concurrent-write guide for v0.51.0.0

* fix: resolve concurrency persistence security scan findings

---------

Co-authored-by: Codex <noreply@openai.com>

2026-09-17 06:44:17 -07:00

..

mcp.json

v0.48.1.0 fix: community fix wave — 55 PR adoptions + 22 verified issue fixes + 5 review-hardening rounds

2026-09-01 20:02:39 -07:00

plugin.json

v0.51.0.0 feat: make concurrent writes durable and revision-safe (#5149)

2026-09-17 06:44:17 -07:00