From 8084ee294968ec224eee2244112d0371a4850764 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 15 Aug 2026 18:19:32 +0000 Subject: [PATCH] chore(release): version OrgMemory --- .../2026-08-15-business-access-explanation.md | 13 ----- .tegami/keycloak-consent-page-restyle.md | 14 ----- .tegami/mcp-answer-and-asset-behavior.md | 14 ----- .tegami/publish-lock.yaml | 18 +++---- apps/docs/content/docs/changelog/meta.json | 1 + apps/docs/content/docs/changelog/meta.vi.json | 1 + .../content/includes/product-changelog.md | 34 ++++++++++++ release/CHANGELOG.md | 36 +++++++++++++ release/artifacts.json | 52 +++++++++---------- release/product.json | 2 +- 10 files changed, 108 insertions(+), 77 deletions(-) delete mode 100644 .tegami/2026-08-15-business-access-explanation.md delete mode 100644 .tegami/keycloak-consent-page-restyle.md delete mode 100644 .tegami/mcp-answer-and-asset-behavior.md diff --git a/.tegami/2026-08-15-business-access-explanation.md b/.tegami/2026-08-15-business-access-explanation.md deleted file mode 100644 index dc84bd52..00000000 --- a/.tegami/2026-08-15-business-access-explanation.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -packages: - orgmemory: minor -subject: Explain document access in business terms ---- - -## Features - -Administrators can check a user's current document access with a named business -assignment path, separate document availability, and the time permissions were -evaluated. Unknown or unavailable derivations remain explicit instead of being -presented as direct or inherited access, and technical authorization identifiers -stay out of the primary User Detail experience. diff --git a/.tegami/keycloak-consent-page-restyle.md b/.tegami/keycloak-consent-page-restyle.md deleted file mode 100644 index 44d7f6b7..00000000 --- a/.tegami/keycloak-consent-page-restyle.md +++ /dev/null @@ -1,14 +0,0 @@ ---- -packages: - orgmemory: patch -subject: Restyle the Keycloak OAuth consent page ---- - -## Fixes - -The OAuth consent page shown when an MCP client such as Claude requests -access now renders with the OrgMemory login theme: centered card on the -themed canvas in light and dark mode, a readable scope list, and a -consistent full-width accept/cancel pair. Previously the page lost the -theme layout entirely and rendered as an unstyled card in the top-left -corner. diff --git a/.tegami/mcp-answer-and-asset-behavior.md b/.tegami/mcp-answer-and-asset-behavior.md deleted file mode 100644 index b05cc091..00000000 --- a/.tegami/mcp-answer-and-asset-behavior.md +++ /dev/null @@ -1,14 +0,0 @@ ---- -packages: - orgmemory: patch -subject: Keep MCP answers and released Assets within their intended authority ---- - -## Fixes - -MCP knowledge search now gives connected assistants stable source numbers and -direct-answer guidance without exposing permission details unnecessarily. -Released Asset instructions remain below the connected assistant's system, -safety, and tool-permission policies; Skill tool declarations do not grant -access, hidden relations remain opaque, and Asset discovery returns a bounded -candidate set before exact-release use. diff --git a/.tegami/publish-lock.yaml b/.tegami/publish-lock.yaml index 680c0df7..054e27c6 100644 --- a/.tegami/publish-lock.yaml +++ b/.tegami/publish-lock.yaml @@ -1,17 +1,17 @@ core:changelogs: - - content: "---\nsubject: Clarify the owner-led Asset lifecycle\npackages:\n orgmemory:\n type: patch\n---\n\n## Documentation\n\nPublic guidance now distinguishes mutable working copies, independent sharing\nstate, immutable exact Releases, ownership transfer, Asset withdrawal, and the\nper-user Skill Enabled preference. It also identifies the optional writable\nreview and deprecation compatibility APIs without implying that the current POC\nenforces organization-wide review.\n" - filename: 2026-08-14-asset-lifecycle-documentation.md + - content: "---\nsubject: Explain document access in business terms\npackages:\n orgmemory:\n type: minor\n---\n\n## Features\n\nAdministrators can check a user's current document access with a named business\nassignment path, separate document availability, and the time permissions were\nevaluated. Unknown or unavailable derivations remain explicit instead of being\npresented as direct or inherited access, and technical authorization identifiers\nstay out of the primary User Detail experience.\n" + filename: 2026-08-15-business-access-explanation.md v: 0.0.0 - - content: "---\nsubject: Keep Drive permissions current through bounded crawls\npackages:\n orgmemory:\n type: minor\n---\n\n## Features\n\nGoogle Drive crawls now bound retained text without abandoning permission checks\nfor the remaining files. Administrators can inspect content and permission\nhealth separately, understand partial crawl outcomes, and open the exact crawl\nlimits that need attention from the connection detail page.\n" - filename: google-drive-ingestion-hardening.md + - content: "---\nsubject: Restyle the Keycloak OAuth consent page\npackages:\n orgmemory:\n type: patch\n---\n\n## Fixes\n\nThe OAuth consent page shown when an MCP client such as Claude requests\naccess now renders with the OrgMemory login theme: centered card on the\nthemed canvas in light and dark mode, a readable scope list, and a\nconsistent full-width accept/cancel pair. Previously the page lost the\ntheme layout entirely and rendered as an unstyled card in the top-left\ncorner.\n" + filename: keycloak-consent-page-restyle.md v: 0.0.0 - - content: "---\nsubject: Author governed Prompts in the Asset library\npackages:\n orgmemory:\n type: minor\n---\n\n## Features\n\nCreate and edit private Prompt working copies in the Asset library with typed\nvariables, bounded synthetic test cases, and optional Knowledge requirements.\nOwners can publish an immutable version directly, then run the tests embedded\nin that exact release without adding a review workflow or changing who can see\nthe Asset.\n" - filename: prompt-asset-authoring.md + - content: "---\nsubject: Keep MCP answers and released Assets within their intended authority\npackages:\n orgmemory:\n type: patch\n---\n\n## Fixes\n\nMCP knowledge search now gives connected assistants stable source numbers and\ndirect-answer guidance without exposing permission details unnecessarily.\nReleased Asset instructions remain below the connected assistant's system,\nsafety, and tool-permission policies; Skill tool declarations do not grant\naccess, hidden relations remain opaque, and Asset discovery returns a bounded\ncandidate set before exact-release use.\n" + filename: mcp-answer-and-asset-behavior.md v: 0.0.0 core:packages: - changelogIds: - - 2026-08-14-asset-lifecycle-documentation.md - - google-drive-ingestion-hardening.md - - prompt-asset-authoring.md + - 2026-08-15-business-access-explanation.md + - keycloak-consent-page-restyle.md + - mcp-answer-and-asset-behavior.md id: product:orgmemory updated: true diff --git a/apps/docs/content/docs/changelog/meta.json b/apps/docs/content/docs/changelog/meta.json index a87186c2..e17c7e85 100644 --- a/apps/docs/content/docs/changelog/meta.json +++ b/apps/docs/content/docs/changelog/meta.json @@ -6,6 +6,7 @@ "pagesIndex": "index", "pages": [ "[Latest](/docs/changelog)", + "[v0.6.0](/docs/changelog#organizational-ai-memory-v060)", "[v0.5.0](/docs/changelog#organizational-ai-memory-v050)", "[v0.4.2](/docs/changelog#organizational-ai-memory-v042)", "[v0.4.1](/docs/changelog#organizational-ai-memory-v041)", diff --git a/apps/docs/content/docs/changelog/meta.vi.json b/apps/docs/content/docs/changelog/meta.vi.json index bb39602b..3fe8b1d5 100644 --- a/apps/docs/content/docs/changelog/meta.vi.json +++ b/apps/docs/content/docs/changelog/meta.vi.json @@ -6,6 +6,7 @@ "pagesIndex": "index", "pages": [ "[Mới nhất](/vi/docs/changelog)", + "[v0.6.0](/vi/docs/changelog#organizational-ai-memory-v060)", "[v0.5.0](/vi/docs/changelog#organizational-ai-memory-v050)", "[v0.4.2](/vi/docs/changelog#organizational-ai-memory-v042)", "[v0.4.1](/vi/docs/changelog#organizational-ai-memory-v041)", diff --git a/apps/docs/content/includes/product-changelog.md b/apps/docs/content/includes/product-changelog.md index 11e3917c..a450a5dc 100644 --- a/apps/docs/content/includes/product-changelog.md +++ b/apps/docs/content/includes/product-changelog.md @@ -1,5 +1,39 @@ [//]: # (Generated from release/CHANGELOG.md by Tegami. Do not edit manually.) +## Organizational AI Memory v0.6.0 + +### Explain document access in business terms + +#### Features + +Administrators can check a user's current document access with a named business +assignment path, separate document availability, and the time permissions were +evaluated. Unknown or unavailable derivations remain explicit instead of being +presented as direct or inherited access, and technical authorization identifiers +stay out of the primary User Detail experience. + +### Restyle the Keycloak OAuth consent page + +#### Fixes + +The OAuth consent page shown when an MCP client such as Claude requests +access now renders with the OrgMemory login theme: centered card on the +themed canvas in light and dark mode, a readable scope list, and a +consistent full-width accept/cancel pair. Previously the page lost the +theme layout entirely and rendered as an unstyled card in the top-left +corner. + +### Keep MCP answers and released Assets within their intended authority + +#### Fixes + +MCP knowledge search now gives connected assistants stable source numbers and +direct-answer guidance without exposing permission details unnecessarily. +Released Asset instructions remain below the connected assistant's system, +safety, and tool-permission policies; Skill tool declarations do not grant +access, hidden relations remain opaque, and Asset discovery returns a bounded +candidate set before exact-release use. + ## Organizational AI Memory v0.5.0 ### Clarify the owner-led Asset lifecycle diff --git a/release/CHANGELOG.md b/release/CHANGELOG.md index f16d3945..9be36aa2 100644 --- a/release/CHANGELOG.md +++ b/release/CHANGELOG.md @@ -2,6 +2,42 @@ Product releases are assembled from reviewed entries under `.tegami/`. +## orgmemory@0.6.0 + +### Explain document access in business terms + +#### Features + +Administrators can check a user's current document access with a named business +assignment path, separate document availability, and the time permissions were +evaluated. Unknown or unavailable derivations remain explicit instead of being +presented as direct or inherited access, and technical authorization identifiers +stay out of the primary User Detail experience. + +### Restyle the Keycloak OAuth consent page + +#### Fixes + +The OAuth consent page shown when an MCP client such as Claude requests +access now renders with the OrgMemory login theme: centered card on the +themed canvas in light and dark mode, a readable scope list, and a +consistent full-width accept/cancel pair. Previously the page lost the +theme layout entirely and rendered as an unstyled card in the top-left +corner. + +### Keep MCP answers and released Assets within their intended authority + +#### Fixes + +MCP knowledge search now gives connected assistants stable source numbers and +direct-answer guidance without exposing permission details unnecessarily. +Released Asset instructions remain below the connected assistant's system, +safety, and tool-permission policies; Skill tool declarations do not grant +access, hidden relations remain opaque, and Asset discovery returns a bounded +candidate set before exact-release use. + + + ## orgmemory@0.5.0 ### Clarify the owner-led Asset lifecycle diff --git a/release/artifacts.json b/release/artifacts.json index 19b64f44..439b510e 100644 --- a/release/artifacts.json +++ b/release/artifacts.json @@ -1,57 +1,57 @@ { "schemaVersion": 1, - "releaseSourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", + "releaseSourceSha": "db999fab09a2f012f276909878840e1941fa2711", "product": { - "decisionRunId": 31893796168, - "manifestRunId": 31893796168, - "commitSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", + "decisionRunId": 31900617574, + "manifestRunId": 31900617574, + "commitSha": "db999fab09a2f012f276909878840e1941fa2711", "images": [ { "component": "api", - "reference": "ghcr.io/kl3init/orgmemory-api:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", - "digest": "sha256:4a20e31d5e3644219ac181024f5b100070ad2ba034d658b14374eae1e1a60095", - "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e" + "reference": "ghcr.io/kl3init/orgmemory-api:sha-db999fab09a2f012f276909878840e1941fa2711", + "digest": "sha256:2b241da5d54d21662f8e43a49a8537ebd3009ab83ac367c5b22fb47272891a40", + "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08" }, { "component": "worker", - "reference": "ghcr.io/kl3init/orgmemory-worker:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", - "digest": "sha256:a7157998ebd3c3e04d228a62e27ba42d6e457333e748b59936b4f9c01ae3a6d9", - "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e" + "reference": "ghcr.io/kl3init/orgmemory-worker:sha-db999fab09a2f012f276909878840e1941fa2711", + "digest": "sha256:a465fcec1e152ceae5f9c6f5478c73e0eb8afc2c1a2fca2ac9c5d52a706d3959", + "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08" }, { "component": "mcp", - "reference": "ghcr.io/kl3init/orgmemory-mcp:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", - "digest": "sha256:b639e0e538d2bfdf31499438b1fe4c06562b9140262ee68a6a3c68f7285aacd8", - "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e" + "reference": "ghcr.io/kl3init/orgmemory-mcp:sha-db999fab09a2f012f276909878840e1941fa2711", + "digest": "sha256:34eda44cd03389c1095b8db0fb16fa8b867857e9276a9e61d9fc55e98cc631af", + "sourceSha": "db999fab09a2f012f276909878840e1941fa2711" }, { "component": "web", - "reference": "ghcr.io/kl3init/orgmemory-web:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", - "digest": "sha256:11ca4d944380af5260bba0021381c2c1c394005a2eb90b2dd35e95488c906c19", - "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e" + "reference": "ghcr.io/kl3init/orgmemory-web:sha-db999fab09a2f012f276909878840e1941fa2711", + "digest": "sha256:494c5c2348f9d611ff180f6281cf2b1bd7f50b6335d87969c3fc79ac324da640", + "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08" }, { "component": "keycloak", - "reference": "ghcr.io/kl3init/orgmemory-keycloak:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", - "digest": "sha256:809021d6c85c4508ecd6a67d1edd74c50f5559c2b7db7d67161682e86d2804c7", - "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e" + "reference": "ghcr.io/kl3init/orgmemory-keycloak:sha-db999fab09a2f012f276909878840e1941fa2711", + "digest": "sha256:fdd438632057fd3ec6c2a62578098c34a81dd66bfb2b892721a1b92f92a9cc5c", + "sourceSha": "af458bec8ecae432a1a726135985c44cbd0ff32c" }, { "component": "postgres-rag", - "reference": "ghcr.io/kl3init/orgmemory-postgres-rag:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e", + "reference": "ghcr.io/kl3init/orgmemory-postgres-rag:sha-db999fab09a2f012f276909878840e1941fa2711", "digest": "sha256:c40a4cae96af1ff6591ea797682d89e434b6649b603a55751ba128d34de40328", "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e" } ] }, "docs": { - "decisionRunId": 31893796228, - "manifestRunId": 31862553678, - "commitSha": "98500ed4beb3775fa8a19cf217cdc84c2d53dc5e", + "decisionRunId": 31900617538, + "manifestRunId": 31897691515, + "commitSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08", "image": { - "reference": "ghcr.io/kl3init/orgmemory-docs:sha-98500ed4beb3775fa8a19cf217cdc84c2d53dc5e", - "digest": "sha256:82c8f5c0f30d117d9fdb2778e57a52b9462531e925c04bdf853236b12d330755", - "sourceSha": "98500ed4beb3775fa8a19cf217cdc84c2d53dc5e" + "reference": "ghcr.io/kl3init/orgmemory-docs:sha-e84f19025b5c9cdfda9dd22c60be20d82bd7fd08", + "digest": "sha256:c828a44233edd7aa3ef85eaa5baf403755e220b8fffd427e245a22d5e9a2cfcc", + "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08" } } } diff --git a/release/product.json b/release/product.json index f1763277..47b2e09f 100644 --- a/release/product.json +++ b/release/product.json @@ -1,4 +1,4 @@ { "name": "orgmemory", - "version": "0.5.0" + "version": "0.6.0" }