Version Packages

.tegami/publish-lock.yaml

@@ -1,17 +1,17 @@
 core:changelogs:
-  - content: "---\nsubject: Clarify the owner-led Asset lifecycle\npackages:\n  orgmemory:\n    type: patch\n---\n\n## Documentation\n\nPublic guidance now distinguishes mutable working copies, independent sharing\nstate, immutable exact Releases, ownership transfer, Asset withdrawal, and the\nper-user Skill Enabled preference. It also identifies the optional writable\nreview and deprecation compatibility APIs without implying that the current POC\nenforces organization-wide review.\n"
-    filename: 2026-08-14-asset-lifecycle-documentation.md
+  - content: "---\nsubject: Explain document access in business terms\npackages:\n  orgmemory:\n    type: minor\n---\n\n## Features\n\nAdministrators can check a user's current document access with a named business\nassignment path, separate document availability, and the time permissions were\nevaluated. Unknown or unavailable derivations remain explicit instead of being\npresented as direct or inherited access, and technical authorization identifiers\nstay out of the primary User Detail experience.\n"
+    filename: 2026-08-15-business-access-explanation.md
     v: 0.0.0
-  - content: "---\nsubject: Keep Drive permissions current through bounded crawls\npackages:\n  orgmemory:\n    type: minor\n---\n\n## Features\n\nGoogle Drive crawls now bound retained text without abandoning permission checks\nfor the remaining files. Administrators can inspect content and permission\nhealth separately, understand partial crawl outcomes, and open the exact crawl\nlimits that need attention from the connection detail page.\n"
-    filename: google-drive-ingestion-hardening.md
+  - content: "---\nsubject: Restyle the Keycloak OAuth consent page\npackages:\n  orgmemory:\n    type: patch\n---\n\n## Fixes\n\nThe OAuth consent page shown when an MCP client such as Claude requests\naccess now renders with the OrgMemory login theme: centered card on the\nthemed canvas in light and dark mode, a readable scope list, and a\nconsistent full-width accept/cancel pair. Previously the page lost the\ntheme layout entirely and rendered as an unstyled card in the top-left\ncorner.\n"
+    filename: keycloak-consent-page-restyle.md
     v: 0.0.0
-  - content: "---\nsubject: Author governed Prompts in the Asset library\npackages:\n  orgmemory:\n    type: minor\n---\n\n## Features\n\nCreate and edit private Prompt working copies in the Asset library with typed\nvariables, bounded synthetic test cases, and optional Knowledge requirements.\nOwners can publish an immutable version directly, then run the tests embedded\nin that exact release without adding a review workflow or changing who can see\nthe Asset.\n"
-    filename: prompt-asset-authoring.md
+  - content: "---\nsubject: Keep MCP answers and released Assets within their intended authority\npackages:\n  orgmemory:\n    type: patch\n---\n\n## Fixes\n\nMCP knowledge search now gives connected assistants stable source numbers and\ndirect-answer guidance without exposing permission details unnecessarily.\nReleased Asset instructions remain below the connected assistant's system,\nsafety, and tool-permission policies; Skill tool declarations do not grant\naccess, hidden relations remain opaque, and Asset discovery returns a bounded\ncandidate set before exact-release use.\n"
+    filename: mcp-answer-and-asset-behavior.md
     v: 0.0.0
 core:packages:
   - changelogIds:
-      - 2026-08-14-asset-lifecycle-documentation.md
-      - google-drive-ingestion-hardening.md
-      - prompt-asset-authoring.md
+      - 2026-08-15-business-access-explanation.md
+      - keycloak-consent-page-restyle.md
+      - mcp-answer-and-asset-behavior.md
     id: product:orgmemory
     updated: true

apps/docs/content/docs/changelog/meta.json

@@ -6,6 +6,7 @@
   "pagesIndex": "index",
   "pages": [
     "[Latest](/docs/changelog)",
+    "[v0.6.0](/docs/changelog#organizational-ai-memory-v060)",
     "[v0.5.0](/docs/changelog#organizational-ai-memory-v050)",
     "[v0.4.2](/docs/changelog#organizational-ai-memory-v042)",
     "[v0.4.1](/docs/changelog#organizational-ai-memory-v041)",

apps/docs/content/docs/changelog/meta.vi.json

@@ -6,6 +6,7 @@
   "pagesIndex": "index",
   "pages": [
     "[Mới nhất](/vi/docs/changelog)",
+    "[v0.6.0](/vi/docs/changelog#organizational-ai-memory-v060)",
     "[v0.5.0](/vi/docs/changelog#organizational-ai-memory-v050)",
     "[v0.4.2](/vi/docs/changelog#organizational-ai-memory-v042)",
     "[v0.4.1](/vi/docs/changelog#organizational-ai-memory-v041)",

apps/docs/content/includes/product-changelog.md

@@ -1,5 +1,39 @@
 [//]: # (Generated from release/CHANGELOG.md by Tegami. Do not edit manually.)
 
+## Organizational AI Memory v0.6.0
+
+### Explain document access in business terms
+
+#### Features
+
+Administrators can check a user's current document access with a named business
+assignment path, separate document availability, and the time permissions were
+evaluated. Unknown or unavailable derivations remain explicit instead of being
+presented as direct or inherited access, and technical authorization identifiers
+stay out of the primary User Detail experience.
+
+### Restyle the Keycloak OAuth consent page
+
+#### Fixes
+
+The OAuth consent page shown when an MCP client such as Claude requests
+access now renders with the OrgMemory login theme: centered card on the
+themed canvas in light and dark mode, a readable scope list, and a
+consistent full-width accept/cancel pair. Previously the page lost the
+theme layout entirely and rendered as an unstyled card in the top-left
+corner.
+
+### Keep MCP answers and released Assets within their intended authority
+
+#### Fixes
+
+MCP knowledge search now gives connected assistants stable source numbers and
+direct-answer guidance without exposing permission details unnecessarily.
+Released Asset instructions remain below the connected assistant's system,
+safety, and tool-permission policies; Skill tool declarations do not grant
+access, hidden relations remain opaque, and Asset discovery returns a bounded
+candidate set before exact-release use.
+
 ## Organizational AI Memory v0.5.0
 
 ### Clarify the owner-led Asset lifecycle

release/CHANGELOG.md

@@ -2,6 +2,42 @@
 
 Product releases are assembled from reviewed entries under `.tegami/`.
 
+## orgmemory@0.6.0
+
+### Explain document access in business terms
+
+#### Features
+
+Administrators can check a user's current document access with a named business
+assignment path, separate document availability, and the time permissions were
+evaluated. Unknown or unavailable derivations remain explicit instead of being
+presented as direct or inherited access, and technical authorization identifiers
+stay out of the primary User Detail experience.
+
+### Restyle the Keycloak OAuth consent page
+
+#### Fixes
+
+The OAuth consent page shown when an MCP client such as Claude requests
+access now renders with the OrgMemory login theme: centered card on the
+themed canvas in light and dark mode, a readable scope list, and a
+consistent full-width accept/cancel pair. Previously the page lost the
+theme layout entirely and rendered as an unstyled card in the top-left
+corner.
+
+### Keep MCP answers and released Assets within their intended authority
+
+#### Fixes
+
+MCP knowledge search now gives connected assistants stable source numbers and
+direct-answer guidance without exposing permission details unnecessarily.
+Released Asset instructions remain below the connected assistant's system,
+safety, and tool-permission policies; Skill tool declarations do not grant
+access, hidden relations remain opaque, and Asset discovery returns a bounded
+candidate set before exact-release use.
+
+
+
 ## orgmemory@0.5.0
 
 ### Clarify the owner-led Asset lifecycle

release/artifacts.json

@@ -1,57 +1,57 @@
 {
   "schemaVersion": 1,
-  "releaseSourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
+  "releaseSourceSha": "db999fab09a2f012f276909878840e1941fa2711",
   "product": {
-    "decisionRunId": 31893796168,
-    "manifestRunId": 31893796168,
-    "commitSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
+    "decisionRunId": 31900617574,
+    "manifestRunId": 31900617574,
+    "commitSha": "db999fab09a2f012f276909878840e1941fa2711",
     "images": [
       {
         "component": "api",
-        "reference": "ghcr.io/kl3init/orgmemory-api:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
-        "digest": "sha256:4a20e31d5e3644219ac181024f5b100070ad2ba034d658b14374eae1e1a60095",
-        "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e"
+        "reference": "ghcr.io/kl3init/orgmemory-api:sha-db999fab09a2f012f276909878840e1941fa2711",
+        "digest": "sha256:2b241da5d54d21662f8e43a49a8537ebd3009ab83ac367c5b22fb47272891a40",
+        "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08"
       },
       {
         "component": "worker",
-        "reference": "ghcr.io/kl3init/orgmemory-worker:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
-        "digest": "sha256:a7157998ebd3c3e04d228a62e27ba42d6e457333e748b59936b4f9c01ae3a6d9",
-        "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e"
+        "reference": "ghcr.io/kl3init/orgmemory-worker:sha-db999fab09a2f012f276909878840e1941fa2711",
+        "digest": "sha256:a465fcec1e152ceae5f9c6f5478c73e0eb8afc2c1a2fca2ac9c5d52a706d3959",
+        "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08"
       },
       {
         "component": "mcp",
-        "reference": "ghcr.io/kl3init/orgmemory-mcp:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
-        "digest": "sha256:b639e0e538d2bfdf31499438b1fe4c06562b9140262ee68a6a3c68f7285aacd8",
-        "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e"
+        "reference": "ghcr.io/kl3init/orgmemory-mcp:sha-db999fab09a2f012f276909878840e1941fa2711",
+        "digest": "sha256:34eda44cd03389c1095b8db0fb16fa8b867857e9276a9e61d9fc55e98cc631af",
+        "sourceSha": "db999fab09a2f012f276909878840e1941fa2711"
       },
       {
         "component": "web",
-        "reference": "ghcr.io/kl3init/orgmemory-web:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
-        "digest": "sha256:11ca4d944380af5260bba0021381c2c1c394005a2eb90b2dd35e95488c906c19",
-        "sourceSha": "23285b740bbfe5ddb6b698d893ae8e4e5c25b66e"
+        "reference": "ghcr.io/kl3init/orgmemory-web:sha-db999fab09a2f012f276909878840e1941fa2711",
+        "digest": "sha256:494c5c2348f9d611ff180f6281cf2b1bd7f50b6335d87969c3fc79ac324da640",
+        "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08"
       },
       {
         "component": "keycloak",
-        "reference": "ghcr.io/kl3init/orgmemory-keycloak:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
-        "digest": "sha256:809021d6c85c4508ecd6a67d1edd74c50f5559c2b7db7d67161682e86d2804c7",
-        "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e"
+        "reference": "ghcr.io/kl3init/orgmemory-keycloak:sha-db999fab09a2f012f276909878840e1941fa2711",
+        "digest": "sha256:fdd438632057fd3ec6c2a62578098c34a81dd66bfb2b892721a1b92f92a9cc5c",
+        "sourceSha": "af458bec8ecae432a1a726135985c44cbd0ff32c"
       },
       {
         "component": "postgres-rag",
-        "reference": "ghcr.io/kl3init/orgmemory-postgres-rag:sha-23285b740bbfe5ddb6b698d893ae8e4e5c25b66e",
+        "reference": "ghcr.io/kl3init/orgmemory-postgres-rag:sha-db999fab09a2f012f276909878840e1941fa2711",
         "digest": "sha256:c40a4cae96af1ff6591ea797682d89e434b6649b603a55751ba128d34de40328",
         "sourceSha": "15ae13d9ea5e8bd46d33b1c8dac0ba4d0e14643e"
       }
     ]
   },
   "docs": {
-    "decisionRunId": 31893796228,
-    "manifestRunId": 31862553678,
-    "commitSha": "98500ed4beb3775fa8a19cf217cdc84c2d53dc5e",
+    "decisionRunId": 31900617538,
+    "manifestRunId": 31897691515,
+    "commitSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08",
     "image": {
-      "reference": "ghcr.io/kl3init/orgmemory-docs:sha-98500ed4beb3775fa8a19cf217cdc84c2d53dc5e",
-      "digest": "sha256:82c8f5c0f30d117d9fdb2778e57a52b9462531e925c04bdf853236b12d330755",
-      "sourceSha": "98500ed4beb3775fa8a19cf217cdc84c2d53dc5e"
+      "reference": "ghcr.io/kl3init/orgmemory-docs:sha-e84f19025b5c9cdfda9dd22c60be20d82bd7fd08",
+      "digest": "sha256:c828a44233edd7aa3ef85eaa5baf403755e220b8fffd427e245a22d5e9a2cfcc",
+      "sourceSha": "e84f19025b5c9cdfda9dd22c60be20d82bd7fd08"
     }
   }
 }

release/product.json

@@ -1,4 +1,4 @@
 {
   "name": "orgmemory",
-  "version": "0.5.0"
+  "version": "0.6.0"
 }