0.16.0 - 2026-10-20
-
Give private checkpoint upload, full authenticated SQLite verification, and promotion independent step budgets, preserving every custody check and the promotion reserve when verification is slow.
-
Security: Build source, CI, releases, Docker, and optional language helpers with Go 1.27.3 to fix the reachable certificate-validation advisory GO-2026-6809, retaining existing Go language minimums.
-
Refresh the Anthropic SDK, Google API and RPC clients, and Go telemetry dependencies while retaining the Go minimum and SQLite/libc compatibility pins.
-
Refresh the OpenAI SDK, YAML parser, and Go telemetry dependencies while preserving the Go minimum and SQLite/libc compatibility pins.
-
Add a manual, selected-stream historical backfill mode with an explicit UTC-midnight bound less than 31 days old, retaining the ordinary 48-hour window and shared acquisition deadline.
-
Move native and Kiwi macOS CI to Xcode 27, preserve the macOS 13 deployment target, and verify Intel release binaries explicitly through Rosetta.
-
Include bounded numeric rate-limit response headers in checkpoint API errors without exposing private output or retrying failed requests.
-
Use faster gzip compression for private checkpoints, trading larger transfers for less packing CPU while preserving full authenticated database validation.
-
Avoid redundant checkpoint packing reads by hashing the existing byte streams, and separate transfer and restore verification timings while retaining full authenticated disk and SQLite checks.
-
Schedule private acquisition every two hours outside the daily member-refresh slot, preserving one serialized publisher and the existing phase budgets.
-
Pin the reviewed private acquisition policy and keep member refresh within the existing shared acquisition deadline.
-
Let targeted Discord syncs opt into stored direct threads of selected text and announcement roots, so recurring bounded acquisition covers newly discovered threads without changing ordinary channel selection.
-
Bound checkpoint saves by one shared deadline, report safe phase timings, and remove a redundant integrity scan while preserving authenticated full-state verification.
-
Recover an unpublished publisher checkpoint from retained verified state, preserving native provenance and publishing its private archive once through a guarded parent-bound update without collecting again.
-
Finalize an interrupted initial checkpoint from its existing private assets after two complete verified restores, preserving original provenance and holding uncertain publication outcomes for inspection.
-
Add manual, privately scoped report-history acquisition after the normal guild refresh, sharing one time budget and preserving failed progress in private checkpoints; hold recurring and cloud publication until separately qualified.
-
Identify private checkpoint API failures without exposing private output, and inspect a retained failed migration through a bounded read-only diagnostic.
-
Preserve complete native Discord crawl state in verified private checkpoints, with atomic restore, bounded retention, and an explicit migration from the retired workflow cache transport.
-
Export current history-permission denials alongside retained window receipts, fail the sync if that status cannot be saved, and clear the unavailable marker after a successful full or targeted retry.
-
Include voice and stage text chats in message sync, history backfills, and coverage reports; preserve stage channel types when resuming and require CONNECT when verifying their history access.
-
Record permission-verified coverage for explicit bounded full-history scans, including empty windows, without completing older history or extending coverage from routine refreshes.