chore: version packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@donadiosolutions/lcm@2.0.0

Major Changes

• 991d75b: Replace lcm map with unified machine registration and project identity commands, preserving local SQLite hashes while adding explicit PostgreSQL UUIDv7 project pairing and reimage recovery. Add lcm postgres migrate as the supported packaged administrator workflow for provisioning the PostgreSQL schema.
• fb81d39: Replace direct Claude Marketplace distribution with an npm-owned native Claude
  Code integration. Install or update LCM with npm, then run lcm install; the
  installer migrates recognized legacy Marketplace installations before
  registering native hooks, MCP, commands, and skills.
• 92dc218: Update the optional OpenAI peer dependency to OpenAI SDK 7.3.0 and require
  Node.js 22.12.0 or newer.

Minor Changes

• 631481b: Extend automated issue triage to identify, link, and close high-confidence duplicate bug reports.

• 2f4e59f: Support Changesets beta releases with Codex-generated, pull-request-linked draft GitHub notes and publish npm only after a maintainer publishes the draft.

• 9b3f706: Add durable, versioned local passive-event envelopes; staged PostgreSQL inbox delivery, fenced completion, retry, quarantine, exact replay, and crash-safe acknowledgement/pruning; and operator status, validation, quarantine-inspection, and replay commands while keeping hooks fully local and offline.

• 842104b: Launch managed systemd and launchd daemons through a bounded clean environment so ambient manager variables cannot override staged credentials. Consume authenticated launchd credential files once and retain their immutable in-memory startup snapshot for in-process configuration reloads.

• 90a10e4: Manage daemon recovery through the current user's systemd or launchd service
  manager, recreate normally idle services on demand, preserve the tri-state
  no-response boundary, and provide canonical doctor, restart, and connector
  repair guidance instead of offline process recovery.

  Foreground or detached compatibility daemons are not eligible for automatic offline force recovery: if they stop returning HTTP responses, lcm daemon restart refuses and gives operator/manual recovery guidance instead of signaling or replacing the process.

• 87d5179: Add secure SQLite/PostgreSQL backend selection and PostgreSQL connection configuration, while retaining SQLite as the zero-configuration default.

• da03d2d: Add staged PostgreSQL promoted-memory, recall, redaction-administration, and session-coordination repositories with SQLite metadata parity, atomic scoped purge, least-privilege grants, and shared conformance coverage.

• e2b4b63: Add staged PostgreSQL cross-machine transaction locks, fenced leases, final-write validation, fair passive-inbox claims, bounded cleanup, diagnostics, and least-privilege runtime grants.

• 5ab4b25: Unify linked Git worktrees under one local project, transactionally preserve and merge legacy worktree memory, and conservatively reconcile Codex transcripts from deleted managed worktrees.

Patch Changes

• d946542: Make worktree reconciliation, project identity mutations, staged PostgreSQL admission, and cross-project import/export fail closed around one verified project snapshot.
• 051c097: Add the staged PostgreSQL conversation, message, and ordered message-part repository with collision-safe session segments, canonical project-scoped advisory locking, atomic contiguous append allocation, nonnegative safe-integer and U+0000-free text inputs, bigint-safe part ordinals, isolation-fenced scoped transactions, serialized scoped operations, and reviewed least-privilege runtime grants.
• ee87087: Preserve an owned daemon that may be busy when bounded health checks remain unavailable instead of signaling it and starting a replacement.
• 0cc250b: Make generated Markdown connector installs byte-idempotent, preserving the
  established LF or CRLF style in normal rules append-mode installs and avoiding
  extra blank lines in generated SKILL.md files. Rules installs heal recognized
  duplicate current or legacy managed blocks, including the maximal union of
  overlapping or touching recognized ranges, and recover the narrowly recognized
  header-only partial region consisting of a current marker followed only by
  exact # Workflow Instruction lines. Arbitrary ambiguous or malformed
  unmatched marker/header combinations remain preserved conservatively and may
  require a second reinstall to become byte-stable; user-authored Markdown,
  including heading lines, outside recognized regions is not removed. Removing a
  rules connector preserves spaces, tabs, form-feed, and other non-CR/LF user
  Markdown bytes with exactly one established terminal EOL, while blank-line-only
  content is deleted.
• 3bcc75c: Stabilize macOS launchd startup when the GUI domain temporarily retains an absent service label or exposes a transient malformed registration projection after bootstrap. For an exact bootstrap returning numeric code 5 (input/output error), LCM confirms absence before and after each bounded settle and continues only within the same lifecycle deadline, including terminal-job stop/start recovery. Transient malformed metadata is re-observed without mutation during both bounded launchd recovery windows, while persistent malformed state, permission, transport, timeout, ambiguous, registered, other, and deadline-exhausted states remain classified errors.
• f0e0c66: Add the staged PostgreSQL lexical-search repository with full-text ranking, database-normalized bounded trigram eligibility, strict runtime limit validation, regex paths, exact project and filter scoping, timeout-safe transaction handling, least-privilege grants, and PostgreSQL 18 conformance evidence.
• fa0bd2a: Document safe initial and incremental native Question issue-type rollouts.
• 603c95b: Keep worktree reconciliation available when an unrelated stale project-map path crosses a regular file, while preserving strict filesystem validation for the requested project.
• b60b8fd: Recognize Git-compatible inline comments on extensions.worktreeConfig when resolving submodule project identity.
• 2bd1328: Capture bounded semantic context from Codex functions.exec and
  functions.exec_command PostToolUse events, and validate the installed Codex
  hook with structural and no-write functional connector checks.
• 49957e1: Correct the lcm-context skill examples to use the supported repeatable --tag option.
• 38e4106: Add an audience-based documentation index and move the packaged PostgreSQL implementation guides and runtime grant scripts into the storage reference tree.
• 4a54d59: Honor help before required CLI arguments and accept both repeatable store tag spellings.
• 9ea6006: Use authenticated daemon health when doctor reports storage readiness and distinguish unavailable storage from readiness that could not be verified.
• f6927a0: Tighten promotion of passive-learning events when a project working directory
  has disappeared so the flow no longer creates spurious project-map entries for
  never-seen paths, repairs private-directory permissions on existing sidecars,
  and fails closed on malformed or inconsistent persisted parking state during
  both runtime observation and worktree reconciliation.
• eb27833: Restart same-version stale daemons, safely recover the exact empty legacy SQLite instruction cache, and surface per-project compaction scan failures.
• e6167e8: Isolate restored instruction caches by project, machine, client, session, verified worktree, and exact working directory; authenticate linked-worktree metadata bidirectionally and discard unscoped legacy instruction rows during a transactional upgrade.
• 62dc49a: Keep PreCompact hooks best-effort when PostgreSQL credentials are unavailable, require SQLite health checks to prove rollback-safe writes, and retire pooled handles whose rollback fails.
• 6bfc7ab: Make the staged PostgreSQL conformance harness validate its complete run identity before database mutation, require every exposed project repository adapter to register a backend-neutral contract suite, raise nested signal-probe readiness from 30 to 90 seconds with the bounded LCM_TEST_POSTGRES_SIGNAL_READY_TIMEOUT_MS override, register signal runs before readiness, exhaustively audit every registered run and Docker resource class, converge transient whole-run cleanup failures before signal exit, retain bounded sanitized cleanup diagnostics, remove verified private directories after orphan reclamation, fail signal tests when Docker cleanup does not complete, and tolerate an exactly owned Docker resource disappearing during concurrent orphan recovery.
• 9c24fae: Accept Git config files up to 4 MiB during project identity resolution while retaining the stricter 64 KiB limit for Git topology pointers.
• 9c43b01: Add locally scrubbed, append-only PostgreSQL native transcript ingestion with exact message provenance, resumable checkpoints, metadata-only local quarantine, and least-privilege runtime access.
• 1332a89: Allow worktree reconciliation to preserve an identical passive-event predecessor after that predecessor has been pruned from both local event databases.
• ff9a468: Prevent worktree reconciliation from changing passive-event predecessor identity after delivery may have reached PostgreSQL.
• f930c8f: Add the transactional PostgreSQL 18 schema, backend-neutral project identity, bounded exact session-ID lookup, complete applied-baseline inventory verification, identity-function drift fingerprinting, scoped privilege hardening, and namespace-aware extension readiness for upcoming PostgreSQL storage adapters.
• 025030b: Add staged PostgreSQL summary-DAG, context-item, and large-file repositories with deterministic traversal, transactional graph integrity, fenced mutation support, least-privilege grants, conformance coverage, and operator diagnostics.
• 5ab4b25: Prevent Codex-backed compaction from rejecting otherwise valid user configuration when LCM applies reasoning-effort or fast-mode overrides.
• 388490f: Bound doctor health checks and recover the managed daemon once when automatic post-compaction promotion loses its transport.
• f6927a0: Persist missing-working-directory confirmation and reversible local-promotion parking in each existing passive-learning sidecar. Three observations at least five minutes apart now survive daemon restarts and sparse sweep rotations without a fixed expiry. Parking no longer advances event processed_at: unprocessed events, history, and delivery state remain intact, repeated absent sweeps return a quiet terminal state, and a later cwd recovery clears the state and promotes the preserved backlog normally.
• 73bbd65: Prevent bounded reads from blocking on special files such as FIFOs.
• 8114f15: Add the internal verified-TLS PostgreSQL 18 pool and migration foundation plus a digest-pinned, run-isolated conformance harness for upcoming PostgreSQL storage adapters.
• 0bc28df: Make daemon startup recovery retire authenticated terminal systemd registrations, including stale failed units, before proving absence and recreating the managed service. This completes the Foreground daemon startup fails during authenticated bootstrap-lock contention #663/Daemon restart cannot retire failed stale systemd registration #665 daemon startup-recovery lifecycle hardening.
• fbea2ff: Migrate authenticated legacy Linux daemons only after their PID file disappears during exact stop, bind bounded systemd stop/final polling to the exact authenticated invocation ID until unit absence, and refuse every discoverable unit that is not fully authenticated running or PID evidence whose descriptor cannot be closed safely.
• 2ecc6b4: Make the PostgreSQL development harness recover proven stale Docker resources safely and clean up local test consumers reliably after process termination.
• 9ee092d: Reject accessor-backed and symbol-bearing promoted metadata arrays before reading their values.
• 89c83fb: Keep public daemon health storage-free and path-free while retaining authenticated health diagnostics for lifecycle checks, clients, and doctor.
• 1e5ebcd: Require authenticated Git metadata backlinks and contained common directories while parsing bounded worktree configuration without backtracking.
• dab7f57: Update the bundled URI parser to a patched release that prevents backslash authority host confusion while preserving the deduplicated MCP SDK and AJV build graph.
• e3ed05a: Keep healthy managed daemons admissible when callers differ only in shell locale or time-zone presentation settings.
• 10f545c: Keep default managed daemon start, doctor, and restart calls on one packaged runtime identity, and wait through an exact bounded systemd stop transition before recreating the service.
• e7baaba: Correct lcm stats compression output to compare compacted conversations with the total conversation count.
• 8dce7d9: Document the crash-recoverable backend-publication admission boundary, secure
  local state-root establishment, staged PostgreSQL privilege posture, and
  fail-closed operator behavior.
• 247c55e: Repair an authenticated managed daemon with stale service configuration during lcm doctor while preserving fail-closed lifecycle refusals and reporting the repaired restart.
• df2bb7d: Allow trusted immutable-release recovery to authenticate a manually published
  release when an exact failed draft workflow for the same signed tag and commit
  completed before publication, while preserving all tag, ancestry, history,
  artifact, and npm ordering checks.
• 4ccf628: Harden release publication against local tarball path ambiguity and delayed npm registry propagation.
• 0aea3d3: Honor Git's final extensions.worktreeConfig assignment and keep exact retired event fences out of sidecar health scans while surfacing malformed candidates.
• caa0ed2: Keep MCP SDK build dependencies out of published consumer dependency paths, install and verify native Claude settings before removing Marketplace plugins, normalize legacy HTTP/SSE entries to stdio while preserving compatible options, and preview native settings changes without mutating them during dry-run.
• 73a82cd: Replace polling external admission with event-driven evaluation and add a default-branch repository_dispatch recovery path for exact commit SHAs.
• a909b21: Harden PostgreSQL test-process and orphan-resource teardown, and clean isolated Vitest homes at the end of each run.
• dbbd850: Prevent private mutation-lock ownership checks from executing process-birth helpers found through an untrusted PATH or working directory.
• e5c524c: Validate release markers and publication history with trusted default-branch policy before tagged package code is available.

Dismissed because a newer commit was pushed; Greptile will re-review the current head.

Dismissed because a newer commit was pushed; Greptile will re-review the current head.