chore(release): merge develop for v0.18.1 (conflicts pre-resolved)

.github/workflows/release.yml

@@ -369,6 +369,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
 
       - name: Extract version
         id: version
@@ -435,6 +437,34 @@ jobs:
             } > release-notes.md
           fi
 
+      - name: Append contributor credits
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          {
+            echo ""
+            echo ""
+            echo "## Community contributors"
+            echo ""
+          } >> release-notes.md
+          FOUND=0
+          for PR in $(grep -oE '#[0-9]+' changelog-body.md 2>/dev/null | sort -u); do
+            NUM="${PR#\#}"
+            LOGIN="$(gh pr view "${NUM}" --repo "${GITHUB_REPOSITORY}" --json author --jq '.author.login' 2>/dev/null || true)"
+            [ -z "${LOGIN}" ] && continue
+            case "${LOGIN}" in ajianaz|codecoradev|app/*|*"[bot]") continue ;; esac
+            ASSOC="$(gh api "repos/${GITHUB_REPOSITORY}/pulls/${NUM}" --jq '.author_association' 2>/dev/null || true)"
+            case "${ASSOC}" in MEMBER|COLLABORATOR|OWNER) continue ;; esac
+            TITLE="$(gh pr view "${NUM}" --repo "${GITHUB_REPOSITORY}" --json title --jq '.title' 2>/dev/null || true)"
+            echo "- @${LOGIN} — ${TITLE} (${PR})" >> release-notes.md
+            FOUND=1
+          done
+          if [ "${FOUND}" -eq 0 ]; then
+            echo "(No external contributions in this cycle. Full contributor list: https://github.com/${GITHUB_REPOSITORY}/graphs/contributors)" >> release-notes.md
+          fi
+          echo "--- release-notes.md tail ---"
+          tail -n 10 release-notes.md
+
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:

AGENT.md

@@ -7,7 +7,7 @@
 **Uteke** is a local-first semantic memory engine for AI agents. Single Rust binary, fully offline, ~30ms recall. No API key, Docker, or cloud service needed.
 
 - **Repo:** `codecoradev/uteke` (remote GitHub), local clone
-- **Version:** 0.18.0
+- **Version:** 0.18.1
 - **License:** Apache 2.0
 - **Main branches:** `develop` (default branch, all PRs go here), `main` (release mirror)
 

CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## [Unreleased]
 
+## [0.18.1] - 2026-09-15
+
+Patch release. Theme: **correctness and operational hardening** - structural
+export round-trips cleanly in stores with soft-deleted memories, HTTP write
+payloads reject unknown keys, `uteke upgrade` keeps every installed artifact
+in sync with the release bundle, and `/health` no longer leaks instance
+details to unauthenticated probes.
+
+### Fixed
+
+- **Structural export drops soft-deleted memory references (#1243, #1253)** - `room_memories`, `memory_edges`, and `timeline_events` dumps are filtered by the same liveness predicate as memories; `graph_nodes.memory_id` links to soft-deleted memories are nulled; manifest section counts match the rows actually exported. FK-enforced import into a fresh store now works for real production stores with deprecated memories.
+- **HTTP write endpoints reject unknown keys (#1251, #1254)** - `POST /remember` and `POST /room/remember` return 400 naming the offending key (e.g. a v1-style `ns`) instead of silently dropping it and storing the memory in the default namespace.
+- **`uteke upgrade` updates companion binaries and ORT libs (#1245, #1255)** - `uteke-serve`, `uteke-mcp`, and the bundled `libonnxruntime*` files are replaced from the same checksum-verified archive (atomically, preserving symlinks); the version comparison normalizes the release tag's `v` prefix so an up-to-date install is no longer re-offered the same release.
+- **`GET /health` minimal payload for tokenless requests (#1252, #1257)** - without a valid token the endpoint answers `{"status":"ok"}` only (200, load-balancer friendly); version, memory counts, and update info require a valid bearer token or auth disabled. Server behavior only - CLI/MCP unchanged.
+
+### Added
+
+- **`uteke doctor` success footer (#1246, #1256)** - one quiet line after all checks pass (repo + managed cloud), human output only: skipped for `--json`, non-TTY (CI/pipes), and `doctor_footer = false` in `uteke.toml`.
+
 ## [0.18.0] - 2026-09-13
 
 Minor release. Theme: **agent-operable memory plumbing** - ingest with explicit timestamps, full room lifecycle management, and a recall payload contract that keeps benchmark harnesses honest. Retrieval behavior is unchanged from 0.17.0 (revalidated at the published config: recall@5 non-abs 0.9457, identical per-question rankings).
@@ -26,6 +45,11 @@ Minor release. Theme: **agent-operable memory plumbing** - ingest with explicit
 - **Room rename, room update, and memory room-move (#1202)** — rooms now have sanctioned lifecycle ops matching the namespace family: `Uteke::rename_room(old, new)` rewrites the registry row and every `room_memories`/`room_documents` reference in ONE transaction (FK-safe insert→repoint→delete order; no `ON UPDATE CASCADE` needed), preserving title/description/namespace; `Uteke::update_room(id, title?, description?)` edits room metadata (schema v19 adds the additive `rooms.description` column; structural export/import carry it and stay backward-compatible with 5-column exports); `Uteke::move_memory_to_room(id, from, to)` moves a memory between rooms preserving the link's `author`/`role`/`joined_at` provenance (`Ok(0)` when not a member of `from`). Surfaces: HTTP `POST /room/rename|/room/update|/room/memory/move` (404 on missing room/link), CLI `uteke room rename|update|move-memory`, MCP `uteke_room_rename|uteke_room_update|uteke_room_memory_move`.
 - **`uteke update <id>` CLI** — in-place memory edit (content/tags/importance/pinned/type), closing the CLI surface gap: HTTP `PUT /memory` and MCP `uteke_update` already existed (#1202 item 5).
 
+### Contributors
+
+- [@KazamiHazaki](https://github.com/KazamiHazaki) — binary install ORT lib fixes (#1221)
+- [@dependabot](https://github.com/apps/dependabot) — dependency updates (dirs, tokenizers, toml, usearch)
+
 ## [0.17.0] — 2026-09-06
 
 Minor release. Theme: **inspectable, trustworthy memory** — explain recall on

Cargo.toml

@@ -9,7 +9,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.18.0"
+version = "0.18.1"
 edition = "2024"
 license = "Apache-2.0"
 repository = "https://github.com/codecoradev/uteke"

README.id.md

@@ -82,7 +82,7 @@ menemukan buktinya. 500 pertanyaan hand-curated, lima kemampuan memori. Uteke
 menjalankan suite penuh dengan **nol panggilan LLM di jalur retrieval**: embedding
 lokal, satu CPU, deterministik.
 
-| Metrik | Uteke **v0.17.0** | agentmemory¹ | BM25-only¹ |
+| Metrik | Uteke **v0.18.1** | agentmemory¹ | BM25-only¹ |
 |---|---|---|---|
 | **recall_any@5** (bukti di top-5) | **98.4%** | 95.2% | 86.2% |
 | recall_any@10 | 98.8% | 98.6% | 94.6% |
@@ -92,7 +92,7 @@ lokal, satu CPU, deterministik.
 <sub>¹ Angka publikasi agentmemory, benchmark yang sama, split 500 pertanyaan yang sama (basis recall_any@5 mereka; terverifikasi apples-to-apples di [head-to-head](docs/benchmarks.md#head-to-head-vs-published-systems)). ² Strict = *semua* sesi gold harus masuk top-5; 65% pertanyaan butuh beberapa sesi. Ceiling matematis 99.4%. ³ MRR, bukan recall_all (tidak bisa dibandingkan langsung; ditampilkan untuk kelengkapan).</sub>
 
 <p align="center">
-  <img src="docs/assets/longmemeval-recall-v017.png" alt="LongMemEval-S recall@5: uteke 98.4% (revalidasi v0.18.0) vs MemPalace 96.6% dan agentmemory 95.2% (hasil raw di-commit di repo)" width="880" />
+  <img src="docs/assets/longmemeval-recall-v017.png" alt="LongMemEval-S recall@5: uteke 98.4% (revalidasi v0.18.1) vs MemPalace 96.6% dan agentmemory 95.2% (hasil raw di-commit di repo)" width="880" />
 </p>
 
 **Per kategori pertanyaan** (recall_any@5: cerita per kategori yang jarang ditampilkan tool lain):
@@ -384,7 +384,7 @@ Bisa. Uteke punya MCP server yang langsung pakai dengan Claude Code, Cursor, dan
 <details>
 <summary><strong>Sudah production-ready?</strong></summary>
 
-Uteke sekarang v0.17.0 dengan 200+ test, CI/CD di setiap commit, dan benchmark harness. Dipakai production oleh tim CodeCora dan early adopter lain. Masih di versi 0.x, jadi mungkin ada rough edges, tapi core-nya udah stabil.
+Uteke sekarang v0.18.1 dengan 200+ test, CI/CD di setiap commit, dan benchmark harness. Dipakai production oleh tim CodeCora dan early adopter lain. Masih di versi 0.x, jadi mungkin ada rough edges, tapi core-nya udah stabil.
 </details>
 
 ---

README.md

@@ -78,7 +78,7 @@ finds the evidence. 500 hand-curated questions, five memory abilities. Uteke run
 the full suite with **zero LLM calls in the retrieval path**: local embeddings,
 one CPU, deterministic.
 
-| Metric | uteke **v0.18.0** | agentmemory¹ | BM25-only¹ |
+| Metric | uteke **v0.18.1** | agentmemory¹ | BM25-only¹ |
 |---|---|---|---|
 | **recall_any@5** (evidence in top-5) | **98.4%** | 95.2% | 86.2% |
 | recall_any@10 | 98.8% | 98.6% | 94.6% |
@@ -88,7 +88,7 @@ one CPU, deterministic.
 <sub>¹ agentmemory's published numbers, same benchmark, same 500-question split (their recall_any@5 basis; verified apples-to-apples in our [head-to-head](docs/benchmarks.md#head-to-head-vs-published-systems)). ² Strict = *every* gold session in top-5; 65% of questions have multiple gold sessions. Mathematical ceiling 99.4%. ³ MRR, not recall_all (not directly comparable; shown for completeness).</sub>
 
 <p align="center">
-  <img src="docs/assets/longmemeval-recall-v017.png" alt="LongMemEval-S recall@5: uteke 98.4% (revalidated v0.18.0) vs MemPalace 96.6% and agentmemory 95.2% (raw results committed in-repo)" width="880" />
+  <img src="docs/assets/longmemeval-recall-v017.png" alt="LongMemEval-S recall@5: uteke 98.4% (revalidated v0.18.1) vs MemPalace 96.6% and agentmemory 95.2% (raw results committed in-repo)" width="880" />
 </p>
 
 **By question category** (recall_any@5: the category-level story most tools don't show):
@@ -345,7 +345,7 @@ Yes. Uteke ships with an MCP server that works with Claude Code, Cursor, and Her
 <details>
 <summary><strong>Is it production-ready?</strong></summary>
 
-Uteke is at v0.17.0 with 200+ tests, CI/CD on every commit, and a benchmark harness. It's used in production by the CodeCora team and other early adopters. Still in 0.x, so expect rough edges, but the core is stable.
+Uteke is at v0.18.1 with 200+ tests, CI/CD on every commit, and a benchmark harness. It's used in production by the CodeCora team and other early adopters. Still in 0.x, so expect rough edges, but the core is stable.
 </details>
 
 ---

benchmarks/longmemeval/.gitignore

@@ -17,9 +17,3 @@ results_*/
 __pycache__/
 *.pyc
 .venv/
-
-# Fast-eval datasets are derived from the parent dataset (regenerate with make_fast_eval.py)
-data/longmemeval_fast50.json
-data/longmemeval_fast10.json
-data/longmemeval_temporal15.json
-data/longmemeval_multisession15.json