chore(release): v3.0.0-beta.1 (#432)

* chore(release): v3.0.0-beta.1 version and release notes from the changelog

* chore(release): changelog for v3.0.0-beta.1

* fix(packaging): the frozen engine starts, calls models and loads tools for Claude Code

The first v3.0.0-beta.1 build shipped an engine that crashed on start (no numpy: release.yaml
left out the voice extra), broke every model call (tokenizers excluded, but litellm imports it),
and could not run claude-code-tools (missing from engine_entry's commands). build_engine.py only
checked `version`, which imports none of that.

- release.yaml installs .[dev,voice,whatsapp]
- the spec no longer excludes tokenizers
- engine_entry knows every CLI command; a test fails when they drift
- a hidden `selfcheck` command imports the runtime modules and the migrations; build_engine.py
  runs it and a real `serve` until /api/health answers

* fix(release): an entry that names its own issue is not listed twice

* fix(release): use real backreferences in the duplicate-issue check

Author: itsskofficial

.github/workflows/release.yaml

@@ -34,7 +34,9 @@ jobs:
         run: |
           uv venv .venv --python 3.12
           if [ "$RUNNER_OS" = "Windows" ]; then PY=.venv/Scripts/python.exe; else PY=.venv/bin/python; fi
-          uv pip install --python "$PY" -e ".[dev,whatsapp]"
+          # voice brings numpy, which the engine imports on start (sentient.voice); the heavy voice runtimes stay
+          # out of the frozen engine through the EXCLUDES in packaging/sentient-engine.spec
+          uv pip install --python "$PY" -e ".[dev,voice,whatsapp]"
       - name: Build installer
         working-directory: desktop
         env:
@@ -57,13 +59,29 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v7
       - uses: actions/download-artifact@v7
         with:
           path: dist
           merge-multiple: true
+      # The release notes are this version's section of CHANGELOG.md (built from changes/ by
+      # packaging/release_changelog.py), so users read the same plain-language notes everywhere.
+      - name: Release notes from CHANGELOG.md
+        env:
+          VERSION: ${{ github.ref_name }}
+        run: |
+          v="${VERSION#v}"
+          awk -v head="## [$v]" '
+            index($0, head) == 1 { on = 1; next }
+            on && /^## \[/ { exit }
+            on && /^\[[^]]+\]: / { exit }
+            on { print }
+          ' CHANGELOG.md > notes.md
+          if [ ! -s notes.md ]; then echo "::error::CHANGELOG.md has no section for $v"; exit 1; fi
+          printf '\n---\nInstallers are not code-signed yet, so Windows SmartScreen and macOS Gatekeeper will warn the first time you open them.\n' >> notes.md
       - uses: softprops/action-gh-release@v3
         with:
           draft: true
           prerelease: ${{ contains(github.ref_name, '-') }}
-          generate_release_notes: true
+          body_path: notes.md
           files: dist/*

CHANGELOG.md

@@ -10,7 +10,14 @@ released.
 
 <!-- towncrier release notes start -->
 
+## [3.0.0-beta.1] - 2026-10-17
+
 ### Added
+- **Disconnecting can also mean forgetting.** When you disconnect Gmail, IMAP, Home Assistant or another app, remove an
+  MCP server, a device or a folder of notes, or disconnect Telegram, Discord or WhatsApp, you can tick "Also forget what
+  Sentient learned from it". The dialog says how much that is first, then the memories, chats, summaries, saved emails
+  and app results that came from it are deleted, and Activity notes it. A memory you also shared somewhere else stays.
+  Leave the box clear and Sentient keeps what it learned (#153).
 - **Skills can say how to check they work.** A skill can list a file that must exist or a few lines of Python with the
   output they should print. Sentient checks a skill it drafted for itself before it shows it to you, and doesn't
   propose one that fails. A check that runs code waits until you approve the skill (the button says "Approve and run
@@ -444,6 +451,7 @@ released.
   skip. Nothing catches up while Stop everything is on; it happens when you resume.
 
 ### Changed
+- Database changes are now numbered files in `sentient/store/migrations/`, and the schema version is the highest of them, so two changes can no longer silently take the same version. The database moves to version 13, so the first start after updating takes a snapshot first, as with any database update. (#424)
 - **Incognito chats leave nothing behind:** when an incognito chat is deleted, the long results it saved
   while reading pages or files go with it. Files you asked it to write and tasks it created stay.
 - A task that repeats the same failing step three times now pauses as stuck and asks what to do, instead of failing.
@@ -668,5 +676,6 @@ Sentient v3: a rewrite as a desktop app that runs on your own computer. No accou
 
 The cloud web app. Its history is on the [`v2` branch](https://github.com/existence-master/Sentient/tree/v2).
 
-[Unreleased]: https://github.com/existence-master/Sentient/compare/v2-final...main
+[Unreleased]: https://github.com/existence-master/Sentient/compare/v3.0.0-beta.1...main
+[3.0.0-beta.1]: https://github.com/existence-master/Sentient/releases/tag/v3.0.0-beta.1
 [3.0.0-alpha.0]: https://github.com/existence-master/Sentient/tree/main

changes/153.added.md

@@ -1,7 +1,7 @@
 {
   "name": "sentient-desktop",
   "productName": "Sentient",
-  "version": "3.0.0-alpha.0",
+  "version": "3.0.0-beta.1",
   "description": "Sentient - your local-first personal assistant",
   "author": "Existence",
   "private": true,

changes/424.changed.md

@@ -229,11 +229,17 @@ npm run package:win        # just the installer (reuses desktop/build/engine)
 ```
 
 Take `desktop/.build.lock` first: packaging rebuilds the shared `desktop/out`.
-The Windows result is `desktop/dist/Sentient-Setup-<version>.exe` (~216 MiB), a
+The Windows result is `desktop/dist/Sentient-Setup-<version>.exe` (~246 MiB), a
 per-user NSIS installer that needs no administrator rights and installs into
 `%LOCALAPPDATA%\Programs\Sentient`. `/S` installs and uninstalls silently.
 Uninstalling leaves `~/.sentient` alone: that is the user's memories and tasks.
 
+`packaging/build_engine.py` checks the frozen engine before staging it: `version`, then `selfcheck` (a hidden
+command that imports everything the engine needs at runtime, including litellm and numpy, and the database
+migrations), then a real `serve` on a throwaway data folder until `GET /api/health` answers. Before a release, also
+run the unpacked app (`desktop/dist/win-unpacked`) against a fresh `SENTIENT_HOME` and send one chat: the checks
+above can't see what only a model call or the Claude Code backend exercises.
+
 | File | What it is |
 |---|---|
 | `packaging/sentient-engine.spec` | PyInstaller spec: hidden imports, data files, exclusions |

desktop/package-lock.json

@@ -68,15 +68,65 @@ def freeze(clean: bool) -> None:
         raise SystemExit(f"PyInstaller failed with exit code {result.returncode}")
 
 
+def _free_port() -> int:
+    import socket
+
+    with socket.socket() as s:
+        s.bind(("127.0.0.1", 0))
+        return s.getsockname()[1]
+
+
+def _serve_check(exe: Path) -> None:
+    """Start `serve` on a throwaway data folder and wait for GET /api/health.
+
+    `version` never imports the app, so a frozen engine missing a runtime module still passes it; v3.0.0-beta.1's
+    first build crashed on start for want of numpy that way.
+    """
+    import tempfile
+    import urllib.request
+
+    port = _free_port()
+    with tempfile.TemporaryDirectory(prefix="sentient-verify-") as home:
+        env = {**os.environ, "SENTIENT_HOME": home, "SENTIENT_GATEWAY_TOKEN": os.urandom(16).hex()}
+        proc = subprocess.Popen([str(exe), "serve", "--host", "127.0.0.1", "--port", str(port)], env=env,
+                                stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True)
+        try:
+            deadline = time.monotonic() + 180
+            while time.monotonic() < deadline:
+                if proc.poll() is not None:
+                    raise SystemExit(f"frozen engine exited during `serve` (code {proc.returncode}):\n"
+                                     f"{proc.stdout.read() if proc.stdout else ''}")
+                try:
+                    with urllib.request.urlopen(f"http://127.0.0.1:{port}/api/health", timeout=5) as r:
+                        if r.status == 200:
+                            log(f"frozen engine serves: {r.read().decode(errors='replace').strip()}")
+                            return
+                except OSError:
+                    pass
+                time.sleep(2)
+            raise SystemExit("frozen engine did not answer /api/health within 180 s")
+        finally:
+            proc.terminate()
+            try:
+                proc.wait(timeout=30)
+            except subprocess.TimeoutExpired:
+                proc.kill()
+
+
 def verify() -> None:
-    """The frozen engine must at least import and answer `version`."""
+    """The frozen engine must answer `version`, import everything it needs at runtime, and really serve."""
     exe = BUNDLE / EXE_NAME
     if not exe.exists():
         raise SystemExit(f"expected {exe} to exist")
     out = subprocess.run([str(exe), "version"], capture_output=True, text=True, timeout=180)
     if out.returncode != 0 or "sentient" not in out.stdout.lower():
         raise SystemExit(f"frozen engine failed `version`:\n{out.stdout}\n{out.stderr}")
     log(f"frozen engine says: {out.stdout.strip()}")
+    out = subprocess.run([str(exe), "selfcheck"], capture_output=True, text=True, timeout=300)
+    if out.returncode != 0:
+        raise SystemExit(f"frozen engine failed `selfcheck`:\n{out.stdout}\n{out.stderr}")
+    log(out.stdout.strip())
+    _serve_check(exe)
 
 
 def stage() -> None:

desktop/package.json

@@ -19,7 +19,13 @@
 
 # Commands understood by sentient.cli. Anything else on argv[1] is treated as an
 # option for `serve` (so `sentient-engine.exe --port 7777` behaves sensibly).
-_COMMANDS = {"serve", "node", "doctor", "config", "version"}
+# tests/test_packaging.py fails when this drifts from the CLI: the installed app spawns
+# `sentient-engine.exe claude-code-tools <file>` for the Claude Code backend, and v3.0.0-beta.1's
+# first build turned that into `serve claude-code-tools` because it was missing here.
+_COMMANDS = {
+    "serve", "node", "doctor", "config", "version",
+    "claude-code-tools", "backup", "restore", "selfcheck",
+}
 
 
 def main() -> None:

docs/DEVELOPING.md

@@ -24,6 +24,8 @@
 REPO_URL = "https://github.com/existence-master/Sentient"
 # Keep a Changelog order; anything else keeps its place after these
 ORDER = ["Added", "Changed", "Deprecated", "Removed", "Fixed", "Security"]
+# An entry that already ends with its own "(#123)" gets a second one from towncrier: "(#123) (#123)".
+_DUP_REF = re.compile(r"(\(#\d+\))(?:\s*\1)+")
 
 
 def _trim(lines: list[str]) -> list[str]:
@@ -58,7 +60,7 @@ def fold_release(changelog: str, version: str) -> str:
         out += [*_trim(intro), ""]
     rank = {name: i for i, name in enumerate(ORDER)}
     for name in sorted(groups, key=lambda n: rank.get(n, len(ORDER))):
-        items = [line for chunk in groups[name] for line in _trim(chunk)]
+        items = [_DUP_REF.sub(r"\1", line) for chunk in groups[name] for line in _trim(chunk)]
         if items:
             out += [f"### {name}", *items, ""]
     text = changelog[:start] + "\n".join(out) + "\n" + changelog[end:]