chore(release): 3.9.2

[acidkill]

Summary

Release 3.9.2. Version bumped across all 16 version-bearing locations, with a CHANGELOG.md
section covering everything since 3.9.1: the twenty-fix batch from #204–#225 plus the
test-isolation follow-up #227.

PATCH rather than MINOR: nineteen of the twenty are fix:; the one default change
(#221, session-summary fallback off) is a defect correction with an explicit opt-in, not new
surface.

Why

v3.9.1 tagged the tree at #203, so this release is exactly the batch above. The CHANGELOG
entry carries the full per-fix prose; the storage quartet (#208/#218/#219/#220) is the
headline — dead lookups and dropped change-log rows meant sync and single-record operations
were silently broken on the only production backend.

Contents

• Storage — fix(storage): address record rows by id, not by a rebuilt string #208 record-id lookups; fix(storage): change_log.payload needs FLEXIBLE, or every change row is dropped #218 change_log.payload FLEXIBLE (rows were
  dropped, sync had nothing to replay); fix(storage): the SurrealDB change readers return the record type sync consumes #219 change readers return ChangeEntry;
  fix(storage): SURREALDB_AUTH_LEVEL, so a database-scoped user can sign in at all #220 SURREALDB_AUTH_LEVEL; fix(storage): brain import surfaces per-loop drops instead of swallowing them #206 import surfaces per-loop drops.
• Engine — fix(consolidation): LIFECYCLE reads access_frequency from NeuronState, not metadata #210 LIFECYCLE reads NeuronState; fix(consolidation): a dry run must not advance the dedup census window #204 dry run keeps the dedup cursor;
  fix(reasoning): pin ReasoningBank pattern fibers so lifecycle cannot eat them #205 pattern fibers pinned; fix(compression): the brain pre-fetch logs its failure instead of degrading in silence #212 brain pre-fetch logs failure; fix(encoder): the provider-unavailable embed skip warns, and then throttles itself #216 embed-skip warning
  throttled; fix(config): the scheduled-consolidation default includes "mature" #211 scheduled default includes mature.
• Hooks / MCP / server / CLI — fix(smem-hygiene): remember the gate's refusals, not only its saves #213 gate remembers refusals; fix(smem-hygiene): default the Stop hook's session-summary fallback to off #221 session-summary
  default off (default change, opt back in via auto.capture_session_summary); fix(mcp): smem_edit recomputes expires_at when the type changes, without reviving tombstones or ephemerals #214
  smem_edit TTL on type change; fix(server): PUT /memory/neurons refreshes content_hash and the embedding on a content change #217 PUT refreshes content-derived fields; fix(cli): listing previews show essence for GRAPH_ONLY anchors; tombstone literal becomes a shared constant #207 essence
  previews for GRAPH_ONLY; fix(consolidation): the lock honours SURREAL_MEMORY_DIR like the rest of the data dir #209 lock honours SURREAL_MEMORY_DIR; fix(cli): the update check honours SURREAL_MEMORY_NO_UPDATE_CHECK, and the suite sets it #215
  SURREAL_MEMORY_NO_UPDATE_CHECK.
• Test infrastructure — fix(tests): the mock embedding provider must not depend on the hash seed #223 deterministic mock embedder (closes MockEmbeddingProvider builds vectors from hash(), so Test (Python 3.11) fails at random #226); fix(dashboard): hold the background diagnostics refresh, and drain it in the live tests #225 background
  refresh task references + live-test drain (closes Integration (SurrealDB) can hang at teardown of TestListBrainsScopeLive until the 120 s timeout #224); fix(tests): reset the process-global embed-unavailable counter between tests #227 throttle-counter isolation.
• Docs — sync_refs 7400+ test count and config.md 53 env vars, regenerated during
  the batch (carried by fix(storage): change_log.payload needs FLEXIBLE, or every change row is dropped #218/fix(storage): SURREALDB_AUTH_LEVEL, so a database-scoped user can sign in at all #220).

Test plan

• python scripts/pre_ship.py — all 10 sections pass, including version consistency
  (16/16 at 3.9.2), the CHANGELOG entry check, ruff, mypy, the fast unit suite, and both
  documentation-freshness gates.
• Full suite on merged main: ruff clean, mypy clean (355 files),
  pytest tests/ -m "not stress" -n auto — 7315 passed / 131 skipped after fix(tests): reset the process-global embed-unavailable counter between tests #227 (the
  one failure it fixes reproduced deterministically and was verified sequentially).
• All twenty PRs plus fix(tests): reset the process-global embed-unavailable counter between tests #227 were green on all 9 CI checks before merge, including the
  live SurrealDB integration job.
• Post-publish: confirm the artefacts actually reached PyPI, npm (plugin and SDK),
  ClawHub and the VS Code Marketplace. The publish steps in release.yml are tolerant
  of failure, so a green job is not by itself evidence that anything was published.

Verified by

@acidkill