v1.2.0 v1.18.0

high risk

Gentleman-Programming/engramJul 4, 2026 → Jul 5, 20261 day between releases

What's New

Replaces single-token cloud model with principal-based user and token management system

New Features

  • Principal-based user and token management system with dashboard UI
  • CLI bootstrap support for creating the first managed admin
  • Security hardening including token hashing and atomic audit logging
  • Project grants system backed by cloud storage
  • Managed-admin JSON API handlers for user and token operations

Improvements

  • Token hashing and pepper implementation for enhanced security
  • Atomic audit logging for token issuance and success
  • Deny-by-default project access for managed principals
  • Runtime managed-token authentication via ENGRAM_CLOUD_TOKEN_PEPPER
  • Preservation of legacy ENGRAM_CLOUD_TOKEN path for migration

Upgrade Notes

Use the legacy ENGRAM_CLOUD_TOKEN path during migration, configure ENGRAM_CLOUD_TOKEN_PEPPER for runtime authentication, and utilize CLI bootstrap to create the initial managed admin.

The Two Releases

v1.2.0

v1.2.0

Jul 4, 2026· 4 months ago

This release introduces Claude Code plugin-marketplace support, confidence-weighted voting mechanisms, and Cursor CLI provider support. It also adds per-member reasoning methods, project-level config overrides, and fixes documentation drift.

Full release notes
v1.18.0

v1.18.0

Jul 5, 2026· 4 months ago

Replaces the single-token cloud model with a comprehensive principal-based user and token management system, including dashboard UI, security hardening, and CLI bootstrap support.

Full release notes