### New Features

#### Portal

- **Search across Memories, Learnings, and Conversations** — unified search now works across all three content types in a datapack.
- **Memory author and timestamp** — memory rows now display the author and corresponding UTC timestamp.
- **Members page: role management** — change roles of members on an existing datapack. Duplicate-invite handling tightened.
- **Welcome page redesign** — updated user journey on first login.
- **Connect moved to account level** — the Connect flow is now at the account level rather than per-datapack.

### Improvements

#### Knowledge Base

- **Deduplication by content hash** — Knowledge Base uploads are now deduped by content hash, with accurate upload-time display.

#### Integrations

- **MCP installer v1.2** (`@yugabytedb/meko-mcp`) — upgrade by running `npx @yugabytedb/meko-mcp`.
  - **OpenAI Codex support** — one install now configures both the Codex CLI and Codex Desktop App. Session hooks (SessionStart, PreCompact, SessionEnd) wired up automatically.
  - **Cursor hook rewrite** — Meko context is now in place before the agent sees your first message. The previous approach had a race condition that left sessions uncaptured.
  - `--datapack` flag for `--migrate` — explicitly target a destination datapack; two migrations against the same URL now track independently.
  - `--check-updates` — opt-in background update hint.

### Bug Fixes

#### Portal

- **Auth: temp password self-recovery** — admin-created users can now self-recover an expired temporary password. Stronger password-policy UX.

#### Integrations

- **MCP installer v1.1 breaking change** — auth header changed from `API_KEY: <key>` to `Authorization: Bearer <key>`. Re-running the installer handles this automatically.
- **Stale symlink on macOS** — `~/.agents/skills/meko-mcp-tools` stale symlink no longer crashes installs.
- **Desktop skill bundle missing from `npx` installs** — fixed.
- **`askSecret` paste handling** — backspace, arrows, and UTF-8 input now work correctly across all platforms.
- **Codex API key no longer visible in `ps` output**.
- **Canary check false-negatives** — canary check no longer reports healthy servers as failing.

### Changes

#### MCP Server

- **`db_*` tools** — removed.