release: promote staging to main

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "memwal",
       "source": "./packages/mcp/plugin",
       "description": "Automatic Walrus Memory — proactive recall and durable-fact saving via the MemWal MCP + lifecycle hooks.",
-      "version": "0.0.10"
+      "version": "0.0.11"
     }
   ]
 }

.cursor-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "memwal",
       "source": "./packages/mcp/plugin",
       "description": "Automatic Walrus Memory — proactive recall and durable-fact saving via the MemWal MCP + lifecycle hooks.",
-      "version": "0.0.10"
+      "version": "0.0.11"
     }
   ]
 }

.github/workflows/benchmark-live.yml

@@ -64,6 +64,17 @@ jobs:
       name: benchmark-${{ github.event_name == 'workflow_dispatch' && inputs.target_environment || (github.ref_name == 'staging' && 'staging' || 'dev') }}
     timeout-minutes: 30
 
+    # Serializes against the sdk-e2e job in test.yml and the e2e job in
+    # test-python-sdk.yml, which sign with this same BENCH_DELEGATE_KEY. The
+    # relayer rate-limits per delegate key and per account, so two suites
+    # running concurrently 429 each other. Group name must stay identical in
+    # all three workflows — byte-identical on purpose, including the `main`
+    # branch this workflow never runs on, so the three land in one group
+    # whatever the expression resolves to.
+    concurrency:
+      group: bench-account-${{ github.event_name == 'workflow_dispatch' && inputs.target_environment || (github.ref_name == 'main' && 'production' || github.ref_name == 'staging' && 'staging' || 'dev') }}
+      cancel-in-progress: false
+
     env:
       SERVER_URL: ${{ github.event.inputs.server_url || vars.BENCH_SERVER_URL }}
       NAMESPACE: ${{ github.event.inputs.namespace || 'benchmark' }}

.github/workflows/test-python-sdk.yml

@@ -76,9 +76,19 @@ jobs:
       (github.event_name == 'push' && github.ref_name == 'dev')
 
     # Reuses the credentials benchmark-live.yml already relies on, so this
-    # needs no new secrets. Safe to share: the benchmark writes to the
-    # `benchmark` namespace while these tests use `sdk-test`, `default` and a
-    # per-run `sdk-e2e-<uuid>`.
+    # needs no new secrets. Namespaces keep the *data* separate — the
+    # benchmark writes to `benchmark` while these tests use `sdk-test`,
+    # `default` and a per-run `sdk-e2e-<uuid>` — but they do not keep the
+    # *rate limit* separate: the relayer meters per delegate key and per
+    # account, so the concurrency group below is what stops the three suites
+    # 429ing each other. Group name must stay identical in all three
+    # workflows — byte-identical on purpose, including branches this
+    # dev-only job never runs on, so the three land in one group whatever
+    # the expression resolves to.
+    concurrency:
+      group: bench-account-${{ github.event_name == 'workflow_dispatch' && inputs.target_environment || (github.ref_name == 'main' && 'production' || github.ref_name == 'staging' && 'staging' || 'dev') }}
+      cancel-in-progress: false
+
     environment: benchmark-dev
 
     env: