npm - @cerefox/memory - Versions diffs - 1.0.1-beta.1 → 1.0.1 - Mend

@cerefox/memory 1.0.1-beta.1 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/dist/bin/cerefox.js +416 -206
package/dist/frontend/assets/index-D9FTvsV4.js +125 -0
package/dist/frontend/assets/index-D9FTvsV4.js.map +1 -0
package/dist/frontend/index.html +1 -1
package/dist/server-assets/_shared/ef-meta/index.ts +1 -1
package/docs/guides/cli.md +7 -0
package/docs/guides/configuration.md +2 -0
package/docs/guides/setup-supabase.md +9 -0
package/docs/guides/upgrading.md +3 -1
package/package.json +1 -1
package/dist/frontend/assets/index-6DS5ujj2.js +0 -125
package/dist/frontend/assets/index-6DS5ujj2.js.map +0 -1

package/dist/frontend/index.html CHANGED Viewed

@@ -15,7 +15,7 @@
       href="https://fonts.googleapis.com/css2?family=Geist:wght@300;400;500;600;700&display=swap"
     />
     <title>Cerefox</title>
-    <script type="module" crossorigin src="/app/assets/index-6DS5ujj2.js"></script>
+    <script type="module" crossorigin src="/app/assets/index-D9FTvsV4.js"></script>
     <link rel="stylesheet" crossorigin href="/app/assets/index-Asx5wD7g.css">
   </head>
   <body>

package/dist/server-assets/_shared/ef-meta/index.ts CHANGED Viewed

@@ -18,7 +18,7 @@
  * doesn't touch `supabase/functions/` leaves it alone).
  */
-export const EF_VERSION = "1.0.0-rc.4";
+export const EF_VERSION = "1.0.1";
 /**
  * The 8 peer EFs the cerefox-mcp aggregator probes (excludes cerefox-mcp

package/docs/guides/cli.md CHANGED Viewed

@@ -518,6 +518,13 @@ The success message echoes the resolved author / author_type back so you can sur
 | `--schema-only` | flag | off | Deploy only schema + RPCs (skip Edge Functions). |
 | `--functions-only` | flag | off | Deploy only the 9 Edge Functions (skip schema). |
 | `--dry-run` | flag | off | Preview what would happen; make no changes. |
+| `--project-ref <ref>` | string | derived from `CEREFOX_SUPABASE_URL` | Supabase project ref for the Edge Function deploys (needed only for custom domains, where the ref can't be derived). |
+| `--yes` | flag | off | Skip the deployment confirmation (for scripted/non-interactive runs). |
+> **macOS**: the Edge Function step shells out to the Supabase CLI, which reads its
+> login token from the Keychain — expect a password dialog per function (click
+> "Always Allow"). To skip the dialogs, set `SUPABASE_ACCESS_TOKEN` in
+> `~/.cerefox/.env` — see [`configuration.md`](configuration.md#supabase--database).
 Detects fresh vs. existing databases: a fresh DB gets schema + RPCs + migration stamps; an existing DB gets pending migrations applied and `rpcs.sql` re-applied in place. There is deliberately **no `--reset`** here — the destructive wipe lives only in the contributor script `bun scripts/db_deploy.ts --reset`. See [`setup-supabase.md`](setup-supabase.md).

package/docs/guides/configuration.md CHANGED Viewed

@@ -43,11 +43,13 @@ Full rule documented in [`docs/specs/polish-and-distribution-design.md` §7](../
 | `CEREFOX_ACCESS_TOKENS` | `""` | Server-side (Function secret) | The **server-side accepted set** — a comma-separated list of Cerefox tokens, set as a Supabase **Function secret** (not local `.env`). A request is accepted if its Bearer matches any token in the set, enabling zero-downtime rotation. Managed by `cerefox token generate` / `rotate`. |
 | `CEREFOX_SUPABASE_ANON_KEY` | `""` | *(deprecated / unused)* | Formerly the legacy anon JWT Bearer for Edge Function calls. **Retired in iter-28E** — Edge Functions now authenticate the Cerefox access token in-function. Retained only so an old `.env` still parses; no longer read. |
 | `CEREFOX_DATABASE_URL` | `""` | For scripts | Direct Postgres URL for deployment scripts. **Use the Session Pooler** (port `5432`) — Transaction Pooler (`6543`) does not support DDL. Username must include the project-ref suffix (`postgres.<project-ref>`). Append `?sslmode=require`. See [`setup-supabase.md` → Connection pooling (2026)](setup-supabase.md#connection-pooling-2026). |
+| `SUPABASE_ACCESS_TOKEN` | *(unset)* | For EF deploys (optional) | Supabase **personal access token** (`sbp_…`, from [supabase.com/dashboard/account/tokens](https://supabase.com/dashboard/account/tokens)), read by the **Supabase CLI** that `cerefox server deploy` shells out to for Edge Function deploys. Optional — without it the CLI falls back to its `supabase login` credential, which on **macOS lives in the Keychain and triggers a password dialog per function deploy** (9 per full deploy; a denied dialog fails that function with `LegacyPlatformAuthRequiredError`). Setting it in `~/.cerefox/.env` avoids the dialogs entirely: Cerefox exports every key from its `.env` to the environment, so the child CLI inherits it. Not a `CEREFOX_` variable — the name is the Supabase CLI's own. **Keep secret** (it grants management access to your Supabase account). |
 **When each is needed:**
 - `CEREFOX_SUPABASE_URL` + `CEREFOX_SUPABASE_KEY` — used by the CLI, web UI, and local MCP server (ingestion, search) via the Supabase Data API
 - `CEREFOX_ACCESS_TOKEN` — used to call the Edge Functions (remote MCP, GPT Actions, direct HTTP) and by `cerefox doctor` / the live e2e tests; `CEREFOX_ACCESS_TOKENS` is its server-side counterpart (the accepted set). Generate both with `cerefox token generate`.
 - `CEREFOX_DATABASE_URL` — used only for schema deploys (`cerefox server deploy`, or the contributor scripts `bun scripts/db_*.ts`) via a direct Postgres connection
+- `SUPABASE_ACCESS_TOKEN` — optional; only consumed by the Supabase CLI during `cerefox server deploy` Edge Function deploys (recommended on macOS to avoid per-function Keychain dialogs)
 ---

package/docs/guides/setup-supabase.md CHANGED Viewed

@@ -128,6 +128,15 @@ npx supabase link         # prompts for your project ref (the ID in your Supabas
 Your project ref is in the Supabase dashboard URL:
 `https://supabase.com/dashboard/project/<project-ref>`
+> **macOS Keychain dialogs**: the Supabase CLI stores the `login` token in the
+> Keychain and reads it back **once per function deploy** — expect up to 9
+> password dialogs per full deploy (click **"Always Allow"**; denying one fails
+> that function with `LegacyPlatformAuthRequiredError`). To skip the Keychain
+> entirely, create a personal access token at
+> [supabase.com/dashboard/account/tokens](https://supabase.com/dashboard/account/tokens)
+> and set it in `~/.cerefox/.env` as `SUPABASE_ACCESS_TOKEN=sbp_…` — see
+> [`configuration.md`](configuration.md#supabase--database).
 After it finishes, verify in the Supabase Dashboard → **Edge Functions** — all 9
 functions should appear with a green "Active" status.

package/docs/guides/upgrading.md CHANGED Viewed

@@ -30,7 +30,9 @@ cerefox doctor           # verify
 database it applies **every** pending migration (regardless of which version
 you're coming from — so there are no per-version steps to follow), re-applies
 `rpcs.sql`, and redeploys all nine Edge Functions from npm-bundled assets. No
-repo clone required.
+repo clone required. On **macOS**, set `SUPABASE_ACCESS_TOKEN` in
+`~/.cerefox/.env` first to avoid a Keychain password dialog per function deploy
+(see [`configuration.md`](configuration.md#supabase--database)).
 **Re-embed only when a release says so.** If a release changes the embedding
 model or FTS / title weighting, also run `cerefox server reindex --all` — that's

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@cerefox/memory",
-  "version": "1.0.1-beta.1",
+  "version": "1.0.1",
   "description": "Cerefox — user-owned shared memory for AI agents. CLI + stdio MCP server + web UI + ingestion for a knowledge base on your own Supabase project (or fully self-hosted with Cerefox Local).",
   "license": "Apache-2.0",
   "homepage": "https://github.com/fstamatelopoulos/cerefox",