@cerefox/memory 1.13.0 → 1.13.1

package/dist/server-assets/_shared/mcp-tools/relations.ts

@@ -15,6 +15,7 @@
 import { logUsage } from "./_utils.ts";
 import { McpInvalidParams, type ToolContext, type ToolDefinition } from "./types.ts";
 import type { MCPSupabaseClient } from "./types.ts";
+import { AUTHOR_PARAM_READ, AUTHOR_PARAM_WRITE, DEFAULT_IDENTITY, callerIdentity } from "./identity.ts";
 
 /** Relation types that carry behaviour; any other string is accepted too. */
 const KNOWN_TYPES =
@@ -44,7 +45,7 @@ async function setHandler(
     p_source_id: source,
     p_target_id: target,
     p_rel_type: relType,
-    p_author: (args.author as string | undefined) ?? "mcp-agent",
+    p_author: callerIdentity(args) ?? DEFAULT_IDENTITY,
     p_author_type: "agent",
     p_metadata: (args.metadata as Record<string, unknown> | undefined) ?? {},
   });
@@ -57,7 +58,7 @@ async function setHandler(
   logUsage(supabase, {
     operation: "set_relation",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: callerIdentity(args),
     document_id: source,
   });
 
@@ -103,8 +104,7 @@ export const setRelationTool: ToolDefinition = {
         type: "object",
         description: "Optional JSON context for the edge (note, confidence, …)",
       },
-      author: { type: "string", description: "Who is creating this relation" },
-      requestor: { type: "string", description: "Name of the agent making this request" },
+      author: AUTHOR_PARAM_WRITE,
     },
   },
   handler: setHandler,
@@ -126,7 +126,7 @@ async function deleteHandler(
     p_source_id: source,
     p_target_id: target,
     p_rel_type: relType,
-    p_author: (args.author as string | undefined) ?? "mcp-agent",
+    p_author: callerIdentity(args) ?? DEFAULT_IDENTITY,
     p_author_type: "agent",
   });
   if (error) throw new Error(`RPC error: ${error.message}`);
@@ -135,7 +135,7 @@ async function deleteHandler(
   logUsage(supabase, {
     operation: "delete_relation",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: callerIdentity(args),
     document_id: source,
   });
 
@@ -166,8 +166,7 @@ export const deleteRelationTool: ToolDefinition = {
       source_id: { type: "string", description: "UUID of the source document" },
       target_id: { type: "string", description: "UUID of the target document" },
       rel_type: { type: "string", description: "Relation type to remove" },
-      author: { type: "string", description: "Who is removing this relation" },
-      requestor: { type: "string", description: "Name of the agent making this request" },
+      author: AUTHOR_PARAM_WRITE,
     },
   },
   handler: deleteHandler,
@@ -197,7 +196,7 @@ async function getRelationsHandler(
   logUsage(supabase, {
     operation: "get_relations",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: callerIdentity(args),
     document_id: docId,
     result_count: rows.length,
   });
@@ -231,7 +230,7 @@ export const getRelationsTool: ToolDefinition = {
     required: ["document_id"],
     properties: {
       document_id: { type: "string", description: "UUID of the document" },
-      requestor: { type: "string", description: "Name of the agent making this request" },
+      author: AUTHOR_PARAM_READ,
     },
   },
   handler: getRelationsHandler,
@@ -268,7 +267,7 @@ async function getNeighborsHandler(
   logUsage(supabase, {
     operation: "get_neighbors",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: callerIdentity(args),
     document_id: docId,
     result_count: rows.length,
   });
@@ -307,7 +306,7 @@ export const getNeighborsTool: ToolDefinition = {
       from_time: { type: "string", description: "ISO-8601: only neighbours created on/after" },
       to_time: { type: "string", description: "ISO-8601: only neighbours created on/before" },
       limit: { type: "integer", description: "Max documents to return (default 50, max 200)" },
-      requestor: { type: "string", description: "Name of the agent making this request" },
+      author: AUTHOR_PARAM_READ,
     },
   },
   handler: getNeighborsHandler,

package/dist/server-assets/_shared/mcp-tools/restore-document.ts

@@ -21,6 +21,7 @@ import type { MCPSupabaseClient } from "./types.ts";
 
 import { isDocumentNotFoundError, isMissingFunctionError, logUsage } from "./_utils.ts";
 import { McpInvalidParams, type ToolContext, type ToolDefinition } from "./types.ts";
+import { AUTHOR_PARAM_WRITE, DEFAULT_IDENTITY, callerIdentity } from "./identity.ts";
 
 async function handler(
   supabase: MCPSupabaseClient,
@@ -32,7 +33,7 @@ async function handler(
 
   if (!document_id) throw new McpInvalidParams("document_id is required");
 
-  const author = (args.author as string | undefined) ?? (args.requestor as string | undefined);
+  const author = callerIdentity(args);
   // Derived from the transport, never taken from the caller: an agent must not
   // be able to record itself as a user. Matches the delete handler.
   const authorType = ctx.accessPath === "cli" ? "user" : "agent";
@@ -81,7 +82,7 @@ async function handler(
   logUsage(supabase, {
     operation: "restore",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: author,
     document_id,
     result_count: 1,
   });
@@ -116,14 +117,7 @@ export const restoreDocumentTool: ToolDefinition = {
         description:
           "Why this document is being restored. Recorded in the audit-log entry. Short and specific beats long.",
       },
-      author: {
-        type: "string",
-        description: "Who is making this change. Recorded in the audit log.",
-      },
-      requestor: {
-        type: "string",
-        description: "Name of the agent or user making this request. Recorded in the usage log.",
-      },
+      author: AUTHOR_PARAM_WRITE,
     },
   },
   handler,

package/dist/server-assets/_shared/mcp-tools/search.ts

@@ -22,6 +22,7 @@ import { applyByteBudget, getConfiguredMinSearchScore, getConfiguredSearchAlpha,
   getMaxResponseBytes, getMinTermCoverage, logUsage } from "./_utils.ts";
 import { lookupProjectId } from "./_projects.ts";
 import { McpInvalidParams, type ToolContext, type ToolDefinition } from "./types.ts";
+import { AUTHOR_PARAM_READ, callerIdentity } from "./identity.ts";
 
 async function handler(
   supabase: MCPSupabaseClient,
@@ -135,7 +136,7 @@ async function handler(
   logUsage(supabase, {
     operation: "search",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: callerIdentity(args),
     query_text: query,
     project_id: projectId,
     result_count: accepted.length,
@@ -244,11 +245,7 @@ export const searchTool: ToolDefinition = {
         description:
           "Optional response size budget in bytes. Results are dropped whole until the budget is satisfied; a truncated flag is set when results are dropped. Defaults to the server maximum (200000). Pass a smaller value if your context window is limited. Values above the server maximum are silently capped.",
       },
-      requestor: {
-        type: "string",
-        description:
-          'Name of the agent or user making this request (e.g., "Claude Code", "archiver"). Recorded in the usage log for attribution. Defaults to "mcp-agent" if not provided. May be enforced via server config.',
-      },
+      author: AUTHOR_PARAM_READ,
     },
   },
   handler,

package/dist/server-assets/_shared/mcp-tools/set-document-metadata.ts

@@ -21,6 +21,7 @@ import type { MCPSupabaseClient } from "./types.ts";
 
 import { logUsage } from "./_utils.ts";
 import { McpInvalidParams, type ToolContext, type ToolDefinition } from "./types.ts";
+import { AUTHOR_PARAM_WRITE, DEFAULT_IDENTITY, callerIdentity } from "./identity.ts";
 
 async function handler(
   supabase: MCPSupabaseClient,
@@ -48,7 +49,7 @@ async function handler(
     );
   }
 
-  const author = (args.author as string | undefined) ?? (args.requestor as string | undefined);
+  const author = callerIdentity(args);
   // Derived from the transport, never taken from the caller: an agent must not
   // be able to record itself as a user. Matches the partial-edit handlers.
   const authorType = ctx.accessPath === "cli" ? "user" : "agent";
@@ -71,7 +72,7 @@ async function handler(
   logUsage(supabase, {
     operation: "update_metadata",
     accessPath: ctx.accessPath,
-    requestor: args.requestor as string | undefined,
+    requestor: author,
     document_id,
     result_count: 1,
   });
@@ -119,14 +120,7 @@ export const setDocumentMetadataTool: ToolDefinition = {
         description:
           "Set the metadata to EXACTLY this object, discarding any key not listed. Defaults to false (merge). Use only when you mean to reset a document's tags wholesale.",
       },
-      author: {
-        type: "string",
-        description: "Who is making this change. Recorded in the audit log.",
-      },
-      requestor: {
-        type: "string",
-        description: "Name of the agent or user making this request. Recorded in the usage log.",
-      },
+      author: AUTHOR_PARAM_WRITE,
     },
   },
   handler,

package/dist/server-assets/_shared/mcp-tools/set-document-projects.ts

@@ -13,6 +13,7 @@ import type { MCPSupabaseClient } from "./types.ts";
 
 import { replaceDocumentProjects } from "./_projects.ts";
 import { McpInvalidParams, type ToolContext, type ToolDefinition } from "./types.ts";
+import { AUTHOR_PARAM_WRITE, DEFAULT_IDENTITY, callerIdentity } from "./identity.ts";
 
 async function handler(
   supabase: MCPSupabaseClient,
@@ -21,7 +22,7 @@ async function handler(
 ): Promise<string> {
   const document_id = (args.document_id as string | undefined)?.trim();
   const project_names_raw = args.project_names;
-  const author = (args.author as string | undefined) ?? "mcp-agent";
+  const author = callerIdentity(args) ?? DEFAULT_IDENTITY;
 
   if (!document_id) {
     throw new McpInvalidParams(
@@ -96,11 +97,7 @@ export const setDocumentProjectsTool: ToolDefinition = {
         description:
           "Explicit list of project names. Each created if absent. Order is preserved. Empty list = remove from all projects.",
       },
-      author: {
-        type: "string",
-        description:
-          'Agent or tool name recorded in the audit log. Defaults to "mcp-agent". May be enforced via server config.',
-      },
+      author: AUTHOR_PARAM_WRITE,
     },
   },
   handler,

package/dist/server-assets/db/migrations/0031_review_workflow_toggle.sql

@@ -7,8 +7,10 @@
 -- write ever overrides a value an operator has set (ON CONFLICT DO NOTHING).
 --
 -- The decision "agent write → pending_review" moves out of the six client call
--- sites and into cerefox_ingest_document, which reads this flag. That RPC
--- lives in rpcs.sql, which `cerefox server deploy` re-applies.
+-- sites and into cerefox_ingest_document. That RPC lives in rpcs.sql, which
+-- `cerefox server deploy` re-applies. (0.16.0 also had the RPC read this flag
+-- on write and store 'approved' for everyone while off; 0.16.1 removed that —
+-- the flag governs visibility only, the stored value follows author_type.)
 --
 -- #240: cerefox_hybrid_search / cerefox_search_docs gain p_review_status so a
 -- filtered search is applied before the limit, not after. A new argument is a

package/dist/server-assets/db/rpcs.sql

@@ -1395,9 +1395,10 @@ $$;
 --                       update keeps the existing metadata (v0.11.1). Pass '{}'
 --                       explicitly to clear all metadata.
 --   p_review_status   : ACCEPTED AND IGNORED since 0.16.0 (#241). The status is
---                       decided here from p_author_type and the store's
---                       `review_workflow_enabled` flag, so every transport
---                       behaves the same and a toggle needs no client change.
+--                       decided here from p_author_type alone (agent →
+--                       pending_review, user → approved), so every transport
+--                       behaves the same. The `review_workflow_enabled` flag
+--                       only governs what surfaces show (0.16.1).
 --                       Kept in the signature so no caller breaks.
 --   p_chunks          : JSONB array of chunk objects, each with:
 --                        chunk_index, heading_path, heading_level, title,
@@ -1583,15 +1584,17 @@ BEGIN
             USING ERRCODE = '22023';  -- deterministic; never a retryable SQLSTATE
     END IF;
 
-    -- Review status is decided HERE, not by the caller (#241). With the
-    -- workflow on, an agent write is queued for a person to look at; with it
-    -- off, every write lands approved and no surface shows the column. The
-    -- fallback FALSE matches the fresh-install seed; migration 0031 seeds TRUE
-    -- on stores that predate the flag, so it only applies if the row is gone.
-    -- p_review_status is deliberately not consulted — six clients used to
-    -- compute it and they could not have agreed on a store-level policy.
+    -- Review status is decided HERE, not by the caller (#241), from the
+    -- author type alone: an agent write is 'pending_review', a person's is
+    -- 'approved'. The `review_workflow_enabled` flag is deliberately NOT
+    -- consulted (0.16.1): it governs what the surfaces show and enforce, not
+    -- what is stored, so a store that turns the workflow off and later back on
+    -- sees exactly the statuses it would have had all along. 0.16.0 wrote
+    -- 'approved' for every author while the flag was off; that made a stored
+    -- 'approved' mean two different things depending on when it was written.
+    -- p_review_status is not consulted either — six clients used to compute
+    -- it and they could not have agreed on a store-level policy.
     v_status := CASE
-                    WHEN NOT cerefox_config_bool('review_workflow_enabled', FALSE) THEN 'approved'
                     WHEN p_author_type = 'agent' THEN 'pending_review'
                     ELSE 'approved'
                 END;
@@ -3088,6 +3091,10 @@ SET search_path = public, pg_catalog
 AS $$
     -- Keep in lockstep with the `@version:` marker in schema.sql (cut_release.ts
     -- enforces it). Bump whenever schema.sql OR rpcs.sql changes.
+    -- 0.16.1 (v1.13.1): cerefox_ingest_document no longer consults
+    -- `review_workflow_enabled` — review_status follows author_type whatever
+    -- the flag says; the flag governs visibility/enforcement only. RPC-only,
+    -- no migration (server deploy re-applies rpcs.sql).
     -- 0.16.0 (#241, #240): `review_workflow_enabled` config key (seeded false
     -- on fresh installs, true by migration 0031 on existing ones);
     -- cerefox_ingest_document decides review_status itself from author_type
@@ -3117,7 +3124,7 @@ AS $$
     -- 0.11.0 supersedes 0.10.6 (v1.2.1, #191): this branch carries that fix plus
     -- the partial-edit surface, and both migrations (0019, 0020) are in the
     -- sequence, so a store deploying this gets everything from both lines.
-    SELECT '0.16.0'::TEXT;
+    SELECT '0.16.1'::TEXT;
 $$;
 
 -- ── cerefox_find_dead_links ──────────────────────────────────────────────────

package/dist/server-assets/db/schema.sql

@@ -5,7 +5,7 @@
 -- Requires extensions: vector (pgvector), uuid-ossp
 -- These are enabled at the top of db_deploy.py before this file is applied.
 --
--- @version: 0.16.0
+-- @version: 0.16.1
 -- The `@version` marker above is read by the schema-version-mismatch banner
 -- (see /api/v1/schema-version). Bump it whenever schema.sql OR rpcs.sql
 -- changes in a way that requires `cerefox server deploy` to be re-run —
@@ -56,9 +56,9 @@ CREATE TABLE IF NOT EXISTS cerefox_documents (
     -- review_status: human governance flag. 'approved' = validated by human,
     -- 'pending_review' = modified by agent, not yet reviewed.
     -- Content is searchable in both states. Written ONLY by
-    -- cerefox_ingest_document, which consults `review_workflow_enabled`
-    -- (#241): with the workflow off every write lands 'approved' and every
-    -- surface hides the column; existing values are left as they are.
+    -- cerefox_ingest_document, from author_type alone. The store-level
+    -- `review_workflow_enabled` flag (#241) governs whether any surface shows
+    -- or enforces the column; it never changes what is stored (0.16.1).
     review_status   TEXT        NOT NULL DEFAULT 'approved',
     -- lifecycle_status: where this document stands relative to the graph —
     -- 'active' | 'superseded' | 'stale' | 'archived'. Distinct from

package/dist/server-assets/supabase/functions/cerefox-mcp/index.ts

@@ -105,12 +105,12 @@ async function handleToolsCall(
 
   // Configurable caller identity enforcement.
   // When require_requestor_identity is "true" in cerefox_config, all tool calls
-  // must include a requestor (reads) or author (writes) parameter.
-  // When requestor_identity_format is set, the value must match the regex.
-  const identityParam = toolName === "cerefox_ingest" || toolName === "cerefox_set_document_projects"
-    ? "author"
-    : "requestor";
-  const identityValue = args[identityParam] as string | undefined;
+  // must include the caller's identity; when requestor_identity_format is set,
+  // the value must match the regex. Since v1.13.1 every tool takes `author`
+  // and silently accepts `requestor` as the pre-1.13.1 alias (mirrors
+  // `callerIdentity()` in _shared/mcp-tools/identity.ts).
+  const identityParam = "author";
+  const identityValue = (args.author ?? args.requestor) as string | undefined;
 
   // deno-lint-ignore no-explicit-any
   const supabase: any = makeSupabaseClient();

package/docs/guides/cli.md

@@ -50,7 +50,7 @@ cerefox document ingest --paste --title "<title>" [OPTIONS]   # stdin
 | `--last-write-wins` | — | flag | off | Skip the concurrency check and overwrite regardless of concurrent changes. For re-sync flows where an external source of truth makes conflicts meaningless. Recorded in the audit log. |
 | `--source` | — | str | `paste` / `file` | Source label recorded on the document. |
 | `--author` | — | str | `CEREFOX_AUTHOR_NAME` or `unknown` | Audit-log author identity. |
-| `--author-type` | — | `user`\|`agent` | `CEREFOX_AUTHOR_TYPE` or `user` | Caller type. Agent writes land `pending_review` while the review workflow is on (`review_workflow_enabled`); `approved` otherwise. |
+| `--author-type` | — | `user`\|`agent` | `CEREFOX_AUTHOR_TYPE` or `user` | Caller type. Agent writes are recorded `pending_review`, user writes `approved`; the store's `review_workflow_enabled` flag decides whether that status is shown. |
 
 **Examples**:
 ```bash
@@ -811,21 +811,21 @@ Every MCP parameter has an exact-name CLI flag (kebab-cased). Short forms exist
 
 | MCP tool | CLI command |
 |---|---|
-| `cerefox_search(query, match_count, project_name, metadata_filter, requestor)` | `cerefox search "<q>" --match-count N --project-name <name> --metadata-filter '<json>' --requestor <name>` |
+| `cerefox_search(query, match_count, project_name, metadata_filter, author)` | `cerefox search "<q>" --match-count N --project-name <name> --metadata-filter '<json>' --requestor <name>` |
 | `cerefox_ingest(title, content, project_name, metadata, update_if_exists, document_id, expected_content_hash, last_write_wins, source, author, author_type)` (file) | `cerefox document ingest <path> --title <t> --project-name <n> --metadata '<json>' --update-if-exists\|--document-id <uuid> --expected-content-hash <hash>\|--last-write-wins --source <s> --author <a> --author-type <t>` |
 | `cerefox_ingest(...)` (paste) | `printf '...' \| cerefox document ingest --paste --title "<t>"` (same flags) |
-| `cerefox_get_document(document_id, version_id, outline, requestor)` | `cerefox document get <id> --version-id <vid> --outline --requestor <name>` |
-| `cerefox_insert(document_id, text, position, anchor_heading, section_part, expected_content_hash, requestor)` | `cerefox document insert <id> -t <text\|-\|@file> -p <position> -a <anchor> --section-part <part> --expected-hash <hash> --requestor <name>` |
-| `cerefox_edit(document_id, operations, expected_content_hash, requestor)` | `cerefox document edit-parts <id> -o <json\|-\|@file> --expected-hash <hash> --requestor <name>` |
-| `cerefox_list_versions(document_id, requestor)` | `cerefox document version list <id> --requestor <name>` |
-| `cerefox_list_projects(requestor)` | `cerefox project list --requestor <name>` |
+| `cerefox_get_document(document_id, version_id, outline, author)` | `cerefox document get <id> --version-id <vid> --outline --requestor <name>` |
+| `cerefox_insert(document_id, text, position, anchor_heading, section_part, expected_content_hash, author)` | `cerefox document insert <id> -t <text\|-\|@file> -p <position> -a <anchor> --section-part <part> --expected-hash <hash> --requestor <name>` |
+| `cerefox_edit(document_id, operations, expected_content_hash, author)` | `cerefox document edit-parts <id> -o <json\|-\|@file> --expected-hash <hash> --requestor <name>` |
+| `cerefox_list_versions(document_id, author)` | `cerefox document version list <id> --requestor <name>` |
+| `cerefox_list_projects(author)` | `cerefox project list --requestor <name>` |
 | `cerefox_set_document_projects(document_id, project_names, author)` | `cerefox document set-projects <id> <name...> --author <a> --author-type <t>` (or `--clear` to remove all) |
 | `cerefox_list_metadata_keys()` | `cerefox metadata keys` |
-| `cerefox_metadata_search(metadata_filter, project_name, updated_since, created_since, limit, include_content, requestor)` | `cerefox metadata search --metadata-filter '<json>' --project-name <n> --updated-since <iso> --created-since <iso> --limit N --include-content --requestor <name>` |
-| `cerefox_get_audit_log(document_id, author, operation, since, until, limit, requestor)` | `cerefox audit list --document-id <id> --author <a> --operation <op> --since <iso> --until <iso> --limit N --requestor <name>` |
+| `cerefox_metadata_search(metadata_filter, project_name, updated_since, created_since, limit, include_content, author)` | `cerefox metadata search --metadata-filter '<json>' --project-name <n> --updated-since <iso> --created-since <iso> --limit N --include-content --requestor <name>` |
+| `cerefox_get_audit_log(document_id, by_author, operation, since, until, limit, author)` | `cerefox audit list --document-id <id> --author <a> --operation <op> --since <iso> --until <iso> --limit N --requestor <name>` |
 | `cerefox_set_document_metadata(document_id, metadata, replace, author)` | `cerefox document set-metadata <id> --set key=value` (also `--remove key`, `--json '<json>'`, `--replace`) |
-| `cerefox_delete_document(document_id, expected_content_hash, reason, author, requestor)` | `cerefox document delete <id> --reason <text> --author <a> --author-type <t> --yes` (confirms interactively instead of requiring the hash) |
-| `cerefox_restore_document(document_id, reason, author, requestor)` | `cerefox document restore <id> --reason <text> --author <a> --author-type <t>` |
+| `cerefox_delete_document(document_id, expected_content_hash, reason, author)` | `cerefox document delete <id> --reason <text> --author <a> --author-type <t> --yes` (confirms interactively instead of requiring the hash) |
+| `cerefox_restore_document(document_id, reason, author)` | `cerefox document restore <id> --reason <text> --author <a> --author-type <t>` |
 
 ## CLI ↔ MCP parity matrix
 

package/docs/guides/configuration.md

@@ -480,14 +480,20 @@ cerefox config get usage_tracking_enabled
 
 ## Requestor Identity Enforcement
 
-By default, the `requestor` parameter on MCP read tools (and `author` on ingest) is
-optional. When omitted, it defaults to `"mcp-agent"`. This means the usage log shows
-`"mcp-agent"` for all calls that don't explicitly identify themselves, making analytics
-less useful in multi-agent setups.
+By default, the `author` parameter on the MCP tools is optional. When omitted, it
+defaults to `"mcp-agent"`. This means the usage log shows `"mcp-agent"` for all calls
+that don't explicitly identify themselves, making analytics less useful in
+multi-agent setups.
 
-You can optionally enforce caller identification so that MCP tool calls must include
-a requestor/author identity. Calls without identity receive a JSON-RPC `-32602` error
-with a helpful message telling the agent what to provide.
+Since v1.13.1 every MCP tool takes the caller's identity as **`author`**, reads and
+writes alike; `requestor` (the pre-1.13.1 name on most tools) is still accepted as
+a silent alias. (On `cerefox_get_audit_log` the entries filter, formerly `author`,
+is now `by_author`.) The primitive Edge Functions used by GPT Actions keep their
+original body fields (`requestor` on reads, `author` on ingest).
+
+You can optionally enforce caller identification so that tool calls must include
+an identity. Calls without one receive a JSON-RPC `-32602` error with a helpful
+message telling the agent what to provide.
 
 ### What it actually covers
 
@@ -516,7 +522,7 @@ tenth copy of the same block. Raise an issue rather than assuming it is there.
 ### Enabling enforcement
 
 ```bash
-# Require all MCP tool calls to include requestor/author
+# Require all MCP tool calls to include author (or the requestor alias)
 cerefox config set require_requestor_identity true
 
 # Optionally override the default naming format (regex)
@@ -532,7 +538,7 @@ cerefox config set requestor_identity_format "^[a-z]+:[a-z]+$"
 | `^[a-z]+:[a-z]+$` | `conclave:agent` format only | Multi-conclave setups (e.g., `personal:steward`) |
 | (empty string) | Any non-empty string | No format restriction |
 
-The format is applied to both `requestor` (read tools) and `author` (ingest).
+The format is applied to whichever identity field the call carries (`author`, or the `requestor` alias).
 
 ### Disabling enforcement
 
@@ -540,7 +546,7 @@ The format is applied to both `requestor` (read tools) and `author` (ingest).
 cerefox config set require_requestor_identity false
 ```
 
-When disabled, the requestor parameter remains optional with the `"mcp-agent"` default.
+When disabled, the identity parameter remains optional with the `"mcp-agent"` default.
 This is the default state -- no configuration needed for backward compatibility.
 
 ---
@@ -570,20 +576,23 @@ cerefox config set review_workflow_enabled true    # or false; also in Settings
 cerefox doctor                                      # prints "review workflow  ON …" / "OFF …"
 ```
 
-**With the workflow off, the feature is absent, not dimmed.** Every write lands
-`approved` whoever wrote it — the decision is made once, inside the
-`cerefox_ingest_document` RPC, so every access path (CLI, local and remote MCP,
-Edge Functions, web) obeys the same setting, including older clients. No surface
-shows a `review_status`: the web pill, badges and search chip do not render;
-the CLI drops its `status` column; API, MCP and Edge Function rows carry no
-`review_status` key; `GET /api/v1/search?review_status=…` is a `400`; and
-`POST /api/v1/documents/{id}/review-status` is a `404`.
-
-**Toggling never touches stored data.** Flipping the flag off does not approve
-anything and flipping it on does not queue anything; documents that were
-`pending_review` are still pending, and are shown as such the moment the flag
-is on again. Attribution and the audit log are unaffected in both states — who
-wrote what is always recorded. Config changes are audited too.
+**With the workflow off, the feature is hidden, not dimmed.** No surface
+shows or enforces a `review_status`: the web pill, badges and search chip do
+not render; the CLI drops its `status` column; API, MCP and Edge Function rows
+carry no `review_status` key; `GET /api/v1/search?review_status=…` is a `400`;
+and `POST /api/v1/documents/{id}/review-status` is a `404`.
+
+**The flag hides; it never rewrites.** Writes are recorded the same way in
+both states — agent writes `pending_review`, user writes `approved`, decided
+once inside the `cerefox_ingest_document` RPC so every access path (CLI, local
+and remote MCP, Edge Functions, web) behaves alike, including older clients.
+Flipping the flag off does not approve anything and flipping it on does not
+queue anything; documents that were `pending_review` are still pending, and a
+document an agent wrote while the workflow was off is pending too, shown as
+such the moment the flag is on again. (v1.13.0 stored `approved` for every
+write while off; v1.13.1 corrected that.) Attribution and the audit log are
+unaffected in both states — who wrote what is always recorded. Config changes
+are audited too.
 
 Design: [`docs/specs/review-workflow-toggle.md`](../specs/review-workflow-toggle.md).
 

package/docs/guides/connect-agents.md

@@ -221,7 +221,7 @@ You have access to a personal knowledge base via Cerefox MCP tools.
 When answering questions, always call cerefox_search first with a relevant query.
 Cite doc_title for every claim drawn from the knowledge base.
 Use cerefox_ingest to save anything the user asks you to remember.
-Always set your requestor/author parameter to identify yourself.
+Always set the author parameter to identify yourself.
 For the full tool reference, search Cerefox for "How AI Agents Use Cerefox".
 ```
 
@@ -638,7 +638,7 @@ In the action editor, paste this schema (replace `<your-project-ref>`):
 openapi: 3.1.0
 info:
   title: Cerefox Knowledge Base
-  version: 3.4.0
+  version: 3.4.1
 servers:
   - url: https://<your-project-ref>.supabase.co/functions/v1
 paths:
@@ -798,10 +798,10 @@ paths:
                   default: agent
                   description: >
                     Whether this write is from a human user or an AI agent.
-                    Always recorded for attribution. While the store's review
-                    workflow is on (review_workflow_enabled), agent writes land
-                    pending_review and user writes approved; with it off every
-                    write lands approved.
+                    Always recorded for attribution. Agent writes are recorded
+                    pending_review and user writes approved; the store's review
+                    workflow flag (review_workflow_enabled) only decides whether
+                    that status is shown.
       responses:
         '200':
           description: >

package/docs/guides/upgrading.md

@@ -77,6 +77,14 @@ schema-requiring release.
 > `cerefox config set review_workflow_enabled false` (or Settings → Governance)
 > if nobody reviews the queue. See
 > [configuration.md → Review Workflow](configuration.md#review-workflow).
+>
+> **v1.13.1** (schema 0.16.1) corrects one thing in the above: the flag
+> governs only what is *shown*. v1.13.0 also stored `approved` for every
+> write while the flag was off; v1.13.1 records agent writes as
+> `pending_review` regardless, so turning the workflow back on shows the
+> statuses the store would have had all along. It is an RPC-only change —
+> `cerefox server deploy` (or `--schema-only`) picks it up; nothing refuses
+> to run until you do, but a 0.16.0 server keeps the v1.13.0 write behaviour.
 
 > ### Upgrading to v1.1.0 — `cerefox server deploy` is required
 >
@@ -186,6 +194,9 @@ knowing about:
   document must be restored before its content can be updated.
 - **v1.13.0 — the review workflow is a store setting.** Upgraded stores keep
   it on; fresh installs start with it off. See the callout above.
+- **v1.13.1 — the flag hides, it does not rewrite.** Agent writes are
+  recorded `pending_review` whether or not the workflow is shown (v1.13.0
+  stored `approved` while off). Redeploy to pick it up.
 
 ## Notable: v1.8.0 storage reclaim (migration 0027)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cerefox/memory",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Cerefox — user-owned shared memory for AI agents. CLI + stdio MCP server + web UI + ingestion for a knowledge base on your own Supabase project (or fully self-hosted with Cerefox Local).",
   "license": "Apache-2.0",
   "homepage": "https://github.com/fstamatelopoulos/cerefox",