@cerefox/memory 1.15.1 → 1.15.2

package/dist/frontend/index.html

@@ -15,8 +15,8 @@
       href="https://fonts.googleapis.com/css2?family=Geist:wght@300;400;500;600;700&display=swap"
     />
     <title>Cerefox</title>
-    <script type="module" crossorigin src="/app/assets/index-xHSz7_7E.js"></script>
-    <link rel="stylesheet" crossorigin href="/app/assets/index-Dm_zCch4.css">
+    <script type="module" crossorigin src="/app/assets/index-DWeD_pcf.js"></script>
+    <link rel="stylesheet" crossorigin href="/app/assets/index-B0H_N4if.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/server-assets/_shared/ef-meta/index.ts

@@ -18,7 +18,7 @@
  * doesn't touch `supabase/functions/` leaves it alone).
  */
 
-export const EF_VERSION = "1.15.1";
+export const EF_VERSION = "1.15.2";
 
 /**
  * The Cerefox RELEASE version — what `cerefox --version` reports and what npm
@@ -36,7 +36,7 @@ export const EF_VERSION = "1.15.1";
  * is imported by the Deno Edge Functions, which cannot reach into the npm
  * package.
  */
-export const CEREFOX_VERSION = "1.15.1";
+export const CEREFOX_VERSION = "1.15.2";
 
 /**
  * The most recent version whose EF-side SOURCE actually changed (#127).
@@ -46,7 +46,7 @@ export const CEREFOX_VERSION = "1.15.1";
  * `cut_release.ts` ONLY when EF source changed since the last tag; doctor
  * uses it to stay silent on label-only drift.
  */
-export const EF_LAST_CHANGED = "1.14.5";
+export const EF_LAST_CHANGED = "1.15.2";
 
 /**
  * The 8 peer EFs the cerefox-mcp aggregator probes (excludes cerefox-mcp

package/dist/server-assets/_shared/embeddings/onnx-embedder.ts

@@ -65,6 +65,12 @@ async function loadTransformers(): Promise<typeof transformersModule> {
   // eszip for the EF) from statically resolving the ~30 MB package + native
   // onnxruntime binary. Resolved at runtime from node_modules.
   const spec = "@huggingface/transformers";
+  // onnxruntime 1.29+ ships Microsoft usage telemetry (a device id plus usage
+  // events, queued on disk and posted to mobile.events.data.microsoft.com).
+  // This is the embedder that exists so nothing leaves the machine, so opt out
+  // before the native library loads. `??=`: an operator who sets it explicitly
+  // (to anything) keeps their choice.
+  process.env.ORT_DISABLE_TELEMETRY ??= "1";
   transformersModule = await import(spec);
   const dir = getCacheDir();
   if (!existsSync(dir)) mkdirSync(dir, { recursive: true });

package/docs/guides/ops-scripts.md

@@ -29,6 +29,16 @@ The canonical scripts are **TypeScript**, run with [Bun](https://bun.sh) (instal
 | `backup_create.ts` | `bun scripts/backup_create.ts` |
 | `backup_restore.ts` | `bun scripts/backup_restore.ts` |
 | `reindex_all.ts` | `bun scripts/reindex_all.ts` |
+| `cerefox_export.ts` | `bun scripts/cerefox_export.ts` |
+| `gen_openapi.ts` | `bun scripts/gen_openapi.ts` |
+| `cut_release.ts` | `bun scripts/cut_release.ts` (see [RELEASING.md](../../RELEASING.md)) |
+
+The remaining files under `scripts/` are not run by hand: `bundle_help.ts`,
+`bundle_package_docs.ts` and `bundle_server_assets.ts` are `prepublishOnly` steps,
+and `check_ef_parity.ts` and `check_help_bundle.ts` are CI checks.
+`_shared/__tests__/ops-scripts-documented.test.ts` holds that split, so a new
+script has to be either documented here or deliberately classified — it cannot be
+silently forgotten.
 
 Use the `.ts` scripts. The former `.py` equivalents were **removed at v1.0.0** — update any
 cron jobs / CI / make targets that still invoke a `python scripts/*.py` path.
@@ -279,6 +289,43 @@ Two naming details worth knowing:
   numeric suffix and neither can overwrite the other. A real store contains such
   a pair.
 
+## gen_openapi.ts — Regenerate the OpenAPI document
+
+`docs/api/openapi.json` describes `/api/v1` in OpenAPI 3.1, for callers that embed
+Cerefox instead of using MCP or the CLI. Point any OpenAPI tool at it to generate
+a client or a tool set.
+
+```bash
+bun scripts/gen_openapi.ts             # write docs/api/openapi.json
+bun scripts/gen_openapi.ts --check     # fail if the committed file is stale (CI)
+bun scripts/gen_openapi.ts --stdout    # print, write nothing
+```
+
+**Run it after changing a route, a summary in [`api.md`](api.md), or a zod schema
+in `_shared/schemas/`.** You will not forget silently:
+`_shared/__tests__/api-openapi-spec.test.ts` fails when the committed artifact is
+not what the generator produces.
+
+It is assembled from three sources rather than written, so no fact about the API
+is authored twice:
+
+| Part of the spec | Comes from |
+|---|---|
+| paths and methods | the route registrations in `packages/memory/src/web/routes/` |
+| summaries | the endpoint table in `docs/guides/api.md` |
+| request/response shapes | the zod schemas in `_shared/schemas/` |
+
+Two things worth knowing about what it does *not* claim:
+
+- **Coverage is stated, not implied.** `x-cerefox-coverage` in the document lists
+  how many routes carry a response schema, which routes legitimately return
+  something other than JSON, and which are unmodelled. An unmodelled route gets
+  **no** schema rather than a guessed one.
+- **`info.version` is the API's, not the release's.** It moves when `/api/v1`
+  changes. Binding it to the package version made the committed artifact stale at
+  every release cut — which broke the v1.15.1 npm publish — and churned every
+  generated client on patch releases that did not touch the API.
+
 ## sync_docs.ts — Sync project documentation into Cerefox
 
 Ingests `README.md`, `AGENT_GUIDE.md`, `AGENT_QUICK_REFERENCE.md`, and every Markdown file under `docs/` into your Cerefox knowledge base, updating existing documents in-place. Run this any time after editing documentation so AI agents always have access to the current state of the project.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cerefox/memory",
-  "version": "1.15.1",
+  "version": "1.15.2",
   "description": "Cerefox \u2014 user-owned shared memory for AI agents. CLI + stdio MCP server + web UI + ingestion for a knowledge base on your own Supabase project (or fully self-hosted with Cerefox Local).",
   "license": "Apache-2.0",
   "homepage": "https://github.com/fstamatelopoulos/cerefox",
@@ -40,27 +40,27 @@
   ],
   "dependencies": {
     "@hono/node-server": "^2.1.1",
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@supabase/supabase-js": "^2.45.0",
+    "@modelcontextprotocol/sdk": "^1.30.1",
+    "@supabase/supabase-js": "^2.117.2",
     "cli-progress": "^3.12.0",
     "commander": "^15.0.0",
-    "hono": "^4.13.7",
-    "mammoth": "^1.9.0",
+    "hono": "^4.13.9",
+    "mammoth": "^1.13.0",
     "ora": "^9.4.0",
     "picocolors": "^1.0.0",
     "postgres": "^3.4.9",
     "prompts": "^2.4.2",
-    "smol-toml": "^1.6.1",
+    "smol-toml": "^1.9.0",
     "zod": "^4.6.5"
   },
   "optionalDependencies": {
-    "@huggingface/transformers": "^4.2.0",
+    "@huggingface/transformers": "^4.3.0",
     "onnxruntime-node": "^1.21.0"
   },
   "devDependencies": {
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.2",
     "@types/cli-progress": "^3.11.5",
-    "@types/node": "^24.13.3",
+    "@types/node": "^24.19.0",
     "@types/prompts": "^2.4.9",
     "typescript": "^6.0.3"
   },