@cerefox/memory 1.16.0 → 1.16.1

package/dist/bin/cerefox.js

@@ -5318,7 +5318,7 @@ var init_cli_core = __esm(() => {
 });
 
 // src/meta.ts
-var PKG_VERSION = "1.16.0";
+var PKG_VERSION = "1.16.1";
 var init_meta = () => {};
 
 // ../../_shared/config/paths.ts
@@ -26248,7 +26248,7 @@ var init_bundled_docs = __esm(() => {
 });
 
 // ../../_shared/ef-meta/index.ts
-var EF_VERSION = "1.16.0", CEREFOX_VERSION = "1.16.0", EF_LAST_CHANGED = "1.16.0";
+var EF_VERSION = "1.16.1", CEREFOX_VERSION = "1.16.1", EF_LAST_CHANGED = "1.16.1";
 var init_ef_meta = () => {};
 
 // ../../_shared/compatibility/index.ts
@@ -26529,7 +26529,7 @@ async function ensurePipeline() {
       } else if (info.status === "done") {
         const prior = progressState.get(file);
         finalizeLine();
-        const finalSize = prior && prior.loaded > 0 ? `${fmtMb(prior.loaded)} MB` : info.total && info.total > 0 ? `${fmtMb(info.total)} MB` : "cached";
+        const finalSize = prior && prior.loaded > 0 ? `${fmtMb(prior.loaded)} MB` : info.total && info.total > 0 ? `${fmtMb(info.total)} MB` : "size not reported";
         process.stderr.write(`[cerefox-embed] ✓ ${file}  (${finalSize})
 `);
         if (prior)
@@ -67872,13 +67872,9 @@ Proceed with deployment to Supabase?`, true);
     for (const ef of efNames) {
       info(`   deploying ${ef}…`);
       const workdir = assets.functionsDir.replace(/\/functions$/, "").replace(/\/supabase$/, "");
-      const args = ["--yes", "supabase", "functions", "deploy", ef, "--use-api"];
-      if (projectRef)
-        args.push("--project-ref", projectRef);
-      if (NO_VERIFY_JWT_EFS.has(ef)) {
-        args.push("--no-verify-jwt");
+      const args = efDeployArgs(ef, workdir, projectRef);
+      if (NO_VERIFY_JWT_EFS.has(ef))
         info(`     (${ef}: --no-verify-jwt — in-function auth)`);
-      }
       const r = spawnSync2("npx", args, {
         encoding: "utf8",
         stdio: ["inherit", "pipe", "pipe"],
@@ -67942,6 +67938,14 @@ ${r.stderr ?? ""}`);
   println(c.dim("Verify with: cerefox doctor"));
   println(c.dim("Refresh the bundled guides: cerefox guides ingest"));
 }
+function efDeployArgs(ef, workdir, projectRef) {
+  const args = ["--yes", "supabase", "functions", "deploy", ef, "--use-api", "--workdir", workdir];
+  if (projectRef)
+    args.push("--project-ref", projectRef);
+  if (NO_VERIFY_JWT_EFS.has(ef))
+    args.push("--no-verify-jwt");
+  return args;
+}
 function upstreamRegistryRace(output) {
   return /Failed to bundle the function/i.test(output) && /Could not find npm package/i.test(output);
 }
@@ -81680,7 +81684,7 @@ async function buildWebServer(options = {}) {
 `);
   }
   const app = buildApp();
-  const server = serve({ fetch: app.fetch, hostname: host, port });
+  const server = serve({ fetch: app.fetch, hostname: host, port, overrideGlobalObjects: false });
   return {
     host,
     port,

package/dist/server-assets/_shared/ef-meta/index.ts

@@ -18,7 +18,7 @@
  * doesn't touch `supabase/functions/` leaves it alone).
  */
 
-export const EF_VERSION = "1.16.0";
+export const EF_VERSION = "1.16.1";
 
 /**
  * The Cerefox RELEASE version — what `cerefox --version` reports and what npm
@@ -36,7 +36,7 @@ export const EF_VERSION = "1.16.0";
  * is imported by the Deno Edge Functions, which cannot reach into the npm
  * package.
  */
-export const CEREFOX_VERSION = "1.16.0";
+export const CEREFOX_VERSION = "1.16.1";
 
 /**
  * The most recent version whose EF-side SOURCE actually changed (#127).
@@ -46,7 +46,7 @@ export const CEREFOX_VERSION = "1.16.0";
  * `cut_release.ts` ONLY when EF source changed since the last tag; doctor
  * uses it to stay silent on label-only drift.
  */
-export const EF_LAST_CHANGED = "1.16.0";
+export const EF_LAST_CHANGED = "1.16.1";
 
 /**
  * The 8 peer EFs the cerefox-mcp aggregator probes (excludes cerefox-mcp

package/dist/server-assets/_shared/embeddings/onnx-embedder.ts

@@ -217,7 +217,7 @@ async function ensurePipeline(): Promise<FeaturePipeline> {
           ? `${fmtMb(prior.loaded)} MB`
           : info.total && info.total > 0
             ? `${fmtMb(info.total)} MB`
-            : "cached";
+            : "size not reported";
         process.stderr.write(`[cerefox-embed] ✓ ${file}  (${finalSize})\n`);
         if (prior) progressState.set(file, { ...prior, done: true });
       }

package/docs/guides/access-paths.md

@@ -258,7 +258,12 @@ before "completing" the parity table by adding purge to agent-facing access path
 > that in #210 (2026-08-13): every delete and restore is audited with author
 > attribution, restore cannot destroy content, and the CLI had `document restore`
 > all along — the boundary the docs described had already outgrown the code. The
-> guarded property is now exactly one thing: **no agent path to permanent purge.**
+> guarded property is now exactly one thing: **no MCP, Edge Function or CLI path to
+> permanent purge.** Stated precisely: the web UI's own backend, `/api/v1`, has a
+> per-document purge endpoint, and any client that can reach the web server (on
+> loopback, or elsewhere with the API key) can call it, an agent harness built on the
+> HTTP API included. Securing that port is what keeps it human-only; see
+> `securing-local-access.md`.
 
 ### The three tiers
 
@@ -266,7 +271,7 @@ before "completing" the parity table by adding purge to agent-facing access path
 |---|---|---|---|
 | 1. Reads + soft mutations | search, get, list-*, ingest (create/update), metadata-search, get-audit-log | n/a (reads) / yes (versioned) | All paths — MCP, Edge Functions, CLI, web UI |
 | 2. Soft-destructive + recovery | `delete_document` (soft delete to trash), `restore_document` (un-trash), `set_review_status` (web only; a `404` while `review_workflow_enabled` is off) | yes — delete is restorable; restore recovers | CLI (`cerefox document delete` / `restore`), web UI, and — since v1.7.0 (#208, #210) — MCP (`cerefox_delete_document`, which requires the caller's read-hash, and `cerefox_restore_document`). **Not** the primitive GPT-Actions Edge Functions (deliberately deferred). |
-| 3. **Hard-destructive** | `purge_document` (permanent), `set_version_archived` (toggle version retention) | no (purge) | **Web UI only** |
+| 3. **Hard-destructive** | `purge_document` (permanent), `set_version_archived` (toggle version retention) | no (purge) | **Web UI**, through its backend `/api/v1`, which any client that can reach the web server can also call. Never MCP, the Edge Functions or the CLI. |
 
 ### Why purge is web-UI-only
 
@@ -304,9 +309,10 @@ agent's action can *trigger* a purge. It stays within the model because:
   window of step 2, decided in advance instead of per document;
 - the sweep purges only documents **older than that period**, never the one being
   deleted and never anything an agent selects;
-- there is still **no agent-callable purge**: the sweep function is not exposed over MCP
-  or the Edge Functions, has no CLI verb, and, like every RPC, is callable over the
-  Data API only with the service-role key.
+- it adds **no new way to purge**: the sweep function is not exposed over MCP or the
+  Edge Functions, has no CLI verb, and, like every RPC, is callable over the Data API
+  only with the service-role key. Explicit purge stays where it was: the web UI, and
+  `/api/v1`'s per-document endpoint for any client that can reach the web server.
 
 With the setting off (the default), nothing here changes. Design:
 [`docs/specs/trash-auto-purge.md`](../specs/trash-auto-purge.md).

package/docs/guides/setup-local.md

@@ -149,7 +149,7 @@ cerefox-local upgrade        # newest stable release + recreate (keeps data + OP
 cerefox-local upgrade v1.2.3 # pin an exact version (also how you downgrade)
 cerefox-local upgrade --latest  # follow the moving :latest tag from now on
 cerefox-local uninstall          # remove the container, KEEP the data volume
-cerefox-local uninstall --purge  # remove the container AND delete the data volume
+cerefox-local uninstall --purge  # remove the container AND delete the data volume (asks you to confirm; --yes in scripts)
 ```
 
 > **Coming from an image older than v1.1.0?** Run `cerefox-local upgrade v1.1.1`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cerefox/memory",
-  "version": "1.16.0",
+  "version": "1.16.1",
   "description": "Cerefox \u2014 user-owned shared memory for AI agents. CLI + stdio MCP server + web UI + ingestion for a knowledge base on your own Supabase project (or fully self-hosted with Cerefox Local).",
   "license": "Apache-2.0",
   "homepage": "https://github.com/fstamatelopoulos/cerefox",