@cerefox/memory 1.2.1 → 1.3.0-beta.1

package/dist/server-assets/db/rpcs.sql

@@ -1293,6 +1293,10 @@ $$;
 DROP FUNCTION IF EXISTS cerefox_ingest_document(UUID, TEXT, TEXT, TEXT, TEXT, JSONB, TEXT, JSONB, TEXT, TEXT, TEXT, INT, BOOLEAN);
 DROP FUNCTION IF EXISTS cerefox_ingest_document(UUID, TEXT, TEXT, TEXT, TEXT, JSONB, TEXT, JSONB, TEXT, TEXT, TEXT, INT, BOOLEAN, TEXT, BOOLEAN);
 DROP FUNCTION IF EXISTS cerefox_ingest_document(UUID, TEXT, TEXT, TEXT, TEXT, JSONB, TEXT, JSONB, TEXT, TEXT, TEXT, INT, BOOLEAN, TEXT, BOOLEAN, SMALLINT);
+-- iter-33: return shape gains content_hash + size_warning, so the 16-arg form
+-- must be dropped before the 17-arg CREATE below (Postgres will not replace a
+-- function whose RETURNS TABLE changed).
+DROP FUNCTION IF EXISTS cerefox_ingest_document(UUID, TEXT, TEXT, TEXT, TEXT, JSONB, TEXT, JSONB, TEXT, TEXT, TEXT, INT, BOOLEAN, TEXT, BOOLEAN, SMALLINT, JSONB);
 CREATE FUNCTION cerefox_ingest_document(
     p_document_id       UUID        DEFAULT NULL,
     p_title             TEXT        DEFAULT 'Untitled',
@@ -1324,14 +1328,30 @@ CREATE FUNCTION cerefox_ingest_document(
     -- content_format for the chunks being written (iter-28D). 2 = exact-partition
     -- (blind-stitch reconstruction); default 1 = legacy (E'\n\n'-join). Stamped on
     -- every chunk this call inserts.
-    p_content_format    SMALLINT    DEFAULT 1
+    p_content_format    SMALLINT    DEFAULT 1,
+    -- iter-33 (partial edits): when NULL, audit behaves exactly as before
+    -- ('create' / 'update-content'). When set, it is a JSONB array of
+    -- {"op": "...", "detail": "..."} and ONE audit entry is written per element,
+    -- so a cerefox_edit batch records what it actually did rather than
+    -- flattening to 'update-content'. NULL-means-today, per the #183 lesson:
+    -- a parameter that substitutes its own concrete default is how store policy
+    -- got silently overridden for a whole release.
+    p_operations        JSONB       DEFAULT NULL
 )
 RETURNS TABLE (
     document_id     UUID,
     chunk_count     INT,
     total_chars     INT,
     operation       TEXT,
-    version_id      UUID
+    version_id      UUID,
+    -- iter-33: the hash just written, on CREATE as well as update (#189). A
+    -- document is now born holding its own concurrency token, so the author
+    -- never has to re-read it or fall back to last_write_wins.
+    content_hash    TEXT,
+    -- iter-33: true when the new size crosses `document_size_warning_chars`
+    -- (dormant when that config is unset/0). A signal, never a refusal: an
+    -- insert-only workflow otherwise never sees a document grow.
+    size_warning    BOOLEAN
 )
 LANGUAGE plpgsql
 SECURITY DEFINER
@@ -1348,6 +1368,9 @@ DECLARE
     v_chunk         JSONB;
     v_snap          RECORD;
     v_status        TEXT;
+    v_op            JSONB;      -- iter-33: per-operation audit element
+    v_size_warn_at  INT;
+    v_size_warning  BOOLEAN := FALSE;
 BEGIN
     -- ── Zero-chunk guard (v0.3.1) ────────────────────────────────────────
     -- Refuse to create or update a document with no chunks. Three reasons:
@@ -1506,21 +1529,68 @@ BEGIN
         setweight(to_tsvector('english', COALESCE(c->>'content', '')), 'B')
     FROM jsonb_array_elements(p_chunks) AS c;
 
-    -- ── Audit entry ──────────────────────────────────────────────────
-    PERFORM cerefox_create_audit_entry(
-        p_document_id := v_doc_id,
-        p_version_id := v_version_id,
-        p_operation := v_operation,
-        p_author := p_author,
-        p_author_type := p_author_type,
-        p_size_before := CASE WHEN v_operation = 'create' THEN NULL ELSE v_old_chars END,
-        p_size_after := v_total_chars,
-        p_description := v_operation || ': ' || p_title || ' (' || v_chunk_count || ' chunks, ' || v_total_chars || ' chars)'
-            || CASE WHEN p_last_write_wins AND v_operation = 'update-content'
-                    THEN ' [last-write-wins]' ELSE '' END
-    );
+    -- ── Audit entries ────────────────────────────────────────────────
+    -- p_operations NULL (every pre-iter-33 caller): one entry, exactly as before.
+    -- p_operations set (cerefox_insert / cerefox_edit): one entry per operation,
+    -- each under its own operation value, so the trail distinguishes "added to"
+    -- from "rewrote" from "removed" instead of flattening to 'update-content'.
+    -- The CHECK constraint on cerefox_audit_log.operation is the allow-list: a
+    -- handler label that drifts from it aborts this transaction rather than
+    -- silently recording something the readers of the trail cannot interpret.
+    IF p_operations IS NULL OR jsonb_array_length(p_operations) = 0 THEN
+        PERFORM cerefox_create_audit_entry(
+            p_document_id := v_doc_id,
+            p_version_id := v_version_id,
+            p_operation := v_operation,
+            p_author := p_author,
+            p_author_type := p_author_type,
+            p_size_before := CASE WHEN v_operation = 'create' THEN NULL ELSE v_old_chars END,
+            p_size_after := v_total_chars,
+            p_description := v_operation || ': ' || p_title || ' (' || v_chunk_count || ' chunks, ' || v_total_chars || ' chars)'
+                || CASE WHEN p_last_write_wins AND v_operation = 'update-content'
+                        THEN ' [last-write-wins]' ELSE '' END
+        );
+    ELSE
+        FOR v_op IN SELECT * FROM jsonb_array_elements(p_operations) LOOP
+            PERFORM cerefox_create_audit_entry(
+                p_document_id := v_doc_id,
+                p_version_id := v_version_id,
+                p_operation := v_op->>'op',
+                p_author := p_author,
+                p_author_type := p_author_type,
+                -- Sizes describe the whole write, so they go on the last entry
+                -- only; per-operation sizes would double-count a single write.
+                p_size_before := NULL,
+                p_size_after := NULL,
+                p_description := COALESCE(v_op->>'detail', v_op->>'op')
+            );
+        END LOOP;
+        -- One sizing entry for the write as a whole.
+        PERFORM cerefox_create_audit_entry(
+            p_document_id := v_doc_id,
+            p_version_id := v_version_id,
+            p_operation := v_operation,
+            p_author := p_author,
+            p_author_type := p_author_type,
+            p_size_before := CASE WHEN v_operation = 'create' THEN NULL ELSE v_old_chars END,
+            p_size_after := v_total_chars,
+            p_description := 'partial edit: ' || p_title || ' ('
+                || jsonb_array_length(p_operations) || ' operation(s), '
+                || v_chunk_count || ' chunks, ' || v_total_chars || ' chars)'
+        );
+    END IF;
+
+    -- ── Size signal (iter-33) ────────────────────────────────────────
+    -- Dormant unless an operator sets a threshold. Never blocks the write: a
+    -- size policy is not a correctness rule, and an agent that only ever
+    -- inserts otherwise never sees the document grow past its split point.
+    v_size_warn_at := cerefox_config_int('document_size_warning_chars', 0);
+    IF v_size_warn_at > 0 AND v_total_chars > v_size_warn_at THEN
+        v_size_warning := TRUE;
+    END IF;
 
-    RETURN QUERY SELECT v_doc_id, v_chunk_count, v_total_chars, v_operation, v_version_id;
+    RETURN QUERY SELECT v_doc_id, v_chunk_count, v_total_chars, v_operation,
+                        v_version_id, p_content_hash, v_size_warning;
 END;
 $$;
 
@@ -1584,12 +1654,19 @@ SET search_path = public, pg_catalog
 AS $$
     INSERT INTO cerefox_audit_log (
         document_id, version_id, operation, author, author_type,
-        size_before, size_after, description
+        size_before, size_after, description, created_at
     )
     VALUES (
         p_document_id, p_version_id, p_operation, p_author,
         CASE WHEN p_author_type IN ('user', 'agent') THEN p_author_type ELSE 'user' END,
-        p_size_before, p_size_after, p_description
+        p_size_before, p_size_after, p_description,
+        -- clock_timestamp(), not the NOW() default: NOW() is the TRANSACTION's
+        -- start time, so every audit entry written by one cerefox_edit batch
+        -- would share a timestamp and the order of operations inside the batch
+        -- would be unrecoverable from the trail (iter-33). clock_timestamp()
+        -- advances within a transaction, so entries stay orderable. Outside a
+        -- batch this is indistinguishable from the old behaviour.
+        clock_timestamp()
     )
     RETURNING id AS audit_id, cerefox_audit_log.created_at;
 $$;
@@ -2148,7 +2225,12 @@ DECLARE
         -- surviving history depended on who saved last.
         'version_retention_hours', 'version_cleanup_enabled',
         -- Optional features, off by default (iteration 29).
-        'relations_enabled'
+        'relations_enabled',
+        -- Iteration 33: flag writes that push a document past this many chars
+        -- (0 = off). Partial edits make writes cheap, so an insert-only agent
+        -- never assembles the document and never sees it grow past its split
+        -- point. A signal in the write's response, never a refusal.
+        'document_size_warning_chars'
     ];
 BEGIN
     IF NOT (p_key = ANY(v_allowed)) THEN
@@ -2343,7 +2425,10 @@ SET search_path = public, pg_catalog
 AS $$
     -- Keep in lockstep with the `@version:` marker in schema.sql (cut_release.ts
     -- enforces it). Bump whenever schema.sql OR rpcs.sql changes.
-    SELECT '0.10.6'::TEXT;
+    -- 0.11.0 supersedes 0.10.6 (v1.2.1, #191): this branch carries that fix plus
+    -- the partial-edit surface, and both migrations (0019, 0020) are in the
+    -- sequence, so a store deploying this gets everything from both lines.
+    SELECT '0.11.0'::TEXT;
 $$;
 
 -- ── cerefox_content_format_stats ─────────────────────────────────────────────

package/dist/server-assets/db/schema.sql

@@ -5,7 +5,7 @@
 -- Requires extensions: vector (pgvector), uuid-ossp
 -- These are enabled at the top of db_deploy.py before this file is applied.
 --
--- @version: 0.10.6
+-- @version: 0.11.0
 -- The `@version` marker above is read by the schema-version-mismatch banner
 -- (see /api/v1/schema-version). Bump it whenever schema.sql OR rpcs.sql
 -- changes in a way that requires `cerefox server deploy` to be re-run —
@@ -125,7 +125,11 @@ CREATE TABLE IF NOT EXISTS cerefox_audit_log (
         operation IN ('create', 'update-content', 'update-metadata', 'delete',
                       'status-change', 'archive', 'unarchive', 'restore',
                       -- iteration 29: graph edges are auditable writes too
-                      'relation-set', 'relation-delete')
+                      'relation-set', 'relation-delete',
+                      -- iteration 33: partial edits. Distinct from 'update-content'
+                      -- so the trail separates "added to" from "rewrote" from
+                      -- "removed" — one entry per operation in a cerefox_edit batch.
+                      'insert', 'replace-section', 'delete-section')
     ),
     CONSTRAINT cerefox_audit_log_author_type_check CHECK (author_type IN ('user', 'agent'))
 );

package/dist/server-assets/supabase/functions/cerefox-ingest/index.ts

@@ -753,6 +753,10 @@ Deno.serve(async (req: Request) => {
       title: title.trim(),
       chunk_count: chunks.length,
       total_chars: totalChars,
+      // #189: the concurrency token, on CREATE as well as update. Without it the
+      // author of a new document had to re-read it, or pass last_write_wins, to
+      // make its first edit — and callers took the second.
+      content_hash: ingestResult[0].content_hash ?? contentHash,
       project_id: projectId,
       project_name: project_name ?? null,
     }),

package/docs/guides/cli.md

@@ -46,7 +46,7 @@ cerefox document ingest --paste --title "<title>" [OPTIONS]   # stdin
 | `--metadata` | `-m` | JSON | _not provided_ | Extra metadata as a JSON object, e.g. `'{"tags":["work"]}'`. **On update, omitting this keeps the document's existing metadata** (v0.11.1); pass `'{}'` to deliberately clear all metadata. |
 | `--update-if-exists` | `-u` | flag | off | Title/source-path-based fallback update. Mutually exclusive with `--document-id`. |
 | `--document-id` | `-i` | UUID | _none_ | Deterministic ID-based update. Errors if the document doesn't exist. |
-| `--expected-content-hash` | — | sha256 | _none_ | **Required on content updates** (v0.11 optimistic concurrency): the `content_hash` of the version this edit is based on, shown by `cerefox document get` / `cerefox search`. Stale → conflict error (re-read, merge, retry). |
+| `--expected-content-hash` | — | sha256 | _none_ | **Required on content updates** (v0.11 optimistic concurrency): the `content_hash` of the version this edit is based on, shown by `cerefox document get` / `cerefox search` — and printed by **every write, including create** (v1.3.0), so a script can chain edits without re-reading. Stale → conflict error (re-read, merge, retry). |
 | `--last-write-wins` | — | flag | off | Skip the concurrency check and overwrite regardless of concurrent changes. For re-sync flows where an external source of truth makes conflicts meaningless. Recorded in the audit log. |
 | `--source` | — | str | `paste` / `file` | Source label recorded on the document. |
 | `--author` | — | str | `CEREFOX_AUTHOR_NAME` or `unknown` | Audit-log author identity. |
@@ -611,7 +611,7 @@ cerefox config set relations_enabled true    # tools appear in every agent's lis
 cerefox config set relations_enabled false   # hidden again; no data removed
 ```
 
-Agents see 10 tools with the flag off and 14 with it on. See
+Agents see 12 tools with the flag off and 16 with it on. See
 [`configuration.md`](configuration.md) for the full runtime-config surface.
 
 ### `cerefox config list` / `cerefox config get` / `cerefox config set`
@@ -720,7 +720,9 @@ Every MCP parameter has an exact-name CLI flag (kebab-cased). Short forms exist
 | `cerefox_search(query, match_count, project_name, metadata_filter, requestor)` | `cerefox search "<q>" --match-count N --project-name <name> --metadata-filter '<json>' --requestor <name>` |
 | `cerefox_ingest(title, content, project_name, metadata, update_if_exists, document_id, expected_content_hash, last_write_wins, source, author, author_type)` (file) | `cerefox document ingest <path> --title <t> --project-name <n> --metadata '<json>' --update-if-exists\|--document-id <uuid> --expected-content-hash <hash>\|--last-write-wins --source <s> --author <a> --author-type <t>` |
 | `cerefox_ingest(...)` (paste) | `printf '...' \| cerefox document ingest --paste --title "<t>"` (same flags) |
-| `cerefox_get_document(document_id, version_id, requestor)` | `cerefox document get <id> --version-id <vid> --requestor <name>` |
+| `cerefox_get_document(document_id, version_id, outline, requestor)` | `cerefox document get <id> --version-id <vid> --outline --requestor <name>` |
+| `cerefox_insert(document_id, text, position, anchor_heading, section_part, expected_content_hash, requestor)` | `cerefox document insert <id> -t <text\|-\|@file> -p <position> -a <anchor> --section-part <part> --expected-hash <hash> --requestor <name>` |
+| `cerefox_edit(document_id, operations, expected_content_hash, requestor)` | `cerefox document edit-parts <id> -o <json\|-\|@file> --expected-hash <hash> --requestor <name>` |
 | `cerefox_list_versions(document_id, requestor)` | `cerefox document version list <id> --requestor <name>` |
 | `cerefox_list_projects(requestor)` | `cerefox project list --requestor <name>` |
 | `cerefox_set_document_projects(document_id, project_names, author)` | `cerefox document set-projects <id> <name...> --author <a> --author-type <t>` (or `--clear` to remove all) |

package/docs/guides/configuration.md

@@ -122,6 +122,14 @@ This handles intermittent OpenAI API errors (500s) that would otherwise cause se
 > **dormant**: the table stays empty, `lifecycle_status` defaults to `active`,
 > search is untouched, and the tools do not appear in any agent's tool list
 > until you opt in with `cerefox config set relations_enabled true`.
+>
+> **Size signal for partial edits.** `document_size_warning_chars` (default `0`
+> = off) makes every write report when a document has grown past the given
+> size. It exists because partial edits (v1.3.0) make writes cheap: an agent
+> that only ever inserts never assembles the document, so it never sees it
+> approach the point where it should be split. A signal only — writes are never
+> blocked. `cerefox config set document_size_warning_chars 50000` mirrors the
+> maintainers' own split-at-~50K practice.
 
 > **Deployment-wide defaults (v1.1.0+).** `min_search_score`,
 > `min_term_coverage`, and `search_alpha` can also be set **once, in the

package/docs/guides/connect-agents.md

@@ -72,7 +72,7 @@ in the container.
 - **Easiest:** `cerefox-local configure-agent` wires it up (registers an MCP server named
   `cerefox-local` with Claude Code if the `claude` CLI is present, else prints the snippet).
 - **Manual:** point the client at `command: cerefox-local, args: ["mcp"]` (stdio). That proxies
-  to `cerefox mcp` in the container; the same 10 tools, identical behavior to every other path.
+  to `cerefox mcp` in the container; the same 12 core tools, identical behavior to every other path.
 - The cloud paths above (remote Edge Function, GPT Actions) **do not apply** to a local-only
   install — there are no Edge Functions.
 
@@ -131,7 +131,7 @@ in the container.
 
 ### What it is
 
-The local Cerefox MCP server runs on your machine and exposes the same 10 tools as the remote
+The local Cerefox MCP server runs on your machine and exposes the same 12 core tools as the remote
 Edge Function, communicating with clients over stdio.
 
 The local server ships as an npm package — **[`@cerefox/memory`](https://www.npmjs.com/package/@cerefox/memory)** — built with the official `@modelcontextprotocol/sdk`.
@@ -186,7 +186,7 @@ Once configured, every Path A client has these tools:
 | `cerefox_set_document_projects` | Set a document's project memberships to exactly the given list (destructive replace; metadata-only, no content change). Use `cerefox_ingest` with singular `project_name` for non-destructive "add". |
 | `cerefox_get_help` | Retrieve Cerefox conventions (the same content as `AGENT_QUICK_REFERENCE.md`) over MCP. Optional `topic` parameter does a case-insensitive H2 substring match. Call this whenever you are uncertain. |
 
-> All 10 tools are available on both Path A (local and remote MCP) and Path B (GPT Actions
+> All 12 core tools are available on both Path A (local and remote MCP) and Path B (GPT Actions
 > via dedicated Edge Functions, except `cerefox_get_help` which is MCP-only). MCP tools use
 > `project_name` (human-readable); primitive Edge Functions (Path B) use `project_id` (UUID).
 
@@ -212,7 +212,7 @@ For the full tool reference, search Cerefox for "How AI Agents Use Cerefox".
 After setup, ask your client:
 
 > "What tools do you have available?"
-> Expected: 10 tools listed (`cerefox_search`, `cerefox_ingest`, `cerefox_get_document`,
+> Expected: 12 tools listed (`cerefox_search`, `cerefox_ingest`, `cerefox_insert`, `cerefox_edit`, `cerefox_get_document`,
 > `cerefox_list_versions`, `cerefox_list_projects`, `cerefox_list_metadata_keys`,
 > `cerefox_metadata_search`, `cerefox_set_document_projects`, `cerefox_get_audit_log`,
 > `cerefox_get_help`).
@@ -306,7 +306,7 @@ pick it up automatically.
 to primitive Edge Functions. This means each MCP tool call costs a single Edge Function
 invocation.
 
-A single HTTPS URL gives any remote-capable MCP client all 10 tools with full hybrid
+A single HTTPS URL gives any remote-capable MCP client all 12 core tools with full hybrid
 search -- no Python, no `uv`, no local repository clone needed.
 
 **URL format:**
@@ -487,7 +487,7 @@ Replace `<your-project-ref>` with your Supabase project ref.
 **Step 3 — Verify:**
 
 Launch Codex and use the `/mcp` slash command to confirm the `cerefox` server is connected
-and all 10 tools are listed.
+and all 12 tools are listed.
 
 **Notes:**
 - `bearer_token_env_var` is the **name** of the env var (e.g. `"CEREFOX_ACCESS_TOKEN"`), not the
@@ -610,7 +610,7 @@ In the action editor, paste this schema (replace `<your-project-ref>`):
 openapi: 3.1.0
 info:
   title: Cerefox Knowledge Base
-  version: 3.0.0
+  version: 3.1.0
 servers:
   - url: https://<your-project-ref>.supabase.co/functions/v1
 paths:
@@ -780,7 +780,9 @@ paths:
               project_id?, project_name?,   # set when a project was assigned on create
               skipped?,                      # true when identical content was deduplicated
               updated?,                      # true when an existing doc was updated
-              content_hash?,                 # the NEW hash after an update (the next edit's token)
+              content_hash,                  # the new hash — returned on CREATE as well as
+                                             # update, so a new document is born holding
+                                             # its own concurrency token (#189)
               message?,                      # human note on dedup/skip/update
               note? }                        # note when a flag (e.g. update_if_exists) was overridden
         '400':
@@ -1134,7 +1136,7 @@ user + `CEREFOX_OAUTH_OWNER_ID` pin, and register the Claude OAuth App
    Client Secret from the pre-registered OAuth App (setup-supabase Step 7d).
 5. Save. Claude runs the OAuth flow → redirects you to the **Cerefox consent page** (sign
    in with the owner email/password from Step 7c, then **Allow**) → returns to Claude. The
-   connector shows as connected with **10 tools**. (If you've approved before, Supabase
+   connector shows as connected with **12 tools** (16 if you have enabled document relations). (If you've approved before, Supabase
    auto-consents and the page just flashes through — that's expected.)
 6. **Mobile**: connectors are account-level, so `CerefoxMCP` appears in the Claude mobile
    app automatically — run one search from your phone to confirm.

package/docs/guides/operational-cost.md

@@ -74,7 +74,7 @@ paths go through **Edge Functions**, which the free tier caps at 500,000/month:
 500K/month is generous for a single human-driven agent. But **automated or
 high-frequency agents on the remote path** can approach it. The lever: point those
 agents at the **local stdio MCP server** (`cerefox mcp`) instead of the remote Edge
-Function — it exposes the identical 10 tools, talks to the Data API directly, and
+Function — it exposes the identical 12 core tools (plus the 4 relation tools when enabled), talks to the Data API directly, and
 costs **zero** Edge Function invocations (bonus: lower latency, and it works offline
 against a reachable database). If you do exceed the free EF quota, Supabase's Pro
 plan ($25/mo, 2M invocations included) is the next step.

package/docs/guides/ops-scripts.md

@@ -124,6 +124,19 @@ bun scripts/backup_create.ts && bun scripts/db_migrate.ts
 
 ---
 
+## backup_create.ts / backup_restore.ts — thin shims over the CLI
+
+> **These delegate to `cerefox backup create` / `cerefox backup restore`.** They
+> used to carry their own capture and restore logic, which is how #166 half-
+> healed: the fixes that taught backups to capture project memberships (v1.0.7),
+> then relations and `lifecycle_status` (v1.1.0), landed in the CLI command and
+> never reached the scripts. Anyone following the pre-migration recipe below got
+> a snapshot missing all of them, silently.
+>
+> They now delegate, so there is one capture path, one restore path, and one
+> format. Prefer the CLI command directly; the scripts remain for the muscle
+> memory and for recipes that already reference them.
+
 ## backup_create.ts — Create a backup
 
 Exports all documents, chunks, and metadata to a JSON file in the backup directory. (End users use `cerefox backup create`.)
@@ -135,8 +148,8 @@ bun scripts/backup_create.ts [OPTIONS]
 | Option | Description |
 |--------|-------------|
 | `--label LABEL` | Optional label appended to the filename (e.g. `pre-migration`) |
-| `--dir DIR` | Directory to write backup to (default: `./backup-data`) |
-| `--git-commit` | Stage and commit the backup file to git after writing |
+| `--dir DIR` | Directory to write backup to (default: `./backups`) |
+| `--git-commit` | Stage and commit the backup file to git after writing. Performed by this script after the snapshot is written — `cerefox backup create --git` is a documented no-op, so the flag is deliberately not forwarded. |
 
 Backup filename format: `cerefox-{YYYYMMDDTHHMMSSZ}[-{label}].json`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cerefox/memory",
-  "version": "1.2.1",
+  "version": "1.3.0-beta.1",
   "description": "Cerefox — user-owned shared memory for AI agents. CLI + stdio MCP server + web UI + ingestion for a knowledge base on your own Supabase project (or fully self-hosted with Cerefox Local).",
   "license": "Apache-2.0",
   "homepage": "https://github.com/fstamatelopoulos/cerefox",