@raviolelabs/engram-mcp 0.2.2 → 0.4.2

package/dist/memory/modules/team/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../../src/memory/modules/team/tools.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAY9D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;IACtB,sDAAsD;IACtD,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtC;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,GAAG,iBAAiB,EAAE,CAyRnF"}

package/dist/memory/modules/team/tools.js

@@ -0,0 +1,252 @@
+// src/memory/modules/team/tools.ts
+// Workspace MCP tools: list_workspaces, create_workspace, leave_workspace,
+// invite_to_workspace, accept_workspace_invite.
+// These are registered alongside the public tools.
+import sodium from 'libsodium-wrappers';
+import { createLogger } from '../../../logger.js';
+import { generateWorkspaceKey, wrapKeyForRecipient, unwrapAndStoreWorkspaceKey, deleteWorkspaceKey, getOrCreateX25519Keypair, getX25519PubkeyHex, } from './keystore.js';
+const log = createLogger('team:tools');
+export function buildWorkspaceTools(ctx) {
+    const cloudUrl = ctx.config.cloudBaseUrl
+        ?? 'https://api.engram-mcp.com';
+    const dataDir = ctx.config.dataDir;
+    async function cloudFetch(path, init = {}) {
+        const jwt = await ctx.getJwt();
+        const headers = {
+            'Content-Type': 'application/json',
+            ...(init.headers ?? {}),
+        };
+        if (jwt)
+            headers['Cookie'] = `engram_session=${jwt}`;
+        return fetch(`${cloudUrl}${path}`, { ...init, headers });
+    }
+    return [
+        // ── list_workspaces ───────────────────────────────────────────────────────
+        {
+            name: 'list_workspaces',
+            description: [
+                'Return all team workspaces the current user belongs to.',
+                'WHEN: you need workspace IDs for use with scope parameter, or to show the user their teams.',
+                'Returns personal workspace plus all team workspaces with name, role, and workspace_id.',
+                'RETURNS: { workspaces: [{ id, name, role, is_personal }] }.',
+            ].join(' '),
+            inputSchema: { type: 'object', properties: {} },
+            handler: async () => {
+                const { getDb } = await import('../../../db/index.js');
+                const db = getDb();
+                const rows = db
+                    .prepare('SELECT id, name, role, owner_email, joined_at FROM workspaces ORDER BY joined_at ASC')
+                    .all();
+                return {
+                    workspaces: [
+                        { id: 'personal', name: 'Personal', role: 'owner', is_personal: true },
+                        ...rows.map((r) => ({
+                            id: r.id,
+                            name: r.name,
+                            role: r.role,
+                            is_personal: false,
+                            owner_email: r.owner_email,
+                            joined_at: r.joined_at,
+                        })),
+                    ],
+                };
+            },
+        },
+        // ── create_workspace ──────────────────────────────────────────────────────
+        {
+            name: 'create_workspace',
+            description: [
+                'Create a new team workspace. Generates a team master key locally, wraps it for the owner, and registers with engram-cloud.',
+                'WHEN: user wants to start a shared team memory space.',
+                'After creation, use invite_to_workspace to add members.',
+                'Requires an active cloud session (engram pair must have been run).',
+                'RETURNS: { workspace_id, name } or { error }.',
+            ].join(' '),
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    name: {
+                        type: 'string',
+                        description: 'Display name for the workspace (e.g. "Acme Research").',
+                    },
+                },
+                required: ['name'],
+            },
+            handler: async (args) => {
+                const name = args.name.trim();
+                if (!name)
+                    return { error: 'name_required' };
+                await sodium.ready;
+                const keypair = await getOrCreateX25519Keypair(dataDir, ctx.masterKey);
+                const ownerPubkeyHex = await getX25519PubkeyHex(dataDir);
+                if (!ownerPubkeyHex)
+                    return { error: 'keypair_not_found', hint: 'Run engram pair first.' };
+                // Generate fresh team master key + wrap it for the owner
+                const teamKey = await generateWorkspaceKey();
+                const wrappedForOwner = await wrapKeyForRecipient(teamKey, ownerPubkeyHex);
+                // Create workspace on cloud
+                const res = await cloudFetch('/api/workspaces', {
+                    method: 'POST',
+                    body: JSON.stringify({ name, wrapped_team_key: wrappedForOwner }),
+                });
+                if (!res.ok) {
+                    const err = await res.json().catch(() => ({}));
+                    log.error('create_workspace cloud error', err);
+                    return { error: err.error ?? `cloud_error_${res.status}`, message: err.message };
+                }
+                const data = await res.json();
+                // Store team master key + register workspace locally
+                const { getDb } = await import('../../../db/index.js');
+                const db = getDb();
+                const now = new Date().toISOString();
+                db.prepare(`INSERT OR REPLACE INTO workspaces (id, name, role, joined_at) VALUES (?, ?, 'owner', ?)`).run(data.id, data.name, now);
+                // Persist decrypted team key
+                await unwrapAndStoreWorkspaceKey(dataDir, data.id, wrappedForOwner, keypair);
+                log.info(`Created workspace ${data.id} "${data.name}"`);
+                return { workspace_id: data.id, name: data.name };
+            },
+        },
+        // ── leave_workspace ───────────────────────────────────────────────────────
+        {
+            name: 'leave_workspace',
+            description: [
+                'Remove yourself from a team workspace. Deletes the local team key.',
+                'WHEN: user wants to leave a team or the workspace is being decommissioned.',
+                'Requires confirm: true to prevent accidental removal.',
+                'RETURNS: { ok: true } or { error }.',
+            ].join(' '),
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    workspace_id: { type: 'string', description: 'Workspace id to leave.' },
+                    confirm: {
+                        type: 'boolean',
+                        description: 'Must be true to confirm leaving. Prevents accidental removal.',
+                    },
+                },
+                required: ['workspace_id', 'confirm'],
+            },
+            handler: async (args) => {
+                if (!args.confirm) {
+                    return { error: 'confirm_required', message: 'Pass confirm: true to leave the workspace.' };
+                }
+                const workspaceId = args.workspace_id;
+                // Remove from local SQLite registry
+                const { getDb } = await import('../../../db/index.js');
+                const db = getDb();
+                db.prepare('DELETE FROM workspaces WHERE id = ?').run(workspaceId);
+                // Delete local team key
+                await deleteWorkspaceKey(dataDir, workspaceId);
+                log.info(`Left workspace ${workspaceId}`);
+                return { ok: true };
+            },
+        },
+        // ── invite_to_workspace ───────────────────────────────────────────────────
+        {
+            name: 'invite_to_workspace',
+            description: [
+                'Invite a user to a team workspace by email. Fetches their X25519 pubkey from cloud, wraps the team key for them, and sends an invitation email.',
+                'WHEN: workspace owner or admin wants to add a new member.',
+                'The invitee must have a paired engram-mcp device (their pubkey must be registered).',
+                'RETURNS: { ok: true, invitation_id } or { error }.',
+            ].join(' '),
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    workspace_id: { type: 'string', description: 'Workspace id (from list_workspaces).' },
+                    email: { type: 'string', description: 'Email address of the invitee.' },
+                    role: {
+                        type: 'string',
+                        enum: ['member', 'admin'],
+                        description: 'Role to assign. Default: "member".',
+                        default: 'member',
+                    },
+                },
+                required: ['workspace_id', 'email'],
+            },
+            handler: async (args) => {
+                const workspaceId = args.workspace_id;
+                const email = args.email.trim().toLowerCase();
+                const role = args.role ?? 'member';
+                await sodium.ready;
+                const keypair = await getOrCreateX25519Keypair(dataDir, ctx.masterKey);
+                // Load local team key
+                const { loadWorkspaceKey } = await import('./keystore.js');
+                const teamKey = await loadWorkspaceKey(dataDir, workspaceId);
+                if (!teamKey) {
+                    return { error: 'team_key_not_found', message: 'You do not have a local key for this workspace. Are you the owner?' };
+                }
+                // Fetch invitee's pubkey from cloud
+                const pubkeyRes = await cloudFetch(`/api/users/pubkey?email=${encodeURIComponent(email)}`);
+                if (!pubkeyRes.ok) {
+                    const err = await pubkeyRes.json().catch(() => ({}));
+                    return { error: err.error ?? 'pubkey_fetch_failed', message: err.message };
+                }
+                const { x25519_pubkey: inviteePubkeyHex } = await pubkeyRes.json();
+                // Wrap team key for invitee
+                const wrappedForInvitee = await wrapKeyForRecipient(teamKey, inviteePubkeyHex);
+                // Send invitation
+                const invRes = await cloudFetch(`/api/workspaces/${workspaceId}/invite`, {
+                    method: 'POST',
+                    body: JSON.stringify({ email, role, wrapped_team_key: wrappedForInvitee }),
+                });
+                if (!invRes.ok) {
+                    const err = await invRes.json().catch(() => ({}));
+                    return { error: err.error ?? 'invite_failed', message: err.message };
+                }
+                const data = await invRes.json();
+                log.info(`Invited ${email} to workspace ${workspaceId}`);
+                return { ok: true, invitation_id: data.invitation_id };
+                void keypair; // keypair loaded to ensure keys are ready — not used directly for wrapping
+            },
+        },
+        // ── accept_workspace_invite ───────────────────────────────────────────────
+        {
+            name: 'accept_workspace_invite',
+            description: [
+                'Accept a team workspace invitation using the token from the invitation email.',
+                'Decrypts the wrapped team key using your local X25519 private key and stores it.',
+                'WHEN: you received an invitation link and want to join a team workspace.',
+                'RETURNS: { ok: true, workspace_id } or { error }.',
+            ].join(' '),
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    token: { type: 'string', description: 'Invitation token from the email link.' },
+                },
+                required: ['token'],
+            },
+            handler: async (args) => {
+                const token = args.token;
+                await sodium.ready;
+                const keypair = await getOrCreateX25519Keypair(dataDir, ctx.masterKey);
+                const res = await cloudFetch('/api/workspaces/invitations/accept', {
+                    method: 'POST',
+                    body: JSON.stringify({ token }),
+                });
+                if (!res.ok) {
+                    const err = await res.json().catch(() => ({}));
+                    return { error: err.error ?? 'accept_failed', message: err.message };
+                }
+                const data = await res.json();
+                if (data.wrapped_team_key) {
+                    await unwrapAndStoreWorkspaceKey(dataDir, data.workspace_id, data.wrapped_team_key, keypair);
+                }
+                // Register workspace locally
+                const workspaceInfoRes = await cloudFetch('/api/workspaces');
+                if (workspaceInfoRes.ok) {
+                    const { workspaces } = await workspaceInfoRes.json();
+                    const ws = workspaces.find((w) => w.id === data.workspace_id);
+                    if (ws) {
+                        const { getDb } = await import('../../../db/index.js');
+                        const db = getDb();
+                        db.prepare(`INSERT OR REPLACE INTO workspaces (id, name, role, joined_at) VALUES (?, ?, ?, ?)`).run(ws.id, ws.name, ws.role, ws.joined_at);
+                    }
+                }
+                log.info(`Accepted invite for workspace ${data.workspace_id}`);
+                return { ok: true, workspace_id: data.workspace_id };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=tools.js.map

package/dist/memory/modules/team/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../../src/memory/modules/team/tools.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,2EAA2E;AAC3E,gDAAgD;AAChD,mDAAmD;AAEnD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AASvC,MAAM,UAAU,mBAAmB,CAAC,GAA0B;IAC5D,MAAM,QAAQ,GAAI,GAAG,CAAC,MAA6C,CAAC,YAAkC;WACjG,4BAA4B,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAEnC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAAoB,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,CAAC,OAAiC,IAAI,EAAE,CAAC;SAClD,CAAC;QACF,IAAI,GAAG;YAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,kBAAkB,GAAG,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,6EAA6E;QAC7E;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE;gBACX,yDAAyD;gBACzD,6FAA6F;gBAC7F,wFAAwF;gBACxF,6DAA6D;aAC9D,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,GAAG,EAAE;qBACZ,OAAO,CAAC,sFAAsF,CAAC;qBAC/F,GAAG,EAAsG,CAAC;gBAE7G,OAAO;oBACL,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;wBACtE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAClB,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,WAAW,EAAE,KAAK;4BAClB,WAAW,EAAE,CAAC,CAAC,WAAW;4BAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;yBACvB,CAAC,CAAC;qBACJ;iBACF,CAAC;YACJ,CAAC;SACF;QAED,6EAA6E;QAC7E;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE;gBACX,4HAA4H;gBAC5H,uDAAuD;gBACvD,yDAAyD;gBACzD,oEAAoE;gBACpE,+CAA+C;aAChD,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wDAAwD;qBACtE;iBACF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAI,IAAI,CAAC,IAAe,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;gBAE7C,MAAM,MAAM,CAAC,KAAK,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBACvE,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,cAAc;oBAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;gBAE3F,yDAAyD;gBACzD,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAC;gBAC7C,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBAE3E,4BAA4B;gBAC5B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,iBAAiB,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;iBAClE,CAAC,CAAC;gBAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;oBACzE,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;oBAC/C,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,eAAe,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnF,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkC,CAAC;gBAE9D,qDAAqD;gBACrD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,EAAE,CAAC,OAAO,CACR,yFAAyF,CAC1F,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAE/B,6BAA6B;gBAC7B,MAAM,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;gBAE7E,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBACxD,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,CAAC;SACF;QAED,6EAA6E;QAC7E;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE;gBACX,oEAAoE;gBACpE,4EAA4E;gBAC5E,uDAAuD;gBACvD,qCAAqC;aACtC,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBACvE,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,+DAA+D;qBAC7E;iBACF;gBACD,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC;aACtC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;gBAC9F,CAAC;gBAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAsB,CAAC;gBAEhD,oCAAoC;gBACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACvD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;gBACnB,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAEnE,wBAAwB;gBACxB,MAAM,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAE/C,GAAG,CAAC,IAAI,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;SACF;QAED,6EAA6E;QAC7E;YACE,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE;gBACX,iJAAiJ;gBACjJ,2DAA2D;gBAC3D,qFAAqF;gBACrF,oDAAoD;aACrD,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBACrF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBACvE,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;wBACzB,WAAW,EAAE,oCAAoC;wBACjD,OAAO,EAAE,QAAQ;qBAClB;iBACF;gBACD,QAAQ,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC;aACpC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,WAAW,GAAG,IAAI,CAAC,YAAsB,CAAC;gBAChD,MAAM,KAAK,GAAI,IAAI,CAAC,KAAgB,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAI,IAAI,CAAC,IAA2B,IAAI,QAAQ,CAAC;gBAE3D,MAAM,MAAM,CAAC,KAAK,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAEvE,sBAAsB;gBACtB,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC;gBACxH,CAAC;gBAED,oCAAoC;gBACpC,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,2BAA2B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC3F,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;oBAC/E,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,qBAAqB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC7E,CAAC;gBACD,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,EAA+B,CAAC;gBAEhG,4BAA4B;gBAC5B,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;gBAE/E,kBAAkB;gBAClB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,mBAAmB,WAAW,SAAS,EAAE;oBACvE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;iBAC3E,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;oBAC5E,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACvE,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA+B,CAAC;gBAC9D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,iBAAiB,WAAW,EAAE,CAAC,CAAC;gBACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBAEvD,KAAK,OAAO,CAAC,CAAC,2EAA2E;YAC3F,CAAC;SACF;QAED,6EAA6E;QAC7E;YACE,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EAAE;gBACX,+EAA+E;gBAC/E,kFAAkF;gBAClF,0EAA0E;gBAC1E,mDAAmD;aACpD,CAAC,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;iBAChF;gBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAEvE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,oCAAoC,EAAE;oBACjE,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;iBAChC,CAAC,CAAC;gBAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;oBACzE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;gBACvE,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAG1B,CAAC;gBAEF,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,MAAM,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBAC/F,CAAC;gBAED,6BAA6B;gBAC7B,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,CAAC;gBAC7D,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;oBACxB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAEjD,CAAC;oBACF,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC9D,IAAI,EAAE,EAAE,CAAC;wBACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;wBACvD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;wBACnB,EAAE,CAAC,OAAO,CACR,mFAAmF,CACpF,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YACvD,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/memory/public/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/memory/public/tools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAsB3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,iBAAiB,EAAE,CAs+C9F"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/memory/public/tools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAsB3D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,iBAAiB,EAAE,CAmgD9F"}

package/dist/memory/public/tools.js

@@ -30,6 +30,7 @@ export function buildPublicTools(store, config) {
             description: [
                 'Store a memory (note, audio transcript, conversation, document) for later semantic retrieval.',
                 'INPUTS: content (required, free text). Optionally provide title (improves retrieval — 3-7 words), tags (array of strings — topics/people/projects this memory is about), type (default "notes"; use "conversations" for dialog turns, or any custom type), and properties (object — any extra key/value metadata).',
+                'SCOPE: use scope="personal" (default) for private memories, or scope="workspace:<id>" to store in a team workspace (get id from list_workspaces).',
                 'WHEN: call after user shares anything worth remembering (preferences, facts, decisions, exchanges). Always include title + 2-5 tags so it surfaces in future recall.',
                 'WIKILINKS: mention related memories by [[id]] or [[title]] in content — edges are auto-extracted.',
                 'IDEMPOTENT on (content_hash, type): calling twice with identical content returns the same id with {created: false}.',
@@ -58,6 +59,11 @@ export function buildPublicTools(store, config) {
                         description: 'Memory type: "notes" (default), "conversations", or any custom type.',
                         default: 'notes',
                     },
+                    scope: {
+                        type: 'string',
+                        description: 'Visibility scope: "personal" (default, private to you) or "workspace:<id>" for a team workspace.',
+                        default: 'personal',
+                    },
                     properties: {
                         type: 'object',
                         description: 'Optional extra metadata: source_url, author, sentiment, action_required, custom fields.',
@@ -70,6 +76,7 @@ export function buildPublicTools(store, config) {
                 const title = args.title;
                 const tags = args.tags;
                 const type = args.type ?? 'notes';
+                const scope = args.scope ?? 'personal';
                 const extraProps = args.properties ?? {};
                 const contentHash = createHash('sha256').update(content).digest('hex');
                 // Idempotency: check for existing memory with same content_hash + type
@@ -87,6 +94,7 @@ export function buildPublicTools(store, config) {
                 const item = {
                     id: ulid(),
                     type,
+                    scope,
                     source_id: `manual:${Date.now()}`,
                     content,
                     content_hash: contentHash,
@@ -125,11 +133,12 @@ export function buildPublicTools(store, config) {
             description: [
                 'Retrieve past memories by semantic similarity to a query.',
                 'INPUTS: query (required, short topic — NOT the full user question), optional types (array to restrict scope), optional limit (default 10, max 50).',
+                'SCOPE: use scope="personal" (default) to search only personal memories, scope="workspace:<id>" for a specific team workspace, or scope="all" to search across personal + all joined workspaces.',
                 'WHEN: you need to surface past information on a topic. Use recall instead of recent when you have a specific subject in mind.',
                 'TIP: extract the topic noun from the user message. "what did I say about alice?" → query: "alice".',
                 'ANTI-LOOP: if results is empty, the answer is genuinely "no matching memories" — DO NOT call recall again with the same query.',
                 'Try a different query (synonym, broader topic, related entity) at most twice before telling the user "no matches".',
-                'RETURNS: array of { id, type, score, snippet, title, tags, created_at }.',
+                'RETURNS: array of { id, type, score, snippet, title, tags, created_at, scope }.',
             ].join(' '),
             inputSchema: {
                 type: 'object',
@@ -143,6 +152,11 @@ export function buildPublicTools(store, config) {
                         items: { type: 'string' },
                         description: 'Restrict to these memory types (default: all). Faster when type is known.',
                     },
+                    scope: {
+                        type: 'string',
+                        description: '"personal" (default), "workspace:<id>", or "all" (personal + all workspaces).',
+                        default: 'personal',
+                    },
                     limit: {
                         type: 'number',
                         default: 10,
@@ -368,10 +382,11 @@ export function buildPublicTools(store, config) {
             name: 'recent',
             description: [
                 'Return the most recently created memories, sorted by created_at desc.',
+                'SCOPE: use scope="personal" (default) for private memories, scope="workspace:<id>" for team memories, or scope="all" for all scopes.',
                 'WHEN: start of a conversation — call recent({limit: 10}) to refresh context before answering.',
                 'Use recall instead of recent when you have a specific topic in mind.',
                 'ANTI-LOOP: returns at most limit items (default 20). If fewer returned, the store has fewer memories — DO NOT call again with a larger limit hoping for more.',
-                'RETURNS: array of { id, type, title, tags, snippet, created_at }.',
+                'RETURNS: array of { id, type, title, tags, snippet, created_at, scope }.',
             ].join(' '),
             inputSchema: {
                 type: 'object',
@@ -386,20 +401,32 @@ export function buildPublicTools(store, config) {
                         items: { type: 'string' },
                         description: 'Restrict to these memory types (optional).',
                     },
+                    scope: {
+                        type: 'string',
+                        description: '"personal" (default), "workspace:<id>", or "all" (personal + all workspaces).',
+                        default: 'personal',
+                    },
                 },
             },
             handler: async (args) => {
                 const limit = args.limit ?? 20;
                 const types = args.types;
+                const scope = args.scope ?? 'personal';
                 const { getDb } = await import('../../db/index.js');
                 const db = getDb();
-                let sql = `SELECT id, type, content, properties_json, created_at
-                   FROM memories`;
+                const conditions = [];
                 const params = [];
                 if (types && types.length > 0) {
-                    sql += ` WHERE type IN (${types.map(() => '?').join(',')})`;
+                    conditions.push(`type IN (${types.map(() => '?').join(',')})`);
                     params.push(...types);
                 }
+                if (scope !== 'all') {
+                    conditions.push('scope = ?');
+                    params.push(scope);
+                }
+                let sql = `SELECT id, type, content, properties_json, created_at, scope FROM memories`;
+                if (conditions.length > 0)
+                    sql += ` WHERE ${conditions.join(' AND ')}`;
                 sql += ` ORDER BY created_at DESC LIMIT ?`;
                 params.push(limit);
                 const rows = db.prepare(sql).all(...params);
@@ -408,6 +435,7 @@ export function buildPublicTools(store, config) {
                     return {
                         id: r.id,
                         type: r.type,
+                        scope: r.scope ?? 'personal',
                         title: props.title,
                         tags: props.tags,
                         snippet: r.content.slice(0, 200),