daftari 1.30.0 → 1.31.0

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "daftari",
-  "version": "1.30.0",
+  "version": "1.31.0",
   "description": "An open-source, multi-user knowledge vault exposed to AI agents via an MCP server.",
+  "mcpName": "io.github.mavaali/daftari",
   "license": "MIT",
   "author": "Mihir Wagle / mavaali",
   "type": "module",
@@ -61,6 +62,7 @@
     "chokidar": "^4.0.3",
     "glob": "^13.0.6",
     "gray-matter": "^4.0.3",
+    "jose": "^6.2.4",
     "js-yaml": "^4.1.1",
     "sqlite-vec": "^0.1.9"
   },
@@ -69,8 +71,10 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^25.8.0",
+    "@types/pg": "^8.20.0",
     "husky": "^9.1.7",
     "lint-staged": "^16.4.0",
+    "pg": "^8.22.0",
     "tsx": "^4.22.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.6"
@@ -78,5 +82,21 @@
   "overrides": {
     "protobufjs": "^7.6.1",
     "hono": "^4.12.25"
+  },
+  "peerDependencies": {
+    "pg": ">=8",
+    "@aws-sdk/client-s3": "^3.600.0",
+    "@azure/storage-blob": "^12.24.0"
+  },
+  "peerDependenciesMeta": {
+    "pg": {
+      "optional": true
+    },
+    "@aws-sdk/client-s3": {
+      "optional": true
+    },
+    "@azure/storage-blob": {
+      "optional": true
+    }
   }
 }

package/templates/config.yaml

@@ -32,3 +32,11 @@ roles:
     write: ["*"]
     promote: true
     ratify: true
+  # A propose-only role (#235): its vault_write calls land as staged 'write'
+  # proposals awaiting vault_ratify, and every other direct write tool is
+  # denied. The write list still scopes which collections it may propose into.
+  # This is the recommended role shape for autonomous agents.
+  agent-proposer:
+    read: ["*"]
+    write: ["*"]
+    propose_only: true