memorix 1.2.2 → 1.2.3

package/docs/dev-log/progress.txt

@@ -4,15 +4,25 @@
 > older notes when they conflict.
 
 ## Current State
-- Phase: 1.2.2 memory-control-plane admission and visibility implementation
-- Branch: `codex/1.2.2-memory-control-plane`
+- Phase: 1.2.3 session-context visibility hotfix
+- Branch: `codex/1.2.3-session-visibility`
 - Last updated: 2026-07-25
-- Released baseline: `memorix@1.2.1`, tag `v1.2.1`, `origin/main` at
-  `1b5bf7f`.
-- Goal: make the 1.2 multi-dimensional evidence layer behave as one bounded,
-  explainable control plane. A task Workset, hook handoff, lifecycle refresh,
-  and provider capability result must share evidence qualification, delivery
-  budgets, and privacy-safe receipts.
+- Released baseline: `memorix@1.2.2`, tag `v1.2.2`, `origin/main` at
+  `2a7ebc7`.
+- Goal: close the agent-facing session-context visibility boundary before
+  further control-plane work.
+
+## 1.2.3 Session Context Visibility Hotfix
+- A real installed-package CLI smoke found that a second coordination identity
+  could receive the first identity's personal observation in automatic session
+  context. The root cause was a reader-less core session-context call.
+- `getSessionContext()` now accepts an `ObservationReader`; CLI, MCP, and TUI
+  session entry points pass their resolved caller identity. Alias-backed
+  project-visible records remain readable, while personal/team records fail
+  closed.
+- Graph-neighbor routing is omitted whenever a reader is present because graph
+  relations are not yet visibility-scoped. Core, CLI, MCP, and alias regression
+  tests cover the boundary.
 
 ## 1.1.13 Closeout
 - Codex setup now stamps plugin versions and doctor distinguishes bundle,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Local-first shared memory layer for AI coding agents across MCP clients, Git history, reasoning context, and project sessions.",
   "type": "module",
   "sideEffects": false,

package/plugins/codex/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Shared workspace memory for Codex and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/src/audit/index.ts

@@ -1,156 +1,156 @@
-/**
- * Audit Module - Track Memorix-written files
- *
- * Records all files written by Memorix to distinguish them from
- * project-native files. Provides audit trail for cleanup and rollback.
- */
-
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-import { homedir } from 'node:os';
-
-function getAuditFilePath(): string {
-  return process.env.MEMORIX_AUDIT_FILE || path.join(homedir(), '.memorix', 'audit.json');
-}
-
-export interface AuditEntry {
-  type: 'hook' | 'rule' | 'other';
-  agent?: string;
-  path: string;
-  createdAt: string;
-}
-
-export interface ProjectAudit {
-  projectRoot: string;
-  installedAt: string;
-  entries: AuditEntry[];
-}
-
-export interface AuditData {
-  version: string;
-  projects: Record<string, ProjectAudit>;
-}
-
-/**
- * Load audit data from disk.
- */
-export async function loadAudit(): Promise<AuditData> {
-  try {
-    const content = await fs.readFile(getAuditFilePath(), 'utf-8');
-    return JSON.parse(content) as AuditData;
-  } catch {
-    // No audit file yet
-    return {
-      version: '1.0.0',
-      projects: {},
-    };
-  }
-}
-
-/**
- * Save audit data to disk.
- */
-export async function saveAudit(data: AuditData): Promise<void> {
-  const auditFile = getAuditFilePath();
-  const dir = path.dirname(auditFile);
-  await fs.mkdir(dir, { recursive: true });
-  await fs.writeFile(auditFile, JSON.stringify(data, null, 2), 'utf-8');
-}
-
-/**
- * Get project ID from project root via .git detection.
- */
-export function getProjectId(projectRoot: string): string {
-  try {
-    const { detectProject } = require('../project/detector.js');
-    const project = detectProject(projectRoot);
-    if (project) return project.id;
-  } catch { /* fallback below */ }
-  const normalized = projectRoot.replace(/\\/g, '/');
-  return `untracked/${normalized}`;
-}
-
-/**
- * Record a file written by Memorix.
- */
-export async function recordFile(
-  projectRoot: string,
-  type: AuditEntry['type'],
-  filePath: string,
-  agent?: string,
-): Promise<void> {
-  const data = await loadAudit();
-  const projectId = getProjectId(projectRoot);
-
-  if (!data.projects[projectId]) {
-    data.projects[projectId] = {
-      projectRoot,
-      installedAt: new Date().toISOString(),
-      entries: [],
-    };
-  }
-
-  // Check if entry already exists
-  const existingIndex = data.projects[projectId].entries.findIndex(
-    (e) => e.path === filePath
-  );
-
-  if (existingIndex === -1) {
-    data.projects[projectId].entries.push({
-      type,
-      agent,
-      path: filePath,
-      createdAt: new Date().toISOString(),
-    });
-  }
-
-  await saveAudit(data);
-}
-
-/**
- * Get all files written by Memorix for a project.
- */
-export async function getProjectFiles(projectRoot: string): Promise<AuditEntry[]> {
-  const data = await loadAudit();
-  const projectId = getProjectId(projectRoot);
-  return data.projects[projectId]?.entries || [];
-}
-
-/**
- * Remove a file from audit (when uninstalled).
- */
-export async function removeFile(projectRoot: string, filePath: string): Promise<void> {
-  const data = await loadAudit();
-  const projectId = getProjectId(projectRoot);
-
-  if (!data.projects[projectId]) return;
-
-  data.projects[projectId].entries = data.projects[projectId].entries.filter(
-    (e) => e.path !== filePath
-  );
-
-  // If no entries left, remove the project
-  if (data.projects[projectId].entries.length === 0) {
-    delete data.projects[projectId];
-  }
-
-  await saveAudit(data);
-}
-
-/**
- * Get all audit entries across all projects.
- */
-export async function getAllAuditEntries(): Promise<
-  Array<{ projectId: string; entry: AuditEntry }>
-> {
-  const data = await loadAudit();
-  const entries: Array<{ projectId: string; entry: AuditEntry }> = [];
-
-  for (const [projectId, project] of Object.entries(data.projects)) {
-    for (const entry of project.entries) {
-      entries.push({ projectId, entry });
-    }
-  }
-
-  return entries;
-}
+/**
+ * Audit Module - Track Memorix-written files
+ *
+ * Records all files written by Memorix to distinguish them from
+ * project-native files. Provides audit trail for cleanup and rollback.
+ */
+
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { homedir } from 'node:os';
+
+function getAuditFilePath(): string {
+  return process.env.MEMORIX_AUDIT_FILE || path.join(homedir(), '.memorix', 'audit.json');
+}
+
+export interface AuditEntry {
+  type: 'hook' | 'rule' | 'other';
+  agent?: string;
+  path: string;
+  createdAt: string;
+}
+
+export interface ProjectAudit {
+  projectRoot: string;
+  installedAt: string;
+  entries: AuditEntry[];
+}
+
+export interface AuditData {
+  version: string;
+  projects: Record<string, ProjectAudit>;
+}
+
+/**
+ * Load audit data from disk.
+ */
+export async function loadAudit(): Promise<AuditData> {
+  try {
+    const content = await fs.readFile(getAuditFilePath(), 'utf-8');
+    return JSON.parse(content) as AuditData;
+  } catch {
+    // No audit file yet
+    return {
+      version: '1.0.0',
+      projects: {},
+    };
+  }
+}
+
+/**
+ * Save audit data to disk.
+ */
+export async function saveAudit(data: AuditData): Promise<void> {
+  const auditFile = getAuditFilePath();
+  const dir = path.dirname(auditFile);
+  await fs.mkdir(dir, { recursive: true });
+  await fs.writeFile(auditFile, JSON.stringify(data, null, 2), 'utf-8');
+}
+
+/**
+ * Get project ID from project root via .git detection.
+ */
+export function getProjectId(projectRoot: string): string {
+  try {
+    const { detectProject } = require('../project/detector.js');
+    const project = detectProject(projectRoot);
+    if (project) return project.id;
+  } catch { /* fallback below */ }
+  const normalized = projectRoot.replace(/\\/g, '/');
+  return `untracked/${normalized}`;
+}
+
+/**
+ * Record a file written by Memorix.
+ */
+export async function recordFile(
+  projectRoot: string,
+  type: AuditEntry['type'],
+  filePath: string,
+  agent?: string,
+): Promise<void> {
+  const data = await loadAudit();
+  const projectId = getProjectId(projectRoot);
+
+  if (!data.projects[projectId]) {
+    data.projects[projectId] = {
+      projectRoot,
+      installedAt: new Date().toISOString(),
+      entries: [],
+    };
+  }
+
+  // Check if entry already exists
+  const existingIndex = data.projects[projectId].entries.findIndex(
+    (e) => e.path === filePath
+  );
+
+  if (existingIndex === -1) {
+    data.projects[projectId].entries.push({
+      type,
+      agent,
+      path: filePath,
+      createdAt: new Date().toISOString(),
+    });
+  }
+
+  await saveAudit(data);
+}
+
+/**
+ * Get all files written by Memorix for a project.
+ */
+export async function getProjectFiles(projectRoot: string): Promise<AuditEntry[]> {
+  const data = await loadAudit();
+  const projectId = getProjectId(projectRoot);
+  return data.projects[projectId]?.entries || [];
+}
+
+/**
+ * Remove a file from audit (when uninstalled).
+ */
+export async function removeFile(projectRoot: string, filePath: string): Promise<void> {
+  const data = await loadAudit();
+  const projectId = getProjectId(projectRoot);
+
+  if (!data.projects[projectId]) return;
+
+  data.projects[projectId].entries = data.projects[projectId].entries.filter(
+    (e) => e.path !== filePath
+  );
+
+  // If no entries left, remove the project
+  if (data.projects[projectId].entries.length === 0) {
+    delete data.projects[projectId];
+  }
+
+  await saveAudit(data);
+}
+
+/**
+ * Get all audit entries across all projects.
+ */
+export async function getAllAuditEntries(): Promise<
+  Array<{ projectId: string; entry: AuditEntry }>
+> {
+  const data = await loadAudit();
+  const entries: Array<{ projectId: string; entry: AuditEntry }> = [];
+
+  for (const [projectId, project] of Object.entries(data.projects)) {
+    for (const entry of project.entries) {
+      entries.push({ projectId, entry });
+    }
+  }
+
+  return entries;
+}

package/src/cli/commands/audit-list.ts

@@ -1,89 +1,89 @@
-/**
- * CLI Command: memorix audit list
- *
- * List all files written by Memorix (audit trail).
- */
-
-import { defineCommand } from 'citty';
-import * as p from '@clack/prompts';
-
-export default defineCommand({
-  meta: {
-    name: 'list',
-    description: 'List Memorix-written files (audit trail)',
-  },
-  args: {
-    project: {
-      type: 'string',
-      description: 'Filter by project (optional)',
-      required: false,
-    },
-  },
-  run: async ({ args }) => {
-    const { getAllAuditEntries, getProjectId } = await import('../../audit/index.js');
-    const os = await import('node:os');
-    let cwd: string;
-    try {
-      cwd = process.cwd();
-    } catch {
-      cwd = os.homedir();
-      console.log(`[WARN] Could not access current directory, using home: ${cwd}`);
-    }
-
-    p.intro('Memorix Audit Trail');
-
-    const allEntries = await getAllAuditEntries();
-
-    if (allEntries.length === 0) {
-      console.log('No Memorix-written files found.');
-      p.outro('Audit trail is empty.');
-      return;
-    }
-
-    // Filter by project if specified
-    let entries = allEntries;
-    if (args.project) {
-      const targetProjectId = getProjectId(args.project);
-      entries = allEntries.filter((e) => e.projectId === targetProjectId);
-    }
-
-    if (entries.length === 0) {
-      console.log('No Memorix-written files found for this project.');
-      p.outro('Audit trail is empty for this project.');
-      return;
-    }
-
-    // Group by project
-    const byProject: Record<string, Array<{ entry: import('../../audit/index.js').AuditEntry }>> = {};
-    for (const { projectId, entry } of entries) {
-      if (!byProject[projectId]) {
-        byProject[projectId] = [];
-      }
-      byProject[projectId].push({ entry });
-    }
-
-    // Display by project
-    console.log('');
-    for (const [projectId, items] of Object.entries(byProject)) {
-      console.log(`Project: ${projectId}`);
-      console.log('');
-
-      for (const { entry } of items) {
-        const icon = entry.type === 'hook' ? '[HOOK]' : '[TASK]';
-        const agent = entry.agent ? ` (${entry.agent})` : '';
-        console.log(`${icon} ${entry.path}${agent}`);
-        console.log(`   Created: ${entry.createdAt}`);
-        console.log('');
-      }
-    }
-
-    // Summary
-    const hookCount = entries.filter((e) => e.entry.type === 'hook').length;
-    const ruleCount = entries.filter((e) => e.entry.type === 'rule').length;
-    const projectCount = new Set(entries.map((e) => e.projectId)).size;
-
-    p.note(`${projectCount} projects, ${hookCount} hooks, ${ruleCount} rules`);
-
-    p.outro('Audit trail complete.');
-  },
-});
+/**
+ * CLI Command: memorix audit list
+ *
+ * List all files written by Memorix (audit trail).
+ */
+
+import { defineCommand } from 'citty';
+import * as p from '@clack/prompts';
+
+export default defineCommand({
+  meta: {
+    name: 'list',
+    description: 'List Memorix-written files (audit trail)',
+  },
+  args: {
+    project: {
+      type: 'string',
+      description: 'Filter by project (optional)',
+      required: false,
+    },
+  },
+  run: async ({ args }) => {
+    const { getAllAuditEntries, getProjectId } = await import('../../audit/index.js');
+    const os = await import('node:os');
+    let cwd: string;
+    try {
+      cwd = process.cwd();
+    } catch {
+      cwd = os.homedir();
+      console.log(`[WARN] Could not access current directory, using home: ${cwd}`);
+    }
+
+    p.intro('Memorix Audit Trail');
+
+    const allEntries = await getAllAuditEntries();
+
+    if (allEntries.length === 0) {
+      console.log('No Memorix-written files found.');
+      p.outro('Audit trail is empty.');
+      return;
+    }
+
+    // Filter by project if specified
+    let entries = allEntries;
+    if (args.project) {
+      const targetProjectId = getProjectId(args.project);
+      entries = allEntries.filter((e) => e.projectId === targetProjectId);
+    }
+
+    if (entries.length === 0) {
+      console.log('No Memorix-written files found for this project.');
+      p.outro('Audit trail is empty for this project.');
+      return;
+    }
+
+    // Group by project
+    const byProject: Record<string, Array<{ entry: import('../../audit/index.js').AuditEntry }>> = {};
+    for (const { projectId, entry } of entries) {
+      if (!byProject[projectId]) {
+        byProject[projectId] = [];
+      }
+      byProject[projectId].push({ entry });
+    }
+
+    // Display by project
+    console.log('');
+    for (const [projectId, items] of Object.entries(byProject)) {
+      console.log(`Project: ${projectId}`);
+      console.log('');
+
+      for (const { entry } of items) {
+        const icon = entry.type === 'hook' ? '[HOOK]' : '[TASK]';
+        const agent = entry.agent ? ` (${entry.agent})` : '';
+        console.log(`${icon} ${entry.path}${agent}`);
+        console.log(`   Created: ${entry.createdAt}`);
+        console.log('');
+      }
+    }
+
+    // Summary
+    const hookCount = entries.filter((e) => e.entry.type === 'hook').length;
+    const ruleCount = entries.filter((e) => e.entry.type === 'rule').length;
+    const projectCount = new Set(entries.map((e) => e.projectId)).size;
+
+    p.note(`${projectCount} projects, ${hookCount} hooks, ${ruleCount} rules`);
+
+    p.outro('Audit trail complete.');
+  },
+});