memorix 1.9.4 → 1.9.5

package/dist/types.d.ts

@@ -608,7 +608,7 @@ interface MemoryRef {
 /** MCP config format adapter interface */
 interface MCPConfigAdapter {
     /** Setup-only adapters may support a host that does not participate in workspace sync. */
-    readonly source: AgentTarget | 'codebuddy' | 'dsh' | 'workbuddy';
+    readonly source: AgentTarget | 'codebuddy' | 'dsh' | 'workbuddy' | 'grok';
     /** Parse MCP server entries from a config file */
     parse(content: string): MCPServerEntry[];
     /** Generate config file content from MCP server entries */

package/dist/vector-backfill-runner.js

@@ -835,18 +835,21 @@ CREATE TABLE IF NOT EXISTS chat_transcript (
 `;
     CREATE_GRAPH_ENTITIES_TABLE = `
 CREATE TABLE IF NOT EXISTS graph_entities (
-  name            TEXT PRIMARY KEY,
+  projectId       TEXT NOT NULL,
+  name            TEXT NOT NULL,
   entityType      TEXT NOT NULL DEFAULT '',
-  observations    TEXT NOT NULL DEFAULT '[]'
+  observations    TEXT NOT NULL DEFAULT '[]',
+  PRIMARY KEY (projectId, name)
 );
 `;
     CREATE_GRAPH_RELATIONS_TABLE = `
 CREATE TABLE IF NOT EXISTS graph_relations (
   id              INTEGER PRIMARY KEY AUTOINCREMENT,
+  projectId       TEXT NOT NULL,
   from_entity     TEXT NOT NULL,
   to_entity       TEXT NOT NULL,
   relationType    TEXT NOT NULL DEFAULT '',
-  UNIQUE(from_entity, to_entity, relationType)
+  UNIQUE(projectId, from_entity, to_entity, relationType)
 );
 `;
     CREATE_CODE_FILES_TABLE = `
@@ -1714,6 +1717,21 @@ var init_sqlite_reliability = __esm({
 import { promises as fs2 } from "fs";
 import { randomUUID } from "crypto";
 import path4 from "path";
+function canReclaimStaleLock(raw) {
+  try {
+    const parsed = JSON.parse(raw);
+    const pid = Number(parsed.pid);
+    if (!Number.isSafeInteger(pid) || pid < 1) return true;
+    try {
+      process.kill(pid, 0);
+      return false;
+    } catch (error) {
+      return error.code !== "EPERM";
+    }
+  } catch {
+    return true;
+  }
+}
 async function acquireLock(lockPath) {
   for (let i2 = 0; i2 < MAX_RETRIES; i2++) {
     try {
@@ -1727,9 +1745,12 @@ async function acquireLock(lockPath) {
         try {
           const stat5 = await fs2.stat(lockPath);
           if (Date.now() - stat5.mtimeMs > LOCK_STALE_MS) {
-            await fs2.unlink(lockPath).catch(() => {
-            });
-            continue;
+            const raw2 = await fs2.readFile(lockPath, "utf8").catch(() => "");
+            if (canReclaimStaleLock(raw2)) {
+              await fs2.unlink(lockPath).catch(() => {
+              });
+              continue;
+            }
           }
         } catch {
           continue;
@@ -1740,6 +1761,10 @@ async function acquireLock(lockPath) {
       }
     }
   }
+  const raw = await fs2.readFile(lockPath, "utf8").catch(() => "");
+  if (!canReclaimStaleLock(raw)) {
+    throw new Error(`Failed to acquire lock: ${lockPath} (owner is still running)`);
+  }
   await fs2.unlink(lockPath).catch(() => {
   });
   try {
@@ -5670,6 +5695,7 @@ var init_sqlite_store = __esm({
     init_sqlite_db();
     init_sqlite_reliability();
     init_sqlite_fts();
+    init_file_lock();
     SqliteBackend = class {
       db = null;
       dataDir = "";
@@ -5833,38 +5859,43 @@ var init_sqlite_store = __esm({
       }
       // ── Migration ────────────────────────────────────────────────────
       async migrateFromJsonIfNeeded() {
-        const count2 = this.db.prepare(`SELECT COUNT(*) AS cnt FROM observations`).get();
-        if (count2.cnt > 0) return;
         const jsonPath = path7.join(this.dataDir, "observations.json");
         if (!fs4.existsSync(jsonPath)) return;
-        try {
+        await withFileLock(this.dataDir, async () => {
+          const count2 = this.db.prepare(`SELECT COUNT(*) AS cnt FROM observations`).get();
+          if (count2.cnt > 0) return;
           const raw = fs4.readFileSync(jsonPath, "utf-8");
-          const observations2 = JSON.parse(raw);
+          const parsed = JSON.parse(raw);
+          if (!Array.isArray(parsed)) {
+            throw new Error("[memorix] observations.json migration refused: expected a JSON array");
+          }
+          const observations2 = parsed;
           if (observations2.length === 0) return;
+          if (observations2.some((obs) => !obs || !Number.isSafeInteger(obs.id) || obs.id < 1 || typeof obs.projectId !== "string")) {
+            throw new Error("[memorix] observations.json migration refused: invalid observation record");
+          }
           console.error(`[memorix] Migrating ${observations2.length} observations from JSON to SQLite...`);
           const insertMany = this.db.transaction((obsList) => {
             for (const obs of obsList) {
               this.stmtInsert.run(obsToRow(obs));
             }
-          });
-          insertMany(observations2);
-          const counterPath = path7.join(this.dataDir, "counter.json");
-          if (fs4.existsSync(counterPath)) {
-            try {
+            const counterPath = path7.join(this.dataDir, "counter.json");
+            let counterNextId;
+            if (fs4.existsSync(counterPath)) {
               const counterData = JSON.parse(fs4.readFileSync(counterPath, "utf-8"));
-              const nextId2 = counterData.nextId ?? counterData.next_id ?? Math.max(...observations2.map((o) => o.id)) + 1;
-              this.rawSaveIdCounter(nextId2);
-            } catch {
-              this.rawSaveIdCounter(Math.max(...observations2.map((o) => o.id)) + 1);
+              const candidate = counterData.nextId ?? counterData.next_id;
+              if (candidate !== void 0 && (!Number.isSafeInteger(candidate) || Number(candidate) < 1)) {
+                throw new Error("[memorix] counter.json migration refused: nextId must be a positive integer");
+              }
+              counterNextId = candidate === void 0 ? void 0 : Number(candidate);
             }
-          } else {
-            this.rawSaveIdCounter(Math.max(...observations2.map((o) => o.id)) + 1);
-          }
-          this.bumpGeneration();
+            const maxId = Math.max(...obsList.map((obs) => obs.id));
+            this.rawSaveIdCounter(Math.max(counterNextId ?? 1, maxId + 1));
+            this.bumpGeneration();
+          });
+          insertMany(observations2);
           console.error(`[memorix] Migration complete. ${observations2.length} observations now in SQLite.`);
-        } catch (err) {
-          console.error(`[memorix] JSON\u2192SQLite migration failed (non-fatal, data preserved in JSON): ${err}`);
-        }
+        });
       }
       // ── Public read ──────────────────────────────────────────────────
       async loadAll() {

package/docs/AGENT_OPERATOR_PLAYBOOK.md

@@ -41,7 +41,7 @@ For the 1.4 release line, the visible product shape is:
 - `memorix_project_context` / `memorix context "..."` is the normal black-box entry for non-trivial coding work: it assembles a bounded task Workset instead of injecting a generic memory dump; `memorix resume "..."` is the explicit CLI continuation projection
 - Code State keeps local snapshots and freshness links; a healthy pre-existing local CodeGraph index can add a bounded semantic outline, but Memorix never initializes or synchronizes that external index itself
 - `memorix knowledge` is an explicit review path for source-backed Markdown knowledge and canonical workflows. Do not initialize a versioned workspace or apply a proposal unless the user asks for that managed artifact
-- integration surfaces are agent-specific: Claude Code, Codex, GitHub Copilot CLI, Antigravity, and Hermes receive plugin packages; OpenClaw receives a compatible bundle; Pi and Oh-my-Pi receive package entries; Gemini CLI receives an extension package; OpenCode receives a plugin file and skill; Grok Build receives native hooks and `AGENTS.md` guidance while keeping MCP host-owned; DeepSeek Harness receives an MCP patch row, AGENTS.md guidance, and skills; Cursor and other agents receive MCP/rules/hooks where supported
+- integration surfaces are agent-specific: Claude Code, Codex, GitHub Copilot CLI, Antigravity, and Hermes receive plugin packages; OpenClaw receives a compatible bundle; Pi and Oh-my-Pi receive package entries; Gemini CLI receives an extension package; OpenCode receives a plugin file and skill; Grok Build receives native hooks and `AGENTS.md` guidance while keeping MCP host-owned by default (`--mcp http` writes Grok `config.toml`); DeepSeek Harness receives an MCP patch row, AGENTS.md guidance, and skills; Cursor and other agents receive MCP/rules/hooks where supported
 - privacy-safe diagnostics and receipts avoid raw chat, memory text, query text, tool payloads, and local file paths
 
 ---
@@ -257,7 +257,7 @@ What this installs depends on the target agent:
 - Pi: user Pi package with extension-based hook capture and a Memorix skill, registered through `pi install <path> --approve`; project-local setup uses `-l`.
 - Gemini CLI: local extension package under `~/.gemini/extensions/memorix`, extension-bundled stdio MCP, `GEMINI.md` context, hooks, commands, and skills. Antigravity CLI has an official Gemini CLI migration path, but Gemini CLI remains a separate target.
 - OpenCode: local plugin file, `opencode.json` MCP config, OpenCode skill, plus `AGENTS.md` guidance.
-- Grok Build: native hooks in `~/.grok/hooks/memorix.json` and guidance in `~/.grok/AGENTS.md`. Global hooks are trusted; project hooks require Grok `/hooks-trust` or `--trust`. Memorix does not write Grok's `config.toml` or MCP entries.
+- Grok Build: native hooks in `~/.grok/hooks/memorix.json` and guidance in `~/.grok/AGENTS.md`. Global hooks are trusted; project hooks require Grok `/hooks-trust` or `--trust`. MCP stays host-owned unless you pass `--mcp http`, which writes `[mcp_servers.memorix]` in Grok `config.toml`.
 - Antigravity: native plugin under `~/.gemini/config/plugins/memorix` or `.agents/plugins/memorix`, with `plugin.json`, `mcp_config.json`, `hooks.json`, rules, and skills.
 - OpenClaw: OpenClaw-compatible bundle under `~/.openclaw/extensions/memorix`, bundled `.mcp.json`, skills, and OpenClaw `HOOK.md`/`handler.ts` hook pack.
 - Hermes Agent: Hermes plugin under Hermes home (`%LOCALAPPDATA%\hermes` on native Windows, `~/.hermes` elsewhere, or `HERMES_HOME`), enabled in `config.yaml`, with plugin hooks, slash command, CLI command, skills, and MCP config.
@@ -404,7 +404,51 @@ memorix background ensure
 memorix background ensure 2>/dev/null
 ```
 
-Or use a launchd plist / systemd user service for true boot-time persistence.
+Or supervise `memorix serve-http` directly so a crash or reboot restarts the control plane.
+
+Linux systemd user unit (`~/.config/systemd/user/memorix-http.service`):
+
+```ini
+[Unit]
+Description=Memorix HTTP MCP control plane
+After=default.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/env memorix serve-http --host 127.0.0.1 --port 3211
+Environment=PATH=%h/.local/bin:/usr/local/bin:/usr/bin
+Restart=on-failure
+RestartSec=3
+
+[Install]
+WantedBy=default.target
+```
+
+macOS LaunchAgent (`~/Library/LaunchAgents/com.memorix.http.plist`). Point `ProgramArguments` at `which memorix`:
+
+```xml
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.memorix.http</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/usr/local/bin/memorix</string>
+    <string>serve-http</string>
+    <string>--host</string>
+    <string>127.0.0.1</string>
+    <string>--port</string>
+    <string>3211</string>
+  </array>
+  <key>KeepAlive</key>
+  <true/>
+  <key>RunAtLoad</key>
+  <true/>
+</dict>
+</plist>
+```
 
 **Why this matters:** IDEs that use `serverUrl` (Windsurf, Cursor HTTP mode) connect to `http://localhost:3211/mcp` but cannot start the server. If the service is down, the IDE shows an MCP error with no recovery path. The user must run `memorix background start` or `ensure` manually.
 

package/docs/API_REFERENCE.md

@@ -81,6 +81,7 @@ memorix sync workspace --action scan
 memorix sync store status --json
 memorix sync store push
 memorix sync store pull
+memorix sync store push --scope user
 memorix sync store device rotate
 memorix ingest image --path ./diagram.png
 memorix media import --path ./architecture.png
@@ -92,7 +93,8 @@ memorix receipt --json --probe "release blocker"
 The CLI is for direct terminal use, not a 1:1 mirror of MCP tool names. It does not require an MCP connection. `--cwd` selects a Git project from any shell; an unbound terminal has project-visible access only, including transfer exports. `memorix identity join|use|clear` makes personal/team access and coordination explicit, while `--as <agent-id>` is the one-command equivalent for scripts. The only MCP-only area is the optional graph-compatibility tools (`create_entities`, `read_graph`, and related tools) for workflows that expect the official memory-server style graph API.
 
 `memorix sync store` is an explicit, opt-in multi-device observation relay. It
-uses the current Git project as its namespace, excludes personal/agent-targeted
+uses the current Git project as its namespace by default (`--scope project`),
+or every local project with `--scope user`. It excludes personal/agent-targeted
 and unqualified records, keeps a local retry outbox, and stores cursors locally.
 The default `status` action is preview-only. GitHub stores immutable JSONL event
 blobs; it does not receive `memorix.db`, `memorix.db-wal`, or `memorix.db-shm`.

package/docs/CONFIGURATION.md

@@ -102,6 +102,15 @@ Memorix resolves configuration in this order:
 Environment variables stay available for CI, MCP launchers, and temporary shell
 overrides. They are not the default user-facing setup path.
 
+For the HTTP control plane, `MEMORIX_HTTP_MAX_BODY_BYTES` bounds JSON request
+bodies at 10 MiB by default and accepts values up to 64 MiB. Keep the default
+unless a trusted local client needs larger payloads; this limit is not an
+authentication boundary. `MEMORIX_HTTP_AUTH_TOKEN` enables Bearer-token
+authentication for every endpoint except `/health`. Non-loopback binds are
+refused unless this token is set or the operator explicitly sets
+`MEMORIX_HTTP_ALLOW_UNAUTHENTICATED_BIND=1` behind a private network or
+authenticated reverse proxy.
+
 If you want the simplest setup, configure `~/.memorix/config.toml` once and stop
 there. Add `<git-root>/memorix.toml` only when a repository needs different
 models, memory behavior, or server defaults.
@@ -397,10 +406,15 @@ Common keys:
 Store sync is disabled unless `MEMORIX_SYNC_PROVIDER` is explicitly set. It
 replicates approved project-visible observation events, never the live SQLite
 file or its `-wal` / `-shm` companions. The local SQLite store remains the
-canonical read/write store.
+canonical read/write store. Default scope is the current Git project. Pass
+`--scope user` to relay every local project through a separate `user-global`
+named per-user namespace. Set the same stable value on that user's devices;
+the value is required so operators sharing one remote cannot silently share a
+default namespace.
 
 ```text
 MEMORIX_SYNC_PROVIDER=fs|github|s3|postgres
+MEMORIX_SYNC_USER_NAMESPACE=your-stable-user-id   # required with --scope user
 ```
 
 The filesystem relay needs `MEMORIX_SYNC_FS_ROOT`. The GitHub relay needs a

package/docs/DOCKER.md

@@ -29,6 +29,22 @@ Then open:
 - MCP endpoint: `http://localhost:3211/mcp`
 - health: `http://localhost:3211/health`
 
+The compose port is bound to `127.0.0.1` by default. Do not expose this
+unauthenticated control plane directly to the public internet. For a hosted
+deployment, put it behind an authenticated reverse proxy or a private network
+boundary before allowing remote clients to connect.
+
+Set `MEMORIX_HTTP_AUTH_TOKEN` in the service environment when the control plane
+must accept remote clients. Send it as `Authorization: Bearer <token>`; the
+`/health` endpoint remains unauthenticated for readiness checks. The supplied
+compose file uses an explicit unauthenticated-bind opt-in because its published
+host port is loopback-only.
+
+HTTP JSON bodies are limited to 10 MiB by default (dashboard maintenance
+requests use a 1 MiB sub-limit). Operators can set
+`MEMORIX_HTTP_MAX_BODY_BYTES`, up to 64 MiB, when a trusted local client needs
+larger media or tool payloads.
+
 Stop it with:
 
 ```bash
@@ -50,7 +66,9 @@ If you prefer `docker run`:
 
 ```bash
 docker build -t memorix:local .
-docker run --rm -p 3211:3211 -v memorix-data:/data memorix:local
+docker run --rm -p 127.0.0.1:3211:3211 \
+  -e MEMORIX_HTTP_ALLOW_UNAUTHENTICATED_BIND=1 \
+  -v memorix-data:/data memorix:local
 ```
 
 ---
@@ -60,9 +78,11 @@ docker run --rm -p 3211:3211 -v memorix-data:/data memorix:local
 `memorix serve-http` accepts a `--host` flag:
 
 - **Local** (default): binds to `127.0.0.1` — only accessible from the host machine
-- **Docker**: the Dockerfile sets `--host 0.0.0.0` — accessible from outside the container, which is required for port mapping (`-p 3211:3211`) to work
+- **Docker**: the Dockerfile sets `--host 0.0.0.0` — accessible from outside the container, which is required for port mapping (`-p 3211:3211`) to work. Set `MEMORIX_HTTP_AUTH_TOKEN`, or explicitly opt into an unauthenticated private-network bind with `MEMORIX_HTTP_ALLOW_UNAUTHENTICATED_BIND=1`.
 
-If you run `serve-http` manually inside a container, make sure to pass `--host 0.0.0.0` or the port will not be reachable from the host.
+If you run `serve-http` manually inside a container, make sure to pass
+`--host 0.0.0.0` plus one of those explicit security settings, or the server
+will refuse to start.
 
 ---
 

package/docs/INTEGRATIONS.md

@@ -53,7 +53,7 @@ Generated guidance also has scope:
 | CodeBuddy Code | `memorix setup --agent codebuddy --global` | CodeBuddy local marketplace plugin | `~/.codebuddy/memorix-local` marketplace with `.codebuddy-plugin`, bundled stdio MCP, skills, and hooks | Setup attempts `codebuddy plugin marketplace add` then user-scope install. It does not alter existing CodeBuddy settings, permissions, or model configuration; review third-party hooks in CodeBuddy's `/hooks` flow before enabling them. |
 | GitHub Copilot CLI | `memorix setup --agent copilot --global` | Copilot CLI plugin package | Local plugin under `~/.copilot/plugins/local/memorix` with MCP, skills, and hooks | Setup attempts `copilot plugin install <local-path>` when Copilot CLI is available. |
 | Cursor | `memorix setup --agent cursor --global` | Cursor MCP and rules config | Cursor MCP config, `.cursor/rules/memorix.mdc`, skills, and hook guidance | Reload Cursor after setup so it can pick up project config changes. |
-| Grok Build | `memorix setup --agent grok --global` | `~/.grok/hooks/memorix.json` + `~/.grok/AGENTS.md` | Lifecycle hooks on SessionStart, SessionEnd, UserPromptSubmit, PostToolUse, PostToolUseFailure, PreCompact, PostCompact, Stop, and StopFailure, plus Grok project/global guidance | Uses Grok's own JSON hook directory and never writes `~/.grok/config.toml` or MCP entries. Global hooks are trusted; project hooks require Grok `/hooks-trust`. Set `GROK_HOME` to use a custom Grok home. The command is `memorix hook --agent grok`. |
+| Grok Build | `memorix setup --agent grok --global` | `~/.grok/hooks/memorix.json` + `~/.grok/AGENTS.md` | Lifecycle hooks on SessionStart, SessionEnd, UserPromptSubmit, PostToolUse, PostToolUseFailure, PreCompact, PostCompact, Stop, and StopFailure, plus Grok project/global guidance | Uses Grok's own JSON hook directory. MCP stays host-owned unless you pass `--mcp http`, which writes `[mcp_servers.memorix]` with `url = "http://localhost:3211/mcp"` in Grok `config.toml`. Global hooks are trusted; project hooks require Grok `/hooks-trust`. Set `GROK_HOME` to use a custom Grok home. The command is `memorix hook --agent grok`. |
 | Gemini CLI | `memorix setup --agent gemini-cli --global` | Gemini CLI extension | Extension under `~/.gemini/extensions/memorix` with MCP, `GEMINI.md` context, hooks, commands, and skills | Antigravity CLI has an official Gemini CLI migration path, but Gemini CLI remains an active standalone Google CLI target. |
 | OpenCode | `memorix setup --agent opencode --global` | OpenCode local plugin file | Global setup writes `~/.config/opencode/plugins/memorix.js`, `~/.config/opencode/opencode.json`, skills, and `AGENTS.md` guidance; repo-local setup writes the `.opencode/` equivalents. | OpenCode loads local plugin and skill files from its config scope. |
 | OpenClaw | `memorix setup --agent openclaw --global` | OpenClaw compatible bundle | `~/.openclaw/extensions/memorix` with `.mcp.json`, skills, and OpenClaw `HOOK.md`/`handler.ts` hook pack | Setup attempts `openclaw plugins install <path> --force` and `openclaw hooks enable memorix` when OpenClaw is available. |

package/docs/KNOWN_ISSUES_AND_ROADMAP.md

@@ -1,6 +1,6 @@
 # Memorix 已知边界与路线图
 
-> 最后审阅：2026-08-14（对照 v1.4.3）
+> 最后审阅：2026-09-18（对照 v1.9.4，准备 1.9.5）
 
 这份文档说明仍然成立的产品边界、风险和方向；它不是发布流水账。
 
@@ -10,6 +10,31 @@
 
 ---
 
+## 1.9.5 剩余必须纳入项
+
+> 基线是 `v1.9.4` / `main` `f7ed621`。本节是发布门槛与必须做出的
+> 明确决策，不等同于“所有 open issue 都要合并”。
+
+### 发布门槛
+
+| 优先级 | 项目 | 当前结论 | 1.9.5 完成标准 |
+|---|---|---|---|
+| P1 | HTTP 控制面安全与生命周期 | 本地分支已加入请求体上限和 Compose 回环绑定；显式绑定非回环地址时仍没有认证。端口冲突、后台假存活、优雅关闭也需要补齐。 | 默认只监听回环；非回环暴露必须认证或被明确拒绝；监听失败可观测且启动失败不留假状态；后台重启/停止和 HTTP、SQLite 资源关闭有测试。 |
+| P1 | 项目隔离 | 图谱表缺少项目归属，替换/删除可能影响其他项目。旧 JSON 迁移的去重条件也没有真正按项目隔离。 | 图谱实体、边和迁移路径都有项目边界；两个项目之间的读、写、替换、删除、迁移测试全部通过。 |
+| P1 | 迁移失败语义 | legacy JSON 迁移没有跨进程锁和完整原子恢复；解析失败继续启动为空库，会把“数据损坏”伪装成“没有数据”。 | 迁移具备锁、原子提交、备份/恢复和可诊断失败；源数据不完整时 fail-closed，不覆盖或隐藏旧数据。 |
+| P1 | Store / SQLite 生命周期 | SDK、HTTP 和 Orama 存在进程级共享状态；关闭一个实例可能影响另一个，缓存中的 SQLite handle 也没有始终释放。普通写入重试、事务内异步回调和 ID/代数更新仍需审计。 | 明确实例所有权或引用计数；关闭路径真正释放数据库和索引；并发写入有有界重试；写锁内不等待不受控异步工作；增加多实例和崩溃恢复测试。 |
+| P2 | 内存与容量边界 | 请求体已在本地分支设上限；会话、stateless binding、Dashboard/团队查询、失败任务、embedding 缓存和项目目录缓存仍有无界路径。 | 每条路径有上限、TTL 或保留策略；大输入、长时间运行和重复初始化的内存/延迟回归测试通过。 |
+| P1 | 发布契约 | 本地分支已加入 tag/version/commit 校验、npm 可见性等待和 check-only 发布前置检查，但尚未进入主线。 | 远程 workflow 使用这些保护；模拟“npm 已发布但 registry 尚未传播”和错误 tag 时会安全停止或可重试。 |
+
+### 新 issue / PR 处置
+
+- [#301](https://github.com/AVIDS2/memorix/issues/301) / [#303](https://github.com/AVIDS2/memorix/pull/303)：纳入 1.9.5。它修复显式 `--mcp http` 被 Grok 忽略、插件仍各自启动 stdio MCP 的已发布行为，并补充系统服务示例。当前 CI 全绿但没有人工 review；合并前必须验证 Grok、Claude/Codex/Copilot/CodeBuddy/Gemini/OpenClaw/Antigravity 的真实安装结果，以及 systemd/LaunchAgent 重启和有效数据目录。系统服务示例保持未绑定项目，由客户端显式提供项目根目录。
+- [#302](https://github.com/AVIDS2/memorix/issues/302) / [#304](https://github.com/AVIDS2/memorix/pull/304)：列入 1.9.5 决策窗口，但不接受“CI 绿就直接合并”。当前实现已补用户范围 tombstone 的源项目校验、跨项目整数 observation ID remap 和显式 per-user namespace；还必须补混合项目 compaction、隐私过滤审计，以及无 Git checkout 的 CLI 测试后才能发布。
+- [#300](https://github.com/AVIDS2/memorix/pull/300)：暂缓。Atlas Cloud 是可选 provider，当前没有 checks 或人工 review，不应挤占 1.9.5 基础设施门槛。
+- [#297](https://github.com/AVIDS2/memorix/issues/297) / [#283](https://github.com/AVIDS2/memorix/issues/283)：保留为生态/文档跟进，不是 1.9.5 阻塞项；[#49](https://github.com/AVIDS2/memorix/issues/49) 与 [#3](https://github.com/AVIDS2/memorix/issues/3) 继续独立排期。
+
+---
+
 ## 当前产品边界
 
 Memorix 是本地优先、可插拔的 Agent Memory 系统。它给不同 Agent 或同一 Agent 的新会话提供同一个项目记忆层，并把 CLI 作为最完整、最稳定的控制面；MCP 是面向 Agent 的受控入口，而不是唯一入口。

package/docs/MULTI-DEVICE-SYNC-RESEARCH.md

@@ -89,6 +89,10 @@ backup is not a merge input.
       version/audit record.
 - [x] Personal, agent-targeted, candidate, ephemeral, and other-project rows
       are excluded by default.
+- [x] `--scope user` is an explicit opt-in that relays every local project's
+      eligible rows through a separate `user-global` namespace. Privacy
+      filters still drop personal, agent-targeted, candidate, and ephemeral
+      rows. The live SQLite file is still never copied.
 - [x] Copying a data directory produces a clear device-clone error and a
       documented `device rotate` recovery path.
 - [x] GitHub relay protocol smoke proves only JSONL/snapshot artifacts are uploaded;

package/docs/SETUP.md

@@ -237,6 +237,61 @@ Use foreground HTTP mode for debugging or custom launch supervision:
 memorix serve-http --port 3211
 ```
 
+`memorix background start` survives the terminal but not logout or reboot. For a supervised control plane that only execs `memorix serve-http`, use an OS unit. Keep the bind address loopback-only.
+
+Linux systemd user unit (`~/.config/systemd/user/memorix-http.service`):
+
+```ini
+[Unit]
+Description=Memorix HTTP MCP control plane
+After=default.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/env memorix serve-http --host 127.0.0.1 --port 3211
+Environment=PATH=%h/.local/bin:/usr/local/bin:/usr/bin
+Restart=on-failure
+RestartSec=3
+
+[Install]
+WantedBy=default.target
+```
+
+```bash
+systemctl --user daemon-reload
+systemctl --user enable --now memorix-http.service
+```
+
+macOS LaunchAgent (`~/Library/LaunchAgents/com.memorix.http.plist`). Replace the `memorix` path with the output of `which memorix`:
+
+```xml
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.memorix.http</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/usr/local/bin/memorix</string>
+    <string>serve-http</string>
+    <string>--host</string>
+    <string>127.0.0.1</string>
+    <string>--port</string>
+    <string>3211</string>
+  </array>
+  <key>KeepAlive</key>
+  <true/>
+  <key>RunAtLoad</key>
+  <true/>
+</dict>
+</plist>
+```
+
+```bash
+launchctl bootstrap gui/$(id -u) ~/Library/LaunchAgents/com.memorix.http.plist
+```
+
 Generic HTTP MCP config:
 
 ```json

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "memorix",
   "mcpName": "io.github.AVIDS2/memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Local-first shared memory layer for AI coding agents across MCP clients, Git history, reasoning context, and project sessions.",
   "type": "module",
   "sideEffects": false,
@@ -83,7 +83,7 @@
     "check:plugin-release": "node scripts/sync-plugin-release-manifests.mjs --check",
     "audit:pi-upstream": "node scripts/pi-upstream-audit.mjs",
     "lint": "tsc --noEmit",
-    "prepublishOnly": "npm run sync:mcp-registry && npm run sync:plugin-release && npm run check:mcp-registry && npm run check:plugin-release && npm run build && npm test"
+    "prepublishOnly": "npm run check:mcp-registry && npm run check:plugin-release && npm run build && npm test"
   },
   "keywords": [
     "mcp",

package/plugins/antigravity/memorix/plugin.json

@@ -1,4 +1,4 @@
 {
   "name": "memorix",
-  "version": "1.9.4"
+  "version": "1.9.5"
 }

package/plugins/claude/memorix/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/plugin.schema.json",
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Shared workspace memory for Claude Code and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/codebuddy/memorix/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Local-first project memory for CodeBuddy Code and other coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/codex/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Shared workspace memory for Codex and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/copilot/memorix/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Shared local workspace memory for GitHub Copilot CLI and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/gemini/memorix/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "mcpServers": {
     "memorix": {
       "command": "memorix",

package/plugins/hermes/memorix/plugin.yaml

@@ -1,5 +1,5 @@
 name: memorix
-version: "1.9.4"
+version: "1.9.5"
 description: Shared workspace memory bridge for Hermes Agent.
 author: AVIDS2
 license: Apache-2.0

package/plugins/omp/memorix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix-omp-package",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Memorix shared workspace memory package for Oh-my-Pi.",
   "license": "Apache-2.0",
   "keywords": [

package/plugins/openclaw/memorix/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Shared workspace memory for OpenClaw and other AI coding agents.",
   "author": {
     "name": "AVIDS2",

package/plugins/pi/memorix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memorix-pi-package",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Memorix shared workspace memory package for Pi coding agent.",
   "license": "Apache-2.0",
   "keywords": [

package/server.json

@@ -7,7 +7,7 @@
     "url": "https://github.com/AVIDS2/memorix",
     "source": "github"
   },
-  "version": "1.9.4",
+  "version": "1.9.5",
   "websiteUrl": "https://mem.rglens.com",
   "icons": [
     {
@@ -22,7 +22,7 @@
     {
       "registryType": "npm",
       "identifier": "memorix",
-      "version": "1.9.4",
+      "version": "1.9.5",
       "runtimeHint": "npx",
       "packageArguments": [
         {

package/src/cli/command-guide.ts

@@ -213,11 +213,11 @@ const GUIDES: Record<string, CliCommandGuide> = {
       'memorix sync rules --action status',
       'memorix sync workspace --action scan',
       'memorix sync store status --json',
-      'memorix sync store push|pull [--dry] [--json]',
+      'memorix sync store push|pull [--dry] [--json] [--scope project|user]',
       'memorix sync store compact --dry --through device=sequence',
       'memorix sync store device rotate',
     ],
-    notes: ['Store sync is opt-in, project-scoped, and never copies the live SQLite database.'],
+    notes: ['Store sync is opt-in and never copies the live SQLite database. Default scope is the current Git project; `--scope user` relays every local project.'],
   },
   ingest: {
     summary: 'Ingest Git and image evidence into project memory.',