synomem 0.5.3 → 0.6.1

package/CHANGELOG.md

@@ -3,6 +3,49 @@
 All notable changes will be documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and releases follow Semantic Versioning.
 
+## [0.6.0] - 2026-09-07
+
+### Added
+
+- Local workspace isolation is now real. A local workspace used to be a
+  `--workspace` label with nothing behind it — only `events` carried
+  `workspace_id`, reads never filtered on it, and several tables had no such
+  column at all. A local workspace is now a separate SQLite database in its
+  own home, the safer design given SQLite has no row-level security: on
+  Postgres a query that forgets to filter by workspace returns nothing
+  instead of another workspace's rows, and separate files make the local
+  equivalent of that mistake unwritable rather than merely unlikely.
+- A directory can now be bound to a local workspace: `synomem workspace use
+<name> [--as <actor>]` writes `.synomem/config.json`, found by walking up
+  from the working directory the same way `.git` or `.nvmrc` is. Every command
+  and every stdio MCP server started in that directory afterward resolves the
+  workspace — and, unless overridden per launch, the default actor — with no
+  flag repeated. This is what makes several harnesses opened in the same
+  repository share one workspace while each still writes as its own actor:
+  `--workspace`, `SYNOMEM_WORKSPACE`, and `--home` all still win outright, in
+  that order, over the project file, and each harness's own `--agent-id` or
+  `--actor-id` always wins over the file's default actor.
+- `synomem_agent_archive` and `synomem_agent_restore` MCP tools, closing the
+  gap where the CLI could archive or restore an agent identity but MCP could
+  not. Gated by a new `allowAgentArchiveViaMcp` capability
+  (`SYNOMEM_ALLOW_AGENT_ARCHIVE_VIA_MCP`), off by default and mirroring
+  `agentCreationViaMcp` exactly, so runtime agents cannot silently disable
+  each other unless an operator opts in.
+
+### Fixed
+
+- An agent created before handles existed (schema 7) made every write in its
+  workspace fail with `UNSUPPORTED_EVENT`: its stored `agent.created` event
+  carries an id and no handle, and the compatibility check that runs before
+  each write refused the whole event stream on that missing field. The reader
+  now widens to accept it — the id is the correct handle for those records —
+  rather than the append-only log being rewritten.
+- Renaming an agent's handle left its old projection directory behind,
+  stranding `NOTES.md`, the one file in there that belongs to the reader
+  rather than to Synomem and that a rebuild will never delete. The directory
+  is now moved to the new handle before projections are regenerated, so
+  hand-written notes arrive intact instead of being stranded.
+
 ## [0.5.3] - 2026-09-07
 
 ### Documentation

package/README.md

@@ -38,9 +38,9 @@ Synomem gives humans and AI agents durable ways to coordinate beyond a disappear
 Traditional AI memory layers resemble an isolated file cabinet for one model. Synomem turns memory
 into a shared, transactional canvas: independently operating agents can retain private knowledge,
 deliver durable context, delegate work with consent, track commitments, and recognize good
-collaboration through one auditable protocol. V1 provides that substrate locally; its interfaces are
-designed so the same agent identities and semantics can later cross machines through an explicitly
-configured service.
+collaboration through one auditable protocol. The same agent identities and semantics work on one
+machine or across many: the local backend keeps everything on disk, and Synomem Cloud keeps it in a
+hosted workspace reached over HTTPS.
 
 One append-only event store powers the TypeScript library, `synomem` CLI, actor-bound stdio MCP
 server, compact change feeds, and readable Markdown projections. On the local backend that store is
@@ -85,7 +85,7 @@ Everything below works the same on both backends.
 
 ```bash
 export SYNOMEM_HOME="$(mktemp -d)/.synomem"
-synomem init
+synomem config init --backend local --yes
 synomem agent create codex --name "Codex"
 synomem agent create gracie --name "Gracie"
 
@@ -243,23 +243,41 @@ are `claude`, `codex`, `hermes`, `openclaw`, `cursor`, and `grok`; `grokbot` ali
 
 ## Storage
 
+This is the local backend. On Synomem Cloud the canonical store is a hosted Postgres workspace and
+nothing below is written to this machine.
+
 ```text
 ~/.synomem/
-├── synomem/
-│   ├── config.json
-│   └── synomem.sqlite3
-└── <agent-id>/
+├── config.json
+├── synomem.sqlite3
+├── credentials/
+│   └── installation.json   # only when an access key is stored in a file
+└── <handle>/               # one directory per agent, named by handle
     ├── profile.json
     ├── WINS.md
     ├── MEMORY.md
     ├── TASKS.md
-    ├── inbox/{kudos,memos,tasks}/
-    └── NOTES.md
+    ├── NOTES.md
+    └── inbox/{kudos,memos,tasks}/<record-id>.md
 ```
 
+The home IS the storage directory: `config.json` and the database sit directly in it, with no
+nested `synomem/` level.
+
+Agent directories are named by HANDLE, because they exist to be read. The canonical agent ID is
+what stored events reference, so renaming an agent leaves its history untouched.
+
+Renaming moves the whole directory, `NOTES.md` included. That file is yours rather than Synomem's,
+so a rebuild will never delete it — which is exactly why the rename moves the directory instead of
+regenerating it somewhere new and leaving your notes behind.
+
 SQLite events are canonical and append-only. Markdown and current-state tables are rebuildable
-projections. `NOTES.md` is human-owned and is never overwritten; canonical agent notes project to
-`MEMORY.md`.
+projections — run `synomem rebuild` to regenerate them, and `synomem projection status` to see
+whether they currently match the events. Posts and todos project no files: a post belongs to the
+whole workspace rather than to one agent's directory, and a todo is private to its owner.
+
+`NOTES.md` is human-owned and is never overwritten; canonical agent notes project to `MEMORY.md`.
+Each projection can be turned off individually, in which case its file is not written at all.
 
 Override the root with `SYNOMEM_HOME`, `--home`, or the library's `home` option. Use
 `synomem backup` for a consistent snapshot and JSON or JSONL export for recovery. Never synchronize

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { Command } from 'commander';
+import { type DiscoveredWorkspace } from './discover.js';
 import { type PromptIo } from './prompt.js';
 import { type CredentialStore } from './credentials.js';
 import { type OAuthLoginOptions } from './oauth.js';
@@ -23,11 +24,12 @@ export interface CliDependencies {
         reference: string;
         credentialStore: CredentialStore;
     }) => Promise<void>;
-    discoverBoundWorkspace?: (options: {
+    discoverAccessKeyWorkspaces?: (options: {
         baseUrl: string;
         accessToken: string;
     }) => Promise<{
-        workspaceId: string;
+        organizationId: string;
+        workspaces: DiscoveredWorkspace[];
     }>;
     createImportBundle?: (home: string) => Promise<ImportBundle>;
     remoteImport?: (options: {
@@ -38,6 +40,6 @@ export interface CliDependencies {
         planId?: string;
     }) => Promise<ImportPreview | ImportResult>;
 }
-export declare function createCli(io?: CliIo, serviceFactory?: SynomemServiceFactory, dependencies?: CliDependencies): Command;
+export declare function createCli(io?: CliIo, serviceFactory?: SynomemServiceFactory, dependencies?: CliDependencies, argv?: string[]): Command;
 export declare function runCli(argv?: string[], io?: CliIo, serviceFactory?: SynomemServiceFactory, dependencies?: CliDependencies): Promise<number>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAKA,OAAO,EAAE,OAAO,EAA0B,MAAM,WAAW,CAAC;AAmB5D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIhG,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9F,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AASrB,OAAO,KAAK,EACV,aAAa,EASd,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1E,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,eAAe,CAAC;KAClC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKpB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,aAAa,CAAC;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,aAAa,GAAG,YAAY,CAAC,CAAC;CAC7C;AAkND,wBAAgB,SAAS,CACvB,EAAE,GAAE,KAAiB,EACrB,cAAc,GAAE,qBAAgD,EAChE,YAAY,GAAE,eAAoB,GACjC,OAAO,CA62ET;AAED,wBAAsB,MAAM,CAC1B,IAAI,WAAe,EACnB,EAAE,GAAE,KAAiB,EACrB,cAAc,GAAE,qBAAgD,EAChE,YAAY,GAAE,eAAoB,GACjC,OAAO,CAAC,MAAM,CAAC,CAqBjB"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAKA,OAAO,EAAE,OAAO,EAA0B,MAAM,WAAW,CAAC;AAkB5D,OAAO,EAIL,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAOvB,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIhG,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9F,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AASrB,OAAO,KAAK,EACV,aAAa,EASd,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1E,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,aAAa,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,eAAe,CAAC;KAClC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAKpB,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE;QACtC,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,mBAAmB,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7E,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,aAAa,CAAC;QACrB,MAAM,EAAE,YAAY,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,aAAa,GAAG,YAAY,CAAC,CAAC;CAC7C;AA+QD,wBAAgB,SAAS,CACvB,EAAE,GAAE,KAAiB,EACrB,cAAc,GAAE,qBAAgD,EAChE,YAAY,GAAE,eAAoB,EAClC,IAAI,GAAE,MAAM,EAAiB,GAC5B,OAAO,CAmiFT;AAED,wBAAsB,MAAM,CAC1B,IAAI,WAAe,EACnB,EAAE,GAAE,KAAiB,EACrB,cAAc,GAAE,qBAAgD,EAChE,YAAY,GAAE,eAAoB,GACjC,OAAO,CAAC,MAAM,CAAC,CAqBjB"}