Skip to content

markmhendrickson/neotoma

v0.18.1 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 1mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-infrastructure agent-memory ai-agents deterministic-state entity-resolution event-sourcing
+3 more
mcp privacy-first provenance

Summary

AI summary

Updates v0.18.1 Release Supplement, Behavior changes, and Breaking changes across a mixed release.

Full changelog

v0.18.1 Release Supplement

Summary

Patch release that connects the two last-mile pipes on v0.18.0 by-reference source storage (#1775), so it is reachable over HTTP and through the natural "file + its entities" call shape. Both gaps were found by a developer-release evaluator who validated the engine end-to-end (zero-byte writes, SOURCE_UNAVAILABLE / SOURCE_REFERENCE_STALE drift cases) against a production DB.

Fixes

  • By-reference storage reachable over HTTP (#1826). source_storage was missing from openapi.yaml StoreRequest (which is additionalProperties: false), so the edge guard rejected POST /store with ERR_UNKNOWN_FIELD — the field only worked over the /mcp route. Added source_storage (enum: [inline, reference]) to the HTTP contract and regenerated openapi_types.ts.
  • No more silent inline fallback with entities[] + file (#1827). store({ entities, file_path, source_storage: "reference" }) silently stored inline and copied the bytes, because the hasEntities && hasUnstructured branches recursed into store() for the file leg without forwarding source_storage. It is now propagated, so the natural "file + its entities" call stores by reference as intended.

Behavior changes

  • Both surfaces (HTTP POST /store and the file+entities call shape) now honor source_storage: "reference" identically to the single-file MCP path. No other behavior change; inline remains the default.

Breaking changes

  • None.

Install: npm install [email protected] · npx [email protected]
Compare: https://github.com/markmhendrickson/neotoma/compare/v0.18.0...v0.18.1

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track markmhendrickson/neotoma

Get notified when new releases ship.

Sign up free

About markmhendrickson/neotoma

Deterministic state layer for AI agents. Stores versioned entities (contacts, tasks, transactions, decisions) with immutable observations, full provenance, and schema-first extraction. Local-first SQLite, cross-client memory across Claude, Cursor, ChatGPT, and OpenClaw. Website

All releases →

Related context

Earlier breaking changes

  • v0.12.1 Inspector build prepublish now exits non-zero if inspector submodule is missing, breaking ad-hoc npm pack runs without init.
  • v0.12.0 Access policy source precedence: env > SchemaMetadata.guest_access_policy > config
  • v0.12.0 Legacy feedback subsystem completely removed; issues subsystem is replacement
  • v0.12.0 MCP submit_issue requires reporter_git_sha or reporter_app_version

Beta — feedback welcome: [email protected]