nfemmanuel/iranti

What's new

Multi-tenant identity layer — Users and tokens tables ship in this release. Every API operation is now scoped to a userId, with a default user (id=1) keeping backwards compatibility for all existing single-tenant installations.

Consumer MCP endpoint — A new /mcp/:token route gives external agents access to iranti_remember, iranti_recall, and iranti_forget over stateless HTTP. Tokens are resolved from the database, scoped per user, and checked against the mcp_consumer_* token scope prefix.

Bidirectional attend capture — iranti_attend now captures response content on the post-response pass and auto-writes durable facts from the assistant's output without requiring a manual iranti_write call. File references in responses are extracted and persisted automatically.

Threshold-based write guard — The write guard now blocks at 5 pending unlogged edits instead of 1. The tracker also gained path normalization, per-file dedup (same file edited multiple times only counts once), and an ignore list covering generated files, migrations, and vendored directories.

Feedback endpoint — POST /feedback accepts satisfaction signals from the iranti feedback CLI command. Unauthenticated, rate-limited by IP, idempotent on feedbackId for safe offline-retry queue replay.

Commits

• feat(multi-tenant) — identity layer, consumer MCP endpoint, token management
• feat(attend) — bidirectional capture, threshold-based write guard
• feat(feedback) — server-side POST /feedback endpoint
• fix(tests) — test suite alignment for multi-tenant schema changes