All notable changes to this project are documented here. This file is maintained automatically by release-please from Conventional Commits — edit commit messages, not this file.
Initial release — open-source, self-hostable, zero-knowledge agent memory.
- Crypto-blind sync server —
GET/PUT/DELETE /api/memory/:namespacewith delta upsert, a hashes-only view, per-namespace manifests, and a pluggable BlobStore (fs,s3/Tigris/R2/AWS). The server only ever stores ciphertext. - Zero-knowledge client —
MemlawbClientandmemlawbCLI (push/pull): AES-256-GCM with a scrypt-derived key and a deterministic nonce that enables delta sync without the server seeing plaintext. - MCP server —
memlawb mcpexposesmemory_save,memory_recall,memory_search,memory_list, andmemory_deleteto any MCP-capable agent, with local relevance ranking and amemory_guideprompt. - memlawb-memory skill — canonical recall-first / save-durable guidance for
agents, shared by Claude Code and the MCP
memory_guideprompt. - Secret scanner — client-side, pre-encryption scan that blocks uploads of
live-looking credentials (
MEMLAWB_SCAN=block|warn|off). - Multi-tenant hardening — strict per-owner namespace authorization, per-namespace and per-account quotas, and per-owner rate limiting.
- Self-host & deploy — Docker image and Fly config; one binary for both hosted and self-hosted, differing only by configuration.