feat(memory): authorize scoped access and durable cleanup

[mzxchandra]

Summary

• Add live authorization for personal, workspace, and Project memories through direct HTTP and checkpoint transport. Keep personal/workspace memories available when Projects are disabled.
• Strip memory tool payloads from chat exports and queue durable cleanup with account and resource deletion.
• Stack on feat(files): add the Project file backend and APIs #8610; retarget after Project Files merges. Requires Mothership improvement(kb): pagination for docs + remove kb token count problematic query  #689 for the matching worker contract and cleanup implementation. No Sim schema migration.

Type of Change

• New feature

Testing

• 19 real-database integration checks passed across memory authorization, export privacy, and durable cleanup; JSON report generated.
• 74 adjacent transcript, control-transport, and account-deletion regression tests passed.
• Changed-file Biome, app type-check, strict API validation, worker contract parity, and generated-artifact checks passed.
• Previously verified browser recall and writes with Projects off/on/off; not rerun during shipping.
• Current-head hosted CI: lint, unit tests, all integration shards, build, and the non-mobile E2E jobs passed. Mobile E2E failed when a notification overlay intercepted the Unlock Workflow tap; aggregate CI remains red. This has not been established as a baseline failure. Full suites were not duplicated locally.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

Companion PRs

• simstudioai/mothership#689

Pinned to the expansion release (#689), head 69838a053204a70e911c18f25af5446463d6e9fb; memory-access, transport, and assistant-tool contract copies were verified byte-for-byte against that commit. Mothership #690 only contracts internal storage and is not this companion’s dependency.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 12, 2026 7:48pm UTC