[ShintaroKawakami]

Summary

• add a four-tool Streamable HTTP MCP gateway with connection-bound project scoping
• reject global/unknown implementation handoffs and require explicit labeled cross-project references
• fail closed when core project ownership cannot be proven
• add macOS launch helpers and deployment/security documentation

Verification

• npm test (139 passed, 1 skipped; 1556 tests passed, 1 skipped)
• npm run build
• bash -n deploy/macos/run-jtt-core.sh deploy/macos/run-jtt-gateway.sh
• git diff --check

Security notes

• AgentMemory core remains loopback-only
• private gateway requires bearer auth plus an allowlisted X-AgentMemory-Project header
• no local fallback storage and no automatic conversation capture
• public Claude.ai exposure is explicitly out of scope until an OAuth 2.1 + DCR front door is implemented

Dependency note

• deployment uses npm install --omit=optional to avoid optional native image/embedding packages
• upstream iii-sdk 0.11.2 audit findings remain unchanged; upgrading to the current major is intentionally not mixed into this minimal fork