Great to see this release! We’re running GoodMem Cloud with 6 agent spaces on a shared instance and are ready to migrate off our custom space-locked proxy to the native authorization model.
A few Cloud-specific questions:
1. When will Cloud instances be upgraded to 1.0.307? We upgraded the CLI but the server REST API still returns the old schema (e.g. userId on API keys, no new auth endpoints). goodmem system upgradeappears to be self-hosted Docker only.
2. Once upgraded, can scoped API keys, service identities, and role assignments be managed via the REST API on port 443? The CLI uses gRPC on 9090, which isn’t exposed on Cloud instances. The Python SDK (v0.1.28) CreateApiKeyRequest doesn’t yet include ceiling, authority_mode, or subject fields.
3. Our target architecture: 6 service identities, each with a scoped key ceiling-locked to a single space (READ_SPACE, READ_MEMORY, CREATE_MEMORY for that space only). Is that the recommended pattern for multi-agent isolation on a shared Cloud instance?
Happy to share our current proxy setup if it’s useful context for what the native model replaces.