Under the hood
A background 'memory pass' can now call a restricted set of tools, but only through a CCR memory server and under strict conditions
What
A new function builds a permission-check for a background task referred to as 'this background memory pass'. It only allows a tool call to proceed if all of the following hold:
- a CCR memory MCP server is mounted for the session
- the tool isn't blocked by an existing session permission rule
- the tool's name appears in an allow-list
- for tools that can write, the current conversation turn hasn't already moved on
If no CCR memory server is present, the background memory pass is blocked entirely.
Why
This lets a background process manage memory-related work using a small, controlled set of tools without opening up broader tool access, and prevents write operations from landing after the relevant turn has already ended.