@agentmemory/agentmemory 0.9.28 → 0.9.30

package/integrations/pi/security.ts

@@ -0,0 +1,87 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1"]);
+
+function usableSecret(value: unknown): string {
+  const trimmed = typeof value === "string" ? value.trim() : "";
+  if (!trimmed || (trimmed.startsWith("${") && trimmed.endsWith("}"))) return "";
+  return trimmed;
+}
+
+function readAgentmemoryFile(name: string): string {
+  try {
+    return readFileSync(join(homedir(), ".agentmemory", name), "utf-8");
+  } catch {
+    return "";
+  }
+}
+
+function envFileSecret(): string {
+  let found = "";
+  for (const line of readAgentmemoryFile(".env").split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("#")) continue;
+    const eq = trimmed.indexOf("=");
+    if (eq === -1) continue;
+    if (trimmed.slice(0, eq).replace(/^export\s+/, "").trim() !== "AGENTMEMORY_SECRET") continue;
+    let value = trimmed.slice(eq + 1).trim();
+    const quote = value[0];
+    const close = quote === '"' || quote === "'" ? value.indexOf(quote, 1) : -1;
+    if (close > 0) value = value.slice(1, close);
+    else if (value.includes(" #")) value = value.slice(0, value.indexOf(" #"));
+    found = usableSecret(value);
+  }
+  return found;
+}
+
+function isLoopbackUrl(url: string): boolean {
+  try {
+    const host = new URL(url).hostname.replace(/^\[|\]$/g, "").toLowerCase();
+    return host === "localhost" || host === "::1" || /^127(?:\.\d{1,3}){3}$/.test(host);
+  } catch {
+    return false;
+  }
+}
+
+export function resolveSecret(url: string, explicit?: string): string {
+  const configured = usableSecret(explicit);
+  if (configured) return configured;
+  if (!isLoopbackUrl(url)) return "";
+  return envFileSecret() || usableSecret(readAgentmemoryFile("secret"));
+}
+
+function normalizedHostname(hostname: string): string {
+  return hostname.replace(/^\[|\]$/g, "").toLowerCase();
+}
+
+export function usesPlaintextBearerAuth(baseUrl: string, secret?: string): boolean {
+  if (!secret) return false;
+  try {
+    const parsed = new URL(baseUrl);
+    return parsed.protocol === "http:" && !LOOPBACK_HOSTS.has(normalizedHostname(parsed.hostname));
+  } catch {
+    return false;
+  }
+}
+
+export function plaintextBearerAuthMessage(baseUrl: string): string {
+  return `agentmemory: AGENTMEMORY_SECRET is configured for plaintext HTTP to ${baseUrl}. Bearer tokens and memory payloads can be observed on the network; use HTTPS or an SSH tunnel.`;
+}
+
+export function createPlaintextBearerAuthGuard(
+  warn: (message: string) => void = (message) => console.warn(message),
+  env?: { AGENTMEMORY_REQUIRE_HTTPS?: string },
+): (baseUrl: string, secret?: string) => void {
+  let warned = false;
+  return (baseUrl, secret) => {
+    if (!usesPlaintextBearerAuth(baseUrl, secret)) return;
+    const message = plaintextBearerAuthMessage(baseUrl);
+    if ((env || process.env).AGENTMEMORY_REQUIRE_HTTPS === "1") throw new Error(message);
+    if (!warned) {
+      warned = true;
+      warn(message);
+    }
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentmemory/agentmemory",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Persistent memory for AI coding agents, powered by iii-engine's three primitives",
   "type": "module",
   "main": "dist/index.mjs",
@@ -25,9 +25,17 @@
     "test:watch": "vitest --exclude test/integration.test.ts",
     "test:integration": "vitest run test/integration.test.ts",
     "test:all": "vitest run",
+    "release:gate": "node scripts/release-gate/run.mjs",
     "skills:gen": "tsx scripts/skills/generate.ts",
+    "engine:hashes": "node scripts/engine-hashes.mjs",
     "skills:check": "tsx scripts/skills/generate.ts --check && tsx scripts/skills/check.ts",
+    "docs:sync": "tsx scripts/docs-sync.ts",
+    "docs:check": "tsx scripts/docs-sync.ts --check",
+    "plugin:pack:codex": "npm run build && node scripts/plugins/package-codex.mjs",
+    "plugin:verify:published": "node scripts/plugins/verify-published.mjs",
+    "test:plugin:live": "node scripts/plugins/test-live.mjs",
     "bench:load": "node --import tsx benchmark/load-100k.ts",
+    "bench:capture-costs": "node --import tsx benchmark/capture-costs.ts",
     "eval:longmemeval": "tsx eval/runner/longmemeval.ts",
     "eval:coding-life": "tsx eval/runner/coding-life.ts"
   },
@@ -45,6 +53,7 @@
   "files": [
     "dist/",
     "plugin/",
+    "integrations/pi/",
     "iii-config.yaml",
     "iii-config.docker.yaml",
     "docker-compose.yml",
@@ -63,20 +72,19 @@
     "@anthropic-ai/claude-agent-sdk": "^0.3.142",
     "@anthropic-ai/sdk": "^0.100.1",
     "@clack/prompts": "^1.2.0",
-    "dotenv": "^17.4.2",
-    "iii-sdk": "0.11.2",
+    "dotenv": "^18.0.3",
+    "@iii-dev/helpers": "0.22.1",
+    "iii-sdk": "0.22.1",
     "picocolors": "^1.1.1",
     "zod": "^4.0.0"
   },
   "optionalDependencies": {
+    "@huggingface/transformers": "^4.2.0",
     "@node-rs/jieba": "^2.0.1",
-    "@xenova/transformers": "^2.17.2",
-    "onnxruntime-node": "^1.14.0",
-    "onnxruntime-web": "^1.14.0",
     "tiny-segmenter": "^0.2.0"
   },
   "devDependencies": {
-    "@types/node": "^25.9.1",
+    "@types/node": "^26.6.2",
     "tsdown": "^0.21.10",
     "tsx": "^4.19.0",
     "typescript": "^6.0.3",

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentmemory",
-  "version": "0.9.28",
-  "description": "Persistent memory for AI coding agents -- captures tool usage, compresses via LLM, injects context into future sessions. 12 hooks, 53 MCP tools, 8 skills, real-time viewer.",
+  "version": "0.9.30",
+  "description": "Persistent memory for AI coding agents -- captures tool usage, compresses via LLM, injects context into future sessions. 12 hooks, 54 MCP tools, 17 skills, real-time viewer.",
   "author": {
     "name": "Rohit Ghumare",
     "url": "https://github.com/rohitg00"

package/plugin/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentmemory",
-  "version": "0.9.28",
-  "description": "Persistent memory for AI coding agents -- captures tool usage, compresses via LLM, injects context into future sessions. 6 hooks, 53 MCP tools, 8 skills, real-time viewer.",
+  "version": "0.9.30",
+  "description": "Local persistent memory for coding agents. Recall decisions, resume sessions, learn from corrections, and manage memory through 54 MCP tools and 17 skills. Optional capture through 6 Codex hooks.",
   "author": {
     "name": "Rohit Ghumare",
     "url": "https://github.com/rohitg00"
@@ -10,6 +10,28 @@
   "homepage": "https://github.com/rohitg00/agentmemory",
   "repository": "https://github.com/rohitg00/agentmemory",
   "skills": "./skills/",
-  "mcpServers": "./.mcp.json",
-  "hooks": "./hooks/hooks.codex.json"
+  "mcpServers": "./.mcp.codex.json",
+  "hooks": "./hooks/hooks.codex.json",
+  "interface": {
+    "displayName": "Agent Memory",
+    "shortDescription": "Memory across coding sessions",
+    "longDescription": "Recall past decisions, resume work, save useful context, and learn from corrections across Codex and Claude Code using one local Agent Memory daemon. Includes search, session history, lessons, graph queries, memory maintenance, export, and deletion workflows. Requires Node.js 20+ and a running Agent Memory daemon. Basic keyword recall needs no model key. Embeddings and model-based features require configuration; external providers may receive selected data when enabled. Automatic capture requires trusted, supported hooks. Designed for local Codex sessions.",
+    "developerName": "Rohit Ghumare",
+    "websiteURL": "https://github.com/rohitg00/agentmemory",
+    "supportURL": "https://github.com/rohitg00/agentmemory/issues",
+    "category": "Developer Tools",
+    "capabilities": ["Local persistent memory", "Session handoff", "Lessons and recall", "Memory management"],
+    "defaultPrompt": [
+      "Check my local Agent Memory connection and explain which features are enabled.",
+      "Recall decisions relevant to this repository, with the evidence for each.",
+      "Resume the latest session for this repository and show the recorded next step."
+    ],
+    "logo": "./assets/icon.svg",
+    "composerIcon": "./assets/icon.svg"
+  },
+  "extensions": {
+    "com.openai": {
+      "onboardingSkill": "./skills/agentmemory-config/SKILL.md"
+    }
+  }
 }

package/plugin/.devin-plugin/plugin.json

@@ -0,0 +1,32 @@
+{
+  "name": "agentmemory",
+  "version": "0.9.30",
+  "description": "Persistent memory for AI coding agents. Captures sessions, recalls with hybrid BM25 + vector + graph search, and exposes 54 memory tools over MCP. Keyless by default, runs on your machine.",
+  "author": {
+    "name": "Rohit Ghumare",
+    "email": "ghumare64@gmail.com"
+  },
+  "homepage": "https://agent-memory.dev",
+  "repository": "https://github.com/rohitg00/agentmemory",
+  "license": "Apache-2.0",
+  "keywords": [
+    "memory",
+    "mcp",
+    "recall",
+    "knowledge-graph",
+    "agent-memory"
+  ],
+  "mcpServers": {
+    "agentmemory": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "@agentmemory/mcp"
+      ],
+      "env": {
+        "AGENTMEMORY_URL": "${AGENTMEMORY_URL:-http://localhost:3111}",
+        "AGENTMEMORY_SECRET": "${AGENTMEMORY_SECRET:-}"
+      }
+    }
+  }
+}

package/plugin/.mcp.codex.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "agentmemory": {
+      "command": "node",
+      "args": ["scripts/plugin-bridge.mjs"],
+      "cwd": ".",
+      "env_vars": ["AGENTMEMORY_URL", "AGENTMEMORY_SECRET"],
+      "startup_timeout_sec": 20,
+      "tool_timeout_sec": 30
+    }
+  }
+}

package/plugin/.mcp.copilot.json

@@ -2,13 +2,8 @@
   "mcpServers": {
     "agentmemory": {
       "type": "local",
-      "command": "npx",
-      "args": ["-y", "@agentmemory/mcp"],
-      "env": {
-        "AGENTMEMORY_URL": "${AGENTMEMORY_URL:-http://localhost:3111}",
-        "AGENTMEMORY_SECRET": "${AGENTMEMORY_SECRET:-}",
-        "AGENTMEMORY_TOOLS": "${AGENTMEMORY_TOOLS:-all}"
-      },
+      "command": "node",
+      "args": ["${COPILOT_PLUGIN_ROOT}/scripts/plugin-bridge.mjs"],
       "tools": ["*"]
     }
   }

package/plugin/.mcp.json

@@ -1,13 +1,8 @@
 {
   "mcpServers": {
     "agentmemory": {
-      "command": "npx",
-      "args": ["-y", "@agentmemory/mcp"],
-      "env": {
-        "AGENTMEMORY_URL": "${AGENTMEMORY_URL:-http://localhost:3111}",
-        "AGENTMEMORY_SECRET": "${AGENTMEMORY_SECRET:-}",
-        "AGENTMEMORY_TOOLS": "${AGENTMEMORY_TOOLS:-all}"
-      }
+      "command": "node",
+      "args": ["${CLAUDE_PLUGIN_ROOT}/scripts/plugin-bridge.mjs"]
     }
   }
 }

package/plugin/assets/icon.svg

@@ -0,0 +1,35 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" fill="none">
+  <defs>
+    <linearGradient id="g" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#FF6B35"/>
+      <stop offset="100%" stop-color="#FF8F5E"/>
+    </linearGradient>
+  </defs>
+
+  <rect width="64" height="64" rx="14" fill="#1A1A1A"/>
+
+  <!-- 4 memory tiers -->
+  <rect x="14" y="40" width="36" height="5" rx="2.5" fill="#333" opacity="0.5"/>
+  <rect x="14" y="33" width="36" height="5" rx="2.5" fill="#444" opacity="0.6"/>
+  <rect x="14" y="26" width="36" height="5" rx="2.5" fill="#555" opacity="0.7"/>
+  <rect x="14" y="19" width="36" height="5" rx="2.5" fill="url(#g)"/>
+
+  <!-- Active nodes on hot layer -->
+  <circle cx="22" cy="21.5" r="1.8" fill="#fff"/>
+  <circle cx="32" cy="21.5" r="1.8" fill="#fff"/>
+  <circle cx="42" cy="21.5" r="1.8" fill="#fff"/>
+
+  <!-- Retrieval lines converging up -->
+  <line x1="22" y1="19" x2="32" y2="12" stroke="#FF6B35" stroke-width="1" opacity="0.7"/>
+  <line x1="32" y1="19" x2="32" y2="12" stroke="#FF6B35" stroke-width="1" opacity="0.5"/>
+  <line x1="42" y1="19" x2="32" y2="12" stroke="#FF6B35" stroke-width="1" opacity="0.7"/>
+
+  <!-- Retrieval point -->
+  <circle cx="32" cy="11" r="3" fill="url(#g)"/>
+  <circle cx="32" cy="11" r="5" fill="none" stroke="#FF6B35" stroke-width="0.8" opacity="0.3"/>
+
+  <!-- Fading dots on lower tiers -->
+  <circle cx="25" cy="28.5" r="1" fill="#888" opacity="0.4"/>
+  <circle cx="39" cy="28.5" r="1" fill="#888" opacity="0.4"/>
+  <circle cx="32" cy="35.5" r="0.8" fill="#666" opacity="0.3"/>
+</svg>

package/plugin/cursor/hooks.json

@@ -0,0 +1,41 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/session-start.mjs"
+      }
+    ],
+    "beforeSubmitPrompt": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/prompt-submit.mjs"
+      }
+    ],
+    "preToolUse": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/pre-tool-use.mjs",
+        "matcher": "Shell|Read|Write|Grep"
+      }
+    ],
+    "postToolUse": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/post-tool-use.mjs"
+      }
+    ],
+    "postToolUseFailure": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/post-tool-failure.mjs"
+      }
+    ],
+    "stop": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/stop.mjs"
+      }
+    ],
+    "sessionEnd": [
+      {
+        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/session-end.mjs"
+      }
+    ]
+  }
+}

package/plugin/cursor/mcp.json

@@ -0,0 +1,12 @@
+{
+  "mcpServers": {
+    "agentmemory": {
+      "command": "npx",
+      "args": ["-y", "@agentmemory/mcp"],
+      "env": {
+        "AGENTMEMORY_URL": "${AGENTMEMORY_URL}",
+        "AGENTMEMORY_SECRET": "${AGENTMEMORY_SECRET}"
+      }
+    }
+  }
+}

package/plugin/hooks/hooks.antigravity.json

@@ -0,0 +1,43 @@
+{
+  "agentmemory": {
+    "enabled": true,
+    "PreInvocation": [
+      {
+        "type": "command",
+        "command": "node ${CLAUDE_PLUGIN_ROOT}/scripts/antigravity-bridge.mjs PreInvocation",
+        "timeout": 10
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "view_file|view_code_item|read_file|edit_file|replace_file_content|write_to_file|create_file|grep_search|codebase_search|find_by_name|list_dir",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node ${CLAUDE_PLUGIN_ROOT}/scripts/antigravity-bridge.mjs PreToolUse",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node ${CLAUDE_PLUGIN_ROOT}/scripts/antigravity-bridge.mjs PostToolUse",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "type": "command",
+        "command": "node ${CLAUDE_PLUGIN_ROOT}/scripts/antigravity-bridge.mjs Stop",
+        "timeout": 10
+      }
+    ]
+  }
+}

package/plugin/hooks/hooks.copilot.json

@@ -4,68 +4,68 @@
     "sessionStart": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/session-start.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/session-start.mjs\""
       }
     ],
     "userPromptSubmitted": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/prompt-submit.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/prompt-submit.mjs\""
       }
     ],
     "preToolUse": [
       {
         "type": "command",
         "matcher": "edit|write|create|read|view|glob|grep",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/pre-tool-use.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/pre-tool-use.mjs\""
       }
     ],
     "postToolUse": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/post-tool-use.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/post-tool-use.mjs\""
       }
     ],
     "postToolUseFailure": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/post-tool-failure.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/post-tool-failure.mjs\""
       }
     ],
     "preCompact": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/pre-compact.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/pre-compact.mjs\""
       }
     ],
     "agentStop": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/stop.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/stop.mjs\""
       }
     ],
     "sessionEnd": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/session-end.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/session-end.mjs\""
       }
     ],
     "subagentStart": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/subagent-start.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/subagent-start.mjs\""
       }
     ],
     "subagentStop": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/subagent-stop.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/subagent-stop.mjs\""
       }
     ],
     "notification": [
       {
         "type": "command",
-        "command": "node ${COPILOT_PLUGIN_ROOT}/scripts/notification.mjs"
+        "command": "node \"${COPILOT_PLUGIN_ROOT}/scripts/notification.mjs\""
       }
     ]
   }

package/plugin/hooks/hooks.devin.json

@@ -0,0 +1,67 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-start.mjs\""
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/prompt-submit.mjs\""
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "^(exec|edit|write|read|apply_patch|grep|glob)$",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/stop.mjs\""
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-end.mjs\""
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/hooks/hooks.droid.json

@@ -0,0 +1,55 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-start.mjs\""
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/prompt-submit.mjs\""
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Create|Read|Glob|Grep",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-end.mjs\""
+          }
+        ]
+      }
+    ]
+  }
+}