@prmichaelsen/remember-mcp 2.7.3 → 2.7.7

package/CHANGELOG.md

@@ -5,6 +5,44 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.7.6] - 2026-02-17
+
+### Changed
+
+- **Enhanced `remember_publish` Tool Description**: Added critical instruction to prevent token exposure
+  - Agents now explicitly instructed NOT to mention tokens in responses
+  - Agents instructed NOT to include token contents in user-facing messages
+  - Improves security by preventing accidental token disclosure
+  - Users simply informed that confirmation is pending without token details
+
+### Security
+
+- Prevents agents from accidentally exposing confirmation tokens to users
+- Tokens remain internal implementation detail
+- Better user experience with cleaner confirmation workflow
+
+---
+
+## [2.7.4] - 2026-02-17
+
+### Changed
+
+- **Enhanced Vectorization**: Added `title` and `summary` to vectorized source properties
+  - User memory schema: Now vectorizes `content`, `title`, `summary`, and `observation`
+  - Space memory schema: Now vectorizes `content`, `title`, `summary`, and `observation`
+  - Improves semantic search by including titles and summaries in vector embeddings
+  - Note: `title` and `summary` are optional fields, handled gracefully by vectorizer
+
+### Technical Details
+
+- Modified: `src/weaviate/schema.ts` (line 49)
+- Modified: `src/weaviate/space-schema.ts` (line 101)
+- Changed `sourceProperties` from `['content', 'observation']` to `['content', 'title', 'summary', 'observation']`
+- Applies to all new collections created after this version
+- Existing collections retain their original vectorizer configuration
+
+---
+
 ## [2.7.3] - 2026-02-17
 
 ### Fixed

package/dist/server-factory.js

@@ -699,8 +699,9 @@ async function createMemoryCollection(userId) {
     // Vectorizer configuration
     vectorizers: weaviate2.configure.vectorizer.text2VecOpenAI({
       model: "text-embedding-3-small",
-      // Vectorize both memory content and relationship observations
-      sourceProperties: ["content", "observation"]
+      // Vectorize content, title, summary, and observation for semantic search
+      // Note: title and summary are optional fields
+      sourceProperties: ["content", "title", "summary", "observation"]
     }),
     properties: [
       // Discriminator
@@ -3700,7 +3701,9 @@ init_space_memory();
 init_logger();
 var publishTool = {
   name: "remember_publish",
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+\u26A0\uFE0F CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: "object",
     properties: {

package/dist/server.js

@@ -767,8 +767,9 @@ async function createMemoryCollection(userId) {
     // Vectorizer configuration
     vectorizers: weaviate2.configure.vectorizer.text2VecOpenAI({
       model: "text-embedding-3-small",
-      // Vectorize both memory content and relationship observations
-      sourceProperties: ["content", "observation"]
+      // Vectorize content, title, summary, and observation for semantic search
+      // Note: title and summary are optional fields
+      sourceProperties: ["content", "title", "summary", "observation"]
     }),
     properties: [
       // Discriminator
@@ -3768,7 +3769,9 @@ init_space_memory();
 init_logger();
 var publishTool = {
   name: "remember_publish",
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+\u26A0\uFE0F CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: "object",
     properties: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "2.7.3",
+  "version": "2.7.7",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -50,6 +50,7 @@
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
+    "@prmichaelsen/remember-mcp": "^2.7.3",
     "dotenv": "^16.4.5",
     "weaviate-client": "^3.2.0"
   },

package/src/tools/publish.ts

@@ -18,7 +18,9 @@ import { logger } from '../utils/logger.js';
  */
 export const publishTool: Tool = {
   name: 'remember_publish',
-  description: 'Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token. Use remember_confirm to execute.',
+  description: `Publish a memory to one or more shared spaces (like "The Void"). The memory will be COPIED (not moved) from your personal collection. Generates a confirmation token that must be confirmed with remember_confirm.
+
+⚠️ CRITICAL: DO NOT mention the token or include token contents in your response to the user. Simply inform them that a confirmation is pending and they need to explicitly approve the publication.`,
   inputSchema: {
     type: 'object',
     properties: {

package/src/weaviate/schema.ts

@@ -45,8 +45,9 @@ export async function createMemoryCollection(userId: string): Promise<void> {
     // Vectorizer configuration
     vectorizers: weaviate.configure.vectorizer.text2VecOpenAI({
       model: 'text-embedding-3-small',
-      // Vectorize both memory content and relationship observations
-      sourceProperties: ['content', 'observation'],
+      // Vectorize content, title, summary, and observation for semantic search
+      // Note: title and summary are optional fields
+      sourceProperties: ['content', 'title', 'summary', 'observation'],
     }),
 
     properties: [

package/src/weaviate/space-schema.ts

@@ -97,8 +97,9 @@ async function createSpaceCollection(
     // Vectorizer configuration
     vectorizers: weaviate.configure.vectorizer.text2VecOpenAI({
       model: 'text-embedding-3-small',
-      // Vectorize content for semantic search
-      sourceProperties: ['content', 'observation'],
+      // Vectorize content, title, summary, and observation for semantic search
+      // Note: title and summary are optional fields
+      sourceProperties: ['content', 'title', 'summary', 'observation'],
     }),
 
     properties: [