kiro-memory 1.5.0 → 1.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -2
- package/package.json +5 -2
- package/plugin/dist/cli/contextkit.js +275 -423
- package/plugin/dist/hooks/agentSpawn.js +288 -434
- package/plugin/dist/hooks/kiro-hooks.js +276 -424
- package/plugin/dist/hooks/postToolUse.js +300 -437
- package/plugin/dist/hooks/stop.js +303 -439
- package/plugin/dist/hooks/userPromptSubmit.js +299 -436
- package/plugin/dist/index.js +290 -427
- package/plugin/dist/sdk/index.js +274 -422
- package/plugin/dist/services/sqlite/Database.js +24 -6
- package/plugin/dist/services/sqlite/Search.js +7 -1
- package/plugin/dist/services/sqlite/index.js +30 -7
- package/plugin/dist/shared/paths.js +6 -3
- package/plugin/dist/viewer.js +12 -4
- package/plugin/dist/worker-service.js +3330 -288
package/README.md
CHANGED
|
@@ -386,10 +386,10 @@ The agent configuration was not installed. Run the install command:
|
|
|
386
386
|
kiro-memory install
|
|
387
387
|
```
|
|
388
388
|
|
|
389
|
-
This creates the agent config at `~/.kiro/agents/
|
|
389
|
+
This creates the agent config at `~/.kiro/agents/kiro-memory.json`. Then start Kiro with:
|
|
390
390
|
|
|
391
391
|
```bash
|
|
392
|
-
kiro-cli --agent
|
|
392
|
+
kiro-cli --agent kiro-memory
|
|
393
393
|
```
|
|
394
394
|
|
|
395
395
|
### Port 3001 already in use
|
|
@@ -413,6 +413,19 @@ Run the built-in doctor command to check your environment:
|
|
|
413
413
|
kiro-memory doctor
|
|
414
414
|
```
|
|
415
415
|
|
|
416
|
+
## Security
|
|
417
|
+
|
|
418
|
+
Kiro Memory runs **locally only** on `127.0.0.1` and implements multiple layers of protection:
|
|
419
|
+
|
|
420
|
+
- **Token Authentication** on the notify endpoint (shared secret via `~/.kiro-memory/worker.token`)
|
|
421
|
+
- **Rate Limiting** on all API endpoints (200 req/min global, 60 req/min for notifications)
|
|
422
|
+
- **Helmet** security headers with Content Security Policy
|
|
423
|
+
- **CORS** restricted to localhost origins
|
|
424
|
+
- **Input Validation** on all POST endpoints (type checking, length limits, safe character patterns)
|
|
425
|
+
- **SSE Connection Limit** (max 50 concurrent clients)
|
|
426
|
+
|
|
427
|
+
To report a security vulnerability, please open a [private security advisory](https://github.com/auriti-web-design/kiro-memory/security/advisories/new).
|
|
428
|
+
|
|
416
429
|
## Contributing
|
|
417
430
|
|
|
418
431
|
Contributions are welcome. Please open an issue to discuss proposed changes before submitting a pull request. See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kiro-memory",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.6.0",
|
|
4
4
|
"description": "Persistent cross-session memory for Kiro CLI. Automatically tracks context, observations, and summaries across coding sessions.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"kiro",
|
|
@@ -58,7 +58,7 @@
|
|
|
58
58
|
"worker:restart": "bun plugin/scripts/worker-service.cjs restart",
|
|
59
59
|
"worker:status": "bun plugin/scripts/worker-service.cjs status",
|
|
60
60
|
"worker:logs": "tail -n 50 ~/.contextkit/logs/worker-$(date +%Y-%m-%d).log",
|
|
61
|
-
"worker:tail": "tail -f 50 ~/.contextkit/logs/worker-$(date +%Y-%m-%d).log",
|
|
61
|
+
"worker:tail": "tail -f -n 50 ~/.contextkit/logs/worker-$(date +%Y-%m-%d).log",
|
|
62
62
|
"queue": "bun scripts/check-pending-queue.ts",
|
|
63
63
|
"queue:process": "bun scripts/check-pending-queue.ts --process",
|
|
64
64
|
"queue:clear": "bun scripts/clear-failed-queue.ts --all --force",
|
|
@@ -95,8 +95,10 @@
|
|
|
95
95
|
"cors": "^2.8.5",
|
|
96
96
|
"dompurify": "^3.3.1",
|
|
97
97
|
"express": "^4.18.2",
|
|
98
|
+
"express-rate-limit": "^8.2.1",
|
|
98
99
|
"glob": "^11.0.3",
|
|
99
100
|
"handlebars": "^4.7.8",
|
|
101
|
+
"helmet": "^8.1.0",
|
|
100
102
|
"lucide-react": "^0.574.0",
|
|
101
103
|
"react": "^18.3.1",
|
|
102
104
|
"react-dom": "^18.3.1",
|
|
@@ -109,6 +111,7 @@
|
|
|
109
111
|
"@types/cors": "^2.8.19",
|
|
110
112
|
"@types/dompurify": "^3.0.5",
|
|
111
113
|
"@types/express": "^4.17.21",
|
|
114
|
+
"@types/express-rate-limit": "^5.1.3",
|
|
112
115
|
"@types/node": "^20.0.0",
|
|
113
116
|
"@types/react": "^18.3.5",
|
|
114
117
|
"@types/react-dom": "^18.3.0",
|