wyrm-mcp 5.10.0 → 5.11.0

package/README.md

@@ -1,43 +1,58 @@
-# 🐉 Wyrm — Persistent Memory for AI Agents
+# 🐉 Wyrm — the memory layer for AI assistants
 
-> Your AI forgets everything between sessions. Wyrm remembers.
+> Your AI doesn't just need memory. It needs the *layer* that turns memory into compounding leverage.
 
-[![npm version](https://img.shields.io/npm/v/wyrm-mcp?color=22c55e&label=npm)](https://www.npmjs.com/package/wyrm-mcp)
-[![License: Proprietary](https://img.shields.io/badge/License-Proprietary%20Freeware-green.svg)](LICENSE)
-[![Tests](https://img.shields.io/badge/tests-464%20passing-22c55e)](packages/mcp-server)
-[![TypeScript](https://img.shields.io/badge/TypeScript-5.0-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
-[![MCP](https://img.shields.io/badge/MCP-compatible-purple)](https://modelcontextprotocol.io)
+[![npm version](https://img.shields.io/npm/v/wyrm-mcp?color=00B89F&label=npm)](https://www.npmjs.com/package/wyrm-mcp)
+[![License: Proprietary](https://img.shields.io/badge/License-Proprietary%20Freeware-00B89F.svg)](LICENSE)
+[![Tests](https://img.shields.io/badge/tests-638%20passing-00B89F)](packages/mcp-server)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.9-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
+[![MCP](https://img.shields.io/badge/MCP-compatible-00B89F)](https://modelcontextprotocol.io)
 
 ---
 
-## The Problem
+## What Wyrm actually is
 
-AI assistants lose all context between conversations. Every new session starts from zero — you re-explain your codebase, your preferences, your project architecture, the decisions you already made. It's like working with a brilliant colleague who has amnesia.
+Wyrm is not "AI memory." It's the **substrate** that turns one-shot AI conversations into *accreting intelligence*. Five things, only one of which is memory:
 
-## The Solution
-
-Wyrm is an [MCP](https://modelcontextprotocol.io) server that gives AI agents **persistent, searchable memory**. It stores projects, sessions, quests, skills, and arbitrary data in a local SQLite database with full-text search. Connect it once, and your AI remembers everything — across sessions, across tools, across projects.
+1. **⌇ Memory across sessions, tools, and projects.** Your AI inherits prior state instead of starting cold every conversation. Works with Claude / Copilot / Cursor / Windsurf / Codex.
+2. **✖ Counter-pattern blocking.** When an approach fails, Wyrm records it. Next time, your AI is *blocked* from suggesting the same failed thing again. Other memory tools learn only from success — Wyrm learns from failure too.
+3. **→ Autonomous goal pursuit (OODA agent loop).** Set a persistent goal ("ship v2", "keep deps current weekly"), and the `wyrm-loop` daemon runs Observe→Orient→Decide→Act iterations until success criteria are met.
+4. **↯ Federation.** Wyrm calls other MCP servers (GitHub, Slack, Linear, …) as tools. Buddy Protocol v1.0 lets Wyrm talk to other AI memory tools. Composes your whole stack into one mind.
+5. **✺ Creative substrate.** First-class design tokens (colour / type / spacing / motion / shadow / radius / breakpoint) and a tagged design-reference clipper — Wyrm is not just for code.
 
 ```
 You: "What did we decide about the auth architecture last week?"
-AI:  *checks Wyrm* "We went with JWT + refresh tokens, stored in httpOnly cookies.
-      Here's the session from Tuesday with the full discussion..."
+AI:  *calls wyrm_session_prime* "We went with JWT + refresh tokens, stored
+      in httpOnly cookies. Truth #142 cites the Tuesday session — there's
+      a downstream impact on the OAuth flow we should check first."
 ```
 
+You don't ask for memory. The AI cites it on its own. Visibly, with sources.
+
 ---
 
-## Features
-
-- 🧠 **Persistent Memory** — Projects, sessions, quests, context, and skills survive across sessions
-- 🔍 **Full-Text Search** — FTS5-powered instant search across all stored data
-- 📊 **Data Lake** — Store and query any structured data with namespaces and metadata
-- 🎯 **Quest Tracking** — Task management with priorities, tags, and cross-project visibility
-- 🔒 **Optional Encryption** — AES-256-GCM for sensitive data, keys never leave your machine
-- 🛡️ **Input Sanitization** — Built-in security against injection attacks
-- 📈 **Usage Analytics** — Token tracking, cost estimation, session metrics
-- 🔄 **Markdown Sync** — Bi-directional sync between database and `.wyrm/` project files
-- 🚀 **Zero Config** — Install, connect, done. No databases to set up, no services to run.
-- 🕸️ **Knowledge Graph** — Entity/relationship graph with neighborhood traversal and path finding
+## What's in the box (125 MCP tools)
+
+- **⌇ Memory** — projects, sessions, quests, ground truths, memory artifacts, hybrid FTS5 + vector search
+- **✖ Counter-pattern** — failure check / record / resolve, blocks repeated mistakes at suggestion time
+- **⬢ Ground truths** — validated facts versioned with cascade-invalidation when upstream changes
+- **✱ Decision chain** — `wyrm_decided_because`, `decision_upstream` / `_downstream`, blast-radius traversal
+- **→ Agent loop** — `wyrm_goal_set`, `wyrm_agent_init`, daemon runs OODA until success criteria are met
+- **↯ Federation** — `wyrm_mcp_register` for outbound MCP, Buddy Protocol v1.0 for peer AI tools
+- **🕸 Knowledge graph** — entity / relationship graph with shortest-path and neighborhood queries
+- **🎨 Design substrate** — `design_tokens` + tagged `design_references` library
+- **🛡 Audit chain** — hash-chained, Ed25519-signable audit log for SOC2 / HIPAA
+- **💰 Hour ledger + invoicing** — generate invoices from session content
+- **🌐 Federated team sync** — per-row `is_shared` flag; PII never leaves your box unless explicitly shared
+- **🔒 Encryption** — AES-256-GCM; keys never leave your machine
+- **👁 Visibility tools** — `wyrm_intro` + `wyrm_digest` make Wyrm's work product legible to humans
+
+## Built for these workflows
+
+- **Founders** with multi-product portfolios — cross-project memory makes patterns from project A inform project B
+- **Designers / creatives** — design tokens + reference clipper turn Wyrm into a creative substrate, not just a code-memory tool
+- **Co-founders / operators** — `wyrm_digest` shows what Wyrm did this week in plain English
+- **Long-running autonomous work** — agent loop runs your standing goals overnight
 - 🧠 **Memory Artifacts** — Store lessons, patterns, anti-patterns, heuristics with confidence scoring and lifecycle tracking
 - 🧱 **Ground Truths** — Versioned, validated project facts injected into every AI context build
 - 🧭 **Reasoning Scaffolds** — Structured checklists surfaced automatically when task type matches

package/dist/index.js

@@ -516,6 +516,51 @@ const licenseInfo = getLicenseInfo();
 if (licenseInfo.tier !== 'free') {
     console.error(`Wyrm: Licensed — ${licenseInfo.tier} tier (expires: ${licenseInfo.expiresAt || 'never'})`);
 }
+// ==================== BUNDLED SKILLS AUTO-REGISTRATION ====================
+// On first MCP server start after install, register skills bundled with the
+// npm tarball. The postinstall hook writes ~/.wyrm/bundled-skills.json; we
+// consume + delete it so registration runs exactly once per install.
+try {
+    const homeDir = process.env.HOME || process.env.USERPROFILE || '';
+    const manifestPath = pathJoin(homeDir, '.wyrm', 'bundled-skills.json');
+    if (homeDir && fsExistsSync(manifestPath)) {
+        const manifest = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+        let registered = 0;
+        for (const s of manifest.skills) {
+            try {
+                if (!fsExistsSync(s.path))
+                    continue;
+                const body = readFileSync(s.path, 'utf-8');
+                // Parse the description from frontmatter — tolerant to the block-scalar
+                // `|` marker (skip the marker itself, capture the body lines).
+                const fmMatch = body.match(/^---\s*\n([\s\S]*?)\n---/);
+                let description = s.name;
+                let category;
+                if (fmMatch) {
+                    const descMatch = fmMatch[1].match(/description:\s*\|?\s*\n([\s\S]*?)(?:\nname:|\nmetadata:|\ncategory:|\ntype:|$)/);
+                    if (descMatch) {
+                        description = descMatch[1].split('\n').map(l => l.trim()).filter(Boolean).join(' ').slice(0, 500);
+                    }
+                    const catMatch = fmMatch[1].match(/category:\s*([^\n]+)/);
+                    if (catMatch)
+                        category = catMatch[1].trim();
+                }
+                db.registerSkill(s.name, description, s.path, category, 'Ghost Protocol', undefined, 'bundled');
+                registered++;
+            }
+            catch { /* skip on per-skill error; never break startup */ }
+        }
+        if (registered > 0)
+            console.error(`Wyrm: Registered ${registered} bundled skill(s) on first start.`);
+        try {
+            unlinkSync(manifestPath);
+        }
+        catch { /* harmless */ }
+    }
+}
+catch {
+    // Bundled skill registration is best-effort — never block server startup.
+}
 // ==================== PERSISTENT ANALYTICS ====================
 const analytics = new WyrmAnalytics(db.getDatabase());
 // ==================== CLOUD BACKUP (Pro+) ====================