neverinfamous-agent-skills
Foundational AI agent metacognitive skills and workflows for the Adamic ecosystem.
Description
Foundational AI agent metacognitive skills and workflows for the Adamic ecosystem.
Release History
| Version | Changes | Urgency | Date |
|---|---|---|---|
| 1.1.2 | Imported from npm (1.1.2) | Low | 4/21/2026 |
| v7.5.0 | # Release v7.5.0 ## Highlights - **Hush Protocol Integration**: A machine-actionable team communication system featuring `team_pass_flag` and `team_resolve_flag` tools. - **Agent Skill Expansion**: Added `github-copilot-cli` skill for interactive, terminal-native code reviews. - **Pre-Push Automation**: Introduced `copilot-audit` workflow enabling pre-push review loops. - **Analytics & Consistency**: Fixed key statistical grouping bugs and resolved E2E transport timeouts in SDK detach stages. | Medium | 4/13/2026 |
| v7.4.0 | # Memory Journal MCP v7.4.0 [Full Version Comparison](https://github.com/neverinfamous/memory-journal-mcp/compare/v7.3.0...v7.4.0) | [Available Docker Tags](https://hub.docker.com/r/writenotenow/memory-journal-mcp/tags) ## Highlights - **Analytics Expansion:** Introduced `team_get_collaboration_matrix` tool for deep author density and relationship insights alongside background proactive snapshots. - **Agent Skill Base:** Unlocked official native integration for core toolings, seamlessly loadi | Medium | 4/11/2026 |
| v7.3.0 | # Memory Journal MCP v7.3.0 ## Highlights - **New Metadata Filters for Team Search**: Brought `team_semantic_search` up to personal search parity with robust filtering (tags, entry type, date range). - **Zero-Dependency Seed Cleanup**: Added `cleanup-seed-data.mjs` script for purging test artifacts cleanly without risking core project entries. - **Improved Semantic Search Results**: Explicit caller-managed 10x oversampling (min 100) dramatically improves result variety and filtering accuracy f | Medium | 4/11/2026 |
| v7.2.0 | # Release v7.2.0 ## Highlights - Complete test coverage across GitHub integrations, hitting >97% overall vitest line coverage! - Added `roadmap-kickoff` and `update-deps` workflow prompts. - Expanded native foundational agent skills to 13 packages for out-of-the-box system context. - Implemented core configuration variables for parameters like milestone count, summary count, and code mode max result bounds. ## Added - Expanded comprehensive test coverage suites across github integrations, wo | Medium | 4/9/2026 |
| v7.1.0 | # v7.1.0 - IO Tool Group & CI Security Hardening ## Highlights - **New `io` tool group** — 4 new tools for bidirectional Markdown data portability across personal and team databases - **Markdown round-trip sync** — `export_markdown` / `import_markdown` and `team_export_markdown` / `team_import_markdown` with semantic YAML frontmatter parsing - **Path traversal protection** — `assertSafeDirectoryPath` security guardrail for all directory-based APIs - **Relationship graph filtering** — `relation | Medium | 4/8/2026 |
| v7.0.1 | # v7.0.1 - CI Validation & Documentation Cleanup This patch release integrates a new CI validation gate from Hashgraph Online and completes the documentation cleanup following the v7.0.0 breaking change. ### Highlights - **New CI Gate**: Added `.github/workflows/hol-skill-validate.yml` to automatically validate the `skills/github-commander` package structure on every push and PR using `hashgraph-online/skill-publish` in validate-only mode. - **Documentation Cleanup**: Purged all remaining sta | Medium | 4/7/2026 |
| v7.0.0 | # v7.0.0 — Observability, Hybrid Search & Breaking Env Cleanup > **⚠️ Breaking Change**: The `GITHUB_REPO_PATH` environment variable has been removed. Migrate to `PROJECT_REGISTRY` for multi-project workspace configuration. ## Highlights - **Hybrid Search (RRF)**: Reciprocal Rank Fusion fuses FTS5 and semantic results with heuristic query classification — exposing `searchMode` so callers know which path was taken. - **AuditLogger + Observability**: Async JSONL audit logging with rotating arch | Medium | 4/7/2026 |
| v6.3.0 | ### Added - Documented `PROJECT_REGISTRY` in `README.md` and `DOCKER_README.md` to formally support Multi-Project Workspaces. - Added "Dynamic Context Resolution & Auto-Detection" section detailing the multi-project routing behavior to READMEs. - Added `get_github_context` support for explicit `owner` and `repo` arguments, enabling dynamic physical directory mounting via `PROJECT_REGISTRY`. - Added dynamically resolved `memory://briefing/{repo}` resource to allow explicit repo selection when mu | Medium | 3/27/2026 |
| v6.2.1 | # v6.2.1 — CI Gatekeeper & SDK Validation Fixes ## Highlights - **CI Gatekeeper** — New sequential security gate blocks deployment until all 4 security scans pass (CodeQL, Trivy, TruffleHog, Docker Scout) - **Zero `-32602` errors** — All 30 tools with required params now return structured handler errors instead of raw MCP protocol errors - **Dual-Schema pattern documented** — Prominent code-map section establishing non-negotiable rules for SDK input schema definitions ## Added - CI Gatekeepe | Medium | 3/23/2026 |
| v6.1.2 | # v6.1.2 — CodeQL Cleanup (Follow-up) Resolves 4 remaining CodeQL alerts from v6.1.1: 3 Docker workflow untrusted-checkout and 1 unused import. ## Security - Remove `ref: ${{ github.event.workflow_run.head_sha }}` from `docker-publish.yml` checkout steps — CodeQL does not accept `persist-credentials: false` as mitigation (#145, #146, #161) ## Fixed - Remove orphaned `jose` import from `entries-auth-branches.test.ts` (#162), cascading from v6.1.1 `err` variable removal --- **Compare**: [`v | Medium | 3/23/2026 |
| v6.1.1 | # v6.1.1 — CodeQL Security & Hygiene Patch Resolves 16 CodeQL alerts introduced with the v6.1.0 scan: 3 medium (Docker workflow), 1 warning (useless assignment), 12 notes (unused variables in tests). ## Highlights - **Docker Workflow Hardening** — Removed explicit `ref: ${{ github.event.workflow_run.head_sha }}` from checkout steps to resolve "untrusted checkout in trusted context" alerts - **Dead Code Removal** — Cleaned up 12 unused variables, imports, and constants across test files - **So | Medium | 3/23/2026 |
| v6.1.0 | # v6.1.0 — Team Parity, Dynamic Help, Code Mode Auto-Return ## Highlights - **Team Tools Parity** → 17 new team tools (3 → 20) with full feature parity including vector search, relationships, export, and cross-project insights - **Dynamic Help Resources** → `memory://help` and `memory://help/{group}` auto-generated from live tool definitions — zero maintenance overhead - **Code Mode Auto-Return** → Bare expressions like `mj.help()` now correctly return values (REPL semantics) - **OAuth Scope E | Medium | 3/22/2026 |
| v6.0.1 | # v6.0.1 — Docker Image Optimization & CI Updates ## Highlights - **Docker image reduced from ~733 MB to ~250 MB** on amd64 by stripping unused ONNX runtime binaries and moving npm to the builder stage - **5 GitHub Actions dependency bumps** merged from Dependabot ## Changed ### Docker Image Size Optimization Reduced amd64 image from ~733 MB to ~250 MB: - Moved npm global upgrade + CVE patches to builder stage only; removed npm/npx from production image - Production `npm ci --omit=dev` run | Low | 3/14/2026 |
| v6.0.0 | # v6.0.0 — Code Mode, OAuth 2.1, FTS5, and Architecture Overhaul > **Breaking Changes**: WASM SQLite fallback removed (`--sqlite-wasm`/`--sqlite-native` flags gone). CORS config changed from `corsOrigin: string` to `corsOrigins: string[]`. ## Highlights ### 🧠 Code Mode (`mj_execute_code`) Sandboxed JavaScript execution for multi-step workflows with 70-90% token reduction. Worker-thread isolation with V8 boundary, `mj.*` namespaced API across all 44 tools (10 groups), positional args, method | Low | 3/14/2026 |
| v5.1.1 | ### Changed - **Dependency Updates** - Various minor and patch dependency updates including `@types/node`, `express-rate-limit`, `simple-git`, `typescript-eslint`, and overrides for `tar`, `axios`, and `tmp` inside npm and Docker layers, as well as GitHub Actions. [Compare v5.1.0...v5.1.1](https://github.com/neverinfamous/memory-journal-mcp/compare/v5.1.0...v5.1.1) ```bash npm install -g memory-journal-mcp ``` | Low | 3/10/2026 |
| v5.1.0 | # v5.1.0 - 2026-03-07 ## Highlights - **`session-summary` Prompt** — New workflow prompt replaces unreliable session-end behaviors with robust, user-initiated context capture. - **Extreme Performance Gains** — Drastically reduced SQLite roundtrips 3→1 for importance calculation, introduced a composite covering index for `getRecentEntries` (4x faster), and cached tool array structures (~4800x faster). - **Cold Start Reduction** — Refactored to lazily load `@xenova/transformers` and `vectra`, sh | Low | 3/7/2026 |
| v5.0.1 | # v5.0.1 — Security Patch **Release Date:** March 6, 2026 Patches a HIGH severity path traversal vulnerability in npm's bundled `tar` package discovered by Docker Scout during the v5.0.0 deployment pipeline. ## 🔒 Security - **GHSA-qffp-2rhf-9h96 (tar)** — Manually patched npm's bundled `tar` → `7.5.10` in Dockerfile (builder + production stages) to fix HIGH severity path traversal vulnerability (CVSS 8.2). Also updated npm override in `package.json`. ## 🔄 Changed - `tar` override: 7.5.9 | Low | 3/6/2026 |
| v5.0.0 | # v5.0.0 — Major Architecture & Security Release **Release Date:** March 6, 2026 This is a major release featuring a complete architectural overhaul, comprehensive security hardening, a new E2E test suite, redesigned team collaboration, and deterministic error handling across all 42 tools. ## ✨ Highlights - **Architecture Overhaul** — Tool handler monolith (3,428 lines) split into 12 focused modules. Resource handlers, prompt handlers, types, mutation tools, and HTTP transport all modularize | Low | 3/6/2026 |
| v4.5.0 | # v4.5.0 - Automated Scheduling, Security Hardening & Quality Improvements **Released: March 2, 2026** ## Highlights ### ⏰ Automated Scheduler (HTTP/SSE Only) New in-process scheduler runs periodic maintenance jobs for long-running HTTP/SSE server processes: - `--backup-interval <minutes>` — Automated database backups with cleanup - `--keep-backups <count>` — Max backups to retain (default: 5) - `--vacuum-interval <minutes>` — Database optimization (`PRAGMA optimize`) - `--rebuild-index-int | Low | 3/2/2026 |
| v4.4.2 | # v4.4.2 - CVE Remediation (minimatch Dockerfile Patch) Released: February 27, 2026 ## Highlights - **Docker CVE Fix** — Manually patched npm's bundled minimatch in Dockerfile to resolve Docker deploy block --- ## Security ### CVE-2026-27903 + CVE-2026-27904 (minimatch) — HIGH Manually patched npm's bundled `minimatch@10.2.2` → `10.2.3` in Dockerfile to fix HIGH severity ReDoS and algorithmic complexity vulnerabilities (CVSS 7.5). The v4.4.1 npm override only affected project dependencie | Low | 2/28/2026 |
| v4.4.1 | # v4.4.1 - CVE Remediation (minimatch) Released: February 27, 2026 ## Highlights - **Security Patch** — Fixed 2 HIGH severity CVEs in minimatch that blocked Docker deployment --- ## Security ### CVE-2026-27903 (minimatch) — HIGH Inefficient algorithmic complexity vulnerability in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). Added npm override `minimatch@^10.2.3`. ### CVE-2026-27904 (minimatch) — HIGH Inefficient regular expression complexity (ReDoS) in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). | Low | 2/28/2026 |
| v4.4.0 | # v4.4.0 - Milestones, Insights, Security Hardening & Performance Released: February 27, 2026 ## Highlights - **GitHub Milestones Integration** — Full CRUD support with 5 new tools, 2 new resources, and briefing/status integration - **Repository Insights/Traffic Tool** — New `get_repo_insights` tool and `memory://github/insights` resource for monitoring stars, forks, clones, views, referrers, and popular paths (14-day rolling data) - **HTTP Transport Security Hardening** — Configurable CORS, | Low | 2/28/2026 |
| v4.3.1 | # v4.3.1 - OutputSchema Fix & CVE Remediations Released: February 5, 2026 ## Highlights - **OutputSchema Fix** — Fixed `get_cross_project_insights` validation error on empty results - **Security Patches** — Remediated 3 CVEs in Docker image (libexpat CRITICAL, tar HIGH) - **Dependency Updates** — MCP SDK 1.26.0 and other updates --- ## Fixed ### `get_cross_project_insights` OutputSchema Validation When no projects met the minimum entry threshold, the tool returned only `me | Low | 2/5/2026 |
| v4.3.0 | # v4.3.0 - Causal Knowledge Graphs & Analytics Released: January 18, 2026 ## Highlights - **Causal Relationship Types** — 3 new relationship types for decision tracing and failure analysis - **Enhanced Analytics** — 4 additional metrics in `get_statistics` for deeper insights - **Significance Gradients** — Computed `importance` scores (0.0-1.0) for entries --- ## Added ### Causal Relationship Types Three new relationship types for building causal knowledge graphs: | Typ | Low | 1/18/2026 |
| v4.2.0 | # Memory Journal MCP Server v4.2.0 **Release Date:** January 17, 2026 ## Highlights - **HTTP/SSE Transport** — Run the server in HTTP mode for remote access and web-based clients - **New Tool: `cleanup_backups`** — Automatic backup rotation to prune old backups - **New Tool: `merge_tags`** — Tag normalization for consolidating similar tags - **100% StructuredContent Coverage** — All 33 tools now have formal output schemas - **Enhanced Feedback** — Improved hints for semantic_search, | Low | 1/18/2026 |
| v4.1.0 | # Memory Journal MCP Server v4.1.0 **Release Date:** January 17, 2026 ## Highlights - **Auto-rebuild Vector Index** — New `--auto-rebuild-index` CLI flag and `AUTO_REBUILD_INDEX` env var to synchronize vector index on server startup - **MCP Progress Notifications** — Long-running operations emit `notifications/progress` for improved UX - **MCP Icons Array Support** — 31 tools, 15 resources, and 15 prompts now include visual icons - **Expanded Structured Output** — Output schemas exte | Low | 1/17/2026 |
| v4.0.0 | # v4.0.0 - GitHub Issue Lifecycle & MCP 2025-11-25 Compliance **Release Date:** January 16, 2026 ## Highlights This major release introduces **GitHub Issue Lifecycle Management** with automatic journal linking, full **MCP 2025-11-25 compliance** with structured output validation, and **Dynamic Context Management** enhancements. It also updates the minimum Node.js requirement to 24+. ## Breaking Changes - **Node.js 24+ Required** — `engines.node` updated from ≥18.0.0 to ≥24.0.0 - | Low | 1/16/2026 |
| v3.1.5 | # v3.1.5 - Remove protobufjs CLI to Eliminate taffydb CVE **Release Date:** January 11, 2026 ## Security Fixes ### protobufjs CLI Removal The `protobufjs` package (transitive dependency via `@xenova/transformers → onnxruntime-web → onnx-proto`) includes a `/cli/` folder for `.proto` file compilation. This CLI folder contains unmaintained dependencies with known CVEs. **Since the CLI is not used at runtime**, we now remove it entirely from the Docker image: ```dockerfile RUN rm | Low | 1/12/2026 |
| v3.1.4 | # v3.1.4 - npm Global Upgrade in Production Stage **Release Date:** January 11, 2026 ## Fixed ### Docker Scout CVE-2025-64756 and CVE-2025-64118 The v3.1.3 release added `npm install -g npm@latest` to the **builder stage** only, but the production stage uses a fresh `node:24-alpine` base image with its own bundled npm. **Fix:** Added `npm install -g npm@latest` to the **production stage** as well. This ensures the final Docker image has the latest npm with fixed versions of: - | Low | 1/12/2026 |
| v3.1.3 | # v3.1.3 - Security Fixes for Docker Scout CVEs **Release Date:** January 11, 2026 ## Security Fixes ### Docker Image CVE Remediation This release actively fixes several CVEs that Docker Scout flagged: #### npm Global Upgrade - **CVE-2025-64756** (glob, HIGH) — Fixed by upgrading npm globally in Docker build - **CVE-2025-64118** (tar, MEDIUM) — Fixed by upgrading npm globally in Docker build #### Alpine Edge Repository - **CVE-2025-14524** (curl, MEDIUM) — Fixed via Alpine e | Low | 1/12/2026 |
| v3.1.2 | # v3.1.2 - CI/CD Pipeline Fix **Release Date:** January 11, 2026 ## Fixed ### CI Build Pipeline - **Added `.npmrc` with `legacy-peer-deps=true`** — Resolves `npm ci` failures caused by optional peer dependency conflicts (vectra's zod@^3.23.8 vs our zod@^4.x) - **Root Cause**: The MCP SDK and vectra have differing zod peer dependencies, causing npm to fail strict peer dep resolution in CI - **Symptom**: `npm ci` error: `Missing: zod@3.25.76 from lock file` ### Docker Workflow Gat | Low | 1/12/2026 |
| v3.1.1 | # v3.1.1 - Security Patch **Release Date:** January 11, 2026 ## Security Fixes ### Docker Image Security - **Alpine Package Upgrades** — Added `apk upgrade --no-cache` to builder stage to ensure latest security patches for base OS packages - Fixes CVE-2026-22184 (zlib critical) - Fixes CVE-2025-14524, CVE-2025-14819, CVE-2025-14017 (curl) ### NPM Dependency Overrides - **Added `glob` override** — `^11.1.0` to fix CVE-2025-64756 (ReDoS vulnerability) ### Build Fix - | Low | 1/12/2026 |
| v3.1.0 | # v3.1.0 - GitHub Projects v2 Kanban Support **Release Date:** January 11, 2026 ## Highlights This release adds GitHub Projects v2 Kanban board integration, comprehensive AI agent instructions, and infrastructure updates including a Docker Node.js upgrade and dependency updates. --- ## Added ### GitHub Projects v2 Kanban Support View and manage GitHub Project boards directly from AI agents: - **New Tool: `get_kanban_board`** — Fetch project items grouped by Status columns | Low | 1/12/2026 |
| v3.0.0 | # Memory Journal MCP v3.0.0 Release Notes **Release Date:** December 28, 2025 --- ## 🎉 Overview Memory Journal v3.0.0 is a **complete ground-up rewrite in TypeScript**, delivering a pure JavaScript stack with zero native dependencies. This release deprecates and archives the Python codebase in favor of a modern, portable, strictly-typed implementation. --- ## 🚀 Highlights ### Complete TypeScript Rewrite - **Strict Type Safety** - 100% TypeScript strict mode with zero li | Low | 12/28/2025 |
| 2.2.0 | # Memory Journal MCP v2.2.0 - Tool Filtering & Token Efficiency *Released: December 8, 2025* ## 🎉 Release Highlights Memory Journal v2.2.0 introduces **Tool Filtering** for significant token efficiency gains: 1. **🎛️ Tool Filtering** - Reduce token usage by up to 69% 2. **🎨 Dark Mode Improvements** - Better contrast in Actions Visual Graph 3. **📊 Token Efficiency** - Concrete savings for different configurations **What this means for you:** - ✅ **Save tokens** - Disable unu | Low | 12/8/2025 |
| v2.1.0 | # Memory Journal MCP v2.1.0 - GitHub Actions & Complete Type Safety *Released: November 26, 2025* ## 🎉 Major Release Highlights Memory Journal v2.1.0 brings comprehensive GitHub Actions integration and true Pyright strict compliance: 1. **🔧 Complete GitHub Actions Integration** - CI/CD visibility with 5 new resources 2. **🔗 GitHub Issues & Pull Requests** - Auto-detection and linking 3. **✅ True Pyright Strict Compliance** - 700+ type issues fixed, zero exclusions 4. **📊 Actio | Low | 11/26/2025 |
| v2.0.0 | # Memory Journal MCP Server v2.0.0 ## 🎉 Major Release: Complete GitHub Issues & Pull Requests Integration This release adds comprehensive GitHub Issues and Pull Requests integration to Memory Journal, enabling complete development workflow tracking from issue assignment through PR completion. ## ✨ What's New ### GitHub Issues Integration - ✅ Auto-fetch recent open issues from repositories - ✅ Link journal entries to specific issues - ✅ Auto-detect issue numbers from branch name | Low | 10/28/2025 |
| v1.2.2 | *Released: October 26, 2025* ## 🔒 Security Fixes ### URL Parsing Vulnerability Fixed (CodeQL #110, #111) Resolved incomplete URL substring sanitization in GitHub remote URL parsing that could allow URL spoofing attacks. **What was fixed:** - **Improper URL validation** - Replaced unsafe substring checks (`'github.com' in url`) with proper `urllib.parse.urlparse()` validation - **Hostname verification** - Implemented exact hostname matching (`parsed.hostname == 'github.com'`) to prev | Low | 10/26/2025 |
| v1.2.1 | *Released: October 26, 2025* ## 🐛 Bug Fixes ### Semantic Search Initialization Fixed Resolved a critical issue where semantic search could hang or timeout on first use after server restart. **What was fixed:** - **Async/lazy loading race condition** - ML dependency imports now happen at module-level during server startup instead of during first semantic_search call - **Lock deadlock** - Eliminated async lock acquisition issues that caused 30+ second hangs - **Thread pool contention | Low | 10/26/2025 |
| v1.1.3 | ### 📦 Version Consistency Release This release ensures version consistency across all platforms: - ✅ **GitHub**: v1.1.3 - ✅ **Docker Hub**: v1.1.3 - ✅ **PyPI**: v1.1.3 (publishing now) ### 🎉 Production/Stable Features Memory Journal MCP is production-ready with: - **15 MCP Tools** - Complete development workflow - **8 Workflow Prompts** - Automated productivity - **3 MCP Resources** - Live context and visualizations - **Knowledge Graphs** - Visual relationship mapping - **10x Faster Start | Low | 10/9/2025 |
| v1.1.2 | # Memory Journal MCP v1.1.2 - Production/Stable 🎉 ## 🌟 Major Release Highlights Memory Journal MCP has officially graduated from **Beta to Production/Stable**! This major release represents a complete evolution of the journaling experience, introducing powerful relationship mapping, visual knowledge graphs, enhanced workflow automation, and dramatic performance improvements. After extensive testing and refinement, Memory Journal v1.1 is now production-ready and trusted for daily devel | Low | 10/4/2025 |
| v1.1.1 | # v1.1.1 - Patch Release ## Bug Fixes - Fixed f-string syntax error that prevented GitHub Actions from passing - No functional changes from v1.1.0 ## Upgrading \\\ash pip install --upgrade memory-journal-mcp \\\ --- **Full Changelog**: https://github.com/neverinfamous/memory-journal-mcp/compare/v1.1.0...v1.1.1 | Low | 10/4/2025 |
| v1.1.0 | # Memory Journal MCP v1.1.0 - Production/Stable 🎉 ## 🌟 Major Release Highlights Memory Journal MCP has graduated from **Beta to Production/Stable**! This release introduces powerful relationship mapping and visualization features, along with significant performance improvements. ## ✨ New Features ### Entry Relationships - **Link entries** with typed relationships (references, implements, clarifies, evolves_from, response_to) - **Build knowledge graphs** of your work - **Track ho | Low | 10/4/2025 |
| v1.0.2 | ## 🎉 Major Milestone: Now Available on Docker Hub! **Repository:** `writenotenow/memory-journal-mcp` ### 🐳 Docker Images Available | Tag | Size | Features | Best For | |-----|------|----------|----------| | **`:lite`** | 116MB | Core journaling, FTS5 search, Git context | Most users, fast startup | | **`:latest`** | 4.3GB | Everything + semantic search (ML models) | Advanced users, vector search | ### ⚡ 30-Second Setup ```bash # Pull and run (no build needed!) docker pull w | Low | 9/20/2025 |
Dependencies & License Audit
Loading dependencies...
Similar Packages
@senso-ai/shipablesCLI for installing, managing, and publishing AI agent skills from the Shipables registry0.1.2
@avasis-ai/synthSynthesize any LLM into a production-grade AI agent. Battle-tested agentic patterns, model-agnostic, TypeScript-first.0.6.0