doobidoo/mcp-memory-service v10.66.1

v10.66.1 — fix(storage) + fix(harvest) multi-CLI + Kiro CLI support

on GitHub

What's Changed

Fixed

• fix(storage): align HttpClientStorage.retrieve signature with BaseStorage (CodeQL #428): http_client.py override was missing min_confidence, start_time, and end_time parameters present in the abstract base. All three are now forwarded to the HTTP API payload when set (py/inheritance/signature-mismatch). Commit: e626edf

• fix(harvest): multi-CLI session directory resolution (PR #1025, @filhocf): 3-level fallback: MCP_HARVEST_SESSION_DIR env var → ~/.claude/projects/{cwd} → ~/.kiro/sessions/cli/. Adds Kiro CLI support alongside existing Claude CLI support.

• fix(harvest): expanduser() on MCP_HARVEST_SESSION_DIR: Paths specified as ~/my-sessions were not expanded to the full home directory path, causing session directory resolution to fail silently. Commit: ab730e7

• fix(opencode): don't use https for http access: Fix connection failure while using local http endpoint with the opencode plugin.

• fix(ci): restore workflow YAML corrupted by SHA-pinning regex: The SHA-pinning script (PR #1005) matched too broadly, collapsing step separators across 18 workflow files (62 occurrences). Restored pre-pinning YAML structure and re-applied all 20 SHA pin mappings correctly.

Changed

• docs(contributing): tighten contributor guidelines + add agent disclosure policy: Added Security-Sensitive Changes section (protected paths, scope-enforcement checklist for new MCP tools) and Autonomous Agents & AI-Generated PRs section (mandatory disclosure, 7-day clarification window). PR template extended with Security and Agent Disclosure sections. CODEOWNERS updated to require @doobidoo approval on web/api/mcp.py, web/oauth/, and .github/workflows/.

• chore(governance): filhocf collaborator access + CODEOWNERS expanded to reasoning/: Added filhocf as collaborator; CODEOWNERS updated to include src/mcp_memory_service/reasoning/ under filhocf review.

• chore(deps): bump actions/checkout 4.3.1→6.0.2, snok/container-retention-policy 2.2.1→3.0.1, actions/delete-package-versions 4.1.1→5.0.0, uv group (8 packages)

• chore(ci): pin all GitHub Actions to full SHA hashes (#1005): Supply chain hardening. All 20 workflow files now use full 40-character commit SHA hashes — 109 uses: entries across 18 unique action refs.

Special Thanks

Thank you to @filhocf for PR #1025 — the multi-CLI harvest session directory fallback with Kiro CLI support. This expands harvest compatibility to a second major CLI without any configuration changes required for existing Claude CLI users.

Full Changelog: https://github.com/doobidoo/mcp-memory-service/blob/main/CHANGELOG.md