chore(release): v0.9.18

[rohitg00]

v0.9.18 — hardening + DX wave.

Bundles 5 fixes already merged to main:

PR	Closes	Title
#450	#448	fs-watcher PEM private-key + standalone JWT redaction
#451	#449	mcp-standalone livez probe DI seam (kills test flake)
#452	#447	viewer self-hosted SVG favicon + tight img-src 'self' CSP
#453	#446	OPENAI/AGENTMEMORY timeout env unify + strict integer parse
#458	#457	lessons auto-inject into mem::context payload (surfaced in #381)

Files bumped (9)

• package.json (main)
• packages/mcp/package.json (standalone MCP shim)
• plugin/.claude-plugin/plugin.json
• plugin/.codex-plugin/plugin.json ← release-checklist memory was stale, codex manifest added later
• src/version.ts
• src/types.ts (ExportData.version union)
• src/functions/export-import.ts (supportedVersions Set)
• test/export-import.test.ts (assertion)
• CHANGELOG.md (new section at top)

Verification

npm run build && npm test
# 91 files, 1007 tests pass

After merge

1. Tag v0.9.18 on the merge SHA
2. gh release create v0.9.18 with the new CHANGELOG section
3. npm publish triggers automatically via .github/workflows/publish.yml on release: published
4. Verify with npm view @agentmemory/agentmemory version

Summary by CodeRabbit

• New Features

  • Lessons are now auto-injected into context payload for better integration.
  • Viewer favicon is self-hosted with tightened content security policies.
  • Filesystem watcher previews now redact sensitive credentials (PEM keys and JWTs).

• Improvements

  • OpenAI timeout environment variables have improved parsing and precedence handling.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agentmemory	Ready	Preview, Comment	May 17, 2026 1:04pm

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

Version 0.9.17 is bumped to 0.9.18 across version constants, package manifests, export data type contracts, import validation logic, test expectations, and changelog documentation.

Changes

v0.9.18 Release Version Bump

Layer / File(s)	Summary
Version constants and manifests src/version.ts, package.json, packages/mcp/package.json, plugin/.claude-plugin/plugin.json, plugin/.codex-plugin/plugin.json	The VERSION constant and all package/plugin manifest version fields are bumped from 0.9.17 to 0.9.18.
Export version contract and validation src/types.ts, src/functions/export-import.ts	The ExportData.version string-literal union is extended to include "0.9.18", and the mem::import supportedVersions allowlist is updated to accept the new version.
Test expectations and release documentation test/export-import.test.ts, CHANGELOG.md	The export-structure test expectation is updated to assert version: "0.9.18", and a new v0.9.18 release block is added to the changelog documenting hardening, DX improvements, and behavioral changes.

Possibly related PRs

• rohitg00/agentmemory#383: Version-extension release that extends supportedVersions and ExportData.version for version 0.9.13.
• rohitg00/agentmemory#337: Version-extension release that updates export-version compatibility across src/types.ts, src/functions/export-import.ts, src/version.ts, and tests.
• rohitg00/agentmemory#432: Version-extension release that extends export schema and version plumbing for a new version.

Poem

A rabbit hops with joy so true, 🐰
The version bumps, from .17 to .18 new,
With manifests and types aligned with care,
The export paths updated everywhere!

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore(release): v0.9.18' directly and clearly summarizes the main change—a version bump to v0.9.18 across all manifests, package files, and type definitions.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.9.18

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint skipped: no ESLint configuration detected in root package.json. To enable, add eslint to devDependencies.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}