v1.9.0 - Advanced Retrieval & Storage Facade

v1.9.0 Release

Advanced Retrieval Pipeline

• Query expansion with synonyms and related terms
• Entity-aware retrieval for targeted lookups
• Temporal validity filtering for time-relevant memories
• MMR diversity ranking to avoid redundant results
• Query router for intelligent search dispatch
• Cross-encoder reranking (topK tuned 100 -> 30)

Storage Facade

• Unified storage-facade API for entity, graph, and strategy operations
• Session-to-graph bridge (auto-embed sessions into knowledge graph)
• Keyword + vector dual search with scoring

Graph Pipeline

• Graph pipeline orchestration for incremental sync
• Batch graph boost with parallelized associations
• Cached DB access for graph operations

Consolidation

• Sleep-time consolidation tool (squish_consolidate MCP)
• Contradiction detection v2

Security & Cleanup

• Removed hardcoded DB credentials from config files
• Fixed stale repo URL references (fork leakage)
• Removed test data salt, PLAN.md, internal plans from tracking
• Fixed .npmignore glob patterns (330 source maps excluded)
• Package size reduced: 922 files / 847 kB -> 592 files / 674 kB
• Deleted home directory artifact and empty .gitmodules
• All versions synchronized to 1.9.0

Schema

• Entity migrations: mention_count, last_mentioned_at, aliases columns
• Bootstrap creates entities table with all columns (no ALTER needed for new installs)
• Graceful migration for existing installs (duplicate column errors caught)

Breaking Changes

• Kuzu graph backend removed (SQLite single DB)
• Team tools removed from OSS MCP (cloud-only feature)

Squish v1.6.0 — Session Search

Squish v1.6.0 — Session Search

What's New

Session search across Claude Code and Codex. Agents can now search previous session history as evidence, not just recall durable memory.

Three-Layer Memory Model

Layer	What It Does	Command
Recall	Durable memory — decisions, preferences, constraints	squish recall
Sessions	Searchable history — past agent runs as evidence	squish sessions search
Remember	Write to long-term memory	squish remember

Session Search

• Claude Code: reads ~/.claude/history.jsonl + per-session JSONL files
• Codex: reads ~/.codex/state_5.sqlite + rollout JSON files
• Related session discovery by project path overlap

CLI Commands

squish sessions list          # List past agent sessions
squish sessions search "query" # Full-text search across history
squish sessions show <id>     # Display session detail
squish sessions related       # Find sessions relevant to current repo
squish sessions status        # Show which agent stores are available

Bug Fixes

• Fixed SQL injection in 8 raw SQL fallback paths (all parameterized now)
• Fixed merged memories leaking into search results
• Fixed self-supersession bug in contradiction detection
• Fixed N+1 queries in place memory count updates
• Fixed race conditions in dedup and contradiction resolution
• Added crypto wallet & email detection to secret scanner
• Removed dead code (5 unused functions in hybrid-search)
• Fixed personal Windows paths in agent stores

Install

npm install -g squish-memory && squish install --all

Full Changelog

https://github.com/michielhdoteth/squish/blob/main/CHANGELOG.md

Squish v1.5.0 - Schema Fixes, Plugin System, Tier Removal

What's New ### Schema Fixes - Fixed dead column references across 5 files that would crash Postgres users - memory_type -> sector (consolidation engine) - deleted -> status = 'active' (consolidation, contradiction detection) - score -> relevance_score (decay engine) - decay_tau, decay_beta -> decay_rate (decay engine) - frequency -> default 1 (graph export) - Removed project_id from memory_associations INSERTs (column doesn't exist) ### Plugin System - Claude Code: .claude-plugin/ with skill, hooks, MCP server config - OpenCode: Plugin entry with session.deleted event handling - OpenClaw: Plugin with definePluginEntry API and hooks - Auto-detect installer: Scans .claude, .config/opencode, .openclaw, .codex, .cursor, .vscode, .windsurf, .zed, .gemini ### Tier System Removed - Memories no longer classified into hot/cold tiers - Decay and eviction still run on importance scores - Tier column preserved in schema for backward compatibility ### Other Changes - Merged squish migrate into squish doctor --migrate-memories - Global config linked to projects - Removed Obsidian integration and markdown storage - Version alignment across all plugin manifests ## Install bash npm install -g squish-memory squish install --all ## Full Changelog https://github.com/michielhdoteth/squish/blob/master/CHANGELOG.md

Security Fixes (post-release)

• Removed \shell: true\ from all spawn calls (save-hook, cleanup-hook, new-hook, qmd-client)
• Fixed command injection in install-interactive.mjs (use \which -a\ directly)

Squish v1.2.0 - Memory Runtime for Agents

Highlights

• forward-only schema fixes for fresh installs and older SQLite upgrades
• clean JSON output for launch-path CLI commands like context, inspect, health, stats, and doctor
• updated runtime-led docs and positioning for CLI, MCP, and web UI

Verification

• launch-path CLI tests passed
• package tarball verified with current migration and schema outputs, including project migrations
• landing site copy verified on Vercel preview and public project alias

Notes

• npm publish was intentionally skipped in this release pass

Squish v1.1.5 - Universal Memory for AI Agents

What's New in Squish v1.1.5

Universal persistent memory for AI agents - now with encryption, graph associations, and memory lifecycle management.

Major Features

Client-Side Encryption

• AES-256-GCM encryption for sensitive memories
• squish_set_passphrase - Set encryption passphrase
• squish_rotate_key - Rotate passphrase and re-encrypt all memories
• Optional encryption via SQUISH_ENCRYPTION_PASSPHRASE env var

Graph-Boosted Retrieval

• Memories linked by coactivation count
• Associations boost search relevance via Reciprocal Rank Fusion
• Configurable graph boost weight via SQUISH_WEIGHT_GRAPH_BOOST (default: 1.5)

Memory Lifecycle

• Automatic tier promotion/demotion based on importance
• Tier system: hot (recent) → warm (accessible) → cold (archived) → expired
• Cron-based decay scheduler via SQUISH_LIFECYCLE_DECAY_CRON

Supabase/PostgreSQL Support

• Full PostgreSQL backend via Supabase
• Uses @neondatabase/serverless and pgvector
• Auto-detects when SUPABASE_URL and SUPABASE_SERVICE_KEY are set

New Environment Variables

• SQUISH_ENCRYPTION_PASSPHRASE - Encryption passphrase
• SQUISH_DECAY_THRESHOLD - Decay threshold (default: 0.1)
• SQUISH_LIFECYCLE_DECAY_CRON - Decay cron schedule
• SQUISH_WEIGHT_GRAPH_BOOST - Graph boost weight (default: 1.5)
• SUPABASE_URL - Supabase project URL
• SUPABASE_SERVICE_KEY - Supabase service key
• NEON_PROJECT_ID - Neon project ID
• NEON_SERVICE_KEY - Neon service key

MCP Tools (18 total)

Core: squish_remember, squish_search, squish_recall, squish_forget, squish_update
Context: squish_link, squish_context, squish_learn, squish_note
System: squish_health, squish_stats, squish_recent, squish_stale
Management: squish_confidence, squish_pin, squish_tag
Security: squish_set_passphrase, squish_rotate_key

Installation

npx add-mcp squish-memory

Or traditional install:

bun add squish-memory

Links

• Documentation: https://github.com/michielhdoteth/squish
• npm: https://www.npmjs.com/package/squish-memory
• Issues: https://github.com/michielhdoteth/squish/issues

Squish v1.0.2

v1.0.2 (2026-03-18)

Security & Performance Improvements

Security

• Added rate limiting to web server and MCP server (100 requests per 15 min)
• CORS restricted to localhost by default (configurable via SQUISH_CORS_ORIGINS)
• Updated vulnerable dependencies (express, hono, express-rate-limit)

Package Optimization

• Reduced package size from 413KB to 283KB (-31%)
• Removed source maps from published package
• Files reduced from 606 to 348

SEO Enhancements

• Updated package keywords with high-value search terms
• Added author email for trust signal
• Updated sitemap with current dates

Dependencies Updated

• express: 4.22.1 → 5.2.1
• uuid: 9.0.1 → 13.0.0
• redis: 4.7.1 → 5.11.0
• pg: 8.19.0 → 8.20.0

Previous Releases

See CHANGELOG.md for full history.

Squish v0.2.7 - Enhanced Memory Plugin for Claude Code

🎉 Squish v0.2.7 - Enhanced Memory Plugin for Claude Code

✨ What's New

• Enhanced Web UI: Beautiful Playful Dashboard with real-time monitoring
• Interactive Modals: Working Docs and Settings panels
• npx Installation: npx squish-install for easy setup
• Comprehensive Documentation: Complete codemap and architecture guides
• State Machine Diagrams: Visual workflow documentation
• Improved Privacy: Enhanced filtering and security controls

🚀 Features

• 16 MCP Tools: Complete memory management suite
• Dual Storage: Local SQLite + Team PostgreSQL modes
• Real-time Web UI: Live dashboard at http://localhost:37777
• Auto-Capture: Automatic memory collection from conversations
• Privacy-First: Secret detection and content filtering
• Pluggable Embeddings: OpenAI, Ollama, or local TF-IDF

📦 Installation Options

# Quick install with npx
npx squish-install

# Manual installation  
npm install -g squish

# Development
git clone https://github.com/michielhdoteth/squish.git
cd squish && bun install && bun run build

🎯 Key Improvements

• Enhanced dashboard with modern UI components
• Interactive documentation and settings modals
• Improved error handling and status indicators
• Comprehensive codebase documentation
• Better user experience and accessibility

🏗️ Architecture

• Local-First: SQLite by default, your data stays local
• Team Ready: PostgreSQL + Redis for collaborative workflows
• Extensible: Plugin system for custom integrations
• Performance: 2.6M ops/sec memory operations

📚 Documentation

• Complete Codebase Map
• Architecture Overview
• Installation Guide

---

Ready for production use! 🎯

Built with ❤️ for Claude Code developers who want their AI to remember everything.