v6.4.0 — Project Memory System

[6.4.0] — 2026-07-16

Added

• Project Memory MCP Server (mcp-memory-server/server.py) — new FastMCP server providing persistent, project-scoped memory via atomic-write markdown files under .opencode/memory/. Four tools: store_memory (with atomic writes using tempfile + os.replace), read_memory, search_memory (full-text across namespaces), and list_namespaces.
• project-memory Agent Skill (skill-templates/project-memory/SKILL.md) — companion skill teaching OpenCode when to proactively store Manager constraints and when to retrieve them during the Context Phase.
• opencode.json registration — project_memory MCP server registered alongside custom_context, with explicit permissions for store_memory, read_memory, search_memory, and list_namespaces.
• System prompt integration — project-memory added to <agent_skills_registry> under Global Workflow Skills. Software Architect and Senior Programmer personas updated to proactively save Manager constraints via the project-memory skill.

Changed

• System prompt upgraded to V6.4.0 — <system_version> bumped.
• audit-agents skill — Target Audit Criteria (Mode 1 and Mode 2) and AGENTS.md Template updated with Context Bootstrapping rule: agents must call search_memory/list_namespaces at task start.
• README.md — Roadmap item #7 (Memory Management) struck through and marked implemented in V6.4.0.

Security

• Path traversal prevention — mcp-memory-server/server.py: added _validate_and_resolve with regex ^[a-zA-Z0-9_-]+$ sanitization and is_relative_to boundary checks on all user-supplied namespace/key inputs.
• Temp file leak fix — store_memory atomic write wrapped in try/except with explicit os.unlink(temp_path) cleanup on failure.