安全边界
- 不记录 access token、refresh token、device code。
- 不把 token 写进仓库。
- debug 日志不要打印完整 bearer header。
- 不要求 LLM Agent 自动操作用户浏览器登录,除非用户明确授权。
- 支持时优先用短期 access token 和 refresh token rotation。
OAuth device flow checklist for CLI and agent login. Covers user codes, polling intervals, token storage, logs, and security boundaries.
Expand-contract database migration checklist for agents. Covers additive schema changes, batched backfills, rollback, and contract gates.
AVIDS2/memorix is a local-first cross-agent memory layer (MCP + CLI/TUI); verified 443★ with stdio `memorix serve` and an HTTP dashboard mode.
Ogham MCP provides persistent, searchable shared memory for AI coding agents across clients, with a CLI wizard (`ogham init`) and stdio/SSE transports.
Awesome Agent Memory curates systems, benchmarks, and papers on long-term context for LLMs/MLLMs—use it to compare approaches and pick tools to try.