
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@kognite/sdk
Advanced tools
TypeScript SDK for Kognite — long-term memory for AI agents (hybrid semantic search, memory formation, knowledge graph)
TypeScript SDK for Kognite — long-term memory for AI agents.
Hybrid semantic + full-text search, LLM memory formation, and a knowledge graph,
behind one API key. Zero runtime dependencies (built on fetch).
npm install @kognite/sdk
import { Kognite } from "@kognite/sdk";
const kognite = new Kognite({ apiKey: process.env.KOGNITE_API_KEY! });
// Store a memory
await kognite.memories.add({ content: "User prefers dark mode", kind: "preference" });
// Hybrid search (semantic + full-text, RRF-fused)
const { results } = await kognite.memories.search("ui preferences", { limit: 5 });
// Highest precision (cross-encoder rerank — slower):
await kognite.memories.search("ui preferences", { rerank: true });
ingest runs the pipeline behind Kognite's published LoCoMo results: it stores
raw messages as episodes and extracts atomic facts — pronouns resolved to
names, relative dates converted to absolute ones. Prefer it over add for any
multi-message context:
await kognite.memories.ingest([
{ speaker: "user", timestamp: "2026-07-15", content: "I moved to Berlin last month." },
{ speaker: "assistant", content: "Noted — how are you finding it?" },
]);
// → { raw: 2, extracted: 1, stored: 3 }
A token-budgeted bundle of relevant memories, ready to drop into a prompt:
const ctx = await kognite.context.assemble({ query: "user's living situation", token_budget: 2000 });
await kognite.memories.get(id);
await kognite.memories.forget(id); // soft-delete (+ graph cascade)
await kognite.memories.list({ limit: 50 }); // newest-first paging
await kognite.graph.query("Berlin"); // knowledge-graph search
await kognite.health();
Errors throw KogniteError with status (HTTP) and code
(validation_failed, quota_exceeded, not_found, …). Retries with
exponential backoff on 429/5xx/network errors are built in.
The tenant scope is derived server-side from your API key — the SDK has no scope parameter and cannot reach another tenant. Get a key in the dashboard, and see the live, judge-audited benchmarks.
Self-hosted? Pass baseUrl in the constructor.
smoke.live.ts is a full live-API exercise of every method (safe: runs in the
key's own scope and forgets everything it creates):
KOGNITE_API_KEY=kgn_... npx tsx smoke.live.ts
FAQs
TypeScript SDK for Kognite — long-term memory for AI agents (hybrid semantic search, memory formation, knowledge graph)
We found that @kognite/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.