# v7.1.0 - IO Tool Group & CI Security Hardening

## Highlights

- **New `io` tool group** — 4 new tools for bidirectional Markdown data portability across personal and team databases
- **Markdown round-trip sync** — `export_markdown` / `import_markdown` and `team_export_markdown` / `team_import_markdown` with semantic YAML frontmatter parsing
- **Path traversal protection** — `assertSafeDirectoryPath` security guardrail for all directory-based APIs
- **Relationship graph filtering** — `relationship_type` flag on `visualize_relationships` for granular edge isolation
- **CI security hardening** — OIDC token minting disabled, deprecated `gitleaks-action` removed, `docker/scout-action` updated

## Added

- Created the `io` tool group to manage bidirectional data portability and cross-domain data indexing
- Added `export_markdown` and `import_markdown` tools for full round-trip entry synchronization using semantic YAML frontmatter parsing
- Added `team_export_markdown` and `team_import_markdown` tools for team database synchronization
- Included `assertSafeDirectoryPath` core security guardrail for path traversal protection on directory-based APIs
- Added `relationship_type` filtering flag to `visualize_relationships` tool to isolate specific graph edge connections

## Security

- Disabled OIDC token minting in the HOL validation workflow (`id-token: none`) as a Least Privilege security best practice
- Removed deprecated `gitleaks-action` from the secret scanning workflow in favor of the active `trufflehog` step to resolve Node.js 20 deprecation warnings
- Updated `docker/scout-action` to `v1.20.4` to clear pending security scanning CI warnings

## Fixed

- Removed unnecessary `FORCE_JAVASCRIPT_ACTIONS_TO_NODE24` environment flag from the Trivy security scanning job
- Applied explicit version pinning comments (`# v1.0.11`) to the `skill-publish` workflow step for transparent auditability

## Changed

- Refactored the legacy `export` tool group into the unified `io` interface (`mj.io.*` namespace in Code Mode; `export` alias preserved for backwards compatibility)
- Deprecated `ICON_EXPORT` constant in favor of `ICON_IO` with bidirectional SVG visual design
- Lowercased group mappings for API Code Mode proxies

## Dependencies

- `typescript-eslint` bumped from 8.57.0 to 8.58.1

---

**Full diff**: [v7.0.1...v7.1.0](https://github.com/neverinfamous/memory-journal-mcp/compare/v7.0.1...v7.1.0)

**Install**:

```
npx memory-journal-mcp@7.1.0
```

**Docker**:

```
docker pull writenotenow/memory-journal-mcp:v7.1.0
```
