# v6.2.1 — CI Gatekeeper & SDK Validation Fixes

## Highlights

- **CI Gatekeeper** — New sequential security gate blocks deployment until all 4 security scans pass (CodeQL, Trivy, TruffleHog, Docker Scout)
- **Zero `-32602` errors** — All 30 tools with required params now return structured handler errors instead of raw MCP protocol errors
- **Dual-Schema pattern documented** — Prominent code-map section establishing non-negotiable rules for SDK input schema definitions

## Added

- CI Gatekeeper workflow (`.github/workflows/gatekeeper.yml`) — sequential security gate that runs CodeQL → Trivy → TruffleHog → Docker Scout before allowing deployment
- Dual-Schema pattern documentation in `code-map.md` — explains SDK input validation, root cause of `-32602` errors, and rules for defining schemas
- `esbuild` added to `devDependencies`

## Fixed

- Raw MCP `-32602` errors leaking through 30 tools — relaxed SDK-facing `inputSchema` fields to `.optional()` while keeping strict handler-internal validation
- `create_github_issue_with_entry` and `create_github_milestone` SDK-level rejection — removed `.min(1)` from SDK-facing title fields
- Wiki `Code-Mode.md` documentation drift — corrected `mj.relationships.linkEntries` parameter names

## Changed

- Refined GitHub Commander skill and 8 workflow files with improved security scan integration
- Updated Wiki Drift Detector workflow lock file
- Improved test reliability across 5 test files

---

**Compare**: [`v6.2.0...v6.2.1`](https://github.com/neverinfamous/memory-journal-mcp/compare/v6.2.0...v6.2.1)

```bash
# npm
npx memory-journal-mcp@6.2.1

# Docker
docker pull writenotenow/memory-journal-mcp:v6.2.1
```
