From 2439bb2b9a34a4957faff81987c4c285902ba63a Mon Sep 17 00:00:00 2001 From: cdeust Date: Thu, 3 Sep 2026 22:36:58 +0200 Subject: [PATCH] =?UTF-8?q?release:=20v4.19.1=20=E2=80=94=20SessionStart?= =?UTF-8?q?=20banner=20checkpoint-field=20truncation=20fix?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Moves all 16 version surfaces (scripts/check_version_surfaces.py) from 4.19.0 to 4.19.1 and dates the Unreleased CHANGELOG section. Contents since v4.19.0: #457 (checkpoint fields in the SessionStart banner now truncated via _short(), closing both an unbounded per-turn token cost and a raw-markdown-injection hazard). Local checks at this commit: python3 scripts/check_version_surfaces.py -> version surfaces OK (16 site(s) checked) python3 scripts/check_doc_claims.py -> doc claims OK uv lock --check -> Resolved 168 packages python3 scripts/check_marketplace_pins.py -> PIN_VERSION_UNPUBLISHED (exit 1) The last one is the expected pre-tag state, same as the v4.19.0 release PR: the marketplace pins 4.19.1 while the latest tag is still v4.19.0. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01V4uZ6ryUEiVZjtgjgpBgCc --- .claude-plugin/marketplace.json | 4 ++-- .claude-plugin/plugin.json | 2 +- CHANGELOG.md | 15 +++++++++++++++ assets/badge-version.svg | 8 ++++---- gemini-extension.json | 2 +- manifest.json | 2 +- package-lock.json | 4 ++-- package.json | 2 +- .../.codex-plugin/plugin.json | 2 +- pyproject.toml | 2 +- server.json | 4 ++-- uv.lock | 2 +- 12 files changed, 32 insertions(+), 17 deletions(-) diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index b5441c4e..80216e9f 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -6,14 +6,14 @@ }, "metadata": { "description": "The Cortex family of Claude Code plugins: home of hypermnesia-mcp (the persistent-memory server formerly named cortex, renamed in v4.15.0 over a directory name collision), zetetic-team-subagents, and hypermnesia-mcp-viz. The marketplace name stays cortex-plugins: it is the brand-level umbrella, while hypermnesia-mcp is one package inside it.", - "version": "4.19.0" + "version": "4.19.1" }, "plugins": [ { "name": "hypermnesia-mcp", "source": "./", "description": "Cortex — persistent memory and cognitive profiling for Claude Code (renamed from the 'cortex' plugin in v4.15.0 to match the PyPI/MCP-registry identity hypermnesia-mcp) — thermodynamic memory with heat/decay, intent-aware retrieval, biological plasticity, codebase intelligence, and cognitive profiling. 50 MCP tools (53 with the optional ai-architect-mcp-codebase + ai-architect-mcp-spec integrations) with enriched schemas (visualization extracted to the standalone Hypermnesia MCP Viz server). PostgreSQL + pgvector in CLI mode; automatic SQLite fallback in Cowork/sandboxed mode. v3.17.0 — autonomous per-project wiki: SessionStart auto-spawns a 6-hour consolidate cycle; a headless `claude -p` worker drains the curation-gap queue, calls codebase-intelligence MCP tools to ground each section in the real call graph, and authors missing anchor pages (architecture / services / api / data-flow / operations / decisions / PRD) per project from the source tree. 15 canonical scopes × 13 file sections; per-project dashboards under `wiki/_dashboards/`. Mermaid diagrams have a 🔍 lens with zoom + pan. Workflow graph with caller-qualified CALLS chains rendering full method-to-method dependencies (native tree-sitter, no AP required). Side panel humanized for non-technical users. Ingests codebase analysis (ai-architect-mcp-codebase) and PRDs (ai-architect-mcp-spec) into wiki + memory + knowledge graph. Docker image available.", - "version": "4.19.0", + "version": "4.19.1", "author": { "name": "Clement Deust", "email": "admin@ai-architect.tools" diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json index 57a83b5d..77f9f7bb 100644 --- a/.claude-plugin/plugin.json +++ b/.claude-plugin/plugin.json @@ -1,7 +1,7 @@ { "name": "hypermnesia-mcp", "description": "Cortex — persistent memory for Claude Code that remembers across sessions automatically. Install and forget. Scientific retrieval backed by 97 published references. (Renamed from the 'cortex' plugin to match the PyPI/MCP-registry identity.)", - "version": "4.19.0", + "version": "4.19.1", "author": { "name": "Clement Deust", "email": "admin@ai-architect.tools" diff --git a/CHANGELOG.md b/CHANGELOG.md index 2be1fb3d..3926183a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,21 @@ adheres to [Semantic Versioning](https://semver.org/). ## [Unreleased] +## [4.19.1] - 2026-09-03 + +### Fixed + +- **SessionStart banner: checkpoint fields now truncated like every other + section** (#457). `_format_checkpoint_section` was the one part of the + Claude Code SessionStart hook writing raw, untruncated text + (`current_task`, `next_steps`, `active_errors`, `open_questions`), while + anchors/team-decisions/hot-memories already went through the file's own + `_short()` cap. Since this banner is re-injected on every turn of a + session, an unbounded field had no ceiling on per-turn token cost — and, + independently, could inject raw markdown structure (e.g. a `\n### ` + sequence) into the banner. Both close with the same fix: every checkpoint + field now passes through `_short(str(...))`. + ## [4.19.0] - 2026-09-03 ### Added diff --git a/assets/badge-version.svg b/assets/badge-version.svg index f4d9962d..175b36c7 100644 --- a/assets/badge-version.svg +++ b/assets/badge-version.svg @@ -1,5 +1,5 @@ - - Version 4.19.0 + + Version 4.19.1