This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
ReleasePort's take
Light signalCodeAbra/iai-mcp v0.3.0 adds per-turn ambient capture instead of session-end batching, injects cached memory at session start, and simplifies installation with auto-generated keys and single-command hook wiring.
Why it matters: Per-turn capture captures prompts continuously rather than at session end; cached memory injects at session start. Auto-keying and single-command installation eliminate manual setup steps. Routine upgrade opportunity.
Summary
AI summaryPer‑turn ambient capture, session‑start recall injection, and three‑hook installer add new capabilities.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Captures every prompt as it happens, not just at session end. Captures every prompt as it happens, not just at session end. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Injects cached memory prefix into Claude Code before first prompt. Injects cached memory prefix into Claude Code before first prompt. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Single command wires all three hooks in one installation step. Single command wires all three hooks in one installation step. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Auto-generates crypto key on fresh install, removes manual initialization. Auto-generates crypto key on fresh install, removes manual initialization. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
New session-start command exposes recall payload formatter. New session-start command exposes recall payload formatter. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
New capture-turn-deferred command exposes per-turn writer. New capture-turn-deferred command exposes per-turn writer. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Low |
Installs all three hooks (`UserPromptSubmit`, `Stop`, `SessionStart`) with a single command. Installs all three hooks (`UserPromptSubmit`, `Stop`, `SessionStart`) with a single command. Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Feature | Low |
Auto-generates the crypto key file during fresh daemon installation. Auto-generates the crypto key file during fresh daemon installation. Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Feature | Low |
Adds `iai-mcp session-start` CLI command to expose recall payload formatter. Adds `iai-mcp session-start` CLI command to expose recall payload formatter. Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Feature | Low |
Adds `iai-mcp capture-turn-deferred` CLI command to expose per‑turn writer. Adds `iai-mcp capture-turn-deferred` CLI command to expose per‑turn writer. Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Bugfix | Medium |
Drains deferred-captures buffer on idle edge, preventing indefinite retention. Drains deferred-captures buffer on idle edge, preventing indefinite retention. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
What's new
Per-turn ambient capture
iai-mcp now captures every prompt as it happens, not just at session end. A lightweight UserPromptSubmit hook appends each turn to a per-session buffer (~5 ms, pure file IO, no daemon overhead during the session). The Stop hook rolls the buffer over at session end and the daemon drains it on the next idle edge.
Session-start recall injection
New SessionStart hook assembles the cached memory prefix (L0 identity, L1 critical facts, L2 communities, global rich-club) and injects it into Claude Code as additionalContext before the first prompt. Fail-safe: empty store or unreachable daemon yields empty stdout — session start is never blocked.
3-hook installer
iai-mcp capture-hooks install now wires all three hooks (UserPromptSubmit, Stop, SessionStart) in one command. Uninstall and status report all three.
Daemon DROWSY drain
The daemon now drains the deferred-captures buffer on the WAKE → DROWSY lifecycle edge (5-min idle), in addition to the existing post-REM drain. Buffers no longer sit indefinitely.
Auto-provision crypto key
iai-mcp daemon install and scripts/install.sh auto-generate ~/.iai-mcp/.crypto.key on fresh installs. No more manual crypto init step.
New CLI commands
iai-mcp session-start— exposes the recall payload formatteriai-mcp capture-turn-deferred— exposes the per-turn writer
Documentation
- Headless / VPS deployment guide (SSH stdio pattern for non-AVX2 hosts)
- Troubleshooting table with common issues and fixes
- AVX2 CPU requirement documented in prerequisites
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CodeAbra/iai-mcp
All releases →Related context
Related tools
Earlier breaking changes
- v0.4.0 Hook log marker format changed from 'cache-hit fresh' to 'cache-hit age='
- v0.4.0 Deferred-capture retry replaces old rename-once-and-skip behavior
- v0.4.0 Removed 24-hour staleness cap from session-recall hook
- v0.2.0 IAI_MCP_EMBED_QUANTIZE accepts only int8 (lowercase) or unset; other values crash daemon at startup.
Beta — feedback welcome: [email protected]