This release includes 2 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
ReleasePort's take
Light signalVersion v0.4.0 of CodeAbra/iai-mcp removes the 24-hour staleness cap on the session-recall hook and adds IAI_MCP_SESSION_RECALL_CLI for developer overrides.
Why it matters: Update to v0.4.0; remove any logic that enforced a 24‑hour expiration on session‑recall results, as this constraint is no longer applied.
Summary
AI summaryRemoved 24h staleness cap on session‑recall hook and introduced IAI_MCP_SESSION_RECALL_CLI env var for developer override.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | Medium |
Removed 24-hour staleness cap from session-recall hook Removed 24-hour staleness cap from session-recall hook Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Breaking | Medium |
Deferred-capture retry replaces old rename-once-and-skip behavior Deferred-capture retry replaces old rename-once-and-skip behavior Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Breaking | Medium |
Hook log marker format changed from 'cache-hit fresh' to 'cache-hit age=' Hook log marker format changed from 'cache-hit fresh' to 'cache-hit age=' Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Memory bank enables offline caches for substring fallback Memory bank enables offline caches for substring fallback Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
New iai-mcp bank-recall CLI enables substring recall without daemon New iai-mcp bank-recall CLI enables substring recall without daemon Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Daemon startup archives and cleans leftover .bak recovery artifacts Daemon startup archives and cleans leftover .bak recovery artifacts Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Daemon detects FSM drift between canonical and legacy states Daemon detects FSM drift between canonical and legacy states Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Deferred-capture retries up to three times with exponential backoff Deferred-capture retries up to three times with exponential backoff Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Added IAI_MCP_SESSION_RECALL_CLI env var for developer override Added IAI_MCP_SESSION_RECALL_CLI env var for developer override Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Adds FSM drift detection on daemon startup comparing canonical and legacy state files Adds FSM drift detection on daemon startup comparing canonical and legacy state files Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
| Feature | Medium |
Implements bounded retry for failed deferred-captures (3 attempts, exponential backoff) Implements bounded retry for failed deferred-captures (3 attempts, exponential backoff) Source: granite4.1:30b@2026-05-22-audit Confidence: low |
— |
Full changelog
What's new
- Memory bank — denormalized read-side caches (
bank/processed+bank/recent) for offline substring fallback when the daemon socket is dead iai-mcp bank-recallCLI — substring recall without booting the daemon or loading the embedder- FSM drift detection — daemon startup compares canonical and legacy state files, warns on mismatch
- Backup archiver — daemon startup cleans up leftover
.bakrecovery artifacts - Bounded retry for failed deferred-captures (3 attempts, exponential backoff, terminal
.permanent-failed-evidence) - Session-recall hook — removed 24h staleness cap; added
IAI_MCP_SESSION_RECALL_CLIenv var for developer override
Changed
- Deferred-capture retry replaces the old rename-once-and-skip behavior
- Hook log marker changed from
cache-hit freshtocache-hit age=
Full changelog: https://github.com/CodeAbra/iai-mcp/blob/main/CHANGELOG.md
Breaking Changes
- Removed 24h staleness cap from `Session-recall hook`
- `IAI_MCP_SESSION_RECALL_CLI` env var added as replacement configuration for developer override
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CodeAbra/iai-mcp
All releases →Related context
Related tools
Earlier breaking changes
- v0.2.0 IAI_MCP_EMBED_QUANTIZE accepts only int8 (lowercase) or unset; other values crash daemon at startup.
Beta — feedback welcome: [email protected]