This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
MCP Developer Tools
✓ No known CVEs patched
This release patches 1 known CVE
Topics
agent-memory
ai-memory
claude
claude-code
codex
cursor
+14 more
encrypted
episodic-memory
gemini
llm-memory
local-first
long-term-memory
mcp
mcp-memory
mcp-server
model-context-protocol
persistent-memory
rag-alternative
sqlite
vector-db
Affected surfaces
crypto_tls
Summary
AI summaryDeferred‑embed pending rows are now encrypted at rest.
Full changelog
Security
- Deferred-embed pending rows are now encrypted at rest. On an encrypted store, a record awaiting background embedding briefly held its text (
literal_surface) and provenance in plaintext during the embed window. Pending rows are now encrypted on write and decrypted just before embedding, matching the rest of the at-rest encryption. Unencrypted stores are unaffected.
Fixed
- Sleep daemon WAKE/idle CPU storm — the consolidation cycle could spin the CPU and never settle; the daemon now serves recall on wake. Thanks to @Marsu6996 (#20).
- Consolidation & recall correctness — tombstoned records excluded from the runtime graph, crisis-mode topology built on the live graph, recall score clamp, reflection-embedding + crash recovery hardened — closing the root causes behind the crisis-mode loop. Thanks to @Marsu6996 (#22).
Security Fixes
- Deferred‑embed pending rows now encrypted at rest; plaintext exposure of `literal_surface` and provenance during embed window eliminated
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About CodeAbra/iai-mcp
All releases →Related context
Related tools
Earlier breaking changes
- v1.0.0 Removes previous embedded vector database, PyTorch embedding stack, and third‑party GPL/graph libraries.
- v0.4.0 Hook log marker format changed from 'cache-hit fresh' to 'cache-hit age='
- v0.4.0 Deferred-capture retry replaces old rename-once-and-skip behavior
- v0.4.0 Removed 24-hour staleness cap from session-recall hook
- v0.2.0 IAI_MCP_EMBED_QUANTIZE accepts only int8 (lowercase) or unset; other values crash daemon at startup.
Beta — feedback welcome: [email protected]