This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixed scoring truncation bugs and added a 2000‑character safety cap for memory storage endpoints.
Full changelog
Fix scoring truncation, add memory storage safety cap
Sidecar Scoring Truncation Fix:
- Removed
.slice(0, 200)in OpenCode sidecar scoring prompt (roampal.ts) — memories were evaluated with content beyond 200 characters removed since v0.3.5
Fallback Scoring Truncation Fix:
- Removed 120-char truncation in
build_scoring_prompt_simple()(session_manager.py) — fallback scoring path (when sidecar unavailable) was also discarding content
Memory Storage Safety Cap (2000 chars):
- Added 2000-character cap at user-facing storage endpoints:
/api/memory-bank/add,/api/memory-bank/update,/api/record-response - Content exceeding limit is truncated with warning logged
- Exchange storage and book chunk ingestion unaffected (system-controlled)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About roampal-ai/roampal-core
Outcome-based persistent memory for AI coding tools. Memories that help get promoted, memories that mislead get demoted. Works with Claude Code and OpenCode via hooks + MCP.
Related context
Beta — feedback welcome: [email protected]