This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryReplaces the FastAPI singleton with a per-profile registry resolved via X-Roampal-Profile header, fixing ignored project‑specific profiles.
Full changelog
Replaces the FastAPI singleton with a per-profile registry resolved at request time via an X-Roampal-Profile header. Every client sends the header: MCP server, OpenCode plugin (reads env > project opencode.json > global opencode.json), Claude Code / Cursor hooks. Fixes issue #7 where OpenCode Desktop's per-project ROAMPAL_PROFILE was ignored because FastAPI bound the profile once at startup and never refreshed.
Also in this release
- Sidecar config hydration from
opencode.jsonat FastAPI startup - TagService unification with Desktop (
set_llm_extract_fn, asyncextract_tags_async,asyncio.Lockfor GPU OOM prevention) /api/summarizenow makes 1 sidecar call per request (was 3-4)store_workingauto-extracts tags via TagService when caller omits- Facts extraction retry loop in OpenCode plugin (matches summary)
- 8 audit-driven bug fixes (503 vs SystemExit, dead code removal, MCP default-profile cache,
effective_summary_tagsNameError, etc.) - Plugin background fetch timeouts bumped 5s to 30s (suppresses cosmetic
TimeoutErrorlogs; data was always being stored)
Validation
- Test suite: 603 passing, 3 pre-existing skips, 0 failed
- Live-validated: OpenCode CLI (env var), OpenCode with per-project
opencode.json(issue #7 repro), Claude Code hooks
Install
pip install --upgrade roampal==0.5.4
Full details: dev/docs/releases/v0.5.4/RELEASE_NOTES.md
Breaking Changes
- Removed FastAPI singleton; now uses per-profile registry resolved at request time using `X-Roampal-Profile` header.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About roampal-ai/roampal-core
Outcome-based persistent memory for AI coding tools. Memories that help get promoted, memories that mislead get demoted. Works with Claude Code and OpenCode via hooks + MCP.
Related context
Beta — feedback welcome: [email protected]