v0.2.12

Release Notes for v0.2.12

This release ships a very large batch of validation and correctness fixes across config management, CLI connect/skill install, MCP session isolation, and the LangGraph/Hermes/CrewAI integrations.

Improvements

• Config validation hardening (memanto/cli/config/manager.py,
  memanto/app/ui/routes/ui_router.py, memanto/cli/schedule_time.py)

  • Server URLs are normalized and ports validated before being written to
    config; session/answer config edits are validated against their schema;
    config setters now guard against malformed config sections instead of
    crashing; schedule times are validated (format + range) before a
    scheduled job is enabled, both via the CLI and the UI (invalid times now
    return 400 instead of silently accepting garbage).

• Moorcheh client cache invalidation (memanto/app/clients/moorcheh.py)

  • MoorchehClientSingleton now tracks the config it was built from
    (backend, URL, timeout / API key) and rebuilds the cached client when
    that config changes, instead of serving a stale client after a backend
    or API-key switch.

• Avoid storage writes during service initialization (memanto/app/services/session_service.py,
  memanto/app/services/agent_service.py)

  • SessionService/AgentService no longer eagerly create directories or
    generate a secret key at construction time; both are now lazy
    (created/generated on first actual use), avoiding unnecessary filesystem
    writes (and directory creation) just from instantiating the service.

• memanto connect / skill install correctness (memanto/cli/connect/engine.py,
  memanto/cli/connect/agent_registry.py)

  • Fixed false-positive shared-skill detection that could report a skill as
    installed for one agent when it was actually another agent's install.
  • connect --disconnect now preserves unmanaged rule files (including
    non-UTF-8 ones) instead of deleting content Memanto didn't add.
  • Hook-cleanup matching (used when disconnecting) tightened to avoid
    removing unrelated hook entries.

• Agent list namespace counts hardened (memanto/cli/config/manager.py)

  • list agents now guards against malformed/missing item_count or
    namespace_name fields in the Moorcheh namespaces response instead of
    raising.

• MCP integration: per-agent session isolation (integrations/mcp/memanto_mcp/lifecycle.py,
  integrations/mcp/memanto_mcp/tools.py)

  • Concurrent MCP tool calls for different agent IDs no longer share one
    SdkClient session — each agent gets its own isolated, cached client, with
    batch payload validation happening before any readiness side effects and
    newly created scoped clients only cached once activation actually succeeds.
  • MCP batch_remember now guards against and normalizes malformed item
    results instead of propagating a bad shape.

• LangGraph integration fixes (integrations/langgraph/langgraph_memanto/{store,tools}.py)

  • Non-string content values are stringified before being written to the
    store (previously could raise). min_confidence search filtering fixed.
    Setup now retries after an activation failure instead of getting stuck.
    Input limits enforced on remember.

• Hermes / CrewAI integration fixes (integrations/hermes-agents/, integrations/crewai/)

  • Fixed agent-id truncation collisions in Hermes (two different agent IDs
    could truncate to the same internal id). Hermes memory-mirror writes on
    exit are now non-blocking. CrewAI remember now enforces the same input
    length limits as the core API.

• Memory validation / parsing hardening (memanto/app/services/memory_parsing_service.py,
  memanto/app/models/__init__.py)

  • Fixed the ambiguity guard being systemically bypassed by common auxiliary
    verbs (is/are/was/were) matching STRONG_FACT_PATTERNS.
  • Memory type is now schema-validated on write instead of accepted as any
    string; SourceType validation is strict and rate-limiting now fails
    closed on error instead of open.
  • Tags and source labels are now length-bounded before storage (applies to
    both remember and memory edits) using shared Pydantic
    Annotated[StringConstraints] validators.
  • Fail-fast on malformed storage responses in the core write path,
    memanto migrate, and MCP batch_remember.

• Timestamp formatting fix (memanto/app/services/memory_read_service.py)

  • Epoch-integer timestamps are now coerced to ISO strings during memory-read
    formatting instead of being returned as raw ints, which broke downstream
    date parsing.

• Unicode agent-ID isolation — agent ID validation is now centralized and
  Unicode-normalized, fixing a case where visually-similar Unicode agent IDs
  could collide or bypass isolation.

Tests

• New tests/test_connect_engine.py, tests/test_connect_detection.py,
  tests/test_config_manager_setters.py, tests/test_schedule_time_validation.py,
  integrations/mcp/tests/test_lifecycle.py.
• Large expansion of tests/test_api.py, tests/test_backend.py,
  tests/test_unit.py, and per-integration test suites covering every fix
  above.

Full Changelog

Full Changelog: v0.2.10...v0.2.12