v0.1.3

Highlights

• Preserve legitimate HTML, XML, and JSX-first user prompts while filtering known Claude Code system envelopes (#25).
• Refresh environment and code indexes after the documented 24-hour interval (#27).
• Retry failed slow index refreshes on the next session instead of marking them successful (#29).
• Restrict the local index directory to mode 0700 and refresh logs to mode 0600, repairing existing installations automatically (#30).

Verification

• 49 automated tests pass.
• GitHub Actions passes on Ubuntu and macOS with Python 3.10 and 3.14.

v0.1.2

Highlights

• Prune source transcripts after the configured retention window while keeping the searchable redacted index (#20).
• Preserve protected local configuration when uninstalling unless explicit force removal is requested (#22).
• Restrict transcript, code, and vault SQLite databases—including WAL/SHM sidecars—to owner-only permissions (0600), and repair existing database permissions on startup (#23).
• Keep the package and MCP server version in sync.

Verification

• 44 automated tests pass.
• GitHub Actions passes on Ubuntu and macOS with Python 3.10 and 3.14.

session-knowledge v0.1.1

Security patch for the installer configuration writer.

Fixed

• preserve the mode of existing ~/.claude.json and ~/.claude/settings.json files
• create new Claude configuration files with mode 0600
• preserve private permissions and metadata on backup files
• flush and fsync() temporary JSON before atomic replacement

This fixes a common-umask case where an existing mode-0600 configuration file could become mode 0644 after installation.

Tracked in #16 and fixed by #17.

session-knowledge v0.1.0

The first tested release of session-knowledge.

Highlights

• 13 local MCP tools for searching Claude Code sessions, reconstructing timelines, finding prior tool calls, and discovering existing implementations
• FTS5 search with CJK bigram tokenization
• redacted search index plus a separate permission-restricted credential vault
• 31 regression tests across Python 3.10 and 3.14 on Linux and macOS
• structured contribution and private security-reporting workflows

Stabilization fixes

• prevent placeholder-like substrings from bypassing secret redaction
• enforce adjacency for CJK phrase queries
• reject unbounded or invalid numeric MCP arguments
• reject ambiguous short session IDs instead of returning arbitrary content

Security boundary

vault.db intentionally contains plaintext credential values. Never commit, sync, or share it. Redaction is pattern-based, so custom secret formats may still require manual review with verify-redaction.

See the full changelog.