v1.89.6

EvoMap/evolverv1.89.6Jun 12, 2026by autogame-17

AI Summary

This release focuses on fixing proxy trace data quality for Claude Code, Cursor, and Codex, making traces usable again. It also introduces a fail-closed mechanism for hub-decryptable uploads to improve security.

Key Highlights

Valid-JSON truncation fixes with increased field and upload caps (64KB→1MB, 256KB→4MB).
Session threading improvements via extraction of session_id from metadata.
Streaming usage capture via passive SSE tee for token usage.
Hub-decryptable uploads now fail-closed when profile analysis is enabled.

Full Release Notes

## @evomap/evolver v1.89.6

Proxy trace data-quality fixes so Claude Code, cursor, and codex traces are actually usable, plus hub-decryptability fail-closed (#251).

### Fixed
- **Valid-JSON truncation** — over-cap bodies are wrapped in a parseable envelope instead of hard-cut; field cap 64KB→1MB, upload 256KB→4MB.
- **Session threading** — per-session `session_id` extracted from `metadata.user_id` / `x-cursor-session-id`; rows now carry a trace id.
- **Streaming usage** — end-of-stream token usage / finish reason / provider response id captured by a passive SSE tee (bytes forwarded unchanged), on both `/v1/messages` and `/v1/responses`. Codex sessions thread by `previous_response_id` → `response.id`.
- **OpenAI/codex shapes** — `prompt_tokens`/`completion_tokens` and Responses `status`/`incomplete_details.reason` recognized.
- **Hub-decryptable uploads (fail-closed)** — when profile analysis is enabled, only rows carrying a hub-decryptable `hub_key_envelope` reach the warehouse; the hub trace public key can be distributed via a signature-verified config. No effect when analysis is disabled (the default).