Starstruk Logo MarkStarstruk

v12.3.9

datalab-to/suryav12.3.9Apr 22, 2026by thedotmack

AI Summary

Security observation types with Telegram notifier, fire-and-forget summarize to eliminate ~110s terminal block, and hook improvements for worker-port precedence and Windows.

Key Highlights

  • New security_alert and security_note observation types
  • Fire-and-forget Telegram notifier
  • Stop hook now fire-and-forget (eliminated ~110s block)
  • Hooks resolve endpoint with same precedence as worker
  • Windows fallback to 37777

New Features

  • security_alert (high-priority, triggers notifications)
  • security_note (low-priority)
  • Telegram notifier with MarkdownV2 formatting
  • Server-side SessionCompletionHandler
  • Worker-port precedence: env > settings.json > defaults

Full Release Notes

## Highlights

### 🔐 Security observation types + Telegram notifier
- New observation types: `security_alert` 🚨 (high-priority, triggers notifications) and `security_note` 🔐 (low-priority).
- Fire-and-forget Telegram notifier — MarkdownV2 formatting, per-observation error isolation, no token logging.
- Five env vars control behavior. `CLAUDE_MEM_TELEGRAM_ENABLED` master toggle defaults on (no-op without bot token + chat ID).

### ⚡ Stop hook: fire-and-forget summarize
- Eliminated the ~110s terminal block when a session ended. Summarize handler now enqueues and returns immediately.
- Server-side `SessionCompletionHandler` finalizes off the hook's critical path (generator + HTTP fallback), with singleton sharing across the worker.

### 🐛 Hooks: worker-port precedence + Windows (#2086 / PR #2084)
- Hooks now resolve endpoint with the same precedence as the worker: env (`CLAUDE_MEM_WORKER_PORT`, `CLAUDE_MEM_WORKER_HOST`) > settings.json > defaults.
- Looser sed regex handles both quoted and unquoted JSON port values.
- Windows fallback to 37777 when per-uid formula doesn't apply.

### 🔧 Bug fixes (reviewer rounds on PR #2084)
- Don't remove in-memory session after a failed finalize; preserve crash-recovery state at 3 sites.
- Eliminate double-broadcast of `session_completed` on fallback path.
- Sync `DatabaseManager.getSessionById` return type.
- `TelegramNotifier` now respects `settings.json` (not just env).
- Hardcoded 🚨 emoji replaced with per-type mapping.

### 📝 Docs
- `version-bump` skill now covers `npm publish` + all 6 manifest paths so `npx claude-mem@<version>` always resolves. Adds `git grep` pre-flight for new manifests.

### ⚙️ Chores
- 🤖 Generated with [Claude Code](https://claude.com/claude-code)

**Full Changelog**: https://github.com/thedotmack/claude-mem/compare/v12.3.8...v12.3.9