Starstruk Logo MarkStarstruk

v10.2.1

thedotmack/claude-memv10.2.1Feb 16, 2026by thedotmack

AI Summary

This is a bug fix release addressing multiple issues including Bun compatibility with sharp native modules, security vulnerabilities, and session scoping problems. The release fixes a shell injection vulnerability in sync-marketplace, resolves stale native module cache issues, and corrects message handling to prevent cross-session interference.

Key Highlights

  • Fixed shell injection vulnerability by replacing execSync with spawnSync for rsync calls in sync-marketplace
  • Resolved Bun install & sharp native modules cache issues with cache invalidation on Bun version changes
  • Fixed PendingMessageStore initialization deduplication and session-scoped filtering
  • Fixed Gemini empty response handling to preserve messages instead of silent deletion
  • Fixed idle timeout handler to only reset messages for the timed-out session rather than globally

Full Release Notes

## Bug Fixes

- **Bun install & sharp native modules**: Fixed stale native module cache issues on Bun updates, added `node-addon-api` as a dev dependency required by sharp (#1140)
- **PendingMessageStore consolidation**: Deduplicated PendingMessageStore initialization in worker-service; added session-scoped filtering to `resetStaleProcessingMessages` to prevent cross-session message resets (#1140)
- **Gemini empty response handling**: Fixed silent message deletion when Gemini returns empty summary responses — now logs a warning and preserves the original message (#1138)
- **Idle timeout session scoping**: Fixed idle timeout handler to only reset messages for the timed-out session instead of globally resetting all sessions (#1138)
- **Shell injection in sync-marketplace**: Replaced `execSync` with `spawnSync` for rsync calls to eliminate command injection via gitignore patterns (#1138)
- **Sharp cache invalidation**: Added cache clearing for sharp's native bindings when Bun version changes (#1138)
- **Marketplace install**: Switched marketplace sync from npm to bun for package installation consistency (#1140)