claude-mem Releases

An early release addressing security vulnerabilities, CORS proxy configuration, and updates for weather modules and dependencies.

Apr 30, 2026

A patch release containing 7 critical bug fixes addressing build artifacts, privacy handling, semantic search ordering, Windows compatibility, and SDK boundary isolation. Includes fixes for stale macOS binaries, privacy tag stripping, relevance order preservation, and Codex transcript ingestion.

Apr 30, 2026

A bug fix release that resolves anchor lookups via MCP and HTTP by properly handling stringified numeric anchors. Added a comprehensive 7-case regression test suite covering various anchor types and extracted a parseNumericAnchor helper for centralized anchor coercion.

Apr 28, 2026

Minor version update with no detailed changelog provided in the release notes.

Apr 27, 2026

Minor version update with no detailed changelog provided in the release notes.

Apr 27, 2026

A significant release completing the cynical-deletion sweep that removed problematic anti-patterns (Defenders and Tolerators). Implements multi-account isolation and adds a new trust boundary, while fixing numerous review comments across the codebase.

Apr 26, 2026

Fixes a critical bug where fresh installs had broken observation persistence due to missing migration columns in SessionStore. The fix adds the missing column additions and implements self-healing for already-broken databases at v29 with no v28 columns.

Apr 26, 2026

Fixes a 6-month-old bug where pending observations were incorrectly abandoned when users typed /clear or ended sessions. The release removes the SessionEnd hook entirely, allowing pending observations to finish processing naturally instead of being marked abandoned.

Apr 26, 2026

Delivers a one-time database cleanup migration to purge polluted rows, fixes the context-overflow loop that caused infinite retries, and prevents storage leaks from protocol payloads. Also includes fixes for MCP server inheritance and hook timeouts.

Apr 25, 2026

Fixes two critical ship-blockers: context-overflow loops that trapped sessions indefinitely, and <task-notification> payloads polluting user_prompts. Also includes five triage fixes for worker-service, hook timeouts, Windows compatibility, and MCP server inheritance.

Apr 25, 2026

Major performance improvement that caches Chroma backfill watermarks to eliminate expensive per-restart metadata scans. Reduced Chroma CPU on worker restart from 422% to 0% and made backfill startup near-instant.

Apr 25, 2026

Introduces security observation types with Telegram notifications, eliminates terminal blocking on session end with fire-and-forget summarize, and fixes Windows compatibility issues in hooks.

Apr 22, 2026

Minor version update with no detailed changelog provided in the release notes.

Apr 21, 2026

Bug fix addressing PID reuse false-positives in the worker start-guard that caused containers to appear to start but immediately exit cleanly when using docker stop/start with bind-mounted ~/.claude-mem. The fix introduces process-start identity tokens to verify process identity beyond just liveness.

Apr 21, 2026

This release removes bearer token authentication from the worker API and drops the unused platform_source query-time filter from the context injection pipeline, replacing the auth with a simple in-memory rate limiter as a compensating control.

Apr 20, 2026

Minor version update with no detailed changelog provided in the release notes.

Apr 20, 2026

Fixed an issue where the rate limiter from v12.3.3 was causing 'Rate limit exceeded' errors for the live viewer. Removed the rate limiter entirely since the worker is localhost-only (enforced via CORS), making rate limiting unnecessary security theater.

Apr 20, 2026

Restored all 25 bug fixes from v12.3.3 while surgically removing the bearer-token authentication that broke SessionStart context injection. This release keeps the security hardening but without the auth mechanism.

Apr 20, 2026

Emergency rollback to v12.3.2 to unblock users after v12.3.3's bearer-token authentication broke SessionStart context injection. New sessions received no memory context.

Apr 20, 2026

Major 'Issue Blowout 2026' release with 25 bugs fixed across worker, hooks, security, and search. Introduced bearer token authentication and significant security hardening.

Apr 20, 2026