v1.0.90
The biggest community release yet — 11 contributors, 135 files changed, 8,000+ lines added across platform support, security hardening, session intelligence, and developer experience.
New Platform Support
- Qwen Code adapter — Full adapter with TDD tests, hook dispatcher registration, and platform-support docs (
2861d45,519c768,9403e2d) - JetBrains Copilot adapter — New adapter for JetBrains IDEs with
IDEA_INITIAL_DIRECTORYproject dir detection (#321) (496b84a) - KiloCode / OpenCode plugin unification — Unified plugin exports with
{ server }default export for KiloCode and backward-compatible named export for OpenCode (d2411c5) — @mickey Lazarevic
Session Intelligence
- Per-event project attribution — Session events now carry project attribution with confidence scoring, enabling multi-project analytics (#325) (
270a56f) — @sebastian Breguel - Attribution confidence in Insight dashboard — Per-event confidence displayed in the analytics UI (
773f863,cdce371) - DRY attribution helper — Extracted reusable attribution logic with named confidence constants (
79e0d7e)
Search & Storage
- Hash-based stale detection — Content store now detects stale indexed content via hash comparison and auto-refreshes on search (#317) (
472634a) - MCP tool_response capture —
ctx_searchnow finds data returned by MCP tools, not just input — @shane McCarron (2d623ba)
Security Fixes
- Path traversal bypass — Resolved path traversal in
evaluateFilePaththat could escape the sandbox — @pbbadenhorst (02f71f8) - XSS via dangerouslySetInnerHTML — Fixed potential XSS from unsanitized
highlightedcontent in Insight dashboard (#341) — @tuanaiseo (ceb4968) - CORS hardening — Removed permissive CORS headers from Insight local API; OPTIONS now returns 405 (#293) — @junghwan (
3def2cf,60427a6)
Developer Experience
- Output compression — New caveman-style terse response rules across all 14 adapters for maximum context efficiency (
7e35caf) - ctx_stats redesign — RTK-style token savings dashboard with business-friendly continuity display (
c302ce4,70ae93e,74e4763) - BaseAdapter extraction — Eliminated duplicate code across 12 adapters via shared base class (
c6cc02a) - Think in Code — Added mandatory "Think in Code" paradigm to README and landing page (
be86ac2)
Bug Fixes
- Lifecycle: grandparent reparent detection — Process now shuts down correctly when grandparent reparents to init (#311) — @ben Younes (
1c66d5c) - Insight dashboard lifecycle — Dashboard terminates when Claude/MCP exits (#311) — @ercan (
517e4d4) - Guidance throttle scoping — Throttle now scoped by session instead of
process.ppid, preventing cross-session interference (#298) — @ben Younes (4f6f7cb) - Gemini CLI SessionStart — Emits structured JSON instead of plaintext (#299, #314) — @ben Younes (
1c519ad) - OpenClaw MCP sidecar — Registers sidecar on install so
ctx_*tools surface to the agent (#339) — @murat Aslan (6b17757) - parseStdin safety — Safe empty-stdin handling across all 22 hook sites with BOM stripping (#322) (
3e65ee5) - Windows path normalization —
resolveConfigDirtilde expansion now usesjoin()for native separators; non-tilde paths preserved as-is (8f30b05,b8f93ec) - Windows ESM import paths — Converted
HELPERS_PATHtofile://URLs viapathToFileURL()for Windows--input-type=modulecompatibility (b4c0cde) - better-sqlite3 bootstrap — Skips bootstrap on Node >= 22.5 / Bun where native SQLite is available (#331) (
f351fd1) - better-sqlite3 binary detection — Tightened detection and self-healing rebuild (#318) (
d328c24) - Go runtime version — Fixed version reporting — @Tyce Herrman (
af2655a) - Codex stable hook dispatch — Updated hooks.ts and docs to reflect stable dispatch — @Tyce Herrman (
b9acf5b,6519cbe) - PreToolUse matchers — Corrected and verified tool name matchers across all platforms (
4e22a47,050c30a,0c3f1e7)
Testing & Quality
- Adapter detection coverage — Config-directory branch and env-var priority chain tests (#287) — @sebastian Breguel
- DB base coverage —
withRetry, corruption predicate, and cleanup helper tests (#292) — @sebastian Breguel - Fuzzy-cache benchmarks — Token-dedup search micro-benchmarks (#284) — @sebastian Breguel
- Insight CORS test hardening — Shared server via
beforeAll, SIGSEGV retry loop, robust HTTP polling (3adbe42,89d3dd6,09ba27b,78ec68f) - hasModernSqlite helper — Extracted ABI test loader utility (#331) (
74bcf65)
Landing Page
- Disabled open-to-opportunities badges (hero + footer) (
528bd66) - Fixed canonical and og:url to point to
context-mode.com
Contributors
A huge thank you to everyone who contributed to this release:
| Contributor | Contributions |
|---|---|
| Mert Koseoglu (@mksglu) | Maintainer — Qwen Code & JetBrains adapters, BaseAdapter refactor, stats redesign, output compression, security hardening, Windows fixes, CI stabilization |
| Sebastian Breguel (@sebastianbreguel) | Per-event project attribution (#325), adapter detection tests (#287), DB base coverage (#292), fuzzy-cache benchmarks (#284) |
| Ben Younes | Lifecycle grandparent fix (#311), guidance throttle scoping (#298), Gemini CLI SessionStart (#299, #314) |
| Mickey Lazarevic | KiloCode/OpenCode plugin unification — unified default + named exports |
| Tyce Herrman (@TyceHerrman) | Go runtime version fix, Codex hook docs for stable dispatch (#300) |
| Shane McCarron | MCP tool_response capture for ctx_search |
| Junghwan (@shaun0927) | Insight CORS security fix (#293) |
| tuanaiseo | XSS security fix — dangerouslySetInnerHTML sanitization (#341) |
| Ercan (@flightlesstux) | Insight dashboard lifecycle termination (#311) |
| Murat Aslan (@murataslan1) | OpenClaw MCP sidecar registration (#339) |
| pbbadenhorst | Path traversal security fix in evaluateFilePath |
Full Changelog: v1.0.89...v1.0.90