Fix: Update npm loglevel to silent in SessionStart hook to prevent context injection issues; consolidate hooks architecture and update documentation for v4.3.1

This commit is contained in:
Alex Newman
2025-10-26 00:44:04 -04:00
parent 64dfc0467d
commit 56213ef84a
5 changed files with 45 additions and 49 deletions
+13 -8
View File
@@ -67,16 +67,21 @@ See [Architecture Overview](architecture/overview) for details.
- **PM2**: Process manager (bundled - no global install required)
- **SQLite 3**: For persistent storage (bundled)
## What's New in v4.2.3
## What's New in v4.3.1
**Security:**
- Fixed FTS5 injection vulnerability in search functions
- Added comprehensive test suite with 332 injection attack tests
**Critical Fix:**
- Fixed SessionStart hook context injection (v4.3.1)
- Context wasn't being injected due to npm output pollution
- Changed npm loglevel to `--loglevel=silent` for clean JSON output
**Fixes:**
- Fixed ESM/CJS compatibility for getDirname function
- Fixed Windows PowerShell compatibility in SessionStart hook
- Cross-platform dependency installation now works on Windows, macOS, and Linux
**Code Quality:**
- Consolidated hooks architecture (removed bin/hooks wrapper layer)
- Fixed double shebang issues in hook executables
**Recent Updates (v4.3.0):**
- Progressive disclosure context with observation timelines
- Enhanced session summaries with token cost visibility
- Cross-platform path detection improvements
## Next Steps