CogniRelay

CogniRelay v1.4.9 Release Notes

Release date: 2026-04-27

CogniRelay v1.4.9 adds the packaging and publication surfaces needed for a first PyPI and MCP Registry release, while preserving the existing source checkout deployment path.

Added

• Added PyPI project metadata with a sanitized README-PYPI.md long description and cognirelay console entrypoint.
• Added a thin cognirelay package wrapper with cognirelay serve and python -m cognirelay serve, delegating to the existing app.main:app runtime.
• Added root server.json metadata for MCP Registry publication, including local Streamable HTTP transport, positional serve startup metadata, and required COGNIRELAY_REPO_ROOT environment metadata.
• Added tools/validate_server_json.py for local validation against the committed MCP Registry schema URL.

Changed

• Extended tools/prepare_release.py to validate package versions, dependencies, server.json, the PyPI ownership marker, and publishable tree safety before release.
• Updated installation documentation for source, PyPI, and production hardening paths, including durable COGNIRELAY_REPO_ROOT guidance and the local Streamable HTTP-only MCP Registry posture.
• Added wheel and sdist artifact checks so packaged releases include only the intended runtime assets and source-only documentation/deploy files.

Security And Privacy

• Removed tracked data_repo/ runtime state from the Git source surface while preserving local operator files on disk.
• Added publishable-tree safety checks that block tracked runtime state, generated databases, logs, token/key files, build residue, and private artifacts before publication.
• Sanitized PyPI metadata so the published long description does not expose local runtime-state paths, audit/log paths, capsule paths, or token file locations.
• Added runtime guardrails so installed-package startup refuses unsafe runtime state roots under package or site-packages paths before creating state.

Notes

• No PyPI upload, MCP Registry publication, or GitHub Release publication is performed by the code change itself; those remain explicit manual release steps.
• Runtime MCP protocol support remains 2025-06-18 and 2025-11-25. The 2025-12-11 value used by server.json is the MCP Registry metadata schema, not a CogniRelay runtime protocol version.

Verification

Release preparation should pass:

git diff --check
./.venv/bin/python -m ruff check app tests tools agent-assets
./.venv/bin/python -m unittest discover -s tests -v
./.venv/bin/python tools/validate_server_json.py
./.venv/bin/python -m build
./.venv/bin/python -m twine check dist/*

This site is open source. Improve this page.