fix(okf): harden imports and prepare v3.13.1

CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.13.1] - 2026-09-06
+
+### Security
+
+- **OKF import confinement and validation** (#540) — preflight the complete import batch before mutation, reject unsafe source and destination paths and conflicting destinations, and validate imported frontmatter before writing. Includes regression coverage for path confinement and failure recovery.
+- **Dependency fixes** (#557) — override sharp and adm-zip to patched versions.
+
+### Fixed
+
+- **OKF failure reporting and retries** (#540) — report incomplete writes, commits, and indexing as failures. Retrying unchanged documents completes pending commit or indexing work without an empty commit. Runtime write failures can still leave partial files; the CLI reports that state explicitly.
+- **Webhook registration** (#558, #559) — persist two-phase webhook registration state before provider callbacks, support plaintext validation echoes, and avoid replacing pending webhook state while an existing webhook remains fresh.
+
 ## [3.13.0] - 2026-09-05
 
 ### Added

manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.2",
   "name": "daftari",
-  "version": "3.13.0",
+  "version": "3.13.1",
   "display_name": "Daftari",
   "description": "A persistent cortex Claude reads, writes, and curates over time.",
   "long_description": "An external cortex for AI agents: a persistent markdown vault that agents read, write, and curate over time. Plain text on disk, git-versioned, indexed for BM25 + vector search. Agents promote drafts to canonical knowledge, surface contradictions as tensions, and lint for staleness. Runs offline by default.",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "daftari",
-  "version": "3.13.0",
+  "version": "3.13.1",
   "description": "An open-source, multi-user knowledge vault exposed to AI agents via an MCP server.",
   "mcpName": "io.github.mavaali/daftari",
   "license": "MIT",