@iamem/amem 0.1.0 → 0.1.1

package/dist/api/routes.js

@@ -9,6 +9,7 @@ import { installClaude, claudeInstallHealth } from "../install/claude.js";
 import { installCursor, cursorInstallHealth } from "../install/cursor.js";
 import { hostInstallHealth, installHost } from "../install/hosts.js";
 import { decorateDraft, decorateDrafts } from "../draft-quality.js";
+import { isUsefulRememberText } from "../capture.js";
 import { buildSavingsExport, formatSavingsMarkdown, savingsPdf, } from "../savings-export.js";
 import { assertPlatformAllowed, assertRemoteAllowed, loadPolicy, } from "../policy.js";
 import { applyProposal, applySupersedes, parseProposalJson, validateProposal } from "../proposal.js";
@@ -412,6 +413,9 @@ function runRemember(repo, body) {
     const text = bodyField(body, "text");
     if (!text)
         return err(400, "text required");
+    if (!isUsefulRememberText(text)) {
+        return err(400, "text too trivial or secret-like — remember a durable fact with context");
+    }
     const kind = bodyField(body, "kind") ?? "session";
     const id = bodyField(body, "id") ??
         `claim.remember_${createHash("sha256").update(text).digest("hex").slice(0, 12)}`;

package/dist/capture.d.ts

@@ -1,6 +1,9 @@
 import { type ProposalDraftRow, type RepoRow, type UsageEventRow } from "./db.js";
 import { type Proposal } from "./proposal.js";
+/** Reject empty / chat-noise / secret-like text before it becomes a claim. */
 export declare function isUsefulCaptureText(text: string): boolean;
+/** Same guard for explicit amem_remember / API writes (including short “test”). */
+export declare function isUsefulRememberText(text: string): boolean;
 export declare function extractCaptureAnchors(text: string, repoRoot: string): string[];
 /** High-quality durable facts apply without waiting for amem_remember. */
 export declare function shouldAutoApplyProposal(proposal: Proposal): boolean;

package/dist/capture.js

@@ -8,9 +8,10 @@ import { applyProposal } from "./proposal.js";
 import { scoreProposal } from "./draft-quality.js";
 import { tokenJaccard } from "./search.js";
 import { isAutoApplyAll } from "./prefs.js";
-const TRIVIAL = /^(ok|okay|yes|yep|no|nah|thanks|thank you|continue|go ahead|sure|please)\.?$/i;
+const TRIVIAL = /^(ok|okay|yes|yep|no|nah|thanks|thank you|continue|go ahead|sure|please|test|testing|hello|hi|hey|ping|asdf|foo|bar)\.?$/i;
 const SECRET = /password|api[_-]?key|secret|token\s*[:=]|begin (rsa |openssh )?private/i;
 const PATH_RE = /\b(?:[\w.-]+\/)*[\w.-]+\.(?:ts|tsx|js|jsx|mjs|cjs|py|go|rs|md|json|yml|yaml|sql)\b/g;
+/** Reject empty / chat-noise / secret-like text before it becomes a claim. */
 export function isUsefulCaptureText(text) {
     const t = text.trim();
     if (t.length < 16)
@@ -21,6 +22,19 @@ export function isUsefulCaptureText(text) {
         return false;
     return true;
 }
+/** Same guard for explicit amem_remember / API writes (including short “test”). */
+export function isUsefulRememberText(text) {
+    const t = text.trim();
+    if (!t)
+        return false;
+    if (TRIVIAL.test(t))
+        return false;
+    if (t.length < 8)
+        return false;
+    if (SECRET.test(t))
+        return false;
+    return true;
+}
 export function extractCaptureAnchors(text, repoRoot) {
     const found = [...text.matchAll(PATH_RE)].map((m) => m[0]);
     const unique = [...new Set(found)].slice(0, 6);

package/dist/hygiene.d.ts

@@ -23,9 +23,18 @@ export type HygienePreview = {
     /** Estimated active count after decay + merge */
     afterCleanup: number;
     softPaywall: boolean;
+    /** Active claims with kind=session (chat noise indicator). */
+    sessionCount: number;
+    /** sessionCount / active, 0 when empty. */
+    sessionRatio: number;
 };
 export declare const SOFT_PAYWALL_FACTS = 200;
 export declare const SOFT_PAYWALL_NOISE = 15;
+/** Soft-paywall when session chat takeaways dominate the graph. */
+export declare const SOFT_PAYWALL_SESSION_RATIO = 0.55;
+export declare const SOFT_PAYWALL_SESSION_MIN = 25;
+/** Unused unpinned session claims become decay candidates sooner than durable kinds. */
+export declare const SESSION_UNUSED_DAYS = 14;
 /** Free: counts only for soft paywall / banners. Never applies changes. */
 export declare function hygienePreview(repoId: string, unusedDays?: number): HygienePreview;
 /** Aggregate preview across all tracked repos (for All memory scope). */

package/dist/hygiene.js

@@ -10,6 +10,11 @@ import { tokenJaccard } from "./search.js";
 import { parseAnchors } from "./freshness.js";
 export const SOFT_PAYWALL_FACTS = 200;
 export const SOFT_PAYWALL_NOISE = 15;
+/** Soft-paywall when session chat takeaways dominate the graph. */
+export const SOFT_PAYWALL_SESSION_RATIO = 0.55;
+export const SOFT_PAYWALL_SESSION_MIN = 25;
+/** Unused unpinned session claims become decay candidates sooner than durable kinds. */
+export const SESSION_UNUSED_DAYS = 14;
 function usedClaimIds(repoId, days) {
     const ids = new Set();
     for (const event of listUsageEvents({ repoId, days })) {
@@ -29,14 +34,24 @@ function usedClaimIds(repoId, days) {
 function computeHygiene(repoId, unusedDays = 90) {
     const claims = listClaims(repoId);
     const used = usedClaimIds(repoId, unusedDays);
+    const usedSessions = usedClaimIds(repoId, SESSION_UNUSED_DAYS);
     const cutoff = Date.now() - unusedDays * 86_400_000;
+    const sessionCutoff = Date.now() - SESSION_UNUSED_DAYS * 86_400_000;
     const stale = claims.filter((c) => {
         if (Number(c.pinned || 0) > 0)
             return false;
+        const updated = Date.parse(c.updated_at);
+        if (!Number.isFinite(updated))
+            return false;
+        const isSession = (c.kind || "").toLowerCase() === "session";
+        if (isSession) {
+            if (usedSessions.has(c.id))
+                return false;
+            return updated < sessionCutoff;
+        }
         if (used.has(c.id))
             return false;
-        const updated = Date.parse(c.updated_at);
-        return Number.isFinite(updated) && updated < cutoff;
+        return updated < cutoff;
     });
     const duplicates = [];
     for (let i = 0; i < claims.length; i++) {
@@ -63,16 +78,40 @@ function computeHygiene(repoId, unusedDays = 90) {
         active: claims.length,
     };
 }
+function sessionStats(repoId) {
+    const claims = listClaims(repoId);
+    const active = claims.length;
+    const sessionCount = claims.filter((c) => (c.kind || "").toLowerCase() === "session").length;
+    const sessionRatio = active > 0 ? sessionCount / active : 0;
+    return { sessionCount, sessionRatio, active };
+}
+function softPaywallFrom(preview) {
+    if (hasFeature(FEATURE_HYGIENE))
+        return false;
+    const noise = preview.staleCount + preview.duplicateCount;
+    if (preview.active >= SOFT_PAYWALL_FACTS || noise >= SOFT_PAYWALL_NOISE)
+        return true;
+    if (preview.sessionCount >= SOFT_PAYWALL_SESSION_MIN &&
+        preview.sessionRatio >= SOFT_PAYWALL_SESSION_RATIO) {
+        return true;
+    }
+    return false;
+}
 /** Free: counts only for soft paywall / banners. Never applies changes. */
 export function hygienePreview(repoId, unusedDays = 90) {
     const report = computeHygiene(repoId, unusedDays);
+    const { sessionCount, sessionRatio } = sessionStats(repoId);
     const staleCount = report.stale.length;
     const duplicateCount = report.duplicates.length;
     const removable = Math.min(report.active, staleCount + duplicateCount);
     const afterCleanup = Math.max(0, report.active - removable);
-    const thresholdHit = report.active >= SOFT_PAYWALL_FACTS || staleCount + duplicateCount >= SOFT_PAYWALL_NOISE;
-    // Paid (hygiene unlocked) — never surface an unpaid soft-paywall signal.
-    const softPaywall = thresholdHit && !hasFeature(FEATURE_HYGIENE);
+    const softPaywall = softPaywallFrom({
+        active: report.active,
+        staleCount,
+        duplicateCount,
+        sessionCount,
+        sessionRatio,
+    });
     return {
         active: report.active,
         staleCount,
@@ -80,6 +119,8 @@ export function hygienePreview(repoId, unusedDays = 90) {
         pendingDrafts: report.pendingDrafts,
         afterCleanup,
         softPaywall,
+        sessionCount,
+        sessionRatio,
     };
 }
 /** Aggregate preview across all tracked repos (for All memory scope). */
@@ -88,18 +129,35 @@ export function hygienePreviewAll(unusedDays = 90) {
     let staleCount = 0;
     let duplicateCount = 0;
     let pendingDrafts = 0;
+    let sessionCount = 0;
     for (const repo of listRepos()) {
         const p = hygienePreview(repo.id, unusedDays);
         active += p.active;
         staleCount += p.staleCount;
         duplicateCount += p.duplicateCount;
         pendingDrafts += p.pendingDrafts;
+        sessionCount += p.sessionCount;
     }
     const removable = Math.min(active, staleCount + duplicateCount);
     const afterCleanup = Math.max(0, active - removable);
-    const thresholdHit = active >= SOFT_PAYWALL_FACTS || staleCount + duplicateCount >= SOFT_PAYWALL_NOISE;
-    const softPaywall = thresholdHit && !hasFeature(FEATURE_HYGIENE);
-    return { active, staleCount, duplicateCount, pendingDrafts, afterCleanup, softPaywall };
+    const sessionRatio = active > 0 ? sessionCount / active : 0;
+    const softPaywall = softPaywallFrom({
+        active,
+        staleCount,
+        duplicateCount,
+        sessionCount,
+        sessionRatio,
+    });
+    return {
+        active,
+        staleCount,
+        duplicateCount,
+        pendingDrafts,
+        afterCleanup,
+        softPaywall,
+        sessionCount,
+        sessionRatio,
+    };
 }
 export function hygieneReport(repoId, unusedDays = 90) {
     requireFeature(FEATURE_HYGIENE, "Memory hygiene");

package/docs/backlog.md

@@ -37,16 +37,16 @@ Updated after completing the Feature Map **Later** phase (local embedding model
 
 ## Open
 
-- First npm publish of `@iamem/amem` (org `@iamem` already exists; need valid `NPM_TOKEN` / `npm login`, then tag `v0.1.0` or `npm publish --access public`).
 - Prompt-pack before/after Stats benchmark; restore wizard polish; IT seat pack.
 - Decide one-time vs subscription (offline files cannot revoke on cancel unless you add `expires_at` and re-issue).
 - Optional vendored ONNX/MiniLM weights in a paid pack (external command is the local hook today).
+- Move CI publish to npm Trusted Publishing (OIDC) before Jan 2027 GAT bypass-2FA publish sunset.
 
 ## Shipped (go-to-market / upsell)
 
 - Public Checkout at **getamem.com** (tryamem redirects); Stripe live webhook.
 - Mailtrap **live send** (`MAILTRAP_USE_TESTING=false`); thank-you download still works if mail fails.
-- Package renamed to `@iamem/amem` (CLI binary still `amem`); shop install copy updated.
+- **`@iamem/amem@0.1.0` on npm** — `npx @iamem/amem setup` / `npm i -g @iamem/amem` (CLI binary `amem`).
 - UI **Apply license** (paste/drop) + **Turn on Pro retrieval** checklist.
 - Memory **retrieval showdown** (free hash vs Pro n-gram) + top-bar **Try retrieval**.
 - Remember-contract guidance: prefer durable kinds; avoid `session` spam.

package/docs/enterprise-endpoint.md

@@ -30,7 +30,7 @@ The pack includes deny-by-default `policy.toml`, an MDM plist stub, `mdm-offboar
 
 ## Install (DevEx / IT)
 
-1. Ship a pinned amem build (internal npm, pkg, or `npm link` from a mirrored clone). Node 20+ required (`better-sqlite3`).
+1. Ship a pinned amem build: `npm i -g @iamem/amem` (or internal mirror / pkg). Node 20+ required (`better-sqlite3` prebuilds on common macOS/Linux).
 2. Deploy policy:
 
 ```bash
@@ -78,6 +78,7 @@ That is not a remote public API:
 - Nothing in `~/.amem` is uploaded or synced.
 - Binding is loopback-only — LAN/WAN clients cannot reach the UI by default.
 - Treat any process on the same machine as potentially able to call `127.0.0.1:7843` while the UI is running (same as any local MCP server).
+- Do not expose the UI on a non-loopback bind; policy forces loopback. Tightening `Access-Control-Allow-Origin` to specific Origins is optional and can break some MCP hosts — leave `*` unless you control every client Origin.
 
 ## Offboarding
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iamem/amem",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Local personal agent memory for Cursor and Claude Code. Private to your machine — never shared.",
   "type": "module",
   "bin": {

package/ui-static/app.js

@@ -320,6 +320,8 @@ function writeUrlState() {
 
 function setTab(tab) {
   if (tab === "stats") tab = "analytics";
+  // Paid licenses: Plans is a sell page — don't open it; Setup still has Apply license.
+  if (tab === "welcome" && isPaidLicense()) tab = "dashboard";
   if (tab === "brain") {
     state.brainAll = true;
     persistBrainAll(true);
@@ -405,6 +407,7 @@ async function refreshVault() {
   } catch {
     state.license = state.status?.license || null;
   }
+  paintPlansNavVisibility(isPaidLicense());
   try {
     state.embed = await apiUnscoped("/api/embed");
   } catch {
@@ -1051,9 +1054,17 @@ function isPaidLicense() {
   const tier = String(state.license?.tier || state.status?.license?.tier || "free").toLowerCase();
   const paid = state.license?.valid !== false && (tier === "pro" || tier === "it");
   if (paid) persistLicenseTier(tier);
+  paintPlansNavVisibility(paid);
   return paid;
 }
 
+/** Paid users don't need the Plans sell tab in the sidebar (Setup still has Apply license). */
+function paintPlansNavVisibility(paid) {
+  const btn = document.querySelector('#tabs button[data-tab="welcome"]');
+  if (!btn) return;
+  btn.classList.toggle("hidden", Boolean(paid));
+}
+
 function licenseApplyHtml(idPrefix = "lic") {
   return `
     <div class="license-apply" id="${idPrefix}ApplyBox">
@@ -2098,14 +2109,20 @@ async function loadSoftPaywall() {
       return;
     }
     const noise = (preview.staleCount || 0) + (preview.duplicateCount || 0);
+    const sessions = Number(preview.sessionCount || 0);
+    const ratio = Number(preview.sessionRatio || 0);
+    const sessionHeavy = sessions >= 25 && ratio >= 0.55;
     const shop = state.shop || {};
     const proUrl = shop.proUrl || "https://getamem.com/buy/pro";
     el.classList.remove("hidden");
+    const why = sessionHeavy
+      ? `${preview.active} facts · <b>${Math.round(ratio * 100)}%</b> are short-lived <code>session</code> kinds (~${sessions}). Free preview → Pro applies Cleanup to archive unused sessions.`
+      : `${preview.active} facts · ~${noise} unused/duplicates → about <b>${preview.afterCleanup}</b> after cleanup. Free still works — this is optional.`;
     el.innerHTML = `
       <div class="soft-paywall-inner">
         <div>
-          <strong>Pro can clean this</strong>
-          <p class="note" style="margin:0.25rem 0 0">${preview.active} facts · ~${noise} unused/duplicates → about <b>${preview.afterCleanup}</b> after cleanup. Free still works — this is optional.</p>
+          <strong>${sessionHeavy ? "Session noise is crowding retrieval" : "Pro can clean this"}</strong>
+          <p class="note" style="margin:0.25rem 0 0">${why}</p>
         </div>
         <div class="soft-paywall-actions">
           <a class="btn small" href="${esc(proUrl)}" target="_blank" rel="noopener">Buy Pro · Apply cleanup</a>
@@ -3810,7 +3827,7 @@ async function render() {
 document.querySelectorAll("#tabs button[data-tab]").forEach((b) => {
   b.addEventListener("click", () => setTab(b.dataset.tab));
 });
-$("#brandBtn")?.addEventListener("click", () => setTab("welcome"));
+$("#brandBtn")?.addEventListener("click", () => setTab(isPaidLicense() ? "dashboard" : "welcome"));
 
 $("#brainSearch")?.addEventListener("input", (e) => {
   if (state.tab !== "brain") return;

package/ui-static/styles.css

@@ -1306,6 +1306,10 @@ a.btn {
   display: none;
 }
 
+.side-tabs button.hidden {
+  display: none !important;
+}
+
 .hidden {
   display: none !important;
 }