@log0u7/opencode-memory 0.2.0 → 0.4.0

package/CHANGELOG.md

@@ -5,7 +5,110 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.4.0] - 2026-10-14
+
+### Added
+
+- Lesson feedback loop: the system guidance and the compaction prompt now nudge the agent
+  to save reusable lessons (`kind=lesson`), and lessons are injected first in later
+  sessions' inventory, ahead of recency noise (`store.list` gained an optional `kind`
+  filter).
+- Optional LLM reflection at `session.idle`, off by default: with
+  `reflection.enabled: true` in the plugin options, the plugin distills at most
+  `maxLessons` durable lessons from the bounded session tail with one LLM call per
+  session and saves them as lessons. Options: `model` (`"provider/model"`), `maxLessons`
+  (3), `transcriptChars` (8000), `timeoutMs` (60000). Subagent sessions are skipped and the
+  run is best-effort: failures are silent.
+
+- New `memory_stats` tool (both hosts): counts entries by kind for the project scope
+  (plus global) with a total, so the model can see how much memory exists, including
+  how many lessons reflection has written, without paging through `memory_list`.
+
+### Changed
+
+- `pnpm verify` (and therefore CI) now runs the suite with coverage, so the coverage gate
+  the docs promise (90% lines/functions/statements, 80% branches) is actually enforced
+  instead of only configured.
+
+### Fixed
+
+- The store database is created with restrictive permissions: the file is `0600`
+  (enforced on every open, regardless of the process umask, so databases created earlier
+  with a permissive umask are tightened too) and the directory is `0700` when the plugin
+  creates it, as `SECURITY.md` already promised.
+- Secret detection now also refuses JWTs, PEM private key blocks, AWS access key ids,
+  GitLab personal access tokens, Google API keys, and Slack user/app tokens, in addition
+  to the existing OpenAI, GitHub, and Slack bot formats.
+- `memory_forget` by id now deletes across scopes: ids are globally unique, so an exact
+  id match is precise anywhere, and closed worktrees stay cleanable from any project.
+  Query deletes keep the scope lock (a fuzzy match must never silently hit other
+  projects).
+- Reflection no longer permanently skips a session whose first `session.idle` arrived
+  before the transcript reached the distillation floor: the session is marked reflected
+  only once a run is actually attempted, so a later, longer turn still gets exactly one
+  reflection.
+- The README safety-limits note on `memory_forget` now matches the code: query deletes
+  stay in scope, id deletes are global.
+- Reflection's LLM call is now bounded by a timeout (`reflection.timeoutMs`, default 60s):
+  a hung provider no longer wedges a session forever, and the abort reaches the SDK so the
+  v1 host still deletes its ephemeral child session.
+- The v2 event stream now reconnects with a capped backoff after an error instead of
+  silently ending the reflection loop for good.
+- After `dispose` (v1) or `cleanup` (v2), memory operations no longer reopen the SQLite
+  connection: a late tool call or in-flight reflection returns a readable error instead of
+  leaking a connection that nobody closes again.
+
+## [0.3.0] - 2026-10-14
+
+### Added
+
+- Deterministic injection: the first request of each session carries a bounded list of the
+  project's most recent entries (titles, kinds, dates, no bodies, ~1200 characters worst
+  case), so using memory no longer depends on the model remembering to call
+  `memory_search`. The tool stays for deeper lookups.
+- Compaction inventory: the compaction context now lists the stored entries next to the
+  save instruction, so the model summarises from an inventory instead of recall and stops
+  re-saving what is already stored.
+
+### Changed
+
+- Both plugin entry points (`server` for OpenCode 1, `setup` for OpenCode 2) now delegate
+  to one shared core (`src/lib/memory-ops.ts`): tool behaviour, error-to-text mapping,
+  caps and rendering live in a single place, and each host is thin SDK glue. No
+  behavioural change.
+- The system guidance no longer tells the model to search at task start (the injection
+  covers it); the credential warning and both tool mentions stay.
+- CONTRIBUTING.md states the merge-policy rationale instead of a solo-maintainer
+  preference: `--no-ff` keeps one merge commit per PR, which reads as the PR list via
+  `git log --merges --first-parent main` and is a single atomic revert unit, with a
+  five-commit PR ceiling bounding the cost. Documentation only, no package change.
+- `memory_save` rewrites an entry that repeats a scope and title instead of adding a
+  duplicate, which stopped the store from growing with every compaction.
+- Saving purges rows past their `expires_at` instead of only hiding them at query time.
+
+### Fixed
+
+- `memory_forget` by query or id could delete entries of other projects: deletes are now
+  scoped to the caller's scope (plus `global`), like `memory_search` and `memory_list`.
+- A model-supplied `limit` crashed `memory_search`/`memory_list` (fractional, `NaN`) or
+  returned the whole store (`-1`, which SQLite reads as unbounded). Limits are clamped to
+  1..50, and tool results are bounded: bodies render as 500-character previews.
+- A credential in an entry `title` or `kind` bypassed the secret guard; the scan now covers
+  title, kind, body and tags, and `kind` has a length cap.
+- Search returned nothing for partial queries (`"migration strategy"` found no entry
+  containing "migration", and `"migrat"` found nothing): a strict AND match is now retried
+  as a prefix OR match, and an empty query returns no results instead of failing.
+- The two plugin entry points defaulted to different scopes for the same project (v1 used
+  the session worktree, v2 the plugin directory) and disagreed about trailing slashes.
+  Both now derive one canonical scope key.
+- The published package could not be loaded by a Node host: `src/lib/sqlite.ts` called a
+  bare `require("node:sqlite")`, which is undefined in an ES module. The Node branch now
+  uses `createRequire(import.meta.url)`.
+
+### Removed
+
+- README advertised an FTS5 "recency boost" that the code never implemented; the actual
+  ranking (BM25, newest first on ties) is documented instead.
 
 ## [0.2.0] - 2026-10-12
 

package/README.md

@@ -8,7 +8,14 @@
 
 Working memory for [OpenCode](https://opencode.ai): a shared SQLite store that all sessions on a machine read and write, so decisions, facts, and compaction summaries survive session boundaries.
 
-Every session gets four tools (`memory_save`, `memory_search`, `memory_list`, `memory_forget`). Entries are scoped per project worktree (plus a `global` scope), searched with SQLite FTS5 (BM25 ranking with a recency boost). 100% local, no cloud, no API keys.
+Every session gets five tools (`memory_save`, `memory_search`, `memory_list`, `memory_forget`, `memory_stats`). Entries are scoped per project worktree (plus a `global` scope), searched with SQLite FTS5 (BM25 ranking, strict match first with a prefix fallback). Recent entries are also injected into the prompt: once per session, and again during compaction. 100% local, no cloud, no API keys.
+
+## Safety limits
+
+- Results are capped: at most 50 entries per call, and each body is rendered as a 500-character preview. A tool result has a bounded size whatever the model asks for.
+- `memory_save` rewrites an entry that repeats a scope and title instead of stacking duplicates, and purges expired rows.
+- `memory_forget` by query only deletes inside the caller's scope (plus the shared `global` scope); by id it deletes the entry wherever it lives, since ids are globally unique.
+- Entries that look like secrets (`sk-…`, `ghp_…`, `xoxb-…`) are refused, in the title, kind, body and tags alike.
 
 ## Install
 
@@ -41,6 +48,7 @@ memory_save(kind="decision", title="Use WAL mode", body="...", tags=["db"])
 memory_search("postgres migration strategy")
 memory_list()
 memory_forget(id="...")
+memory_stats()
 ```
 
 ### Tools
@@ -48,17 +56,40 @@ memory_forget(id="...")
 | Tool | Args | Description |
 |---|---|---|
 | `memory_save` | `kind`, `title`, `body`, `scope?`, `tags?`, `expires_at?` | Save an entry. Default scope is the session worktree. |
-| `memory_search` | `query`, `scope?`, `limit?` | Hybrid search: FTS5 BM25 + recency boost. |
+| `memory_search` | `query`, `scope?`, `limit?` | FTS5 BM25 search; strict match first, prefix OR fallback when nothing matches. |
 | `memory_list` | `scope?`, `limit?` | Recent entries, newest first. |
 | `memory_forget` | `id` or `query` | Delete one entry by id, or all matching a query. |
+| `memory_stats` | `scope?` | Count entries by kind (plus global) with a total; checks how much memory exists. |
+
+Entry `kind` is free-form; conventions that work well: `decision`, `fact`, `preference`, `gotcha`, `lesson`, `compaction`.
+
+### Feedback loop
+
+The agent is nudged to write memory itself: the system prompt asks for durable decisions, facts, preferences and gotchas as they emerge, and the compaction prompt repeats the instruction next to the store inventory. Reusable lessons (`kind=lesson`: a non-obvious approach that clearly failed or succeeded, and why) are injected first in later sessions, so known mistakes are not retried.
+
+Optional LLM reflection, off by default: on `session.idle` the plugin sends the last `transcriptChars` of the session to one bounded LLM call and saves at most `maxLessons` distilled lessons through the same store (the secret guard applies). Subagent sessions are skipped and at most one reflection runs per session.
+
+```json
+{
+  "plugin": [
+    ["@log0u7/opencode-memory", { "reflection": { "enabled": true } }]
+  ]
+}
+```
+
+Options: `enabled` (default `false`), `model` (`"provider/model"`, default: the host's model), `maxLessons` (default 3, cap 10), `transcriptChars` (default 8000).
 
-Entry `kind` is free-form; conventions that work well: `decision`, `fact`, `preference`, `gotcha`, `compaction`.
+Cost per reflection: ~2k input tokens (the bounded transcript) and at most ~300 output tokens, at most once per session: roughly $0.001 with a small model, $0.01 with a frontier model (indicative). The nudges and injections are plain text: they cost nothing.
 
 ### Notes
 
 - All sessions on the machine share one store (WAL mode, concurrent-safe).
-- Entries that look like secrets (`sk-…`, `ghp_…`, `xoxb-…`) are refused.
-- On session compaction, the plugin asks the compaction prompt to emit durable decisions so the model can persist them.
+- Entries that look like secrets (`sk-…`, `ghp_…`, `xoxb-…`) are refused, in the title, kind, body and tags.
+- Every repeated `memory_save` of the same title in the same scope rewrites the entry, so the store does not grow with duplicates, and expired rows are purged on save.
+- `memory_forget` by query never leaves the scope it is called from, so a project cannot fuzzily delete another project's entries; by id it deletes anywhere (ids are globally unique), which keeps closed worktrees cleanable.
+- On the first request of a session, the most recent entries are injected into the system prompt as a bounded list (titles only), so the model does not have to remember to search. `memory_search` remains the tool for deeper lookups.
+- On session compaction, the plugin lists the stored entries in the compaction context and asks the compaction prompt to emit durable decisions, so the model summarises from an inventory instead of recall.
+- Injections stay bounded (~1200 characters worst case) and nothing is injected, nor any store file created, when memory is unused.
 
 ## Development
 

package/dist/lib/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/lib/db.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AA8BF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAWnD"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/lib/db.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAsCF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CA2BnD"}

package/dist/lib/db.js

@@ -1,4 +1,4 @@
-import { mkdirSync } from "node:fs";
+import { chmodSync, mkdirSync } from "node:fs";
 import { dirname } from "node:path";
 import { openSqlite } from "./sqlite.js";
 const SCHEMA = `
@@ -27,15 +27,38 @@ CREATE TRIGGER IF NOT EXISTS entries_au AFTER UPDATE ON entries BEGIN
   INSERT INTO entries_fts(entries_fts, rowid, title, body, tags) VALUES ('delete', old.rowid, old.title, old.body, old.tags);
   INSERT INTO entries_fts(rowid, title, body, tags) VALUES (new.rowid, new.title, new.body, new.tags);
 END;
+CREATE INDEX IF NOT EXISTS entries_scope_title ON entries(scope, lower(trim(title)));
 `;
+// SECURITY.md promises restrictive permissions whatever the user's umask is, so the
+// directory and files are mode-enforced explicitly instead of left to the umask.
+// POSIX only: chmodSync on Windows flips a read-only bit, which would corrupt usage.
+// Directories the plugin did not create are left to their owner: the db file is
+// 0600 anyway, so a loose parent only leaks file names.
+const POSIX = process.platform !== "win32";
 export function openMemoryDb(path) {
     if (path !== ":memory:") {
-        mkdirSync(dirname(path), { recursive: true });
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
     }
     const conn = openSqlite(path);
     conn.run("PRAGMA journal_mode = WAL");
     conn.run("PRAGMA busy_timeout = 5000");
     conn.exec(SCHEMA);
+    if (POSIX && path !== ":memory:") {
+        // Also fixes databases created earlier with a permissive umask.
+        chmodSync(path, 0o600);
+        for (const suffix of ["-wal", "-shm"]) {
+            try {
+                chmodSync(`${path}${suffix}`, 0o600);
+            }
+            catch (error) {
+                // Only tolerate a sidecar that is not written yet (or already
+                // checkpointed away); anything else is a real failure.
+                if (error.code !== "ENOENT") {
+                    throw error;
+                }
+            }
+        }
+    }
     return { conn, close: () => conn.close() };
 }
 //# sourceMappingURL=db.js.map

package/dist/lib/db.js.map

@@ -1 +1 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/lib/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAO1D,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;CA0Bd,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAElB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/lib/db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAO1D,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2Bd,CAAC;AAEF,oFAAoF;AACpF,iFAAiF;AACjF,qFAAqF;AACrF,gFAAgF;AAChF,wDAAwD;AACxD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE3C,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAElB,IAAI,KAAK,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACjC,gEAAgE;QAChE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,IAAI,GAAG,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,8DAA8D;gBAC9D,uDAAuD;gBACvD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACvD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;AAC7C,CAAC"}

package/dist/lib/memory-ops.d.ts

@@ -0,0 +1,58 @@
+import type { MemoryDb } from "./db.js";
+export type SaveArgs = {
+    kind: string;
+    title: string;
+    body: string;
+    tags?: string[] | undefined;
+    expires_at?: number | null | undefined;
+};
+export type SearchArgs = {
+    query: string;
+    limit?: number | undefined;
+};
+export type ListArgs = {
+    limit?: number | undefined;
+};
+export type ForgetArgs = {
+    id?: string | undefined;
+    query?: string | undefined;
+};
+/** One shared behaviour behind both plugin entry points. Every operation returns the
+ * model-facing text directly, so a caller cannot bypass caps or error handling. */
+export type MemoryOps = {
+    save: (args: SaveArgs, scope: string) => string;
+    search: (args: SearchArgs, scope: string) => string;
+    list: (args: ListArgs, scope: string) => string;
+    forget: (args: ForgetArgs, scope: string) => string;
+    stats: (scope: string) => string;
+};
+export declare function createMemoryOps(getDb: () => MemoryDb): MemoryOps;
+/** How much of the store is summarised into a prompt, worst case. */
+export declare const INVENTORY_MAX_CHARS = 1200;
+/** Tool descriptions shared by both entry points so the two hosts cannot drift. */
+export declare const TOOL_DESCRIPTIONS: {
+    readonly save: "Save a durable entry to shared working memory (decisions, facts, preferences, gotchas, lessons). Never store credentials.";
+    readonly search: "Search shared working memory (all sessions on this machine). Results include this project's scope and global entries.";
+    readonly list: "List recent memory entries for a scope (default: this project), newest first.";
+    readonly forget: "Delete memory entries by id (any scope: ids are globally unique), or all entries matching a query. Query deletes stay inside this project's scope (plus global entries); an entry saved under another scope needs its id, or that scope, to be removed.";
+    readonly stats: "Count memory entries by kind for this project (plus global entries), with a total. Use it to see how much memory already exists, for example how many lessons reflection has written.";
+};
+/**
+ * Produces at most one injection per session key, and only on the first request where
+ * the producer has something: a session that starts before any entry exists still gets
+ * its inventory as soon as one is available. Keys are capped so a long-lived host
+ * cannot grow the set forever; an absent sessionID (v1 marks it optional) degrades to
+ * one injection per plugin instance, never per request.
+ */
+export declare function oncePerSession(): {
+    inject: (key: string | undefined, produce: () => string | null) => string | null;
+    reset: () => void;
+};
+/**
+ * Bounded summary of recent entries, injected into the first request of a session and
+ * into the compaction context. Lessons are promoted above recency noise so a stored
+ * lesson survives a chatty store. `null` when there is nothing worth injecting, so a
+ * caller pushes nothing at all.
+ */
+export declare function memoryInventory(getDb: () => MemoryDb, dbPath: string, scope: string): string | null;
+//# sourceMappingURL=memory-ops.d.ts.map

package/dist/lib/memory-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-ops.d.ts","sourceRoot":"","sources":["../../src/lib/memory-ops.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKxC,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxC,CAAC;AACF,MAAM,MAAM,UAAU,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACvE,MAAM,MAAM,QAAQ,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjF;mFACmF;AACnF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAClC,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,QAAQ,GAAG,SAAS,CAqDhE;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAIxC,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;aAC5B,IAAI,EAAE,2HAA2H;aACjI,MAAM,EACJ,uHAAuH;aACzH,IAAI,EAAE,+EAA+E;aACrF,MAAM,EACJ,yPAAyP;aAC3P,KAAK,EACH,uLAAuL;CACjL,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,cAAc;kBAGP,MAAM,GAAG,SAAS,WAAW,MAAM,MAAM,GAAG,IAAI,KAAG,MAAM,GAAG,IAAI;;EAgBtF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,IAAI,CAyBf"}

package/dist/lib/memory-ops.js

@@ -0,0 +1,138 @@
+import { existsSync } from "node:fs";
+import { forget, list, renderEntries, save, search, SecretDetectedError, stats } from "./store.js";
+export function createMemoryOps(getDb) {
+    return {
+        save: (args, scope) => run(() => {
+            const entry = save(getDb(), {
+                scope,
+                kind: args.kind,
+                title: args.title,
+                body: args.body,
+                tags: args.tags ?? [],
+                expires_at: args.expires_at ?? null,
+            });
+            return `saved ${entry.id} (${entry.scope})`;
+        }),
+        search: (args, scope) => run(() => {
+            const hits = search(getDb(), {
+                query: args.query,
+                scope,
+                ...(args.limit !== undefined ? { limit: args.limit } : {}),
+            });
+            return hits.length === 0 ? "no matching memory entries" : renderEntries(hits);
+        }),
+        list: (args, scope) => run(() => {
+            const entries = list(getDb(), {
+                scope,
+                ...(args.limit !== undefined ? { limit: args.limit } : {}),
+            });
+            return entries.length === 0 ? "no memory entries" : renderEntries(entries);
+        }),
+        forget: (args, scope) => run(() => {
+            if (args.id !== undefined) {
+                const deleted = forget(getDb(), { id: args.id, scope });
+                return `deleted ${deleted} entr${deleted === 1 ? "y" : "ies"}`;
+            }
+            if (args.query !== undefined) {
+                const deleted = forget(getDb(), { query: args.query, scope });
+                return `deleted ${deleted} entr${deleted === 1 ? "y" : "ies"}`;
+            }
+            return "provide id or query";
+        }),
+        stats: (scope) => run(() => {
+            const counts = stats(getDb(), { scope });
+            if (counts.length === 0) {
+                return "no memory entries";
+            }
+            const total = counts.reduce((sum, row) => sum + row.count, 0);
+            return `${counts.map((row) => `${row.kind}: ${row.count}`).join(", ")}, total: ${total}`;
+        }),
+    };
+}
+/** How much of the store is summarised into a prompt, worst case. */
+export const INVENTORY_MAX_CHARS = 1200;
+const INVENTORY_HEADER = "Memory already stored for this project (lessons first, then newest):";
+/** Tool descriptions shared by both entry points so the two hosts cannot drift. */
+export const TOOL_DESCRIPTIONS = {
+    save: "Save a durable entry to shared working memory (decisions, facts, preferences, gotchas, lessons). Never store credentials.",
+    search: "Search shared working memory (all sessions on this machine). Results include this project's scope and global entries.",
+    list: "List recent memory entries for a scope (default: this project), newest first.",
+    forget: "Delete memory entries by id (any scope: ids are globally unique), or all entries matching a query. Query deletes stay inside this project's scope (plus global entries); an entry saved under another scope needs its id, or that scope, to be removed.",
+    stats: "Count memory entries by kind for this project (plus global entries), with a total. Use it to see how much memory already exists, for example how many lessons reflection has written.",
+};
+/**
+ * Produces at most one injection per session key, and only on the first request where
+ * the producer has something: a session that starts before any entry exists still gets
+ * its inventory as soon as one is available. Keys are capped so a long-lived host
+ * cannot grow the set forever; an absent sessionID (v1 marks it optional) degrades to
+ * one injection per plugin instance, never per request.
+ */
+export function oncePerSession() {
+    const seen = new Set();
+    const MAX_KEYS = 512;
+    const inject = (key, produce) => {
+        const k = key ?? "__instance__";
+        if (seen.has(k)) {
+            return null;
+        }
+        const produced = produce();
+        if (produced === null) {
+            return null;
+        }
+        seen.add(k);
+        if (seen.size > MAX_KEYS) {
+            seen.clear();
+        }
+        return produced;
+    };
+    return { inject, reset: () => seen.clear() };
+}
+/**
+ * Bounded summary of recent entries, injected into the first request of a session and
+ * into the compaction context. Lessons are promoted above recency noise so a stored
+ * lesson survives a chatty store. `null` when there is nothing worth injecting, so a
+ * caller pushes nothing at all.
+ */
+export function memoryInventory(getDb, dbPath, scope) {
+    if (!existsSync(dbPath)) {
+        return null;
+    }
+    const lessons = list(getDb(), { scope, limit: 50, kind: "lesson" });
+    const others = list(getDb(), { scope, limit: 50 });
+    if (lessons.length === 0 && others.length === 0) {
+        return null;
+    }
+    const seen = new Set(lessons.map((entry) => entry.id));
+    const ordered = [...lessons, ...others.filter((entry) => !seen.has(entry.id))];
+    const lines = [INVENTORY_HEADER];
+    let size = INVENTORY_HEADER.length;
+    for (const entry of ordered) {
+        const line = `- [${entry.kind}] ${entry.title} (updated ${dayOf(entry.updated_at)})`;
+        if (size + line.length + 1 > INVENTORY_MAX_CHARS) {
+            break;
+        }
+        lines.push(line);
+        size += line.length + 1;
+    }
+    return lines.join("\n");
+}
+function dayOf(epochMs) {
+    return new Date(epochMs).toISOString().slice(0, 10);
+}
+// Tool results are shown to the model: caught errors become readable text, so a
+// rejected save is guidance instead of a crashed tool call.
+function run(fn) {
+    try {
+        return fn();
+    }
+    catch (error) {
+        if (error instanceof SecretDetectedError) {
+            return "refused: the content looks like a credential; secrets must never be stored in memory";
+        }
+        if (error instanceof Error) {
+            return `error: ${error.message}`;
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=memory-ops.js.map

package/dist/lib/memory-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-ops.js","sourceRoot":"","sources":["../../src/lib/memory-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAyBnG,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;aACpC,CAAC,CAAC;YACH,OAAO,SAAS,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC;QAC9C,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtB,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE;gBAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK;gBACL,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE;gBAC5B,KAAK;gBACL,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7E,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtB,GAAG,CAAC,GAAG,EAAE;YACP,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxD,OAAO,WAAW,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACjE,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,WAAW,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACjE,CAAC;YACD,OAAO,qBAAqB,CAAC;QAC/B,CAAC,CAAC;QACJ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,GAAG,CAAC,GAAG,EAAE;YACP,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,mBAAmB,CAAC;YAC7B,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9D,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;QAC3F,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,MAAM,gBAAgB,GAAG,sEAAsE,CAAC;AAEhG,mFAAmF;AACnF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,2HAA2H;IACjI,MAAM,EACJ,uHAAuH;IACzH,IAAI,EAAE,+EAA+E;IACrF,MAAM,EACJ,yPAAyP;IAC3P,KAAK,EACH,uLAAuL;CACjL,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAE,OAA4B,EAAiB,EAAE;QACtF,MAAM,CAAC,GAAG,GAAG,IAAI,cAAc,CAAC;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAqB,EACrB,MAAc,EACd,KAAa;IAEb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrF,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,mBAAmB,EAAE,CAAC;YACjD,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC5B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,4DAA4D;AAC5D,SAAS,GAAG,CAAC,EAAgB;IAC3B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,sFAAsF,CAAC;QAChG,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/reflection.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Optional end-of-turn reflection: distills durable lessons from a session tail with
+ * one bounded LLM call and saves them as `lesson` entries. Best-effort by design:
+ * a disabled config wires nothing, a failing run is swallowed, and each session is
+ * reflected at most once.
+ */
+export type ReflectionConfig = {
+    enabled: boolean;
+    model?: string | undefined;
+    maxLessons: number;
+    transcriptChars: number;
+    timeoutMs: number;
+};
+export type ReflectionDeps = {
+    isSubagent: (sessionID: string) => Promise<boolean>;
+    transcript: (sessionID: string) => Promise<string>;
+    generate: (prompt: string, sessionID: string, signal: AbortSignal) => Promise<string>;
+    saveLesson: (title: string, body: string) => void;
+};
+export declare function parseReflectionConfig(raw: unknown): ReflectionConfig | null;
+export declare function distillPrompt(transcript: string, maxLessons: number): string;
+export declare function parseLessons(text: string, max: number): Array<{
+    title: string;
+    body: string;
+}>;
+export declare function createReflection(config: ReflectionConfig, deps: ReflectionDeps): (sessionID: string | undefined) => void;
+//# sourceMappingURL=reflection.d.ts.map

package/dist/lib/reflection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflection.d.ts","sourceRoot":"","sources":["../../src/lib/reflection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnD,CAAC;AAcF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAyB3E;AASD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAU5E;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B9F;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,cAAc,GACnB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,KAAK,IAAI,CAoDzC"}

package/dist/lib/reflection.js

@@ -0,0 +1,130 @@
+/**
+ * Optional end-of-turn reflection: distills durable lessons from a session tail with
+ * one bounded LLM call and saves them as `lesson` entries. Best-effort by design:
+ * a disabled config wires nothing, a failing run is swallowed, and each session is
+ * reflected at most once.
+ */
+const MAX_LESSONS_DEFAULT = 3;
+const MAX_LESSONS_CAP = 10;
+const TRANSCRIPT_CHARS_DEFAULT = 8000;
+const TRANSCRIPT_CHARS_MIN = 500;
+const TRANSCRIPT_CHARS_MAX = 50000;
+const TIMEOUT_MS_DEFAULT = 60000;
+const TIMEOUT_MS_MIN = 1000;
+const TIMEOUT_MS_MAX = 600000;
+/** Below this much transcript there is nothing to distill; saves the LLM call. */
+const TRANSCRIPT_MIN_CHARS = 256;
+const MAX_TRACKED = 512;
+export function parseReflectionConfig(raw) {
+    if (raw === null || typeof raw !== "object" || raw.enabled !== true) {
+        return null;
+    }
+    const rawConfig = raw;
+    return {
+        enabled: true,
+        model: typeof rawConfig.model === "string" && rawConfig.model.includes("/")
+            ? rawConfig.model
+            : undefined,
+        maxLessons: clamp(rawConfig.maxLessons, 1, MAX_LESSONS_CAP, MAX_LESSONS_DEFAULT),
+        transcriptChars: clamp(rawConfig.transcriptChars, TRANSCRIPT_CHARS_MIN, TRANSCRIPT_CHARS_MAX, TRANSCRIPT_CHARS_DEFAULT),
+        timeoutMs: clamp(rawConfig.timeoutMs, TIMEOUT_MS_MIN, TIMEOUT_MS_MAX, TIMEOUT_MS_DEFAULT),
+    };
+}
+function clamp(value, min, max, fallback) {
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        return fallback;
+    }
+    return Math.min(max, Math.max(min, Math.round(value)));
+}
+export function distillPrompt(transcript, maxLessons) {
+    return (`You are the persistent-memory reflection for this project's OpenCode sessions. Below is the tail of one ` +
+        `coding session transcript. Extract at most ${maxLessons} durable, reusable lessons: non-obvious approaches ` +
+        `that clearly failed and why, non-obvious approaches that clearly worked and why, or constraints discovered ` +
+        `the hard way. Exclude anything trivially re-derivable from the code, anything session-specific, and any ` +
+        `credential. Reply with ONLY a JSON array, no markdown fences and no prose: ` +
+        `[{"title": "max 120 chars", "body": "the lesson, max 8000 chars"}]. Reply [] when nothing qualifies.\n\n` +
+        `SESSION TRANSCRIPT:\n${transcript}`);
+}
+export function parseLessons(text, max) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        const fenced = text
+            .replace(/^```(?:json)?/m, "")
+            .replace(/```$/m, "")
+            .trim();
+        try {
+            parsed = JSON.parse(fenced);
+        }
+        catch {
+            return [];
+        }
+    }
+    if (!Array.isArray(parsed)) {
+        return [];
+    }
+    const lessons = [];
+    for (const item of parsed.slice(0, max)) {
+        if (item === null || typeof item !== "object") {
+            continue;
+        }
+        const { title, body } = item;
+        if (typeof title !== "string" || typeof body !== "string" || !title.trim() || !body.trim()) {
+            continue;
+        }
+        lessons.push({ title: title.slice(0, 120), body: body.slice(0, 8000) });
+    }
+    return lessons;
+}
+export function createReflection(config, deps) {
+    const done = new Set();
+    const inFlight = new Set();
+    const run = async (sessionID) => {
+        // Only a session we actually tried to reflect is marked done. A too-short
+        // transcript leaves it unsettled, so a later, longer idle can still reflect it
+        // once: idle fires at the end of every turn, not once per session.
+        let settled = false;
+        try {
+            if (await deps.isSubagent(sessionID)) {
+                settled = true;
+                return;
+            }
+            const tail = (await deps.transcript(sessionID)).slice(-config.transcriptChars);
+            if (tail.length < Math.min(TRANSCRIPT_MIN_CHARS, config.transcriptChars)) {
+                return;
+            }
+            settled = true;
+            // Bound the LLM call: a hung provider must not wedge a session forever. The
+            // hosts forward this signal to the SDK, so the abort also unblocks their own
+            // cleanup (the v1 host deletes the ephemeral child session in its `finally`).
+            const reply = await deps.generate(distillPrompt(tail, config.maxLessons), sessionID, AbortSignal.timeout(config.timeoutMs));
+            for (const lesson of parseLessons(reply, config.maxLessons)) {
+                deps.saveLesson(lesson.title, lesson.body);
+            }
+        }
+        catch {
+            // Reflection is best-effort: never surface a failure to the host. A failed
+            // attempt still settles the session so a broken pipeline is not retried forever.
+            settled = true;
+        }
+        finally {
+            inFlight.delete(sessionID);
+            if (settled) {
+                done.add(sessionID);
+                if (done.size > MAX_TRACKED) {
+                    done.clear();
+                }
+            }
+        }
+    };
+    return (sessionID) => {
+        if (!sessionID || !config.enabled || done.has(sessionID) || inFlight.has(sessionID)) {
+            return;
+        }
+        inFlight.add(sessionID);
+        void run(sessionID);
+    };
+}
+//# sourceMappingURL=reflection.js.map

package/dist/lib/reflection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflection.js","sourceRoot":"","sources":["../../src/lib/reflection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiBH,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AACnC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,kFAAkF;AAClF,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAK,GAA6B,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAKjB,CAAC;IACF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,KAAK,EACH,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClE,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC;QAChF,eAAe,EAAE,KAAK,CACpB,SAAS,CAAC,eAAe,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,CACzB;QACD,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,UAAkB;IAClE,OAAO,CACL,0GAA0G;QAC1G,8CAA8C,UAAU,qDAAqD;QAC7G,6GAA6G;QAC7G,0GAA0G;QAC1G,6EAA6E;QAC7E,0GAA0G;QAC1G,wBAAwB,UAAU,EAAE,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAG,IAAI;aAChB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;aAC7B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,IAAI,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAA2C,EAAE,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAA2C,CAAC;QACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAwB,EACxB,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,GAAG,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;QACtC,0EAA0E;QAC1E,+EAA+E;QAC/E,mEAAmE;QACnE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,4EAA4E;YAC5E,6EAA6E;YAC7E,8EAA8E;YAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC/B,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EACtC,SAAS,EACT,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CACtC,CAAC;YACF,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,iFAAiF;YACjF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpB,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,SAAS,EAAE,EAAE;QACnB,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/lib/sqlite.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IACvD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC5D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;CACf;AAqED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAanD"}
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/lib/sqlite.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IACvD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC5D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;CACf;AAqED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAanD"}