@lorekit/cli 1.26.0 → 1.26.1

package/bin/lorekit.mjs

@@ -288,7 +288,8 @@ ${c.bold('Options')}
       --tags <a,b,c>       Comma-separated tags (default: none)
       --source-agent <n>   Source agent name to record (default: none)
       --trigger <slug>     Trigger context slug (default: none)
-      --ttl-days <n>       Days until auto-expiry 1–365 (remote only)
+      --ttl-days <n>       Days until auto-expiry 1–365 (local or remote)
+      --clear-ttl          Remove any existing expiry (make it permanent)
       --org <slug>         Write to this org's scope (remote only)
       --origin-repo <o/n>  Override the derived provenance repository
       --origin-branch <b>  Override the derived provenance branch
@@ -574,7 +575,7 @@ const KNOWN_FLAGS = [
   'dir', 'project', 'global', 'endpoint', 'token', 'mode', 'store',
   'from', 'to', 'apply', 'yes', 'no-hooks', 'force', 'deep', 'adapter',
   'event', 'json', 'scope', 'threshold', 'help', 'version',
-  'value', 'tags', 'source-agent', 'trigger', 'ttl-days', 'org', 'remote', 'local',
+  'value', 'tags', 'source-agent', 'trigger', 'ttl-days', 'clear-ttl', 'org', 'remote', 'local',
   'link', 'base', 'q', 'owner', 'range', 'view', 'archived',
   'origin-repo', 'origin-branch', 'origin-commit', 'origin-pr', 'no-origin',
 ];
@@ -601,7 +602,7 @@ async function main() {
   const argv = process.argv.slice(2);
   const args = parseArgs(argv, {
     aliases: { d: 'dir', e: 'endpoint', t: 'token', y: 'yes', h: 'help', v: 'version' },
-    booleans: ['yes', 'force', 'deep', 'apply', 'help', 'version', 'global', 'project', 'no-hooks', 'no-origin', 'json', 'remote', 'local', 'link', 'archived'],
+    booleans: ['yes', 'force', 'deep', 'apply', 'help', 'version', 'global', 'project', 'no-hooks', 'no-origin', 'json', 'remote', 'local', 'link', 'archived', 'clear-ttl'],
     known: KNOWN_FLAGS,
   });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lorekit/cli",
-  "version": "1.26.0",
+  "version": "1.26.1",
   "description": "Install the LoreKit shared-memory skill and run health checks for the LoreKit MCP server.",
   "license": "MIT",
   "repository": {

package/src/mcp-server.mjs

@@ -56,6 +56,18 @@ export const MEMORY_TOOL_DEFS = [
           description:
             'Optional ISO 8601 creation date for migrating a pre-existing memory. Rejected if invalid or in the future. Applies only when the memory is first created.',
         },
+        ttl_days: {
+          type: 'integer',
+          minimum: 1,
+          maximum: 365,
+          description:
+            'Optional time-to-live in days (1–365). The memory auto-expires that many days after this write and is then hidden from reads.',
+        },
+        clear_ttl: {
+          type: 'boolean',
+          description:
+            'Remove any existing expiry, making the memory permanent again. Takes precedence over ttl_days when both are supplied.',
+        },
         origin_repo: {
           type: 'string',
           description:

package/src/store/format.mjs

@@ -24,6 +24,10 @@ export const FIELDS = [
   'origin_branch',
   'origin_commit',
   'origin_pr',
+  // Expiry — the absolute ISO instant this lesson auto-expires (see src/store/
+  // ttl.mjs). Null / absent means it never expires. Appended like the origin
+  // columns: a file written before this existed simply decodes it as absent.
+  'expires_at',
 ];
 
 // Serialize an entry ({ ...columns, value }) into file text.

package/src/store/local.mjs

@@ -9,6 +9,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { serializeEntry, parseEntry, slugify, scopeToDir } from './format.mjs';
 import { normalizeCreatedAt } from './created-at.mjs';
+import { isLive, resolveExpiresAt } from './ttl.mjs';
 
 export function createLocalStore(baseDir) {
   return new LocalStore(baseDir);
@@ -61,11 +62,12 @@ class LocalStore {
   }
 
   // list({ scope, tags, limit }) → { ok, entries } — newest-first, tag-filtered,
-  // archived hidden.
+  // archived hidden, expired hidden (lazily, mirroring the remote read paths).
   async list({ scope, tags, limit } = {}) {
+    const now = new Date();
     let rows = this._readAll(scope)
       .map((r) => r.entry)
-      .filter((e) => !e.archived_at);
+      .filter((e) => isLive(e, now));
     if (Array.isArray(tags) && tags.length) {
       rows = rows.filter((e) => tags.every((t) => (e.tags || []).includes(t)));
     }
@@ -74,11 +76,10 @@ class LocalStore {
     return { ok: true, entries: rows };
   }
 
-  // read({ scope, key }) → { ok, entry } — null when absent or archived.
+  // read({ scope, key }) → { ok, entry } — null when absent, archived, or expired.
   async read({ scope, key } = {}) {
     const found = this._findByKey(scope, key);
-    const entry = found && !found.entry.archived_at ? found.entry : null;
-    return { ok: true, entry };
+    return { ok: true, entry: found && isLive(found.entry) ? found.entry : null };
   }
 
   // write(...) → { ok, entry } — upsert by scope+key. Preserves `created` and
@@ -92,19 +93,22 @@ class LocalStore {
   // an invalid or future-dated value rather than throwing, matching the store
   // contract's error surfacing.
   async write({
-    scope, key, value, tags, source_agent, trigger, created_at,
+    scope, key, value, tags, source_agent, trigger, created_at, ttl_days, clear_ttl,
     origin_repo, origin_branch, origin_commit, origin_pr,
   } = {}) {
-    let override;
+    const now = new Date().toISOString();
+    const existing = this._findByKey(scope, key);
+    let override, expires_at;
     try {
       override = normalizeCreatedAt(created_at);
+      expires_at = resolveExpiresAt({
+        clearTtl: clear_ttl, ttlDays: ttl_days, now, current: existing?.entry.expires_at,
+      });
     } catch (e) {
       return { ok: false, error: e.message };
     }
     const dir = this._dir(scope);
     fs.mkdirSync(dir, { recursive: true });
-    const now = new Date().toISOString();
-    const existing = this._findByKey(scope, key);
     const created = existing ? existing.entry.created || now : override || now;
     const entry = {
       scope,
@@ -122,6 +126,7 @@ class LocalStore {
       created,
       updated: existing ? now : override || now,
       archived_at: null,
+      expires_at,
       value: value == null ? '' : String(value),
     };
     const file = existing ? existing.file : this._freshPath(dir, key);
@@ -152,6 +157,7 @@ class LocalStore {
       created: entry.created ?? now,
       updated: entry.updated ?? now,
       archived_at: entry.archived_at ?? null,
+      expires_at: entry.expires_at ?? null,
       value: entry.value == null ? '' : String(entry.value),
     };
     const file = existing ? existing.file : this._freshPath(dir, entry.key);
@@ -258,9 +264,10 @@ class LocalStore {
   // lossy for `project::{name}` (stored by basename only). Returns
   // `[{ scope, count }]`, unsorted.
   async listScopes() {
+    const now = new Date();
     const counts = new Map();
     for (const { entry } of this._walkEntries()) {
-      if (entry.archived_at || !entry.scope) continue;
+      if (!entry.scope || !isLive(entry, now)) continue;
       counts.set(entry.scope, (counts.get(entry.scope) || 0) + 1);
     }
     return [...counts.entries()].map(([scope, count]) => ({ scope, count }));
@@ -392,12 +399,13 @@ class TwoTierStore {
   // a lesson present in both tiers is counted once — project shadows home, the
   // same first-wins merge `list()` uses. Returns `[{ scope, count }]`, unsorted.
   async listScopes() {
+    const now = new Date();
     const seen = new Set(); // `${scope}\x00${key}` — dedup across tiers
     const counts = new Map();
     const tiers = this.projectActive() ? [this.project, this.home] : [this.home];
     for (const tier of tiers) {
       for (const { entry } of tier._walkEntries()) {
-        if (entry.archived_at || !entry.scope) continue;
+        if (!entry.scope || !isLive(entry, now)) continue;
         const id = `${entry.scope}\x00${entry.key ?? ''}`;
         if (seen.has(id)) continue;
         seen.add(id);

package/src/store/ttl.mjs

@@ -0,0 +1,69 @@
+// Zero-dependency mirror of the TTL (time-to-live) contract used by the hosted
+// MCP server (packages/mcp-core/src/ttl.ts) and the `memory_write` RPC
+// (migrations 00030/00031). Keeps the local file store's expiry semantics
+// identical to the remote one, so a memory written offline expires the same way
+// it would have online — and a local↔remote migration is lossless.
+//
+//   - `ttl_days` (1–365) sets `expires_at = <write instant> + N days`, mirroring
+//     the RPC's `now() + interval` — NOT `created + N`, so a backdated migration
+//     (created_at override) still expires relative to when it was written.
+//   - `clear_ttl` removes the expiry, making the row permanent again; it beats
+//     `ttl_days` when both are supplied (the RPC's tri-state precedence).
+//   - a read filters an expired row out lazily (there is no purge daemon
+//     offline), exactly as the remote read paths do.
+
+export const TTL_MIN_DAYS = 1;
+export const TTL_MAX_DAYS = 365;
+const DAY_MS = 24 * 60 * 60 * 1000;
+
+// Validate and normalise an optional `ttl_days` write parameter.
+// Returns the integer number of days, or null when no TTL was supplied.
+// Throws Error on a present-but-invalid value (fractional, out of range, NaN).
+export function parseTtlDays(input) {
+  if (input === undefined || input === null) return null;
+  const n = typeof input === 'number' ? input : Number(input);
+  if (!Number.isFinite(n)) throw new Error('ttl_days must be a finite number');
+  if (!Number.isInteger(n)) throw new Error('ttl_days must be an integer');
+  if (n < TTL_MIN_DAYS) throw new Error(`ttl_days must be >= ${TTL_MIN_DAYS}`);
+  if (n > TTL_MAX_DAYS) throw new Error(`ttl_days must be <= ${TTL_MAX_DAYS}`);
+  return n;
+}
+
+// The absolute ISO expiry instant for a memory: `from` (ISO string or Date)
+// advanced by `ttlDays` whole days.
+export function expiresAtFrom(ttlDays, from) {
+  const base = from instanceof Date ? from.getTime() : Date.parse(from);
+  return new Date(base + ttlDays * DAY_MS).toISOString();
+}
+
+// Whether a stored `expires_at` has elapsed at `now`. Absent → never expires.
+// An unparseable value fails SAFE (treated as never-expiring) so a corrupt or
+// hand-edited frontmatter field can never hide a lesson from every read.
+export function isExpired(expiresAt, now = new Date()) {
+  if (!expiresAt) return false;
+  const ms = Date.parse(expiresAt);
+  if (Number.isNaN(ms)) return false;
+  return ms <= now.getTime();
+}
+
+// Whether a stored entry is currently visible to reads: not archived and not
+// expired. The SINGLE definition of "live", shared by every read path (list /
+// read / listScopes) so a future hidden dimension is added once, never
+// re-spelled per call site. The raw primitives (getEntry / _findByKey for
+// delete / archive) deliberately bypass this so they can still act on hidden rows.
+export function isLive(entry, now = new Date()) {
+  return !entry.archived_at && !isExpired(entry.expires_at, now);
+}
+
+// Resolve a write's `expires_at` from the tri-state TTL inputs, mirroring
+// memory_write (00030/00031): `clearTtl` wins (→ permanent, and `ttlDays` is
+// never even validated); else a supplied `ttlDays` sets expiry from `now`; else
+// the row keeps whatever `current` expiry it already had. Throws (via
+// parseTtlDays) on an invalid `ttlDays` only when NOT clearing, so the caller
+// can surface `{ ok:false }`.
+export function resolveExpiresAt({ clearTtl, ttlDays, now, current } = {}) {
+  if (clearTtl) return null;
+  const days = parseTtlDays(ttlDays);
+  if (days != null) return expiresAtFrom(days, now);
+  return current ?? null;
+}

package/src/write.mjs

@@ -14,6 +14,7 @@
 //   --source-agent <name>  Which agent recorded this lesson (default: none)
 //   --trigger <slug>       What prompted the write (default: none)
 //   --ttl-days <n>         Days until the memory auto-expires (1–365)
+//   --clear-ttl            Remove any existing expiry (make the memory permanent)
 //   --org <slug>           Write to this org (remote only)
 //
 // Provenance — where the lesson is being recorded FROM. Derived automatically
@@ -43,6 +44,7 @@ import { resolveStores, remoteUnavailableReason } from './stores.mjs';
 import { log, err, heading, status, c } from './util.mjs';
 import { parseScopeKey } from './lessons-view.mjs';
 import { deriveOrigin, mergeOrigin } from './origin.mjs';
+import { parseTtlDays } from './store/ttl.mjs';
 
 // Read all of stdin to a string. Resolves to '' when stdin IS a TTY (no pipe).
 function readStdin() {
@@ -108,7 +110,28 @@ export async function write(args) {
   const tags = args.tags ? String(args.tags).split(',').map((t) => t.trim()).filter(Boolean) : [];
   const sourceAgent = typeof args['source-agent'] === 'string' ? args['source-agent'] : undefined;
   const trigger = typeof args.trigger === 'string' ? args.trigger : undefined;
-  const ttlDays = args['ttl-days'] ? Number(args['ttl-days']) : undefined;
+  // `--ttl-days` is validated HERE, at the flag seam, rather than being left to the
+  // store: a truthiness test silently swallowed `--ttl-days 0` (falsy) and
+  // `--ttl-days abc` (NaN, dropped again by the `ttl_days` spread further down), so
+  // both exited 0 having written no expiry while `--ttl-days 999` correctly errored.
+  // The seam matters as much as the check — `store/remote.mjs` forwards `ttl_days`
+  // verbatim and `JSON.stringify(NaN)` would reach the server as `null`, so a
+  // store-side fix would leave the remote path silently broken. Mirrors how
+  // `--origin-pr` is handled below: an explicitly supplied value is a caller
+  // assertion, so a malformed one is a usage error.
+  let ttlDays;
+  if (args['ttl-days'] !== undefined) {
+    // A bare `--ttl-days` with no value parses as boolean `true` (see parseArgs);
+    // feed NaN so the shared validator rejects it instead of silently meaning 1 day.
+    const rawTtlDays = args['ttl-days'] === true ? NaN : args['ttl-days'];
+    try {
+      ttlDays = parseTtlDays(rawTtlDays);
+    } catch (e) {
+      err(`${c.red('Error:')} --ttl-days is invalid — ${(e && e.message) || String(e)}`);
+      return 1;
+    }
+  }
+  const clearTtl = Boolean(args['clear-ttl']);
   const orgSlug = typeof args.org === 'string' ? args.org : undefined;
 
   // ── Provenance ────────────────────────────────────────────────────────────
@@ -198,6 +221,7 @@ export async function write(args) {
     ...(sourceAgent ? { source_agent: sourceAgent } : {}),
     ...(trigger ? { trigger } : {}),
     ...(ttlDays ? { ttl_days: ttlDays } : {}),
+    ...(clearTtl ? { clear_ttl: true } : {}),
     ...(orgSlug ? { org: orgSlug } : {}),
     ...origin,
   };
@@ -249,5 +273,6 @@ export async function write(args) {
     'lorekit.cli.write.inserted': inserted,
     'lorekit.cli.write.has_tags': tags.length > 0,
     'lorekit.cli.write.has_ttl': Boolean(ttlDays),
+    'lorekit.cli.write.clear_ttl': clearTtl,
   };
 }