@pcircle/memesh 4.1.7 → 4.2.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pcircle/memesh",
-  "version": "4.1.7",
+  "version": "4.2.1",
   "description": "MeMesh — Local memory for Claude Code and MCP coding agents. One SQLite file, zero cloud required.",
   "main": "dist/index.js",
   "type": "module",
@@ -22,7 +22,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc && node scripts/copy-cli-assets.mjs && node scripts/set-executable-bits.mjs && node scripts/generate-skills-manifest.mjs && npm run build:dashboard && node scripts/smoke-test.mjs",
+    "build": "node scripts/check-schema-drift.mjs && tsc && node scripts/copy-cli-assets.mjs && node scripts/set-executable-bits.mjs && node scripts/generate-skills-manifest.mjs && npm run build:dashboard && node scripts/smoke-test.mjs",
     "build:dashboard": "node scripts/build-dashboard.mjs",
     "test": "vitest",
     "test:e2e-dashboard": "node scripts/dashboard-e2e-smoke.mjs",

package/scripts/hooks/_shared.js

@@ -2,11 +2,26 @@ import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync,
 import { spawn } from 'child_process';
 import { createRequire } from 'module';
 import { homedir } from 'os';
-import { dirname, join } from 'path';
+import { basename, dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 
 const require = createRequire(import.meta.url);
 
+// =============================================================================
+// Path helpers — MIRROR of src/core/paths.ts
+// =============================================================================
+//
+// Hooks cannot import from `dist/` (the F5 security boundary — `dist/` may
+// be stale or absent at hook execution time), so the path-resolution logic
+// is duplicated here. The contract MUST stay in lockstep with
+// `src/core/paths.ts`. Any change to the function shapes / precedence
+// rules in that file MUST be reflected here too.
+//
+// Unlike the schema duplication (which has a build-time diff guard via
+// `scripts/check-schema-drift.mjs`), these helpers are short enough that
+// human review at code-review time is sufficient. If they grow, add a
+// programmatic guard.
+
 /**
  * Return the user's home directory, honoring HOME env var first.
  *
@@ -17,10 +32,71 @@ const require = createRequire(import.meta.url);
  * across platforms. Production users on Windows almost never set HOME,
  * so this falls through to os.homedir() as before.
  *
+ * Mirror of: src/core/paths.ts → homeDir()
+ *
  * @returns {string}
  */
 function homeDir() {
-  return process.env.HOME ?? homedir();
+  // Mirror src/core/paths.ts homeDir() — same three-step fallback to
+  // handle HOME="" environments. `os.homedir()` itself reads HOME on
+  // POSIX, so HOME="" makes it return "". `os.userInfo().homedir`
+  // reads pw_dir via getpwuid syscall, bypassing env vars entirely.
+  const home = process.env.HOME;
+  if (home && home.length > 0) return home;
+  const fromOs = homedir();
+  if (fromOs && fromOs.length > 0) return fromOs;
+  // userInfo is the final defence — re-import here to keep the
+  // top-of-file `import { homedir } from 'os'` line stable.
+  return require('os').userInfo().homedir;
+}
+
+/**
+ * Resolve the memesh data directory.
+ *
+ * Precedence: MEMESH_DIR env var > <home>/.memesh.
+ * Mirror of: src/core/paths.ts → memeshDir()
+ *
+ * No-arg to mirror the core helper exactly. Earlier drafts accepted a
+ * custom `env` parameter for symmetry with `getMemeshDirFromDbPath(env)`,
+ * but the inner `homeDir()` only ever read `process.env.HOME`, so a
+ * caller that passed `{HOME: '/tmp/x'}` would be silently ignored — a
+ * footgun. Tests redirect via `process.env.HOME`; that's the supported
+ * extension point.
+ *
+ * @returns {string}
+ */
+export function memeshDir() {
+  return process.env.MEMESH_DIR ?? join(homeDir(), '.memesh');
+}
+
+/**
+ * Resolve the active memesh DB path.
+ *
+ * Precedence: MEMESH_DB_PATH env var > <memeshDir>/knowledge-graph.db.
+ * Mirror of: src/core/paths.ts → getDbPath() — no-arg, see memeshDir().
+ *
+ * @returns {string}
+ */
+export function getDbPath() {
+  return process.env.MEMESH_DB_PATH ?? join(memeshDir(), 'knowledge-graph.db');
+}
+
+/**
+ * Derive the project name from a working directory.
+ *
+ * Hooks historically used `basename(data.cwd || process.cwd())`. Core
+ * had two variants (`basename(context.cwd)` and `basename(process.cwd())`).
+ * This helper unifies the contract — explicit cwd wins, falls through to
+ * process.cwd() — matching the most permissive caller's behaviour.
+ *
+ * Mirror of: src/core/paths.ts → getProjectName()
+ *
+ * @param {string|null|undefined} [cwdInput]
+ * @returns {string}
+ */
+export function getProjectName(cwdInput) {
+  const cwd = cwdInput && cwdInput.length > 0 ? cwdInput : process.cwd();
+  return basename(cwd);
 }
 
 /**
@@ -64,7 +140,7 @@ export function resolvePluginRoot(metaUrl) {
  * @returns {Record<string, any>}
  */
 export function readHookConfig(_env = process.env) {
-  const path = join(homeDir(), '.memesh', 'config.json');
+  const path = join(memeshDir(), 'config.json');
   if (!existsSync(path)) return {};
   try {
     const raw = readFileSync(path, 'utf8');
@@ -210,6 +286,7 @@ CREATE UNIQUE INDEX IF NOT EXISTS idx_tags_entity_tag_unique ON tags(entity_id,
 CREATE INDEX IF NOT EXISTS idx_observations_entity ON observations(entity_id);
 CREATE INDEX IF NOT EXISTS idx_relations_from ON relations(from_entity_id);
 CREATE INDEX IF NOT EXISTS idx_relations_to ON relations(to_entity_id);
+CREATE INDEX IF NOT EXISTS idx_entities_type_created ON entities(type, created_at);
 `;
 
 // FTS5 virtual table — separate so hooks that don't need it stay lean.
@@ -233,32 +310,118 @@ CREATE VIRTUAL TABLE IF NOT EXISTS entities_fts USING fts5(
  * @param {boolean} [opts.fts=false] - Also create the FTS5 virtual table.
  * @returns {{ db: any, dbPath: string }}
  */
+// Cached lookup for the better-sqlite3 native module. Plugin-marketplace
+// installs ship the tarball without node_modules, so the cache copy of the
+// hook scripts cannot resolve the binding. tryRequireBetterSqlite() returns
+// null in that scenario and lets each caller silent-skip — callers paired
+// with a working dev/npm-global registration still produce output.
+let _cachedDatabaseCtor;
+export function tryRequireBetterSqlite() {
+  // Test-only seam: force the "native module unavailable" branch so
+  // tests can exercise the silent-skip path that plugin-marketplace
+  // cache installs hit. Production callers never set this var.
+  if (process.env.MEMESH_TEST_FORCE_MISSING_NATIVE === '1') return null;
+  if (_cachedDatabaseCtor !== undefined) return _cachedDatabaseCtor;
+  try {
+    _cachedDatabaseCtor = require('better-sqlite3');
+  } catch {
+    _cachedDatabaseCtor = null;
+  }
+  return _cachedDatabaseCtor;
+}
+
 export function openHookDb(env = process.env, opts = {}) {
-  const dbPath = env.MEMESH_DB_PATH || join(homeDir(), '.memesh', 'knowledge-graph.db');
-  const dbDir = env.MEMESH_DB_PATH ? dirname(env.MEMESH_DB_PATH) : join(homeDir(), '.memesh');
+  const Database = tryRequireBetterSqlite();
+  if (!Database) return null;
+
+  // Path helpers read process.env directly (no-arg). The `env` parameter
+  // is kept on this signature for backward compatibility with callers
+  // and is consulted directly only for the DB-PATH dirname check below
+  // — that's the one place where a caller's custom env should win over
+  // process.env (e.g. the test harness redirects MEMESH_DB_PATH per test).
+  const dbPath = env.MEMESH_DB_PATH ?? getDbPath();
+  const dbDir = env.MEMESH_DB_PATH ? dirname(env.MEMESH_DB_PATH) : memeshDir();
   if (!existsSync(dbDir)) mkdirSync(dbDir, { recursive: true });
 
-  const Database = require('better-sqlite3');
   const db = new Database(dbPath);
   db.pragma('journal_mode = WAL');
   db.pragma('foreign_keys = ON');
   db.exec(SCHEMA_SQL);
   if (opts.fts) db.exec(FTS_SQL);
 
+  // Apply the full migration chain — keep in lockstep with src/db.ts.
+  // Conditional ALTER TABLE blocks ARE idempotent within a single process,
+  // but two hook processes can race: each reads `colNames` from its own
+  // PRAGMA snapshot, so both see "column missing" and both run ALTER —
+  // the second one throws SQLITE_ERROR: duplicate column name. Each ALTER
+  // is wrapped in safeAlter() which treats that specific error as the
+  // expected no-op outcome (a peer beat us to it). Any other error
+  // re-throws so we don't paper over real bugs.
+  //
+  // Earlier this helper applied ONLY the v2.11->v2.12 status migration.
+  // That left a hook-only-touched DB at v2.12 even though core was at
+  // v4.0+, so session-start fell back to `ORDER BY id DESC` (degraded
+  // ranking) until the CLI/MCP/HTTP first opened the DB and finished
+  // the chain. Backfilled here so write-path hooks produce the same
+  // schema state as core.
+  const safeAlter = (sql) => {
+    try {
+      db.exec(sql);
+    } catch (e) {
+      if (!/duplicate column name/i.test(e?.message || '')) throw e;
+      // Peer hook process won the race; column already exists. Idempotent.
+    }
+  };
   const cols = db.prepare("PRAGMA table_info(entities)").all();
-  if (!cols.some((c) => c.name === 'status')) {
-    db.exec("ALTER TABLE entities ADD COLUMN status TEXT NOT NULL DEFAULT 'active'");
+  const colNames = new Set(cols.map((c) => c.name));
+
+  // v2.11 -> v2.12: status
+  if (!colNames.has('status')) {
+    safeAlter("ALTER TABLE entities ADD COLUMN status TEXT NOT NULL DEFAULT 'active'");
     db.exec("CREATE INDEX IF NOT EXISTS idx_entities_status ON entities(status)");
   }
 
+  // v2.14 -> v2.15: scoring + temporal-validity columns
+  if (!colNames.has('access_count')) {
+    safeAlter("ALTER TABLE entities ADD COLUMN access_count INTEGER DEFAULT 0");
+    safeAlter("ALTER TABLE entities ADD COLUMN last_accessed_at TIMESTAMP");
+    safeAlter("ALTER TABLE entities ADD COLUMN confidence REAL DEFAULT 1.0");
+    safeAlter("ALTER TABLE entities ADD COLUMN valid_from TIMESTAMP");
+    safeAlter("ALTER TABLE entities ADD COLUMN valid_until TIMESTAMP");
+  }
+
+  // v3.0.0-rc -> v3.0.0: namespace
+  if (!colNames.has('namespace')) {
+    safeAlter("ALTER TABLE entities ADD COLUMN namespace TEXT DEFAULT 'personal'");
+    db.exec("CREATE INDEX IF NOT EXISTS idx_entities_namespace ON entities(namespace)");
+  }
+
+  // v4.0.0: recall effectiveness counters
+  if (!colNames.has('recall_hits')) {
+    safeAlter("ALTER TABLE entities ADD COLUMN recall_hits INTEGER DEFAULT 0");
+    safeAlter("ALTER TABLE entities ADD COLUMN recall_misses INTEGER DEFAULT 0");
+  }
+
   return { db, dbPath };
 }
 
 const PRIVATE_DIR_MODE = 0o700;
 const PRIVATE_FILE_MODE = 0o600;
 
-export function getMemeshDir(env = process.env) {
-  return env.MEMESH_DB_PATH ? dirname(env.MEMESH_DB_PATH) : join(homeDir(), '.memesh');
+/**
+ * Resolve the directory containing the active DB file.
+ *
+ * When MEMESH_DB_PATH is set, returns its parent directory (used for
+ * sibling files next to the DB). Otherwise returns memeshDir().
+ * Mirror of: src/core/paths.ts → getMemeshDirFromDbPath()
+ *
+ * Renamed from the legacy `getMemeshDir` to match the core helper —
+ * sibling helper `memeshDir()` returns the GLOBAL data directory, so a
+ * second function called `getMemeshDir` was confusing. Callers updated
+ * in lockstep.
+ */
+export function getMemeshDirFromDbPath() {
+  return process.env.MEMESH_DB_PATH ? dirname(process.env.MEMESH_DB_PATH) : memeshDir();
 }
 
 export function ensurePrivateDir(dirPath) {
@@ -332,7 +495,7 @@ export function readUpdateCheckCache(installedVersion) {
     && /^[0-9A-Za-z.+-]+$/.test(installedVersion)
     ? installedVersion
     : 'unknown';
-  const cachePath = join(homeDir(), '.memesh', `update-check.${versionTag}.json`);
+  const cachePath = join(memeshDir(), `update-check.${versionTag}.json`);
   try {
     if (!existsSync(cachePath)) return null;
     const parsed = JSON.parse(readFileSync(cachePath, 'utf8'));
@@ -391,7 +554,7 @@ export function decideAutoUpdateHook(currentVersion, cache, policy) {
 
 export function logAutoUpdate(line) {
   try {
-    const dir = getMemeshDir(process.env);
+    const dir = getMemeshDirFromDbPath();
     ensurePrivateDir(dir);
     const path = join(dir, 'auto-update.log');
     appendFileSync(path, `[${new Date().toISOString()}] ${line}\n`);
@@ -405,7 +568,7 @@ export const AUTO_UPDATE_LOCK_TTL_MS = 10 * 60 * 1000;
 
 export function tryAcquireAutoUpdateLock(version) {
   try {
-    const dir = join(homeDir(), '.memesh');
+    const dir = memeshDir();
     ensurePrivateDir(dir);
     const lockPath = join(dir, 'auto-update.lock');
     const fs = require('fs');
@@ -490,7 +653,7 @@ export function spawnAutoUpdate(version, deprecationOverride, installChannelMod)
       );
       return { state: 'in-progress' };
     }
-    const dir = getMemeshDir(process.env);
+    const dir = getMemeshDirFromDbPath();
     ensurePrivateDir(dir);
     const logPath = join(dir, 'auto-update.log');
     let fd = -1;

package/scripts/hooks/post-commit.js

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 
 import { execFileSync } from 'child_process';
-import { basename } from 'path';
-import { openHookDb } from './_shared.js';
+import { getProjectName, openHookDb } from './_shared.js';
 
 let input = '';
 process.stdin.setEncoding('utf8');
@@ -11,11 +10,37 @@ process.stdin.on('end', () => {
   try {
     const data = JSON.parse(input);
 
-    // Only process Bash tool outputs
+    // tool_name absent is a schema-flip signal (Claude Code has done
+    // tool_name renames historically — e.g. tool_use/tool_result
+    // nesting). Trace to surface the rename day-1 instead of months
+    // of silent dropout (the bug shape that bit `tool_output` and
+    // `was_in_agentic_loop`).
+    if (data.tool_name === undefined) {
+      try { process.stderr.write(`[memesh post-commit] tool_name absent in payload (keys: ${Object.keys(data).join(',')}); skipping\n`); } catch {}
+      return exit0();
+    }
     if (data.tool_name !== 'Bash') return exit0();
-    const toolOutput = typeof data.tool_output === 'string'
-      ? data.tool_output
-      : JSON.stringify(data.tool_output || '');
+
+    // Claude Code's PostToolUse hook payload has had two field-name shapes:
+    // legacy `tool_output: <string>` and current
+    // `tool_response: { stdout, stderr, interrupted, isError }`. Prefer the
+    // current shape; fall back to legacy so unit-test fixtures (which use
+    // tool_output) keep working. This block existed only as the legacy
+    // branch — once Claude Code unified on tool_response the hook silently
+    // stopped seeing any output and never wrote commit entities again.
+    const tr = data.tool_response;
+    let toolOutput = '';
+    if (typeof tr === 'string') {
+      toolOutput = tr;
+    } else if (tr && typeof tr === 'object') {
+      const stdout = typeof tr.stdout === 'string' ? tr.stdout : '';
+      const stderr = typeof tr.stderr === 'string' ? tr.stderr : '';
+      toolOutput = stdout + (stderr ? '\n' + stderr : '');
+    } else if (typeof data.tool_output === 'string') {
+      toolOutput = data.tool_output;
+    } else if (data.tool_output != null) {
+      toolOutput = JSON.stringify(data.tool_output);
+    }
 
     // Detect git commit in output
     // Pattern: [branch hash] commit message
@@ -27,11 +52,28 @@ process.stdin.on('end', () => {
 
     const commitHash = commitMatch[1];
     const commitMsg = commitMatch[2];
-    const projectName = basename(data.cwd || process.cwd());
+
+    // `data.cwd` MUST be present for project-tag and `git show` below
+    // to be correct. If absent, falling through to process.cwd() (the
+    // hook process's launch dir, unspecified for PostToolUse Bash)
+    // would either run git show against a different repo (silent
+    // corruption) or write the wrong project tag. Skip + trace
+    // instead — better to miss one commit than to tag it wrong.
+    if (!data.cwd) {
+      try { process.stderr.write(`[memesh post-commit] data.cwd absent — cannot resolve project / repo; skipping commit ${commitHash}\n`); } catch {}
+      return exit0();
+    }
+    const projectName = getProjectName(data.cwd);
 
     // Open DB via shared helper — applies SCHEMA_SQL + status migration.
     // Pass fts:true so the FTS5 entity-search index is also available.
-    const { db } = openHookDb(process.env, { fts: true });
+    // Returns null when the better-sqlite3 native module is unavailable
+    // (e.g. plugin-marketplace cache install with no node_modules); in
+    // that case silently skip — a sibling registered hook copy with
+    // proper deps still records the commit.
+    const handle = openHookDb(process.env, { fts: true });
+    if (!handle) return;
+    const { db } = handle;
     try {
       const entityName = `commit-${commitHash}`;
 

package/scripts/hooks/pre-bash-orchestration-nudge.js

@@ -13,9 +13,9 @@
 
 import { join } from 'path';
 import { openSync, closeSync } from 'fs';
-import { ensurePrivateDir, getMemeshDir, isAgenticOrchestrationEnabled } from './_shared.js';
+import { ensurePrivateDir, getMemeshDirFromDbPath, isAgenticOrchestrationEnabled } from './_shared.js';
 
-const memeshDir = getMemeshDir(process.env);
+const memeshDir = getMemeshDirFromDbPath();
 const FLAGS_DIR = join(memeshDir, 'agent-nudge-flags');
 
 // ---------------------------------------------------------------------------
@@ -83,7 +83,12 @@ process.stdin.on('end', () => {
     if (!isAgenticOrchestrationEnabled(process.env)) return pass();
 
     const data = JSON.parse(input);
-    const command = (data.tool_input?.command ?? '').trim();
+    if (!data.tool_input) {
+      // Schema-flip signal: trace so a rename surfaces day-1.
+      try { process.stderr.write(`[memesh pre-bash-nudge] tool_input absent (keys: ${Object.keys(data).join(',')}); skipping\n`); } catch {}
+      return pass();
+    }
+    const command = (data.tool_input.command ?? '').trim();
 
     if (!command) return pass();
 

package/scripts/hooks/pre-compact.js

@@ -2,7 +2,7 @@
 
 import { basename } from 'path';
 import { existsSync, readFileSync } from 'fs';
-import { isAutoCaptureEnabled, openHookDb } from './_shared.js';
+import { getProjectName, isAutoCaptureEnabled, openHookDb } from './_shared.js';
 
 // Timeout guard: always exit within 10 seconds
 const TIMEOUT_MS = 10000;
@@ -27,7 +27,7 @@ process.stdin.on('end', () => {
     const transcriptPath = data.transcript_path || '';
     const cwd = data.cwd || process.cwd();
     const reason = data.reason || 'auto';
-    const projectName = basename(cwd);
+    const projectName = getProjectName(cwd);
 
     // Parse transcript to gather insights
     let toolCallCount = 0;
@@ -40,7 +40,12 @@ process.stdin.on('end', () => {
           if (!line.trim()) continue;
           try {
             const entry = JSON.parse(line);
-            // Current format: {type:'assistant', message:{content:[{type:'tool_use',...}]}}
+            // Claude Code transcript format: {type:'assistant', message:{content:[{type:'tool_use',...}]}}
+            // The earlier legacy branch (entry.role === 'assistant', entry.content
+            // at top level) was confirmed dead code via real-transcript audit:
+            // no entry in production transcripts ever shipped that shape.
+            // Removed to avoid confusion between two parsers that read
+            // different fields for the same logical event.
             if (entry.type === 'assistant' && Array.isArray(entry.message?.content)) {
               for (const block of entry.message.content) {
                 if (block.type !== 'tool_use') continue;
@@ -52,18 +57,6 @@ process.stdin.on('end', () => {
                 }
               }
             }
-            // Legacy format: {role:'assistant', content:[{type:'tool_use',...}]}
-            if (entry.role === 'assistant' && Array.isArray(entry.content)) {
-              for (const block of entry.content) {
-                if (block.type !== 'tool_use') continue;
-                toolCallCount++;
-                const name = block.name || '';
-                if (name === 'Edit' || name === 'Write' || name === 'MultiEdit') {
-                  const filePath = block.input?.file_path || block.input?.path || '';
-                  if (filePath) editedFiles.add(basename(filePath));
-                }
-              }
-            }
           } catch {
             // Skip malformed lines
           }
@@ -84,7 +77,11 @@ process.stdin.on('end', () => {
 
     // Open DB via shared helper — applies SCHEMA_SQL + status migration.
     // FTS5 needed for the entity-search index updates below.
-    const { db } = openHookDb(process.env, { fts: true });
+    // Returns null on plugin-marketplace cache installs without node_modules;
+    // silently skip in that case (sibling registered copy handles it).
+    const handle = openHookDb(process.env, { fts: true });
+    if (!handle) return;
+    const { db } = handle;
     try {
       // Upsert entity
       const insertResult = db.prepare('INSERT OR IGNORE INTO entities (name, type) VALUES (?, ?)').run(entityName, 'session-summary');

package/scripts/hooks/pre-edit-recall.js

@@ -4,22 +4,21 @@
 // When editing a file, checks if MeMesh has relevant memories
 // and injects them as context. Throttled: max 1 recall per file per session.
 
-import { createRequire } from 'module';
-import { homedir } from 'os';
-import { join, basename } from 'path';
+import { basename, join } from 'path';
 import { existsSync, readFileSync } from 'fs';
 import {
   buildReferenceContext,
   ensurePrivateDir,
-  getMemeshDir,
+  getDbPath,
+  getMemeshDirFromDbPath,
+  getProjectName,
   isTrustedForAutoContext,
+  tryRequireBetterSqlite,
   writePrivateJson,
 } from './_shared.js';
 
-const require = createRequire(import.meta.url);
-
-const dbPath = process.env.MEMESH_DB_PATH || join(homedir(), '.memesh', 'knowledge-graph.db');
-const memeshDir = getMemeshDir(process.env);
+const dbPath = getDbPath();
+const memeshDir = getMemeshDirFromDbPath();
 const THROTTLE_FILE = join(memeshDir, 'session-recalled-files.json');
 const MAX_RESULTS = 3;
 
@@ -29,7 +28,13 @@ process.stdin.on('data', (chunk) => { input += chunk; });
 process.stdin.on('end', () => {
   try {
     const data = JSON.parse(input);
-    const toolInput = data.tool_input || {};
+    if (!data.tool_input) {
+      // Schema-flip signal — Claude Code has renamed `tool_input` for
+      // transcript blocks before. Trace so the rename surfaces day-1.
+      try { process.stderr.write(`[memesh pre-edit-recall] tool_input absent (keys: ${Object.keys(data).join(',')}); skipping\n`); } catch {}
+      return pass();
+    }
+    const toolInput = data.tool_input;
     const filePath = toolInput.file_path || toolInput.path || '';
 
     // Only process if we have a file path
@@ -38,7 +43,7 @@ process.stdin.on('end', () => {
     }
 
     // Get project name from cwd for project-scoped filtering
-    const projectName = basename(data.cwd || process.cwd());
+    const projectName = getProjectName(data.cwd);
 
     // Throttle: skip if we already recalled for this file
     const fileKey = filePath.toLowerCase();
@@ -58,7 +63,12 @@ process.stdin.on('end', () => {
 
     if (!existsSync(dbPath)) return pass();
 
-    const Database = require('better-sqlite3');
+    // tryRequireBetterSqlite() returns null on plugin-marketplace cache
+    // installs that ship without node_modules; pass-through silently in
+    // that case so a sibling registered hook copy can still inject
+    // recall context.
+    const Database = tryRequireBetterSqlite();
+    if (!Database) return pass();
     const db = new Database(dbPath, { readonly: true });
     try {
 
@@ -155,8 +165,13 @@ process.stdin.on('end', () => {
     } finally {
       db.close();
     }
-  } catch {
-    // Never crash Claude Code
+  } catch (err) {
+    // Never crash Claude Code, but trace — peer hooks (post-commit,
+    // pre-compact, session-summary) all stderr-trace their outer
+    // catches. Without a trace here, a typo in any prepare statement
+    // would silently break continuous recall on every Edit/Write
+    // tool call indefinitely.
+    try { process.stderr.write(`[memesh pre-edit-recall] ${err?.message || err}\n`); } catch {}
     pass();
   }
 });