@pcircle/memesh 4.2.2 → 4.2.3

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
       "name": "memesh",
       "source": "./",
       "description": "MeMesh — Local memory for Claude Code and MCP coding agents. One SQLite file, zero cloud required.",
-      "version": "4.2.2",
+      "version": "4.2.3",
       "author": {
         "name": "PCIRCLE AI"
       },

package/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "PCIRCLE AI"
   },
-  "version": "4.2.2",
+  "version": "4.2.3",
   "homepage": "https://pcircle.ai/memesh-llm-memory",
   "repository": "https://github.com/PCIRCLE-AI/memesh-llm-memory",
   "license": "MIT",

package/dist/skills-manifest.json

@@ -1,10 +1,10 @@
 {
   "schema": "memesh.skills-manifest/v1",
-  "generated_at": "2026-05-12T10:05:07.563Z",
+  "generated_at": "2026-05-12T10:49:49.582Z",
   "entries": [
     {
       "path": ".claude-plugin/plugin.json",
-      "sha256": "7dd8941d99b163f339951858e31afcd039c221dcb29db022651b1896c02c33c3",
+      "sha256": "ef28cf1f30a545f5d1fbb3d6459b97814f5187c601db5f62ff5be346a6d3ea58",
       "bytes": 441
     },
     {
@@ -19,8 +19,8 @@
     },
     {
       "path": "scripts/hooks/_shared.js",
-      "sha256": "ee0e190f0c3a5b835a444c35f42f4cdd1d2217a6ebba2303d50212b2077a5287",
-      "bytes": 26463
+      "sha256": "230c2e5005eaefcb6b7689124265fc71da1417382a95f19e2435a42ec195c058",
+      "bytes": 28624
     },
     {
       "path": "scripts/hooks/post-commit.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pcircle/memesh",
-  "version": "4.2.2",
+  "version": "4.2.3",
   "description": "MeMesh — Local memory for Claude Code and MCP coding agents. One SQLite file, zero cloud required.",
   "main": "dist/index.js",
   "type": "module",

package/scripts/hooks/_shared.js

@@ -311,20 +311,57 @@ CREATE VIRTUAL TABLE IF NOT EXISTS entities_fts USING fts5(
  * @returns {{ db: any, dbPath: string }}
  */
 // Cached lookup for the better-sqlite3 native module. Plugin-marketplace
-// installs ship the tarball without node_modules, so the cache copy of the
-// hook scripts cannot resolve the binding. tryRequireBetterSqlite() returns
-// null in that scenario and lets each caller silent-skip — callers paired
-// with a working dev/npm-global registration still produce output.
+// installs ship the tarball without node_modules OR with a node_modules
+// tree that lacks the compiled .node binding. tryRequireBetterSqlite()
+// returns null in either scenario and lets each caller silent-skip —
+// callers paired with a working dev/npm-global registration still produce
+// output. The require() call alone is NOT sufficient: better-sqlite3's
+// `lib/index.js` defers the bindings() call until the first
+// `new Database()`, so a successful require() can still hand back a
+// constructor that throws "Could not locate the bindings file" on use.
+// We probe with an in-memory DB to force the binding load up-front.
+function _inTestEnv() {
+  return process.env.VITEST === 'true' || process.env.NODE_ENV === 'test';
+}
+
 let _cachedDatabaseCtor;
 export function tryRequireBetterSqlite() {
   // Test-only seam: force the "native module unavailable" branch so
   // tests can exercise the silent-skip path that plugin-marketplace
-  // cache installs hit. Production callers never set this var.
-  if (process.env.MEMESH_TEST_FORCE_MISSING_NATIVE === '1') return null;
+  // cache installs hit. Gated to test environments so an accidental
+  // shell export cannot disable memesh on a real user's machine.
+  if (_inTestEnv() && process.env.MEMESH_TEST_FORCE_MISSING_NATIVE === '1') return null;
   if (_cachedDatabaseCtor !== undefined) return _cachedDatabaseCtor;
   try {
-    _cachedDatabaseCtor = require('better-sqlite3');
-  } catch {
+    const Database = require('better-sqlite3');
+    // Second test-only seam: simulate the exact plugin-marketplace cache
+    // failure mode where require() succeeds (JS wrapper present) but the
+    // native .node is missing, so the first construction throws. Same
+    // test-env gate as the seam above.
+    if (_inTestEnv() && process.env.MEMESH_TEST_FORCE_BINDING_LOAD_FAIL === '1') {
+      throw new Error('Could not locate the bindings file. (test forced)');
+    }
+    const probe = new Database(':memory:');
+    probe.close();
+    _cachedDatabaseCtor = Database;
+  } catch (err) {
+    // Stderr-trace-then-silent: an empty catch would collapse plugin-
+    // marketplace's "no .node binding" case together with ABI mismatches,
+    // disk full, fd exhaustion, OOM, and tampered native modules — all
+    // distinct causes with distinct fixes. Following the project's hook
+    // pattern (e.g. session-summary.js, post-commit.js), we surface a
+    // single line on stderr (NOT stdout — Claude Code's hook contract
+    // requires stdout stays a single JSON document or empty) and let
+    // each caller continue its silent-skip behavior. The stderr trace
+    // is visible to anyone running `memesh doctor` or inspecting hook
+    // exit logs; it does NOT reach the Claude Code conversation.
+    try {
+      const code = err && typeof err === 'object' && 'code' in err ? err.code : '';
+      const msg = (err && typeof err === 'object' && 'message' in err ? err.message : String(err)) || 'unknown';
+      process.stderr.write(`[memesh hook] better-sqlite3 probe failed: ${code} ${msg}\n`);
+    } catch {
+      // stderr write itself failed (closed pipe, etc.) — give up silently.
+    }
     _cachedDatabaseCtor = null;
   }
   return _cachedDatabaseCtor;