@velvetmonkey/vault-core 2.12.8 → 2.12.10

package/dist/queries.js

@@ -45,7 +45,10 @@ export function searchEntities(stateDb, query, limit = 20) {
  * @param limit - Maximum results to return
  */
 export function searchEntitiesPrefix(stateDb, prefix, limit = 20) {
-    return searchEntities(stateDb, `${escapeFts5Query(prefix)}*`, limit);
+    // Append `*` BEFORE escaping so the suffix-aware quoter places it correctly
+    // (quoted phrase + outer `*` for prefix search). Pre-escaping here would
+    // produce already-quoted input that the second escape pass cannot reuse.
+    return searchEntities(stateDb, `${prefix}*`, limit);
 }
 /**
  * Get entity by exact name (case-insensitive)
@@ -341,20 +344,29 @@ export function escapeFts5Query(query) {
         phrases.push(`"${phrase.replace(/"/g, '""')}"`);
         return '';
     });
-    // Clean remaining tokens
+    // Clean remaining tokens. Strips FTS5 syntax punctuation (`:` and `-` previously
+    // tripped queries like `2026-05-08` → SQLite parsed `05` as a column reference,
+    // returning `no such column: 05`). `+`, `.`, `_` were also unhandled — see
+    // 2026-05-08 morning-briefing failure.
     const cleaned = withoutPhrases
-        .replace(/[(){}[\]^~:-]/g, ' ')
+        .replace(/[(){}[\]^~:+._-]/g, ' ')
         .replace(/\s+/g, ' ')
         .trim();
-    // Split into tokens, skip explicit AND/OR/NOT operators
-    const tokens = cleaned.split(' ').filter(t => t && t !== 'AND' && t !== 'OR' && t !== 'NOT');
-    // Combine: quoted phrases + OR-joined tokens
+    // Split into tokens, skip explicit FTS5 operators (AND/OR/NOT/NEAR).
+    const tokens = cleaned
+        .split(' ')
+        .filter(t => t && t !== 'AND' && t !== 'OR' && t !== 'NOT' && t !== 'NEAR');
+    // Wrap each token as an FTS5 phrase literal so bareword reserved keywords and
+    // numeric tokens cannot be parsed as column references. Preserve trailing `*`
+    // for prefix search by placing it OUTSIDE the quotes (`"foo"*` not `"foo*"`).
+    const safeTokens = tokens.map(t => t.endsWith('*') ? `"${t.slice(0, -1)}"*` : `"${t}"`);
+    // Combine: quoted phrases + OR-joined safe tokens
     const parts = [...phrases];
-    if (tokens.length === 1) {
-        parts.push(tokens[0]);
+    if (safeTokens.length === 1) {
+        parts.push(safeTokens[0]);
     }
-    else if (tokens.length > 1) {
-        parts.push(tokens.join(' OR '));
+    else if (safeTokens.length > 1) {
+        parts.push(safeTokens.join(' OR '));
     }
     return parts.join(' ') || '';
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velvetmonkey/vault-core",
-  "version": "2.12.8",
+  "version": "2.12.10",
   "description": "Shared vault utilities for Flywheel ecosystem (entity scanning, wikilinks, protected zones)",
   "type": "module",
   "main": "dist/index.js",