claude-mem-lite 2.79.0 → 2.80.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "2.79.0",
+      "version": "2.80.0",
       "source": "./",
       "description": "Lightweight persistent memory system for Claude Code — FTS5 search, episode batching, error-triggered recall"
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "2.79.0",
+  "version": "2.80.0",
   "description": "Lightweight persistent memory system for Claude Code — FTS5 search, episode batching, error-triggered recall",
   "author": {
     "name": "sdsrss"

package/README.md

@@ -161,7 +161,7 @@ Source files stay in the cloned repo. Update via `git pull && node install.mjs i
 ### What happens during installation
 
 1. **Install dependencies** -- `npm install --omit=dev` (compiles native `better-sqlite3`)
-2. **Register MCP server** -- `mem-lite` server with 16 tools (search, recent, recall, timeline, get, save, update, stats, delete, compress, maintain, export, fts_check, browse, registry, use). The pre-v2.78 generic server name `mem` is renamed to `mem-lite` for namespace hygiene; the tool names themselves (`mem_search`, `mem_recall`, ...) are unchanged.
+2. **Register MCP server** -- `mem-lite` server with 20 tools (9 core exposed via `tools/list` + 11 hidden-but-callable; see the Usage section for the full table). The pre-v2.78 generic server name `mem` is renamed to `mem-lite` for namespace hygiene; the tool names themselves (`mem_search`, `mem_recall`, ...) are unchanged.
 3. **Configure hooks** -- `PostToolUse`, `SessionStart`, `Stop`, `UserPromptSubmit` lifecycle hooks
 4. **Create data directory** -- `~/.claude-mem-lite/` (hidden) for database, runtime, and managed resource files
 5. **Auto-migrate** -- If `~/.claude-mem/` (original claude-mem) or `~/claude-mem-lite/` (pre-v0.5 unhidden) exists, migrates database and runtime files to `~/.claude-mem-lite/`, preserving the original untouched

package/README.zh-CN.md

@@ -146,7 +146,7 @@ node install.mjs install
 ### 安装过程
 
 1. **安装依赖** -- `npm install --omit=dev`（编译原生 `better-sqlite3`）
-2. **注册 MCP 服务器** -- `mem-lite` 服务器，包含 15 个工具（search、recent、recall、timeline、get、save、update、stats、delete、compress、maintain、export、fts_check、browse、registry）。v2.78 前服务器名为通用的 `mem`，现已改名为 `mem-lite` 避免与用户其它 `.mcp.json` 冲突；工具名（`mem_search`/`mem_recall` 等）保持不变。
+2. **注册 MCP 服务器** -- `mem-lite` 服务器，包含 20 个工具（9 个核心通过 `tools/list` 暴露 + 11 个隐藏但可调；完整表见 Usage 段）。v2.78 前服务器名为通用的 `mem`，现已改名为 `mem-lite` 避免与用户其它 `.mcp.json` 冲突；工具名（`mem_search`/`mem_recall` 等）保持不变。
 
 > **每个项目第一次使用，跑一次 `/adopt`。** Plugin 安装给你 MCP server + hooks + slash commands，但**邀请式 memory 哨兵**（一条提升 Claude 主动调用 `mem_recall` / `mem_save` 的 system-authority 指针）是按项目 opt-in 的。不跑 `/adopt` 时 hooks 仍记录观察、注入上下文，但 Claude 不太会主动调 MCP 工具。一次性、按项目：`/adopt`；撤销 `/unadopt`。
 3. **配置钩子** -- `PostToolUse`、`PreToolUse`、`SessionStart`、`Stop`、`UserPromptSubmit` 生命周期钩子

package/install.mjs

@@ -1086,8 +1086,12 @@ async function status() {
     // Accept either the current "mem-lite" registration or the legacy "mem"
     // name (pre-v2.78) so a user mid-upgrade still sees a green status until
     // setup.sh / install.mjs purges the legacy entry on next run.
-    const registered = list.includes('mem-lite:') || list.includes('mem-lite ')
-      || list.includes('mem:') || /\bmem\b\s/.test(list);
+    // v2.79.1: dropped a `/\bmem\b\s/` fallback regex — the `\b` word boundary
+    // also matched "mem-lite" (because `-` is a non-word char), so the regex
+    // was always-true noise (benign only because the mem-lite checks short-
+    // circuited first). `claude mcp list` formats as `<name>: <command>`, so
+    // the two colon-form checks below cover every shape.
+    const registered = list.includes('mem-lite:') || list.includes('mem:');
     push(registered ? 'ok' : 'fail', 'mcp', registered ? 'MCP server: registered' : 'MCP server: not registered', { registered });
   } catch {
     push('warn', 'mcp', 'Could not check MCP status', { registered: null });
@@ -1270,7 +1274,7 @@ async function doctor() {
   // even when the user skipped the README.
   const orphanPaths = collectOrphanHookPaths(settings);
   if (orphanPaths.length > 0) {
-    fail(`Orphan hooks: ${orphanPaths.length} settings.json entr${orphanPaths.length === 1 ? 'y references a' : 'ies reference'} missing file(s)`);
+    fail(`Orphan hooks: ${orphanPaths.length} settings.json entr${orphanPaths.length === 1 ? 'y references a missing file' : 'ies reference missing files'}`);
     for (const p of orphanPaths.slice(0, 5)) log(`    missing: ${p}`);
     if (orphanPaths.length > 5) log(`    ... +${orphanPaths.length - 5} more`);
     log(`    Repair: node ${join(PROJECT_DIR, 'install.mjs')} uninstall    # removes the dead hook entries`);
@@ -1518,6 +1522,13 @@ function hasMemHooksConfigured(settings) {
  * interpreter. ${CLAUDE_PLUGIN_ROOT}-templated commands are ignored — those
  * are plugin-owned hooks resolved by Claude Code at runtime, not by us.
  */
+const HOOK_PATH_EXTS = ['.mjs', '.js', '.cjs', '.sh'];
+
+function looksLikeHookPath(p) {
+  if (!p || !p.startsWith('/')) return false;
+  return HOOK_PATH_EXTS.some(ext => p.endsWith(ext));
+}
+
 export function collectOrphanHookPaths(settings) {
   if (!settings?.hooks) return [];
   const out = [];
@@ -1528,12 +1539,19 @@ export function collectOrphanHookPaths(settings) {
       for (const h of cfg.hooks || []) {
         const cmd = h.command || '';
         if (cmd.includes('${CLAUDE_PLUGIN_ROOT}')) continue;
-        const quoted = cmd.match(/"([^"]+)"/);
-        let path = quoted ? quoted[1] : null;
+        // v2.80: scan ALL quoted tokens (was: only the first), prefer ones
+        // that look like a hook path. Fixes a footgun where a wrapper command
+        // like `bash -c "some inline" "/real/path.sh"` would pick "some inline"
+        // and flag a false orphan. If no quoted token looks like a path, fall
+        // through to the unquoted scanner; if that also misses, skip the
+        // entry — we'd rather under-report than false-flag.
+        let path = null;
+        for (const m of cmd.matchAll(/"([^"]+)"/g)) {
+          if (looksLikeHookPath(m[1])) { path = m[1]; break; }
+        }
         if (!path) {
-          // unquoted: split on whitespace, take the first arg that looks like an absolute path
           const parts = cmd.split(/\s+/);
-          path = parts.find(p => p.startsWith('/') && (p.endsWith('.mjs') || p.endsWith('.js') || p.endsWith('.sh'))) || null;
+          path = parts.find(p => looksLikeHookPath(p)) || null;
         }
         if (!path) continue;
         if (!existsSync(path) && !out.includes(path)) out.push(path);

package/lib/citation-tracker.mjs

@@ -283,8 +283,17 @@ export function hasMainThreadAssistantText(transcriptPath) {
   if (!transcriptPath || !existsSync(transcriptPath)) return false;
   let raw;
   try { raw = readFileSync(transcriptPath, 'utf8'); } catch { return false; }
-  for (const line of raw.split('\n')) {
-    if (!line.trim()) continue;
+  // Reverse-iterate so a turn that just produced text returns true on the
+  // FIRST line examined instead of walking the entire transcript. Common case
+  // (model wrote a paragraph → Stop fires) short-circuits in O(1) line parses;
+  // pathological case (no text anywhere) still walks all entries but that's
+  // the degenerate state we want false for anyway. v2.80 perf polish — the
+  // pre-v2.80 forward scan held the full transcript in memory and walked
+  // every line on the common case too.
+  const lines = raw.split('\n');
+  for (let i = lines.length - 1; i >= 0; i--) {
+    const line = lines[i];
+    if (!line || !line.trim()) continue;
     let entry;
     try { entry = JSON.parse(line); } catch { continue; }
     if (entry.type !== 'assistant' || !entry.message) continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "2.79.0",
+  "version": "2.80.0",
   "description": "Lightweight persistent memory system for Claude Code",
   "type": "module",
   "packageManager": "npm@10.9.2",

package/scripts/setup.sh

@@ -83,13 +83,20 @@ mkdir -p "$DATA_DIR/runtime" 2>/dev/null || true
 mark_deps_broken() {
   local reason="$1"
   # Embed reason + repair command so hook.mjs renders a complete error without
-  # having to re-derive them. Single-line JSON for trivial parse.
-  printf '{"ts":"%s","reason":%s,"root":%s,"repair":%s}\n' \
-    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
-    "\"$reason\"" \
-    "\"$ROOT\"" \
-    "\"cd '$ROOT' && npm install --omit=dev\"" \
-    > "$DEPS_FLAG" 2>/dev/null || true
+  # having to re-derive them. Delegate JSON serialization to node so embedded
+  # quotes / shell metachars in $ROOT or $reason can't produce an invalid file
+  # (bash `printf '"..%s.."'` cannot escape arbitrary strings safely; v2.79 fix).
+  MARK_REASON="$reason" MARK_ROOT="$ROOT" MARK_FLAG="$DEPS_FLAG" node -e '
+    const fs = require("fs");
+    const reason = process.env.MARK_REASON || "unknown";
+    const root = process.env.MARK_ROOT || "";
+    fs.writeFileSync(process.env.MARK_FLAG, JSON.stringify({
+      ts: new Date().toISOString(),
+      reason,
+      root,
+      repair: `cd ${JSON.stringify(root)} && npm install --omit=dev`,
+    }) + "\n");
+  ' 2>/dev/null || true
 }
 
 mark_deps_ok() {
@@ -120,18 +127,20 @@ else
   mark_deps_ok
 fi
 
-# 7. MCP cleanup: idempotently clean stale registrations from older installs.
-#    This runs on every plugin SessionStart because old global entries may still
-#    exist even after an earlier migration marker was written.
+# 7. MCP cleanup: one-shot purge of stale global MCP registrations.
 #    - Pre-2.10: direct installs left a global "mem" MCP alongside plugin MCP.
 #    - Pre-2.78: plugin and global registrations used the generic name "mem";
 #      v2.78 renamed to "mem-lite" — any stale global "mem" must be purged so
 #      Claude Code doesn't surface duplicate (old "mem" + new "mem-lite") tool
 #      prefixes side-by-side.
 #    Root .mcp.json in the installed plugin cache is required for Claude Code to
-#    register plugin MCP; only stale global/marketplace copies should be removed.
+#    register plugin MCP; only stale global/marketplace copies are removed.
+#    v2.79.1: marker file now actually gates entry (was touched but never read
+#    pre-v2.79.1 — extra node spawn + JSON parse on every SessionStart for a
+#    near-always no-op). Bump MCP_MIGRATION name to re-run cleanup in future
+#    versions; same shape as the .deps-broken self-heal pattern.
 MCP_MIGRATION="$DATA_DIR/runtime/.mcp-dedup-v2.78"
-if [[ -n "${CLAUDE_PLUGIN_ROOT:-}" ]]; then
+if [[ -n "${CLAUDE_PLUGIN_ROOT:-}" && ! -f "$MCP_MIGRATION" ]]; then
   CLAUDE_JSON="$HOME/.claude.json" node -e '
     const fs = require("fs");
     let changed = false;

package/server.mjs

@@ -2272,6 +2272,12 @@ process.on('unhandledRejection', (err) => { debugCatch(err, 'unhandledRejection'
 // server in one Claude Code session). Two records with close timestamps and
 // the same ppid is the smoking gun. Never throws — telemetry must not block
 // startup. Disable with MEM_DISABLE_SPAWN_LOG=1.
+//
+// File mode: no explicit chmod. Payload is `{ts, pid, ppid, argv1, version}` —
+// no secrets, no project content. Pre-v2.79.1 passed `{mode: 0o600}` to
+// appendFileSync but that only applies on file creation (umask-default after
+// the first append), so the "0600" claim was misleading honesty-wise. Honest
+// comment > misleading code.
 if (process.env.MEM_DISABLE_SPAWN_LOG !== '1') {
   try {
     if (!existsSync(RUNTIME_DIR)) mkdirSync(RUNTIME_DIR, { recursive: true });
@@ -2282,7 +2288,7 @@ if (process.env.MEM_DISABLE_SPAWN_LOG !== '1') {
       argv1: process.argv[1] || '',
       version: PKG_VERSION,
     }) + '\n';
-    appendFileSync(join(RUNTIME_DIR, 'mcp-spawns.log'), line, { mode: 0o600 });
+    appendFileSync(join(RUNTIME_DIR, 'mcp-spawns.log'), line);
   } catch { /* never block startup on telemetry failure */ }
 }