claude-mem-lite 3.28.1 → 3.28.3

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "3.28.1",
+      "version": "3.28.3",
       "source": "./",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.28.1",
+  "version": "3.28.3",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/format-utils.mjs

@@ -24,12 +24,25 @@ export function truncate(str, max = 80) {
   return str.slice(0, end) + '\u2026';
 }
 
-// The block delimiters claude-mem-lite wraps injected context in. Any user-derived text
-// (observation title / lesson, handoff body) that contains one of these LITERALLY would
-// prematurely open or close the block it lands in, and the model then reads the rest as
-// undelimited context. Reachable by editing files that contain these tokens \u2014 e.g.
-// developing claude-mem-lite itself, where source/observations carry the delimiter names.
-const CONTEXT_DELIMITER_RE = /<\/?(?:claude-mem-context|memory-context|session-handoff)>/gi;
+// Two delimiter classes are defanged here:
+//   1. The blocks claude-mem-lite wraps injected context in (claude-mem-context /
+//      memory-context / session-handoff). User-derived text containing one LITERALLY
+//      would prematurely open/close the block it lands in, spilling the rest as
+//      undelimited context.
+//   2. Harness-authority + tool-call tags the runtime injects (system-reminder /
+//      task-notification / function_calls / function_results, the latter two also in
+//      their antml:-namespaced form). Memory replays arbitrary captured text \u2014 file
+//      contents, tool output, web pages \u2014 so a poisoned observation carrying a literal
+//      <system-reminder>\u2026</system-reminder> or a forged <function_calls>\u2026</function_calls>
+//      block would smuggle a privileged-channel instruction / fake tool-call narrative
+//      into the model's context. It can't escape its wrapper (class 1 closers are
+//      defanged), but a nested forged authority/tool tag is still an indirect-prompt-
+//      injection vector; strip the brackets so it reads as inert text. Other tags
+//      (<other-tag>) \u2014 and the attribute-bearing <invoke \u2026>/<parameter \u2026> forms \u2014 are
+//      deliberately left intact.
+// Reachable by editing files that contain these tokens \u2014 e.g. developing claude-mem-lite
+// itself, where source/observations carry the delimiter names.
+const CONTEXT_DELIMITER_RE = /<\/?(?:claude-mem-context|memory-context|session-handoff|system-reminder|task-notification|(?:antml:)?function_calls|(?:antml:)?function_results)>/gi;
 
 /**
  * Defang the literal context-block delimiter tags in user-derived text. Strips just the

package/lib/import-jsonl.mjs

@@ -134,8 +134,19 @@ function importToolPair(db, toolUse, toolResult, project) {
  * @param {{project: string}} opts
  * @returns {Promise<{prompts:number, observations:number, skipped:number, orphans:number}>}
  */
+// Cold-start backfill reads the whole transcript into one JS string (the dedup
+// state + the better-sqlite3 transaction below are synchronous, so a drop-in async
+// stream isn't available). V8 caps a single string near 512MB, so a larger file
+// throws a cryptic "Cannot create a string longer than…" mid-read. Fail early with
+// an actionable message instead — well under that hard limit.
+export const MAX_IMPORT_BYTES = 450 * 1024 * 1024;
+
 export async function importJsonl(db, path, { project }) {
-  statSync(path);
+  const st = statSync(path);
+  if (st.size > MAX_IMPORT_BYTES) {
+    const mb = (n) => Math.round(n / (1024 * 1024));
+    throw new Error(`transcript too large (${mb(st.size)}MB > ${mb(MAX_IMPORT_BYTES)}MB cap); split it (e.g. split -l 50000 into parts) and import the parts`);
+  }
   const lines = readFileSync(path, 'utf8').split('\n');
   const seenPrompts = new Set();
   const seenObs = new Set();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.28.1",
+  "version": "3.28.3",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",

package/tier.mjs

@@ -73,7 +73,14 @@ export const TIER_CASE_SQL = `(CASE
   WHEN type = 'bugfix'    AND created_at_epoch >= ? THEN 'active'
   WHEN type = 'refactor'  AND created_at_epoch >= ? THEN 'active'
   WHEN type = 'change'    AND created_at_epoch >= ? THEN 'active'
-  WHEN created_at_epoch >= ? THEN 'active'
+  -- Default-window fallthrough is for UNKNOWN/null types ONLY, mirroring
+  -- computeTier's ACTIVE_WINDOWS[type] with a DEFAULT fallback (a KNOWN type
+  -- never takes the fallback). Without the type guard, a known type whose window
+  -- was configured SHORTER than the default would wrongly re-qualify as 'active'
+  -- here after its own window expired — diverging from the JS classifier.
+  -- The "type IS NULL" arm keeps null-type rows on the default window (JS parity).
+  WHEN (type IS NULL OR type NOT IN ('decision','discovery','feature','bugfix','refactor','change'))
+       AND created_at_epoch >= ? THEN 'active'
   ELSE 'archive'
 END)`;