claude-mem-lite 3.40.0 → 3.42.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "3.40.0",
+      "version": "3.42.0",
       "source": "./",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.40.0",
+  "version": "3.42.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/hook-context.mjs

@@ -305,6 +305,7 @@ export function buildSessionContextLines(db, project, now = new Date(), currentC
       FROM observations
       WHERE COALESCE(compressed_into, 0) = 0
         AND superseded_at IS NULL
+        AND ${notLowSignalTitleClause('')}
         AND (
           (created_at_epoch > ? AND importance >= 1)
           OR (created_at_epoch > ? AND importance >= 2)

package/hook-handoff.mjs

@@ -271,13 +271,28 @@ export function detectContinuationIntent(db, promptText, project, currentCcSessi
   try {
     const currentSha = gitStateModule.readGitState({ cwd: process.cwd() }).headSha;
     if (currentSha) {
-      const anchor = db.prepare(`
-        SELECT created_at_epoch FROM session_handoffs
-        WHERE project = ? AND git_sha_at_handoff = ?
-        ORDER BY created_at_epoch DESC LIMIT 1
-      `).get(project, currentSha);
+      // Scope like Stage 2: an 'exit' anchor is cross-session (resume after /exit), but a 'clear'
+      // anchor is same-session only — else a parallel same-project session at the same commit
+      // would hijack (and then delete) another session's clear handoff.
+      const anchor = currentCcSessionId
+        ? db.prepare(`
+            SELECT created_at_epoch, match_keywords FROM session_handoffs
+            WHERE project = ? AND git_sha_at_handoff = ? AND (type = 'exit' OR session_id = ?)
+            ORDER BY created_at_epoch DESC LIMIT 1
+          `).get(project, currentSha, currentCcSessionId)
+        : db.prepare(`
+            SELECT created_at_epoch, match_keywords FROM session_handoffs
+            WHERE project = ? AND git_sha_at_handoff = ?
+            ORDER BY created_at_epoch DESC LIMIT 1
+          `).get(project, currentSha);
       if (anchor && (Date.now() - anchor.created_at_epoch <= HANDOFF_ANCHOR_MAX_AGE)) {
-        return true;
+        // Unmoved HEAD is a strong resume signal, but must not hijack a NEW task typed at the
+        // same commit: gate long prompts on keyword overlap (mirror Stage 0). Short prompts
+        // (resume nudges) auto-continue.
+        if (promptText.length < 40) return true;
+        const hTokens = anchor.match_keywords ? new Set(tokenizeHandoff(anchor.match_keywords)) : null;
+        if (!hTokens || tokenizeHandoff(promptText).some(t => hTokens.has(t))) return true;
+        // long prompt with zero keyword overlap → fall through to Stage 0/1/2
       }
     }
   } catch { /* git/DB failure must not break the rest of the pipeline */ }

package/hook-llm.mjs

@@ -11,7 +11,7 @@ import {
 } from './utils.mjs';
 import { acquireLLMSlot, releaseLLMSlot } from './hook-semaphore.mjs';
 import { scrubRecord } from './lib/scrub-record.mjs';
-import { getVocabulary, computeVector } from './tfidf.mjs';
+import { getVocabulary, computeVector, vecTextForRow } from './tfidf.mjs';
 import { insertObservationRow, insertObservationFiles, insertObservationVector } from './lib/observation-write.mjs';
 import { DEDUP_JACCARD_THRESHOLD, AUTO_MERGE_THRESHOLD } from './lib/dedup-constants.mjs';
 import {
@@ -124,10 +124,12 @@ function buildFtsTextField(obs) {
 // weight) and search_aliases (finding #8: previously omitted, so even with vectors
 // enabled the paraphrase-bridge alias terms were invisible to cosine similarity).
 export function buildVecText(obs) {
-  const conceptsText = Array.isArray(obs.concepts) ? obs.concepts.join(' ') : (obs.concepts || '');
-  const aliasesText = obs.searchAliases || '';
-  return [obs.title || '', obs.narrative || '', conceptsText, obs.lessonLearned || '', aliasesText]
-    .filter(Boolean).join(' ');
+  // Single source (V-F1): map the camelCase obs onto vecTextForRow's row shape so save and
+  // every rebuild path encode the identical field set (title/narrative/concepts/lesson/aliases).
+  return vecTextForRow({
+    title: obs.title, narrative: obs.narrative, concepts: obs.concepts,
+    lesson_learned: obs.lessonLearned, search_aliases: obs.searchAliases,
+  });
 }
 
 /**
@@ -996,7 +998,8 @@ ${actionList}`;
           search_aliases: obs.searchAliases || null,
         });
         db.prepare(`
-          UPDATE observations SET type=?, title=?, subtitle=?, narrative=?, concepts=?, facts=?,
+          UPDATE observations SET type=?, title=?, subtitle=?,
+            narrative=COALESCE(NULLIF(?, ''), narrative), concepts=?, facts=?,
             text=?, importance=?, files_read=?, minhash_sig=?, lesson_learned=?, search_aliases=?
           WHERE id = ?
         `).run(
@@ -1018,7 +1021,7 @@ ${actionList}`;
         try {
           const vocab = getVocabulary(db);
           if (vocab) {
-            const vecText = [obs.title || '', obs.narrative || '', conceptsText].filter(Boolean).join(' ');
+            const vecText = vecTextForRow({ title: obs.title, narrative: obs.narrative, concepts: conceptsText, lesson_learned: safe.lesson_learned, search_aliases: safe.search_aliases });
             const vec = computeVector(vecText, vocab);
             if (vec) {
               db.prepare('INSERT OR REPLACE INTO observation_vectors (observation_id, vector, vocab_version, created_at_epoch) VALUES (?, ?, ?, ?)')

package/hook-optimize.mjs

@@ -12,7 +12,7 @@ import {
 import { callModelJSON } from './haiku-client.mjs';
 import { acquireLLMSlot, releaseLLMSlot } from './hook-semaphore.mjs';
 import { scrubRecord } from './lib/scrub-record.mjs';
-import { getVocabulary, computeVector, cosineSimilarity } from './tfidf.mjs';
+import { getVocabulary, computeVector, cosineSimilarity, vecTextForRow } from './tfidf.mjs';
 import { MERGE_JACCARD_LOW, AUTO_MERGE_THRESHOLD } from './lib/dedup-constants.mjs';
 import { DB_DIR } from './schema.mjs';
 
@@ -25,9 +25,14 @@ export function distributeBudget(total = 15) {
   const reenrich = Math.max(1, Math.floor(total * 0.4));
   const clusterMerge = Math.max(1, Math.floor(total * 0.3));
   const smartCompress = Math.max(1, total - reenrich - normalize - clusterMerge);
-  // Clamp: if total is too small for 4 tasks, cap each so sum ≤ total
+  // Clamp: if total is too small for all 4 tasks, allocate 1 each by priority until `total`
+  // is exhausted so the returned sum is ≤ total (the old fallback returned {1,1,1,1}=4 for
+  // total≤3, over-running `optimize --max N`).
   if (reenrich + normalize + clusterMerge + smartCompress > total) {
-    return { reenrich: Math.max(1, total - 3), normalize: 1, clusterMerge: 1, smartCompress: 1 };
+    const alloc = { reenrich: 0, clusterMerge: 0, smartCompress: 0, normalize: 0 };
+    const order = ['reenrich', 'clusterMerge', 'smartCompress', 'normalize'];
+    for (let i = 0; i < total && i < order.length; i++) alloc[order[i]] = 1;
+    return alloc;
   }
   return { reenrich, normalize, clusterMerge, smartCompress };
 }
@@ -39,11 +44,16 @@ export function distributeBudget(total = 15) {
  * Exported for testing; also kept as the single source of vector-rebuild logic
  * for the optimize / re-enrich path to avoid drift with the hook-llm write path.
  */
-export function rebuildVector(db, obsId, textParts) {
+export function rebuildVector(db, obsId, textPartsOrRow) {
   try {
     const vocab = getVocabulary(db);
     if (!vocab) return;
-    const vec = computeVector(textParts.filter(Boolean).join(' '), vocab);
+    // Accept a legacy [parts] array OR an observation row (preferred — single-source field set
+    // incl. lesson_learned/search_aliases via vecTextForRow, so rebuilds match the save path).
+    const text = Array.isArray(textPartsOrRow)
+      ? textPartsOrRow.filter(Boolean).join(' ')
+      : vecTextForRow(textPartsOrRow);
+    const vec = computeVector(text, vocab);
     if (vec) {
       // Bug #1 fix: column is `created_at_epoch`, not `computed_at`. Every other
       // INSERT callsite (server.mjs, hook-llm.mjs, mem-cli.mjs) uses the correct
@@ -87,7 +97,7 @@ export function findReenrichCandidates(db, limit = 10, { scope = 'narrow', proje
     // deliberately NOT gated on optimized_at, so a lesson-less row can still be
     // picked up by wide scope for lesson enrichment afterward.
     const stmt = db.prepare(`
-      SELECT id, title, narrative, type, subtitle, concepts, facts, text, search_aliases, project
+      SELECT id, title, narrative, type, subtitle, concepts, facts, text, search_aliases, importance, project
       FROM observations
       WHERE COALESCE(compressed_into, 0) = 0
         AND superseded_at IS NULL
@@ -102,7 +112,7 @@ export function findReenrichCandidates(db, limit = 10, { scope = 'narrow', proje
   }
   if (scope === 'wide') {
     const stmt = db.prepare(`
-      SELECT id, title, narrative, type, subtitle, concepts, facts, search_aliases, project
+      SELECT id, title, narrative, type, subtitle, concepts, facts, search_aliases, importance, project
       FROM observations
       WHERE COALESCE(compressed_into, 0) = 0
         AND superseded_at IS NULL
@@ -120,7 +130,7 @@ export function findReenrichCandidates(db, limit = 10, { scope = 'narrow', proje
     return project ? stmt.all(project, limit) : stmt.all(limit);
   }
   const stmt = db.prepare(`
-    SELECT id, title, narrative, type, subtitle, project
+    SELECT id, title, narrative, type, subtitle, importance, project
     FROM observations
     WHERE COALESCE(compressed_into, 0) = 0
       AND (concepts IS NULL OR concepts = '')
@@ -205,7 +215,10 @@ search_aliases: 2-6 alternative search terms (include CJK if applicable).`;
         continue;
       }
 
-      const type = validTypes.has(parsed.type) ? parsed.type : cand.type || 'change';
+      // Enrichment ("add a lesson") must not reclassify a specific type down to the generic
+      // 'change' (lower TYPE_QUALITY + faster decay); keep the stored type on that downgrade.
+      let type = validTypes.has(parsed.type) ? parsed.type : (cand.type || 'change');
+      if (type === 'change' && cand.type && cand.type !== 'change') type = cand.type;
       const concepts = Array.isArray(parsed.concepts) ? parsed.concepts.slice(0, 10) : [];
       const facts = Array.isArray(parsed.facts) ? parsed.facts.slice(0, 10) : [];
       // Preserve-on-empty: wide-scope candidates can already carry concepts/facts/aliases
@@ -227,7 +240,10 @@ search_aliases: 2-6 alternative search terms (include CJK if applicable).`;
         ? parsed.search_aliases.slice(0, 6).join(' ') : (cand.search_aliases || null);
       const title = truncate(scrubSecrets(parsed.title || ''), 120);
       const narrative = truncate(scrubSecrets(parsed.narrative || cand.narrative || ''), 500);
-      const importance = clampImportance(parsed.importance);
+      // Floor at the stored importance: re-enrich adds a lesson, it must never silently downgrade
+      // a user-set/promoted importance (the UPDATE also sets optimized_at → the loss is permanent).
+      // Upgrades are still honored.
+      const importance = Math.max(clampImportance(parsed.importance), cand.importance || 1);
 
       const bigramText = cjkBigrams((title || '') + ' ' + (narrative || ''));
       const textField = [conceptsText, factsText, searchAliases || '', bigramText].filter(Boolean).join(' ');
@@ -250,7 +266,7 @@ search_aliases: 2-6 alternative search terms (include CJK if applicable).`;
       `).run(type, safe.title, safe.narrative, safe.concepts, safe.facts, safe.text,
         importance, safe.lesson_learned, safe.search_aliases, minhashSig, Date.now(), cand.id);
 
-      rebuildVector(db, cand.id, [title, narrative, conceptsText]);
+      rebuildVector(db, cand.id, { title, narrative, concepts: conceptsText, lesson_learned: safe.lesson_learned, search_aliases: safe.search_aliases });
 
       processed++;
     } catch (e) {
@@ -362,7 +378,7 @@ export function applyNormalization(db, groups, { project = null } = {}) {
   // contamination the --project flag was added to prevent. NULL → all projects (legacy
   // unscoped run), matching the search-engine `(? IS NULL OR project = ?)` idiom.
   const rows = db.prepare(`
-    SELECT id, concepts, search_aliases FROM observations
+    SELECT id, title, narrative, concepts, search_aliases, lesson_learned FROM observations
     WHERE COALESCE(compressed_into, 0) = 0
       AND concepts IS NOT NULL AND concepts != ''
       AND (? IS NULL OR project = ?)
@@ -395,6 +411,9 @@ export function applyNormalization(db, groups, { project = null } = {}) {
         search_aliases: newAliases,
       });
       updateStmt.run(safe.concepts, safe.search_aliases, Date.now(), row.id);
+      // V-F3: normalize mutated concepts + search_aliases (both vector fields) — rebuild the
+      // vector so it reflects the canonicalized terms (no-op when the vector arm is disabled).
+      rebuildVector(db, row.id, { title: row.title, narrative: row.narrative, concepts: safe.concepts, search_aliases: safe.search_aliases, lesson_learned: row.lesson_learned });
       updated++;
     }
   }
@@ -433,7 +452,7 @@ export function findMergeCandidates(db, maxClusters = 5, { project } = {}) {
   const cutoff = Date.now() - MERGE_TIME_WINDOW_MS;
   const projectClause = project ? 'AND project = ?' : '';
   const stmt = db.prepare(`
-    SELECT id, title, narrative, project, type, access_count, importance, created_at_epoch, minhash_sig, lesson_learned
+    SELECT id, title, narrative, project, type, access_count, importance, created_at_epoch, minhash_sig, lesson_learned, concepts, facts
     FROM observations
     WHERE COALESCE(compressed_into, 0) = 0
       AND superseded_at IS NULL
@@ -520,12 +539,15 @@ Return ONLY valid JSON:
 
     const concepts = Array.isArray(parsed.merged_concepts) ? parsed.merged_concepts.slice(0, 10) : [];
     const facts = Array.isArray(parsed.merged_facts) ? parsed.merged_facts.slice(0, 10) : [];
-    const conceptsText = concepts.join(' ');
-    const factsText = facts.join(' ');
+    // Preserve-on-empty (mirror the merged_lesson guard below + the re-enrich path): the merge
+    // overwrites the keeper in place, so a partial LLM response that omits these must fall back to
+    // the keeper's own values, not blank its live concepts/facts (findMergeCandidates now selects them).
+    const conceptsText = concepts.length ? concepts.join(' ') : (keeper.concepts || '');
+    const factsText = facts.length ? facts.join(' ') : (keeper.facts || '');
     // Scrub BEFORE truncate (see re-enrich note): keep the boundary cut on
     // already-scrubbed text so a straddling secret can't leak a sub-floor head.
     const title = truncate(scrubSecrets(parsed.merged_title || ''), 120);
-    const narrative = truncate(scrubSecrets(parsed.merged_narrative || ''), 800);
+    const narrative = truncate(scrubSecrets(parsed.merged_narrative || keeper.narrative || ''), 800);
     // Preserve-on-empty. The merge overwrites the keeper in place and hides every non-keeper
     // member (compressed_into=keeper.id), so if the LLM returns merged_lesson:null (the prompt
     // at :429 explicitly permits it) every cluster lesson would leave all live surfaces at once
@@ -589,7 +611,7 @@ Return ONLY valid JSON:
         .run(keeper.id, ...otherIds);
     })();
 
-    rebuildVector(db, keeper.id, [title, narrative, conceptsText]);
+    rebuildVector(db, keeper.id, { title, narrative, concepts: conceptsText, lesson_learned: lessonLearned, search_aliases: keeper.search_aliases });
 
     debugLog('DEBUG', 'llm-optimize', `merged ${cluster.length} observations into #${keeper.id}`);
     return { merged: true, keeperId: keeper.id, mergedCount: others.length };
@@ -793,7 +815,7 @@ JSON: {"title":"descriptive summary ≤120 chars","narrative":"comprehensive sum
       return sId;
     })();
 
-    rebuildVector(db, summaryId, [title, narrative, conceptsText]);
+    rebuildVector(db, summaryId, { title, narrative, concepts: conceptsText });
 
     debugLog('DEBUG', 'llm-optimize', `smart-compressed ${observations.length} observations into #${summaryId}`);
     return { compressed: true, summaryId, count: observations.length };

package/hook-shared.mjs

@@ -98,7 +98,9 @@ export function sweepOrphanEpisodeFiles(runtimeDir, { ageMs = ORPHAN_EPISODE_AGE
   const readsCutoff = now - readsAgeMs;
   let count = 0;
   for (const f of entries) {
-    const isEpisode = f.startsWith('ep-flush-') || f.startsWith('pending-');
+    // `.claim-` = handleStop's lock-contended fallback claim file (ep-<project>.json.claim-<pid>-<ts>),
+    // which leaks if the process dies between rename and unlink; sweep it on the same 1h cutoff.
+    const isEpisode = f.startsWith('ep-flush-') || f.startsWith('pending-') || f.includes('.claim-');
     const isReads = f.startsWith('reads-') && f.endsWith('.txt');
     if (!isEpisode && !isReads) continue;
     const full = join(runtimeDir, f);

package/hook.mjs

@@ -484,6 +484,10 @@ async function handleStop() {
           for (const sub of planEpisodeFlush(episode)) {
             if (!sub.sessionId) sub.sessionId = sessionId;
             if (!sub.project) sub.project = project;
+            // Per-sub significance gate — parity with flushEpisodeGroup. The whole-episode check
+            // above can pass while an interleaved concurrent-session sub is pure noise (e.g. a lone
+            // Read); without this the fallback persists that noise sub AND spawns an LLM worker for it.
+            if (!episodeHasSignificantContent(sub)) continue;
             try {
               const obs = buildImmediateObservation(sub);
               const id = saveObservation(obs, sub.project, sub.sessionId);
@@ -1412,7 +1416,14 @@ async function handleUserPrompt() {
     );
 
     // Cross-session handoff injection (first 3 prompts window, before semantic memory).
-    if (promptNumber <= 3) {
+    // prompt_counter is project-scoped (shared across concurrent same-project CC sessions), so a
+    // parallel session would start past the window and never get its handoff injected. Count THIS
+    // cc_session's own prompts instead (the current one is already inserted above); legacy null cc
+    // id falls back to the shared counter.
+    const windowPos = ccSessionId
+      ? (db.prepare('SELECT COUNT(*) c FROM user_prompts WHERE cc_session_id = ?').get(ccSessionId)?.c || promptNumber)
+      : promptNumber;
+    if (windowPos <= 3) {
       try {
         if (detectContinuationIntent(db, promptText, project, ccSessionId)) {
           const picked = pickHandoffToInject(db, project, ccSessionId);

package/install.mjs

@@ -1688,12 +1688,18 @@ async function doctor() {
 
 // ─── Settings helpers ───────────────────────────────────────────────────────
 
-function isMemHook(cfg) {
+// Identify a settings hook as one of OURS (to replace on install / strip on uninstall).
+// Must be tight: the old `hook.mjs` + event-word test matched a user's OWN generic hook
+// (`node ~/.config/hook.mjs session-start`) and install/uninstall silently deleted it.
+// The launcher marker (`hook-launcher.mjs`, which every Node hook routes through since v2.84)
+// replaces that clause; the product-name substring (our install-dir / legacy-direct hooks)
+// and the bash prefilter round out the real markers.
+export function isMemHook(cfg) {
   if (!cfg.hooks) return false;
   return cfg.hooks.some(h => {
     const cmd = h.command || '';
     return cmd.includes('claude-mem-lite') ||
-      (cmd.includes('hook.mjs') && /\b(session-start|stop|user-prompt|pre-tool-use)\b/.test(cmd)) ||
+      cmd.includes('hook-launcher.mjs') ||
       cmd.includes('scripts/post-tool-use.sh');
   });
 }

package/lib/citation-tracker.mjs

@@ -626,9 +626,10 @@ export function applyCitationDecay(db, project, injectedIds, citedIds, sessionId
   // cite-rate reads N/2 for a single injected-then-cited obs instead of N/1.
   const updatePromote = db.prepare(`
     UPDATE observations
-       SET importance = MIN(?, importance + 1),
+       SET importance = MIN(?, COALESCE(importance, 1) + 1),
            cited_count = cited_count + 1,
            uncited_streak = 0,
+           demoted_at = NULL,
            last_decided_session_id = ?,
            last_cited_session_id = ?,
            decay_seen_count = decay_seen_count + ?
@@ -655,7 +656,7 @@ export function applyCitationDecay(db, project, injectedIds, citedIds, sessionId
   `);
   const updateDemote = db.prepare(`
     UPDATE observations
-       SET importance = MAX(?, importance - 1),
+       SET importance = MAX(?, COALESCE(importance, 1) - 1),
            uncited_streak = 0,
            last_decided_session_id = ?,
            demoted_at = ?,

package/lib/import-jsonl.mjs

@@ -147,7 +147,11 @@ export async function importJsonl(db, path, { project }) {
     const mb = (n) => Math.round(n / (1024 * 1024));
     throw new Error(`transcript too large (${mb(st.size)}MB > ${mb(MAX_IMPORT_BYTES)}MB cap); split it (e.g. split -l 50000 into parts) and import the parts`);
   }
-  const lines = readFileSync(path, 'utf8').split('\n');
+  // Strip a leading UTF-8 BOM — Node's utf8 read leaves it on, so line 1 would become
+  // a U+FEFF-prefixed "{...}" and fail JSON.parse (silently dropped as "skipped"). Real CC
+  // are BOM-less, but an editor-touched or re-encoded file can carry one.
+  const rawText = readFileSync(path, 'utf8');
+  const lines = (rawText.charCodeAt(0) === 0xFEFF ? rawText.slice(1) : rawText).split('\n');
   const seenPrompts = new Set();
   const seenObs = new Set();
   // Pre-seed dedup sets from existing rows so a second run on the same file

package/lib/maintain-core.mjs

@@ -13,7 +13,7 @@
 //   { projectFilter: 'AND project = ?' | '', baseParams: [project?] , staleAge, opCap }
 
 import { COMPRESSED_PENDING_PURGE, computeMinHash, estimateJaccardFromMinHash, jaccardSimilarity } from '../utils.mjs';
-import { rebuildVocabulary, computeVector, _resetVocabCache, vectorsEnabled } from '../tfidf.mjs';
+import { rebuildVocabulary, computeVector, _resetVocabCache, vectorsEnabled, vecTextForRow } from '../tfidf.mjs';
 import { DEDUP_JACCARD_THRESHOLD, MINHASH_PRE_THRESHOLD as MINHASH_PRE_THRESHOLD_SRC, FUZZY_DEDUP_THRESHOLD, FUZZY_BODY_THRESHOLD, MINHASH_PREFILTER } from './dedup-constants.mjs';
 
 export const STALE_AGE_MS = 30 * 86400000;
@@ -428,7 +428,7 @@ export function rebuildVectors(db) {
   const vocab = rebuildVocabulary(db);
   if (!vocab) return { ok: false, reason: 'no observations to build vocabulary from' };
   const allObs = db.prepare(`
-    SELECT id, title, narrative, concepts FROM observations
+    SELECT id, title, narrative, concepts, lesson_learned, search_aliases FROM observations
     WHERE COALESCE(compressed_into, 0) = 0 AND superseded_at IS NULL
   `).all();
   let updated = 0;
@@ -437,8 +437,7 @@ export function rebuildVectors(db) {
   db.transaction(() => {
     db.prepare('DELETE FROM observation_vectors').run();
     for (const obs of allObs) {
-      const text = [obs.title || '', obs.narrative || '', obs.concepts || ''].filter(Boolean).join(' ');
-      const vec = computeVector(text, vocab);
+      const vec = computeVector(vecTextForRow(obs), vocab);
       if (vec) {
         insertStmt.run(obs.id, Buffer.from(vec.buffer), vocab.version, now);
         updated++;

package/lib/search-core.mjs

@@ -28,6 +28,7 @@ import { sanitizeFtsQuery, relaxFtsQueryToOr, SESS_BM25, DEFAULT_DECAY_HALF_LIFE
 import { cjkPrecisionOk, extractCjkLikePatterns } from '../nlp.mjs';
 import { computeTier } from '../tier.mjs';
 import { countSearchTotal, attachBodyTokens } from '../search-engine.mjs';
+import { notLowSignalTitleClause } from '../scoring-sql.mjs';
 
 /** Sanitize a user query to FTS5 syntax; optionally force OR semantics. */
 export function buildSearchFtsQuery(query, { or = false } = {}) {
@@ -459,6 +460,11 @@ export async function coreRunSearchPipeline(ctx, opts) {
   // ── Type-list fallback (MCP): obs_type set + 0 matches → list recent of that type ──
   if (obsTypeFallback && results.length === 0 && obsType) {
     const typeWheres = ['COALESCE(compressed_into, 0) = 0', 'superseded_at IS NULL', 'type = ?'];
+    // Mirror the FTS path's low-signal filter (buildObsFtsQuery): this fallback is still a
+    // SEARCH surface, so degraded titles ("Modified X", "Error: …") must not lead it —
+    // acute for obs_type='change', the noise band. (The no-query recent-listing in
+    // searchObservationsHybrid deliberately does NOT filter — it mirrors mem_recent.)
+    if (!includeNoise) typeWheres.push(notLowSignalTitleClause(''));
     const typeParams = [obsType];
     if (project) { typeWheres.push('project = ?'); typeParams.push(project); }
     if (epochFrom !== null) { typeWheres.push('created_at_epoch >= ?'); typeParams.push(epochFrom); }

package/mem-cli.mjs

@@ -1538,7 +1538,15 @@ function cmdUpdate(db, args) {
     }
     updates.push('title = ?'); params.push(scrubSecrets(flags.title));
   }
-  if (flags.narrative !== undefined) { updates.push('narrative = ?'); params.push(scrubSecrets(flags.narrative)); }
+  if (flags.narrative !== undefined) {
+    // Reject empty (mirror --title): an explicit '' would blank the narrative
+    // irrecoverably (update takes no snapshot). Omit the flag to leave it unchanged.
+    if (typeof flags.narrative === 'string' && flags.narrative.trim() === '') {
+      fail('[mem] --narrative cannot be empty. Omit the flag to leave it unchanged.');
+      return;
+    }
+    updates.push('narrative = ?'); params.push(scrubSecrets(flags.narrative));
+  }
   if (flags.type) {
     const validTypes = new Set(['decision', 'bugfix', 'feature', 'refactor', 'discovery', 'change']);
     if (!validTypes.has(flags.type)) {
@@ -1566,13 +1574,23 @@ function cmdUpdate(db, args) {
       fail(`[mem] --lesson too long (${rawLesson.length} chars, max 500).`);
       return;
     }
+    if (typeof rawLesson === 'string' && rawLesson.trim() === '') {
+      fail('[mem] --lesson cannot be empty. Omit the flag to leave it unchanged.');
+      return;
+    }
     updates.push('lesson_learned = ?');
     params.push(scrubSecrets(rawLesson));
   }
   // Scrub like the sibling text fields above (title/narrative/lesson) and the MCP twin
   // mem_update — concepts is a scrub-target + FTS-indexed column, so a raw secret here
   // lands searchable + exportable (rebuildObservationDerived folds it into `text`).
-  if (flags.concepts !== undefined) { updates.push('concepts = ?'); params.push(scrubSecrets(flags.concepts)); }
+  if (flags.concepts !== undefined) {
+    if (typeof flags.concepts === 'string' && flags.concepts.trim() === '') {
+      fail('[mem] --concepts cannot be empty. Omit the flag to leave it unchanged.');
+      return;
+    }
+    updates.push('concepts = ?'); params.push(scrubSecrets(flags.concepts));
+  }
 
   if (updates.length === 0) {
     fail('[mem] No fields to update. Use --title, --type, --importance, --lesson/--lesson-learned, --narrative, --concepts');
@@ -1664,7 +1682,7 @@ function cmdExport(db, args) {
   // id + memory_session_id are informational (restore remaps id and buckets under
   // a restore session).
   const rows = db.prepare(`
-    SELECT id, memory_session_id, project, type, title, subtitle, narrative, concepts, facts,
+    SELECT id, memory_session_id, project, type, title, subtitle, narrative, text, concepts, facts,
            files_read, files_modified, lesson_learned, search_aliases, importance, branch,
            access_count, cited_count, uncited_streak, injection_count, decay_seen_count,
            last_accessed_at, created_at, created_at_epoch
@@ -1740,6 +1758,7 @@ function cmdRestore(db, argv) {
 
   const dupCheck = db.prepare('SELECT id FROM observations WHERE project = ? AND title = ? AND created_at_epoch = ? LIMIT 1');
   const signalUpdate = db.prepare(`UPDATE observations SET
+      text = COALESCE(?, text),
       subtitle = ?, concepts = ?, facts = ?, search_aliases = ?, files_read = ?, branch = COALESCE(?, branch),
       access_count = ?, cited_count = ?, uncited_streak = ?, injection_count = ?,
       decay_seen_count = ?, last_accessed_at = ?
@@ -1770,15 +1789,20 @@ function cmdRestore(db, argv) {
       });
       if (res.kind !== 'saved') { skipped++; continue; } // saveObservation Jaccard dedup
       // Re-apply the fields saveObservation zeros/derives so the backup is faithful.
-      // search_aliases is its own FTS5 column, so this UPDATE re-syncs the index
-      // (via the observations FTS triggers) and restored aliases stay searchable.
-      // Scrub the FTS-indexed text fields on the way in — the sibling ingest paths
-      // (import-jsonl, compress-core) scrub as defense-in-depth, and restore is the only
-      // rewrite path that skipped it. A backup made before a SECRET_PATTERNS entry existed
-      // would otherwise re-index an old secret in facts/concepts even though narrative
-      // (routed through saveObservation) gets re-scrubbed. files_read/branch are
-      // paths/identifiers, not scrub-target text — left as-is.
+      // `text` is the observation BODY and its own FTS5 column — import-jsonl / cold-start
+      // rows keep the body there with an empty narrative, so saveObservation (content =
+      // narrative || title) would collapse it to the bare title. COALESCE re-applies the
+      // exported body (NULL when absent → keep saveObservation's derived text, so old
+      // backups without the column degrade gracefully). search_aliases is its own FTS5
+      // column too, so this UPDATE re-syncs the index (via the observations FTS triggers)
+      // and restored body/aliases stay searchable. Scrub the FTS-indexed text fields on
+      // the way in — the sibling ingest paths (import-jsonl, compress-core) scrub as
+      // defense-in-depth, and restore is the only rewrite path that skipped it. A backup
+      // made before a SECRET_PATTERNS entry existed would otherwise re-index an old secret
+      // in text/facts/concepts. files_read/branch are paths/identifiers, not scrub-target
+      // text — left as-is.
       signalUpdate.run(
+        r.text ? scrubSecrets(r.text) : null,
         scrubSecrets(r.subtitle || ''), scrubSecrets(r.concepts || ''), scrubSecrets(r.facts || ''),
         r.search_aliases === null || r.search_aliases === undefined ? null : scrubSecrets(r.search_aliases),
         r.files_read || '[]', r.branch ?? null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.40.0",
+  "version": "3.42.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",

package/registry.mjs

@@ -390,11 +390,16 @@ const UPSERT_SQL = `
     capability_summary=CASE WHEN excluded.capability_summary != '' THEN excluded.capability_summary ELSE capability_summary END,
     input_type=CASE WHEN excluded.input_type != '' THEN excluded.input_type ELSE input_type END,
     output_type=CASE WHEN excluded.output_type != '' THEN excluded.output_type ELSE output_type END,
-    prerequisites=excluded.prerequisites,
+    -- Preserve-on-empty (same class as the FTS text columns above): a partial re-import
+    -- omits prerequisites/complexity, so upsertResource supplies their DEFAULTS ('{}' /
+    -- 'intermediate'). No CLI flag sets these (only a full re-index does), so treating the
+    -- default as the "absent" sentinel is safe: a real re-index sends non-default values,
+    -- which still overwrite; a metadata edit sends the default, which now preserves.
+    prerequisites=CASE WHEN excluded.prerequisites NOT IN ('', '{}') THEN excluded.prerequisites ELSE prerequisites END,
     keywords=CASE WHEN excluded.keywords != '' THEN excluded.keywords ELSE keywords END,
     tech_stack=CASE WHEN excluded.tech_stack != '' THEN excluded.tech_stack ELSE tech_stack END,
     use_cases=CASE WHEN excluded.use_cases != '' THEN excluded.use_cases ELSE use_cases END,
-    complexity=excluded.complexity,
+    complexity=CASE WHEN excluded.complexity NOT IN ('', 'intermediate') THEN excluded.complexity ELSE complexity END,
     indexed_at=excluded.indexed_at, updated_at=datetime('now')
 `;
 

package/scripts/setup.sh

@@ -39,20 +39,18 @@ fi
 mkdir -p "$DATA_DIR"
 log_ok "Data directory: $DATA_DIR"
 
-# 3. Migrate from old ~/.claude-mem/ if needed
+# 3. Legacy ~/.claude-mem/ DB is schema-v16 (no memory_session_id) with no migration bridge to
+#    the current schema — activating it FATALs on first launch ("no such column: memory_session_id")
+#    and the "! -f claude-mem-lite.db" guard would re-copy it every time the user deletes the broken
+#    DB (recovery loop). Mirror install.mjs migrateLegacyClaudeMemData: back it up (don't activate)
+#    and let a fresh DB be created. Source ~/.claude-mem/ is left intact.
 OLD_DIR="$HOME/.claude-mem"
 if [[ -f "$OLD_DIR/claude-mem.db" && ! -f "$DATA_DIR/claude-mem-lite.db" && ! -f "$DATA_DIR/claude-mem.db" ]]; then
-  log_info "Migrating data from ~/.claude-mem/ → ~/.claude-mem-lite/..."
-  if cp "$OLD_DIR/claude-mem.db" "$DATA_DIR/claude-mem-lite.db" 2>/dev/null; then
-    # Main DB copied successfully, WAL/SHM are optional
-    cp "$OLD_DIR/claude-mem.db-wal" "$DATA_DIR/claude-mem-lite.db-wal" 2>/dev/null || true
-    cp "$OLD_DIR/claude-mem.db-shm" "$DATA_DIR/claude-mem-lite.db-shm" 2>/dev/null || true
-    if [[ -d "$OLD_DIR/runtime" && ! -d "$DATA_DIR/runtime" ]]; then
-      cp -r "$OLD_DIR/runtime" "$DATA_DIR/runtime" 2>/dev/null || true
-    fi
-    log_ok "Data migrated (old ~/.claude-mem/ preserved)"
+  BACKUP="$DATA_DIR/claude-mem-lite.db.legacy-backup-$(date +%s)"
+  if cp "$OLD_DIR/claude-mem.db" "$BACKUP" 2>/dev/null; then
+    log_info "Legacy ~/.claude-mem/ DB is schema-incompatible; backed up to $(basename "$BACKUP") (a fresh DB will be created). Old ~/.claude-mem/ preserved."
   else
-    log_warn "Migration failed — using fresh database"
+    log_warn "Legacy DB backup failed — a fresh database will be created"
   fi
 fi
 

package/search-engine.mjs

@@ -27,13 +27,13 @@ const FULL_SCORE = `${OBS_BM25}
   * (CASE WHEN ? IS NOT NULL AND o.project = ? THEN 2.0 ELSE 1.0 END)
   * (0.5 + 0.5 * COALESCE(o.importance, 1))
   * (1.0 + 0.1 * LN(1 + COALESCE(o.access_count, 0)))
-  * (1.0 + 0.3 * (o.lesson_learned IS NOT NULL))`;
+  * (1.0 + 0.3 * (o.lesson_learned IS NOT NULL AND o.lesson_learned NOT IN ('', 'none')))`;
 
 const SIMPLE_SCORE = `${OBS_BM25}
   * (1.0 + EXP(-0.693 * MAX(0, ? - MAX(o.created_at_epoch, COALESCE(o.last_accessed_at, o.created_at_epoch))) / ${TYPE_DECAY_CASE}))
   * ${TYPE_QUALITY_CASE}
   * (0.5 + 0.5 * COALESCE(o.importance, 1))
-  * (1.0 + 0.3 * (o.lesson_learned IS NOT NULL))`;
+  * (1.0 + 0.3 * (o.lesson_learned IS NOT NULL AND o.lesson_learned NOT IN ('', 'none')))`;
 
 export function buildObsFtsQuery(scoring, { multiplier, withSnippet, withOffset, includeNoise } = {}) {
   const scoreExpr = scoring === 'full' ? FULL_SCORE : SIMPLE_SCORE;

package/secret-scrub.mjs

@@ -44,6 +44,11 @@ export const SECRET_PATTERNS = [
   // low-FP decision that `topsecret=` / `access_token_count:` are non-credentials
   // (#8283 + utils.test.mjs:1089-1100); bare `pwd` is omitted so `PWD=` (a path) survives.
   [/((?:\b|_)(?:api[_-]?key|api[_-]?secret|secret[_-]?key|access[_-]?key|private[_-]?key|client[_-]?secret|auth[_-]?token|access[_-]?token|refresh[_-]?token|pgpassword|pgpass|mysql_pwd)\s*[=:]\s*)(?!process\.env\.)(?!new\s)(?!\w+\()(?!(?:null|undefined|true|false|None|nil|empty|""|''|0)\b)[^\s,;'"}\]]{6,}/gi, '$1***'],
+  // Space-separated credential CLI flag: `--password <value>` (long-form). The KV
+  // patterns above require `=`/`:`; the shell long-flag form uses a space. Long-form
+  // only — `-p`/`-u` short flags collide with unit/user/update flags (too FP-risky).
+  // `(?!-)` stops it eating a following `--flag` when --password has no value.
+  [/(--(?:password|passwd)[=\s]+)(?!-)[^\s'"]{6,}/gi, '$1***'],
   // Bare-key QUOTED values — `api_key="..."`, `password: '...'`. The unquoted KV
   // patterns above stop at `'`/`"` (excluded from their value class), so a quoted
   // value matched 0 chars and slipped through. Consumes the opening quote, the value,
@@ -68,35 +73,46 @@ export const SECRET_PATTERNS = [
   [/\bsk-(?:proj|ant|ant-api\d{2})-[a-zA-Z0-9_-]{8,}\b/g, '***'],
   [/\bsk-[a-zA-Z0-9_-]{20,}\b/g, '***'],
   // GitHub tokens (ghp_, gho_, github_pat_)
-  [/\b(?:ghp_|gho_|ghs_|ghr_)[a-zA-Z0-9_]{30,}\b/g, '***'],
+  [/\b(?:ghp_|gho_|ghs_|ghr_|ghu_)[a-zA-Z0-9_]{30,}\b/g, '***'],
   [/\bgithub_pat_[a-zA-Z0-9_]{22,}\b/g, '***'],
   // GitLab tokens (glpat-)
   [/\bglpat-[a-zA-Z0-9_-]{20,}\b/g, '***'],
-  // Slack tokens (xox[bpas]-)
-  [/\bxox[bpas]-[a-zA-Z0-9-]{10,}\b/g, '***'],
+  // Slack tokens (xox[bpasr]-, xapp-, xoxe-)
+  [/\b(?:xox[bpasr]|xapp|xoxe)-[a-zA-Z0-9-]{10,}\b/g, '***'],
+  // Slack incoming-webhook URL — the path after /services/ is the shared secret.
+  [/(https:\/\/hooks\.slack\.com\/services\/)[A-Za-z0-9/]+/g, '$1***'],
   // JWT tokens (eyJ...eyJ...)
   [/\beyJ[a-zA-Z0-9_-]{10,}\.eyJ[a-zA-Z0-9_-]{10,}\.[a-zA-Z0-9_-]+\b/g, '***'],
   // PEM private key blocks. `[A-Z0-9 ]*` covers every armor label — RSA/EC/DSA/
   // OPENSSH plus ENCRYPTED and PGP (… PRIVATE KEY BLOCK) — that the fixed
   // alternation missed; the block delimiters make FP impossible.
   [/-----BEGIN [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----/g, '***PEM_KEY***'],
-  // Long hex strings in assignments (e.g. SECRET_KEY=abc123def456...)
-  [/(\b(?:key|secret|token|hash)\s*[=:]\s*)[0-9a-f]{32,}\b/gi, '$1***'],
+  // Long hex strings in credential assignments (e.g. SECRET_KEY=abc123def456...).
+  // `hash` deliberately excluded: `hash: <40hex>` / `hash=<md5>` are git SHAs and
+  // checksums (real, preserved data in this hash-heavy repo), not credentials.
+  [/(\b(?:key|secret|token)\s*[=:]\s*)[0-9a-f]{32,}\b/gi, '$1***'],
   // Google Cloud API keys (AIza...)
   [/\bAIza[A-Za-z0-9_-]{35}\b/g, '***'],
-  // Generic Bearer tokens in Authorization headers
-  [/(Authorization:\s*Bearer\s+)[^\s,;'"}\]]+/gi, '$1***'],
+  // Authorization header credentials — Bearer (opaque), Basic (base64 user:pass),
+  // and GitHub's `token` scheme all carry secrets after the scheme word.
+  [/(Authorization:\s*(?:Bearer|Basic|token)\s+)[^\s,;'"}\]]+/gi, '$1***'],
   // Supabase / generic long base64 keys (40+ chars, common in env vars)
   [/(\b(?:SUPABASE_KEY|SUPABASE_ANON_KEY|SUPABASE_SERVICE_ROLE_KEY|DATABASE_URL|REDIS_URL)\s*[=:]\s*)[^\s,;'"}\]]+/gi, '$1***'],
   // Basic auth in URLs (https://user:password@host). ftp/ftps added — file-drop
-  // creds are a common leak shape the https-only form missed.
-  [/(https?|ftps?):\/\/[^@/\s]+:[^@/\s]+@/gi, '$1://***:***@'],
-  // Database connection strings (postgres, mysql, mongodb, redis, amqp)
-  [/\b(postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp):\/\/[^\s,;'"}\]]+/gi, '$1://***'],
+  // creds are a common leak shape the https-only form missed. The userinfo run
+  // EXCLUDES `:` (`[^@/\s:]+`) so the two runs can't overlap on a colon — the
+  // overlapping form caused O(n²) catastrophic backtracking on a colon-heavy
+  // non-terminating input (an availability DoS on the synchronous prompt path).
+  [/(https?|ftps?):\/\/[^@/\s:]+:[^@/\s]+@/gi, '$1://***:***@'],
+  // Database connection strings (postgres, mysql, mariadb, mssql, mongodb, redis,
+  // amqp) incl. their TLS/alias variants (rediss/amqps/mssql/sqlserver) — managed
+  // cloud DBs almost always use the TLS scheme, which the base-only list leaked.
+  [/\b(postgres(?:ql)?|mysql|mariadb|mssql|sqlserver|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^\s,;'"}\]]+/gi, '$1://***'],
   // npm tokens (npm_...)
   [/\bnpm_[a-zA-Z0-9]{36,}\b/g, '***'],
-  // Stripe keys (sk_live_, rk_live_, pk_live_, sk_test_, pk_test_)
+  // Stripe keys (sk_live_, rk_live_, pk_live_, sk_test_, pk_test_) + webhook signing secret (whsec_)
   [/\b[srp]k_(?:live|test)_[a-zA-Z0-9]{20,}\b/g, '***'],
+  [/\bwhsec_[a-zA-Z0-9]{20,}\b/g, '***'],
   // SendGrid API keys: SG.<22>.<43> — two dots at fixed offsets make this
   // structurally unmistakable; near-zero false-positive risk.
   [/\bSG\.[A-Za-z0-9_-]{22}\.[A-Za-z0-9_-]{43}\b/g, '***'],

package/tfidf.mjs

@@ -207,6 +207,19 @@ let _vocabCache = null;
 /** Reset vocabulary cache (for testing). */
 export function _resetVocabCache() { _vocabCache = null; }
 
+/**
+ * Canonical TF-IDF vector text for an observation ROW (snake_case DB fields). Single source for
+ * EVERY (re)build path — save, enrich, rebuild_vectors, cluster-merge, compress, normalize — so
+ * they encode the identical field set and can't drift (V-F1). Mirrors the FTS-searchable columns
+ * incl. lesson_learned + search_aliases (finding #8). `concepts` may be an array or a string.
+ */
+export function vecTextForRow(row) {
+  if (!row) return '';
+  const concepts = Array.isArray(row.concepts) ? row.concepts.join(' ') : (row.concepts || '');
+  return [row.title || '', row.narrative || '', concepts, row.lesson_learned || '', row.search_aliases || '']
+    .filter(Boolean).join(' ');
+}
+
 /**
  * Build global vocabulary (IDF table) from all active observations.
  * @param {object} db - better-sqlite3 database
@@ -214,7 +227,7 @@ export function _resetVocabCache() { _vocabCache = null; }
  */
 export function buildVocabulary(db, { dim = VOCAB_DIM } = {}) {
   const rows = db.prepare(`
-    SELECT title, narrative, concepts FROM observations
+    SELECT title, narrative, concepts, lesson_learned, search_aliases FROM observations
     WHERE COALESCE(compressed_into, 0) = 0 AND superseded_at IS NULL
   `).all();
 
@@ -224,7 +237,10 @@ export function buildVocabulary(db, { dim = VOCAB_DIM } = {}) {
   // Count document frequency for each term
   const df = new Map();
   for (const row of rows) {
-    const text = [row.title || '', row.narrative || '', row.concepts || ''].join(' ');
+    // V-F2: include lesson_learned + search_aliases so terms living only there get a vocab
+    // dimension (else computeVector silently drops them — the exact paraphrase-bridge terms
+    // search_aliases exists to carry). Mirrors vecTextForRow's field set.
+    const text = [row.title || '', row.narrative || '', row.concepts || '', row.lesson_learned || '', row.search_aliases || ''].join(' ');
     const docTerms = new Set(tokenize(text));
     for (const term of docTerms) {
       df.set(term, (df.get(term) || 0) + 1);

package/tool-schemas.mjs

@@ -237,13 +237,15 @@ export const memUpdateSchema = {
   // CLI parity (cmdUpdate): empty/whitespace title would render as `(untitled)`
   // in every listing — reject here like the CLI does, instead of persisting it.
   title: z.string().refine(s => s.trim() !== '', 'title cannot be empty').optional().describe('New title'),
-  narrative: z.string().optional().describe('New narrative/content'),
+  // Reject empty content fields (parity with `title` above + cmdUpdate): an explicit
+  // '' would blank narrative/lesson/concepts irrecoverably (mem_update takes no snapshot).
+  narrative: z.string().refine(s => s.trim() !== '', 'narrative cannot be empty').optional().describe('New narrative/content'),
   type: OBS_TYPE_ENUM.optional().describe('New observation type'),
   importance: coerceInt.pipe(z.number().int().min(1).max(3)).optional().describe('New importance (1-3)'),
   // 500-char cap mirrors memSaveSchema + cmdUpdate — update was the one path
   // that let overlong lessons leak into the DB via MCP.
-  lesson_learned: z.string().max(500).optional().describe('Add or update lesson learned'),
-  concepts: z.string().optional().describe('Space-separated concept tags'),
+  lesson_learned: z.string().max(500).refine(s => s.trim() !== '', 'lesson_learned cannot be empty').optional().describe('Add or update lesson learned'),
+  concepts: z.string().refine(s => s.trim() !== '', 'concepts cannot be empty').optional().describe('Space-separated concept tags'),
 };
 
 export const memExportSchema = {

package/utils.mjs

@@ -404,7 +404,13 @@ export function isMetaTriggerPrompt(text) {
     .replace(/上次(到哪了|说到哪了)?/g, '')
     .replace(/总结一下|复盘一下/g, '')
     .replace(/前面(的)?(工作|话题|讨论|内容)/g, '')
+    // R3 H-M2: control phrases named in lesson #8287 / common continuations. Phrase-anchored
+    // (or bare suffix/prefix) so a real subject that merely contains one keeps its other tokens.
+    .replace(/停了|停不下来/g, '')
+    .replace(/怎么(回事|了|样了|停的)?/g, '')
+    .replace(/再来(一次|一遍|一下)?/g, '')
     .replace(/\/?(clear|exit)\b/gi, '')
+    .replace(/\b(go on|go ahead|keep going|carry on|proceed|why(?:'?d| did) you stop)\b/gi, '')
     .replace(/\b(commit|continue|resume|push|save|restart|exit|next)\b/gi, '')
     .replace(/[，,。.!！?？:：;；()（）【】[\]\s/\\-]+/g, '')
     .trim();