claude-mem-lite 3.43.0 → 3.44.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "3.43.0",
+      "version": "3.44.0",
       "source": "./",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.43.0",
+  "version": "3.44.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/hook-update.mjs

@@ -3,7 +3,7 @@
 // Skips in dev mode (symlinked installs). Silent on network failure.
 
 import { execSync, execFileSync } from 'node:child_process';
-import { readFileSync, writeFileSync, copyFileSync, cpSync, readdirSync, existsSync, lstatSync, mkdirSync, rmSync, renameSync, chmodSync } from 'node:fs';
+import { readFileSync, writeFileSync, copyFileSync, cpSync, readdirSync, existsSync, lstatSync, mkdirSync, mkdtempSync, rmSync, renameSync, chmodSync } from 'node:fs';
 import { join, dirname, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { tmpdir, homedir } from 'node:os';
@@ -305,12 +305,22 @@ async function loadReleaseManifest(sourceDir) {
   }
 }
 
+// Create a private (0700), unpredictably-named staging dir under the system tmpdir.
+// mkdtempSync is atomic and owner-only, closing the predictable-name TOCTOU the old
+// `join(tmpdir(), \`...-${Date.now()}\`)` + mkdirSync(recursive) left open: in a
+// world-writable /tmp a local user could pre-create or symlink that guessable path before
+// we downloaded the tarball / ran validate→install into it. mkdirSync(recursive) succeeds
+// on an existing (attacker-owned) dir; mkdtempSync fails closed unless it creates a fresh
+// one. Mirrors the repair() path (install.mjs) which already uses mkdtempSync. (P3-4)
+export function createUpdateTmpDir() {
+  return mkdtempSync(join(tmpdir(), 'claude-mem-lite-update-'));
+}
+
 // ── Download & Install ─────────────────────────────────────
 // Direct file copy instead of running old install.mjs (avoids symlink overwrite in dev)
 async function downloadAndInstall(tarballUrl, expectedVersion, assets = []) {
-  const tmpDir = join(tmpdir(), `claude-mem-lite-update-${Date.now()}`);
+  const tmpDir = createUpdateTmpDir();
   try {
-    mkdirSync(tmpDir, { recursive: true });
 
     // Download tarball via curl (available on all supported platforms)
     // Validate URL to prevent command injection via crafted tarball URLs
@@ -389,6 +399,19 @@ export function validateExtractedTarball(sourceDir, expectedVersion, expectedNam
   return { ok: true };
 }
 
+// Pure downgrade-guard predicate (exported for unit testing). True when `relVersion` is
+// strictly OLDER than the installed `localVersion`. Under signing an attacker cannot forge a
+// release, but CAN replay an older validly-signed one (a since-patched version) by pinning the
+// GitHub "latest" API response — so repair(), which installs whatever fetchLatestRelease()
+// resolves, must refuse to move BACKWARD (parity with checkForUpdate, which only installs when
+// compareVersions(latest,current) > 0). A null/unknown local version (a broken install that
+// genuinely needs repair, or an unreadable package.json) is allowed through — fail toward
+// recoverability, since the signature check downstream still gates authenticity. (P3-3)
+export function isRepairDowngrade(relVersion, localVersion) {
+  if (!relVersion || !localVersion) return false;
+  return compareVersions(relVersion, localVersion) < 0;
+}
+
 // ── Release signature verification (P1 supply-chain hardening) ──────────────
 // Embedded Ed25519 PUBLIC key (SPKI PEM). ACTIVE since v3.20.0 — auto-update now
 // FAILS CLOSED: a release missing valid signature assets is refused (the matching

package/hook.mjs

@@ -47,7 +47,7 @@ import { handleLLMEpisode, handleLLMSummary, saveObservation, buildImmediateObse
 import { scrubRecord } from './lib/scrub-record.mjs';
 import { formatHookError } from './lib/native-binding-hint.mjs';
 import { selectCompressionCandidates, groupByProjectWeek, compressGroup } from './lib/compress-core.mjs';
-import { cleanupBroken, decayAndMarkIdle, boostAccessed, selectFuzzyDedupeIds, hardDeleteCandidateCount, purgeStale, recoverOrphanedChildren, recoverBuriedLessons } from './lib/maintain-core.mjs';
+import { cleanupBroken, decayAndMarkIdle, boostAccessed, selectFuzzyDedupeIds, hardDeleteCandidateCount, purgeStale, recoverOrphanedChildren, recoverBuriedLessons, sweepDeferredWorkOrphans } from './lib/maintain-core.mjs';
 import { snapshotDb } from './lib/db-backup.mjs';
 import {
   extractCitationsFromTranscript,
@@ -851,6 +851,11 @@ function runSessionStartAutoMaintain(db) {
       const lessonsHealed = recoverBuriedLessons(db, mctx);
       if (lessonsHealed > 0) debugLog('DEBUG', 'auto-maintain', `healed ${lessonsHealed} lesson rows buried at importance 0`);
 
+      // Heal deferred_work rows whose closing obs / source prompt was deleted while FK was OFF
+      // (dangling ref foreign_key_check flags). Applies the ON DELETE SET NULL the FK would.
+      const deferredHealed = sweepDeferredWorkOrphans(db, mctx);
+      if (deferredHealed > 0) debugLog('DEBUG', 'auto-maintain', `healed ${deferredHealed} deferred-work rows with dangling references`);
+
       const { decayed, idleMarked } = decayAndMarkIdle(db, mctx);
       if (decayed > 0) debugLog('DEBUG', 'auto-maintain', `decayed ${decayed} stale observations`);
       if (idleMarked > 0) debugLog('DEBUG', 'auto-maintain', `marked ${idleMarked} idle as pending-purge`);

package/install.mjs

@@ -1996,14 +1996,23 @@ async function repair() {
     // repo/TLS-MITM compromise achieved RCE, bypassing the Ed25519 signed-release control that
     // the manual `update` path enforces. Lazy import so a missing/broken hook-update dependency
     // degrades to the manual fallback (fail-closed) rather than to unverified auto-install.
-    let fetchLatestRelease, verifyReleaseAuthenticity;
+    let fetchLatestRelease, verifyReleaseAuthenticity, validateExtractedTarball, isRepairDowngrade, getCurrentVersion;
     try {
-      ({ fetchLatestRelease, verifyReleaseAuthenticity } = await import('./hook-update.mjs'));
+      ({ fetchLatestRelease, verifyReleaseAuthenticity, validateExtractedTarball, isRepairDowngrade, getCurrentVersion } = await import('./hook-update.mjs'));
     } catch (e) {
       throw new Error(`cannot load the verified-update path (${e.message}) — refusing to auto-install unverified code`, { cause: e });
     }
     const rel = await fetchLatestRelease();
     if (!rel || !rel.tarballUrl) throw new Error('could not resolve the latest release (network / rate-limit)');
+    // Rollback guard: refuse to repair BACKWARD onto an older validly-signed release replayed
+    // as "latest" (the only attack signing leaves open). Skipped when the local version is
+    // unreadable — a broken install still needs repair; the signature check below still gates
+    // authenticity either way.
+    let localVersion = null;
+    try { localVersion = getCurrentVersion(); } catch { /* broken install → allow repair */ }
+    if (isRepairDowngrade(rel.version, localVersion)) {
+      throw new Error(`refusing to repair BACKWARD: resolved release v${rel.version} is older than installed v${localVersion} (possible signed-release rollback)`);
+    }
     // URL allow-list mirrors hook-update.downloadAndInstall — only github.com tarball URLs.
     if (!/^https:\/\/(?:api\.)?github\.com\/[a-zA-Z0-9./_-]+$/.test(rel.tarballUrl)) {
       throw new Error(`refusing suspicious tarball URL: ${rel.tarballUrl}`);
@@ -2015,6 +2024,11 @@ async function repair() {
     log('Extracting...');
     execFileSync('tar', ['xzf', tarballPath, '-C', stagingDir, '--strip-components=1'],
       { timeout: 30000, stdio: ['ignore', 'pipe', 'inherit'] });
+    // Defense-in-depth on the extracted tarball (name + version === resolved tag + entry
+    // points) BEFORE the signature check — parity with hook-update.downloadAndInstall. Catches
+    // a wrong-version / truncated / squatter artifact whose package.json doesn't match the tag.
+    const tarballValid = validateExtractedTarball(stagingDir, rel.version);
+    if (!tarballValid.ok) throw new Error(`extracted tarball failed validation: ${tarballValid.reason}`);
     // Verify the Ed25519 signature BEFORE running the downloaded install.mjs. Fail-closed:
     // any tampering / missing-signature / fetch-failure aborts to the manual fallback.
     log('Verifying release signature...');

package/lib/maintain-core.mjs

@@ -140,6 +140,30 @@ export function recoverBuriedLessons(db, { projectFilter = '', baseParams = [] }
   `).run(...baseParams).changes;
 }
 
+// Heal deferred_work rows whose closing observation / source prompt was hard-deleted while
+// foreign_keys was OFF. The warm-start fast-path deliberately runs with FK disabled (schema.mjs
+// early migrations require cascade off), so the column's `ON DELETE SET NULL` never fired and a
+// dangling closed_by_obs_id / source_prompt_id survives — exactly what `PRAGMA foreign_key_check`
+// flags. This applies the SET NULL the FK would have. Closure state lives in status/
+// closed_at_epoch, NOT the back-ref, so nulling the id does NOT reopen a done item — it only drops
+// a pointer to a row that no longer exists. NON-DESTRUCTIVE + idempotent (a no-op once no dangling
+// refs remain), so safe to run unconditionally alongside recoverOrphanedChildren. (P3-5)
+export function sweepDeferredWorkOrphans(db, { projectFilter = '', baseParams = [] } = {}) {
+  const obs = db.prepare(`
+    UPDATE deferred_work SET closed_by_obs_id = NULL
+    WHERE closed_by_obs_id IS NOT NULL
+      AND NOT EXISTS (SELECT 1 FROM observations o WHERE o.id = deferred_work.closed_by_obs_id)
+      ${projectFilter}
+  `).run(...baseParams).changes;
+  const prompt = db.prepare(`
+    UPDATE deferred_work SET source_prompt_id = NULL
+    WHERE source_prompt_id IS NOT NULL
+      AND NOT EXISTS (SELECT 1 FROM user_prompts p WHERE p.id = deferred_work.source_prompt_id)
+      ${projectFilter}
+  `).run(...baseParams).changes;
+  return obs + prompt;
+}
+
 export function cleanupBroken(db, { projectFilter, baseParams, opCap = OP_CAP }) {
   const doomed = db.prepare(`
     SELECT id FROM observations

package/lib/search-core.mjs

@@ -24,7 +24,7 @@
 // keys (date=created_at, text=prompt_text, session=content_session_id) so each
 // surface's renderer reads its own field names off a single row shape.
 
-import { sanitizeFtsQuery, relaxFtsQueryToOr, SESS_BM25, DEFAULT_DECAY_HALF_LIFE_MS } from '../utils.mjs';
+import { sanitizeFtsQuery, relaxFtsQueryToOr, SESS_BM25, EVT_BM25, DEFAULT_DECAY_HALF_LIFE_MS } from '../utils.mjs';
 import { cjkPrecisionOk, extractCjkLikePatterns } from '../nlp.mjs';
 import { computeTier } from '../tier.mjs';
 import { countSearchTotal, attachBodyTokens } from '../search-engine.mjs';
@@ -213,6 +213,35 @@ export function searchPromptsFts(db, { query, ftsQuery, project = null, epochFro
     .map((r) => ({ ...r, score: 0 }));
 }
 
+/**
+ * Event FTS search (events table via events_fts) with recency decay + same-project boost —
+ * the mirror of searchSessionsFts for the events source. Events are the CANONICAL store for
+ * event-typed memories (persistHaikuSummary upgrade-deletes the pre-saved observations row and
+ * inserts here), so without this leg the bugfix/feature/decision history is unreachable by
+ * mem_search. Excludes superseded events (superseded_at_epoch); events has no low-signal/noise
+ * column, so no noise gate (parity with searchEvents in lib/activity.mjs). Returns raw rows
+ * { id, event_type, title, body, project, importance, file_paths, created_at_epoch, score }.
+ */
+export function searchEventsFts(db, { ftsQuery, project = null, projectBoost = null, epochFrom = null, epochTo = null, perSourceLimit, perSourceOffset = 0 }) {
+  const wheres = ['events_fts MATCH ?', 'e.superseded_at_epoch IS NULL'];
+  const params = [Date.now(), projectBoost, projectBoost, ftsQuery];
+  if (project) { wheres.push('e.project = ?'); params.push(project); }
+  if (epochFrom !== null) { wheres.push('e.created_at_epoch >= ?'); params.push(epochFrom); }
+  if (epochTo !== null) { wheres.push('e.created_at_epoch <= ?'); params.push(epochTo); }
+  params.push(perSourceLimit, perSourceOffset);
+  return db.prepare(`
+    SELECT e.id, e.event_type, e.title, e.body, e.project, e.importance, e.file_paths, e.created_at_epoch,
+           ${EVT_BM25}
+             * (1.0 + EXP(-0.693 * MAX(0, ? - e.created_at_epoch) / ${DEFAULT_DECAY_HALF_LIFE_MS}.0))
+             * (CASE WHEN ? IS NOT NULL AND e.project = ? THEN 2.0 ELSE 1.0 END) as score
+    FROM events_fts
+    JOIN events e ON events_fts.rowid = e.id
+    WHERE ${wheres.join(' AND ')}
+    ORDER BY score
+    LIMIT ? OFFSET ?
+  `).all(...params);
+}
+
 /**
  * Normalize each source's BM25 scores to [-1, 0] before cross-source merge.
  * Prevents observations (BM25 can reach -40) from systematically outranking
@@ -221,7 +250,7 @@ export function searchPromptsFts(db, { query, ftsQuery, project = null, epochFro
  * -1.0. Mutates `results` in place; callers re-sort afterwards.
  */
 export function normalizeCrossSourceScores(results, sourceKey) {
-  for (const src of ['obs', 'session', 'prompt']) {
+  for (const src of ['obs', 'session', 'prompt', 'event']) {
     const srcResults = results.filter((r) => r[sourceKey] === src && r.score !== null && r.score !== undefined);
     if (srcResults.length < 2) continue;
     const maxAbs = Math.max(...srcResults.map((r) => Math.abs(r.score)));
@@ -457,6 +486,40 @@ export async function coreRunSearchPipeline(ctx, opts) {
     if (tolerateMissingFts) { try { pushPrompts(); } catch { /* prompt FTS may not exist in older DBs */ } } else pushPrompts();
   }
 
+  // ── Events (FTS via shared helper; events are the CANONICAL event-typed store) ──
+  if ((!effectiveSource || effectiveSource === 'events') && !isDeep) {
+    const toIso = (epoch) => (epoch ? new Date(epoch).toISOString() : null);
+    // events has no created_at ISO column (only *_epoch) and no subtitle; body carries the
+    // distilled lesson (persistHaikuSummary writes lesson_learned||narrative here), surfaced
+    // as lesson_learned (obs parity) AND text (attachBodyTokens / CLI JSON body field).
+    const shapeEvent = (r) => ({
+      source: 'event', id: r.id, type: r.event_type, title: r.title,
+      project: r.project, importance: r.importance, files_modified: r.file_paths,
+      created_at_epoch: r.created_at_epoch, created_at: toIso(r.created_at_epoch), date: toIso(r.created_at_epoch),
+      lesson_learned: r.body, text: r.body, score: r.score ?? 0, snippet: '',
+    });
+    const pushEvents = () => {
+      if (ftsQuery) {
+        const rows = searchEventsFts(db, { ftsQuery, project, projectBoost: project ? null : currentProject, epochFrom, epochTo, perSourceLimit, perSourceOffset });
+        for (const r of rows) results.push(shapeEvent(r));
+      } else if (recentListingNoFts && effectiveSource === 'events') {
+        const params = []; const wheres = ['superseded_at_epoch IS NULL'];
+        if (project) { wheres.push('project = ?'); params.push(project); }
+        if (epochFrom !== null) { wheres.push('created_at_epoch >= ?'); params.push(epochFrom); }
+        if (epochTo !== null) { wheres.push('created_at_epoch <= ?'); params.push(epochTo); }
+        params.push(perSourceLimit, perSourceOffset);
+        const rows = db.prepare(`
+          SELECT id, event_type, title, body, project, importance, file_paths, created_at_epoch
+          FROM events WHERE ${wheres.join(' AND ')}
+          ORDER BY created_at_epoch DESC
+          LIMIT ? OFFSET ?
+        `).all(...params);
+        for (const r of rows) results.push(shapeEvent(r));
+      }
+    };
+    if (tolerateMissingFts) { try { pushEvents(); } catch { /* events_fts may not exist in older DBs */ } } else pushEvents();
+  }
+
   // ── Type-list fallback (MCP): obs_type set + 0 matches → list recent of that type ──
   if (obsTypeFallback && results.length === 0 && obsType) {
     const typeWheres = ['COALESCE(compressed_into, 0) = 0', 'superseded_at IS NULL', 'type = ?'];

package/mem-cli.mjs

@@ -18,7 +18,7 @@ import { selectCompressionCandidates, groupByProjectWeek, compressGroup } from '
 import { buildNotLowSignalSql } from './lib/low-signal-patterns.mjs';
 import {
   cleanupBroken, decayAndMarkIdle, boostAccessed, demotePinned, mergeDuplicates,
-  recoverOrphanedChildren, recoverBuriedLessons,
+  recoverOrphanedChildren, recoverBuriedLessons, sweepDeferredWorkOrphans,
   purgeStale, purgeStalePreview, findDuplicates, maintenanceStats, rebuildVectors, vacuum,
   recoverChildrenOf, hardDeleteCandidateCount,
   OP_CAP, STALE_AGE_MS, PINNED_INJ_THRESHOLD,
@@ -135,8 +135,8 @@ async function cmdSearch(db, args, { llm } = {}) {
     process.stderr.write('[mem] Note: --rerank requires --deep (it reranks deep-search candidates); ignored\n');
   }
 
-  if (source && !['observations', 'sessions', 'prompts'].includes(source)) {
-    fail(`[mem] Invalid --source "${source}". Use: observations, sessions, prompts`);
+  if (source && !['observations', 'sessions', 'prompts', 'events'].includes(source)) {
+    fail(`[mem] Invalid --source "${source}". Use: observations, sessions, prompts, events`);
     return;
   }
 
@@ -244,7 +244,7 @@ async function cmdSearch(db, args, { llm } = {}) {
 
   // "N of M" total when paged < total (paired-path with server.mjs formatSearchOutput, #8198).
   const showTime = sort === 'time';
-  const hasMixed = paged.some(r => r.source === 'session' || r.source === 'prompt');
+  const hasMixed = paged.some(r => r.source === 'session' || r.source === 'prompt' || r.source === 'event');
   // Suppressed when --or was explicit — user already asked for OR, no "fallback" there.
   const fallbackHint = orFallbackFired && !useOr ? ' (relaxed AND→OR)' : '';
 
@@ -290,7 +290,7 @@ async function cmdSearch(db, args, { llm } = {}) {
   const countLabel = total > paged.length ? `${paged.length} of ${total}` : `${paged.length}`;
   // Pluralize on total — "Found 1 of 44 result" reads wrong; the population (44) drives
   // grammatical number, not the page slice (1).
-  out(`[mem] Found ${countLabel} result${total !== 1 ? 's' : ''} for "${query}"${fallbackHint}:${hasMixed ? ' (# observation, S# session, P# prompt)' : ''}`);
+  out(`[mem] Found ${countLabel} result${total !== 1 ? 's' : ''} for "${query}"${fallbackHint}:${hasMixed ? ' (# observation, S# session, P# prompt, E# event)' : ''}`);
   // `~Nt` = est. tokens to fetch this row's full body via mem_get (attachBodyTokens, paired with
   // MCP). Conditional so a row that skipped enrichment renders cleanly, not "~undefinedt".
   const tok = r => (r.bodyTokens ? ` ~${r.bodyTokens}t` : '');
@@ -302,6 +302,12 @@ async function cmdSearch(db, args, { llm } = {}) {
     } else if (r.source === 'prompt') {
       const date = fmtDateShort(r.created_at);
       out(`P#${r.id} 💬 ${date}${timeStr} ${truncate(r.prompt_text || '(empty)', 80)}${tok(r)}`);
+    } else if (r.source === 'event') {
+      const date = fmtDateShort(r.created_at);
+      out(`E#${r.id} ${typeIcon(r.type)} ${date}${timeStr} ${truncate(r.title || '(untitled)', 80)}${tok(r)}`);
+      if (r.lesson_learned) {
+        out(`  -> ${truncate(r.lesson_learned, 80)}`);
+      }
     } else {
       const date = fmtDateShort(r.created_at);
       const title = truncate(r.title || r.subtitle || '(untitled)', 80);
@@ -2044,6 +2050,10 @@ function cmdMaintain(db, args) {
       // lesson-bearing rows only; idempotent no-op once none remain.
       const lessonsHealed = recoverBuriedLessons(db, mctx);
       if (lessonsHealed > 0) results.push(`Healed ${lessonsHealed} lesson rows buried at importance 0`);
+      // Heal deferred_work rows whose closing obs / source prompt was hard-deleted while FK was
+      // OFF (dangling ref foreign_key_check flags). Applies the ON DELETE SET NULL the FK would.
+      const deferredHealed = sweepDeferredWorkOrphans(db, mctx);
+      if (deferredHealed > 0) results.push(`Healed ${deferredHealed} deferred-work rows with dangling references`);
     }
 
     if (ops.includes('decay')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.43.0",
+  "version": "3.44.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",

package/schema.mjs

@@ -104,7 +104,15 @@ export const CODE_DIR = join(homedir(), '.claude-mem-lite');
 // previously-uncited obs (see applyCitationDecay). REAL new column, so unlike v38-v40
 // this DOES advance LATEST_MIGRATION_COLUMN (→ observations.last_cited_session_id);
 // existing DBs reach the ALTER because version 40 != 41 falls through the fast-path.
-export const CURRENT_SCHEMA_VERSION = 41;
+// v42 (events_fts self-heal): events_fts was the one FTS table outside ensureFTS's
+// column-aware recreation (its DDL is non-standard — UNINDEXED cols + custom tokenizer +
+// events_fts_* trigger names — so it can't use the generic ensureFTS). Adds a dedicated
+// ensureEventsFTS run in the migration body so a future events column addition self-heals
+// instead of leaving a stale narrow index whose (wider) triggers throw "no column" and
+// silently drop event writes. NO new column, so LATEST_MIGRATION_COLUMN is unchanged — the
+// forced pass alone carries it (same pattern as v35/v36/v38/v39/v40); existing DBs run it
+// because version 41 != 42 falls through the fast-path.
+export const CURRENT_SCHEMA_VERSION = 42;
 
 // Sentinel column for the LATEST migration set. The fast-path uses this to
 // self-heal half-migrated DBs — schema_version bumped but column ALTERs rolled
@@ -555,6 +563,12 @@ export function initSchema(db) {
     END;
   `);
 
+  // v42: column-aware self-heal for events_fts (the one FTS table the generic ensureFTS can't
+  // manage — UNINDEXED cols + custom tokenizer + events_fts_* triggers). The CREATE ... IF NOT
+  // EXISTS above never widens a drifted (older, narrower) events_fts; this drops+recreates it on
+  // column drift and repopulates. No-op on a healthy DB.
+  ensureEventsFTS(db);
+
   // Observation files junction table for normalized file lookups (replaces LIKE scans on files_modified JSON)
   db.exec(`
     CREATE TABLE IF NOT EXISTS observation_files (
@@ -1067,3 +1081,65 @@ export function ensureFTS(db, ftsName, tableName, columns) {
     } catch { /* non-critical — index repopulates lazily on next write */ }
   }
 }
+
+// Column-aware self-heal for events_fts — the events table's FTS index. events_fts is NOT
+// managed by the generic ensureFTS() above because its DDL is non-standard: event_type and
+// project are UNINDEXED, it uses a custom unicode61 tokenizer with '_-' tokenchars, and its
+// triggers are named events_fts_* (not events_*). Routing it through ensureFTS would recreate
+// it WITHOUT the UNINDEXED cols / tokenizer AND install a SECOND, differently-named trigger set
+// (events_*) that double-writes the index. This dedicated guard mirrors ensureFTS's drift
+// detection while preserving the exact events_fts DDL (schema.mjs events block) — closing the
+// F8/P2-4 gap: events_fts was the one FTS table outside self-heal, so a future events column
+// addition would leave a stale narrow index whose (wider) triggers throw "no column" and
+// silently drop event writes. Idempotent: a no-op once the column set matches.
+const EVENTS_FTS_COLUMNS = ['title', 'body', 'event_type', 'project']; // full set (drift check)
+export function ensureEventsFTS(db) {
+  const ftsRow = db.prepare(`SELECT 1 FROM sqlite_master WHERE type='table' AND name='events_fts'`).get();
+  let recreated = false;
+  if (ftsRow) {
+    let existingCols = [];
+    try { existingCols = db.prepare(`PRAGMA table_info(events_fts)`).all().map(c => c.name); } catch { /* unreadable → recreate */ }
+    const drifted = existingCols.length !== EVENTS_FTS_COLUMNS.length || EVENTS_FTS_COLUMNS.some(c => !existingCols.includes(c));
+    if (drifted) {
+      db.exec(`DROP TRIGGER IF EXISTS events_fts_ai`);
+      db.exec(`DROP TRIGGER IF EXISTS events_fts_ad`);
+      db.exec(`DROP TRIGGER IF EXISTS events_fts_au`);
+      db.exec(`DROP TABLE IF EXISTS events_fts`);
+      recreated = true;
+    }
+  }
+  if (!ftsRow || recreated) {
+    db.exec(`
+      CREATE VIRTUAL TABLE IF NOT EXISTS events_fts USING fts5(
+        title, body, event_type UNINDEXED, project UNINDEXED,
+        content='events', content_rowid='id',
+        tokenize="unicode61 remove_diacritics 2 tokenchars '_-'"
+      );
+    `);
+  }
+  // Triggers reinstated from the canonical template (INSERT all 4 columns; AFTER UPDATE OF the
+  // two INDEXED columns only, so non-indexed bumps don't thrash the index). IF NOT EXISTS so an
+  // unchanged definition is a no-op — byte-identical to the events block in initSchema.
+  db.exec(`
+    CREATE TRIGGER IF NOT EXISTS events_fts_ai AFTER INSERT ON events BEGIN
+      INSERT INTO events_fts(rowid, title, body, event_type, project)
+      VALUES (new.id, COALESCE(new.title,''), COALESCE(new.body,''), new.event_type, new.project);
+    END;
+    CREATE TRIGGER IF NOT EXISTS events_fts_ad AFTER DELETE ON events BEGIN
+      INSERT INTO events_fts(events_fts, rowid, title, body, event_type, project)
+      VALUES ('delete', old.id, COALESCE(old.title,''), COALESCE(old.body,''), old.event_type, old.project);
+    END;
+    CREATE TRIGGER IF NOT EXISTS events_fts_au AFTER UPDATE OF title, body ON events BEGIN
+      INSERT INTO events_fts(events_fts, rowid, title, body, event_type, project)
+      VALUES ('delete', old.id, COALESCE(old.title,''), COALESCE(old.body,''), old.event_type, old.project);
+      INSERT INTO events_fts(rowid, title, body, event_type, project)
+      VALUES (new.id, COALESCE(new.title,''), COALESCE(new.body,''), new.event_type, new.project);
+    END;
+  `);
+  if (recreated) {
+    try {
+      const cnt = db.prepare(`SELECT COUNT(*) AS c FROM events`).get();
+      if (cnt.c > 0) db.exec(`INSERT INTO events_fts(events_fts) VALUES('rebuild')`);
+    } catch { /* non-critical — index repopulates lazily on next write */ }
+  }
+}

package/scoring-sql.mjs

@@ -51,6 +51,10 @@ export const OBS_BM25 = 'bm25(observations_fts, 10, 5, 5, 3, 3, 2, 8, 5)';
 /** session_summaries_fts BM25 weights: request=5, investigated=3, learned=3, completed=3, next_steps=2, notes=1, remaining_items=1 */
 export const SESS_BM25 = 'bm25(session_summaries_fts, 5, 3, 3, 3, 2, 1, 1)';
 
+/** events_fts BM25 weights: title=5, body=2 (event_type/project are UNINDEXED — weight irrelevant).
+ *  Title-weighted like OBS/SESS so a title hit outranks a body-only hit. */
+export const EVT_BM25 = 'bm25(events_fts, 5, 2)';
+
 /** FTS5 columns for observations (must match BM25 weight order) */
 export const OBS_FTS_COLUMNS = ['title', 'subtitle', 'narrative', 'text', 'facts', 'concepts', 'lesson_learned', 'search_aliases'];
 

package/search-engine.mjs

@@ -167,6 +167,24 @@ export function countPromptFtsMatches(db, { ftsQuery, project = null, epochFrom
   } catch { return 0; }
 }
 
+export function countEventFtsMatches(db, { ftsQuery, project = null, epochFrom = null, epochTo = null }) {
+  if (!ftsQuery) return 0;
+  try {
+    const wheres = ['events_fts MATCH ?', 'e.superseded_at_epoch IS NULL'];
+    const params = [ftsQuery];
+    if (project) { wheres.push('e.project = ?'); params.push(project); }
+    if (epochFrom) { wheres.push('e.created_at_epoch >= ?'); params.push(epochFrom); }
+    if (epochTo) { wheres.push('e.created_at_epoch <= ?'); params.push(epochTo); }
+    const row = db.prepare(`
+      SELECT COUNT(*) as c
+      FROM events_fts
+      JOIN events e ON events_fts.rowid = e.id
+      WHERE ${wheres.join(' AND ')}
+    `).get(...params);
+    return row?.c ?? 0;
+  } catch { return 0; }
+}
+
 /**
  * Sum true match counts across the sources that contribute to a cross-source (or
  * source-restricted) search. `obsFtsQuery` lets callers pass the OR-relaxed query
@@ -187,6 +205,9 @@ export function countSearchTotal(db, {
   if (!effectiveSource || effectiveSource === 'prompts') {
     total += countPromptFtsMatches(db, { ftsQuery, project, epochFrom, epochTo });
   }
+  if (!effectiveSource || effectiveSource === 'events') {
+    total += countEventFtsMatches(db, { ftsQuery, project, epochFrom, epochTo });
+  }
   return total;
 }
 
@@ -235,6 +256,8 @@ export function attachBodyTokens(db, results) {
       parts = [r.title, r.subtitle, r.lesson_learned, row.narrative, row.facts, row.text];
     } else if (src === 'session') {
       parts = [r.request, r.completed, r.working_on];
+    } else if (src === 'event') {
+      parts = [r.title, r.lesson_learned];   // events carry title + body(=lesson_learned) on the row
     } else {
       parts = [r.text, r.prompt_text];
     }

package/server.mjs

@@ -17,7 +17,7 @@ import { resolveAnchorToken, formatAnchorError, resolveQueryAnchor, fetchRecentT
 import { buildSearchFtsQuery, parseDateBounds, parseDuration, coreRunSearchPipeline } from './lib/search-core.mjs';
 import {
   cleanupBroken, decayAndMarkIdle, boostAccessed, demotePinned, mergeDuplicates,
-  recoverOrphanedChildren, recoverBuriedLessons,
+  recoverOrphanedChildren, recoverBuriedLessons, sweepDeferredWorkOrphans,
   purgeStale, purgeStalePreview, findDuplicates, maintenanceStats, rebuildVectors, vacuum,
   recoverChildrenOf, hardDeleteCandidateCount,
   OP_CAP, STALE_AGE_MS,
@@ -218,7 +218,7 @@ function formatSearchOutput(paginatedResults, args, ftsQuery, totalCount, orFall
   const countLabel = totalCount > paginatedResults.length
     ? `${paginatedResults.length} of ${totalCount}`
     : `${paginatedResults.length}`;
-  const hasMixed = paginatedResults.some(r => r.source === 'session' || r.source === 'prompt');
+  const hasMixed = paginatedResults.some(r => r.source === 'session' || r.source === 'prompt' || r.source === 'event');
   // P2-6: empty/omitted query falls through to a "listing recent" path — label it explicitly
   // so callers don't mistake BM25-less results for relevance-ranked ones.
   const qLabel = args.query ? ` for "${args.query}"` : ' (no query — listing recent)';
@@ -226,7 +226,7 @@ function formatSearchOutput(paginatedResults, args, ftsQuery, totalCount, orFall
   // query actually matched only a subset of the terms. Suppressed when the caller
   // explicitly requested OR semantics — there's no "fallback" in that path.
   const fallbackHint = orFallbackFired && !args.or ? ' (relaxed AND→OR)' : '';
-  lines.push(`Found ${countLabel} result(s)${qLabel}${fallbackHint}:${hasMixed ? ' (# observation, S# session, P# prompt)' : ''}\n`);
+  lines.push(`Found ${countLabel} result(s)${qLabel}${fallbackHint}:${hasMixed ? ' (# observation, S# session, P# prompt, E# event)' : ''}\n`);
 
   // `~Nt` = estimated tokens to fetch this row's full body via mem_get (attachBodyTokens).
   // Conditional so a result that skipped enrichment renders cleanly, not "~undefinedt".
@@ -241,6 +241,8 @@ function formatSearchOutput(paginatedResults, args, ftsQuery, totalCount, orFall
       lines.push(`S#${r.id} 📋 ${truncate(r.request || r.completed || '(no summary)')} | ${r.project} | ${fmtDate(r.date)}${tok(r)}`);
     } else if (r.source === 'prompt') {
       lines.push(`P#${r.id} 💬 ${truncate(r.text)} | ${fmtDate(r.date)}${tok(r)}`);
+    } else if (r.source === 'event') {
+      lines.push(`E#${r.id} ${typeIcon(r.type)} [${r.type}] ${truncate(r.title || '(untitled)')} | ${r.project} | ${fmtDate(r.date)}${tok(r)}`);
     }
   }
 
@@ -1158,6 +1160,10 @@ server.registerTool(
           // lesson-bearing rows only; idempotent no-op once none remain.
           const lessonsHealed = recoverBuriedLessons(db, mctx);
           if (lessonsHealed > 0) results.push(`Healed ${lessonsHealed} lesson rows buried at importance 0`);
+          // Heal deferred_work rows whose closing obs / source prompt was deleted while FK was
+          // OFF (dangling ref foreign_key_check flags). Applies the ON DELETE SET NULL the FK would.
+          const deferredHealed = sweepDeferredWorkOrphans(db, mctx);
+          if (deferredHealed > 0) results.push(`Healed ${deferredHealed} deferred-work rows with dangling references`);
         }
 
         if (ops.includes('decay')) {

package/tool-schemas.mjs

@@ -80,7 +80,7 @@ const coerceMixedIdTokens = z.preprocess(
 
 export const memSearchSchema = {
   query: z.string().optional().describe('Search query (FTS5 syntax supported)'),
-  type: z.enum(['observations', 'sessions', 'prompts']).optional().describe('Limit to one table'),
+  type: z.enum(['observations', 'sessions', 'prompts', 'events']).optional().describe('Limit to one source table (default: all). events = the canonical bugfix/feature/decision/lesson history (auto-captured event-typed memories)'),
   obs_type: OBS_TYPE_ENUM.optional().describe('Filter observation type'),
   project: z.string().optional().describe('Filter by project name'),
   date_from: z.string().optional().describe('Start date (ISO 8601 or YYYY-MM-DD)'),

package/utils.mjs

@@ -9,7 +9,7 @@ import { buildLowSignalRegex } from './lib/low-signal-patterns.mjs';
 // ─── Re-exports from extracted modules ──────────────────────────────────────
 // Backward compatibility: all consumers import from utils.mjs
 
-export { DECAY_HALF_LIFE_BY_TYPE, DEFAULT_DECAY_HALF_LIFE_MS, OBS_BM25, SESS_BM25, TYPE_DECAY_CASE, TYPE_QUALITY_CASE, OBS_FTS_COLUMNS, notLowSignalTitleClause, noisePenaltyClause } from './scoring-sql.mjs';
+export { DECAY_HALF_LIFE_BY_TYPE, DEFAULT_DECAY_HALF_LIFE_MS, OBS_BM25, SESS_BM25, EVT_BM25, TYPE_DECAY_CASE, TYPE_QUALITY_CASE, OBS_FTS_COLUMNS, notLowSignalTitleClause, noisePenaltyClause } from './scoring-sql.mjs';
 export { cjkBigrams, extractCjkSynonymTokens, extractCjkKeywords, extractCjkLikePatterns, SYNONYM_MAP, expandToken, sanitizeFtsQuery, relaxFtsQueryToOr, FTS_STOP_WORDS, CJK_COMPOUNDS } from './nlp.mjs';
 export { resolveProject, _resetProjectCache } from './project-utils.mjs';
 export { scrubSecrets, SECRET_PATTERNS } from './secret-scrub.mjs';
@@ -323,9 +323,17 @@ export function parseJsonFromLLM(text) {
   // First balanced object — survives unfenced output wrapped in brace-containing prose.
   const balanced = firstBalancedJsonObject(text);
   if (balanced) try { return JSON.parse(balanced); } catch {}
-  // Last-resort greedy span (handles a payload that isn't the FIRST balanced object).
-  const obj = text.match(/\{[\s\S]*\}/);
-  if (obj) try { return JSON.parse(obj[0]); } catch {}
+  // Last-resort span from the first `{` to the last `}` — handles a payload that isn't the
+  // FIRST balanced object. Resolved via index scan (O(n)) rather than the greedy
+  // /\{[\s\S]*\}/, which backtracks O(n²) across k unclosed opening braces (a synthetic
+  // "{{{…" with no close made the regex O(n²); LLM outputs are bounded so it wasn't
+  // exploitable — defense in depth). Behaviorally identical: the greedy match anchors on the
+  // first `{` that has any `}` after it and, being greedy, ends at the last `}`.
+  const firstBrace = text.indexOf('{');
+  const lastBrace = text.lastIndexOf('}');
+  if (firstBrace !== -1 && lastBrace > firstBrace) {
+    try { return JSON.parse(text.slice(firstBrace, lastBrace + 1)); } catch {}
+  }
   return null;
 }
 
@@ -456,6 +464,3 @@ export function getCurrentBranch() {
   _branchCacheTime = now;
   return _cachedBranch;
 }
-
-/** Reset cached branch (for testing or after git checkout) */
-export function _resetBranchCache() { _cachedBranch = undefined; _branchCacheTime = 0; }