claude-mem-lite 3.66.0 → 3.66.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "3.66.0",
+      "version": "3.66.1",
       "source": "./",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.66.0",
+  "version": "3.66.1",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/hook-shared.mjs

@@ -148,12 +148,6 @@ export const GC_PROJECT_MARKER_PREFIXES = Object.freeze([
   'cite-recall-',             // last session's cite-recall snapshot (nudge input)
   '.skill-cooldown-',         // suggestion throttle timestamp
   '.skill-reco-cooldown-',    // recommendation throttle timestamp
-  // These two have NO writer and NO reader left in the tree (verified by grep,
-  // 2026-08-16) — they are version-keyed one-time markers from retired code
-  // paths (live dir holds `.mcp-dedup-v2.10`, `.residue-warned-v2.55`). Nothing
-  // recreates them, so sweeping them is a one-shot cleanup, not a policy.
-  '.mcp-dedup-',
-  '.residue-warned-',
 ]);
 
 // Records of a completed side effect — never age out. `ep-`/`ep-flush-`/
@@ -164,8 +158,45 @@ export const GC_PRESERVED_MARKER_PREFIXES = Object.freeze([
   '.auto-adopt-',
   '.deferred-block-migrated-',
   '.legacy-claude-md-cleaned-',
+  // v3.66.1: these two shipped in the GC list for one release and had to come
+  // out. Both are version-keyed one-shot migration sentinels written by
+  // scripts/setup.sh, and their gate is `! -f <marker>` — deleting one re-runs
+  // its migration. `.mcp-dedup-v2.78` gates a block that removes
+  // mcpServers.mem / mcpServers["mem-lite"] from the user's ~/.claude.json with
+  // a raw writeFileSync (no tmp+rename, no backup), which the repo's own test
+  // documents as intentionally one-shot: "If a user later runs `claude mcp add
+  // mem ...` themselves, the gate intentionally lets it stand." A 30-day sweep
+  // turned that into a recurring purge of a config file we do not own.
+  // The mtime never refreshes (the gate skips the block once the file exists),
+  // so every install older than 30 days would have lost it on the first
+  // SessionStart after upgrading.
+  //
+  // Why it was missed: the search for writers used `grep --include=*.mjs
+  // --include=*.js`, and the writer is a SHELL script. `sentinelPrefixesFromShell`
+  // below now derives this class from scripts/*.sh instead of from memory.
+  '.mcp-dedup-',
+  '.residue-warned-',
 ]);
 
+/**
+ * Marker-name prefixes that scripts/*.sh treats as one-shot sentinels, derived
+ * from the shell source rather than restated here. `tests/runtime-marker-gc`
+ * asserts none of them is GC-able: a shell-written sentinel is invisible to a
+ * JS-only grep, which is exactly how `.mcp-dedup-` reached the GC list.
+ *
+ * @param {string} shellSource concatenated contents of scripts/*.sh
+ * @returns {string[]} prefixes like `.mcp-dedup-`
+ */
+export function sentinelPrefixesFromShell(shellSource) {
+  const out = new Set();
+  // Matches `"$DATA_DIR/runtime/.mcp-dedup-v2.78"` and friends: a dotfile under
+  // runtime/ whose name carries a version-ish suffix.
+  for (const m of String(shellSource || '').matchAll(/runtime\/(\.[a-z0-9-]*?-)v?[0-9][0-9.]*/gi)) {
+    out.add(m[1]);
+  }
+  return [...out];
+}
+
 /**
  * Sweep per-project runtime markers older than `ageMs`. fs-only, best-effort,
  * never throws. Returns the number of files removed.

package/hook.mjs

@@ -54,6 +54,7 @@ import { snapshotDb } from './lib/db-backup.mjs';
 import {
   extractCitationsFromTranscript,
   extractAllInjected,
+  extractInjectedFromKeyContext,
   bumpCitationAccess,
   computeCiteRecall,
   applyCitationDecay,
@@ -740,19 +741,26 @@ async function handleStop() {
             // filter as citedMain (the numerator, below) — an obs injected only
             // inside a subagent (sidechain) would otherwise enter the denominator
             // but never the numerator and streak-demote despite being used there.
-            // runtimeDir + project enable the 5th (Key Context) face — see
-            // extractInjectedFromKeyContext: it is marker-derived, because the
-            // SessionStart block leaves no hook attachment to parse.
-            const injected = extractAllInjected(transcriptPath, {
-              mainOnly: true, runtimeDir: RUNTIME_DIR, project, sessionId: ccSessionId,
-            });
+            const injected = extractAllInjected(transcriptPath, { mainOnly: true });
             // P5 ①: cite-back signals — observations whose warned file the agent
             // edited this session. Union into injected so they're resolved (they
             // were injected via pre-tool-recall) and, below, into cited so the
             // edit promotes them even without a literal #NN in text.
             const citeBackIds = extractCiteBackSignals(transcriptPath);
             for (const id of citeBackIds) injected.add(id);
-            if (injected.size > 0) {
+            // D#124, promotion-only (v3.66.1): the SessionStart Key Context block
+            // leaves no hook attachment, so its ids come from the per-session
+            // marker. They are added to the decay set ONLY where they were
+            // actually cited (below), never as bare denominator: the block
+            // re-renders the same fixed top-10 unconditionally, so an uncited
+            // render says nothing about relevance — and since keyObs gates on
+            // `importance >= 2`, one demotion evicts the common importance-2 row
+            // from Key Context for good. v3.66.0 fed them in as denominator and
+            // that made the block eat its own contents.
+            const keyCtxIds = extractInjectedFromKeyContext({
+              runtimeDir: RUNTIME_DIR, project, sessionId: ccSessionId,
+            });
+            if (injected.size > 0 || keyCtxIds.size > 0) {
               // Text-floor gate: skip decay on tool-only Stops. Without this,
               // a turn that ends on tool_use locks every injected obs as
               // uncited (last_decided_session_id set), so a later turn that
@@ -765,6 +773,10 @@ async function handleStop() {
               } else {
                 const citedMain = extractCitationsFromTranscript(transcriptPath, { mainOnly: true });
                 for (const id of citeBackIds) citedMain.add(id);
+                // The promotion-only half: a Key Context row the agent actually
+                // cited joins the decay set (and takes the promote branch); one
+                // it ignored is never entered, so it cannot streak or demote.
+                for (const id of keyCtxIds) if (citedMain.has(id)) injected.add(id);
                 // D#60: the idempotency key must be the CC session UUID, NOT the
                 // project-scoped memory sessionId — concurrent same-project CC
                 // sessions share the latter, so the second session's decay pass

package/lib/citation-tracker.mjs

@@ -356,8 +356,20 @@ export function extractInjectedFromFyi(transcriptPath, opts = {}) {
  * sections never appear).
  *
  * Session-gated: a marker whose recorded session differs from the caller's is
- * another window's render and must not enter this session's denominator. No
- * coordinates → empty set, so transcript-only callers keep their old behaviour.
+ * another window's render and must not be attributed to this session.
+ *
+ * PROMOTION-ONLY (v3.66.1). Deliberately NOT part of extractAllInjected: the
+ * other four faces are query-conditioned — a row appears there because it
+ * MATCHED something, so its absence from the cited set is evidence it was not
+ * useful. A Key Context render is unconditional and re-renders the same fixed
+ * top-10 every session, so an uncited render is evidence of nothing but elapsed
+ * time. Feeding these ids into the decay DENOMINATOR made the block consume
+ * itself: keyObs gates on `importance >= 2` (hook-context.mjs), and a demotion
+ * takes the common importance-2 row to 1, dropping it out of Key Context
+ * permanently after 3 uncited sessions — each departure promoting the next row
+ * into the same grinder. Callers must therefore intersect with the cited set
+ * (see handleStop) so a CITED Key Context row is credited while an uncited one
+ * is left alone.
  *
  * @param {object} [ctx]
  * @param {string} [ctx.runtimeDir]
@@ -378,21 +390,22 @@ export function extractInjectedFromKeyContext({ runtimeDir, project, sessionId =
 }
 
 /**
- * Union of every injection surface's IDs for a transcript: pre-tool-recall +
- * UserPromptSubmit `<memory-context>` + PostToolUse error-recall + the
- * user-prompt-search FYI block + the SessionStart Key Context block. Single
- * integration point the Stop handler calls.
+ * Union of the QUERY-CONDITIONED injection surfaces for a transcript:
+ * pre-tool-recall + UserPromptSubmit `<memory-context>` + PostToolUse
+ * error-recall + the user-prompt-search FYI block. Single integration point the
+ * Stop handler calls for the decay DENOMINATOR.
+ *
+ * Key Context is intentionally absent (v3.66.1 — it was unioned here for one
+ * release): every face above appears because a row matched something, so an
+ * uncited appearance carries relevance information. An unconditional
+ * SessionStart render does not. Callers wanting the Key Context ids ask
+ * `extractInjectedFromKeyContext` directly and use them promotion-only.
  *
  * @param {string|null|undefined} transcriptPath
  * @param {object} [opts]
  * @param {boolean} [opts.mainOnly=false] Skip sidechain-injected IDs. The
  *   citation-decay caller passes true so the injected denominator matches the
  *   mainOnly cited numerator; the P4 access-bump caller omits it (broader).
- * @param {string} [opts.runtimeDir] With `project`, enables the Key Context
- *   face. Omitted by callers that only have a transcript path (computeCiteRecall
- *   over an arbitrary file), which then see the four transcript-derived faces.
- * @param {string} [opts.project]
- * @param {string|null} [opts.sessionId]
  * @returns {Set<number>}
  */
 export function extractAllInjected(transcriptPath, opts = {}) {
@@ -401,9 +414,6 @@ export function extractAllInjected(transcriptPath, opts = {}) {
     ...extractInjectedFromUserPromptSubmit(transcriptPath, opts),
     ...extractInjectedFromErrorRecall(transcriptPath, opts),
     ...extractInjectedFromFyi(transcriptPath, opts),
-    // Marker-derived, not transcript-derived: no-op unless the caller passes
-    // runtimeDir + project (see extractInjectedFromKeyContext).
-    ...extractInjectedFromKeyContext(opts),
   ]);
 }
 

package/lib/keyctx-marker.mjs

@@ -42,21 +42,24 @@ export function recordKeyContextInjection(db, { runtimeDir, project, sessionId =
     if (Number.isInteger(id) && id > 0 && id < 1e7) clean.push(id);
   }
 
-  let bumped = 0;
-  if (db && clean.length > 0) {
-    try {
-      const now = Date.now();
-      // Mirrors hook-memory.mjs's UPS bump verbatim so the two surfaces feed the
-      // same counter with the same semantics. Per-row try/catch for FTS trigger
-      // safety (project_non_obvious.md).
-      const stmt = db.prepare(
-        'UPDATE observations SET injection_count = COALESCE(injection_count, 0) + 1, last_injected_at = ? WHERE id = ?'
-      );
-      for (const id of clean) {
-        try { stmt.run(now, id); bumped++; } catch { /* single-row failure must not drop the rest */ }
-      }
-    } catch (e) { debugCatch(e, 'keyctx-bump'); }
-  }
+  // NO injection_count bump. v3.66.0 added one here and it had to be reverted in
+  // v3.66.1: injection_count is not a neutral counter. scoring-sql.mjs states the
+  // invariant — "bumped ONLY on UserPromptSubmit / hook-memory auto-inject" —
+  // because noisePenaltyClause reads it as a NOISE signal: a row scores x0.5 once
+  // injection_count >= 4 (and > access_count * 3), x0.2 at >= 8. Nothing bumps
+  // access_count for a rendered row (bumpCitationAccess fires on CITED ids only),
+  // so the counter crosses those thresholds purely as a function of elapsed
+  // sessions, deprioritising the highest-importance rows — the exact rows Key
+  // Context renders — in mem_search, UPS ranking and injectionRelevanceSql.
+  //
+  // The UPS bump the reverted code claimed to "mirror verbatim" is
+  // query-conditioned: a row is counted only when it MATCHED a query, so the
+  // counter means "auto-injected and never useful". A Key Context render is
+  // unconditional and hits the same fixed row set every session, so it would have
+  // measured nothing but time. D#124's requirement is decay reachability, which
+  // the extractor face delivers on its own — decay reads decay_seen_count /
+  // uncited_streak / cited_count, never injection_count.
+  const bumped = 0;
 
   let written = false;
   try {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.66.0",
+  "version": "3.66.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "3.66.0",
+      "version": "3.66.1",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.26.0",
         "better-sqlite3": "^12.6.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.66.0",
+  "version": "3.66.1",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",