claude-mem-lite 3.74.0 → 3.75.0

package/nlp.mjs

@@ -245,12 +245,26 @@ export const FTS_STOP_WORDS = new Set([...BASE_STOP_WORDS, ...CONTRACTION_FRAGME
 /**
  * Sanitize and expand a user query into a valid FTS5 query string.
  * Strips special characters, expands synonyms, and joins with AND/space.
+ *
+ * Unbounded by default — an explicit `search` from a human should search what they
+ * typed. The two caps exist for the AUTOMATIC surface (audit 2026-08-22 P2-13):
+ * UserPromptSubmit runs this on every prompt the user sends, with only a 64KB byte
+ * guard upstream, and cost grows with prompt length: 0.8ms on a normal prompt, 6.2ms
+ * on a 64KB ASCII one, 31.8ms on a 64KB CJK one (extractCjkKeywords is O(len x dict)
+ * over an unsegmented run). That is paid before the model sees the turn.
+ *
  * @param {string} query Raw user search query
+ * @param {object} [opts]
+ * @param {number} [opts.maxChars] Truncate the raw query first (bounds CJK segmentation,
+ *   which sees one huge token where ASCII sees many small ones).
+ * @param {number} [opts.maxTokens] Keep at most this many meaningful terms, applied
+ *   after stopword filtering and before expansion.
  * @returns {string|null} FTS5-safe query or null if empty
  */
-export function sanitizeFtsQuery(query) {
+export function sanitizeFtsQuery(query, opts = {}) {
   if (!query) return null;
-  const cleaned = query
+  const { maxChars = 0, maxTokens = 0 } = opts;
+  const cleaned = (maxChars > 0 ? String(query).slice(0, maxChars) : query)
     // Strip ASCII control chars / NUL FIRST. A NUL survives tokenization (it's not
     // \s), gets phrase-quoted by expandToken, and then terminates SQLite's C string
     // mid-phrase → FTS5 "unterminated string" throw, breaking the documented
@@ -293,6 +307,10 @@ export function sanitizeFtsQuery(query) {
   // Filter stop words (but keep all if filtering would empty the query)
   const filtered = tokens.filter(t => !FTS_STOP_WORDS.has(t.toLowerCase()));
   if (filtered.length > 0) tokens = filtered;
+  // Cap AFTER stopword filtering and BEFORE expansion: the terms kept are meaningful
+  // ones, and everything downstream (CJK segmentation, synonym expansion, bigrams) is
+  // per-token work that the cap therefore bounds too.
+  if (maxTokens > 0 && tokens.length > maxTokens) tokens = tokens.slice(0, maxTokens);
   // Split unsegmented CJK tokens into known vocabulary words using CJK_COMPOUNDS dictionary.
   // Uses broader dictionary than synonym-only extraction for better recall.
   // e.g. "这个函数是做什么的" → ["函数"] (not noisy bigrams)

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.74.0",
+  "version": "3.75.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "3.74.0",
+      "version": "3.75.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.26.0",
         "better-sqlite3": "^12.6.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "3.74.0",
+  "version": "3.75.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",
@@ -96,6 +96,7 @@
     "lib/save-observation.mjs",
     "lib/observation-write.mjs",
     "lib/recall-core.mjs",
+    "lib/registry-core.mjs",
     "lib/timeline-core.mjs",
     "lib/search-core.mjs",
     "lib/recent-core.mjs",
@@ -110,6 +111,8 @@
     "lib/save-enrich.mjs",
     "lib/persist-reminder.mjs",
     "lib/maintain-core.mjs",
+    "lib/fast-summary.mjs",
+    "lib/transcript-scan.mjs",
     "lib/dedup-constants.mjs",
     "lib/deferred-work.mjs",
     "lib/upgrade-banner.mjs",
@@ -166,6 +169,7 @@
     "scripts/pre-tool-recall.js",
     "scripts/post-tool-recall.js",
     "scripts/pre-skill-bridge.js",
+    "scripts/pre-agent-inject.sh",
     "scripts/pre-agent-inject.js",
     "scripts/prompt-search-utils.mjs",
     "scripts/hook-launcher.mjs",

package/registry-recommend.mjs

@@ -1,8 +1,10 @@
 // Intent-based skill recommendation — Phase 1 (shadow).
 // See docs/superpowers/specs/2026-06-23-skill-recommendation-loop-design.md
 //
-// Phase-1 invariant: shadow AND live only LOG. Neither emits to stdout nor writes
-// invocations/recommend_count. Live injection is Phase 2. `off` skips all work.
+// Phase-1 invariant: the engine only LOGS. It never emits to stdout and never writes
+// invocations/recommend_count. Live injection is Phase 2 and does not exist yet, so
+// `live` resolves to shadow with a one-time warning (see UNIMPLEMENTED_MODES).
+// `off` skips all work.
 import { readFileSync, writeFileSync, renameSync, existsSync, mkdirSync, appendFileSync, readdirSync, unlinkSync } from 'fs';
 import { join } from 'path';
 import { resolveDataDir } from './lib/resolve-data-dir.mjs';
@@ -10,13 +12,37 @@ import { searchResources, cjkIntentTokens } from './registry-retriever.mjs';
 
 import { DAY_MS } from './lib/time-constants.mjs';
 const VALID_MODES = new Set(['shadow', 'live', 'off']);
+// Phase 2 (live injection) was never built. `live` stayed in VALID_MODES and
+// getRecommendMode returned it verbatim, so setting it bought a user exactly
+// nothing and said nothing — the run behaved as shadow while the mode field in
+// every logged row claimed 'live'. Audit 2026-08-22 P2-5: an accepted value that
+// silently means something else is worse than an unsupported one. It still parses
+// (nobody's config breaks), it now resolves to what actually happens, and it says
+// so once per process.
+export const RECOMMEND_MODE_UNIMPLEMENTED = new Set(['live']);
+let warnedUnimplemented = false;
 
-/** Recommendation mode from env; default 'shadow', unknown → 'shadow'. */
-export function getRecommendMode() {
+/** The mode the environment ASKED for — 'live' included. For diagnostics (doctor). */
+export function getRequestedRecommendMode() {
   const raw = (process.env.CLAUDE_MEM_RECOMMEND_MODE || 'shadow').toLowerCase().trim();
   return VALID_MODES.has(raw) ? raw : 'shadow';
 }
 
+/** Recommendation mode actually in effect; default 'shadow', unknown → 'shadow'. */
+export function getRecommendMode() {
+  const requested = getRequestedRecommendMode();
+  if (!RECOMMEND_MODE_UNIMPLEMENTED.has(requested)) return requested;
+  if (!warnedUnimplemented && !process.env.MEM_QUIET_HOOKS) {
+    warnedUnimplemented = true;
+    // stderr, once: hook stdout is a parsed envelope and must not carry this.
+    process.stderr.write(
+      `[claude-mem-lite] CLAUDE_MEM_RECOMMEND_MODE=${requested} is not implemented `
+      + '(live injection is Phase 2); running in shadow mode — nothing is injected. '
+      + 'Set shadow or off to silence this.\n');
+  }
+  return 'shadow';
+}
+
 // Provisional gate thresholds — calibrated from shadow data before Phase 2 (spec §8).
 // relevance is raw bm25 (negative; more negative = better). Candidate must clear |floor|.
 export const RECO_BM25_FLOOR = -1.5;     // floor stays on raw bm25 (absolute topical relevance)

package/scoring-sql.mjs

@@ -80,15 +80,29 @@ export const TYPE_DECAY_CASE = `(
  * The old (pre-R2) table had bugfix=0.75 < change=0.8, inverted vs reality.
  * Applied as: BM25 × time_decay × TYPE_QUALITY × project_boost × importance
  */
+export const TYPE_QUALITY = {
+  decision: 1.5,
+  discovery: 1.3,
+  bugfix: 1.1,
+  feature: 1.0,
+  refactor: 0.6,
+  change: 0.5,
+};
+
+/** Multiplier for a type not in the table (legacy rows, manual saves). */
+export const TYPE_QUALITY_DEFAULT = 1.0;
+
+/**
+ * The SQL form, generated from TYPE_QUALITY rather than written beside it.
+ * The table used to exist three times — here, hook-context.mjs, hook-memory.mjs — with
+ * "aligned with scoring-sql.mjs (R2)" comments as the only thing keeping them equal
+ * (audit 2026-08-22, P2-10). Values happened to agree; the next re-weighting is what the
+ * copies were waiting for. Both JS consumers now import TYPE_QUALITY from here.
+ */
 export const TYPE_QUALITY_CASE = `(
   CASE o.type
-    WHEN 'decision'  THEN 1.5
-    WHEN 'discovery' THEN 1.3
-    WHEN 'bugfix'    THEN 1.1
-    WHEN 'feature'   THEN 1.0
-    WHEN 'refactor'  THEN 0.6
-    WHEN 'change'    THEN 0.5
-    ELSE 1.0
+${Object.entries(TYPE_QUALITY).map(([t, w]) => `    WHEN '${t}' THEN ${w.toFixed(1)}`).join('\n')}
+    ELSE ${TYPE_QUALITY_DEFAULT.toFixed(1)}
   END
 )`;
 

package/scripts/pre-agent-inject.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# claude-mem-lite: Fast bash pre-filter for the PreToolUse:Agent|Task hook.
+#
+# Subagent dispatch-time injection is DEFAULT OFF (CLAUDE_MEM_SUBAGENT_INJECT=on|1),
+# and pre-agent-inject.js's off path is already the cheapest thing a Node script can
+# do — it reads one env var and returns. The cost that remained was Node itself:
+# every Agent/Task dispatch paid a full interpreter start for a feature that was
+# switched off. Measured on this machine, 20 dispatches each, flag unset: **22.6ms**
+# through `node scripts/hook-launcher.mjs scripts/pre-agent-inject.js` vs **2.4ms**
+# here. With the flag ON the prefilter costs 1.8ms on top of the 44.9ms the feature
+# already spends (46.7ms) — the trade is a rounding error against a real saving.
+#
+# Measure with the flag EXPLICITLY unset (`env -u CLAUDE_MEM_SUBAGENT_INJECT …`). A
+# maintainer shell that dogfoods the feature exports it, and the first pass at these
+# numbers timed the ON path twice and called it the off-path cost.
+#
+# Audit 2026-08-22 P2-5 asked for "don't register the hook when the flag is off".
+# A plugin manifest is static JSON — Claude Code reads hooks/hooks.json once and
+# nothing in it can consult an env var — so conditional registration would mean
+# deleting the entry and making opt-in require re-running the installer. This gets
+# the same saving with the opt-in path intact, and mirrors scripts/post-tool-use.sh,
+# the prefilter already doing this for PostToolUse.
+#
+# Fail-open, like every hook here: never exit non-zero, never block a dispatch.
+
+# ON: hand off untouched. exec BEFORE reading anything — pre-agent-inject.js echoes
+# the whole subagent prompt back via updatedInput, so stdin must reach it verbatim.
+# hook-launcher.mjs sits next to this file in every install shape (plugin cache,
+# managed copy, dev symlink), which is also how it locates its own install dir.
+case "${CLAUDE_MEM_SUBAGENT_INJECT:-}" in
+  on|1)
+    _mem_dir=$(dirname "${BASH_SOURCE[0]}")
+    exec node "${_mem_dir}/hook-launcher.mjs" scripts/pre-agent-inject.js
+    ;;
+esac
+
+# OFF: drain stdin before exiting. The Node path did not read it either, so this is
+# no worse than today and strictly safer — the host writes the event payload before
+# waiting on us, and a >64KB prompt would otherwise leave that write against a pipe
+# whose reader vanished. Builtin loop, no subprocess: `head -c` costs ~1ms more than
+# the entire rest of this script.
+while IFS= read -r _; do :; done
+exit 0

package/scripts/user-prompt-search.js

@@ -343,7 +343,21 @@ export function hasExplicitSignal(text, { errSig, files, intent } = {}) {
 // ×3 runs) → VERDICT NET-POSITIVE. The only behavior delta is on-topic eagerness (naming
 // an identifier surfaces its obs) — the highest-precision injection trigger there is. The
 // prose stop-list (IDENTIFIER_STOPWORDS) keeps the extractor off ordinary English.
-export const IDENTIFIER_BYPASS = process.env.CLAUDE_MEM_UPS_IDENTIFIER_BYPASS !== '0';
+export // Query caps for THIS surface only (audit 2026-08-22 P2-13). The 64KB byte guard on
+// stdin bounds what we read, not what we compute: sanitizeFtsQuery costs 0.8ms on a
+// normal prompt, 6.2ms on a 64KB ASCII one and 31.8ms on a 64KB CJK one, and this hook
+// runs on every prompt before the model sees the turn. 2000 characters is a long prompt
+// by any measure, and past ~64 meaningful AND-joined terms an FTS5 query matches nothing
+// anyway and survives only through the OR fallback. An explicit `search` stays uncapped
+// — a person who types a long query meant it.
+const UPS_QUERY_CAPS = { maxChars: 2000, maxTokens: 64 };
+
+/** The capped query builder both search paths on this surface go through. */
+export function upsFtsQuery(text) {
+  return sanitizeFtsQuery(text, UPS_QUERY_CAPS);
+}
+
+const IDENTIFIER_BYPASS = process.env.CLAUDE_MEM_UPS_IDENTIFIER_BYPASS !== '0';
 const TECH_IDENTIFIER_RE_G = new RegExp(TECH_IDENTIFIER_RE.source, 'g');
 
 // All tech-identifier tokens in `text`, lowercased + de-duped (for case-insensitive
@@ -381,7 +395,7 @@ export function rowMatchesIdentifier(row, idsLower) {
 // importance/type/decay inflation.
 export function searchByFts(db, queryText, project, limit, typeFilter,
                             { nowT = Date.now(), epochTo = null } = {}) {
-  const ftsQuery = sanitizeFtsQuery(queryText);
+  const ftsQuery = upsFtsQuery(queryText);
   if (!ftsQuery) return { rows: [], mode: null };
 
   const cutoff = nowT - LOOKBACK_MS;
@@ -483,7 +497,7 @@ function searchByFile(db, files, project, limit) {
 // sparser and more surface-form than observations; the gate would rarely
 // fire and mostly kill real hits).
 function searchByUserPrompts(db, queryText, project, limit) {
-  const ftsQuery = sanitizeFtsQuery(queryText);
+  const ftsQuery = upsFtsQuery(queryText);
   if (!ftsQuery) return [];
 
   const cutoff = Date.now() - LOOKBACK_MS;

package/server.mjs

@@ -23,7 +23,7 @@ import {
 } from './lib/maintain-core.mjs';
 import { snapshotDb } from './lib/db-backup.mjs';
 import { deleteObservations, previewDeleteRows } from './lib/delete-core.mjs';
-import { fetchObsDetail, OBS_FIELDS, SESSION_DETAIL_FIELDS, supersededNotice } from './lib/get-core.mjs';
+import { fetchObsDetail, fetchPromptDetail, fetchEventDetail, OBS_FIELDS, SESSION_DETAIL_FIELDS, PROMPT_DETAIL_FIELDS, EVENT_DETAIL_FIELDS, supersededNotice } from './lib/get-core.mjs';
 import { collectBrowseTiers, getActiveMemorySessionId, BROWSE_TIERS, BROWSE_TIER_LABELS } from './lib/browse-core.mjs';
 import { effectiveQuiet, RUNTIME_DIR } from './hook-shared.mjs';
 import { computeStatsFeed } from './lib/stats-core.mjs';
@@ -46,7 +46,8 @@ function descriptionOf(name) {
 import { optimizePreview, optimizeRun } from './hook-optimize.mjs';
 import { join, sep } from 'path';
 import { homedir } from 'os';
-import { ensureRegistryDb, upsertResource, collectRegistryStats, listResourcesRanked, formatRegistryListLine } from './registry.mjs';
+import { ensureRegistryDb, collectRegistryStats, listResourcesRanked, formatRegistryListLine } from './registry.mjs';
+import { IMPORT_STRING_FIELDS, importResource, removeResource, reindexResources } from './lib/registry-core.mjs';
 import { searchResources } from './registry-retriever.mjs';
 import { probeOtherSources as probeIdSources, bucketIdTokens, splitDeferredTokens } from './lib/id-routing.mjs';
 import { saveObservation } from './lib/save-observation.mjs';
@@ -666,34 +667,31 @@ server.registerTool(
     }
 
     if (bySrc.prompt.length > 0) {
-      const ph = bySrc.prompt.map(() => '?').join(',');
-      const rows = db.prepare(`SELECT * FROM user_prompts WHERE id IN (${ph}) ORDER BY created_at_epoch ASC`).all(...bySrc.prompt);
-      for (const row of rows) {
+      for (const row of fetchPromptDetail(db, bySrc.prompt)) {
         foundBySource.prompt.add(row.id);
         const lines = [`── P#${row.id} ──`];
-        if (row.prompt_text) lines.push(`prompt_text: ${row.prompt_text.length > 500 ? row.prompt_text.slice(0, 500) + '…' : row.prompt_text}`);
-        if (row.content_session_id) lines.push(`content_session_id: ${row.content_session_id}`);
-        if (row.prompt_number !== null && row.prompt_number !== undefined) lines.push(`prompt_number: ${row.prompt_number}`);
-        if (row.created_at) lines.push(`created_at: ${row.created_at}`);
+        for (const f of PROMPT_DETAIL_FIELDS) {
+          if (f === 'id') continue;   // already in the header
+          const val = row[f];
+          if (val === null || val === undefined || val === '') continue;
+          lines.push(`${f}: ${typeof val === 'string' && val.length > 500 ? val.slice(0, 500) + '…' : val}`);
+        }
         sections.push(lines.join('\n'));
       }
     }
 
     if (bySrc.event.length > 0) {
-      const ph = bySrc.event.map(() => '?').join(',');
-      const rows = db.prepare(`SELECT * FROM events WHERE id IN (${ph}) ORDER BY created_at_epoch ASC`).all(...bySrc.event);
-      // events carry the distilled lesson in `body` (persistHaikuSummary writes lesson_learned||narrative).
-      // No created_at ISO column (only *_epoch) — render the epoch as an ISO string for a scannable date.
-      for (const row of rows) {
+      // fetchEventDetail derives created_at from created_at_epoch (events have no ISO
+      // column), so EVENT_DETAIL_FIELDS names it like any other field on both faces.
+      for (const row of fetchEventDetail(db, bySrc.event)) {
         foundBySource.event.add(row.id);
         const lines = [`── E#${row.id} [${row.event_type}] ──`];
-        if (row.title) lines.push(`title: ${row.title}`);
-        if (row.body) lines.push(`body: ${row.body.length > 500 ? row.body.slice(0, 500) + '…' : row.body}`);
-        if (row.project) lines.push(`project: ${row.project}`);
-        if (row.importance !== null && row.importance !== undefined) lines.push(`importance: ${row.importance}`);
-        if (row.file_paths) lines.push(`file_paths: ${row.file_paths}`);
-        if (row.git_sha) lines.push(`git_sha: ${row.git_sha}`);
-        if (row.created_at_epoch) lines.push(`created_at: ${new Date(row.created_at_epoch).toISOString()}`);
+        for (const f of EVENT_DETAIL_FIELDS) {
+          if (f === 'id' || f === 'event_type') continue;   // already in the header
+          const val = row[f];
+          if (val === null || val === undefined || val === '') continue;
+          lines.push(`${f}: ${typeof val === 'string' && val.length > 500 ? val.slice(0, 500) + '…' : val}`);
+        }
         sections.push(lines.join('\n'));
       }
     }
@@ -1454,19 +1452,14 @@ server.registerTool(
       if (!args.name || !args.resource_type) {
         return { content: [{ type: 'text', text: 'import requires name and resource_type' }], isError: true };
       }
-      const IMPORT_STRING_FIELDS = ['repo_url', 'local_path', 'invocation_name', 'intent_tags',
-        'domain_tags', 'trigger_patterns', 'capability_summary', 'keywords', 'tech_stack', 'use_cases'];
-      // Preserve provenance on a metadata-only re-import (parity with cmdRegistry): default
-      // source to 'user' only for a NEW resource — a partial re-upsert of an existing
-      // github/preinstalled row without `source` must not flip it to 'user'.
-      let source = args.source;
-      if (!source) {
-        const existing = rdb.prepare('SELECT source FROM resources WHERE type = ? AND name = ?').get(args.resource_type, args.name);
-        source = existing ? existing.source : 'user';
-      }
-      const fields = { name: args.name, type: args.resource_type, status: 'active', source };
+      // Provenance preservation + the 'installed' tier grant live in lib/registry-core.mjs,
+      // shared with the `registry import` CLI twin (audit 2026-08-22 P1-3). Before that
+      // extraction this side wrote its own SQL and silently skipped the tier grant.
+      const fields = {};
       for (const f of IMPORT_STRING_FIELDS) fields[f] = args[f] || '';
-      const id = upsertResource(rdb, fields);
+      const { id } = importResource(rdb, {
+        name: args.name, type: args.resource_type, source: args.source, fields,
+      });
       return { content: [{ type: 'text', text: `Imported: ${args.resource_type}:${args.name} (id=${id})` }] };
     }
 
@@ -1474,14 +1467,13 @@ server.registerTool(
       if (!args.name || !args.resource_type) {
         return { content: [{ type: 'text', text: 'remove requires name and resource_type' }], isError: true };
       }
-      const result = rdb.prepare('DELETE FROM resources WHERE type = ? AND name = ?').run(args.resource_type, args.name);
-      return { content: [{ type: 'text', text: result.changes > 0 ? `Removed: ${args.resource_type}:${args.name}` : 'Not found.' }] };
+      const { removed } = removeResource(rdb, { name: args.name, type: args.resource_type });
+      return { content: [{ type: 'text', text: removed ? `Removed: ${args.resource_type}:${args.name}` : 'Not found.' }] };
     }
 
     if (action === 'reindex') {
-      rdb.exec("INSERT INTO resources_fts(resources_fts) VALUES('rebuild')");
-      const count = rdb.prepare('SELECT COUNT(*) as c FROM resources WHERE status = ?').get('active');
-      return { content: [{ type: 'text', text: `FTS5 reindexed. ${count.c} active resources.` }] };
+      const { activeCount } = reindexResources(rdb);
+      return { content: [{ type: 'text', text: `FTS5 reindexed. ${activeCount} active resources.` }] };
     }
 
     if (action === 'import_url') {

package/source-files.mjs

@@ -164,6 +164,10 @@ export const SOURCE_FILES = [
   // auto-update. Same single-source-of-truth pattern (see #8217).
   'lib/observation-write.mjs',
   'lib/recall-core.mjs',
+  // Shared registry write core (import/remove/reindex + the 'installed' tier grant).
+  // Statically imported by mem-cli.mjs AND server.mjs — missing it from the manifest
+  // would break `registry import|remove|reindex` and mem_registry on auto-update.
+  'lib/registry-core.mjs',
   // Shared timeline core (anchor resolution + before/after window) and shared
   // cross-source search core (sessions/prompts FTS, CJK fallback, normalization,
   // pagination math). Statically imported by mem-cli.mjs AND server.mjs — same
@@ -187,6 +191,8 @@ export const SOURCE_FILES = [
   // Statically imported by mem-cli.mjs (cmdMaintain), server.mjs (mem_maintain),
   // and hook.mjs (handleAutoMaintain) — missing it would break maintain on auto-update.
   'lib/maintain-core.mjs',
+  'lib/fast-summary.mjs',
+  'lib/transcript-scan.mjs',
   // Pre-maintenance VACUUM INTO snapshot (MED-2). Statically imported by mem-cli.mjs,
   // server.mjs, and hook.mjs before their destructive purge/cleanup — missing it
   // would crash maintain on auto-update with an unresolved import.
@@ -266,6 +272,12 @@ export const HOOK_SCRIPT_FILES = [
   'pre-tool-recall.js',
   'post-tool-recall.js',
   'pre-skill-bridge.js',
+  // The Agent|Task hook command in BOTH registration sites is now the .sh prefilter,
+  // which execs the .js only when CLAUDE_MEM_SUBAGENT_INJECT is on (audit P2-5). Both
+  // must be materialized: shipping the prefilter without its target turns every
+  // opt-in dispatch into a silent no-op, and shipping the target without the
+  // prefilter leaves the registered hook command pointing at a file that is not there.
+  'pre-agent-inject.sh',
   'pre-agent-inject.js',
   // v2.84: self-heal wrapper that detects ERR_MODULE_NOT_FOUND under the
   // install dir and runs install.mjs repair before retrying the entry.