claude-mem-lite 4.0.2 → 4.0.4

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "4.0.2",
+      "version": "4.0.4",
       "source": "./",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."
     }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/hook-context.mjs

@@ -60,11 +60,16 @@ function mdCell(s) {
 
 export function computeAdaptiveWindows(db, project) {
   const sevenDaysAgo = Date.now() - 7 * DAY_MS;
+  // liveObsFilterSql, not a hand-written half of it (A20260906-R8-§11.3). This COUNT is a
+  // POOL-SIZING input: the windows returned below are handed to the recall queries at :201 /
+  // :468 / :502, all three of which filter live rows. Counting a strictly larger population
+  // than the window is applied to inverts the documented intent — 80 superseded rows read as
+  // >10 obs/day and earned the TIGHTEST window (12h) for finding the few live rows left.
   const row = db
     .prepare(
       `
     SELECT COUNT(*) as c FROM observations
-    WHERE project = ? AND created_at_epoch > ? AND COALESCE(compressed_into, 0) = 0
+    WHERE project = ? AND created_at_epoch > ? AND ${liveObsFilterSql('')}
   `,
     )
     .get(project, sevenDaysAgo);

package/hook-handoff.mjs

@@ -136,6 +136,15 @@ export function buildAndSaveHandoff(db, sessionId, project, type, episodeSnapsho
   const obsWindowParams = ccWindowStart !== null ? [ccWindowStart] : [];
 
   // 2. Completed — from observations (include narrative for richer handoff)
+  //
+  // `compressed_into` ONLY, deliberately — not a half-written liveObsFilterSql. Audit
+  // 2026-08-14 F4 ruled on exactly this line: `completed` is the session's own history, and a
+  // decision a later save overturned still happened, so erasing it here would misreport the
+  // session. Only key_decisions (:242) is re-presented to a LATER session as standing policy,
+  // and that one does filter superseded_at. The scope guard is the third case of "F4 — handoff
+  // key_decisions excludes a retracted decision" in tests/audit-silent-20260814.test.mjs.
+  // Audit R8 §11.3 proposed adding the filter here from a repo-wide regex sweep of the
+  // predicate shape; it was rejected on this reasoning, and the guard catches it.
   const completed = db
     .prepare(
       `

package/hook-update.mjs

@@ -23,6 +23,7 @@ import { pathToFileURL } from 'node:url';
 import { tmpdir, homedir } from 'node:os';
 import { DB_DIR, CODE_DIR } from './schema.mjs';
 import { debugCatch, debugLog } from './utils.mjs';
+import { NATIVE_BINDING_SOURCE_BUILD_CMD } from './lib/binding-probe.mjs';
 // Local manifest is fallback only — the active manifest is loaded from the
 // extracted tarball's own source-files.mjs inside installExtractedRelease.
 // See loadReleaseManifest below.
@@ -877,7 +878,27 @@ function smokeInstalledRelease(targetDir) {
         } catch {
           execSync('npm rebuild better-sqlite3', { cwd: targetDir, timeout: 120000, stdio: 'ignore' });
         }
-        execSync(probeCmd, { timeout: 20000, stdio: 'ignore' });
+        try {
+          execSync(probeCmd, { timeout: 20000, stdio: 'ignore' });
+        } catch {
+          // Both npm rebuilds healed nothing — which is what better-sqlite3 13 does on a
+          // platform it ships no prebuild for, because there is no install script for them to
+          // run. Without this step the re-probe threw, smoke failed, and the caller rolled the
+          // whole update back, so auto-update could never land again on those platforms
+          // (A20260906-R8b-P2-1, found by independent review of v4.0.0).
+          //
+          // The source build is `node-gyp clean && node-gyp rebuild`, i.e. it deletes build/
+          // first — which is why the SessionStart probe path must NOT run it. Here it is safe
+          // for two independent reasons: the binding is ALREADY unusable (the probe above just
+          // threw), so clean destroys nothing; and this whole function is a smoke gate whose
+          // failure rolls back to the previous, working install.
+          execSync(NATIVE_BINDING_SOURCE_BUILD_CMD, {
+            cwd: targetDir,
+            timeout: 300000,
+            stdio: 'ignore',
+          });
+          execSync(probeCmd, { timeout: 20000, stdio: 'ignore' });
+        }
       }
     }
     return true;

package/install.mjs

@@ -420,6 +420,12 @@ export function patchClaudeMdVersion(text, version) {
  * removes the link and leaves the target intact (a link to a populated dir, target still
  * readable afterwards) — following it would delete the developer's own scripts/.
  *
+ * It is `recursive`, so it also removes a REAL directory at `p`, not only a link to one.
+ * That is deliberate and pre-existing (the dev-mode sites already did this): running
+ * `install --dev` after a normal install finds a real `DATA_DIR/node_modules` where a link
+ * belongs. Named here because the one-line summary above says "before a symlink is written
+ * over it", which undersells what the call can delete.
+ *
  * @param {string} p
  * @returns {boolean}
  */
@@ -1581,13 +1587,9 @@ async function uninstall() {
   // 1b. Remove CLI symlink
   for (const binDir of [join(homedir(), '.local', 'bin'), '/usr/local/bin']) {
     const cliLink = join(binDir, 'claude-mem-lite');
-    try {
-      if (clearLinkPath(cliLink)) {
-        ok(`CLI symlink removed: ${cliLink}`);
-      }
-    } catch {
-      /* may not have permissions */
-    }
+    // No try/catch: clearLinkPath swallows a permissions failure and returns false, so the
+    // wrapper this used to have was unreachable once the existsSync gate moved inside it.
+    if (clearLinkPath(cliLink)) ok(`CLI symlink removed: ${cliLink}`);
   }
 
   // 2. Remove hooks from settings.json (match both npx and git-clone install paths)

package/lib/binding-probe.mjs

@@ -48,6 +48,9 @@ export const NATIVE_BINDING_SOURCE_BUILD_CMD = 'npm run --prefix node_modules/be
  * `&&`, never `||`: step 1 exits 0 whether or not it did anything, so an `||` chain would
  * never reach step 2 — the no-op is the whole trap. Sequencing unconditionally costs a
  * recompile in the case step 1 already fixed, which is the right trade for a manual repair.
+ * Precisely: `build-release` is `node-gyp clean && node-gyp rebuild`, so step 2 DISCARDS a
+ * binding step 1 had just produced and rebuilds it. `prebuilds/` is untouched either way, so
+ * the end state is a usable binding; the cost is time, not correctness.
  *
  * @param {string} root Directory whose node_modules holds better-sqlite3
  * @returns {string}

package/lib/fast-summary.mjs

@@ -41,6 +41,17 @@ export const FAST_SUMMARY_LIMITS = {
 /**
  * The two reads every fast summary is built from: the session's opening prompt, and the
  * titles of its most recent observations.
+ *
+ * The observation filter is `compressed_into` ONLY, deliberately — it is NOT a half-written
+ * `liveObsFilterSql` waiting to be completed. `completed` is the session's own history, and a
+ * lesson a later save overturned still happened; dropping it here would misreport the session
+ * that did the work. This is the same ruling audit 2026-08-14 F4 made for the sibling field
+ * `session_handoffs.completed`, where the scope guard lives in
+ * `tests/audit-silent-20260814.test.mjs`. Audit R8 §11.3 proposed adding `superseded_at IS
+ * NULL` to both; both were rejected on this reasoning. The filter that DOES belong on a
+ * superseded row is the one guarding standing policy re-presented to a later session
+ * (`key_decisions`), not history.
+ *
  * @returns {{request: string, completed: string}} raw (unscrubbed, untruncated) values
  */
 export function readFastSummarySource(db, sessionId) {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "4.0.2",
+      "version": "4.0.4",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.30.0",
         "better-sqlite3": "^13.0.3",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",