claude-mem-lite 6.19.2 → 6.19.4

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "6.19.2",
+      "version": "6.19.4",
       "source": "./",
       "homepage": "https://github.com/sdsrss/claude-mem-lite",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.19.2",
+  "version": "6.19.4",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/hook-shared.mjs

@@ -30,6 +30,7 @@ import {
 } from './lib/schema-skew.mjs';
 import { isDbUnusableError, DB_UNUSABLE_MARKER_PREFIX } from './lib/db-unusable.mjs';
 import { shouldRecordOnce } from './lib/record-once.mjs';
+import { hookSessionId } from './lib/provenance.mjs';
 // Audit 2026-09-05 P1-2 (carried from 2026-09-02 P2-9): `callLLM`, the quiet/adoption
 // predicates and the handoff constants moved into `lib/` because two lib modules
 // imported them from here and dragged this file's whole import graph — haiku-client,
@@ -385,7 +386,7 @@ export function getSessionId() {
 
 export function createSessionId() {
   const project = inferProject();
-  const id = `hook-${project}-${randomUUID().slice(0, 8)}`;
+  const id = hookSessionId(project, randomUUID().slice(0, 8));
   const file = sessionFile();
   const tmp = file + `.tmp-${process.pid}`;
   writeFileSync(tmp, JSON.stringify({ id, startedAt: Date.now(), project }), { mode: 0o600 });

package/lib/browse-core.mjs

@@ -6,6 +6,7 @@
 
 import { TIER_CASE_SQL, tierSqlParams } from '../tier.mjs';
 import { liveObsFilterSql } from './inject-search-core.mjs';
+import { HOOK_SESSION_ID_PREFIX } from './provenance.mjs';
 
 export const BROWSE_TIERS = ['working', 'active', 'archive'];
 export const BROWSE_TIER_LABELS = {
@@ -14,14 +15,23 @@ export const BROWSE_TIER_LABELS = {
   archive: '🔵 Archive',
 };
 
-/** Newest active memory_session_id for the project ('' when none) — the tier
- *  classifier's "current session" input, needed identically by both faces. */
+/** Newest active hook session id for the project ('' when none) — the tier classifier's
+ *  "current session" input, needed identically by both faces. Only the hook's own sessions
+ *  count: a writer's row (`manual-`, `compress-`, …) is inserted active on that writer's first
+ *  write in a project and stays active until the 24h sweep, so taken as the current session it
+ *  put all of that writer's rows, of any age, in the working tier (D#153).
+ *  From a session's first Stop its own row is no longer active (Stop marks it completed on every
+ *  turn and nothing marks it active again), so this is '' or another hook session of the project
+ *  still marked active (a parallel one, or one that ended without a Stop); tier rule 2 holds for
+ *  the session in progress only before its first reply, and rules 3-4 carry its rows of the last
+ *  2 hours. Accepted (D#161): measured 2026-09-28, 1 row in this machine's database was one
+ *  rule 2 alone would have kept in the working tier; hook sessions had written 12 of 238 rows. */
 export function getActiveMemorySessionId(db, project) {
   const row = db
     .prepare(
-      "SELECT memory_session_id FROM sdk_sessions WHERE project = ? AND status = 'active' ORDER BY started_at_epoch DESC LIMIT 1",
+      "SELECT memory_session_id FROM sdk_sessions WHERE project = ? AND status = 'active' AND memory_session_id LIKE ? ORDER BY started_at_epoch DESC LIMIT 1",
     )
-    .get(project);
+    .get(project, `${HOOK_SESSION_ID_PREFIX}%`);
   return row?.memory_session_id ?? '';
 }
 

package/lib/export-columns.mjs

@@ -11,8 +11,9 @@
 // twin-drift class permanently.
 //
 // Full round-trippable set: content + value-signals (access/cited/uncited/injection/decay)
-// + branch + timing. `id` + `memory_session_id` are informational (restore remaps id and
-// buckets under a synthetic restore session). Session-idempotency keys (last_decided/
+// + branch + timing. `id` + `memory_session_id` are informational: restore remaps id, and of the
+// session id it keeps only whether the row was an explicit save (`manual-<project>`) or not
+// (`restore-<project>`; see cmdRestore). Session-idempotency keys (last_decided/
 // last_cited/last_access_session_id, demoted_at, optimized_at) are intentionally NOT
 // exported — they are meaningless after a row is re-bucketed under a restore session.
 // last_access_session_id (v48) joins that set for the same reason: it answers "did THIS cc

package/lib/provenance.mjs

@@ -1,8 +1,9 @@
 // Which writer produced an observation, read back from its memory_session_id. saveObservation
 // writes every explicit save under MANUAL_SESSION_ID_PREFIX. The hook capture (`hook-`),
 // transcript import (`import-`), compression summaries and cluster-merge keepers (`compress-`),
-// rows narrow re-enrich rewrote (`enrich-`), promoted events (`promote-`) and rows imported from
-// older stores (a bare session uuid) are machine-written.
+// rows narrow re-enrich rewrote (`enrich-`), promoted events (`promote-`), machine-written rows
+// `restore` brought back from a backup (`restore-`) and rows imported from older stores (a bare
+// session uuid) are machine-written.
 //
 // Search and get mark the machine-written side, because explicit saves are the large majority
 // of a typical store and a mark on nearly every line would carry no information. An unknown id
@@ -14,14 +15,22 @@ export const MANUAL_SESSION_ID_PREFIX = 'manual-';
 // uuid has them (schema.mjs, sdk_sessions_id_mix_check_ai). A writer row uses `<prefix><project>`
 // for both, which has that shape for one project length and dash layout (27 characters under
 // `compress-`, 29 under `manual-`), and the refusal failed every write in such a project (D#147).
-// That id gets one more character; every other id is unchanged. Counted in code points, as
-// SQLite's length() and LIKE's `_` count them.
+// The hook's own id, `hook-<project>-<8 hex>`, has it for a 22-character project with dashes at
+// 3, 8, 13 and 18 (D#156). That id gets one more character; every other id is unchanged. Counted
+// in code points, as SQLite's length() and LIKE's `_` count them.
 const UUID_SHAPED_RE = /^[\s\S]{8}-[\s\S]{4}-[\s\S]{4}-[\s\S]{4}-[\s\S]{12}$/u;
+const outOfUuidShape = (id) => (UUID_SHAPED_RE.test(id) ? `${id}~` : id);
 
-/** The session id a non-hook writer (`manual-`, `compress-`, `enrich-`, `promote-`) stores for a project. */
+/** The session id a non-hook writer (`manual-`, `compress-`, `enrich-`, `promote-`, `restore-`) stores for a project. */
 export function writerSessionId(prefix, project) {
-  const id = `${prefix}${project}`;
-  return UUID_SHAPED_RE.test(id) ? `${id}~` : id;
+  return outOfUuidShape(`${prefix}${project}`);
+}
+
+export const HOOK_SESSION_ID_PREFIX = 'hook-';
+
+/** The hook's id for one session in a project: `hook-<project>-<tail>`. */
+export function hookSessionId(project, tail) {
+  return outOfUuidShape(`${HOOK_SESSION_ID_PREFIX}${project}-${tail}`);
 }
 
 const AUTO_MARK = '🤖';

package/mem-cli.mjs

@@ -25,7 +25,7 @@ import { resolveProject } from './project-utils.mjs';
 import { resolveCliProject as cliProject } from './lib/cli-project.mjs';
 import { reRankWithContext } from './search-scoring.mjs';
 import { searchObservationsHybrid } from './search-engine.mjs';
-import { autoHeaderNote, autoLegend, autoTag } from './lib/provenance.mjs';
+import { autoHeaderNote, autoLegend, autoTag, isAutoWritten, writerSessionId } from './lib/provenance.mjs';
 import {
   fetchObsDetail,
   fetchPromptDetail,
@@ -2268,8 +2268,18 @@ function cmdExport(db, args) {
 // (access/cited/uncited/injection/decay), branch, and concepts/facts/files_read that
 // saveObservation derives or zeros — so a restored backup keeps its citation-decay
 // history and original timing (created_at via the `now` param). Source ids are
-// discarded (local AUTOINCREMENT; export omits related_ids); session provenance
-// collapses to saveObservation's manual-<project> bucket (documented MVP tradeoff).
+// discarded (local AUTOINCREMENT; export omits related_ids). Session ids are not restored,
+// only whether a row was an explicit save: see RESTORE_SESSION_ID_PREFIX.
+// A machine-written row (any exported id but `manual-`) is restored under `restore-<project>`, so
+// lib/provenance.mjs still reads it as auto-written; before D#157 every row went under
+// `manual-<project>` and rendered as an explicit save. The exported id is not reused: saveObservation
+// stores it as both session ids of an active session row, and a bare session uuid
+// (rows imported from older stores) is the shape sdk_sessions refuses, a `hook-` id could become
+// browse's current session (the only active hook row once Stop has marked the real one completed)
+// until a SessionStart sweeps it, and under --project the id names another project. A row exported
+// without the column restores as an explicit save, as before.
+const RESTORE_SESSION_ID_PREFIX = 'restore-';
+
 function cmdRestore(db, argv) {
   const { positional, flags } = parseArgs(argv);
   const file = positional[0];
@@ -2396,6 +2406,9 @@ function cmdRestore(db, argv) {
         files,
         lesson_learned: r.lesson_learned || null,
         now: new Date(createdEpoch),
+        sessionId: isAutoWritten(r.memory_session_id)
+          ? writerSessionId(RESTORE_SESSION_ID_PREFIX, project)
+          : undefined,
       });
       if (res.kind !== 'saved') {
         skipped++;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.19.2",
+  "version": "6.19.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "6.19.2",
+      "version": "6.19.4",
       "os": [
         "darwin",
         "linux",
@@ -2625,9 +2625,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.5.0.tgz",
-      "integrity": "sha512-R5SnVLJmgYYvf2F2ZgwSBnelz5G4q5AxIC277GDfUaNbrZKNANcBC7RHqYYePlszf4kBolVkJauG0ZjHHFh55g==",
+      "version": "10.7.2",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.2.tgz",
+      "integrity": "sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.19.2",
+  "version": "6.19.4",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",
@@ -230,7 +230,7 @@
     "@hono/node-server": ">=2.0.11",
     "body-parser": ">=2.3.0",
     "fast-uri": ">=3.1.4 <4",
-    "ip-address": ">=10.1.1",
+    "ip-address": ">=10.6.0",
     "brace-expansion": ">=5.0.9"
   },
   "devDependencies": {

package/secret-scrub.mjs

@@ -197,12 +197,19 @@ export const SECRET_PATTERNS = [
   ],
   // PEM private key blocks. `[A-Z0-9 ]*` covers every armor label — RSA/EC/DSA/
   // OPENSSH plus ENCRYPTED and PGP (… PRIVATE KEY BLOCK) — that the fixed
-  // alternation missed; the block delimiters make FP impossible.
+  // alternation missed.
   // The body stops at the next `-----BEGIN ` (D#130): with `[\s\S]*?` every header with no END
   // scanned to the end of the text, on each of scrubSecrets' passes — quadratic, 8.3 s on 500k
   // chars. A block whose END is missing is left to the next pattern. Nor does it cross a mark this
   // scrubber wrote: on a later pass, a BEGIN that a scrubbed key used to block reached a far END
   // and erased the prose between (v6.19.2 pre-tag defect review F5).
+  // Text that names a BEGIN and, later, an END with no key between them loses the text between
+  // (D#155, accepted). Keeping such a block was tried for 6.19.3 and withdrawn before the tag: each
+  // of the three keep rules measured stored keys this pattern erases, either a key it took for text
+  // or a key tail the kept markers hid from scrubKeyTails (docs/audits/20260928-v6.19.3-pretag-*.md).
+  // On this machine (2026-09-28) all 967 such blocks in 1,064 transcripts came from this
+  // repository's scrubber work; the other projects' transcripts held 6 BEGIN markers and no END.
+  // That shows the shape is rare here, not that text about PEM markers elsewhere keeps its words.
   [
     /-----BEGIN [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----(?:(?!-----BEGIN [A-Z0-9 ]*PRIVATE KEY|\*\*\*PEM_KEY\*\*\*)[\s\S])*?-----END [A-Z0-9 ]*PRIVATE KEY(?: BLOCK)?-----/g,
     '***PEM_KEY***',
@@ -406,6 +413,16 @@ const ARMOR = 4;
 const CUT = 5;
 const OTHER = 6;
 
+// Character-class checks by code, not a regex per character. (What brought the many-BEGINs linearity
+// shape back under its budget after the v6.19.2 CI run was cutOffKeyEnd stopping before another
+// BEGIN line, not these checks: under coverage the shape measured 5.6-6.2x benign with these checks
+// alone, 1.9-2.3x with the stop alone.)
+function isB64Code(c) {
+  return (
+    (c >= 65 && c <= 90) || (c >= 97 && c <= 122) || (c >= 48 && c <= 57) || c === 43 || c === 47 || c === 61
+  );
+}
+
 function backslashesBefore(text, i, floor) {
   let j = i;
   while (j > floor && text[j - 1] === '\\') j--;
@@ -508,7 +525,7 @@ function lineCore(text, s, e, shape) {
   // (`</key>`), and escaped breaks before it. Read from the end: an unanchored
   // `(?:\\+[rn])*["']…$` retried every start in a backslash run.
   let q = b;
-  while (q > a && /[ \t+,;)\]}]/.test(line[q - 1])) q--;
+  while (q > a && ' \t+,;)]}'.includes(line[q - 1])) q--;
   const tag = q > a && line[q - 1] === '>' ? /<\/[A-Za-z][\w:.-]{0,40}>$/.exec(line.slice(a, q)) : null;
   if (tag) b = q - tag[0].length;
   else if (q > a && (line[q - 1] === '"' || line[q - 1] === "'" || line[q - 1] === '`')) {
@@ -559,7 +576,11 @@ function cutRun(core) {
 function cutOffKeyEnd(text, b, be) {
   // The rest of the BEGIN line: nothing, or base64 chunks, then a break that sets the depth.
   let i = be;
-  while (i < text.length && /[A-Za-z0-9+/= \t]/.test(text[i])) i++;
+  for (
+    let c = text.charCodeAt(i);
+    i < text.length && (isB64Code(c) || c === 32 || c === 9);
+    c = text.charCodeAt(++i)
+  );
   const rest = text.slice(be, i).trim();
   let u;
   let next;
@@ -608,13 +629,15 @@ function cutOffKeyEnd(text, b, be) {
   // for one, it stripped this key's identical body line and one copy of a repeated cut key went
   // per pass (v6.19.2 pre-tag round-5 review F2).
   let run = 0;
-  while (run < 16 && b - run > ls && /[A-Za-z0-9+/=]/.test(text[b - run - 1])) run++;
+  while (run < 16 && b - run > ls && isB64Code(text.charCodeAt(b - run - 1))) run++;
   const shape = run >= 16 ? null : prefixShape(text.slice(ls, b));
 
   let armors = 0;
   let shorts = 0;
   let pendingBlank = false;
   while (next !== -1) {
+    // Another BEGIN line is never part of this key; stop before reading it whole.
+    if (!shape && text.startsWith('-----BEGIN ', next)) break;
     const line = nextLine(text, next, u);
     const { core, start, end: coreEnd } = lineCore(text, next, line.end, shape);
     const kind = classify(core);