claude-mem-lite 6.23.2 → 6.24.0

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "6.23.2",
+      "version": "6.24.0",
       "source": "./",
       "homepage": "https://github.com/sdsrss/claude-mem-lite",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.23.2",
+  "version": "6.24.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/README.md

@@ -189,7 +189,7 @@ cd claude-mem-lite
 node install.mjs install
 ```
 
-Source files stay in the cloned repo. Update via `git pull && node install.mjs install`.
+`install` copies the source files to `~/.claude-mem-lite/`, as the npx method does. Update with `node install.mjs update`, which installs the latest signed release. `git pull && node install.mjs install` installs the checked-out branch instead: it can be ahead of the latest release, and no signature is checked.
 
 ### What happens during installation
 
@@ -237,6 +237,27 @@ rm -rf ~/claude-mem-lite/   # pre-v0.5 unhidden (if not auto-moved)
     repos/               # Shallow-cloned source repos
 ```
 
+## Upgrading to 6.24.0
+
+**If you set `CLAUDE_CONFIG_DIR`, the installer, updates and hooks now use that directory, as
+Claude Code does.** No schema-version change: 6.23.3 still opens the database after this
+release has. Without `CLAUDE_CONFIG_DIR` nothing in this item changes.
+
+- **Who is affected.** Claude Code keeps `settings.json`, `plugins/` and `.claude.json` in
+  `CLAUDE_CONFIG_DIR` when it is set. The plugin kept using `~/.claude` and `~/.claude.json`:
+  `install` wrote its hooks where Claude Code never reads them, and with two profiles the
+  session-start setup and `self-update` pruned the other profile's plugin cache and edited its
+  `.claude.json`.
+- **What to do.** Installed with npm or npx: run `claude-mem-lite install` once more with the
+  variable set, so the hooks land in your config directory. Plugin installs need nothing. Hook
+  entries an older version wrote into `~/.claude/settings.json` stay there; if no other profile
+  uses `~/.claude`, `env -u CLAUDE_CONFIG_DIR claude-mem-lite cleanup-hooks` removes them.
+- **Also in this release:** `npm install -g claude-mem-lite` and `npx` no longer install the
+  development toolchain (96 packages / 57 MB instead of 298 / 541 MB). A confirmed
+  `maintain execute --ops purge_stale` now deletes every row its preview counted in one run,
+  behind one snapshot. `doctor` warns about a failing update check and about an
+  `ANTHROPIC_BASE_URL` that ends in `/v1`. Details in CHANGELOG.md.
+
 ## Upgrading to 6.23.1
 
 **If you set `ANTHROPIC_BASE_URL` and `ANTHROPIC_API_KEY`, background LLM calls now go to that
@@ -568,9 +589,13 @@ depends on the Claude Code version. Allow the server once in the `settings.json`
 { "permissions": { "allow": ["mcp__plugin_claude-mem-lite_mem-lite"] } }
 ```
 
-That is the server's name under a plugin install. An npx or git-clone install registers it as
+For a single run, `claude -p … --allowedTools "mcp__plugin_claude-mem-lite_mem-lite"` does the
+same (both forms checked on 2.1.292, 2026-10-07: no refusal, and `mem_search` answered). That is
+the server's name under a plugin install. An npx or git-clone install registers it as
 `mem-lite`, so the rule there is `mcp__mem-lite`. An interactive session asks instead; answering
-"always allow" there records a rule of its own.
+"always allow" there records a rule of its own. The plugin does not tell the model to fall back
+to the CLI when a call is refused: the refusal is Claude Code's permission check for a tool you
+have not allowed, and routing the same action through Bash would sidestep it.
 
 ### Skill Commands (in Claude Code chat)
 
@@ -1091,7 +1116,7 @@ claude-mem-lite.
 | `CLAUDE_MEM_DIR` | Custom data directory. All databases, runtime files, and managed resources are stored here. | `~/.claude-mem-lite/` |
 | `CLAUDE_MEM_MODEL` | LLM model for background calls (episode extraction, session summaries). Accepts `haiku` or `sonnet`. | `haiku` |
 | `ANTHROPIC_API_KEY` | Anthropic API key. When set, all background LLM calls go directly to the Anthropic Messages API (with prompt caching) - or to the `ANTHROPIC_BASE_URL` gateway when that is set. Highest priority. | _(unset → CLI)_ |
-| `ANTHROPIC_BASE_URL` | Base URL for the direct Messages API when an Anthropic-compatible gateway serves the models (Azure AI Foundry, LiteLLM, Bedrock/Vertex proxies). No `/v1` suffix — the endpoint path is appended. The `claude -p` fallback reads the same variable, so one value covers both transports. Plain `http://` is accepted only for a loopback host; anything else would send the API key unencrypted. A value that is set but unusable skips the direct API leg, so background calls fall back to the `claude -p` CLI, and doctor warns. | `https://api.anthropic.com` |
+| `ANTHROPIC_BASE_URL` | Base URL for the direct Messages API when an Anthropic-compatible gateway serves the models (Azure AI Foundry, LiteLLM, Bedrock/Vertex proxies). No `/v1` suffix — the endpoint path is appended. The `claude -p` fallback reads the same variable, so one value covers both transports. Plain `http://` is accepted only for a loopback host; anything else would send the API key unencrypted. That request always goes straight to the loopback host, even when `NODE_USE_ENV_PROXY=1` sends other requests through `HTTP_PROXY`. A value that is set but unusable skips the direct API leg, so background calls fall back to the `claude -p` CLI, and doctor warns. | `https://api.anthropic.com` |
 | `ANTHROPIC_DEFAULT_HAIKU_MODEL` | Model ID or gateway deployment name for the `haiku` tier, honored on the direct API **only when `ANTHROPIC_BASE_URL` is set**. Without a base URL it stays CLI-only, so the Bedrock/Vertex form of this alias is never sent to `api.anthropic.com`. Use it when the gateway routes on deployment names rather than Anthropic model IDs (Azure Foundry deployments). The `claude -p` fallback resolves its `--model haiku` alias through it too. | built-in `claude-haiku-4-5-…` |
 | `ANTHROPIC_DEFAULT_SONNET_MODEL` | Same as above for the `sonnet` tier. | built-in `claude-sonnet-4-5-…` |
 | `OPENROUTER_API_KEY` | OpenRouter API key (OpenAI-compatible). Used for background LLM calls when `ANTHROPIC_API_KEY` is **not** set. If neither key is set, calls fall back to the `claude -p` CLI. | _(unset)_ |

package/README.zh-CN.md

@@ -147,7 +147,7 @@ cd claude-mem-lite
 node install.mjs install
 ```
 
-源文件保留在克隆的仓库中。通过 `git pull && node install.mjs install` 更新。
+`install` 会把源文件复制到 `~/.claude-mem-lite/`，与 npx 方式相同。用 `node install.mjs update` 更新，它安装最新的已签名发布。`git pull && node install.mjs install` 安装的则是当前检出的分支：可能领先于最新发布，也不校验签名。
 
 ### 安装过程
 
@@ -833,7 +833,7 @@ npm run benchmark:gate    # CI 门控：指标回退超过 5% 容差时失败
 | `CLAUDE_MEM_DIR` | 自定义数据目录。所有数据库与运行时文件均存储在此。 | `~/.claude-mem-lite/` |
 | `CLAUDE_MEM_MODEL` | 后台 LLM 调用模型（Episode 提取、会话总结、调度）。可选 `haiku` 或 `sonnet`。 | `haiku` |
 | `ANTHROPIC_API_KEY` | Anthropic API key。设置后所有后台 LLM 调用直连 Anthropic Messages API（带 prompt caching）；设了 `ANTHROPIC_BASE_URL` 时改发往那个网关。优先级最高。 | _(未设 → CLI)_ |
-| `ANTHROPIC_BASE_URL` | 由兼容 Anthropic 的网关（Azure AI Foundry、LiteLLM、Bedrock/Vertex 代理）提供模型时，直连 Messages API 使用的基础 URL。不要带 `/v1` 后缀，端点路径会自动拼上。`claude -p` 兜底读取同一个变量，所以一个值同时作用于两条路径。明文 `http://` 只接受回环主机，否则 API key 会以明文发送。设了但不可用的值会跳过直连这一路，后台调用改走 `claude -p`，doctor 会提示。 | `https://api.anthropic.com` |
+| `ANTHROPIC_BASE_URL` | 由兼容 Anthropic 的网关（Azure AI Foundry、LiteLLM、Bedrock/Vertex 代理）提供模型时，直连 Messages API 使用的基础 URL。不要带 `/v1` 后缀，端点路径会自动拼上。`claude -p` 兜底读取同一个变量，所以一个值同时作用于两条路径。明文 `http://` 只接受回环主机，否则 API key 会以明文发送。这个请求总是直连回环主机，即使 `NODE_USE_ENV_PROXY=1` 让其他请求走 `HTTP_PROXY`。设了但不可用的值会跳过直连这一路，后台调用改走 `claude -p`，doctor 会提示。 | `https://api.anthropic.com` |
 | `ANTHROPIC_DEFAULT_HAIKU_MODEL` | `haiku` 档的模型 ID 或网关部署名，**仅在设了 `ANTHROPIC_BASE_URL` 时**用于直连 API。没有基础 URL 时只给 CLI 用，所以这个别名的 Bedrock/Vertex 写法不会被发往 `api.anthropic.com`。网关按部署名而不是 Anthropic 模型 ID 路由时（Azure Foundry 部署）使用。`claude -p` 兜底的 `--model haiku` 别名也经由它解析。 | 内置 `claude-haiku-4-5-…` |
 | `ANTHROPIC_DEFAULT_SONNET_MODEL` | 同上，用于 `sonnet` 档。 | 内置 `claude-sonnet-4-5-…` |
 | `OPENROUTER_API_KEY` | OpenRouter API key（OpenAI 兼容）。当**未设** `ANTHROPIC_API_KEY` 时用于后台 LLM 调用；两者都未设则回退到 `claude -p` CLI。 | _(未设)_ |

package/cli/activity.mjs

@@ -188,7 +188,16 @@ export async function cmdActivity(db, args) {
       return;
     }
 
-    const result = db.prepare(`DELETE FROM events WHERE id IN (${placeholders})`).run(...ids);
+    // The opt-in search telemetry keeps a title per returned result; an explicit delete drops the
+    // deleted events' titles, as lib/delete-core.mjs does for observations (D#245 N6).
+    const result = db.transaction(() => {
+      if (db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'search_results'").get()) {
+        db.prepare(
+          `UPDATE search_results SET snapshot_label = NULL WHERE source = 'event' AND result_id IN (${placeholders})`,
+        ).run(...ids);
+      }
+      return db.prepare(`DELETE FROM events WHERE id IN (${placeholders})`).run(...ids);
+    })();
     out(`[mem] Deleted ${result.changes} event(s).`);
     return;
   }

package/haiku-client.mjs

@@ -20,7 +20,8 @@ import { randomUUID } from 'crypto';
 import { debugLog, debugCatch, parseJsonFromLLM } from './utils.mjs';
 import { DB_DIR } from './schema.mjs';
 import { resolveRuntimeDir } from './lib/resolve-data-dir.mjs';
-import { httpConnectProxyFor, postViaConnectProxy } from './lib/proxy-fetch.mjs';
+import { workerDirGone } from './lib/worker-data-dir.mjs';
+import { httpConnectProxyFor, postViaConnectProxy, postDirectHttp } from './lib/proxy-fetch.mjs';
 import { resolveAnthropicBaseUrl } from './lib/anthropic-base-url.mjs';
 
 /**
@@ -40,6 +41,9 @@ import { resolveAnthropicBaseUrl } from './lib/anthropic-base-url.mjs';
  */
 function cliSpawnCwd() {
   const dir = join(resolveRuntimeDir(DB_DIR), 'cli-cwd');
+  // A background worker whose data dir was removed during its API attempt must not re-create
+  // it here (D#265); the spawn then fails on the missing cwd, and the worker gives up.
+  if (workerDirGone(DB_DIR)) return dir;
   try {
     mkdirSync(dir, { recursive: true, mode: 0o700 });
   } catch {
@@ -553,8 +557,20 @@ async function callModelAPI(prompt, model, { timeout, maxTokens, temperature = D
       'x-api-key': apiKey,
       'anthropic-version': '2023-06-01',
     };
+    // Plain http is loopback-only (resolveAnthropicBaseUrl), and loopback must stay on this
+    // machine: native fetch would hand it, x-api-key in cleartext, to HTTP_PROXY under
+    // NODE_USE_ENV_PROXY=1. (D#250) Parsed, not a prefix test: a prefix test let `HTTP://127.0.0.1`
+    // through to the proxy when the resolver still returned the raw text (b59e0cec, D#259).
+    const plainHttp = new URL(apiUrl).protocol === 'http:';
     const send = (payload) => {
       const json = JSON.stringify(payload);
+      if (plainHttp) {
+        return postDirectHttp(apiUrl, {
+          headers: apiHeaders,
+          body: json,
+          timeout: Math.max(1, deadline - Date.now()),
+        });
+      }
       const apiProxy = httpConnectProxyFor(apiUrl);
       return apiProxy
         ? postViaConnectProxy(apiProxy, apiUrl, {

package/hook-optimize.mjs

@@ -485,7 +485,7 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
       // A compression keeper is never hidden: hiding it hides every member compressed into it
       // (the same rule NOT_COMPRESSION_KEEPER_SQL enforces on the maintenance writers). It falls
       // through to the normal update instead: floored to importance 1 and stamped, so it is not
-      // re-sent. In narrow scope that update still replaces its title and narrative.
+      // re-sent. That update keeps its stored title and narrative in both scopes (keepStoredText).
       const isKeeper = !!db
         .prepare('SELECT 1 FROM observations WHERE compressed_into = ? LIMIT 1')
         .get(cand.id);
@@ -494,12 +494,8 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
       const humanSet =
         (db.prepare('SELECT importance_set_at FROM observations WHERE id = ?').get(cand.id)
           ?.importance_set_at ?? null) !== null;
-      if (
-        (parsed.importance === 0 || parsed.importance === '0') &&
-        scope !== 'wide' &&
-        !isKeeper &&
-        !humanSet
-      ) {
+      const scoredZero = parsed.importance === 0 || parsed.importance === '0';
+      if (scoredZero && scope !== 'wide' && !isKeeper && !humanSet) {
         // D#12, and this one is not a stale-write guard — it is a POINTER guard.
         // `compressed_into` is the child -> keeper link, and COMPRESSED_AUTO is -1. If a
         // concurrent cluster-merge or smart-compress adopts this row during the 45 s Haiku
@@ -511,7 +507,8 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
         const res = db
           .prepare(
             `UPDATE observations SET compressed_into = ${COMPRESSED_AUTO}, optimized_at = ?
-             WHERE id = ? AND ${liveObsFilterSql('')} AND optimized_at IS NULL AND ${NOT_COMPRESSION_KEEPER_SQL}`,
+             WHERE id = ? AND ${liveObsFilterSql('')} AND optimized_at IS NULL AND ${NOT_COMPRESSION_KEEPER_SQL}
+               AND importance_set_at IS NULL`,
           )
           .run(Date.now(), cand.id);
         if (res.changes === 0) {
@@ -561,9 +558,15 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
       // For `narrow`, the truncate stays on LLM output but NOT on the preserve-on-empty
       // fallback — truncating the row's own stored narrative to buy nothing was the same
       // bug in miniature.
+      //
+      // A reply that scored the row 0 reaches this point only for a row that may not be hidden
+      // (a compression keeper, or an importance a person set). It judged the row worthless, so
+      // its title and narrative do not replace the stored ones either (D#207: 'Weekly summary:
+      // auth refactor' became 'Weekly summary', narrative 'x').
       const isWide = scope === 'wide';
-      const title = isWide ? cand.title : truncate(scrubSecrets(parsed.title || ''), 120);
-      const narrative = isWide
+      const keepStoredText = isWide || scoredZero;
+      const title = keepStoredText ? cand.title : truncate(scrubSecrets(parsed.title || ''), 120);
+      const narrative = keepStoredText
         ? cand.narrative
         : parsed.narrative
           ? truncate(scrubSecrets(parsed.narrative), 500)
@@ -571,9 +574,10 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
       // Floor at the stored importance: re-enrich adds a lesson, it must never silently downgrade
       // a user-set/promoted importance (the UPDATE also sets optimized_at → the loss is permanent).
       // Upgrades are still honored — except over an importance a person set (D10), which stays.
-      const importance = humanSet
-        ? cand.importance
-        : Math.max(clampImportance(parsed.importance), cand.importance || 1);
+      // Decided in the UPDATE itself, on the row as it is then: the candidate's importance was read
+      // before the model call, and writing it back undid a person's change made during the call
+      // (D#206).
+      const modelImportance = clampImportance(parsed.importance);
 
       const bigramText = cjkBigrams((title || '') + ' ' + (narrative || ''));
       const textField = [conceptsText, factsText, searchAliases || '', bigramText].filter(Boolean).join(' ');
@@ -607,10 +611,10 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
       // Narrow replaces title and narrative with model text, so an explicit save it rewrites (one
       // whose save-time enrich failed) moves to the re-enrich writer's id, as a cluster-merge
       // keeper does (D#146, D#138). Wide keeps the stored title and narrative (it fills the lesson
-      // and the side fields), so the row stays an explicit save. The writer's session row is
-      // best-effort.
+      // and the side fields), so the row stays an explicit save, and so does a row whose stored
+      // text a 0 reply left in place. The writer's session row is best-effort.
       let rewriteSessionId = null;
-      if (!isWide) {
+      if (!keepStoredText) {
         const cur = db.prepare('SELECT memory_session_id FROM observations WHERE id = ?').get(cand.id);
         if (cur?.memory_session_id?.startsWith(MANUAL_SESSION_ID_PREFIX)) {
           const enrichSessionId = writerSessionId('enrich-', cand.project);
@@ -629,7 +633,10 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
         .prepare(
           `
         UPDATE observations SET type=?, title=?, narrative=?, concepts=?, facts=?,
-          text=?, importance=?, lesson_learned=?, search_aliases=?, minhash_sig=?, optimized_at=?,
+          text=?,
+          importance = CASE WHEN importance_set_at IS NOT NULL THEN importance
+                            ELSE MAX(?, COALESCE(NULLIF(importance, 0), 1)) END,
+          lesson_learned=?, search_aliases=?, minhash_sig=?, optimized_at=?,
           scope=COALESCE(?, scope), memory_session_id = COALESCE(?, memory_session_id)
         WHERE id = ? AND ${liveObsFilterSql('')} AND optimized_at IS NULL
       `,
@@ -641,7 +648,7 @@ scope: ${SCOPE_PROMPT_LEGEND}`;
           safe.concepts,
           safe.facts,
           safe.text,
-          importance,
+          modelImportance,
           safe.lesson_learned,
           safe.search_aliases,
           minhashSig,
@@ -1300,6 +1307,8 @@ Return ONLY valid JSON:
     const bigramText = cjkBigrams((title || '') + ' ' + (narrative || ''));
     const textField = [conceptsText, factsText, bigramText].filter(Boolean).join(' ');
     const minhashSig = computeMinHash((title || '') + ' ' + (narrative || ''));
+    // An importance a person set on the keeper stays (D10); the UPDATE decides that on the row as
+    // it is then, since a person can set it while this call waits on the model (D#198).
     const importance = Math.max(clampImportance(parsed.importance || 2), maxClusterImportance);
 
     // Scrub LLM-output cluster-merge text fields at the UPDATE boundary.
@@ -1382,7 +1391,8 @@ Return ONLY valid JSON:
       db.prepare(
         `
         UPDATE observations SET title=?, narrative=?, concepts=?, facts=?, text=?,
-          importance=?, lesson_learned=?, minhash_sig=?, optimized_at=?,
+          importance = CASE WHEN importance_set_at IS NOT NULL THEN importance ELSE ? END,
+          lesson_learned=?, minhash_sig=?, optimized_at=?,
           memory_session_id = COALESCE(?, memory_session_id)
         WHERE id = ?
       `,

package/hook-shared.mjs

@@ -30,6 +30,7 @@ import {
 } from './lib/schema-skew.mjs';
 import { isDbUnusableError, DB_UNUSABLE_MARKER_PREFIX } from './lib/db-unusable.mjs';
 import { shouldRecordOnce } from './lib/record-once.mjs';
+import { backgroundWorkerEnv, workerDirGone } from './lib/worker-data-dir.mjs';
 import { hookSessionId } from './lib/provenance.mjs';
 import { PROJECT_REKEY_MARKER_PREFIX } from './lib/project-rekey.mjs';
 // Audit 2026-09-05 P1-2 (carried from 2026-09-02 P2-9): `callLLM`, the quiet/adoption
@@ -378,9 +379,11 @@ export function sweepStaleProjectMarkers(
 // exists, so harden here too: create 0700, and chmod a pre-existing dir a prior version
 // created at the default umask. A 0700 dir blocks traversal to every file inside,
 // current and future, regardless of individual file mode (audit sec P3-2 2026-07-24).
+// A background worker whose data dir was removed while it ran does not re-create it (D#265).
 try {
-  if (!existsSync(RUNTIME_DIR)) mkdirSync(RUNTIME_DIR, { recursive: true, mode: 0o700 });
-  else chmodSync(RUNTIME_DIR, 0o700);
+  if (!existsSync(RUNTIME_DIR)) {
+    if (!workerDirGone(DB_DIR)) mkdirSync(RUNTIME_DIR, { recursive: true, mode: 0o700 });
+  } else chmodSync(RUNTIME_DIR, 0o700);
 } catch {}
 
 // ─── Session ID Management ───────────────────────────────────────────────────
@@ -604,7 +607,7 @@ export function spawnBackground(bgEvent, ...extraArgs) {
     const child = spawn(process.execPath, args, {
       detached: true,
       stdio: 'ignore',
-      env: { ...process.env, CLAUDE_MEM_HOOK_RUNNING: '1' },
+      env: backgroundWorkerEnv(),
     });
     child.on('error', (err) => {
       debugCatch(err, 'spawnBackground');