claude-mem-lite 6.3.0 → 6.5.0

package/mem-cli.mjs

@@ -799,7 +799,7 @@ function renderObsRows(db, ids, requestedFields) {
     }
     parts.push(lines.join('\n'));
   }
-  return { text: parts.join('\n\n'), count: rows.length };
+  return { text: parts.join('\n\n'), count: rows.length, foundIds: rows.map((r) => r.id) };
 }
 
 function renderSessionRows(db, ids) {
@@ -819,7 +819,7 @@ function renderSessionRows(db, ids) {
     }
     parts.push(lines.join('\n'));
   }
-  return { text: parts.join('\n\n'), count: rows.length };
+  return { text: parts.join('\n\n'), count: rows.length, foundIds: rows.map((r) => r.id) };
 }
 
 // The CLI's established labels for the prompt/event detail faces. Sharing the FIELD SET
@@ -850,7 +850,7 @@ function renderPromptRows(db, ids) {
     }
     parts.push(lines.join('\n'));
   }
-  return { text: parts.join('\n\n'), count: rows.length };
+  return { text: parts.join('\n\n'), count: rows.length, foundIds: rows.map((r) => r.id) };
 }
 
 function renderEventRows(db, ids) {
@@ -867,7 +867,7 @@ function renderEventRows(db, ids) {
     }
     parts.push(lines.join('\n'));
   }
-  return { text: parts.join('\n\n'), count: rows.length };
+  return { text: parts.join('\n\n'), count: rows.length, foundIds: rows.map((r) => r.id) };
 }
 
 function cmdGet(db, args) {
@@ -954,34 +954,21 @@ function cmdGet(db, args) {
       );
     }
   }
-  if (bySrc.obs.length > 0) {
-    const s = renderObsRows(db, bySrc.obs, requestedFields);
-    if (s) {
-      sections.push(s.text);
-      totalFound += s.count;
+  // Per-bucket misses are collected as they happen, not inferred afterwards, so the note
+  // below can name an id with the prefix the caller typed.
+  const missing = [];
+  const takeSection = (result, ids, prefix) => {
+    if (result) {
+      sections.push(result.text);
+      totalFound += result.count;
     }
-  }
-  if (bySrc.session.length > 0) {
-    const s = renderSessionRows(db, bySrc.session);
-    if (s) {
-      sections.push(s.text);
-      totalFound += s.count;
-    }
-  }
-  if (bySrc.prompt.length > 0) {
-    const s = renderPromptRows(db, bySrc.prompt);
-    if (s) {
-      sections.push(s.text);
-      totalFound += s.count;
-    }
-  }
-  if (bySrc.event.length > 0) {
-    const s = renderEventRows(db, bySrc.event);
-    if (s) {
-      sections.push(s.text);
-      totalFound += s.count;
-    }
-  }
+    const found = new Set(result?.foundIds ?? []);
+    missing.push(...ids.filter((id) => !found.has(id)).map((id) => `${prefix}${id}`));
+  };
+  if (bySrc.obs.length > 0) takeSection(renderObsRows(db, bySrc.obs, requestedFields), bySrc.obs, '#');
+  if (bySrc.session.length > 0) takeSection(renderSessionRows(db, bySrc.session), bySrc.session, 'S#');
+  if (bySrc.prompt.length > 0) takeSection(renderPromptRows(db, bySrc.prompt), bySrc.prompt, 'P#');
+  if (bySrc.event.length > 0) takeSection(renderEventRows(db, bySrc.event), bySrc.event, 'E#');
 
   if (totalFound === 0) {
     // Deferred-only request that found nothing — the source-probe below is
@@ -1011,6 +998,15 @@ function cmdGet(db, args) {
   }
 
   out(sections.join('\n\n'));
+
+  // Partial misses were silent here while every sibling reported them: mem_get appends
+  // "Note: ID(s) … not found.", CLI `delete` prints "not found and will be skipped", and the
+  // total-miss branch above fails loudly. So `get 12,13,14` returning two records read as a
+  // complete answer, and nothing said which id was absent. stderr, not stdout: `get` output
+  // is piped, and the D#/unparseable notices above already use that channel.
+  if (missing.length > 0) {
+    process.stderr.write(`[mem] Note: ID(s) ${missing.join(', ')} not found\n`);
+  }
 }
 
 function cmdTimeline(db, args) {
@@ -1193,7 +1189,7 @@ function cmdSave(db, args) {
   if (text === null) return;
   if (!text.trim()) {
     fail(
-      '[mem] Usage: claude-mem-lite save "<text>" [--type T] [--title T] [--importance N] [--project P] [--files f1,f2] [--lesson T] [--closes-deferred 1,D#42] [--supersedes 8754,E#10524] — content may also be passed via --text/--content "<text>"',
+      '[mem] Usage: claude-mem-lite save "<text>" [--type T] [--title T] [--importance N] [--project P] [--files f1,f2] [--lesson T] [--closes-deferred 1,D#42] [--supersedes 8754,E#10524] [--force] — content may also be passed via --text/--content "<text>"',
     );
     return;
   }
@@ -1306,6 +1302,9 @@ function cmdSave(db, args) {
         files: saveFiles,
         lesson_learned: rawLesson,
         supersedes: supersedesIds || undefined,
+        // Opt-in only. The 5-minute near-duplicate window stays the default; this is for a
+        // caller who read "Skipped: similar to existing #N" and means the second one.
+        force: flags.force === true || flags.force === 'true',
       },
       { closesTokens, project },
     ));
@@ -3142,6 +3141,8 @@ Commands:
     --project P         Project name
     --files f1,f2       Comma-separated file paths
     --lesson T          Lesson learned (≤500 chars; alias: --lesson-learned)
+    --force             Save even if it looks like a near-duplicate of something
+                        saved in the last 5 minutes (that guard is on by default)
     --closes-deferred 1,D#42  Close deferred items in same transaction
 
   defer <action>        First-class deferred work (v2.70+)

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.3.0",
+  "version": "6.5.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "6.3.0",
+      "version": "6.5.0",
       "os": [
         "darwin",
         "linux",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.3.0",
+  "version": "6.5.0",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",
@@ -24,6 +24,7 @@
     "format": "prettier --write \"**/*.{mjs,js}\"",
     "format:check": "prettier --check \"**/*.{mjs,js}\"",
     "dead-code": "knip",
+    "validate:manifests": "node scripts/validate-plugin-manifests.mjs",
     "audit:metrics": "node scripts/audit-metrics.mjs --md",
     "audit:baseline": "node scripts/audit-metrics.mjs --run-tests --md",
     "test": "vitest run",
@@ -89,6 +90,7 @@
     "lib/err-sampler.mjs",
     "lib/hook-telemetry.mjs",
     "lib/resolve-data-dir.mjs",
+    "lib/data-paths.mjs",
     "lib/export-columns.mjs",
     "lib/file-intel.mjs",
     "lib/reread-guard.mjs",
@@ -103,6 +105,8 @@
     "lib/binding-probe.mjs",
     "lib/install-shape.mjs",
     "lib/schema-skew.mjs",
+    "lib/db-unusable.mjs",
+    "lib/record-once.mjs",
     "lib/hook-stdin.mjs",
     "lib/plugin-key.mjs",
     "lib/hook-stdout.mjs",

package/schema.mjs

@@ -7,22 +7,21 @@ import { homedir } from 'os';
 import { join } from 'path';
 import { existsSync, mkdirSync, readdirSync, renameSync, rmSync, chmodSync } from 'fs';
 import { OBS_FTS_COLUMNS, debugCatch } from './utils.mjs';
-import { resolveDataDir } from './lib/resolve-data-dir.mjs';
 // Imported, never re-declared: a hand-copied marker string is this repo's twin-drift
 // class, and every consumer of the forward-incompat throw keys on this exact value.
 // schema-skew.mjs imports nothing local, so this closes no cycle.
 import { SCHEMA_SKEW_CODE } from './lib/schema-skew.mjs';
-
-// DATA location — DB, managed resources, registry DB, runtime/. Honors
-// CLAUDE_MEM_DIR so users can relocate state to a larger/faster volume.
-export const DB_DIR = resolveDataDir(process.env.CLAUDE_MEM_DIR);
-export const DB_PATH = join(DB_DIR, 'claude-mem-lite.db');
-// CODE / install location — server.mjs, hook.mjs, cli.mjs, package.json live
-// here. ALWAYS homedir-rooted: Claude Code's settings.json + MCP registration
-// bake ABSOLUTE paths to server.mjs/hooks, so the code must NOT follow the
-// CLAUDE_MEM_DIR relocation env var (mirrors install.mjs INSTALL_DIR). Equals
-// DB_DIR when CLAUDE_MEM_DIR is unset — the common, non-relocated case.
-export const CODE_DIR = join(homedir(), '.claude-mem-lite');
+import { isFtsCorruptionError } from './lib/db-unusable.mjs';
+
+// The three location constants now live in lib/data-paths.mjs — a leaf module with no
+// package imports — and are re-exported here so every existing importer is unchanged.
+// This file statically imports better-sqlite3, so holding a path constant here made the
+// native driver a load-time dependency of anything that wanted one; that is what put the
+// Ed25519-verified repair path out of reach on a tree with no node_modules. Imported AND
+// re-exported (not `export … from`) because schema.mjs uses DB_DIR / DB_PATH itself.
+// See lib/data-paths.mjs and tests/repair-path-no-native-dep.test.mjs.
+import { DB_DIR, DB_PATH, CODE_DIR } from './lib/data-paths.mjs';
+export { DB_DIR, DB_PATH, CODE_DIR };
 
 // Increment when schema changes (tables, columns, indexes, FTS, migrations)
 //
@@ -1269,16 +1268,10 @@ export function isDbCorruptionError(err) {
   return /SQLITE_CORRUPT|SQLITE_NOTADB|malformed|not a database|disk image/i.test(text);
 }
 
-/**
- * Whether an error is a damaged FTS5 INDEX rather than a damaged database file. SQLite
- * reports these as SQLITE_CORRUPT_VTAB, whose message text is the same
- * "database disk image is malformed" the file-level faults use — so the code is the only
- * thing that separates them, and matching on message alone is what conflated them.
- * The remedy is rebuildFTS, which the FTS content lets us do losslessly.
- */
-export function isFtsCorruptionError(err) {
-  return /SQLITE_CORRUPT_VTAB/i.test(`${err?.code || ''}`);
-}
+// Definition moved to lib/db-unusable.mjs (v6.5.0) so the hook path's own classifier and this
+// one cannot drift; re-exported here because four call sites and a test import it from
+// schema.mjs. Same pattern as DB_DIR / DB_PATH above.
+export { isFtsCorruptionError };
 
 /**
  * ensureDb with corruption-gated WAL recovery. Was inlined in server.mjs only,

package/scripts/hook-launcher.mjs

@@ -31,6 +31,7 @@ import { spawn, spawnSync } from 'node:child_process';
 import { dirname, join, isAbsolute } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { homedir } from 'node:os';
+import { createHash } from 'node:crypto';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const INSTALL_DIR = join(__dirname, '..');
@@ -65,7 +66,16 @@ const DATA_DIR = MEM_DIR && isAbsolute(MEM_DIR) ? MEM_DIR : join(homedir(), '.cl
 // `tests/runtime-dir-single-home.test.mjs` asserts this file still carries the rule.
 const RUNTIME_DIR = join(DATA_DIR, 'runtime'); // runtime-dir:stays-put — serves swap-in-progress only; HOOK_RUNTIME_DIR carries the hook markers
 const HOOK_RUNTIME_DIR = process.env.CLAUDE_MEM_RUNTIME_DIR || RUNTIME_DIR;
-const HEAL_MARKER = join(HOOK_RUNTIME_DIR, 'hook-launcher-lastheal');
+// Per CODE HOME, not per machine. The runtime dir is data-dir-relative and therefore SHARED
+// by every install shape on this box — a plugin cache version, a managed ~/.claude-mem-lite,
+// a dev checkout. With one global name, a failed heal attempt for root A silenced root B's
+// heal for the next six hours, and the two are repaired by different commands. The suffix is
+// derived from INSTALL_DIR, which is what `cli.mjs repair` below actually acts on.
+//
+// node:crypto only — the pure-`node:` charter above still holds. No migration: a pre-6.4.0
+// unsuffixed marker is simply ignored, which costs at most one extra heal attempt once.
+const INSTALL_KEY = createHash('sha256').update(INSTALL_DIR).digest('hex').slice(0, 12);
+const HEAL_MARKER = join(HOOK_RUNTIME_DIR, `hook-launcher-lastheal-${INSTALL_KEY}`);
 const HEAL_COOLDOWN_MS = 6 * 60 * 60 * 1000;
 // Observable breakage state: written when the launcher degrades a broken install
 // to exit 0, cleared once the install is confirmed healthy. `doctor` reads it so
@@ -89,6 +99,14 @@ const BROKEN_MARKER = join(HOOK_RUNTIME_DIR, 'hook-launcher-broken');
 // SESSION-START only — never on the per-tool hot path, where an npm run would
 // stall the user's edit.
 // Marker dir: HOOK_RUNTIME_DIR (see its definition above for why it is override-aware).
+// BOTH stay machine-wide, unlike HEAL_MARKER above, and the difference is the SUBJECT of the
+// repair. HEAL_MARKER gates `cli.mjs repair`, which fixes THIS install dir. This pair gates
+// the native-binding rebuild, and `install.mjs rebuildBinding()` iterates
+// `shape.runtimeRoots` — "Every code home on this machine, not just the one this file sits
+// in", as its own comment puts it, which is also what install.mjs tells the user. Keying it
+// per code home would let N homes each spawn npm within one 6h window for a repair that
+// already covered all of them. A first cut of this change did exactly that; pre-ship review
+// caught that the justifying comment was false for the command it gates.
 const NB_BROKEN_MARKER = join(HOOK_RUNTIME_DIR, 'native-binding-broken');
 const NB_HEAL_MARKER = join(HOOK_RUNTIME_DIR, 'native-binding-lastheal');
 // Literal, not imported: the pure-`node:` charter above forbids importing lib/
@@ -111,10 +129,13 @@ const CLI_REPAIR = `node ${join(INSTALL_DIR, 'cli.mjs')} repair`;
 
 // Last-resort recovery string for users whose `cli.mjs repair` path
 // itself failed (install.mjs missing / repair errored / retry still drifting).
-// Duplicated in install.mjs::repair() catch; both are reachable when local
-// scripts are broken, so neither can import a shared constant.
+// Duplicated from install.mjs::MANUAL_TARBALL_FALLBACK — the pure-`node:` charter above
+// forbids importing it, and this path is reachable exactly when local scripts are broken.
+// Pinned to that constant by tests/manual-fallback-sync.test.mjs, which also fails if a
+// fifth surface starts hardcoding its own. Resolves the latest RELEASE tag rather than
+// `/tarball` (the default branch, i.e. unreleased WIP).
 const TARBALL_FALLBACK =
-  'T=$(mktemp -d) && curl -sL https://api.github.com/repos/sdsrss/claude-mem-lite/tarball | tar xz -C "$T" --strip-components=1 && node "$T/install.mjs" install';
+  'T=$(mktemp -d) && U=$(curl -sL https://api.github.com/repos/sdsrss/claude-mem-lite/releases/latest | grep -o \'"tarball_url"[^,]*\' | cut -d\'"\' -f4) && curl -sL "$U" | tar xz -C "$T" --strip-components=1 && node "$T/install.mjs" install';
 
 const [, , entryArg, ...rest] = process.argv;
 if (!entryArg) {

package/server.mjs

@@ -7,7 +7,15 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
 import { truncate, typeIcon, inferProject, fmtDate, debugLog, debugCatch } from './utils.mjs';
 import { resolveProject as _resolveProjectShared } from './project-utils.mjs';
-import { ensureDbWithWalRecovery, DB_PATH, DB_DIR } from './schema.mjs';
+import { ensureDbWithWalRecovery, DB_PATH, DB_DIR, CODE_DIR } from './schema.mjs';
+// schema.mjs already imports this module for SCHEMA_SKEW_CODE, so it is in the graph before
+// the DB is touched — a static import here adds no cold-start cost.
+import {
+  isSchemaSkewError,
+  schemaSkewFromError,
+  schemaSkewRemedy,
+  formatSchemaSkewNotice,
+} from './lib/schema-skew.mjs';
 import { reRankWithContext, runIdleCleanup, buildServerInstructions } from './search-scoring.mjs';
 import { searchObservationsHybrid } from './search-engine.mjs';
 import {
@@ -153,6 +161,54 @@ try {
     info: (m) => debugLog('INFO', 'server', m),
   });
 } catch (err) {
+  // Schema skew gets the same treatment as the CLI (mem-cli.mjs) and for the same reason:
+  // the raw message ends in `npm i -g claude-mem-lite@latest`, which repairs nothing on the
+  // plugin-cache install that actually hits this.
+  //
+  // This branch has to live HERE rather than in scripts/launch.mjs, which already knows how
+  // to format the notice. server.mjs opens the DB while it is being imported, so the throw
+  // is caught by this block and `process.exit(1)` runs before the launcher's own catch can
+  // ever see it — the launcher's handler is unreachable for this one error. Re-throwing
+  // instead would fix the plugin path and break the npm one, because install.mjs registers
+  // `claude mcp add ... -- node <SERVER_PATH>`, launching this file with no launcher above
+  // it to catch anything. Emitting from here covers both, and the launcher's copy stays as
+  // the handler for failures that happen before this module is reached.
+  if (isSchemaSkewError(err)) {
+    const skew = schemaSkewFromError(err) || { dbVersion: null, binaryVersion: null };
+    let shape = { managed: false, activePluginVersion: null };
+    let dev = false;
+    try {
+      const [shapeMod, updateMod] = await Promise.all([
+        import('./lib/install-shape.mjs'),
+        import('./hook-update.mjs'),
+      ]);
+      // CODE_DIR, not DB_DIR: `hasManagedCodeInstall` looks for server.mjs + hook.mjs inside
+      // whatever it is handed, and DB_DIR follows CLAUDE_MEM_DIR. Handing it the relocated DATA
+      // dir reports `managed: false` for a machine that has a managed install, so the remedy
+      // came out as "could not identify this install" or, with any plugin cache present, the
+      // plugin commands printed under a line naming ~/.claude-mem-lite. The three sibling call
+      // sites (mem-cli.mjs, hook.mjs, scripts/launch.mjs) all pass the CODE dir.
+      shape = shapeMod.detectInstallShape({ installDir: CODE_DIR });
+      dev = updateMod.isDevMode();
+    } catch {
+      /* shape unknown → schemaSkewRemedy answers 'unknown', which is its job */
+    }
+    const codeHome = process.env.CLAUDE_PLUGIN_ROOT || import.meta.dirname;
+    console.error(
+      formatSchemaSkewNotice({
+        dbVersion: skew.dbVersion,
+        binaryVersion: skew.binaryVersion,
+        remedy: schemaSkewRemedy({
+          managed: shape.managed,
+          activePluginVersion: shape.activePluginVersion,
+          dev,
+          root: codeHome,
+        }),
+        codeHome,
+      }),
+    );
+    process.exit(1);
+  }
   // Fatal: log and exit with descriptive message (Claude Code shows stderr)
   console.error(`[claude-mem-lite] FATAL: Database cannot be opened: ${err.message}`);
   if (err.walRecoveryAttempted) {
@@ -1082,6 +1138,8 @@ server.registerTool(
           files: args.files || [],
           lesson_learned: clampSaveText(args.lesson_learned, SAVE_TEXT_LIMITS.lesson_learned),
           supersedes: args.supersedes,
+          // Opt-in only — the near-duplicate window stays the default. CLI parity: `--force`.
+          force: args.force === true,
         },
         { closesTokens: args.closes_deferred, project },
       ));

package/source-files.mjs

@@ -55,6 +55,11 @@ export const SOURCE_FILES = [
   // AND hook scripts (pre-tool-recall / post-tool-recall) — ship it
   // or auto-update leaves schema + every hook with ERR_MODULE_NOT_FOUND on each fire.
   'lib/resolve-data-dir.mjs',
+  // DB_DIR / DB_PATH / CODE_DIR. Statically imported by schema.mjs (which re-exports all
+  // three) and by hook-update.mjs, which takes them from HERE so the verified repair path
+  // stays loadable without better-sqlite3. Missing from the manifest → auto-update leaves
+  // schema.mjs and the repair path with ERR_MODULE_NOT_FOUND on every fire.
+  'lib/data-paths.mjs',
   // lib/ — statically imported by hook-llm.mjs (activity) + hook-handoff.mjs (git-state, task-reader);
   // dynamically imported by hook.mjs (startup-dashboard) + mem-cli.mjs (doctor-benchmark, plan-reader).
   'lib/activity.mjs',
@@ -132,6 +137,8 @@ export const SOURCE_FILES = [
   // ERR_MODULE_NOT_FOUND on the command users run when something is already wrong.
   'lib/install-shape.mjs',
   'lib/schema-skew.mjs',
+  'lib/db-unusable.mjs',
+  'lib/record-once.mjs',
   // Single-envelope stdout for hook processes — imported by hook.mjs. Claude Code
   // parses hook stdout as ONE JSON document; missing from the manifest → an updated
   // install throws ERR_MODULE_NOT_FOUND on every hook fire.