claude-mem-lite 6.30.0 → 6.30.2

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
   "plugins": [
     {
       "name": "claude-mem-lite",
-      "version": "6.30.0",
+      "version": "6.30.2",
       "source": "./",
       "homepage": "https://github.com/sdsrss/claude-mem-lite",
       "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark)."

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.30.0",
+  "version": "6.30.2",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "author": {
     "name": "sdsrss"

package/README.md

@@ -362,7 +362,7 @@ rollback recipe under "Trust model per install path".
 schema-version change: 6.20.0 still opens the database after this release has. Pin
 `claude-mem-lite@6.20.0` before upgrading to avoid the move; after it, 6.20.0 names these
 directories by their old ids again, so their moved rows are listed only with
-`--project <new id>`.
+`--project=<new id>`.
 
 - **Which projects.** Every character outside ASCII letters, digits and `_.-` used to become `-`,
   so `~/projects/博客` and `~/projects/商城` were both `projects----` and shared one memory.
@@ -374,7 +374,7 @@ directories by their old ids again, so their moved rows are listed only with
   directory using the old id, the project takes everything under it, deferred items and session
   history included. Otherwise only the memories whose file paths lie inside the directory move;
   the rest stay under the old id. A one-time notice says what moved and how to list what stayed
-  (`claude-mem-lite recent 50 --project <old id>`).
+  (`claude-mem-lite recent 50 --project=<old id>`).
 - **Not in this release:** directories with the same parent and name in different repositories
   (`~/a/packages/api` and `~/b/packages/api`) still share one id.
 - **Also changed:** two sessions open in one project keep separate memory sessions (handoffs,

package/README.zh-CN.md

@@ -277,7 +277,7 @@ README "Trust model per install path" 一节的回退步骤操作。
 
 **名字不是纯 ASCII 的项目会换一个新标识，它们存下的内容会搬一次。** 没有 schema 版本变更：
 本版本打开过的数据库，6.20.0 仍能打开。想避免搬迁，请在**升级之前**固定 `claude-mem-lite@6.20.0`；
-升级之后再回退，6.20.0 会按旧标识称呼这些目录，搬走的行只能用 `--project <新标识>` 列出。
+升级之后再回退，6.20.0 会按旧标识称呼这些目录，搬走的行只能用 `--project=<新标识>` 列出。
 
 - **哪些项目。** 以前 ASCII 字母、数字和 `_.-` 以外的字符都变成 `-`，所以 `~/projects/博客` 和
   `~/projects/商城` 都是 `projects----`，共用一份记忆。现在任何文字的字母、组合符和数字都会保留
@@ -285,7 +285,7 @@ README "Trust model per install path" 一节的回退步骤操作。
   组合符或数字，或有基本多文种平面以外的字符（如 `🚀`）时，标识会变。
 - **项目第一次启动会话时搬迁数据。** 如果旧标识下没有任何文件路径显示另一个同样使用该旧标识的目录，
   就把旧标识下的全部内容搬过来，包括待办和会话历史。否则只搬文件路径落在本目录里的记忆，其余留在
-  旧标识下。会提示一次搬了什么，以及怎么列出留下的内容（`claude-mem-lite recent 50 --project <旧标识>`）。
+  旧标识下。会提示一次搬了什么，以及怎么列出留下的内容（`claude-mem-lite recent 50 --project=<旧标识>`）。
 - **本版本不包含：** 不同仓库里父目录和目录名都相同的目录（`~/a/packages/api` 与 `~/b/packages/api`）
   仍共用一个标识。
 - **其他变化：** 同一项目同时开两个会话，各自的交接、摘要和未保存的工具记录不再混在一起；会话里的

package/cli/common.mjs

@@ -650,10 +650,11 @@ export function formatProbeHints(probe) {
 }
 
 /**
- * The line under one side of a scan's Needs-review pair (D#461), from reviewRows: type, project,
- * date, the lesson or that there is none, and the start of the narrative — enough to tell two rows
- * with near-identical titles apart without `get`, which counts as an access.
- * @param {{id: number, type?: string, project?: string, created_at_epoch?: number,
+ * The line under one side of a scan's Needs-review pair (D#461), from reviewRows: type, importance
+ * (update.md keeps the more important row, D#497), project, date, the lesson or that there is none,
+ * and the start of the narrative — enough to tell two rows with near-identical titles apart without
+ * `get`, which counts as an access.
+ * @param {{id: number, type?: string, importance?: number, project?: string, created_at_epoch?: number,
  *   narrative?: string|null, lesson_learned?: string|null}|undefined} row
  * @returns {string}
  */
@@ -671,5 +672,5 @@ export function formatReviewSide(row) {
       ? `lesson: ${flat(row.lesson_learned, 100)}`
       : 'no lesson';
   const date = row.created_at_epoch ? new Date(row.created_at_epoch).toISOString().slice(0, 10) : '?';
-  return `#${row.id} ${row.type || '?'} · ${row.project} · ${date} · ${lesson} · ${flat(row.narrative, 120) || '(no narrative)'}`;
+  return `#${row.id} ${row.type || '?'} · importance ${row.importance ?? '?'} · ${row.project} · ${date} · ${lesson} · ${flat(row.narrative, 120) || '(no narrative)'}`;
 }

package/cli/verify-apply.mjs

@@ -153,7 +153,7 @@ export function cmdVerifyApply(db, args) {
     out(`[mem] Plan digest: ${digest}`);
     out('[mem] Dry run — nothing written. After the user approves exactly this plan, run:');
     out(
-      `  ${SELF} verify-apply ${shellWord(file)} --project ${shellWord(project)} --apply --digest ${digest}`,
+      `  ${SELF} verify-apply ${shellWord(file)} --project=${shellWord(project)} --apply --digest ${digest}`,
     );
     return;
   }

package/commands/verify.md

@@ -33,7 +33,7 @@ otherwise ask. Always pass that exact name — `export --project` matches loosel
 neighbouring project from a short name.
 
 ```bash
-node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" export --project <project> [--from <date>] > <scratch>/memories.json
+node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" export --project=<project> [--from <date>] > <scratch>/memories.json
 ```
 
 Every row carries `id`, `project`, `type`, `title`, `narrative`, `facts`, `lesson_learned`,
@@ -113,7 +113,7 @@ Write `<scratch>/proposals.json` — a JSON array, one entry per memory to chang
 ## Step 4 — Show the plan and get approval
 
 ```bash
-node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" verify-apply <scratch>/proposals.json --project <project>
+node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" verify-apply <scratch>/proposals.json --project=<project>
 ```
 
 This is a dry run: it validates every entry against the database, writes nothing, prints each
@@ -130,7 +130,7 @@ the old one will be refused.
 Run exactly the command the dry run printed:
 
 ```bash
-node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" verify-apply <scratch>/proposals.json --project <project> --apply --digest <digest>
+node "${CLAUDE_PLUGIN_ROOT}/cli.mjs" verify-apply <scratch>/proposals.json --project=<project> --apply --digest <digest>
 ```
 
 It refuses if the proposals or the memories changed since the dry run. Otherwise it backs up

package/hook.mjs

@@ -3004,9 +3004,9 @@ function rekeyProjectOnce(db, project) {
         ? ''
         : left === 1
           ? " 1 other stays under the old id (another directory's, or nothing shows whose); " +
-            `list it with \`${CLI_INVOKE} recent 50 --project ${legacy}\`.`
+            `list it with \`${CLI_INVOKE} recent 50 --project=${legacy}\`.`
           : ` ${left} others stay under the old id (another directory's, or nothing shows whose); ` +
-            `list them with \`${CLI_INVOKE} recent 50 --project ${legacy}\`.`;
+            `list them with \`${CLI_INVOKE} recent 50 --project=${legacy}\`.`;
     queueHookSystemMessage(
       `claude-mem-lite: this project's memory now has its own id, ${project}. Its old id, ${legacy}, ` +
         'could be shared with other directories whose names are not plain ASCII. ' +

package/install.mjs

@@ -564,6 +564,15 @@ export function deployLockfile(projectDir, dataDir) {
   return shrinkwrap;
 }
 
+function devNodeModules() {
+  try {
+    const pkg = createRequire(join(PROJECT_DIR, 'package.json')).resolve('better-sqlite3/package.json');
+    return dirname(dirname(pkg));
+  } catch {
+    return join(PROJECT_DIR, 'node_modules');
+  }
+}
+
 export function deployCodeTree(IS_DEV) {
   if (IS_DEV) {
     log('Dev mode — creating symlinks in ~/.claude-mem-lite/...');
@@ -584,10 +593,12 @@ export function deployCodeTree(IS_DEV) {
     const scriptsLink = join(DATA_DIR, 'scripts');
     clearLinkPath(scriptsLink);
     symlinkSync(join(PROJECT_DIR, 'scripts'), scriptsLink);
-    // Symlink node_modules/
+    // Symlink node_modules/: the one this checkout loads its dependencies from. A worktree nested in
+    // the main checkout has none of its own and Node finds the one above it; linking
+    // PROJECT_DIR/node_modules left the link dangling there (D#489).
     const nmLink = join(DATA_DIR, 'node_modules');
     clearLinkPath(nmLink);
-    symlinkSync(join(PROJECT_DIR, 'node_modules'), nmLink);
+    symlinkSync(devNodeModules(), nmLink);
     // R10 P3-28: the registry/ symlink is gone. The directory left with the skill registry
     // in v5.0.0, so the existsSync guard was permanently false and the branch was dead —
     // clearLinkPath still ran, silently removing a stale ~/.claude-mem-lite/registry link

package/lib/db-unusable.mjs

@@ -224,7 +224,7 @@ export function dbUnusableRemedy(dbPath, err) {
  */
 export function formatDbUnusableNotice({ dbPath, remedy }) {
   const lines = [
-    '⚠️ [claude-mem-lite] Memory is OFF: the database file cannot be opened.',
+    '⚠️ [claude-mem-lite] Memory is OFF: the database file cannot be used.',
     remedy.kind === 'schema'
       ? `   ${dbPath} exists but SQLite cannot read its schema.`
       : `   ${dbPath} exists but SQLite does not recognise it as a database.`,

package/lib/hook-prune.mjs

@@ -10,7 +10,8 @@
 // path, which must stay cheap and must not drag install.mjs's dependency graph in.
 
 import { existsSync, readFileSync } from 'node:fs';
-import { join, dirname, isAbsolute } from 'node:path';
+import { homedir } from 'node:os';
+import { join, dirname, isAbsolute, win32 } from 'node:path';
 
 /**
  * Identify a settings hook as one of OURS (to replace on install / strip on uninstall).
@@ -36,8 +37,13 @@ export function isMemHook(cfg, roots = null) {
 // under `.claude-mem-lite`, the pre-v0.5 `claude-mem-lite`, or a checkout named after it
 // (`claude-mem-lite-main` from a zip), with either separator. A bare substring also took
 // `claude-mem-lite export > ~/backups/…` and `~/tools/claude-mem-lite-prompt-audit.py`, which
-// install and uninstall then deleted.
-const OUR_ENTRY_PATH_RE = /claude-mem-lite[\w.-]*[\\/](?:hook\.mjs|scripts[\\/][\w.-]+\.(?:mjs|js|sh))/;
+// install and uninstall then deleted. The directory name alone still took a user's own
+// `node ~/claude-mem-lite-notes/scripts/fmt.js` (D#479), so the path counts as the launcher's
+// does (isOurEntryPath): its root carries the product, or it names one of our entries and is gone.
+const ENTRY_PATH = String.raw`claude-mem-lite[\w.-]*[\\/](?:hook\.mjs|scripts[\\/][\w.-]+\.(?:mjs|js|sh))`;
+const OUR_ENTRY_PATH_RE = new RegExp(
+  `(?:"([^"]*${ENTRY_PATH})"|([^\\s"]*${ENTRY_PATH})(?=\\s|$))(?:\\s+([\\w-]+))?`,
+);
 
 // The launcher as every install writes it: `<dir>/scripts/hook-launcher.mjs` followed by one of
 // our entry shapes (`hook.mjs <event>` or `scripts/<x>.js|mjs`). Matching the bare file name took
@@ -68,6 +74,16 @@ const OUR_LAUNCHER_SCRIPTS = new Set([
   'pre-agent-inject.js',
   'pre-skill-bridge.js',
 ]);
+// Every scripts/ entry a settings.json hook or hooks/hooks.json has run directly or through the
+// launcher, for a path under a claude-mem-lite* directory that is gone (isOurEntryPath).
+const OUR_ENTRY_SCRIPTS = new Set([
+  ...OUR_LAUNCHER_SCRIPTS,
+  'hook-launcher.mjs',
+  'setup.sh',
+  'post-tool-use.sh',
+  'pre-agent-inject.sh',
+  'pre-tool-recall-bash.sh',
+]);
 
 /**
  * Whether an install root is the product's own: the plugin's `${CLAUDE_PLUGIN_ROOT}`, or a
@@ -85,6 +101,21 @@ function isProductRoot(root) {
   }
 }
 
+// `<root>/hook.mjs <event>` or `<root>/scripts/<x>` under a claude-mem-lite* directory. Either
+// separator, since the install it names may be a Windows one, and `~/` as the user's home.
+function isOurEntryPath(cmd) {
+  const m = OUR_ENTRY_PATH_RE.exec(cmd);
+  if (!m) return false;
+  const raw = m[1] ?? m[2];
+  const path = /^~[\\/]/.test(raw) ? join(homedir(), raw.slice(2)) : raw;
+  if (!isAbsolute(path) && !win32.isAbsolute(path)) return false;
+  if (isProductRoot(path.replace(/[\\/](?:hook\.mjs|scripts[\\/][^\\/]+)$/, ''))) return true;
+  const ours = /[\\/]hook\.mjs$/.test(path)
+    ? OUR_HOOK_EVENTS.has(m[3])
+    : OUR_ENTRY_SCRIPTS.has(path.slice(path.search(/[^\\/]+$/)));
+  return ours && !existsSync(path);
+}
+
 function isOurLauncher(cmd) {
   const m = OUR_LAUNCHER_RE.exec(cmd);
   if (!m) return false;
@@ -198,7 +229,7 @@ export function unconfirmedDeadPrefilters(settings, env = process.env) {
  */
 export function isMemHookCommand(command, roots = null) {
   const cmd = typeof command === 'string' ? command : '';
-  return OUR_ENTRY_PATH_RE.test(cmd) || isOurLauncher(cmd) || isOurPrefilter(cmd, roots);
+  return isOurEntryPath(cmd) || isOurLauncher(cmd) || isOurPrefilter(cmd, roots);
 }
 
 /**

package/lib/maintain-core.mjs

@@ -809,7 +809,7 @@ export function purgeStale(db, { projectFilter, baseParams, opCap = OP_CAP }, re
  * lets autoBoost lift importance 1 -> 2. A plain SELECT by id touches no counter.
  * @param {import('better-sqlite3').Database} db
  * @param {number[]} ids
- * @returns {Map<number, {id: number, type: string, project: string, created_at_epoch: number,
+ * @returns {Map<number, {id: number, type: string, importance: number, project: string, created_at_epoch: number,
  *   narrative: string|null, lesson_learned: string|null}>}
  */
 export function reviewRows(db, ids) {
@@ -817,7 +817,7 @@ export function reviewRows(db, ids) {
   if (uniq.length === 0) return new Map();
   const rows = db
     .prepare(
-      `SELECT id, type, project, created_at_epoch, narrative, lesson_learned FROM observations
+      `SELECT id, type, importance, project, created_at_epoch, narrative, lesson_learned FROM observations
        WHERE id IN (${uniq.map(() => '?').join(',')})`,
     )
     .all(...uniq);
@@ -855,6 +855,9 @@ export function findDuplicates(
     if (!titles[i] || !minhashes[i]) continue;
     for (let j = i + 1; j < recent.length; j++) {
       if (!titles[j] || !minhashes[j]) continue;
+      // mergeDuplicates skips a pair from two projects, so a scan over every project printed
+      // pairs its own command would not merge, and they took slots from real ones (D#464).
+      if (recent[i].project !== recent[j].project) continue;
       if (estimateJaccardFromMinHash(minhashes[i], minhashes[j]) < MINHASH_PRE_THRESHOLD) continue;
       const sim = jaccardSimilarity(titles[i], titles[j]);
       if (sim > SIMILARITY_THRESHOLD) {

package/lib/quiet-scope.mjs

@@ -12,7 +12,7 @@ import { isAdopted as isAdoptedClaudeMd, readBlockAt } from '../claudemd.mjs';
 import { existsSync } from 'fs';
 import { dirname, join, resolve } from 'path';
 import { PLUGIN_SLUG } from '../adopt-content.mjs';
-import { isSharedAncestor, RULES_MD } from './local-steering.mjs';
+import { isSharedAncestor, RULES_MD, userInstructionFiles } from './local-steering.mjs';
 
 // Phase A (v2.31.3+): MEM_QUIET_HOOKS=1 drops descriptive hook/MCP-instruction
 // bodies (File Lessons / Key Context headers, MCP WHEN-TO-USE & decision rules,
@@ -34,8 +34,12 @@ export function isQuietHooks() {
 export function isAdoptedHere(cwd) {
   try {
     const resolved = cwd || process.env.CLAUDE_PROJECT_DIR || process.env.PWD || process.cwd();
-    if (isAdoptedClaudeMd(resolved, PLUGIN_SLUG) || isAdoptedMemdir(memdirPath(resolved), PLUGIN_SLUG))
-      return true;
+    if (isAdoptedMemdir(memdirPath(resolved), PLUGIN_SLUG)) return true;
+    // Project instructions = managed-only leaves the files below out at launch, so only steering
+    // that SessionStart injects counts, as silentAutoAdopt decides there (D#501(2)).
+    const managedOnly = userInstructionFiles() === 'managed-only';
+    if (managedOnly) return isSteeringInjectedHere(resolved, { managedOnly });
+    if (isAdoptedClaudeMd(resolved, PLUGIN_SLUG)) return true;
     // r3: the block auto-adopt wrote into CLAUDE.local.md loads whatever the switches say
     // now (MEM_NO_AUTO_ADOPT only stops new writes). A file read, not a git call: this runs
     // on every quiet check, and the project dir is the top-level in the normal case.
@@ -61,7 +65,7 @@ export function isAdoptedHere(cwd) {
  * @param {string} cwd resolved project root
  * @returns {boolean}
  */
-function isSteeringInjectedHere(cwd) {
+function isSteeringInjectedHere(cwd, { managedOnly = false } = {}) {
   if (process.env.MEM_NO_AUTO_ADOPT === '1') return false;
   if (isAutoAdoptDisabledFor(cwd)) return false;
   // silentAutoAdopt holds a subdirectory session to an opt-out recorded for the repository root,
@@ -69,8 +73,9 @@ function isSteeringInjectedHere(cwd) {
   // gets neither the steering nor the verbose sections.
   const root = workTreeTop(cwd);
   if (!root || root === resolve(cwd) || isSharedAncestor(root)) return true;
-  // Any directory up to the root, as silentAutoAdopt checks (D#177(2)).
-  for (let d = dirname(resolve(cwd)); ; d = dirname(d)) {
+  // Any directory up to the root, as silentAutoAdopt checks (D#177(2)); under managed-only it
+  // skips them, as none is loaded at launch.
+  for (let d = dirname(resolve(cwd)); !managedOnly; d = dirname(d)) {
     if (readBlockAt(join(d, 'CLAUDE.md'), PLUGIN_SLUG).body !== null) return true;
     if (d === root || dirname(d) === d) break;
   }

package/lib/startup-dashboard.mjs

@@ -10,6 +10,7 @@ import { readGitState } from './git-state.mjs';
 import { readProjectTasks } from './task-reader.mjs';
 import { recentPlans } from './plan-reader.mjs';
 import { isAdoptedHere } from './quiet-scope.mjs';
+import { userInstructionFiles } from './local-steering.mjs';
 import {
   HANDOFF_EXPIRY_EXIT,
   UNCONSUMED_HANDOFF_SQL,
@@ -160,8 +161,10 @@ export function buildDashboard({
 function buildAdoptHint({ projectPath, stubs }) {
   if (process.env.MEM_NO_ADOPT_HINT === '1') return null;
   if (process.env.MEM_QUIET_HOOKS === '1') return null;
+  // `adopt` writes CLAUDE.md, which Project instructions = managed-only leaves out at launch (D#501(1)).
+  if (userInstructionFiles() === 'managed-only') return null;
   // stubs.adopted === true/false lets tests assert both branches without touching FS.
   const adopted = stubs && 'adopted' in stubs ? stubs.adopted : isAdoptedHere(projectPath);
   if (adopted) return null;
-  return `🧷 Invited-memory 未启用：\`${CLI_INVOKE} adopt\` 写入 CLAUDE.md 托管块 → 上下文省 ~40%，MCP 调用率提升；静音 \`MEM_NO_ADOPT_HINT=1\``;
+  return `🧷 Invited-memory 未启用：\`${CLI_INVOKE} adopt\` 写入 CLAUDE.md 托管块；静音 \`MEM_NO_ADOPT_HINT=1\``;
 }

package/lib/stats-quality.mjs

@@ -224,7 +224,7 @@ export function formatQualityReport(data) {
     const purgeGap = (purgeNum - 10).toFixed(1);
     const purgeStatus = purgeNum <= 10 ? '✅' : purgeNum <= 30 ? '🟡' : '🔴';
     lines.push(
-      `    ${purgeStatus} Pending purge ≤ 10%  → currently ${purgePct}% (${purgeRow.pending_purge}/${purgeRow.compressed})  (gap ${purgeGap >= 0 ? '+' : ''}${purgeGap}pp)${purgeNum > 10 ? ` — preview: ${CLI_INVOKE} maintain execute --ops purge_stale${project ? ` --project ${shellWord(project)}` : ''} (add --confirm to delete the rows it counts)` : ''}`,
+      `    ${purgeStatus} Pending purge ≤ 10%  → currently ${purgePct}% (${purgeRow.pending_purge}/${purgeRow.compressed})  (gap ${purgeGap >= 0 ? '+' : ''}${purgeGap}pp)${purgeNum > 10 ? ` — preview: ${CLI_INVOKE} maintain execute --ops purge_stale${project ? ` --project=${shellWord(project)}` : ''} (add --confirm to delete the rows it counts)` : ''}`,
     );
   }
 

package/mem-cli.mjs

@@ -5,7 +5,7 @@
 import { ensureDbWithWalRecovery, refreshPlannerStats, DB_PATH, DB_DIR, CODE_DIR } from './schema.mjs';
 import { dirAccessError, walOpenBlocked, dataDirRemedy, WAL_BLOCKED_WHY } from './lib/wal-open-blocked.mjs';
 import { resolveRuntimeDir } from './lib/resolve-data-dir.mjs';
-import { isFtsCorruptionError, FTS_CORRUPTION_REMEDY } from './lib/db-unusable.mjs';
+import { isFtsCorruptionError, isDbUnusableError, FTS_CORRUPTION_REMEDY } from './lib/db-unusable.mjs';
 import {
   truncate,
   queryLabel,
@@ -100,7 +100,7 @@ import {
   schemaSkewRemedy,
   formatSchemaSkewNotice,
 } from './lib/schema-skew.mjs';
-import { CLI_PATH, CLI_INVOKE } from './cli-path.mjs';
+import { CLI_PATH, CLI_INVOKE, shellWord } from './cli-path.mjs';
 import {
   parseArgs,
   out,
@@ -3640,7 +3640,7 @@ async function cmdImportJsonl(db, argv) {
     // — an orphan-only first import must not fall through to the "already imported"
     // no-op branch below.
     if (projectCheck.note) out(`[mem] Imported${projectCheck.note}.`);
-    out(`[mem] Try: ${CLI_INVOKE} recent 5 --project ${project}`);
+    out(`[mem] Try: ${CLI_INVOKE} recent 5 --project=${shellWord(project)}`);
   } else if (totalRecognized > 0) {
     // Lines WERE Claude Code transcript events but produced no new rows — the file
     // was already imported (idempotent re-run) or carried no extractable content.
@@ -3679,12 +3679,16 @@ async function cmdOptimize(db, args) {
   // the default budget (tasks/project undefined → run-everything). Normalize
   // `--flag=value` into `--flag value` up front so both forms parse identically;
   // the `--execute=` special-case below already anticipated this for one flag.
+  // On/off flags are read as parseArgs and the dispatcher's dry-run check read them (isTrue): after
+  // the split below, `args.includes('--run')` took `--run=false` and `--run false` as a run, which
+  // that check had let through as no write (D#514).
+  const { flags } = parseArgs(args, { track: false });
   args = args.flatMap((a) => {
     const m = /^(--[a-z][a-z-]*)=([\s\S]*)$/.exec(a);
     return m ? [m[1], m[2]] : [a];
   });
-  const run = args.includes('--run');
-  const runAll = args.includes('--run-all');
+  const run = isTrue(flags.run);
+  const runAll = isTrue(flags['run-all']);
   // Sibling-command flag footgun: optimize executes with --run (compress uses
   // --execute, maintain uses positional `execute`). A bare --execute previously fell
   // through to a silent preview, so the user thought they ran a mutation but didn't.
@@ -3697,7 +3701,7 @@ async function cmdOptimize(db, args) {
     );
     return;
   }
-  const verbose = args.includes('--verbose') || args.includes('-v');
+  const verbose = isTrue(flags.verbose) || args.includes('-v');
   // T2-P1-D: --task accepts a single task or a comma-separated list, parity with MCP memOptimizeSchema.tasks.
   const VALID_TASKS = ['re-enrich', 'normalize', 'cluster-merge', 'smart-compress'];
   const taskIdx = args.indexOf('--task');
@@ -3932,13 +3936,16 @@ const MUTATING_FILTER_READS = {
 // A command not in MUTATING_FILTER_READS names here when its run writes (round-2 pre-tag review
 // P3-2: defer drop and fts-check rebuild ignored --dry-run silently; verify-apply --apply is left
 // to its digest, since --apply is verify-apply's own flag and the dispatcher may not read it).
+// A preview is the same command without the flag that makes it write, or with its previewing
+// subcommand in place of the writing one (`swap`), so the user's other flags stay (`maintain scan`
+// alone previewed every project, D#514); else another command (`preview`).
 const DRY_RUN_UNREAD = {
-  compress: { preview: 'compress without --execute' },
-  maintain: { preview: 'maintain scan' },
-  optimize: { preview: 'optimize without --run' },
-  delete: { preview: null },
-  'activity promote': { preview: 'activity promote without --execute' },
-  'activity delete': { preview: null },
+  compress: { without: '--execute' },
+  maintain: { swap: 'scan in place of execute' },
+  optimize: { without: '--run or --run-all' },
+  delete: { without: '--confirm' },
+  'activity promote': { without: '--execute' },
+  'activity delete': { without: '--confirm' },
   'import-jsonl': { preview: null, writes: () => true },
   'defer drop': { preview: null, writes: () => true },
   'fts-check': { preview: 'fts-check check', writes: ({ positional }) => positional[0] === 'rebuild' },
@@ -4062,11 +4069,18 @@ async function runDispatch(argv) {
 
   if (Object.hasOwn(DRY_RUN_UNREAD, mutatingKey)) {
     const parsed = parseArgs(cmdArgs, { track: false });
-    const { preview, writes } = DRY_RUN_UNREAD[mutatingKey];
+    const { preview, without, swap, writes } = DRY_RUN_UNREAD[mutatingKey];
     if ((mutating ? mutating.writes(parsed) : writes(parsed)) && asksDryRun(parsed.flags['dry-run'])) {
+      const how = without
+        ? `Run it again without ${without} to preview.`
+        : swap
+          ? `Run it again with ${swap} to preview.`
+          : preview
+            ? `Preview with: \`${CLI_INVOKE} ${preview}\`.`
+            : 'It has no preview.';
       fail(
         `[mem] ${mutatingKey} does not read --dry-run — nothing was changed, since the run would have ` +
-          `written. ${preview ? `Preview with: claude-mem-lite ${preview}.` : 'It has no preview.'}`,
+          `written. ${how}`,
       );
       return;
     }
@@ -4279,6 +4293,8 @@ async function runDispatch(argv) {
     }
     out(`[mem] Error: Cannot open database: ${e.message}`);
     out(`[mem] DB path: ${DB_PATH}`);
+    // The remedy overwrites the database, so it is doctor's to print, not this line's (D#488).
+    if (isDbUnusableError(e)) out(`[mem] Next: run \`${CLI_INVOKE} doctor\`.`);
     process.exitCode = 1;
     return;
   }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.30.0",
+  "version": "6.30.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "claude-mem-lite",
-      "version": "6.30.0",
+      "version": "6.30.2",
       "os": [
         "darwin",
         "linux",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-mem-lite",
-  "version": "6.30.0",
+  "version": "6.30.2",
   "description": "Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. FTS5 BM25 keyword search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-mem (episode batching + a smaller model; cost savings are an internal estimate, not a measured benchmark).",
   "type": "module",
   "packageManager": "npm@10.9.2",

package/schema.mjs

@@ -1704,15 +1704,18 @@ export function ensureDb() {
   try {
     chmodSync(DB_PATH, 0o600);
   } catch {}
-  db.pragma('journal_mode = WAL');
-  // 5000ms matches the MCP server (server.mjs) — 3000ms wasn't enough under realistic
-  // concurrency (parallel CLI saves + a long-running FTS rebuild can push individual
-  // transactions past 3s, triggering SQLITE_BUSY on the third caller).
-  db.pragma(`busy_timeout = ${DB_BUSY_TIMEOUT_MS}`);
-  db.pragma('synchronous = NORMAL');
-  db.pragma('foreign_keys = OFF'); // Enabled after dedup migration
 
+  // The pragmas sit inside the try that closes the handle: `journal_mode = WAL` throws on a
+  // damaged WAL, and a handle leaked there was closed by better-sqlite3 at exit, which wrote the
+  // damaged frame into the main file (D#438, D#506).
   try {
+    db.pragma('journal_mode = WAL');
+    // 5000ms matches the MCP server (server.mjs) — 3000ms wasn't enough under realistic
+    // concurrency (parallel CLI saves + a long-running FTS rebuild can push individual
+    // transactions past 3s, triggering SQLITE_BUSY on the third caller).
+    db.pragma(`busy_timeout = ${DB_BUSY_TIMEOUT_MS}`);
+    db.pragma('synchronous = NORMAL');
+    db.pragma('foreign_keys = OFF'); // Enabled after dedup migration
     const ready = initSchema(db);
     // P1-5: sentinel-gated data cleanups must run on EVERY open (schema.mjs:766).
     // They were extracted out of initSchema into runDeferredCleanups but never
@@ -1726,13 +1729,38 @@ export function ensureDb() {
     }
     return ready;
   } catch (e) {
-    try {
-      db.close();
-    } catch {}
+    closeWithoutCheckpoint(db);
     throw e;
   }
 }
 
+/**
+ * Close a connection whose open failed, without letting the close checkpoint. The last connection
+ * to close a WAL database copies the WAL into the main file first and checks no page, so a failed
+ * open over a damaged frame wrote that frame into the main file (D#506). A read-only connection
+ * that has run a statement holds the shared lock, so the close below is not the last, and a
+ * read-only close never checkpoints; one only opened holds nothing. Counts on the corrupt-WAL
+ * fixture: docs/audits/20261021-d506-wal-recovery-experiments.md, Q1. The statement may fail on
+ * the damaged WAL; it takes the lock all the same. With no guard, the close is the plain
+ * one it always was.
+ */
+function closeWithoutCheckpoint(db) {
+  let guard = null;
+  try {
+    guard = new Database(DB_PATH, { readonly: true, fileMustExist: true });
+    if (busyDeadline !== null) capBusyWaits(guard);
+    guard.pragma('schema_version');
+  } catch {
+    /* no guard, or a read that failed on the damaged WAL and took the lock all the same */
+  }
+  try {
+    db.close();
+  } catch {}
+  try {
+    guard?.close();
+  } catch {}
+}
+
 /**
  * Give the query planner statistics (sqlite_stat1/4) the way SQLite's docs recommend:
  * `PRAGMA optimize=0x10002` analyzes only tables whose indexes have no statistics yet or

package/scripts/setup.sh

@@ -425,20 +425,26 @@ fi
 #    hooks remain in the config home's settings.json. A user who installed via global
 #    `claude-mem-lite install` and later switched to the marketplace plugin
 #    will run every hook twice (direct settings.json hooks AND plugin hooks)
-#    until they run `claude-mem-lite uninstall` to clear the settings.json
-#    entries. /plugin uninstall does not touch settings.json.
+#    until they run cleanup-hooks to clear the settings.json entries (not
+#    uninstall, which removes the plugin too). /plugin uninstall does not touch
+#    settings.json.
 # CODE_DIR/runtime, same reason: the residue it warns about is stale hook entries in the config
 # home's settings.json — one warning per config home, regardless of where the data lives.
+# The test for a stale hook is cleanup-hooks' classifier, lib/hook-prune.mjs beside this script.
+# A substring of the product name listed a user's own hook kept under ~/.claude-mem-lite/ (D#513).
 RESIDUE_MARKER="$CODE_DIR/runtime/.residue-warned-v2.55$(marker_suffix "$CC_CONFIG_DIR/settings.json" "$CC_DEFAULT_CONFIG_DIR/settings.json")"
 if [[ -n "${CLAUDE_PLUGIN_ROOT:-}" && ! -f "$RESIDUE_MARKER" ]]; then
   SETTINGS="$CC_CONFIG_DIR/settings.json"
   if [[ -f "$SETTINGS" ]]; then
-    SETTINGS_PATH="$SETTINGS" node -e '
+    HOOK_PRUNE="$(dirname "${BASH_SOURCE[0]}")/../lib/hook-prune.mjs" \
+      SETTINGS_PATH="$SETTINGS" CFG_DIR="$CC_CONFIG_DIR" node -e '
       const fs = require("fs");
-      try {
+      const { pathToFileURL } = require("url");
+      import(pathToFileURL(process.env.HOOK_PRUNE).href).then(({ isMemHookCommand, ourInstallRoots }) => {
         const raw = fs.readFileSync(process.env.SETTINGS_PATH, "utf8");
         const data = JSON.parse(raw);
         const hooks = data.hooks || {};
+        const roots = ourInstallRoots(data);
         const events = Object.keys(hooks);
         const found = [];
         for (const ev of events) {
@@ -446,8 +452,7 @@ if [[ -n "${CLAUDE_PLUGIN_ROOT:-}" && ! -f "$RESIDUE_MARKER" ]]; then
           for (const entry of list) {
             const inner = Array.isArray(entry?.hooks) ? entry.hooks : [];
             for (const h of inner) {
-              const cmd = String(h?.command || "");
-              if (cmd.includes(".claude-mem-lite/") || cmd.includes("claude-mem-lite/scripts") || cmd.includes("claude-mem-lite/hook.mjs")) {
+              if (isMemHookCommand(h?.command, roots)) {
                 found.push(ev);
                 break;
               }
@@ -459,11 +464,17 @@ if [[ -n "${CLAUDE_PLUGIN_ROOT:-}" && ! -f "$RESIDUE_MARKER" ]]; then
           process.stderr.write("\x1b[33m⚠\x1b[0m Legacy direct-install hooks detected in " + process.env.SETTINGS_PATH + "\n");
           process.stderr.write("  Events with stale entries: " + [...new Set(found)].join(", ") + "\n");
           process.stderr.write("  These will fire alongside plugin hooks (each tool call runs twice).\n");
-          process.stderr.write("  Fix: run \x1b[1mclaude-mem-lite uninstall\x1b[0m to clear settings.json,\n");
+          // A shell word, single-quoted unless plain (cli-path.mjs shellWord); \x27 is a quote here.
+          const q = (w) => (/^[\w@%+=:,.\/-]+$/.test(w) ? w : "\x27" + w.split("\x27").join("\x27\\\x27\x27") + "\x27");
+          // The config home this warning is about, named even when it is the default one: the shell
+          // the user types into may carry a CLAUDE_CONFIG_DIR that names another profile.
+          const env = "CLAUDE_CONFIG_DIR=" + q(process.env.CFG_DIR) + " ";
+          const fix = env + "node " + q(process.env.CLAUDE_PLUGIN_ROOT + "/cli.mjs") + " cleanup-hooks";
+          process.stderr.write("  Fix: run \x1b[1m" + fix + "\x1b[0m to clear settings.json,\n");
           process.stderr.write("       then keep using the plugin install. (One-time warning.)\n\n");
           process.exit(2);
         }
-      } catch {}
+      }).catch(() => {});
     ' || true
   fi
   # Mark the warning as shown regardless of result — silence is fine if no

package/secret-scrub.mjs

@@ -385,6 +385,35 @@ const PGP_CRC_RE = /^=[A-Za-z0-9+/]{4}$/;
 // under a PGP header, a secret-key packet in the old or new format (`lQ…`, `xc…`/`xV…`).
 const KEY_MAGIC_RE = /^(?:MII|MIG|MC4C|MHcC|b3BlbnNzaC1rZXktdjE)/;
 const PGP_MAGIC_RE = /^(?:lQ|x[cV])/;
+const B64_DIGITS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+
+/**
+ * Whether base64 `s` starts the way a DER private key starts: a SEQUENCE holding an INTEGER 0 or 1
+ * (PKCS#1, PKCS#8, SEC1, DSA) or a SEQUENCE and an OID (encrypted PKCS#8; a public key's
+ * SubjectPublicKeyInfo starts that way too, so a public-key line under a PRIVATE KEY marker is
+ * erased as well). The prefix list above missed keys whose DER header begins otherwise: secp256k1
+ * `MHQC`, P-521 `MIHc`/`MIHu`, Ed448 `MEcC`, X448 `MEYC`, the 192/224-bit curves and others (D#504 F1).
+ */
+function isDerKeyStart(s) {
+  if (s.length < 12) return false;
+  const b = [];
+  for (let i = 0; i < 12; i += 4) {
+    let n = 0;
+    for (let k = 0; k < 4; k++) {
+      const v = B64_DIGITS.indexOf(s[i + k]);
+      if (v < 0) return false;
+      n = n * 64 + v;
+    }
+    b.push(n >> 16, (n >> 8) & 255, n & 255);
+  }
+  if (b[0] !== 0x30) return false;
+  const o = b[1] < 0x80 ? 2 : b[1] <= 0x83 ? b[1] - 0x7e : -1;
+  if (o < 0) return false;
+  if (b[o] === 0x02 && b[o + 1] === 0x01 && b[o + 2] <= 1) return true;
+  return b[o] === 0x30 && b[o + (b[o + 1] === 0x81 ? 3 : 2)] === 0x06;
+}
+
+const startsLikeKey = (s) => KEY_MAGIC_RE.test(s) || isDerKeyStart(s);
 // RFC 1421 / RFC 4880 armor headers, before the body. Named, not any `Word:`: a `Note:` line is
 // prose, and taking it for a header made the lone base64 line under it a key.
 // RFC 1421's full set and tool-written `X-` headers count too (v6.19.2 pre-tag delta review F4:
@@ -435,35 +464,62 @@ const isEscBreak = (r, u) => u > 0 && r % (2 * u) === u;
 // An unescaped quote at depth u ends the string: r % 2u < u.
 const isStringEnd = (r, u) => u > 0 && r % (2 * u) < u;
 
+// The characters an escaped line acts on: breaks and backslashes; every other character only moves
+// it on. Steps past LINE_STEP_BUDGET of them are searched natively: a line that runs to the end of
+// the text, read once per BEGIN at its depth and once per pass, was 94.6% of the time of the
+// escape-depth shape (D#511). A line at depth 0 keeps the plain loop.
+const ESC_LINE_STOP_RE = /[\n\r\\]/g;
+const LINE_STEP_BUDGET = 32;
+
 /** The line starting at s: its end, and where the next line starts (-1 at the end of the text). */
 function nextLine(text, s, u) {
+  if (u > 0) return nextEscapedLine(text, s, u);
   const n = text.length;
-  let i = s;
-  while (i < n) {
+  for (let i = s; i < n; i++) {
     const ch = text[i];
     if (ch === '\n') return { end: i, next: i + 1 };
     if (ch === '\r') return { end: i, next: text[i + 1] === '\n' ? i + 2 : i + 1 };
-    if (u > 0 && ch === '\\') {
-      let j = i;
-      while (j < n && text[j] === '\\') j++;
-      const r = j - i;
-      const c = text[j];
-      if ((c === 'n' || c === 'r') && isEscBreak(r, u)) {
-        let next = j + 1;
-        if (c === 'r' && text.startsWith('\\'.repeat(u) + 'n', next)) next += u + 1;
-        if (u === 1) {
-          CONCAT_AFTER_RE.lastIndex = next;
-          const m = CONCAT_AFTER_RE.exec(text);
-          if (m) next += m[0].length;
+  }
+  return { end: n, next: -1 };
+}
+
+/** nextLine at break depth u > 0. */
+function nextEscapedLine(text, s, u) {
+  const n = text.length;
+  let i = s;
+  let lim = Math.min(n, s + LINE_STEP_BUDGET);
+  for (;;) {
+    while (i < lim) {
+      const ch = text[i];
+      if (ch === '\n') return { end: i, next: i + 1 };
+      if (ch === '\r') return { end: i, next: text[i + 1] === '\n' ? i + 2 : i + 1 };
+      if (ch === '\\') {
+        let j = i;
+        while (j < n && text[j] === '\\') j++;
+        const r = j - i;
+        const c = text[j];
+        if ((c === 'n' || c === 'r') && isEscBreak(r, u)) {
+          let next = j + 1;
+          if (c === 'r' && text.startsWith('\\'.repeat(u) + 'n', next)) next += u + 1;
+          // The pattern starts with a quote, so no other character can begin a match.
+          if (u === 1 && (text[next] === '"' || text[next] === "'")) {
+            CONCAT_AFTER_RE.lastIndex = next;
+            const m = CONCAT_AFTER_RE.exec(text);
+            if (m) next += m[0].length;
+          }
+          return { end: j - u, next };
         }
-        return { end: j - u, next };
+        i = j + 1;
+        continue;
       }
-      i = j + 1;
-      continue;
+      i++;
     }
-    i++;
+    if (i >= n) return { end: n, next: -1 };
+    ESC_LINE_STOP_RE.lastIndex = i;
+    if (!ESC_LINE_STOP_RE.test(text)) return { end: n, next: -1 };
+    i = ESC_LINE_STOP_RE.lastIndex - 1;
+    lim = Math.min(n, i + LINE_STEP_BUDGET);
   }
-  return { end: n, next: -1 };
 }
 
 /** The line that ends at the break before `ls`, or null when `ls` starts the text or string. */
@@ -505,6 +561,31 @@ function prefixShape(prefix) {
   return new RegExp(`^[ \\t]*${src}`);
 }
 
+const isTagNameCode = (c) =>
+  (c >= 65 && c <= 90) ||
+  (c >= 97 && c <= 122) ||
+  (c >= 48 && c <= 57) ||
+  c === 95 ||
+  c === 58 ||
+  c === 46 ||
+  c === 45;
+
+/**
+ * The length of a closing tag `</name>` (a letter, then up to 40 of `[\w:.-]`) that ends `line` at
+ * q, starting at a or after; 0 when there is none. `/<\/[A-Za-z][\w:.-]{0,40}>$/` on
+ * `line.slice(a, q)`, read from its end: the name is the run of name characters before the `>`,
+ * since a `/` cannot be one of them.
+ */
+function closingTagLength(line, a, q) {
+  if (line[q - 1] !== '>') return 0;
+  let r = q - 1;
+  while (r > a && q - 1 - r <= 41 && isTagNameCode(line.charCodeAt(r - 1))) r--;
+  const len = q - 1 - r;
+  if (len < 1 || len > 41 || r - 2 < a || line[r - 1] !== '/' || line[r - 2] !== '<') return 0;
+  const c = line.charCodeAt(r);
+  return (c >= 65 && c <= 90) || (c >= 97 && c <= 122) ? q - (r - 2) : 0;
+}
+
 /** The judged part of line [s, e): no prefix of the key's shape, no padding, no string quotes. */
 function lineCore(text, s, e, shape) {
   let line = text.slice(s, e);
@@ -526,8 +607,8 @@ function lineCore(text, s, e, shape) {
   // `(?:\\+[rn])*["']…$` retried every start in a backslash run.
   let q = b;
   while (q > a && ' \t+,;)]}'.includes(line[q - 1])) q--;
-  const tag = q > a && line[q - 1] === '>' ? /<\/[A-Za-z][\w:.-]{0,40}>$/.exec(line.slice(a, q)) : null;
-  if (tag) b = q - tag[0].length;
+  const tag = q > a ? closingTagLength(line, a, q) : 0;
+  if (tag) b = q - tag;
   else if (q > a && (line[q - 1] === '"' || line[q - 1] === "'" || line[q - 1] === '`')) {
     q--;
     for (;;) {
@@ -631,6 +712,12 @@ function cutOffKeyEnd(text, b, be) {
   let run = 0;
   while (run < 16 && b - run > ls && isB64Code(text.charCodeAt(b - run - 1))) run++;
   const shape = run >= 16 ? null : prefixShape(text.slice(ls, b));
+  // The first character of the prefix after its spaces and tabs: a shape's match can only start a
+  // line whose first character after spaces and tabs is this one (a digit, `:` and `-` stand for
+  // more, and none of them begins a blank line below).
+  let pl = ls;
+  while (pl < b && (text.charCodeAt(pl) === 32 || text.charCodeAt(pl) === 9)) pl++;
+  const shapeLead = shape ? text.charCodeAt(pl) : -1;
 
   let armors = 0;
   let shorts = 0;
@@ -639,6 +726,32 @@ function cutOffKeyEnd(text, b, be) {
     // Another BEGIN line is never part of this key; stop before reading it whole.
     if (!shape && text.startsWith('-----BEGIN ', next)) break;
     const line = nextLine(text, next, u);
+    // Blank lines read here without lineCore, where the runs a BEGIN reads through spent a third of
+    // their time (D#511). Spaces and tabs, at most one quote or backtick, spaces and tabs: blank
+    // whatever the shape, since a shape that matches takes a prefix of it and lineCore takes leading
+    // blanks, one leading quote and trailing blanks from the rest. Spaces and tabs, at most one
+    // quote, then exactly a closing tag and blanks: blank too, unless the shape can start where the
+    // line does (lineCore takes the tag whole, but a shape could take part of it).
+    const le = line.end;
+    let k = next;
+    while (k < le && (text.charCodeAt(k) === 32 || text.charCodeAt(k) === 9)) k++;
+    const c0 = text.charCodeAt(k);
+    if (k < le && (c0 === 34 || c0 === 39 || c0 === 96)) k++;
+    let blank = k === le;
+    if (!blank && text.charCodeAt(k) === 60 && c0 !== shapeLead) {
+      let e2 = le;
+      while (e2 > k && (text.charCodeAt(e2 - 1) === 32 || text.charCodeAt(e2 - 1) === 9)) e2--;
+      blank = closingTagLength(text, k, e2) === e2 - k;
+    } else if (!blank && k > next && (c0 === 34 || c0 === 39 || c0 === 96)) {
+      while (k < le && (text.charCodeAt(k) === 32 || text.charCodeAt(k) === 9)) k++;
+      blank = k === le;
+    }
+    if (blank) {
+      next = line.next;
+      if (shorts > 0) break;
+      pendingBlank = true;
+      continue;
+    }
     const { core, start, end: coreEnd } = lineCore(text, next, line.end, shape);
     const kind = classify(core);
     next = line.next;
@@ -684,7 +797,7 @@ function cutOffKeyEnd(text, b, be) {
   // Under an opener whose prefix does not match the diff lines below it (`'+`, `rb'+`,
   // `+KEY = '''`) the line still starts with its `+`; the magic is tested without it (D#167).
   const body = first.replace(/^[-+]/, '');
-  const magic = KEY_MAGIC_RE.test(body) || (text.slice(b, be).includes('PGP') && PGP_MAGIC_RE.test(body));
+  const magic = startsLikeKey(body) || (text.slice(b, be).includes('PGP') && PGP_MAGIC_RE.test(body));
   return longs >= 2 || armors > 0 || longest >= 40 || magic ? end : -1;
 }
 
@@ -797,7 +910,7 @@ function keyTailSpan(text, e, ee, floor) {
   // 16-39 characters over an END named in prose is not (F7).
   if (longs === 0) return null;
   const b64ish = /[0-9+]|=$/.test(topCore);
-  if (!(longs >= 2 || longest >= 40 || crc || (clean && b64ish) || KEY_MAGIC_RE.test(topCore))) return null;
+  if (!(longs >= 2 || longest >= 40 || crc || (clean && b64ish) || startsLikeKey(topCore))) return null;
   return [top, sentence ? bottom : ee];
 }