claude-memory-hub 0.11.0 → 0.11.1

package/CHANGELOG.md

@@ -5,6 +5,44 @@ Format follows [Keep a Changelog](https://keepachangelog.com/).
 
 ---
 
+## [0.11.1] - 2026-04-03
+
+Quality hardening — more tests, bugfixes, and robustness improvements for v0.11.0 features.
+
+### Bugfixes
+
+- **Clock skew guard** — recency decay in search ranking now uses `Math.max(0, ageMs)` to prevent negative age values when `created_at` is in the future due to clock skew. Previously could produce unpredictable scoring
+- **Import consistency** — `uninstallCommands()` in `cli/main.ts` now uses top-level `unlinkSync` import instead of inline `require("fs").unlinkSync`. Cleaner code, consistent with rest of the file
+
+### Testing
+
+- **Privacy filter tests** — 35 new unit tests covering all 3 privacy layers:
+  - Layer 1: `<private>` tag stripping (single, multiple, multiline, case-insensitive, disable toggle)
+  - Layer 2: Secret detection (sk-, ghp_, gho_, Bearer, AKIA, passwords, private keys, hex secrets, short value safety, normal code safety)
+  - Layer 3: Path filtering (.env, .env.*, .pem, .key, .p12, credentials, secrets/**, private/**, Windows paths, custom paths)
+  - Custom patterns (user-defined regex, invalid pattern graceful handling)
+  - Combined layers (tags + secrets in same text)
+- **Tokenizer tests** — 12 new unit tests for code-aware tokenizer:
+  - camelCase splitting (`getUserName` → get, user, name)
+  - PascalCase splitting (`AuthController` → auth, controller)
+  - Acronym handling (`HTMLParser` → html, parser)
+  - snake_case splitting + compound preservation (`user_auth_service` → user, auth, service, user_auth_service)
+  - File path splitting (`/src/hooks/auth.ts` → src, hooks, auth, ts)
+  - Stop word filtering (code keywords + English)
+  - Mixed code content, empty input, short tokens
+- **Test count: 108 → 155** (+44% coverage increase)
+
+### Files Changed
+
+| File | Change |
+|------|--------|
+| `src/search/search-workflow.ts` | Clock skew guard on recency decay |
+| `src/cli/main.ts` | Import `unlinkSync` properly |
+| `tests/unit/privacy-filter.test.ts` | **New** — 35 tests for privacy filtering |
+| `tests/unit/vector-search.test.ts` | +12 tokenizer edge case tests |
+
+---
+
 ## [0.11.0] - 2026-04-03
 
 Privacy-first memory, smarter search, and slash commands. Three features the community asked for most.

package/README.md

@@ -520,6 +520,7 @@ Migration is idempotent — safe to run multiple times with zero duplicates.
 | **v0.9.6** | Agent/Skill result capture, higher summary limits, IDE tag stripping, PostCompact cap, broader observation patterns (20+) |
 | **v0.10.0** | **Full conversation capture** — all user prompts + assistant responses via transcript parsing, `messages` table with FTS5, `memory_conversation` MCP tool, conversation-enriched summaries |
 | **v0.11.0** | **Privacy + Search + Commands** — 3-layer privacy filtering (`<private>` tags, auto secret detection, path filtering), code-aware tokenizer (camelCase/snake_case/path splitting), recency-aware ranking (7d/30d/90d decay), RRF multi-source fusion, slash commands (`/mem-search`, `/mem-status`, `/mem-save`), improved MCP tool descriptions with AUTO-USE hints |
+| **v0.11.1** | **Quality hardening** — clock skew guard for recency ranking, import consistency fix, 47 new unit tests (privacy filter + tokenizer edge cases), test count 108 → 155 (+44%) |
 
 See [CHANGELOG.md](CHANGELOG.md) for full details.
 

package/dist/cli.js

@@ -859,7 +859,7 @@ __export(exports_vector_search, {
 });
 function tokenize(text) {
   const tokens = [];
-  const camelSplit = text.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2");
+  const camelSplit = text.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").replace(/([A-Z])([A-Z][a-z])/g, "$1 $2");
   const words = camelSplit.toLowerCase().replace(/[^a-z0-9_./\-]/g, " ").split(/\s+/).filter(Boolean);
   for (const word of words) {
     if (word.includes("/") && word.length > 3) {
@@ -1223,7 +1223,7 @@ async function searchIndex(query, opts = {}, db) {
   const now = Date.now();
   const merged = [...deduped.values()].map((r) => {
     let score = r.score;
-    const ageMs = now - r.created_at;
+    const ageMs = Math.max(0, now - r.created_at);
     const ageDays = ageMs / (1000 * 60 * 60 * 24);
     if (ageDays < 7)
       score *= 1.5;
@@ -1820,7 +1820,7 @@ var init_importer = __esm(() => {
 });
 
 // src/cli/main.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync, writeFileSync, readdirSync } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync, writeFileSync, readdirSync, unlinkSync } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join5, resolve, dirname } from "path";
 
@@ -2210,7 +2210,7 @@ function uninstallCommands() {
     const p = join5(COMMANDS_DIR, file);
     try {
       if (existsSync5(p))
-        __require("fs").unlinkSync(p);
+        unlinkSync(p);
     } catch {}
   }
 }

package/dist/index.js

@@ -15539,7 +15539,7 @@ var STOP_WORDS = new Set([
 ]);
 function tokenize(text) {
   const tokens = [];
-  const camelSplit = text.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2");
+  const camelSplit = text.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").replace(/([A-Z])([A-Z][a-z])/g, "$1 $2");
   const words = camelSplit.toLowerCase().replace(/[^a-z0-9_./\-]/g, " ").split(/\s+/).filter(Boolean);
   for (const word of words) {
     if (word.includes("/") && word.length > 3) {
@@ -15685,7 +15685,7 @@ async function searchIndex(query, opts = {}, db) {
   const now = Date.now();
   const merged = [...deduped.values()].map((r) => {
     let score = r.score;
-    const ageMs = now - r.created_at;
+    const ageMs = Math.max(0, now - r.created_at);
     const ageDays = ageMs / (1000 * 60 * 60 * 24);
     if (ageDays < 7)
       score *= 1.5;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-memory-hub",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "Persistent memory system for Claude Code. Zero API key. Zero Python. 5 hooks + MCP server + SQLite FTS5 + semantic search.",
   "type": "module",
   "main": "dist/index.js",