clawmem 0.4.1 → 0.4.2

package/AGENTS.md

@@ -620,6 +620,13 @@ Symptom: reindex --force after v0.2.0 upgrade shows no entity extraction
   → `--force` alone only refreshes A-MEM notes (keywords, tags, context). `--enrich`
     is needed after major upgrades that add new enrichment stages.
 
+Symptom: `clawmem update` crashes with "Binding expected string, TypedArray, boolean, number, bigint or null"
+  → YAML frontmatter values like `title: 2023-09-27` or `title: true` are coerced by gray-matter
+    into Date objects or booleans. Bun's SQLite driver rejects these as bind parameters.
+  → Fixed v0.4.2: `parseDocument()` runtime-checks all frontmatter fields via `str()` helper.
+    Defense-in-depth `safeTitle` guards in `insertDocument`/`updateDocument`/`reactivateDocument`.
+  → Affects: title, domain, workstream, content_type, review_by — any field gray-matter can coerce.
+
 Symptom: CLI reindex/update falls back to node-llama-cpp Vulkan (not GPU server)
   → GPU env vars only in systemd drop-in, not in wrapper script. CLI invocations missed them.
   → Fixed 2026-02-12: bin/clawmem wrapper exports CLAWMEM_EMBED_URL/LLM_URL/RERANK_URL defaults.

package/CLAUDE.md

@@ -620,6 +620,13 @@ Symptom: reindex --force after v0.2.0 upgrade shows no entity extraction
   → `--force` alone only refreshes A-MEM notes (keywords, tags, context). `--enrich`
     is needed after major upgrades that add new enrichment stages.
 
+Symptom: `clawmem update` crashes with "Binding expected string, TypedArray, boolean, number, bigint or null"
+  → YAML frontmatter values like `title: 2023-09-27` or `title: true` are coerced by gray-matter
+    into Date objects or booleans. Bun's SQLite driver rejects these as bind parameters.
+  → Fixed v0.4.2: `parseDocument()` runtime-checks all frontmatter fields via `str()` helper.
+    Defense-in-depth `safeTitle` guards in `insertDocument`/`updateDocument`/`reactivateDocument`.
+  → Affects: title, domain, workstream, content_type, review_by — any field gray-matter can coerce.
+
 Symptom: CLI reindex/update falls back to node-llama-cpp Vulkan (not GPU server)
   → GPU env vars only in systemd drop-in, not in wrapper script. CLI invocations missed them.
   → Fixed 2026-02-12: bin/clawmem wrapper exports CLAWMEM_EMBED_URL/LLM_URL/RERANK_URL defaults.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawmem",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "On-device context engine and memory for AI agents. Claude Code and OpenClaw. Hooks + MCP server + hybrid RAG search.",
   "type": "module",
   "bin": {

package/src/indexer.ts

@@ -87,17 +87,21 @@ export function extractTitle(content: string, filename: string): string {
 // =============================================================================
 
 export function parseDocument(content: string, relativePath: string): { body: string; meta: DocumentMeta } {
+  // gray-matter coerces YAML values: `title: 2023-09-27` → Date, `title: true` → boolean.
+  // All frontmatter fields must be runtime-checked to prevent SQLite binding errors.
+  const str = (v: unknown): string | undefined =>
+    typeof v === "string" ? v || undefined : undefined;
   try {
     const { data, content: body } = matter(content);
     return {
       body,
       meta: {
-        title: data.title as string | undefined,
+        title: str(data.title),
         tags: Array.isArray(data.tags) ? data.tags.map(String) : undefined,
-        domain: data.domain as string | undefined,
-        workstream: data.workstream as string | undefined,
-        content_type: (data.content_type as ContentType) || inferContentType(relativePath),
-        review_by: data.review_by as string | undefined,
+        domain: str(data.domain),
+        workstream: str(data.workstream),
+        content_type: (str(data.content_type) as ContentType) || inferContentType(relativePath),
+        review_by: str(data.review_by),
       },
     };
   } catch {
@@ -233,7 +237,7 @@ export async function indexCollection(
 
         // Content changed — update
         const { body, meta } = parseDocument(content, relativePath);
-        const title = meta.title || extractTitle(body, relativePath);
+        const title = (typeof meta.title === "string" && meta.title) ? meta.title : extractTitle(body, relativePath);
         const docHash = hashContent(body);
 
         store.insertContent(docHash, body, now);
@@ -265,7 +269,7 @@ export async function indexCollection(
         ).get(collectionName, relativePath) as { id: number; hash: string } | null;
 
         const { body, meta } = parseDocument(content, relativePath);
-        const title = meta.title || extractTitle(body, relativePath);
+        const title = (typeof meta.title === "string" && meta.title) ? meta.title : extractTitle(body, relativePath);
         const docHash = hashContent(body);
         const contentType = meta.content_type || inferContentType(relativePath);
 

package/src/store.ts

@@ -1583,10 +1583,12 @@ export function insertDocument(
   createdAt: string,
   modifiedAt: string
 ): void {
+  // Guard: gray-matter can coerce YAML values to Date/boolean/null — SQLite rejects these
+  const safeTitle = (typeof title === "string") ? title : String(title ?? "Untitled");
   db.prepare(`
     INSERT INTO documents (collection, path, title, hash, created_at, modified_at, active)
     VALUES (?, ?, ?, ?, ?, ?, 1)
-  `).run(collectionName, path, title, hash, createdAt, modifiedAt);
+  `).run(collectionName, path, safeTitle, hash, createdAt, modifiedAt);
 }
 
 // =============================================================================
@@ -1915,8 +1917,9 @@ export function reactivateDocument(
   hash: string,
   modifiedAt: string
 ): void {
+  const safeTitle = (typeof title === "string") ? title : String(title ?? "Untitled");
   db.prepare(`UPDATE documents SET active = 1, title = ?, hash = ?, modified_at = ? WHERE id = ?`)
-    .run(title, hash, modifiedAt, documentId);
+    .run(safeTitle, hash, modifiedAt, documentId);
 }
 
 /**
@@ -1943,8 +1946,9 @@ export function updateDocument(
   hash: string,
   modifiedAt: string
 ): void {
+  const safeTitle = (typeof title === "string") ? title : String(title ?? "Untitled");
   db.prepare(`UPDATE documents SET title = ?, hash = ?, modified_at = ? WHERE id = ?`)
-    .run(title, hash, modifiedAt, documentId);
+    .run(safeTitle, hash, modifiedAt, documentId);
 }
 
 /**