gitmem-mcp 1.0.2 → 1.0.4

package/dist/services/local-file-storage.js

@@ -2,19 +2,20 @@
  * Local File Storage — Free Tier Backend
  *
  * Stores scars, sessions, decisions, and scar usage as JSON files
- * in the .gitmem/ directory of the current project.
+ * in the .gitmem/ directory (defaults to ~/.gitmem, overridable via GITMEM_DIR).
  *
  * Provides keyword-based search (no embeddings needed).
  */
 import * as fs from "fs";
 import * as path from "path";
 import { bm25Search } from "./bm25.js";
+import { getGitmemDir } from "./gitmem-dir.js";
 const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10MB
 const WARN_FILE_SIZE = 1 * 1024 * 1024; // 1MB
 export class LocalFileStorage {
     basePath;
     constructor(basePath) {
-        this.basePath = basePath || path.join(process.cwd(), ".gitmem");
+        this.basePath = basePath || getGitmemDir();
         this.ensureDir();
     }
     ensureDir() {
@@ -137,21 +138,26 @@ export class LocalFileStorage {
         const results = bm25Search(query, docs, k);
         // Map back to RelevantScar
         const byId = new Map(learnings.map((l) => [String(l.id), l]));
-        return results
-            .map((r) => {
+        const mapped = [];
+        for (const r of results) {
             const l = byId.get(r.id);
             if (!l)
-                return null;
-            return {
+                continue;
+            // Deprioritize starter scars (0.7x multiplier)
+            const isStarter = !!l.is_starter;
+            const adjustedSimilarity = isStarter ? r.similarity * 0.7 : r.similarity;
+            mapped.push({
                 id: r.id,
                 title: String(l.title),
                 description: String(l.description),
                 severity: String(l.severity || "medium"),
                 counter_arguments: l.counter_arguments || [],
-                similarity: r.similarity,
-            };
-        })
-            .filter((r) => r !== null);
+                similarity: adjustedSimilarity,
+                is_starter: isStarter || undefined,
+            });
+        }
+        // Re-sort after starter penalty (earned scars float up)
+        return mapped.sort((a, b) => b.similarity - a.similarity);
     }
     /**
      * Get the count of learnings stored locally

package/dist/services/local-vector-search.d.ts

@@ -11,7 +11,7 @@
  * - Deterministic results (same model + same data = same results)
  * - Per-container consistency (each loads same data)
  *
- * Issue: OD-473 (cache consistency)
+ * Cache consistency
  */
 import type { Project, RelevantScar } from "../types/index.js";
 interface ScarRecord {

package/dist/services/local-vector-search.js

@@ -11,7 +11,7 @@
  * - Deterministic results (same model + same data = same results)
  * - Per-container consistency (each loads same data)
  *
- * Issue: OD-473 (cache consistency)
+ * Cache consistency
  */
 import { embed as generateEmbedding, getEmbeddingDim, isEmbeddingAvailable } from "./embedding.js";
 // Embedding dimension — read from provider config at runtime
@@ -184,7 +184,7 @@ export class LocalVectorSearch {
             severity: scar.severity || "medium",
             counter_arguments: scar.counter_arguments || [],
             similarity: Math.round(similarity * 1000) / 1000, // 3 decimal places
-            // OD-508: Include enriched fields for LLM-cooperative enforcement
+            // Include enriched fields for LLM-cooperative enforcement
             why_this_matters: scar.why_this_matters,
             action_protocol: scar.action_protocol,
             self_check_criteria: scar.self_check_criteria,

package/dist/services/metrics.d.ts

@@ -2,7 +2,7 @@
  * GitMem Performance Metrics Service
  *
  * Tracks latency, result counts, and relevance signals for all GitMem tools.
- * Implements OD-429 instrumentation layer.
+ * Instrumentation layer for performance tracking.
  */
 /**
  * Tool names that can be tracked
@@ -15,7 +15,7 @@ export type PhaseTag = "session_start" | "session_refresh" | "session_close" | "
 /**
  * Agent identities
  */
-export type AgentIdentity = "CLI" | "DAC" | "CODA-1" | "Brain_Local" | "Brain_Cloud";
+export type AgentIdentity = "cli" | "desktop" | "autonomous" | "local" | "cloud";
 /**
  * Metrics data for a query
  */
@@ -36,7 +36,7 @@ export interface QueryMetrics {
     metadata?: Record<string, unknown>;
 }
 /**
- * Performance targets from OD-429
+ * Performance targets
  */
 export declare const PERFORMANCE_TARGETS: Record<ToolName, number>;
 /**
@@ -58,16 +58,16 @@ export declare class Timer {
 export declare function recordMetrics(metrics: QueryMetrics): Promise<void>;
 /**
  * Re-export performance types from types/index.ts
- * OD-489: Enhanced instrumentation for test harness validation
+ * Enhanced instrumentation for test harness validation
  */
 export type { PerformanceData, PerformanceBreakdown, ComponentPerformance, DataSource, CacheStatus, } from "../types/index.js";
 import type { PerformanceData, PerformanceBreakdown, ComponentPerformance, DataSource, CacheStatus } from "../types/index.js";
 /**
- * Build component performance data (OD-489)
+ * Build component performance data
  */
 export declare function buildComponentPerformance(latencyMs: number, source: DataSource, networkCall: boolean, cacheStatus?: CacheStatus): ComponentPerformance;
 /**
- * Count network calls from breakdown (OD-489)
+ * Count network calls from breakdown
  */
 export declare function countNetworkCalls(breakdown?: PerformanceBreakdown): number;
 export declare function buildPerformanceData(toolName: ToolName, latencyMs: number, resultCount: number, options?: {

package/dist/services/metrics.js

@@ -2,22 +2,22 @@
  * GitMem Performance Metrics Service
  *
  * Tracks latency, result counts, and relevance signals for all GitMem tools.
- * Implements OD-429 instrumentation layer.
+ * Instrumentation layer for performance tracking.
  */
 import { v4 as uuidv4 } from "uuid";
 import * as supabase from "./supabase-client.js";
 import { getEffectTracker } from "./effect-tracker.js";
 import { hasSupabase } from "./tier.js";
 /**
- * Performance targets from OD-429
+ * Performance targets
  */
 export const PERFORMANCE_TARGETS = {
     recall: 2000,
     search: 500,
     log: 500,
-    session_start: 750, // OD-645: Lean start (was 1500)
-    session_refresh: 750, // OD-645: Lean refresh (was 1500)
-    session_close: 1500, // OD-645: Tightened (was 3000)
+    session_start: 750, // Lean start (was 1500)
+    session_refresh: 750, // Lean refresh (was 1500)
+    session_close: 1500, // Tightened (was 3000)
     create_learning: 3000,
     create_decision: 3000,
     record_scar_usage: 1000,
@@ -84,7 +84,7 @@ export async function recordMetrics(metrics) {
     await tracker.track("metrics", metrics.tool_name, () => supabase.directUpsert("gitmem_query_metrics", record));
 }
 /**
- * Build component performance data (OD-489)
+ * Build component performance data
  */
 export function buildComponentPerformance(latencyMs, source, networkCall, cacheStatus = networkCall ? "miss" : "hit") {
     return {
@@ -95,7 +95,7 @@ export function buildComponentPerformance(latencyMs, source, networkCall, cacheS
     };
 }
 /**
- * Count network calls from breakdown (OD-489)
+ * Count network calls from breakdown
  */
 export function countNetworkCalls(breakdown) {
     if (!breakdown)
@@ -136,7 +136,7 @@ export function buildPerformanceData(toolName, latencyMs, resultCount, options)
         cache_hit: options?.cache_hit ?? fullyLocal,
         cache_age_ms: options?.cache_age_ms,
         search_mode: options?.search_mode,
-        // OD-489: Detailed instrumentation for test harness
+        // Detailed instrumentation for test harness
         total_latency_ms: latencyMs,
         network_calls_made: networkCallsMade,
         fully_local: fullyLocal,

package/dist/services/session-state.d.ts

@@ -1,7 +1,7 @@
 /**
  * Session State Management
- * OD-547: Track current session context for auto-injecting into recall calls
- * OD-552: Track surfaced scars for auto-bridging Q6 answers to scar_usage records
+ * Track current session context for auto-injecting into recall calls
+ * Track surfaced scars for auto-bridging Q6 answers to scar_usage records
  *
  * Maintains in-memory state of the current active session including:
  * - session_id from session_start
@@ -54,12 +54,12 @@ export declare function getProject(): string | null;
  */
 export declare function hasActiveIssue(): boolean;
 /**
- * OD-552: Add surfaced scars to tracking (deduplicates by scar_id)
+ * Add surfaced scars to tracking (deduplicates by scar_id)
  * Called by session_start and recall when scars are surfaced.
  */
 export declare function addSurfacedScars(scars: SurfacedScar[]): void;
 /**
- * OD-552: Get all surfaced scars for the current session
+ * Get all surfaced scars for the current session
  */
 export declare function getSurfacedScars(): SurfacedScar[];
 /**
@@ -105,15 +105,15 @@ export interface SessionActivity {
 }
 export declare function getSessionActivity(): SessionActivity | null;
 /**
- * OD-thread-lifecycle: Set threads for the current session
+ * : Set threads for the current session
  */
 export declare function setThreads(threads: ThreadObject[]): void;
 /**
- * OD-thread-lifecycle: Get threads for the current session
+ * : Get threads for the current session
  */
 export declare function getThreads(): ThreadObject[];
 /**
- * OD-thread-lifecycle: Resolve a thread in session state by ID.
+ * : Resolve a thread in session state by ID.
  * Returns the resolved thread or null if not found.
  */
 export declare function resolveThreadInState(threadId: string, resolutionNote?: string): ThreadObject | null;

package/dist/services/session-state.js

@@ -1,7 +1,7 @@
 /**
  * Session State Management
- * OD-547: Track current session context for auto-injecting into recall calls
- * OD-552: Track surfaced scars for auto-bridging Q6 answers to scar_usage records
+ * Track current session context for auto-injecting into recall calls
+ * Track surfaced scars for auto-bridging Q6 answers to scar_usage records
  *
  * Maintains in-memory state of the current active session including:
  * - session_id from session_start
@@ -59,7 +59,7 @@ export function hasActiveIssue() {
     return !!(currentSession?.linearIssue);
 }
 /**
- * OD-552: Add surfaced scars to tracking (deduplicates by scar_id)
+ * Add surfaced scars to tracking (deduplicates by scar_id)
  * Called by session_start and recall when scars are surfaced.
  */
 export function addSurfacedScars(scars) {
@@ -76,7 +76,7 @@ export function addSurfacedScars(scars) {
     console.error(`[session-state] Surfaced scars tracked: ${currentSession.surfacedScars.length} total`);
 }
 /**
- * OD-552: Get all surfaced scars for the current session
+ * Get all surfaced scars for the current session
  */
 export function getSurfacedScars() {
     return currentSession?.surfacedScars || [];
@@ -121,6 +121,9 @@ export function hasUnconfirmedScars() {
     const confirmedIds = new Set(currentSession.confirmations.map(c => c.scar_id));
     return recallScars.some(s => !confirmedIds.has(s.scar_id));
 }
+// Security: cap unbounded arrays to prevent memory exhaustion in long sessions
+const MAX_OBSERVATIONS = 500;
+const MAX_CHILDREN = 100;
 /**
  * v2 Phase 2: Add observations from sub-agents/teammates
  */
@@ -134,6 +137,10 @@ export function addObservations(newObs) {
         absorbed_at: o.absorbed_at || new Date().toISOString(),
     }));
     currentSession.observations.push(...timestamped);
+    // Cap to prevent memory exhaustion — keep most recent
+    if (currentSession.observations.length > MAX_OBSERVATIONS) {
+        currentSession.observations = currentSession.observations.slice(-MAX_OBSERVATIONS);
+    }
     console.error(`[session-state] Observations tracked: ${currentSession.observations.length} total`);
     return timestamped.length;
 }
@@ -151,6 +158,11 @@ export function addChild(child) {
         console.warn("[session-state] Cannot add child: no active session");
         return;
     }
+    // Cap to prevent memory exhaustion — reject silently beyond limit
+    if (currentSession.children.length >= MAX_CHILDREN) {
+        console.warn(`[session-state] Children cap reached (${MAX_CHILDREN}), ignoring new child: ${child.role}`);
+        return;
+    }
     currentSession.children.push(child);
     console.error(`[session-state] Child registered: ${child.role} (${child.type}), total: ${currentSession.children.length}`);
 }
@@ -173,7 +185,7 @@ export function getSessionActivity() {
     };
 }
 /**
- * OD-thread-lifecycle: Set threads for the current session
+ * : Set threads for the current session
  */
 export function setThreads(threads) {
     if (!currentSession) {
@@ -184,13 +196,13 @@ export function setThreads(threads) {
     console.error(`[session-state] Threads set: ${threads.length} total`);
 }
 /**
- * OD-thread-lifecycle: Get threads for the current session
+ * : Get threads for the current session
  */
 export function getThreads() {
     return currentSession?.threads || [];
 }
 /**
- * OD-thread-lifecycle: Resolve a thread in session state by ID.
+ * : Resolve a thread in session state by ID.
  * Returns the resolved thread or null if not found.
  */
 export function resolveThreadInState(threadId, resolutionNote) {

package/dist/services/startup.d.ts

@@ -10,7 +10,7 @@
  * - 500-employees-at-8AM (no Supabase contention during session_start)
  * - Cross-container consistency (same data = same results)
  *
- * Issue: OD-473
+ *
  */
 import type { Project } from "../types/index.js";
 /**

package/dist/services/startup.js

@@ -10,11 +10,12 @@
  * - 500-employees-at-8AM (no Supabase contention during session_start)
  * - Cross-container consistency (same data = same results)
  *
- * Issue: OD-473
+ *
  */
 import * as fs from "fs";
 import * as path from "path";
 import { isConfigured, loadScarsWithEmbeddings } from "./supabase-client.js";
+import { getGitmemDir } from "./gitmem-dir.js";
 import { initializeLocalSearch, reinitializeLocalSearch, isLocalSearchReady, getLocalVectorSearch, getCacheMetadata, setCacheTtl, } from "./local-vector-search.js";
 import { getConfig, shouldUseLocalSearch } from "./config.js";
 // Track startup state — unified cache, no per-project partitioning
@@ -32,7 +33,7 @@ let backgroundRefreshInterval = null;
  */
 function persistScarsForHooks(scars) {
     try {
-        const gitmemDir = path.join(process.cwd(), ".gitmem", "cache");
+        const gitmemDir = path.join(getGitmemDir(), "cache");
         if (!fs.existsSync(gitmemDir)) {
             fs.mkdirSync(gitmemDir, { recursive: true });
         }

package/dist/services/supabase-client.d.ts

@@ -5,9 +5,20 @@
  * agents/coda/src/services/supabase-mcp.js
  *
  * Uses JSON-RPC 2.0 protocol over HTTPS.
- * Integrates with CacheService for performance (OD-473).
+ * Integrates with CacheService for performance.
  */
 import type { Project, SupabaseListOptions, SupabaseSearchOptions } from "../types/index.js";
+/**
+ * Build a safe PostgREST `in.(...)` filter from an array of UUIDs.
+ * Rejects any non-UUID values to prevent filter injection via comma-splitting.
+ */
+export declare function safeInFilter(ids: string[]): string;
+/**
+ * Escape PostgREST special characters in a value used within filter expressions.
+ * Prevents injection via characters that have structural meaning in PostgREST syntax:
+ * parentheses (group operators), commas (value separators), dots (operator delimiters).
+ */
+export declare function escapePostgRESTValue(value: string): string;
 /**
  * Check if Supabase is configured
  */
@@ -54,7 +65,7 @@ export declare function directQueryAll<T = unknown>(table: string, options?: {
     order?: string;
 }, pageSize?: number, maxRows?: number): Promise<T[]>;
 /**
- * Knowledge triple from knowledge_triples table (OD-466)
+ * Knowledge triple from knowledge_triples table
  */
 export interface KnowledgeTriple {
     subject: string;
@@ -67,7 +78,7 @@ export interface KnowledgeTriple {
     source_id: string;
 }
 /**
- * Fetch related knowledge triples for a set of scar IDs (OD-466)
+ * Fetch related knowledge triples for a set of scar IDs
  *
  * Queries knowledge_triples table where source_id matches any of the provided scar IDs.
  * Returns triples grouped by source_id for easy attachment to scars.
@@ -99,7 +110,7 @@ export declare function directPatch<T = unknown>(table: string, filters: Record<
  * This bypasses ww-mcp because we need the embedding vectors for local search.
  * Returns learnings (scars, patterns, wins, anti-patterns) with full embedding data.
  *
- * NOTE: Changed from "scars only" to "all learning types" (OD-542 related fix)
+ * NOTE: Changed from "scars only" to "all learning types"
  */
 export declare function loadScarsWithEmbeddings<T = unknown>(project?: string, limit?: number): Promise<T[]>;
 /**
@@ -107,7 +118,7 @@ export declare function loadScarsWithEmbeddings<T = unknown>(project?: string, l
  */
 export declare function scarSearch<T = unknown>(query: string, matchCount?: number, project?: Project): Promise<T[]>;
 /**
- * Scar search with caching (OD-473)
+ * Scar search with caching
  *
  * Returns cached results if available, otherwise fetches and caches.
  */
@@ -117,7 +128,7 @@ export declare function cachedScarSearch<T = unknown>(query: string, matchCount?
     cache_age_ms?: number;
 }>;
 /**
- * List records with caching for decisions (OD-473)
+ * List records with caching for decisions
  */
 export declare function cachedListDecisions<T = unknown>(project?: Project, limit?: number): Promise<{
     data: T[];

package/dist/services/supabase-client.js

@@ -5,9 +5,45 @@
  * agents/coda/src/services/supabase-mcp.js
  *
  * Uses JSON-RPC 2.0 protocol over HTTPS.
- * Integrates with CacheService for performance (OD-473).
+ * Integrates with CacheService for performance.
  */
 import { getCache } from "./cache.js";
+// --- PostgREST Input Sanitization ---
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * Validate that a value is a UUID. Used to prevent injection in `in.(...)` filters
+ * where array elements are joined with commas.
+ */
+function isValidUUID(value) {
+    return UUID_PATTERN.test(value);
+}
+/**
+ * Build a safe PostgREST `in.(...)` filter from an array of UUIDs.
+ * Rejects any non-UUID values to prevent filter injection via comma-splitting.
+ */
+export function safeInFilter(ids) {
+    const valid = ids.filter(id => isValidUUID(id));
+    if (valid.length !== ids.length) {
+        console.warn(`[supabase-client] safeInFilter rejected ${ids.length - valid.length} non-UUID values`);
+    }
+    if (valid.length === 0)
+        return "in.()";
+    return `in.(${valid.join(",")})`;
+}
+/**
+ * Escape PostgREST special characters in a value used within filter expressions.
+ * Prevents injection via characters that have structural meaning in PostgREST syntax:
+ * parentheses (group operators), commas (value separators), dots (operator delimiters).
+ */
+export function escapePostgRESTValue(value) {
+    // Reject null bytes
+    if (value.includes("\0")) {
+        throw new Error("PostgREST value must not contain null bytes");
+    }
+    // For ilike patterns, escape structural PostgREST chars that could break OR groups
+    // PostgREST uses ( ) , as structural delimiters in or=() expressions
+    return value.replace(/[(),]/g, "");
+}
 // Configuration from environment
 const SUPABASE_URL = process.env.SUPABASE_URL || "";
 const SUPABASE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.SUPABASE_KEY || "";
@@ -228,7 +264,7 @@ export async function directQueryAll(table, options = {}, pageSize = 1000, maxRo
     return allRows;
 }
 /**
- * Fetch related knowledge triples for a set of scar IDs (OD-466)
+ * Fetch related knowledge triples for a set of scar IDs
  *
  * Queries knowledge_triples table where source_id matches any of the provided scar IDs.
  * Returns triples grouped by source_id for easy attachment to scars.
@@ -242,7 +278,7 @@ export async function fetchRelatedTriples(scarIds) {
         const triples = await directQuery("knowledge_triples", {
             select: "subject,predicate,object,event_time,decay_weight,half_life_days,decay_floor,source_id",
             filters: {
-                source_id: `in.(${scarIds.join(",")})`,
+                source_id: safeInFilter(scarIds),
             },
         });
         for (const triple of triples) {
@@ -283,7 +319,7 @@ export async function directUpsert(table, data) {
         throw new Error(`Supabase upsert error: ${response.status} - ${text.slice(0, 200)}`);
     }
     const result = await response.json();
-    // OD-539: Validate that write actually happened
+    // Validate that write actually happened
     // Supabase can return 200 OK with empty array [] when:
     // - RLS policy blocks the write
     // - Constraint violation handled gracefully
@@ -341,7 +377,7 @@ export async function directPatch(table, filters, data) {
  * This bypasses ww-mcp because we need the embedding vectors for local search.
  * Returns learnings (scars, patterns, wins, anti-patterns) with full embedding data.
  *
- * NOTE: Changed from "scars only" to "all learning types" (OD-542 related fix)
+ * NOTE: Changed from "scars only" to "all learning types"
  */
 export async function loadScarsWithEmbeddings(project, limit = 500) {
     console.error(`[supabase-direct] Loading learnings with embeddings${project ? ` for project: ${project}` : " (all projects)"}`);
@@ -384,7 +420,7 @@ export async function scarSearch(query, matchCount = 5, project) {
     return result.results || [];
 }
 /**
- * Scar search with caching (OD-473)
+ * Scar search with caching
  *
  * Returns cached results if available, otherwise fetches and caches.
  */
@@ -394,7 +430,7 @@ export async function cachedScarSearch(query, matchCount = 5, project = "default
     return { results: data, cache_hit, cache_age_ms };
 }
 /**
- * List records with caching for decisions (OD-473)
+ * List records with caching for decisions
  */
 export async function cachedListDecisions(project = "default", limit = 5) {
     const cache = getCache();
@@ -424,7 +460,7 @@ export async function cachedListWins(project = "default", limit = 8, columns) {
     return { data, cache_hit, cache_age_ms };
 }
 // ============================================================================
-// STORAGE API (for transcript persistence - OD-467)
+// STORAGE API
 // ============================================================================
 const TRANSCRIPT_BUCKET = "session-transcripts";
 /**

package/dist/services/thread-manager.d.ts

@@ -1,5 +1,5 @@
 /**
- * Thread Lifecycle Manager (OD-thread-lifecycle)
+ * Thread Lifecycle Manager ()
  *
  * Core logic for thread lifecycle management:
  * - ID generation, migration from plain strings to ThreadObject

package/dist/services/thread-manager.js

@@ -1,5 +1,5 @@
 /**
- * Thread Lifecycle Manager (OD-thread-lifecycle)
+ * Thread Lifecycle Manager ()
  *
  * Core logic for thread lifecycle management:
  * - ID generation, migration from plain strings to ThreadObject
@@ -11,6 +11,7 @@ import * as fs from "fs";
 import * as path from "path";
 import * as crypto from "crypto";
 import { normalizeText } from "./thread-dedup.js";
+import { getGitmemDir } from "./gitmem-dir.js";
 // ---------- ID Generation ----------
 /**
  * Generate a thread ID: "t-" + 8 hex chars
@@ -123,7 +124,7 @@ export function aggregateThreads(sessions, maxSessions = 5, maxAgeDays = 14) {
         const rawThreads = session.open_threads || [];
         const normalized = normalizeThreads(rawThreads, session.id);
         for (const thread of normalized) {
-            // Skip PROJECT STATE threads (handled separately via OD-534)
+            // Skip PROJECT STATE threads
             if (thread.text.startsWith("PROJECT STATE:"))
                 continue;
             // Deduplicate by both thread ID and normalized text content
@@ -184,8 +185,7 @@ export function resolveThread(threads, options) {
 // ---------- Local File Persistence ----------
 const THREADS_FILENAME = "threads.json";
 function getThreadsFilePath() {
-    const gitmemDir = path.join(process.cwd(), ".gitmem");
-    return path.join(gitmemDir, THREADS_FILENAME);
+    return path.join(getGitmemDir(), THREADS_FILENAME);
 }
 /**
  * Load threads from .gitmem/threads.json.
@@ -210,7 +210,7 @@ export function loadThreadsFile() {
  * Save threads to .gitmem/threads.json.
  */
 export function saveThreadsFile(threads) {
-    const gitmemDir = path.join(process.cwd(), ".gitmem");
+    const gitmemDir = getGitmemDir();
     if (!fs.existsSync(gitmemDir)) {
         fs.mkdirSync(gitmemDir, { recursive: true });
     }

package/dist/services/thread-supabase.d.ts

@@ -1,5 +1,5 @@
 /**
- * Thread Supabase Service (OD-620, OD-621, OD-622, OD-623, OD-624)
+ * Thread Supabase Service
  *
  * Provides Supabase CRUD operations for the orchestra_threads table.
  * Supabase is the source of truth; local .gitmem/threads.json is a cache.

package/dist/services/thread-supabase.js

@@ -1,5 +1,5 @@
 /**
- * Thread Supabase Service (OD-620, OD-621, OD-622, OD-623, OD-624)
+ * Thread Supabase Service
  *
  * Provides Supabase CRUD operations for the orchestra_threads table.
  * Supabase is the source of truth; local .gitmem/threads.json is a cache.
@@ -318,7 +318,7 @@ export async function syncThreadsToSupabase(threads, project = "default", sessio
     if (!hasSupabase() || !supabase.isConfigured() || threads.length === 0) {
         return;
     }
-    // OD-thread-dedup: Load existing open threads once upfront for text-based dedup.
+    //  Load existing open threads once upfront for text-based dedup.
     // Prevents duplicate creation when closing ceremony generates new thread IDs
     // for threads that already exist with the same (or similar) text.
     let existingOpenThreads = [];

package/dist/services/tier.d.ts

@@ -49,4 +49,6 @@ export declare function getTablePrefix(): string;
  * Get the fully-qualified table name for a base table name
  */
 export declare function getTableName(baseName: string): string;
+/** Whether all tool aliases (gitmem-*, gm-*) should be advertised (default: false) */
+export declare function hasFullAliases(): boolean;
 //# sourceMappingURL=tier.d.ts.map

package/dist/services/tier.js

@@ -106,4 +106,8 @@ export function getTablePrefix() {
 export function getTableName(baseName) {
     return `${getTablePrefix()}${baseName}`;
 }
+/** Whether all tool aliases (gitmem-*, gm-*) should be advertised (default: false) */
+export function hasFullAliases() {
+    return process.env.GITMEM_FULL_ALIASES === "1" || process.env.GITMEM_FULL_ALIASES === "true";
+}
 //# sourceMappingURL=tier.js.map

package/dist/services/transcript-chunker.d.ts

@@ -4,7 +4,7 @@
  * Parses JSONL session transcripts, chunks them intelligently,
  * generates embeddings, and stores in orchestra_transcript_chunks.
  *
- * Issue: OD-540
+ *
  */
 import type { Project } from "../types/index.js";
 /**

package/dist/services/transcript-chunker.js

@@ -4,7 +4,7 @@
  * Parses JSONL session transcripts, chunks them intelligently,
  * generates embeddings, and stores in orchestra_transcript_chunks.
  *
- * Issue: OD-540
+ *
  */
 // OpenRouter API configuration (same as local-vector-search)
 const OPENROUTER_API_URL = "https://openrouter.ai/api/v1/embeddings";

package/dist/services/triple-writer.d.ts

@@ -29,10 +29,10 @@ interface TripleCandidate {
  * Then maps to canonical short name if known.
  *
  * Examples:
- *   "Elena Vos" → "Elena"
- *   "Marcus - Architectural pattern" → "Marcus"
- *   "Elena: Prefers non-invasive instrumentation" → "Elena"
- *   "Chris Crawford - Process decision" → "Chris Crawford"
+ *   "Alice Smith" → "Alice" (if mapped)
+ *   "Bob - Architectural pattern" → "Bob" (if mapped)
+ *   "Alice: Prefers non-invasive instrumentation" → "Alice" (if mapped)
+ *   "Unknown Developer - Process decision" → "Unknown Developer" (passthrough)
  */
 export declare function normalizePersonaLabel(raw: string): string;
 /**