nlm-memory 0.20.1 → 0.21.0

package/dist/ui/index.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>nlm memory</title>
-    <script type="module" crossorigin src="/ui/assets/index-CMpQkbQy.js"></script>
+    <script type="module" crossorigin src="/ui/assets/index-CSaBtgXD.js"></script>
     <link rel="stylesheet" crossorigin href="/ui/assets/index-DSzo1eTD.css">
   </head>
   <body>

package/migrations/029_project_scope.sql

@@ -0,0 +1,21 @@
+-- migrations/029_project_scope.sql
+-- Additive scope column on the five corpus tables (#348 Stage A).
+-- No backfill; all existing rows are NULL. Enforcement is deferred behind
+-- NLM_SCOPE_ENFORCE. See docs/superpowers/specs/2026-07-03-project-scoping-design.md.
+
+ALTER TABLE sessions ADD COLUMN scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_sessions_scope ON sessions(scope);
+
+ALTER TABLE facts ADD COLUMN scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_facts_scope ON facts(scope);
+
+ALTER TABLE code_exemplars ADD COLUMN scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_code_exemplars_scope ON code_exemplars(scope);
+
+ALTER TABLE signals ADD COLUMN scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_signals_scope ON signals(scope);
+
+ALTER TABLE workstreams ADD COLUMN scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_workstreams_scope ON workstreams(scope);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (29, 'project_scope');

package/migrations/032_session_derivables.sql

@@ -0,0 +1,11 @@
+-- migrations/032_session_derivables.sql
+-- #352 Phase 2: derivable metadata. All nullable: NULL means not-derivable
+-- for that runtime, never faked.
+ALTER TABLE sessions ADD COLUMN agent_persona TEXT;
+ALTER TABLE sessions ADD COLUMN parent_session_id TEXT;
+ALTER TABLE sessions ADD COLUMN primary_model TEXT;
+ALTER TABLE sessions ADD COLUMN total_tokens INTEGER;
+ALTER TABLE sessions ADD COLUMN skill TEXT;
+CREATE INDEX IF NOT EXISTS idx_sessions_parent ON sessions(parent_session_id);
+
+INSERT OR IGNORE INTO schema_migrations (version, name) VALUES (32, 'session_derivables');

package/migrations/pg/030_project_scope.sql

@@ -0,0 +1,23 @@
+-- migrations/pg/030_project_scope.sql
+-- PG parity for SQLite migration 029 (project scope). Auto-applied by the
+-- version-gated runner (runMigrationsPg). Idempotent: every DDL uses
+-- ADD COLUMN IF NOT EXISTS and CREATE INDEX IF NOT EXISTS. Mirrors migrations/029_project_scope.sql.
+
+BEGIN;
+
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_sessions_scope ON sessions(scope);
+
+ALTER TABLE facts ADD COLUMN IF NOT EXISTS scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_facts_scope ON facts(scope);
+
+ALTER TABLE code_exemplars ADD COLUMN IF NOT EXISTS scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_code_exemplars_scope ON code_exemplars(scope);
+
+ALTER TABLE signals ADD COLUMN IF NOT EXISTS scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_signals_scope ON signals(scope);
+
+ALTER TABLE workstreams ADD COLUMN IF NOT EXISTS scope TEXT;
+CREATE INDEX IF NOT EXISTS idx_workstreams_scope ON workstreams(scope);
+
+COMMIT;

package/migrations/pg/031_widen_session_edges_kind.sql

@@ -0,0 +1,11 @@
+-- Parity: SQLite migrations/019 allows five session_edges.kind values
+-- (supersedes, replaces, continues, branched_from, merged_from); pg/019
+-- only widened to three. This closes the remaining gap.
+
+BEGIN;
+
+ALTER TABLE session_edges DROP CONSTRAINT IF EXISTS session_edges_kind_check;
+ALTER TABLE session_edges ADD CONSTRAINT session_edges_kind_check
+  CHECK (kind IN ('supersedes', 'replaces', 'continues', 'branched_from', 'merged_from'));
+
+COMMIT;

package/migrations/pg/032_session_derivables.sql

@@ -0,0 +1,17 @@
+-- migrations/pg/032_session_derivables.sql
+-- PG parity for SQLite migration 032 (session derivables). Auto-applied by
+-- the version-gated runner (runMigrationsPg). Idempotent: every DDL uses
+-- ADD COLUMN IF NOT EXISTS and CREATE INDEX IF NOT EXISTS. Mirrors
+-- migrations/032_session_derivables.sql. All nullable: NULL means
+-- not-derivable for that runtime, never faked.
+
+BEGIN;
+
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS agent_persona TEXT;
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS parent_session_id TEXT;
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS primary_model TEXT;
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS total_tokens INTEGER;
+ALTER TABLE sessions ADD COLUMN IF NOT EXISTS skill TEXT;
+CREATE INDEX IF NOT EXISTS idx_sessions_parent ON sessions(parent_session_id);
+
+COMMIT;

package/nlm/index.js

@@ -213,13 +213,21 @@ function hookModeFromEnv() {
   return process.env["NLM_HOOK_MODE"] === "live" ? "live" : "shadow";
 }
 
+// src/shared/net.ts
+var DEFAULT_NLM_PORT = "3940";
+
 // src/hook/recall-over-http.ts
 var RECALL_LIMIT = 5;
-var RECALL_TIMEOUT_MS = 2e3;
+function parseRecallTimeout(raw) {
+  if (raw === void 0) return 4e3;
+  const n = Number(raw);
+  return Number.isFinite(n) && n > 0 ? n : 4e3;
+}
+var RECALL_TIMEOUT_MS = parseRecallTimeout(process.env["NLM_HOOK_RECALL_TIMEOUT_MS"]);
 async function recallOverHttp(prompt, runtime, conversationId, mode = "keyword") {
   const query = extractRecallQuery(prompt);
   if (query === null) return { hits: [], facts: [], exemplars: [] };
-  const portValue = process.env["NLM_PORT"] ?? "3940";
+  const portValue = process.env["NLM_PORT"] ?? DEFAULT_NLM_PORT;
   const url = (
     // 127.0.0.1, not localhost: each hook is a fresh process with no connection
     // reuse, and Node resolves localhost to IPv6 ::1 first — a measured ~50-300ms
@@ -652,12 +660,12 @@ var RELATIVE_FLOOR = parseRelativeFloor(process.env["NLM_RECALL_REL_FLOOR"], 0.9
 var PER_FIRE_CAP = 3;
 var PER_CONVERSATION_CAP = 10;
 var PROMPT_PREVIEW_CHARS = 200;
-function parseHookDeadline(raw) {
-  if (raw === void 0) return 4e3;
+function parseHookDeadline(raw, defaultMs = 4e3) {
+  if (raw === void 0) return defaultMs;
   const n = Number(raw);
-  return Number.isFinite(n) && n > 0 ? n : 4e3;
+  return Number.isFinite(n) && n > 0 ? n : defaultMs;
 }
-var HOOK_DEADLINE_MS = parseHookDeadline(process.env["NLM_HOOK_DEADLINE_MS"]);
+var HOOK_DEADLINE_MS = parseHookDeadline(process.env["NLM_HOOK_DEADLINE_MS"], 6e3);
 async function withDeadline(p, ms, fallback) {
   if (ms <= 0) return fallback;
   let timer;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nlm-memory",
-  "version": "0.20.1",
+  "version": "0.21.0",
   "description": "Local-first non-linear memory operating system for AI operators.",
   "type": "module",
   "license": "Apache-2.0",

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "nlm-memory",
-  "version": "0.20.1",
+  "version": "0.21.0",
   "description": "Local-first persistent memory for AI coding agents. Recalls relevant prior sessions on every prompt; learns which sessions actually get cited. Owner-edited timeline beats append-only memory layers.",
   "author": {
     "name": "Edward Chalupa",
@@ -19,4 +19,4 @@
   ],
   "mcpServers": "./.mcp.json",
   "hooks": "./hooks/hooks.json"
-}
+}

package/plugin/scripts/prompt-recall-hook.mjs

@@ -537,13 +537,21 @@ function hookModeFromEnv() {
   return process.env["NLM_HOOK_MODE"] === "live" ? "live" : "shadow";
 }
 
+// src/shared/net.ts
+var DEFAULT_NLM_PORT = "3940";
+
 // src/hook/recall-over-http.ts
 var RECALL_LIMIT = 5;
-var RECALL_TIMEOUT_MS = 2e3;
+function parseRecallTimeout(raw) {
+  if (raw === void 0) return 4e3;
+  const n = Number(raw);
+  return Number.isFinite(n) && n > 0 ? n : 4e3;
+}
+var RECALL_TIMEOUT_MS = parseRecallTimeout(process.env["NLM_HOOK_RECALL_TIMEOUT_MS"]);
 async function recallOverHttp(prompt, runtime, conversationId, mode = "keyword") {
   const query = extractRecallQuery(prompt);
   if (query === null) return { hits: [], facts: [], exemplars: [] };
-  const portValue = process.env["NLM_PORT"] ?? "3940";
+  const portValue = process.env["NLM_PORT"] ?? DEFAULT_NLM_PORT;
   const url = (
     // 127.0.0.1, not localhost: each hook is a fresh process with no connection
     // reuse, and Node resolves localhost to IPv6 ::1 first — a measured ~50-300ms
@@ -654,12 +662,12 @@ var RELATIVE_FLOOR = parseRelativeFloor(process.env["NLM_RECALL_REL_FLOOR"], 0.9
 var PER_FIRE_CAP = 3;
 var PER_CONVERSATION_CAP = 10;
 var PROMPT_PREVIEW_CHARS = 200;
-function parseHookDeadline(raw) {
-  if (raw === void 0) return 4e3;
+function parseHookDeadline(raw, defaultMs = 4e3) {
+  if (raw === void 0) return defaultMs;
   const n = Number(raw);
-  return Number.isFinite(n) && n > 0 ? n : 4e3;
+  return Number.isFinite(n) && n > 0 ? n : defaultMs;
 }
-var HOOK_DEADLINE_MS = parseHookDeadline(process.env["NLM_HOOK_DEADLINE_MS"]);
+var HOOK_DEADLINE_MS = parseHookDeadline(process.env["NLM_HOOK_DEADLINE_MS"], 6e3);
 async function withDeadline(p, ms, fallback) {
   if (ms <= 0) return fallback;
   let timer;
@@ -800,6 +808,7 @@ if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
   void main();
 }
 export {
+  HOOK_DEADLINE_MS,
   buildRecallQuery,
   hookRuntimeFromEnv,
   parseHookDeadline,

package/plugin/scripts/session-start-hook.mjs

@@ -362,13 +362,21 @@ function hookModeFromEnv() {
   return process.env["NLM_HOOK_MODE"] === "live" ? "live" : "shadow";
 }
 
+// src/shared/net.ts
+var DEFAULT_NLM_PORT = "3940";
+
 // src/hook/recall-over-http.ts
 var RECALL_LIMIT = 5;
-var RECALL_TIMEOUT_MS = 2e3;
+function parseRecallTimeout(raw) {
+  if (raw === void 0) return 4e3;
+  const n = Number(raw);
+  return Number.isFinite(n) && n > 0 ? n : 4e3;
+}
+var RECALL_TIMEOUT_MS = parseRecallTimeout(process.env["NLM_HOOK_RECALL_TIMEOUT_MS"]);
 async function recallOverHttp(prompt, runtime, conversationId, mode = "keyword") {
   const query = extractRecallQuery(prompt);
   if (query === null) return { hits: [], facts: [], exemplars: [] };
-  const portValue = process.env["NLM_PORT"] ?? "3940";
+  const portValue = process.env["NLM_PORT"] ?? DEFAULT_NLM_PORT;
   const url = (
     // 127.0.0.1, not localhost: each hook is a fresh process with no connection
     // reuse, and Node resolves localhost to IPv6 ::1 first — a measured ~50-300ms
@@ -456,7 +464,7 @@ function composeSessionStartOutput(failureModeBlock, recallBlock) {
 }
 async function fetchFailureModeBlock(repo) {
   if (!repo) return "";
-  const portValue = process.env["NLM_PORT"] ?? "3940";
+  const portValue = process.env["NLM_PORT"] ?? DEFAULT_NLM_PORT;
   const url = `http://127.0.0.1:${portValue}/api/signals/failure-modes?repo=${encodeURIComponent(repo)}`;
   try {
     const res = await fetchWithTimeout(url, {

package/plugin/scripts/stop-hook.mjs

@@ -327,6 +327,9 @@ function appendHookEvent(data) {
   }
 }
 
+// src/shared/net.ts
+var DEFAULT_NLM_PORT = "3940";
+
 // src/hook/stop-hook.ts
 var RESPONSE_PREVIEW_CHARS = 200;
 var POST_TIMEOUT_MS = 1500;
@@ -414,7 +417,7 @@ function logStopResult(result) {
   });
 }
 async function postCitationOverHttp(conversationId, citedId, kind, responsePreview) {
-  const port = process.env["NLM_PORT"] ?? "3940";
+  const port = process.env["NLM_PORT"] ?? DEFAULT_NLM_PORT;
   const url = `http://127.0.0.1:${port}/api/recall/cite-event`;
   await fetchWithTimeout(url, {
     method: "POST",

package/dist/hook/subagent-start-hook.d.ts

@@ -1,28 +0,0 @@
-/**
- * Claude Code SubagentStart hook entrypoint for NLM.
- *
- * Fires when Claude Code dispatches a subagent (Agent tool). Subagents have
- * their own session IDs but are invisible to NLM's session corpus today.
- * This hook captures the parent→subagent link so NLM can correlate subagent
- * transcripts back to the dispatching conversation when SessionEnd fires.
- *
- * Capture-only. No recall injection — subagents inherit context from their
- * dispatch prompt; additional recall would pollute their narrow task scope.
- *
- * Daemon endpoint: POST /api/hook/subagent-start
- *
- * Payload: { parent_conversation_id, subagent_session_id, subagent_description, ts }
- *
- * Fail-open by design: any error yields a clean exit with no output.
- */
-export interface SubagentStartInput {
-    readonly parentConversationId: string;
-    readonly subagentSessionId: string;
-    readonly subagentDescription: string;
-}
-export interface SubagentStartResult {
-    readonly parentConversationId: string;
-    readonly subagentSessionId: string;
-    readonly posted: boolean;
-}
-export declare function runSubagentStart(input: SubagentStartInput, portValue?: string): Promise<SubagentStartResult>;

package/dist/hook/subagent-start-hook.js

@@ -1,81 +0,0 @@
-/**
- * Claude Code SubagentStart hook entrypoint for NLM.
- *
- * Fires when Claude Code dispatches a subagent (Agent tool). Subagents have
- * their own session IDs but are invisible to NLM's session corpus today.
- * This hook captures the parent→subagent link so NLM can correlate subagent
- * transcripts back to the dispatching conversation when SessionEnd fires.
- *
- * Capture-only. No recall injection — subagents inherit context from their
- * dispatch prompt; additional recall would pollute their narrow task scope.
- *
- * Daemon endpoint: POST /api/hook/subagent-start
- *
- * Payload: { parent_conversation_id, subagent_session_id, subagent_description, ts }
- *
- * Fail-open by design: any error yields a clean exit with no output.
- */
-import { pathToFileURL } from "node:url";
-import { autoloadEnv } from "../llm/env-autoload.js";
-import { hookAuthHeaders } from "./hook-auth.js";
-import { readStdin, fetchWithTimeout, appendHookEvent } from "./hook-helpers.js";
-const POST_TIMEOUT_MS = 1500;
-export async function runSubagentStart(input, portValue = process.env["NLM_PORT"] ?? "3940") {
-    const payload = {
-        parent_conversation_id: input.parentConversationId,
-        subagent_session_id: input.subagentSessionId,
-        subagent_description: input.subagentDescription,
-        ts: new Date().toISOString(),
-    };
-    try {
-        const res = await fetchWithTimeout(`http://127.0.0.1:${portValue}/api/hook/subagent-start`, {
-            method: "POST",
-            headers: hookAuthHeaders({ "content-type": "application/json" }),
-            body: JSON.stringify(payload),
-        }, POST_TIMEOUT_MS);
-        return {
-            parentConversationId: input.parentConversationId,
-            subagentSessionId: input.subagentSessionId,
-            posted: res.ok,
-        };
-    }
-    catch {
-        return {
-            parentConversationId: input.parentConversationId,
-            subagentSessionId: input.subagentSessionId,
-            posted: false,
-        };
-    }
-}
-function logResult(result) {
-    appendHookEvent({
-        ts: new Date().toISOString(),
-        kind: "subagent-start",
-        parentConversationId: result.parentConversationId,
-        subagentSessionId: result.subagentSessionId,
-        posted: result.posted,
-    });
-}
-async function main() {
-    try {
-        autoloadEnv();
-        const raw = await readStdin();
-        const payload = JSON.parse(raw);
-        const subagentSessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
-        const parentConversationId = typeof payload.parent_session_id === "string" ? payload.parent_session_id : "unknown";
-        const subagentDescription = typeof payload.description === "string" ? payload.description : "";
-        const result = await runSubagentStart({
-            parentConversationId,
-            subagentSessionId,
-            subagentDescription,
-        });
-        logResult(result);
-    }
-    catch {
-        // Fail open — never block subagent dispatch.
-    }
-}
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-    void main();
-}
-//# sourceMappingURL=subagent-start-hook.js.map

package/dist/hook/subagent-start-hook.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"subagent-start-hook.js","sourceRoot":"","sources":["../../src/hook/subagent-start-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjF,MAAM,eAAe,GAAG,IAAI,CAAC;AAc7B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAyB,EACzB,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM;IAE7C,MAAM,OAAO,GAAG;QACd,sBAAsB,EAAE,KAAK,CAAC,oBAAoB;QAClD,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,oBAAoB,EAAE,KAAK,CAAC,mBAAmB;QAC/C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,oBAAoB,SAAS,0BAA0B,EACvD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,eAAe,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAChE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,EACD,eAAe,CAChB,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,MAAM,EAAE,GAAG,CAAC,EAAE;SACf,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAA2B;IAC5C,eAAe,CAAC;QACd,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,IAAI,EAAE,gBAAgB;QACtB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,WAAW,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI7B,CAAC;QACF,MAAM,iBAAiB,GACrB,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,oBAAoB,GACxB,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,mBAAmB,GACvB,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,oBAAoB;YACpB,iBAAiB;YACjB,mBAAmB;SACpB,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}