fix: harden memory services and web UI

scripts/build.mjs

@@ -39,4 +39,3 @@ function main() {
 }
 
 main();
-// AUDIT_MARKER

scripts/migrate-tests.mjs

@@ -61,4 +61,3 @@ function migrateDirectory(dir) {
 }
 
 migrateDirectory("tests");
-// AUDIT_MARKER

scripts/migrate-v1-to-v2.ts

@@ -405,4 +405,3 @@ migrate(storagePath)
     console.error("Migration failed:", error);
     process.exit(1);
   });
-// AUDIT_MARKER

src/config.ts

@@ -751,4 +751,3 @@ export function isConfigured(): boolean {
   // The system should check specific sub-configurations when features are invoked.
   return true;
 }
-// AUDIT_MARKER

src/index.ts

@@ -66,7 +66,7 @@
     }
   })();
 
   if (CONFIG.webServerEnabled) {
     startWebServer({
       port: CONFIG.webServerPort,
       host: CONFIG.webServerHost,
@@ -88,7 +88,7 @@
                   duration: 3000,
                 },
               })
-              .catch(() => {});
+              .catch((err) => log("Toast display failed", { error: String(err) }));
           }
         });
 
@@ -103,7 +103,7 @@
                   duration: 5000,
                 },
               })
-              .catch(() => {});
+              .catch((err) => log("Toast display failed", { error: String(err) }));
           }
         } else {
           if (ctx.client?.tui) {
@@ -116,7 +116,7 @@
                   duration: 3000,
                 },
               })
-              .catch(() => {});
+              .catch((err) => log("Toast display failed", { error: String(err) }));
           }
         }
       })
@@ -133,7 +133,7 @@
                 duration: 5000,
               },
             })
-            .catch(() => {});
+            .catch((err) => log("Toast display failed", { error: String(err) }));
         }
       });
   }
@@ -278,7 +278,7 @@
                 duration: 5000,
               },
             })
-            .catch(() => {});
+            .catch((err) => log("Toast display failed", { error: String(err) }));
         }
       }
     },
@@ -587,7 +587,7 @@
                   duration: 3000,
                 },
               })
-              .catch(() => {});
+              .catch((err) => log("Toast display failed", { error: String(err) }));
           }
 
           log("Compaction memory injected", {
@@ -634,4 +634,3 @@
 
   return output;
 }
-// AUDIT_MARKER

src/plugin.ts

@@ -6,4 +6,3 @@ export const id =
   typeof pkg.name === "string" && pkg.name.trim() ? pkg.name.trim() : "opencode-mem0";
 export { OpenCodeMemPlugin };
 export default { id, server: OpenCodeMemPlugin } satisfies PluginModule;
-// AUDIT_MARKER

src/services/ai/ai-provider-factory.ts

@@ -48,4 +48,3 @@ export class AIProviderFactory {
     return getAISessionManager().cleanupExpiredSessions();
   }
 }
-// AUDIT_MARKER

src/services/ai/opencode-provider.ts

@@ -297,4 +297,3 @@ export async function generateStructuredOutput<T>(options: {
   });
   return result.output as T;
 }
-// AUDIT_MARKER

src/services/ai/provider-config.ts

@@ -33,4 +33,3 @@ export function buildMemoryProviderConfig(
     iterationTimeout: overrides.iterationTimeout ?? config.autoCaptureIterationTimeout,
   };
 }
-// AUDIT_MARKER

src/services/ai/providers/anthropic-messages.ts

@@ -237,4 +237,3 @@ export class AnthropicMessagesProvider extends BaseAIProvider {
     return null;
   }
 }
-// AUDIT_MARKER

src/services/ai/providers/base-provider.ts

@@ -61,4 +61,3 @@ export abstract class BaseAIProvider {
 
   abstract supportsSession(): boolean;
 }
-// AUDIT_MARKER

src/services/ai/providers/google-gemini.ts

@@ -271,4 +271,3 @@ export class GoogleGeminiProvider extends BaseAIProvider {
     return { success: false, error: `Max iterations (${maxIterations}) reached`, iterations };
   }
 }
-// AUDIT_MARKER

src/services/ai/providers/openai-chat-completion.ts

@@ -434,4 +434,3 @@ export class OpenAIChatCompletionProvider extends BaseAIProvider {
     };
   }
 }
-// AUDIT_MARKER

src/services/ai/providers/openai-responses.ts

@@ -233,4 +233,3 @@ export class OpenAIResponsesProvider extends BaseAIProvider {
     return data;
   }
 }
-// AUDIT_MARKER

src/services/ai/session/ai-session-manager.ts

@@ -282,4 +282,3 @@ export const aiSessionManager = {
     return getAISessionManager().getLastSequence.bind(getAISessionManager());
   },
 } as unknown as AISessionManager;
-// AUDIT_MARKER

src/services/ai/session/session-types.ts

@@ -41,4 +41,3 @@ export interface SessionUpdateParams {
   conversationId?: string;
   metadata?: Record<string, any>;
 }
-// AUDIT_MARKER

src/services/ai/tools/tool-schema.ts

@@ -62,4 +62,3 @@ export class ToolSchemaConverter {
     };
   }
 }
-// AUDIT_MARKER

src/services/ai/validators/user-profile-validator.ts

@@ -118,4 +118,3 @@ export class UserProfileValidator {
     return errors;
   }
 }
-// AUDIT_MARKER

src/services/api-handlers.ts

@@ -142,12 +142,15 @@ export async function handleListMemories(
   includePrompts: boolean = true
 ): Promise<ApiResponse<PaginatedResponse<Memory | any>>> {
   try {
+    const safePage = Number.isFinite(page) && page > 0 ? Math.min(Math.floor(page), 10000) : 1;
+    const safePageSize =
+      Number.isFinite(pageSize) && pageSize > 0 && pageSize <= 100 ? Math.floor(pageSize) : 20;
     await embeddingService.warmup();
     let allMemories: any[] = [];
     if (tag) {
       const { scope: tagScope, hash } = extractScopeFromTag(tag);
       const shards = shardManager.getAllShards(tagScope, hash);
-      const limit = page * pageSize; // Fetch enough to cover the requested page across shards
+      const limit = safePage * safePageSize; // Fetch enough to cover the requested page across shards
       for (const shard of shards) {
         const db = connectionManager.getConnection(shard.dbPath);
         const memories = vectorSearch.listMemories(db, tag, limit);
@@ -233,9 +236,9 @@ export async function handleListMemories(
     timeline = sortedTimeline;
 
     const total = timeline.length;
-    const totalPages = Math.ceil(total / pageSize);
-    const offset = (page - 1) * pageSize;
-    const paginatedResults = timeline.slice(offset, offset + pageSize);
+    const totalPages = Math.ceil(total / safePageSize);
+    const offset = (safePage - 1) * safePageSize;
+    const paginatedResults = timeline.slice(offset, offset + safePageSize);
 
     const items = paginatedResults.map((item: any) => {
       if (item.type === "memory") {
@@ -270,7 +273,10 @@ export async function handleListMemories(
       }
     });
 
-    return { success: true, data: { items, total, page, pageSize, totalPages } };
+    return {
+      success: true,
+      data: { items, total, page: safePage, pageSize: safePageSize, totalPages },
+    };
   } catch (error) {
     log("handleListMemories: error", { error: String(error) });
     return { success: false, error: "Internal error" };
@@ -491,6 +497,9 @@ export async function handleSearch(
 ): Promise<ApiResponse<PaginatedResponse<SearchResultItem>>> {
   try {
     if (!query) return { success: false, error: "query is required" };
+    const safePage = Number.isFinite(page) && page > 0 ? Math.min(Math.floor(page), 10000) : 1;
+    const safePageSize =
+      Number.isFinite(pageSize) && pageSize > 0 && pageSize <= 100 ? Math.floor(pageSize) : 20;
     await embeddingService.warmup();
     const queryVector = await embeddingService.embedWithTimeout(query);
     let memoryResults: any[] = [];
@@ -500,42 +509,35 @@ export async function handleSearch(
       const shards = shardManager.getAllShards(scope, hash);
       for (const shard of shards) {
         try {
-          const results = await vectorSearch.searchInShard(shard, queryVector, tag, pageSize * 2);
+          const results = await vectorSearch.searchInShard(
+            shard,
+            queryVector,
+            tag,
+            safePageSize * 2
+          );
           memoryResults.push(...results);
         } catch (error) {
           log("Shard search error", { shardId: shard.id, error: String(error) });
         }
       }
       const projectPath = getProjectPathFromTag(tag);
-      promptResults = userPromptManager.searchPrompts(query, projectPath, pageSize * 2);
+      promptResults = userPromptManager.searchPrompts(query, projectPath, safePageSize * 2);
     } else {
+      const userShards = shardManager.getAllShards("user", "");
       const projectShards = shardManager.getAllShards("project", "");
-      const uniqueTags = new Set<string>();
-      for (const shard of projectShards) {
-        const db = connectionManager.getConnection(shard.dbPath);
-        const tags = vectorSearch.getDistinctTags(db);
-        for (const t of tags) {
-          if (t.container_tag) uniqueTags.add(t.container_tag);
-        }
-      }
-      for (const containerTag of uniqueTags) {
-        const { scope, hash } = extractScopeFromTag(containerTag);
-        const shards = shardManager.getAllShards(scope, hash);
-        for (const shard of shards) {
-          try {
-            const results = await vectorSearch.searchInShard(
-              shard,
-              queryVector,
-              containerTag,
-              pageSize
-            );
-            memoryResults.push(...results);
-          } catch (error) {
-            log("Shard search error", { shardId: shard.id, error: String(error) });
-          }
+      const searchedPaths = new Set<string>();
+      for (const shard of [...userShards, ...projectShards]) {
+        if (searchedPaths.has(shard.dbPath)) continue;
+        searchedPaths.add(shard.dbPath);
+        try {
+          const perShardLimit = Math.min(safePage * safePageSize, 500);
+          const results = await vectorSearch.searchInShard(shard, queryVector, "", perShardLimit);
+          memoryResults.push(...results);
+        } catch (error) {
+          log("Shard search error", { shardId: shard.id, error: String(error) });
         }
       }
-      promptResults = userPromptManager.searchPrompts(query, undefined, pageSize * 2);
+      promptResults = userPromptManager.searchPrompts(query, undefined, safePageSize * 2);
     }
 
     const formattedPrompts: FormattedPrompt[] = promptResults.map((p) => ({
@@ -575,9 +577,12 @@ export async function handleSearch(
     );
 
     const total = combinedResults.length;
-    const totalPages = Math.ceil(total / pageSize);
-    const offset = (page - 1) * pageSize;
-    const paginatedResults: SearchResultItem[] = combinedResults.slice(offset, offset + pageSize);
+    const totalPages = Math.ceil(total / safePageSize);
+    const offset = (safePage - 1) * safePageSize;
+    const paginatedResults: SearchResultItem[] = combinedResults.slice(
+      offset,
+      offset + safePageSize
+    );
 
     const missingPromptIds = new Set<string>();
     const missingMemoryIds = new Set<string>();
@@ -640,7 +645,10 @@ export async function handleSearch(
       }
     }
 
-    return { success: true, data: { items: paginatedResults, total, page, pageSize, totalPages } };
+    return {
+      success: true,
+      data: { items: paginatedResults, total, page: safePage, pageSize: safePageSize, totalPages },
+    };
   } catch (error) {
     log("handleSearch: error", { error: String(error) });
     return { success: false, error: "Internal error" };
@@ -1179,4 +1187,3 @@ export async function handleConflictStats(): Promise<
     return { success: false, error: "Internal error" };
   }
 }
-// AUDIT_MARKER

src/services/auto-capture.ts

@@ -393,4 +393,3 @@ Analyze this conversation. If it contains technical work (code, bugs, features,
     tags: (result.data.tags || []).map((t: string) => t.toLowerCase().trim()),
   };
 }
-// AUDIT_MARKER

src/services/cleanup-service.ts

@@ -131,4 +131,3 @@ export class CleanupService {
 }
 
 export const cleanupService = new CleanupService();
-// AUDIT_MARKER

src/services/client.ts

@@ -444,4 +444,3 @@ export class LocalMemoryClient {
 }
 
 export const memoryClient = new LocalMemoryClient();
-// AUDIT_MARKER

src/services/context.ts

@@ -40,4 +40,3 @@ export function formatContextForPrompt(
 
   return parts.join("\n");
 }
-// AUDIT_MARKER

src/services/deduplication-service.ts

@@ -182,4 +182,3 @@ export class DeduplicationService {
 }
 
 export const deduplicationService = new DeduplicationService();
-// AUDIT_MARKER

src/services/embedding.ts

@@ -144,4 +144,3 @@ export class EmbeddingService {
 }
 
 export const embeddingService = EmbeddingService.getInstance();
-// AUDIT_MARKER

src/services/jsonc.ts

@@ -83,4 +83,3 @@ export function stripJsoncComments(content: string): string {
   // Remove trailing commas before } or ]
   return result.replace(/,\s*([}\]])/g, "$1");
 }
-// AUDIT_MARKER

src/services/language-detector.ts

@@ -37,4 +37,3 @@ export function getLanguageName(code: string): string {
   }
   return lang?.name || "English";
 }
-// AUDIT_MARKER

src/services/memory-conflicts.ts

@@ -654,4 +654,3 @@ export function getAllUnresolvedConflicts(
 
   return allConflicts.sort((a, b) => b.detectedAt - a.detectedAt).slice(0, limit);
 }
-// AUDIT_MARKER

src/services/memory-lifecycle.ts

@@ -415,4 +415,3 @@ export async function runLifecycleMaintenance(): Promise<void> {
     log("Lifecycle maintenance error", { error: String(error) });
   }
 }
-// AUDIT_MARKER

src/services/memory-scoring-service.ts

@@ -239,4 +239,3 @@ export async function runOneTimeScoringRecalculation(): Promise<{
 }> {
   return recalculateAllScores(true);
 }
-// AUDIT_MARKER

src/services/memory-scoring.ts

@@ -619,4 +619,3 @@ export function recordAccess(currentAccessCount: number): {
     lastAccessed: Date.now(),
   };
 }
-// AUDIT_MARKER

src/services/migration-service.ts

@@ -350,4 +350,3 @@ export class MigrationService {
 }
 
 export const migrationService = new MigrationService();
-// AUDIT_MARKER

src/services/platform-server.ts

@@ -107,4 +107,3 @@ export function serve(options: ServeOptions): Promise<PlatformServer> {
 
   return createNodeServer(options);
 }
-// AUDIT_MARKER

src/services/privacy.ts

@@ -6,4 +6,3 @@ export function isFullyPrivate(content: string): boolean {
   const stripped = stripPrivateContent(content).trim();
   return stripped === "[REDACTED]" || stripped === "";
 }
-// AUDIT_MARKER

src/services/retrieval-context.ts

@@ -164,4 +164,3 @@ export function calculateDiversityPenalty(
 
   return 0;
 }
-// AUDIT_MARKER

src/services/secret-resolver.ts

@@ -67,4 +67,3 @@ export function resolveSecretValue(value: string | undefined): string | undefine
 
   return value;
 }
-// AUDIT_MARKER

src/services/sqlite/connection-manager.ts

@@ -83,4 +83,3 @@ export class ConnectionManager {
 }
 
 export const connectionManager = new ConnectionManager();
-// AUDIT_MARKER

src/services/sqlite/shard-manager.ts

@@ -405,4 +405,3 @@ export class ShardManager {
 }
 
 export const shardManager = new ShardManager();
-// AUDIT_MARKER

src/services/sqlite/sqlite-bootstrap.ts

@@ -126,4 +126,3 @@ export function getDatabase(): new (path: string) => Database {
   }
   return DatabaseImpl;
 }
-// AUDIT_MARKER

src/services/sqlite/transcript-manager.ts

@@ -275,4 +275,3 @@ export class TranscriptManager {
 }
 
 export const transcriptManager = new TranscriptManager();
-// AUDIT_MARKER