remem-ai 0.6.4

Local-first coding agent memory for Claude Code and OpenAI Codex
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131

use anyhow::Result;
use rusqlite::{params, Connection, OptionalExtension};

use super::types::LoadedContext;
use crate::memory::poisoning::{scan_instruction_pattern, InstructionPatternMatch};
use crate::memory::Memory;

#[derive(Debug, Clone)]
struct MemoryPoisoningState {
    acknowledged_pattern_id: Option<String>,
    acknowledged_pattern_version: Option<i64>,
    source_trust_class: String,
    source_project: Option<String>,
}

pub(super) fn drop_unacknowledged_poisoned_context(conn: &Connection, loaded: &mut LoadedContext) {
    loaded.memories.retain(|memory| {
        should_inject_memory(conn, memory, "memory").unwrap_or_else(|error| {
            crate::log::error(
                "context-poisoning",
                &format!(
                    "dropping memory {} after poisoning check failed: {error}",
                    memory.id
                ),
            );
            false
        })
    });
    loaded.lessons.retain(|lesson| {
        should_inject_memory(conn, &lesson.memory, "lessons").unwrap_or_else(|error| {
            crate::log::error(
                "context-poisoning",
                &format!(
                    "dropping lesson memory {} after poisoning check failed: {error}",
                    lesson.memory.id
                ),
            );
            false
        })
    });
}

fn should_inject_memory(conn: &Connection, memory: &Memory, channel: &str) -> Result<bool> {
    let Some(pattern_match) = scan_instruction_pattern(&memory_haystack(memory)) else {
        return Ok(true);
    };
    let state = load_memory_poisoning_state(conn, memory.id)?;
    if acknowledges_pattern(&state, pattern_match) {
        return Ok(true);
    }

    crate::log::error(
        "context-poisoning",
        &format!(
            "dropping unacknowledged poisoned {channel} memory id={} pattern={}@v{}",
            memory.id, pattern_match.pattern_id, pattern_match.pattern_set_version
        ),
    );
    if let Err(error) = record_injection_drop(conn, memory, &state, pattern_match) {
        crate::log::error(
            "context-poisoning",
            &format!(
                "failed to record poisoned memory drop for memory {}: {error}",
                memory.id
            ),
        );
    }
    Ok(false)
}

fn memory_haystack(memory: &Memory) -> String {
    format!("{}\n{}", memory.title, memory.text)
}

fn load_memory_poisoning_state(conn: &Connection, memory_id: i64) -> Result<MemoryPoisoningState> {
    let state = conn
        .query_row(
            "SELECT acknowledged_pattern_id, acknowledged_pattern_version,
                    source_trust_class, source_project
             FROM memories WHERE id = ?1",
            params![memory_id],
            |row| {
                Ok(MemoryPoisoningState {
                    acknowledged_pattern_id: row.get(0)?,
                    acknowledged_pattern_version: row.get(1)?,
                    source_trust_class: row.get(2)?,
                    source_project: row.get(3)?,
                })
            },
        )
        .optional()?
        .unwrap_or_else(|| MemoryPoisoningState {
            acknowledged_pattern_id: None,
            acknowledged_pattern_version: None,
            source_trust_class: "external_content".to_string(),
            source_project: None,
        });
    Ok(state)
}

fn acknowledges_pattern(
    state: &MemoryPoisoningState,
    pattern_match: InstructionPatternMatch,
) -> bool {
    state.acknowledged_pattern_id.as_deref() == Some(pattern_match.pattern_id)
        && state.acknowledged_pattern_version == Some(pattern_match.pattern_set_version)
}

fn record_injection_drop(
    conn: &Connection,
    memory: &Memory,
    state: &MemoryPoisoningState,
    pattern_match: InstructionPatternMatch,
) -> Result<()> {
    conn.execute(
        "INSERT INTO memory_poisoning_injection_drops
         (memory_id, pattern_id, pattern_version, source_trust_class, source_project,
          title, created_at_epoch)
         VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7)",
        params![
            memory.id,
            pattern_match.pattern_id,
            pattern_match.pattern_set_version,
            state.source_trust_class.as_str(),
            state.source_project.as_deref(),
            memory.title.as_str(),
            chrono::Utc::now().timestamp(),
        ],
    )?;
    Ok(())
}