fix: shell injection in hooks, Claude Code mining, chromadb pin

- hooks/mempal_save_hook.sh: pass $TRANSCRIPT_PATH as sys.argv
  instead of interpolating into python -c string (fixes #110)
- normalize.py: accept type "user" in addition to "human" for
  Claude Code JSONL sessions (fixes #111)
- convo_miner.py: skip tool-results/, memory/ dirs and .meta.json
  files when scanning for conversations (fixes #111)
- pyproject.toml: pin chromadb>=0.4.0,<1 to avoid crashing 1.x
  builds on macOS ARM64 (fixes #100)

This commit is contained in:

bensig

2026-04-07 11:45:51 -07:00

parent aa10f8fbf1

commit 186bb2e3d1

4 changed files with 10 additions and 5 deletions

									
										pyproject.toml
									
		+1
		-1
	
												View File
												
				@@ -29,7 +29,7 @@ classifiers = [

				    "Topic :: Utilities",

				]

				dependencies = [

				    "chromadb>=0.4.0",

				    "chromadb>=0.4.0,<1",

				    "pyyaml>=6.0",

				]