sbx/claude-mem-kit:20260909-96a0e0047c0165db7aa0f5c923758d731feee0fb

schemaVersion: "2"
kind: mixin
name: claude-mem
displayName: claude-mem (persistent memory)
description: 'Persistent context across Claude Code sessions: captures session activity into SQLite+FTS5, compresses with the Agent SDK, and injects relevant memory at session start. Tracks the latest claude-mem release.'
requires:
    agent: claude
agentInstructions:
    content: |
        ## claude-mem

        Persistent memory is active: session activity is captured into a local
        SQLite database under `~/.claude-mem/` and relevant context is injected
        at session start. Search past sessions with the mem-search skill or the
        mcp-search MCP tools. The worker (viewer UI + live activity stream) runs
        on port 37700 (publish with `sbx ports <sandbox> --publish 37700/tcp`
        to browse from the host). claude-mem's telemetry is disabled
        (CLAUDE_MEM_TELEMETRY=0).
permissions:
    network:
        allow:
            - registry.npmjs.org
            - '*.npmjs.org'
            - bun.sh:443
            - astral.sh:443
            - github.com:443
            - api.github.com:443
            - objects.githubusercontent.com:443
            - release-assets.githubusercontent.com:443
            - raw.githubusercontent.com:443
            - pypi.org:443
            - files.pythonhosted.org:443
            - chroma-onnx-models.s3.amazonaws.com:443
            - archive.ubuntu.com
            - security.ubuntu.com
            - ports.ubuntu.com
            - download.docker.com
ports:
    - container: 37700
      name: memory-viewer
environment:
    variables:
        CLAUDE_MEM_TELEMETRY: "0"
        CLAUDE_MEM_WORKER_HOST: 0.0.0.0
        CLAUDE_MEM_WORKER_PORT: "37700"
setup:
    install:
        - command: npm config set proxy $HTTP_PROXY && npm config set https-proxy $HTTPS_PROXY || true
          user: "1000"
          description: Point npm at the sandbox egress proxy
        - command: npm_config_legacy_peer_deps=true npx -y claude-mem@latest install --provider claude
          user: "1000"
          description: Install latest claude-mem (plugin, marketplace registration, bun deps)
    startup:
        - command:
            - sh
            - -c
            - |
              set -e
              exec > /tmp/claude-mem-reconcile.log 2>&1
              # Runs on every exit, including early failures, so root never
              # leaves /home/agent/.claude or settings.json root-owned.
              # Enumerated, not recursive: ~/.claude holds runtime-managed
              # content this kit doesn't own, so a recursive chown would take
              # ownership of paths outside the kit's control. Paths are
              # existence-checked because under `set -e` a chown that fails on
              # a path this script never created would replace the script's
              # exit status from inside the trap, turning a tolerated early
              # failure into a failed install.
              S=/home/agent/.claude/settings.json
              trap 'for p in /home/agent/.claude "$S"; do if [ -e "$p" ]; then chown agent:agent "$p"; fi; done' EXIT
              mkdir -p /home/agent/.claude
              # Wait for the platform's own settings write to land first — at
              # create time the engine seeds this file late in the sequence and
              # overwrites whatever exists; merging before that loses our key.
              i=0
              found=0
              while [ $i -lt 60 ]; do
                if grep -q themeId "$S" 2>/dev/null; then found=1; break; fi
                sleep 1; i=$((i+1))
              done
              if [ "$found" = "1" ]; then
                echo "platform settings present after ${i}s"
              else
                echo "timed out after ${i}s waiting for platform settings; proceeding anyway"
              fi
              MODE="${SBX_CRED_ANTHROPIC_MODE:-none}" node -e '
                const fs = require("fs");
                const p = process.argv[1];
                let s = {};
                try { s = JSON.parse(fs.readFileSync(p, "utf8")); } catch {}
                const defaults = {
                  themeId: 1,
                  alwaysThinkingEnabled: true,
                  defaultMode: "bypassPermissions",
                  bypassPermissionsModeAccepted: true,
                };
                const SENTINEL = "echo proxy-managed";
                if (process.env.MODE !== "none") defaults.apiKeyHelper = SENTINEL;
                for (const k of Object.keys(defaults)) if (!(k in s)) s[k] = defaults[k];
                // Only clear our own sentinel, never a user-customized helper.
                if (process.env.MODE === "none" && s.apiKeyHelper === SENTINEL) delete s.apiKeyHelper;
                s.enabledPlugins = s.enabledPlugins || {};
                if (!("claude-mem@thedotmack" in s.enabledPlugins)) s.enabledPlugins["claude-mem@thedotmack"] = true;
                fs.writeFileSync(p, JSON.stringify(s, null, 2));
                console.log("reconciled");
              ' "$S"
          user: "0"
          description: Reconcile settings.json — ensure platform keys and claude-mem's enabledPlugins both present (ordering-immune, idempotent)