- The quota breaker now persists across worker restarts instead of resetting
- Session-start warning no longer presents hitting your allowance as an outage or recommends a restart
- Observer conversations now run in bounded generations seeded from memory instead of unbounded loops
- A recycled generation is now briefed from the real session-start context rather than starting cold, and resumes on its own
- Installer login step is now strictly about logging in, with provider choice happening only after login
- Server-reported checkout stage during login no longer renders provider setup messaging, which is now scoped to enrollment
- Pre-login note explaining provider mechanics is removed, and both browser hand-offs print the URL then wait to support headless and SSH sessions
- Signup links were replaced with OAuth pairing for provider transitions
- An exhausted allowance no longer burns on refused requests, as the quota breaker now withholds requests for a cooldown and admits exactly one probe to re-check instead of letting every live session through
- Quota returned as assistant prose now arms the breaker and the health ledger, making previously invisible allowance spending visible
- Probe claims are now scoped to the generator that took them, preventing an earlier generator's exit from clearing a later session's probe
- When the cmem gateway terminally rejects the delivered key, memory falls back to your Anthropic plan and says so once at session start
- Signed-in provider transitions are now hardened
From claude-mem
Consolidates the observer, quota, and installer work onto one release.
Observer no longer burns your allowance on doomed requests
An exhausted allowance used to buy one refused request per captured tool call, for the rest of the billing cycle: the generator exits on the refusal, and the next observation starts a fresh one that earns the same refusal.
- A quota breaker now withholds requests for a cooldown and then admits exactly one probe to re-check, instead of letting every live session through the moment the window elapses.
- The breaker persists, so restarting the worker no longer resets it.
- Quota returned as assistant prose (which aborts rather than throwing) now arms the breaker and the health ledger too. That path was previously invisible: the allowance was spent, nothing would ever store, and you were told nothing.
- Probe claims are scoped to the generator that took them, so an earlier generator's exit can't clear a later session's probe and wedge the provider shut.
Capped users are no longer told to restart
Hitting your allowance is not an outage. The session-start warning stopped presenting it as one, and stopped recommending a restart that cannot help.
Observer conversations are bounded
The observer now runs in bounded generations seeded from memory, and a recycled generation is briefed from the real session-start context rather than starting cold. A recycle resumes on its own, so the last observation of a session is no longer stranded waiting for a tool call that never comes. Two unbounded request loops were closed.
Automatic fallback when the claude-mem key is exhausted
When the cmem gateway terminally rejects the delivered key, memory falls back to your Anthropic plan and says so once at session start. This is treated as the promised switch, not an outage, so it stays out of the health ledger and never triggers the outage warning.
Installer: the login step is only about logging in
Every install is account-first, and the provider choice (CMEM Pro vs. your own Anthropic plan) now happens strictly after login. The login step carries no plan or pricing language:
- A server-reported checkout stage during login no longer renders "Waiting for CMEM Pro setup in the browser…". That wording is scoped to enrollment.
- The pre-login note explaining provider mechanics is gone. Both browser hand-offs now print the URL, then wait:
Continue setup in browser... (hit return to open automatically). The URL prints first, so headless and SSH sessions are never blocked — open it by hand and the wait clears on Return. - Signup links were replaced with OAuth pairing, and signed-in provider transitions were hardened.
Known limitation: a non-interactive install that cannot reach cmem.ai now fails rather than silently configuring a local-only install, including runs that pass --provider claude. A bypass for explicit local providers is coming in the next release.