pre-release: combined patch - cli 0.3.10 (hermes install TypeError) + client 0.4.6 (negative-limit guard)

sibyl-memory-cli/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to `sibyl-memory-cli` are recorded here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning follows
 [SemVer](https://semver.org/).
 
+## [0.3.10] — 2026-06-01
+
+### Fixed
+
+- **`sibyl setup hermes` raised a TypeError on every first-run wiring.**
+  `HermesWirer._install_plugin()` called `install()` with only `hermes_home`
+  (as a `str`), but `sibyl_memory_hermes.install_plugin.install()` requires
+  `(hermes_home: Path, force: bool, dry_run: bool)` with no defaults, so it
+  raised `TypeError` before the plugin could install. Now calls
+  `install(hermes_home=Path(self.hermes_home), force=False, dry_run=False)`.
+
 ## [0.3.9] — 2026-05-31
 
 Guided migration plus first-class Codex support and the real fix for Claude

sibyl-memory-cli/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sibyl-memory-cli"
-version = "0.3.9"
+version = "0.3.10"
 description = "Command-line interface for the Sibyl Memory Plugin. `sibyl init` activates, `sibyl upgrade` runs the staker / subscription flow, `sibyl status` shows current tier and DB stats, `sibyl whoami` gives a one-line account summary, `sibyl devices` lists active devices and supports per-device revoke."
 authors = [{ name = "SIBYL, Sibyl Labs LLC", email = "sibyl@sibyllabs.org" }]
 license = { text = "MIT" }

sibyl-memory-cli/src/sibyl_memory_cli/setup.py

@@ -206,7 +206,7 @@ class HermesWirer:
 
     def _install_plugin(self) -> None:
         from sibyl_memory_hermes.install_plugin import install
-        install(hermes_home=str(self.hermes_home))
+        install(hermes_home=Path(self.hermes_home), force=False, dry_run=False)
 
     def _backup_config(self) -> Optional[Path]:
         if not self.config_path.exists():

sibyl-memory-cli/tests/test_hermes_install_args.py

@@ -0,0 +1,31 @@
+"""Regression: ``HermesWirer._install_plugin`` must call ``install()`` with its
+full required signature ``(hermes_home: Path, force: bool, dry_run: bool)``.
+
+cli 0.3.9 shipped a ``TypeError`` here (called with only ``hermes_home`` as a
+``str``) because the wider setup suite stubs ``_install_plugin`` and masked it.
+This test exercises the real method with ``install`` mocked, so the arg contract
+is enforced without needing the hermes runtime. Source: beta reports
+"sibyl setup hermes fails on fresh install" (2026-06-01).
+"""
+from pathlib import Path
+
+import sibyl_memory_hermes.install_plugin as ip
+from sibyl_memory_cli import setup as cli_setup
+
+
+def test_install_plugin_passes_full_signature(monkeypatch):
+    calls = []
+    monkeypatch.setattr(
+        ip, "install",
+        lambda hermes_home, force, dry_run: (calls.append((hermes_home, force, dry_run)), 0)[1],
+    )
+    w = cli_setup.HermesWirer.__new__(cli_setup.HermesWirer)
+    w.hermes_home = Path("/tmp/fake-hermes-home")
+
+    w._install_plugin()  # must not raise TypeError
+
+    assert len(calls) == 1
+    hermes_home, force, dry_run = calls[0]
+    assert isinstance(hermes_home, Path)
+    assert force is False
+    assert dry_run is False

sibyl-memory-client/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `sibyl-memory-client` are recorded here. Format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning
 follows [SemVer](https://semver.org/).
 
+## [0.4.6] - 2026-06-01
+
+### Fixed
+
+- **A negative `limit` could broaden search instead of narrowing it.**
+  `search()` and `search_entities()` passed `limit` straight into SQLite
+  `LIMIT ?`, where `LIMIT -1` means unbounded, so `limit=-1` returned more
+  rows rather than fewer. Both methods now clamp `limit` with `max(0, limit)`
+  so an invalid negative limit can never broaden results.
+
 ## [0.4.5] - 2026-05-30
 
 Adversarial QA remediation (Acer stress-test suite): two findings + a review hardening.

sibyl-memory-client/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "sibyl-memory-client"
-version = "0.4.5"
+version = "0.4.6"
 description = "Local-first agentic memory SDK. SQLite-backed five-tier hierarchical schema, FTS5 search, multi-tenant, with self-learning skill detection and local memory linter. Foundation of the Sibyl Memory Plugin family."
 authors = [{ name = "SIBYL, Sibyl Labs LLC", email = "sibyl@sibyllabs.org" }]
 license = { text = "MIT" }

sibyl-memory-client/src/sibyl_memory_client/client.py

@@ -889,6 +889,7 @@ class MemoryClient:
 
         Raises: StorageError on backend failure; empty list on empty / invalid query.
         """
+        limit = max(0, limit)  # negative limit must not broaden: SQLite LIMIT -1 = unbounded
         match_q = _sanitize_fts5_query(query, prefix=prefix)
         if not match_q:
             return []
@@ -934,6 +935,7 @@ class MemoryClient:
 
         Raises: StorageError on backend failure.
         """
+        limit = max(0, limit)  # negative limit must not broaden: SQLite LIMIT -1 = unbounded
         match_q = _sanitize_fts5_query(query, prefix=prefix)
         if not match_q:
             return []

sibyl-memory-client/tests/test_negative_limit_guard.py

@@ -0,0 +1,30 @@
+"""Regression: a negative ``limit`` must never broaden search results.
+
+SQLite treats ``LIMIT -1`` as unbounded, so passing ``limit=-1`` previously
+returned MORE rows, not fewer. Both ``search`` and ``search_entities`` now clamp
+with ``max(0, limit)``. Source: adversarial QA finding
+SEARCH-NEGATIVE-LIMIT-CANNOT-BROADEN-RESULTS (2026-06-01).
+"""
+from sibyl_memory_client import MemoryClient
+
+
+def _seed(tmp_path):
+    c = MemoryClient.local(tmp_path / "memory.db", tenant_id="qa-sandbox")
+    for i in range(6):
+        c.set_entity("notes", f"item-{i}", {"text": "alpha beta gamma token"})
+    return c
+
+
+def test_search_negative_limit_does_not_broaden(tmp_path):
+    c = _seed(tmp_path)
+    bounded = c.search("token", limit=2)
+    negative = c.search("token", limit=-1)
+    # negative must never return MORE than a small positive limit, and must not
+    # fall through to SQLite's unbounded LIMIT -1.
+    assert len(negative) <= len(bounded)
+    assert len(negative) == 0
+
+
+def test_search_entities_negative_limit_does_not_broaden(tmp_path):
+    c = _seed(tmp_path)
+    assert c.search_entities("token", limit=-1) == []