@webinson/peer 0.4.23 → 0.4.24

package/README.md

@@ -27,6 +27,7 @@ In a Claude Code thread:
     thread goes, on top of Claude Code's own memory. It saves only the turns from the moment it was chosen.
   - **Inactive** (not shared): Claude Code's own memory alone; PeerMemory stays off.
   - **Use Jellyfish** (shared): no memory at all, neither PeerMemory nor Claude Code's own (`MEMORY.md`).
+    The agent cannot read, search or change Claude Code's memory files with a tool either.
     `CLAUDE.md` instructions stay. Claude Code puts `MEMORY.md` into a thread's first message, so a thread meant to
     hold none starts with `/peer` (or `/peer jellyfish`): a first message with work in it already carries it.
 

package/mod/peer-thread-mark/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "peer-thread-mark",
-  "version": "0.4.23",
+  "version": "0.4.24",
   "description": "Marks a Claude Code thread shared with Peer (/peer) with a band above the prompt, with /peer stop and /peer start; panes for /peer-list, /peer-thread and /peer-all (search your memories)",
   "license": "MIT",
   "types": "./types/index.d.ts"

package/mod/peer-thread-mark/hooks/register.tsx

@@ -276,6 +276,9 @@ async function applyMemory($: EngineInterface) {
 // What OpenViking's recall and Peer's team memory add to a prompt, left out where the thread keeps OpenViking off.
 const OPENVIKING_BLOCK = /<openviking-context|<teammates-project-knowledge/
 const OPENVIKING_TOOL = 'mcp__plugin_openviking-memory_'
+// Claude Code's own memory files, in a tool's input however it is written: a path, a glob, a shell command that
+// changes into ~/.claude first or looks for MEMORY.md there. A call that names both is held back.
+const usesMemoryFiles = (input: string) => /\.claude(?=[\\/"'\s]|$)/.test(input) && /memory/i.test(input)
 
 // The memory badge's color: an explicit value, as a surface may not know a theme key; it reads on light and dark.
 const SAVED_COLOR = '#8b5cf6'
@@ -711,6 +714,11 @@ export const register: Register = on => {
     if (e.tool.startsWith(OPENVIKING_TOOL) && (await memoryUse($)) !== 'openviking') {
       return { deny: 'PeerMemory is off in this thread. Use Elephant turns it on.' }
     }
+    // Jellyfish keeps Claude Code's memory files out of the context, and an agent that knows where they live
+    // (~/.claude/projects/<project>/memory) does not read, search or write them with a tool either.
+    if (usesMemoryFiles(JSON.stringify(e)) && (await memoryUse($)) === 'none') {
+      return { deny: "Jellyfish: this thread uses no memory, Claude Code's memory files included. Use Elephant or Inactive brings them back." }
+    }
     return next(e)
   })
 

package/mod/peer-thread-mark/tests/modes.test.tsx

@@ -77,12 +77,24 @@ test('Elephant turns OpenViking on, Inactive keeps Claude Code memory alone, Jel
   await search()
   expect(toolRuns).toBe(1)
   expect((await $.prompt.section({ name: 'memory', text: 'how memory works' })).text).toBeNull()
+  // Nor its memory files, read, searched or changed with a tool; other files under ~/.claude still are.
+  const denied = async (input: object) => {
+    const before = toolRuns
+    const result = (await $.tool.call(input as never)) as { deny?: string }
+    return toolRuns === before && Boolean(result?.deny)
+  }
+  expect(await denied({ tool: 'Read', file_path: '/home/.claude/projects/p/memory/peer-proof.md' })).toBe(true)
+  expect(await denied({ tool: 'Bash', command: 'cd ~/.claude && cat projects/p/memory/MEMORY.md' })).toBe(true)
+  expect(await denied({ tool: 'Grep', pattern: '12/13', path: '/home/.claude/projects' , glob: '**/memory/*.md' })).toBe(true)
+  expect(await denied({ tool: 'Read', file_path: '/home/.claude/settings.json' })).toBe(false)
+  expect(await denied({ tool: 'Read', file_path: '/repo/.claude-plugin/memory.json' })).toBe(false)
   const kept = (await context()).blocks.find(b => b.name === 'claudeMd')?.text ?? ''
   expect(kept).toContain('Be brief.')
   expect(kept).not.toContain('a fact')
 
   // Pressing the lit Jellyfish stops sharing: Inactive, OpenViking still off, Claude Code's own memory back.
   await band.press({ key: 'jellyfish' } as never)
+  expect(await denied({ tool: 'Read', file_path: '/home/.claude/projects/p/memory/peer-proof.md' })).toBe(false)
   expect(env.OPENVIKING_MEMORY_ENABLED).toBe('0')
   expect(await recalled()).toEqual(['kept'])
   expect((await $.prompt.section({ name: 'memory', text: 'how memory works' })).text).toBe('how memory works')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webinson/peer",
-  "version": "0.4.23",
+  "version": "0.4.24",
   "description": "Share chosen Claude Code and Codex threads with your team: who has agents running and on what.",
   "license": "MIT",
   "type": "module",