@wipcomputer/wip-ldm-os 0.4.73-alpha.26 → 0.4.73-alpha.27

package/LICENSE

@@ -0,0 +1,52 @@
+Dual License: MIT + AGPLv3
+
+Copyright (c) 2026 WIP Computer, Inc.
+
+
+1. MIT License (local and personal use)
+---------------------------------------
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+2. GNU Affero General Public License v3.0 (commercial and cloud use)
+--------------------------------------------------------------------
+
+If you run this software as part of a hosted service, cloud platform,
+marketplace listing, or any network-accessible offering for commercial
+purposes, the AGPLv3 terms apply. You must either:
+
+  a) Release your complete source code under AGPLv3, or
+  b) Obtain a commercial license.
+
+This program is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published
+by the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+This program is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+
+AGPLv3 for personal use is free. Commercial licenses available.

package/bin/ldm.js

@@ -20,7 +20,7 @@
  *   ldm --version         Show version
  */
 
-import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, cpSync, chmodSync, unlinkSync, readlinkSync, renameSync, statSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, cpSync, chmodSync, unlinkSync, readlinkSync, renameSync, statSync, lstatSync, symlinkSync } from 'node:fs';
 import { join, basename, resolve, dirname } from 'node:path';
 import { execSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
@@ -350,7 +350,7 @@ function cleanStaleHooks() {
 
 function syncBootHook() {
   const srcBoot = join(__dirname, '..', 'src', 'boot', 'boot-hook.mjs');
-  const destBoot = join(LDM_ROOT, 'shared', 'boot', 'boot-hook.mjs');
+  const destBoot = join(LDM_ROOT, 'library', 'boot', 'boot-hook.mjs');
 
   if (!existsSync(srcBoot)) return false;
 
@@ -368,6 +368,84 @@ function syncBootHook() {
   return false;
 }
 
+// ── Inbox check hook sync ──
+//
+// Deploys src/hooks/inbox-check-hook.mjs to ~/.ldm/library/hooks/ and
+// wires it into ~/.claude/settings.json as a UserPromptSubmit hook so
+// that pending bridge messages in ~/.ldm/messages/ are surfaced as
+// additionalContext before CC responds to each user prompt.
+//
+// Closes the loop between lesa-bridge fire-and-forget sends and
+// CC-side message delivery. Without this hook, Claude Code only sees
+// bridge messages when it explicitly calls lesa_check_inbox, which
+// requires manual discipline and loses messages in practice.
+//
+// Idempotent: subsequent installs update the file only if its contents
+// changed, and only add the settings.json entry if it isn't already
+// wired to the exact same command path.
+//
+// See:
+//   ai/product/plans-prds/bridge/2026-04-06--cc-mini--bridge-master-product-plan.md
+//   ai/product/bugs/bridge/2026-04-06--cc-mini--bridge-async-inbox-plan.md
+//   ai/product/bugs/bridge/2026-04-10--cc-mini--bridge-reply-addressing-mismatch.md
+function syncInboxCheckHook() {
+  const srcHook = join(__dirname, '..', 'src', 'hooks', 'inbox-check-hook.mjs');
+  const destHook = join(LDM_ROOT, 'library', 'hooks', 'inbox-check-hook.mjs');
+  let changed = false;
+
+  if (!existsSync(srcHook)) return false;
+
+  // 1. File deploy: copy src/hooks/inbox-check-hook.mjs to ~/.ldm/library/hooks/
+  try {
+    const srcContent = readFileSync(srcHook, 'utf8');
+    let destContent = '';
+    try { destContent = readFileSync(destHook, 'utf8'); } catch {}
+
+    if (srcContent !== destContent) {
+      mkdirSync(dirname(destHook), { recursive: true });
+      writeFileSync(destHook, srcContent);
+      changed = true;
+    }
+  } catch {
+    return false;
+  }
+
+  // 2. Settings.json patch: wire the hook into hooks.UserPromptSubmit if absent.
+  const settingsPath = join(HOME, '.claude', 'settings.json');
+  if (!existsSync(settingsPath)) return changed;
+
+  try {
+    const raw = readFileSync(settingsPath, 'utf8');
+    const settings = JSON.parse(raw);
+    if (!settings.hooks) settings.hooks = {};
+    if (!settings.hooks.UserPromptSubmit) settings.hooks.UserPromptSubmit = [];
+
+    const hookCommand = `node ${destHook}`;
+    const alreadyWired = settings.hooks.UserPromptSubmit.some(group =>
+      Array.isArray(group.hooks) &&
+      group.hooks.some(h => h.type === 'command' && h.command === hookCommand)
+    );
+
+    if (!alreadyWired) {
+      settings.hooks.UserPromptSubmit.push({
+        hooks: [{
+          type: 'command',
+          command: hookCommand,
+          timeout: 5,
+        }],
+      });
+      writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+      changed = true;
+    }
+  } catch {
+    // Settings file malformed or unreadable. File deploy still succeeded
+    // if changed was true; leave settings.json untouched and let the user
+    // see the file deploy message without the wire-up.
+  }
+
+  return changed;
+}
+
 // ── Catalog helpers ──
 
 function loadCatalog() {
@@ -626,17 +704,58 @@ function checkBackupHealth() {
 // After `npm install -g`, the updated files live at the npm package location but
 // never get copied to ~/.ldm/extensions/lesa-bridge/dist/. This function fixes that.
 
+function deployRules() {
+  const rulesSrc = join(__dirname, '..', 'shared', 'rules');
+  const rulesDest = join(LDM_ROOT, 'library', 'rules');
+  if (!existsSync(rulesSrc)) return;
+  mkdirSync(rulesDest, { recursive: true });
+  let rulesCount = 0;
+  for (const file of readdirSync(rulesSrc)) {
+    if (!file.endsWith('.md')) continue;
+    cpSync(join(rulesSrc, file), join(rulesDest, file));
+    rulesCount++;
+  }
+  if (rulesCount > 0) {
+    console.log(`  + ${rulesCount} shared rules deployed to ~/.ldm/library/rules/`);
+    // Deploy to Claude Code harness (~/.claude/rules/)
+    const claudeRules = join(HOME, '.claude', 'rules');
+    if (existsSync(join(HOME, '.claude'))) {
+      mkdirSync(claudeRules, { recursive: true });
+      for (const file of readdirSync(rulesDest)) {
+        if (!file.endsWith('.md')) continue;
+        cpSync(join(rulesDest, file), join(claudeRules, file));
+      }
+      console.log(`  + rules deployed to ~/.claude/rules/`);
+    }
+    // Deploy to OpenClaw harness (~/.openclaw/workspace/DEV-RULES.md)
+    const ocWorkspace = join(HOME, '.openclaw', 'workspace');
+    if (existsSync(ocWorkspace)) {
+      let combined = '# Dev Rules (deployed by ldm install)\n\n';
+      combined += '> Do not edit this file. It is regenerated by `ldm install`.\n';
+      combined += '> Source: ~/.ldm/library/rules/\n\n';
+      for (const file of readdirSync(rulesDest).sort()) {
+        if (!file.endsWith('.md')) continue;
+        combined += readFileSync(join(rulesDest, file), 'utf8') + '\n\n---\n\n';
+      }
+      writeFileSync(join(ocWorkspace, 'DEV-RULES.md'), combined);
+      console.log(`  + rules deployed to ~/.openclaw/workspace/DEV-RULES.md`);
+    }
+  }
+}
+
 function deployBridge() {
   const ldmBridgeDir = join(LDM_EXTENSIONS, 'lesa-bridge');
   const ocBridgeDir = join(HOME, '.openclaw', 'extensions', 'lesa-bridge');
 
   // Deploy targets: LDM path (canonical) and OpenClaw path (where the plugin loads)
+  // Create dirs if missing so first-time deploy works (don't skip with filter)
   const targets = [
     { dir: ldmBridgeDir, label: '~/.ldm/extensions/lesa-bridge/dist/' },
     { dir: ocBridgeDir, label: '~/.openclaw/extensions/lesa-bridge/dist/' },
-  ].filter(t => existsSync(t.dir)); // Only deploy if the extension dir exists
-
-  if (targets.length === 0) return 0;
+  ];
+  for (const t of targets) {
+    if (!existsSync(t.dir)) mkdirSync(t.dir, { recursive: true });
+  }
 
   // Find the npm package bridge files. Try require.resolve first, fall back to known path.
   let bridgeSrc = '';
@@ -767,10 +886,10 @@ async function cmdInit() {
     join(LDM_ROOT, 'state'),
     join(LDM_ROOT, 'sessions'),
     join(LDM_ROOT, 'messages'),
-    join(LDM_ROOT, 'shared', 'boot'),
-    join(LDM_ROOT, 'shared', 'cron'),
-    join(LDM_ROOT, 'shared', 'rules'),
-    join(LDM_ROOT, 'shared', 'prompts'),
+    join(LDM_ROOT, 'library', 'boot'),
+    join(LDM_ROOT, 'library', 'cron'),
+    join(LDM_ROOT, 'library', 'rules'),
+    join(LDM_ROOT, 'library', 'prompts'),
     join(LDM_ROOT, 'hooks'),
   ];
 
@@ -944,68 +1063,29 @@ async function cmdInit() {
   // Deploy all scripts from scripts/ to ~/.ldm/bin/ (#119)
   deployScripts();
 
-  // Deploy shared rules to ~/.ldm/shared/rules/ and to harnesses
-  const rulesSrc = join(__dirname, '..', 'shared', 'rules');
-  const rulesDest = join(LDM_ROOT, 'shared', 'rules');
-  if (existsSync(rulesSrc)) {
-    mkdirSync(rulesDest, { recursive: true });
-    let rulesCount = 0;
-    for (const file of readdirSync(rulesSrc)) {
-      if (!file.endsWith('.md')) continue;
-      cpSync(join(rulesSrc, file), join(rulesDest, file));
-      rulesCount++;
-    }
-    if (rulesCount > 0) {
-      console.log(`  + ${rulesCount} shared rules deployed to ~/.ldm/shared/rules/`);
-
-      // Deploy to Claude Code harness (~/.claude/rules/)
-      const claudeRules = join(HOME, '.claude', 'rules');
-      if (existsSync(join(HOME, '.claude'))) {
-        mkdirSync(claudeRules, { recursive: true });
-        for (const file of readdirSync(rulesDest)) {
-          if (!file.endsWith('.md')) continue;
-          cpSync(join(rulesDest, file), join(claudeRules, file));
-        }
-        console.log(`  + rules deployed to ~/.claude/rules/`);
-      }
-
-      // Deploy to OpenClaw harness (~/.openclaw/workspace/DEV-RULES.md)
-      const ocWorkspace = join(HOME, '.openclaw', 'workspace');
-      if (existsSync(ocWorkspace)) {
-        let combined = '# Dev Rules (deployed by ldm install)\n\n';
-        combined += '> Do not edit this file. It is regenerated by `ldm install`.\n';
-        combined += '> Source: ~/.ldm/shared/rules/\n\n';
-        for (const file of readdirSync(rulesDest).sort()) {
-          if (!file.endsWith('.md')) continue;
-          combined += readFileSync(join(rulesDest, file), 'utf8') + '\n\n---\n\n';
-        }
-        writeFileSync(join(ocWorkspace, 'DEV-RULES.md'), combined);
-        console.log(`  + rules deployed to ~/.openclaw/workspace/DEV-RULES.md`);
-      }
-    }
-  }
+  deployRules();
 
-  // Deploy boot-config.json to ~/.ldm/shared/boot/
+  // Deploy boot-config.json to ~/.ldm/library/boot/
   const bootSrc = join(__dirname, '..', 'shared', 'boot');
-  const bootDest = join(LDM_ROOT, 'shared', 'boot');
+  const bootDest = join(LDM_ROOT, 'library', 'boot');
   if (existsSync(bootSrc)) {
     mkdirSync(bootDest, { recursive: true });
     const bootConfig = join(bootSrc, 'boot-config.json');
     if (existsSync(bootConfig)) {
       cpSync(bootConfig, join(bootDest, 'boot-config.json'));
-      console.log(`  + boot-config.json deployed to ~/.ldm/shared/boot/`);
+      console.log(`  + boot-config.json deployed to ~/.ldm/library/boot/`);
     }
   }
 
-  // Deploy Level 1 CLAUDE.md template to ~/.claude/CLAUDE.md
-  const claudeMdTemplate = join(__dirname, '..', 'shared', 'templates', 'claude-md-level1.md');
-  const claudeMdDest = join(HOME, '.claude', 'CLAUDE.md');
-  if (existsSync(claudeMdTemplate) && existsSync(join(HOME, '.claude'))) {
-    cpSync(claudeMdTemplate, claudeMdDest);
-    console.log(`  + Level 1 CLAUDE.md deployed to ~/.claude/CLAUDE.md`);
-  }
+  // CLAUDE.md files are NEVER deployed by the installer.
+  // They are git-tracked files in their respective repos:
+  //   ~/.claude/CLAUDE.md           ... wipcomputer-ldmos-wipcomputerinc-dot-claude-private
+  //   ~/wipcomputerinc/CLAUDE.md    ... wipcomputerinc repo
+  //   ~/.openclaw/CLAUDE.md         ... openclaw repo
+  // Changes go through branches and PRs like any other file.
+  // See: 2026-03-27--cc-mini--single-source-of-truth-reversed.md
 
-  // Deploy shared templates to workspace settings/templates/
+  // Deploy shared templates to workspace library/templates/
   const templatesSrc = join(__dirname, '..', 'shared', 'templates');
   if (existsSync(templatesSrc)) {
     // Read workspace path from ~/.ldm/config.json
@@ -1015,7 +1095,7 @@ async function cmdInit() {
       workspacePath = (ldmConfig.workspace || '').replace('~', HOME);
     } catch {}
     if (workspacePath && existsSync(workspacePath)) {
-      const templatesDest = join(workspacePath, 'settings', 'templates');
+      const templatesDest = join(workspacePath, 'library', 'templates');
       mkdirSync(templatesDest, { recursive: true });
       let templatesCount = 0;
       for (const file of readdirSync(templatesSrc)) {
@@ -1029,9 +1109,9 @@ async function cmdInit() {
     }
   }
 
-  // Deploy shared prompts to ~/.ldm/shared/prompts/
+  // Deploy shared prompts to ~/.ldm/library/prompts/
   const promptsSrc = join(__dirname, '..', 'shared', 'prompts');
-  const promptsDest = join(LDM_ROOT, 'shared', 'prompts');
+  const promptsDest = join(LDM_ROOT, 'library', 'prompts');
   if (existsSync(promptsSrc)) {
     mkdirSync(promptsDest, { recursive: true });
     let promptsCount = 0;
@@ -1041,7 +1121,33 @@ async function cmdInit() {
       promptsCount++;
     }
     if (promptsCount > 0) {
-      console.log(`  + ${promptsCount} shared prompts deployed to ~/.ldm/shared/prompts/`);
+      console.log(`  + ${promptsCount} shared prompts deployed to ~/.ldm/library/prompts/`);
+    }
+  }
+
+  // Backward-compat symlink: ~/.ldm/shared -> ~/.ldm/library
+  // Anything still referencing shared/ will follow the symlink
+  {
+    const sharedPath = join(LDM_ROOT, 'shared');
+    const libraryPath = join(LDM_ROOT, 'library');
+    try {
+      const stat = lstatSync(sharedPath);
+      if (stat.isSymbolicLink()) {
+        // Already a symlink, update target if needed
+        const target = readlinkSync(sharedPath);
+        if (target !== libraryPath) {
+          unlinkSync(sharedPath);
+          symlinkSync(libraryPath, sharedPath);
+        }
+      } else if (stat.isDirectory()) {
+        // shared/ is a real directory (pre-rename state). Don't touch it.
+        // The migration will handle this in a dedicated session.
+      }
+    } catch {
+      // shared/ doesn't exist. Create symlink.
+      try {
+        symlinkSync(libraryPath, sharedPath);
+      } catch {}
     }
   }
 
@@ -1604,9 +1710,10 @@ async function cmdInstallCatalog() {
   // in the extension directories. This copies them to both LDM and OpenClaw targets.
   deployBridge();
 
-  // Deploy scripts and docs on every install so fixes land without re-init
+  // Deploy scripts, docs, and rules on every install so fixes land without re-init
   deployScripts();
   deployDocs();
+  deployRules();
 
   // Check backup configuration
   checkBackupHealth();
@@ -2380,6 +2487,13 @@ async function cmdInstallCatalog() {
     ok('Boot hook updated (sessions, messages, updates now active)');
   }
 
+  // Sync inbox-check hook: UserPromptSubmit hook that surfaces pending
+  // bridge messages into CC context on every prompt. Closes the gap
+  // between lesa-bridge writes and CC delivery.
+  if (syncInboxCheckHook()) {
+    ok('Inbox-check hook updated (bridge messages surface automatically)');
+  }
+
   // Deploy git pre-commit hook on every install (not just init)
   const hooksDir = join(LDM_ROOT, 'hooks');
   const preCommitDest = join(hooksDir, 'pre-commit');

package/dist/bridge/{chunk-6TOUTUOG.js → chunk-7NH6JBIO.js}

@@ -146,7 +146,7 @@ function refreshSessionIdentity() {
 function parseTarget(to) {
   if (to === "*") return { agent: "*", session: "*" };
   const colonIdx = to.indexOf(":");
-  if (colonIdx === -1) return { agent: to, session: "default" };
+  if (colonIdx === -1) return { agent: to, session: "*" };
   return { agent: to.slice(0, colonIdx), session: to.slice(colonIdx + 1) };
 }
 function messageMatchesSession(msgTo, agentId, sessionName) {

package/dist/bridge/cli.js

@@ -8,7 +8,7 @@ import {
   searchConversations,
   searchWorkspace,
   sendMessage
-} from "./chunk-6TOUTUOG.js";
+} from "./chunk-7NH6JBIO.js";
 import "./chunk-3RG5ZIWI.js";
 
 // cli.ts

package/dist/bridge/core.js

@@ -24,7 +24,7 @@ import {
   sendLdmMessage,
   sendMessage,
   setSessionIdentity
-} from "./chunk-6TOUTUOG.js";
+} from "./chunk-7NH6JBIO.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   LDM_ROOT,

package/dist/bridge/mcp-server.js

@@ -15,7 +15,7 @@ import {
   sendLdmMessage,
   sendMessage,
   setSessionIdentity
-} from "./chunk-6TOUTUOG.js";
+} from "./chunk-7NH6JBIO.js";
 import {
   __require
 } from "./chunk-3RG5ZIWI.js";

package/lib/deploy.mjs

@@ -537,6 +537,27 @@ function safeDeployDir(repoPath, destDir, name) {
 function resolveOcPluginName(repoPath, toolName) {
   // OpenClaw matches plugins by directory name, not plugin id.
   // Check openclaw.json for existing references to this plugin.
+/**
+ * Update tools.allow in openclaw.json to include a newly deployed plugin.
+ * OpenClaw 2026.4.8+ enforces tools.allow as an exclusive allowlist.
+ * Without this, newly installed plugins are blocked from running.
+ */
+function updateToolsAllow(pluginName) {
+  const ocConfigPath = join(OC_ROOT, 'openclaw.json');
+  if (!existsSync(ocConfigPath)) return;
+  try {
+    const raw = readFileSync(ocConfigPath, 'utf8');
+    const config = JSON.parse(raw);
+    if (!config.tools?.allow || !Array.isArray(config.tools.allow)) return;
+    if (config.tools.allow.includes(pluginName)) return;
+    config.tools.allow.push(pluginName);
+    writeFileSync(ocConfigPath, JSON.stringify(config, null, 2) + '\n');
+    log(`Added "${pluginName}" to openclaw.json tools.allow`);
+  } catch (e) {
+    log(`Warning: failed to update tools.allow for ${pluginName}: ${e.message}`);
+  }
+}
+
   const ocConfigPath = join(OC_ROOT, 'openclaw.json');
   const ocConfig = readJSON(ocConfigPath);
   if (!ocConfig?.extensions) return toolName;
@@ -1072,6 +1093,8 @@ export function installSingleTool(toolPath) {
       installed++;
       registryInfo.ldmPath = join(LDM_EXTENSIONS, toolName);
       registryInfo.ocPath = join(OC_EXTENSIONS, toolName);
+      // Update tools.allow in openclaw.json so OC 2026.4.8+ doesn't block the plugin
+      updateToolsAllow(toolName);
     }
   } else if (interfaces.mcp) {
     const extName = basename(toolPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.73-alpha.26",
+  "version": "0.4.73-alpha.27",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {

package/shared/docs/README.md.tmpl

@@ -6,7 +6,7 @@ Updates come from two sources:
 - **config.json** ... when you change your org settings, the "Your System" sections regenerate
 - **System hooks** ... when tools are installed, updated, or reconfigured, the relevant docs update automatically
 
-If something is wrong, update `settings/config.json` or run `ldm install`. The docs will follow.
+If something is wrong, update `~/.ldm/config.json` or run `ldm install`. The docs will follow.
 
 ## What's Here
 
@@ -32,4 +32,4 @@ Each doc has two sections:
 1. **Universal** ... how the feature works for everyone (top of file)
 2. **Your System** ... your specific configuration (bottom, after the `---` separator)
 
-Universal content comes from the LDM OS repo. "Your System" content is generated from your `settings/config.json`.
+Universal content comes from the LDM OS repo. "Your System" content is generated from your `~/.ldm/config.json`.

package/shared/docs/how-releases-work.md.tmpl

@@ -23,8 +23,10 @@ cd .worktrees/repo--my-prefix--feature/
 git push -u origin my-prefix/feature
 gh pr create && gh pr merge --merge
 
-# 3. Alpha release
+# 3. ALWAYS pull to main after merge (not optional)
 cd /path/to/repo && git checkout main && git pull
+
+# 4. Alpha release
 wip-release alpha --notes="what changed"
 
 # 4. Install and test

package/shared/docs/how-worktrees-work.md.tmpl

@@ -10,8 +10,8 @@ A git worktree is a second checkout of the same repo. Same history, same remote,
 
 ```
 my-repo/                         <- main branch (read-only)
-_worktrees/my-repo--fix-bug/     <- your worktree (editable)
-_worktrees/my-repo--new-feature/ <- someone else's worktree
+.worktrees/my-repo--fix-bug/     <- your worktree (editable)
+.worktrees/my-repo--new-feature/ <- someone else's worktree
 ```
 
 All share the same `.git` database. Commits in any worktree are visible to all. But each has its own branch and files on disk.
@@ -23,22 +23,27 @@ cd my-repo
 ldm worktree add my-prefix/fix-bug
 ```
 
-This creates `_worktrees/my-repo--my-prefix--fix-bug/`.
+This creates `.worktrees/my-repo--my-prefix--fix-bug/`.
 
 ## How to Work
 
 Edit files in the worktree directory. Commit, push, PR, merge as normal:
 
 ```bash
-cd _worktrees/my-repo--my-prefix--fix-bug/
+cd .worktrees/my-repo--my-prefix--fix-bug/
 # edit, then:
 git add <files>
 git commit -m "description"
 git push -u origin my-prefix/fix-bug
 gh pr create
 gh pr merge --merge --delete-branch
+
+# CRITICAL: pull to main immediately after merge
+cd /path/to/repo && git checkout main && git pull
 ```
 
+**Always pull to main after merging a PR.** If you don't, the main working tree is stale and files won't show up. This is not optional. Every merge, every time.
+
 ## How to Clean Up
 
 ```bash
@@ -65,13 +70,13 @@ Switching branches changes every file in the directory. If another process (an a
 
 ## Your System
 
-**Worktree location:** `~/wipcomputerinc/repos/_worktrees/`
+**Worktree location:** `~/wipcomputerinc/repos/.worktrees/`
 
 **Branch prefixes:**
 - `cc-mini/` ... Claude Code on Mac mini
 - `cc-air/` ... Claude Code on MacBook Air
 - `lesa-mini/` ... Lesa on Mac mini
 
-**Guard:** The branch guard warns if you create a worktree outside `_worktrees/`. Suggests `ldm worktree add` instead.
+**Guard:** The branch guard warns if you create a worktree outside `.worktrees/`. Suggests `ldm worktree add` instead.
 
-**Auto-cleanup:** `wip-release` prunes merged worktrees from `_worktrees/` after every release.
+**Auto-cleanup:** `wip-release` prunes merged worktrees from `.worktrees/` after every release.

package/shared/templates/claude-md-level1.md

@@ -5,9 +5,13 @@
 Never use em dashes. Use periods, colons, semicolons, or ellipsis (...) instead.
 Timezone: PST (Pacific), 24-hour clock. Parker is in Los Angeles.
 
+## Don't Hedge
+
+Never ask "should I stop?", "is this too much?", "what should we do now?", or "do you want me to continue?". If you have work to do, do it. If you're stuck, say what you're stuck on specifically. Don't express existential doubt about the task. Don't ask permission to keep working. Don't narrate your own uncertainty. Just work.
+
 ## Co-Authors on Every Commit
 
-Read co-author lines from `~/wipcomputerinc/settings/config.json` coAuthors field. All contributors listed on every commit. No exceptions.
+Read co-author lines from `~/.ldm/config.json` coAuthors field. All contributors listed on every commit. No exceptions.
 
 ## 1Password CLI: Always Use Service Account Token
 
@@ -30,8 +34,8 @@ Before reaching for any external service or workaround: search memory first. Use
 
 ## Dev Conventions
 
-For git workflow, releases, worktrees, and repo conventions: read `~/wipcomputerinc/settings/docs/` on demand when doing repo work. Key docs:
+For git workflow, releases, worktrees, and repo conventions: read `~/wipcomputerinc/library/documentation/` on demand when doing repo work. Key docs:
 - `how-worktrees-work.md` ... git worktrees, the convention, commands
 - `how-releases-work.md` ... the full release pipeline
 - `system-directories.md` ... what lives where
-- Also read `~/wipcomputerinc/settings/templates/dev-guide-private.md` for org-specific conventions
+- Also read `~/.ldm/shared/dev-guide-wipcomputerinc.md` for org-specific conventions

package/src/bridge/core.ts

@@ -258,14 +258,18 @@ export function refreshSessionIdentity(): void {
 function parseTarget(to: string): { agent: string; session: string } {
   if (to === "*") return { agent: "*", session: "*" };
   const colonIdx = to.indexOf(":");
-  if (colonIdx === -1) return { agent: to, session: "default" };
+  // Agent-only address (no colon, e.g. "cc-mini") is a broadcast to all
+  // sessions of that agent. Previously this defaulted to session "default"
+  // which silently dropped messages for any session with a non-default name.
+  // See: ai/product/bugs/bridge/2026-04-10--cc-mini--bridge-reply-addressing-mismatch.md
+  if (colonIdx === -1) return { agent: to, session: "*" };
   return { agent: to.slice(0, colonIdx), session: to.slice(colonIdx + 1) };
 }
 
 /**
  * Check if a message's "to" field matches this session.
  * Matches: exact agent + session, agent broadcast (agent:*),
- *          global broadcast (*), or agent with default session.
+ *          global broadcast (*), or agent-only address (no session qualifier).
  */
 function messageMatchesSession(msgTo: string, agentId: string, sessionName: string): boolean {
   // Global broadcast
@@ -276,7 +280,7 @@ function messageMatchesSession(msgTo: string, agentId: string, sessionName: stri
   // Different agent entirely
   if (target.agent !== "*" && target.agent !== agentId) return false;
 
-  // Agent broadcast (agent:*)
+  // Agent broadcast (agent:*) or agent-only address
   if (target.session === "*") return true;
 
   // Exact session match

package/src/hosted-mcp/ecosystem.config.cjs

@@ -1 +1,14 @@
-module.exports = { apps: [{ name: "mcp-server", script: "server.mjs", env: { XAI_API_KEY: "xai-49EPIbxGkCGIUzoUCuG8Fa63BTHxrNSkQ6uyV7zXI3vjJ1pAzD6gKVT6WGNsFZoABjI2DBCGkjd8OAgk" } }] };
+// PM2 config for the hosted MCP server.
+// API keys are resolved from 1Password at runtime via the op-secrets plugin.
+// NEVER hardcode keys here. Use environment variables set by the deploy process,
+// or read from 1Password at server startup.
+module.exports = {
+  apps: [{
+    name: "mcp-server",
+    script: "server.mjs",
+    env: {
+      // XAI_API_KEY: resolved from 1Password at runtime (item: "x.ai - wip-computer-beta", field: "credential")
+      // DATABASE_URL: set in .env (gitignored)
+    }
+  }]
+};