cc-claw 0.16.3 → 0.16.4

package/dist/cli.js

@@ -33,7 +33,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = true ? "0.16.3" : (() => {
+    VERSION = true ? "0.16.4" : (() => {
       try {
         return JSON.parse(readFileSync(join(process.cwd(), "package.json"), "utf-8")).version ?? "unknown";
       } catch {
@@ -5223,10 +5223,33 @@ function syncNativeCliFiles() {
     "## CRITICAL: Tool Usage Rules",
     "",
     "- Do NOT use native CLI memory/storage tools (save_memory, etc.) \u2014 they are backend-local and invisible to other backends",
-    "- Do NOT modify the database directly with SQL (no INSERT/UPDATE/DELETE) \u2014 use CC-Claw commands only",
     "- To save a memory: use /remember in Telegram, or tell the user to use it",
     "- To learn your full CLI: run `cc-claw --ai`",
     "- All state changes must go through the CC-Claw API layer for cross-backend persistence",
+    "",
+    "## \u26D4 DATABASE SAFETY BOUNDARY \u2014 ABSOLUTE PROHIBITION",
+    "",
+    "**NEVER access ~/.cc-claw/data/cc-claw.db directly. No exceptions. No excuses.**",
+    "",
+    "This means ALL of the following are FORBIDDEN:",
+    "- `sqlite3 ~/.cc-claw/data/cc-claw.db` \u2014 FORBIDDEN",
+    "- `sqlite3` with any path containing `cc-claw` \u2014 FORBIDDEN",
+    "- `.schema`, `.tables`, `.dump`, or any SQLite dot-command \u2014 FORBIDDEN",
+    "- `SELECT`, `INSERT`, `UPDATE`, `DELETE` queries \u2014 ALL FORBIDDEN",
+    "- Reading the database file with `cat`, `hexdump`, `xxd`, `strings` \u2014 FORBIDDEN",
+    "- ANY tool or command that opens, reads, queries, or inspects this database \u2014 FORBIDDEN",
+    "",
+    "**Why:** The database is a live, WAL-mode SQLite file shared with the running daemon. Direct access risks corruption, lock contention, and data inconsistency. You are an agent RUNNING INSIDE CC-Claw \u2014 never touch the infrastructure that runs you.",
+    "",
+    "**What to use instead:**",
+    "- `cc-claw status` \u2014 system status",
+    "- `cc-claw --json status` \u2014 machine-readable status",
+    "- `cc-claw cron list` \u2014 scheduled jobs",
+    "- `cc-claw claude list` / `cc-claw codex list` / `cc-claw gemini list` \u2014 credential slots",
+    "- `cc-claw --ai` \u2014 full CLI reference",
+    "- Ask the user to check via Telegram commands if needed",
+    "",
+    "**Violation of this rule is a critical safety failure.**",
     ""
   ].join("\n");
   const ccClawPath = join6(IDENTITY_PATH, "CC-CLAW.md");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-claw",
-  "version": "0.16.3",
+  "version": "0.16.4",
   "description": "CC-Claw: Personal AI assistant on Telegram — multi-backend (Claude, Gemini, Codex, Cursor), sub-agent orchestration, MCP management",
   "type": "module",
   "main": "dist/cli.js",