claude-recall 0.20.11 → 0.20.13

package/.claude/skills/auto-corrections/SKILL.md

@@ -8,14 +8,24 @@ source: claude-recall
 
 # Corrections
 
-Auto-generated from 4 memories. Last updated: 2026-04-06.
+Auto-generated from 14 memories. Last updated: 2026-04-09.
 
 ## Rules
 
 - CORRECTION: Memory with complex metadata
 - CORRECTION: Memory with complex metadata
 - CORRECTION: Memory with complex metadata
+- CORRECTION: Memory with complex metadata
+- CORRECTION: Memory with complex metadata
+- CORRECTION: Memory with complex metadata
+- CORRECTION: Never delete claude-recall memories without asking the user first. Show what you plan to delete and get explicit approval before running delete_memory.
+- CORRECTION: Memory with complex metadata
+- CORRECTION: wait until next system performnce review
+- CORRECTION: [PreCompact] i just want you tellme what you observe claude recall has done lately
+- CORRECTION: i just want you tellme what you observe claude recall has done lately
 - CORRECTION: Use true agentic design where agents decide when to run, not cron jobs
+- CORRECTION: [PreCompact] delete without asking first
+- CORRECTION: delete without asking first
 
 ---
 *Auto-generated by Claude Recall. Regenerate: `npx claude-recall skills generate`*

package/.claude/skills/auto-corrections/manifest.json

@@ -1,12 +1,22 @@
 {
   "topicId": "corrections",
-  "sourceHash": "a6c78344ee4e1fb49b692fc1361cc992b2262c5e55ac59db8242e7e8ecbf07c0",
-  "memoryCount": 4,
-  "generatedAt": "2026-04-06T18:39:00.487Z",
+  "sourceHash": "c32cc0fe5f8e375075a893c5c677945df13798f9aeda6763e5ee0a4b8de91a47",
+  "memoryCount": 14,
+  "generatedAt": "2026-04-09T20:39:45.990Z",
   "memoryKeys": [
+    "memory_1775767185973_5h07cll2t",
+    "memory_1775766122931_keod4qo79",
+    "memory_1775766107107_jh925r7qo",
+    "memory_1775766089878_07ouaa5vy",
+    "memory_1775766072071_snw3h6dke",
+    "memory_1775511843079_fzzjymikj",
+    "memory_1775511566528_2zqlbeiyy",
     "memory_1775500740471_dp5hmdxaf",
-    "memory_1775499328353_2ade6746o",
-    "memory_1775496241485_1yyc5ht88",
-    "hook_correction_1775498361284_9amjuw4le"
+    "hook_correction_1775554504739_geen26iio",
+    "hook_correction_1775543706749_u29qqfmdd",
+    "hook_correction_1775511596163_oj20xa10q",
+    "hook_correction_1775498361284_9amjuw4le",
+    "hook_correction_1775543706706_eqk8p0lm1",
+    "hook_correction_1775511572913_yq1y9tvlo"
   ]
 }

package/.claude/skills/auto-failure-lessons/SKILL.md

@@ -8,13 +8,44 @@ source: claude-recall
 
 # Failure Lessons
 
-Auto-generated from 40 memories. Last updated: 2026-04-06.
+Auto-generated from 117 memories. Last updated: 2026-04-09.
 
 ## Rules
 
 - Check command syntax, file paths, and prerequisites before running
 - Check inputs and prerequisites before retrying
+- Multiple ssh tunnels + python processes writing same output file causes interleaved corruption and duplicate events. Root cause: nohup orphans from previous session not cleaned before restart.
+- OpenClaw gateway websocket connection fails from root user context in sandbox; this is a known pairing regression. CLI cannot communicate with gateway from inside the container.
 - SQLite query syntax error: LIKE clause requires single quotes around string literal, not double quotes
+- Fault injection into mock-eiap/world-state.json on host will not be visible to sandbox agents until collect.sh runs and pushes updated signals.json into the sandbox. Verify data propagation by checking signals.json inside sandbox, not just host files.
+- Session extraction prompt design flaw: fix pairing relies on string similarity between commands, but problem fixes often look structurally different from the failing command (e.g. bash script vs echo piped to bash); causes failure→fix patterns to not be recognized
+- nemoclaw's SSRF guard rejects all private/loopback IPs — cannot use ericai-on-host locally without infrastructure patching at three layers; prefer public HTTPS API endpoints instead.
+- Migrating a 'messy and complicated application' as-is risks baking in workarounds, race conditions (e.g., two-writer reload-on-tick), and stale cache patterns (e.g., 5s cache) that no longer make sense in the new architecture — pause to identify and remove technical debt before migration
+- remediate-cell.js still uses legacy direct file mutation (path.join to mock-eiap/world-state.json). When run in sandbox, this fails — must refactor to call worldState.save() + strategic logging at caller boundaries, same pattern as remediate-backhaul.js.
+- Missing shared tool files in sandbox caused SENTINEL's full chain to fail silently — always verify all tool dependencies (check-delta.js, post-comms.js, self-assess.js, update-run-state.js) are deployed before running agent cycles
+- When collect.sh fails with 'EIAP endpoint unreachable' inside sandbox, check if EIAP_URL env var is set. If empty, the script should auto-detect sandbox environment and default to http://host.openshell.internal:8090 instead of localhost.
+- Browser-SSO tokens are a fundamental impedance mismatch with headless workloads in K8s — do not attempt to make Kiro (browser-token-based auth) work in containerized environments; use API tokens or service accounts instead
+- Avoid: Command failed: openshell --help 2>&1 | grep -iE "gateway|stop|start|down" | head -15; echo ---gateway-list---; o... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: echo ---kill-everything---; pkill -f "stream-sessions.sh" 2>/dev/null; pkill -f "stream-watcher.p... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- sh -c "ls -la /sand... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: cd /home/ebiarao/.claude/projects/-home-ebiarao-repos-wsl-personal-projects-openclaw-autonomous-t... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: B64=$(base64 -w0 < agents/nka/scripts/remediate-backhaul.js); docker exec openshell-cluster-nemoc... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: git commit -m "$(cat <<'EOF'
+Event-driven agent cascade + direct EIAP polling — two breakthroughs... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- ls -la /sandbox/.op... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: cat /tmp/claude-1000/-home-ebiarao-repos-wsl-personal-projects-openclaw-autonomous-telco-agents/5... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: openshell sandbox list 2>/dev/null; curl -s http://localhost:3000/api/service-health 2>&1 → Instead: Check command syntax, file paths, and prerequisites before running
+- When agent tasks complete but downstream verifications report missing output files, check if required shared tools were uploaded during sandbox initialization — re-push missing files with 'docker exec ... kubectl cp' rather than restarting the sandbox.
+- Exit code 7 from Bash commands in this project context often indicates timing issues (services not fully up) or missing sandboxes during rebuild — retry after confirming 'openshell sandbox list' shows 'Ready' state.
+- Background command 'Verify services and cron message' failed with exit code 7
+- Background command 'Verify services and cron message' failed with exit code 7
+- Avoid: Command failed: openshell status 2>/dev/null | head -5; openshell sandbox list 2>/dev/null → Instead: Check command syntax, file paths, and prerequisites before running
+- SENTINEL verify task failed - collect.sh not running after rebuild (exit code 1)
+- When tool outputs succeed but dependent processes don't trigger, check for stale state like file offsets — trigger-watcher set initial offset from old pre-rebuild state, causing it to miss new entries after rebuild+resync
+- Avoid: Command failed: curl -s http://localhost:3000/api/service-health 2>&1; echo ""; docker exec openshell-cluster-nem... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: bash scripts/upgrade-sandbox.sh 2>&1 → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: echo "Waiting 2 min for next SENTINEL cron tick to fire with delivery:silent..." && sleep 120 && ... → Instead: Check command syntax, file paths, and prerequisites before running
+- Avoid: Command failed: kill $(pgrep -f "trigger-watcher.js") 2>/dev/null; sleep 1; rm -f artifacts/.trigger-watcher-offs... → Instead: Check command syntax, file paths, and prerequisites before running
 - Fix pairing in tool-outcome-watcher fails when the original failing command and the fix command have low string similarity (low Jaccard similarity). Pattern matching is insufficient; needs LLM reasoning about command intent.
 - Avoid: Command failed: kill $(pgrep -f "node.*webui/server.js") 2>/dev/null; sleep 1; cd /home/ebiarao/repos-wsl/persona... → Instead: Check command syntax, file paths, and prerequisites before running
 - Avoid: Command failed: ls artifacts/urgent-trigger-ORACLE.json 2>&1 → Instead: Check command syntax, file paths, and prerequisites before running
@@ -29,6 +60,45 @@ Auto-generated from 40 memories. Last updated: 2026-04-06.
 - Avoid: Command failed: npx jest tests/unit/failure-detectors.test.ts 2>&1 → Instead: Check command syntax, file paths, and prerequisites before running
 - SQLite query error: LIKE clause needs proper string literal syntax with single quotes in better-sqlite3
 - Node.js syntax error: multiline strings in -e flag not properly escaped; newlines break the command parsing
+- {"what_failed":"Bash command failed: sqlite3 ~/.claude-recall/claude-recall.db \"SELECT DISTINCT content FROM memories WHERE content LI...","why_failed":"Exit code 1","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Read failed","why_failed":"File content (17014 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File content (17014 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Grep failed","why_failed":"spawn /home/ebiarao/.nvm/versions/node/v20.19.3/lib/node_modules/@anthropic-ai/claude-code/vendor/ripgrep/x64-linux/rg ENOENT","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: spawn /home/ebiarao/.nvm/versions/node/v20.19.3/lib/node_modules/@anthropic-ai/claude-code/vendor/ripgrep/x64-linux/rg ENOENT","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Read failed","why_failed":"File content (17014 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File content (17014 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: tail -30 ~/.claude-recall/hook-logs/event-processor.log ~/.claude-recall/hook-logs/memory-stop.lo...","why_failed":"Exit code 1\ntail: option used in invalid context -- 3","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\ntail: option used in invalid context -- 3","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: npx claude-recall outcomes 2>&1","why_failed":"Exit code 1\nerror: unknown command 'outcomes'","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nerror: unknown command 'outcomes'","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- Read/ToolSearch hook errors in claude-recall indicate search_enforcer.py rule-load failures — check python3 syntax and MCP tool availability (mcp__claude-recall__mcp__claude-recall__load_rules must be registered).
+- Pre-tool-use hook errors (e.g., '[python3 search_enforcer.py]' load failures) indicate stale or misconfigured rule state. Call mcp__claude-recall__load_rules {} before retrying the tool to refresh rule context.
+- {"what_failed":"Read failed","why_failed":"File content (11705 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File content (11705 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- git mv may not fully track deletion of nested files — after moving directories, verify with git status that all expected deletes are staged; 'git mv mock-eiap/ sandbox/mock-eiap/' leaves orphaned nested files (data.js, world/build-ireland.js, world/config.js) that must be explicitly deleted
+- {"what_failed":"Bash command failed: echo ---kill-smoke-eiap---; pkill -f \"mock-eiap/server.js\" 2>/dev/null; sleep 1; echo ---try-even...","why_failed":"Exit code 144\n---kill-smoke-eiap---","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 144\n---kill-smoke-eiap---","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: openshell --help 2>&1 | grep -iE \"gateway|stop|start|down\" | head -15; echo ---gateway-list---; o...","why_failed":"Exit code 2\nGATEWAY COMMANDS\n  gateway:     Manage the gateway lifecycle\n  status:      Show gateway status and information\n  doctor:      Diagnose gateway issues\n  -g, --gateway <GATEWAY>\n        ...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 2\nGATEWAY COMMANDS\n  gateway:     Manage the gateway lifecycle\n  status:      Show gateway status and information\n  doctor:      Diagnose gateway issues\n  -g, --gateway <GATEWAY>\n        ...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: echo ---kill-everything---; pkill -f \"stream-sessions.sh\" 2>/dev/null; pkill -f \"stream-watcher.p...","why_failed":"Exit code 144\n---kill-everything---","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 144\n---kill-everything---","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- sh -c \"ls -la /sand...","why_failed":"Exit code 2\nls: cannot access '/sandbox/.openclaw-data/workspace/artifacts/rebuild-status.json': No such file or directory\ncat: /sandbox/.openclaw-data/workspace/artifacts/rebuild-status.json: No s...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 2\nls: cannot access '/sandbox/.openclaw-data/workspace/artifacts/rebuild-status.json': No such file or directory\ncat: /sandbox/.openclaw-data/workspace/artifacts/rebuild-status.json: No s...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: cd /home/ebiarao/.claude/projects/-home-ebiarao-repos-wsl-personal-projects-openclaw-autonomous-t...","why_failed":"Exit code 2\nls: cannot access 'project_open_remediate_cell_rewrite.md': No such file or directory\nproject_openclaw_egress_filter.md","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 2\nls: cannot access 'project_open_remediate_cell_rewrite.md': No such file or directory\nproject_openclaw_egress_filter.md","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: B64=$(base64 -w0 < agents/nka/scripts/remediate-backhaul.js); docker exec openshell-cluster-nemoc...","why_failed":"Exit code 2\nsh: 1: cannot create /sandbox/agents/nka/scripts/remediate-backhaul.js: Directory nonexistent\ncommand terminated with exit code 2","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 2\nsh: 1: cannot create /sandbox/agents/nka/scripts/remediate-backhaul.js: Directory nonexistent\ncommand terminated with exit code 2","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: git commit -m \"$(cat <<'EOF'\nEvent-driven agent cascade + direct EIAP polling — two breakthroughs...","why_failed":"Exit code 128\nerror: gpg failed to sign the data:\n[GNUPG:] KEY_CONSIDERED F3CE7255442A2E7886375262B810E846921AD84F 2\n[GNUPG:] BEGIN_SIGNING H10\n[GNUPG:] USERID_HINT B810E846921AD84F Raoul Biagioni ...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 128\nerror: gpg failed to sign the data:\n[GNUPG:] KEY_CONSIDERED F3CE7255442A2E7886375262B810E846921AD84F 2\n[GNUPG:] BEGIN_SIGNING H10\n[GNUPG:] USERID_HINT B810E846921AD84F Raoul Biagioni ...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- ls -la /sandbox/.op...","why_failed":"Exit code 1\nfile missing","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nfile missing","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: cat /tmp/claude-1000/-home-ebiarao-repos-wsl-personal-projects-openclaw-autonomous-telco-agents/5...","why_failed":"Exit code 7\n\u001b[1mNAME     \u001b[0m  \u001b[1mNAMESPACE\u001b[0m  \u001b[1mCREATED            \u001b[0m  \u001b[1mPHASE\u001b[0m\nnka-telco  openshell  2026-04-06 21:16:26  \u001b[32mReady\u001b[39m\n\u001b[1mNAME     \u001b[0m  \u001b[1mNAMESPACE\u001b[0m  \u001b[1mCRE...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 7\n\u001b[1mNAME     \u001b[0m  \u001b[1mNAMESPACE\u001b[0m  \u001b[1mCREATED            \u001b[0m  \u001b[1mPHASE\u001b[0m\nnka-telco  openshell  2026-04-06 21:16:26  \u001b[32mReady\u001b[39m\n\u001b[1mNAME     \u001b[0m  \u001b[1mNAMESPACE\u001b[0m  \u001b[1mCRE...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: openshell sandbox list 2>/dev/null; curl -s http://localhost:3000/api/service-health 2>&1","why_failed":"Exit code 7\nNo sandboxes found.","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 7\nNo sandboxes found.","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- bash -c 'echo $EIAP...","why_failed":"Exit code 1\n\n---\n[collect] fetching EIAP endpoints at 2026-04-06T20:58:54Z\ncommand terminated with exit code 1","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n\n---\n[collect] fetching EIAP endpoints at 2026-04-06T20:58:54Z\ncommand terminated with exit code 1","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: openshell status 2>/dev/null | head -5; openshell sandbox list 2>/dev/null","why_failed":"Exit code 1\n\u001b[1m\u001b[36mGateway Status\u001b[39m\u001b[0m\n\n  \u001b[2mStatus:\u001b[0m No gateway configured.\n\nDeploy a gateway with: \u001b[2mopenshell gateway start\u001b[0m","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n\u001b[1m\u001b[36mGateway Status\u001b[39m\u001b[0m\n\n  \u001b[2mStatus:\u001b[0m No gateway configured.\n\nDeploy a gateway with: \u001b[2mopenshell gateway start\u001b[0m","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Read failed","why_failed":"File content (12314 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File content (12314 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: B64=$(base64 -w0 < agents/shared/tools/post-comms.js) && ssh -q -o StrictHostKeyChecking=no -o Us...","why_failed":"Exit code 1","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Read failed","why_failed":"File does not exist. Note: your current working directory is /home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents.","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File does not exist. Note: your current working directory is /home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents.","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- tail -10 /sandbox/....","why_failed":"Exit code 1\nTraceback (most recent call last):\n  File \"<string>\", line 6, in <module>\n    d=json.loads(line)\n  File \"/home/ebiarao/miniconda3/lib/python3.13/json/__init__.py\", line 346, in loads\n  ...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nTraceback (most recent call last):\n  File \"<string>\", line 6, in <module>\n    d=json.loads(line)\n  File \"/home/ebiarao/miniconda3/lib/python3.13/json/__init__.py\", line 346, in loads\n  ...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: pgrep -af trigger-watcher; echo \"---\"; cat artifacts/trigger-log.jsonl 2>/dev/null || echo \"no tr...","why_failed":"Exit code 1\n3180787 node /home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents/scripts/trigger-watcher.js\n3233721 /bin/bash -c source /home/ebiarao/.claude/shell-snapshots/snap...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n3180787 node /home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents/scripts/trigger-watcher.js\n3233721 /bin/bash -c source /home/ebiarao/.claude/shell-snapshots/snap...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: cat artifacts/trigger-log.jsonl 2>/dev/null || echo \"(no triggers yet)\"; echo \"===\"; tail -5 arti...","why_failed":"Exit code 1\n(no triggers yet)\n===","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n(no triggers yet)\n===","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: pwd; ls agents/nka/scripts/collect.sh 2>/dev/null","why_failed":"Exit code 2\n/home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents/webui/client","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 2\n/home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents/webui/client","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: ls artifacts/ 2>/dev/null; mkdir -p artifacts && EIAP_URL=http://127.0.0.1:8090 bash agents/nka/s...","why_failed":"Exit code 127\nbash: agents/nka/scripts/collect.sh: No such file or directory","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 127\nbash: agents/nka/scripts/collect.sh: No such file or directory","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: cat artifacts/state.json","why_failed":"Exit code 1\ncat: artifacts/state.json: No such file or directory","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\ncat: artifacts/state.json: No such file or directory","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: sleep 3 && curl -s http://localhost:3000/api/service-health","why_failed":"Exit code 7","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 7","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: cd /home/ebiarao/repos-wsl/personal-projects/openclaw-autonomous-telco-agents && kill $(pgrep -f ...","why_failed":"Exit code 144","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 144","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: node -e \"\nconst fs = require('fs');\nconst wsFile = 'mock-eiap/world/world-state.json';\nconst ws =...","why_failed":"Exit code 1\nnode:fs:449\n    return binding.readFileUtf8(path, stringToFlags(options.flag));\n                   ^\n\nError: ENOENT: no such file or directory, open 'mock-eiap/world/world-state.json'\n ...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nnode:fs:449\n    return binding.readFileUtf8(path, stringToFlags(options.flag));\n                   ^\n\nError: ENOENT: no such file or directory, open 'mock-eiap/world/world-state.json'\n ...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: curl -s http://localhost:3000/api/service-health 2>&1; echo \"\"; docker exec openshell-cluster-nem...","why_failed":"Exit code 1\n{\"eiap\":true,\"dataStale\":false,\"signalsAge\":3,\"checkedAt\":\"2026-04-06T18:54:08.040Z\"}\nTraceback (most recent call last):\n  File \"<string>\", line 6, in <module>\n    print(f\"{j['name']:12...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n{\"eiap\":true,\"dataStale\":false,\"signalsAge\":3,\"checkedAt\":\"2026-04-06T18:54:08.040Z\"}\nTraceback (most recent call last):\n  File \"<string>\", line 6, in <module>\n    print(f\"{j['name']:12...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- bash -c 'openclaw c...","why_failed":"Exit code 1\nError: gateway closed (1006 abnormal closure (no close frame)): no close reason\nGateway target: ws://127.0.0.1:18789\nSource: local loopback\nConfig: /root/.openclaw/openclaw.json\nBind: l...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nError: gateway closed (1006 abnormal closure (no close frame)): no close reason\nGateway target: ws://127.0.0.1:18789\nSource: local loopback\nConfig: /root/.openclaw/openclaw.json\nBind: l...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- bash -c 'ps aux | g...","why_failed":"Exit code 1\nbash: line 1: ps: command not found\ncommand terminated with exit code 1","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nbash: line 1: ps: command not found\ncommand terminated with exit code 1","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- bash -c 'openclaw c...","why_failed":"Exit code 1\nError: gateway closed (1006 abnormal closure (no close frame)): no close reason\nGateway target: ws://127.0.0.1:18789\nSource: local loopback\nConfig: /root/.openclaw/openclaw.json\nBind: l...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nError: gateway closed (1006 abnormal closure (no close frame)): no close reason\nGateway target: ws://127.0.0.1:18789\nSource: local loopback\nConfig: /root/.openclaw/openclaw.json\nBind: l...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
+- {"what_failed":"Bash command failed: docker exec openshell-cluster-nemoclaw kubectl exec -n openshell nka-telco -- bash -c 'openclaw c...","why_failed":"Exit code 1\ncommand terminated with exit code 1","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\ncommand terminated with exit code 1","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
 - Fix pairing based on Jaccard string similarity between failing command and fix command is too weak when fixes look syntactically different from original commands (e.g. adding echo pipe vs original bash call); consider semantic matching or explicit fix linking
 - {"what_failed":"Bash command failed: bash scripts/upgrade-sandbox.sh 2>&1","why_failed":"Exit code 1\n\n\u001b[0;32m[upgrade]\u001b[0m ==========================================\n\u001b[0;32m[upgrade]\u001b[0m   NeMoClaw Sandbox Rebuild\n\u001b[0;32m[upgrade]\u001b[0m ==========================================\n\n\u001b[0;32m...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\n\n\u001b[0;32m[upgrade]\u001b[0m ==========================================\n\u001b[0;32m[upgrade]\u001b[0m   NeMoClaw Sandbox Rebuild\n\u001b[0;32m[upgrade]\u001b[0m ==========================================\n\n\u001b[0;32m...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
 - {"what_failed":"Bash command failed: echo \"Waiting 2 min for next SENTINEL cron tick to fire with delivery:silent...\" && sleep 120 && ...","why_failed":"Exit code 1\nWaiting 2 min for next SENTINEL cron tick to fire with delivery:silent...\nTraceback (most recent call last):\n  File \"<string>\", line 1, in <module>\n    import json,sys;d=json.load(sys.s...","what_should_do":"Check inputs and prerequisites before retrying","context":"Bash error: Exit code 1\nWaiting 2 min for next SENTINEL cron tick to fire with delivery:silent...\nTraceback (most recent call last):\n  File \"<string>\", line 1, in <module>\n    import json,sys;d=json.load(sys.s...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
@@ -47,10 +117,18 @@ Auto-generated from 40 memories. Last updated: 2026-04-06.
 - {"what_failed":"Read failed","why_failed":"File content (11505 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","what_should_do":"Check inputs and prerequisites before retrying","context":"Error: File content (11505 tokens) exceeds maximum allowed tokens (10000). Use offset and limit parameters to read specific portions of the file, or search for specific content instead of reading the whol...","preventative_checks":["Verify tool inputs are correct","Check preconditions"]}
 - Avoid: Test command reported failures: npx jest tests/unit/failure-detectors.test.ts 2>&1 → Instead: Read test output carefully — exit code 0 does not mean all tests passed
 - Node.js -e flag cannot parse multiline strings with unescaped newlines in single quotes
+- 'npx claude-recall stats' can fail with 'PreToolUse:Bash hook error' — indicates a disconnect between hook registration and execution. When stats fails, verify search results separately as they may disagree; at least one is silently wrong.
+- Grep with escaped quotes (pattern="SESSION_EXTRACTION_PROMPT\"") returns no matches — use unescaped pattern="SESSION_EXTRACTION_PROMPT" instead
+- Gateway token mismatch error — requires verifying token in Control UI settings via dashboard URL
 - claude-recall reconnection failed after reinstall
 - claude-recall reconnection failed after reinstall attempt
 - Output is showing '>' instead of expected response
 - Code output returns '>' instead of expected response
+- Bash command base64 encoding long file content failed silently — use base64 -w0 to disable line wrapping and pipe directly into kubectl exec without intermediate variables
+- Read hook error on .gitignore — search_enforcer.py failed to load rules; retry Read with mcp__claude-recall__load_rules first to populate rules before file operations
+- Avoid: Claude backtracked: "Going back to" → Instead: Consider the problem more carefully before starting. Check for similar past failures.
+- Background command 'Wait one more SENTINEL cycle' failed with exit code 1
+- Avoid: Claude backtracked: "Let me try another" → Instead: Consider the problem more carefully before starting. Check for similar past failures.
 - Avoid: Claude backtracked: "let me try a different approach" → Instead: Consider the problem more carefully before starting. Check for similar past failures.
 
 ---

package/.claude/skills/auto-failure-lessons/manifest.json

@@ -1,12 +1,42 @@
 {
   "topicId": "failure-lessons",
-  "sourceHash": "168f7a6d77c7a73d97228d1c554a25f923339f11fc3225feae751a4ea38101e0",
-  "memoryCount": 40,
-  "generatedAt": "2026-04-06T18:39:00.441Z",
+  "sourceHash": "f5b6a2ae08e9e7fbfe9f9d678b1068fa5eaad0d81bf30ef2e3d065bfcf873626",
+  "memoryCount": 117,
+  "generatedAt": "2026-04-09T20:21:12.032Z",
   "memoryKeys": [
     "promoted_1775498319002_awwrsovw6",
     "promoted_1775499579486_bxvgjc80r",
+    "hook_failure_1775567919637_ado9z7i52",
+    "hook_failure_1775502039213_k4yusuan1",
     "hook_failure_1772637584921_0tj4rrxnt",
+    "hook_failure_1775503464385_vz5vdzxvs",
+    "hook_failure_1775500959351_j74owpvko",
+    "hook_failure_1775637261359_prhnbz9gp",
+    "hook_failure_1775571333207_b0jxc7wg9",
+    "hook_failure_1775554467902_vefk0wqnx",
+    "hook_failure_1775511109813_ly4cjtde6",
+    "hook_failure_1775509498191_f79imbrs4",
+    "hook_failure_1775645996326_0mz9beu5u",
+    "hook_failure_non-zero-exit_1775568947522_v9v3s4rcq",
+    "hook_failure_non-zero-exit_1775567518525_sa9trys9z",
+    "hook_failure_non-zero-exit_1775566023853_x9yadg72p",
+    "hook_failure_non-zero-exit_1775564413767_rjg38weet",
+    "hook_failure_non-zero-exit_1775546352476_ifdye1dp6",
+    "hook_failure_non-zero-exit_1775511575363_nen5eyl3b",
+    "hook_failure_non-zero-exit_1775510785418_2xm52g5q8",
+    "hook_failure_non-zero-exit_1775510309712_olv4egt1g",
+    "hook_failure_non-zero-exit_1775510309694_1cipsasft",
+    "hook_failure_1775510785331_kxr1uoozx",
+    "hook_failure_1775510309605_z58f30w5t",
+    "hook_failure_1775510305548_qq8hdyk12",
+    "hook_failure_1775510298887_aoeh4m2cl",
+    "hook_failure_non-zero-exit_1775508193513_ms20rhkf1",
+    "hook_failure_1775509104206_lg9fvtipb",
+    "hook_failure_1775504451387_fmycaea7m",
+    "hook_failure_non-zero-exit_1775503134951_mq2x1hj77",
+    "hook_failure_non-zero-exit_1775502651250_4ah16usm4",
+    "hook_failure_non-zero-exit_1775502651238_l0c5dkykp",
+    "hook_failure_non-zero-exit_1775501919378_s3j17tkr3",
     "hook_failure_1775500665745_zl6zsp7jw",
     "hook_failure_non-zero-exit_1775499579462_n5xb6rr8r",
     "hook_failure_non-zero-exit_1775499579440_2tv110hs9",
@@ -21,6 +51,45 @@
     "hook_failure_non-zero-exit_1772640279977_g3gwlfoqi",
     "hook_failure_1772637570984_yxs8zmurp",
     "hook_failure_1772637485532_djep8eysa",
+    "hook_failure_1775764137796_nt2gy4gn4",
+    "hook_failure_1775764050725_qexdbw5km",
+    "hook_failure_1775764035582_dbcp1mjyw",
+    "hook_failure_1775764006133_rszt1zn54",
+    "hook_failure_1775763649047_jnx0je5mk",
+    "hook_failure_1775763633851_mga29nvnf",
+    "hook_failure_1775760197556_7kmkzjbph",
+    "hook_failure_1775759374123_6l7pw3gqs",
+    "hook_failure_1775759306394_fm3fhkc35",
+    "hook_failure_1775571478609_zua292iy0",
+    "hook_failure_1775570162971_5ii1j8sw3",
+    "hook_failure_1775568820718_1d7pfm9s1",
+    "hook_failure_1775566682561_jfbkzxzvt",
+    "hook_failure_1775565590990_g2pab28yu",
+    "hook_failure_1775563474928_wqww7caqd",
+    "hook_failure_1775544637722_0vkaiyddz",
+    "hook_failure_1775511332509_3mxf5vtg3",
+    "hook_failure_1775510710817_sn23160zp",
+    "hook_failure_1775510222535_o2t7vm7qp",
+    "hook_failure_1775510141049_oo7v7htpv",
+    "hook_failure_1775509134627_wu9wz6w1p",
+    "hook_failure_1775508183011_gy3nzxwiy",
+    "hook_failure_1775505258754_l50o6be33",
+    "hook_failure_1775503921254_zyjka5vj9",
+    "hook_failure_1775503659141_1fh62brao",
+    "hook_failure_1775503198240_qzmm07ves",
+    "hook_failure_1775503190006_k5mdxukzl",
+    "hook_failure_1775503183507_rs20xzomb",
+    "hook_failure_1775503035650_efta0k28k",
+    "hook_failure_1775503031427_e9070twhb",
+    "hook_failure_1775503009947_ea2euap40",
+    "hook_failure_1775502961298_snolsqnu9",
+    "hook_failure_1775502951488_hyvabjgp1",
+    "hook_failure_1775502809370_icsa9nxsy",
+    "hook_failure_1775501648406_78lsvrrb1",
+    "hook_failure_1775501136927_v2zesbrwh",
+    "hook_failure_1775501122267_ejvqdr0id",
+    "hook_failure_1775501085124_c92qa38u7",
+    "hook_failure_1775501078345_pryhog20w",
     "hook_failure_1775500618695_6grbwpm3t",
     "hook_failure_1775500273633_yrw798ahh",
     "hook_failure_1775500125145_ad65bw8rs",
@@ -39,10 +108,18 @@
     "hook_failure_1775498542480_wc23ux8gt",
     "hook_failure_silent-test-failure_1772640279996_m8f3ks8fw",
     "hook_failure_1772637495154_i21dho3dv",
+    "hook_failure_1775760542139_lm1nf043v",
+    "hook_failure_1775511713477_psti3hr7y",
+    "hook_failure_1775502085189_pnbd0kkg1",
     "hook_failure_1773410663873_oegccxk83",
     "hook_failure_1773410656672_kno1aw8wf",
     "hook_failure_1772637391602_cjj3esg33",
     "hook_failure_1772637376157_hvco6jbm4",
+    "hook_failure_1775546352399_1znn01j7o",
+    "hook_failure_1775759908170_k8yreza2o",
+    "hook_failure_backtracking_1775564413782_4qgh3envk",
+    "hook_failure_1775509857057_847nm61ld",
+    "hook_failure_backtracking_1775508193524_54wn8o688",
     "hook_failure_backtracking_1772640280006_snb0x5cgg"
   ]
 }

package/.claude/skills/auto-preferences/SKILL.md

@@ -8,30 +8,15 @@ source: claude-recall
 
 # Preferences
 
-Auto-generated from 20 memories. Last updated: 2026-04-06.
+Auto-generated from 5 memories. Last updated: 2026-04-09.
 
 ## Rules
 
-- Session test preference 1775500740595
-- Test preference 1775500740495-2
-- Test preference 1775500740495-1
-- Test preference 1775500740495-0
+- Session test preference 1775768726677
+- Test preference 1775768726629-2
+- Test preference 1775768726629-1
+- Test preference 1775768726629-0
 - Test memory content
-- Session test preference 1775499328559
-- Test preference 1775499328384-2
-- Test preference 1775499328384-1
-- Test preference 1775499328384-0
-- Test memory content
-- Session test preference 1775496241643
-- Test preference 1775496241514-2
-- Test preference 1775496241514-1
-- Test preference 1775496241514-0
-- Test memory content
-- Session test preference 1775494279149
-- After each refactoring, document the changes made. Don't batch documentation to the end — write it as you go.
-- Any major refactoring requires exhaustive search to make sure nothing is missed. Always grep/search comprehensively before and after changes to verify no stale references, broken imports, or missed files remain.
-- Markdown documentation files should be named with the convention YYYYMMDD_<filename>.md (e.g., 20260402_nemoclaw_integration.md). Use underscores, not hyphens, in the date-prefixed filenames.
-- For agentic design, agents should decide when to run rather than using cron jobs for scheduling
 
 ---
 *Auto-generated by Claude Recall. Regenerate: `npx claude-recall skills generate`*

package/.claude/skills/auto-preferences/manifest.json

@@ -1,28 +1,13 @@
 {
   "topicId": "preferences",
-  "sourceHash": "2e99c86d7042ef4e9b0cd7c8eda4aa322d1678f9389a2a413ec9d6083db85194",
-  "memoryCount": 20,
-  "generatedAt": "2026-04-06T18:39:00.616Z",
+  "sourceHash": "6deab3a85a84a13804c09fd95225d54f4d11e646d8109ec83cd968d1b7af771e",
+  "memoryCount": 5,
+  "generatedAt": "2026-04-09T21:05:26.692Z",
   "memoryKeys": [
-    "memory_1775500740596_xok3iey9j",
-    "memory_1775500740545_op5713e5i",
-    "memory_1775500740519_ln1fd8ow4",
-    "memory_1775500740497_f06v303gf",
-    "memory_1775500740399_ud5aghy9a",
-    "memory_1775499328561_9m7ao3h8s",
-    "memory_1775499328480_e2zx9g5ly",
-    "memory_1775499328425_plvaaxd69",
-    "memory_1775499328386_dqcav3itu",
-    "memory_1775499328258_cilhe1owj",
-    "memory_1775496241645_xtz7cwan4",
-    "memory_1775496241576_j7sxxuge3",
-    "memory_1775496241542_rg3hj24ud",
-    "memory_1775496241516_y3inz8rlf",
-    "memory_1775496241411_vwdz6igrm",
-    "memory_1775494279150_n4pq7zy11",
-    "memory_1775208934902_2kovciriy",
-    "memory_1775208477621_fqa3w21j1",
-    "memory_1775168901303_o8o0i4952",
-    "hook_preference_1775498374200_6d21qj14y"
+    "memory_1775768726678_aa8631cqc",
+    "memory_1775768726653_3tkihcis0",
+    "memory_1775768726640_ii27bz2av",
+    "memory_1775768726630_p95bn61ba",
+    "memory_1775768726593_fb0syx1bo"
   ]
 }

package/README.md

@@ -84,11 +84,11 @@ Once installed, Claude Recall works automatically in the background:
 1. **Session start** — active rules are loaded before the first action. In Claude Code, this happens via the `search_enforcer` hook; in Pi, rules are injected into the system prompt automatically
 2. **As you work** — every prompt is classified for corrections and preferences. Natural statements like *"we use tabs here"* or *"no, put tests in `__tests__/`"* are detected and stored
 3. **Tool outcomes** — results from all tools (Bash, Edit, Write, and more) are captured. Failures are stored as memories; Bash failures are paired with successful fixes
-4. **End of session** — session episodes are created, candidate lessons extracted from failures, and a promotion cycle graduates validated patterns into active rules. A session extraction pass sends the last 50 transcript entries to Haiku to extract durable project knowledge from long coding sessions
+4. **End of session** — session episodes are created, candidate lessons extracted from failures, and a promotion cycle graduates validated patterns into active rules. A session extraction pass sends the last 50 transcript entries to Haiku to identify cause-and-effect patterns: what failed, why, and what fixed it
 5. **Reask detection** — frustration signals ("still broken", "that didn't work") are recorded as outcome events
 6. **Before context compression** — aggressive memory sweep captures important context before the window shrinks
 7. **After context compression** (Claude Code only) — rules are automatically re-injected into context so they're not lost when the window shrinks
-8. **Multi-agent outcomes** — subagent completions (completed/failed/killed) are captured from task notifications and recorded as outcome events
+8. **Sub-agent recall** (Claude Code only) — when sub-agents are spawned, active rules are injected into their context automatically. Sub-agent outcomes (completed/failed/killed) are captured as events
 9. **Rules sync** (Claude Code only) — top 30 rules are exported as typed `.md` files to Claude Code's native memory directory
 
 Classification uses Claude Haiku (via `ANTHROPIC_API_KEY`) with silent regex fallback. No configuration needed.

package/dist/cli/claude-recall-cli.js

@@ -117,10 +117,9 @@ class ClaudeRecallCLI {
      * Get stats for a specific project (includes universal and unscoped memories)
      */
     getProjectStats(projectId) {
-        const allMemories = this.memoryService.search('');
-        const projectMemories = allMemories.filter(m => m.project_id === projectId ||
-            m.scope === 'universal' ||
-            m.project_id === null);
+        // Use getAllByProject for true enumeration. search() pre-ranks and caps
+        // at top-5, which silently masks most memories from stats.
+        const projectMemories = this.memoryService.getAllByProject(projectId);
         // Calculate byType breakdown
         const byType = {};
         for (const mem of projectMemories) {
@@ -135,7 +134,8 @@ class ClaudeRecallCLI {
      * Show skills evolution breakdown
      */
     showSkillsEvolution() {
-        const allMemories = this.memoryService.search('');
+        const projectId = config_1.ConfigService.getInstance().getProjectId();
+        const allMemories = this.memoryService.getAllByProject(projectId);
         const devopsMemories = allMemories.filter(m => m.type === 'devops');
         if (devopsMemories.length === 0) {
             return;
@@ -182,7 +182,8 @@ class ClaudeRecallCLI {
         // Rough estimation:
         // - Each memory saves ~200 tokens (vs repeating to LLM)
         // - DevOps memories save ~1,500 tokens each (vs loading reference files)
-        const allMemories = this.memoryService.search('');
+        const projectId = config_1.ConfigService.getInstance().getProjectId();
+        const allMemories = this.memoryService.getAllByProject(projectId);
         const devopsCount = allMemories.filter(m => m.type === 'devops').length;
         const otherCount = stats.total - devopsCount;
         const devopsSavings = devopsCount * 1500;
@@ -224,11 +225,9 @@ class ClaudeRecallCLI {
      * Show failure memories (v0.7.0)
      */
     showFailures(options) {
-        const allMemories = this.memoryService.search('');
-        let failures = allMemories.filter(m => m.type === 'failure');
-        if (options.project) {
-            failures = failures.filter(m => m.project_id === options.project);
-        }
+        const projectId = options.project || config_1.ConfigService.getInstance().getProjectId();
+        const allMemories = this.memoryService.getAllByProject(projectId);
+        const failures = allMemories.filter(m => m.type === 'failure');
         // Sort by timestamp (newest first)
         failures.sort((a, b) => (b.timestamp || 0) - (a.timestamp || 0));
         // Limit results
@@ -354,8 +353,8 @@ class ClaudeRecallCLI {
         // Determine search scope
         let results;
         if (options.global) {
-            // Global search: all memories
-            results = this.memoryService.search(query);
+            // Global search: explicit cross-project opt-in
+            results = this.memoryService.search(query, { includeAllProjects: true });
         }
         else if (options.project) {
             // Project-specific search: project + universal
@@ -408,8 +407,10 @@ class ClaudeRecallCLI {
     async export(outputPath, options) {
         const format = options.format || 'json';
         try {
-            // Get all memories via search with empty query
-            const memories = this.memoryService.search('');
+            // Export all memories from the current project (+ universal). For a
+            // true cross-project dump, the user can run `--project` per project.
+            const projectId = config_1.ConfigService.getInstance().getProjectId();
+            const memories = this.memoryService.getAllByProject(projectId);
             if (format === 'json') {
                 const exportData = {
                     version: '0.2.0',

package/dist/hooks/correction-detector.js

@@ -48,8 +48,8 @@ async function handleCorrectionDetector(input) {
     // Reject short/garbage extracts and raw dumps (not clean rules)
     if (result.extract.length < 10 || result.extract.length > 200)
         return;
-    // Corrections and preferences need high confidence; others need moderate
-    if ((result.type === 'correction' || result.type === 'preference') && result.confidence < 0.7)
+    // Corrections, preferences, and devops need high confidence to prevent noise
+    if ((result.type === 'correction' || result.type === 'preference' || result.type === 'devops') && result.confidence < 0.75)
         return;
     if (result.confidence < 0.6)
         return;

package/dist/hooks/llm-classifier.js

@@ -18,7 +18,7 @@ const SYSTEM_PROMPT = `You are a memory classifier for a developer tool. Classif
 - correction: User correcting a mistake ("no, use X not Y", "wrong, it should be...")
 - preference: User stating a clear, reusable directive about how they want things done going forward ("we use tabs", "always use TypeScript", "I prefer X"). Must be a rule that applies beyond this conversation. NOT observations, complaints, questions, debugging statements, or one-off instructions like "fix this" or "tell me about X"
 - failure: Something broke or failed ("build failed", "error in deployment")
-- devops: CI/CD, deployment, Docker, git workflow patterns
+- devops: CI/CD, deployment, Docker, git workflow patterns. ONLY durable rules — not transient operational events like "sandbox rebuilt" or "background task exited"
 - project-knowledge: Architecture, stack, database, API patterns
 - none: Casual conversation, questions, code snippets, or anything not worth remembering
 
@@ -39,7 +39,7 @@ const BATCH_SYSTEM_PROMPT = `You are a memory classifier for a developer tool. Y
 - correction: User correcting a mistake ("no, use X not Y", "wrong, it should be...")
 - preference: User stating a clear, reusable directive about how they want things done going forward ("we use tabs", "always use TypeScript", "I prefer X"). Must be a rule that applies beyond this conversation. NOT observations, complaints, questions, debugging statements, or one-off instructions like "fix this" or "tell me about X"
 - failure: Something broke or failed ("build failed", "error in deployment")
-- devops: CI/CD, deployment, Docker, git workflow patterns
+- devops: CI/CD, deployment, Docker, git workflow patterns. ONLY durable rules — not transient operational events like "sandbox rebuilt" or "background task exited"
 - project-knowledge: Architecture, stack, database, API patterns
 - none: Casual conversation, questions, code snippets, or anything not worth remembering
 

package/dist/hooks/memory-stop-hook.js

@@ -94,8 +94,8 @@ async function handleMemoryStop(input) {
         // Reject extracts that are too short or too long (not clean rules)
         if (result.extract.length < 10 || result.extract.length > 200)
             continue;
-        // Corrections and preferences need higher confidence
-        if ((result.type === 'correction' || result.type === 'preference') && result.confidence < 0.7)
+        // Corrections, preferences, and devops need higher confidence to prevent noise
+        if ((result.type === 'correction' || result.type === 'preference' || result.type === 'devops') && result.confidence < 0.75)
             continue;
         if (result.confidence < 0.6)
             continue;

package/dist/hooks/tool-outcome-watcher.js

@@ -235,7 +235,10 @@ async function handleBashFailure(command, exitCode, output, sessionId) {
     const memoryService = memory_1.MemoryService.getInstance();
     memoryService.store({
         key,
-        value: failureContent,
+        value: {
+            content: `${failureContent.what_failed}. ${failureContent.why_failed}`,
+            ...failureContent,
+        },
         type: 'failure',
         context: { timestamp: Date.now() },
         relevanceScore: 0.85,

package/dist/mcp/prompts-handler.js

@@ -161,7 +161,7 @@ class PromptsHandler {
      * Injects all user preferences into context
      */
     async getPreferencesPrompt() {
-        const preferences = this.memoryStorage.searchByContext({ type: 'preference' });
+        const preferences = this.memoryStorage.searchByContext({ type: 'preference', project_id: config_1.ConfigService.getInstance().getProjectId() });
         const preferencesText = this.formatPreferencesForPrompt(preferences);
         return {
             description: 'User coding preferences automatically injected',
@@ -182,7 +182,7 @@ Apply these preferences when generating code or making suggestions.`
      * Injects relevant project knowledge
      */
     async getProjectContextPrompt(topic) {
-        let knowledge = this.memoryStorage.searchByContext({ type: 'project-knowledge' });
+        let knowledge = this.memoryStorage.searchByContext({ type: 'project-knowledge', project_id: config_1.ConfigService.getInstance().getProjectId() });
         // Filter by topic if provided
         if (topic) {
             const results = this.memoryService.search(topic);
@@ -211,7 +211,7 @@ Use this information when working with the project.`
      * Injects recent correction patterns
      */
     async getCorrectionsPrompt() {
-        const corrections = this.memoryStorage.searchByContext({ type: 'correction' });
+        const corrections = this.memoryStorage.searchByContext({ type: 'correction', project_id: config_1.ConfigService.getInstance().getProjectId() });
         // Get most recent 10
         const recentCorrections = corrections
             .sort((a, b) => (b.timestamp || 0) - (a.timestamp || 0))

package/dist/mcp/resources-handler.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ResourcesHandler = void 0;
 const memory_1 = require("../services/memory");
 const logging_1 = require("../services/logging");
+const config_1 = require("../services/config");
 /**
  * Handles MCP Resources protocol
  * Resources are static/semi-static context that Claude Code can subscribe to
@@ -141,7 +142,7 @@ class ResourcesHandler {
      * Get preferences resource content
      */
     async getPreferencesResource(uri) {
-        const memories = this.memoryStorage.searchByContext({ type: 'preference' });
+        const memories = this.memoryStorage.searchByContext({ type: 'preference', project_id: config_1.ConfigService.getInstance().getProjectId() });
         // Format preferences for easy consumption
         const preferences = memories.map(m => ({
             key: m.key,
@@ -163,7 +164,7 @@ class ResourcesHandler {
      * Get project knowledge resource content
      */
     async getProjectKnowledgeResource(uri) {
-        const memories = this.memoryStorage.searchByContext({ type: 'project-knowledge' });
+        const memories = this.memoryStorage.searchByContext({ type: 'project-knowledge', project_id: config_1.ConfigService.getInstance().getProjectId() });
         const knowledge = memories.map(m => ({
             key: m.key,
             content: m.value,
@@ -182,7 +183,7 @@ class ResourcesHandler {
      * Get recent corrections resource content
      */
     async getCorrectionsResource(uri) {
-        const memories = this.memoryStorage.searchByContext({ type: 'correction' });
+        const memories = this.memoryStorage.searchByContext({ type: 'correction', project_id: config_1.ConfigService.getInstance().getProjectId() });
         // Get most recent 10 corrections
         const recentCorrections = memories
             .sort((a, b) => (b.timestamp || 0) - (a.timestamp || 0))
@@ -206,7 +207,7 @@ class ResourcesHandler {
     async getActiveContextResource(uri) {
         // Get top 5 most accessed memories from last 24 hours
         const oneDayAgo = Date.now() - (24 * 60 * 60 * 1000);
-        const allMemories = this.memoryStorage.searchByContext({});
+        const allMemories = this.memoryStorage.searchByContext({ project_id: config_1.ConfigService.getInstance().getProjectId() });
         const recentMemories = allMemories
             .filter(m => (m.timestamp || 0) > oneDayAgo)
             .sort((a, b) => (b.access_count || 0) - (a.access_count || 0))

package/dist/memory/pattern-store.js

@@ -36,7 +36,8 @@ class PatternStore {
         const memories = this.storage.searchByContext({
             type: 'correction-pattern',
             project_id: process.env.CLAUDE_PROJECT_DIR,
-            file_path: undefined
+            file_path: undefined,
+            includeAllProjects: !process.env.CLAUDE_PROJECT_DIR,
         });
         for (const memory of memories) {
             const stored = memory.value;
@@ -55,7 +56,8 @@ class PatternStore {
         const patterns = this.storage.searchByContext({
             type: 'correction-pattern',
             project_id: process.env.CLAUDE_PROJECT_DIR,
-            file_path: undefined
+            file_path: undefined,
+            includeAllProjects: !process.env.CLAUDE_PROJECT_DIR,
         });
         return patterns
             .map(m => m.value)

package/dist/memory/storage.js

@@ -296,6 +296,13 @@ class MemoryStorage {
         };
     }
     searchByContext(context) {
+        // Fail loud when called without scope. This prevents silent cross-project
+        // leakage that the previous default-allow behaviour caused. Callers that
+        // genuinely want all projects must opt in with includeAllProjects: true.
+        if (!context.project_id && !context.includeAllProjects) {
+            throw new Error('searchByContext requires context.project_id or context.includeAllProjects=true. ' +
+                'Calling without either would silently return memories from all projects.');
+        }
         let query = 'SELECT * FROM memories WHERE 1=1';
         const params = [];
         if (context.project_id) {
@@ -303,6 +310,7 @@ class MemoryStorage {
             query += ' AND (project_id = ? OR scope = ? OR project_id IS NULL)';
             params.push(context.project_id, 'universal');
         }
+        // includeAllProjects: no project filter — caller explicitly asked for everything.
         if (context.file_path) {
             query += ' AND file_path = ?';
             params.push(context.file_path);

package/dist/services/config.js

@@ -134,12 +134,16 @@ class ConfigService {
         return { ...this.config };
     }
     getDatabasePath() {
-        // ALWAYS use ~/.claude-recall/claude-recall.db regardless of environment variables
-        // This ensures consistency across CLI and MCP server
-        const dbDir = path.join(os.homedir(), '.claude-recall');
-        const dbPath = path.join(dbDir, 'claude-recall.db');
-        // Ensure database directory exists
-        if (!fs.existsSync(dbDir)) {
+        // Honor CLAUDE_RECALL_DB_PATH / CLAUDE_RECALL_DB_NAME via the loaded
+        // config (loadConfig already reads them with sensible defaults). The
+        // previous "always use ~/.claude-recall" behaviour broke test isolation:
+        // tests setting CLAUDE_RECALL_DB_PATH silently wrote to the production
+        // DB and polluted it with fixture rows.
+        const dbDir = this.config.database.path;
+        const dbPath = path.join(dbDir, this.config.database.name);
+        // Ensure database directory exists. Skip for in-memory DBs (`:memory:`)
+        // and any path that doesn't look like a real filesystem location.
+        if (dbDir && dbDir !== ':memory:' && !fs.existsSync(dbDir)) {
             fs.mkdirSync(dbDir, { recursive: true });
         }
         return dbPath;

package/dist/services/memory.js

@@ -109,19 +109,35 @@ class MemoryService {
         }
     }
     /**
-     * Search memories by keyword
+     * Search memories by keyword.
+     *
+     * Scope rules (post-Fix-2):
+     *   - Default: scoped to current project (projectId from ConfigService) +
+     *     universal/unscoped memories.
+     *   - Pass opts.projectId to scope to a specific project.
+     *   - Pass opts.includeAllProjects=true to opt into a true global search
+     *     (used by `claude-recall search --global`).
      */
-    search(query, sortBy = 'relevance') {
+    search(query, optsOrSortBy = 'relevance') {
+        const opts = typeof optsOrSortBy === 'string' ? { sortBy: optsOrSortBy } : optsOrSortBy;
+        const sortBy = opts.sortBy || 'relevance';
         try {
-            // Use findRelevant with query context for better semantic matching
             const context = {
                 query: query,
-                timestamp: Date.now()
+                timestamp: Date.now(),
             };
+            if (opts.includeAllProjects) {
+                context.includeAllProjects = true;
+            }
+            else {
+                context.project_id = opts.projectId || this.config.getProjectId();
+            }
             const results = this.retrieval.findRelevant(context, sortBy);
             this.logger.logRetrieval(query, results.length, {
                 searchType: 'contextual',
-                sortBy
+                sortBy,
+                projectId: context.project_id,
+                includeAllProjects: !!opts.includeAllProjects,
             });
             return results;
         }
@@ -130,6 +146,24 @@ class MemoryService {
             throw error;
         }
     }
+    /**
+     * Enumerate ALL memories scoped to a project (project + universal + unscoped),
+     * with NO ranking and NO result cap.
+     *
+     * Use this for stats, exports, and any other "give me everything in scope"
+     * operation. Do NOT use search() / findRelevant() for enumeration — those
+     * pre-rank by type priority and cap at top-5, which silently hides most
+     * memories from callers that wanted a complete list.
+     */
+    getAllByProject(projectId) {
+        try {
+            return this.storage.searchByContext({ project_id: projectId });
+        }
+        catch (error) {
+            this.logger.logServiceError('MemoryService', 'getAllByProject', error, { projectId });
+            throw error;
+        }
+    }
     /**
      * Get memory storage statistics
      */

package/dist/services/skill-generator.js

@@ -288,6 +288,10 @@ class SkillGenerator {
         if (projectId) {
             searchContext.project_id = projectId;
         }
+        else {
+            // Skill generation runs across all projects for global skill discovery.
+            searchContext.includeAllProjects = true;
+        }
         let memories = this.storage.searchByContext(searchContext);
         // Filter by devops category if specified
         if (topic.devopsCategory) {

package/dist/shared/event-processors.js

@@ -206,7 +206,10 @@ function storeToolFailure(toolName, toolInput, output, sessionId) {
     const key = `hook_failure_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
     memory_1.MemoryService.getInstance().store({
         key,
-        value: failureContent,
+        value: {
+            content: `${failureContent.what_failed}. ${failureContent.why_failed}`,
+            ...failureContent,
+        },
         type: 'failure',
         context: { timestamp: Date.now() },
         relevanceScore: 0.75,
@@ -278,7 +281,7 @@ async function processUserInput(text, sessionId) {
         return null;
     if (result.extract.length < 10 || result.extract.length > 200)
         return null;
-    if ((result.type === 'correction' || result.type === 'preference') && result.confidence < 0.7)
+    if ((result.type === 'correction' || result.type === 'preference' || result.type === 'devops') && result.confidence < 0.75)
         return null;
     if (result.confidence < 0.6)
         return null;
@@ -325,7 +328,7 @@ async function processSessionEnd(userTexts, sessionId, projectId, maxStore = 3)
                     continue;
                 if (result.extract.length < 10 || result.extract.length > 200)
                     continue;
-                if ((result.type === 'correction' || result.type === 'preference') && result.confidence < 0.7)
+                if ((result.type === 'correction' || result.type === 'preference' || result.type === 'devops') && result.confidence < 0.75)
                     continue;
                 if (result.confidence < 0.6)
                     continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-recall",
-  "version": "0.20.11",
+  "version": "0.20.13",
   "description": "Persistent memory for Claude Code and Pi with native Skills integration, automatic capture, failure learning, and project scoping",
   "main": "dist/index.js",
   "bin": {