claude-recall 0.37.0 → 0.37.2

package/.claude/hooks/search_enforcer.py

@@ -16,7 +16,29 @@ from datetime import datetime
 
 STATE_DIR = Path.home() / '.claude-recall' / 'hook-state'
 SEARCH_TTL_MS = int(os.environ.get('CLAUDE_RECALL_SEARCH_TTL', 60 * 1000))  # 1 min default (once per task)
-ENFORCE_MODE = os.environ.get('CLAUDE_RECALL_ENFORCE_MODE', 'block')  # block, warn, off
+
+
+def _resolve_enforce_mode() -> str:
+    """Enforcement mode: env var wins, then ~/.claude-recall/config.json
+    ("enforceMode"), else default 'warn'. A file-based switch is reachable
+    from inside a running session (an agent can edit config.json to escape a
+    stuck gate); an env var set before launch is not. Default is 'warn' — this
+    gate is an advisory nudge (see module docstring), so it should never
+    hard-block a session by default."""
+    env = os.environ.get('CLAUDE_RECALL_ENFORCE_MODE')
+    if env:
+        return env.strip().lower()
+    try:
+        cfg = json.load(open(Path.home() / '.claude-recall' / 'config.json'))
+        mode = cfg.get('enforceMode')
+        if mode:
+            return str(mode).strip().lower()
+    except Exception:
+        pass
+    return 'warn'
+
+
+ENFORCE_MODE = _resolve_enforce_mode()  # block, warn, off
 MAX_BLOCKS = int(os.environ.get('CLAUDE_RECALL_MAX_BLOCKS', 3))  # degrade to warn after N blocks
 
 # Tools that count as "search performed"
@@ -182,6 +204,7 @@ STALE RULES — consider reloading before {tool_name}
 
 Rules were loaded earlier but TTL expired.
 Run: mcp__claude-recall__load_rules({{}})
+(If not directly callable, ToolSearch it first — see below.)
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 """
         print(msg.strip(), file=sys.stderr)
@@ -214,10 +237,14 @@ LOAD RULES REQUIRED before {tool_name} (attempt {block_count}/{MAX_BLOCKS})
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 
 Run: mcp__claude-recall__load_rules({{}})
+(If that tool is not directly callable, first run
+ ToolSearch({{query:"select:mcp__claude-recall__load_rules"}}) —
+ some harnesses defer MCP tool schemas until discovered.)
 
 This ensures you apply user preferences and avoid past mistakes.
 
-To disable: CLAUDE_RECALL_ENFORCE_MODE=off
+To disable this gate: set "enforceMode":"off" in ~/.claude-recall/config.json
+(or export CLAUDE_RECALL_ENFORCE_MODE=off before launching Claude Code).
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 """
     print(msg.strip(), file=sys.stderr)

package/README.md

@@ -460,7 +460,7 @@ Defaults work out of the box; tune via environment variables as needed.
 | `CLAUDE_RECALL_AUTO_CLEANUP`             | `false` | Auto-kill stale MCP processes on start (otherwise reports and exits).                                    |
 | `CLAUDE_RECALL_COMPACT_THRESHOLD`        | `10MB`  | DB size at which automatic compaction kicks in.                                                          |
 | `CLAUDE_RECALL_MAX_MEMORIES`             | `10000` | Memory-row soft cap.                                                                                     |
-| `CLAUDE_RECALL_ENFORCE_MODE`             | `on`    | Set to `off` to bypass the search-enforcer hook.                                                         |
+| `CLAUDE_RECALL_ENFORCE_MODE`             | `warn`  | `block` / `warn` / `off` for the search-enforcer hook. Env wins, else `~/.claude-recall/config.json` `"enforceMode"`, else `warn`. |
 | `CLAUDE_RECALL_LLM_TIMEOUT_MS`           | `5000`  | Timeout for hook-context LLM calls (classification, hindsight hints). Hooks fall back to regex when it fires. |
 | `CLAUDE_RECALL_STOP_DEBOUNCE_MS`         | `300000` | Debounce for the heavy Stop-hook pipeline (episodes, session extraction, promotion). `0` disables. |
 | `CLAUDE_RECALL_PROJECT_ID`               | *(cwd)*  | Pin the project scope to a fixed id, overriding working-directory detection. |

package/dist/cli/claude-recall-cli.js

@@ -51,9 +51,10 @@ const hook_commands_1 = require("./commands/hook-commands");
 const kiro_commands_1 = require("./commands/kiro-commands");
 const repair_1 = require("./commands/repair");
 // v14 = add PreToolUse rule-injector + Post resolver for JITRI.
+// v15 = bound the search_enforcer PreToolUse entry with timeout: 5.
 // Bump when the hook block template changes — setup skips the settings
 // rewrite when the installed hooksVersion already matches.
-const HOOKS_VERSION = '14.0.0';
+const HOOKS_VERSION = '15.0.0';
 const parse_utils_1 = require("./parse-utils");
 const program = new commander_1.Command();
 class ClaudeRecallCLI {
@@ -1095,6 +1096,15 @@ class ClaudeRecallCLI {
             const stats = fs.statSync(dbPath);
             console.log(`  Path: ${dbPath}`);
             console.log(`  Size: ${(stats.size / 1024 / 1024).toFixed(2)} MB`);
+            // Surface the write-ahead log size. A WAL that has grown to a large
+            // fraction of the DB usually means a long-lived connection isn't
+            // checkpointing; it's truncated on the next clean shutdown (close()).
+            const walPath = `${dbPath}-wal`;
+            if (fs.existsSync(walPath)) {
+                const walMb = fs.statSync(walPath).size / 1024 / 1024;
+                const warn = walMb > 16 ? '  ⚠️  large — will truncate on next clean shutdown' : '';
+                console.log(`  WAL:  ${walMb.toFixed(2)} MB${warn}`);
+            }
         }
         // Memory stats
         const memStats = this.memoryService.getStats();
@@ -1375,7 +1385,11 @@ async function main() {
                     hooks: [
                         {
                             type: "command",
-                            command: `python3 ${hookDest}`
+                            command: `python3 ${hookDest}`,
+                            // Runs before EVERY tool call (matcher .*). Bound the python3
+                            // cold start so it can't become a per-call latency tax or an
+                            // unbounded failure mode.
+                            timeout: 5
                         },
                         {
                             type: "command",

package/dist/hooks/memory-sync-hook.js

@@ -75,12 +75,94 @@ function deriveAutoMemoryPath(cwd, homedir) {
  * Extract display value from a memory record.
  */
 function extractValue(value) {
-    if (typeof value === 'string')
-        return value;
-    if (typeof value === 'object' && value !== null) {
-        return value.content || value.value || JSON.stringify(value);
+    // Always resolve to readable text. Handles every historical shape:
+    //  - clean structured `{ title, description, content }` → prefer the title
+    //  - failure content objects → "what_failed → what_should_do"
+    //  - nested `{ content: { ... } }` / `{ content: "{...json...}" }` wrappers
+    //  - stringified-JSON stored as a plain string
+    // Without this, a failure stored as `JSON.stringify(content)` rendered its
+    // raw JSON as the file title/slug (e.g. `[{"what_failed":"Bash command...`),
+    // and clean object-content memories stringified to "[object Object]".
+    let v = value;
+    for (let depth = 0; depth < 6; depth++) {
+        if (typeof v === 'string') {
+            const t = v.trim();
+            if (t.startsWith('{') || t.startsWith('[')) {
+                try {
+                    v = JSON.parse(t);
+                    continue;
+                }
+                catch {
+                    return v;
+                }
+            }
+            return v;
+        }
+        if (v && typeof v === 'object' && !Array.isArray(v)) {
+            if (typeof v.title === 'string' && v.title.trim())
+                return v.title.trim();
+            if (typeof v.what_failed === 'string') {
+                return v.what_should_do ? `${v.what_failed} → ${v.what_should_do}` : v.what_failed;
+            }
+            const next = v.content ?? v.value ?? v.text;
+            if (next === undefined)
+                return JSON.stringify(v);
+            v = next;
+            continue;
+        }
+        break;
     }
-    return String(value ?? '');
+    return typeof v === 'string' ? v : JSON.stringify(v ?? '');
+}
+/**
+ * Generic default "lessons" the failure detectors emit when no fix has been
+ * paired yet. A promoted memory whose only takeaway is one of these teaches
+ * nothing — it just costs context. We skip syncing those to the file-based
+ * memory; the specific failure still lives in the DB, so fix-pairing and
+ * evidence counting are unaffected, and once a fix enriches what_should_do
+ * (e.g. "Fix: <command>") the memory syncs normally.
+ */
+const BOILERPLATE_LESSONS = new Set([
+    'check inputs and prerequisites before retrying',
+    'check command syntax, file paths, and prerequisites before running',
+    'review error details and adjust approach',
+]);
+/** Unwrap a memory value to the object that carries the failure fields, or null. */
+function unwrapToFailureObject(value) {
+    let v = value;
+    for (let depth = 0; depth < 6; depth++) {
+        if (typeof v === 'string') {
+            const t = v.trim();
+            if (t.startsWith('{')) {
+                try {
+                    v = JSON.parse(t);
+                    continue;
+                }
+                catch {
+                    return null;
+                }
+            }
+            return null;
+        }
+        if (v && typeof v === 'object' && !Array.isArray(v)) {
+            if (typeof v.what_should_do === 'string' || typeof v.what_failed === 'string')
+                return v;
+            const next = v.content ?? v.value;
+            if (next === undefined)
+                return null;
+            v = next;
+            continue;
+        }
+        return null;
+    }
+    return null;
+}
+function isBoilerplateFailure(rule) {
+    if (rule.crType !== 'failure')
+        return false;
+    const obj = unwrapToFailureObject(rule.value);
+    const wsd = obj && typeof obj.what_should_do === 'string' ? obj.what_should_do.trim().toLowerCase() : '';
+    return BOILERPLATE_LESSONS.has(wsd);
 }
 /**
  * Check if a memory key matches test data patterns.
@@ -231,12 +313,23 @@ async function handleMemorySync(input) {
         const memoryService = memory_1.MemoryService.getInstance();
         // Get top rules ranked for sync
         const rules = memoryService.getTopRulesForSync(projectId, MAX_SYNC_FILES);
-        // Filter out test data and secrets
+        // Filter out test data, secrets, and boilerplate-only failure lessons.
         const filtered = rules.filter(r => {
             if (isTestData(r.key))
                 return false;
-            const val = extractValue(r.value);
-            if (containsSecret(val))
+            // Scan the FULL raw value for secrets, not just the display gist —
+            // extractValue now returns a summary that could omit a secret buried in
+            // a non-title field.
+            let raw;
+            try {
+                raw = typeof r.value === 'string' ? r.value : JSON.stringify(r.value);
+            }
+            catch {
+                raw = String(r.value ?? '');
+            }
+            if (containsSecret(raw))
+                return false;
+            if (isBoilerplateFailure(r))
                 return false;
             return true;
         });

package/dist/hooks/precompact-preserve.js

@@ -97,29 +97,37 @@ async function handlePrecompactPreserve(input) {
         console.log(`💾 Recall: preserved ${stored} memories before context compression`);
     }
     (0, shared_1.hookLog)('precompact', `PreCompact sweep: stored ${stored} memories from ${entries.length} entries`);
-    // Reset search enforcer hook-state so Claude is forced to re-load rules
-    // after context compression. Without this, the enforcer thinks rules are
-    // still loaded even though they may have been lost during compaction.
-    resetEnforcerState(input?.session_id);
+    // Reset per-session hook-state so Claude is forced to re-load AND re-inject
+    // rules after context compression. Without this, the enforcer thinks rules
+    // are still loaded and the rule-injector thinks it already injected them —
+    // but compaction may have dropped both from context.
+    resetSessionHookState(input?.session_id);
 }
 /**
- * Delete the search enforcer's hook-state file for this session,
- * forcing a fresh load_rules gate on the next tool call.
+ * Delete this session's per-session hook-state files, forcing a fresh
+ * load_rules gate (search enforcer) and re-injection (rule-injector) on the
+ * next tool call after compaction.
  */
-function resetEnforcerState(sessionId) {
+function resetSessionHookState(sessionId) {
     if (!sessionId) {
-        (0, shared_1.hookLog)('precompact', 'No session_id — cannot reset enforcer state');
+        (0, shared_1.hookLog)('precompact', 'No session_id — cannot reset session hook-state');
         return;
     }
     const safeId = sessionId.replace(/[^a-zA-Z0-9_-]/g, '_') || 'default';
-    const stateFile = path.join(os.homedir(), '.claude-recall', 'hook-state', `${safeId}.json`);
-    try {
-        if (fs.existsSync(stateFile)) {
-            fs.unlinkSync(stateFile);
-            (0, shared_1.hookLog)('precompact', `Reset enforcer state for session ${safeId} — rules will re-gate`);
+    const stateDir = path.join(os.homedir(), '.claude-recall', 'hook-state');
+    const stateFiles = [
+        path.join(stateDir, `${safeId}.json`), // search-enforcer gate state
+        path.join(stateDir, `rule-injector-${safeId}.json`), // rule-injector dedup set
+    ];
+    for (const stateFile of stateFiles) {
+        try {
+            if (fs.existsSync(stateFile)) {
+                fs.unlinkSync(stateFile);
+                (0, shared_1.hookLog)('precompact', `Reset hook-state ${path.basename(stateFile)} for session ${safeId}`);
+            }
+        }
+        catch (err) {
+            (0, shared_1.hookLog)('precompact', `Failed to reset ${path.basename(stateFile)}: ${err.message}`);
         }
-    }
-    catch (err) {
-        (0, shared_1.hookLog)('precompact', `Failed to reset enforcer state: ${err.message}`);
     }
 }

package/dist/hooks/rule-injector.js

@@ -24,15 +24,52 @@
  * effectiveness directly. This is the meter that replaces the broken
  * citation-detection regex.
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeInjection = computeInjection;
 exports.handleRuleInjector = handleRuleInjector;
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const shared_1 = require("./shared");
 const memory_1 = require("../services/memory");
 const config_1 = require("../services/config");
 const outcome_storage_1 = require("../services/outcome-storage");
 const rule_retrieval_1 = require("../services/rule-retrieval");
 const memory_tools_1 = require("../mcp/tools/memory-tools");
+const session_link_1 = require("../services/session-link");
 const TYPE_LABELS = {
     correction: 'correction',
     devops: 'devops',
@@ -81,6 +118,44 @@ function formatInjection(matches, toolName) {
         `but defer to safety and correctness if any conflict.\n${lines.join('\n')}\n` +
         `</recalled-memory>`);
 }
+/**
+ * Per-session injection dedup. The hook fires on EVERY tool call, so without
+ * this the same rule is re-injected verbatim before every Read/Bash/Edit —
+ * pure per-call token overhead, and identical repetition trains the model to
+ * tune the block out. We remember which rules were already injected this
+ * session (keyed by rule identity + a content hash, so a rule re-injects only
+ * if its content actually changed) and skip them next time.
+ */
+function injectionStateFile(sessionId) {
+    const safe = (sessionId || 'default').replace(/[^a-zA-Z0-9_-]/g, '_') || 'default';
+    return path.join((0, shared_1.hookStateDir)(), `rule-injector-${safe}.json`);
+}
+function loadInjectedSet(sessionId) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(injectionStateFile(sessionId), 'utf-8'));
+        if (Array.isArray(parsed?.injected))
+            return new Set(parsed.injected);
+    }
+    catch { /* no state yet — first injection this session */ }
+    return new Set();
+}
+function saveInjectedSet(sessionId, injected) {
+    try {
+        fs.writeFileSync(injectionStateFile(sessionId), JSON.stringify({ injected: [...injected] }), 'utf-8');
+    }
+    catch { /* best-effort — dedup is an optimization, never block the call */ }
+}
+function ruleInjectionId(rule) {
+    let payload;
+    try {
+        payload = JSON.stringify(rule.value);
+    }
+    catch {
+        payload = String(rule.value);
+    }
+    const hash = (0, crypto_1.createHash)('sha1').update(payload).digest('hex').slice(0, 8);
+    return `${rule.type}:${rule.key}:${hash}`;
+}
 /**
  * Runtime-agnostic core: rank active rules against this tool call, record
  * the injections for outcome resolution, and return the formatted context
@@ -88,7 +163,7 @@ function formatInjection(matches, toolName) {
  * runtime (Claude Code wants a hookSpecificOutput JSON envelope; Kiro adds
  * raw stdout to context).
  */
-async function computeInjection(toolName, toolInput, toolUseId) {
+async function computeInjection(toolName, toolInput, toolUseId, sessionId = 'default') {
     if (!toolName)
         return null;
     // Skip the hook for our own tools so we don't recursively inject rules
@@ -99,6 +174,10 @@ async function computeInjection(toolName, toolInput, toolUseId) {
     }
     const projectId = config_1.ConfigService.getInstance().getProjectId();
     const memoryService = memory_1.MemoryService.getInstance();
+    // Record the harness session id for this project so the MCP server can
+    // correlate its own logs with hook-side state (#6). This hook runs on every
+    // tool call with the harness session_id, so the link stays fresh.
+    (0, session_link_1.writeHarnessSessionLink)(sessionId, projectId);
     // Fetch all active rules for this project. We pass them all to the ranker
     // because the ranking function is fast and we want sticky rules to surface
     // even when token overlap is low.
@@ -126,10 +205,17 @@ async function computeInjection(toolName, toolInput, toolUseId) {
         (0, shared_1.hookLog)('rule-injector', `No relevant rules for ${toolName} (scanned ${allRules.length})`);
         return null;
     }
+    // Drop rules already injected this session (unless their content changed).
+    const injected = loadInjectedSet(sessionId);
+    const freshMatches = matches.filter(m => !injected.has(ruleInjectionId(m.rule)));
+    if (freshMatches.length === 0) {
+        (0, shared_1.hookLog)('rule-injector', `All ${matches.length} matched rule(s) already injected this session (${sessionId}) — skipping`);
+        return null;
+    }
     // Record each injection so PostToolUse can resolve it with the outcome
     try {
         const outcomeStorage = outcome_storage_1.OutcomeStorage.getInstance();
-        for (const m of matches) {
+        for (const m of freshMatches) {
             outcomeStorage.recordRuleInjection({
                 rule_key: m.rule.key,
                 tool_name: toolName,
@@ -144,12 +230,16 @@ async function computeInjection(toolName, toolInput, toolUseId) {
         // Non-critical — failure to record shouldn't block the injection itself
         (0, shared_1.hookLog)('rule-injector', `Failed to record injections: ${err.message}`);
     }
-    (0, shared_1.hookLog)('rule-injector', `Injected ${matches.length} rule(s) for ${toolName} (top score=${matches[0].score.toFixed(3)})`);
-    return formatInjection(matches, toolName);
+    // Mark them injected so they don't repeat on the next tool call.
+    for (const m of freshMatches)
+        injected.add(ruleInjectionId(m.rule));
+    saveInjectedSet(sessionId, injected);
+    (0, shared_1.hookLog)('rule-injector', `Injected ${freshMatches.length} rule(s) for ${toolName} (top score=${freshMatches[0].score.toFixed(3)})`);
+    return formatInjection(freshMatches, toolName);
 }
 async function handleRuleInjector(input) {
     try {
-        const additionalContext = await computeInjection(input?.tool_name ?? '', input?.tool_input ?? {}, input?.tool_use_id ?? '');
+        const additionalContext = await computeInjection(input?.tool_name ?? '', input?.tool_input ?? {}, input?.tool_use_id ?? '', input?.session_id ?? 'default');
         if (!additionalContext) {
             // Nothing to inject — print empty JSON so CC parses it cleanly
             process.stdout.write('{}\n');

package/dist/memory/storage.js

@@ -49,6 +49,11 @@ class MemoryStorage {
         this.db.pragma('journal_mode = WAL');
         // Ensure changes are synced to disk
         this.db.pragma('synchronous = NORMAL');
+        // Cap WAL growth: after each checkpoint SQLite truncates the -wal file
+        // back to this ceiling, so it can't balloon (a stuck reader once left it
+        // at 34MB) and linger across restarts. Paired with a TRUNCATE checkpoint
+        // in close().
+        this.db.pragma('journal_size_limit = 8388608'); // 8 MB
         this.initialize();
     }
     initialize() {
@@ -1055,6 +1060,16 @@ class MemoryStorage {
         return this.db;
     }
     close() {
+        // Flush the WAL into the main DB and truncate the -wal/-shm files so they
+        // don't linger at tens of MB after the process exits. Best-effort: a
+        // checkpoint can fail if another connection still holds a read lock, in
+        // which case db.close() below still runs an implicit passive checkpoint.
+        try {
+            this.db.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch {
+            // ignore — proceed to close regardless
+        }
         this.db.close();
     }
 }

package/dist/services/search-monitor.js

@@ -35,6 +35,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SearchMonitor = void 0;
 const logging_1 = require("./logging");
+const config_1 = require("./config");
+const session_link_1 = require("./session-link");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
@@ -58,6 +60,20 @@ class SearchMonitor {
             fs.mkdirSync(dir, { recursive: true });
         }
     }
+    /**
+     * Best-effort lookup of the harness session_id for this process's project.
+     * A hook records it (see session-link.ts); returns undefined if none has run
+     * yet or on any error — this must never disrupt a search.
+     */
+    resolveHarnessSessionId() {
+        try {
+            const projectId = config_1.ConfigService.getInstance().getProjectId();
+            return (0, session_link_1.readHarnessSessionLink)(projectId) ?? undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
     recordSearch(query, resultCount, sessionId, source, context) {
         if (!this.monitoringEnabled)
             return;
@@ -66,6 +82,7 @@ class SearchMonitor {
             query,
             resultCount,
             sessionId,
+            harnessSessionId: this.resolveHarnessSessionId(),
             source,
             context
         };

package/dist/services/session-link.js

@@ -0,0 +1,92 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.harnessSessionLinkPath = harnessSessionLinkPath;
+exports.writeHarnessSessionLink = writeHarnessSessionLink;
+exports.readHarnessSessionLink = readHarnessSessionLink;
+/**
+ * Session-identity bridge (#6).
+ *
+ * There are two unrelated session ids in the system:
+ *   - Claude Code's harness `session_id`, known only to the hook processes
+ *     (they receive it on stdin) and used to name hook-state files.
+ *   - The long-lived MCP server's own per-process id (`session_<ts>_<rand>`),
+ *     which is what ends up in search-monitor.log.
+ *
+ * Because they never met, hook-side state couldn't be correlated with
+ * MCP-side activity when debugging. This module is the meeting point: a hook
+ * that has the harness id writes it here (keyed by project); the MCP server
+ * reads it so it can stamp the harness id onto its own logs.
+ *
+ * Deliberately dependency-free (fs/path/os only) so both the hooks layer and
+ * the services layer can import it without creating a cycle. The directory
+ * mirrors the hook-state dir used elsewhere (CLAUDE_RECALL_DB_PATH override or
+ * ~/.claude-recall).
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+function linkDir() {
+    const base = process.env.CLAUDE_RECALL_DB_PATH || path.join(os.homedir(), '.claude-recall');
+    return path.join(base, 'hook-state');
+}
+function safeId(id) {
+    return (id || 'default').replace(/[^a-zA-Z0-9_-]/g, '_') || 'default';
+}
+function harnessSessionLinkPath(projectId) {
+    return path.join(linkDir(), `harness-session-${safeId(projectId)}.json`);
+}
+/** Persist the harness session id for a project. No-op for empty/'default'. */
+function writeHarnessSessionLink(sessionId, projectId) {
+    if (!sessionId || sessionId === 'default')
+        return;
+    try {
+        fs.mkdirSync(linkDir(), { recursive: true });
+        fs.writeFileSync(harnessSessionLinkPath(projectId), JSON.stringify({ harnessSessionId: sessionId, projectId, updatedAt: Date.now() }), 'utf8');
+    }
+    catch {
+        // best-effort — correlation is a debugging aid, never block the caller
+    }
+}
+/** Read the most recently recorded harness session id for a project, or null. */
+function readHarnessSessionLink(projectId) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(harnessSessionLinkPath(projectId), 'utf8'));
+        return typeof parsed?.harnessSessionId === 'string' ? parsed.harnessSessionId : null;
+    }
+    catch {
+        return null;
+    }
+}

package/docs/hooks.md

@@ -58,7 +58,7 @@ Common read-only commands are exempt from enforcement:
 | Environment Variable | Default | Description |
 |---|---|---|
 | `CLAUDE_RECALL_SEARCH_TTL` | `300000` (5 min) | Milliseconds a search remains valid |
-| `CLAUDE_RECALL_ENFORCE_MODE` | `block` | `block` (exit 2), `warn` (exit 0 + stderr message), or `off` (disabled) |
+| `CLAUDE_RECALL_ENFORCE_MODE` | `warn` | `block` (exit 2), `warn` (exit 0 + stderr message), or `off` (disabled). Env wins; otherwise read from `~/.claude-recall/config.json` → `"enforceMode"`; else `warn`. The file switch is reachable from inside a running session — an env var set before launch is not. |
 
 ### Exit Codes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-recall",
-  "version": "0.37.0",
+  "version": "0.37.2",
   "description": "Persistent memory for Claude Code and Pi with native Skills integration, automatic capture, failure learning, and project scoping",
   "main": "dist/index.js",
   "bin": {