imprnt 0.1.3-edge.53 → 0.1.3-edge.54

package/CLAUDE.md

@@ -13,6 +13,16 @@ You never run the CLI by hand. You speak in plain language ("ingest this", "load
 
 The whole vault is yours, local, owner-only (`chmod 700`), never shared. There is **no** sensitivity field, no redaction pass, no secret-fencing. It holds everything, including medical, financial, and personal data, because that's the point. The only rule: it never goes near a public repo (`.gitignore` guards it if the dir is ever git-init'd). If you ever publish a subset (an article), that's an **export-time** filter you run consciously then, not a tax paid on every note at ingest.
 
+## Memory: the vault is the only store
+
+One knowledge store, reached on demand. Do **not** use the host's auto-memory (Claude Code's `MEMORY.md` + `memory/*.md`), and do not treat it as a place facts may live. It is a second always-on store `recall` cannot search, so anything parked there is invisible knowledge that silently misleads the next session.
+
+The routing test, applied before saving anything durable:
+- **Knowledge** (a fact about a person, a record, a number, project state, a reference) is a **vault note**, found by `recall`.
+- **Behavior** (a standing instruction, a taste rule, how to act) is a markdown fragment loaded every session: this contract for the universal rules, `CLAUDE.local.md` + `plugins/_personal/*` (gitignored) for the personal ones. Never the auto-memory.
+
+The same fact never lives in both. Two copies drift, and one is invisible to search. `imprnt check` sweeps every project's host auto-memory (read-only) and flags any that is non-empty, so a leak is caught, not trusted. This is also what keeps imprnt vendor-neutral: the knowledge is plain files you own, with nothing locked inside one vendor's memory, so the agent underneath is swappable.
+
 ## The one rule: deterministic-first = ration the LLM by WHERE it runs
 
 Deterministic-first does **not** mean "avoid the LLM." It means **invest it where it pays and keep it out of the hot path**. The line is drawn by *how often a step runs*:

package/dist/cli.js

@@ -2036,6 +2036,28 @@ function targetFolders(target) {
 function linksEntity(target) {
   return targetFolders(target).some((f) => ENTITY_FOLDERS.has(f));
 }
+function hostMemoryStores() {
+  const override = process.env.IMPRNT_HOST_MEMORY_DIR;
+  if (override)
+    return [override];
+  const configDir = process.env.CLAUDE_CONFIG_DIR || join14(homedir3(), ".claude");
+  const projectsDir = join14(configDir, "projects");
+  if (!existsSync12(projectsDir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync8(projectsDir);
+  } catch {
+    return [];
+  }
+  return entries.map((p) => join14(projectsDir, p, "memory")).filter((d) => {
+    try {
+      return statSync8(d).isDirectory();
+    } catch {
+      return false;
+    }
+  }).sort();
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2076,7 +2098,7 @@ ${REVIEW_END}
     writeFileSync9(p, next);
   return lines2.length ? "written" : "cleared";
 }
-var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, hostMemoryDir, strayMemory, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
+var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, memoryStores, strayStores, strayCount, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
 var init_check = __esm(() => {
   init_roots();
   init_moc();
@@ -2214,10 +2236,14 @@ var init_check = __esm(() => {
   uncovered = [...new Set(rawEntries.map(norm))].filter((r) => !refNorm.has(r)).sort();
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
-  hostMemoryDir = process.env.IMPRNT_HOST_MEMORY_DIR ?? join14(homedir3(), ".claude", "projects", projectRoot().replace(/[/.]/g, "-"), "memory");
-  strayMemory = existsSync12(hostMemoryDir) ? readdirSync8(hostMemoryDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : [];
-  if (strayMemory.length)
-    review.push(`- [ ] host auto-memory not empty — ${strayMemory.length} note(s) in ${hostMemoryDir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
+  memoryStores = hostMemoryStores();
+  strayStores = memoryStores.map((dir2) => ({
+    dir: dir2,
+    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
+  })).filter((s) => s.files.length > 0);
+  strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
+  for (const s of strayStores)
+    review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
   console.log(`imprnt check — ${notes.length} notes in ${vault4}
 `);
   if (orphans.length) {
@@ -2269,14 +2295,17 @@ var init_check = __esm(() => {
     } else
       console.log("✓ every raw snapshot has a derived note");
   }
-  if (strayMemory.length) {
-    console.log(`⚠ host auto-memory not empty (${strayMemory.length}) — a second store recall can't see, at ${hostMemoryDir}:`);
-    console.log(cap(strayMemory.map((f) => "  " + f)).join(`
+  if (strayCount) {
+    console.log(`⚠ host auto-memory not empty (${strayCount} in ${strayStores.length} project store(s)) — a second store recall can't see:`);
+    for (const s of strayStores) {
+      console.log(`  ${s.dir}`);
+      console.log(cap(s.files.map((f) => "    " + f)).join(`
 `));
-    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it.
+    }
+    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty each.
 `);
   } else
-    console.log(`✓ host auto-memory empty (vault is the only store) — checked ${hostMemoryDir}`);
+    console.log(`✓ host auto-memory empty (vault is the only store) — swept ${memoryStores.length} project store(s)`);
   ({ count, folders } = generateIndex(vault4));
   console.log(`↻ regenerated index.md — ${count} notes across ${folders} folders`);
   synced = syncNeedsReview(review);
@@ -2284,7 +2313,7 @@ var init_check = __esm(() => {
     console.log(`↻ ${review.length} finding(s) → _needs-review.md (run \`imprnt hot\` to see them)`);
   else if (synced === "cleared")
     console.log("↻ cleared resolved findings from _needs-review.md");
-  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayMemory.length;
+  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayCount;
   console.log(issues ? `
 ${issues} thing(s) to look at above.` : `
 clean.`);
@@ -2334,7 +2363,7 @@ all plugin checks passed.`);
 
 // scripts/cli.ts
 var exports_cli = {};
-import { cpSync as cpSync3, mkdirSync as mkdirSync5, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
+import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
 import { homedir as homedir4 } from "node:os";
@@ -2743,6 +2772,11 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         cpSync3(join15(pkgRoot, "CLAUDE.md"), claudeMd);
         added.push("CLAUDE.md");
       }
+      try {
+        chmodSync(target, 448);
+      } catch (e) {
+        console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
+      }
       const reg = registerVault(target, { force: rest.includes("--register") });
       if (reg.status === "registered")
         console.log(`registered as imp's default vault project (${configPath()})`);

package/dist/imp.js

@@ -2036,6 +2036,28 @@ function targetFolders(target) {
 function linksEntity(target) {
   return targetFolders(target).some((f) => ENTITY_FOLDERS.has(f));
 }
+function hostMemoryStores() {
+  const override = process.env.IMPRNT_HOST_MEMORY_DIR;
+  if (override)
+    return [override];
+  const configDir = process.env.CLAUDE_CONFIG_DIR || join14(homedir3(), ".claude");
+  const projectsDir = join14(configDir, "projects");
+  if (!existsSync12(projectsDir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync8(projectsDir);
+  } catch {
+    return [];
+  }
+  return entries.map((p) => join14(projectsDir, p, "memory")).filter((d) => {
+    try {
+      return statSync8(d).isDirectory();
+    } catch {
+      return false;
+    }
+  }).sort();
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2076,7 +2098,7 @@ ${REVIEW_END}
     writeFileSync9(p, next);
   return lines2.length ? "written" : "cleared";
 }
-var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, hostMemoryDir, strayMemory, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
+var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, memoryStores, strayStores, strayCount, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
 var init_check = __esm(() => {
   init_roots();
   init_moc();
@@ -2214,10 +2236,14 @@ var init_check = __esm(() => {
   uncovered = [...new Set(rawEntries.map(norm))].filter((r) => !refNorm.has(r)).sort();
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
-  hostMemoryDir = process.env.IMPRNT_HOST_MEMORY_DIR ?? join14(homedir3(), ".claude", "projects", projectRoot().replace(/[/.]/g, "-"), "memory");
-  strayMemory = existsSync12(hostMemoryDir) ? readdirSync8(hostMemoryDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : [];
-  if (strayMemory.length)
-    review.push(`- [ ] host auto-memory not empty — ${strayMemory.length} note(s) in ${hostMemoryDir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
+  memoryStores = hostMemoryStores();
+  strayStores = memoryStores.map((dir2) => ({
+    dir: dir2,
+    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
+  })).filter((s) => s.files.length > 0);
+  strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
+  for (const s of strayStores)
+    review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
   console.log(`imprnt check — ${notes.length} notes in ${vault4}
 `);
   if (orphans.length) {
@@ -2269,14 +2295,17 @@ var init_check = __esm(() => {
     } else
       console.log("✓ every raw snapshot has a derived note");
   }
-  if (strayMemory.length) {
-    console.log(`⚠ host auto-memory not empty (${strayMemory.length}) — a second store recall can't see, at ${hostMemoryDir}:`);
-    console.log(cap(strayMemory.map((f) => "  " + f)).join(`
+  if (strayCount) {
+    console.log(`⚠ host auto-memory not empty (${strayCount} in ${strayStores.length} project store(s)) — a second store recall can't see:`);
+    for (const s of strayStores) {
+      console.log(`  ${s.dir}`);
+      console.log(cap(s.files.map((f) => "    " + f)).join(`
 `));
-    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it.
+    }
+    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty each.
 `);
   } else
-    console.log(`✓ host auto-memory empty (vault is the only store) — checked ${hostMemoryDir}`);
+    console.log(`✓ host auto-memory empty (vault is the only store) — swept ${memoryStores.length} project store(s)`);
   ({ count, folders } = generateIndex(vault4));
   console.log(`↻ regenerated index.md — ${count} notes across ${folders} folders`);
   synced = syncNeedsReview(review);
@@ -2284,7 +2313,7 @@ var init_check = __esm(() => {
     console.log(`↻ ${review.length} finding(s) → _needs-review.md (run \`imprnt hot\` to see them)`);
   else if (synced === "cleared")
     console.log("↻ cleared resolved findings from _needs-review.md");
-  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayMemory.length;
+  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayCount;
   console.log(issues ? `
 ${issues} thing(s) to look at above.` : `
 clean.`);
@@ -2334,7 +2363,7 @@ all plugin checks passed.`);
 
 // scripts/cli.ts
 var exports_cli = {};
-import { cpSync as cpSync3, mkdirSync as mkdirSync5, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
+import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
 import { homedir as homedir4 } from "node:os";
@@ -2743,6 +2772,11 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         cpSync3(join15(pkgRoot, "CLAUDE.md"), claudeMd);
         added.push("CLAUDE.md");
       }
+      try {
+        chmodSync(target, 448);
+      } catch (e) {
+        console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
+      }
       const reg = registerVault(target, { force: rest.includes("--register") });
       if (reg.status === "registered")
         console.log(`registered as imp's default vault project (${configPath()})`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imprnt",
-  "version": "0.1.3-edge.53",
+  "version": "0.1.3-edge.54",
   "description": "Deterministic-first, plain-markdown knowledge vault. Code does the bulk transform. The LLM only touches the irreducibly-semantic 20%. Native grep plus BM25 retrieval, zero MCP on the vault.",
   "type": "module",
   "bin": {

package/templates/pointer.md

@@ -8,5 +8,7 @@ decisions, finances, health, and history.
   `imprnt recall "<keywords>"`, then read the top hits.
 - Before filing or editing ANYTHING in the vault, run `imprnt context` and follow what it prints.
   Never write a vault note without it.
+- The vault is the only knowledge store. Durable facts go in a vault note, never the host's
+  auto-memory (Claude Code's `MEMORY.md` / `memory/`), which `recall` cannot search.
 - The vault is private data. Never copy its contents into committed files, code, or external
   services.