imprnt 0.1.3-edge.53 → 0.1.3-edge.58

package/CLAUDE.md

@@ -13,6 +13,16 @@ You never run the CLI by hand. You speak in plain language ("ingest this", "load
 
 The whole vault is yours, local, owner-only (`chmod 700`), never shared. There is **no** sensitivity field, no redaction pass, no secret-fencing. It holds everything, including medical, financial, and personal data, because that's the point. The only rule: it never goes near a public repo (`.gitignore` guards it if the dir is ever git-init'd). If you ever publish a subset (an article), that's an **export-time** filter you run consciously then, not a tax paid on every note at ingest.
 
+## Memory: the vault is the only store
+
+One knowledge store, reached on demand. Do **not** use the host's auto-memory (Claude Code's `MEMORY.md` + `memory/*.md`), and do not treat it as a place facts may live. It is a second always-on store `recall` cannot search, so anything parked there is invisible knowledge that silently misleads the next session.
+
+The routing test, applied before saving anything durable:
+- **Knowledge** (a fact about a person, a record, a number, project state, a reference) is a **vault note**, found by `recall`.
+- **Behavior** (a standing instruction, a taste rule, how to act) is a markdown fragment loaded every session: this contract for the universal rules, `CLAUDE.local.md` + `plugins/_personal/*` (gitignored) for the personal ones. Never the auto-memory.
+
+The same fact never lives in both. Two copies drift, and one is invisible to search. `imprnt check` sweeps every project's host auto-memory (read-only) and flags any that is non-empty, so a leak is caught, not trusted. This is also what keeps imprnt vendor-neutral: the knowledge is plain files you own, with nothing locked inside one vendor's memory, so the agent underneath is swappable.
+
 ## The one rule: deterministic-first = ration the LLM by WHERE it runs
 
 Deterministic-first does **not** mean "avoid the LLM." It means **invest it where it pays and keep it out of the hot path**. The line is drawn by *how often a step runs*:

package/dist/cli.js

@@ -737,7 +737,13 @@ function readRegistry() {
     for (const [k, v] of Object.entries(raw?.vaults ?? {}))
       if (typeof v === "string")
         vaults[k] = v;
-    return { default: typeof raw?.default === "string" ? raw.default : undefined, vaults };
+    return {
+      default: typeof raw?.default === "string" ? raw.default : undefined,
+      vaults,
+      defaultAgent: typeof raw?.defaultAgent === "string" ? raw.defaultAgent : undefined,
+      skipPermissions: typeof raw?.skipPermissions === "boolean" ? raw.skipPermissions : undefined,
+      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined
+    };
   } catch {
     return { vaults: {} };
   }
@@ -770,6 +776,41 @@ function registerVault(path, opts = {}) {
   }
   return { status: "registered", current: path };
 }
+function readDefaultAgent() {
+  return readRegistry().defaultAgent;
+}
+function setDefaultAgent(name) {
+  const reg = readRegistry();
+  reg.defaultAgent = name;
+  return writeRegistry(reg);
+}
+function readSkipPermissions() {
+  return readRegistry().skipPermissions ?? false;
+}
+function setSkipPermissions(on) {
+  const reg = readRegistry();
+  reg.skipPermissions = on;
+  return writeRegistry(reg);
+}
+function readDefaultModel() {
+  return readRegistry().defaultModel;
+}
+function setDefaultModel(model) {
+  const reg = readRegistry();
+  reg.defaultModel = model || undefined;
+  return writeRegistry(reg);
+}
+function writeRegistry(reg) {
+  const p = configPath();
+  try {
+    mkdirSync2(dirname2(p), { recursive: true });
+    writeFileSync5(p, JSON.stringify(reg, null, 2) + `
+`);
+  } catch (e) {
+    return { ok: false, error: e instanceof Error ? e.message : String(e) };
+  }
+  return { ok: true };
+}
 function isVaultProject(dir) {
   const vault = join7(dir, "vault");
   try {
@@ -799,8 +840,8 @@ function vaultProjectRoot(start = process.cwd()) {
 var init_registry = () => {};
 
 // scripts/lib/launch.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7, realpathSync, statSync as statSync5 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { existsSync as existsSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, realpathSync, rmSync as rmSync3, statSync as statSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
 import { isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 function importPath(root, target) {
@@ -829,7 +870,13 @@ function castFragment(root) {
 `);
 }
 function pointerFragment(pkgRoot, vaultProject) {
-  const tpl = readFileSync7(join8(pkgRoot, "templates", "pointer.md"), "utf8");
+  let tpl;
+  try {
+    tpl = readFileSync7(join8(pkgRoot, "templates", "pointer.md"), "utf8");
+  } catch {
+    console.error(`imp: pointer template missing at ${join8(pkgRoot, "templates", "pointer.md")} - launching without the vault pointer`);
+    return "";
+  }
   return tpl.replaceAll("{{VAULT_PROJECT}}", () => vaultProject);
 }
 function substitutePluginDir(value, dir) {
@@ -930,53 +977,153 @@ function mergeFragment(pass, fragment, extraInject) {
     args.push(...inject);
   return args;
 }
-function buildLaunch(opts) {
-  const pass = [...opts.passthrough ?? []];
+function assembleSession(opts) {
+  const passthrough = [...opts.passthrough ?? []];
   const globalDir = opts.globalDir ?? defaultGlobalDir();
+  const skipPermissions = opts.skipPermissions ?? false;
+  const base = { cast: "", pointer: "", insideProject: false, addDirs: [], skipPermissions, model: opts.model, passthrough };
   if (!opts.vaultProject) {
-    const globals2 = globalFragment(globalDir);
-    if (!globals2)
-      return { args: pass, env: process.env };
-    return { args: mergeFragment(pass, globals2, []), env: process.env };
+    return { ...base, globals: globalFragment(globalDir) || "", env: process.env };
   }
   if (!isDir(opts.vaultProject)) {
-    console.error(`imp: vault project not found at ${opts.vaultProject} - launching plain claude (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
-    return { args: pass, env: process.env };
+    console.error(`imp: vault project not found at ${opts.vaultProject} - launching a plain session (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
+    return { ...base, globals: "", env: process.env };
   }
-  const harness = harnessFlags(opts.vaultProject);
   const projectPlugins = new Set(enabledPluginDirs(opts.vaultProject));
-  if (isInside(opts.cwd, opts.vaultProject)) {
-    const globals2 = globalFragment(globalDir, projectPlugins);
-    const args2 = globals2 ? mergeFragment(pass, globals2, []) : pass;
-    return { args: [...harness, ...args2], env: childEnv(opts.vaultProject) };
-  }
-  const globals = globalFragment(globalDir, projectPlugins);
-  const fragment = [castFragment(opts.vaultProject), pointerFragment(opts.pkgRoot, opts.vaultProject), globals].filter(Boolean).join(`
+  const inside = isInside(opts.cwd, opts.vaultProject);
+  return {
+    cast: castFragment(opts.vaultProject),
+    pointer: pointerFragment(opts.pkgRoot, opts.vaultProject),
+    globals: globalFragment(globalDir, projectPlugins) || "",
+    insideProject: inside,
+    addDirs: inside ? [] : [opts.vaultProject],
+    pluginsRoot: opts.vaultProject,
+    skipPermissions,
+    model: opts.model,
+    env: childEnv(opts.vaultProject),
+    passthrough
+  };
+}
+function joinFragments(parts) {
+  return parts.filter(Boolean).join(`
 
 `);
-  const args = mergeFragment(pass, fragment, ["--add-dir", opts.vaultProject]);
-  return { args: [...harness, ...args], env: childEnv(opts.vaultProject) };
 }
-function launchClaude(cwd, args, env = process.env) {
+function claudeRenderArgs(spec) {
+  const systemPrompt = spec.insideProject ? spec.globals : joinFragments([spec.cast, spec.pointer, spec.globals]);
+  const harness = spec.pluginsRoot ? harnessFlags(spec.pluginsRoot) : [];
+  const extra = spec.addDirs.flatMap((d) => ["--add-dir", d]);
+  const pass = spec.skipPermissions && !spec.passthrough.includes("--dangerously-skip-permissions") ? ["--dangerously-skip-permissions", ...spec.passthrough] : spec.passthrough;
+  const body = systemPrompt ? mergeFragment(pass, systemPrompt, extra) : [...pass, ...extra];
+  return [...harness, ...body];
+}
+function expandGeminiModel(m) {
+  return GEMINI_MODEL_ALIASES[m] ?? m;
+}
+function geminiRenderArgs(spec) {
+  const includes = [];
+  const systemPrompt = joinFragments([spec.cast, spec.pointer, spec.globals]);
+  if (systemPrompt) {
+    const dir = mkdtempSync2(join8(tmpdir2(), "imprnt-gemini-"));
+    writeFileSync6(join8(dir, "GEMINI.md"), systemPrompt + `
+`);
+    process.on("exit", () => {
+      try {
+        rmSync3(dir, { recursive: true, force: true });
+      } catch {}
+    });
+    includes.push(dir);
+  }
+  includes.push(...spec.addDirs);
+  if (spec.pluginsRoot && harnessFlags(spec.pluginsRoot).length) {
+    console.error("imp: gemini does not host claude harness plugins (statusline, timemachine) - skipping them");
+  }
+  const lead = [];
+  if (spec.skipPermissions) {
+    if (!spec.passthrough.includes("--yolo") && !spec.passthrough.includes("-y"))
+      lead.push("--yolo");
+    if (!spec.passthrough.includes("--skip-trust"))
+      lead.push("--skip-trust");
+  }
+  const pass = [...spec.passthrough];
+  const mIdx = pass.findIndex((a) => a === "-m" || a === "--model");
+  if (mIdx >= 0 && pass[mIdx + 1] !== undefined) {
+    pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
+  } else if (mIdx < 0 && spec.model) {
+    pass.unshift("-m", expandGeminiModel(spec.model));
+  }
+  const flags = includes.length ? ["--include-directories", includes.join(",")] : [];
+  return [...lead, ...flags, ...pass];
+}
+function resolveLaunch(passthrough, config = {}) {
+  let agentFlag;
+  let yoloFlag;
+  const rest = [];
+  for (const a of passthrough) {
+    if (a === "--gemini")
+      agentFlag = agentFlag ?? "gemini";
+    else if (a === "--claude")
+      agentFlag = agentFlag ?? "claude";
+    else if (a === "--yolo")
+      yoloFlag = yoloFlag ?? true;
+    else if (a === "--safe")
+      yoloFlag = yoloFlag ?? false;
+    else
+      rest.push(a);
+  }
+  const name = agentFlag ?? process.env.IMPRNT_AGENT ?? config.agent ?? "claude";
+  let backend = backends[name];
+  if (!backend) {
+    console.error(`imp: unknown agent "${name}" - falling back to claude (valid: ${Object.keys(backends).join(", ")})`);
+    backend = claudeBackend;
+  }
+  const envYolo = "IMPRNT_YOLO" in process.env ? !["0", "false", ""].includes(process.env.IMPRNT_YOLO ?? "") : undefined;
+  const skipPermissions = yoloFlag ?? envYolo ?? config.yolo ?? false;
+  return { backend, skipPermissions, passthrough: rest };
+}
+function launchBackend(backend, cwd, args, env = process.env) {
   if (!isDir(cwd)) {
     console.error(`imp: vault project not found at ${cwd} — re-run \`imprnt init\` in its new location (add --register to switch the default)`);
     return 1;
   }
-  const r = spawnSync2("claude", args, { cwd, stdio: "inherit", env });
+  const r = spawnSync2(backend.name, args, { cwd, stdio: "inherit", env });
   if (r.error) {
     const code = r.error.code;
-    console.error(code === "ENOENT" ? "imp: `claude` not found on PATH. Install Claude Code first: npm i -g @anthropic-ai/claude-code" : `imp: failed to launch claude: ${r.error.message}`);
+    console.error(code === "ENOENT" ? `imp: \`${backend.name}\` not found on PATH. ${backend.missingHint}` : `imp: failed to launch ${backend.name}: ${r.error.message}`);
     return 1;
   }
   return r.status ?? 1;
 }
+var claudeBackend, GEMINI_MODEL_ALIASES, geminiBackend, backends;
 var init_launch = __esm(() => {
   init_plugins();
   init_global();
+  claudeBackend = {
+    name: "claude",
+    missingHint: "Install Claude Code first: npm i -g @anthropic-ai/claude-code",
+    renderArgs: claudeRenderArgs
+  };
+  GEMINI_MODEL_ALIASES = {
+    pro: "gemini-3.1-pro-preview",
+    flash: "gemini-3.5-flash",
+    pro25: "gemini-2.5-pro",
+    lite: "gemini-3.1-flash-lite",
+    gemma31: "gemma-4-31b-it",
+    gemma26: "gemma-4-26b-a4b-it"
+  };
+  geminiBackend = {
+    name: "gemini",
+    missingHint: "Install the Gemini CLI first: npm i -g @google/gemini-cli",
+    renderArgs: geminiRenderArgs
+  };
+  backends = {
+    claude: claudeBackend,
+    gemini: geminiBackend
+  };
 });
 
 // scripts/lib/manifest.ts
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, renameSync, existsSync as existsSync8 } from "node:fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, renameSync, existsSync as existsSync8 } from "node:fs";
 import { join as join9 } from "node:path";
 function manifestPath(vault) {
   return join9(vault, ".manifest.json");
@@ -1000,7 +1147,7 @@ function loadManifest(vault) {
 function saveManifest(vault, m) {
   const p = manifestPath(vault);
   const tmp = `${p}.tmp.${process.pid}.${Date.now()}`;
-  writeFileSync6(tmp, JSON.stringify(m, null, 2) + `
+  writeFileSync7(tmp, JSON.stringify(m, null, 2) + `
 `);
   renameSync(tmp, p);
 }
@@ -1008,7 +1155,7 @@ var init_manifest = () => {};
 
 // scripts/ingest.ts
 var exports_ingest = {};
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync3, statSync as statSync6 } from "node:fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync6 } from "node:fs";
 import { createHash } from "node:crypto";
 import { basename as basename2, extname, join as join10, relative as relative3 } from "node:path";
 function slugify(s) {
@@ -1124,7 +1271,7 @@ function applyStaged(staged, vault) {
     const existingHash = createHash("sha256").update(readFileSync9(notePath, "utf8")).digest("hex").slice(0, 16);
     if (existingHash === fileHash) {
       console.log(`  = ${noteRel} already filed, identical content (hash ${fileHash}) — no-op`);
-      rmSync3(staged);
+      rmSync4(staged);
       return "noop";
     }
     console.error(`  ! ${noteRel} exists with DIFFERENT content — not overwriting (contradiction discipline)`);
@@ -1135,12 +1282,12 @@ function applyStaged(staged, vault) {
   if (!stagedSource && !priorSnapshot) {
     mkdirSync3(rawDir, { recursive: true });
     if (!existsSync9(rawPath))
-      writeFileSync7(rawPath, text);
+      writeFileSync8(rawPath, text);
   }
   manifest[manifestKey] = { hash, note: notePath, ingested: new Date().toISOString(), raw: rawEntry };
   saveManifest(vault, manifest);
   mkdirSync3(join10(vault, folder), { recursive: true });
-  writeFileSync7(notePath, finalText);
+  writeFileSync8(notePath, finalText);
   const participantsList = fmList2(fm, "participants");
   const participantsScalar = participantsList.length ? "" : fmScalar2(fm, "participants");
   const participants = (participantsScalar ? [participantsScalar] : participantsList).map(linkSlug);
@@ -1153,7 +1300,7 @@ function applyStaged(staged, vault) {
       flagNeedsReview(vault, `- [ ] unresolved person \`people/${personSlug}\` — from [[${noteRel}]] (applied from \`${staged}\`)`);
     }
   }
-  rmSync3(staged);
+  rmSync4(staged);
   console.log(`  ✓ filed ${noteRel}  (type: ${type}${domain ? `, domain: ${domain}` : ""})`);
   if (stagedSource)
     console.log(`     source -> ${rawEntry}  (note's own source: kept - no redundant snapshot)`);
@@ -1369,7 +1516,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
         if (isFile)
           copyFileSync(src, rawPath);
         else
-          writeFileSync7(rawPath, text);
+          writeFileSync8(rawPath, text);
       }
     } catch (e) {
       console.error(`cannot write snapshot ${rawPath}: ${e instanceof Error ? e.message : e}`);
@@ -1466,7 +1613,7 @@ ${body}`;
       console.log(`  hash8 collision with a distinct source -> trying \`events/${effectiveSlug}\` instead`);
     }
   }
-  writeFileSync7(notePath, note);
+  writeFileSync8(notePath, note);
   manifest[manifestKey] = { hash, note: notePath, ingested: new Date().toISOString(), raw: rawPath };
   saveManifest(vault, manifest);
   unresolved = [...speakers].filter((name) => !personResolved(vault, slugify(name), name));
@@ -1484,7 +1631,7 @@ ${body}`;
 });
 
 // scripts/lib/tags.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "node:fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync9, existsSync as existsSync10 } from "node:fs";
 import { join as join11 } from "node:path";
 function section(text2, name) {
   return text2.match(new RegExp(`##\\s*${name}\\s*\\n([\\s\\S]*?)(?:\\n##\\s|\\s*$)`, "i"))?.[1] ?? "";
@@ -1565,7 +1712,7 @@ function appendTags(vault2, newTags) {
     const sec = `## Tags
 ${tags.join(", ")}
 `;
-    writeFileSync8(p, base === "" ? sec : `${base}
+    writeFileSync9(p, base === "" ? sec : `${base}
 
 ${sec}`);
     return tags;
@@ -1581,7 +1728,7 @@ ${sec}`);
     lines2.splice(h + 1, 0, tags.join(", "));
   else
     lines2[last] = `${lines2[last].replace(/\s+$/, "")}, ${tags.join(", ")}`;
-  writeFileSync8(p, lines2.join(`
+  writeFileSync9(p, lines2.join(`
 `));
   return tags;
 }
@@ -2011,7 +2158,7 @@ var init_snapshot = __esm(() => {
 
 // scripts/check.ts
 var exports_check = {};
-import { readdirSync as readdirSync8, readFileSync as readFileSync13, statSync as statSync8, existsSync as existsSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync13, statSync as statSync8, existsSync as existsSync12, writeFileSync as writeFileSync10 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { join as join14, relative as relative6, dirname as dirname3 } from "node:path";
 import { homedir as homedir3 } from "node:os";
@@ -2036,6 +2183,28 @@ function targetFolders(target) {
 function linksEntity(target) {
   return targetFolders(target).some((f) => ENTITY_FOLDERS.has(f));
 }
+function hostMemoryStores() {
+  const override = process.env.IMPRNT_HOST_MEMORY_DIR;
+  if (override)
+    return [override];
+  const configDir = process.env.CLAUDE_CONFIG_DIR || join14(homedir3(), ".claude");
+  const projectsDir = join14(configDir, "projects");
+  if (!existsSync12(projectsDir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync8(projectsDir);
+  } catch {
+    return [];
+  }
+  return entries.map((p) => join14(projectsDir, p, "memory")).filter((d) => {
+    try {
+      return statSync8(d).isDirectory();
+    } catch {
+      return false;
+    }
+  }).sort();
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2073,10 +2242,10 @@ ${REVIEW_END}
 `) + section2;
   }
   if (next !== prev || !exists)
-    writeFileSync9(p, next);
+    writeFileSync10(p, next);
   return lines2.length ? "written" : "cleared";
 }
-var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, hostMemoryDir, strayMemory, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
+var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, memoryStores, strayStores, strayCount, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
 var init_check = __esm(() => {
   init_roots();
   init_moc();
@@ -2214,10 +2383,14 @@ var init_check = __esm(() => {
   uncovered = [...new Set(rawEntries.map(norm))].filter((r) => !refNorm.has(r)).sort();
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
-  hostMemoryDir = process.env.IMPRNT_HOST_MEMORY_DIR ?? join14(homedir3(), ".claude", "projects", projectRoot().replace(/[/.]/g, "-"), "memory");
-  strayMemory = existsSync12(hostMemoryDir) ? readdirSync8(hostMemoryDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : [];
-  if (strayMemory.length)
-    review.push(`- [ ] host auto-memory not empty — ${strayMemory.length} note(s) in ${hostMemoryDir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
+  memoryStores = hostMemoryStores();
+  strayStores = memoryStores.map((dir2) => ({
+    dir: dir2,
+    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
+  })).filter((s) => s.files.length > 0);
+  strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
+  for (const s of strayStores)
+    review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
   console.log(`imprnt check — ${notes.length} notes in ${vault4}
 `);
   if (orphans.length) {
@@ -2269,14 +2442,17 @@ var init_check = __esm(() => {
     } else
       console.log("✓ every raw snapshot has a derived note");
   }
-  if (strayMemory.length) {
-    console.log(`⚠ host auto-memory not empty (${strayMemory.length}) — a second store recall can't see, at ${hostMemoryDir}:`);
-    console.log(cap(strayMemory.map((f) => "  " + f)).join(`
+  if (strayCount) {
+    console.log(`⚠ host auto-memory not empty (${strayCount} in ${strayStores.length} project store(s)) — a second store recall can't see:`);
+    for (const s of strayStores) {
+      console.log(`  ${s.dir}`);
+      console.log(cap(s.files.map((f) => "    " + f)).join(`
 `));
-    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it.
+    }
+    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty each.
 `);
   } else
-    console.log(`✓ host auto-memory empty (vault is the only store) — checked ${hostMemoryDir}`);
+    console.log(`✓ host auto-memory empty (vault is the only store) — swept ${memoryStores.length} project store(s)`);
   ({ count, folders } = generateIndex(vault4));
   console.log(`↻ regenerated index.md — ${count} notes across ${folders} folders`);
   synced = syncNeedsReview(review);
@@ -2284,7 +2460,7 @@ var init_check = __esm(() => {
     console.log(`↻ ${review.length} finding(s) → _needs-review.md (run \`imprnt hot\` to see them)`);
   else if (synced === "cleared")
     console.log("↻ cleared resolved findings from _needs-review.md");
-  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayMemory.length;
+  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayCount;
   console.log(issues ? `
 ${issues} thing(s) to look at above.` : `
 clean.`);
@@ -2334,7 +2510,7 @@ all plugin checks passed.`);
 
 // scripts/cli.ts
 var exports_cli = {};
-import { cpSync as cpSync3, mkdirSync as mkdirSync5, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
+import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
 import { homedir as homedir4 } from "node:os";
@@ -2463,8 +2639,9 @@ var init_cli = __esm(async () => {
     }
     case "lair": {
       const home = requireVaultHome();
-      const lair = buildLaunch({ cwd: home, vaultProject: home, pkgRoot, passthrough: rest });
-      process.exit(launchClaude(home, lair.args, lair.env));
+      const { backend, skipPermissions, passthrough } = resolveLaunch(rest, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
+      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough, skipPermissions, model: readDefaultModel() });
+      process.exit(launchBackend(backend, home, backend.renderArgs(spec), spec.env));
     }
     case "context": {
       const home = requireVaultHome();
@@ -2476,6 +2653,75 @@ var init_cli = __esm(async () => {
       process.stdout.write(readFileSync14(contract, "utf8"));
       break;
     }
+    case "agent": {
+      const [name] = rest;
+      if (!name) {
+        const stored = readDefaultAgent();
+        console.log(`default agent: ${stored ?? "claude (built-in)"}`);
+        if (process.env.IMPRNT_AGENT)
+          console.log(`  IMPRNT_AGENT=${process.env.IMPRNT_AGENT} overrides it in this shell`);
+        console.log("set: imprnt agent <claude|gemini>   override one session: imp --gemini | imp --claude");
+        break;
+      }
+      if (name !== "claude" && name !== "gemini") {
+        console.error(`unknown agent "${name}" — valid: claude, gemini`);
+        process.exit(1);
+      }
+      const r = setDefaultAgent(name);
+      if (!r.ok) {
+        console.error(`could not set default agent (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(`default agent set to ${name} (${configPath()})`);
+      break;
+    }
+    case "yolo": {
+      const [arg] = rest;
+      if (!arg) {
+        console.log(`skip-permissions default: ${readSkipPermissions() ? "on" : "off"}`);
+        if ("IMPRNT_YOLO" in process.env)
+          console.log(`  IMPRNT_YOLO=${process.env.IMPRNT_YOLO} overrides it in this shell`);
+        console.log("set: imprnt yolo on|off   override one session: imp --yolo | imp --safe");
+        break;
+      }
+      if (arg !== "on" && arg !== "off") {
+        console.error("usage: imprnt yolo [on|off]");
+        process.exit(1);
+      }
+      const r = setSkipPermissions(arg === "on");
+      if (!r.ok) {
+        console.error(`could not set yolo default (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(arg === "on" ? `skip-permissions ENABLED (${configPath()}) — every imp session now runs without permission prompts` : `skip-permissions disabled (${configPath()})`);
+      break;
+    }
+    case "model": {
+      const [arg] = rest;
+      if (!arg) {
+        const m = readDefaultModel();
+        console.log(`default model: ${m ?? "(agent's own default)"}`);
+        console.log("set: imprnt model <alias|id>   clear: imprnt model off");
+        console.log("gemini aliases: pro=gemini-3.1-pro-preview, flash=gemini-3.5-flash, pro25=gemini-2.5-pro, lite=gemini-3.1-flash-lite, gemma31, gemma26");
+        break;
+      }
+      if (arg === "off" || arg === "default" || arg === "none") {
+        const r2 = setDefaultModel("");
+        if (!r2.ok) {
+          console.error(`could not clear default model (${configPath()}): ${r2.error}`);
+          process.exit(1);
+        }
+        console.log(`default model cleared (${configPath()}) — the agent uses its own default`);
+        break;
+      }
+      const r = setDefaultModel(arg);
+      if (!r.ok) {
+        console.error(`could not set default model (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(`default model set to ${arg} (${configPath()})`);
+      break;
+    }
     case "plugin": {
       const proj = pluginRoot();
       if (proj !== process.cwd())
@@ -2743,6 +2989,11 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         cpSync3(join15(pkgRoot, "CLAUDE.md"), claudeMd);
         added.push("CLAUDE.md");
       }
+      try {
+        chmodSync(target, 448);
+      } catch (e) {
+        console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
+      }
       const reg = registerVault(target, { force: rest.includes("--register") });
       if (reg.status === "registered")
         console.log(`registered as imp's default vault project (${configPath()})`);
@@ -2784,17 +3035,21 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
       if (wantsLaunch && (!bare || process.stdin.isTTY && process.stdout.isTTY)) {
         const home = vaultProjectRoot();
         if (!home) {
-          console.error("imp: no vault registered yet — run `imprnt init` in your vault project to give your assistant a memory. Launching plain claude.");
+          console.error("imp: no vault registered yet — run `imprnt init` in your vault project to give your assistant a memory. Launching a plain session.");
         }
-        const { args: args5, env } = buildLaunch({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: bare ? [] : [cmd, ...rest] });
-        process.exit(launchClaude(process.cwd(), args5, env));
+        const raw = bare ? [] : [cmd, ...rest];
+        const { backend, skipPermissions, passthrough } = resolveLaunch(raw, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
+        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough, skipPermissions, model: readDefaultModel() });
+        process.exit(launchBackend(backend, process.cwd(), backend.renderArgs(spec), spec.env));
       }
       console.log(`imprnt — deterministic-first markdown knowledge vault
 
 the front door (the \`imp\` bin):
-  imp                                      open your assistant HERE: claude + your cast + the vault pointer
+  imp                                      open your assistant HERE: your agent + your cast + the vault pointer
   imp lair                                 open it in your vault project — full contract, resumable history
-  imp -c | --resume | <claude flags>       flags pass through to claude
+  imp --gemini | --claude                  pick the agent backend for this session (default: imprnt agent)
+  imp --yolo | --safe                      skip / keep permission prompts for this session (default: imprnt yolo)
+  imp -c | --resume | <agent flags>        flags pass through to the chosen agent
 
 engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt init [path] [--register]          scaffold vault (entities/domains/forms) + raw, register as imp's default; prompts for a location when run interactively with no path (default ~/imprnt)
@@ -2802,6 +3057,9 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt ingest <file|text> [--vault D]    snapshot a source -> raw/; a transcript file also gets an event skeleton (no LLM)
   imprnt recall "<query>" [--vault D]      synonym-aware BM25 ranking over the vault
   imprnt context                           print the vault contract — agents run this before writing any note
+  imprnt agent [claude|gemini]             show or set the per-machine default agent backend for imp
+  imprnt yolo [on|off]                      show or set the per-machine skip-permissions default for imp
+  imprnt model [alias|id|off]               show or set the per-machine default model (gemini aliases: pro, flash, pro25, lite, ...)
   imprnt check [--all] [--vault D]         integrity (orphan links, disconnected notes, uncovered snapshots) + regenerate index.md; --all also runs each plugins/*/check.js
   imprnt ingest --apply <file> [--vault D] file a pre-enriched staged note from a plugin into the vault (snapshot + resolve); --apply-all globs plugins/*/proposed/
   imprnt hot [--vault D]                   needs-review + the session primer

package/dist/imp.js

@@ -737,7 +737,13 @@ function readRegistry() {
     for (const [k, v] of Object.entries(raw?.vaults ?? {}))
       if (typeof v === "string")
         vaults[k] = v;
-    return { default: typeof raw?.default === "string" ? raw.default : undefined, vaults };
+    return {
+      default: typeof raw?.default === "string" ? raw.default : undefined,
+      vaults,
+      defaultAgent: typeof raw?.defaultAgent === "string" ? raw.defaultAgent : undefined,
+      skipPermissions: typeof raw?.skipPermissions === "boolean" ? raw.skipPermissions : undefined,
+      defaultModel: typeof raw?.defaultModel === "string" ? raw.defaultModel : undefined
+    };
   } catch {
     return { vaults: {} };
   }
@@ -770,6 +776,41 @@ function registerVault(path, opts = {}) {
   }
   return { status: "registered", current: path };
 }
+function readDefaultAgent() {
+  return readRegistry().defaultAgent;
+}
+function setDefaultAgent(name) {
+  const reg = readRegistry();
+  reg.defaultAgent = name;
+  return writeRegistry(reg);
+}
+function readSkipPermissions() {
+  return readRegistry().skipPermissions ?? false;
+}
+function setSkipPermissions(on) {
+  const reg = readRegistry();
+  reg.skipPermissions = on;
+  return writeRegistry(reg);
+}
+function readDefaultModel() {
+  return readRegistry().defaultModel;
+}
+function setDefaultModel(model) {
+  const reg = readRegistry();
+  reg.defaultModel = model || undefined;
+  return writeRegistry(reg);
+}
+function writeRegistry(reg) {
+  const p = configPath();
+  try {
+    mkdirSync2(dirname2(p), { recursive: true });
+    writeFileSync5(p, JSON.stringify(reg, null, 2) + `
+`);
+  } catch (e) {
+    return { ok: false, error: e instanceof Error ? e.message : String(e) };
+  }
+  return { ok: true };
+}
 function isVaultProject(dir) {
   const vault = join7(dir, "vault");
   try {
@@ -799,8 +840,8 @@ function vaultProjectRoot(start = process.cwd()) {
 var init_registry = () => {};
 
 // scripts/lib/launch.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7, realpathSync, statSync as statSync5 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { existsSync as existsSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, realpathSync, rmSync as rmSync3, statSync as statSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
 import { isAbsolute, join as join8, resolve as resolve4, sep as sep2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 function importPath(root, target) {
@@ -829,7 +870,13 @@ function castFragment(root) {
 `);
 }
 function pointerFragment(pkgRoot, vaultProject) {
-  const tpl = readFileSync7(join8(pkgRoot, "templates", "pointer.md"), "utf8");
+  let tpl;
+  try {
+    tpl = readFileSync7(join8(pkgRoot, "templates", "pointer.md"), "utf8");
+  } catch {
+    console.error(`imp: pointer template missing at ${join8(pkgRoot, "templates", "pointer.md")} - launching without the vault pointer`);
+    return "";
+  }
   return tpl.replaceAll("{{VAULT_PROJECT}}", () => vaultProject);
 }
 function substitutePluginDir(value, dir) {
@@ -930,53 +977,153 @@ function mergeFragment(pass, fragment, extraInject) {
     args.push(...inject);
   return args;
 }
-function buildLaunch(opts) {
-  const pass = [...opts.passthrough ?? []];
+function assembleSession(opts) {
+  const passthrough = [...opts.passthrough ?? []];
   const globalDir = opts.globalDir ?? defaultGlobalDir();
+  const skipPermissions = opts.skipPermissions ?? false;
+  const base = { cast: "", pointer: "", insideProject: false, addDirs: [], skipPermissions, model: opts.model, passthrough };
   if (!opts.vaultProject) {
-    const globals2 = globalFragment(globalDir);
-    if (!globals2)
-      return { args: pass, env: process.env };
-    return { args: mergeFragment(pass, globals2, []), env: process.env };
+    return { ...base, globals: globalFragment(globalDir) || "", env: process.env };
   }
   if (!isDir(opts.vaultProject)) {
-    console.error(`imp: vault project not found at ${opts.vaultProject} - launching plain claude (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
-    return { args: pass, env: process.env };
+    console.error(`imp: vault project not found at ${opts.vaultProject} - launching a plain session (re-run \`imprnt init\` there, or fix IMPRNT_ROOT)`);
+    return { ...base, globals: "", env: process.env };
   }
-  const harness = harnessFlags(opts.vaultProject);
   const projectPlugins = new Set(enabledPluginDirs(opts.vaultProject));
-  if (isInside(opts.cwd, opts.vaultProject)) {
-    const globals2 = globalFragment(globalDir, projectPlugins);
-    const args2 = globals2 ? mergeFragment(pass, globals2, []) : pass;
-    return { args: [...harness, ...args2], env: childEnv(opts.vaultProject) };
-  }
-  const globals = globalFragment(globalDir, projectPlugins);
-  const fragment = [castFragment(opts.vaultProject), pointerFragment(opts.pkgRoot, opts.vaultProject), globals].filter(Boolean).join(`
+  const inside = isInside(opts.cwd, opts.vaultProject);
+  return {
+    cast: castFragment(opts.vaultProject),
+    pointer: pointerFragment(opts.pkgRoot, opts.vaultProject),
+    globals: globalFragment(globalDir, projectPlugins) || "",
+    insideProject: inside,
+    addDirs: inside ? [] : [opts.vaultProject],
+    pluginsRoot: opts.vaultProject,
+    skipPermissions,
+    model: opts.model,
+    env: childEnv(opts.vaultProject),
+    passthrough
+  };
+}
+function joinFragments(parts) {
+  return parts.filter(Boolean).join(`
 
 `);
-  const args = mergeFragment(pass, fragment, ["--add-dir", opts.vaultProject]);
-  return { args: [...harness, ...args], env: childEnv(opts.vaultProject) };
 }
-function launchClaude(cwd, args, env = process.env) {
+function claudeRenderArgs(spec) {
+  const systemPrompt = spec.insideProject ? spec.globals : joinFragments([spec.cast, spec.pointer, spec.globals]);
+  const harness = spec.pluginsRoot ? harnessFlags(spec.pluginsRoot) : [];
+  const extra = spec.addDirs.flatMap((d) => ["--add-dir", d]);
+  const pass = spec.skipPermissions && !spec.passthrough.includes("--dangerously-skip-permissions") ? ["--dangerously-skip-permissions", ...spec.passthrough] : spec.passthrough;
+  const body = systemPrompt ? mergeFragment(pass, systemPrompt, extra) : [...pass, ...extra];
+  return [...harness, ...body];
+}
+function expandGeminiModel(m) {
+  return GEMINI_MODEL_ALIASES[m] ?? m;
+}
+function geminiRenderArgs(spec) {
+  const includes = [];
+  const systemPrompt = joinFragments([spec.cast, spec.pointer, spec.globals]);
+  if (systemPrompt) {
+    const dir = mkdtempSync2(join8(tmpdir2(), "imprnt-gemini-"));
+    writeFileSync6(join8(dir, "GEMINI.md"), systemPrompt + `
+`);
+    process.on("exit", () => {
+      try {
+        rmSync3(dir, { recursive: true, force: true });
+      } catch {}
+    });
+    includes.push(dir);
+  }
+  includes.push(...spec.addDirs);
+  if (spec.pluginsRoot && harnessFlags(spec.pluginsRoot).length) {
+    console.error("imp: gemini does not host claude harness plugins (statusline, timemachine) - skipping them");
+  }
+  const lead = [];
+  if (spec.skipPermissions) {
+    if (!spec.passthrough.includes("--yolo") && !spec.passthrough.includes("-y"))
+      lead.push("--yolo");
+    if (!spec.passthrough.includes("--skip-trust"))
+      lead.push("--skip-trust");
+  }
+  const pass = [...spec.passthrough];
+  const mIdx = pass.findIndex((a) => a === "-m" || a === "--model");
+  if (mIdx >= 0 && pass[mIdx + 1] !== undefined) {
+    pass[mIdx + 1] = expandGeminiModel(pass[mIdx + 1]);
+  } else if (mIdx < 0 && spec.model) {
+    pass.unshift("-m", expandGeminiModel(spec.model));
+  }
+  const flags = includes.length ? ["--include-directories", includes.join(",")] : [];
+  return [...lead, ...flags, ...pass];
+}
+function resolveLaunch(passthrough, config = {}) {
+  let agentFlag;
+  let yoloFlag;
+  const rest = [];
+  for (const a of passthrough) {
+    if (a === "--gemini")
+      agentFlag = agentFlag ?? "gemini";
+    else if (a === "--claude")
+      agentFlag = agentFlag ?? "claude";
+    else if (a === "--yolo")
+      yoloFlag = yoloFlag ?? true;
+    else if (a === "--safe")
+      yoloFlag = yoloFlag ?? false;
+    else
+      rest.push(a);
+  }
+  const name = agentFlag ?? process.env.IMPRNT_AGENT ?? config.agent ?? "claude";
+  let backend = backends[name];
+  if (!backend) {
+    console.error(`imp: unknown agent "${name}" - falling back to claude (valid: ${Object.keys(backends).join(", ")})`);
+    backend = claudeBackend;
+  }
+  const envYolo = "IMPRNT_YOLO" in process.env ? !["0", "false", ""].includes(process.env.IMPRNT_YOLO ?? "") : undefined;
+  const skipPermissions = yoloFlag ?? envYolo ?? config.yolo ?? false;
+  return { backend, skipPermissions, passthrough: rest };
+}
+function launchBackend(backend, cwd, args, env = process.env) {
   if (!isDir(cwd)) {
     console.error(`imp: vault project not found at ${cwd} — re-run \`imprnt init\` in its new location (add --register to switch the default)`);
     return 1;
   }
-  const r = spawnSync2("claude", args, { cwd, stdio: "inherit", env });
+  const r = spawnSync2(backend.name, args, { cwd, stdio: "inherit", env });
   if (r.error) {
     const code = r.error.code;
-    console.error(code === "ENOENT" ? "imp: `claude` not found on PATH. Install Claude Code first: npm i -g @anthropic-ai/claude-code" : `imp: failed to launch claude: ${r.error.message}`);
+    console.error(code === "ENOENT" ? `imp: \`${backend.name}\` not found on PATH. ${backend.missingHint}` : `imp: failed to launch ${backend.name}: ${r.error.message}`);
     return 1;
   }
   return r.status ?? 1;
 }
+var claudeBackend, GEMINI_MODEL_ALIASES, geminiBackend, backends;
 var init_launch = __esm(() => {
   init_plugins();
   init_global();
+  claudeBackend = {
+    name: "claude",
+    missingHint: "Install Claude Code first: npm i -g @anthropic-ai/claude-code",
+    renderArgs: claudeRenderArgs
+  };
+  GEMINI_MODEL_ALIASES = {
+    pro: "gemini-3.1-pro-preview",
+    flash: "gemini-3.5-flash",
+    pro25: "gemini-2.5-pro",
+    lite: "gemini-3.1-flash-lite",
+    gemma31: "gemma-4-31b-it",
+    gemma26: "gemma-4-26b-a4b-it"
+  };
+  geminiBackend = {
+    name: "gemini",
+    missingHint: "Install the Gemini CLI first: npm i -g @google/gemini-cli",
+    renderArgs: geminiRenderArgs
+  };
+  backends = {
+    claude: claudeBackend,
+    gemini: geminiBackend
+  };
 });
 
 // scripts/lib/manifest.ts
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, renameSync, existsSync as existsSync8 } from "node:fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, renameSync, existsSync as existsSync8 } from "node:fs";
 import { join as join9 } from "node:path";
 function manifestPath(vault) {
   return join9(vault, ".manifest.json");
@@ -1000,7 +1147,7 @@ function loadManifest(vault) {
 function saveManifest(vault, m) {
   const p = manifestPath(vault);
   const tmp = `${p}.tmp.${process.pid}.${Date.now()}`;
-  writeFileSync6(tmp, JSON.stringify(m, null, 2) + `
+  writeFileSync7(tmp, JSON.stringify(m, null, 2) + `
 `);
   renameSync(tmp, p);
 }
@@ -1008,7 +1155,7 @@ var init_manifest = () => {};
 
 // scripts/ingest.ts
 var exports_ingest = {};
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync3, statSync as statSync6 } from "node:fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync3, existsSync as existsSync9, copyFileSync, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync6 } from "node:fs";
 import { createHash } from "node:crypto";
 import { basename as basename2, extname, join as join10, relative as relative3 } from "node:path";
 function slugify(s) {
@@ -1124,7 +1271,7 @@ function applyStaged(staged, vault) {
     const existingHash = createHash("sha256").update(readFileSync9(notePath, "utf8")).digest("hex").slice(0, 16);
     if (existingHash === fileHash) {
       console.log(`  = ${noteRel} already filed, identical content (hash ${fileHash}) — no-op`);
-      rmSync3(staged);
+      rmSync4(staged);
       return "noop";
     }
     console.error(`  ! ${noteRel} exists with DIFFERENT content — not overwriting (contradiction discipline)`);
@@ -1135,12 +1282,12 @@ function applyStaged(staged, vault) {
   if (!stagedSource && !priorSnapshot) {
     mkdirSync3(rawDir, { recursive: true });
     if (!existsSync9(rawPath))
-      writeFileSync7(rawPath, text);
+      writeFileSync8(rawPath, text);
   }
   manifest[manifestKey] = { hash, note: notePath, ingested: new Date().toISOString(), raw: rawEntry };
   saveManifest(vault, manifest);
   mkdirSync3(join10(vault, folder), { recursive: true });
-  writeFileSync7(notePath, finalText);
+  writeFileSync8(notePath, finalText);
   const participantsList = fmList2(fm, "participants");
   const participantsScalar = participantsList.length ? "" : fmScalar2(fm, "participants");
   const participants = (participantsScalar ? [participantsScalar] : participantsList).map(linkSlug);
@@ -1153,7 +1300,7 @@ function applyStaged(staged, vault) {
       flagNeedsReview(vault, `- [ ] unresolved person \`people/${personSlug}\` — from [[${noteRel}]] (applied from \`${staged}\`)`);
     }
   }
-  rmSync3(staged);
+  rmSync4(staged);
   console.log(`  ✓ filed ${noteRel}  (type: ${type}${domain ? `, domain: ${domain}` : ""})`);
   if (stagedSource)
     console.log(`     source -> ${rawEntry}  (note's own source: kept - no redundant snapshot)`);
@@ -1369,7 +1516,7 @@ ${filed} filed, ${noop} no-op, ${conflict} conflict, ${error} error.`);
         if (isFile)
           copyFileSync(src, rawPath);
         else
-          writeFileSync7(rawPath, text);
+          writeFileSync8(rawPath, text);
       }
     } catch (e) {
       console.error(`cannot write snapshot ${rawPath}: ${e instanceof Error ? e.message : e}`);
@@ -1466,7 +1613,7 @@ ${body}`;
       console.log(`  hash8 collision with a distinct source -> trying \`events/${effectiveSlug}\` instead`);
     }
   }
-  writeFileSync7(notePath, note);
+  writeFileSync8(notePath, note);
   manifest[manifestKey] = { hash, note: notePath, ingested: new Date().toISOString(), raw: rawPath };
   saveManifest(vault, manifest);
   unresolved = [...speakers].filter((name) => !personResolved(vault, slugify(name), name));
@@ -1484,7 +1631,7 @@ ${body}`;
 });
 
 // scripts/lib/tags.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync8, existsSync as existsSync10 } from "node:fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync9, existsSync as existsSync10 } from "node:fs";
 import { join as join11 } from "node:path";
 function section(text2, name) {
   return text2.match(new RegExp(`##\\s*${name}\\s*\\n([\\s\\S]*?)(?:\\n##\\s|\\s*$)`, "i"))?.[1] ?? "";
@@ -1565,7 +1712,7 @@ function appendTags(vault2, newTags) {
     const sec = `## Tags
 ${tags.join(", ")}
 `;
-    writeFileSync8(p, base === "" ? sec : `${base}
+    writeFileSync9(p, base === "" ? sec : `${base}
 
 ${sec}`);
     return tags;
@@ -1581,7 +1728,7 @@ ${sec}`);
     lines2.splice(h + 1, 0, tags.join(", "));
   else
     lines2[last] = `${lines2[last].replace(/\s+$/, "")}, ${tags.join(", ")}`;
-  writeFileSync8(p, lines2.join(`
+  writeFileSync9(p, lines2.join(`
 `));
   return tags;
 }
@@ -2011,7 +2158,7 @@ var init_snapshot = __esm(() => {
 
 // scripts/check.ts
 var exports_check = {};
-import { readdirSync as readdirSync8, readFileSync as readFileSync13, statSync as statSync8, existsSync as existsSync12, writeFileSync as writeFileSync9 } from "node:fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync13, statSync as statSync8, existsSync as existsSync12, writeFileSync as writeFileSync10 } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { join as join14, relative as relative6, dirname as dirname3 } from "node:path";
 import { homedir as homedir3 } from "node:os";
@@ -2036,6 +2183,28 @@ function targetFolders(target) {
 function linksEntity(target) {
   return targetFolders(target).some((f) => ENTITY_FOLDERS.has(f));
 }
+function hostMemoryStores() {
+  const override = process.env.IMPRNT_HOST_MEMORY_DIR;
+  if (override)
+    return [override];
+  const configDir = process.env.CLAUDE_CONFIG_DIR || join14(homedir3(), ".claude");
+  const projectsDir = join14(configDir, "projects");
+  if (!existsSync12(projectsDir))
+    return [];
+  let entries;
+  try {
+    entries = readdirSync8(projectsDir);
+  } catch {
+    return [];
+  }
+  return entries.map((p) => join14(projectsDir, p, "memory")).filter((d) => {
+    try {
+      return statSync8(d).isDirectory();
+    } catch {
+      return false;
+    }
+  }).sort();
+}
 function syncNeedsReview(lines2) {
   const p = join14(vault4, "_needs-review.md");
   const exists = existsSync12(p);
@@ -2073,10 +2242,10 @@ ${REVIEW_END}
 `) + section2;
   }
   if (next !== prev || !exists)
-    writeFileSync9(p, next);
+    writeFileSync10(p, next);
   return lines2.length ? "written" : "cleared";
 }
-var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, hostMemoryDir, strayMemory, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
+var args4, vault4, all = false, ENTITY_FOLDERS, DOMAIN_FOLDERS2, LINK, notes, allSlugs, folderOf, byBasename, orphans, disconnected, domainIssues, untagged, review, referencedRaw, tagVocab, hasRealTag = (tags) => tags.some((t) => /[\p{L}\p{N}]/u.test(normalize(tagVocab, t))), hasTagsFile, addedTags, dupPairs, manifest3, rawEntries, norm = (p) => p.replace(/^\.\//, "").replace(/^.*\/raw\//, "raw/").replace(/\.md$/, ""), refNorm, uncovered, memoryStores, strayStores, strayCount, REVIEW_BEGIN = "<!-- imprnt-check:begin (regenerated by `imprnt check` - do not edit between the markers) -->", REVIEW_END = "<!-- imprnt-check:end -->", cap = (xs, n = 25) => xs.slice(0, n).concat(xs.length > n ? [`  … +${xs.length - n} more`] : []), count, folders, synced, issues;
 var init_check = __esm(() => {
   init_roots();
   init_moc();
@@ -2214,10 +2383,14 @@ var init_check = __esm(() => {
   uncovered = [...new Set(rawEntries.map(norm))].filter((r) => !refNorm.has(r)).sort();
   for (const r of uncovered)
     review.push(`- [ ] unclassified snapshot \`${r}\` — no vault note points back`);
-  hostMemoryDir = process.env.IMPRNT_HOST_MEMORY_DIR ?? join14(homedir3(), ".claude", "projects", projectRoot().replace(/[/.]/g, "-"), "memory");
-  strayMemory = existsSync12(hostMemoryDir) ? readdirSync8(hostMemoryDir).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : [];
-  if (strayMemory.length)
-    review.push(`- [ ] host auto-memory not empty — ${strayMemory.length} note(s) in ${hostMemoryDir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
+  memoryStores = hostMemoryStores();
+  strayStores = memoryStores.map((dir2) => ({
+    dir: dir2,
+    files: existsSync12(dir2) ? readdirSync8(dir2).filter((f) => f.endsWith(".md") && f !== "MEMORY.md").sort() : []
+  })).filter((s) => s.files.length > 0);
+  strayCount = strayStores.reduce((n, s) => n + s.files.length, 0);
+  for (const s of strayStores)
+    review.push(`- [ ] host auto-memory not empty — ${s.files.length} note(s) in ${s.dir}; migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it`);
   console.log(`imprnt check — ${notes.length} notes in ${vault4}
 `);
   if (orphans.length) {
@@ -2269,14 +2442,17 @@ var init_check = __esm(() => {
     } else
       console.log("✓ every raw snapshot has a derived note");
   }
-  if (strayMemory.length) {
-    console.log(`⚠ host auto-memory not empty (${strayMemory.length}) — a second store recall can't see, at ${hostMemoryDir}:`);
-    console.log(cap(strayMemory.map((f) => "  " + f)).join(`
+  if (strayCount) {
+    console.log(`⚠ host auto-memory not empty (${strayCount} in ${strayStores.length} project store(s)) — a second store recall can't see:`);
+    for (const s of strayStores) {
+      console.log(`  ${s.dir}`);
+      console.log(cap(s.files.map((f) => "    " + f)).join(`
 `));
-    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty it.
+    }
+    console.log(`  migrate knowledge → vault notes, behavior → a CLAUDE.local.md fragment, then empty each.
 `);
   } else
-    console.log(`✓ host auto-memory empty (vault is the only store) — checked ${hostMemoryDir}`);
+    console.log(`✓ host auto-memory empty (vault is the only store) — swept ${memoryStores.length} project store(s)`);
   ({ count, folders } = generateIndex(vault4));
   console.log(`↻ regenerated index.md — ${count} notes across ${folders} folders`);
   synced = syncNeedsReview(review);
@@ -2284,7 +2460,7 @@ var init_check = __esm(() => {
     console.log(`↻ ${review.length} finding(s) → _needs-review.md (run \`imprnt hot\` to see them)`);
   else if (synced === "cleared")
     console.log("↻ cleared resolved findings from _needs-review.md");
-  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayMemory.length;
+  issues = orphans.length + disconnected.length + domainIssues.length + untagged.length + uncovered.length + dupPairs.length + strayCount;
   console.log(issues ? `
 ${issues} thing(s) to look at above.` : `
 clean.`);
@@ -2334,7 +2510,7 @@ all plugin checks passed.`);
 
 // scripts/cli.ts
 var exports_cli = {};
-import { cpSync as cpSync3, mkdirSync as mkdirSync5, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
+import { cpSync as cpSync3, mkdirSync as mkdirSync5, chmodSync, existsSync as existsSync13, readFileSync as readFileSync14, lstatSync as lstatSync4, statSync as statSync9, realpathSync as realpathSync2 } from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { join as join15, dirname as dirname4, resolve as resolve6, basename as basename5 } from "node:path";
 import { homedir as homedir4 } from "node:os";
@@ -2463,8 +2639,9 @@ var init_cli = __esm(async () => {
     }
     case "lair": {
       const home = requireVaultHome();
-      const lair = buildLaunch({ cwd: home, vaultProject: home, pkgRoot, passthrough: rest });
-      process.exit(launchClaude(home, lair.args, lair.env));
+      const { backend, skipPermissions, passthrough } = resolveLaunch(rest, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
+      const spec = assembleSession({ cwd: home, vaultProject: home, pkgRoot, passthrough, skipPermissions, model: readDefaultModel() });
+      process.exit(launchBackend(backend, home, backend.renderArgs(spec), spec.env));
     }
     case "context": {
       const home = requireVaultHome();
@@ -2476,6 +2653,75 @@ var init_cli = __esm(async () => {
       process.stdout.write(readFileSync14(contract, "utf8"));
       break;
     }
+    case "agent": {
+      const [name] = rest;
+      if (!name) {
+        const stored = readDefaultAgent();
+        console.log(`default agent: ${stored ?? "claude (built-in)"}`);
+        if (process.env.IMPRNT_AGENT)
+          console.log(`  IMPRNT_AGENT=${process.env.IMPRNT_AGENT} overrides it in this shell`);
+        console.log("set: imprnt agent <claude|gemini>   override one session: imp --gemini | imp --claude");
+        break;
+      }
+      if (name !== "claude" && name !== "gemini") {
+        console.error(`unknown agent "${name}" — valid: claude, gemini`);
+        process.exit(1);
+      }
+      const r = setDefaultAgent(name);
+      if (!r.ok) {
+        console.error(`could not set default agent (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(`default agent set to ${name} (${configPath()})`);
+      break;
+    }
+    case "yolo": {
+      const [arg] = rest;
+      if (!arg) {
+        console.log(`skip-permissions default: ${readSkipPermissions() ? "on" : "off"}`);
+        if ("IMPRNT_YOLO" in process.env)
+          console.log(`  IMPRNT_YOLO=${process.env.IMPRNT_YOLO} overrides it in this shell`);
+        console.log("set: imprnt yolo on|off   override one session: imp --yolo | imp --safe");
+        break;
+      }
+      if (arg !== "on" && arg !== "off") {
+        console.error("usage: imprnt yolo [on|off]");
+        process.exit(1);
+      }
+      const r = setSkipPermissions(arg === "on");
+      if (!r.ok) {
+        console.error(`could not set yolo default (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(arg === "on" ? `skip-permissions ENABLED (${configPath()}) — every imp session now runs without permission prompts` : `skip-permissions disabled (${configPath()})`);
+      break;
+    }
+    case "model": {
+      const [arg] = rest;
+      if (!arg) {
+        const m = readDefaultModel();
+        console.log(`default model: ${m ?? "(agent's own default)"}`);
+        console.log("set: imprnt model <alias|id>   clear: imprnt model off");
+        console.log("gemini aliases: pro=gemini-3.1-pro-preview, flash=gemini-3.5-flash, pro25=gemini-2.5-pro, lite=gemini-3.1-flash-lite, gemma31, gemma26");
+        break;
+      }
+      if (arg === "off" || arg === "default" || arg === "none") {
+        const r2 = setDefaultModel("");
+        if (!r2.ok) {
+          console.error(`could not clear default model (${configPath()}): ${r2.error}`);
+          process.exit(1);
+        }
+        console.log(`default model cleared (${configPath()}) — the agent uses its own default`);
+        break;
+      }
+      const r = setDefaultModel(arg);
+      if (!r.ok) {
+        console.error(`could not set default model (${configPath()}): ${r.error}`);
+        process.exit(1);
+      }
+      console.log(`default model set to ${arg} (${configPath()})`);
+      break;
+    }
     case "plugin": {
       const proj = pluginRoot();
       if (proj !== process.cwd())
@@ -2743,6 +2989,11 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
         cpSync3(join15(pkgRoot, "CLAUDE.md"), claudeMd);
         added.push("CLAUDE.md");
       }
+      try {
+        chmodSync(target, 448);
+      } catch (e) {
+        console.error(`could not set owner-only (chmod 700) on ${target}: ${e instanceof Error ? e.message : String(e)} — tighten it by hand to honor the private-vault promise`);
+      }
       const reg = registerVault(target, { force: rest.includes("--register") });
       if (reg.status === "registered")
         console.log(`registered as imp's default vault project (${configPath()})`);
@@ -2784,17 +3035,21 @@ enable: imprnt plugin add <name>   disable: imprnt plugin rm <name> [--purge]`);
       if (wantsLaunch && (!bare || process.stdin.isTTY && process.stdout.isTTY)) {
         const home = vaultProjectRoot();
         if (!home) {
-          console.error("imp: no vault registered yet — run `imprnt init` in your vault project to give your assistant a memory. Launching plain claude.");
+          console.error("imp: no vault registered yet — run `imprnt init` in your vault project to give your assistant a memory. Launching a plain session.");
         }
-        const { args: args5, env } = buildLaunch({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough: bare ? [] : [cmd, ...rest] });
-        process.exit(launchClaude(process.cwd(), args5, env));
+        const raw = bare ? [] : [cmd, ...rest];
+        const { backend, skipPermissions, passthrough } = resolveLaunch(raw, { agent: readDefaultAgent(), yolo: readSkipPermissions() });
+        const spec = assembleSession({ cwd: process.cwd(), vaultProject: home, pkgRoot, passthrough, skipPermissions, model: readDefaultModel() });
+        process.exit(launchBackend(backend, process.cwd(), backend.renderArgs(spec), spec.env));
       }
       console.log(`imprnt — deterministic-first markdown knowledge vault
 
 the front door (the \`imp\` bin):
-  imp                                      open your assistant HERE: claude + your cast + the vault pointer
+  imp                                      open your assistant HERE: your agent + your cast + the vault pointer
   imp lair                                 open it in your vault project — full contract, resumable history
-  imp -c | --resume | <claude flags>       flags pass through to claude
+  imp --gemini | --claude                  pick the agent backend for this session (default: imprnt agent)
+  imp --yolo | --safe                      skip / keep permission prompts for this session (default: imprnt yolo)
+  imp -c | --resume | <agent flags>        flags pass through to the chosen agent
 
 engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt init [path] [--register]          scaffold vault (entities/domains/forms) + raw, register as imp's default; prompts for a location when run interactively with no path (default ~/imprnt)
@@ -2802,6 +3057,9 @@ engine (same subcommands under \`imp\` or \`imprnt\`):
   imprnt ingest <file|text> [--vault D]    snapshot a source -> raw/; a transcript file also gets an event skeleton (no LLM)
   imprnt recall "<query>" [--vault D]      synonym-aware BM25 ranking over the vault
   imprnt context                           print the vault contract — agents run this before writing any note
+  imprnt agent [claude|gemini]             show or set the per-machine default agent backend for imp
+  imprnt yolo [on|off]                      show or set the per-machine skip-permissions default for imp
+  imprnt model [alias|id|off]               show or set the per-machine default model (gemini aliases: pro, flash, pro25, lite, ...)
   imprnt check [--all] [--vault D]         integrity (orphan links, disconnected notes, uncovered snapshots) + regenerate index.md; --all also runs each plugins/*/check.js
   imprnt ingest --apply <file> [--vault D] file a pre-enriched staged note from a plugin into the vault (snapshot + resolve); --apply-all globs plugins/*/proposed/
   imprnt hot [--vault D]                   needs-review + the session primer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "imprnt",
-  "version": "0.1.3-edge.53",
+  "version": "0.1.3-edge.58",
   "description": "Deterministic-first, plain-markdown knowledge vault. Code does the bulk transform. The LLM only touches the irreducibly-semantic 20%. Native grep plus BM25 retrieval, zero MCP on the vault.",
   "type": "module",
   "bin": {

package/templates/pointer.md

@@ -8,5 +8,7 @@ decisions, finances, health, and history.
   `imprnt recall "<keywords>"`, then read the top hits.
 - Before filing or editing ANYTHING in the vault, run `imprnt context` and follow what it prints.
   Never write a vault note without it.
+- The vault is the only knowledge store. Durable facts go in a vault note, never the host's
+  auto-memory (Claude Code's `MEMORY.md` / `memory/`), which `recall` cannot search.
 - The vault is private data. Never copy its contents into committed files, code, or external
   services.