portable-agent-layer 0.35.0 → 0.36.0

package/src/hooks/handlers/session-intelligence.ts

@@ -1,11 +1,13 @@
 /**
  * Stop handler: unified session intelligence capture.
  *
- * Merges work-learning + relationship + handoff into a single Haiku call.
- * Produces: title, summary, insights, handoff, relationship observations.
- * Writes: session learning file, project history, relationship notes, last-handoff.
+ * Produces: title, summary, insights via Haiku.
+ * Writes: session learning file, project history.
  *
- * Replaces: work-learning.ts + relationship.ts (both still exist but are bypassed).
+ * Relationship notes → written in ALGORITHM LEARN phase via relationship-note.ts
+ * Handoff notes     → written in ALGORITHM LEARN phase via handoff-note.ts
+ *
+ * Replaces: work-learning.ts (still exists but is bypassed).
  */
 
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
@@ -15,7 +17,6 @@ import { inference } from "../lib/inference";
 import { categorizeLearning } from "../lib/learning-category";
 import { logDebug, logError } from "../lib/log";
 import { ensureDir, paths } from "../lib/paths";
-import { appendNotes, hasSessionNotes, type RelationshipNote } from "../lib/relationship";
 import { fileTimestamp, monthPath } from "../lib/time";
 import { logTokenUsage } from "../lib/token-usage";
 import {
@@ -110,25 +111,8 @@ const INTELLIGENCE_SCHEMA = {
       description:
         "If status is in-progress: what remains to be done, key decisions made, blockers. If completed: empty string.",
     },
-    observations: {
-      type: "array" as const,
-      items: {
-        type: "object" as const,
-        additionalProperties: false,
-        properties: {
-          type: {
-            type: "string" as const,
-            enum: ["O", "W", "B"],
-            description: "O=preference, W=world fact, B=what AI did",
-          },
-          text: { type: "string" as const },
-          confidence: { type: "number" as const },
-        },
-        required: ["type", "text", "confidence"] as const,
-      },
-    },
   },
-  required: ["title", "summary", "insights", "handoff", "observations"] as const,
+  required: ["title", "summary", "insights", "handoff"] as const,
 };
 
 interface IntelligenceOutput {
@@ -136,7 +120,6 @@ interface IntelligenceOutput {
   summary: string;
   insights: string;
   handoff: string;
-  observations: Array<{ type: "O" | "W" | "B"; text: string; confidence: number }>;
 }
 
 // ── Main handler ──
@@ -160,9 +143,6 @@ export async function captureSessionIntelligence(
     return;
   }
 
-  // Relationship dedup — skip relationship capture if already done for this session
-  const skipRelationship = sessionId ? hasSessionNotes(sessionId) : false;
-
   // Extract transcript windows
   const userMessages = messages
     .filter((m) => m.role === "user")
@@ -174,8 +154,7 @@ export async function captureSessionIntelligence(
   const lastUser = extractLastUser(messages);
   const status = detectStatus(lastAssistantText);
 
-  // Wider window: 15 user msgs at 200 chars (relationship needs more context)
-  const userWindow = userMessages.slice(-15).map((t) => t.slice(0, 200));
+  const userWindow = userMessages.slice(-10).map((t) => t.slice(0, 200));
   const assistantWindow = lastAssistantText.slice(0, 600);
 
   if (userWindow.length < 3) return;
@@ -195,12 +174,9 @@ export async function captureSessionIntelligence(
         status === "in-progress"
           ? "4. handoff: what remains unfinished — decisions made so far, next steps, blockers (2-4 sentences)"
           : "4. handoff: empty string (session completed)",
-        skipRelationship
-          ? "5. observations: empty array (already captured)"
-          : "5. observations: 0-3 relationship observations. O=preference/opinion, W=world fact, B=what AI did this session (first-person). Be concise.",
       ].join("\n"),
       user: `User messages:\n${userWindow.map((m, i) => `${i + 1}. ${m}`).join("\n")}\n\nLast AI response:\n${assistantWindow}`,
-      maxTokens: 500,
+      maxTokens: 350,
       timeout: 15000,
       jsonSchema: INTELLIGENCE_SCHEMA,
     });
@@ -218,8 +194,6 @@ export async function captureSessionIntelligence(
   const title = output?.title || extractContent(lastUser).slice(0, 80) || "session";
   const summary = output?.summary || lastAssistantText.slice(0, 600);
   const insights = output?.insights || "";
-  const handoff = output?.handoff || "";
-
   // ── Write session learning file ──
 
   const category = categorizeLearning(title, summary);
@@ -241,7 +215,6 @@ export async function captureSessionIntelligence(
     "",
     "## Insights",
     insights || "*No insights captured.*",
-    ...(handoff ? ["", "## Handoff", handoff] : []),
   ].join("\n");
 
   const content = stringify(meta, body);
@@ -271,54 +244,4 @@ export async function captureSessionIntelligence(
 
   if (sessionId) markCaptured(sessionId, filepath, messages.length);
   logDebug("session-intelligence", `Learning captured: ${title}`);
-
-  // ── Write relationship notes ──
-
-  if (!skipRelationship && output?.observations && output.observations.length > 0) {
-    try {
-      const notes: RelationshipNote[] = output.observations.map((o) => ({
-        type: o.type,
-        text: o.text,
-        confidence: o.confidence,
-      }));
-      appendNotes(notes, sessionId);
-      logDebug(
-        "session-intelligence",
-        `${notes.length} relationship observations captured`
-      );
-    } catch (err) {
-      logError("session-intelligence:relationship", err);
-    }
-  }
-
-  // ── Write handoff state ──
-
-  if (handoff && status === "in-progress") {
-    try {
-      const handoffPath = resolve(ensureDir(paths.state()), "last-handoff.json");
-      let handoffs: Record<string, unknown> = {};
-      if (existsSync(handoffPath)) {
-        try {
-          handoffs = JSON.parse(readFileSync(handoffPath, "utf-8"));
-        } catch {
-          /* fresh */
-        }
-      }
-      handoffs[process.cwd()] = {
-        timestamp: new Date().toISOString(),
-        sessionId,
-        title,
-        status,
-        handoff,
-        artifacts: [],
-      };
-      // Keep last 20 projects
-      const entries = Object.entries(handoffs);
-      if (entries.length > 20) handoffs = Object.fromEntries(entries.slice(-20));
-      writeFileSync(handoffPath, JSON.stringify(handoffs, null, 2), "utf-8");
-      logDebug("session-intelligence", "Handoff state written");
-    } catch (err) {
-      logError("session-intelligence:handoff", err);
-    }
-  }
 }

package/src/hooks/lib/claude-md.ts

@@ -1,9 +1,10 @@
 /**
- * Dynamic AGENTS.md generation.
+ * Dynamic AGENTS.md / CLAUDE.md generation.
  *
- * AGENTS.md is regenerated when setup.json or any telos file is newer than
- * the existing AGENTS.md. The template lives at AGENTS.md.template.
- * CLAUDE.md is kept as a symlink pointing to AGENTS.md.
+ * AGENTS.md (opencode, codex, copilot) is regenerated when setup.json or any
+ * telos file is newer. CLAUDE.md (Claude Code) is a real file — not a symlink —
+ * and prepends an @import for the self-model so that large static context loads
+ * natively rather than through the hook's stdout.
  */
 
 import {
@@ -19,6 +20,7 @@ import {
 } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { assets, ensureDir, paths, platform } from "./paths";
+import { getSemiStaticSources } from "./semi-static";
 
 const TEMPLATE_PATH = assets.agentsMdTemplate();
 
@@ -70,16 +72,12 @@ function ensureOneSymlink(linkPath: string, targetPath: string): void {
   }
 }
 
-/** Ensure all agent symlinks point to the canonical AGENTS.md */
+/** Ensure codex symlink points to the canonical AGENTS.md.
+ *  CLAUDE.md for Claude Code is a real file written by ensureClaudeCodeMd().
+ *  Copilot uses ~/.copilot/instructions/*.instructions.md — no symlink needed. */
 function ensureSymlinks(): void {
-  const { outputPath, symlinkPath } = getOutputPaths();
-  ensureOneSymlink(symlinkPath, outputPath);
+  const { outputPath } = getOutputPaths();
   ensureOneSymlink(resolve(platform.codexDir(), "AGENTS.md"), outputPath);
-  // Copilot instructions — only create if ~/.copilot/ already exists (i.e. Copilot is installed)
-  const copilotDir = platform.copilotDir();
-  if (existsSync(copilotDir)) {
-    ensureOneSymlink(resolve(copilotDir, "copilot-instructions.md"), outputPath);
-  }
 }
 
 /** Returns true if AGENTS.md needs to be regenerated */
@@ -89,11 +87,12 @@ export function needsRebuild(): boolean {
 
   const outputMtime = statSync(outputPath).mtimeMs;
 
-  // Collect source files: template + setup.json + identity + PAL docs
+  // Collect source files: template + setup.json + identity + PAL docs + @import candidates
   const sources: string[] = [
     TEMPLATE_PATH,
     resolve(paths.state(), "setup.json"),
     resolve(paths.memory(), "pal-settings.json"),
+    ...getSemiStaticSources().map((s) => s.path),
   ];
 
   // Track PAL doc sources for rebuild detection
@@ -124,15 +123,71 @@ export function buildClaudeMd(): string {
     .replaceAll("{{PRINCIPAL_NAME}}", id.principal.name);
 }
 
-/** Regenerate AGENTS.md if any source file is newer, and ensure CLAUDE.md symlink exists. Returns true if rebuilt. */
+/** Build @import header lines for CLAUDE.md — one line per semi-static file that exists. */
+function buildClaudeCodeImports(): string {
+  const claudeDir = platform.claudeDir();
+
+  const lines = getSemiStaticSources()
+    .map((s) => s.path)
+    .filter((p) => existsSync(p))
+    .map((p) => `@${relative(claudeDir, p).replaceAll("\\", "/")}`);
+
+  return lines.length > 0 ? `${lines.join("\n")}\n\n` : "";
+}
+
+/** Build CLAUDE.md content for Claude Code — prepends @import for self-model. */
+export function buildClaudeCodeMd(): string {
+  return buildClaudeCodeImports() + buildClaudeMd();
+}
+
+/** Write ~/.claude/CLAUDE.md as a real file (upgrading from symlink if needed).
+ *  Also rewrites if the @import header has changed (new digest files appeared). */
+function ensureClaudeCodeMd(): void {
+  const claudeDir = platform.claudeDir();
+  if (!claudeDir) return;
+  const claudeMdPath = resolve(claudeDir, "CLAUDE.md");
+  const expected = buildClaudeCodeMd();
+  try {
+    if (existsSync(claudeMdPath) && !lstatSync(claudeMdPath).isSymbolicLink()) {
+      const current = readFileSync(claudeMdPath, "utf-8");
+      if (current === expected) return; // no change needed
+      // @imports changed — rewrite
+    } else if (existsSync(claudeMdPath)) {
+      unlinkSync(claudeMdPath); // remove symlink
+    }
+  } catch {
+    /* fall through */
+  }
+  try {
+    ensureDir(claudeDir);
+    writeFileSync(claudeMdPath, expected, "utf-8");
+  } catch {
+    /* ignore write errors — non-fatal */
+  }
+}
+
+/** Regenerate AGENTS.md if any source file is newer, write real CLAUDE.md, ensure other symlinks. Returns true if rebuilt. */
 export function regenerateIfNeeded(): boolean {
   const { outputPath } = getOutputPaths();
   if (!needsRebuild()) {
     ensureSymlinks();
+    ensureClaudeCodeMd();
     return false;
   }
   ensureDir(dirname(outputPath));
   writeFileSync(outputPath, buildClaudeMd(), "utf-8");
+  // Write Claude Code's CLAUDE.md as a real file (removing any existing symlink)
+  const claudeDir = platform.claudeDir();
+  if (claudeDir) {
+    const claudeMdPath = resolve(claudeDir, "CLAUDE.md");
+    try {
+      if (existsSync(claudeMdPath)) unlinkSync(claudeMdPath);
+      ensureDir(claudeDir);
+      writeFileSync(claudeMdPath, buildClaudeCodeMd(), "utf-8");
+    } catch {
+      /* ignore — CLAUDE.md write failure is non-fatal */
+    }
+  }
   ensureSymlinks();
   return true;
 }

package/src/hooks/lib/context.ts

@@ -3,21 +3,21 @@
  * Used by LoadContext.ts (Claude Code) and the opencode plugin.
  */
 
-import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { resolve } from "node:path";
-import { parse } from "./frontmatter";
-import { readFailures, readLearnings } from "./learning-store";
+import { readLearnings } from "./learning-store";
 import { loadOpinionContext } from "./opinions";
 import { paths } from "./paths";
 import { loadActiveProjectsContext } from "./projects";
 import { loadRecentNotes } from "./relationship";
+import { loadFailurePatterns, loadSynthesisRecommendations } from "./semi-static";
 import { readSessionNames } from "./session-names";
 import * as settings from "./settings";
 import { isSetupComplete, readSetupState, remainingSteps, STEP_ORDER } from "./setup";
 import { computeSignalTrends, formatTrends } from "./signal-trends";
 import { readFramePrinciples } from "./wisdom";
-import { readProjectHistory, readSessions, recentSessions } from "./work-tracking";
+import { readProjectHistory, readSessions } from "./work-tracking";
 
 /** Load and concatenate loadAtStartup files */
 function loadStartupFiles(): string {
@@ -53,47 +53,6 @@ export function countSignals(filename: string): number {
   }
 }
 
-/** Load structured session history + project dashboard */
-export function loadActiveWork(): { text: string; summary: string | null } | null {
-  try {
-    const cwd = process.cwd();
-    const allRecent = recentSessions(48);
-
-    if (allRecent.length === 0) return null;
-
-    const lines: string[] = [];
-
-    lines.push("## Recent Work (last 48h)");
-    for (const s of allRecent.slice(-10).reverse()) {
-      const ago = formatAgo(s.ts);
-      const here = s.cwd === cwd ? " *" : "";
-      lines.push(`- [${s.status}] ${s.name} — ${ago}${here}`);
-    }
-
-    // Summary from most recent session
-    const cwdSessions = allRecent.filter((s) => s.cwd === cwd);
-    const last = cwdSessions.length > 0 ? cwdSessions[cwdSessions.length - 1] : null;
-    const summary = last?.summary?.slice(0, 60) || null;
-
-    return {
-      text: lines.join("\n"),
-      summary: summary ? `"${summary}"` : null,
-    };
-  } catch {
-    return null;
-  }
-}
-
-/** Format a timestamp as a human-readable "X ago" string */
-function formatAgo(ts: string): string {
-  const diff = Date.now() - new Date(ts).getTime();
-  const hours = Math.floor(diff / (1000 * 60 * 60));
-  if (hours < 1) return "just now";
-  if (hours < 24) return `${hours}h ago`;
-  const days = Math.floor(hours / 24);
-  return `${days}d ago`;
-}
-
 /** Load the N most recent session names (fallback for greeting) */
 export function loadRecentSessions(count: number): string[] {
   try {
@@ -140,7 +99,6 @@ function loadCachedCounts(): {
 /** Build the visible greeting lines for stderr */
 export function buildGreeting(): string[] {
   const counts = loadCachedCounts();
-  const work = loadActiveWork();
   const setupState = readSetupState();
   const setupIncomplete = setupState && !isSetupComplete(setupState);
 
@@ -157,10 +115,6 @@ export function buildGreeting(): string[] {
     );
   }
 
-  if (work?.summary) {
-    greeting.push(`📋 Previous: ${work.summary}`);
-  }
-
   // Show recent session names for quick context
   const recent = loadRecentSessions(3);
   if (recent.length > 0) {
@@ -217,78 +171,6 @@ export function loadSelfModel(): string {
   }
 }
 
-/** Load 5 most recent failure contexts as an "avoid" list */
-export function loadFailurePatterns(): string {
-  try {
-    const entries = readFailures(paths.failures(), 5);
-    if (entries.length === 0) return "";
-
-    const lines = entries.map((e) => {
-      const label = e.rating ? `[${e.rating}/10]` : "";
-      const text = e.principle || e.context;
-      return `- ${label} ${text}`.trim();
-    });
-
-    return ["## Lessons from Recent Failures — Apply These Now", ...lines].join("\n");
-  } catch {
-    return "";
-  }
-}
-
-/** Load recommendations from the most recent synthesis report */
-export function loadSynthesisRecommendations(): string {
-  try {
-    const synthDir = paths.synthesis();
-    if (!existsSync(synthDir)) return "";
-
-    // Find most recent month directory
-    const months = readdirSync(synthDir).sort().reverse();
-    for (const month of months) {
-      const monthDir = resolve(synthDir, month);
-      try {
-        const files = readdirSync(monthDir)
-          .filter((f) => f.endsWith(".md"))
-          .sort()
-          .reverse();
-        if (files.length === 0) continue;
-
-        const content = readFileSync(resolve(monthDir, files[0]), "utf-8");
-
-        // Extract recommendations section
-        const recMatch = content.match(/## Recommendations\n\n([\s\S]*?)(?:\n##|\n$|$)/);
-        if (!recMatch?.[1]?.trim()) continue;
-
-        const recs = recMatch[1]
-          .trim()
-          .split("\n")
-          .filter((l) => l.trim())
-          .slice(0, 4);
-
-        if (recs.length === 0) continue;
-
-        const { meta } = parse<{
-          period?: string;
-          average_rating?: string;
-        }>(content);
-        const period = meta.period || "";
-        const avgRating = meta.average_rating ? `${meta.average_rating}/10` : "";
-
-        const header = [
-          "## Pattern Synthesis",
-          period ? `*${period} — ${avgRating}*` : "",
-        ]
-          .filter(Boolean)
-          .join("\n");
-
-        return [header, ...recs].join("\n");
-      } catch {}
-    }
-    return "";
-  } catch {
-    return "";
-  }
-}
-
 /** Load signal trends as a formatted string */
 export function loadSignalTrends(): string {
   try {
@@ -322,7 +204,12 @@ export function loadRelationshipContext(): string {
   try {
     const notes = loadRecentNotes(2);
     if (!notes) return "";
-    return `## Recent Interaction Notes\n${notes}`;
+    // Strip O entries (opinions loaded natively via digest) and HTML comment lines
+    const filtered = notes
+      .split("\n")
+      .filter((l) => !/^\s*- O\(/.test(l) && !/^\s*<!--/.test(l))
+      .join("\n");
+    return capSection(`## Recent Interaction Notes\n${filtered}`, 1500);
   } catch {
     return "";
   }
@@ -337,11 +224,10 @@ export function loadSessionIntelligence(): string {
 
     const lines: string[] = ["## Session Intelligence"];
 
-    // Open Threads — project-specific first, then global
+    // Open Threads — project-specific only
     if (state.threads?.length > 0) {
       const cwd = process.cwd();
       const here = state.threads.filter((t: { cwd?: string }) => t.cwd === cwd);
-      const other = state.threads.filter((t: { cwd?: string }) => t.cwd !== cwd);
 
       if (here.length > 0) {
         lines.push("");
@@ -350,11 +236,10 @@ export function loadSessionIntelligence(): string {
           lines.push(`- ${t.title} (opened ${t.opened})`);
           if (t.context) lines.push(`  ${t.context}`);
         }
-        lines.push("→ These are directly relevant to your current work.");
+        lines.push(
+          "→ Continue this work or explicitly close it before starting something new."
+        );
       }
-      // Cross-project threads intentionally omitted — they were noise in 90%+ of sessions.
-      // To surface them on demand, add a `threads` slash-command or a flag in pal-settings.
-      void other;
     }
 
     // Rating Trend
@@ -403,7 +288,7 @@ export function loadSessionIntelligence(): string {
       }
     }
 
-    return lines.length > 1 ? lines.join("\n") : "";
+    return lines.length > 1 ? capSection(lines.join("\n"), 2000) : "";
   } catch {
     return "";
   }
@@ -434,17 +319,46 @@ export function loadHandoff(): string {
   }
 }
 
+/** Truncate text to maxChars at the last complete line boundary */
+function capSection(text: string, maxChars: number): string {
+  if (text.length <= maxChars) return text;
+  const lines = text.split("\n");
+  const kept: string[] = [];
+  let total = 0;
+  for (const line of lines) {
+    const next = total + line.length + 1;
+    if (next > maxChars) break;
+    kept.push(line);
+    total = next;
+  }
+  return kept.join("\n");
+}
+
+/** Agent targets — determines which context sections are skipped due to native loading. */
+export type AgentTarget = "claude" | "opencode" | "cursor" | "copilot";
+
 /**
  * Build the <system-reminder> content for the AI.
  *
  * Static context (TELOS, setup prompt) lives in AGENTS.md / CLAUDE.md and is
  * loaded natively by Claude Code / opencode. This injects dynamic context only —
  * things that change per-session and can't live in a static file.
+ *
+ * opts.agent — agent target; Claude Code skips semi-static sections (self-model,
+ * wisdom, opinions) that load natively via @imports in CLAUDE.md.
  */
-export function buildSystemReminder(): string {
+export function buildSystemReminder(opts: { agent?: AgentTarget } = {}): string {
+  // Semi-static sections loaded natively via @imports (Claude Code) or
+  // instructions[] (opencode). Skip them from hook output for those agents.
+  const skipSemiStatic =
+    opts.agent === "claude" ||
+    opts.agent === "opencode" ||
+    opts.agent === "cursor" ||
+    opts.agent === "copilot";
+
   const startup = loadStartupFiles();
-  const work = settings.isEnabled("activeWork") ? loadActiveWork() : null;
-  const wisdom = settings.isEnabled("wisdom") ? loadWisdomContext() : "";
+  const wisdom =
+    !skipSemiStatic && settings.isEnabled("wisdom") ? loadWisdomContext() : "";
   const relationship = settings.isEnabled("relationship")
     ? loadRelationshipContext()
     : "";
@@ -456,10 +370,16 @@ export function buildSystemReminder(): string {
     ? loadActiveProjectsContext()
     : "";
   const trends = settings.isEnabled("signalTrends") ? loadSignalTrends() : "";
-  const failures = settings.isEnabled("failurePatterns") ? loadFailurePatterns() : "";
-  const synthesis = settings.isEnabled("synthesis") ? loadSynthesisRecommendations() : "";
-  const opinions = settings.isEnabled("opinions") ? loadOpinionContext() : "";
-  const selfModel = settings.isEnabled("selfModel") ? loadSelfModel() : "";
+  const failures =
+    settings.isEnabled("failurePatterns") && !skipSemiStatic ? loadFailurePatterns() : "";
+  const synthesis =
+    settings.isEnabled("synthesis") && !skipSemiStatic
+      ? loadSynthesisRecommendations()
+      : "";
+  const opinions =
+    !skipSemiStatic && settings.isEnabled("opinions") ? loadOpinionContext() : "";
+  const selfModel =
+    !skipSemiStatic && settings.isEnabled("selfModel") ? loadSelfModel() : "";
   const intelligence = settings.isEnabled("sessionIntelligence")
     ? loadSessionIntelligence()
     : "";
@@ -478,8 +398,6 @@ export function buildSystemReminder(): string {
   if (synthesis) parts.push(synthesis);
   if (trends) parts.push(trends);
   if (failures) parts.push(failures);
-  if (work) parts.push(work.text);
-
   if (parts.length === 0) return "";
 
   const now = new Date();

package/src/hooks/lib/relationship.ts

@@ -5,7 +5,7 @@
  * Notes live at memory/relationship/YYYY-MM/YYYY-MM-DD.md
  * W = world (facts about user's situation)
  * O = opinion (preference with confidence)
- * B = biographical (what the AI did this session, first-person)
+ * Session = what the AI did this session (first-person)
  *
  * Extraction is handled by the relationship handler via Haiku inference.
  * This lib provides storage and reading utilities only.
@@ -15,7 +15,7 @@ import { existsSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { ensureDir, paths } from "./paths";
 
-export type NoteType = "W" | "O" | "B";
+export type NoteType = "W" | "O" | "Session";
 
 export interface RelationshipNote {
   type: NoteType;
@@ -31,7 +31,7 @@ function dailyFilePath(date: Date): string {
   return resolve(monthDir, `${yyyy}-${mm}-${dd}.md`);
 }
 
-/** Check if a session already has notes in today's file */
+/** @deprecated No longer called — relationship notes are written in ALGORITHM LEARN phase */
 export function hasSessionNotes(sessionId: string): boolean {
   const filepath = dailyFilePath(new Date());
   if (!existsSync(filepath)) return false;

package/src/hooks/lib/security.ts

@@ -63,6 +63,8 @@ export const PROTECTED_PATHS: RegExp[] = [
   /^\/System\//,
   /\.ssh\/(?!config)/,
   /\.gnupg\//,
+  // Claude Code auto-memory — PAL owns memory; writes here indicate wrong system is being used
+  /\.claude\/projects\/[^/]+\/memory\//,
   // Derived from HOOK_MANAGED_FILES — scoped to managed roots only
   ...HOOK_MANAGED_FILES.map(
     (name) =>