portable-agent-layer 0.36.0 → 0.37.0

package/README.md

@@ -82,6 +82,7 @@ pal cli status        # check your setup
 | `pal cli import` | Import user state from a zip |
 | `pal cli status` | Show current PAL configuration |
 | `pal cli doctor` | Check prerequisites and system health |
+| `pal cli migrate` | Run pending data migrations (non-destructive) |
 | `pal cli usage` | Summarize token usage and estimated cost |
 
 ### Target flags

package/assets/skills/analyze-pdf/tools/pdf-download.ts

@@ -99,4 +99,4 @@ async function main() {
   console.log(JSON.stringify(result, null, 2));
 }
 
-main();
+void main();

package/assets/skills/analyze-youtube/tools/youtube-analyze.ts

@@ -102,4 +102,4 @@ async function main() {
   console.log(text);
 }
 
-main();
+void main();

package/assets/skills/consulting-report/tools/dev.ts

@@ -19,7 +19,7 @@ async function exists(p: string): Promise<boolean> {
   }
 }
 
-export async function dev(reportDir: string): Promise<number> {
+async function dev(reportDir: string): Promise<number> {
   const dir = resolve(reportDir);
   const pkg = join(dir, "package.json");
   if (!(await exists(pkg))) {
@@ -33,7 +33,7 @@ export async function dev(reportDir: string): Promise<number> {
   return result.status ?? 1;
 }
 
-export async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
+async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
   if (argv.length === 0) {
     console.error("usage: dev.ts <report-dir>");
     process.exit(1);

package/assets/skills/consulting-report/tools/generate-pdf.ts

@@ -43,10 +43,10 @@ async function exists(p: string): Promise<boolean> {
 
 function escapeHtml(s: string): string {
   return s
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
-    .replace(/"/g, "&quot;");
+    .replaceAll("&", "&amp;")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('"', "&quot;");
 }
 
 function slugify(s: string): string {
@@ -56,7 +56,7 @@ function slugify(s: string): string {
     .replace(/^-|-$/g, "");
 }
 
-export async function loadMeta(reportDir: string): Promise<ReportMeta> {
+async function loadMeta(reportDir: string): Promise<ReportMeta> {
   const dataPath = join(reportDir, "lib", "report-data.ts");
   if (!(await exists(dataPath))) {
     throw new Error(`lib/report-data.ts not found at ${dataPath}`);
@@ -70,7 +70,7 @@ export async function loadMeta(reportDir: string): Promise<ReportMeta> {
   return mod.reportData;
 }
 
-export function buildNext(reportDir: string): void {
+function buildNext(reportDir: string): void {
   const result = spawnSync("bun", ["run", "build"], {
     cwd: reportDir,
     stdio: "inherit",
@@ -121,7 +121,7 @@ function serveStatic(rootDir: string): Promise<{ server: Server; url: string }>
   });
 }
 
-export async function renderPdf(
+async function renderPdf(
   htmlPath: string,
   pdfPath: string,
   meta: ReportMeta
@@ -186,7 +186,7 @@ interface GenerateOptions {
   skipBuild?: boolean;
 }
 
-export async function generate(opts: GenerateOptions): Promise<{
+async function generate(opts: GenerateOptions): Promise<{
   htmlPath: string;
   pdfPath: string;
 }> {
@@ -227,7 +227,7 @@ function parseArgs(argv: string[]): GenerateOptions {
   return opts;
 }
 
-export async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
+async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
   const opts = parseArgs(argv);
   const { htmlPath, pdfPath } = await generate(opts);
   const [htmlStat, pdfStat] = await Promise.all([stat(htmlPath), stat(pdfPath)]);

package/assets/skills/consulting-report/tools/scaffold.ts

@@ -34,7 +34,7 @@ function templateDir(): string {
   return resolve(here, "..", "template");
 }
 
-export async function scaffold(opts: ScaffoldOptions): Promise<void> {
+async function scaffold(opts: ScaffoldOptions): Promise<void> {
   const tpl = templateDir();
   if (!(await exists(tpl))) {
     throw new Error(`template not found at ${tpl}`);
@@ -91,7 +91,7 @@ function parseArgs(argv: string[]): ScaffoldOptions {
   return opts;
 }
 
-export async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
+async function run(argv: string[] = process.argv.slice(2)): Promise<void> {
   const opts = parseArgs(argv);
   await scaffold(opts);
   console.log(`Scaffolded: ${opts.targetDir}`);

package/assets/skills/create-pdf/tools/md-to-html-pdf.ts

@@ -30,8 +30,8 @@ for (let i = 1; i < args.length; i++) {
 }
 const stem = basename(input, extname(input));
 const dir = dirname(input);
-if (!htmlOut) htmlOut = resolve(dir, `${stem}.html`);
-if (!pdfOut) pdfOut = resolve(dir, `${stem}.pdf`);
+htmlOut ??= resolve(dir, `${stem}.html`);
+pdfOut ??= resolve(dir, `${stem}.pdf`);
 
 const md = await readFile(input, "utf8");
 marked.setOptions({ gfm: true, breaks: false });

package/assets/skills/opinion/tools/opinion.ts

@@ -70,8 +70,9 @@ switch (command) {
       console.log(`  ${c.cyan(category)}`);
       for (const op of ops.sort((a, b) => b.confidence - a.confidence)) {
         const pct = `${Math.round(op.confidence * 100)}%`;
-        const color =
-          op.confidence >= 0.85 ? c.green : op.confidence <= 0.3 ? c.red : c.yellow;
+        let color = c.yellow;
+        if (op.confidence >= 0.85) color = c.green;
+        else if (op.confidence <= 0.3) color = c.red;
         console.log(`    [${bar(op.confidence)}] ${color(pct)} ${op.statement}`);
       }
       console.log("");

package/assets/skills/presentation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: presentation
-description: Build branded HTML presentations from markdown using Reveal.js. Multi-template registry per user (each template = brand color, logo, fonts, footer, aspect). Per-deck workflow: scaffold → edit one markdown file per slide in slides/ → build → present. Output: a `<deck-name>/` subdir with a self-contained HTML and a concatenated markdown sibling. 14 layouts including data-display patterns (big-stat, metric-grid). Use when creating slide decks, talks, workshop slides, lectures, or pitch decks.
+description: "Build branded HTML presentations from markdown using Reveal.js. Multi-template registry per user (each template = brand color, logo, fonts, footer, aspect). Per-deck workflow: scaffold → edit one markdown file per slide in slides/ → build → present. Output: a `<deck-name>/` subdir with a self-contained HTML and a concatenated markdown sibling. 14 layouts including data-display patterns (big-stat, metric-grid). Use when creating slide decks, talks, workshop slides, lectures, or pitch decks."
 argument-hint: <deck-dir> to build, OR `setup-template` to add a brand template, OR `new <deck-dir> --template <name>` to scaffold a deck, OR `list-templates`
 ---
 

package/assets/skills/presentation/tools/doctor.ts

@@ -23,10 +23,8 @@ import {
 import { RULES } from "./lib/lint-rules";
 import type { DeckContext, Finding, SlideContext, SlideReport } from "./lib/lint-types";
 
-// Re-export for backward compatibility with external callers (tests, etc.)
-// that imported these directly from doctor.ts.
 export { extractLayout } from "./lib/lint-helpers";
-export type { DeckContext, Finding, SlideContext, SlideReport } from "./lib/lint-types";
+export type { Finding } from "./lib/lint-types";
 
 async function loadSlides(deckDir: string): Promise<{ name: string; body: string }[]> {
   const slidesDir = join(deckDir, "slides");
@@ -64,7 +62,7 @@ function buildSlideContext(
   };
 }
 
-export async function lintDeck(deckDir: string): Promise<{
+async function lintDeck(deckDir: string): Promise<{
   slides: SlideContext[];
   reports: SlideReport[];
   deckFindings: Finding[];
@@ -95,7 +93,6 @@ export async function lintDeck(deckDir: string): Promise<{
   return { slides, reports, deckFindings };
 }
 
-// Public: kept for any external caller that imported `lintSlide` directly.
 export async function lintSlide(
   slide: { name: string; body: string },
   deckDir: string

package/assets/skills/presentation/tools/lib/inline.ts

@@ -7,21 +7,16 @@ export async function readText(path: string): Promise<string> {
 
 export async function dataUri(path: string): Promise<string> {
   const ext = extname(path).toLowerCase();
-  const mime =
-    ext === ".svg"
-      ? "image/svg+xml"
-      : ext === ".png"
-        ? "image/png"
-        : ext === ".jpg" || ext === ".jpeg"
-          ? "image/jpeg"
-          : ext === ".webp"
-            ? "image/webp"
-            : "application/octet-stream";
+  let mime = "application/octet-stream";
+  if (ext === ".svg") mime = "image/svg+xml";
+  else if (ext === ".png") mime = "image/png";
+  else if (ext === ".jpg" || ext === ".jpeg") mime = "image/jpeg";
+  else if (ext === ".webp") mime = "image/webp";
 
   if (ext === ".svg") {
     // Inline SVGs as URL-encoded text — smaller than base64 and renders crisply at any size.
     const svg = await readFile(path, "utf8");
-    const enc = encodeURIComponent(svg).replace(/'/g, "%27").replace(/"/g, "%22");
+    const enc = encodeURIComponent(svg).replaceAll("'", "%27").replaceAll('"', "%22");
     return `url("data:${mime};utf8,${enc}")`;
   }
 

package/assets/skills/presentation/tools/lib/lint-helpers.ts

@@ -39,7 +39,7 @@ export function extractNotes(body: string): string {
 }
 
 export function countAtxHeading(body: string, level: 1 | 2): string[] {
-  const re = new RegExp(`^#{${level}}\\s+(.+?)\\s*$`, "gm");
+  const re = new RegExp(String.raw`^#{${level}}\s+(.+?)\s*$`, "gm");
   return Array.from(body.matchAll(re), (m) => m[1]);
 }
 
@@ -71,7 +71,7 @@ export type ListItem = {
 export function listItems(body: string): ListItem[] {
   const out: ListItem[] = [];
   for (const line of body.split("\n")) {
-    const m = line.match(/^(\s*)(?:[-*]\s+|\d+\.\s+)(.*)$/);
+    const m = new RegExp(/^(\s*)(?:[-*]\s+|\d+\.\s+)(.*)$/).exec(line);
     if (!m) continue;
     out.push({ indent: m[1].length, content: m[2], raw: line });
   }

package/assets/skills/presentation/tools/lib/lint-rules.ts

@@ -125,7 +125,7 @@ export const RULES: Rule[] = [
       // pretending to be a bullet. Convert to a sub-bullet instead.
       const findings: Finding[] = [];
       for (const line of ctx.bodyNoNotes.split("\n")) {
-        const m = line.match(/^(\s*)(?:[-*]\s+|\d+\.\s+)(.*)$/);
+        const m = new RegExp(/^(\s*)(?:[-*]\s+|\d+\.\s+)(.*)$/).exec(line);
         if (!m) continue;
         const stripped = stripCodeAndLinks(m[2]);
         if (/\s—\s/.test(stripped)) {
@@ -338,7 +338,10 @@ export const RULES: Rule[] = [
         "Anticipated questions",
       ];
       for (const beat of required) {
-        const re = new RegExp(`^[-*]\\s+${beat.replace(/\s+/g, "\\s+")}\\b`, "im");
+        const re = new RegExp(
+          String.raw`^[-*]\s+${beat.replace(/\s+/g, "\\s+")}\b`,
+          "im"
+        );
         if (!re.test(notes)) {
           findings.push({
             rule: "exercise-note-beats",

package/assets/skills/presentation/tools/setup-template.ts

@@ -167,11 +167,14 @@ async function main() {
 
   // 2. Path
   const defaultPath = join(TEMPLATES_ROOT, name);
-  const tplPath = args.path
-    ? resolve(args.path)
-    : rl
-      ? resolve(await ask(rl, "Storage path:", defaultPath))
-      : defaultPath;
+  let tplPath: string;
+  if (args.path) {
+    tplPath = resolve(args.path);
+  } else if (rl) {
+    tplPath = resolve(await ask(rl, "Storage path:", defaultPath));
+  } else {
+    tplPath = defaultPath;
+  }
 
   // 3. Logo
   let logo = args.logo;
@@ -231,7 +234,7 @@ async function main() {
       ["cover-only", "footer", "both", "none"].includes(a) ? a : "footer"
     ) as LogoPlacement;
   }
-  if (!logoPlacement) logoPlacement = "footer";
+  logoPlacement ??= "footer";
 
   // 8. Fonts
   const fonts =
@@ -244,7 +247,7 @@ async function main() {
     const a = await ask(rl, "Aspect ratio [16:9 / 4:3 / 16:10]:", "16:9");
     aspect = (["16:9", "4:3", "16:10"].includes(a) ? a : "16:9") as Aspect;
   }
-  if (!aspect) aspect = "16:9";
+  aspect ??= "16:9";
 
   // 10. Showcase deck?
   let showcase = args.showcase;

package/assets/skills/projects/SKILL.md

@@ -1,10 +1,10 @@
 ---
 name: projects
 description: Project context management. PROACTIVE — use when the user references a project (by name or as "this repo", "current work"), asks to add/update/complete a project, says "store under <project>", "track this", "what am I working on", "my projects", "my priorities".
-argument-hint: [list | create | resume | add-fact | add-objective | add-next | add-blocker | add-decision | add-handoff | complete | archive | pause]
+argument-hint: [list | create | resume | add-next | add-blocker | add-decision | add-handoff | update-section | criteria | isa-init | complete | archive | pause]
 ---
 
-Manage the user's project registry. Each project has its own state file at `~/.pal/memory/state/progress/{slug}.json`. The Stop hook auto-touches `updated` whenever the cwd resolves into a registered project — so just *being* in the project keeps it warm.
+Manage the user's project registry. Each project lives at `~/.pal/memory/projects/{slug}/ISA.md`. Frontmatter holds operational state (next steps, blockers, handoff); the body holds ISA spec sections (Problem, Goal, Criteria, Context, Decisions, etc.). The Stop hook auto-touches `updated` whenever the cwd resolves into a registered project — just *being* in the project keeps it warm.
 
 ## CLI
 
@@ -20,16 +20,33 @@ Output is JSON.
 |---------|---------|
 | `list` | All registered projects with status, path, updated, stale flag, and counts |
 | `create [name] [--path PATH] [--objectives "a;b;c"]` | Register a project. Defaults: name=basename(cwd), path=cwd. Slug must be `[a-z0-9_-]+` |
-| `resume <name>` | Print the full project JSON — facts, objectives, next steps, blockers, decisions, handoff |
-| `add-fact <name> "text"` | Append a stable fact / reference (e.g., "reference impl lives in this repo") |
-| `add-objective <name> "text"` | Append an objective |
-| `add-next <name> "text"` | Append a next step |
-| `add-blocker <name> "text"` | Append a blocker |
-| `add-decision <name> "decision" "rationale"` | Log a timestamped decision |
-| `add-handoff <name> "text"` | Overwrite the handoff field (single-value) |
-| `rm-fact \| rm-objective \| rm-next \| rm-blocker <name> <index>` | Remove an entry by zero-based index |
+| `resume <name>` | Print the full project ISA — all frontmatter and body sections |
+| `add-next <name> "text"` | Append a next step (array, instantly appendable) |
+| `add-blocker <name> "text"` | Append a blocker (array, instantly appendable) |
+| `add-decision <name> "decision" "rationale"` | Log a timestamped decision entry to the Decisions section |
+| `add-handoff <name> "text"` | Overwrite the handoff field (single-value, replaces) |
+| `rm-next \| rm-blocker <name> <index>` | Remove a next/blocker entry by zero-based index |
+| `update-section <name> <section> "content"` | Set an ISA body section (problem, goal, criteria, vision, constraints, out_of_scope, context, decisions, changelog) |
+| `criteria <name>` | Print the Criteria section (verifiable success conditions) |
+| `isa-init <name>` | Mark a project as ISA-initialized |
 | `complete <name>` / `archive <name>` / `pause <name>` / `unpause <name>` | Status transitions |
-| `rm <name>` | Delete the project state file entirely |
+| `rm <name>` | Delete the project directory entirely |
+
+## ISA Sections
+
+The body of each ISA.md holds spec sections. Use `update-section` to set them:
+
+| Section | Key | What goes here |
+|---------|-----|---------------|
+| Problem | `problem` | Why this project exists; the pain or gap being addressed |
+| Goal | `goal` | What success looks like (may be bullet list) |
+| Criteria | `criteria` | Verifiable done conditions — testable ISCs (Ideal State Criteria) |
+| Vision | `vision` | Long-horizon aspiration beyond the immediate goal |
+| Constraints | `constraints` | Non-negotiable limits (budget, time, tech, compatibility) |
+| Out of Scope | `out_of_scope` | What this project explicitly does NOT cover |
+| Context | `context` | Stable facts / references (e.g. "reference impl lives at ~/pai") |
+| Decisions | `decisions` | Auto-managed by `add-decision`; dated bullet list |
+| Changelog | `changelog` | Summary of completed milestones |
 
 ## Routing
 
@@ -38,9 +55,11 @@ Output is JSON.
 | "what am I working on", "my projects", "priorities" | `list` — summarize active and recently-touched projects |
 | "tell me about <project>" | `resume <name>` — present current state, highlight blockers and next steps |
 | "register this" / "track this" / cwd is unregistered work | `create` (default the name from cwd basename, confirm before writing) |
-| "store under <project>: X" / "note on <project>: X" | Pick the field — durable reference → `add-fact`, work item → `add-next`, obstacle → `add-blocker`. If unclear, ask. |
+| "store under <project>: X" / "note on <project>: X" | Pick the field — durable reference → `update-section <slug> context "..."`, work item → `add-next`, obstacle → `add-blocker`. If unclear, ask. |
 | "we decided X because Y" | `add-decision <name> "X" "Y"` |
 | "handoff for <project>" / "next session pick up at X" | `add-handoff <name> "<text>"` |
+| "set the goal for <project>" / "describe the problem" | `update-section <name> goal "..."` or `update-section <name> problem "..."` |
+| "what are the criteria for <project>" / "what counts as done" | `criteria <name>` |
 | "mark X complete" / "X is done" | `complete <name>` |
 | "park <project>" / "pause <project>" | `pause <name>` |
 | "archive <project>" | `archive <name>` |
@@ -53,7 +72,7 @@ When SessionStart context flags the current cwd as unregistered (e.g. `💡 cwd
 
 - **Default name** = the FULL last path segment of cwd, lowercased. For `/repos/portable-agent-layer` → `portable-agent-layer`. Never split on `-`.
 - **Confirm before creating.** Never auto-create without explicit user approval ("yes", "do it", "register").
-- **Capture objectives in conversation.** If the user accepts but doesn't volunteer objectives, ask one short question, or infer from the last few messages and confirm.
+- **Capture context in conversation.** If the user accepts but doesn't volunteer a goal, ask one short question, or infer from the last few messages and confirm.
 
 ### When NOT to suggest registration
 
@@ -64,7 +83,7 @@ When SessionStart context flags the current cwd as unregistered (e.g. `💡 cwd
 
 ## Append-as-you-go
 
-When the user describes plans, blockers, or decisions during normal work, invoke the relevant subcommand to keep state current — that's the dynamism this system is built for. Don't invoke for fleeting comments, hypotheticals, or things the user is just thinking through. Wait for a clear declarative ("let's add X", "Z is blocking us"), not a question or musing.
+When the user describes next steps, blockers, or decisions during normal work, invoke the relevant subcommand to keep state current — that's the dynamism this system is built for. Don't invoke for fleeting comments, hypotheticals, or things the user is just thinking through. Wait for a clear declarative ("let's add X", "Z is blocking us"), not a question or musing.
 
 ## Examples
 
@@ -72,8 +91,8 @@ When the user describes plans, blockers, or decisions during normal work, invoke
 ```
 User: "store under <project> that a reference implementation exists in this repo"
 → Identify the project from `list` (or by name)
-→ Durable reference, not a task → add-fact
-→ bun ~/.pal/tools/project.ts add-fact <slug> "Reference implementation lives in this repo"
+→ Durable reference, not a task → update-section
+→ bun ~/.pal/tools/project.ts update-section <slug> context "Reference implementation lives in this repo"
 ```
 
 **Registering the current repo**
@@ -89,6 +108,12 @@ User: "we decided <decision> because <reason>"
 → bun ~/.pal/tools/project.ts add-decision <slug> "<decision>" "<reason>"
 ```
 
+**Setting the goal and criteria**
+```
+User: "set the goal for pal to 'ship ISA support with full test coverage'"
+→ bun ~/.pal/tools/project.ts update-section pal goal "ship ISA support with full test coverage"
+```
+
 **Completing a project**
 ```
 User: "mark <project> as complete"
@@ -98,10 +123,9 @@ User: "mark <project> as complete"
 
 ## Anti-patterns
 
-- **Don't dump the full JSON.** Summarize. The user can ask for the raw payload.
-- **Don't write without confirming the field choice on ambiguous "store" requests.** A "fact" sticks forever; a "next step" implies follow-up — these are different commitments.
-- **Don't edit the JSON files directly.** Always use the CLI — it timestamps `updated` and keeps the schema valid.
-- **Don't confuse `add-fact` with the `telos` skill's `LEARNED.md` or `IDEAS.md`.** Project facts are scoped to one project; TELOS lessons are cross-cutting.
+- **Don't dump the full ISA.md.** Summarize. The user can ask for the raw payload.
+- **Don't write without confirming the field choice on ambiguous "store" requests.** A context fact sticks forever; a next step implies follow-up — these are different commitments.
+- **Don't edit ISA.md files directly.** Always use the CLI — it timestamps `updated` and keeps the schema valid.
 
 ## Rules
 

package/assets/skills/research/tools/gemini-search.ts

@@ -70,7 +70,7 @@ Distinguish between peer-reviewed findings and preprints/working papers.
 Note methodology limitations and sample sizes when relevant.
 Be thorough but concise.`;
 
-export async function geminiSearch(query: string, maxTokens: number): Promise<void> {
+async function geminiSearch(query: string, maxTokens: number): Promise<void> {
   const apiKey = loadApiKey();
 
   const body = {
@@ -183,4 +183,4 @@ Examples:
   await geminiSearch(query, maxTokens);
 }
 
-if (import.meta.main) run();
+if (import.meta.main) void run();

package/assets/skills/research/tools/grok-search.ts

@@ -70,7 +70,7 @@ function sourcesToTools(sources: SourceType[]): ToolType[] {
   return sources.map((s) => map[s]);
 }
 
-export async function grokSearch(
+async function grokSearch(
   query: string,
   sources: SourceType[],
   maxTokens: number
@@ -189,4 +189,4 @@ Examples:
   await grokSearch(query, sources, maxTokens);
 }
 
-if (import.meta.main) run();
+if (import.meta.main) void run();

package/assets/skills/research/tools/perplexity-search.ts

@@ -58,7 +58,7 @@ Distinguish between confirmed facts, single-source claims, and unverified allega
 Flag contradictions between sources.
 Be thorough but concise.`;
 
-export async function perplexitySearch(query: string, maxTokens: number): Promise<void> {
+async function perplexitySearch(query: string, maxTokens: number): Promise<void> {
   const apiKey = loadApiKey();
 
   const body = {
@@ -147,4 +147,4 @@ Examples:
   await perplexitySearch(query, maxTokens);
 }
 
-if (import.meta.main) run();
+if (import.meta.main) void run();

package/assets/skills/telos/tools/update-telos.ts

@@ -10,7 +10,6 @@
  * - Appends content (preserves existing)
  * - Logs the change to updates.md
  *
- * For PROJECTS.md upserts (add/update by ID), use update-projects.ts instead.
  */
 
 import {

package/assets/templates/PAL/ALGORITHM.md

@@ -35,6 +35,20 @@ Thinking-only. No tool calls except context recovery (Grep/Glob/Read).
 ⏱️ EFFORT: [Standard | Extended | Advanced | Deep] — [one-line reason]
 ```
 
+**0.5. ISA context** — before reverse engineering, orient against the ISA:
+
+```bash
+# If cwd matches a registered project — read its open ISCs:
+bun ~/.pal/tools/project.ts list-isc <project-name>
+
+# If this is ad-hoc work with no registered project — scaffold a task ISA:
+bun ~/.pal/tools/project.ts scaffold-task-isa "<task title>"
+```
+
+Surface any open ISCs as live context: they are unfinished criteria from prior sessions. New criteria defined in this session extend them (use `add-isc`), not replace them.
+
+**Off-topic detection:** if the task description references a different registered project than the cwd project (e.g., working on project-a while inside project-b's directory), use `AskUserQuestion` to ask which project the ISC belongs to before writing anything. `add-isc` takes a project name as its first argument, so routing to any project is a one-word change.
+
 **1. Reverse engineer the request:**
 
 🔎 REVERSE ENGINEERING:
@@ -231,15 +245,25 @@ bun ~/.pal/tools/handoff-note.ts --done --title "what we completed"
 - Skip if the session fully resolved everything it set out to do
 - `--text` should answer: what's next, what was decided, what to watch out for
 
-**5. Open Threads** — for each unresolved question, decision, or follow-up that came up during this session:
+**5. Open work** — close what this session finished; open what it didn't:
 
+**Project work** — use ISCs, not threads:
 ```bash
-bun ~/.pal/tools/thread.ts --add --title "brief title" --context "why it matters, what needs to happen"
+# Close completed ISCs:
+bun ~/.pal/tools/project.ts check-isc <project-name> <id>
+
+# Open new ISCs for unfinished work:
+bun ~/.pal/tools/project.ts add-isc <project-name> "what remains"
 ```
 
-Only add threads that genuinely need follow-up. Resolve existing threads if this session closed them:
+**Task ISA (one-shot work)** — mark complete when done:
+```bash
+bun ~/.pal/tools/project.ts complete-task-isa <slug>
+```
 
+**Cross-project or non-project follow-ups** — use threads:
 ```bash
+bun ~/.pal/tools/thread.ts --add --title "brief title" --context "why it matters, what needs to happen"
 bun ~/.pal/tools/thread.ts --resolve --id <id>
 ```
 

package/assets/templates/hooks.codex.json

@@ -0,0 +1,44 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "PAL_AGENT=codex bun run {{PKG_ROOT}}/src/hooks/LoadContext.ts"
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "PAL_AGENT=codex bun run {{PKG_ROOT}}/src/hooks/UserPromptOrchestrator.ts"
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "PAL_AGENT=codex bun run {{PKG_ROOT}}/src/hooks/SecurityValidator.ts"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "PAL_AGENT=codex bun run {{PKG_ROOT}}/src/hooks/StopOrchestrator.ts"
+          }
+        ]
+      }
+    ]
+  }
+}

package/assets/templates/hooks.cursor.json

@@ -4,29 +4,35 @@
     "sessionStart": [
       {
         "type": "command",
-        "command": "bun run {{PKG_ROOT}}/src/hooks/LoadContext.ts"
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/LoadContext.ts"
       }
     ],
     "beforeSubmitPrompt": [
       {
         "type": "command",
-        "command": "bun run {{PKG_ROOT}}/src/hooks/UserPromptOrchestrator.ts"
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/UserPromptOrchestrator.ts"
       }
     ],
     "preToolUse": [
       {
         "type": "command",
-        "command": "bun run {{PKG_ROOT}}/src/hooks/SecurityValidator.ts"
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/SecurityValidator.ts"
       },
       {
         "type": "command",
-        "command": "bun run {{PKG_ROOT}}/src/hooks/SkillGuard.ts"
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/SkillGuard.ts"
+      }
+    ],
+    "beforeShellExecution": [
+      {
+        "type": "command",
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/SecurityValidator.ts"
       }
     ],
     "stop": [
       {
         "type": "command",
-        "command": "bun run {{PKG_ROOT}}/src/hooks/StopOrchestrator.ts"
+        "command": "PAL_AGENT=cursor bun run {{PKG_ROOT}}/src/hooks/StopOrchestrator.ts"
       }
     ]
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "portable-agent-layer",
-  "version": "0.36.0",
+  "version": "0.37.0",
   "description": "PAL — Portable Agent Layer: persistent personal context for AI coding assistants",
   "type": "module",
   "bin": {
@@ -41,6 +41,7 @@
     "check": "biome check",
     "check-write": "biome check --write",
     "knip": "knip-bun",
+    "arch-check": "bun flint/cli.ts",
     "lint-staged": "lint-staged",
     "prepare": "bun .husky/install.mjs",
     "install:all": "bun run src/cli/index.ts cli install",