portable-agent-layer 0.55.0 → 0.55.2

package/assets/skills/projects/SKILL.md

@@ -132,3 +132,4 @@ User: "mark <project> as complete"
 - Always check `list` (or `resume <name>`) before writing — match an existing project rather than spawning a near-duplicate.
 - Slugs are `[a-z0-9_-]+`. Never rename a slug; if the display name needs to change, that's a code-side concern, not a slug change.
 - The Stop hook handles `updated` automatically when cwd matches `path` — no manual touch needed just to mark a project alive.
+- **Always announce a new ISC with the 🎟️ emoji — every single time, no exceptions.** Whenever you open an ISC (`add-isc`), report it back to the user on its own line prefixed with the ticket emoji and the ISC number, e.g. `🎟️ ISC #71 — <title>`. This holds in every response mode and context (ALGORITHM, NATIVE, or a bare reply); opening an ISC without the 🎟️ marker is a defect.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "portable-agent-layer",
-  "version": "0.55.0",
+  "version": "0.55.2",
   "description": "PAL — Portable Agent Layer: persistent personal context for AI coding assistants",
   "type": "module",
   "bin": {

package/src/hooks/lib/security.ts

@@ -3,6 +3,8 @@
  * Used by SecurityValidator.ts (Claude Code) and the opencode plugin.
  */
 
+import { lstatSync } from "node:fs";
+
 /** Dangerous command patterns — always blocked */
 const BLOCKED_COMMANDS: [RegExp, string][] = [
   [/rm\s+-rf\s+[/~]/, "Recursive delete of root or home"],
@@ -67,7 +69,8 @@ const PROTECTED_PATHS: RegExp[] = [
   /\.gnupg\//,
   // Claude Code auto-memory — PAL owns memory; writes here indicate wrong system is being used
   /\.claude\/projects\/[^/]+\/memory\//,
-  PAL_INSTALLED_DIRS_RE,
+  // PAL_INSTALLED_DIRS_RE is enforced by the dedicated branch in checkFilePath
+  // (which exempts personal skill dirs); keeping it here would re-block them.
   // Derived from HOOK_MANAGED_FILES — scoped to managed roots only
   ...HOOK_MANAGED_FILES.map(
     (name) =>
@@ -120,6 +123,22 @@ export function checkBashCommand(cmd: string): string | null {
   return null;
 }
 
+/**
+ * Shipped skills are symlinks into the PAL repo (engine-managed); personal
+ * skills are real dirs authored in place. A not-yet-created skill dir is also
+ * personal (scaffolding). So: symlink → shipped/protected, otherwise → personal.
+ */
+function isShippedSkillPath(normalized: string): boolean {
+  const m = /\.pal\/skills\/([^/]+)/.exec(normalized);
+  if (!m) return false;
+  const skillRoot = normalized.slice(0, m.index + m[0].length);
+  try {
+    return lstatSync(skillRoot).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+
 /** Check a file path against protected patterns. Returns a reason string or null. */
 export function checkFilePath(filePath: string): string | null {
   const normalized = filePath.replaceAll("\\", "/");
@@ -141,7 +160,10 @@ export function checkFilePath(filePath: string): string | null {
   if (PAL_INSTALLED_DIRS_RE.test(normalized)) {
     const match = new RegExp(/\.pal[/\\](docs|skills|tools)/).exec(normalized);
     const dir = match ? match[1] : "docs/skills/tools";
-    return `~/.pal/${dir}/ is managed by 'pal install' — edit the source in the PAL repo instead`;
+    const isPersonalSkill = dir === "skills" && !isShippedSkillPath(normalized);
+    if (!isPersonalSkill) {
+      return `~/.pal/${dir}/ is managed by 'pal install' — edit the source in the PAL repo instead`;
+    }
   }
   // Check remaining system-protected paths
   if (PROTECTED_PATHS.some((pattern) => pattern.test(filePath))) {

package/src/tools/agent/project.ts

@@ -375,7 +375,14 @@ function cmdAddIsc(args: string[]): void {
   p.criteria = current ? `${current.trimEnd()}\n${newLine}` : newLine;
   p.updated = now();
   writeProject(p);
-  ok({ added: true, id, title });
+  ok({
+    added: true,
+    id,
+    title,
+    announce: `🎟️ ISC #${id} — ${title}`,
+    reminder:
+      "Surface the `announce` line to the user verbatim, on its own line. Every ISC you open MUST be announced with the 🎟️ ticket marker, in any response mode — omitting it is a defect.",
+  });
 }
 
 function cmdCompleteIsc(args: string[]): void {