portable-agent-layer 0.61.3 → 0.61.4

package/assets/skills/opinion/SKILL.md

@@ -7,7 +7,7 @@ description: "Opinion tracker for relationship notes. PROACTIVE: When the user c
 
 Tool: `tools/opinion.ts`
 
-Manage confidence-scored opinions about the user. Opinions are promoted from recurring relationship notes (the W/O/B observations captured at session end). This tool is the fast path to grow opinion confidence — relationship notes feed the slow path (+2% per reflect cycle), while explicit confirmations here jump +10%.
+Manage confidence-scored opinions about the user. Opinions are promoted from recurring relationship notes (the W/O/B observations captured at session end). This tool is the fast path to grow opinion confidence — relationship notes feed the slow path (+5% per reflect cycle), while explicit confirmations here jump +10%.
 
 Opinions at ≥85% confidence are automatically injected into every session context.
 
@@ -42,12 +42,12 @@ bun opinion.ts list
 # Show details for a specific opinion (fuzzy-matched)
 bun opinion.ts show "keywords"
 
-# Add a new opinion (starts at 50%)
+# Add a new opinion (starts at 60%)
 bun opinion.ts add "statement" [--category workflow]
 
 # Add evidence to an existing opinion
-bun opinion.ts evidence "keywords" --supporting "why"      # +2%
-bun opinion.ts evidence "keywords" --counter "why"         # -5%
+bun opinion.ts evidence "keywords" --supporting "why"      # +5%
+bun opinion.ts evidence "keywords" --counter "why"         # -10%
 bun opinion.ts evidence "keywords" --confirmation "why"    # +10%
 bun opinion.ts evidence "keywords" --contradiction "why"   # -20%
 ```
@@ -59,9 +59,9 @@ bun opinion.ts evidence "keywords" --contradiction "why"   # -20%
 ## Confidence Lifecycle
 
 ```
-New opinion (add) → 50%
-  ├── supporting evidence → +2% each
-  ├── counter evidence → -5% each
+New opinion (add) → 60%
+  ├── supporting evidence → +5% each
+  ├── counter evidence → -10% each
   ├── explicit confirmation → +10% each
   ├── explicit contradiction → -20% each
   └── at ≥85% → auto-injected into session context

package/assets/skills/opinion/tools/opinion.ts

@@ -147,7 +147,9 @@ switch (command) {
     const opinion = createOpinion(statement, "manual add");
     opinion.category = category;
     saveOpinion(opinion);
-    console.log(`  Added: "${statement}" [${category}] at 50%`);
+    console.log(
+      `  Added: "${statement}" [${category}] at ${Math.round(opinion.confidence * 100)}%`
+    );
     break;
   }
 
@@ -218,9 +220,9 @@ switch (command) {
   Commands:
     list                                      List all opinions with confidence bars
     show "keywords"                           Show opinion details + full evidence history
-    add "statement" [--category X]            Create new opinion (starts at 50%)
-    evidence "keywords" --supporting "why"    Supporting evidence (+2%)
-    evidence "keywords" --counter "why"       Counter evidence (-5%)
+    add "statement" [--category X]            Create new opinion (starts at 60%)
+    evidence "keywords" --supporting "why"    Supporting evidence (+5%)
+    evidence "keywords" --counter "why"       Counter evidence (-10%)
     evidence "keywords" --confirmation "why"  User explicitly confirmed (+10%)
     evidence "keywords" --contradiction "why" User explicitly contradicted (-20%)
 

package/assets/templates/settings.claude.json

@@ -2,8 +2,6 @@
   "permissions": {
     "allow": [
       "Read(//*)",
-      "Grep(//*)",
-      "Glob(//*)",
       "WebFetch",
       "WebSearch",
       "Bash(cat //*)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "portable-agent-layer",
-  "version": "0.61.3",
+  "version": "0.61.4",
   "description": "PAL — Portable Agent Layer: persistent personal context for AI coding assistants",
   "type": "module",
   "bin": {

package/src/hooks/handlers/failure-principle.ts

@@ -60,7 +60,7 @@ async function processFailurePrinciple(
           system: `Analyze this failed AI interaction (rated ${pending.rating}/10). Return JSON: {"principle": "<verb-first actionable rule, 10-20 words — write a full sentence, not a fragment>", "detailed_context": "<root cause and what to do differently, 50-150 words>"}.`,
           user: `User feedback: ${pending.context}\n\nConversation:\n${recent}`,
           maxTokens: 400,
-          timeout: 60000,
+          timeout: 90000,
           jsonSchema: {
             type: "object" as const,
             properties: {

package/src/hooks/handlers/rating.ts

@@ -310,7 +310,7 @@ async function runSentimentInferenceAndStore(
       system: SENTIMENT_SYSTEM_PROMPT,
       user: contextBlock,
       maxTokens: 500,
-      timeout: 60000,
+      timeout: 90000,
       jsonSchema: SENTIMENT_SCHEMA,
       caller: "rating",
       sessionId,

package/src/hooks/handlers/session-intelligence.ts

@@ -178,7 +178,7 @@ async function captureSessionIntelligence(
       ].join("\n"),
       user: `User messages:\n${numberedMessages}\n\nLast AI response:\n${assistantWindow}`,
       maxTokens: 350,
-      timeout: 60000,
+      timeout: 90000,
       jsonSchema: INTELLIGENCE_SCHEMA,
       caller: "session-intelligence",
       sessionId,

package/src/hooks/handlers/session-name.ts

@@ -70,7 +70,7 @@ async function upgradeWithInference(
       system: NAME_PROMPT,
       user: `Generate a 4-word title for: "${promptText}"`,
       maxTokens: 20,
-      timeout: 60000,
+      timeout: 90000,
       caller: "session-name",
       sessionId,
     });

package/src/hooks/handlers/update-check.ts

@@ -72,23 +72,26 @@ async function checkRepo(): Promise<UpdateCache> {
     });
     await fetch.exited;
 
-    const local = Bun.spawn(["git", "rev-parse", "HEAD"], {
+    const remote = Bun.spawn(["git", "rev-parse", "origin/main"], {
       cwd: repoDir,
       stdout: "pipe",
       stderr: "ignore",
       windowsHide: true,
     });
-    const localHash = (await new Response(local.stdout).text()).trim();
+    const remoteHash = (await new Response(remote.stdout).text()).trim();
 
-    const remote = Bun.spawn(["git", "rev-parse", "origin/main"], {
+    // "Ahead" (local unpushed commits) is not an update — only remote commits we
+    // lack are. Count HEAD..origin/main so being ahead or diverged never nags.
+    const behind = Bun.spawn(["git", "rev-list", "--count", "HEAD..origin/main"], {
       cwd: repoDir,
       stdout: "pipe",
       stderr: "ignore",
       windowsHide: true,
     });
-    const remoteHash = (await new Response(remote.stdout).text()).trim();
+    const behindCount =
+      Number.parseInt((await new Response(behind.stdout).text()).trim(), 10) || 0;
 
-    const available = localHash !== remoteHash && remoteHash.length > 0;
+    const available = behindCount > 0 && remoteHash.length > 0;
 
     // Get remote version from package.json on origin/main
     let latest = current;

package/src/hooks/lib/opinions.ts

@@ -11,7 +11,7 @@
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { resolve } from "node:path";
 import { paths } from "./paths";
-import { similarity } from "./text-similarity";
+import { containment, similarity } from "./text-similarity";
 
 // ── Types ──
 
@@ -118,16 +118,27 @@ function slugify(text: string): string {
     .join("-");
 }
 
-/** Find an existing opinion similar to the given text. Returns the opinion or null. */
+/** Find the best-matching opinion for the given text. Returns the opinion or null. */
 export function findSimilarOpinion(
   text: string,
   opinions: Opinion[],
   threshold = 0.3
 ): Opinion | null {
+  let best: Opinion | null = null;
+  let bestScore = 0;
   for (const op of opinions) {
-    if (similarity(text, op.statement) >= threshold) return op;
+    // Dice handles full-statement comparisons (dedup, reflect promotion);
+    // containment lets a short keyword query reach a long statement.
+    const score = Math.max(
+      similarity(text, op.statement),
+      containment(text, op.statement)
+    );
+    if (score >= threshold && score > bestScore) {
+      bestScore = score;
+      best = op;
+    }
   }
-  return null;
+  return best;
 }
 
 /** Create a new opinion from a recurring note. Starts at confidence 0.60. */

package/src/hooks/lib/text-similarity.ts

@@ -155,3 +155,21 @@ export function similarity(a: string, b: string): number {
 
   return (2 * intersection) / (ka.size + kb.size);
 }
+
+/**
+ * Asymmetric containment: fraction of `query` keywords also present in `target`.
+ * Unlike Dice, it is not penalized by `target` being much longer, so a short
+ * keyword query can still match a full-sentence statement.
+ */
+export function containment(query: string, target: string): number {
+  const q = extractKeywords(query);
+  const t = extractKeywords(target);
+  if (q.size === 0 || t.size === 0) return 0;
+
+  let intersection = 0;
+  for (const w of q) {
+    if (t.has(w)) intersection++;
+  }
+
+  return intersection / q.size;
+}

package/src/targets/lib.ts

@@ -166,7 +166,7 @@ export function mergeSettings(existing: Settings, template: Settings): Settings
     }
   }
 
-  // Merge permissions.allow (deduplicate)
+  // Merge permissions.allow (deduplicate), then drop deprecated entries.
   if (template.permissions?.allow) {
     result.permissions ??= {};
     result.permissions.allow ??= [];
@@ -176,6 +176,14 @@ export function mergeSettings(existing: Settings, template: Settings): Settings
       }
     }
   }
+  // Strip ineffective Grep(...)/Glob(...) rules left by older templates. Claude Code
+  // governs Grep/Glob via Read(...) rules, so a path-scoped Grep()/Glob() entry never
+  // matches and Claude Code warns about it on every prompt. Read(//*) already covers them.
+  if (result.permissions?.allow) {
+    result.permissions.allow = result.permissions.allow.filter(
+      (perm) => !isIneffectiveFileToolRule(perm)
+    );
+  }
 
   // Merge skillOverrides (object with skill name keys, add if not present)
   if (template.skillOverrides && typeof template.skillOverrides === "object") {
@@ -455,6 +463,15 @@ function canonicalPalCmd(cmd: string): string {
   return withoutEnv;
 }
 
+/**
+ * True for path-scoped Grep()/Glob() allow rules, which Claude Code cannot honor —
+ * it resolves Grep/Glob permission through Read(...) rules, so these never match and
+ * trigger a warning on every prompt. Bare "Grep"/"Glob" tool allows are left intact.
+ */
+function isIneffectiveFileToolRule(perm: string): boolean {
+  return /^(?:Grep|Glob)\(/.test(perm);
+}
+
 export function loadCodexHooksTemplate(
   templatePath: string,
   pkgRoot: string