skills-viewer 0.8.0 → 0.8.1

package/README.md

@@ -24,7 +24,7 @@ npx skills-viewer
 - **AI trigger diagnosis** — one click asks the model whether the description is likely to trigger auto-invocation, lists concrete issues, and proposes an improved description you can apply with one click (cached by content hash)
 - **AI flow diagram** — extract the processing flow of orchestration-style skills (steps, branches, delegations, human gates) from the definition body and render it as a step diagram; delegated skills are clickable
 - **AI model choice** — pick the model behind all AI features (haiku default / sonnet / opus) in settings; aliases are resolved by your claude CLI
-- **Memory triage** — a _Memory_ view lists Claude Code's auto memory (`~/.claude/projects/<project>/memory/`) per project with its context cost split into the always-on part (the `MEMORY.md` index line injected into every session) and the pay-per-use part (the body, read on demand), plus Read / Write counts from transcripts, `[[link]]` resolution and backlinks. **AI triage** reads every memory of a project with the claude CLI (one call, split into a few for very large projects) and proposes a destination per memory — keep / shrink / move to CLAUDE.md / move to docs / move to a skill / delete / wrong project — with the reasoning and a paste-ready instruction for Claude Code (it is asked to always cover removing the `MEMORY.md` index line and re-pointing `[[link]]`s). Each memory is first judged for freshness (current / outdated / historical / obsolete) from mechanical signals — dates in the body, missing paths, merged or deleted branches, references to another project — and a _rewrite the body_ verdict covers memories whose gist still holds; the triage also flags when the `MEMORY.md` index line disagrees with the body. For feedback memories the instruction is built from a fixed template, so it reads the same on every model. The viewer never writes to memory: you paste the instruction into Claude Code, which inspects, asks when unsure, and executes after your approval
+- **Memory triage** — a _Memory_ view lists Claude Code's auto memory (`~/.claude/projects/<project>/memory/`, or the directory set by `autoMemoryDirectory`) per project with its context cost split into the always-on part (the `MEMORY.md` index line injected into every session) and the pay-per-use part (the body, read on demand), plus Read / Write counts from transcripts, `[[link]]` resolution and backlinks. **AI triage** reads every memory of a project with the claude CLI (one call, split into a few for very large projects) and proposes a destination per memory — keep / shrink / move to CLAUDE.md / move to your user CLAUDE.md / move to docs / move to a skill / delete / wrong project — with the reasoning and a paste-ready instruction for Claude Code (it is asked to always cover removing the `MEMORY.md` index line and re-pointing `[[link]]`s). Each memory is first judged for freshness (current / outdated / historical / obsolete) from mechanical signals — dates in the body, missing paths, merged or deleted branches, references to another project — and a _rewrite the body_ verdict covers memories whose gist still holds; the triage also flags when the `MEMORY.md` index line disagrees with the body. For feedback memories the instruction is built from a fixed template, so it reads the same on every model. The viewer never writes to memory: you paste the instruction into Claude Code, which inspects, asks when unsure, and executes after your approval
 - **Edit in the browser** — inline editor for SKILL.md / commands / agents (project & user scopes) with mtime conflict detection and a one-generation backup in `~/.cache/skills-viewer/backups/`
 - **What's changed** — a banner shows items added / updated / removed since your last launch (baseline advances only when you dismiss it); the CLI prints a one-line summary at startup too
 - **Usage sparkline** — the detail pane charts the last 30 days of per-day usage
@@ -53,6 +53,7 @@ Run it from a project directory to have that project marked as “current” and
 - Binds to `127.0.0.1` only
 - Mutating APIs require a per-run token that other origins cannot read (same-origin policy), and requests with a non-localhost `Origin` are rejected
 - Copy/delete are restricted to `.claude/skills/` / `.claude/commands/` / `.claude/agents/` paths; plugin directories are never written to; deletions go to the OS trash
+- Reads stay inside `~/.claude`, the per-project `.claude` directories and the `autoMemoryDirectory` you configured — a setting that resolves to a filesystem root, your home directory or an ancestor of it is ignored
 
 ## Development
 
@@ -84,6 +85,7 @@ dist/             # prebuilt UI shipped in the npm package (generated by prepack
 - The built-in skill list is hardcoded in `server/scan.js` (they live inside the Claude Code binary); check `/skills` inside Claude Code for the authoritative list
 - AI summaries require a logged-in `claude` CLI
 - Memory triage sends each memory's body to the claude CLI, together with the project's `MEMORY.md` index, the **headings** of `CLAUDE.md` / `.claude/CLAUDE.md` / `~/.claude/CLAUDE.md` and the names + descriptions of the skills available to that project (never their bodies) so it can spot duplicates and promotion targets. Branch status for the freshness signals comes from local `git` (no network). Results are cached per memory by content hash (plus the index line); memory files themselves are never modified
+- The Memory view resolves `autoMemoryDirectory` from your user settings and the current project only — project-scope settings of other projects are not read
 
 ## License
 

package/build/server/index.js

@@ -141,13 +141,16 @@ function attributeUsage(sections) {
  * skill と違って帰属先の解決は不要で、Read の file_path がそのまま実ファイルを指す。
  * usageAvailable は「そのプロジェクトのトランスクリプトがあるか」= エンコード名で始まる
  * ディレクトリ(worktree 分を含む)に jsonl が 1 件以上あるか。false なら Read 列は出さない。
+ * 判定そのもの(共有ストアの扱いを含む)は usageAvailableFor に集約している。
  */
 function attributeMemoryUsage(memory) {
     if (!memory.length)
         return;
     const { byPath, dirsWithTranscripts } = (0, usage_1.scanMemoryUsage)();
     for (const sec of memory) {
-        sec.usageAvailable = (0, usage_1.hasTranscripts)(dirsWithTranscripts, sec.id);
+        // autoMemoryDirectory の置き場は id が置き場のパス由来なので、transcript の
+        // ディレクトリ名(現在のプロジェクトの slug)を別に持っている
+        sec.usageAvailable = (0, memory_1.usageAvailableFor)(sec, dirsWithTranscripts);
         for (const it of sec.items) {
             const u = byPath[it.path];
             if (!u)
@@ -167,11 +170,32 @@ function attributeMemoryUsage(memory) {
  * 同じ事実(Read / W-E / usageAvailable)をプロンプトに載せる必要があるので共通化する。
  */
 function memorySections(cwd) {
+    primeMemoryRoots(cwd);
     const memory = (0, memory_1.scanMemory)(cwd);
     attributeMemoryUsage(memory);
     return memory;
 }
+/*
+ * この環境の自動メモリ置き場(autoMemoryDirectory)を usage 集計の許可ルートに設定する。
+ * skill 集計と memory 集計は同じ transcript キャッシュを共有するので、走査を始める前に
+ * 揃えておかないと同じファイルを二度読みすることになる(解決自体は memo 済みで安い)。
+ */
+function primeMemoryRoots(cwd) {
+    const auto = (0, memory_1.resolveAutoMemoryDir)(cwd);
+    if (!auto) {
+        (0, usage_1.setMemoryRoots)([]);
+        return;
+    }
+    /*
+     * 設定値そのものと、その実パス(異なるときだけ)の両方を許可ルートにする。
+     * transcript の file_path が symlink 解決済みで記録される環境があり、設定値だけを
+     * 前方一致に使うと、その置き場の Read / Write を丸ごと取り逃すため。
+     */
+    const real = (0, memory_1.realDir)(auto.dir);
+    (0, usage_1.setMemoryRoots)(real !== auto.dir ? [auto.dir, real] : [auto.dir]);
+}
 function collect(cwd, lang) {
+    primeMemoryRoots(cwd);
     const sections = (0, scan_1.scanSections)(cwd, lang);
     const usageAvailable = attributeUsage(sections);
     const summaries = (0, summary_1.loadSummaries)();
@@ -201,7 +225,10 @@ function collect(cwd, lang) {
     const aiStale = (0, summary_1.staleItems)(sections, lang).length;
     // memory は「呼び出す」ものではないので sections には混ぜず、別配列で同乗させる
     const memory = memorySections(cwd);
-    (0, memory_triage_1.attachMemoryTriage)(memory, lang);
+    // 共有ストア環境かどうかは cwd から解決した値で判定する(棚卸し側と同じ事実を見る)
+    (0, memory_triage_1.attachMemoryTriage)(memory, lang, undefined, {
+        sharedEnv: (0, memory_1.resolveAutoMemoryDir)(cwd)?.scope === 'user',
+    });
     const targets = [
         { label: 'user skills', sub: '~/.claude/skills/', path: scan_1.HOME },
         ...(0, scan_1.listProjects)(cwd)
@@ -218,7 +245,7 @@ function collect(cwd, lang) {
         changes: (0, snapshot_1.computeChanges)(sections),
         ...(grp.groups ? { groups: grp.groups } : {}),
         ...(grp.stale ? { groupsStale: true } : {}),
-        ...(memory.length ? { memory } : {}),
+        ...(memory.length ? { memory: (0, memory_1.publicMemory)(memory) } : {}),
     };
 }
 /* DNS rebinding 対策: same-origin GET には Origin が付かないため Host 側も検証する */
@@ -260,7 +287,7 @@ function handleApi(req, res, cwd) {
             if (url.pathname === '/api/summary-status')
                 return send(200, (0, summary_1.summaryStatus)());
             if (url.pathname === '/api/file') {
-                const real = (0, manage_1.assertReadableMd)(url.searchParams.get('src') || '');
+                const real = (0, manage_1.assertReadableMd)(url.searchParams.get('src') || '', cwd);
                 // mtime は編集画面の競合検出(/api/save の baseMtime)に使う
                 return send(200, {
                     content: fs.readFileSync(real, 'utf8'),
@@ -298,7 +325,7 @@ function handleApi(req, res, cwd) {
             if (url.pathname === '/api/apply-description')
                 return send(200, (0, edit_1.doApplyDescription)(data));
             if (url.pathname === '/api/diagnose') {
-                const real = (0, manage_1.assertReadableMd)(data.src);
+                const real = (0, manage_1.assertReadableMd)(data.src, cwd);
                 const name = data.name || path.basename(path.dirname(real));
                 (0, diagnose_1.diagnoseOne)(real, name, lang, model)
                     .then((d) => send(200, { ok: true, ...d }))
@@ -306,7 +333,7 @@ function handleApi(req, res, cwd) {
                 return;
             }
             if (url.pathname === '/api/flow') {
-                const real = (0, manage_1.assertReadableMd)(data.src);
+                const real = (0, manage_1.assertReadableMd)(data.src, cwd);
                 const name = data.name || path.basename(path.dirname(real));
                 (0, flow_1.flowOne)(real, name, lang, model)
                     .then((f) => send(200, { ok: true, ...f }))
@@ -322,7 +349,7 @@ function handleApi(req, res, cwd) {
             if (url.pathname === '/api/delete')
                 return send(200, (0, manage_1.doDelete)(data));
             if (url.pathname === '/api/open')
-                return send(200, (0, manage_1.openInEditor)(data));
+                return send(200, (0, manage_1.openInEditor)(data, cwd));
             if (url.pathname === '/api/summarize-all')
                 return send(200, (0, summary_1.startSummarizeAll)((0, scan_1.scanSections)(cwd, lang), !!data.force, lang, model));
             if (url.pathname === '/api/group-generate') {
@@ -347,13 +374,16 @@ function handleApi(req, res, cwd) {
                     force: !!data.force,
                     files,
                     sections: () => (0, scan_1.scanSections)(cwd, lang),
+                    // 置き場の解決は起動ディレクトリ基準。process.cwd() 任せにせず、この
+                    // リクエストと同じ cwd で解決した値を渡す(スキャン・読み取り許可と同じ事実を見る)
+                    autoMemory: (0, memory_1.resolveAutoMemoryDir)(cwd),
                 })
                     .then((results) => send(200, { ok: true, results }))
                     .catch((e) => send(400, (0, errors_1.toErrorBody)(e)));
                 return;
             }
             if (url.pathname === '/api/summarize') {
-                const real = (0, manage_1.assertReadableMd)(data.src);
+                const real = (0, manage_1.assertReadableMd)(data.src, cwd);
                 // refs(関係候補)はスキャン結果から復元する
                 const sections = (0, scan_1.scanSections)(cwd, lang);
                 const item = sections.flatMap((s) => s.items).find((x) => x.path === real);

package/build/server/manage.js

@@ -45,6 +45,7 @@ const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
 const node_child_process_1 = require("node:child_process");
 const scan_1 = require("./scan");
+const memory_1 = require("./memory");
 const errors_1 = require("./errors");
 const HOME = os.homedir();
 /* realpath 解決(存在しないパスは not-found に正規化) */
@@ -77,19 +78,55 @@ function assertManagedPath(p) {
         throw new errors_1.ApiError('not-managed-path', real);
     return { real, kind };
 }
-/* 読み取り専用は plugin 配下も許可(.claude 配下の .md のみ) */
-function assertReadableMd(p) {
+/*
+ * 自動メモリの置き場(settings の autoMemoryDirectory)の realpath。キャッシュは解決値ごとに 1 回。
+ * 設定が有効な環境では memory の実体が .claude の外へ丸ごと移るため、
+ * 一覧に出ている本文が読めない(fetchFile・棚卸しモーダル・エディタで開くが全滅する)。
+ */
+const autoRealMemo = new Map();
+function autoMemoryRoot(cwd) {
+    const info = (0, memory_1.resolveAutoMemoryDir)(cwd);
+    if (!info)
+        return null;
+    const cached = autoRealMemo.get(info.dir);
+    if (cached)
+        return cached;
+    try {
+        const real = fs.realpathSync(info.dir);
+        // 解決できたときだけ覚える(置き場がまだ無い時点の失敗を焼き付けない。
+        // ディレクトリは後から作られ得るので、次のリクエストで解決し直せるようにする)
+        autoRealMemo.set(info.dir, real);
+        return real;
+    }
+    catch {
+        return null;
+    }
+}
+/*
+ * 解決済み autoMemoryDirectory の配下か。realpath 同士を path.sep 区切りで前方一致させる
+ * (symlink 経由のパスで一致が外れないように / `<dir>-other` のような兄弟を巻き込まないように)。
+ * `.claude` のルールは緩めず、この許可を足すだけ。
+ */
+function underAutoMemory(real, cwd) {
+    const root = autoMemoryRoot(cwd);
+    // isUnder はケース非依存 FS で case-fold する(root が `/USERS/…` のとき
+    // 実ファイルの realpath `/Users/…` と取り違えないように)
+    return !!root && real !== root && (0, memory_1.isUnder)(real, root);
+}
+const underDotClaude = (real) => real.includes(path.sep + '.claude' + path.sep);
+/* 読み取り専用は plugin 配下も許可(.claude 配下 + 自動メモリの置き場配下の .md のみ) */
+function assertReadableMd(p, cwd = process.cwd()) {
     const real = realpathOrThrow(p);
     if (!real.endsWith('.md'))
         throw new errors_1.ApiError('not-md', real);
-    if (!real.includes(path.sep + '.claude' + path.sep))
+    if (!underDotClaude(real) && !underAutoMemory(real, cwd))
         throw new errors_1.ApiError('not-readable-path', real);
     return real;
 }
-/* エディタで開くのは .claude 配下ならなんでも良い(settings.json 等も含む) */
-function assertOpenablePath(p) {
+/* エディタで開くのは .claude 配下(settings.json 等も含む)と自動メモリの置き場配下 */
+function assertOpenablePath(p, cwd) {
     const real = realpathOrThrow(p);
-    if (!real.includes(path.sep + '.claude' + path.sep))
+    if (!underDotClaude(real) && !underAutoMemory(real, cwd))
         throw new errors_1.ApiError('not-openable-path', real);
     return real;
 }
@@ -190,8 +227,8 @@ function detectEditor() {
     }
     return (editorCache = { cmd: null });
 }
-function openInEditor({ src }) {
-    const real = assertOpenablePath(src);
+function openInEditor({ src }, cwd = process.cwd()) {
+    const real = assertOpenablePath(src, cwd);
     const { cmd } = detectEditor();
     if (cmd) {
         (0, node_child_process_1.spawn)(cmd, [real], { detached: true, stdio: 'ignore' }).unref();

package/build/server/memory-signals.js

@@ -88,7 +88,7 @@ function latestDate(body, now) {
 /*
  * 本文が参照するファイルパスのうち存在しないもの。
  * 対象は「/ を含み、末尾が拡張子つきのファイル名」に限る(URL・ブランチ名・パッケージ名を拾わない)。
- * 相対パスは projectPath 基準。projectPath が無い(孤児)なら絶対パスと ~/ だけを見る。
+ * 相対パスは projectPath 基準。projectPath が無い(プロジェクト不明)なら絶対パスと ~/ だけを見る。
  */
 function missingPaths(body, projectPath, home) {
     const out = [];
@@ -155,7 +155,9 @@ function extractSignals(body, description, projectPath, opts = {}) {
 /*
  * 本文が別の登録プロジェクトの配下パス(絶対 / ~/)を指しているか。
  * 「別プロジェクトの話が混入した memory」の機械的な根拠で、置き場所(wrong-project)の判断材料になる。
- * 呼び出し側で自分自身と worktree 関係のプロジェクトは除いて渡す。
+ * 呼び出し側で自分自身(slug 一致を含む)・worktree 関係・入れ子プロジェクトは除いて渡す。
+ * 値はフルパス(basename だと teamA/ai-workspace と teamB/ai-workspace のような
+ * 同名プロジェクトを区別できないため。区別が目的なので表示側もフルパスのまま出す)。
  */
 function otherProjectRefs(body, home, others) {
     if (!others.length)
@@ -164,12 +166,23 @@ function otherProjectRefs(body, home, others) {
     for (const m of body.matchAll(/(~\/[^\s)）」'"`<>]+|\/[\w.@-]+(?:\/[\w.@-]+)+)/g)) {
         const raw = m[1].replace(/[/.,:;。、)）」]+$/, '');
         const resolved = raw.startsWith('~/') ? path.join(home, raw.slice(2)) : raw;
+        /*
+         * 1 つのパス参照が採るのは最長一致の 1 件だけ。入れ子で登録されたプロジェクト
+         * (親 /a と子 /a/b が両方 ~/.claude.json にある)では、/a/b/x.ts への参照 1 つが
+         * 親子 2 件の候補を生み、粗いほうの親が wrong-project の移動先判断を誤らせる。
+         */
+        let best = '';
         for (const p of others) {
-            if (resolved === p || resolved.startsWith(p + path.sep))
-                hit.add(path.basename(p));
+            if (resolved !== p && !resolved.startsWith(p + path.sep))
+                continue;
+            if (p.length > best.length)
+                best = p;
         }
+        if (best)
+            hit.add(best);
     }
-    return [...hit].slice(0, 2);
+    // 上限 3: 参照が複数プロジェクトに散っているとき、2 件では正解が落ちることがある(最長一致で 1 参照 1 件になった分の余裕)
+    return [...hit].slice(0, 3);
 }
 const WHY_RE = /^\s*(?:\*\*)?Why:?(?:\*\*)?:?\s*/im;
 const HOW_RE = /^\s*(?:\*\*)?How to apply:?(?:\*\*)?:?\s*/im;