/athena-preferences (v9.6)

设计原则

Athena 不造私有偏好文件。所有写入都是 CC 原生位置:

偏好类型	落点
全局 allow	~/.claude/settings.json permissions.allow[]
全局 deny	~/.claude/settings.json permissions.deny[]
工具偏好 (pnpm/vitest)	~/.claude/CLAUDE.md "## Tool Preferences" 段

参考: https://code.claude.com/docs/en/settings + https://code.claude.com/docs/en/permissions

永远不写:

• ❌ ~/.claude/memory/athena-*.list 类私有文件
• ❌ 项目特定的命令到全局 (路径泛化检查)

永远不自动写:

• ❌ 不监控命令频次自动建议 (隐私决定)
• ✅ 仅在用户显式调用本 skill 时写

子命令

/athena:remember-allow <pattern>

参数: 标准 CC permission pattern, 如 Bash(pnpm test:*).

const fs = require('fs');
const os = require('os');
const path = require('path');

const settingsPath = path.join(os.homedir(), '.claude/settings.json');
let s = {};
try { s = JSON.parse(fs.readFileSync(settingsPath,'utf8')); } catch(e) {}
s.permissions = s.permissions || {};
s.permissions.allow = s.permissions.allow || [];

const pattern = process.argv[2];

// 路径泛化检查: 拒绝含项目特定路径的 pattern
if (/\/Users\/|\/home\/[^*/]|C:\\Users\\/.test(pattern) || /[\w-]+\.(com|cn|net)\//.test(pattern)) {
  console.error('❌ 拒绝: pattern 含项目/用户特定路径, 不应写入全局');
  console.error('   如果只想本项目用, 写到 .claude/settings.local.json');
  process.exit(1);
}

if (s.permissions.allow.includes(pattern)) {
  console.log('✓ 已存在, 无需添加');
  process.exit(0);
}
s.permissions.allow.push(pattern);
fs.writeFileSync(settingsPath, JSON.stringify(s,null,2));
console.log(`✓ 已加入全局 allow: ${pattern}`);
console.log(`   位置: ${settingsPath}`);

/athena:remember-deny <pattern>

同 remember-allow, 写入 permissions.deny[]. 但不做路径泛化拒绝——deny 越严格越好。

/athena:remember-tool <key>=<value>

写入 ~/.claude/CLAUDE.md 的 "## Tool Preferences" 段 (无则创建):

## Tool Preferences

- 包管理器: pnpm
- 测试运行器: vitest
- Linter: biome
- 默认提交者: --signoff

/athena:show-preferences

echo "=== Global allow (~/.claude/settings.json) ==="
node -e 'console.log((JSON.parse(require("fs").readFileSync(require("os").homedir()+"/.claude/settings.json")).permissions?.allow || []).join("\n"))'

echo ""
echo "=== Global deny ==="
node -e 'console.log((JSON.parse(require("fs").readFileSync(require("os").homedir()+"/.claude/settings.json")).permissions?.deny || []).join("\n"))'

echo ""
echo "=== Tool preferences (~/.claude/CLAUDE.md) ==="
sed -n '/^## Tool Preferences/,/^## /p' ~/.claude/CLAUDE.md 2>/dev/null | head -20

/athena:forget <pattern>

从全局 allow/deny 中删除指定 pattern. 显示删除前后 diff.

const fs = require('fs');
const os = require('os');
const path = require('path');

const settingsPath = path.join(os.homedir(), '.claude/settings.json');
const s = JSON.parse(fs.readFileSync(settingsPath,'utf8'));
const pattern = process.argv[2];

const beforeA = s.permissions?.allow?.length || 0;
const beforeD = s.permissions?.deny?.length || 0;
if (s.permissions?.allow) s.permissions.allow = s.permissions.allow.filter(p => p !== pattern);
if (s.permissions?.deny) s.permissions.deny = s.permissions.deny.filter(p => p !== pattern);
const afterA = s.permissions?.allow?.length || 0;
const afterD = s.permissions?.deny?.length || 0;

fs.writeFileSync(settingsPath, JSON.stringify(s,null,2));
console.log(`allow: ${beforeA} → ${afterA}`);
console.log(`deny:  ${beforeD} → ${afterD}`);

安全约束

1. 不修改 managed-settings.json (企业管理层)
2. 不修改项目 .claude/settings.json (那是项目级, 用 settings.local.json 兜底)
3. 永远显示 diff 在写入前——用户能看到改了什么
4. 永远说明落点 ("位置: ~/.claude/settings.json") 而不是含糊"已记住"

Boundary

• ✅ 操作 ~/.claude/settings.json
• ✅ 追加到 ~/.claude/CLAUDE.md 末尾 "## Tool Preferences" 段
• ❌ 不读不写 ~/.claude/projects/ (那是 session memory, claude-mem 管)
• ❌ 不读不写 ~/.claude/memory/
• ❌ 不创建 ~/.claude/athena-*.txt 类文件