pastilhas
dc91f78f4f
This file said "NEVER run pm2 yourself — tell the owner the exact command." The owner granted the opposite on this machine on 2026-08-19, so the document and the instruction disagreed for a day, and user/CLAUDE.md already flagged it as a local rule to follow "while it says so". It now says to run the restart and report it. The scope is unchanged and is the part that mattered: only the process the change needs, never the whole ecosystem.config.cjs. Added the caveat the grant did not remove — check who else is live first. The owner edits the platform using the platform, several sessions share one checkout, and a restart is the moment a half-applied change from someone else's work in progress would ship.
claude-mds
CLAUDE.md files and Claude Code configuration, kept under version control.
Install, on any machine
git clone git@gitea.officer.dev:pastilhas/claude-mds.git ~/projects/claude-mds
~/projects/claude-mds/install.sh
--dry-run first if you want to see it before it happens.
Everything is symlinked, not copied — so editing an installed file edits the repo, and the change
is one git commit away from every other machine. Re-run it after each git pull; a correct link is
a no-op.
It will not overwrite anything in silence. A real file where a link should go is moved to
<name>.bak-<timestamp> and reported, because on a new machine that file may be the only copy of
something written by hand.
What lands where
manifest is the whole answer, and it is the only place paths are declared. Today:
| repo | target | only if |
|---|---|---|
user/CLAUDE.md |
~/.claude/CLAUDE.md |
always |
officer.dev/CLAUDE.md |
~/officer-dev/CLAUDE.md |
~/officer-dev/platform exists |
tools/mask-hooks.d/officer-chat-events |
~/.local/claude-scripts/mask-hooks.d/ |
~/officer-dev/platform exists |
Plus mask-secret on ~/.local/bin, as a command rather than a path.
Adding a file later is one manifest line, not an edit to the shell.
The two kinds of file
user/— who you are working with and how. Loads in every session on every machine.officer.dev/— one workspace on one machine. Conditional, so it never lands where it would be a lie.
mask-secret
Masks a pasted secret everywhere the chat history keeps it:
printf '%s' "$SECRET" | mask-secret
It owns Claude Code's own transcripts. Anywhere else that keeps a second copy of the chat — a
database, a mirror, a log shipper — is a hook: an executable in tools/mask-hooks.d/, listed in
the manifest with the condition that says which machines it belongs on.
The installed mask-secret is a small generated wrapper, and that is deliberate. The script finds its
hooks beside itself and resolves symlinks to do it, so a bare symlink would reach back into the repo
and run every machine's hooks. The wrapper points it at the ones this machine installed.