[joanagmaia]

Summary

Phase 4 of the agent-ready knowledge base. Claude Code now warns before it edits migrations, auth, data deletion and production config. It also reminds Claude to update a knowledge note when it edits code that the note lists under sources.

Changes

• guard-protected-files.sh: adds the osspckgs and product Flyway migration directories, backend and public API auth, frontend auth, member erasure scripts, cleanup jobs and workflows, unmerge, */config/production.json, and production deploy workflows. It only warns and never blocks an edit.
• New knowledge-doc-check.sh PostToolUse hook. It reads the sources list in each docs/knowledge/*.md frontmatter. A source ending in / covers everything below it. When an edited file matches, the hook returns additionalContext naming the note, so the reminder reaches Claude and not only the transcript. It skips edits to the notes themselves.
• docs/knowledge/README.md: one sentence about the hook.

The same knowledge hook goes into insights in a companion PR.

Type of change

• Chore / dependency update

Related issue

None. This is local work with no ops issue.

[cursor]

PR Summary

Low Risk
Changes only affect local Claude Code hooks and docs; they warn or add context and do not alter runtime application behavior.

Overview
Claude Code guardrails get broader coverage and a new post-edit reminder for docs/knowledge notes.

guard-protected-files.sh now warns (still non-blocking) on edits to osspckgs/product Flyway migrations, backend/public/frontend auth, GDPR erasure and bulk cleanup paths, unmerge, production.json / env-var config, and production deploy workflows—replacing the single backend migration if with grouped case patterns.

A new knowledge-doc-check.sh PostToolUse hook scans each note’s frontmatter sources (including directory prefixes ending in /); when an edited file matches, it injects additionalContext telling the agent to update the note in the same PR. It skips edits under docs/knowledge/*. .claude/settings.json chains this hook after oxlint/oxfmt on Edit/Write; docs/knowledge/README.md documents the behavior.

^{Reviewed by Cursor Bugbot for commit 26f4739. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge; both previous findings are addressed and no new actionable issue was found.

Summary

Adds advisory warnings for sensitive files and reminds Claude Code when edited code is listed as a knowledge note's source.

• Claude Code warns before edits to more sensitive paths.
• Claude Code gets a reminder when edited code is listed as a knowledge-note source.

_{Reviews (2) · Last reviewed commit: "fix: read inline source lists and drop h..." · Reviewed by Greptile}

[Copilot]

🟡 Changes recommended

The documented sources: [...] template is incompatible with the hook’s block-list-only parser, so notes following the template will not receive reminders.

1 open issue

• Support documented frontmatter flow-list sources · New

What changed in this PR

This PR expands Claude Code’s advisory safeguards for sensitive CDP files and adds reminders to keep knowledge notes aligned with their source code.

Changes:

• Extends non-blocking warnings to additional migration, authentication, deletion, unmerge, and production paths.
• Registers a post-edit hook that identifies related knowledge notes and returns reminders through additionalContext.
• Documents the reminder hook and directory-prefix matching.

File	Description
docs/​knowledge/​README.md	Documents knowledge-note reminders and directory matching.
.claude/​settings.json	Registers the knowledge-check hook after edits.
.claude/​hooks/​knowledge-doc-check.sh	Matches edited files to note sources and emits reminders.
.claude/​hooks/​guard-protected-files.sh	Expands sensitive-path warning coverage.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

No active review issues require changes to the sensitive-path warnings or knowledge-note reminders.

No open issues 🎉

1 resolved since last review

• Support documented frontmatter flow-list sources

_{Review effort: Balanced}