claude

/zeropath:claude

Manages the ZeroPath usage block in this project's CLAUDE.md. The block lists rules that steer future Claude sessions: when to call /zeropath:scan, what not to do (never suppress a finding as a "fix", never echo tokens), and which command maps to which intent.

The SessionStart hook nudges the user about this exactly once on the first session in a fresh project. After any decision (apply OR decline), the nudge stops forever.

When to use

• The user invokes /zeropath:claude, /zeropath:claude apply, or any affirmative reply to the SessionStart nudge ("add zeropath rules", "yes", "sure", etc.).
• The user invokes /zeropath:claude decline or replies with "skip zeropath rules", "no thanks", etc. - records the decision without touching CLAUDE.md.
• The user invokes /zeropath:claude remove - strips the block.
• The user invokes /zeropath:claude preview - shows the block content without applying.

What to do

Map the user's intent to one of four script invocations. Treat ambiguous input as a request to preview, not as a silent apply.

# Apply (the default)
node "${CLAUDE_PLUGIN_ROOT}/scripts/install-claude-md-block.mjs"

# Decline - record consent, do not touch CLAUDE.md
node "${CLAUDE_PLUGIN_ROOT}/scripts/install-claude-md-block.mjs" --decline

# Remove an applied block
node "${CLAUDE_PLUGIN_ROOT}/scripts/install-claude-md-block.mjs" --remove

# Preview the contents to a temp file, then cat it for the user
node "${CLAUDE_PLUGIN_ROOT}/scripts/install-claude-md-block.mjs" --target /tmp/zp-preview.md
cat /tmp/zp-preview.md

After running, surface the script's JSON output verbatim so the user sees action: created|prepended|updated|unchanged|absent. Don't summarize - the actions are short enough to read directly.

Important

• Always run from the project root (or rely on the script's own .git/ walk-up; it falls back to cwd if no project root is found). Do not pass --target to the actual apply call - that bypasses the consent persistence.
• The block is wrapped in <!-- BEGIN: zeropath-agent-plugin (managed) --> and <!-- END: zeropath-agent-plugin --> markers so re-running is idempotent and removal is exact.
• Consent state lives at ~/.zeropath-agent-plugin/rules-consent.json. Apply writes { decided: true, applied: true }; decline writes { decided: true, applied: false }. Either way, SessionStart stops nudging.