feat: add persistent auto-memory system

Implement a file-based persistent memory system that allows the AI to
retain knowledge about users, feedback, projects, and references across
sessions. Memory files use YAML frontmatter with markdown body, stored
at ~/.claw/projects/<workspace-hash>/memory/.

Key components:
- MemoryStore data layer with FNV-1a workspace fingerprinting
- MemoryRead/MemoryWrite tools with security hardening (path traversal,
  symlink, absolute path, and size limit protections)
- System prompt injection of MEMORY.md index with prompt injection
  mitigation (fenced code block + trust-lowering notice)
- autoMemoryEnabled config option (defaults to true)
- Doctor health check for auto-memory state
- /memory command enhancement showing persistent memory info

Tested end-to-end with Zhipu GLM-4-Flash via OpenAI-compatible routing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Ubuntu

rust/crates/commands/src/lib.rs

@@ -138,7 +138,7 @@ const SLASH_COMMAND_SPECS: &[SlashCommandSpec] = &[
     SlashCommandSpec {
         name: "memory",
         aliases: &[],
-        summary: "Inspect loaded Claude instruction memory files",
+        summary: "Show instruction files and persistent auto memory",
         argument_hint: None,
         resume_supported: true,
     },

rust/crates/runtime/src/config.rs

@@ -163,6 +163,7 @@ pub struct RuntimeFeatureConfig {
     api_timeout: ApiTimeoutConfig,
     rules_import: RulesImportConfig,
     provider: RuntimeProviderConfig,
+    auto_memory_enabled: bool,
 }
 
 /// Controls which external AI coding framework rules are imported into the system prompt.
@@ -801,6 +802,7 @@ fn build_runtime_config(
         api_timeout: parse_optional_api_timeout_config(&merged_value)?,
         rules_import: parse_optional_rules_import(&merged_value)?,
         provider: parse_optional_provider_config(&merged_value)?,
+        auto_memory_enabled: parse_auto_memory_enabled(&merged_value),
     };
 
     Ok(RuntimeConfig {
@@ -826,7 +828,10 @@ impl RuntimeConfig {
         Self {
             merged: BTreeMap::new(),
             loaded_entries: Vec::new(),
-            feature_config: RuntimeFeatureConfig::default(),
+            feature_config: RuntimeFeatureConfig {
+                auto_memory_enabled: true,
+                ..RuntimeFeatureConfig::default()
+            },
         }
     }
 
@@ -1012,6 +1017,11 @@ impl RuntimeFeatureConfig {
         &self.rules_import
     }
 
+    #[must_use]
+    pub fn auto_memory_enabled(&self) -> bool {
+        self.auto_memory_enabled
+    }
+
     /// Merge this config's default trusted roots with per-call roots.
     #[must_use]
     pub fn trusted_roots_with_overrides(&self, per_call_roots: &[String]) -> Vec<String> {
@@ -2172,6 +2182,13 @@ fn parse_optional_provider_config(root: &JsonValue) -> Result<RuntimeProviderCon
     })
 }
 
+fn parse_auto_memory_enabled(root: &JsonValue) -> bool {
+    root.as_object()
+        .and_then(|object| object.get("autoMemoryEnabled"))
+        .and_then(JsonValue::as_bool)
+        .unwrap_or(true)
+}
+
 fn parse_filesystem_mode_label(value: &str) -> Result<FilesystemIsolationMode, ConfigError> {
     match value {
         "off" => Ok(FilesystemIsolationMode::Off),

rust/crates/runtime/src/config_validate.rs

@@ -220,6 +220,10 @@ const TOP_LEVEL_FIELDS: &[FieldSpec] = &[
         name: "subagentModel",
         expected: FieldType::String,
     },
+    FieldSpec {
+        name: "autoMemoryEnabled",
+        expected: FieldType::Bool,
+    },
 ];
 
 const HOOKS_FIELDS: &[FieldSpec] = &[

rust/crates/runtime/src/lib.rs

@@ -27,6 +27,7 @@ pub mod mcp_lifecycle_hardened;
 pub mod mcp_server;
 mod mcp_stdio;
 pub mod mcp_tool_bridge;
+pub mod memory_store;
 mod oauth;
 pub mod permission_enforcer;
 mod permissions;
@@ -123,6 +124,7 @@ pub use mcp_stdio::{
     McpTool, McpToolCallContent, McpToolCallParams, McpToolCallResult, McpToolDiscoveryReport,
     UnsupportedMcpServer,
 };
+pub use memory_store::{MemoryEntry, MemoryStore, MemoryType};
 pub use oauth::{
     clear_oauth_credentials, code_challenge_s256, credentials_path, generate_pkce_pair,
     generate_state, load_oauth_credentials, loopback_redirect_uri, parse_oauth_callback_query,