Memory lives outside the checkout: user facts in ~/.chanto/memory/ and project facts in ~/.chanto/projects/<project-key>/memory/. CHANTO_HOME overrides the Chanto directory. Each markdown file has name, description, type (user, feedback, project, reference), created and updated frontmatter. MEMORY.md is regenerated from the files.
The first user turn includes the user and project indexes in a <system-reminder> capped at 4096 bytes. Bodies are read on demand with the Memory tool. Automatic saves remember durable preferences, corrections and non-obvious facts; secrets are refused even when display redaction is disabled. Repository-derived information and temporary task state should not be saved. Writes show a dim saved/deleted line with the scope and description, and can be undone. Saves, updates and deletes in user memory (which every project loads) ask for approval outside bypass mode, showing the description and body; project memory writes don't ask.
[memory]
auto = true
scope = "project" # or "user"auto = false disables model writes while keeping recall and manual commands available. /memory or /memory list lists both scopes. /memory open <name>, edit <name> <text>, delete <name>, forget all, and undo [scope] manage files. Add --user before the name to manage user memory. /memory <note> and #note save project memory by default; /memory --agents <note> (or #--agents <note>) still appends to AGENTS.md. chanto memory list|show|rm works without a model connection.
Accepted /learned rules migrate to feedback memories; checks retain the existing verified-mode workflow. Disabling or undoing lessons reconciles their feedback memories. Explicit edits or deletions of a migrated memory are preserved on subsequent session starts. Forget-all deletes both scopes; undo restores one deletion at a time.
Diagnosing a slow start
CHANTO_TIMING=1 chanto -p "hi" prints how long each startup phase took (config, MCP connections, setup, each model and tool call) to stderr. MCP servers that needed a login are remembered for a day, so they don't cost a network round trip on every start; /mcp login clears that.