@cairnkeep/cli 2.12.0 → 2.13.0

package/scripts/test-cli-dispatch.sh

@@ -15,6 +15,7 @@ tmp=$(mktemp -d); trap 'rm -rf "$tmp"' EXIT
 "$cairn" help | grep -q "cairn memory-server" || fail "help missing memory-server"
 "$cairn" help | grep -q "cairn notes" || fail "help missing notes"
 "$cairn" help | grep -q "cairn artifact <list|show|delete|prune>" || fail "help missing artifact"
+"$cairn" help | grep -q "cairn evidence <list|show|delete|prune|doctor>" || fail "help missing evidence"
 "$cairn" help | grep -q "cairn capabilities <list|status|enable|disable|reset|logging>" || fail "help missing capabilities"
 "$cairn" help | grep -q "cairn mcp-tools <list|status|set|reset>" || fail "help missing mcp-tools"
 "$cairn" help | grep -q "cairn pack <init|lock|validate|install|list|show|remove|enable|disable|update|skills|approve-skill|revoke-skill>" || fail "help missing pack"
@@ -24,6 +25,7 @@ tmp=$(mktemp -d); trap 'rm -rf "$tmp"' EXIT
 "$cairn" sync-kimi --help >/dev/null 2>&1 || fail "cairn sync-kimi dispatch"
 env -u CAIRN_NOTE_DISTILLATION "$cairn" notes --help >/dev/null 2>&1 || fail "cairn notes dispatch"
 "$cairn" artifact --help | grep -q "cairn artifact list" || fail "cairn artifact dispatch"
+"$cairn" evidence --help | grep -q "cairn evidence list" || fail "cairn evidence dispatch"
 "$cairn" capabilities --help >"$tmp/capabilities-help" 2>/dev/null || fail "cairn capabilities dispatch"
 "$cairn" mcp-tools list --json >"$tmp/mcp-tools.json" || fail "cairn mcp-tools dispatch"
 CAIRN_PACK_BASE_DIR="$tmp/pack-store" "$cairn" pack list --json >"$tmp/packs.json" || fail "cairn pack dispatch"
@@ -70,4 +72,4 @@ CAIRN_AGENTFS_BASE_DIR="$tmp/store" "$cairn" memory path | grep -qx "$tmp/store"
 "$cairn" audit-timer --render-only "$tmp/u" >/dev/null || fail "cairn audit-timer dispatch"
 [[ -f "$tmp/u/memory-wiki-audit.timer" ]] || fail "audit-timer render via cairn produced no units"
 
-echo "PASS: cairn dispatch (doctor, memory, artifact, audit-timer)"
+echo "PASS: cairn dispatch (doctor, memory, artifact, evidence, audit-timer)"

package/scripts/test-completion.sh

@@ -48,6 +48,9 @@ for shell in bash zsh fish; do
   grep -q 'pack' "$tmp/$shell"
   grep -q 'init.*lock.*validate.*install.*list.*show.*remove.*enable.*disable.*update.*skills.*approve-skill.*revoke-skill\|init lock validate install list show remove enable disable update skills approve-skill revoke-skill' "$tmp/$shell"
   grep -q -- '--purge-packs\|-l purge-packs' "$tmp/$shell"
+  grep -q 'evidence' "$tmp/$shell"
+  grep -q 'list.*show.*delete.*prune.*doctor\|list show delete prune doctor' "$tmp/$shell"
+  grep -q -- '--status\|-l status' "$tmp/$shell"
 done
 
 "$ROOT/bin/cairn" help >"$tmp/root-help"
@@ -64,6 +67,7 @@ if grep -q 'doctor-diagnosis' "$tmp/eval-help"; then
   exit 1
 fi
 grep -qF 'cairn skill <harvest|list|show|review|propose|evaluate|apply|rollback>' "$tmp/root-help"
+grep -qF 'cairn evidence <list|show|delete|prune|doctor>' "$tmp/root-help"
 node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/skill-help"
 for command in $skill_commands; do
   grep -q "cairn skill $command" "$tmp/skill-help"

package/scripts/test-package-install.sh

@@ -292,6 +292,10 @@ for module in artifact-schema artifact-store compaction-normalize artifact-cli;
   [[ -f "$installed_root/mcp-memory-server/dist/$module.js" ]] || \
     fail "npm tarball omitted compiled $module"
 done
+for module in work-evidence-schema work-evidence-store work-evidence-cli; do
+  [[ -f "$installed_root/mcp-memory-server/dist/$module.js" ]] || \
+    fail "npm tarball omitted compiled $module"
+done
 [[ -x "$installed_root/claude/hooks/compaction-capture.sh" ]] || \
   fail "npm tarball omitted the executable Claude compaction hook"
 [[ -f "$installed_root/opencode/plugins/memory-capture.ts" ]] || \

package/scripts/test-uninstall.sh

@@ -124,6 +124,7 @@ ADJACENT_PROJECT="$SB/adjacent-project"
 mkdir -p "$PROJECT_DATA/.ai" \
   "$PROJECT_DATA/.agentfs/eval/experiments/complete/snapshots/task-one" \
   "$PROJECT_DATA/.agentfs/eval/experiments/partial" \
+  "$PROJECT_DATA/.agentfs/work-evidence/v1/records" \
   "$ADJACENT_PROJECT/.agentfs/eval/experiments/adjacent"
 printf '%s\n' '{"schema_version":1,"capabilities":{"wiki":false},"logging":{"callbacks":true}}' >"$PROJECT_DATA/.ai/capabilities.json"
 chmod 600 "$PROJECT_DATA/.ai/capabilities.json"
@@ -132,17 +133,22 @@ printf 'artifact-v1\000durable\377bytes\n' >"$PROJECT_DATA/.agentfs/artifacts.db
 printf 'session-and-callback-v1\000durable\377bytes\n' >"$PROJECT_DATA/.agentfs/trajectory.db"
 printf 'callback-wal-v1\000durable\377bytes\n' >"$PROJECT_DATA/.agentfs/trajectory.db-wal"
 printf 'unrelated-memory-v1\000durable\377bytes\n' >"$PROJECT_DATA/.agentfs/project.db"
+printf 'work-evidence-v1\000durable\377bytes\n' >"$PROJECT_DATA/.agentfs/work-evidence/v1/records/wev-fixture.json"
 printf 'complete-report-v1\000private\377bytes\n' >"$PROJECT_DATA/.agentfs/eval/experiments/complete/report.json"
 printf 'partial-report-v1\000private\377bytes\n' >"$PROJECT_DATA/.agentfs/eval/experiments/partial/report.json"
 printf 'note-snapshot-v1\000private\377bytes\n' >"$PROJECT_DATA/.agentfs/eval/experiments/complete/snapshots/task-one/note.md"
 printf 'adjacent-eval-v1\000must-survive\377bytes\n' >"$ADJACENT_PROJECT/.agentfs/eval/experiments/adjacent/report.json"
 chmod 700 "$PROJECT_DATA/.agentfs" "$PROJECT_DATA/.agentfs/eval" \
+  "$PROJECT_DATA/.agentfs/work-evidence" \
+  "$PROJECT_DATA/.agentfs/work-evidence/v1" \
+  "$PROJECT_DATA/.agentfs/work-evidence/v1/records" \
   "$PROJECT_DATA/.agentfs/eval/experiments" \
   "$PROJECT_DATA/.agentfs/eval/experiments/complete" \
   "$PROJECT_DATA/.agentfs/eval/experiments/complete/snapshots" \
   "$PROJECT_DATA/.agentfs/eval/experiments/complete/snapshots/task-one" \
   "$PROJECT_DATA/.agentfs/eval/experiments/partial"
 chmod 600 "$PROJECT_DATA/.agentfs/project.db" \
+  "$PROJECT_DATA/.agentfs/work-evidence/v1/records/wev-fixture.json" \
   "$PROJECT_DATA/.agentfs/eval/experiments/complete/report.json" \
   "$PROJECT_DATA/.agentfs/eval/experiments/partial/report.json"
 chmod 400 "$PROJECT_DATA/.agentfs/eval/experiments/complete/snapshots/task-one/note.md"
@@ -155,6 +161,7 @@ cp "$PROJECT_DATA/.ai/operator-state.bin" "$SB/operator-state.before.bin"
 cp "$PROJECT_DATA/.agentfs/artifacts.db" "$SB/artifacts.before.db"
 cp "$PROJECT_DATA/.agentfs/trajectory.db" "$SB/trajectory.before.db"
 cp "$PROJECT_DATA/.agentfs/trajectory.db-wal" "$SB/trajectory.before.db-wal"
+cp "$PROJECT_DATA/.agentfs/work-evidence/v1/records/wev-fixture.json" "$SB/work-evidence.before.json"
 agentfs_before=$(tree_identity "$PROJECT_DATA/.agentfs")
 eval_before=$(tree_identity "$PROJECT_DATA/.agentfs/eval")
 adjacent_before=$(tree_identity "$ADJACENT_PROJECT/.agentfs")
@@ -239,6 +246,7 @@ check "default uninstall leaves normal OpenCode installation exact" "$(diff -qr
 check "default uninstall keeps unrelated .ai bytes exact" "$(cmp -s "$SB/operator-state.before.bin" "$PROJECT_DATA/.ai/operator-state.bin" && echo yes || echo no)" "yes"
 check "default uninstall keeps callback DB exact" "$(cmp -s "$SB/trajectory.before.db" "$PROJECT_DATA/.agentfs/trajectory.db" && echo yes || echo no)" "yes"
 check "default uninstall keeps callback WAL exact" "$(cmp -s "$SB/trajectory.before.db-wal" "$PROJECT_DATA/.agentfs/trajectory.db-wal" && echo yes || echo no)" "yes"
+check "default uninstall keeps work evidence exact" "$(cmp -s "$SB/work-evidence.before.json" "$PROJECT_DATA/.agentfs/work-evidence/v1/records/wev-fixture.json" && echo yes || echo no)" "yes"
 check "default uninstall keeps complete and partial eval reports, snapshots, modes, and layout exact" "$(tree_identity "$PROJECT_DATA/.agentfs/eval")" "$eval_before"
 check "default uninstall keeps unrelated project memory exact" "$(tree_identity "$PROJECT_DATA/.agentfs")" "$agentfs_before"
 check "default uninstall leaves adjacent project exact" "$(tree_identity "$ADJACENT_PROJECT/.agentfs")" "$adjacent_before"
@@ -271,6 +279,7 @@ ARTIFACT_BK=$(ls -dt "$ARTIFACT_HOME/.cairnkeep-uninstall-"* 2>/dev/null | head
 check "artifact purge backup is exact" "$(cmp -s "$SB/artifacts.before.db" "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs/artifacts.db" && echo yes || echo no)" "yes"
 check "callback purge backup is exact" "$(cmp -s "$SB/trajectory.before.db" "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs/trajectory.db" && echo yes || echo no)" "yes"
 check "callback WAL purge backup is exact" "$(cmp -s "$SB/trajectory.before.db-wal" "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs/trajectory.db-wal" && echo yes || echo no)" "yes"
+check "work-evidence purge backup is exact" "$(cmp -s "$SB/work-evidence.before.json" "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs/work-evidence/v1/records/wev-fixture.json" && echo yes || echo no)" "yes"
 check "purge backup contains exact eval tree, bytes, and modes" "$(tree_identity "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs/eval")" "$eval_before"
 check "purge backup contains exact unrelated project memory" "$(tree_identity "$ARTIFACT_BK/files/${PROJECT_DATA#/}/.agentfs")" "$agentfs_before"
 check "selected-project purge leaves adjacent project exact" "$(tree_identity "$ADJACENT_PROJECT/.agentfs")" "$adjacent_before"
@@ -278,6 +287,7 @@ HOME="$ARTIFACT_HOME" XDG_CONFIG_HOME="$ARTIFACT_HOME/.config" bash "$ARTIFACT_B
 check "artifact revert restores exact bytes" "$(cmp -s "$SB/artifacts.before.db" "$PROJECT_DATA/.agentfs/artifacts.db" && echo yes || echo no)" "yes"
 check "callback revert restores exact bytes" "$(cmp -s "$SB/trajectory.before.db" "$PROJECT_DATA/.agentfs/trajectory.db" && echo yes || echo no)" "yes"
 check "callback WAL revert restores exact bytes" "$(cmp -s "$SB/trajectory.before.db-wal" "$PROJECT_DATA/.agentfs/trajectory.db-wal" && echo yes || echo no)" "yes"
+check "work-evidence revert restores exact bytes" "$(cmp -s "$SB/work-evidence.before.json" "$PROJECT_DATA/.agentfs/work-evidence/v1/records/wev-fixture.json" && echo yes || echo no)" "yes"
 check "purge revert restores exact eval tree, bytes, and modes" "$(tree_identity "$PROJECT_DATA/.agentfs/eval")" "$eval_before"
 check "purge revert restores exact unrelated project memory" "$(tree_identity "$PROJECT_DATA/.agentfs")" "$agentfs_before"
 check "purge revert leaves adjacent project exact" "$(tree_identity "$ADJACENT_PROJECT/.agentfs")" "$adjacent_before"

package/scripts/test-windows-native.mjs

@@ -36,6 +36,8 @@ try {
   assert.match(launcherModule(), /spawnSync\(command/);
   assert.match(launcherPowerShell(), /pre-launch\.ps1/);
   assert.match(launcherPowerShell(), /post-exit\.ps1/);
+  assert.match(launcherPowerShell(), /evidence run --harness/);
+  assert.match(launcherPowerShell(), /CAIRN_WORK_EVIDENCE/);
 
   const claudeRoot = join(sandbox, "Claude Config");
   await runWindowsCommand({ command: "sync", args: ["--apply", "--live-root", claudeRoot], root });
@@ -56,6 +58,7 @@ try {
   await runWindowsCommand({ command: "memory", args: ["import", archive], root });
   assert.equal(readFileSync(join(memory, "project.db"), "utf8"), "sqlite-a");
   assert.match(powershellCompletion(), /Register-ArgumentCompleter/);
+  assert.match(powershellCompletion(), /evidence/);
 
   let containerArgs = [];
   runNativeContainer(["stdio", "--image", "example/windows:1", "--volume", "windows-data"], root, (_engine, args) => { containerArgs = args; });

package/scripts/test-work-evidence-cli.sh

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+tmp=$(mktemp -d)
+trap 'rm -rf "$tmp"' EXIT
+fail() { echo "FAIL: $1" >&2; exit 1; }
+
+npm --prefix "$ROOT/mcp-memory-server" run build >/dev/null
+
+fake_bin="$tmp/bin"
+mkdir -p "$fake_bin"
+cat >"$fake_bin/cairn" <<EOF
+#!/usr/bin/env bash
+exec node "$ROOT/bin/cairn" "\$@"
+EOF
+chmod +x "$fake_bin/cairn"
+
+for harness in claude opencode pi kimi qwen codex; do
+  project="$tmp/$harness"
+  mkdir -p "$project/.ai" "$project/.agentfs"
+  cp "$ROOT/templates/start-$harness.sh.template" "$project/.ai/start-$harness.sh"
+  chmod +x "$project/.ai/start-$harness.sh"
+  printf '*\n!.gitignore\n' >"$project/.agentfs/.gitignore"
+  printf 'CAIRN_WORK_EVIDENCE=1\n' >"$project/.ai/.env"
+  cat >"$fake_bin/$harness" <<EOF
+#!/usr/bin/env bash
+printf '%s\n' "\$*" > "$project/args.txt"
+printf '%s\n' changed > "$project/session.txt"
+exit 17
+EOF
+  chmod +x "$fake_bin/$harness"
+  cat >"$project/.ai/post-exit.sh" <<EOF
+printf '%s\n' "\$CAIRN_EXIT_STATUS" > "$project/post-status.txt"
+EOF
+  (
+    cd "$project"
+    git init --quiet
+    git config user.email fixture@example.invalid
+    git config user.name Fixture
+    printf '%s\n' start > session.txt
+    git add session.txt .agentfs/.gitignore
+    git commit --quiet -m start
+  )
+  status=0
+  PATH="$fake_bin:$PATH" "$project/.ai/start-$harness.sh" --fixture "value with spaces" || status=$?
+  [[ $status -eq 17 ]] || fail "$harness launcher lost exit status"
+  grep -q -- '--fixture value with spaces' "$project/args.txt" || fail "$harness launcher lost arguments"
+  [[ $(cat "$project/post-status.txt") == 17 ]] || fail "$harness post-exit seam lost status"
+  (cd "$project" && PATH="$fake_bin:$PATH" "$ROOT/bin/cairn" evidence list --json) >"$tmp/$harness.json"
+  node -e '
+const value=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));
+if(value.evidence.length!==1||value.evidence[0].status!=="complete"||value.evidence[0].harness!==process.argv[2]||value.evidence[0].exit_status!==17)process.exit(1);
+if(!value.evidence[0].touched_paths.includes("session.txt"))process.exit(1);
+' "$tmp/$harness.json" "$harness" || fail "$harness evidence record is incomplete"
+done
+
+disabled="$tmp/disabled"
+mkdir -p "$disabled/.ai"
+cp "$ROOT/templates/start-codex.sh.template" "$disabled/.ai/start-codex.sh"
+chmod +x "$disabled/.ai/start-codex.sh"
+cat >"$fake_bin/cairn" <<'EOF'
+#!/usr/bin/env bash
+exit 88
+EOF
+cat >"$fake_bin/codex" <<'EOF'
+#!/usr/bin/env bash
+exit 0
+EOF
+chmod +x "$fake_bin/cairn" "$fake_bin/codex"
+PATH="$fake_bin:$PATH" "$disabled/.ai/start-codex.sh" || fail "disabled launcher called the evidence wrapper"
+[[ ! -e "$disabled/.agentfs/work-evidence" ]] || fail "disabled launcher created evidence storage"
+
+cat >"$fake_bin/codex" <<EOF
+#!/usr/bin/env bash
+printf launched >"$tmp/old-cairn-fallback"
+exit 19
+EOF
+chmod +x "$fake_bin/codex"
+status=0
+CAIRN_WORK_EVIDENCE=1 PATH="$fake_bin:$PATH" "$disabled/.ai/start-codex.sh" 2>"$tmp/old-cairn.err" || status=$?
+[[ $status -eq 19 ]] || fail "old cairn fallback lost the harness exit status"
+[[ -f "$tmp/old-cairn-fallback" ]] || fail "old cairn fallback did not launch the harness"
+grep -q 'compatible evidence command unavailable' "$tmp/old-cairn.err" || fail "old cairn fallback did not explain capture loss"
+
+"$ROOT/bin/cairn" help | grep -q 'cairn evidence' || fail "root help omits evidence"
+node "$ROOT/mcp-memory-server/dist/work-evidence-cli.js" --help | grep -q 'cairn evidence list' || fail "evidence help omits list"
+
+echo "PASS: work-evidence CLI and all harness launchers preserve lifecycle semantics"

package/scripts/verify-docs-parity.sh

@@ -432,6 +432,41 @@ check_artifact_remote_path_contract() {
   return "$failed"
 }
 
+check_work_evidence_contract() {
+  local failed=0 key value source_term
+
+  while IFS='|' read -r key value source_term; do
+    [[ -n "$key" ]] || continue
+    grep -qF "$key" mcp-memory-server/src/work-evidence-schema.ts || failed=1
+    grep -qF "$source_term" mcp-memory-server/src/work-evidence-schema.ts || failed=1
+    grep -qxF "# $key=$value" templates/env.example.template || failed=1
+    grep -qF "$key" README.md docs/operating.md docs/work-evidence.md || failed=1
+    grep -qF "$value" README.md docs/operating.md docs/work-evidence.md || failed=1
+  done <<'EOF'
+CAIRN_WORK_EVIDENCE_RETENTION_DAYS|30|WORK_EVIDENCE_DEFAULT_RETENTION_DAYS = 30
+CAIRN_WORK_EVIDENCE_STORE_MAX_BYTES|67108864|WORK_EVIDENCE_DEFAULT_STORE_MAX_BYTES = 64 * 1024 * 1024
+CAIRN_WORK_EVIDENCE_MAX_TOUCHED_PATHS|4096|WORK_EVIDENCE_DEFAULT_MAX_TOUCHED_PATHS = 4096
+CAIRN_WORK_EVIDENCE_PATCH_MAX_BYTES|1048576|WORK_EVIDENCE_DEFAULT_PATCH_MAX_BYTES = 1024 * 1024
+EOF
+
+  for key in CAIRN_WORK_EVIDENCE CAIRN_WORK_EVIDENCE_PATCH; do
+    grep -qF "$key" mcp-memory-server/src/work-evidence-schema.ts templates/env.example.template README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+  done
+  for source_term in work_evidence_list work_evidence_read; do
+    grep -qF "\"$source_term\"" mcp-memory-server/src/index.ts || failed=1
+    grep -qF "$source_term" README.md docs/operating.md docs/privacy-and-data-flow.md docs/work-evidence.md || failed=1
+  done
+  for source_term in 'list [--status pending|complete] [--json]' 'show <evidence-id-or-prefix> [--json]' 'delete <evidence-id-or-prefix> [--dry-run] [--json]' 'prune [--dry-run] [--json]' 'doctor [--repair] [--json]'; do
+    grep -qF "$source_term" mcp-memory-server/src/work-evidence-cli.ts || failed=1
+  done
+  grep -qF '.agentfs/work-evidence/v1/' docs/storage.md docs/privacy-and-data-flow.md docs/work-evidence.md || failed=1
+  grep -qF 'cairn evidence' docs/learning/CURRICULUM-MAP.md docs/learning/FEATURE-GUIDE.md docs/learning/lessons/L13-session-evidence.md || failed=1
+  grep -qF 'never exposed by the HTTP transport' docs/work-evidence.md || failed=1
+
+  [[ "$failed" -eq 0 ]] && echo "[work-evidence-contract] OK: flags/defaults/tools/storage/privacy/learning match source"
+  return "$failed"
+}
+
 check_capability_contract() {
   local failed=0 file id env tool term source_file docs_files
 
@@ -624,6 +659,7 @@ main() {
   check_typed_contract || failed=1
   check_artifact_contract || failed=1
   check_artifact_remote_path_contract || failed=1
+  check_work_evidence_contract || failed=1
   check_capability_contract || failed=1
   check_native_capability_docs || failed=1
 

package/scripts/windows-platform.mjs

@@ -190,7 +190,19 @@ if ($env:CAIRN_EXTRA_SETTINGS -and $Harness -eq 'claude') {
 if ($env:CAIRN_EXTRA_SETTINGS -and $Harness -eq 'opencode') { $env:OPENCODE_CONFIG = $env:CAIRN_EXTRA_SETTINGS }
 Push-Location $ProjectRoot
 try {
-  & $Harness @HarnessArgs
+  $EvidenceEnabled = $env:CAIRN_WORK_EVIDENCE -match '^(1|true|yes|on)$'
+  $CairnCommand = if ($EvidenceEnabled) { Get-Command cairn -ErrorAction SilentlyContinue } else { $null }
+  $EvidenceSupported = $false
+  if ($EvidenceEnabled -and $CairnCommand) {
+    & $CairnCommand.Source evidence --help *> $null
+    $EvidenceSupported = ($LASTEXITCODE -eq 0)
+  }
+  if ($EvidenceSupported) {
+    & $CairnCommand.Source evidence run --harness $Harness -- $Harness @HarnessArgs
+  } else {
+    if ($EvidenceEnabled) { Write-Warning 'a compatible cairn evidence command is unavailable; launching without capture' }
+    & $Harness @HarnessArgs
+  }
   $Status = if ($null -eq $LASTEXITCODE) { 0 } else { $LASTEXITCODE }
 } finally {
   Pop-Location
@@ -440,6 +452,7 @@ async function doctorWindows(root, args) {
   for (const [label, file, doctorArgs] of [
     ["trajectory", "trajectory-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["artifact", "artifact-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
+    ["work evidence", "work-evidence-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["typed memory", "node-cli.js", ["doctor", "--project-root", process.cwd(), ...(repair ? ["--repair"] : [])]],
     ["capability", "capability-cli.js", ["doctor", "--json"]],
     ["context pack", "context-pack-cli.js", ["doctor", "--json"]],
@@ -695,7 +708,7 @@ export function powershellCompletion() {
   const harnesses = HARNESS_IDS.map((id) => `'${id}'`).join(",");
   return `Register-ArgumentCompleter -Native -CommandName cairn -ScriptBlock {
   param($wordToComplete, $commandAst, $cursorPosition)
-  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','capabilities','mcp-tools','pack','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
+  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','evidence','capabilities','mcp-tools','pack','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
   $setup = '--git','--harness','--memory','--policy','--yes','--json','init','existing','none',${harnesses},'local'
   $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } else { $commands }
   $candidates | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {

package/templates/env.example.template

@@ -65,6 +65,16 @@
 # Bootstrap creates .ai/trajectory-redaction.json for optional custom patterns.
 # CAIRN_TRAJECTORY_REDACTION_FILE=.ai/trajectory-redaction.json
 #
+# Git-linked work evidence is local and OFF by default. Generated harness
+# launchers capture bounded Git state before and after a session. Optional patch
+# capture also requires the artifact store; no patch is ever applied by Cairnkeep.
+# CAIRN_WORK_EVIDENCE=1
+# CAIRN_WORK_EVIDENCE_PATCH=1
+# CAIRN_WORK_EVIDENCE_RETENTION_DAYS=30
+# CAIRN_WORK_EVIDENCE_STORE_MAX_BYTES=67108864
+# CAIRN_WORK_EVIDENCE_MAX_TOUCHED_PATHS=4096
+# CAIRN_WORK_EVIDENCE_PATCH_MAX_BYTES=1048576
+#
 # Harness-produced compaction continuity and explicit artifact access are local
 # and OFF by default. Either capability may be enabled independently; neither
 # needs a model, API key, or network endpoint. HTTP artifact tools require the

package/templates/start-claude.sh.template

@@ -68,6 +68,24 @@ if [[ -n "${CAIRN_EXTRA_SETTINGS:-}" ]]; then
   launch_args+=(--settings "$CAIRN_EXTRA_SETTINGS")
 fi
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness claude -- claude "${launch_args[@]}" "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
+
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   # Run (not exec) so the post-exit hook fires after the harness returns.
   set +e

package/templates/start-codex.sh.template

@@ -17,6 +17,24 @@ if [[ -f "$ROOT_DIR/.ai/pre-launch.sh" ]]; then
 fi
 cd "$ROOT_DIR"
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness codex -- codex "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
+
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
   codex "$@"

package/templates/start-kimi.sh.template

@@ -26,6 +26,23 @@ fi
 
 cd "$ROOT_DIR"
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness kimi -- kimi "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
   kimi "$@"

package/templates/start-opencode.sh.template

@@ -70,6 +70,23 @@ if [[ -n "${CAIRN_EXTRA_SETTINGS:-}" ]]; then
   export OPENCODE_CONFIG="$CAIRN_EXTRA_SETTINGS"
 fi
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness opencode -- opencode "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
   opencode "$@"

package/templates/start-pi.sh.template

@@ -17,6 +17,23 @@ if [[ -f "$ROOT_DIR/.ai/pre-launch.sh" ]]; then
 fi
 cd "$ROOT_DIR"
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness pi -- pi "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
   pi "$@"

package/templates/start-qwen.sh.template

@@ -19,6 +19,23 @@ fi
 
 cd "$ROOT_DIR"
 
+case "${CAIRN_WORK_EVIDENCE:-}" in
+  1|true|TRUE|yes|YES|on|ON)
+    if command -v cairn >/dev/null 2>&1 && cairn evidence --help >/dev/null 2>&1; then
+      set +e
+      cairn evidence run --harness qwen -- qwen "$@"
+      CAIRN_EXIT_STATUS=$?
+      set -e
+      export CAIRN_EXIT_STATUS
+      if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+        # shellcheck disable=SC1091
+        . "$ROOT_DIR/.ai/post-exit.sh" || true
+      fi
+      exit "$CAIRN_EXIT_STATUS"
+    fi
+    echo "cairn: compatible evidence command unavailable; launching without capture" >&2
+    ;;
+esac
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
   qwen "$@"