@cairnkeep/cli 2.15.4 → 2.17.0

package/scripts/test-docs-navigation.sh

@@ -0,0 +1,63 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+cd "$ROOT"
+
+fail() {
+  echo "FATAL: $*" >&2
+  exit 1
+}
+
+require_term() {
+  local file="$1" term="$2"
+  grep -qF "$term" "$file" || fail "$file is missing required navigation term: $term"
+}
+
+check_local_links() {
+  local file="$1" base target resolved
+  base=$(dirname "$file")
+  while IFS= read -r target; do
+    case "$target" in
+      http://*|https://*|mailto:*|'#'*|'') continue ;;
+    esac
+    target=${target%%#*}
+    resolved="$base/$target"
+    [[ -e "$resolved" ]] || fail "$file links to missing local target: $target"
+  done < <(grep -oE '\]\([^)]+' "$file" | sed 's/^](//' || true)
+}
+
+readme_lines=$(wc -l < README.md | tr -d ' ')
+[[ "$readme_lines" -le 140 ]] || fail "README.md must remain a lean landing page (found $readme_lines lines; limit 140)"
+
+require_term README.md '## For coding agents'
+require_term README.md 'docs/README.md'
+require_term README.md 'docs/agents.md'
+require_term README.md 'docs/quickstart.md'
+require_term README.md 'docs/learning/README.md'
+
+if grep -qE '\b(CAIRN_|MCP_HTTP_)' README.md; then
+  fail 'README.md contains detailed environment configuration; keep it in versioned focused docs'
+fi
+
+for guide in \
+  quickstart.md agents.md operating.md harness-compatibility.md \
+  mcp-tool-profiles.md context-packs.md storage.md privacy-and-data-flow.md \
+  work-evidence.md native-windows.md containers.md ecosystem.md \
+  learning/README.md; do
+  require_term docs/README.md "$guide"
+done
+
+for term in \
+  'memory_search' 'locator' 'memory_write' 'cairn playbook check start' \
+  'cairn playbook check finish' 'cairn mcp-tools set read-only' \
+  'cannot enable a disabled feature' 'not evidence'; do
+  require_term docs/agents.md "$term"
+done
+
+check_local_links README.md
+check_local_links docs/README.md
+check_local_links docs/agents.md
+check_local_links docs/ecosystem.md
+
+echo "PASS: lean README, agent contract, documentation index, and local navigation"

package/scripts/test-doctor.sh

@@ -30,6 +30,27 @@ grep -q "capability configuration (not present — managed overrides are unused)
 grep -q "capability callback namespace (not present — callback logging is unused)" "$tmp/out1" ||
   fail "expected absent capability callback diagnostics"
 
+# Top-level repair must reach the context-pack doctor; the pack CLI itself
+# owns the safe derived-cache deletion policy.
+real_node=$(command -v node)
+mkdir -p "$tmp/doctor-node-shim" "$HOME/.cairnkeep/packs"
+cat >"$tmp/doctor-node-shim/node" <<'EOF'
+#!/usr/bin/env bash
+if [[ "${1:-}" == */context-pack-cli.js && "${2:-}" == doctor ]]; then
+  printf '%s\n' "$@" >"$CAIRN_TEST_PACK_ARGS"
+  printf '%s\n' '{"ok":true,"objects":0,"projects":0,"issues":[],"temporary_remnants":[]}'
+  exit 0
+fi
+exec "$CAIRN_TEST_REAL_NODE" "$@"
+EOF
+chmod 755 "$tmp/doctor-node-shim/node"
+( cd "$proj" && PATH="$tmp/doctor-node-shim:$PATH" CAIRN_TEST_REAL_NODE="$real_node" \
+    CAIRN_TEST_PACK_ARGS="$tmp/context-pack-doctor.args" "$doctor" --repair ) >"$tmp/out-pack-repair" 2>&1 ||
+  fail "doctor --repair failed while forwarding context-pack repair:\n$(cat "$tmp/out-pack-repair")"
+grep -qx -- '--repair' "$tmp/context-pack-doctor.args" ||
+  fail "top-level doctor --repair did not reach the context-pack doctor"
+rm -rf "$HOME/.cairnkeep/packs"
+
 # 2. An unsupported runtime is diagnosed before the server probe.
 mkdir -p "$tmp/old-node"
 cat > "$tmp/old-node/node" <<'EOF'

package/scripts/test-phase17-artifact-lifecycle.sh

@@ -244,7 +244,7 @@ check_uninstall_bytes() {
 
 check_docs_contract() {
   local public_doc
-  for public_doc in "$ROOT/README.md" "$ROOT/docs/operating.md"; do
+  for public_doc in "$ROOT/docs/operating.md"; do
     require_term "$public_doc" 'CAIRN_COMPACTION_CAPTURE' "$(basename "$public_doc") compaction flag"
     require_term "$public_doc" 'CAIRN_ARTIFACT_STORE' "$(basename "$public_doc") artifact-store flag"
     require_term "$public_doc" 'CAIRN_ARTIFACT_HTTP' "$(basename "$public_doc") artifact HTTP flag"

package/scripts/test-release-sbom.sh

@@ -2,7 +2,8 @@
 set -euo pipefail
 
 ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
-WORKFLOW="$ROOT/.github/workflows/publish.yml"
+CANDIDATE_WORKFLOW="$ROOT/.github/workflows/ci.yml"
+PUBLISH_WORKFLOW="$ROOT/.github/workflows/publish.yml"
 TEMP_DIR=$(mktemp -d)
 trap 'rm -f "$TEMP_DIR/cairnkeep.cdx.json"; rmdir "$TEMP_DIR"' EXIT
 
@@ -11,12 +12,13 @@ fail() {
   exit 1
 }
 
-node - "$ROOT/package.json" "$ROOT/package-lock.json" "$WORKFLOW" <<'NODE'
+node - "$ROOT/package.json" "$ROOT/package-lock.json" "$CANDIDATE_WORKFLOW" "$PUBLISH_WORKFLOW" <<'NODE'
 const fs = require("node:fs");
 
 const manifest = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
 const lock = JSON.parse(fs.readFileSync(process.argv[3], "utf8"));
-const workflow = fs.readFileSync(process.argv[4], "utf8");
+const candidateWorkflow = fs.readFileSync(process.argv[4], "utf8");
+const publishWorkflow = fs.readFileSync(process.argv[5], "utf8");
 const expected = "6.0.0";
 
 if (manifest.devDependencies?.["@cyclonedx/cyclonedx-npm"] !== expected) {
@@ -29,24 +31,50 @@ if (lock.packages?.["node_modules/@cyclonedx/cyclonedx-npm"]?.version !== expect
   throw new Error(`package-lock.json must resolve @cyclonedx/cyclonedx-npm ${expected}`);
 }
 
-const artifactStep = workflow.indexOf("- name: Build and validate release artifacts");
-const publishStep = workflow.indexOf("- name: Publish to npm with provenance");
-const attachStep = workflow.indexOf("- name: Attach package and SBOM to GitHub release");
-if (artifactStep < 0 || publishStep < 0 || attachStep < 0 || !(artifactStep < publishStep && publishStep < attachStep)) {
-  throw new Error("release artifacts must validate before npm publication and attach only after publication");
+if (!candidateWorkflow.includes("release-candidate:")
+  || !candidateWorkflow.includes("- name: Build release candidate")
+  || !candidateWorkflow.includes("name: release-candidate-${{ steps.candidate.outputs.tree }}")) {
+  throw new Error("CI must build and upload a tree-addressed release candidate after its required jobs");
+}
+if (!publishWorkflow.includes("- name: Download the CI-verified release candidate")
+  || !publishWorkflow.includes("jq -r '.conclusion'")
+  || !publishWorkflow.includes("== success")
+  || !publishWorkflow.includes("sha256sum --check SHA256SUMS")
+  || !publishWorkflow.includes("candidate.tree !== tree")) {
+  throw new Error("release publication must verify the successful CI run, checksums, version, and exact tree");
+}
+const publishStep = publishWorkflow.indexOf("- name: Publish to npm with provenance");
+const attachStep = publishWorkflow.indexOf("- name: Attach package and SBOM to GitHub release");
+if (publishStep < 0 || attachStep < 0 || publishStep >= attachStep) {
+  throw new Error("verified artifacts must publish to npm before release attachment");
+}
+if (!publishWorkflow.includes('npm publish "./artifacts/cairnkeep-cli-$VERSION.tgz"')) {
+  throw new Error("npm publication must use an explicit relative tarball path");
+}
+if (!publishWorkflow.includes('gh release upload "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY"')) {
+  throw new Error("release attachment must name the repository outside a checkout");
+}
+if (publishWorkflow.includes("check:public")) {
+  throw new Error("release workflow must promote the verified candidate without repeating the public suite");
+}
+if (!publishWorkflow.includes("name: containers (${{ matrix.target }})")
+  || !publishWorkflow.includes("- target: server")
+  || !publishWorkflow.includes("- target: workspace")
+  || !publishWorkflow.includes("needs: prepare")) {
+  throw new Error("npm and both container targets must fan out after candidate preparation");
 }
 NODE
 
-grep -Fq './node_modules/.bin/cyclonedx-npm' "$WORKFLOW" || fail "release workflow does not use the locked CycloneDX generator"
-grep -Fq -- '--package-lock-only' "$WORKFLOW" || fail "release workflow does not use the package lock"
-grep -Fq -- '--omit dev' "$WORKFLOW" || fail "release workflow does not omit development dependencies"
-grep -Fq -- '--output-reproducible' "$WORKFLOW" || fail "release workflow does not request reproducible output"
-grep -Fq -- '--spec-version 1.6' "$WORKFLOW" || fail "release workflow does not emit CycloneDX 1.6"
-grep -Fq -- '--validate' "$WORKFLOW" || fail "release workflow does not validate the generated SBOM"
-if grep -Fq 'npm sbom' "$WORKFLOW"; then
+grep -Fq './node_modules/.bin/cyclonedx-npm' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not use the locked CycloneDX generator"
+grep -Fq -- '--package-lock-only' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not use the package lock"
+grep -Fq -- '--omit dev' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not omit development dependencies"
+grep -Fq -- '--output-reproducible' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not request reproducible output"
+grep -Fq -- '--spec-version 1.6' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not emit CycloneDX 1.6"
+grep -Fq -- '--validate' "$CANDIDATE_WORKFLOW" || fail "candidate workflow does not validate the generated SBOM"
+if grep -Fq 'npm sbom' "$CANDIDATE_WORKFLOW" "$PUBLISH_WORKFLOW"; then
   fail "release workflow still uses npm sbom"
 fi
-if grep -Fqi 'sbomsmith' "$WORKFLOW"; then
+if grep -Fqi 'sbomsmith' "$CANDIDATE_WORKFLOW" "$PUBLISH_WORKFLOW"; then
   fail "release workflow must not depend on an external converter"
 fi
 

package/scripts/test-setup-preflight.mjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 import assert from "node:assert/strict";
+import { EventEmitter } from "node:events";
 import {
   existsSync,
   lstatSync,
@@ -20,6 +21,7 @@ const RED_MARKER = "PHASE26_RED:SETUP_CORE_MISSING";
 const here = dirname(fileURLToPath(import.meta.url));
 const setupCorePath = join(here, "setup-core.mjs");
 const setupPath = join(here, "setup.mjs");
+const terminalPromptsPath = join(here, "terminal-prompts.mjs");
 const MANAGED_PATHS = [".ai", ".planning", ".agentfs"];
 
 function assertNoManagedPaths(target, label) {
@@ -81,6 +83,10 @@ async function loadSetup() {
   return import(pathToFileURL(setupPath).href);
 }
 
+async function loadTerminalPrompts() {
+  return import(pathToFileURL(terminalPromptsPath).href);
+}
+
 function assertExports(core) {
   for (const name of [
     "parseSetupArgs",
@@ -225,6 +231,126 @@ async function runInteractive(setup, args, responses) {
   return { status, prompts, output: output.read(), error: error.read() };
 }
 
+class FakeTTY extends EventEmitter {
+  constructor() {
+    super();
+    this.isTTY = true;
+    this.isRaw = false;
+    this.paused = true;
+  }
+
+  setRawMode(value) { this.isRaw = value; }
+  isPaused() { return this.paused; }
+  resume() { this.paused = false; }
+  pause() { this.paused = true; }
+}
+
+async function testTerminalSelectors(prompts) {
+  const input = new FakeTTY();
+  const output = captureStream();
+  output.stream.isTTY = true;
+  assert.equal(prompts.supportsTerminalPrompts(input, output.stream, { TERM: "xterm-256color" }), true);
+  assert.equal(prompts.supportsTerminalPrompts(input, output.stream, { TERM: "dumb" }), false);
+
+  const multi = prompts.selectManyPrompt({
+    message: "Coding harnesses",
+    choices: [
+      { value: "claude", label: "Claude Code" },
+      { value: "codex", label: "Codex CLI" },
+    ],
+    input,
+    output: output.stream,
+  });
+  setImmediate(() => {
+    input.emit("keypress", " ", { name: "space" });
+    input.emit("keypress", "", { name: "down" });
+    input.emit("keypress", " ", { name: "space" });
+    input.emit("keypress", "", { name: "return" });
+  });
+  assert.deepEqual(await multi, ["claude", "codex"]);
+  assert.equal(input.isRaw, false);
+  assert.equal(input.isPaused(), true);
+  assert.match(output.read(), /\[x\] Claude Code/);
+  assert.match(output.read(), /Coding harnesses: Claude Code, Codex CLI/);
+
+  const single = prompts.selectOnePrompt({
+    message: "Memory mode",
+    choices: [
+      { value: "local", label: "Local" },
+      { value: "none", label: "None" },
+    ],
+    initialValue: "local",
+    input,
+    output: output.stream,
+  });
+  setImmediate(() => {
+    input.emit("keypress", "", { name: "down" });
+    input.emit("keypress", "", { name: "return" });
+  });
+  assert.equal(await single, "none");
+  assert.match(output.read(), /Memory mode: None/);
+
+  const cancelled = prompts.selectOnePrompt({
+    message: "Cancel me",
+    choices: [{ value: "only", label: "Only choice" }],
+    input,
+    output: output.stream,
+  });
+  setImmediate(() => input.emit("keypress", "", { name: "escape" }));
+  await assert.rejects(cancelled, (error) => error?.status === 130 && /cancelled/i.test(error.message));
+  assert.equal(input.isRaw, false);
+  assert.equal(input.isPaused(), true);
+}
+
+async function testStructuredSetupSelectors(setup, fixture) {
+  const selections = [];
+  const output = captureStream();
+  const error = captureStream();
+  const status = await setup.runSetup([fixture.empty], {
+    isTTY: true,
+    input: { isTTY: true },
+    output: output.stream,
+    error: error.stream,
+    selectOne: async (options) => {
+      selections.push(options);
+      if (options.message === "Git integration") return "init";
+      if (options.message === "Memory mode") return "local";
+      return "no";
+    },
+    selectMany: async (options) => {
+      selections.push(options);
+      return ["codex", "opencode"];
+    },
+  });
+  assert.equal(status, 0);
+  assert.equal(error.read(), "");
+  assert.match(output.read(), /Setup cancelled; no files were changed/);
+  assert.deepEqual(selections.map(({ message }) => message), [
+    "Git integration",
+    "Coding harnesses",
+    "Memory mode",
+    "Apply this setup plan?",
+  ]);
+  const harnessPrompt = selections.find(({ message }) => message === "Coding harnesses");
+  assert.deepEqual(harnessPrompt.choices.map(({ value }) => value), ["claude", "opencode", "pi", "kimi", "qwen", "codex"]);
+  assert.match(harnessPrompt.choices.find(({ value }) => value === "codex").label, /Codex CLI/);
+  assertNoManagedPaths(fixture.empty, "cancelled structured setup");
+}
+
+async function testRedirectedOutputIsNoninteractive(setup, fixture) {
+  const output = captureStream();
+  const error = captureStream();
+  const status = await setup.runSetup([fixture.empty, "--yes"], {
+    input: { isTTY: true },
+    output: output.stream,
+    error: error.stream,
+  });
+  assert.equal(status, 2);
+  assert.equal(output.read(), "");
+  assert.match(error.read(), /git|harness|memory|usage/i);
+  assertNoManagedPaths(fixture.empty, "redirected setup output");
+}
+
 async function testInteractiveGitRecommendation(setup, fixture) {
   const accepted = await runInteractive(setup, [], [fixture.missing, "init", "pi", "local", "yes"]);
   assert.equal(accepted.status, 0);
@@ -271,6 +397,10 @@ async function main() {
     testChoiceContract(core, fixture);
     testPreflightContract(core, fixture);
     const setup = await loadSetup();
+    const terminalPrompts = await loadTerminalPrompts();
+    await testTerminalSelectors(terminalPrompts);
+    await testStructuredSetupSelectors(setup, fixture);
+    await testRedirectedOutputIsNoninteractive(setup, fixture);
     await testInteractiveGitRecommendation(setup, fixture);
     console.log("PASS: setup target, Git, syntax, choice, and no-write preflight contract");
   } finally {

package/scripts/test-windows-native.mjs

@@ -21,6 +21,7 @@ import { HARNESS_IDS } from "./harness-registry.mjs";
 const root = resolve(fileURLToPath(new URL("..", import.meta.url)));
 const sandbox = mkdtempSync(join(tmpdir(), "cairn-windows-native-"));
 const originalBase = process.env.CAIRN_AGENTFS_BASE_DIR;
+const originalPackBase = process.env.CAIRN_PACK_BASE_DIR;
 const originalHome = process.env.HOME;
 const originalProfile = process.env.USERPROFILE;
 try {
@@ -69,6 +70,33 @@ try {
   assert.match(powershellCompletion(), /playbook/);
   assert.match(powershellCompletion(), /review\.security/);
   assert.match(powershellCompletion(), /--enforce/);
+  assert.match(powershellCompletion(), /doctor/);
+  assert.match(powershellCompletion(), /--repair/);
+  assert.match(powershellCompletion(), /proposals/);
+  assert.match(powershellCompletion(), /'create','list','show','apply','doctor'/);
+  assert.match(powershellCompletion(), /--category/);
+
+  const packBase = join(sandbox, "Context Packs");
+  const invalidDerivedPack = join(packBase, "cache", "context", "f".repeat(64));
+  mkdirSync(invalidDerivedPack, { recursive: true });
+  writeFileSync(join(invalidDerivedPack, `${"e".repeat(64)}.json`), "{\"corrupt\":true}\n");
+  process.env.CAIRN_PACK_BASE_DIR = packBase;
+  const inheritedLlmUrl = process.env.CAIRN_LLM_API_URL;
+  const exitCodeBeforeDoctor = process.exitCode;
+  const doctorWrite = process.stdout.write.bind(process.stdout);
+  let doctorOutput = "";
+  delete process.env.CAIRN_LLM_API_URL;
+  process.stdout.write = ((chunk) => { doctorOutput += String(chunk); return true; });
+  try {
+    await runWindowsCommand({ command: "doctor", args: ["--repair"], root });
+  } finally {
+    process.stdout.write = doctorWrite;
+    process.exitCode = exitCodeBeforeDoctor;
+    if (inheritedLlmUrl === undefined) delete process.env.CAIRN_LLM_API_URL;
+    else process.env.CAIRN_LLM_API_URL = inheritedLlmUrl;
+  }
+  assert.equal(existsSync(invalidDerivedPack), false, "native Windows doctor forwards safe context-pack cache repair");
+  assert.match(doctorOutput, /\[PASS\] context pack diagnostics passed/);
 
   let containerArgs = [];
   runNativeContainer(["stdio", "--image", "example/windows:1", "--volume", "windows-data"], root, (_engine, args) => { containerArgs = args; });
@@ -167,6 +195,8 @@ try {
 } finally {
   if (originalBase === undefined) delete process.env.CAIRN_AGENTFS_BASE_DIR;
   else process.env.CAIRN_AGENTFS_BASE_DIR = originalBase;
+  if (originalPackBase === undefined) delete process.env.CAIRN_PACK_BASE_DIR;
+  else process.env.CAIRN_PACK_BASE_DIR = originalPackBase;
   if (originalHome === undefined) delete process.env.HOME; else process.env.HOME = originalHome;
   if (originalProfile === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = originalProfile;
   rmSync(sandbox, { recursive: true, force: true });

package/scripts/verify-docs-parity.sh

@@ -9,8 +9,8 @@ set -euo pipefail
 #
 #   1. Env-key check: every CAIRN_[A-Z_]+/MCP_HTTP_[A-Z_]+ token read in
 #      mcp-memory-server/src/*.ts (the runtime server config surface --
-#      NOT scripts/ or bin/) must be named somewhere in docs/operating.md
-#      or README.md. `comm -23` on two sorted lists -- code-keys-not-in-
+#      NOT scripts/ or bin/) must be named somewhere in the versioned
+#      top-level docs. `comm -23` on two sorted lists -- code-keys-not-in-
 #      docs -- not a symmetric diff.
 #   2. Command check: every claude/commands/*.md basename must appear in
 #      docs/operating.md.
@@ -27,8 +27,8 @@ Usage: verify-docs-parity.sh
        verify-docs-parity.sh -h|--help
 
 Checks that every CAIRN_*/MCP_HTTP_* env key read by the cairn-memory MCP
-server (mcp-memory-server/src/*.ts) is named in docs/operating.md or
-README.md, and that every claude/commands/*.md command is named in
+server (mcp-memory-server/src/*.ts) is named in the versioned docs, and that
+every claude/commands/*.md command is named in
 docs/operating.md. One-directional: doc-only names are not a failure.
 Prints every missing key/command by name, then exits non-zero on any
 drift, or 0 if the docs are fully in sync with the shipped code.
@@ -264,7 +264,7 @@ check_env_keys() {
   local code_keys doc_keys missing
 
   code_keys=$(grep -ohE "\\b${ENV_KEY_PATTERN}\\b" mcp-memory-server/src/*.ts | grep -v '^CAIRN_TEST_' | sort -u)
-  doc_keys=$(grep -ohE "\\b${ENV_KEY_PATTERN}\\b" docs/operating.md README.md | sort -u)
+  doc_keys=$(grep -ohE "\\b${ENV_KEY_PATTERN}\\b" docs/*.md | sort -u)
 
   missing=$(comm -23 <(printf '%s\n' "$code_keys") <(printf '%s\n' "$doc_keys"))
 
@@ -276,7 +276,7 @@ check_env_keys() {
     return 1
   fi
 
-  echo "[env-keys] OK: every mcp-memory-server/src env key is named in docs/operating.md or README.md"
+  echo "[env-keys] OK: every mcp-memory-server/src env key is named in the versioned docs"
   return 0
 }
 
@@ -316,12 +316,12 @@ check_typed_contract() {
       failed=1
     fi
   done <<'EOF'
-CAIRN_TYPED_MEMORY_NODES|README.md docs/operating.md
-memory_import|README.md docs/operating.md docs/privacy-and-data-flow.md
-address_space|README.md docs/operating.md docs/privacy-and-data-flow.md
-node_types|README.md docs/operating.md
-tags_all|README.md docs/operating.md
-tags_any|README.md docs/operating.md
+CAIRN_TYPED_MEMORY_NODES|docs/operating.md
+memory_import|docs/operating.md docs/privacy-and-data-flow.md
+address_space|docs/operating.md docs/privacy-and-data-flow.md
+node_types|docs/operating.md
+tags_all|docs/operating.md
+tags_any|docs/operating.md
 schemas/memory-node.schema.json|docs/storage.md
 cairn_node_metadata_v1|docs/storage.md
 cairn_node_import_replays_v1|docs/storage.md
@@ -350,11 +350,11 @@ check_artifact_contract() {
       echo "FATAL: artifact default '$key=$value' is missing from env.example" >&2
       failed=1
     }
-    grep -qF "$key" README.md docs/operating.md || {
+    grep -qF "$key" docs/operating.md || {
       echo "FATAL: artifact env key '$key' is missing from public configuration docs" >&2
       failed=1
     }
-    grep -qF "$value" README.md docs/operating.md || {
+    grep -qF "$value" docs/operating.md || {
       echo "FATAL: artifact default '$key=$value' is missing from public configuration docs" >&2
       failed=1
     }
@@ -368,7 +368,7 @@ CAIRN_ARTIFACT_GENERATED_FILE_SNAPSHOT_MAX_BYTES|262144|GENERATED_FILE_MAX_SNAPS
 EOF
 
   for key in CAIRN_COMPACTION_CAPTURE CAIRN_ARTIFACT_STORE CAIRN_ARTIFACT_HTTP; do
-    grep -qF "$key" mcp-memory-server/src/artifact-schema.ts README.md docs/operating.md docs/privacy-and-data-flow.md || {
+    grep -qF "$key" mcp-memory-server/src/artifact-schema.ts docs/operating.md docs/privacy-and-data-flow.md || {
       echo "FATAL: artifact feature flag '$key' is not source/docs complete" >&2
       failed=1
     }
@@ -376,13 +376,13 @@ EOF
 
   for source_term in artifact_write artifact_read artifact_list artifact_delete; do
     grep -qF "\"$source_term\"" mcp-memory-server/src/index.ts || failed=1
-    grep -qF "$source_term" README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+    grep -qF "$source_term" docs/operating.md docs/privacy-and-data-flow.md || failed=1
   done
   for source_term in 'list [--kind K] [--session REF] [--json]' 'show <artifact-id-or-prefix> [--json]' 'delete <artifact-id-or-prefix> [--dry-run] [--json]' 'prune [--dry-run] [--include-protected] [--json]'; do
     grep -qF "$source_term" mcp-memory-server/src/artifact-cli.ts || failed=1
   done
   grep -qF '.agentfs/artifacts.db' docs/storage.md docs/privacy-and-data-flow.md || failed=1
-  grep -qF 'CAIRN_ARTIFACT_HTTP' mcp-memory-server/src/index.ts README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+  grep -qF 'CAIRN_ARTIFACT_HTTP' mcp-memory-server/src/index.ts docs/operating.md docs/privacy-and-data-flow.md || failed=1
   grep -qE 'redact[^.]{0,180}(before|then)[^.]{0,180}(digest|index|write)' docs/privacy-and-data-flow.md || failed=1
   grep -qE 'default uninstall retains|Default uninstall retains' docs/storage.md docs/privacy-and-data-flow.md || failed=1
   grep -qF -- '--purge-memory PROJECT' docs/storage.md || failed=1
@@ -390,10 +390,10 @@ EOF
 
   for version in 2.1.219 2.1.220; do
     grep -qF "version: \"$version\"" mcp-memory-server/src/compaction-normalize.ts || failed=1
-    grep -qF "$version" README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+    grep -qF "$version" docs/operating.md docs/privacy-and-data-flow.md || failed=1
   done
   grep -qF 'version: "1.17.20"' mcp-memory-server/src/compaction-normalize.ts || failed=1
-  grep -qF '1.17.20' README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+  grep -qF '1.17.20' docs/operating.md docs/privacy-and-data-flow.md || failed=1
 
   [[ "$failed" -eq 0 ]] && echo "[artifact-contract] OK: artifact flags/defaults/tools/paths/privacy/uninstall/version pins match source"
   return "$failed"
@@ -440,8 +440,8 @@ check_work_evidence_contract() {
     grep -qF "$key" mcp-memory-server/src/work-evidence-schema.ts || failed=1
     grep -qF "$source_term" mcp-memory-server/src/work-evidence-schema.ts || failed=1
     grep -qxF "# $key=$value" templates/env.example.template || failed=1
-    grep -qF "$key" README.md docs/operating.md docs/work-evidence.md || failed=1
-    grep -qF "$value" README.md docs/operating.md docs/work-evidence.md || failed=1
+    grep -qF "$key" docs/operating.md docs/work-evidence.md || failed=1
+    grep -qF "$value" docs/operating.md docs/work-evidence.md || failed=1
   done <<'EOF'
 CAIRN_WORK_EVIDENCE_RETENTION_DAYS|30|WORK_EVIDENCE_DEFAULT_RETENTION_DAYS = 30
 CAIRN_WORK_EVIDENCE_STORE_MAX_BYTES|67108864|WORK_EVIDENCE_DEFAULT_STORE_MAX_BYTES = 64 * 1024 * 1024
@@ -450,11 +450,11 @@ CAIRN_WORK_EVIDENCE_PATCH_MAX_BYTES|1048576|WORK_EVIDENCE_DEFAULT_PATCH_MAX_BYTE
 EOF
 
   for key in CAIRN_WORK_EVIDENCE CAIRN_WORK_EVIDENCE_PATCH; do
-    grep -qF "$key" mcp-memory-server/src/work-evidence-schema.ts templates/env.example.template README.md docs/operating.md docs/privacy-and-data-flow.md || failed=1
+    grep -qF "$key" mcp-memory-server/src/work-evidence-schema.ts templates/env.example.template docs/operating.md docs/privacy-and-data-flow.md || failed=1
   done
   for source_term in work_evidence_list work_evidence_read; do
     grep -qF "\"$source_term\"" mcp-memory-server/src/index.ts || failed=1
-    grep -qF "$source_term" README.md docs/operating.md docs/privacy-and-data-flow.md docs/work-evidence.md || failed=1
+    grep -qF "$source_term" docs/operating.md docs/privacy-and-data-flow.md docs/work-evidence.md || failed=1
   done
   for source_term in 'list [--status pending|complete] [--json]' 'show <evidence-id-or-prefix> [--json]' 'delete <evidence-id-or-prefix> [--dry-run] [--json]' 'prune [--dry-run] [--json]' 'doctor [--repair] [--json]'; do
     grep -qF "$source_term" mcp-memory-server/src/work-evidence-cli.ts || failed=1
@@ -478,7 +478,7 @@ check_capability_contract() {
     mcp-memory-server/src/capability-store.ts \
     mcp-memory-server/src/capability-adapter.ts \
     schemas/capability-callback.schema.json \
-    docs/operating.md docs/storage.md docs/privacy-and-data-flow.md README.md; do
+    docs/operating.md docs/storage.md docs/privacy-and-data-flow.md; do
     if [[ ! -f "$file" ]]; then
       echo "FATAL: capability parity input is missing: $file" >&2
       failed=1
@@ -491,11 +491,11 @@ check_capability_contract() {
       echo "FATAL: canonical capability ID is missing from source: $id" >&2
       failed=1
     }
-    grep -qF "$id" README.md docs/operating.md || {
+    grep -qF "$id" docs/operating.md || {
       echo "FATAL: canonical capability ID is undocumented: $id" >&2
       failed=1
     }
-    grep -qF "$env" README.md docs/operating.md templates/env.example.template || {
+    grep -qF "$env" docs/operating.md templates/env.example.template || {
       echo "FATAL: capability environment key is not source/docs complete: $env" >&2
       failed=1
     }
@@ -511,7 +511,7 @@ context.explore|CAIRN_CAPABILITY_CONTEXT_EXPLORE
 EOF
 
   for term in CAIRN_CAPABILITY_CONTRACT CAIRN_CAPABILITY_LOGGING; do
-    grep -qF "$term" mcp-memory-server/src/capability-config.ts README.md docs/operating.md templates/env.example.template || {
+    grep -qF "$term" mcp-memory-server/src/capability-config.ts docs/operating.md templates/env.example.template || {
       echo "FATAL: capability master/logging flag is not source/docs complete: $term" >&2
       failed=1
     }
@@ -520,7 +520,7 @@ EOF
   while IFS='|' read -r id tool; do
     grep -qF "\"$id\"" mcp-memory-server/src/index.ts || failed=1
     grep -qF "\"$tool\"" mcp-memory-server/src/index.ts || failed=1
-    grep -qF "$tool" README.md docs/operating.md || {
+    grep -qF "$tool" docs/operating.md || {
       echo "FATAL: omitted MCP tool is undocumented: $tool" >&2
       failed=1
     }

package/scripts/windows-platform.mjs

@@ -452,8 +452,9 @@ async function doctorWindows(root, args) {
     accessSync(store, fsConstants.W_OK);
     line("PASS", `memory store is writable: ${store}`);
   } catch { line("FAIL", `memory store is not writable: ${store}`); }
-  const sqlite = run("where.exe", ["sqlite3.exe"]);
-  line(sqlite.status === 0 ? "PASS" : "WARN", sqlite.status === 0
+  let sqliteStatus = null;
+  try { sqliteStatus = run("where.exe", ["sqlite3.exe"]).status; } catch {}
+  line(sqliteStatus === 0 ? "PASS" : "WARN", sqliteStatus === 0
     ? "sqlite3 is available for WAL-safe memory export"
     : "sqlite3 is not installed; runtime works, but memory export is unavailable");
   for (const [label, file, doctorArgs] of [
@@ -462,7 +463,7 @@ async function doctorWindows(root, args) {
     ["work evidence", "work-evidence-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["typed memory", "node-cli.js", ["doctor", "--project-root", process.cwd(), ...(repair ? ["--repair"] : [])]],
     ["capability", "capability-cli.js", ["doctor", "--json"]],
-    ["context pack", "context-pack-cli.js", ["doctor", "--json"]],
+    ["context pack", "context-pack-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["playbook", "playbook-cli.js", ["doctor", "--json"]],
   ]) {
     const entry = join(root, "mcp-memory-server", "dist", file);
@@ -728,10 +729,12 @@ export function powershellCompletion() {
   const harnesses = HARNESS_IDS.map((id) => `'${id}'`).join(",");
   return `Register-ArgumentCompleter -Native -CommandName cairn -ScriptBlock {
   param($wordToComplete, $commandAst, $cursorPosition)
-  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
+  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','proposals','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
   $setup = '--git','--harness','--memory','--policy','--yes','--json','init','existing','none',${harnesses},'local'
   $playbook = 'list','status','init','set','enable','disable','reset','check','record','receipts','instructions','doctor','minimal','balanced','strict','must','should','may','off','start','finish','install','remove','context.recall','context.explore','work.plan','verify.tests','review.repository','review.security','docs.update','learning.capture','--project','--json','--enforce','--complexity','--familiarity','--risk','--public-change','--changed','--change-type','--completed','--skipped','--failed','--actor','--actor-kind','--session','--policy','--decision','--event','--action','--outcome','--reason'
-  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } else { $commands }
+  $pack = 'init','lock','validate','install','import-okf','validate-okf','export-okf','list','show','remove','enable','disable','update','skills','approve-skill','revoke-skill','doctor','--repair','--project','--project-id','--json'
+  $proposals = 'create','list','show','apply','doctor','--session','--scope','--model','--category','--project','--json'
+  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+pack(?:\\s|$)') { $pack } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+proposals(?:\\s|$)') { $proposals } else { $commands }
   $candidates | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {
     [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
   }