@cairnkeep/cli 2.16.0 → 2.17.1

package/schemas/context-usage-receipt.schema.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/cairnkeep/cairnkeep/main/schemas/context-usage-receipt.schema.json",
+  "title": "Cairnkeep context usage receipt v1",
+  "description": "A privacy-minimal link from existing work evidence to a retrieved result. Receipts contain identifiers, digests, outcome labels and a timestamp; never retrieved content, queries, prompts or model output.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "link_id",
+    "evidence_id",
+    "kind",
+    "created_at",
+    "receipt_id",
+    "task_digest",
+    "result_digest",
+    "outcome"
+  ],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "link_id": {
+      "description": "Equal to receipt_id for context usage links.",
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "evidence_id": {
+      "type": "string",
+      "pattern": "^wev_[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$"
+    },
+    "kind": { "const": "context_usage" },
+    "created_at": { "type": "string", "format": "date-time" },
+    "receipt_id": {
+      "description": "SHA-256 of canonical evidence_id, task_digest and result_digest fields. The outcome is deliberately excluded so a changed outcome is a conflict, not a second receipt.",
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "task_digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "result_digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "outcome": { "enum": ["used", "unused", "unknown"] }
+  }
+}

package/schemas/memory-proposal.schema.json

@@ -0,0 +1,65 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/cairnkeep/cairnkeep/main/schemas/memory-proposal.schema.json",
+  "title": "Cairnkeep review-gated memory proposal",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "created_at", "project_root", "scope", "source", "extraction", "candidates", "digest"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "created_at": { "type": "string", "format": "date-time" },
+    "project_root": { "type": "string", "minLength": 1 },
+    "scope": { "type": "string", "pattern": "^(project|[a-z0-9][a-z0-9-]*)$" },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "session_id", "digest"],
+      "properties": {
+        "kind": { "const": "trajectory" },
+        "session_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "digest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "extraction": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["model"],
+      "properties": { "model": { "type": "string", "minLength": 1, "maxLength": 256 } }
+    },
+    "candidates": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 128,
+      "items": { "$ref": "#/$defs/candidate" }
+    },
+    "digest": { "$ref": "#/$defs/digest" }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "candidate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key", "value", "operation", "base_hash", "value_hash"],
+      "$comment": "Runtime verification also requires value_hash to equal SHA-256(value), noop base_hash to equal value_hash, and update base_hash to differ from value_hash.",
+      "properties": {
+        "key": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "value": { "type": "string", "maxLength": 65536 },
+        "category": { "type": "string", "maxLength": 64 },
+        "importance": { "type": "number", "minimum": 0, "maximum": 1 },
+        "operation": { "enum": ["create", "update", "noop"] },
+        "base_hash": { "oneOf": [{ "$ref": "#/$defs/digest" }, { "type": "null" }] },
+        "value_hash": { "$ref": "#/$defs/digest" }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "operation": { "const": "create" } }, "required": ["operation"] },
+          "then": { "properties": { "base_hash": { "type": "null" } } }
+        },
+        {
+          "if": { "properties": { "operation": { "enum": ["update", "noop"] } }, "required": ["operation"] },
+          "then": { "properties": { "base_hash": { "$ref": "#/$defs/digest" } } }
+        }
+      ]
+    }
+  }
+}

package/schemas/retrieval-benchmark.schema.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://cairnkeep.dev/schemas/retrieval-benchmark.schema.json",
+  "title": "Cairnkeep retrieval benchmark suite",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "id", "description", "packs", "cases"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "id": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+    "description": { "type": "string", "minLength": 1 },
+    "packs": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 32,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "version", "title", "enabled", "files"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+          "version": { "type": "string", "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$" },
+          "title": { "type": "string", "minLength": 1 },
+          "enabled": { "type": "boolean" },
+          "files": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 1024,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["path", "kind", "title", "description", "keywords", "content"],
+              "properties": {
+                "path": { "type": "string", "minLength": 1, "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$)).+$" },
+                "kind": { "enum": ["document", "skill"] },
+                "title": { "type": "string", "minLength": 1 },
+                "description": { "type": "string" },
+                "keywords": { "type": "array", "items": { "type": "string" } },
+                "content": { "type": "string" }
+              }
+            }
+          }
+        }
+      }
+    },
+    "cases": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 1024,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "query", "relevant", "forbidden", "limit"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" },
+          "query": { "type": "string", "minLength": 1 },
+          "relevant": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+          "forbidden": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+          "limit": { "type": "integer", "minimum": 1, "maximum": 100 }
+        }
+      }
+    }
+  }
+}

package/scripts/cairn-cli.mjs

@@ -9,6 +9,7 @@ const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const NODE_COMMANDS = new Map([
   ["memory-server", "index.js"],
   ["trajectory", "trajectory-cli.js"],
+  ["proposals", "memory-proposal-cli.js"],
   ["artifact", "artifact-cli.js"],
   ["capabilities", "capability-cli.js"],
   ["mcp-tools", "mcp-tool-cli.js"],
@@ -45,6 +46,7 @@ Usage:
   cairn sync-kimi [--check|--apply] [--live-root DIR]
   cairn doctor [--repair]
   cairn trajectory <list|show|prune>
+  cairn proposals <create|list|show|apply|doctor>
   cairn artifact <list|show|delete|prune>
   cairn capabilities <list|status|enable|disable|reset|logging>
   cairn mcp-tools <list|status|set|reset>

package/scripts/completion.sh

@@ -13,7 +13,7 @@ _cairn_complete() {
   COMPREPLY=()
   current=${COMP_WORDS[COMP_CWORD]}
   previous=${COMP_WORDS[COMP_CWORD-1]:-}
-  commands="bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help"
+  commands="bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help"
   if (( COMP_CWORD == 1 )); then
     COMPREPLY=( $(compgen -W "$commands" -- "$current") )
     return
@@ -57,7 +57,8 @@ _cairn_complete() {
       esac
       ;;
     mcp-tools) COMPREPLY=( $(compgen -W "list status set reset full read-only custom --tool --project --json" -- "$current") ) ;;
-    pack) COMPREPLY=( $(compgen -W "init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill --id --version --title --description --license --ref --project --project-id --output --file --note --check --apply --confirm --json" -- "$current") ) ;;
+    pack) COMPREPLY=( $(compgen -W "init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill doctor --id --version --title --description --license --ref --project --project-id --output --file --note --check --apply --confirm --repair --json" -- "$current") ) ;;
+    proposals) COMPREPLY=( $(compgen -W "create list show apply doctor --session --scope --model --category --project --json" -- "$current") ) ;;
     notes) COMPREPLY=( $(compgen -W "distill search-error promote doctor --project --session --all-projects --para-root --text --component --with --confirm --repair --json" -- "$current") ) ;;
     eval)
       case "${COMP_WORDS[2]:-}" in
@@ -101,6 +102,7 @@ _cairn() {
     'capabilities:inspect and manage project capability state'
     'mcp-tools:inspect and restrict MCP tool exposure'
     'pack:manage immutable context packs and skill approvals'
+    'proposals:review and apply session memory proposals'
     'notes:distill and search local hindsight notes'
     'eval:run and inspect default-off local evaluations'
     'skill:review and evaluate evidence-backed skill improvements'
@@ -136,7 +138,8 @@ _cairn() {
     evidence) _values 'work evidence command' list show delete prune doctor '--status[filter records]:status:(pending complete)' '--dry-run[report without mutation]' '--repair[remove safe temporary remnants]' '--json[emit JSON]' ;;
     playbook) _values 'playbook command' list status init set enable disable reset check record receipts instructions doctor minimal balanced strict must should may off start finish install remove context.recall context.explore work.plan verify.tests review.repository review.security docs.update learning.capture '--project[project root]:directory:_files -/' '--json[emit JSON]' '--enforce[fail when must evidence is missing]' '--changed[changed project path]:file:_files' '--change-type[change type]:type:(code tests docs config dependencies security)' '--complexity[task complexity]:level:(trivial standard complex)' '--familiarity[context familiarity]:level:(known mixed unfamiliar)' '--risk[task risk]:level:(low normal high security)' '--public-change[public behavior changed]' '--completed[completed action]:action:' '--skipped[skipped action and reason]:evidence:' '--failed[failed action and reason]:evidence:' '--actor[local actor label]:actor:' '--actor-kind[local actor kind]:kind:(user agent service)' '--session[session label]:session:' '--policy[policy digest]:digest:' '--decision[decision digest]:digest:' '--event[lifecycle event]:event:(start check finish)' '--action[canonical action]:action:(context.recall context.explore work.plan verify.tests review.repository review.security docs.update learning.capture)' '--outcome[outcome]:outcome:(completed skipped failed)' '--reason[bounded reason]:reason:' ;;
     mcp-tools) _values 'MCP tool profile command' list status set reset full read-only custom '--tool[allow an exact tool]:tool:' '--project[project root]:directory:_files -/' '--json[emit JSON]' ;;
-    pack) _values 'context pack command' init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill '--ref[pinned Git ref]:ref:' '--project[project root]:directory:_files -/' '--project-id[remote project ID]:project ID:' '--output[export output directory]:directory:_files -/' '--file[explicit project Markdown file]:file:_files' '--note[promoted shared note ID]:note ID:' '--check[inspect update or export]' '--apply[apply update or export]' '--confirm[confirm digest]:digest:' '--json[emit JSON]' ;;
+    pack) _values 'context pack command' init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill doctor '--ref[pinned Git ref]:ref:' '--project[project root]:directory:_files -/' '--project-id[remote project ID]:project ID:' '--output[export output directory]:directory:_files -/' '--file[explicit project Markdown file]:file:_files' '--note[promoted shared note ID]:note ID:' '--check[inspect update or export]' '--apply[apply update or export]' '--confirm[confirm digest]:digest:' '--repair[remove only invalid derived context cache state]' '--json[emit JSON]' ;;
+    proposals) _values 'memory proposal command' create list show apply doctor '--session[trajectory session ID]:session:' '--scope[memory scope]:scope:' '--model[extraction model]:model:' '--category[extraction category]:category:' '--project[project root]:directory:_files -/' '--json[emit JSON]' ;;
     capabilities)
       case $words[3] in
         list|status) _arguments '--json[emit JSON]' ;;
@@ -185,8 +188,8 @@ EOF
   fish)
     sed "s/__CAIRN_HARNESSES__/$harnesses/g" <<'EOF'
 complete -c cairn -f
-for command in bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help
-    complete -c cairn -n "not __fish_seen_subcommand_from bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help" -a $command
+for command in bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help
+complete -c cairn -n "not __fish_seen_subcommand_from bootstrap setup memory-server sync sync-pi sync-kimi doctor trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help" -a $command
 end
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l apply
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l live-root -r
@@ -243,12 +246,20 @@ complete -c cairn -n "__fish_seen_subcommand_from mcp-tools; and __fish_seen_sub
 complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l project -r
 complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l tool -r
 complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l json
-complete -c cairn -n "__fish_seen_subcommand_from pack" -a "init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill"
+complete -c cairn -n "__fish_seen_subcommand_from pack" -a "init lock validate install import-okf validate-okf export-okf list show remove enable disable update skills approve-skill revoke-skill doctor"
 complete -c cairn -n "__fish_seen_subcommand_from pack" -l project -r
 complete -c cairn -n "__fish_seen_subcommand_from pack" -l project-id -r
 complete -c cairn -n "__fish_seen_subcommand_from pack" -l ref -r
 complete -c cairn -n "__fish_seen_subcommand_from pack" -l confirm -r
 complete -c cairn -n "__fish_seen_subcommand_from pack" -l json
+complete -c cairn -n "__fish_seen_subcommand_from pack; and __fish_seen_subcommand_from doctor" -l repair
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -a "create list show apply doctor"
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l session -r
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l scope -r
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l model -r
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l category -r
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l project -r
+complete -c cairn -n "__fish_seen_subcommand_from proposals" -l json
 complete -c cairn -n "__fish_seen_subcommand_from notes" -a "distill search-error promote doctor"
 complete -c cairn -n "__fish_seen_subcommand_from eval; and not __fish_seen_subcommand_from validate run ablate report prune delete" -a "validate run ablate report prune delete"
 complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcommand_from validate run ablate" -l task-set -r

package/scripts/doctor.sh

@@ -13,7 +13,7 @@ REPAIR_STORES=0
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --repair) REPAIR_STORES=1; shift ;;
-    -h|--help) echo "Usage: cairn doctor [--repair]  # repair derived trajectory/artifact/typed metadata, indexes, and interrupted note transactions"; exit 0 ;;
+    -h|--help) echo "Usage: cairn doctor [--repair]  # repair safe derived pack caches, typed metadata/indexes, and interrupted note transactions"; exit 0 ;;
     *) echo "Unknown doctor option: $1" >&2; echo "Usage: cairn doctor [--repair]" >&2; exit 2 ;;
   esac
 done
@@ -470,11 +470,13 @@ fi
 pack_cli="$CAIRN_ROOT/mcp-memory-server/dist/context-pack-cli.js"
 pack_base="${CAIRN_PACK_BASE_DIR:-$HOME/.cairnkeep/packs}"
 pack_base="${pack_base/#\~/$HOME}"
+pack_args=(doctor --json)
+if [[ "$REPAIR_STORES" == 1 ]]; then pack_args+=(--repair); fi
 if [[ ! -e "$pack_base" ]]; then
   skip "context packs (not installed)"
 elif [[ ! -f "$pack_cli" ]]; then
   fail "context-pack checker is missing from the installed package"
-elif pack_json=$(node "$pack_cli" doctor --json 2>/dev/null) && node -e 'const v=JSON.parse(process.argv[1]); if(v.ok!==true)process.exit(1)' "$pack_json"; then
+elif pack_json=$(node "$pack_cli" "${pack_args[@]}" 2>/dev/null) && node -e 'const v=JSON.parse(process.argv[1]); if(v.ok!==true)process.exit(1)' "$pack_json"; then
   pack_counts=$(node -e 'const v=JSON.parse(process.argv[1]); process.stdout.write(`${v.objects} object(s), ${v.projects} project pointer(s)`)' "$pack_json")
   pass "context packs healthy ($pack_counts)"
 else

package/scripts/terminal-prompts.mjs

@@ -37,7 +37,6 @@ async function runKeypressPrompt({ input, output, draw, accept }) {
   let settled = false;
   let keypressHandler = null;
   let rawChanged = false;
-  let resumed = false;
   let cursorHidden = false;
 
   const render = () => {
@@ -59,7 +58,6 @@ async function runKeypressPrompt({ input, output, draw, accept }) {
     }
     if (wasPaused && typeof input.resume === "function") {
       input.resume();
-      resumed = true;
     }
     output.write("\x1b[?25l");
     cursorHidden = true;
@@ -92,7 +90,11 @@ async function runKeypressPrompt({ input, output, draw, accept }) {
     clear();
     if (cursorHidden) output.write("\x1b[?25h");
     if (rawChanged) input.setRawMode(false);
-    if (resumed && typeof input.pause === "function") input.pause();
+    // A TTY can report itself as already flowing before the first prompt (for
+    // example through an SSH pseudo-terminal). Leaving it flowing keeps Node's
+    // event loop alive after setup has printed its final result. Always pause
+    // prompt input after removing our listener; the next selector resumes it.
+    if (typeof input.pause === "function") input.pause();
   }
 }
 

package/scripts/test-completion.sh

@@ -46,7 +46,13 @@ for shell in bash zsh fish; do
   grep -q 'mcp-tools' "$tmp/$shell"
   grep -q 'full.*read-only.*custom\|full read-only custom' "$tmp/$shell"
   grep -q 'pack' "$tmp/$shell"
-  grep -q 'init.*lock.*validate.*install.*list.*show.*remove.*enable.*disable.*update.*skills.*approve-skill.*revoke-skill\|init lock validate install list show remove enable disable update skills approve-skill revoke-skill' "$tmp/$shell"
+  grep -q 'init.*lock.*validate.*install.*list.*show.*remove.*enable.*disable.*update.*skills.*approve-skill.*revoke-skill.*doctor\|init lock validate install list show remove enable disable update skills approve-skill revoke-skill doctor' "$tmp/$shell"
+  grep -q -- '--repair\|-l repair' "$tmp/$shell"
+  grep -q 'proposals' "$tmp/$shell"
+  grep -q 'create.*list.*show.*apply.*doctor\|create list show apply doctor' "$tmp/$shell"
+  for proposal_flag in --session --scope --model --category --project --json; do
+    grep -q -- "$proposal_flag\|-l ${proposal_flag#--}" "$tmp/$shell"
+  done
   grep -q -- '--purge-packs\|-l purge-packs' "$tmp/$shell"
   grep -q 'evidence' "$tmp/$shell"
   grep -q 'list.*show.*delete.*prune.*doctor\|list show delete prune doctor' "$tmp/$shell"
@@ -77,6 +83,7 @@ fi
 grep -qF 'cairn skill <harvest|list|show|review|propose|evaluate|apply|rollback>' "$tmp/root-help"
 grep -qF 'cairn evidence <list|show|delete|prune|doctor>' "$tmp/root-help"
 grep -qF 'cairn playbook <list|status|init|set|enable|disable|reset|check|record|receipts|instructions|doctor>' "$tmp/root-help"
+grep -qF 'cairn proposals <create|list|show|apply|doctor>' "$tmp/root-help"
 node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/skill-help"
 for command in $skill_commands; do
   grep -q "cairn skill $command" "$tmp/skill-help"

package/scripts/test-doctor.sh

@@ -30,6 +30,27 @@ grep -q "capability configuration (not present — managed overrides are unused)
 grep -q "capability callback namespace (not present — callback logging is unused)" "$tmp/out1" ||
   fail "expected absent capability callback diagnostics"
 
+# Top-level repair must reach the context-pack doctor; the pack CLI itself
+# owns the safe derived-cache deletion policy.
+real_node=$(command -v node)
+mkdir -p "$tmp/doctor-node-shim" "$HOME/.cairnkeep/packs"
+cat >"$tmp/doctor-node-shim/node" <<'EOF'
+#!/usr/bin/env bash
+if [[ "${1:-}" == */context-pack-cli.js && "${2:-}" == doctor ]]; then
+  printf '%s\n' "$@" >"$CAIRN_TEST_PACK_ARGS"
+  printf '%s\n' '{"ok":true,"objects":0,"projects":0,"issues":[],"temporary_remnants":[]}'
+  exit 0
+fi
+exec "$CAIRN_TEST_REAL_NODE" "$@"
+EOF
+chmod 755 "$tmp/doctor-node-shim/node"
+( cd "$proj" && PATH="$tmp/doctor-node-shim:$PATH" CAIRN_TEST_REAL_NODE="$real_node" \
+    CAIRN_TEST_PACK_ARGS="$tmp/context-pack-doctor.args" "$doctor" --repair ) >"$tmp/out-pack-repair" 2>&1 ||
+  fail "doctor --repair failed while forwarding context-pack repair:\n$(cat "$tmp/out-pack-repair")"
+grep -qx -- '--repair' "$tmp/context-pack-doctor.args" ||
+  fail "top-level doctor --repair did not reach the context-pack doctor"
+rm -rf "$HOME/.cairnkeep/packs"
+
 # 2. An unsupported runtime is diagnosed before the server probe.
 mkdir -p "$tmp/old-node"
 cat > "$tmp/old-node/node" <<'EOF'

package/scripts/test-release-sbom.sh

@@ -19,7 +19,7 @@ const manifest = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
 const lock = JSON.parse(fs.readFileSync(process.argv[3], "utf8"));
 const candidateWorkflow = fs.readFileSync(process.argv[4], "utf8");
 const publishWorkflow = fs.readFileSync(process.argv[5], "utf8");
-const expected = "6.0.0";
+const expected = "6.0.1";
 
 if (manifest.devDependencies?.["@cyclonedx/cyclonedx-npm"] !== expected) {
   throw new Error(`package.json must pin @cyclonedx/cyclonedx-npm exactly to ${expected}`);
@@ -51,6 +51,9 @@ if (publishStep < 0 || attachStep < 0 || publishStep >= attachStep) {
 if (!publishWorkflow.includes('npm publish "./artifacts/cairnkeep-cli-$VERSION.tgz"')) {
   throw new Error("npm publication must use an explicit relative tarball path");
 }
+if (!publishWorkflow.includes('gh release upload "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY"')) {
+  throw new Error("release attachment must name the repository outside a checkout");
+}
 if (publishWorkflow.includes("check:public")) {
   throw new Error("release workflow must promote the verified candidate without repeating the public suite");
 }

package/scripts/test-setup-preflight.mjs

@@ -300,6 +300,19 @@ async function testTerminalSelectors(prompts) {
   await assert.rejects(cancelled, (error) => error?.status === 130 && /cancelled/i.test(error.message));
   assert.equal(input.isRaw, false);
   assert.equal(input.isPaused(), true);
+
+  const flowingInput = new FakeTTY();
+  flowingInput.paused = false;
+  const flowing = prompts.selectOnePrompt({
+    message: "Release flowing input",
+    choices: [{ value: "done", label: "Done" }],
+    input: flowingInput,
+    output: output.stream,
+  });
+  setImmediate(() => flowingInput.emit("keypress", "", { name: "return" }));
+  assert.equal(await flowing, "done");
+  assert.equal(flowingInput.isRaw, false);
+  assert.equal(flowingInput.isPaused(), true, "terminal prompt must release flowing stdin so the CLI can exit");
 }
 
 async function testStructuredSetupSelectors(setup, fixture) {

package/scripts/test-windows-native.mjs

@@ -21,6 +21,7 @@ import { HARNESS_IDS } from "./harness-registry.mjs";
 const root = resolve(fileURLToPath(new URL("..", import.meta.url)));
 const sandbox = mkdtempSync(join(tmpdir(), "cairn-windows-native-"));
 const originalBase = process.env.CAIRN_AGENTFS_BASE_DIR;
+const originalPackBase = process.env.CAIRN_PACK_BASE_DIR;
 const originalHome = process.env.HOME;
 const originalProfile = process.env.USERPROFILE;
 try {
@@ -69,6 +70,33 @@ try {
   assert.match(powershellCompletion(), /playbook/);
   assert.match(powershellCompletion(), /review\.security/);
   assert.match(powershellCompletion(), /--enforce/);
+  assert.match(powershellCompletion(), /doctor/);
+  assert.match(powershellCompletion(), /--repair/);
+  assert.match(powershellCompletion(), /proposals/);
+  assert.match(powershellCompletion(), /'create','list','show','apply','doctor'/);
+  assert.match(powershellCompletion(), /--category/);
+
+  const packBase = join(sandbox, "Context Packs");
+  const invalidDerivedPack = join(packBase, "cache", "context", "f".repeat(64));
+  mkdirSync(invalidDerivedPack, { recursive: true });
+  writeFileSync(join(invalidDerivedPack, `${"e".repeat(64)}.json`), "{\"corrupt\":true}\n");
+  process.env.CAIRN_PACK_BASE_DIR = packBase;
+  const inheritedLlmUrl = process.env.CAIRN_LLM_API_URL;
+  const exitCodeBeforeDoctor = process.exitCode;
+  const doctorWrite = process.stdout.write.bind(process.stdout);
+  let doctorOutput = "";
+  delete process.env.CAIRN_LLM_API_URL;
+  process.stdout.write = ((chunk) => { doctorOutput += String(chunk); return true; });
+  try {
+    await runWindowsCommand({ command: "doctor", args: ["--repair"], root });
+  } finally {
+    process.stdout.write = doctorWrite;
+    process.exitCode = exitCodeBeforeDoctor;
+    if (inheritedLlmUrl === undefined) delete process.env.CAIRN_LLM_API_URL;
+    else process.env.CAIRN_LLM_API_URL = inheritedLlmUrl;
+  }
+  assert.equal(existsSync(invalidDerivedPack), false, "native Windows doctor forwards safe context-pack cache repair");
+  assert.match(doctorOutput, /\[PASS\] context pack diagnostics passed/);
 
   let containerArgs = [];
   runNativeContainer(["stdio", "--image", "example/windows:1", "--volume", "windows-data"], root, (_engine, args) => { containerArgs = args; });
@@ -167,6 +195,8 @@ try {
 } finally {
   if (originalBase === undefined) delete process.env.CAIRN_AGENTFS_BASE_DIR;
   else process.env.CAIRN_AGENTFS_BASE_DIR = originalBase;
+  if (originalPackBase === undefined) delete process.env.CAIRN_PACK_BASE_DIR;
+  else process.env.CAIRN_PACK_BASE_DIR = originalPackBase;
   if (originalHome === undefined) delete process.env.HOME; else process.env.HOME = originalHome;
   if (originalProfile === undefined) delete process.env.USERPROFILE; else process.env.USERPROFILE = originalProfile;
   rmSync(sandbox, { recursive: true, force: true });

package/scripts/windows-platform.mjs

@@ -452,8 +452,9 @@ async function doctorWindows(root, args) {
     accessSync(store, fsConstants.W_OK);
     line("PASS", `memory store is writable: ${store}`);
   } catch { line("FAIL", `memory store is not writable: ${store}`); }
-  const sqlite = run("where.exe", ["sqlite3.exe"]);
-  line(sqlite.status === 0 ? "PASS" : "WARN", sqlite.status === 0
+  let sqliteStatus = null;
+  try { sqliteStatus = run("where.exe", ["sqlite3.exe"]).status; } catch {}
+  line(sqliteStatus === 0 ? "PASS" : "WARN", sqliteStatus === 0
     ? "sqlite3 is available for WAL-safe memory export"
     : "sqlite3 is not installed; runtime works, but memory export is unavailable");
   for (const [label, file, doctorArgs] of [
@@ -462,7 +463,7 @@ async function doctorWindows(root, args) {
     ["work evidence", "work-evidence-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["typed memory", "node-cli.js", ["doctor", "--project-root", process.cwd(), ...(repair ? ["--repair"] : [])]],
     ["capability", "capability-cli.js", ["doctor", "--json"]],
-    ["context pack", "context-pack-cli.js", ["doctor", "--json"]],
+    ["context pack", "context-pack-cli.js", ["doctor", "--json", ...(repair ? ["--repair"] : [])]],
     ["playbook", "playbook-cli.js", ["doctor", "--json"]],
   ]) {
     const entry = join(root, "mcp-memory-server", "dist", file);
@@ -728,10 +729,12 @@ export function powershellCompletion() {
   const harnesses = HARNESS_IDS.map((id) => `'${id}'`).join(",");
   return `Register-ArgumentCompleter -Native -CommandName cairn -ScriptBlock {
   param($wordToComplete, $commandAst, $cursorPosition)
-  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
+  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','proposals','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
   $setup = '--git','--harness','--memory','--policy','--yes','--json','init','existing','none',${harnesses},'local'
   $playbook = 'list','status','init','set','enable','disable','reset','check','record','receipts','instructions','doctor','minimal','balanced','strict','must','should','may','off','start','finish','install','remove','context.recall','context.explore','work.plan','verify.tests','review.repository','review.security','docs.update','learning.capture','--project','--json','--enforce','--complexity','--familiarity','--risk','--public-change','--changed','--change-type','--completed','--skipped','--failed','--actor','--actor-kind','--session','--policy','--decision','--event','--action','--outcome','--reason'
-  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } else { $commands }
+  $pack = 'init','lock','validate','install','import-okf','validate-okf','export-okf','list','show','remove','enable','disable','update','skills','approve-skill','revoke-skill','doctor','--repair','--project','--project-id','--json'
+  $proposals = 'create','list','show','apply','doctor','--session','--scope','--model','--category','--project','--json'
+  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+pack(?:\\s|$)') { $pack } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+proposals(?:\\s|$)') { $proposals } else { $commands }
   $candidates | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {
     [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
   }

package/templates/PROJECT-INSTRUCTIONS.md.template

@@ -38,5 +38,4 @@ Scopes defined in `.opencode/memory.json`:
 ## Tool Roles
 - AgentFS is the durable structured memory layer.
 - AnythingLLM is the long-form document retrieval layer.
-- `lean-ctx` is the default context layer (reads, search, exploration), not durable project memory.
 - RTK is a recommended companion for shell-heavy sessions (git, listings, failing builds); Token Savior is not default.