@cairnkeep/cli 2.23.1 → 2.25.0

package/mcp-memory-server/package.json

@@ -16,6 +16,7 @@
         "check:extract": "node scripts/smoke-extract-cli.mjs",
         "check:search": "node scripts/smoke-search-e2e.mjs",
         "check:memory-retrieval": "node scripts/smoke-memory-retrieval.mjs && node scripts/smoke-memory-retrieval-mcp.mjs && node scripts/run-memory-retrieval-study.mjs --check --summary",
+        "check:memory-reranker": "node scripts/smoke-memory-reranker.mjs && node scripts/smoke-memory-reranker-mcp.mjs && node scripts/run-memory-reranker-study.mjs --check --summary",
         "study:memory-retrieval": "npm run build && node scripts/run-memory-retrieval-study.mjs --summary",
         "check:scope-guard": "node scripts/smoke-scope-guard.mjs",
         "check:http-guard": "node scripts/smoke-http-guard.mjs",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@cairnkeep/cli",
-    "version": "2.23.1",
+    "version": "2.25.0",
     "description": "A durable, harness-agnostic memory + context layer for coding agents and MCP clients.",
     "license": "Apache-2.0",
     "type": "module",

package/scripts/cairn-cli.mjs

@@ -21,6 +21,7 @@ const NODE_COMMANDS = new Map([
   ["evidence", "work-evidence-cli.js"],
   ["playbook", "playbook-cli.js"],
   ["security", "security-cli.js"],
+  ["team", "team-cli.js"],
 ]);
 
 const POSIX_COMMANDS = new Map([
@@ -61,6 +62,7 @@ Usage:
   cairn evidence <list|show|delete|prune|doctor>
   cairn playbook <list|status|init|set|enable|disable|reset|check|record|receipts|instructions|doctor>
   cairn security doctor [--project PATH] [--json]
+  cairn team <init|project|member|credential|serve|mcp|list|read|search|history|propose|proposals|proposal-show|review|audit|doctor|backup|restore|memory-delete>
   cairn memory <path|export|import>
   cairn audit-timer [--on-calendar SPEC] [--para-root PATH] [--render-only DIR]
   cairn uninstall [--dry-run] [--yes] [--purge-memory] [--purge-packs] [PROJECT ...]

package/scripts/completion.sh

@@ -13,7 +13,7 @@ _cairn_complete() {
   COMPREPLY=()
   current=${COMP_WORDS[COMP_CWORD]}
   previous=${COMP_WORDS[COMP_CWORD-1]:-}
-  commands="bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help"
+  commands="bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security team trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help"
   if (( COMP_CWORD == 1 )); then
     COMPREPLY=( $(compgen -W "$commands" -- "$current") )
     return
@@ -27,6 +27,7 @@ _cairn_complete() {
     sync-omp) COMPREPLY=( $(compgen -W "--apply --live-root" -- "$current") ) ;;
     doctor) COMPREPLY=( $(compgen -W "--repair" -- "$current") ) ;;
     security) COMPREPLY=( $(compgen -W "doctor --project --json" -- "$current") ) ;;
+    team) COMPREPLY=( $(compgen -W "init project member credential create set remove issue revoke serve mcp list read search history propose proposals proposal-show review audit doctor backup restore memory-delete --organization --data --project --roles --class --expires-at --output --input --confirm --port --key --query --proposal --decision --revision --project-root" -- "$current") ) ;;
     trajectory) COMPREPLY=( $(compgen -W "list show prune --json --dry-run" -- "$current") ) ;;
     artifact) COMPREPLY=( $(compgen -W "list show delete prune --kind --session --json --dry-run --include-protected" -- "$current") ) ;;
     evidence) COMPREPLY=( $(compgen -W "list show delete prune doctor --status --json --dry-run --repair" -- "$current") ) ;;
@@ -100,6 +101,7 @@ _cairn() {
     'sync-omp:install the oh-my-pi memory extension'
     'doctor:check runtime dependencies and endpoints'
     'security:audit local security posture'
+    'team:operate opt-in reviewed team continuity'
     'trajectory:inspect and prune local session trajectories'
     'artifact:inspect, delete, and prune local artifacts'
     'evidence:inspect and manage local Git-linked work evidence'
@@ -132,6 +134,7 @@ _cairn() {
     sync-omp) _arguments '--apply[apply changes]' '--live-root[omp agent root]:directory:_files -/' ;;
     doctor) _arguments '--repair[repair trajectory metadata and indexes]' ;;
     security) _values 'security command' doctor '--project[project root]:directory:_files -/' '--json[emit JSON]' ;;
+    team) _values 'team command' init project member credential create set remove issue revoke serve mcp list read search history propose proposals proposal-show review audit doctor backup restore memory-delete '--organization[team option]:value:' '--data[team option]:value:' '--project[team option]:value:' '--roles[team option]:value:' '--class[team option]:value:' '--expires-at[team option]:value:' '--output[team option]:value:' '--input[team option]:value:' '--confirm[team option]:value:' '--port[team option]:value:' '--key[team option]:value:' '--query[team option]:value:' '--proposal[team option]:value:' '--decision[team option]:value:' '--revision[team option]:value:' '--project-root[team option]:value:' ;;
     trajectory) _values 'trajectory command' list show prune ;;
     artifact)
       case $words[3] in
@@ -196,8 +199,8 @@ EOF
   fish)
     sed "s/__CAIRN_HARNESSES__/$harnesses/g" <<'EOF'
 complete -c cairn -f
-for command in bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help
-complete -c cairn -n "not __fish_seen_subcommand_from bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help" -a $command
+for command in bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security team trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help
+complete -c cairn -n "not __fish_seen_subcommand_from bootstrap setup memory-server sync sync-pi sync-kimi sync-omp doctor security team trajectory artifact evidence playbook capabilities mcp-tools pack proposals notes eval skill graph memory audit-timer uninstall completion version help" -a $command
 end
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l apply
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l live-root -r
@@ -219,6 +222,23 @@ complete -c cairn -n "__fish_seen_subcommand_from doctor" -l repair
 complete -c cairn -n "__fish_seen_subcommand_from security" -a "doctor"
 complete -c cairn -n "__fish_seen_subcommand_from security" -l project -r
 complete -c cairn -n "__fish_seen_subcommand_from security" -l json
+complete -c cairn -n "__fish_seen_subcommand_from team" -a "init project member credential create set remove issue revoke serve mcp list read search history propose proposals proposal-show review audit doctor backup restore memory-delete"
+complete -c cairn -n "__fish_seen_subcommand_from team" -l organization -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l data -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l project -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l roles -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l class -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l expires-at -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l output -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l input -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l confirm -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l port -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l key -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l query -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l proposal -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l decision -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l revision -r
+complete -c cairn -n "__fish_seen_subcommand_from team" -l project-root -r
 complete -c cairn -n "__fish_seen_subcommand_from trajectory" -a "list show prune"
 complete -c cairn -n "__fish_seen_subcommand_from artifact" -a "list show delete prune"
 complete -c cairn -n "__fish_seen_subcommand_from artifact; and __fish_seen_subcommand_from list" -l kind -r

package/scripts/doctor.sh

@@ -112,6 +112,23 @@ else
   skip "embedding endpoint (CAIRN_MEMORY_EMBEDDING_URL unset)"
 fi
 
+# Optional learned reranking: use the runtime validator and a synthetic request.
+# Never print provider bodies, credentials, URLs or user memory in diagnostics.
+if [[ "${CAIRN_MEMORY_RERANK:-}" == 1 ]]; then
+  if node "$CAIRN_ROOT/scripts/probe-memory-reranker.mjs" >/dev/null 2>&1; then
+    pass "memory reranker accepted a synthetic ranking request"
+  else
+    rerank_status=$?
+    if [[ "$rerank_status" == 2 ]]; then
+      fail "memory reranker configuration invalid — set CAIRN_MEMORY_RERANK_URL and CAIRN_MEMORY_RERANK_MODEL; timeout must be 100–10000 ms"
+    else
+      fail "memory reranker unavailable or returned invalid ranking data — search falls back to its existing order"
+    fi
+  fi
+else
+  skip "memory reranker (CAIRN_MEMORY_RERANK unset/not 1)"
+fi
+
 # 4. Git provider (collaboration commands). Report configuration only — auth is
 #    provider- and host-specific and lives in the wrapper, not the core.
 case "${CAIRN_GIT_PROVIDER:-}" in

package/scripts/lib/team-retention.mjs

@@ -0,0 +1,29 @@
+import { existsSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, join, resolve, sep } from 'node:path';
+
+function canonical(path) {
+  const absolute = resolve(path);
+  if (existsSync(absolute)) return realpathSync(absolute);
+  const parent = dirname(absolute);
+  return parent === absolute ? absolute : join(canonical(parent), basename(absolute));
+}
+
+/** Uninstall never grants permission to purge the separate team store. */
+export function assertUninstallRetainsTeam(targets, env = process.env, home = homedir()) {
+  const stores = new Set([join(home, '.cairnkeep', 'team'), ...(env.CAIRN_TEAM_BASE_DIR ? [env.CAIRN_TEAM_BASE_DIR] : [])]);
+  const normalized = path => {
+    const value = canonical(path);
+    return process.platform === 'win32' ? value.toLowerCase() : value;
+  };
+  for (const team of stores) {
+    if (!existsSync(resolve(team))) continue;
+    const protectedPath = normalized(team);
+    for (const target of targets) {
+      const path = normalized(target);
+      if (path === protectedPath || protectedPath.startsWith(path.endsWith(sep) ? path : `${path}${sep}`)) {
+        throw new Error('Uninstall refused: a removal target contains team data. Retain it, or relocate the team store with an explicitly verified backup first.');
+      }
+    }
+  }
+}

package/scripts/probe-memory-reranker.mjs

@@ -0,0 +1,22 @@
+// Exit codes are a value-free doctor protocol: 0 disabled/healthy,
+// 2 invalid opt-in configuration, 3 unavailable or invalid ranking response.
+import { getMemoryRerankerConfig, rerankMemoryResults } from '../mcp-memory-server/dist/memory-reranker.js';
+import { realpathSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
+export async function probeMemoryReranker() {
+  if (process.env.CAIRN_MEMORY_RERANK !== '1') return 0;
+  const config = getMemoryRerankerConfig();
+  if (!config) return 2;
+  const result = await rerankMemoryResults([
+    { key: 'health/policy', value: 'Corrections append a new release ledger entry.' },
+    { key: 'health/theme', value: 'The release ledger interface uses a dark theme.' },
+  ], 'How are release ledger corrections recorded?', 2, config);
+  return result.status === 'reranked' ? 0 : 3;
+}
+
+let invokedDirectly = false;
+try { invokedDirectly = Boolean(process.argv[1] && realpathSync(process.argv[1]) === fileURLToPath(import.meta.url)); } catch {}
+if (invokedDirectly) {
+  process.exitCode = await probeMemoryReranker();
+}

package/scripts/test-ci-sharding.sh

@@ -17,6 +17,10 @@ assert.equal(flattened.length, smokeChecks.length);
 assert.equal(new Set(flattened).size, smokeChecks.length);
 assert.deepEqual([...flattened].sort(), smokeChecks.map(({ name }) => name).sort());
 assert.ok(plan.every(({ checks }) => checks.length > 0));
+const teamContracts = ['team', 'team-review', 'team-http', 'team-mcp', 'team-restore', 'team-cli'];
+for (const name of teamContracts) assert.ok(flattened.includes(name), `missing team contract: ${name}`);
+assert.ok(plan.every(({ checks }) => checks.some(({ name }) => teamContracts.includes(name))),
+  'native ACL-heavy team contracts must be distributed across all Windows shards');
 const weights = plan.map(({ weight }) => weight);
 assert.ok(Math.max(...weights) - Math.min(...weights) <= 5,
   `native Windows shards are imbalanced: ${weights.join(", ")}`);

package/scripts/test-completion.sh

@@ -17,6 +17,11 @@ eval_flags='--task-set --adapter --output --repetitions --seed --json --yes --di
 skill_commands='harvest list show review propose evaluate apply rollback'
 for shell in bash zsh fish; do
   grep -q 'capabilities' "$tmp/$shell"
+  grep -q 'team' "$tmp/$shell"
+  grep -q 'credential create set remove issue revoke' "$tmp/$shell"
+  for team_command in init project member credential serve mcp list read search history propose proposals proposal-show review audit doctor backup restore memory-delete; do
+    grep -qF "$team_command" "$tmp/$shell"
+  done
   grep -q 'list.*status.*enable.*disable.*reset.*logging\|list status enable disable reset logging' "$tmp/$shell"
   grep -q -- '--json\|-l json' "$tmp/$shell"
   for capability_id in $capability_ids; do
@@ -152,6 +157,9 @@ for shell in bash zsh fish; do
   fi
 done
 "$ROOT/bin/cairn" completion powershell >"$tmp/powershell"
+grep -qF "'team'" "$tmp/powershell"
+grep -qF "'credential','create','set','remove','issue','revoke'" "$tmp/powershell"
+grep -qF "'memory-delete'" "$tmp/powershell"
 grep -qF "'protocol'" "$tmp/powershell"
 grep -qF "'--trajectory'" "$tmp/powershell"
 grep -qF "'--codex-jsonl'" "$tmp/powershell"

package/scripts/test-container-health.mjs

@@ -11,6 +11,8 @@ assert.match(quadlet, /^Secret=cairnkeep-http-token,type=mount,target=http-token
   "the managed container secret must satisfy the probe's private-file contract");
 assert.match(containerfile, /COPY --chmod=644 containers\/healthcheck\.mjs \/opt\/cairnkeep\/containers\/healthcheck\.mjs/, "probe imports must resolve within the packaged server");
 assert.match(containerfile, /ln -s \/opt\/cairnkeep\/containers\/healthcheck\.mjs \/usr\/local\/lib\/cairnkeep\/container-healthcheck\.mjs/, "keep the established container probe path");
+assert.match(containerfile, /COPY --chmod=644 containers\/healthcheck\.mjs[^\n]*\nRUN chmod 755 \/opt\/cairnkeep\/containers\b/,
+  "normalize the probe directory's traversal mode after COPY for unprivileged runtime users");
 assert.match(source, /parseHttpPort/, "health destination must use the server's numeric port parser");
 assert.match(source, /resolveHttpToken/, "health tokens must use the server's bounded resolver");
 const { containerHealthcheck } = await import("../containers/healthcheck.mjs");

package/scripts/test-container.sh

@@ -43,6 +43,21 @@ image_user=$("$ENGINE" image inspect --format '{{.Config.User}}' "$server_image"
   exit 1
 }
 
+# Check the real legacy entrypoint before a failing credential probe can mask
+# a module-load or directory-traversal error as an expected authentication denial.
+"$ENGINE" run --rm --entrypoint node "$server_image" --input-type=module -e '
+  import assert from "node:assert/strict";
+  import { accessSync, constants, realpathSync } from "node:fs";
+  import { pathToFileURL } from "node:url";
+  assert.equal(process.getuid(), 10001);
+  accessSync("/opt/cairnkeep/containers", constants.R_OK | constants.X_OK);
+  const target = realpathSync("/usr/local/lib/cairnkeep/container-healthcheck.mjs");
+  assert.equal(target, "/opt/cairnkeep/containers/healthcheck.mjs");
+  accessSync(target, constants.R_OK);
+  await import(pathToFileURL(target).href);
+  console.log("container health entrypoint: readable, searchable and importable as runtime UID");
+'
+
 "$ENGINE" volume create "$volume" >/dev/null
 node scripts/probe-memory-server.mjs --command \
   "$ENGINE" run --rm -i --volume "$volume:/data" "$server_image" stdio
@@ -112,10 +127,15 @@ done
 cat "$tmp/write.out"
 # Exec probes see the original container environment, not the entrypoint's
 # loaded secret. The deliberately public bind fixture must be rejected.
-if "$ENGINE" exec "$name" node /usr/local/lib/cairnkeep/container-healthcheck.mjs; then
+if "$ENGINE" exec "$name" node /usr/local/lib/cairnkeep/container-healthcheck.mjs >"$tmp/health.out" 2>"$tmp/health.err"; then
   echo "FAIL: healthcheck accepted a non-private token file" >&2
   exit 1
 fi
+[[ ! -s "$tmp/health.out" && ! -s "$tmp/health.err" ]] || {
+  cat "$tmp/health.out" "$tmp/health.err" >&2
+  echo "FAIL: healthcheck must reject unsafe credentials without a runtime error" >&2
+  exit 1
+}
 # Exercise the same legacy entrypoint against a private, container-owned file.
 "$ENGINE" exec "$name" sh -c 'umask 077; cat /run/secrets/http-token > /tmp/health-token; CAIRN_MEMORY_HTTP_TOKEN_FILE=/tmp/health-token node /usr/local/lib/cairnkeep/container-healthcheck.mjs; status=$?; rm -f /tmp/health-token; exit "$status"'
 "$ENGINE" rm -f "$name" >/dev/null

package/scripts/test-dependency-security.mjs

@@ -25,6 +25,16 @@ function check(label, mutate, expected) {
 }
 try {
   check("valid dependency graph", () => {}, null);
+  for (const lockPath of ['package-lock.json', 'mcp-memory-server/package-lock.json']) {
+    for (const [name, vulnerable] of [['body-parser', '2.3.0'], ['fast-uri', '3.1.8'], ['ip-address', '10.7.3']]) {
+      check(`${lockPath} rejects vulnerable ${name}`, x => {
+        x[lockPath].packages[`node_modules/${name}`].version = vulnerable;
+      }, new RegExp(`resolved ${name}: requires`));
+      check(`${lockPath} rejects nested vulnerable ${name}`, x => {
+        x[lockPath].packages[`node_modules/fixture/node_modules/${name}`] = { version: vulnerable };
+      }, new RegExp(`resolved ${name}: requires`));
+    }
+  }
   check("root manifest/lock mismatch", x => { x["package.json"].dependencies.zod = "^4.0.0"; }, /manifest and lock root Zod ranges differ/);
   check("server manifest/lock mismatch", x => { x["mcp-memory-server/package-lock.json"].packages[""].dependencies.zod = "^4.0.0"; }, /manifest and lock root Zod ranges differ/);
   check("matched server range differs from packaged CLI", x => {
@@ -34,7 +44,7 @@ try {
   check("different resolved schema version", x => { x["mcp-memory-server/package-lock.json"].packages["node_modules/zod"].version = "4.0.0"; }, /root and server resolved Zod versions differ/);
   check("missing direct schema", x => { delete x["package-lock.json"].packages["node_modules/zod"]; }, /direct Zod: version must be a string/);
   check("existing SDK advisory check retained", x => { x["package-lock.json"].packages["node_modules/@modelcontextprotocol/sdk"].version = "1.0.0"; }, /resolved @modelcontextprotocol\/sdk: requires/);
-  console.log("PASS: dependency policy positive control, schema parity mutations and SDK advisory rejection");
+  console.log("PASS: dependency policy positive control, both-lock/nested advisory rejection and schema parity mutations");
 } finally {
   rmSync(scratch, { recursive: true, force: true });
 }

package/scripts/test-doctor.sh

@@ -18,12 +18,14 @@ export HOME="$tmp/home"
 mkdir -p "$HOME"
 # Clean the inherited env so the test controls what is "configured".
 unset CAIRN_LLM_API_URL CAIRN_MEMORY_EMBEDDING_URL CAIRN_GIT_PROVIDER CAIRN_AGENTFS_BASE_DIR
+unset CAIRN_MEMORY_RERANK CAIRN_MEMORY_RERANK_URL CAIRN_MEMORY_RERANK_MODEL CAIRN_MEMORY_RERANK_API_KEY CAIRN_MEMORY_RERANK_TIMEOUT_MS
 
 # 1. Nothing configured → only SKIP/PASS/WARN, exit 0.
 proj="$tmp/clean"; mkdir -p "$proj"
 ( cd "$proj" && "$doctor" ) >"$tmp/out1" 2>&1 || fail "doctor exited non-zero with nothing configured:\n$(cat "$tmp/out1")"
 grep -q "\[SKIP\]" "$tmp/out1" || fail "expected SKIP lines when nothing is configured"
 grep -q "typed metadata and note transaction state" "$tmp/out1" || fail "expected typed/note diagnostics in the public doctor output"
+grep -qF "[SKIP] memory reranker" "$tmp/out1" || fail "expected default-off reranker diagnostic"
 grep -q "artifact store (not present" "$tmp/out1" || fail "expected absent opt-in artifact diagnostics"
 grep -q "capability configuration (not present — managed overrides are unused)" "$tmp/out1" ||
   fail "expected absent capability configuration diagnostics"
@@ -92,6 +94,12 @@ const server = createServer((request, response) => {
   request.on("end", () => {
     let body = {};
     try { body = JSON.parse(Buffer.concat(chunks).toString("utf8")); } catch {}
+    if (request.url === "/v1/rerank") {
+      response.writeHead(200, { "Content-Type": "application/json" });
+      response.end(JSON.stringify({ results: body.model === "invalid-ranker" ? [] :
+        body.documents.map((_, index) => ({ index, relevance_score: -index })) }));
+      return;
+    }
     const routeValid = request.url === "/v1/embeddings";
     const keyValid = request.headers.authorization === "Bearer test-key";
     const modelValid = body.model === "test-embedding";
@@ -153,6 +161,26 @@ EOF
     fail "missing-model diagnostic leaked an upstream body or request id"
 fi
 
+# Reranker diagnostics validate configuration and actual data, not HTTP status alone.
+if [[ -n "${port:-}" ]]; then
+  ( cd "$proj" && CAIRN_MEMORY_RERANK=1 CAIRN_MEMORY_RERANK_URL="http://127.0.0.1:$port/v1" \
+      CAIRN_MEMORY_RERANK_MODEL=test-ranker "$doctor" ) >"$tmp/reranker-ok" 2>&1 ||
+    fail "doctor rejected a valid reranking response"
+  grep -qF "[PASS] memory reranker accepted a synthetic ranking request" "$tmp/reranker-ok" ||
+    fail "doctor did not probe reranking"
+  if ( cd "$proj" && CAIRN_MEMORY_RERANK=1 "$doctor" ) >"$tmp/reranker-config" 2>&1; then
+    fail "doctor accepted an incomplete opted-in reranker"
+  fi
+  grep -qF "[FAIL] memory reranker configuration invalid" "$tmp/reranker-config" ||
+    fail "doctor omitted the reranker configuration diagnostic"
+  if ( cd "$proj" && CAIRN_MEMORY_RERANK=1 CAIRN_MEMORY_RERANK_URL="http://127.0.0.1:$port/v1" \
+      CAIRN_MEMORY_RERANK_MODEL=invalid-ranker "$doctor" ) >"$tmp/reranker-invalid" 2>&1; then
+    fail "doctor mistook fallback for a healthy reranker"
+  fi
+  grep -qF "[FAIL] memory reranker unavailable or returned invalid ranking data" "$tmp/reranker-invalid" ||
+    fail "doctor omitted the invalid ranking response diagnostic"
+fi
+
 # 5. Artifact doctor passes a valid store, repairs only derived state, and
 # refuses authoritative full-record corruption without leaking stored values.
 artifact_cli="$ROOT/mcp-memory-server/dist/artifact-cli.js"

package/scripts/test-package-install.sh

@@ -60,6 +60,15 @@ env -u CAIRN_NOTE_DISTILLATION cairn notes --help >/dev/null \
   || fail "installed package omitted the notes command"
 
 installed_root="$tmp/prefix/lib/node_modules/@cairnkeep/cli"
+cairn team --help >"$tmp/installed-team-help"
+grep -qF 'experimental token-first team continuity' "$tmp/installed-team-help" || fail "installed package omitted team preview"
+CAIRN_TEAM=1 cairn team init --organization demo-org --data "$tmp/installed-team" >"$tmp/team-init.json"
+CAIRN_TEAM=1 cairn team project create alpha --data "$tmp/installed-team" >/dev/null
+CAIRN_TEAM=1 cairn team backup --data "$tmp/installed-team" --output "$tmp/team-snapshot.json" >"$tmp/team-backup.json"
+snapshot_digest=$(node -p 'require(process.argv[1]).snapshot_digest' "$tmp/team-backup.json")
+CAIRN_TEAM=1 cairn team restore --input "$tmp/team-snapshot.json" --confirm "$snapshot_digest" --data "$tmp/installed-team-restored" >"$tmp/team-restore.json"
+CAIRN_TEAM=1 cairn team doctor --data "$tmp/installed-team-restored" >"$tmp/team-doctor.json"
+node -e 'if(!require(process.argv[1]).credentials_revoked||!require(process.argv[2]).ok)process.exit(1)' "$tmp/team-restore.json" "$tmp/team-doctor.json" || fail "installed team restore contract failed"
 cairn skill --help >"$tmp/installed-skill-help"
 cmp -s "$tmp/source-skill-help" "$tmp/installed-skill-help" || \
   fail "source and installed skill help differ"

package/scripts/test-team-docs.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+cd "$ROOT"
+lesson=docs/learning/lessons/L29-team-continuity.md
+video=docs/learning/video-scripts/V29-team-continuity.md
+for doc in docs/team.md "$lesson" "$video"; do
+  [[ -f "$doc" ]]
+  grep -qi 'preview' "$doc"
+  grep -qi 'independent.*review' "$doc"
+  grep -qi 'pilot' "$doc"
+  if ! grep -qF '2.25.0' "$doc"; then
+    echo "Missing team preview release compatibility: $doc" >&2
+    exit 1
+  fi
+  if grep -qiE 'unreleased|feature-branch preview|released Cairnkeep CLI does not include' "$doc"; then
+    echo 'Released team preview guidance must not claim the feature is absent' >&2
+    exit 1
+  fi
+done
+[[ -f docs/team-pilot.md ]]
+grep -qF 'team-pilot.md' docs/team.md
+grep -qF 'team-pilot.md' "$lesson"
+grep -qF 'team-pilot.md' "$video"
+grep -qF 'not production admission' docs/team-pilot.md
+grep -qF 'reviewer.token' docs/team-pilot.md
+if grep -qF 'released 2.22.5 baseline' docs/README.md || grep -qF 'Cairnkeep 2.22.5 baseline' "$lesson"; then
+  echo 'Team guidance must not pin an obsolete released baseline' >&2
+  exit 1
+fi
+grep -q '^\*\*Status:\*\* Brief' "$lesson"
+grep -q '^## Acceptance criteria$' "$lesson"
+grep -q '^## Privacy and trust boundary$' "$lesson"
+grep -qF 'L29-team-continuity.md' docs/learning/README.md
+grep -qF 'L29-team-continuity.md' docs/learning/tracks/operator.md
+grep -qF '`cairn team`' docs/learning/CURRICULUM-MAP.md
+for command in init project member credential serve mcp proposals proposal-show propose review search read audit doctor backup restore memory-delete; do
+  node mcp-memory-server/dist/team-cli.js --help | grep -q "cairn team $command"
+done
+node mcp-memory-server/dist/team-cli.js --help | grep -qF 'member remove SUBJECT --project ID'
+for doc in docs/team.md "$lesson" "$video"; do
+  grep -qF 'cairn team member remove' "$doc"
+done
+for guide in operating storage privacy-and-data-flow security-assurance harness-compatibility agents; do
+  grep -qF 'team.md' "docs/$guide.md"
+done
+for control in team team-review team-http team-mcp team-restore team-cli; do
+  grep -qF "smoke-$control.mjs" "$lesson"
+  [[ -f "mcp-memory-server/scripts/smoke-$control.mjs" ]]
+done
+node scripts/test-team-pilot.mjs
+echo 'PASS: team preview reference, source controls, admission boundary, learning and video routing'

package/scripts/test-team-pilot.mjs

@@ -0,0 +1,59 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdtempSync, readFileSync, rmSync, statSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { readStableFile } from './lib/stable-file.mjs';
+
+if (process.platform === 'win32') {
+  console.log('SKIP: isolated pilot Bash recipe is Linux/macOS; native CLI controls run separately');
+  process.exit(0);
+}
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const guide = readFileSync(join(root, 'docs/team-pilot.md'), 'utf8');
+const blocks = [...guide.matchAll(/<!-- team-pilot-setup:start -->\s*```sh\n([\s\S]*?)```\s*<!-- team-pilot-setup:end -->/g)];
+assert.equal(blocks.length, 1, 'exactly one maintained executable setup block');
+const hash = bytes => createHash('sha256').update(bytes).digest('hex');
+const productionPaths = ['.codex/config.toml', '.claude.json', '.qwen/settings.json',
+  '.qwen/trustedFolders.json', '.config/opencode/opencode.json'];
+const fingerprint = () => productionPaths.map(name => {
+  const path = join(homedir(), name);
+  return existsSync(path) ? hash(readFileSync(path)) : null;
+});
+const before = fingerprint();
+const base = mkdtempSync(join(tmpdir(), 'cairn-team-pilot-doc-'));
+const pilot = join(base, 'new lab');
+const environment = { PATH: process.env.PATH, LANG: 'C.UTF-8',
+  TEAM_CAIRN: join(root, 'bin/cairn'), TEAM_PILOT_DIR: pilot };
+try {
+  const readToken = name => readStableFile(join(pilot, name), {
+    label: 'Pilot credential', maxBytes: 256, privateMode: 0o600,
+  }).bytes;
+  const execute = () => spawnSync('bash', ['-c', blocks[0][1]], {
+    cwd: base, env: environment, encoding: 'utf8', timeout: 120000,
+  });
+  const result = execute();
+  assert.equal(result.error, undefined);
+  assert.equal(result.status, 0, result.stderr);
+  assert.equal(statSync(pilot).mode & 0o777, 0o700);
+  const files = ['author.token', 'reader.token', 'reviewer.token'];
+  const hashes = files.map(name => {
+    const bytes = readToken(name);
+    const token = bytes.toString('utf8').trim();
+    assert.equal(result.stdout.includes(token), false, 'credential never appears in setup output');
+    assert.equal(result.stderr.includes(token), false);
+    return hash(bytes);
+  });
+  assert.equal(new Set(hashes).size, 3, 'separate credentials, not a shared token');
+  assert.equal(existsSync(join(pilot, 'author-workspace/reviewer.token')), false);
+  assert.equal(existsSync(join(pilot, 'reader-workspace/reviewer.token')), false);
+  const retry = execute();
+  assert.notEqual(retry.status, 0, 'existing lab must not be reused or overwritten');
+  assert.deepEqual(files.map(name => hash(readToken(name))), hashes);
+  assert.deepEqual(fingerprint(), before, 'production harness configurations unchanged');
+  console.log('PASS: documented pilot setup, isolated identities, private credentials, no token output and no overwrite');
+} finally {
+  rmSync(base, { recursive: true, force: true });
+}

package/scripts/test-windows-native.mjs

@@ -88,10 +88,12 @@ try {
   writeFileSync(join(invalidDerivedPack, `${"e".repeat(64)}.json`), "{\"corrupt\":true}\n");
   process.env.CAIRN_PACK_BASE_DIR = packBase;
   const inheritedLlmUrl = process.env.CAIRN_LLM_API_URL;
+  const inheritedRerank = process.env.CAIRN_MEMORY_RERANK;
   const exitCodeBeforeDoctor = process.exitCode;
   const doctorWrite = process.stdout.write.bind(process.stdout);
   let doctorOutput = "";
   delete process.env.CAIRN_LLM_API_URL;
+  delete process.env.CAIRN_MEMORY_RERANK;
   process.stdout.write = ((chunk) => { doctorOutput += String(chunk); return true; });
   try {
     await runWindowsCommand({ command: "doctor", args: ["--repair"], root });
@@ -100,9 +102,12 @@ try {
     process.exitCode = exitCodeBeforeDoctor;
     if (inheritedLlmUrl === undefined) delete process.env.CAIRN_LLM_API_URL;
     else process.env.CAIRN_LLM_API_URL = inheritedLlmUrl;
+    if (inheritedRerank === undefined) delete process.env.CAIRN_MEMORY_RERANK;
+    else process.env.CAIRN_MEMORY_RERANK = inheritedRerank;
   }
   assert.equal(existsSync(invalidDerivedPack), false, "native Windows doctor forwards safe context-pack cache repair");
   assert.match(doctorOutput, /\[PASS\] context pack diagnostics passed/);
+  assert.match(doctorOutput, /\[SKIP\] memory reranker unset\/not 1/);
 
   let containerArgs = [];
   runNativeContainer(["stdio", "--image", "example/windows:1", "--volume", "windows-data"], root, (_engine, args) => { containerArgs = args; });

package/scripts/uninstall.sh

@@ -91,6 +91,18 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
+# Refuse an overlapping purge before any harness files or registrations change.
+purge_targets=()
+[[ $PURGE_MEMORY -eq 1 ]] && purge_targets+=("$STORE_DIR")
+[[ $PURGE_PACKS -eq 1 ]] && purge_targets+=("$PACK_DIR")
+if [[ $PURGE_MEMORY -eq 1 ]]; then
+  for project in "${PROJECTS[@]}"; do purge_targets+=("$project/.agentfs"); done
+fi
+if [[ ${#purge_targets[@]} -gt 0 ]]; then
+  command -v node >/dev/null 2>&1 || { echo 'Uninstall purge requires Node to verify team-data retention.' >&2; exit 1; }
+  node "$CAIRN_ROOT/scripts/verify-team-retention.mjs" "${purge_targets[@]}" || exit 1
+fi
+
 # ---- backup bundle -----------------------------------------------------------
 # Timestamp comes from the runtime clock on the user's machine.
 BACKUP_DIR="$HOME/.cairnkeep-uninstall-$(date +%Y%m%d-%H%M%S)"
@@ -197,6 +209,7 @@ echo "  Pi live root: $PI_LIVE_ROOT"
 echo "  Kimi root:    $KIMI_LIVE_ROOT"
 echo "  memory store: $STORE_DIR ($([[ $PURGE_MEMORY -eq 1 ]] && echo 'WILL be purged' || echo 'kept'))"
 echo "  context packs: $PACK_DIR ($([[ $PURGE_PACKS -eq 1 ]] && echo 'WILL be purged' || echo 'kept'))"
+echo "  team data: retained (separate operator-managed store; no team purge option)"
 [[ ${#PROJECTS[@]} -gt 0 ]] && echo "  projects:     ${PROJECTS[*]}"
 
 if [[ $DRY_RUN -eq 0 && $ASSUME_YES -eq 0 ]]; then

package/scripts/verify-dependency-security.mjs

@@ -7,9 +7,10 @@ const ROOT = resolve(process.cwd());
 const MINIMUM_SDK = [1, 32, 1];
 const MINIMUM_NODE_SERVER = [2, 0, 5];
 const TRANSITIVE_MINIMUMS = new Map([
-  ["fast-uri", [3, 1, 8]],
+  ["body-parser", [2, 4, 0]],
+  ["fast-uri", [3, 1, 9]],
   ["hono", [4, 13, 13]],
-  ["ip-address", [10, 7, 3]],
+  ["ip-address", [10, 7, 4]],
   ["proxy-addr", [2, 0, 8]],
 ]);
 const DIRECT_HONO_PACKAGES = new Set(["hono", "@hono/node-server"]);

package/scripts/verify-team-retention.mjs

@@ -0,0 +1,3 @@
+import { assertUninstallRetainsTeam } from './lib/team-retention.mjs';
+try { assertUninstallRetainsTeam(process.argv.slice(2)); }
+catch (error) { console.error(error.message); process.exitCode = 1; }

package/scripts/windows-platform.mjs

@@ -27,6 +27,7 @@ import { homedir, tmpdir } from "node:os";
 import { HARNESS_IDS, harnessProjectAssets } from "./harness-registry.mjs";
 import { reconcilePlaybookInstructions, removePlaybookInstructions } from "./playbook-instructions.mjs";
 import { readStableFile, readStableText, readStableJson } from "./lib/stable-file.mjs";
+import { assertUninstallRetainsTeam } from "./lib/team-retention.mjs";
 
 const BOOTSTRAP_FILES = [
   ["env.example.template", ".ai/env.example"],
@@ -526,6 +527,14 @@ async function doctorWindows(root, args) {
       } catch { line("FAIL", `embedding endpoint request failed (${process.env.CAIRN_MEMORY_EMBEDDING_URL})`); }
     }
   } else line("SKIP", "embedding endpoint unset");
+  if (process.env.CAIRN_MEMORY_RERANK === "1") {
+    let status = 3;
+    try { status = await (await import("./probe-memory-reranker.mjs")).probeMemoryReranker(); } catch {}
+    line(status === 0 ? "PASS" : "FAIL", status === 0
+      ? "memory reranker accepted a synthetic ranking request"
+      : status === 2 ? "memory reranker configuration invalid — set URL/model and a timeout within 100–10000 ms"
+        : "memory reranker unavailable or returned invalid ranking data — search falls back to its existing order");
+  } else line("SKIP", "memory reranker unset/not 1");
   const provider = process.env.CAIRN_GIT_PROVIDER?.trim();
   if (!provider || provider === "none") line("SKIP", "git provider unset/none; collaboration commands are off");
   else if (["github", "gitlab", "codeberg", "forgejo"].includes(provider)) line("PASS", `git provider configured: ${provider}`);
@@ -687,6 +696,8 @@ function uninstallWindows(root, args) {
   if (options.has("--purge-memory")) targets.push(resolve(expandHome(process.env.CAIRN_AGENTFS_BASE_DIR || join(homedir(), ".cairnkeep"))));
   if (options.has("--purge-packs")) targets.push(resolve(expandHome(process.env.CAIRN_PACK_BASE_DIR || join(homedir(), ".cairnkeep", "packs"))));
   const candidates = [...new Set(targets)].filter(existsSync);
+  assertUninstallRetainsTeam(candidates);
+  console.log('team data: retained (separate operator-managed store; no team purge option)');
   const existing = candidates.filter((target) => !candidates.some((parent) => parent !== target && target.toLowerCase().startsWith(`${parent.toLowerCase()}${sep}`)));
   if (dryRun) { for (const target of existing) console.log(`would remove: ${target}`); return; }
   const backup = join(homedir(), "cairnkeep-uninstall-backups", new Date().toISOString().replace(/[:.]/g, "-"));
@@ -762,14 +773,15 @@ export function powershellCompletion() {
   const harnesses = HARNESS_IDS.map((id) => `'${id}'`).join(",");
   return `Register-ArgumentCompleter -Native -CommandName cairn -ScriptBlock {
   param($wordToComplete, $commandAst, $cursorPosition)
-  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','security','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','proposals','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
+  $commands = 'bootstrap','setup','memory-server','sync','sync-pi','sync-kimi','doctor','security','team','trajectory','artifact','evidence','playbook','capabilities','mcp-tools','pack','proposals','notes','eval','skill','graph','memory','audit-timer','uninstall','completion','version','help'
   $setup = '--git','--harness','--memory','--policy','--yes','--json','init','existing','none',${harnesses},'local'
   $playbook = 'list','status','init','set','enable','disable','reset','check','record','receipts','instructions','doctor','minimal','balanced','strict','must','should','may','off','start','finish','install','remove','context.recall','context.explore','work.plan','verify.tests','review.repository','review.security','docs.update','learning.capture','--project','--json','--enforce','--complexity','--familiarity','--risk','--public-change','--changed','--change-type','--completed','--skipped','--failed','--actor','--actor-kind','--session','--policy','--decision','--event','--action','--outcome','--reason'
   $pack = 'init','lock','validate','install','import-okf','validate-okf','export-okf','list','show','remove','enable','disable','update','skills','approve-skill','revoke-skill','doctor','--repair','--project','--project-id','--json'
   $proposals = 'create','list','show','apply','doctor','--session','--scope','--model','--category','--project','--json'
   $security = 'doctor','--project','--json'
+  $team = 'init','project','member','credential','create','set','remove','issue','revoke','serve','mcp','list','read','search','history','propose','proposals','proposal-show','review','audit','doctor','backup','restore','memory-delete','--organization','--data','--project','--roles','--class','--expires-at','--output','--input','--confirm','--port','--key','--query','--proposal','--decision','--revision','--project-root'
   $evaluation = 'validate','run','ablate','report','prune','delete','protocol','--task-set','--adapter','--output','--repetitions','--seed','--yes','--json','--disable','--experiment','--older-than-days','--dry-run','--trajectory','--codex-jsonl','--capture-authorized'
-  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+pack(?:\\s|$)') { $pack } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+proposals(?:\\s|$)') { $proposals } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+security(?:\\s|$)') { $security } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+eval(?:\\s|$)') { $evaluation } else { $commands }
+  $candidates = if ($commandAst.ToString() -match '^\\s*cairn\\s+setup(?:\\s|$)') { $setup } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+team(?:\\s|$)') { $team } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+playbook(?:\\s|$)') { $playbook } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+pack(?:\\s|$)') { $pack } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+proposals(?:\\s|$)') { $proposals } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+security(?:\\s|$)') { $security } elseif ($commandAst.ToString() -match '^\\s*cairn\\s+eval(?:\\s|$)') { $evaluation } else { $commands }
   $candidates | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {
     [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
   }