@cairnkeep/cli 2.3.1 → 2.4.0

package/templates/capabilities.json.template

@@ -0,0 +1,7 @@
+{
+  "schema_version": 1,
+  "capabilities": {},
+  "logging": {
+    "callbacks": false
+  }
+}

package/templates/env.example.template

@@ -17,6 +17,57 @@
 # scopes default to ~/.cairnkeep; project scope uses <server-cwd>/.agentfs/.
 # CAIRN_AGENTFS_BASE_DIR=~/.cairnkeep
 #
+# Typed metadata, filters, logical note address spaces, and memory_import are
+# OFF by default. Restart the memory server after changing this construction-
+# time tool-schema flag. No model, API key, or network endpoint is required.
+# CAIRN_TYPED_MEMORY_NODES=1
+#
+# The managed capability contract is OFF by default. Project state is managed
+# with `cairn capabilities`; these environment variables are optional strict
+# per-process overrides. Strict booleans: 1 | true | yes | on; 0 | false | no | off.
+# Leave every key below unset unless the current process needs an explicit
+# override. MCP capability changes require a memory-server restart.
+# CAIRN_CAPABILITY_CONTRACT=
+# CAIRN_CAPABILITY_LOGGING=
+# CAIRN_CAPABILITY_MEMORY_WRITE=
+# CAIRN_CAPABILITY_MEMORY_SEARCH=
+# CAIRN_CAPABILITY_NOTES_DISTILL=
+# CAIRN_CAPABILITY_WIKI=
+# CAIRN_CAPABILITY_GRAPH=
+# CAIRN_CAPABILITY_SECURITY_AUDIT=
+# CAIRN_CAPABILITY_ROUTE_CHECK=
+# CAIRN_CAPABILITY_CONTEXT_EXPLORE=
+#
+# CAIRN_NOTE_DISTILLATION remains a compatibility input for the existing
+# offline note job; enabling the master contract does not enable notes or graph.
+# CAIRN_NOTE_DISTILLATION=
+# Callback logging also requires the master contract and local capture consent:
+# CAIRN_TRAJECTORY_CAPTURE is separate required consent and remains OFF by default.
+#
+# Structured session trajectories are local and OFF by default. When enabled,
+# Claude Code SessionEnd and OpenCode session-idle capture redacted events in
+# <project>/.agentfs/trajectory.db. See docs/privacy-and-data-flow.md first.
+# CAIRN_TRAJECTORY_CAPTURE=1
+# CAIRN_TRAJECTORY_SESSION_MAX_BYTES=5242880
+# CAIRN_TRAJECTORY_STORE_MAX_BYTES=268435456
+# CAIRN_TRAJECTORY_RETENTION_DAYS=30
+# Bootstrap creates .ai/trajectory-redaction.json for optional custom patterns.
+# CAIRN_TRAJECTORY_REDACTION_FILE=.ai/trajectory-redaction.json
+#
+# Harness-produced compaction continuity and explicit artifact access are local
+# and OFF by default. Either capability may be enabled independently; neither
+# needs a model, API key, or network endpoint. HTTP artifact tools require the
+# separate HTTP flag in addition to the existing authenticated HTTP settings.
+# CAIRN_COMPACTION_CAPTURE=1
+# CAIRN_ARTIFACT_STORE=1
+# CAIRN_ARTIFACT_HTTP=1
+# CAIRN_ARTIFACT_MAX_BYTES=1048576
+# CAIRN_ARTIFACT_SESSION_MAX_BYTES=16777216
+# CAIRN_ARTIFACT_STORE_MAX_BYTES=268435456
+# CAIRN_ARTIFACT_RETENTION_DAYS=30
+# CAIRN_COMPACTION_MAX_REVISIONS=8
+# CAIRN_ARTIFACT_GENERATED_FILE_SNAPSHOT_MAX_BYTES=262144
+#
 # The memory server runs locally over stdio by default. These HTTP settings are
 # for the SERVER host of an explicit remote deployment, not a normal local
 # client. Setting MCP_HTTP_PORT REQUIRES a bearer token, or startup fails.

package/templates/memory-wiki-audit.service.template

@@ -1,5 +1,5 @@
 [Unit]
-Description=Cairnkeep memory + wiki invalidation audit
+Description=Cairnkeep memory + wiki audit and optional note distillation
 
 [Service]
 Type=oneshot

package/templates/start-claude.sh.template

@@ -15,6 +15,31 @@
 #                            with $CAIRN_EXIT_STATUS set to the harness exit code.
 set -euo pipefail
 ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+
+capability_contract_enabled() {
+  local value="${CAIRN_CAPABILITY_CONTRACT:-}"
+  value="${value#"${value%%[![:space:]]*}"}"
+  value="${value%"${value##*[![:space:]]}"}"
+  case "$value" in
+    1|[Tt][Rr][Uu][Ee]|[Yy][Ee][Ss]|[Oo][Nn]) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+resolve_cairn_root() {
+  local source dir
+  if ! source=$(type -P cairn); then
+    echo "cairn: capability contract requires the cairn executable on PATH" >&2
+    return 127
+  fi
+  while [[ -L "$source" ]]; do
+    dir=$(cd -P "$(dirname "$source")" && pwd)
+    source=$(readlink "$source")
+    [[ "$source" == /* ]] || source="$dir/$source"
+  done
+  cd -P "$(dirname "$source")/.." && pwd
+}
+
 if [[ -f "$ROOT_DIR/.ai/.env" ]]; then
   set -a
   # shellcheck disable=SC1091
@@ -25,6 +50,17 @@ if [[ -f "$ROOT_DIR/.ai/pre-launch.sh" ]]; then
   # shellcheck disable=SC1091
   . "$ROOT_DIR/.ai/pre-launch.sh"
 fi
+
+if capability_contract_enabled; then
+  CAIRN_RUNTIME_ROOT=$(resolve_cairn_root)
+  node "$CAIRN_RUNTIME_ROOT/mcp-memory-server/dist/capability-cli.js" \
+    harness-recover </dev/null >/dev/null 2>&1 || true
+  CLAUDE_CAPABILITY_ROOT="$ROOT_DIR/.ai/capability-contract/claude"
+  "$CAIRN_RUNTIME_ROOT/scripts/sync-claude-assets.sh" \
+    --apply --capability-overlay --live-root "$CLAUDE_CAPABILITY_ROOT" >/dev/null
+  export CLAUDE_CONFIG_DIR="$CLAUDE_CAPABILITY_ROOT"
+fi
+
 cd "$ROOT_DIR"
 
 launch_args=()

package/templates/start-opencode.sh.template

@@ -6,11 +6,37 @@
 # Wrapper seams (all optional, all no-ops when absent):
 #   .ai/pre-launch.sh        sourced after .env, before launch. May export env
 #                            or abort the launch by returning / exiting non-zero.
-#   CAIRN_EXTRA_SETTINGS     path to an OpenCode config file layered via --config.
+#   CAIRN_EXTRA_SETTINGS     path to an OpenCode config file layered via
+#                            OPENCODE_CONFIG.
 #   .ai/post-exit.sh         sourced after OpenCode exits, with $CAIRN_EXIT_STATUS
 #                            set to the exit code.
 set -euo pipefail
 ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+
+capability_contract_enabled() {
+  local value="${CAIRN_CAPABILITY_CONTRACT:-}"
+  value="${value#"${value%%[![:space:]]*}"}"
+  value="${value%"${value##*[![:space:]]}"}"
+  case "$value" in
+    1|[Tt][Rr][Uu][Ee]|[Yy][Ee][Ss]|[Oo][Nn]) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+resolve_cairn_root() {
+  local source dir
+  if ! source=$(type -P cairn); then
+    echo "cairn: capability contract requires the cairn executable on PATH" >&2
+    return 127
+  fi
+  while [[ -L "$source" ]]; do
+    dir=$(cd -P "$(dirname "$source")" && pwd)
+    source=$(readlink "$source")
+    [[ "$source" == /* ]] || source="$dir/$source"
+  done
+  cd -P "$(dirname "$source")/.." && pwd
+}
+
 if [[ -f "$ROOT_DIR/.ai/.env" ]]; then
   set -a
   # shellcheck disable=SC1091
@@ -21,16 +47,32 @@ if [[ -f "$ROOT_DIR/.ai/pre-launch.sh" ]]; then
   # shellcheck disable=SC1091
   . "$ROOT_DIR/.ai/pre-launch.sh"
 fi
+
+if capability_contract_enabled; then
+  CAIRN_RUNTIME_ROOT=$(resolve_cairn_root)
+  node "$CAIRN_RUNTIME_ROOT/mcp-memory-server/dist/capability-cli.js" \
+    harness-recover </dev/null >/dev/null 2>&1 || true
+  OPENCODE_CAPABILITY_ROOT="$ROOT_DIR/.ai/capability-contract/opencode"
+  "$CAIRN_RUNTIME_ROOT/scripts/sync-opencode-wiki-assets.sh" \
+    --apply --capability-overlay --live-root "$OPENCODE_CAPABILITY_ROOT" >/dev/null
+  "$CAIRN_RUNTIME_ROOT/scripts/sync-opencode-graphify-assets.sh" \
+    --apply --capability-overlay --live-root "$OPENCODE_CAPABILITY_ROOT" >/dev/null
+  "$CAIRN_RUNTIME_ROOT/scripts/sync-opencode-security-assets.sh" \
+    --apply --capability-overlay --live-root "$OPENCODE_CAPABILITY_ROOT" >/dev/null
+  "$CAIRN_RUNTIME_ROOT/scripts/sync-opencode-plugin-assets.sh" \
+    --apply --capability-overlay --live-root "$OPENCODE_CAPABILITY_ROOT" >/dev/null
+  export OPENCODE_CONFIG_DIR="$OPENCODE_CAPABILITY_ROOT"
+fi
+
 cd "$ROOT_DIR"
 
-launch_args=()
 if [[ -n "${CAIRN_EXTRA_SETTINGS:-}" ]]; then
-  launch_args+=(--config "$CAIRN_EXTRA_SETTINGS")
+  export OPENCODE_CONFIG="$CAIRN_EXTRA_SETTINGS"
 fi
 
 if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   set +e
-  opencode "${launch_args[@]}" "$@"
+  opencode "$@"
   CAIRN_EXIT_STATUS=$?
   set -e
   export CAIRN_EXIT_STATUS
@@ -38,4 +80,4 @@ if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
   . "$ROOT_DIR/.ai/post-exit.sh" || true
   exit "$CAIRN_EXIT_STATUS"
 fi
-exec opencode "${launch_args[@]}" "$@"
+exec opencode "$@"

package/templates/start-pi.sh.template

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# Cairnkeep launcher for Pi. Loads this repo's private .ai/.env, runs the same
+# optional pre/post seams as the other launchers, and otherwise passes every
+# argument to Pi unchanged. Pi has no generic settings-file layering flag, so
+# CAIRN_EXTRA_SETTINGS is intentionally not translated into a CLI option.
+set -euo pipefail
+ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+if [[ -f "$ROOT_DIR/.ai/.env" ]]; then
+  set -a
+  # shellcheck disable=SC1091
+  . "$ROOT_DIR/.ai/.env"
+  set +a
+fi
+if [[ -f "$ROOT_DIR/.ai/pre-launch.sh" ]]; then
+  # shellcheck disable=SC1091
+  . "$ROOT_DIR/.ai/pre-launch.sh"
+fi
+cd "$ROOT_DIR"
+
+if [[ -f "$ROOT_DIR/.ai/post-exit.sh" ]]; then
+  set +e
+  pi "$@"
+  CAIRN_EXIT_STATUS=$?
+  set -e
+  export CAIRN_EXIT_STATUS
+  # shellcheck disable=SC1091
+  . "$ROOT_DIR/.ai/post-exit.sh" || true
+  exit "$CAIRN_EXIT_STATUS"
+fi
+exec pi "$@"

package/templates/trajectory-redaction.json.template

@@ -0,0 +1,4 @@
+{
+  "version": 1,
+  "patterns": []
+}