@cairnkeep/cli 2.5.0 → 2.7.0

package/docs/learning/lessons/L01-safe-trial.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 15 minutes
-**Tested with:** Cairnkeep 2.5.0
+**Tested with:** Cairnkeep 2.7.0
 
 ## Outcome
 
@@ -26,7 +26,7 @@ ephemeral; the named course volume is persistent.
 1. Pull the public image:
 
    ```bash
-   podman pull ghcr.io/cairnkeep/cairnkeep:2.5.0
+   podman pull ghcr.io/cairnkeep/cairnkeep:2.7.0
    ```
 
 2. Start the stdio server with a read-only root filesystem and no Linux
@@ -38,7 +38,7 @@ ephemeral; the named course volume is persistent.
      --read-only --cap-drop=all --security-opt=no-new-privileges \
      --tmpfs=/tmp:rw,noexec,nosuid,size=64m,mode=1777 \
      --volume cairnkeep-course-data:/data:Z,U \
-     ghcr.io/cairnkeep/cairnkeep:2.5.0 stdio
+     ghcr.io/cairnkeep/cairnkeep:2.7.0 stdio
    ```
 
 3. The process waits quietly for MCP input. Press `Ctrl-C` after confirming it
@@ -90,7 +90,3 @@ podman volume rm cairnkeep-course-data
 - Persistence belongs to an explicitly named volume.
 
 Next: [L02 - Install the local workflow](L02-installation.md).
-
-## Video
-
-Use [the L01 presenter script](../video-scripts/L01-safe-trial.md).

package/docs/learning/lessons/L02-installation.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 25 minutes
-**Tested with:** Cairnkeep 2.5.0 and Node.js 22 or newer
+**Tested with:** Cairnkeep 2.7.0 and Node.js 22 or newer
 
 ## Outcome
 
@@ -13,7 +13,7 @@ layer, and distinguish a complete installation from a partial one.
 ## Prerequisites
 
 - Node.js 22 or newer and npm.
-- Claude Code installed for the commands below. OpenCode and Kimi Code users
+- Claude Code installed for the commands below. OpenCode, Kimi Code, and Qwen Code users
   should follow the equivalent setup in
   [the operating guide](../../operating.md).
 - Permission to install an npm package globally for your user.
@@ -41,7 +41,7 @@ machine-level steps.
 2. Install Cairnkeep:
 
    ```bash
-   npm install --global @cairnkeep/cli@2.5.0
+   npm install --global @cairnkeep/cli@2.7.0
    cairn --version
    ```
 
@@ -99,14 +99,24 @@ installation.
 This registration starts `cairn memory-server` locally as a stdio child. It
 does not discover a server, send memory to a remote host, configure embeddings,
 enable session capture, or enable an optional document-RAG integration. Pi uses
-the separate `cairn sync-pi` trajectory adapter and still needs a user-selected
-bridge if Pi should expose MCP memory tools.
+the separate `cairn sync-pi` trajectory and graph-prompt adapter and still needs
+a user-selected bridge if Pi should expose MCP memory tools.
 
 Kimi Code can use the same memory server through its generated
 `.ai/start-kimi.sh` launcher, but its HTTP MCP configuration requires a literal
 URL rather than `${CAIRN_MEMORY_REMOTE_URL}`. Keep the resolved URL in a private
 `.kimi-code/mcp.json` and keep the bearer token in the environment. See
 [Harness compatibility](../../harness-compatibility.md#kimi-code).
+Its optional `cairn sync-kimi` Skill adds only the local `/graphify` delegate;
+it does not change memory transport or send graph data to a new destination.
+
+Qwen Code can use the generated `.ai/start-qwen.sh` launcher. Its project
+`.qwen/settings.json` supports environment references for both the remote URL
+and authorization header, so the file can contain names such as
+`${CAIRN_MEMORY_REMOTE_URL}` and `${CAIRN_MEMORY_HTTP_TOKEN}` instead of secret
+values. Keep this project settings file untracked and approve the generated MCP
+entry with `qwen mcp approve cairn-memory`. See
+[Harness compatibility](../../harness-compatibility.md#qwen-code).
 
 ## Clean up if you stop the evaluation
 
@@ -127,7 +137,3 @@ Do not delete memory stores as part of a course cleanup.
 - Default stdio memory is local.
 
 Next: [L03 - Bootstrap the first project](L03-first-project.md).
-
-## Video
-
-Use [the L02 presenter script](../video-scripts/L02-installation.md).

package/docs/learning/lessons/L03-first-project.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 25 minutes
-**Tested with:** Cairnkeep 2.5.0
+**Tested with:** Cairnkeep 2.7.0
 
 ## Outcome
 
@@ -115,7 +115,3 @@ inspect `.git/info/exclude` to see how contributor mode avoids shared changes.
 - Persistence is proven only after a new session recalls the accepted fact.
 
 Next: [L04 - Memory fundamentals](L04-memory-fundamentals.md).
-
-## Video
-
-Use [the L03 presenter script](../video-scripts/L03-first-project.md).

package/docs/learning/lessons/L04-memory-fundamentals.md

@@ -35,12 +35,6 @@ candidate.
 - No extracted candidate becomes durable without an explicit review action.
 - Enabling typed nodes changes discovery structure, not the authority of a fact.
 
-## Planned video
-
-Open with two contradictory memories, demonstrate search and superseding, then
-finish with the review queue. Target 12-15 minutes. Write the complete script in
-Wave 2 after the lab fixture is executable.
-
 ## Source material
 
 - [Operating guide](../../operating.md#the-workflow)

package/docs/learning/lessons/L05-daily-workflow.md

@@ -35,11 +35,6 @@ queue before exiting.
 - The learner can describe what to do at session start, before editing, and at
   session end.
 
-## Planned video
-
-Follow one small feature from session start to reviewed handoff. Target 15
-minutes and split wiki maintenance into a second video if rehearsal runs long.
-
 ## Source material
 
 - [Operating guide](../../operating.md#the-workflow)

package/docs/learning/lessons/L06-repository-quality.md

@@ -33,12 +33,6 @@ solution branch.
 - No scan reaches outside the disposable repository or its local processes.
 - The lab passes after remediation and fails in its tagged starter state.
 
-## Planned video
-
-This is the flagship value demonstration. Show one serious synthetic defect
-from discovery through validation and fix. Target 15 minutes; publish the full
-45-minute exercise as a workshop.
-
 ## Source material
 
 - [Operating guide](../../operating.md#the-workflow)

package/docs/learning/lessons/L07-privacy-and-storage.md

@@ -34,11 +34,6 @@ names, and prove that no remote destination was discovered.
 - The learner can stop when an effective destination is ambiguous.
 - Independent feature flags are not treated as one blanket consent switch.
 
-## Planned video
-
-Use two simple diagrams and one terminal preflight. Target 10 minutes. Do not
-demonstrate real endpoints or credentials.
-
 ## Source material
 
 - [Privacy and data flow](../../privacy-and-data-flow.md)

package/docs/learning/lessons/L08-multiple-machines.md

@@ -31,11 +31,6 @@ the pre-import backup.
 - The learner verifies counts and exact synthetic values on both sides.
 - No remote service is introduced merely to complete the migration lab.
 
-## Planned video
-
-Record the backup, migration, verification, and rollback without cuts that hide
-state transitions. Target 12 minutes.
-
 ## Source material
 
 - [Storage and deployment](../../storage.md#inspecting-and-moving-memory)

package/docs/learning/lessons/L09-domain-knowledge.md

@@ -32,11 +32,6 @@ verify the new answer. Then unset the integration and prove memory still works.
 - Updated content replaces stale retrieval results.
 - Disabling RAG leaves `/remember` and `/recall` healthy.
 
-## Planned video
-
-Lead with “optional, not required”, show query then sync, and finish by disabling
-the integration. Target 12 minutes.
-
 ## Source material
 
 - [Domain knowledge](../../domain-knowledge.md)

package/docs/learning/lessons/L10-context-exploration.md

@@ -33,11 +33,6 @@ invalidation. Disable the binary and verify standalone Cairnkeep remains usable.
 - The learner distinguishes exploration output from durable memory.
 - An unavailable explorer fails locally without breaking memory operations.
 
-## Planned video
-
-Compare a broad manual search with one cited exploration result. Target 10
-minutes and keep routing as a separate optional chapter.
-
 ## Source material
 
 - [Operating guide](../../operating.md#exploration-cache-context_explore-on-by-default)

package/docs/learning/lessons/L11-containers.md

@@ -32,11 +32,6 @@ only the course resources.
   volume is deliberately removed.
 - The learner can enumerate every mount and network boundary.
 
-## Planned video
-
-Use a diagram first, then replace a running container while retaining its
-volume. Target 15 minutes.
-
 ## Source material
 
 - [Containers](../../containers.md)

package/docs/learning/lessons/L12-managed-overlays.md

@@ -33,12 +33,6 @@ upgrades the pin, verifies fleet status, and rolls one project back.
 - Effective storage and service destinations are explainable before launch.
 - Upgrade and rollback preserve the disposable memory store.
 
-## Planned video
-
-Show the same project under public core and a generic managed overlay, then
-explain the small delta. Target 15 minutes; keep registry administration in the
-written operator lab.
-
 ## Source material
 
 - [Building a private overlay](../../building-an-overlay.md)

package/docs/learning/lessons/L13-session-evidence.md

@@ -57,12 +57,6 @@ cairn artifact list --json
   memory by purpose, store, lifecycle, and trust level.
 - Cleanup targets only the disposable course evidence.
 
-## Planned video
-
-Draw the evidence lifecycle, capture one synthetic session, inspect the redacted
-record, and find the resulting failure note. Target 14 minutes. Treat compaction
-and Pi as short boundary chapters rather than requiring three harness demos.
-
 ## Source material
 
 - [Operating guide: structured trajectories](../../operating.md#structured-session-trajectories-opt-in)

package/docs/learning/lessons/L14-typed-memory.md

@@ -38,12 +38,6 @@ import.
 - Imported values never appear in command diagnostics or course screenshots.
 - The learner does not present a logical note address as a host path.
 
-## Planned video
-
-Use a small type-and-tag diagram, then demonstrate filtered discovery and the
-dry-run/replay sequence. Target 12 minutes. Keep the full import limits in the
-written lesson rather than narrating a table of numbers.
-
 ## Source material
 
 - [Operating guide: typed memory nodes](../../operating.md#typed-memory-nodes-and-note-address-spaces-opt-in)

package/docs/learning/lessons/L15-capability-governance.md

@@ -43,12 +43,6 @@ CAIRN_CAPABILITY_CONTRACT=1 cairn capabilities logging enable
 - No callback record contains prompts, tool arguments, results, or memory values.
 - Disabling an optional capability does not break standalone memory.
 
-## Planned video
-
-Show precedence as three stacked layers, then perform one disable/reset cycle.
-Target 11 minutes. Use JSON status for evidence and avoid presenting a digest as
-a security signature or performance result.
-
 ## Source material
 
 - [Operating guide: managed capability contract](../../operating.md#managed-capability-contract-opt-in)

package/docs/learning/lessons/L16-evaluation.md

@@ -52,13 +52,6 @@ after the lab is rehearsed from the packaged CLI rather than a source clone.
   without claiming causality, significance, or product improvement.
 - Course cleanup is limited to its temporary contained experiment root.
 
-## Planned video
-
-Start with the claim boundary, validate before running, inspect one two-pass
-report, and close by marking the fixture `offline-framework`. Target 16 minutes.
-Publish ablation as a second short video if the complete schedule obscures the
-measurement concepts.
-
 ## Source material
 
 - [Operating guide: evaluation harness](../../operating.md#evaluation-harness-opt-in)

package/docs/learning/lessons/L17-agent-boundary.md

@@ -43,12 +43,6 @@ be required before any future implementation could act.
 - The learner can name at least one explicit future prerequisite and one
   unconditional human stop point.
 
-## Planned video
-
-Use one ownership diagram and one fictional proposal. Target 9 minutes. Put a
-persistent `DESIGN ONLY` label on every future component and end on the exact
-current-versus-future boundary.
-
 ## Source material
 
 - [Meta-agent design contract](../../design/meta-agent.md)

package/docs/learning/templates/lesson-template.md

@@ -58,7 +58,3 @@ Offer one bounded extension that is not required for the next lesson.
 ## Recap
 
 List three facts and link the next lesson.
-
-## Video
-
-Link to `../video-scripts/LXX-title.md` only after the script is verified.

package/docs/operating.md

@@ -18,7 +18,9 @@ installs. This guide covers all three in order.
 
 - Node.js 22 or newer (for the memory server) and a supported harness. Claude
   Code and OpenCode receive the full operating layer. Kimi Code receives the
-  memory MCP and launcher. Pi receives its native trajectory adapter.
+  memory MCP, launcher, and opt-in graph Skill; Qwen Code receives the memory
+  MCP and launcher. Pi receives its native trajectory adapter, graph prompt,
+  and launcher.
 - Optional: the `sqlite3` CLI for `cairn memory export`. Runtime memory and
   `cairn memory import` do not require it.
 - Optional: an OpenAI-compatible LLM endpoint for memory extraction and
@@ -158,10 +160,78 @@ Model selection stays operator-env-driven through the existing
 variables (see "Configuration" below) — the harness commits no default model
 and carries no known-good allowlist.
 
+## Optional Graphify workflow
+
+Graphify is an optional local structural index. Install only its isolated CLI:
+
+```bash
+uv tool install graphifyy
+# or: pipx install graphifyy
+```
+
+Do not run `graphify install`: Cairnkeep owns the harness commands, policies,
+and hooks, so Graphify-owned assets would duplicate that operating layer.
+With the managed capability contract enabled, run
+`cairn capabilities enable graph`; otherwise enable the compatibility setting
+`graphify.enabled` in `.planning/config.json`. Then use the managed command
+surface. Claude Code and OpenCode receive the native wrapper:
+
+```text
+/graphify build
+/graphify status
+/graphify query putTrajectory
+/graphify explain putTrajectory
+/graphify path putTrajectory resolveCapabilityStatus
+/graphify diff
+```
+
+Install the equivalent thin adapters for Kimi Code and Pi:
+
+```bash
+cairn sync-kimi --apply
+cairn sync-pi --apply
+```
+
+Kimi then exposes `/graphify` and `/skill:graphify`; Pi exposes `/graphify`.
+Both adapters delegate exclusively to the same portable CLI, which also remains
+available directly from their project shell:
+
+```bash
+cairn graph build
+cairn graph status
+cairn graph query putTrajectory
+cairn graph explain putTrajectory
+cairn graph path putTrajectory resolveCapabilityStatus
+cairn graph diff
+```
+
+The same direct CLI works with Qwen Code, Codex, and other shell-capable
+clients. This does not add a Pi MCP bridge or imply that those harnesses receive
+the rest of Cairnkeep's operating layer.
+
+All six modes delegate to `cairn graph`. Managed builds run Graphify's local
+code-only `update` path with provider credentials removed from the subprocess
+environment, then atomically publish validated artifacts under
+`.planning/graphs/`. Previous published artifacts are isolated during the scan
+so Graphify cannot re-index its own generated HTML/report/JSON. Managed builds
+do not perform Graphify's optional semantic document extraction. Prefer exact
+function, class, or file names; broad natural-language graph queries are less
+precise. Cairnkeep does not install or update Graphify automatically.
+
 ## Setup order (Kimi Code)
 
-Kimi Code can use the Cairnkeep memory MCP and the generated project launcher.
-It does not yet receive Cairnkeep-specific skills, commands, or hooks.
+Kimi Code can use the Cairnkeep memory MCP, generated project launcher, and one
+thin graph Skill. Install the Skill into `$KIMI_CODE_HOME` (default
+`~/.kimi-code`) with:
+
+```bash
+cairn sync-kimi --apply
+```
+
+Use `cairn sync-kimi --check` to detect drift or `--live-root DIR` for an
+isolated Kimi root. The command owns only `skills/graphify/SKILL.md`; `cairn
+uninstall --kimi-live-root DIR` removes it backup-first. It adds no hooks,
+agents, plugins, or new data flow.
 
 For local stdio memory, create `.kimi-code/mcp.json` in the project:
 
@@ -189,10 +259,41 @@ parses it before applying its private override. See
 [Harness compatibility](harness-compatibility.md#kimi-code) for the complete
 configuration and trust-boundary guidance.
 
+## Setup order (Qwen Code)
+
+Qwen Code can use the Cairnkeep memory MCP and the generated project launcher.
+It does not yet receive Cairnkeep-specific skills, commands, or hooks.
+
+For local stdio memory, create `.qwen/settings.json` in the project:
+
+```json
+{
+  "mcpServers": {
+    "cairn-memory": {
+      "command": "cairn",
+      "args": ["memory-server"]
+    }
+  }
+}
+```
+
+Review and approve the project server, then launch it:
+
+```bash
+qwen mcp approve cairn-memory
+./.ai/start-qwen.sh
+```
+
+For authenticated remote HTTP, use `httpUrl` plus environment-expanded headers
+in `.qwen/settings.json`. Keep the endpoint and bearer token in `.ai/.env` or a
+machine secret store, not in the JSON file. See
+[Harness compatibility](harness-compatibility.md#qwen-code) for the tested
+configuration, approval behavior, and overlay guidance.
+
 ## Setup order (Pi)
 
-Pi trajectory capture uses the same project scaffold and store, but its source
-is a native TypeScript extension installed into Pi's agent root:
+Pi trajectory capture uses the same project scaffold and store. Its sync also
+installs a thin `/graphify` prompt into Pi's agent root:
 
 ```bash
 npm install -g @cairnkeep/cli
@@ -208,8 +309,9 @@ a user-chosen Pi extension/bridge separately.
 
 Use `cairn sync-pi --check` to report drift without writing, or
 `--live-root DIR` to target an isolated Pi agent root. The command owns exactly
-`extensions/cairnkeep-trajectory.ts`; `cairn uninstall --pi-live-root DIR`
-removes that file backup-first and leaves every other Pi asset untouched.
+`extensions/cairnkeep-trajectory.ts` and `prompts/graphify.md`; `cairn
+uninstall --pi-live-root DIR` removes those files backup-first and leaves every
+other Pi asset untouched.
 
 The extension listens for Pi's native `session_shutdown` event and reads only
 the active branch from the read-only session manager. It returns before doing
@@ -663,13 +765,13 @@ maintain a running install — without forking the core. All are opt-in.
 ### Launcher seams
 
 The generic launchers (`.ai/start-claude.sh`, `.ai/start-opencode.sh`,
-`.ai/start-kimi.sh`, and `.ai/start-pi.sh`) run optional hooks around the
+`.ai/start-kimi.sh`, `.ai/start-qwen.sh`, and `.ai/start-pi.sh`) run optional hooks around the
 harness, each a no-op when absent:
 
 | Seam | When | Purpose |
 |---|---|---|
 | `.ai/pre-launch.sh` | sourced after `.env`, before launch | export env (e.g. a provider base URL / auth), refresh credentials, or abort by returning non-zero |
-| `CAIRN_EXTRA_SETTINGS` | read just before launch | path to a settings file layered on Claude Code (`--settings`) or OpenCode (`OPENCODE_CONFIG`); Kimi and Pi leave the variable available to hooks but do not interpret it |
+| `CAIRN_EXTRA_SETTINGS` | read just before launch | path to a settings file layered on Claude Code (`--settings`) or OpenCode (`OPENCODE_CONFIG`); Kimi, Qwen, and Pi leave the variable available to hooks but do not interpret it |
 | `.ai/post-exit.sh` | sourced after the harness exits | teardown; `CAIRN_EXIT_STATUS` holds the exit code |
 
 A wrapper that needs a non-default provider drops a `pre-launch.sh` that renders

package/docs/privacy-and-data-flow.md

@@ -16,6 +16,7 @@ request unless the corresponding endpoint and credential are configured.
 | `domain_knowledge_sync` | Files selected by the sync configuration | `ANYTHINGLLM_BASE_URL` |
 | `route_check` | A health request, with no memory or prompt content | `CAIRN_ROUTE_ENDPOINT` |
 | `context_explore` | Repository path and query are passed to the configured local executable | `CAIRN_EXPLORE_BINARY`; any further data flow is controlled by that tool |
+| Optional Graphify workflow | The repository path, exact query/symbol names, and local published graph path are passed to the operator-installed `graphify` executable | Local Graphify subprocess with a minimal environment and no provider credentials; managed build uses code-only `update`, never semantic document extraction |
 | Remote HTTP memory | MCP requests and responses, including memory content | The explicitly registered Cairnkeep HTTP server |
 | Opt-in trajectory capture | None | Local `<project>/.agentfs/trajectory.db` only; no model or HTTP path exists |
 | Opt-in capability callback records | None | Payload-free final metadata in local `<project>/.agentfs/trajectory.db`; HTTP transport is always skipped |

package/examples/eval/bundled-fake.json

@@ -1 +1 @@
-{"identifier":"cairn-offline-fake-v1","package_version":"2.5.0","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}
+{"identifier":"cairn-offline-fake-v1","package_version":"2.7.0","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}

package/kimi/skills/graphify/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: graphify
+description: Build, query, and inspect the local project graph exclusively through Cairnkeep
+type: flow
+---
+
+<!-- managed-by:cairnkeep -->
+# Cairnkeep graph
+
+Handle this request through Cairnkeep's public graph owner. The invocation
+arguments are:
+
+```text
+$ARGUMENTS
+```
+
+Accept exactly one of these forms:
+
+- `build`
+- `build --force`
+- `query <term>`
+- `status`
+- `diff`
+- `explain <symbol>`
+- `path <from> <to>`
+
+Invoke the Bash tool exactly once with the corresponding `cairn graph ...`
+command. Pass each term or symbol as one safely quoted argument. Return the
+command output verbatim and stop.
+
+If the arguments do not match a supported form, show the supported forms and
+stop without invoking a tool. Do not call the Graphify executable, edit graph
+artifacts, spawn another agent, or implement graph logic in this Skill.

package/mcp-memory-server/dist/capability-registry.js

@@ -6,7 +6,7 @@ const MAX_COMPATIBILITY_CONFIG_BYTES = 64 * 1024;
 function environmentName(id) {
     return `CAIRN_CAPABILITY_${id.toUpperCase().replaceAll(".", "_")}`;
 }
-async function readGraphCompatibility(projectRoot) {
+export async function isGraphCapabilityCompatible(projectRoot) {
     const planningDirectory = join(projectRoot, ".planning");
     const configPath = join(planningDirectory, "config.json");
     try {
@@ -84,7 +84,7 @@ export const CAPABILITY_REGISTRY = [
         compatibility_default: false,
         restart_required: false,
         logging_policy: "final-callback",
-        resolveCompatibility: ({ projectRoot, graphifyEnabled }) => graphifyEnabled ?? readGraphCompatibility(projectRoot),
+        resolveCompatibility: ({ projectRoot, graphifyEnabled }) => graphifyEnabled ?? isGraphCapabilityCompatible(projectRoot),
     },
     {
         id: "security.audit",