@cairnkeep/cli 2.6.0 → 2.7.0

package/docs/learning/lessons/L10-context-exploration.md

@@ -33,11 +33,6 @@ invalidation. Disable the binary and verify standalone Cairnkeep remains usable.
 - The learner distinguishes exploration output from durable memory.
 - An unavailable explorer fails locally without breaking memory operations.
 
-## Planned video
-
-Compare a broad manual search with one cited exploration result. Target 10
-minutes and keep routing as a separate optional chapter.
-
 ## Source material
 
 - [Operating guide](../../operating.md#exploration-cache-context_explore-on-by-default)

package/docs/learning/lessons/L11-containers.md

@@ -32,11 +32,6 @@ only the course resources.
   volume is deliberately removed.
 - The learner can enumerate every mount and network boundary.
 
-## Planned video
-
-Use a diagram first, then replace a running container while retaining its
-volume. Target 15 minutes.
-
 ## Source material
 
 - [Containers](../../containers.md)

package/docs/learning/lessons/L12-managed-overlays.md

@@ -33,12 +33,6 @@ upgrades the pin, verifies fleet status, and rolls one project back.
 - Effective storage and service destinations are explainable before launch.
 - Upgrade and rollback preserve the disposable memory store.
 
-## Planned video
-
-Show the same project under public core and a generic managed overlay, then
-explain the small delta. Target 15 minutes; keep registry administration in the
-written operator lab.
-
 ## Source material
 
 - [Building a private overlay](../../building-an-overlay.md)

package/docs/learning/lessons/L13-session-evidence.md

@@ -57,12 +57,6 @@ cairn artifact list --json
   memory by purpose, store, lifecycle, and trust level.
 - Cleanup targets only the disposable course evidence.
 
-## Planned video
-
-Draw the evidence lifecycle, capture one synthetic session, inspect the redacted
-record, and find the resulting failure note. Target 14 minutes. Treat compaction
-and Pi as short boundary chapters rather than requiring three harness demos.
-
 ## Source material
 
 - [Operating guide: structured trajectories](../../operating.md#structured-session-trajectories-opt-in)

package/docs/learning/lessons/L14-typed-memory.md

@@ -38,12 +38,6 @@ import.
 - Imported values never appear in command diagnostics or course screenshots.
 - The learner does not present a logical note address as a host path.
 
-## Planned video
-
-Use a small type-and-tag diagram, then demonstrate filtered discovery and the
-dry-run/replay sequence. Target 12 minutes. Keep the full import limits in the
-written lesson rather than narrating a table of numbers.
-
 ## Source material
 
 - [Operating guide: typed memory nodes](../../operating.md#typed-memory-nodes-and-note-address-spaces-opt-in)

package/docs/learning/lessons/L15-capability-governance.md

@@ -43,12 +43,6 @@ CAIRN_CAPABILITY_CONTRACT=1 cairn capabilities logging enable
 - No callback record contains prompts, tool arguments, results, or memory values.
 - Disabling an optional capability does not break standalone memory.
 
-## Planned video
-
-Show precedence as three stacked layers, then perform one disable/reset cycle.
-Target 11 minutes. Use JSON status for evidence and avoid presenting a digest as
-a security signature or performance result.
-
 ## Source material
 
 - [Operating guide: managed capability contract](../../operating.md#managed-capability-contract-opt-in)

package/docs/learning/lessons/L16-evaluation.md

@@ -52,13 +52,6 @@ after the lab is rehearsed from the packaged CLI rather than a source clone.
   without claiming causality, significance, or product improvement.
 - Course cleanup is limited to its temporary contained experiment root.
 
-## Planned video
-
-Start with the claim boundary, validate before running, inspect one two-pass
-report, and close by marking the fixture `offline-framework`. Target 16 minutes.
-Publish ablation as a second short video if the complete schedule obscures the
-measurement concepts.
-
 ## Source material
 
 - [Operating guide: evaluation harness](../../operating.md#evaluation-harness-opt-in)

package/docs/learning/lessons/L17-agent-boundary.md

@@ -43,12 +43,6 @@ be required before any future implementation could act.
 - The learner can name at least one explicit future prerequisite and one
   unconditional human stop point.
 
-## Planned video
-
-Use one ownership diagram and one fictional proposal. Target 9 minutes. Put a
-persistent `DESIGN ONLY` label on every future component and end on the exact
-current-versus-future boundary.
-
 ## Source material
 
 - [Meta-agent design contract](../../design/meta-agent.md)

package/docs/learning/templates/lesson-template.md

@@ -58,7 +58,3 @@ Offer one bounded extension that is not required for the next lesson.
 ## Recap
 
 List three facts and link the next lesson.
-
-## Video
-
-Link to `../video-scripts/LXX-title.md` only after the script is verified.

package/docs/operating.md

@@ -17,9 +17,10 @@ installs. This guide covers all three in order.
 ## Prerequisites
 
 - Node.js 22 or newer (for the memory server) and a supported harness. Claude
-  Code and OpenCode receive the full operating layer. Kimi Code and Qwen Code
-  receive the memory MCP and launcher. Pi receives its native trajectory
-  adapter.
+  Code and OpenCode receive the full operating layer. Kimi Code receives the
+  memory MCP, launcher, and opt-in graph Skill; Qwen Code receives the memory
+  MCP and launcher. Pi receives its native trajectory adapter, graph prompt,
+  and launcher.
 - Optional: the `sqlite3` CLI for `cairn memory export`. Runtime memory and
   `cairn memory import` do not require it.
 - Optional: an OpenAI-compatible LLM endpoint for memory extraction and
@@ -159,10 +160,78 @@ Model selection stays operator-env-driven through the existing
 variables (see "Configuration" below) — the harness commits no default model
 and carries no known-good allowlist.
 
+## Optional Graphify workflow
+
+Graphify is an optional local structural index. Install only its isolated CLI:
+
+```bash
+uv tool install graphifyy
+# or: pipx install graphifyy
+```
+
+Do not run `graphify install`: Cairnkeep owns the harness commands, policies,
+and hooks, so Graphify-owned assets would duplicate that operating layer.
+With the managed capability contract enabled, run
+`cairn capabilities enable graph`; otherwise enable the compatibility setting
+`graphify.enabled` in `.planning/config.json`. Then use the managed command
+surface. Claude Code and OpenCode receive the native wrapper:
+
+```text
+/graphify build
+/graphify status
+/graphify query putTrajectory
+/graphify explain putTrajectory
+/graphify path putTrajectory resolveCapabilityStatus
+/graphify diff
+```
+
+Install the equivalent thin adapters for Kimi Code and Pi:
+
+```bash
+cairn sync-kimi --apply
+cairn sync-pi --apply
+```
+
+Kimi then exposes `/graphify` and `/skill:graphify`; Pi exposes `/graphify`.
+Both adapters delegate exclusively to the same portable CLI, which also remains
+available directly from their project shell:
+
+```bash
+cairn graph build
+cairn graph status
+cairn graph query putTrajectory
+cairn graph explain putTrajectory
+cairn graph path putTrajectory resolveCapabilityStatus
+cairn graph diff
+```
+
+The same direct CLI works with Qwen Code, Codex, and other shell-capable
+clients. This does not add a Pi MCP bridge or imply that those harnesses receive
+the rest of Cairnkeep's operating layer.
+
+All six modes delegate to `cairn graph`. Managed builds run Graphify's local
+code-only `update` path with provider credentials removed from the subprocess
+environment, then atomically publish validated artifacts under
+`.planning/graphs/`. Previous published artifacts are isolated during the scan
+so Graphify cannot re-index its own generated HTML/report/JSON. Managed builds
+do not perform Graphify's optional semantic document extraction. Prefer exact
+function, class, or file names; broad natural-language graph queries are less
+precise. Cairnkeep does not install or update Graphify automatically.
+
 ## Setup order (Kimi Code)
 
-Kimi Code can use the Cairnkeep memory MCP and the generated project launcher.
-It does not yet receive Cairnkeep-specific skills, commands, or hooks.
+Kimi Code can use the Cairnkeep memory MCP, generated project launcher, and one
+thin graph Skill. Install the Skill into `$KIMI_CODE_HOME` (default
+`~/.kimi-code`) with:
+
+```bash
+cairn sync-kimi --apply
+```
+
+Use `cairn sync-kimi --check` to detect drift or `--live-root DIR` for an
+isolated Kimi root. The command owns only `skills/graphify/SKILL.md`; `cairn
+uninstall --kimi-live-root DIR` removes it backup-first. It adds no hooks,
+agents, plugins, or new data flow.
 
 For local stdio memory, create `.kimi-code/mcp.json` in the project:
 
@@ -223,8 +292,8 @@ configuration, approval behavior, and overlay guidance.
 
 ## Setup order (Pi)
 
-Pi trajectory capture uses the same project scaffold and store, but its source
-is a native TypeScript extension installed into Pi's agent root:
+Pi trajectory capture uses the same project scaffold and store. Its sync also
+installs a thin `/graphify` prompt into Pi's agent root:
 
 ```bash
 npm install -g @cairnkeep/cli
@@ -240,8 +309,9 @@ a user-chosen Pi extension/bridge separately.
 
 Use `cairn sync-pi --check` to report drift without writing, or
 `--live-root DIR` to target an isolated Pi agent root. The command owns exactly
-`extensions/cairnkeep-trajectory.ts`; `cairn uninstall --pi-live-root DIR`
-removes that file backup-first and leaves every other Pi asset untouched.
+`extensions/cairnkeep-trajectory.ts` and `prompts/graphify.md`; `cairn
+uninstall --pi-live-root DIR` removes those files backup-first and leaves every
+other Pi asset untouched.
 
 The extension listens for Pi's native `session_shutdown` event and reads only
 the active branch from the read-only session manager. It returns before doing

package/docs/privacy-and-data-flow.md

@@ -16,6 +16,7 @@ request unless the corresponding endpoint and credential are configured.
 | `domain_knowledge_sync` | Files selected by the sync configuration | `ANYTHINGLLM_BASE_URL` |
 | `route_check` | A health request, with no memory or prompt content | `CAIRN_ROUTE_ENDPOINT` |
 | `context_explore` | Repository path and query are passed to the configured local executable | `CAIRN_EXPLORE_BINARY`; any further data flow is controlled by that tool |
+| Optional Graphify workflow | The repository path, exact query/symbol names, and local published graph path are passed to the operator-installed `graphify` executable | Local Graphify subprocess with a minimal environment and no provider credentials; managed build uses code-only `update`, never semantic document extraction |
 | Remote HTTP memory | MCP requests and responses, including memory content | The explicitly registered Cairnkeep HTTP server |
 | Opt-in trajectory capture | None | Local `<project>/.agentfs/trajectory.db` only; no model or HTTP path exists |
 | Opt-in capability callback records | None | Payload-free final metadata in local `<project>/.agentfs/trajectory.db`; HTTP transport is always skipped |

package/examples/eval/bundled-fake.json

@@ -1 +1 @@
-{"identifier":"cairn-offline-fake-v1","package_version":"2.6.0","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}
+{"identifier":"cairn-offline-fake-v1","package_version":"2.7.0","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}

package/kimi/skills/graphify/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: graphify
+description: Build, query, and inspect the local project graph exclusively through Cairnkeep
+type: flow
+---
+
+<!-- managed-by:cairnkeep -->
+# Cairnkeep graph
+
+Handle this request through Cairnkeep's public graph owner. The invocation
+arguments are:
+
+```text
+$ARGUMENTS
+```
+
+Accept exactly one of these forms:
+
+- `build`
+- `build --force`
+- `query <term>`
+- `status`
+- `diff`
+- `explain <symbol>`
+- `path <from> <to>`
+
+Invoke the Bash tool exactly once with the corresponding `cairn graph ...`
+command. Pass each term or symbol as one safely quoted argument. Return the
+command output verbatim and stop.
+
+If the arguments do not match a supported form, show the supported forms and
+stop without invoking a tool. Do not call the Graphify executable, edit graph
+artifacts, spawn another agent, or implement graph logic in this Skill.

package/mcp-memory-server/dist/capability-registry.js

@@ -6,7 +6,7 @@ const MAX_COMPATIBILITY_CONFIG_BYTES = 64 * 1024;
 function environmentName(id) {
     return `CAIRN_CAPABILITY_${id.toUpperCase().replaceAll(".", "_")}`;
 }
-async function readGraphCompatibility(projectRoot) {
+export async function isGraphCapabilityCompatible(projectRoot) {
     const planningDirectory = join(projectRoot, ".planning");
     const configPath = join(planningDirectory, "config.json");
     try {
@@ -84,7 +84,7 @@ export const CAPABILITY_REGISTRY = [
         compatibility_default: false,
         restart_required: false,
         logging_policy: "final-callback",
-        resolveCompatibility: ({ projectRoot, graphifyEnabled }) => graphifyEnabled ?? readGraphCompatibility(projectRoot),
+        resolveCompatibility: ({ projectRoot, graphifyEnabled }) => graphifyEnabled ?? isGraphCapabilityCompatible(projectRoot),
     },
     {
         id: "security.audit",