@cairnkeep/cli 2.6.0 → 2.8.0

package/scripts/sync-pi-assets.sh

@@ -5,8 +5,8 @@ usage() {
   cat <<'EOF'
 Usage: sync-pi-assets.sh [--check|--apply] [--live-root PATH]
 
-Compare or sync the repo-managed Pi extension assets against the live Pi agent
-configuration tree.
+Compare or sync the repo-managed Pi extension and prompt assets against the
+live Pi agent configuration tree.
 
 Options:
   --check            Verify managed live assets match the rendered repo copies (default)
@@ -20,7 +20,10 @@ ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
 SOURCE_ROOT="$ROOT_DIR/pi"
 LIVE_ROOT="${PI_CODING_AGENT_DIR:-$HOME/.pi/agent}"
 MODE="check"
-ASSET="extensions/cairnkeep-trajectory.ts"
+ASSETS=(
+  "extensions/cairnkeep-trajectory.ts"
+  "prompts/graphify.md"
+)
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
@@ -33,40 +36,58 @@ while [[ $# -gt 0 ]]; do
 done
 
 render_asset() {
-  sed "s|@@INFRA_ROOT@@|$ROOT_DIR|g" "$SOURCE_ROOT/$ASSET"
+  local rel="$1"
+  if [[ "$rel" == "extensions/cairnkeep-trajectory.ts" ]]; then
+    sed "s|@@INFRA_ROOT@@|$ROOT_DIR|g" "$SOURCE_ROOT/$rel"
+  else
+    cat "$SOURCE_ROOT/$rel"
+  fi
+}
+
+ensure_sources() {
+  local rel
+  for rel in "${ASSETS[@]}"; do
+    [[ -f "$SOURCE_ROOT/$rel" ]] || {
+      echo "Missing repo-managed source asset: $SOURCE_ROOT/$rel" >&2
+      return 2
+    }
+  done
 }
 
-check_asset() {
-  [[ -f "$SOURCE_ROOT/$ASSET" ]] || {
-    echo "Missing repo-managed source asset: $SOURCE_ROOT/$ASSET" >&2
-    return 2
-  }
-  [[ -f "$LIVE_ROOT/$ASSET" ]] || {
-    echo "Missing live Pi extension under $LIVE_ROOT: $ASSET" >&2
-    return 1
-  }
-  cmp -s <(render_asset) "$LIVE_ROOT/$ASSET" || {
-    echo "Out-of-sync live Pi extension under $LIVE_ROOT: $ASSET" >&2
-    return 1
-  }
+check_assets() {
+  local rel
+  local failed=0
+  for rel in "${ASSETS[@]}"; do
+    if [[ ! -f "$LIVE_ROOT/$rel" ]]; then
+      echo "Missing live Pi asset under $LIVE_ROOT: $rel" >&2
+      failed=1
+    elif ! cmp -s <(render_asset "$rel") "$LIVE_ROOT/$rel"; then
+      echo "Out-of-sync live Pi asset under $LIVE_ROOT: $rel" >&2
+      failed=1
+    fi
+  done
+  return "$failed"
 }
 
+ensure_sources
+
 if [[ "$MODE" == "apply" ]]; then
-  [[ -f "$SOURCE_ROOT/$ASSET" ]] || {
-    echo "Missing repo-managed source asset: $SOURCE_ROOT/$ASSET" >&2
-    exit 2
-  }
-  mkdir -p "$(dirname "$LIVE_ROOT/$ASSET")"
-  if [[ -f "$LIVE_ROOT/$ASSET" ]] && cmp -s <(render_asset) "$LIVE_ROOT/$ASSET"; then
-    echo "Applied 0 Pi extension asset(s); 1 already matched."
-  else
+  updated=0
+  unchanged=0
+  for rel in "${ASSETS[@]}"; do
+    mkdir -p "$(dirname "$LIVE_ROOT/$rel")"
+    if [[ -f "$LIVE_ROOT/$rel" ]] && cmp -s <(render_asset "$rel") "$LIVE_ROOT/$rel"; then
+      unchanged=$((unchanged + 1))
+      continue
+    fi
     rendered_tmp=$(mktemp)
-    render_asset > "$rendered_tmp"
-    install -m 0644 "$rendered_tmp" "$LIVE_ROOT/$ASSET"
+    render_asset "$rel" > "$rendered_tmp"
+    install -m 0644 "$rendered_tmp" "$LIVE_ROOT/$rel"
     rm -f "$rendered_tmp"
-    echo "Applied 1 Pi extension asset(s); 0 already matched."
-  fi
+    updated=$((updated + 1))
+  done
+  printf 'Applied %s Pi asset(s); %s already matched.\n' "$updated" "$unchanged"
 fi
 
-check_asset
-printf 'Pi extension assets are in sync under %s\n' "$LIVE_ROOT"
+check_assets
+printf 'Pi extension and graph prompt are in sync under %s\n' "$LIVE_ROOT"

package/scripts/test-bootstrap-untracked.sh

@@ -56,6 +56,27 @@ git -C "$tmp/repo" init -q
 [[ -x "$tmp/repo/.ai/start-kimi.sh" ]] || fail "Kimi launcher missing"
 [[ -x "$tmp/repo/.ai/start-qwen.sh" ]] || fail "Qwen launcher missing"
 [[ -f "$tmp/repo/.planning/config.json" ]] || fail "planning layer missing"
+graph_policy="$tmp/repo/.planning/graphs/policy.md"
+grep -qF '`uv tool install graphifyy`' "$graph_policy" ||
+  fail "Graphify policy must install the CLI in an isolated uv tool environment"
+if grep -qF '`uv pip install graphifyy && graphify install`' "$graph_policy"; then
+  fail "Graphify policy must not install Graphify-owned skills or hooks"
+fi
+if ! grep -qF 'Do not run' "$graph_policy" ||
+  ! grep -qF '`graphify install`: Cairnkeep owns' "$graph_policy"; then
+  fail "Graphify policy must explain that Cairnkeep owns the harness wiring"
+fi
+grep -qF '`/graphify build`' "$graph_policy" ||
+  fail "Graphify policy must name Cairnkeep's installed build command"
+grep -qF '`cairn sync-kimi' "$graph_policy" ||
+  fail "Graphify policy must identify the Kimi thin adapter"
+grep -qF '`cairn sync-pi' "$graph_policy" ||
+  fail "Graphify policy must identify the Pi thin adapter"
+grep -qF '`cairn graph build`' "$graph_policy" ||
+  fail "Graphify policy must provide the portable CLI equivalent"
+if grep -qF '/gsd-graphify' "$graph_policy"; then
+  fail "Graphify policy must not name the GSD-internal command"
+fi
 [[ -f "$tmp/repo/.agentfs/.gitignore" ]] || fail "project-memory ignore guard missing"
 [[ -z "$(git -C "$tmp/repo" status --porcelain)" ]] || fail "scaffold visible to git"
 grep -qxF "/.ai/" "$tmp/repo/.git/info/exclude" || fail "missing /.ai/ exclude entry"

package/scripts/test-cli-dispatch.sh

@@ -11,15 +11,19 @@ tmp=$(mktemp -d); trap 'rm -rf "$tmp"' EXIT
 "$cairn" help | grep -q "cairn audit-timer" || fail "help missing audit-timer"
 "$cairn" help | grep -q "cairn sync" || fail "help missing sync"
 "$cairn" help | grep -q "cairn sync-pi" || fail "help missing sync-pi"
+"$cairn" help | grep -q "cairn sync-kimi" || fail "help missing sync-kimi"
 "$cairn" help | grep -q "cairn memory-server" || fail "help missing memory-server"
 "$cairn" help | grep -q "cairn notes" || fail "help missing notes"
 "$cairn" help | grep -q "cairn artifact <list|show|delete|prune>" || fail "help missing artifact"
 "$cairn" help | grep -q "cairn capabilities <list|status|enable|disable|reset|logging>" || fail "help missing capabilities"
+"$cairn" help | grep -q "cairn graph <build|query|status|diff|explain|path>" || fail "help missing graph"
 "$cairn" sync --help >/dev/null 2>&1 || fail "cairn sync dispatch"
 "$cairn" sync-pi --help >/dev/null 2>&1 || fail "cairn sync-pi dispatch"
+"$cairn" sync-kimi --help >/dev/null 2>&1 || fail "cairn sync-kimi dispatch"
 env -u CAIRN_NOTE_DISTILLATION "$cairn" notes --help >/dev/null 2>&1 || fail "cairn notes dispatch"
 "$cairn" artifact --help | grep -q "cairn artifact list" || fail "cairn artifact dispatch"
 "$cairn" capabilities --help >"$tmp/capabilities-help" 2>/dev/null || fail "cairn capabilities dispatch"
+"$cairn" graph --help | grep -q "cairn graph explain <symbol>" || fail "cairn graph dispatch"
 grep -qxF 'MCP capability changes require a memory-server restart. Operating capability' "$tmp/capabilities-help" || fail "capability help missing exact restart wording"
 grep -qxF 'changes apply on the next invocation.' "$tmp/capabilities-help" || fail "capability help missing exact invocation wording"
 if grep -Eq '^  cairn capabilities (guard|start|finish|doctor)' "$tmp/capabilities-help"; then

package/scripts/test-completion.sh

@@ -14,6 +14,7 @@ done
 capability_ids='memory.write memory.search notes.distill wiki graph security.audit route.check context.explore'
 eval_commands='validate run ablate report prune delete'
 eval_flags='--task-set --adapter --output --repetitions --seed --json --yes --disable --experiment --older-than-days --dry-run'
+skill_commands='harvest list show review propose evaluate apply rollback'
 for shell in bash zsh fish; do
   grep -q 'capabilities' "$tmp/$shell"
   grep -q 'list.*status.*enable.*disable.*reset.*logging\|list status enable disable reset logging' "$tmp/$shell"
@@ -37,6 +38,11 @@ for shell in bash zsh fish; do
     echo "completion exposed a private eval lifecycle operation for $shell" >&2
     exit 1
   fi
+  grep -q 'skill' "$tmp/$shell"
+  grep -q 'harvest.*list.*show.*review.*propose.*evaluate.*apply.*rollback\|harvest list show review propose evaluate apply rollback' "$tmp/$shell"
+  for skill_flag in --candidate --exploration-task-set --confirmation-task-set --evaluation --application --confirm; do
+    grep -q -- "$skill_flag\|-l ${skill_flag#--}" "$tmp/$shell"
+  done
 done
 
 "$ROOT/bin/cairn" help >"$tmp/root-help"
@@ -52,6 +58,11 @@ if grep -q 'doctor-diagnosis' "$tmp/eval-help"; then
   echo 'eval help exposed a private lifecycle operation' >&2
   exit 1
 fi
+grep -qF 'cairn skill <harvest|list|show|review|propose|evaluate|apply|rollback>' "$tmp/root-help"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/skill-help"
+for command in $skill_commands; do
+  grep -q "cairn skill $command" "$tmp/skill-help"
+done
 
 node - "$ROOT/mcp-memory-server/src/capability-registry.ts" "$tmp/bash" "$tmp/zsh" "$tmp/fish" <<'NODE'
 const fs = require("fs");
@@ -71,14 +82,19 @@ grep -q '#compdef cairn' "$tmp/zsh"
 grep -q 'complete -c cairn' "$tmp/fish"
 for shell in bash zsh; do
   grep -q 'sync-pi' "$tmp/$shell"
+  grep -q 'sync-kimi' "$tmp/$shell"
   grep -q -- '--live-root' "$tmp/$shell"
 done
 grep -q 'sync-pi' "$tmp/fish"
+grep -q 'sync-kimi' "$tmp/fish"
+grep -q 'not __fish_seen_subcommand_from .*sync-pi sync-kimi' "$tmp/fish"
 grep -q -- '-l live-root' "$tmp/fish"
 for shell in bash zsh fish; do
   grep -q 'notes' "$tmp/$shell"
   grep -q 'distill.*search-error.*promote.*doctor\|distill search-error promote doctor' "$tmp/$shell"
   grep -q 'artifact' "$tmp/$shell"
+  grep -q 'graph' "$tmp/$shell"
+  grep -q 'build.*query.*status.*diff.*explain.*path\|build query status diff explain path' "$tmp/$shell"
   grep -q 'list.*show.*delete.*prune' "$tmp/$shell"
   grep -q -- '--json\|-l json' "$tmp/$shell"
   grep -q -- '--dry-run\|-l dry-run' "$tmp/$shell"

package/scripts/test-graph-harness-adapters.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# Contract test: Pi and Kimi expose thin graph adapters owned by `cairn graph`.
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+tmp=$(mktemp -d)
+trap 'rm -rf "$tmp"' EXIT
+fail() { echo "FAIL: $1" >&2; exit 1; }
+
+PI_SOURCE="$ROOT/pi/prompts/graphify.md"
+KIMI_SOURCE="$ROOT/kimi/skills/graphify/SKILL.md"
+
+[[ -f "$PI_SOURCE" ]] || fail "Pi /graphify prompt source is missing"
+[[ -f "$KIMI_SOURCE" ]] || fail "Kimi graphify skill source is missing"
+
+for adapter in "$PI_SOURCE" "$KIMI_SOURCE"; do
+  grep -qF 'cairn graph' "$adapter" || fail "adapter does not delegate to cairn graph: $adapter"
+  if grep -Ei '(^|[^/[:alnum:]_-])graphify[[:space:]]+(build|update|query|status|diff|explain|path)' "$adapter" >/dev/null; then
+    fail "adapter invokes Graphify directly: $adapter"
+  fi
+  if grep -Ei '(^|[[:space:]`])(curl|git|node|npm|npx|python|python3)[[:space:]]' "$adapter" >/dev/null; then
+    fail "adapter introduces a second executable delegate: $adapter"
+  fi
+done
+
+grep -qF '$ARGUMENTS' "$PI_SOURCE" || fail "Pi prompt does not forward command arguments"
+grep -qF 'name: graphify' "$KIMI_SOURCE" || fail "Kimi skill does not register as graphify"
+grep -qF '$ARGUMENTS' "$KIMI_SOURCE" || fail "Kimi skill does not forward command arguments"
+
+PI_LIVE="$tmp/pi"
+"$ROOT/scripts/sync-pi-assets.sh" --apply --live-root "$PI_LIVE" >"$tmp/pi-first"
+[[ -f "$PI_LIVE/extensions/cairnkeep-trajectory.ts" ]] || fail "Pi sync omitted trajectory extension"
+cmp -s "$PI_SOURCE" "$PI_LIVE/prompts/graphify.md" || fail "Pi sync changed graphify prompt bytes"
+"$ROOT/scripts/sync-pi-assets.sh" --apply --live-root "$PI_LIVE" >"$tmp/pi-second"
+grep -qF 'Applied 0 Pi asset(s); 2 already matched.' "$tmp/pi-second" || fail "Pi sync is not idempotent"
+
+KIMI_LIVE="$tmp/kimi"
+"$ROOT/scripts/sync-kimi-assets.sh" --apply --live-root "$KIMI_LIVE" >"$tmp/kimi-first"
+cmp -s "$KIMI_SOURCE" "$KIMI_LIVE/skills/graphify/SKILL.md" || fail "Kimi sync changed graphify skill bytes"
+"$ROOT/scripts/sync-kimi-assets.sh" --apply --live-root "$KIMI_LIVE" >"$tmp/kimi-second"
+grep -qF 'Applied 0 Kimi asset(s); 1 already matched.' "$tmp/kimi-second" || fail "Kimi sync is not idempotent"
+
+"$ROOT/bin/cairn" help | grep -qF 'cairn sync-kimi' || fail "CLI help omits sync-kimi"
+"$ROOT/bin/cairn" sync-kimi --help >/dev/null || fail "CLI does not dispatch sync-kimi"
+
+echo "PASS: thin Pi and Kimi graph adapters delegate only to cairn graph"

package/scripts/test-launcher-hooks.sh

@@ -433,8 +433,10 @@ qwen_launcher="$repo/.ai/start-qwen.sh"
 # than requiring a standalone banner before the config gate.
 ! grep -qF '**Before ANY tool calls**, display this banner:' "$ROOT/opencode/command/graphify.md" \
   || fail "OpenCode graphify can stop after its pre-tool banner"
-grep -qF '**First action:** invoke the Read tool' "$ROOT/opencode/command/graphify.md" \
-  || fail "OpenCode graphify does not require the config-gate tool call first"
+! grep -qF '**First action:** invoke the Read tool' "$ROOT/opencode/command/graphify.md" \
+  || fail "OpenCode graphify still duplicates the Cairnkeep-owned capability gate"
+grep -qF '`cairn graph` operation enforces the typed `graph` capability' "$ROOT/opencode/command/graphify.md" \
+  || fail "OpenCode graphify does not delegate its capability gate to the owner"
 grep -qF '**Invoke the shell tool** with this exact command' "$ROOT/opencode/command/graphify.md" \
   || fail "OpenCode graphify does not require real shell delegation"
 grep -qF '<argument>$ARGUMENTS</argument>' "$ROOT/opencode/command/graphify.md" \

package/scripts/test-learning-docs.sh

@@ -6,11 +6,10 @@ cd "$ROOT"
 
 version=$(node -p "require('./package.json').version")
 landing=docs/learning/README.md
-production=docs/learning/PRODUCTION-PLAN.md
 coverage=docs/learning/CURRICULUM-MAP.md
 feature_guide=docs/learning/FEATURE-GUIDE.md
 
-[[ -f "$landing" && -f "$production" && -f "$coverage" && -f "$feature_guide" ]]
+[[ -f "$landing" && -f "$coverage" && -f "$feature_guide" ]]
 grep -qF 'docs/learning/README.md' README.md
 grep -qF "**Baseline:** Cairnkeep $version" "$coverage"
 grep -qF "**Baseline:** Cairnkeep $version" "$feature_guide"
@@ -22,7 +21,7 @@ done
 
 ready=0
 brief=0
-for number in $(seq -w 0 17); do
+for number in $(seq -w 0 19); do
   matches=(docs/learning/lessons/L"$number"-*.md)
   [[ ${#matches[@]} -eq 1 && -f ${matches[0]} ]] || {
     echo "learning path must contain exactly one L$number lesson" >&2
@@ -33,24 +32,27 @@ for number in $(seq -w 0 17); do
   if grep -q '^\*\*Status:\*\* Ready' "$lesson"; then
     ready=$((ready + 1))
     grep -qF "Tested with:** Cairnkeep $version" "$lesson"
-    script=$(sed -n 's|.*(\.\./video-scripts/\([^)]*\)).*|docs/learning/video-scripts/\1|p' "$lesson")
-    [[ -n "$script" && -f "$script" ]] || {
-      echo "ready lesson has no presenter script: $lesson" >&2
-      exit 1
-    }
     grep -q '^## Common failures$' "$lesson"
     grep -q '^## Privacy and trust boundary$' "$lesson"
   elif grep -q '^\*\*Status:\*\* Brief' "$lesson"; then
     brief=$((brief + 1))
     grep -q '^## Acceptance criteria$' "$lesson"
-    grep -q '^## Planned video$' "$lesson"
   else
     echo "lesson has an unsupported status: $lesson" >&2
     exit 1
   fi
 done
 
-[[ $ready -eq 4 && $brief -eq 14 ]] || {
+graph_lesson=docs/learning/lessons/L18-local-code-graph.md
+for mode in build query status diff explain path; do
+  grep -qF "cairn graph $mode" "$graph_lesson"
+done
+grep -qF 'Do not run `graphify install`' "$graph_lesson"
+grep -qF '`cairn sync-kimi --apply`' "$graph_lesson"
+grep -qF '`cairn sync-pi --apply`' "$graph_lesson"
+grep -qF '`graphify-out/`' "$graph_lesson"
+
+[[ $ready -eq 4 && $brief -eq 16 ]] || {
   echo "unexpected learning status totals: ready=$ready brief=$brief" >&2
   exit 1
 }
@@ -91,4 +93,4 @@ for (const file of markdownFiles("docs/learning")) {
 }
 NODE
 
-echo "PASS: learning path structure, readiness, scripts, and version alignment"
+echo "PASS: public learning path structure, readiness, links, and version alignment"

package/scripts/test-package-install.sh

@@ -19,6 +19,7 @@ server_dev_dependencies_before=$(manifest_field "$ROOT/mcp-memory-server/package
 root_lock_before=$(sha256sum "$ROOT/package-lock.json" | cut -d' ' -f1)
 server_lock_before=$(sha256sum "$ROOT/mcp-memory-server/package-lock.json" | cut -d' ' -f1)
 node "$ROOT/mcp-memory-server/dist/eval-cli.js" --help >"$tmp/source-eval-help"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/source-skill-help"
 env -u CAIRN_EVAL "$ROOT/bin/cairn" eval validate \
   --task-set "$tmp/source-unread-task-set" \
   --adapter "$tmp/source-unread-adapter" \
@@ -52,6 +53,11 @@ env -u CAIRN_NOTE_DISTILLATION cairn notes --help >/dev/null \
   || fail "installed package omitted the notes command"
 
 installed_root="$tmp/prefix/lib/node_modules/@cairnkeep/cli"
+cairn skill --help >"$tmp/installed-skill-help"
+cmp -s "$tmp/source-skill-help" "$tmp/installed-skill-help" || \
+  fail "source and installed skill help differ"
+cairn skill list --project "$tmp/project" --json >"$tmp/installed-skill-list.json" || \
+  fail "installed package skill list failed"
 cairn eval --help >"$tmp/installed-eval-help"
 cmp -s "$tmp/source-eval-help" "$tmp/installed-eval-help" || \
   fail "source and installed eval help differ"
@@ -80,6 +86,18 @@ do
   [[ -f "$installed_root/$required" ]] || fail "npm tarball omitted $required"
 done
 
+for required in \
+  schemas/skill-adapter.schema.json \
+  schemas/skill-proposal-protocol.schema.json \
+  mcp-memory-server/dist/skill-schema.js \
+  mcp-memory-server/dist/skill-store.js \
+  mcp-memory-server/dist/skill-evaluation.js \
+  mcp-memory-server/dist/skill-cli.js \
+  docs/skill-improvement.md
+do
+  [[ -f "$installed_root/$required" ]] || fail "npm tarball omitted $required"
+done
+
 for required in \
   schemas/eval-task-set.schema.json \
   schemas/eval-adapter.schema.json \
@@ -218,8 +236,14 @@ NODE
   fail "npm tarball omitted the default AnythingLLM sync script"
 [[ -f "$installed_root/pi/extensions/cairnkeep-trajectory.ts" ]] || \
   fail "npm tarball omitted the Pi trajectory extension"
+[[ -f "$installed_root/pi/prompts/graphify.md" ]] || \
+  fail "npm tarball omitted the Pi graph prompt"
+[[ -f "$installed_root/kimi/skills/graphify/SKILL.md" ]] || \
+  fail "npm tarball omitted the Kimi graph Skill"
 [[ -x "$installed_root/scripts/sync-pi-assets.sh" ]] || \
   fail "npm tarball omitted the Pi sync command"
+[[ -x "$installed_root/scripts/sync-kimi-assets.sh" ]] || \
+  fail "npm tarball omitted the Kimi sync command"
 [[ -f "$installed_root/templates/start-pi.sh.template" ]] || \
   fail "npm tarball omitted the Pi launcher template"
 [[ -f "$installed_root/templates/start-kimi.sh.template" ]] || \

package/scripts/test-skill-cli.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+tmp=$(mktemp -d)
+trap 'rm -rf "$tmp"' EXIT
+
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/help"
+for operation in harvest list show review propose evaluate apply rollback; do
+  grep -q "$operation" "$tmp/help" || { echo "FAIL: skill help omitted $operation" >&2; exit 1; }
+done
+
+mkdir -p "$tmp/project"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" list --project "$tmp/project" --json >"$tmp/list.json"
+node -e '
+const value = require(process.argv[1]);
+for (const key of ["candidates", "proposals", "evaluations", "applications"]) {
+  if (!Array.isArray(value[key]) || value[key].length !== 0) process.exit(1);
+}
+' "$tmp/list.json"
+
+if env -u CAIRN_EVAL node "$ROOT/mcp-memory-server/dist/skill-cli.js" evaluate \
+  --project "$tmp/project" --proposal missing --exploration-task-set missing \
+  --confirmation-task-set missing --adapter missing --yes >"$tmp/out" 2>"$tmp/err"; then
+  echo "FAIL: disabled skill evaluation succeeded" >&2
+  exit 1
+fi
+grep -q 'disabled' "$tmp/err" || { echo "FAIL: disabled skill evaluation did not fail closed" >&2; exit 1; }
+
+echo "PASS: installed-style skill CLI discovery and default-off gate"

package/scripts/test-trajectory-hooks.sh

@@ -127,6 +127,8 @@ pi_live="$tmp/pi-live"
 render "$ROOT/pi/extensions/cairnkeep-trajectory.ts" "$tmp/expected-pi-capture.ts"
 cmp -s "$tmp/expected-pi-capture.ts" "$pi_live/extensions/cairnkeep-trajectory.ts" \
   || fail "installed Pi trajectory extension differs from rendered source"
+cmp -s "$ROOT/pi/prompts/graphify.md" "$pi_live/prompts/graphify.md" \
+  || fail "installed Pi graph prompt differs from source"
 [[ $(find "$pi_live" -type f -name 'cairnkeep-trajectory.ts' | wc -l) -eq 1 ]] \
   || fail "Pi trajectory extension is duplicated"
 
@@ -136,7 +138,9 @@ cmp -s "$tmp/expected-pi-capture.ts" "$pi_live/extensions/cairnkeep-trajectory.t
   || fail "Claude memory-capture hook registration is missing or duplicated"
 [[ $(grep -c 'plugins/memory-capture.ts' "$ROOT/scripts/sync-opencode-plugin-assets.sh") -eq 1 ]] \
   || fail "OpenCode memory-capture plugin asset is missing or duplicated"
-[[ $(grep -c 'extensions/cairnkeep-trajectory.ts' "$ROOT/scripts/sync-pi-assets.sh") -eq 1 ]] \
+[[ $(grep -c '^  "extensions/cairnkeep-trajectory.ts"' "$ROOT/scripts/sync-pi-assets.sh") -eq 1 ]] \
   || fail "Pi trajectory extension asset is missing or duplicated"
+[[ $(grep -c '^  "prompts/graphify.md"' "$ROOT/scripts/sync-pi-assets.sh") -eq 1 ]] \
+  || fail "Pi graph prompt asset is missing or duplicated"
 
 echo "PASS: Claude/OpenCode/Pi trajectory hooks and flag-off regression"

package/scripts/test-uninstall.sh

@@ -82,12 +82,14 @@ chmod +x "$SB/bin/"*
 export HOME="$SB/home" XDG_CONFIG_HOME="$SB/home/.config" PATH="$SB/bin:$PATH"
 LIVE="$SB/live"
 PI_LIVE="$SB/pi-live"
+KIMI_LIVE="$SB/kimi-live"
 
 echo "test-uninstall"
 
 # --- install the operating layer -------------------------------------------
 "$ROOT_DIR/scripts/sync-claude-assets.sh" --apply --live-root "$LIVE" >/dev/null 2>&1
 "$ROOT_DIR/scripts/sync-pi-assets.sh" --apply --live-root "$PI_LIVE" >/dev/null 2>&1
+"$ROOT_DIR/scripts/sync-kimi-assets.sh" --apply --live-root "$KIMI_LIVE" >/dev/null 2>&1
 md_installed=$(find "$LIVE" -type f -name '*.md' | wc -l | tr -d ' ')
 check "assets installed" "$([[ $md_installed -gt 0 ]] && echo yes || echo no)" "yes"
 check "managed hooks registered" "$(managed_hook_count "$LIVE/settings.json")" "5"
@@ -105,6 +107,8 @@ fs.writeFileSync(path, JSON.stringify(settings, null, 2) + "\n")
 NODE
 cp "$LIVE/settings.json" "$SB/settings.before.json"
 cp "$PI_LIVE/extensions/cairnkeep-trajectory.ts" "$SB/pi.before.ts"
+cp "$PI_LIVE/prompts/graphify.md" "$SB/pi-graph.before.md"
+cp "$KIMI_LIVE/skills/graphify/SKILL.md" "$SB/kimi-graph.before.md"
 mkdir -p "$SB/home/.cairnkeep/notes/projects/example/hindsight"
 printf 'durable note bytes\n' >"$SB/home/.cairnkeep/notes/projects/example/hindsight/failure.md"
 mkdir -p "$SB/home/.cairnkeep/notes/.cairnkeep/history/project-notes/knowledge/example" \
@@ -204,10 +208,12 @@ overlay_before=$(tree_hash "$PROJECT_DATA/.ai/capability-contract")
 project_before=$(tree_hash "$PROJECT_DATA")
 
 # --- dry-run must change nothing -------------------------------------------
-"$ROOT_DIR/scripts/uninstall.sh" --dry-run --live-root "$LIVE" --pi-live-root "$PI_LIVE" "$PROJECT_DATA" >/dev/null 2>&1
+"$ROOT_DIR/scripts/uninstall.sh" --dry-run --live-root "$LIVE" --pi-live-root "$PI_LIVE" --kimi-live-root "$KIMI_LIVE" "$PROJECT_DATA" >/dev/null 2>&1
 check "dry-run leaves assets" "$(find "$LIVE" -type f -name '*.md' | wc -l | tr -d ' ')" "$md_installed"
 check "dry-run makes no bundle" "$(ls -d "$SB/home/.cairnkeep-uninstall-"* 2>/dev/null | wc -l | tr -d ' ')" "0"
 check "dry-run leaves Pi extension" "$([[ -f "$PI_LIVE/extensions/cairnkeep-trajectory.ts" ]] && echo yes || echo no)" "yes"
+check "dry-run leaves Pi graph prompt" "$([[ -f "$PI_LIVE/prompts/graphify.md" ]] && echo yes || echo no)" "yes"
+check "dry-run leaves Kimi graph Skill" "$([[ -f "$KIMI_LIVE/skills/graphify/SKILL.md" ]] && echo yes || echo no)" "yes"
 check "dry-run leaves settings identical" "$(cmp -s "$SB/settings.before.json" "$LIVE/settings.json" && echo yes || echo no)" "yes"
 check "dry-run leaves artifact bytes exact" "$(cmp -s "$SB/artifacts.before.db" "$PROJECT_DATA/.agentfs/artifacts.db" && echo yes || echo no)" "yes"
 check "dry-run leaves eval tree, bytes, and modes exact" "$(tree_identity "$PROJECT_DATA/.agentfs/eval")" "$eval_before"
@@ -216,11 +222,13 @@ check "dry-run leaves adjacent project exact" "$(tree_identity "$ADJACENT_PROJEC
 check "dry-run leaves project state byte-identical" "$(tree_hash "$PROJECT_DATA")" "$project_before"
 
 # --- real uninstall ---------------------------------------------------------
-"$ROOT_DIR/scripts/uninstall.sh" --yes --live-root "$LIVE" --pi-live-root "$PI_LIVE" "$PROJECT_DATA" >/dev/null 2>&1
+"$ROOT_DIR/scripts/uninstall.sh" --yes --live-root "$LIVE" --pi-live-root "$PI_LIVE" --kimi-live-root "$KIMI_LIVE" "$PROJECT_DATA" >/dev/null 2>&1
 check "assets removed" "$(find "$LIVE" -type f -name '*.md' | wc -l | tr -d ' ')" "0"
 check "managed hooks de-registered" "$(managed_hook_count "$LIVE/settings.json")" "0"
 check "unrelated hook preserved" "$(grep -cF 'keep-me.sh' "$LIVE/settings.json" 2>/dev/null || true)" "1"
 check "Pi extension removed" "$([[ -e "$PI_LIVE/extensions/cairnkeep-trajectory.ts" ]] && echo no || echo yes)" "yes"
+check "Pi graph prompt removed" "$([[ -e "$PI_LIVE/prompts/graphify.md" ]] && echo no || echo yes)" "yes"
+check "Kimi graph Skill removed" "$([[ -e "$KIMI_LIVE/skills/graphify/SKILL.md" ]] && echo no || echo yes)" "yes"
 check "default uninstall keeps notes" "$(sha256sum "$SB/home/.cairnkeep/notes/projects/example/hindsight/failure.md" | cut -d' ' -f1)" "$note_before"
 check "default uninstall keeps all typed and journal bytes" "$(tree_hash "$SB/home/.cairnkeep")" "$store_before"
 check "default uninstall keeps artifact bytes exact" "$(cmp -s "$SB/artifacts.before.db" "$PROJECT_DATA/.agentfs/artifacts.db" && echo yes || echo no)" "yes"
@@ -243,6 +251,8 @@ bash "$BK/revert.sh" >/dev/null 2>&1
 check "assets restored" "$(find "$LIVE" -type f -name '*.md' | wc -l | tr -d ' ')" "$md_installed"
 check "settings.json identical" "$(cmp -s "$SB/settings.before.json" "$LIVE/settings.json" && echo yes || echo no)" "yes"
 check "Pi extension restored" "$(cmp -s "$SB/pi.before.ts" "$PI_LIVE/extensions/cairnkeep-trajectory.ts" && echo yes || echo no)" "yes"
+check "Pi graph prompt restored" "$(cmp -s "$SB/pi-graph.before.md" "$PI_LIVE/prompts/graphify.md" && echo yes || echo no)" "yes"
+check "Kimi graph Skill restored" "$(cmp -s "$SB/kimi-graph.before.md" "$KIMI_LIVE/skills/graphify/SKILL.md" && echo yes || echo no)" "yes"
 check "capability config bytes restored" "$(cmp -s "$SB/capabilities.before.json" "$PROJECT_DATA/.ai/capabilities.json" && echo yes || echo no)" "yes"
 check "capability overlay bytes restored" "$(tree_hash "$PROJECT_DATA/.ai/capability-contract")" "$overlay_before"
 check "capability hook registrations restored" "$(capability_hook_count "$CLAUDE_OVERLAY/settings.json")" "5"

package/scripts/uninstall.sh

@@ -22,6 +22,7 @@ TPL="$CAIRN_ROOT/templates"
 
 LIVE_ROOT="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
 PI_LIVE_ROOT="${PI_CODING_AGENT_DIR:-$HOME/.pi/agent}"
+KIMI_LIVE_ROOT="${KIMI_CODE_HOME:-$HOME/.kimi-code}"
 STORE_DIR="${CAIRN_AGENTFS_BASE_DIR:-$HOME/.cairnkeep}"
 STORE_DIR="${STORE_DIR/#\~/$HOME}"
 DRY_RUN=0
@@ -49,7 +50,7 @@ PROJECT_AI_FILES=(
 usage() {
   cat <<'EOF'
 Usage: uninstall.sh [--dry-run] [--yes] [--purge-memory] [--live-root PATH]
-                    [--pi-live-root PATH] [PROJECT ...]
+                    [--pi-live-root PATH] [--kimi-live-root PATH] [PROJECT ...]
 
 Reverse cairnkeep's install. Everything removed/edited is backed up into
 $HOME/.cairnkeep-uninstall-<ts>/ with a revert.sh before any change.
@@ -60,6 +61,7 @@ $HOME/.cairnkeep-uninstall-<ts>/ with a revert.sh before any change.
                    trajectories in each PROJECT. Backed up first; off by default.
   --live-root PATH Claude root to clean (default: $CLAUDE_CONFIG_DIR or ~/.claude).
   --pi-live-root PATH Pi agent root to clean (default: $PI_CODING_AGENT_DIR or ~/.pi/agent).
+  --kimi-live-root PATH Kimi Code root to clean (default: $KIMI_CODE_HOME or ~/.kimi-code).
   PROJECT ...      Also revert `cairn bootstrap` in these project dirs
                    (.ai/, .planning/, and any .git/info/exclude entries).
   -h, --help       Show this help.
@@ -73,6 +75,7 @@ while [[ $# -gt 0 ]]; do
     --purge-memory) PURGE_MEMORY=1; shift ;;
     --live-root) LIVE_ROOT="$2"; shift 2 ;;
     --pi-live-root) PI_LIVE_ROOT="$2"; shift 2 ;;
+    --kimi-live-root) KIMI_LIVE_ROOT="$2"; shift 2 ;;
     -h|--help) usage; exit 0 ;;
     -*) echo "Unknown option: $1" >&2; usage >&2; exit 2 ;;
     *) PROJECTS+=("$1"); shift ;;
@@ -137,6 +140,7 @@ echo "cairn uninstall"
 [[ $DRY_RUN -eq 1 ]] && echo "(dry run — nothing will change)"
 echo "  live root:    $LIVE_ROOT"
 echo "  Pi live root: $PI_LIVE_ROOT"
+echo "  Kimi root:    $KIMI_LIVE_ROOT"
 echo "  memory store: $STORE_DIR ($([[ $PURGE_MEMORY -eq 1 ]] && echo 'WILL be purged' || echo 'kept'))"
 [[ ${#PROJECTS[@]} -gt 0 ]] && echo "  projects:     ${PROJECTS[*]}"
 
@@ -150,10 +154,13 @@ fi
 echo "Operating layer (assets):"
 while IFS= read -r dst; do remove_path "$dst"; done < <(asset_dests)
 
-# The Pi adapter is one precisely owned extension; do not touch any other Pi
-# configuration or extensions in the same user root.
-echo "Pi extension:"
+# These are precisely owned adapter paths; do not touch neighboring harness
+# configuration in either user root.
+echo "Pi adapters:"
 remove_path "$PI_LIVE_ROOT/extensions/cairnkeep-trajectory.ts"
+remove_path "$PI_LIVE_ROOT/prompts/graphify.md"
+echo "Kimi adapter:"
+remove_path "$KIMI_LIVE_ROOT/skills/graphify/SKILL.md"
 
 # 2. settings.json hook registrations (back up whole file, then de-register).
 SETTINGS="$LIVE_ROOT/settings.json"

package/templates/graph-policy.md.template

@@ -26,12 +26,33 @@ This repository uses `.planning/graphs/` as an optional, local, machine-facing d
 
 - Use the graph to compress dependency context for planning, exploration, and impact analysis.
 - Do not use graph outputs as a human-facing substitute for the repo wiki.
-- Do not commit graph build outputs by default; `.planning/graphs/.gitignore` keeps them local unless you intentionally override it.
+- Do not commit graph build outputs by default. `.planning/graphs/.gitignore`
+  covers the published view; also ignore Graphify's root `graphify-out/` work
+  directory through repository policy or the clone-local Git exclude file.
 
 ## Maintenance
 
 - Enable Graphify explicitly in `.planning/config.json`.
-- Install it locally with `uv pip install graphifyy && graphify install` before first use.
-- Use `/gsd-graphify build` to create or refresh the graph after meaningful topology or architecture-doc changes.
-- Use `/gsd-graphify status`, `/gsd-graphify query <term>`, and `/gsd-graphify diff` to inspect freshness and focused subgraphs.
-- Planner and query consumers should treat stale graphs as approximate context, not proof.
+- Install only the isolated Graphify CLI with `uv tool install graphifyy` before
+  first use (`pipx install graphifyy` is an equivalent fallback). Do not run
+  `graphify install`: Cairnkeep owns the installed commands and harness wiring,
+  so Graphify-owned skills, instructions, and hooks would duplicate them.
+- Claude Code and OpenCode receive the `/graphify` command with their operating
+  layers. Kimi Code receives the equivalent thin Skill after `cairn sync-kimi
+  --apply`, and Pi receives the equivalent thin prompt after `cairn sync-pi
+  --apply`. Both delegate exclusively to portable forms such as
+  `cairn graph build`, `cairn graph explain <symbol>`, and
+  `cairn graph path <from> <to>`.
+- Use `/graphify build` to create or refresh the graph after meaningful
+  code-topology changes. The managed build is local code-only extraction; it
+  does not send documents to a semantic extraction backend.
+- Use `/graphify status`, `/graphify query <term>`, and `/graphify diff` to
+  inspect freshness and focused subgraphs.
+- Use `/graphify explain <symbol>` for one exact function, class, or file, and
+  `/graphify path <from> <to>` for the shortest structural route between two
+  exact symbols.
+- Prefer exact symbol names or narrowly scoped terms when querying. Treat broad
+  prose-query results as discovery hints and verify them against canonical
+  source files.
+- Planner and query consumers should treat stale graphs as approximate context,
+  not proof.