@cairnkeep/cli 2.7.0 → 2.9.0

package/schemas/skill-adapter.schema.json

@@ -0,0 +1,39 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/cairnkeep/cairnkeep/main/schemas/skill-adapter.schema.json",
+  "title": "Cairnkeep skill proposal adapter configuration v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "id", "command", "limits"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "id": { "$ref": "#/$defs/identifier" },
+    "command": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["program", "args"],
+      "properties": {
+        "program": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "args": { "type": "array", "maxItems": 128, "items": { "type": "string", "maxLength": 16384 } }
+      }
+    },
+    "environment_allowlist": {
+      "type": "array",
+      "maxItems": 64,
+      "default": [],
+      "items": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]{0,127}$" }
+    },
+    "limits": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["elapsed_ms", "stdout_bytes"],
+      "properties": {
+        "elapsed_ms": { "type": "integer", "minimum": 1, "maximum": 3600000 },
+        "stdout_bytes": { "type": "integer", "minimum": 1, "maximum": 4194304 }
+      }
+    }
+  },
+  "$defs": {
+    "identifier": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[a-z0-9][a-z0-9._-]*$" }
+  }
+}

package/schemas/skill-proposal-protocol.schema.json

@@ -0,0 +1,97 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://raw.githubusercontent.com/cairnkeep/cairnkeep/main/schemas/skill-proposal-protocol.schema.json",
+  "title": "Cairnkeep skill proposal adapter protocol v1",
+  "oneOf": [{ "$ref": "#/$defs/request" }, { "$ref": "#/$defs/response" }],
+  "$defs": {
+    "identifier": { "type": "string", "minLength": 1, "maxLength": 128, "pattern": "^[a-z0-9][a-z0-9._-]*$" },
+    "digest": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+    "timestamp": { "type": "string", "format": "date-time" },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1024,
+      "pattern": "^(?!/)(?!.*(?:^|/)(?:\\.|\\.\\.)(?:/|$))(?!.*\\\\)(?!.*//)(?!.*[\\u0000-\\u001f\\u007f])(?:.*\\/)?SKILL\\.md$"
+    },
+    "occurrence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["session_id", "session_digest", "ended_at", "outcome", "evidence"],
+      "properties": {
+        "session_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "session_digest": { "$ref": "#/$defs/digest" },
+        "ended_at": { "$ref": "#/$defs/timestamp" },
+        "outcome": { "enum": ["failure", "resolution", "abandonment"] },
+        "tool_name": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "evidence": { "type": "string", "maxLength": 4096 }
+      }
+    },
+    "candidate": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "id", "project_id", "status", "note_id", "source_digest", "title", "description", "failure_family", "failure_count", "resolution_count", "occurrences", "lessons", "caveats", "created_at", "reviewed_at"],
+      "properties": {
+        "schema_version": { "const": 1 },
+        "id": { "$ref": "#/$defs/identifier" },
+        "project_id": { "$ref": "#/$defs/identifier" },
+        "status": { "const": "approved" },
+        "note_id": { "$ref": "#/$defs/identifier" },
+        "source_digest": { "$ref": "#/$defs/digest" },
+        "title": { "type": "string", "minLength": 1, "maxLength": 512 },
+        "description": { "type": "string", "maxLength": 4096 },
+        "failure_family": { "$ref": "#/$defs/identifier" },
+        "failure_count": { "type": "integer", "minimum": 2, "maximum": 1024 },
+        "resolution_count": { "type": "integer", "minimum": 1, "maximum": 1024 },
+        "occurrences": { "type": "array", "minItems": 2, "maxItems": 64, "items": { "$ref": "#/$defs/occurrence" } },
+        "lessons": { "type": "array", "maxItems": 16, "items": { "type": "string", "minLength": 1, "maxLength": 1024 } },
+        "caveats": { "type": "array", "maxItems": 16, "items": { "type": "string", "minLength": 1, "maxLength": 1024 } },
+        "created_at": { "$ref": "#/$defs/timestamp" },
+        "reviewed_at": { "$ref": "#/$defs/timestamp" }
+      }
+    },
+    "edit": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["operation", "anchor", "content", "rationale"],
+      "properties": {
+        "operation": { "enum": ["add", "replace", "delete"] },
+        "anchor": { "oneOf": [{ "type": "string", "minLength": 1, "maxLength": 16384 }, { "type": "null" }] },
+        "content": { "type": "string", "maxLength": 65536 },
+        "rationale": { "type": "string", "minLength": 1, "maxLength": 2048 }
+      }
+    },
+    "request": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "operation", "candidate", "candidate_digest", "target", "edit_budget"],
+      "properties": {
+        "schema_version": { "const": 1 },
+        "operation": { "const": "propose" },
+        "candidate": { "$ref": "#/$defs/candidate" },
+        "candidate_digest": { "$ref": "#/$defs/digest" },
+        "target": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["path", "baseline_digest", "content"],
+          "properties": {
+            "path": { "$ref": "#/$defs/relativePath" },
+            "baseline_digest": { "$ref": "#/$defs/digest" },
+            "content": { "type": "string", "maxLength": 262144 }
+          }
+        },
+        "edit_budget": { "type": "integer", "minimum": 1, "maximum": 16 }
+      }
+    },
+    "response": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "status"],
+      "properties": {
+        "schema_version": { "const": 1 },
+        "status": { "enum": ["completed", "adapter_error"] },
+        "error_code": { "$ref": "#/$defs/identifier" },
+        "edits": { "type": "array", "maxItems": 16, "default": [], "items": { "$ref": "#/$defs/edit" } }
+      }
+    }
+  }
+}

package/scripts/completion.sh

@@ -11,7 +11,7 @@ _cairn_complete() {
   COMPREPLY=()
   current=${COMP_WORDS[COMP_CWORD]}
   previous=${COMP_WORDS[COMP_CWORD-1]:-}
-  commands="bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities notes eval graph memory audit-timer uninstall completion version help"
+  commands="bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help"
   if (( COMP_CWORD == 1 )); then
     COMPREPLY=( $(compgen -W "$commands" -- "$current") )
     return
@@ -51,6 +51,8 @@ _cairn_complete() {
         *) COMPREPLY=( $(compgen -W "list status enable disable reset logging" -- "$current") ) ;;
       esac
       ;;
+    mcp-tools) COMPREPLY=( $(compgen -W "list status set reset full read-only custom --tool --project --json" -- "$current") ) ;;
+    pack) COMPREPLY=( $(compgen -W "init lock validate install list show remove enable disable update skills approve-skill revoke-skill --id --version --title --description --license --ref --project --project-id --check --apply --confirm --json" -- "$current") ) ;;
     notes) COMPREPLY=( $(compgen -W "distill search-error promote doctor --project --session --all-projects --para-root --text --component --with --confirm --repair --json" -- "$current") ) ;;
     eval)
       case "${COMP_WORDS[2]:-}" in
@@ -63,10 +65,11 @@ _cairn_complete() {
         *) COMPREPLY=( $(compgen -W "validate run ablate report prune delete" -- "$current") ) ;;
       esac
       ;;
+    skill) COMPREPLY=( $(compgen -W "harvest list show review propose evaluate apply rollback --project --minimum-occurrences --kind --id --candidate --approve --target --adapter --edit-budget --proposal --exploration-task-set --confirmation-task-set --output --repetitions --seed --minimum-improvement --evaluation --application --confirm --yes --json" -- "$current") ) ;;
     graph) COMPREPLY=( $(compgen -W "build query status diff explain path --force" -- "$current") ) ;;
     memory) COMPREPLY=( $(compgen -W "path export import" -- "$current") ) ;;
     audit-timer) COMPREPLY=( $(compgen -W "--on-calendar --para-root --render-only" -- "$current") ) ;;
-    uninstall) COMPREPLY=( $(compgen -W "--dry-run --yes --purge-memory --live-root --pi-live-root --kimi-live-root" -- "$current") ) ;;
+    uninstall) COMPREPLY=( $(compgen -W "--dry-run --yes --purge-memory --purge-packs --live-root --pi-live-root --kimi-live-root" -- "$current") ) ;;
     completion) COMPREPLY=( $(compgen -W "bash zsh fish" -- "$current") ) ;;
   esac
 }
@@ -88,8 +91,11 @@ _cairn() {
     'trajectory:inspect and prune local session trajectories'
     'artifact:inspect, delete, and prune local artifacts'
     'capabilities:inspect and manage project capability state'
+    'mcp-tools:inspect and restrict MCP tool exposure'
+    'pack:manage immutable context packs and skill approvals'
     'notes:distill and search local hindsight notes'
     'eval:run and inspect default-off local evaluations'
+    'skill:review and evaluate evidence-backed skill improvements'
     'graph:inspect a published Graphify graph'
     'memory:manage the durable memory store'
     'audit-timer:install a memory and wiki audit timer'
@@ -118,6 +124,8 @@ _cairn() {
         *) _values 'artifact command' list show delete prune ;;
       esac
       ;;
+    mcp-tools) _values 'MCP tool profile command' list status set reset full read-only custom '--tool[allow an exact tool]:tool:' '--project[project root]:directory:_files -/' '--json[emit JSON]' ;;
+    pack) _values 'context pack command' init lock validate install list show remove enable disable update skills approve-skill revoke-skill '--ref[pinned Git ref]:ref:' '--project[project root]:directory:_files -/' '--project-id[remote project ID]:project ID:' '--check[inspect update]' '--apply[apply update]' '--confirm[confirm digest]:digest:' '--json[emit JSON]' ;;
     capabilities)
       case $words[3] in
         list|status) _arguments '--json[emit JSON]' ;;
@@ -139,10 +147,23 @@ _cairn() {
         *) _values 'eval command' validate run ablate report prune delete ;;
       esac
       ;;
+    skill)
+      case $words[3] in
+        harvest) _arguments '--project[project root]:directory:_files -/' '--minimum-occurrences[minimum recurring failures]:count:' '--json[emit JSON]' ;;
+        list) _arguments '--project[project root]:directory:_files -/' '--kind[artifact kind]:kind:(candidate proposal evaluation application)' '--json[emit JSON]' ;;
+        show) _arguments '--project[project root]:directory:_files -/' '--kind[artifact kind]:kind:(candidate proposal evaluation application)' '--id[artifact ID]:artifact ID:' '--json[emit JSON]' ;;
+        review) _arguments '--project[project root]:directory:_files -/' '--candidate[candidate ID]:candidate ID:' '--approve[approve evidence]' '--json[emit JSON]' ;;
+        propose) _arguments '--project[project root]:directory:_files -/' '--candidate[candidate ID]:candidate ID:' '--target[existing SKILL.md]:file:_files' '--adapter[proposal adapter configuration]:file:_files' '--edit-budget[maximum edits]:count:' '--json[emit JSON]' ;;
+        evaluate) _arguments '--project[project root]:directory:_files -/' '--proposal[proposal ID]:proposal ID:' '--exploration-task-set[exploration task set]:file:_files' '--confirmation-task-set[confirmation task set]:file:_files' '--adapter[evaluation adapter configuration]:file:_files' '--output[report root]:directory:_files -/' '--repetitions[repetition count]:count:' '--seed[deterministic seed]:seed:' '--minimum-improvement[distinct improved tasks]:count:' '--yes[confirm execution]' '--json[emit JSON]' ;;
+        apply) _arguments '--project[project root]:directory:_files -/' '--proposal[proposal ID]:proposal ID:' '--evaluation[evaluation ID]:evaluation ID:' '--confirm[exact proposal digest]:digest:' '--json[emit JSON]' ;;
+        rollback) _arguments '--project[project root]:directory:_files -/' '--application[application ID]:application ID:' '--confirm[confirm rollback]' '--json[emit JSON]' ;;
+        *) _values 'skill command' harvest list show review propose evaluate apply rollback ;;
+      esac
+      ;;
     graph) _values 'graph command' build query status diff explain path '--force[allow a smaller graph after code deletion]' ;;
     memory) _values 'memory command' path export import ;;
     audit-timer) _arguments '--on-calendar[systemd calendar]:calendar:' '--para-root[PARA root]:directory:_files -/' '--render-only[render directory]:directory:_files -/' ;;
-    uninstall) _arguments '--dry-run[show changes]' '--yes[skip confirmation]' '--purge-memory[delete memory]' '--live-root[project Claude root]:directory:_files -/' '--pi-live-root[Pi agent root]:directory:_files -/' '--kimi-live-root[Kimi Code root]:directory:_files -/' '*:project directory:_files -/' ;;
+    uninstall) _arguments '--dry-run[show changes]' '--yes[skip confirmation]' '--purge-memory[delete memory]' '--purge-packs[delete context packs]' '--live-root[project Claude root]:directory:_files -/' '--pi-live-root[Pi agent root]:directory:_files -/' '--kimi-live-root[Kimi Code root]:directory:_files -/' '*:project directory:_files -/' ;;
     completion) _values 'shell' bash zsh fish ;;
     *) _arguments '*:argument:_files' ;;
   esac
@@ -153,8 +174,8 @@ EOF
   fish)
     cat <<'EOF'
 complete -c cairn -f
-for command in bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities notes eval graph memory audit-timer uninstall completion version help
-    complete -c cairn -n "not __fish_seen_subcommand_from bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities notes eval graph memory audit-timer uninstall completion version help" -a $command
+for command in bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help
+    complete -c cairn -n "not __fish_seen_subcommand_from bootstrap memory-server sync sync-pi sync-kimi doctor trajectory artifact capabilities mcp-tools pack notes eval skill graph memory audit-timer uninstall completion version help" -a $command
 end
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l apply
 complete -c cairn -n "__fish_seen_subcommand_from sync" -l live-root -r
@@ -178,6 +199,17 @@ complete -c cairn -n "__fish_seen_subcommand_from capabilities; and __fish_seen_
 complete -c cairn -n "__fish_seen_subcommand_from capabilities; and __fish_seen_subcommand_from reset" -l all
 complete -c cairn -n "__fish_seen_subcommand_from capabilities; and __fish_seen_subcommand_from logging; and not __fish_seen_subcommand_from enable disable reset" -a "enable disable reset"
 complete -c cairn -n "__fish_seen_subcommand_from capabilities; and __fish_seen_subcommand_from list status enable disable reset logging" -l json
+complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -a "list status set reset"
+complete -c cairn -n "__fish_seen_subcommand_from mcp-tools; and __fish_seen_subcommand_from set" -a "full read-only custom"
+complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l project -r
+complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l tool -r
+complete -c cairn -n "__fish_seen_subcommand_from mcp-tools" -l json
+complete -c cairn -n "__fish_seen_subcommand_from pack" -a "init lock validate install list show remove enable disable update skills approve-skill revoke-skill"
+complete -c cairn -n "__fish_seen_subcommand_from pack" -l project -r
+complete -c cairn -n "__fish_seen_subcommand_from pack" -l project-id -r
+complete -c cairn -n "__fish_seen_subcommand_from pack" -l ref -r
+complete -c cairn -n "__fish_seen_subcommand_from pack" -l confirm -r
+complete -c cairn -n "__fish_seen_subcommand_from pack" -l json
 complete -c cairn -n "__fish_seen_subcommand_from notes" -a "distill search-error promote doctor"
 complete -c cairn -n "__fish_seen_subcommand_from eval; and not __fish_seen_subcommand_from validate run ablate report prune delete" -a "validate run ablate report prune delete"
 complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcommand_from validate run ablate" -l task-set -r
@@ -191,11 +223,36 @@ complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcomma
 complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcommand_from prune" -l older-than-days -r
 complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcommand_from prune delete" -l dry-run
 complete -c cairn -n "__fish_seen_subcommand_from eval; and __fish_seen_subcommand_from validate run ablate report prune delete" -l json
+complete -c cairn -n "__fish_seen_subcommand_from skill; and not __fish_seen_subcommand_from harvest list show review propose evaluate apply rollback" -a "harvest list show review propose evaluate apply rollback"
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from harvest list show review propose evaluate apply rollback" -l project -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from harvest list show review propose evaluate apply rollback" -l json
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from harvest" -l minimum-occurrences -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from list show" -l kind -r -a "candidate proposal evaluation application"
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from show" -l id -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from review propose" -l candidate -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from review" -l approve
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from propose" -l target -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from propose evaluate" -l adapter -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from propose" -l edit-budget -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate apply" -l proposal -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l exploration-task-set -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l confirmation-task-set -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l output -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l repetitions -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l seed -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l minimum-improvement -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from evaluate" -l yes
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from apply" -l evaluation -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from apply" -l confirm -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from rollback" -l application -r
+complete -c cairn -n "__fish_seen_subcommand_from skill; and __fish_seen_subcommand_from rollback" -l confirm
 complete -c cairn -n "__fish_seen_subcommand_from graph" -a "build query status diff explain path"
 complete -c cairn -n "__fish_seen_subcommand_from graph; and __fish_seen_subcommand_from build" -l force
 complete -c cairn -n "__fish_seen_subcommand_from completion" -a "bash zsh fish"
 complete -c cairn -n "__fish_seen_subcommand_from uninstall" -l pi-live-root -r
 complete -c cairn -n "__fish_seen_subcommand_from uninstall" -l kimi-live-root -r
+complete -c cairn -n "__fish_seen_subcommand_from uninstall" -l purge-memory
+complete -c cairn -n "__fish_seen_subcommand_from uninstall" -l purge-packs
 EOF
     ;;
   *)

package/scripts/doctor.sh

@@ -400,6 +400,45 @@ case "$eval_state" in
   unsafe) warn "evaluation report storage is unsafe" ;;
 esac
 
+# 12. MCP least-authority profile. Invalid or unknown custom tool names are a
+# startup failure, so doctor treats them as an actionable configuration error.
+mcp_profile_cli="$CAIRN_ROOT/mcp-memory-server/dist/mcp-tool-cli.js"
+if [[ ! -f "$mcp_profile_cli" ]]; then
+  fail "MCP tool profile checker is missing from the installed package"
+elif mcp_profile_json=$(node "$mcp_profile_cli" status --project "$PWD" --json 2>/dev/null); then
+  if mcp_profile_summary=$(node - "$mcp_profile_json" <<'NODE'
+try {
+  const value = JSON.parse(process.argv[2]);
+  if (value.schema_version !== 1 || !["full", "read-only", "custom"].includes(value.mode)
+      || !/^[a-f0-9]{64}$/.test(value.profile_digest) || !Array.isArray(value.allowed_tools)) process.exit(1);
+  process.stdout.write(`${value.mode}\t${value.profile_digest}`);
+} catch { process.exit(1); }
+NODE
+  ); then
+    pass "MCP tool profile $(printf '%s' "$mcp_profile_summary" | cut -f1) ($(printf '%s' "$mcp_profile_summary" | cut -f2))"
+  else
+    fail "MCP tool profile status returned invalid data"
+  fi
+else
+  fail "MCP tool profile is invalid (check .ai/mcp-tools.json and CAIRN_MCP_TOOL_PROFILE)"
+fi
+
+# 13. Context-pack objects and project pointers are verified even when MCP pack
+# retrieval is disabled. The feature gate controls reads, not integrity checks.
+pack_cli="$CAIRN_ROOT/mcp-memory-server/dist/context-pack-cli.js"
+pack_base="${CAIRN_PACK_BASE_DIR:-$HOME/.cairnkeep/packs}"
+pack_base="${pack_base/#\~/$HOME}"
+if [[ ! -e "$pack_base" ]]; then
+  skip "context packs (not installed)"
+elif [[ ! -f "$pack_cli" ]]; then
+  fail "context-pack checker is missing from the installed package"
+elif pack_json=$(node "$pack_cli" doctor --json 2>/dev/null) && node -e 'const v=JSON.parse(process.argv[1]); if(v.ok!==true)process.exit(1)' "$pack_json"; then
+  pack_counts=$(node -e 'const v=JSON.parse(process.argv[1]); process.stdout.write(`${v.objects} object(s), ${v.projects} project pointer(s)`)' "$pack_json")
+  pass "context packs healthy ($pack_counts)"
+else
+  fail "context-pack objects or project pointers failed integrity checks"
+fi
+
 echo
 if [[ "$fails" -gt 0 ]]; then
   echo "cairn doctor: $fails configured dependency check(s) failed."

package/scripts/test-cli-dispatch.sh

@@ -16,6 +16,8 @@ tmp=$(mktemp -d); trap 'rm -rf "$tmp"' EXIT
 "$cairn" help | grep -q "cairn notes" || fail "help missing notes"
 "$cairn" help | grep -q "cairn artifact <list|show|delete|prune>" || fail "help missing artifact"
 "$cairn" help | grep -q "cairn capabilities <list|status|enable|disable|reset|logging>" || fail "help missing capabilities"
+"$cairn" help | grep -q "cairn mcp-tools <list|status|set|reset>" || fail "help missing mcp-tools"
+"$cairn" help | grep -q "cairn pack <init|lock|validate|install|list|show|remove|enable|disable|update|skills|approve-skill|revoke-skill>" || fail "help missing pack"
 "$cairn" help | grep -q "cairn graph <build|query|status|diff|explain|path>" || fail "help missing graph"
 "$cairn" sync --help >/dev/null 2>&1 || fail "cairn sync dispatch"
 "$cairn" sync-pi --help >/dev/null 2>&1 || fail "cairn sync-pi dispatch"
@@ -23,6 +25,10 @@ tmp=$(mktemp -d); trap 'rm -rf "$tmp"' EXIT
 env -u CAIRN_NOTE_DISTILLATION "$cairn" notes --help >/dev/null 2>&1 || fail "cairn notes dispatch"
 "$cairn" artifact --help | grep -q "cairn artifact list" || fail "cairn artifact dispatch"
 "$cairn" capabilities --help >"$tmp/capabilities-help" 2>/dev/null || fail "cairn capabilities dispatch"
+"$cairn" mcp-tools list --json >"$tmp/mcp-tools.json" || fail "cairn mcp-tools dispatch"
+CAIRN_PACK_BASE_DIR="$tmp/pack-store" "$cairn" pack list --json >"$tmp/packs.json" || fail "cairn pack dispatch"
+node -e 'const v=require(process.argv[1]);if(v.schema_version!==1||!Array.isArray(v.tools))process.exit(1)' "$tmp/mcp-tools.json" || fail "mcp-tools JSON contract"
+node -e 'const v=require(process.argv[1]);if(v.schema_version!==1||!Array.isArray(v.packs))process.exit(1)' "$tmp/packs.json" || fail "pack JSON contract"
 "$cairn" graph --help | grep -q "cairn graph explain <symbol>" || fail "cairn graph dispatch"
 grep -qxF 'MCP capability changes require a memory-server restart. Operating capability' "$tmp/capabilities-help" || fail "capability help missing exact restart wording"
 grep -qxF 'changes apply on the next invocation.' "$tmp/capabilities-help" || fail "capability help missing exact invocation wording"

package/scripts/test-completion.sh

@@ -14,6 +14,7 @@ done
 capability_ids='memory.write memory.search notes.distill wiki graph security.audit route.check context.explore'
 eval_commands='validate run ablate report prune delete'
 eval_flags='--task-set --adapter --output --repetitions --seed --json --yes --disable --experiment --older-than-days --dry-run'
+skill_commands='harvest list show review propose evaluate apply rollback'
 for shell in bash zsh fish; do
   grep -q 'capabilities' "$tmp/$shell"
   grep -q 'list.*status.*enable.*disable.*reset.*logging\|list status enable disable reset logging' "$tmp/$shell"
@@ -37,6 +38,16 @@ for shell in bash zsh fish; do
     echo "completion exposed a private eval lifecycle operation for $shell" >&2
     exit 1
   fi
+  grep -q 'skill' "$tmp/$shell"
+  grep -q 'harvest.*list.*show.*review.*propose.*evaluate.*apply.*rollback\|harvest list show review propose evaluate apply rollback' "$tmp/$shell"
+  for skill_flag in --candidate --exploration-task-set --confirmation-task-set --evaluation --application --confirm; do
+    grep -q -- "$skill_flag\|-l ${skill_flag#--}" "$tmp/$shell"
+  done
+  grep -q 'mcp-tools' "$tmp/$shell"
+  grep -q 'full.*read-only.*custom\|full read-only custom' "$tmp/$shell"
+  grep -q 'pack' "$tmp/$shell"
+  grep -q 'init.*lock.*validate.*install.*list.*show.*remove.*enable.*disable.*update.*skills.*approve-skill.*revoke-skill\|init lock validate install list show remove enable disable update skills approve-skill revoke-skill' "$tmp/$shell"
+  grep -q -- '--purge-packs\|-l purge-packs' "$tmp/$shell"
 done
 
 "$ROOT/bin/cairn" help >"$tmp/root-help"
@@ -52,6 +63,11 @@ if grep -q 'doctor-diagnosis' "$tmp/eval-help"; then
   echo 'eval help exposed a private lifecycle operation' >&2
   exit 1
 fi
+grep -qF 'cairn skill <harvest|list|show|review|propose|evaluate|apply|rollback>' "$tmp/root-help"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/skill-help"
+for command in $skill_commands; do
+  grep -q "cairn skill $command" "$tmp/skill-help"
+done
 
 node - "$ROOT/mcp-memory-server/src/capability-registry.ts" "$tmp/bash" "$tmp/zsh" "$tmp/fish" <<'NODE'
 const fs = require("fs");

package/scripts/test-learning-docs.sh

@@ -15,13 +15,14 @@ grep -qF "**Baseline:** Cairnkeep $version" "$coverage"
 grep -qF "**Baseline:** Cairnkeep $version" "$feature_guide"
 grep -qF 'https://github.com/cairnkeep/cairnkeep-course-labs' "$landing"
 for checkpoint in course-00-app course-01-bootstrap course-02-memory course-03-quality \
-  course-04-operation course-05-evidence course-06-governance course-07-evaluation; do
+  course-04-operation course-05-evidence course-06-governance course-07-evaluation \
+  course-08-graph course-09-skill course-10-trust-context; do
   grep -qF "\`$checkpoint\`" "$coverage"
 done
 
 ready=0
 brief=0
-for number in $(seq -w 0 17); do
+for number in $(seq -w 0 21); do
   matches=(docs/learning/lessons/L"$number"-*.md)
   [[ ${#matches[@]} -eq 1 && -f ${matches[0]} ]] || {
     echo "learning path must contain exactly one L$number lesson" >&2
@@ -43,7 +44,16 @@ for number in $(seq -w 0 17); do
   fi
 done
 
-[[ $ready -eq 4 && $brief -eq 14 ]] || {
+graph_lesson=docs/learning/lessons/L18-local-code-graph.md
+for mode in build query status diff explain path; do
+  grep -qF "cairn graph $mode" "$graph_lesson"
+done
+grep -qF 'Do not run `graphify install`' "$graph_lesson"
+grep -qF '`cairn sync-kimi --apply`' "$graph_lesson"
+grep -qF '`cairn sync-pi --apply`' "$graph_lesson"
+grep -qF '`graphify-out/`' "$graph_lesson"
+
+[[ $ready -eq 7 && $brief -eq 15 ]] || {
   echo "unexpected learning status totals: ready=$ready brief=$brief" >&2
   exit 1
 }

package/scripts/test-package-install.sh

@@ -19,6 +19,7 @@ server_dev_dependencies_before=$(manifest_field "$ROOT/mcp-memory-server/package
 root_lock_before=$(sha256sum "$ROOT/package-lock.json" | cut -d' ' -f1)
 server_lock_before=$(sha256sum "$ROOT/mcp-memory-server/package-lock.json" | cut -d' ' -f1)
 node "$ROOT/mcp-memory-server/dist/eval-cli.js" --help >"$tmp/source-eval-help"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/source-skill-help"
 env -u CAIRN_EVAL "$ROOT/bin/cairn" eval validate \
   --task-set "$tmp/source-unread-task-set" \
   --adapter "$tmp/source-unread-adapter" \
@@ -52,6 +53,11 @@ env -u CAIRN_NOTE_DISTILLATION cairn notes --help >/dev/null \
   || fail "installed package omitted the notes command"
 
 installed_root="$tmp/prefix/lib/node_modules/@cairnkeep/cli"
+cairn skill --help >"$tmp/installed-skill-help"
+cmp -s "$tmp/source-skill-help" "$tmp/installed-skill-help" || \
+  fail "source and installed skill help differ"
+cairn skill list --project "$tmp/project" --json >"$tmp/installed-skill-list.json" || \
+  fail "installed package skill list failed"
 cairn eval --help >"$tmp/installed-eval-help"
 cmp -s "$tmp/source-eval-help" "$tmp/installed-eval-help" || \
   fail "source and installed eval help differ"
@@ -80,6 +86,35 @@ do
   [[ -f "$installed_root/$required" ]] || fail "npm tarball omitted $required"
 done
 
+for required in \
+  schemas/context-pack.schema.json \
+  mcp-memory-server/dist/mcp-tool-catalog.js \
+  mcp-memory-server/dist/mcp-tool-profile.js \
+  mcp-memory-server/dist/mcp-tool-cli.js \
+  mcp-memory-server/dist/context-pack.js \
+  mcp-memory-server/dist/context-pack-cli.js \
+  docs/mcp-tool-profiles.md \
+  docs/context-packs.md
+do
+  [[ -f "$installed_root/$required" ]] || fail "npm tarball omitted $required"
+done
+CAIRN_PACK_BASE_DIR="$tmp/installed-packs" cairn pack list --json >"$tmp/installed-pack-list.json" || \
+  fail "installed package pack CLI failed"
+cairn mcp-tools list --json >"$tmp/installed-mcp-tools.json" || \
+  fail "installed package mcp-tools CLI failed"
+
+for required in \
+  schemas/skill-adapter.schema.json \
+  schemas/skill-proposal-protocol.schema.json \
+  mcp-memory-server/dist/skill-schema.js \
+  mcp-memory-server/dist/skill-store.js \
+  mcp-memory-server/dist/skill-evaluation.js \
+  mcp-memory-server/dist/skill-cli.js \
+  docs/skill-improvement.md
+do
+  [[ -f "$installed_root/$required" ]] || fail "npm tarball omitted $required"
+done
+
 for required in \
   schemas/eval-task-set.schema.json \
   schemas/eval-adapter.schema.json \

package/scripts/test-skill-cli.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
+tmp=$(mktemp -d)
+trap 'rm -rf "$tmp"' EXIT
+
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" --help >"$tmp/help"
+for operation in harvest list show review propose evaluate apply rollback; do
+  grep -q "$operation" "$tmp/help" || { echo "FAIL: skill help omitted $operation" >&2; exit 1; }
+done
+
+mkdir -p "$tmp/project"
+node "$ROOT/mcp-memory-server/dist/skill-cli.js" list --project "$tmp/project" --json >"$tmp/list.json"
+node -e '
+const value = require(process.argv[1]);
+for (const key of ["candidates", "proposals", "evaluations", "applications"]) {
+  if (!Array.isArray(value[key]) || value[key].length !== 0) process.exit(1);
+}
+' "$tmp/list.json"
+
+if env -u CAIRN_EVAL node "$ROOT/mcp-memory-server/dist/skill-cli.js" evaluate \
+  --project "$tmp/project" --proposal missing --exploration-task-set missing \
+  --confirmation-task-set missing --adapter missing --yes >"$tmp/out" 2>"$tmp/err"; then
+  echo "FAIL: disabled skill evaluation succeeded" >&2
+  exit 1
+fi
+grep -q 'disabled' "$tmp/err" || { echo "FAIL: disabled skill evaluation did not fail closed" >&2; exit 1; }
+
+echo "PASS: installed-style skill CLI discovery and default-off gate"

package/scripts/test-uninstall.sh

@@ -303,6 +303,27 @@ check "memory store restored"     "$(cat "$SB/home/.cairnkeep/db" 2>/dev/null)"
 check "note store restored exactly" "$(sha256sum "$SB/home/.cairnkeep/notes/projects/example/hindsight/failure.md" | cut -d' ' -f1)" "$purge_note_before"
 check "typed and journal state restored exactly" "$(tree_hash "$SB/home/.cairnkeep")" "$purge_store_before"
 
+# --- context-pack data requires its own explicit purge consent ---------------
+PACK_HOME="$SB/pack-home"
+PACK_STORE="$PACK_HOME/.cairnkeep/packs"
+mkdir -p "$PACK_STORE/objects/example" "$PACK_HOME/.cairnkeep/memory"
+printf 'immutable pack\n' >"$PACK_STORE/objects/example/marker"
+printf 'memory\n' >"$PACK_HOME/.cairnkeep/memory/marker"
+pack_output=$(HOME="$PACK_HOME" XDG_CONFIG_HOME="$PACK_HOME/.config" \
+  CAIRN_AGENTFS_BASE_DIR="$PACK_HOME/.cairnkeep" CAIRN_PACK_BASE_DIR="$PACK_STORE" \
+  "$ROOT_DIR/scripts/uninstall.sh" --yes --live-root "$SB/pack-live" --pi-live-root "$SB/pack-pi" --kimi-live-root "$SB/pack-kimi" 2>&1)
+check "ordinary uninstall reports retained context packs" "$(grep -q 'kept context packs' <<<"$pack_output" && echo yes || echo no)" "yes"
+check "ordinary uninstall retains context packs" "$([[ -f "$PACK_STORE/objects/example/marker" ]] && echo yes || echo no)" "yes"
+HOME="$PACK_HOME" XDG_CONFIG_HOME="$PACK_HOME/.config" \
+  CAIRN_AGENTFS_BASE_DIR="$PACK_HOME/.cairnkeep" CAIRN_PACK_BASE_DIR="$PACK_STORE" \
+  "$ROOT_DIR/scripts/uninstall.sh" --yes --purge-memory --live-root "$SB/pack-live" --pi-live-root "$SB/pack-pi" --kimi-live-root "$SB/pack-kimi" >/dev/null 2>&1
+check "memory purge retains context packs" "$([[ -f "$PACK_STORE/objects/example/marker" ]] && echo yes || echo no)" "yes"
+check "memory purge removes non-pack memory" "$([[ -e "$PACK_HOME/.cairnkeep/memory" ]] && echo no || echo yes)" "yes"
+HOME="$PACK_HOME" XDG_CONFIG_HOME="$PACK_HOME/.config" \
+  CAIRN_AGENTFS_BASE_DIR="$PACK_HOME/.cairnkeep" CAIRN_PACK_BASE_DIR="$PACK_STORE" \
+  "$ROOT_DIR/scripts/uninstall.sh" --yes --purge-packs --live-root "$SB/pack-live" --pi-live-root "$SB/pack-pi" --kimi-live-root "$SB/pack-kimi" >/dev/null 2>&1
+check "explicit pack purge removes context packs" "$([[ -e "$PACK_STORE" ]] && echo no || echo yes)" "yes"
+
 echo
 if [[ "$fails" -gt 0 ]]; then echo "test-uninstall: $fails check(s) failed."; exit 1; fi
 echo "test-uninstall: OK"

package/scripts/uninstall.sh

@@ -25,9 +25,12 @@ PI_LIVE_ROOT="${PI_CODING_AGENT_DIR:-$HOME/.pi/agent}"
 KIMI_LIVE_ROOT="${KIMI_CODE_HOME:-$HOME/.kimi-code}"
 STORE_DIR="${CAIRN_AGENTFS_BASE_DIR:-$HOME/.cairnkeep}"
 STORE_DIR="${STORE_DIR/#\~/$HOME}"
+PACK_DIR="${CAIRN_PACK_BASE_DIR:-$HOME/.cairnkeep/packs}"
+PACK_DIR="${PACK_DIR/#\~/$HOME}"
 DRY_RUN=0
 ASSUME_YES=0
 PURGE_MEMORY=0
+PURGE_PACKS=0
 PROJECTS=()
 
 # The hooks cairnkeep registers (basename is the settings.json match token).
@@ -49,7 +52,7 @@ PROJECT_AI_FILES=(
 
 usage() {
   cat <<'EOF'
-Usage: uninstall.sh [--dry-run] [--yes] [--purge-memory] [--live-root PATH]
+Usage: uninstall.sh [--dry-run] [--yes] [--purge-memory] [--purge-packs] [--live-root PATH]
                     [--pi-live-root PATH] [--kimi-live-root PATH] [PROJECT ...]
 
 Reverse cairnkeep's install. Everything removed/edited is backed up into
@@ -59,6 +62,8 @@ $HOME/.cairnkeep-uninstall-<ts>/ with a revert.sh before any change.
   --yes            Do not prompt for confirmation.
   --purge-memory   Also remove the global memory store and .agentfs/ memory and
                    trajectories in each PROJECT. Backed up first; off by default.
+  --purge-packs    Also remove immutable context-pack objects and project
+                   pointers. Backed up first; off by default.
   --live-root PATH Claude root to clean (default: $CLAUDE_CONFIG_DIR or ~/.claude).
   --pi-live-root PATH Pi agent root to clean (default: $PI_CODING_AGENT_DIR or ~/.pi/agent).
   --kimi-live-root PATH Kimi Code root to clean (default: $KIMI_CODE_HOME or ~/.kimi-code).
@@ -73,6 +78,7 @@ while [[ $# -gt 0 ]]; do
     --dry-run) DRY_RUN=1; shift ;;
     --yes) ASSUME_YES=1; shift ;;
     --purge-memory) PURGE_MEMORY=1; shift ;;
+    --purge-packs) PURGE_PACKS=1; shift ;;
     --live-root) LIVE_ROOT="$2"; shift 2 ;;
     --pi-live-root) PI_LIVE_ROOT="$2"; shift 2 ;;
     --kimi-live-root) KIMI_LIVE_ROOT="$2"; shift 2 ;;
@@ -142,6 +148,7 @@ echo "  live root:    $LIVE_ROOT"
 echo "  Pi live root: $PI_LIVE_ROOT"
 echo "  Kimi root:    $KIMI_LIVE_ROOT"
 echo "  memory store: $STORE_DIR ($([[ $PURGE_MEMORY -eq 1 ]] && echo 'WILL be purged' || echo 'kept'))"
+echo "  context packs: $PACK_DIR ($([[ $PURGE_PACKS -eq 1 ]] && echo 'WILL be purged' || echo 'kept'))"
 [[ ${#PROJECTS[@]} -gt 0 ]] && echo "  projects:     ${PROJECTS[*]}"
 
 if [[ $DRY_RUN -eq 0 && $ASSUME_YES -eq 0 ]]; then
@@ -231,6 +238,24 @@ fi
 if [[ $PURGE_MEMORY -eq 1 ]]; then
   echo "Memory store:"
   remove_path "$STORE_DIR"
+  if [[ $PURGE_PACKS -eq 0 && "$PACK_DIR" == "$STORE_DIR"/* && $DRY_RUN -eq 0 ]]; then
+    pack_backup="$BACKUP_DIR/files/${PACK_DIR#/}"
+    if [[ -d "$pack_backup" ]]; then
+      mkdir -p "$(dirname "$PACK_DIR")"
+      cp -a "$pack_backup" "$PACK_DIR"
+      echo "  retained context packs: $PACK_DIR"
+    fi
+  fi
+fi
+
+if [[ $PURGE_MEMORY -eq 0 && $PURGE_PACKS -eq 0 && -d "$PACK_DIR" ]]; then
+  echo "Context packs:"
+  echo "  kept context packs: $PACK_DIR (use --purge-packs to remove)"
+fi
+
+if [[ $PURGE_PACKS -eq 1 && ! ( $PURGE_MEMORY -eq 1 && "$PACK_DIR" == "$STORE_DIR"/* ) ]]; then
+  echo "Context packs:"
+  remove_path "$PACK_DIR"
 fi
 
 # 6. Per-project bootstrap scaffold.

package/templates/env.example.template

@@ -17,6 +17,17 @@
 # scopes default to ~/.cairnkeep; project scope uses <server-cwd>/.agentfs/.
 # CAIRN_AGENTFS_BASE_DIR=~/.cairnkeep
 #
+# Least-authority MCP profiles only restrict currently available tools. Project
+# state is managed with `cairn mcp-tools`; these are process overrides.
+# CAIRN_MCP_TOOL_PROFILE=read-only
+# CAIRN_MCP_ALLOWED_TOOLS=memory_read,memory_search
+#
+# Immutable context packs are local and OFF by default. HTTP access requires
+# the separate pack HTTP flag plus the existing authenticated HTTP settings.
+# CAIRN_CONTEXT_PACKS=1
+# CAIRN_CONTEXT_PACK_HTTP=1
+# CAIRN_PACK_BASE_DIR=~/.cairnkeep/packs
+#
 # Typed metadata, filters, logical note address spaces, and memory_import are
 # OFF by default. Restart the memory server after changing this construction-
 # time tool-schema flag. No model, API key, or network endpoint is required.