@fenglimg/fabric-server 2.3.0-rc.11 → 2.3.0-rc.12

package/dist/index.js

@@ -1,7 +1,7 @@
 // src/index.ts
-import { existsSync as existsSync10 } from "fs";
+import { existsSync as existsSync11 } from "fs";
 import { readFile as readFile22 } from "fs/promises";
-import { join as join27, resolve as resolve4 } from "path";
+import { join as join28, resolve as resolve4 } from "path";
 import { fileURLToPath } from "url";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -10,8 +10,9 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 var AGENTS_MD_RESOURCE_URI = "fabric://bootstrap-readme";
 
 // src/meta-reader.ts
+import { existsSync } from "fs";
 import { readFile } from "fs/promises";
-import { join } from "path";
+import { dirname, join } from "path";
 import { agentsMetaSchema } from "@fenglimg/fabric-shared";
 import { IOFabricError } from "@fenglimg/fabric-shared/errors";
 
@@ -98,8 +99,22 @@ var contextCache = new ContextCache(5e3);
 
 // src/meta-reader.ts
 import { agentsMetaSchema as agentsMetaSchema2 } from "@fenglimg/fabric-shared";
-function resolveProjectRoot() {
-  return process.env.FABRIC_PROJECT_ROOT ?? process.cwd();
+function resolveProjectRoot(startCwd) {
+  const envOverride = process.env.FABRIC_PROJECT_ROOT;
+  if (typeof envOverride === "string" && envOverride.length > 0) return envOverride;
+  const claudeRoot = process.env.CLAUDE_PROJECT_DIR;
+  if (typeof claudeRoot === "string" && claudeRoot.length > 0) return claudeRoot;
+  const start = typeof startCwd === "string" && startCwd.length > 0 ? startCwd : process.cwd();
+  let dir = start;
+  let firstFabric = null;
+  for (let i = 0; i < 64; i++) {
+    if (existsSync(join(dir, ".git"))) return dir;
+    if (firstFabric === null && existsSync(join(dir, ".fabric"))) firstFabric = dir;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return firstFabric ?? start;
 }
 
 // src/services/event-ledger.ts
@@ -107,7 +122,7 @@ import { randomUUID } from "crypto";
 import {
   closeSync,
   createReadStream,
-  existsSync,
+  existsSync as existsSync2,
   fsyncSync,
   openSync,
   readFileSync,
@@ -127,7 +142,7 @@ import {
 } from "@fenglimg/fabric-shared/node/atomic-write";
 
 // src/services/_shared.ts
-import { dirname, join as join2, resolve, sep } from "path";
+import { dirname as dirname2, join as join2, resolve, sep } from "path";
 import { createHash } from "crypto";
 import { mkdir } from "fs/promises";
 import { PathEscapeError } from "@fenglimg/fabric-shared/errors";
@@ -165,7 +180,7 @@ function extractBody(content) {
   return content.slice(match[0].length);
 }
 async function ensureParentDirectory(path) {
-  await mkdir(dirname(path), { recursive: true });
+  await mkdir(dirname2(path), { recursive: true });
 }
 function sha256(content) {
   return `sha256:${createHash("sha256").update(content).digest("hex")}`;
@@ -606,7 +621,7 @@ function resolveRetentionDays(projectRoot, override) {
   }
   const configPath = join3(projectRoot, ".fabric", "fabric-config.json");
   try {
-    if (existsSync(configPath)) {
+    if (existsSync2(configPath)) {
       const raw = readFileSync(configPath, "utf8");
       const parsed = JSON.parse(raw);
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
@@ -628,7 +643,7 @@ function formatUtcDate(date) {
 }
 function flushAndSyncEventLedger(projectRoot) {
   const ledgerPath = getEventLedgerPath(projectRoot);
-  if (!existsSync(ledgerPath)) return;
+  if (!existsSync2(ledgerPath)) return;
   const fd = openSync(ledgerPath, "r+");
   try {
     fsyncSync(fd);
@@ -700,14 +715,14 @@ function appendPayloadWarning(warnings, guardResult, actionHint) {
 }
 
 // src/config-loader.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
 import { join as join4 } from "path";
 import { selectionTokenTtlMsSchema, planContextTopKSchema } from "@fenglimg/fabric-shared";
 var PLAN_CONTEXT_TOP_K_DEFAULT = 24;
 var RECALL_RELEVANCE_RATIO_DEFAULT = 0.25;
 function readFabricConfig(projectRoot) {
   const configPath = join4(projectRoot, ".fabric", "fabric-config.json");
-  if (!existsSync2(configPath)) {
+  if (!existsSync3(configPath)) {
     return {};
   }
   const parsed = JSON.parse(readFileSync2(configPath, "utf8"));
@@ -887,7 +902,7 @@ function readFusion(projectRoot) {
 function readConflictLintThreshold(projectRoot) {
   try {
     const cfgPath = join4(projectRoot, ".fabric", "fabric-config.json");
-    if (!existsSync2(cfgPath)) return void 0;
+    if (!existsSync3(cfgPath)) return void 0;
     const parsed = JSON.parse(readFileSync2(cfgPath, "utf8"));
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
     const v = parsed.conflict_lint_similarity_threshold;
@@ -950,7 +965,7 @@ async function awaitFirstReconcileGate(timeoutMs = 5e3) {
 }
 
 // src/services/extract-knowledge.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { readFile as readFile5 } from "fs/promises";
 import { join as join7 } from "path";
 import {
@@ -1340,6 +1355,7 @@ async function readSetFingerprint(refs) {
   return parts.sort().join("\n");
 }
 var SEMANTIC_SCOPE_LINE = /^semantic_scope:\s*"?([^"\n]+?)"?\s*$/mu;
+var DEPRECATED_LINE = /^deprecated:\s*true\s*$/mu;
 function readSemanticScope(source, layer, project) {
   if (layer === "personal") {
     return "personal";
@@ -1359,6 +1375,9 @@ function filterByActiveProject(entries, activeProject) {
     (e) => scopeRoot(e.semanticScope) !== "project" || e.semanticScope === current
   );
 }
+function filterOutDeprecated(entries) {
+  return entries.filter((entry) => !entry.deprecated);
+}
 function activeProjectOf(projectRoot) {
   const ap = loadProjectConfig2(projectRoot)?.active_project;
   return ap !== void 0 && ap.length > 0 ? ap : void 0;
@@ -1426,6 +1445,7 @@ async function walkReadSetStoresUncached(snapshot) {
       alias: ref.alias,
       layer,
       semanticScope: readSemanticScope(source, layer, ref.project),
+      deprecated: DEPRECATED_LINE.test(source),
       source
     };
   }));
@@ -1434,7 +1454,9 @@ async function walkReadSetStoresUncached(snapshot) {
 async function buildCrossStoreRawItems(projectRoot) {
   const items = [];
   const activeProject = activeProjectOf(projectRoot);
-  for (const entry of filterByActiveProject(await walkReadSetStores(projectRoot), activeProject)) {
+  for (const entry of filterOutDeprecated(
+    filterByActiveProject(await walkReadSetStores(projectRoot), activeProject)
+  )) {
     const baseDescription = extractRuleDescription(entry.source);
     if (baseDescription === void 0) {
       continue;
@@ -1474,7 +1496,7 @@ async function buildKnowledgeCensus(projectRoot) {
   };
   try {
     const activeProject = activeProjectOf(projectRoot);
-    const all = await walkReadSetStores(projectRoot);
+    const all = filterOutDeprecated(await walkReadSetStores(projectRoot));
     const kept = filterByActiveProject(all, activeProject);
     census.dropped_other_project = all.length - kept.length;
     for (const entry of kept) {
@@ -1503,9 +1525,8 @@ async function buildAlwaysActiveBodies(projectRoot) {
   const out = [];
   try {
     const activeProject = activeProjectOf(projectRoot);
-    for (const entry of filterByActiveProject(
-      await walkReadSetStores(projectRoot),
-      activeProject
+    for (const entry of filterOutDeprecated(
+      filterByActiveProject(await walkReadSetStores(projectRoot), activeProject)
     )) {
       const desc = extractRuleDescription(entry.source);
       if (desc === void 0) continue;
@@ -2223,7 +2244,7 @@ async function extractKnowledge(projectRoot, input) {
   const effectiveIdempotencyKey = chosenKey;
   const writeScopeMeta = resolveWriteScopeMeta(layer, projectRoot, semanticScope);
   await ensureParentDirectory(absolutePath);
-  if (existsSync3(absolutePath)) {
+  if (existsSync4(absolutePath)) {
     const existing = await readFile5(absolutePath, "utf8");
     const existingKey = readFrontmatterKey(existing, "x-fabric-idempotency-key");
     if (existingKey === effectiveIdempotencyKey) {
@@ -2350,7 +2371,7 @@ async function resolveDisambiguatedSlugPath(args) {
         slug: candidateSlug
       })
     );
-    if (!existsSync3(candidatePath)) {
+    if (!existsSync4(candidatePath)) {
       return {
         absolutePath: candidatePath,
         sanitizedSlug: candidateSlug,
@@ -2589,11 +2610,11 @@ function readFrontmatterKey(content, key) {
   }
   for (const rawLine of block.split(/\r?\n/u)) {
     const line = rawLine.trim();
-    const sep5 = line.indexOf(":");
-    if (sep5 === -1) continue;
-    const k = line.slice(0, sep5).trim();
+    const sep6 = line.indexOf(":");
+    if (sep6 === -1) continue;
+    const k = line.slice(0, sep6).trim();
     if (k === key) {
-      return line.slice(sep5 + 1).trim();
+      return line.slice(sep6 + 1).trim();
     }
   }
   return void 0;
@@ -2605,6 +2626,58 @@ async function emitEventBestEffort(projectRoot, event) {
   }
 }
 
+// src/services/doctor-unbound-project.ts
+import { loadProjectConfig as loadProjectConfig3 } from "@fenglimg/fabric-shared";
+function detectUnboundProject(projectRoot) {
+  const config = loadProjectConfig3(projectRoot);
+  const alias = config?.active_write_store;
+  if (typeof alias !== "string" || alias.length === 0) {
+    return null;
+  }
+  const missing = [];
+  if (typeof config?.project_id !== "string" || config.project_id.length === 0) {
+    missing.push("project_id");
+  }
+  if (typeof config?.active_project !== "string" || config.active_project.length === 0) {
+    missing.push("active_project");
+  }
+  return missing.length > 0 ? { alias, missing } : null;
+}
+function createUnboundProjectCheck(t, violation) {
+  if (violation === null) {
+    return {
+      name: t("doctor.check.unbound_project.name"),
+      status: "ok",
+      message: t("doctor.check.unbound_project.ok")
+    };
+  }
+  return {
+    name: t("doctor.check.unbound_project.name"),
+    status: "warn",
+    kind: "warning",
+    code: "unbound_project",
+    fixable: false,
+    message: t("doctor.check.unbound_project.message", {
+      alias: violation.alias,
+      missing: violation.missing.join(" + ")
+    }),
+    actionHint: t("doctor.check.unbound_project.remediation")
+  };
+}
+
+// src/services/write-scope-warning.ts
+function unsealedProjectScopeWarning(projectRoot) {
+  const violation = detectUnboundProject(projectRoot);
+  if (violation === null) {
+    return null;
+  }
+  return {
+    code: "project_scope_unsealed",
+    file: "<response>",
+    action_hint: `Write store '${violation.alias}' is bound but this repo is missing ${violation.missing.join(", ")} \u2014 team-layer entries will land flat under knowledge/<type>/ (semantic_scope: team) instead of the project-partitioned knowledge/projects/<id>/<type>/. Run \`fabric doctor --fix\` to seal the project coordinate, or ignore if this is genuinely cross-project team knowledge.`
+  };
+}
+
 // src/tools/extract-knowledge.ts
 function registerExtractKnowledge(server, tracker) {
   server.registerTool(
@@ -2642,6 +2715,10 @@ function registerExtractKnowledge(server, tracker) {
         if (gateWarn) {
           response.warnings = [gateWarn];
         }
+        const scopeWarn = unsealedProjectScopeWarning(projectRoot);
+        if (scopeWarn) {
+          response.warnings = [...response.warnings ?? [], scopeWarn];
+        }
         const payloadLimits = readPayloadLimits(projectRoot);
         const serialized = JSON.stringify(response);
         const guardResult = enforcePayloadLimit(serialized, payloadLimits);
@@ -3271,10 +3348,10 @@ async function planContext(projectRoot, input) {
     });
   }
   const topKIds = new Set(topKCandidates.map((item) => item.stable_id));
-  const retrievalDropped = rankedCandidates.filter((item) => !topKIds.has(item.stable_id)).map((item) => ({ id: item.stable_id, reason: "retrieval_budget" }));
-  const omittedCandidateCount = retrievalDropped.length;
+  const retrievalDroppedInitial = rankedCandidates.filter((item) => !topKIds.has(item.stable_id)).map((item) => ({ id: item.stable_id, reason: "retrieval_budget" }));
   let candidates = topKCandidates;
   const relatedAppended = {};
+  const appendedIds = /* @__PURE__ */ new Set();
   if (input.include_related === true) {
     const inTopK = new Set(topKCandidates.flatMap((item) => relatedLookupKeys(item.stable_id)));
     const rankedById = /* @__PURE__ */ new Map();
@@ -3286,7 +3363,6 @@ async function planContext(projectRoot, input) {
       }
     }
     const appended = [];
-    const appendedIds = /* @__PURE__ */ new Set();
     for (const surfaced of topKCandidates) {
       for (const rel of surfaced.description.related ?? []) {
         if (inTopK.has(rel)) continue;
@@ -3302,6 +3378,8 @@ async function planContext(projectRoot, input) {
       candidates = [...topKCandidates, ...appended];
     }
   }
+  const retrievalDropped = retrievalDroppedInitial.filter((d) => !appendedIds.has(d.id));
+  const omittedCandidateCount = retrievalDropped.length;
   const entries = uniquePaths.map((path) => ({
     path,
     requirement_profile: buildRequirementProfile(path, input)
@@ -3882,7 +3960,6 @@ function relatedLookupKeys(stableId) {
 }
 
 // src/services/recall.ts
-var RECALL_DIRECTIVE = "These entries are auto-accounted as citations for edits whose paths overlap this recall \u2014 no first-line cite needed. Speak up only to dismiss one you judge inapplicable: `dismissed: <id> (<reason>)`.";
 async function recall(projectRoot, input) {
   const planResult = await planContext(projectRoot, input);
   const {
@@ -3938,25 +4015,51 @@ async function recall(projectRoot, input) {
   }
   const nextSteps = buildNextSteps(planResult, paths, candidateById, candidateLookup);
   const pathByStableId = new Map(paths.map((p) => [p.stable_id, p]));
-  const entries = planRest.candidates.map((c, index) => {
+  const entries = planRest.candidates.map((c) => {
     const readPath = pathByStableId.get(c.stable_id);
     const scored = candidateScores?.get(c.stable_id);
     return {
       stable_id: c.stable_id,
-      rank: index + 1,
       description: slimDescription(c.description),
       ...readPath ? { read_path: readPath.path } : {},
-      ...readPath?.store ? { store: readPath.store } : {},
+      // TASK-004: flatten { alias } → alias string on the wire.
+      ...readPath?.store ? { store_alias: readPath.store.alias } : {},
       ...isAlwaysActive(c) ? { body_in_context: true } : {},
-      ...scored ? { score: scored.score, score_breakdown: scored.score_breakdown } : {}
+      // TASK-004: entry.score dropped (final===score invariant, KT-PIT-0036);
+      // consumers read score_breakdown.final when opt-in enabled.
+      // TASK-006: score_breakdown is now opt-in via include_score_breakdown —
+      // steady-state recall omits it (~4.8KB saved on a 24-entry sample). The
+      // plan-context service layer still writes candidate_scores unconditionally,
+      // so the debug surface is available on demand without perturbing ranking.
+      ...scored && input.include_score_breakdown === true ? { score_breakdown: scored.score_breakdown } : {}
     };
   });
-  const { entries: _reqProfiles, candidates: _candidates, ...planRestNoLists } = planRest;
+  const {
+    entries: _reqProfiles,
+    candidates: _candidates,
+    stale: _stale,
+    intent: _intent,
+    dropped: droppedList,
+    preflight_diagnostics: preflightList,
+    ...planRestNoLists
+  } = planRest;
+  const retrievalDroppedCount = (droppedList ?? []).filter(
+    (d) => d.reason === "retrieval_budget"
+  ).length;
+  const payloadDroppedCount = (droppedList ?? []).filter((d) => d.reason === "payload_budget").length;
+  const droppedIds = (droppedList ?? []).map((d) => d.id);
   return {
     ...planRestNoLists,
     entries,
-    directive: RECALL_DIRECTIVE,
-    ...nextSteps.length > 0 ? { next_steps: nextSteps } : {}
+    ...nextSteps.length > 0 ? { next_steps: nextSteps } : {},
+    ...droppedIds.length > 0 ? { dropped_ids: droppedIds } : {},
+    ...retrievalDroppedCount > 0 || payloadDroppedCount > 0 ? {
+      dropped_reasons: {
+        ...retrievalDroppedCount > 0 ? { retrieval_budget: retrievalDroppedCount } : {},
+        ...payloadDroppedCount > 0 ? { payload_budget: payloadDroppedCount } : {}
+      }
+    } : {},
+    ...preflightList !== void 0 && preflightList.length > 0 ? { preflight_diagnostics: preflightList } : {}
   };
 }
 var ALWAYS_ACTIVE_TYPES2 = /* @__PURE__ */ new Set(["models", "guidelines"]);
@@ -3967,8 +4070,8 @@ function isAlwaysActive(candidate) {
 function slimDescription(d) {
   return {
     summary: d.summary,
-    must_read_if: d.must_read_if,
-    intent_clues: d.intent_clues,
+    ...d.must_read_if !== d.summary ? { must_read_if: d.must_read_if } : {},
+    ...Array.isArray(d.impact) && d.impact.length > 0 ? { impact: d.impact } : {},
     ...d.knowledge_type !== void 0 ? { knowledge_type: d.knowledge_type } : {}
   };
 }
@@ -4010,7 +4113,7 @@ function registerRecall(server, tracker) {
   server.registerTool(
     "fab_recall",
     {
-      description: "Recall the Fabric knowledge relevant to the files you are about to touch. Pass candidate `paths` (+ optional `intent`) and receive a single ranked `entries[]` list \u2014 each entry carries its DESCRIPTION (summary / intent_clues / must_read_if / related), a `read_path` (the on-disk knowledge file to Read for the body), `rank` (1 = most relevant), and `body_in_context:true` when the body is already injected at SessionStart. It does NOT return bodies \u2014 Read an entry's `read_path` on demand (cheap, recoverable) instead of paying a permanent per-recall context tax for bodies you may not use. Pass `ids` to scope which entries surface a read_path when you already know which you want; `include_related:true` to also surface one-hop `related` neighbours.",
+      description: "Recall the Fabric knowledge relevant to the files you are about to touch. Pass candidate `paths` (+ optional `intent`) and receive a single ranked `entries[]` list (best-first \u2014 array index IS the rank). Each entry carries `description.summary` (always) plus optional `description.must_read_if` (omitted when identical to summary), `description.impact` (\u26A0\uFE0F consequence hints), `description.knowledge_type`, `read_path` (on-disk file for the body), `store_alias`, and `body_in_context:true` when the body is already injected at SessionStart. Full frontmatter fields (intent_clues / tech_stack / related / tags / relevance_paths) are NOT on the wire \u2014 Read the `read_path` to load them. Pass `ids` to scope surfaced read_paths, `include_related:true` to append one-hop neighbours, `include_score_breakdown:true` for numeric ranking diagnostics.",
       inputSchema: recallInputSchema,
       outputSchema: recallOutputSchema,
       annotations: recallAnnotations
@@ -4026,7 +4129,8 @@ function registerRecall(server, tracker) {
       target_paths,
       layer_filter,
       ids,
-      include_related
+      include_related,
+      include_score_breakdown
     }) => {
       const requestId = randomUUID3();
       const startedAt = process.hrtime.bigint();
@@ -4050,7 +4154,8 @@ function registerRecall(server, tracker) {
           // declared layer restriction instead of silently discarding it.
           layer_filter,
           ids,
-          include_related
+          include_related,
+          include_score_breakdown
         };
         const result = await recall(projectRoot, input);
         const response = {
@@ -4269,15 +4374,15 @@ import { enforcePayloadLimit as enforcePayloadLimit4 } from "@fenglimg/fabric-sh
 
 // src/services/review.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { readFile as readFile9, readdir as readdir2, stat as stat2, unlink as unlink2 } from "fs/promises";
 import { homedir } from "os";
 import { basename, isAbsolute, join as join12, relative, resolve as resolve2, sep as sep2 } from "path";
 
 // src/services/promotion-gate.ts
 function toLocalId(id) {
-  const sep5 = id.indexOf(":");
-  return sep5 === -1 ? id : id.slice(sep5 + 1);
+  const sep6 = id.indexOf(":");
+  return sep6 === -1 ? id : id.slice(sep6 + 1);
 }
 async function hasUnresolvedDismissal(projectRoot, id) {
   const target = toLocalId(id);
@@ -4308,10 +4413,10 @@ async function hasUnresolvedDismissal(projectRoot, id) {
 }
 
 // src/services/review.ts
-import { allocateStoreKnowledgeId, isPersonalScope as isPersonalScope2, loadProjectConfig as loadProjectConfig3 } from "@fenglimg/fabric-shared";
+import { allocateStoreKnowledgeId, isPersonalScope as isPersonalScope2, loadProjectConfig as loadProjectConfig4 } from "@fenglimg/fabric-shared";
 
 // src/services/pending-dedupe.ts
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { readdir, readFile as readFile8, unlink } from "fs/promises";
 import { join as join11 } from "path";
 var PENDING_TYPES = ["decisions", "pitfalls", "guidelines", "models", "processes"];
@@ -4387,7 +4492,7 @@ async function mergePendingTwins(projectRoot) {
     }
     for (const type of PENDING_TYPES) {
       const dir = join11(pendingBase2, type);
-      if (!existsSync4(dir)) continue;
+      if (!existsSync5(dir)) continue;
       let names;
       try {
         names = (await readdir(dir)).filter((n) => n.endsWith(".md"));
@@ -4484,6 +4589,14 @@ async function reviewKnowledge(projectRoot, input) {
     }
     case "modify-layer":
       return await modifyEntry(projectRoot, input.pending_path, input.changes);
+    // v2.3 batch content-modify: the array-native flush path for the
+    // fabric-review maintain loop. Collapses N per-item modify round-trips
+    // (each paying a first-reconcile gate wait) into one call.
+    case "modify-content-batch":
+      return {
+        action: "modify-content-batch",
+        modified: await modifyContentBatch(projectRoot, input.items)
+      };
     case "defer":
       return {
         action: "defer",
@@ -4494,6 +4607,19 @@ async function reviewKnowledge(projectRoot, input) {
           input.reason
         )
       };
+    // retire (W3-C): mark canonical entries deprecated in place. Same in-place
+    // frontmatter-merge path as modify (resolveModifyTarget + rewriteFrontmatterMerge),
+    // batched over pending_paths like reject/defer. Never deletes a file.
+    case "retire":
+      return {
+        action: "retire",
+        retired: await retireAll(
+          projectRoot,
+          input.pending_paths,
+          input.superseded_by,
+          input.reason
+        )
+      };
     default: {
       const exhaustive = input;
       throw new Error(`unsupported action: ${JSON.stringify(exhaustive)}`);
@@ -4591,7 +4717,7 @@ async function listPending(projectRoot, filters) {
   for (const source of sources) {
     for (const type of typesToScan) {
       const dir = join12(source.root, type);
-      if (!existsSync5(dir)) {
+      if (!existsSync6(dir)) {
         continue;
       }
       let entries;
@@ -4729,7 +4855,7 @@ async function approveOne(projectRoot, pendingPath) {
     );
     allocatedId = stableId;
     const newFilename = `${stableId}--${slug}.md`;
-    const promoteProject = layer === "team" ? loadProjectConfig3(projectRoot)?.active_project : void 0;
+    const promoteProject = layer === "team" ? loadProjectConfig4(projectRoot)?.active_project : void 0;
     targetAbs = join12(
       resolveStoreCanonicalBase(layer, projectRoot, promoteProject),
       pluralType,
@@ -4743,7 +4869,7 @@ async function approveOne(projectRoot, pendingPath) {
     await atomicWriteText(targetAbs, rewritten);
     writtenTarget = true;
     if (sourceIsStore) {
-      if (existsSync5(sourceAbs)) {
+      if (existsSync6(sourceAbs)) {
         await unlink2(sourceAbs);
       }
     } else if (sourceOrigin === "team") {
@@ -4753,12 +4879,12 @@ async function approveOne(projectRoot, pendingPath) {
           stdio: ["ignore", "pipe", "pipe"]
         });
       } catch {
-        if (existsSync5(sourceAbs)) {
+        if (existsSync6(sourceAbs)) {
           await unlink2(sourceAbs);
         }
       }
     } else {
-      if (existsSync5(sourceAbs)) {
+      if (existsSync6(sourceAbs)) {
         await unlink2(sourceAbs);
       }
     }
@@ -4770,7 +4896,7 @@ async function approveOne(projectRoot, pendingPath) {
     });
     return { pending_path: pendingPath, stable_id: stableId };
   } catch (err) {
-    if (writtenTarget && targetAbs !== void 0 && existsSync5(targetAbs)) {
+    if (writtenTarget && targetAbs !== void 0 && existsSync6(targetAbs)) {
       try {
         await unlink2(targetAbs);
       } catch {
@@ -4791,7 +4917,7 @@ async function rejectAll(projectRoot, pendingPaths, reason) {
   for (const pendingPath of pendingPaths) {
     try {
       const sandboxed = resolveSandboxedPath(projectRoot, pendingPath, { allowPersonal: true });
-      if (existsSync5(sandboxed.abs)) {
+      if (existsSync6(sandboxed.abs)) {
         const content = await readFile9(sandboxed.abs, "utf8");
         const merged = rewriteFrontmatterMerge(content, { status: "rejected" });
         const rejectedAbs = sandboxed.abs.includes(`${sep2}pending${sep2}`) ? sandboxed.abs.replace(`${sep2}pending${sep2}`, `${sep2}rejected${sep2}`) : null;
@@ -4860,6 +4986,23 @@ async function modifyEntry(projectRoot, pendingPath, changes) {
     pending_path: pendingPath
   };
 }
+async function modifyContentBatch(projectRoot, items) {
+  const results = [];
+  for (const item of items) {
+    const { layer: _droppedLayer, ...contentChanges } = item.changes;
+    try {
+      await modifyEntry(projectRoot, item.pending_path, contentChanges);
+      results.push({ pending_path: item.pending_path, ok: true });
+    } catch (error) {
+      results.push({
+        pending_path: item.pending_path,
+        ok: false,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  return results;
+}
 function pickModifyEventValues(source, fields) {
   const out = {};
   for (const field of fields) {
@@ -4874,7 +5017,7 @@ function resolveModifyTarget(projectRoot, pendingPath) {
   } catch {
     return null;
   }
-  if (existsSync5(sandboxed.abs)) {
+  if (existsSync6(sandboxed.abs)) {
     return {
       absPath: sandboxed.abs,
       isInProjectTree: sandboxed.isInProjectTree,
@@ -4921,7 +5064,7 @@ async function modifyLayerFlip(projectRoot, target, content, fm, changes) {
     pluralType,
     resolveWriteTargetStoreDir(toLayer, projectRoot)
   );
-  const flipProject = toLayer === "team" ? loadProjectConfig3(projectRoot)?.active_project : void 0;
+  const flipProject = toLayer === "team" ? loadProjectConfig4(projectRoot)?.active_project : void 0;
   const toAbs = join12(
     resolveStoreCanonicalBase(toLayer, projectRoot, flipProject),
     pluralType,
@@ -4960,7 +5103,7 @@ async function modifyLayerFlip(projectRoot, target, content, fm, changes) {
     }
   }
   await atomicWriteText(toAbs, rewritten);
-  if (!moved && existsSync5(target.absPath) && target.absPath !== toAbs) {
+  if (!moved && existsSync6(target.absPath) && target.absPath !== toAbs) {
     await unlink2(target.absPath);
   }
   const flipReason = `layer_flip:${priorStableId ?? "<unassigned>"}->${newStableId}`;
@@ -5223,7 +5366,7 @@ async function deferAll(projectRoot, pendingPaths, until, reason) {
     let stableId;
     try {
       const sandboxed = resolveSandboxedPath(projectRoot, pendingPath, { allowPersonal: true });
-      if (existsSync5(sandboxed.abs)) {
+      if (existsSync6(sandboxed.abs)) {
         const content = await readFile9(sandboxed.abs, "utf8");
         stableId = parseFrontmatter(content).id;
         const patch = {
@@ -5249,6 +5392,52 @@ async function deferAll(projectRoot, pendingPaths, until, reason) {
   }
   return deferred;
 }
+async function retireAll(projectRoot, pendingPaths, supersededBy, reason) {
+  const retired = [];
+  for (const pendingPath of pendingPaths) {
+    const result = await retireOne(projectRoot, pendingPath, supersededBy, reason);
+    if (result !== null) {
+      retired.push(result);
+    }
+  }
+  return retired;
+}
+async function retireOne(projectRoot, pendingPath, supersededBy, reason) {
+  const target = resolveModifyTarget(projectRoot, pendingPath);
+  if (target === null) {
+    return null;
+  }
+  const content = await readFile9(target.absPath, "utf8");
+  const fm = parseFrontmatter(content);
+  const patch = {
+    deprecated: true,
+    ...supersededBy !== void 0 ? { superseded_by: supersededBy } : {}
+  };
+  const merged = rewriteFrontmatterMerge(content, patch);
+  await atomicWriteText(target.absPath, merged);
+  const changedFields = supersededBy !== void 0 ? ["deprecated", "superseded_by"] : ["deprecated"];
+  const before = { deprecated: fm.deprecated ?? null };
+  const after = { deprecated: true };
+  if (supersededBy !== void 0) {
+    before.superseded_by = fm.superseded_by ?? null;
+    after.superseded_by = supersededBy;
+  }
+  await emitEventBestEffort2(projectRoot, {
+    event_type: "knowledge_modified",
+    ...fm.id !== void 0 ? { stable_id: fm.id } : {},
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    path: pendingPath,
+    changed_fields: changedFields,
+    before,
+    after,
+    reason: reason !== void 0 ? `retire:${pendingPath}: ${reason}` : `retire:${pendingPath}`
+  });
+  return {
+    path: pendingPath,
+    ...fm.id !== void 0 ? { stable_id: fm.id } : {},
+    ...supersededBy !== void 0 ? { superseded_by: supersededBy } : {}
+  };
+}
 function parseFrontmatter(content) {
   const match = /^(?:\uFEFF)?---\r?\n([\s\S]*?)\r?\n---\s*(?:\r?\n|$)/u.exec(content);
   if (match === null) {
@@ -5262,10 +5451,10 @@ function parseFrontmatter(content) {
   for (const rawLine of block.split(/\r?\n/u)) {
     const line = rawLine.trim();
     if (line.length === 0) continue;
-    const sep5 = line.indexOf(":");
-    if (sep5 === -1) continue;
-    const key = line.slice(0, sep5).trim();
-    const value = line.slice(sep5 + 1).trim();
+    const sep6 = line.indexOf(":");
+    if (sep6 === -1) continue;
+    const key = line.slice(0, sep6).trim();
+    const value = line.slice(sep6 + 1).trim();
     switch (key) {
       case "id":
         out.id = stripQuotes(value);
@@ -5322,6 +5511,14 @@ function parseFrontmatter(content) {
       case "last_review_confirmed_at":
         out.last_review_confirmed_at = stripQuotes(value);
         break;
+      case "deprecated":
+        if (value === "true" || value === "false") {
+          out.deprecated = value === "true";
+        }
+        break;
+      case "superseded_by":
+        out.superseded_by = stripQuotes(value);
+        break;
       default:
         break;
     }
@@ -5391,12 +5588,14 @@ ${content}`;
   if (patch.status !== void 0) updates.status = `status: ${patch.status}`;
   if (patch.deferred_until !== void 0) updates.deferred_until = `deferred_until: ${quoteIfNeeded(patch.deferred_until)}`;
   if (patch.last_review_confirmed_at !== void 0) updates.last_review_confirmed_at = `last_review_confirmed_at: ${quoteIfNeeded(patch.last_review_confirmed_at)}`;
+  if (patch.deprecated !== void 0) updates.deprecated = `deprecated: ${patch.deprecated}`;
+  if (patch.superseded_by !== void 0) updates.superseded_by = `superseded_by: ${quoteIfNeeded(patch.superseded_by)}`;
   const lines = block.split(/\r?\n/u);
   const seen = /* @__PURE__ */ new Set();
   const newLines = [];
   for (const line of lines) {
-    const sep5 = line.indexOf(":");
-    const key = sep5 === -1 ? "" : line.slice(0, sep5).trim();
+    const sep6 = line.indexOf(":");
+    const key = sep6 === -1 ? "" : line.slice(0, sep6).trim();
     if (key in updates) {
       newLines.push(updates[key]);
       seen.add(key);
@@ -5431,6 +5630,8 @@ function appendPatchLines(lines, patch) {
   if (patch.status !== void 0) lines.push(`status: ${patch.status}`);
   if (patch.deferred_until !== void 0) lines.push(`deferred_until: ${quoteIfNeeded(patch.deferred_until)}`);
   if (patch.last_review_confirmed_at !== void 0) lines.push(`last_review_confirmed_at: ${quoteIfNeeded(patch.last_review_confirmed_at)}`);
+  if (patch.deprecated !== void 0) lines.push(`deprecated: ${patch.deprecated}`);
+  if (patch.superseded_by !== void 0) lines.push(`superseded_by: ${quoteIfNeeded(patch.superseded_by)}`);
 }
 function flowArrayElement(value) {
   if (/[\n\r,\[\]{}"#:]/u.test(value) || /^\s|\s$/u.test(value)) {
@@ -5465,7 +5666,7 @@ function registerReview(server, tracker) {
   server.registerTool(
     "fab_review",
     {
-      description: "Review pending knowledge entries in resolved store-backed knowledge/pending/. Discriminated by `action`; required fields per action: list \u2192 (filters optional); approve \u2192 pending_paths[\u22651]; reject \u2192 pending_paths[\u22651] + reason; modify / modify-content \u2192 pending_path + changes; modify-layer \u2192 pending_path + changes.layer(team|personal); search \u2192 query; defer \u2192 pending_paths[\u22651] (until/reason optional). approve allocates a stable_id and promotes to the canonical store knowledge path. Skill-side tool \u2014 invoked by fabric-review.",
+      description: "Review pending knowledge entries in resolved store-backed knowledge/pending/. Discriminated by `action`; required fields per action: list \u2192 (filters optional); approve \u2192 pending_paths[\u22651]; reject \u2192 pending_paths[\u22651] + reason; modify / modify-content \u2192 pending_path + changes; modify-layer \u2192 pending_path + changes.layer(team|personal); modify-content-batch \u2192 items[{pending_path, changes}][\u22651] (batch content edits; per-item partial-failure reported in modified[]); search \u2192 query; defer \u2192 pending_paths[\u22651] (until/reason optional); retire \u2192 pending_paths[\u22651] (superseded_by/reason optional; marks canonical entries deprecated in place \u2014 deprecate-over-delete \u2014 so they stop surfacing in recall/broad indexes). approve allocates a stable_id and promotes to the canonical store knowledge path. Skill-side tool \u2014 invoked by fabric-review.",
       // Flat ZodRawShape required by MCP SDK 1.29.0 registerTool. The
       // authoritative cross-field contract still lives in FabReviewInputSchema
       // (discriminatedUnion) and is enforced inside the handler via
@@ -5487,6 +5688,12 @@ function registerReview(server, tracker) {
         if (gateWarn) {
           response.warnings = [gateWarn];
         }
+        if (narrowed.action !== "retire") {
+          const scopeWarn = unsealedProjectScopeWarning(projectRoot);
+          if (scopeWarn) {
+            response.warnings = [...response.warnings ?? [], scopeWarn];
+          }
+        }
         const payloadLimits = readPayloadLimits(projectRoot);
         const serialized = JSON.stringify(response);
         const guardResult = enforcePayloadLimit4(serialized, payloadLimits);
@@ -5573,7 +5780,7 @@ function registerPending(server, tracker) {
 // src/services/doctor.ts
 import { access as access4, readFile as readFile19, readdir as readdirAsync, stat as statAsync, unlink as unlink4, writeFile as writeFile5 } from "fs/promises";
 import { constants as constants2 } from "fs";
-import { isAbsolute as isAbsolute2, join as join24, posix as posix5, resolve as resolve3 } from "path";
+import { isAbsolute as isAbsolute2, join as join25, posix as posix5, resolve as resolve3 } from "path";
 import {
   createTranslator,
   forensicReportSchema,
@@ -5977,7 +6184,7 @@ function createLayerMismatchCheck(t, inspection) {
 
 // src/services/doctor-relevance-paths.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync6, readdirSync, statSync as statSync3 } from "fs";
+import { existsSync as existsSync7, readdirSync, statSync as statSync3 } from "fs";
 import { join as join14, sep as sep3 } from "path";
 import { minimatch } from "minimatch";
 var MS_PER_DAY = 24 * 60 * 60 * 1e3;
@@ -5999,7 +6206,7 @@ function expandGlob(rawGlob) {
   return rawGlob.endsWith("/") ? `${rawGlob}**` : rawGlob;
 }
 function collectWorkspacePaths(projectRoot) {
-  if (!existsSync6(projectRoot)) {
+  if (!existsSync7(projectRoot)) {
     return [];
   }
   try {
@@ -6409,8 +6616,8 @@ function createStaleArchiveCheck(t, inspection) {
 // src/services/doctor-knowledge-promotion.ts
 var PROVEN_RELATED_INDEGREE_THRESHOLD = 3;
 function toLocalId2(id) {
-  const sep5 = id.indexOf(":");
-  return sep5 === -1 ? id : id.slice(sep5 + 1);
+  const sep6 = id.indexOf(":");
+  return sep6 === -1 ? id : id.slice(sep6 + 1);
 }
 function computeRelatedInDegree(entries) {
   const indegree = /* @__PURE__ */ new Map();
@@ -6690,45 +6897,6 @@ function createScopeLintCheck(t, violations) {
   };
 }
 
-// src/services/doctor-unbound-project.ts
-import { loadProjectConfig as loadProjectConfig4 } from "@fenglimg/fabric-shared";
-function detectUnboundProject(projectRoot) {
-  const config = loadProjectConfig4(projectRoot);
-  const alias = config?.active_write_store;
-  if (typeof alias !== "string" || alias.length === 0) {
-    return null;
-  }
-  const missing = [];
-  if (typeof config?.project_id !== "string" || config.project_id.length === 0) {
-    missing.push("project_id");
-  }
-  if (typeof config?.active_project !== "string" || config.active_project.length === 0) {
-    missing.push("active_project");
-  }
-  return missing.length > 0 ? { alias, missing } : null;
-}
-function createUnboundProjectCheck(t, violation) {
-  if (violation === null) {
-    return {
-      name: t("doctor.check.unbound_project.name"),
-      status: "ok",
-      message: t("doctor.check.unbound_project.ok")
-    };
-  }
-  return {
-    name: t("doctor.check.unbound_project.name"),
-    status: "warn",
-    kind: "warning",
-    code: "unbound_project",
-    fixable: false,
-    message: t("doctor.check.unbound_project.message", {
-      alias: violation.alias,
-      missing: violation.missing.join(" + ")
-    }),
-    actionHint: t("doctor.check.unbound_project.remediation")
-  };
-}
-
 // src/services/doctor-write-route-lint.ts
 import { loadProjectConfig as loadProjectConfig5 } from "@fenglimg/fabric-shared";
 function detectWriteRouteUnbound(projectRoot) {
@@ -6776,9 +6944,100 @@ function createWriteRouteUnboundCheck(t, violations) {
   };
 }
 
+// src/services/doctor-stray-fabric-dir.ts
+import { readdirSync as readdirSync2, rename as renameCb } from "fs";
+import { promisify } from "util";
+import { join as join17, sep as sep4 } from "path";
+var rename = promisify(renameCb);
+var IGNORED_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "coverage",
+  ".next",
+  ".turbo",
+  "Library",
+  "Temp",
+  ".claude",
+  ".codex",
+  ".workflow"
+]);
+var MAX_DEPTH = 8;
+function detectStrayFabricDirs(projectRoot) {
+  const strays = [];
+  walk(projectRoot, projectRoot, 0, strays);
+  return strays;
+}
+function walk(root, current, depth, out) {
+  if (depth > MAX_DEPTH) return;
+  let entries;
+  try {
+    entries = readdirSync2(current, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    if (entry.name === ".fabric") {
+      if (current !== root) {
+        out.push(join17(current, entry.name));
+      }
+      continue;
+    }
+    if (IGNORED_DIRS.has(entry.name)) continue;
+    walk(root, join17(current, entry.name), depth + 1, out);
+  }
+}
+function relative2(root, abs) {
+  const prefix = root.endsWith(sep4) ? root : root + sep4;
+  return abs.startsWith(prefix) ? abs.slice(prefix.length) : abs;
+}
+function createStrayFabricDirCheck(t, strays, projectRoot) {
+  if (strays.length === 0) {
+    return {
+      name: t("doctor.check.stray_fabric_dir_detected.name"),
+      status: "ok",
+      message: t("doctor.check.stray_fabric_dir_detected.ok")
+    };
+  }
+  const summary = strays.slice(0, 5).map((abs) => relative2(projectRoot, abs)).join(", ");
+  return {
+    name: t("doctor.check.stray_fabric_dir_detected.name"),
+    status: "warn",
+    kind: "warning",
+    code: "stray_fabric_dir_detected",
+    fixable: true,
+    message: t("doctor.check.stray_fabric_dir_detected.message", {
+      count: String(strays.length),
+      dirs: summary
+    }),
+    actionHint: t("doctor.check.stray_fabric_dir_detected.remediation")
+  };
+}
+async function fixStrayFabricDirs(strays, nowIso = (/* @__PURE__ */ new Date()).toISOString()) {
+  const stamp = nowIso.replace(/[:.]/g, "-");
+  const results = [];
+  for (const from of strays) {
+    const to = `${from}.stale-${stamp}`;
+    try {
+      await rename(from, to);
+      results.push({ from, to, ok: true });
+    } catch (err) {
+      results.push({
+        from,
+        to,
+        ok: false,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return results;
+}
+
 // src/services/doctor-store-counters.ts
-import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join17 } from "path";
+import { existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync3 } from "fs";
+import { join as join18 } from "path";
 import {
   buildStoreResolveInput as buildStoreResolveInput6,
   createStoreResolver as createStoreResolver6,
@@ -6805,7 +7064,7 @@ function resolveCounterStores(projectRoot) {
   return readSet.stores.map((entry) => ({
     uuid: entry.store_uuid,
     alias: entry.alias,
-    dir: join17(
+    dir: join18(
       globalRoot,
       storeRelativePathForMount5(
         input.mountedStores.find((s) => s.store_uuid === entry.store_uuid) ?? {
@@ -6833,13 +7092,13 @@ function readEntryId(file) {
 function computeStoreDiskMax(storeDir) {
   const max = defaultAgentsMetaCounters();
   for (const type of STORE_KNOWLEDGE_TYPE_DIRS2) {
-    const dir = join17(storeDir, STORE_LAYOUT2.knowledgeDir, type);
-    if (!existsSync7(dir)) {
+    const dir = join18(storeDir, STORE_LAYOUT2.knowledgeDir, type);
+    if (!existsSync8(dir)) {
       continue;
     }
     let names;
     try {
-      names = readdirSync2(dir);
+      names = readdirSync3(dir);
     } catch {
       continue;
     }
@@ -6847,7 +7106,7 @@ function computeStoreDiskMax(storeDir) {
       if (!name.endsWith(".md")) {
         continue;
       }
-      const parsed = parseKnowledgeId2(readEntryId(join17(dir, name)) ?? "");
+      const parsed = parseKnowledgeId2(readEntryId(join18(dir, name)) ?? "");
       if (parsed === null) {
         continue;
       }
@@ -6929,8 +7188,8 @@ function createStoreCounterCheck(t, drifts) {
 }
 
 // src/services/doctor-store-orphan.ts
-import { readdirSync as readdirSync3 } from "fs";
-import { join as join18 } from "path";
+import { readdirSync as readdirSync4 } from "fs";
+import { join as join19 } from "path";
 import {
   STORES_ROOT_DIR,
   addMountedStore,
@@ -6943,7 +7202,7 @@ import {
 var STORE_BY_ALIAS_DIR = "by-alias";
 function listDir(dir) {
   try {
-    return readdirSync3(dir);
+    return readdirSync4(dir);
   } catch {
     return [];
   }
@@ -6954,15 +7213,15 @@ function inspectStoreOrphans(globalRoot = resolveGlobalRoot7()) {
     return [];
   }
   const registered = new Set(config.stores.map((s) => s.store_uuid));
-  const storesRoot = join18(globalRoot, STORES_ROOT_DIR);
+  const storesRoot = join19(globalRoot, STORES_ROOT_DIR);
   const orphans = [];
   for (const group of listDir(storesRoot)) {
     if (group === STORE_BY_ALIAS_DIR) {
       continue;
     }
-    const groupDir = join18(storesRoot, group);
+    const groupDir = join19(storesRoot, group);
     for (const mount of listDir(groupDir)) {
-      const dir = join18(groupDir, mount);
+      const dir = join19(groupDir, mount);
       const identity = readStoreIdentity(dir);
       if (identity === null || registered.has(identity.store_uuid)) {
         continue;
@@ -7029,7 +7288,7 @@ function createStoreOrphanCheck(t, orphans) {
 
 // src/services/doctor-project-registry-drift.ts
 import { readdir as readdir3, rmdir } from "fs/promises";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 import {
   addStoreProject,
   buildStoreResolveInput as buildStoreResolveInput7,
@@ -7058,7 +7317,7 @@ function resolveDriftStores(projectRoot) {
     return {
       uuid: entry.store_uuid,
       alias: entry.alias,
-      dir: join19(globalRoot, storeRelativePathForMount6(mounted ?? { store_uuid: entry.store_uuid }))
+      dir: join20(globalRoot, storeRelativePathForMount6(mounted ?? { store_uuid: entry.store_uuid }))
     };
   });
 }
@@ -7070,14 +7329,14 @@ async function listDir2(dir) {
   }
 }
 async function listProjectFolders(storeDir) {
-  const projectsRoot = join19(storeDir, STORE_LAYOUT3.knowledgeDir, PROJECTS_DIR);
+  const projectsRoot = join20(storeDir, STORE_LAYOUT3.knowledgeDir, PROJECTS_DIR);
   const reserved = /* @__PURE__ */ new Set([PROJECTS_DIR, ...STORE_KNOWLEDGE_TYPE_DIRS3]);
   return (await listDir2(projectsRoot)).filter((id) => STORE_PROJECT_ID_PATTERN2.test(id) && !reserved.has(id)).sort();
 }
 async function folderHasEntries(storeDir, projectId) {
-  const base = join19(storeDir, STORE_LAYOUT3.knowledgeDir, PROJECTS_DIR, projectId);
+  const base = join20(storeDir, STORE_LAYOUT3.knowledgeDir, PROJECTS_DIR, projectId);
   for (const type of STORE_KNOWLEDGE_TYPE_DIRS3) {
-    const names = await listDir2(join19(base, type));
+    const names = await listDir2(join20(base, type));
     if (names.some((name) => name.endsWith(".md"))) {
       return true;
     }
@@ -7122,14 +7381,14 @@ async function fixProjectRegistryDrift(projectRoot) {
         continue;
       }
       try {
-        const base = join19(
+        const base = join20(
           finding.store_dir,
           STORE_LAYOUT3.knowledgeDir,
           PROJECTS_DIR,
           finding.project_id
         );
         for (const type of STORE_KNOWLEDGE_TYPE_DIRS3) {
-          await rmdir(join19(base, type)).catch(() => void 0);
+          await rmdir(join20(base, type)).catch(() => void 0);
         }
         await rmdir(base);
         pruned.push(finding);
@@ -7224,7 +7483,7 @@ import {
 
 // src/services/events-jsonl-gates.ts
 import { promises as fs } from "fs";
-import { existsSync as existsSync8 } from "fs";
+import { existsSync as existsSync9 } from "fs";
 var EVENTS_JSONL_SIZE_WARN_BYTES = 10 * 1024 * 1024;
 var METRICS_STALE_WARN_MS = 10 * 60 * 1e3;
 var ROTATION_OVERDUE_WARN_MS = 90 * 24 * 60 * 60 * 1e3;
@@ -7246,7 +7505,7 @@ async function inspectEventsJsonlGates(projectRoot, options = {}) {
     if (!(isNodeError(error) && error.code === "ENOENT")) throw error;
   }
   let metricsStalenessMs = null;
-  if (existsSync8(metricsPath)) {
+  if (existsSync9(metricsPath)) {
     try {
       const stat5 = await fs.stat(metricsPath);
       metricsStalenessMs = Math.max(0, now.getTime() - stat5.mtimeMs);
@@ -7289,7 +7548,7 @@ async function inspectEventsJsonlGates(projectRoot, options = {}) {
 
 // src/services/doctor-skill-lints.ts
 import { readdir as readdir4, readFile as readFile13 } from "fs/promises";
-import { join as join20, posix as posix2 } from "path";
+import { join as join21, posix as posix2 } from "path";
 var FABRIC_SKILL_SLUGS = ["fabric-archive", "fabric-review"];
 var FABRIC_CONTRACT_SKILL_SLUGS = ["fabric-archive", "fabric-review", "fabric-store", "fabric-sync"];
 var SKILL_MD_FRONTMATTER_ROOTS = [".claude/skills", ".codex/skills"];
@@ -7344,8 +7603,8 @@ async function listMarkdownFiles(dir) {
 async function inspectSkillRefMirror(projectRoot) {
   const driftedPaths = [];
   for (const slug of FABRIC_SKILL_SLUGS) {
-    const claudeRef = join20(projectRoot, ".claude", "skills", slug, "ref");
-    const codexRef = join20(projectRoot, ".codex", "skills", slug, "ref");
+    const claudeRef = join21(projectRoot, ".claude", "skills", slug, "ref");
+    const codexRef = join21(projectRoot, ".codex", "skills", slug, "ref");
     const [claudeFiles, codexFiles] = await Promise.all([listMarkdownFiles(claudeRef), listMarkdownFiles(codexRef)]);
     if (claudeFiles === null || codexFiles === null) continue;
     const claudeSet = new Set(claudeFiles);
@@ -7362,8 +7621,8 @@ async function inspectSkillRefMirror(projectRoot) {
       let codexBody;
       try {
         [claudeBody, codexBody] = await Promise.all([
-          readFile13(join20(claudeRef, fname), "utf8"),
-          readFile13(join20(codexRef, fname), "utf8")
+          readFile13(join21(claudeRef, fname), "utf8"),
+          readFile13(join21(codexRef, fname), "utf8")
         ]);
       } catch {
         continue;
@@ -7382,7 +7641,7 @@ async function inspectSkillTokenBudget(projectRoot) {
   const overSize = [];
   let highestSeverity = "ok";
   for (const slug of FABRIC_SKILL_SLUGS) {
-    const skillMdPath = join20(projectRoot, ".claude", "skills", slug, "SKILL.md");
+    const skillMdPath = join21(projectRoot, ".claude", "skills", slug, "SKILL.md");
     let body;
     try {
       body = await readFile13(skillMdPath, "utf8");
@@ -7407,7 +7666,7 @@ async function inspectSkillDescription(projectRoot) {
   const ASCII_PATTERN = /[a-zA-Z]{2,}/u;
   const ANTI_TRIGGER_PATTERN = /\bNOT\b|ONLY when|do not|不要|不是|非/u;
   for (const slug of FABRIC_SKILL_SLUGS) {
-    const skillMdPath = join20(projectRoot, ".claude", "skills", slug, "SKILL.md");
+    const skillMdPath = join21(projectRoot, ".claude", "skills", slug, "SKILL.md");
     let body;
     try {
       body = await readFile13(skillMdPath, "utf8");
@@ -7450,8 +7709,8 @@ async function inspectSkillContract(projectRoot) {
   for (const rootRel of SKILL_MD_FRONTMATTER_ROOTS) {
     const client = rootRel.startsWith(".claude") ? ".claude" : ".codex";
     for (const slug of FABRIC_CONTRACT_SKILL_SLUGS) {
-      const skillDir = join20(projectRoot, rootRel, slug);
-      const skillMdPath = join20(skillDir, "SKILL.md");
+      const skillDir = join21(projectRoot, rootRel, slug);
+      const skillMdPath = join21(skillDir, "SKILL.md");
       let body;
       try {
         body = await readFile13(skillMdPath, "utf8");
@@ -7467,7 +7726,7 @@ async function inspectSkillContract(projectRoot) {
           detail: token
         });
       }
-      const refDir = join20(skillDir, "ref");
+      const refDir = join21(skillDir, "ref");
       let refFiles;
       try {
         refFiles = (await readdir4(refDir)).filter((name) => name.endsWith(".md"));
@@ -7491,7 +7750,7 @@ async function inspectSkillContract(projectRoot) {
 async function inspectSkillMdYamlInvalid(projectRoot) {
   const candidates = [];
   for (const rootRel of SKILL_MD_FRONTMATTER_ROOTS) {
-    const rootAbs = join20(projectRoot, rootRel);
+    const rootAbs = join21(projectRoot, rootRel);
     let dirEntries;
     try {
       dirEntries = await readdir4(rootAbs, { withFileTypes: true });
@@ -7500,7 +7759,7 @@ async function inspectSkillMdYamlInvalid(projectRoot) {
     }
     for (const dirEntry of dirEntries) {
       if (!dirEntry.isDirectory()) continue;
-      const skillFile = join20(rootAbs, dirEntry.name, "SKILL.md");
+      const skillFile = join21(rootAbs, dirEntry.name, "SKILL.md");
       let raw;
       try {
         raw = await readFile13(skillFile, "utf8");
@@ -7646,7 +7905,7 @@ function createSkillMdYamlInvalidCheck(t, inspection) {
 
 // src/services/doctor-retired-references-lint.ts
 import { readdir as readdir5, readFile as readFile14, stat as stat3 } from "fs/promises";
-import { join as join21, posix as posix3, relative as relative2 } from "path";
+import { join as join22, posix as posix3, relative as relative3 } from "path";
 var RETIRED_TOKENS = [
   { token: "fab_plan_context", replacement: "fab_recall", reason: "retrieval collapsed to one lean fab_recall (KT-DEC-0026)" },
   { token: "fab_get_knowledge_sections", replacement: "fab_recall", reason: "two-step fetch retired (KT-DEC-0026)" },
@@ -7669,7 +7928,7 @@ var RETIRED_TOKENS = [
 ];
 var HOOK_DIRS = [".claude/hooks", ".codex/hooks"];
 var SKILL_DIRS = [".claude/skills", ".codex/skills"];
-var BOOTSTRAP_FILES = ["AGENTS.md", "CLAUDE.md", join21(".fabric", "AGENTS.md")];
+var BOOTSTRAP_FILES = ["AGENTS.md", "CLAUDE.md", join22(".fabric", "AGENTS.md")];
 function isCommentLine(line) {
   const t = line.trim();
   return t.startsWith("//") || t.startsWith("*") || t.startsWith("/*");
@@ -7683,7 +7942,7 @@ async function walkFiles(dir, exts) {
   }
   const out = [];
   for (const e of entries) {
-    const full = join21(dir, e.name);
+    const full = join22(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkFiles(full, exts));
     } else if (exts.some((ext) => e.name.endsWith(ext))) {
@@ -7707,9 +7966,9 @@ function scanText(rel, text, skipComments, hits) {
 async function inspectRetiredReferences(projectRoot) {
   const hits = [];
   let scannedFiles = 0;
-  const toRel = (p) => posix3.normalize(relative2(projectRoot, p).split("\\").join("/"));
+  const toRel = (p) => posix3.normalize(relative3(projectRoot, p).split("\\").join("/"));
   for (const rel of BOOTSTRAP_FILES) {
-    const abs = join21(projectRoot, rel);
+    const abs = join22(projectRoot, rel);
     try {
       if ((await stat3(abs)).isFile()) {
         scannedFiles += 1;
@@ -7719,7 +7978,7 @@ async function inspectRetiredReferences(projectRoot) {
     }
   }
   for (const dir of SKILL_DIRS) {
-    for (const file of await walkFiles(join21(projectRoot, dir), [".md"])) {
+    for (const file of await walkFiles(join22(projectRoot, dir), [".md"])) {
       scannedFiles += 1;
       try {
         scanText(toRel(file), await readFile14(file, "utf8"), false, hits);
@@ -7728,7 +7987,7 @@ async function inspectRetiredReferences(projectRoot) {
     }
   }
   for (const dir of HOOK_DIRS) {
-    for (const file of await walkFiles(join21(projectRoot, dir), [".cjs"])) {
+    for (const file of await walkFiles(join22(projectRoot, dir), [".cjs"])) {
       scannedFiles += 1;
       try {
         scanText(toRel(file), await readFile14(file, "utf8"), true, hits);
@@ -7767,7 +8026,7 @@ function createRetiredReferenceCheck(t, inspection) {
 // src/services/doctor-hooks-lints.ts
 import { constants } from "fs";
 import { access, readdir as readdir6, readFile as readFile15, stat as stat4 } from "fs/promises";
-import { join as join22, posix as posix4 } from "path";
+import { join as join23, posix as posix4 } from "path";
 import { Script } from "vm";
 var HOOKS_RUNTIME_CLIENT_DIRS = [
   { client: "claude", dir: ".claude/hooks" },
@@ -7829,11 +8088,11 @@ async function isFile(absPath) {
   }
 }
 async function inspectHooksWired(projectRoot) {
-  const claudeEntries = await readDirectoryFileNames(join22(projectRoot, ".claude"));
+  const claudeEntries = await readDirectoryFileNames(join23(projectRoot, ".claude"));
   if (claudeEntries === null) {
     return { status: "skipped", missingHooks: [] };
   }
-  const settingsPath = join22(projectRoot, ".claude", "settings.json");
+  const settingsPath = join23(projectRoot, ".claude", "settings.json");
   let parsed;
   try {
     parsed = JSON.parse(await readFile15(settingsPath, "utf8"));
@@ -7865,8 +8124,8 @@ async function inspectHooksWired(projectRoot) {
 }
 async function inspectHookCacheWritability(projectRoot) {
   const relPath = posix4.join(".fabric", ".cache");
-  const fabricDir = join22(projectRoot, ".fabric");
-  const cacheDir = join22(projectRoot, ".fabric", ".cache");
+  const fabricDir = join23(projectRoot, ".fabric");
+  const cacheDir = join23(projectRoot, ".fabric", ".cache");
   try {
     try {
       const cacheStats = await stat4(cacheDir);
@@ -7915,12 +8174,12 @@ async function inspectHookCacheWritability(projectRoot) {
 async function inspectHooksContentDrift(projectRoot) {
   const hookFilesByBasename = /* @__PURE__ */ new Map();
   for (const { client, dir } of HOOKS_RUNTIME_CLIENT_DIRS) {
-    const absDir = join22(projectRoot, dir);
+    const absDir = join23(projectRoot, dir);
     const entries = await readDirectoryFileNames(absDir);
     if (entries === null) continue;
     for (const name of entries) {
       if (!name.endsWith(".cjs")) continue;
-      const abs = join22(absDir, name);
+      const abs = join23(absDir, name);
       if (!await isFile(abs)) continue;
       const arr = hookFilesByBasename.get(name) ?? [];
       arr.push({ client, abs });
@@ -7957,12 +8216,12 @@ async function inspectHooksRuntime(projectRoot) {
   const issues = [];
   let scanned = 0;
   for (const { client, dir } of HOOKS_RUNTIME_CLIENT_DIRS) {
-    const absDir = join22(projectRoot, dir);
+    const absDir = join23(projectRoot, dir);
     const entries = await readDirectoryFileNames(absDir);
     if (entries === null) continue;
     for (const name of entries) {
       if (!name.endsWith(".cjs")) continue;
-      const abs = join22(absDir, name);
+      const abs = join23(absDir, name);
       const displayPath = `${dir}/${name}`;
       if (!await isFile(abs)) continue;
       scanned += 1;
@@ -8106,7 +8365,7 @@ function createHookCacheWritabilityCheck(t, inspection) {
 
 // src/services/doctor-bootstrap-lints.ts
 import { access as access2, readFile as readFile16 } from "fs/promises";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 import {
   BOOTSTRAP_MARKER_BEGIN,
   BOOTSTRAP_MARKER_END,
@@ -8138,13 +8397,13 @@ async function fileExists(path) {
 }
 async function inspectBootstrapAnchor(projectRoot) {
   const [hasAgentsMd, hasClaudeMd] = await Promise.all([
-    fileExists(join23(projectRoot, "AGENTS.md")),
-    fileExists(join23(projectRoot, "CLAUDE.md"))
+    fileExists(join24(projectRoot, "AGENTS.md")),
+    fileExists(join24(projectRoot, "CLAUDE.md"))
   ]);
   return { hasAgentsMd, hasClaudeMd };
 }
 async function inspectL1BootstrapSnapshotDrift(target) {
-  const abs = join23(target, ".fabric", "AGENTS.md");
+  const abs = join24(target, ".fabric", "AGENTS.md");
   const canonical = resolveBootstrapCanonical();
   let onDisk;
   try {
@@ -8174,14 +8433,14 @@ function createL1BootstrapSnapshotDriftCheck(t, inspection) {
   );
 }
 async function inspectL2ManagedBlockDrift(target) {
-  const snapshotPath = join23(target, ".fabric", "AGENTS.md");
+  const snapshotPath = join24(target, ".fabric", "AGENTS.md");
   let snapshot;
   try {
     snapshot = await readFile16(snapshotPath, "utf8");
   } catch {
     return { status: "ok", drifted: [] };
   }
-  const projectRulesPath = join23(target, ".fabric", "project-rules.md");
+  const projectRulesPath = join24(target, ".fabric", "project-rules.md");
   let expectedBody = snapshot;
   try {
     const projectRules = await readFile16(projectRulesPath, "utf8");
@@ -8193,7 +8452,7 @@ ${projectRules}`;
   const drifted = [];
   let anyManagedBlockFound = false;
   const blockTargets = [
-    join23(target, "AGENTS.md")
+    join24(target, "AGENTS.md")
   ];
   for (const abs of blockTargets) {
     let content;
@@ -8221,7 +8480,7 @@ ${projectRules}`;
       drifted.push({ path: abs, expected: expectedBody, actual: body });
     }
   }
-  const claudeMdPath = join23(target, "CLAUDE.md");
+  const claudeMdPath = join24(target, "CLAUDE.md");
   try {
     const claudeContent = await readFile16(claudeMdPath, "utf8");
     anyManagedBlockFound = true;
@@ -9453,7 +9712,7 @@ async function runDoctorReport(target) {
   const globalCliVersion = process.env.VITEST === "true" ? { status: "ok", version: "test-skipped" } : inspectGlobalCliVersion();
   const targetFiles = Object.fromEntries(
     await Promise.all(
-      TARGET_FILE_PATHS.map(async (path) => [path, await pathExists(join24(projectRoot, path))])
+      TARGET_FILE_PATHS.map(async (path) => [path, await pathExists(join25(projectRoot, path))])
     )
   );
   const checks = [
@@ -9597,6 +9856,14 @@ async function runDoctorReport(target) {
     // config-level check, no resolver, aligned with KT-DEC-0048 read-tolerant
     // doctrine.
     createWriteRouteUnboundCheck(t, detectWriteRouteUnbound(projectRoot)),
+    // rc.11 stray_fabric_dir_detected — walks the project tree for any
+    // `.fabric/` directory other than `<projectRoot>/.fabric`. Historical
+    // residue from the pre-rc.10 hook / pre-rc.11 server-side resolveProjectRoot
+    // fault mode where a subprocess whose cwd was a subdirectory of the repo
+    // created a stray `<subdir>/.fabric/` (scattering events.jsonl / metrics.jsonl
+    // / .cache). Adjacent to write_route_target_unbound — both catch config /
+    // filesystem cross-references that drifted through migrations.
+    createStrayFabricDirCheck(t, detectStrayFabricDirs(projectRoot), projectRoot),
     // rc.31 BUG-G2/G5: promote-ledger invariant. Sits adjacent to onboard
     // coverage — both are observability advisories built off events.jsonl.
     ...promoteLedgerInvariant === null ? [] : [createPromoteLedgerInvariantCheck(t, promoteLedgerInvariant)],
@@ -9672,7 +9939,7 @@ async function runDoctorFix(target) {
   const fixed = [];
   const ledgerWarnings = [];
   if (before.fixable_errors.some((issue) => issue.code === "bootstrap_snapshot_drift")) {
-    const snapshotPath = join24(projectRoot, ".fabric", "AGENTS.md");
+    const snapshotPath = join25(projectRoot, ".fabric", "AGENTS.md");
     await ensureParentDirectory(snapshotPath);
     await atomicWriteText4(snapshotPath, resolveBootstrapCanonical2());
     fixed.push(findIssue(before.fixable_errors, "bootstrap_snapshot_drift"));
@@ -9696,6 +9963,15 @@ async function runDoctorFix(target) {
       fixed.push(findIssue(before.warnings, "store_orphan"));
     }
   }
+  if (before.warnings.some((issue) => issue.code === "stray_fabric_dir_detected")) {
+    const strays = detectStrayFabricDirs(projectRoot);
+    if (strays.length > 0) {
+      const results = await fixStrayFabricDirs(strays);
+      if (results.some((r) => r.ok)) {
+        fixed.push(findIssue(before.warnings, "stray_fabric_dir_detected"));
+      }
+    }
+  }
   const registryDriftFound = before.manual_errors.some((issue) => issue.code === "project_registry_drift") || before.warnings.some((issue) => issue.code === "project_registry_drift") || before.infos.some((issue) => issue.code === "project_registry_drift");
   if (registryDriftFound) {
     const result = await fixProjectRegistryDrift(projectRoot);
@@ -9757,7 +10033,7 @@ async function runDoctorFix(target) {
   if (before.infos.some((issue) => issue.code === "stale_serve_lock")) {
     const lockInspection = inspectStaleServeLock(projectRoot, Date.now());
     if (lockInspection.present && !lockInspection.pidAlive) {
-      const lockFilePath = join24(projectRoot, ".fabric", ".serve.lock");
+      const lockFilePath = join25(projectRoot, ".fabric", ".serve.lock");
       try {
         await unlink4(lockFilePath);
       } catch (err) {
@@ -9874,7 +10150,7 @@ function createApplyLintMessage(succeeded, failed, manualErrorCount) {
 }
 async function applySessionHintsStaleCleanup(projectRoot, candidate) {
   const detail = `deleted (${candidate.age_days}d old)`;
-  const absPath = join24(projectRoot, candidate.path);
+  const absPath = join25(projectRoot, candidate.path);
   try {
     const { unlink: unlink5 } = await import("fs/promises");
     await unlink5(absPath);
@@ -9899,7 +10175,7 @@ function truncateErrorMessage(error) {
   return raw.length > 240 ? `${raw.slice(0, 237)}...` : raw;
 }
 async function inspectForensic(projectRoot) {
-  const path = join24(projectRoot, ".fabric", "forensic.json");
+  const path = join25(projectRoot, ".fabric", "forensic.json");
   try {
     const parsed = forensicReportSchema.parse(JSON.parse(await readFile19(path, "utf8")));
     return { present: true, valid: true, report: parsed };
@@ -10476,7 +10752,7 @@ async function inspectPreexistingRootFiles(projectRoot) {
   const candidates = ["CLAUDE.md", "AGENTS.md"];
   const detected = [];
   for (const name of candidates) {
-    if (await pathExists(join24(projectRoot, name))) {
+    if (await pathExists(join25(projectRoot, name))) {
       detected.push(name);
     }
   }
@@ -10561,7 +10837,7 @@ async function buildLastActiveIndex(projectRoot) {
   return map;
 }
 async function inspectSessionHintsStale(projectRoot, now) {
-  const cacheDir = join24(projectRoot, ".fabric", ".cache");
+  const cacheDir = join25(projectRoot, ".fabric", ".cache");
   let entries;
   try {
     entries = await readdirAsync(cacheDir, { withFileTypes: true });
@@ -10573,7 +10849,7 @@ async function inspectSessionHintsStale(projectRoot, now) {
     if (!entry.isFile()) continue;
     if (!entry.name.startsWith(SESSION_HINTS_FILE_PREFIX)) continue;
     if (!entry.name.endsWith(SESSION_HINTS_FILE_SUFFIX)) continue;
-    const absPath = join24(cacheDir, entry.name);
+    const absPath = join25(cacheDir, entry.name);
     let mtimeMs = 0;
     try {
       mtimeMs = (await statAsync(absPath)).mtimeMs;
@@ -10605,7 +10881,7 @@ function inspectStaleServeLock(projectRoot, now) {
   };
 }
 async function readUnderseedThresholdFromConfig(projectRoot) {
-  const configPath = join24(projectRoot, ".fabric", "fabric-config.json");
+  const configPath = join25(projectRoot, ".fabric", "fabric-config.json");
   try {
     const raw = await readFile19(configPath, "utf8");
     const parsed = JSON.parse(raw);
@@ -10723,7 +10999,7 @@ async function inspectOnboardCoverage(projectRoot) {
   return { filled, missing, opted_out: optedOut };
 }
 async function readOnboardOptedOut(projectRoot) {
-  const path = join24(projectRoot, ".fabric", "fabric-config.json");
+  const path = join25(projectRoot, ".fabric", "fabric-config.json");
   let raw;
   try {
     raw = await readFile19(path, "utf8");
@@ -10750,10 +11026,10 @@ function readFrontmatterScalar(content, key) {
   if (block === void 0) return void 0;
   for (const rawLine of block.split(/\r?\n/u)) {
     const line = rawLine.trim();
-    const sep5 = line.indexOf(":");
-    if (sep5 === -1) continue;
-    if (line.slice(0, sep5).trim() !== key) continue;
-    let value = line.slice(sep5 + 1).trim();
+    const sep6 = line.indexOf(":");
+    if (sep6 === -1) continue;
+    if (line.slice(0, sep6).trim() !== key) continue;
+    let value = line.slice(sep6 + 1).trim();
     if (value.startsWith('"') && value.endsWith('"') && value.length >= 2) {
       value = value.slice(1, -1);
     }
@@ -10828,7 +11104,7 @@ async function* iterateCanonicalFilenames(projectRoot) {
   }
 }
 async function rewriteThreeEndManagedBlocks(projectRoot) {
-  const snapshotPath = join24(projectRoot, ".fabric", "AGENTS.md");
+  const snapshotPath = join25(projectRoot, ".fabric", "AGENTS.md");
   if (!await pathExists(snapshotPath)) {
     return;
   }
@@ -10838,7 +11114,7 @@ async function rewriteThreeEndManagedBlocks(projectRoot) {
   } catch {
     return;
   }
-  const projectRulesPath = join24(projectRoot, ".fabric", "project-rules.md");
+  const projectRulesPath = join25(projectRoot, ".fabric", "project-rules.md");
   const hasProjectRules = await pathExists(projectRulesPath);
   let expectedBody = snapshot;
   if (hasProjectRules) {
@@ -10854,7 +11130,7 @@ ${projectRules}`;
 ${expectedBody}
 ${BOOTSTRAP_MARKER_END2}`;
   const blockTargets = [
-    join24(projectRoot, "AGENTS.md")
+    join25(projectRoot, "AGENTS.md")
   ];
   for (const abs of blockTargets) {
     if (!await pathExists(abs)) {
@@ -10887,7 +11163,7 @@ ${managedBlock}
     }
     await atomicWriteText4(abs, next);
   }
-  const claudeMdPath = join24(projectRoot, "CLAUDE.md");
+  const claudeMdPath = join25(projectRoot, "CLAUDE.md");
   if (await pathExists(claudeMdPath)) {
     let claudeContent;
     try {
@@ -10957,7 +11233,7 @@ async function collectEntryPoints(root) {
       continue;
     }
     for (const entry of await readdirAsync(current, { withFileTypes: true })) {
-      const absolutePath = join24(current, entry.name);
+      const absolutePath = join25(current, entry.name);
       const relativePath = normalizePath2(absolutePath.slice(root.length + 1));
       if (relativePath.length === 0) {
         continue;
@@ -11172,7 +11448,7 @@ async function runDoctorConflictLint(projectRoot, opts = {}) {
 
 // src/services/why-not-surfaced.ts
 import { readFile as readFile20 } from "fs/promises";
-import { basename as basename3, join as join25 } from "path";
+import { basename as basename3, join as join26 } from "path";
 import {
   buildStoreResolveInput as buildStoreResolveInput8,
   createStoreResolver as createStoreResolver8,
@@ -11212,7 +11488,7 @@ async function explainWhyNotSurfaced(projectRoot, query) {
   const allStores = input.mountedStores.map((s) => ({
     store_uuid: s.store_uuid,
     alias: s.alias,
-    dir: join25(globalRoot, storeRelativePathForMount7(s))
+    dir: join26(globalRoot, storeRelativePathForMount7(s))
   }));
   const refs = await readKnowledgeAcrossStores4(allStores);
   const candidate = refs.find((ref) => fileMatchesId(ref.file, localId));
@@ -11326,8 +11602,8 @@ async function inspectRelatedGraph(projectRoot) {
 }
 
 // src/services/store-precheck.ts
-import { existsSync as existsSync9, readFileSync as readFileSync4 } from "fs";
-import { join as join26 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync4 } from "fs";
+import { join as join27 } from "path";
 import {
   buildStoreResolveInput as buildStoreResolveInput9,
   createStoreResolver as createStoreResolver9,
@@ -11340,7 +11616,7 @@ function clearPrecheckCache() {
   cache.clear();
 }
 function evaluateStoreDir(storeDir, identity) {
-  if (!existsSync9(storeDir)) {
+  if (!existsSync10(storeDir)) {
     return {
       uuid: identity.uuid,
       alias: identity.alias,
@@ -11348,10 +11624,10 @@ function evaluateStoreDir(storeDir, identity) {
       reason: `directory not found at ${storeDir}`
     };
   }
-  const storeJsonPath = join26(storeDir, "store.json");
-  const gitDirPath = join26(storeDir, ".git");
-  const hasStoreJson = existsSync9(storeJsonPath) && isValidStoreJson(storeJsonPath);
-  const hasGitDir = existsSync9(gitDirPath);
+  const storeJsonPath = join27(storeDir, "store.json");
+  const gitDirPath = join27(storeDir, ".git");
+  const hasStoreJson = existsSync10(storeJsonPath) && isValidStoreJson(storeJsonPath);
+  const hasGitDir = existsSync10(gitDirPath);
   if (!hasStoreJson && !hasGitDir) {
     return {
       uuid: identity.uuid,
@@ -11384,7 +11660,7 @@ async function precheckStoreReachability(projectRoot, globalRoot = resolveGlobal
   const readSet = createStoreResolver9().resolveReadSet(input);
   const stores = readSet.stores.map((entry) => {
     const mounted = input.mountedStores.find((s) => s.store_uuid === entry.store_uuid);
-    const storeDir = join26(
+    const storeDir = join27(
       globalRoot,
       storeRelativePathForMount8(mounted ?? { store_uuid: entry.store_uuid })
     );
@@ -11488,7 +11764,7 @@ function stopRotationTick(projectRoot) {
 
 // src/services/rehydrate-state.ts
 import { execFile } from "child_process";
-import { promisify } from "util";
+import { promisify as promisify2 } from "util";
 import { agentsMetaSchema as agentsMetaSchema3 } from "@fenglimg/fabric-shared";
 import { IOFabricError as IOFabricError2, RuleError } from "@fenglimg/fabric-shared/errors";
 
@@ -11624,7 +11900,7 @@ async function pathExists2(path) {
 }
 
 // src/services/rehydrate-state.ts
-var execFileAsync = promisify(execFile);
+var execFileAsync = promisify2(execFile);
 var AGENTS_META_GIT_PATH = ".fabric/agents.meta.json";
 var HistoryStateNotFoundError = class extends IOFabricError2 {
   code = "HISTORY_STATE_NOT_FOUND";
@@ -11777,8 +12053,8 @@ function formatError(error) {
 }
 function formatPreexistingRootMessage(projectRoot) {
   const preexisting = [];
-  if (existsSync10(join27(projectRoot, "CLAUDE.md"))) preexisting.push("CLAUDE.md");
-  if (existsSync10(join27(projectRoot, "AGENTS.md"))) preexisting.push("AGENTS.md");
+  if (existsSync11(join28(projectRoot, "CLAUDE.md"))) preexisting.push("CLAUDE.md");
+  if (existsSync11(join28(projectRoot, "AGENTS.md"))) preexisting.push("AGENTS.md");
   if (preexisting.length === 0) return null;
   return `[startup] info: detected ${preexisting.join(", ")} at project root. Note: Fabric serves knowledge from mounted stores via MCP \u2014 root markdown files are not auto-loaded into the AI context.`;
 }
@@ -11805,7 +12081,7 @@ function createFabricServer(tracker) {
   const server = new McpServer(
     {
       name: "fabric-knowledge-server",
-      version: "2.3.0-rc.11"
+      version: "2.3.0-rc.12"
     },
     {
       instructions: FABRIC_SERVER_INSTRUCTIONS
@@ -11825,9 +12101,9 @@ function createFabricServer(tracker) {
     },
     async (_uri) => {
       const projectRoot = process.env.FABRIC_PROJECT_ROOT ?? process.cwd();
-      const path = join27(projectRoot, ".fabric", "bootstrap", "README.md");
+      const path = join28(projectRoot, ".fabric", "bootstrap", "README.md");
       let text = "";
-      if (existsSync10(path)) {
+      if (existsSync11(path)) {
         text = await readFile22(path, "utf8");
       }
       return {