@hiveai/cli 0.13.1 → 0.13.7

package/dist/index.js

@@ -910,6 +910,10 @@ function registerBriefing(program2) {
       return;
     }
     const ownMemories = await loadMemoriesFromDir3(paths.memoriesDir);
+    const POLICY_TYPES = /* @__PURE__ */ new Set(["decision", "gotcha", "architecture", "convention"]);
+    const anchoredPolicyIds = markerFiles.length > 0 ? ownMemories.map((m) => m.memory).filter(
+      (mem) => POLICY_TYPES.has(mem.frontmatter.type) && mem.frontmatter.status === "validated" && memoryMatchesAnchorPaths(mem, markerFiles)
+    ).map((mem) => mem.frontmatter.id) : [];
     const externalRoots = [];
     if (opts.include && opts.include.length > 0) {
       for (const includePath of opts.include) {
@@ -1063,11 +1067,14 @@ function registerBriefing(program2) {
     if (ids.length > 0) {
       await trackReads(paths, ids).catch(() => {
       });
+    }
+    const markerIds = [.../* @__PURE__ */ new Set([...ids, ...anchoredPolicyIds])];
+    if (markerIds.length > 0) {
       await writeBriefingMarker(paths, {
         task: opts.task ?? "CLI briefing",
         source: "haive-briefing-cli",
         sessionId: process.env.HAIVE_SESSION_ID,
-        memoryIds: ids,
+        memoryIds: markerIds,
         files: filePaths
       }).catch(() => {
       });
@@ -3012,7 +3019,7 @@ ${SEED_FOOTER(stack)}` });
 }
 
 // src/commands/init.ts
-var HAIVE_GITHUB_ACTION_REF = `v${"0.13.1"}`;
+var HAIVE_GITHUB_ACTION_REF = `v${"0.13.7"}`;
 var PROJECT_CONTEXT_TEMPLATE = `# Project context
 
 > Generated by \`haive init\`. Run \`haive init --bootstrap\` to auto-fill from your codebase,
@@ -3749,7 +3756,7 @@ async function installClaudeHooks(opts) {
 }
 function registerInstallHooks(program2) {
   program2.command("install-hooks [target]").description(
-    "Install hAIve hooks. Targets:\n\n    git     (default) post-merge / post-rewrite / pre-push for haive sync + precommit\n    claude  SessionStart + PreToolUse + PostToolUse + SessionEnd hooks\n            for briefing injection, pre-edit blocking, and capture (Claude Code only)\n\n  Examples:\n    haive install-hooks           # git hooks (legacy default)\n    haive install-hooks git\n    haive install-hooks claude\n    haive install-hooks claude --scope project\n    haive install-hooks claude --uninstall\n"
+    "Install hAIve hooks (same effect as `haive enforce install`, kept for back-compat). Targets:\n\n    git     (default) post-merge / post-rewrite / pre-push for haive sync + precommit\n    claude  SessionStart + PreToolUse + PostToolUse + SessionEnd hooks\n            for briefing injection, pre-edit blocking, and capture (Claude Code only)\n\n  Examples:\n    haive install-hooks           # git hooks (legacy default)\n    haive install-hooks git\n    haive install-hooks claude\n    haive install-hooks claude --scope project\n    haive install-hooks claude --uninstall\n"
   ).option("-d, --dir <dir>", "project root").option("--force", "overwrite existing hooks (git target only)").option("--scope <scope>", "claude target: 'user' (~/.claude) or 'project' (.claude/)", "user").option("--uninstall", "remove previously installed hAIve hooks (claude target only)").option("--settings <path>", "explicit path to settings.json (claude target only)").action(async (target, opts) => {
     const t = (target ?? "git").toLowerCase();
     if (t === "git") {
@@ -6065,7 +6072,7 @@ ${m.content}`).join("\n\n---\n\n"),
     return {
       id,
       summary,
-      developer_message: quoteBlock || `Une modification externe potentiellement incompatible a \xE9t\xE9 d\xE9tect\xE9e (${id}). Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ?`
+      developer_message: quoteBlock || `A potentially incompatible external change was detected (${id}). Do you want me to analyze the impact and propose updates?`
     };
   };
   for (const m of outputMemories) {
@@ -7912,7 +7919,7 @@ When done, respond with: "Imported N memories: [list of IDs]" or "Nothing action
   };
 }
 var SERVER_NAME = "haive";
-var SERVER_VERSION = "0.13.1";
+var SERVER_VERSION = "0.13.7";
 function jsonResult(data) {
   return {
     content: [
@@ -9220,26 +9227,26 @@ function registerSync(program2) {
                 const slugParts = result.file.replace(/[^a-z0-9]/gi, "-").toLowerCase();
                 const slug = `dep-major-bump-${slugParts}-${Date.now().toString(36)}`;
                 const depList = majorBumps.map((c) => `- \u{1F534} **${c.name}** : \`${c.from}\` \u2192 \`${c.to}\``).join("\n");
-                const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+                const body = `## \u26A0\uFE0F Action required \u2014 human confirmation required
 
-Des d\xE9pendances dans \`${result.file}\` ont chang\xE9 de version majeure.
-Une version majeure peut contenir des **breaking changes** qui impactent ce projet.
+Dependencies in \`${result.file}\` changed major version.
+A major version can contain **breaking changes** that affect this project.
 
 ${depList}
 
 ---
 
-**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+**\u{1F6AB} Do not modify code autonomously.**
 
-Informe le d\xE9veloppeur avec ce message :
+Inform the developer with this message:
 
-> *\xAB J'ai d\xE9tect\xE9 que ${majorBumps.map((c) => `\`${c.name}\``).join(", ")} a chang\xE9 de version majeure (${majorBumps.map((c) => `${c.from} \u2192 ${c.to}`).join(", ")}). Cela peut introduire des incompatibilit\xE9s dans ce projet. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
+> *"I detected that ${majorBumps.map((c) => `\`${c.name}\``).join(", ")} changed major version (${majorBumps.map((c) => `${c.from} \u2192 ${c.to}`).join(", ")}). This can introduce incompatibilities in this project. Do you want me to analyze the impact and propose updates?"*
 
-Attends une **confirmation explicite** avant d'agir.
+Wait for **explicit confirmation** before acting.
 
-**Prochaines \xE9tapes (si confirm\xE9) :**
-- Consulter le CHANGELOG : \`haive memory import-changelog --from node_modules/<pkg>/CHANGELOG.md\`
-- V\xE9rifier les m\xE9moires ancr\xE9es : \`haive memory verify\``;
+**Next steps (if confirmed):**
+- Check the CHANGELOG: \`haive memory import-changelog --from node_modules/<pkg>/CHANGELOG.md\`
+- Verify anchored memories: \`haive memory verify\``;
                 const fm = buildFrontmatter6({
                   type: "gotcha",
                   slug,
@@ -9287,28 +9294,28 @@ Attends une **confirmation explicite** avant d'agir.
             const breakingList = breaking.map((c) => `- \u{1F534} **${c.kind}** : ${c.description}`).join("\n");
             const addList = additive.length > 0 ? `
 
-### Changements non-breaking (additifs)
+### Non-breaking changes (additive)
 ` + additive.map((c) => `- \u{1F7E2} ${c.description}`).join("\n") : "";
-            const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+            const body = `## \u26A0\uFE0F Action required \u2014 human confirmation required
 
-Le contrat **\`${diff.contract}\`** (\`${diff.file}\`) a \xE9t\xE9 modifi\xE9.
-Des **breaking changes** ont \xE9t\xE9 d\xE9tect\xE9s \u2014 ce projet consomme peut-\xEAtre ce contrat.
+Contract **\`${diff.contract}\`** (\`${diff.file}\`) was modified.
+**Breaking changes** were detected \u2014 this project may consume that contract.
 
 ${breakingList}${addList}
 
 ---
 
-**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+**\u{1F6AB} Do not modify code autonomously.**
 
-Informe le d\xE9veloppeur avec ce message :
+Inform the developer with this message:
 
-> *\xAB J'ai d\xE9tect\xE9 que le contrat \`${diff.contract}\` a chang\xE9 : ${breaking.length} breaking change(s) d\xE9tect\xE9(s). Ce projet d\xE9pend peut-\xEAtre de ce contrat. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
+> *"I detected that contract \`${diff.contract}\` changed: ${breaking.length} breaking change(s) detected. This project may depend on that contract. Do you want me to analyze the impact and propose updates?"*
 
-Attends une **confirmation explicite** avant d'agir.
+Wait for **explicit confirmation** before acting.
 
-**Prochaines \xE9tapes (si confirm\xE9) :**
-- Rechercher les usages : \`haive memory for-files <fichiers concern\xE9s>\`
-- V\xE9rifier les m\xE9moires li\xE9es : \`haive memory query ${diff.contract}\``;
+**Next steps (if confirmed):**
+- Search usages: \`haive memory for-files <affected files>\`
+- Check related memories: \`haive memory search ${diff.contract}\``;
             const fm = buildFrontmatter6({
               type: "gotcha",
               slug,
@@ -9505,8 +9512,8 @@ import {
   suggestSensorFromMemory as suggestSensorFromMemory3
 } from "@hiveai/core";
 function registerMemoryAdd(memory2) {
-  memory2.command("add").description(
-    `Save a piece of knowledge as a persistent memory.
+  memory2.command("save").alias("add").description(
+    `Save a piece of knowledge as a persistent memory. Mirrors MCP mem_save. Alias: add.
 
   Memory types:
     skill       \u2014 reusable procedure/playbook agents follow for a recurring task (e.g. deploy, review)
@@ -10555,7 +10562,7 @@ function registerMemoryPending(memory2) {
     const pending = all.filter(filterFn);
     if (pending.length === 0) {
       ui.info("No draft or proposed memories awaiting review.");
-      ui.info("Drafts are created by `haive memory add` without `--status validated`.");
+      ui.info("Drafts are created by `haive memory save` without `--status validated`.");
       return;
     }
     pending.sort(
@@ -10612,7 +10619,7 @@ import {
   trackReads as trackReads4
 } from "@hiveai/core";
 function registerMemoryQuery(memory2) {
-  memory2.command("query <text>").alias("search").description("Search memories by id, tag, or substring (AND, OR fallback). Alias: search").option("-d, --dir <dir>", "project root").option("--limit <n>", "max results", "20").option("--scope <scope>", "personal | team | module").option("--status <csv>", "filter by status (draft,proposed,validated,stale,rejected)").option("--show-rejected", "include rejected memories (hidden by default)").action(async (text, opts) => {
+  memory2.command("search <text>").alias("query").description("Search memories by id, tag, or substring (AND, OR fallback). Mirrors MCP mem_search. Alias: query").option("-d, --dir <dir>", "project root").option("--limit <n>", "max results", "20").option("--scope <scope>", "personal | team | module").option("--status <csv>", "filter by status (draft,proposed,validated,stale,rejected)").option("--show-rejected", "include rejected memories (hidden by default)").action(async (text, opts) => {
     const root = findProjectRoot25(opts.dir);
     const paths = resolveHaivePaths22(root);
     if (!existsSync47(paths.memoriesDir)) {
@@ -10736,7 +10743,7 @@ import {
   saveUsageIndex as saveUsageIndex5
 } from "@hiveai/core";
 function registerMemoryRm(memory2) {
-  memory2.command("rm <id>").description("Delete a memory file (and its usage entry by default)").option("-y, --yes", "skip the confirmation prompt").option("--keep-usage", "do not remove the usage.json entry").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
+  memory2.command("delete <id>").alias("rm").description("Delete a memory file (and its usage entry by default). Mirrors MCP mem_delete. Alias: rm").option("-y, --yes", "skip the confirmation prompt").option("--keep-usage", "do not remove the usage.json entry").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
     const root = findProjectRoot27(opts.dir);
     const paths = resolveHaivePaths24(root);
     if (!existsSync49(paths.memoriesDir)) {
@@ -10787,7 +10794,7 @@ import {
   resolveHaivePaths as resolveHaivePaths25
 } from "@hiveai/core";
 function registerMemoryShow(memory2) {
-  memory2.command("show <id>").description("Print a memory's frontmatter, body, and confidence/usage").option("--raw", "print the raw file contents instead of a summary").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
+  memory2.command("get <id>").alias("show").description("Print a memory's frontmatter, body, and confidence/usage. Mirrors MCP mem_get. Alias: show").option("--raw", "print the raw file contents instead of a summary").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
     const root = findProjectRoot28(opts.dir);
     const paths = resolveHaivePaths25(root);
     if (!existsSync50(paths.memoriesDir)) {
@@ -12355,7 +12362,7 @@ async function renderMemoryHits(paths, opts) {
   console.log(ui.bold(`Memory hits (${window})`));
   if (entries.length === 0) {
     ui.info(
-      `No memory reads recorded in window. Reads are logged when \`haive briefing\` or \`haive memory query\` surface a memory.`
+      `No memory reads recorded in window. Reads are logged when \`haive briefing\` or \`haive memory search\` surface a memory.`
     );
     return;
   }
@@ -12388,7 +12395,7 @@ import {
   resolveHaivePaths as resolveHaivePaths37
 } from "@hiveai/core";
 function registerBench(program2) {
-  program2.command("bench").description("Self-test the local hAIve setup: runs core MCP tools against this project and reports latency + payload size.").option("-t, --task <task>", "task description for ranking-aware tools", "audit dependencies for security risks").option("--json", "emit JSON instead of a table", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
+  program2.command("selftest").alias("bench").description("Self-test the LOCAL hAIve install: runs core MCP tools against this project and reports latency + payload size. Different from `benchmark` (which measures hAIve-vs-plain agent value). Alias: bench").option("-t, --task <task>", "task description for ranking-aware tools", "audit dependencies for security risks").option("--json", "emit JSON instead of a table", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot40(opts.dir);
     const paths = resolveHaivePaths37(root);
     const ctx = { paths };
@@ -12515,7 +12522,7 @@ import path41 from "path";
 import "commander";
 import { estimateTokens as estimateTokens4, findProjectRoot as findProjectRoot41 } from "@hiveai/core";
 function registerBenchmark(program2) {
-  const benchmark = program2.command("benchmark").description("Official hAIve benchmark/demo utilities for measuring agent enforcement value.");
+  const benchmark = program2.command("benchmark").description("Measure hAIve's VALUE: paired hAIve-vs-plain agent runs (correctness, tokens, tools). Different from `selftest` (which only checks local install latency).");
   benchmark.command("report").description("Summarize BENCHMARK_AGENT_REPORT.md files from a paired hAIve/plain agent benchmark.").option("-d, --dir <dir>", "benchmark root", "benchmarks/agent-benchmark").option("--out <file>", "write a Markdown report").option("--json", "emit JSON", false).action(async (opts) => {
     const root = resolveBenchmarkRoot(opts.dir);
     const rows = await collectRows(root);
@@ -12671,7 +12678,7 @@ import {
 } from "@hiveai/core";
 function registerEval(program2) {
   program2.command("eval").description(
-    "Rigorous, repeatable quality eval: do the right memories surface (retrieval) and do the right sensors fire (catch-rate)? Emits a chiffr\xE9 0\u2013100 score. Uses .ai/eval cases via --spec, or auto-synthesizes cases from anchored memories."
+    "Rigorous, repeatable quality eval: do the right memories surface (retrieval) and do the right sensors fire (catch-rate)? Emits a numeric 0\u2013100 score. Uses .ai/eval cases via --spec, or auto-synthesizes cases from anchored memories."
   ).option("--spec <file>", "JSON eval spec ({ retrieval: [...], sensors: [...] })").option("--semantic-only", "self-eval probes by title alone (no anchor files) \u2014 harder retrieval", false).option("-k, --top <n>", "briefing top-k considered a hit", "8").option("--json", "emit JSON", false).option("--out <file>", "write a Markdown report").option("--fail-under <score>", "exit non-zero if the overall score is below this (0\u2013100) \u2014 for CI gates").option("--baseline", "save this run as the baseline (.ai/eval/baseline.json) for future --compare", false).option("--compare", "diff this run against the saved baseline and print the delta", false).option("--baseline-file <path>", "baseline file to read/write (default: .ai/eval/baseline.json)").option("--fail-on-regression", "with --compare, exit non-zero if the score dropped vs the baseline", false).option("--regression-gate", "CI-safe gate: compare against the baseline IF one exists (fail on regression), else no-op", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot42(opts.dir);
     const paths = resolveHaivePaths38(root);
@@ -13344,7 +13351,7 @@ function registerDoctor(program2) {
           severity: "warn",
           code: "stale-draft-memories",
           message: `${oldDrafts.length} draft memor${oldDrafts.length === 1 ? "y has" : "ies have"} been in draft status for 30+ days: ${ids}${more}`,
-          fix: "haive memory approve <id>   # activate\nhaive memory rm <id>         # or delete if obsolete"
+          fix: "haive memory approve <id>   # activate\nhaive memory delete <id>     # or delete if obsolete"
         });
       }
       const policyMemories = memories.filter((m) => !isStackPackSeed4(m.memory.frontmatter));
@@ -13481,7 +13488,7 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `haive init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.13.1"));
+    findings.push(...await collectInstallFindings(root, "0.13.7"));
     findings.push(...await collectToolchainFindings(root));
     try {
       const legacyRaw = execSync3("haive-mcp --version", {
@@ -13489,7 +13496,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.13.1";
+      const cliVersion = "0.13.7";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -13705,7 +13712,7 @@ async function collectHarnessCoverageFindings(codeMap, memories) {
     code: "harness-coverage",
     coverage_percent: pct2,
     message: `${covered}/${total} code-map files have validated memory anchors (${pct2}%). ` + coverageDesc + uncoveredHint,
-    fix: pct2 < 50 && total > 10 ? `haive memory add --type gotcha|convention|architecture --paths <key-file> --scope team` : void 0,
+    fix: pct2 < 50 && total > 10 ? `haive memory save --type gotcha|convention|architecture --paths <key-file> --scope team` : void 0,
     section: "Harness coverage"
   });
   return findings;
@@ -14166,7 +14173,7 @@ import {
 } from "@hiveai/core";
 function registerPrecommit(program2) {
   program2.command("precommit").description(
-    "Run a pre-commit safety check: scans `git diff --cached` against known anti-patterns,\n  surfaces conventions/decisions anchored to touched files, and warns about stale anchored memories.\n\n  Wire it into git as: `.git/hooks/pre-commit` running `haive precommit` (exit 1 = block).\n\n  Examples:\n    haive precommit                                # auto-detects staged diff\n    haive precommit --block-on any                 # block on any warning, not just high-confidence\n    haive precommit --paths src/auth.ts src/db.ts  # explicit paths instead of git diff"
+    "Run a pre-commit safety check (manual variant of `haive enforce check --stage pre-commit`):\n  scans `git diff --cached` against known anti-patterns,\n  surfaces conventions/decisions anchored to touched files, and warns about stale anchored memories.\n\n  Wire it into git as: `.git/hooks/pre-commit` running `haive precommit` (exit 1 = block).\n\n  Examples:\n    haive precommit                                # auto-detects staged diff\n    haive precommit --block-on any                 # block on any warning, not just high-confidence\n    haive precommit --paths src/auth.ts src/db.ts  # explicit paths instead of git diff"
   ).option(
     "--block-on <mode>",
     "'any' | 'high-confidence' | 'never' (report only). Default: derived from enforcement.antiPatternGate."
@@ -14356,7 +14363,7 @@ function registerWelcome(program2) {
     console.log(ui.bold(`hAIve welcome \u2014 ${pick.length} team memories (${root})`));
     console.log(ui.dim(`Next: invoke get_briefing with your task or run 'haive briefing --task "\u2026"'`));
     if (pick.length === 0) {
-      ui.warn("No team memories yet \u2014 add some with 'haive memory add' or promote personal ones.");
+      ui.warn("No team memories yet \u2014 add some with 'haive memory save' or promote personal ones.");
       return;
     }
     let i = 1;
@@ -14644,7 +14651,10 @@ function registerEnforce(program2) {
   ).option("-d, --dir <dir>", "project root").option("--explain", "group findings by blocking/review/info and show repair commands", false).option("--json", "emit JSON", false).action(async (opts) => {
     const report = await buildFinishReport(opts.dir);
     printReport(report, Boolean(opts.json), Boolean(opts.explain));
-    if (report.should_block) process.exit(2);
+    if (report.should_block) {
+      if (!opts.json) printNextRequiredAction(report);
+      process.exit(2);
+    }
   });
   enforce.command("session-start").description("Claude Code SessionStart hook: inject briefing and write a local briefing marker.").option("-d, --dir <dir>", "project root").option("--task <text>", "task text to rank memories").option("--source <name>", "marker source", "claude-session-start").option("--session-id <id>", "agent session id").action(async (opts) => {
     const payload = await readHookPayload();
@@ -15053,7 +15063,10 @@ async function buildEnforcementReport(dir, stage, sessionId) {
   const paths = resolveHaivePaths48(root);
   const initialized = existsSync75(paths.haiveDir);
   const config = initialized ? await loadConfig13(paths) : {};
-  if (initialized) await applyLightweightRepairs(root, paths);
+  if (initialized) {
+    await applyLightweightRepairs(root, paths);
+    if (stage === "pre-commit") await stageResyncedArtifacts(root, paths);
+  }
   const mode = config.enforcement?.mode ?? "strict";
   const findings = [];
   if (!initialized) {
@@ -15082,7 +15095,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "hAIve enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.13.1"));
+  findings.push(...await inspectIntegrationVersions(root, "0.13.7"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker2(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent hAIve briefing marker exists." } : {
@@ -15685,11 +15698,22 @@ async function verifyGithubActionsForHead(root, status) {
     }];
   }
   if (runs.length === 0) {
+    const headMsg = (await runCommand4("git", ["log", "-1", "--pretty=%B"], root).catch(() => "")).trim();
+    if (/\[skip ci\]|\[ci skip\]|\[no ci\]|\*\*\*NO_CI\*\*\*|skip-checks: *true/i.test(headMsg)) {
+      return [{
+        severity: "error",
+        code: "github-actions-skipped-by-message",
+        message: "No GitHub Actions runs for HEAD because the HEAD commit message contains a CI-skip directive ([skip ci] / [ci skip] / [no ci]) \u2014 this skips the WHOLE push, including code.",
+        fix: "Reword the HEAD commit so its message (subject AND body) does not contain the literal skip-ci directive \u2014 write it as 'skip-ci'. Then re-push, or trigger CI manually with `gh workflow run <workflow.yml> --ref <branch>`.",
+        reason: "GitHub scans the entire commit message; a code commit whose message includes a skip-ci directive silently skips CI for the whole push.",
+        impact: 60
+      }];
+    }
     return [{
       severity: "error",
       code: "github-actions-runs-missing",
       message: "No GitHub Actions runs were found for HEAD.",
-      fix: "Wait for GitHub to create the workflow runs, or verify that the push was not skipped by a `[skip ci]` head commit; rerun `haive enforce finish` after the runs appear.",
+      fix: "Wait for GitHub to create the workflow runs, or verify that the push was not skipped by a skip-ci head commit; rerun `haive enforce finish` after the runs appear.",
       impact: 50
     }];
   }
@@ -15704,21 +15728,35 @@ async function verifyGithubActionsForHead(root, status) {
     }];
   }
   const failed = runs.filter((run) => run.conclusion !== "success");
-  if (failed.length > 0) {
+  const failedCore = failed.filter((run) => !isExternalTransientWorkflow(run));
+  const failedExternal = failed.filter((run) => isExternalTransientWorkflow(run));
+  if (failedCore.length > 0) {
     return [{
       severity: "error",
       code: "github-actions-failed",
-      message: `${failed.length}/${runs.length} GitHub Actions workflow run(s) for HEAD did not pass: ${formatGithubRunNames(failed)}.`,
+      message: `${failedCore.length}/${runs.length} GitHub Actions workflow run(s) for HEAD did not pass: ${formatGithubRunNames(failedCore)}.`,
       fix: "Inspect the failed run logs with `gh run view <run-id> --log`, fix the issue, push the fix, then rerun `haive enforce finish`.",
       impact: 80
     }];
   }
+  if (failedExternal.length > 0) {
+    return [{
+      severity: "info",
+      code: "github-actions-external-transient",
+      message: `${failedExternal.length} external/transient workflow run(s) for HEAD did not pass (non-blocking): ${formatGithubRunNames(failedExternal)}. All core workflows passed.`,
+      fix: "External integrations can fail on transient network/timeout. Re-run with `gh run rerun <run-id>` if you want them green \u2014 not required to finish."
+    }];
+  }
   return [{
     severity: "ok",
     code: "github-actions-pass",
     message: `All ${runs.length} GitHub Actions workflow run(s) for HEAD completed successfully.`
   }];
 }
+function isExternalTransientWorkflow(run) {
+  const label = `${run.workflowName ?? ""} ${run.name ?? ""}`.toLowerCase();
+  return /\bsonar(qube|cloud)?\b|\bcodeql\b|\bsnyk\b|\bcodecov\b/.test(label);
+}
 async function githubRemoteForCurrentBranch(root) {
   const branch = (await runCommand4("git", ["branch", "--show-current"], root).catch(() => "")).trim();
   const branchRemote = branch ? (await runCommand4("git", ["config", "--get", `branch.${branch}.remote`], root).catch(() => "")).trim() : "";
@@ -15868,6 +15906,13 @@ function printFinding(finding, explain = false) {
   if (explain && finding.memory_ids?.length) console.log(ui.dim(`  memories: ${finding.memory_ids.join(", ")}`));
   if (finding.fix) console.log(ui.dim(`${explain ? "  repair: " : "  fix: "}${finding.fix}`));
 }
+function printNextRequiredAction(report) {
+  const blocker = report.findings.find((f) => f.severity === "error" && f.fix);
+  if (!blocker) return;
+  console.log("");
+  console.log(ui.bold("\u2192 NEXT REQUIRED ACTION") + ui.dim(`  (${blocker.code})`));
+  for (const line of blocker.fix.split("\n")) console.log(`  ${line}`);
+}
 async function applyLightweightRepairs(root, paths) {
   await applyAutopilotRepairs(root, paths, {
     applyConfig: false,
@@ -15971,6 +16016,15 @@ async function readStdin2(maxBytes) {
     setTimeout(finish, 2e3);
   });
 }
+var ATOMIC_STAGE_EXCLUDE = ["/.usage/", "/.runtime/", "/.cache/"];
+async function stageResyncedArtifacts(root, paths) {
+  const aiRel = path51.relative(root, paths.haiveDir);
+  const out = await runCommand4("git", ["diff", "--name-only", "--", aiRel], root).catch(() => "");
+  const toStage = out.split("\n").map((line) => line.trim()).filter(Boolean).filter((file) => !ATOMIC_STAGE_EXCLUDE.some((excl) => `/${file}`.includes(excl)));
+  if (toStage.length === 0) return;
+  await runCommand4("git", ["add", "--", ...toStage], root).catch(() => {
+  });
+}
 function runCommand4(cmd, args, cwd) {
   return new Promise((resolve, reject) => {
     const proc = spawn6(cmd, args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
@@ -16488,7 +16542,7 @@ function warnNum(n) {
 
 // src/index.ts
 var program = new Command58();
-program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.13.1").option("--advanced", "show maintenance and experimental commands in help");
+program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.13.7").option("--advanced", "show maintenance and experimental commands in help");
 registerInit(program);
 registerWelcome(program);
 registerResolveProject(program);
@@ -16564,14 +16618,14 @@ var CORE_ROOT_COMMANDS = /* @__PURE__ */ new Set([
   "session"
 ]);
 var CORE_MEMORY_COMMANDS = /* @__PURE__ */ new Set([
-  "add",
+  "save",
   "list",
-  "query",
-  "show",
+  "search",
+  "get",
   "verify",
   "lint",
   "tried",
-  "rm"
+  "delete"
 ]);
 var CORE_SESSION_COMMANDS = /* @__PURE__ */ new Set(["end"]);
 applySurfaceVisibility(program);
@@ -16589,12 +16643,24 @@ program.parseAsync(process.argv).catch((err) => {
 function applySurfaceVisibility(root) {
   const showAdvanced = process.argv.includes("--advanced") || process.env.HAIVE_SHOW_ADVANCED === "1";
   if (!showAdvanced) hideNonCoreCommands(root);
+  const familiesBlock = showAdvanced ? [
+    "",
+    "Advanced surface, by family:",
+    "  reports:  dashboard \xB7 stats \xB7 playback        eval:     eval \xB7 benchmark \xB7 selftest (alias: bench)",
+    "  index:    index \xB7 code-search \xB7 embeddings    runtime:  runtime \xB7 observe \xB7 snapshot",
+    "  ops:      memory <sub> \xB7 sensors \xB7 ingest \xB7 hub \xB7 sync \xB7 install-hooks (= enforce install) \xB7 precommit (= enforce check)"
+  ] : [];
   root.addHelpText(
     "after",
     [
       "",
-      "Default help shows the core harness workflow: init, doctor, agent setup, briefing, enforcement,",
-      "sync, session recaps, and high-signal memory commands.",
+      "Golden path (what you type day to day):",
+      "  init \u2192 doctor \u2192 agent setup \u2192 briefing \u2192 memory save/tried \u2192 sensors check \u2192 enforce finish \u2192 sync \u2192 session end",
+      "",
+      "Memory verbs mirror the MCP tools: memory save/search/get/delete <-> mem_save/mem_search/mem_get/mem_delete",
+      "(old verbs add/query/show/rm still work as aliases).",
+      ...familiesBlock,
+      "",
       "Run `haive --advanced --help` or set HAIVE_SHOW_ADVANCED=1 to show maintenance and experimental commands."
     ].join("\n")
   );