@hiveai/cli 0.9.26 → 0.9.28

package/dist/index.js

@@ -11,6 +11,7 @@ import "commander";
 import {
   extractActionsBriefBody,
   findProjectRoot as findProjectRoot2,
+  isStackPackSeed,
   literalMatchesAllTokens,
   literalMatchesAnyToken,
   loadCodeMap as loadCodeMap3,
@@ -1098,6 +1099,7 @@ function classifyCliPriority(item, filePaths, tokens, exactTaskHit, partialTaskH
   const fm = item.memory.frontmatter;
   const anchored = filePaths.length > 0 && memoryMatchesAnchorPaths(item.memory, filePaths);
   if (anchored || fm.type === "attempt" && exactTaskHit) return "must_read";
+  if (isStackPackSeed(fm)) return "background";
   if (exactTaskHit || partialTaskHit || item.score >= 4 || tokens && fm.tags.some((tag) => tokens.includes(tag))) {
     return "useful";
   }
@@ -2018,7 +2020,8 @@ import path9 from "path";
 import {
   buildFrontmatter,
   memoryFilePath,
-  serializeMemory as serializeMemory2
+  serializeMemory as serializeMemory2,
+  STACK_PACK_TAG
 } from "@hiveai/core";
 var PACKS = {
   nestjs: [
@@ -2593,6 +2596,7 @@ new ApolloServer({
     }
   ]
 };
+var SEED_FOOTER = (stack) => `> _Seeded by \`haive init\` from the **${stack}** stack pack \u2014 generic guidance, not repo-specific. Anchor it to a real file or replace it with a repo-specific note to raise it above background priority._`;
 var SUPPORTED_STACKS = Object.keys(PACKS);
 function isValidStack(name) {
   return name in PACKS;
@@ -2634,11 +2638,15 @@ async function seedStackPack(haivePaths, stack) {
       slug: `${stack}-${mem.slug}`,
       scope: "team",
       status: "validated",
-      tags: mem.tags
+      // STACK_PACK_TAG marks this as generic seed knowledge so briefing ranking
+      // keeps it at `background` priority until it earns a repo-specific anchor.
+      tags: [...mem.tags, STACK_PACK_TAG]
     });
     const filePath = memoryFilePath(haivePaths, "team", fm.id);
     if (existsSync8(filePath)) continue;
-    const content = serializeMemory2({ frontmatter: fm, body: mem.body });
+    const content = serializeMemory2({ frontmatter: fm, body: `${mem.body}
+
+${SEED_FOOTER(stack)}` });
     await mkdir4(path9.dirname(filePath), { recursive: true });
     await writeFile5(filePath, content, "utf8");
     count++;
@@ -2669,30 +2677,25 @@ TODO \u2014 domain terms and what they mean here.
 TODO \u2014 known traps, surprising behavior, things newcomers stub their toes on.
 `;
 var BRIDGE_BODY = `<!-- hAIve bridge file \u2014 do not edit by hand. -->
-<!-- This file points your AI tool at the shared hAIve project context. -->
-
-See \`.ai/project-context.md\` for the full project context.
-Memories live under \`.ai/memories/\` (personal/team/module).
 
-## hAIve \u2014 mandatory rules for AI agents
+This repo uses **hAIve** for shared context. The map:
 
-Installing or initializing hAIve in this repository means **the team expects AI agents to drive work through hAIve**, not bypass it.
+- \`.ai/project-context.md\` \u2014 project overview, architecture, conventions.
+- \`.ai/memories/\` \u2014 decisions, gotchas, conventions, failed attempts (personal/team/module).
+- The breadcrumbs injected below (if any) are the top current memories.
 
-### MCP first (default \u2014 never optional unless the developer says so)
-The **haive** MCP server must be enabled in your client. Until it is unavailable (misconfiguration report to the developer), you **must** use it for substantive work:
+## Working through hAIve
 
-- **Before** you edit project source files, configs (\`package.json\`, tooling), or workflows for the current goal, invoke \`get_briefing\` with a short **task** string (and **files** / **symbols** when you know them). If project context was already refreshed in this session and you only need ranked memories, you may call \`mem_relevant_to\` instead\u2014but **still** consult hAIve before trusting ungrounded guesses.
-- **Before** declaring a coding task finished, invoke the MCP prompt \`post_task\` when the session produced learnings or substantive changes worth capturing.
+1. **Before editing** for a goal, call \`get_briefing\` (task + files/symbols) to load ranked context \u2014 or \`mem_relevant_to\` if project context is already loaded this session.
+2. **When an approach fails**, call \`mem_tried\` right away so the next agent skips the dead end.
+3. **Before closing** a substantive session, run the \`post_task\` prompt to capture what was learned.
 
-Do **not** treat these as nice-to-have: they are **default-required** for coding agents here.
+If the haive MCP server is not available, tell the developer rather than silently skipping it.
 
-### Session rules
-- **Immediately** when an approach fails (wrong API, wrong pattern, wrong assumption), call \`mem_tried\` \u2014 do not wait until the end of the session.
+## Safety
 
-### Safety rules \u2014 NEVER violate these
-- If \`get_briefing\` returns an \`action_required\` list, **stop and show each item to the developer** before doing anything. Use the exact \`developer_message\` provided. Wait for explicit confirmation.
-- **Never modify code autonomously** because of a breaking change detected in another project (dependency version bump, API contract change, removed field). Always ask first.
-- When in doubt about a cross-repo change: ask, don't act.
+- If \`get_briefing\` returns \`action_required\`, surface each item to the developer (use its \`developer_message\`) and wait for confirmation before changing code.
+- Never act autonomously on a cross-repo breaking change (dep bump, contract/API diff) \u2014 ask first.
 `;
 var CURSOR_HAIVE_RULE_MDC = `---
 description: Require hAIve MCP (get_briefing / mem_relevant_to) before substantive repo edits
@@ -2918,7 +2921,10 @@ function registerInit(program2) {
       }
       if (totalSeeded > 0) {
         ui.success(
-          `${totalSeeded} validated team memories pre-seeded \u2014 haive is useful from J+0`
+          `${totalSeeded} starter memories seeded (generic stack guidance, kept at background priority)`
+        );
+        ui.info(
+          "Anchor them to real files or replace them with repo-specific notes to make them high-signal."
         );
       }
     }
@@ -3663,6 +3669,7 @@ import {
   isGlobPath,
   isAutoPromoteEligible,
   isDecaying,
+  isStackPackSeed as isStackPackSeed2,
   literalMatchesAllTokens as literalMatchesAllTokens22,
   literalMatchesAnyToken as literalMatchesAnyToken22,
   loadCodeMap as loadCodeMap4,
@@ -3676,7 +3683,8 @@ import {
   serializeMemory as serializeMemory9,
   tokenizeQuery as tokenizeQuery22,
   trackReads as trackReads3,
-  truncateToTokens
+  truncateToTokens,
+  writeBriefingMarker as writeBriefingMarker2
 } from "@hiveai/core";
 import { z as z17 } from "zod";
 import { estimateTokens as estimateTokens2, loadCodeMap as loadCodeMap22, queryCodeMap as queryCodeMap22 } from "@hiveai/core";
@@ -4815,7 +4823,8 @@ var SessionTracker = class {
       const ranPostTask = this.events.some(
         (e) => e.tool === "mem_session_end" && !e.summary?.startsWith("Auto-captured")
       );
-      if (!ranPostTask && existsSync16(this.ctx.paths.haiveDir)) {
+      const isSubstantialSession = totalCalls >= 3 || writingTools.length > 0;
+      if (!ranPostTask && isSubstantialSession && existsSync16(this.ctx.paths.haiveDir)) {
         try {
           const memoriesSaved = writingTools.map((e) => e.summary ?? "").filter(Boolean).slice(0, 20);
           const payload = {
@@ -5426,6 +5435,16 @@ When done, call \`mem_session_end\` to acknowledge \u2014 this clears the pendin
       );
     }
   }
+  if (existsSync18(ctx.paths.haiveDir)) {
+    await writeBriefingMarker2(ctx.paths, {
+      sessionId: process.env.HAIVE_SESSION_ID,
+      ...input.task ? { task: input.task } : {},
+      source: "mcp-get-briefing",
+      files: input.files,
+      memoryIds: outputMemories.map((m) => m.id)
+    }).catch(() => {
+    });
+  }
   return {
     ...input.task ? { task: input.task } : {},
     search_mode: searchMode,
@@ -5480,6 +5499,9 @@ function classifyMemoryPriority(memory2, loaded, inputFiles, inputSymbols) {
   if (fm?.requires_human_approval || directAnchor || directSymbol || memory2.type === "attempt" && (memory2.match_quality === "exact" || strongSemantic) || memory2.type === "skill" && (memory2.match_quality === "exact" || strongSemantic)) {
     return "must_read";
   }
+  if (isStackPackSeed2(fm)) {
+    return "background";
+  }
   if (memory2.type === "skill" || memory2.reasons.includes("module") || memory2.reasons.includes("domain") || memory2.match_quality === "exact" || usefulSemantic) {
     return "useful";
   }
@@ -5962,6 +5984,8 @@ async function antiPatternsCheck(input, ctx) {
       confidence: deriveConfidence6(fm, u),
       body_preview: body.split("\n").slice(0, 5).join("\n").slice(0, 400),
       reasons: [reason],
+      tags: fm.tags ?? [],
+      anchor_paths: fm.anchor?.paths ?? [],
       ...score !== void 0 ? { semantic_score: score } : {}
     });
   };
@@ -6552,8 +6576,45 @@ function fileTypeDowngradeReason(warning, paths) {
   if (configOnly && !warning.reasons.includes("anchor") && !hasStrongSemantic(warning)) {
     return "package/config-only change; warning has no anchor on these files and no strong semantic match \u2014 downgraded to info.";
   }
+  const touchesBuildFile = paths.some(isPackageOrConfigPath);
+  if (!touchesBuildFile && isBuildScopedWarning(warning) && !warning.reasons.includes("anchor") && !hasStrongSemantic(warning)) {
+    return "build/packaging gotcha, but no package/build file changed \u2014 downgraded to info.";
+  }
   return null;
 }
+function isBuildScopedWarning(warning) {
+  const tags = warning.tags ?? [];
+  if (tags.some((t) => BUILD_SCOPED_TAGS.has(t.toLowerCase()))) return true;
+  const anchors = warning.anchor_paths ?? [];
+  return anchors.length > 0 && anchors.every(isPackageOrConfigPath);
+}
+var BUILD_SCOPED_TAGS = /* @__PURE__ */ new Set([
+  "npm",
+  "pnpm",
+  "yarn",
+  "publish",
+  "install",
+  "packaging",
+  "package",
+  "build",
+  "tsup",
+  "bundler",
+  "monorepo",
+  "workspace",
+  "versioning",
+  "version",
+  "dev-workflow",
+  "hotswap",
+  "ci",
+  "workflow",
+  "release",
+  "changelog",
+  "dependencies",
+  "deps",
+  "dependency",
+  "tooling",
+  "config"
+]);
 function hasStrongSemantic(warning) {
   return warning.reasons.includes("semantic") && (warning.semantic_score ?? 0) >= 0.65;
 }
@@ -6564,9 +6625,36 @@ function isDocLikePath(file) {
 function isPackageOrConfigPath(file) {
   const lower = file.toLowerCase();
   const base = lower.split("/").pop() ?? lower;
-  return lower.endsWith("package.json") || lower.endsWith("package-lock.json") || lower.endsWith("pnpm-lock.yaml") || lower.endsWith("yarn.lock") || lower.endsWith("bun.lockb") || lower.endsWith(".config.ts") || lower.endsWith(".config.js") || lower.endsWith(".json") || lower.endsWith(".yml") || lower.endsWith(".yaml") || lower.endsWith(".toml") || lower.startsWith(".github/workflows/") || lower.startsWith(".github/") && lower.endsWith(".yml") || // Dotfiles that are pure configuration/tooling — never trigger runtime gotchas
+  return lower.endsWith("package.json") || lower.endsWith("package-lock.json") || lower.endsWith("pnpm-lock.yaml") || lower.endsWith("yarn.lock") || lower.endsWith("bun.lockb") || lower.endsWith(".config.ts") || lower.endsWith(".config.js") || isJsonConfigFile(base) || lower.endsWith(".yml") || lower.endsWith(".yaml") || lower.endsWith(".toml") || lower.startsWith(".github/workflows/") || lower.startsWith(".github/") && lower.endsWith(".yml") || // Dotfiles that are pure configuration/tooling — never trigger runtime gotchas
   base === ".gitignore" || base === ".gitattributes" || base === ".gitmodules" || base === ".editorconfig" || base === ".nvmrc" || base === ".node-version" || base === ".npmrc" || base === ".yarnrc" || base === ".yarnrc.yml" || base === ".dockerignore" || base === "dockerfile" || base.startsWith("dockerfile.") || base === ".env.example" || base === ".env.template" || lower.endsWith(".prettierrc") || lower.endsWith(".eslintrc") || lower.endsWith(".eslintignore") || lower.endsWith(".prettierignore") || lower.endsWith(".stylelintrc") || lower.endsWith(".browserslistrc");
 }
+function isJsonConfigFile(base) {
+  const knownConfigs = /* @__PURE__ */ new Set([
+    "tsconfig.json",
+    "jsconfig.json",
+    "deno.json",
+    "deno.jsonc",
+    "nx.json",
+    "turbo.json",
+    "lerna.json",
+    "rush.json",
+    "jest.config.json",
+    "vitest.config.json",
+    "babel.config.json",
+    ".babelrc.json",
+    ".swcrc",
+    ".mocharc.json",
+    "renovate.json",
+    "dependabot.json",
+    ".prettierrc.json",
+    ".eslintrc.json",
+    ".stylelintrc.json"
+  ]);
+  if (knownConfigs.has(base)) return true;
+  if (/^tsconfig\..+\.json$/.test(base)) return true;
+  if (/^\.[a-z]+rc\.json$/.test(base)) return true;
+  return false;
+}
 function repairCommandForWarning(warning, paths) {
   const firstPath = paths[0];
   return firstPath ? `haive briefing --files "${firstPath}" --task "review ${warning.id}"` : `haive memory show ${warning.id}`;
@@ -7102,7 +7190,7 @@ When done, respond with: "Imported N memories: [list of IDs]" or "Nothing action
   };
 }
 var SERVER_NAME = "haive";
-var SERVER_VERSION = "0.9.26";
+var SERVER_VERSION = "0.9.28";
 function jsonResult(data) {
   return {
     content: [
@@ -8083,6 +8171,7 @@ import {
   getUsage as getUsage10,
   isAutoPromoteEligible as isAutoPromoteEligible2,
   isDecaying as isDecaying2,
+  isStackPackSeed as isStackPackSeed3,
   loadCodeMap as loadCodeMap5,
   loadConfig as loadConfig4,
   loadMemoriesFromDir as loadMemoriesFromDir23,
@@ -8099,14 +8188,14 @@ var BRIDGE_START = "<!-- haive:memories-start -->";
 var BRIDGE_END = "<!-- haive:memories-end -->";
 function registerSync(program2) {
   program2.command("sync").description(
-    "Refresh memory state after a git pull or merge.\n  What it does:\n    1. Verifies anchor paths \u2014 marks stale if files/symbols moved or deleted\n    2. Re-validates previously stale memories that are now fresh\n    3. Auto-promotes proposed memories (by usage count or time delay in autopilot)\n    4. Auto-refreshes code-map if source files changed\n    5. Reports decay warnings for memories unused >90 days\n\n  Install git hooks to run sync automatically: haive install-hooks\n\n  Examples:\n    haive sync\n    haive sync --since main   # also report memories changed since main\n    haive sync --embed        # also rebuild embeddings index\n"
+    "Refresh memory state after a git pull or merge.\n  What it does:\n    1. Verifies anchor paths \u2014 marks stale if files/symbols moved or deleted\n    2. Re-validates previously stale memories that are now fresh\n    3. Auto-promotes proposed memories (by usage count or time delay in autopilot)\n    4. Auto-refreshes code-map if source files changed\n    5. Reports decay warnings for memories unused >90 days\n\n  Install git hooks to run sync automatically: haive install-hooks\n\n  Examples:\n    haive sync\n    haive sync --dry-run      # preview what would change without writing\n    haive sync --since main   # also report memories changed since main\n    haive sync --embed        # also rebuild embeddings index\n"
   ).option("-d, --dir <dir>", "project root").option("--quiet", "minimal output (suitable for git hooks)").option(
     "--since <ref>",
     "git ref/commit to compare against; report memories added/modified/removed since"
   ).option("--no-verify", "skip the anchor verification step").option("--no-promote", "skip the auto-promotion step").option(
     "--inject-bridge",
     "inject top validated memories into CLAUDE.md (or --bridge-file) between <!-- haive:memories-start/end --> markers"
-  ).option("--bridge-file <path>", "bridge file to inject into (default: CLAUDE.md)").option("--bridge-max-memories <n>", "max memories to inject into bridge file", "5").option("--embed", "rebuild embeddings index after sync (requires @haive/embeddings)").option("--no-cross-repo", "skip cross-repo memory pull even if crossRepoSources is configured").option("--no-deps", "skip dependency version tracking").option("--no-contracts", "skip contract file diff checking").action(async (opts) => {
+  ).option("--bridge-file <path>", "bridge file to inject into (default: CLAUDE.md)").option("--bridge-max-memories <n>", "max memories to inject into bridge file", "5").option("--embed", "rebuild embeddings index after sync (requires @haive/embeddings)").option("--no-cross-repo", "skip cross-repo memory pull even if crossRepoSources is configured").option("--no-deps", "skip dependency version tracking").option("--no-contracts", "skip contract file diff checking").option("--dry-run", "report what would change without writing any files").action(async (opts) => {
     const root = findProjectRoot12(opts.dir);
     const paths = resolveHaivePaths9(root);
     if (!existsSync29(paths.memoriesDir)) {
@@ -8121,6 +8210,8 @@ function registerSync(program2) {
     const autoApproveDelayHours = config.autoApproveDelayHours ?? null;
     const autoPromoteMinReads = config.autoPromoteMinReads ?? DEFAULT_AUTO_PROMOTE_RULE2.minReads;
     const autoRepair = config.autoRepair ?? {};
+    const dryRun = opts.dryRun === true;
+    if (dryRun) log(ui.yellow("(dry run \u2014 no files will be written)"));
     let staleMarked = 0;
     let revalidated = 0;
     let promoted = 0;
@@ -8130,19 +8221,21 @@ function registerSync(program2) {
       for (const { memory: memory2, filePath } of memories) {
         if (memory2.frontmatter.type === "session_recap") {
           if (memory2.frontmatter.status === "stale") {
-            await writeFile13(
-              filePath,
-              serializeMemory11({
-                frontmatter: {
-                  ...memory2.frontmatter,
-                  status: "validated",
-                  stale_reason: null,
-                  verified_at: (/* @__PURE__ */ new Date()).toISOString()
-                },
-                body: memory2.body
-              }),
-              "utf8"
-            );
+            if (!dryRun) {
+              await writeFile13(
+                filePath,
+                serializeMemory11({
+                  frontmatter: {
+                    ...memory2.frontmatter,
+                    status: "validated",
+                    stale_reason: null,
+                    verified_at: (/* @__PURE__ */ new Date()).toISOString()
+                  },
+                  body: memory2.body
+                }),
+                "utf8"
+              );
+            }
             revalidated++;
           }
           continue;
@@ -8153,35 +8246,39 @@ function registerSync(program2) {
         const verifiedAt = (/* @__PURE__ */ new Date()).toISOString();
         if (result.stale) {
           if (memory2.frontmatter.status !== "stale") {
+            if (!dryRun) {
+              await writeFile13(
+                filePath,
+                serializeMemory11({
+                  frontmatter: {
+                    ...memory2.frontmatter,
+                    status: "stale",
+                    verified_at: verifiedAt,
+                    stale_reason: result.reason
+                  },
+                  body: memory2.body
+                }),
+                "utf8"
+              );
+            }
+            staleMarked++;
+          }
+        } else if (memory2.frontmatter.status === "stale") {
+          if (!dryRun) {
             await writeFile13(
               filePath,
               serializeMemory11({
                 frontmatter: {
                   ...memory2.frontmatter,
-                  status: "stale",
+                  status: "validated",
                   verified_at: verifiedAt,
-                  stale_reason: result.reason
+                  stale_reason: null
                 },
                 body: memory2.body
               }),
               "utf8"
             );
-            staleMarked++;
           }
-        } else if (memory2.frontmatter.status === "stale") {
-          await writeFile13(
-            filePath,
-            serializeMemory11({
-              frontmatter: {
-                ...memory2.frontmatter,
-                status: "validated",
-                verified_at: verifiedAt,
-                stale_reason: null
-              },
-              body: memory2.body
-            }),
-            "utf8"
-          );
           revalidated++;
         }
       }
@@ -8197,35 +8294,39 @@ function registerSync(program2) {
           minReads: autoPromoteMinReads,
           maxRejections: DEFAULT_AUTO_PROMOTE_RULE2.maxRejections
         })) {
-          await writeFile13(
-            filePath,
-            serializeMemory11({ frontmatter: { ...fm, status: "validated" }, body: memory2.body }),
-            "utf8"
-          );
+          if (!dryRun) {
+            await writeFile13(
+              filePath,
+              serializeMemory11({ frontmatter: { ...fm, status: "validated" }, body: memory2.body }),
+              "utf8"
+            );
+          }
           promoted++;
           continue;
         }
         if (autoApproveDelayHours !== null && fm.status === "proposed" && fm.scope === "team") {
           const ageHours = (nowMs - new Date(fm.created_at).getTime()) / (1e3 * 60 * 60);
           if (ageHours >= autoApproveDelayHours) {
-            await writeFile13(
-              filePath,
-              serializeMemory11({
-                frontmatter: {
-                  ...fm,
-                  status: "validated",
-                  verified_at: (/* @__PURE__ */ new Date()).toISOString()
-                },
-                body: memory2.body
-              }),
-              "utf8"
-            );
+            if (!dryRun) {
+              await writeFile13(
+                filePath,
+                serializeMemory11({
+                  frontmatter: {
+                    ...fm,
+                    status: "validated",
+                    verified_at: (/* @__PURE__ */ new Date()).toISOString()
+                  },
+                  body: memory2.body
+                }),
+                "utf8"
+              );
+            }
             autoApproved++;
           }
         }
       }
     }
-    if (config.autopilot || autoRepair.context || autoRepair.corpus) {
+    if (!dryRun && (config.autopilot || autoRepair.context || autoRepair.corpus)) {
       const repairs = await applyAutopilotRepairs(root, paths, {
         applyContext: autoRepair.context ?? config.autopilot,
         applyCorpus: autoRepair.corpus ?? config.autopilot,
@@ -8357,14 +8458,16 @@ Attends une **confirmation explicite** avant d'agir.
                   paths: [result.file],
                   topic: `dep-bump-${slugParts}`
                 });
-                const teamDir = path15.join(paths.memoriesDir, "team");
-                await mkdir10(teamDir, { recursive: true });
-                await writeFile13(
-                  path15.join(teamDir, `${fm.id}.md`),
-                  serializeMemory11({ frontmatter: { ...fm, requires_human_approval: true }, body }),
-                  "utf8"
-                );
-                log(ui.yellow(`   \u2192 memory created: ${fm.id}`));
+                if (!dryRun) {
+                  const teamDir = path15.join(paths.memoriesDir, "team");
+                  await mkdir10(teamDir, { recursive: true });
+                  await writeFile13(
+                    path15.join(teamDir, `${fm.id}.md`),
+                    serializeMemory11({ frontmatter: { ...fm, requires_human_approval: true }, body }),
+                    "utf8"
+                  );
+                }
+                log(ui.yellow(`   \u2192 memory${dryRun ? " would be" : ""} created: ${fm.id}`));
               }
             }
           }
@@ -8424,14 +8527,16 @@ Attends une **confirmation explicite** avant d'agir.
               paths: [diff.file],
               topic: `contract-breaking-${diff.contract}`
             });
-            const teamDir = path15.join(paths.memoriesDir, "team");
-            await mkdir10(teamDir, { recursive: true });
-            await writeFile13(
-              path15.join(teamDir, `${fm.id}.md`),
-              serializeMemory11({ frontmatter: { ...fm, requires_human_approval: true }, body }),
-              "utf8"
-            );
-            log(ui.yellow(`   \u2192 memory created: ${fm.id}`));
+            if (!dryRun) {
+              const teamDir = path15.join(paths.memoriesDir, "team");
+              await mkdir10(teamDir, { recursive: true });
+              await writeFile13(
+                path15.join(teamDir, `${fm.id}.md`),
+                serializeMemory11({ frontmatter: { ...fm, requires_human_approval: true }, body }),
+                "utf8"
+              );
+            }
+            log(ui.yellow(`   \u2192 memory${dryRun ? " would be" : ""} created: ${fm.id}`));
           }
         }
       } catch (err) {
@@ -8439,7 +8544,7 @@ Attends une **confirmation explicite** avant d'agir.
       }
     }
     const existingMap = await loadCodeMap5(paths);
-    if (!existingMap && (config.autopilot || autoRepair.codeMap)) {
+    if (!dryRun && !existingMap && (config.autopilot || autoRepair.codeMap)) {
       try {
         const { buildCodeMap: buildCodeMap4, saveCodeMap: saveCodeMap4 } = await import("@hiveai/core");
         log(ui.dim("code-map: missing \u2014 building index\u2026"));
@@ -8474,17 +8579,21 @@ Attends une **confirmation explicite** avant d'agir.
       );
       const changedSourceFiles = (gitResult.stdout ?? "").trim();
       if (changedSourceFiles.length > 0) {
-        try {
-          const { buildCodeMap: buildCodeMap4, saveCodeMap: saveCodeMap4 } = await import("@hiveai/core");
-          log(ui.dim("code-map: source files changed \u2014 refreshing index\u2026"));
-          const newMap = await buildCodeMap4(root);
-          await saveCodeMap4(paths, newMap);
-          log(ui.dim(`code-map: refreshed (${Object.keys(newMap.files).length} files)`));
-        } catch {
+        if (!dryRun) {
+          try {
+            const { buildCodeMap: buildCodeMap4, saveCodeMap: saveCodeMap4 } = await import("@hiveai/core");
+            log(ui.dim("code-map: source files changed \u2014 refreshing index\u2026"));
+            const newMap = await buildCodeMap4(root);
+            await saveCodeMap4(paths, newMap);
+            log(ui.dim(`code-map: refreshed (${Object.keys(newMap.files).length} files)`));
+          } catch {
+          }
+        } else {
+          log(ui.dim("code-map: source files changed \u2014 would refresh index (skipped in dry-run)"));
         }
       }
     }
-    if (opts.embed || autoRepair.codeSearch) {
+    if (!dryRun && (opts.embed || autoRepair.codeSearch)) {
       try {
         const { Embedder, rebuildCodeIndex, rebuildIndex } = await import("@hiveai/embeddings");
         log(ui.dim("embed: rebuilding index\u2026"));
@@ -8507,12 +8616,18 @@ Attends une **confirmation explicite** avant d'agir.
     }
   });
 }
+function bridgeSummaryLine(body) {
+  const firstLine = body.split("\n").map((l) => l.replace(/^#+\s*/, "").trim()).find((l) => l.length > 0) ?? "";
+  const oneLine = firstLine.replace(/\s+/g, " ");
+  return oneLine.length > 140 ? oneLine.slice(0, 137) + "\u2026" : oneLine;
+}
 async function injectBridge(bridgeFile, memoriesDir, maxMemories, root, quiet) {
   if (!existsSync29(memoriesDir)) return;
   const all = await loadMemoriesFromDir23(memoriesDir);
   const top = all.filter(({ memory: memory2 }) => {
     const s = memory2.frontmatter.status;
     if (memory2.frontmatter.type === "session_recap") return false;
+    if (isStackPackSeed3(memory2.frontmatter)) return false;
     return s === "validated" || s === "proposed";
   }).sort((a, b) => {
     const score = (m) => {
@@ -8524,11 +8639,11 @@ async function injectBridge(bridgeFile, memoriesDir, maxMemories, root, quiet) {
   const block = top.map((m) => {
     const fm = m.memory.frontmatter;
     const unverified = fm.status === "proposed" ? " [UNVERIFIED]" : "";
-    return `### ${fm.id} (${fm.scope}/${fm.type})${unverified}
-${m.memory.body.trim()}`;
-  }).join("\n\n---\n\n");
+    return `- \`${fm.id}\` (${fm.scope}/${fm.type})${unverified} \u2014 ${bridgeSummaryLine(m.memory.body)}`;
+  }).join("\n");
   const injected = `${BRIDGE_START}
 <!-- AUTO-GENERATED by haive sync --inject-bridge \u2014 do not edit between these markers -->
+<!-- Top memories \u2014 call get_briefing / mem_get for the full body. -->
 
 ` + block + `
 
@@ -8824,7 +8939,7 @@ import {
 
 // src/commands/memory-list.ts
 function registerMemoryList(memory2) {
-  memory2.command("list").description("List memories with optional filters").option("--scope <scope>", "personal | team | module").option("--type <type>", "filter by type").option("--tag <tag>", "filter by tag").option("--module <name>", "filter by module name").option("--status <csv>", "filter by status (draft,proposed,validated,stale,rejected,deprecated)").option("--show-rejected", "include rejected memories (hidden by default)").option("-d, --dir <dir>", "project root").action(async (opts) => {
+  memory2.command("list").description("List memories with optional filters").option("--scope <scope>", "personal | team | module").option("--type <type>", "filter by type").option("--tag <tag>", "filter by tag").option("--module <name>", "filter by module name").option("--status <csv>", "filter by status (draft,proposed,validated,stale,rejected,deprecated)").option("--show-rejected", "include rejected memories (hidden by default)").option("--limit <n>", "max memories to display").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot14(opts.dir);
     const paths = resolveHaivePaths11(root);
     if (!existsSync31(paths.memoriesDir)) {
@@ -8834,6 +8949,7 @@ function registerMemoryList(memory2) {
     }
     const all = await loadMemoriesFromDir25(paths.memoriesDir);
     const statusFilter = opts.status ? opts.status.split(",").map((s) => s.trim()) : null;
+    const limit = opts.limit ? Math.max(1, parseInt(opts.limit, 10)) : void 0;
     const filtered = all.filter((m) => {
       if (!matchesFilters(m, opts)) return false;
       const status = m.memory.frontmatter.status;
@@ -8851,7 +8967,9 @@ function registerMemoryList(memory2) {
       }
       return;
     }
-    for (const { memory: mem, filePath } of filtered) {
+    const displayed = limit !== void 0 ? filtered.slice(0, limit) : filtered;
+    const clipped = filtered.length - displayed.length;
+    for (const { memory: mem, filePath } of displayed) {
       const fm = mem.frontmatter;
       const tagStr = fm.tags.length ? ui.dim(` [${fm.tags.join(", ")}]`) : "";
       const moduleStr = fm.module ? ui.dim(` (${fm.module})`) : "";
@@ -8863,8 +8981,10 @@ function registerMemoryList(memory2) {
       if (title && title !== fm.id) console.log(`  ${title}`);
       console.log(`  ${ui.dim(path17.relative(root, filePath))}`);
     }
-    console.log(ui.dim(`
-${filtered.length} memor${filtered.length === 1 ? "y" : "ies"}`));
+    const totalLabel = clipped > 0 ? `
+${displayed.length} of ${filtered.length} memories shown (use --limit to adjust)` : `
+${filtered.length} memor${filtered.length === 1 ? "y" : "ies"}`;
+    console.log(ui.dim(totalLabel));
     if (hiddenRejectedCount > 0) {
       console.log(
         ui.dim(`(${hiddenRejectedCount} rejected hidden \u2014 use --show-rejected to include)`)
@@ -9380,7 +9500,9 @@ import {
   resolveHaivePaths as resolveHaivePaths18
 } from "@hiveai/core";
 function registerMemoryHot(memory2) {
-  memory2.command("hot").description("List memories actively used but not yet validated (good promotion candidates)").option("--threshold <n>", "minimum read_count to qualify", "3").option("--status <status>", "limit to one status (default: draft + proposed)").option("-d, --dir <dir>", "project root").action(async (opts) => {
+  memory2.command("hot").description(
+    "List unvalidated memories with high read_count \u2014 proven-useful promotion candidates.\n\n  Unlike `haive memory pending` (which lists ALL draft/proposed by status),\n  `hot` filters by usage: only memories read \u2265N times qualify.\n  Use it to quickly find memories that agents are already relying on\n  but that haven't been formally validated yet."
+  ).option("--threshold <n>", "minimum read_count to qualify (default: 3)", "3").option("--status <status>", "limit to one status (default: draft + proposed)").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot21(opts.dir);
     const paths = resolveHaivePaths18(root);
     if (!existsSync39(paths.memoriesDir)) {
@@ -9414,7 +9536,8 @@ function registerMemoryHot(memory2) {
       console.log(`  ${ui.dim(path25.relative(root, filePath))}`);
     }
     ui.info(
-      `${candidates.length} hot \u2014 promote drafts with \`haive memory promote <id>\`, then \`haive memory auto-promote --apply\`.`
+      `${candidates.length} hot (read \u2265${threshold}\xD7) \u2014 agents rely on these; promote with \`haive memory promote <id>\`.
+  Tip: \`haive memory pending\` lists ALL unvalidated memories regardless of read count.`
     );
   });
 }
@@ -11763,7 +11886,7 @@ function parseDays(input) {
 
 // src/commands/doctor.ts
 import { existsSync as existsSync60, statSync } from "fs";
-import { readFile as readFile19, stat } from "fs/promises";
+import { readFile as readFile19, stat, writeFile as writeFile31 } from "fs/promises";
 import path44 from "path";
 import { execFileSync, execSync as execSync3 } from "child_process";
 import "commander";
@@ -12007,26 +12130,58 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `haive init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.9.26"));
+    findings.push(...await collectInstallFindings(root, "0.9.28"));
     try {
       const legacyRaw = execSync3("haive-mcp --version", {
         encoding: "utf8",
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.9.26";
+      const cliVersion = "0.9.28";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
           code: "legacy-haive-mcp-stale",
-          message: `Standalone haive-mcp on PATH is v${legacyRaw} but haive CLI is v${cliVersion}. Prefer MCP client config with command "haive" and args ["mcp", "--stdio"] \u2014 then removing @hiveai/mcp avoids version skew.`,
-          fix: `npm install -g @hiveai/cli@${cliVersion}
-# optionally uninstall duplicate:
+          message: `Standalone haive-mcp on PATH is v${legacyRaw} but haive CLI is v${cliVersion}. MCP is now bundled in haive itself \u2014 switch your client configs to command "haive" + args ["mcp", "--stdio"], then uninstall @hiveai/mcp.`,
+          fix: `# 1. Run haive init to regenerate MCP configs pointing to bundled server:
+haive init
+# 2. Optionally remove the now-redundant standalone package:
 npm uninstall -g @hiveai/mcp`
         });
       }
     } catch {
     }
+    {
+      const configPaths = [
+        path44.join(root, ".mcp.json"),
+        path44.join(root, ".cursor", "mcp.json"),
+        path44.join(root, ".vscode", "mcp.json")
+      ];
+      const staleConfigs = [];
+      for (const cfgPath of configPaths) {
+        if (!existsSync60(cfgPath)) continue;
+        try {
+          const raw = await readFile19(cfgPath, "utf8");
+          if (raw.includes('"haive-mcp"') || raw.includes("'haive-mcp'")) {
+            staleConfigs.push(path44.relative(root, cfgPath));
+            if (opts.fix && !opts.dryRun) {
+              const updated = raw.replace(/"command"\s*:\s*"haive-mcp"/g, '"command": "haive"').replace(/"args"\s*:\s*\[\]/g, '"args": ["mcp", "--stdio"]');
+              await writeFile31(cfgPath, updated, "utf8");
+            }
+          }
+        } catch {
+        }
+      }
+      if (staleConfigs.length > 0) {
+        findings.push({
+          severity: "warn",
+          code: "legacy-mcp-config",
+          message: `${staleConfigs.length} MCP config file${staleConfigs.length === 1 ? "" : "s"} still reference the old "haive-mcp" command: ` + staleConfigs.join(", ") + `. Run \`haive doctor --fix\` to auto-migrate to the bundled server.`,
+          fix: "haive doctor --fix",
+          section: "Protection"
+        });
+      }
+    }
     if (repairs.length > 0) {
       findings.push({
         severity: "info",
@@ -12150,9 +12305,21 @@ function groupBySection(findings) {
 function nextActions(findings) {
   return [...new Set(findings.flatMap((finding) => finding.fix ? finding.fix.split("\n") : []))].filter(Boolean);
 }
+function isLowValueCoverageFile(file) {
+  const lower = file.toLowerCase();
+  const base = lower.split("/").pop() ?? lower;
+  if (lower.includes(".test.") || lower.includes(".spec.")) return true;
+  if (lower.includes("/__tests__/") || lower.includes("/test/") || lower.includes("/tests/")) return true;
+  if (lower.endsWith(".d.ts")) return true;
+  if (base === "tsup.config.ts" || base === "vitest.config.ts" || base === "jest.config.ts") return true;
+  if (base.endsWith(".config.ts") || base.endsWith(".config.js")) return true;
+  if (base === "vite.config.ts" || base === "vite.config.js") return true;
+  return false;
+}
 async function collectHarnessCoverageFindings(codeMap, memories) {
   if (!codeMap) return [];
-  const codeFiles = Object.keys(codeMap.files);
+  const allFiles = Object.keys(codeMap.files);
+  const codeFiles = allFiles.filter((f) => !isLowValueCoverageFile(f));
   const total = codeFiles.length;
   if (total === 0) return [];
   const validatedWithAnchors = memories.filter(
@@ -12926,7 +13093,7 @@ function registerMemoryConflictCandidates(memory2) {
 // src/commands/enforce.ts
 import { execFileSync as execFileSync2, spawn as spawn6 } from "child_process";
 import { existsSync as existsSync67, statSync as statSync2 } from "fs";
-import { chmod as chmod2, mkdir as mkdir19, readFile as readFile20, readdir as readdir6, rm as rm3, writeFile as writeFile31 } from "fs/promises";
+import { chmod as chmod2, mkdir as mkdir19, readFile as readFile20, readdir as readdir6, rm as rm3, writeFile as writeFile33 } from "fs/promises";
 import path49 from "path";
 import "commander";
 import {
@@ -12942,7 +13109,7 @@ import {
   saveConfig as saveConfig4,
   SESSION_RECAP_TTL_MS,
   verifyAnchor as verifyAnchor4,
-  writeBriefingMarker as writeBriefingMarker2
+  writeBriefingMarker as writeBriefingMarker3
 } from "@hiveai/core";
 var MAX_STDIN_BYTES2 = 256 * 1024;
 var ENFORCE_HOOK_MARKER = "# hAIve enforcement hook";
@@ -13052,7 +13219,7 @@ function registerEnforce(program2) {
       },
       { paths }
     );
-    await writeBriefingMarker2(paths, {
+    await writeBriefingMarker3(paths, {
       sessionId,
       task,
       source: opts.source ?? "claude-session-start",
@@ -13137,7 +13304,7 @@ async function runWithEnforcement(command, args, opts) {
   }
   const sessionId = `haive-run-${process.pid}-${Date.now()}`;
   const task = opts.task ?? `Run agent command: ${[command, ...args].join(" ")}`;
-  await writeBriefingMarker2(paths, {
+  await writeBriefingMarker3(paths, {
     sessionId,
     task,
     source: "haive-run"
@@ -13194,7 +13361,7 @@ async function writeWrapperBriefing(paths, sessionId, task) {
     min_semantic_score: 0.25,
     budget_preset: "quick"
   }, { paths });
-  await writeBriefingMarker2(paths, {
+  await writeBriefingMarker3(paths, {
     sessionId,
     task,
     source: "haive-run",
@@ -13220,7 +13387,7 @@ async function writeWrapperBriefing(paths, sessionId, task) {
   if (briefing.setup_warnings.length > 0) {
     parts.push("", "## Setup Warnings", ...briefing.setup_warnings.map((w) => `- ${w}`));
   }
-  await writeFile31(file, parts.join("\n") + "\n", "utf8");
+  await writeFile33(file, parts.join("\n") + "\n", "utf8");
   return file;
 }
 async function buildEnforcementReport(dir, stage, sessionId) {
@@ -13257,7 +13424,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "hAIve enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.9.26"));
+  findings.push(...await inspectIntegrationVersions(root, "0.9.28"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent hAIve briefing marker exists." } : {
@@ -13479,9 +13646,9 @@ async function cleanupRuntimeDir(runtimeDir) {
     await rm3(path49.join(runtimeDir, entry.name), { recursive: true, force: true });
     removed++;
   }
-  await writeFile31(path49.join(runtimeDir, ".gitignore"), "*\n!.gitignore\n!README.md\n", "utf8");
+  await writeFile33(path49.join(runtimeDir, ".gitignore"), "*\n!.gitignore\n!README.md\n", "utf8");
   if (!existsSync67(path49.join(runtimeDir, "README.md"))) {
-    await writeFile31(
+    await writeFile33(
       path49.join(runtimeDir, "README.md"),
       "# .ai/.runtime \u2014 disposable local layer\n\nRuntime data is local. hAIve cleanup preserves briefing markers so enforcement state remains valid.\n",
       "utf8"
@@ -13498,7 +13665,7 @@ async function cleanupCacheDir(cacheDir) {
     await rm3(path49.join(cacheDir, entry.name), { recursive: true, force: true });
     removed++;
   }
-  await writeFile31(path49.join(cacheDir, ".gitignore"), "*\n!.gitignore\n", "utf8");
+  await writeFile33(path49.join(cacheDir, ".gitignore"), "*\n!.gitignore\n", "utf8");
   return removed;
 }
 async function cleanupEnforcementDir(enforcementDir) {
@@ -13645,14 +13812,14 @@ haive enforce check --stage pre-push --dir . || exit $?
     if (existsSync67(file)) {
       const current = await readFile20(file, "utf8").catch(() => "");
       if (current.includes(ENFORCE_HOOK_MARKER)) {
-        await writeFile31(file, hook.body, "utf8");
+        await writeFile33(file, hook.body, "utf8");
       } else {
-        await writeFile31(file, `${current.trimEnd()}
+        await writeFile33(file, `${current.trimEnd()}
 
 ${hook.body}`, "utf8");
       }
     } else {
-      await writeFile31(file, hook.body, "utf8");
+      await writeFile33(file, hook.body, "utf8");
     }
     await chmod2(file, 493);
   }
@@ -13665,7 +13832,7 @@ async function installCiEnforcement(root) {
     ui.info("GitHub Actions enforcement workflow already exists \u2014 skipped");
     return;
   }
-  await writeFile31(workflowPath, `name: haive-enforcement
+  await writeFile33(workflowPath, `name: haive-enforcement
 
 on:
   pull_request:
@@ -13864,7 +14031,7 @@ function registerRun(program2) {
 
 // src/index.ts
 var program = new Command51();
-program.name("haive").description("hAIve \u2014 the memory and enforcement layer of your agent harness").version("0.9.26").option("--advanced", "show maintenance and experimental commands in help");
+program.name("haive").description("hAIve \u2014 the memory and enforcement layer of your agent harness").version("0.9.28").option("--advanced", "show maintenance and experimental commands in help");
 registerInit(program);
 registerWelcome(program);
 registerResolveProject(program);