@hivelore/cli 0.38.0 → 0.39.0

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   antiPatternsCheck,
   codeMapTool,
   codeSearch,
-  detectTestFrameworkForPaths,
+  detectTestFrameworksForAnchors,
   getBriefing,
   getRecap,
   memRelevantTo,
@@ -11,7 +11,7 @@ import {
   preCommitCheck,
   readPresumedCorrectTargets,
   runHaiveMcpStdio
-} from "./chunk-UOMGIXZN.js";
+} from "./chunk-I4VELI5K.js";
 import {
   registerMemoryPending
 } from "./chunk-OYJKHD22.js";
@@ -209,7 +209,7 @@ async function getHotFiles(root, daysBack, maxHotFiles, filePaths) {
       if (!f) continue;
       counts.set(f, (counts.get(f) ?? 0) + 1);
     }
-    let entries = [...counts.entries()].map(([path47, changes]) => ({ path: path47, changes }));
+    let entries = [...counts.entries()].map(([path48, changes]) => ({ path: path48, changes }));
     const lowerPaths = filePaths.map((p) => p.toLowerCase());
     if (lowerPaths.length > 0) {
       entries = entries.filter((e) => lowerPaths.some((p) => e.path.toLowerCase().includes(p)));
@@ -3756,7 +3756,7 @@ ${SEED_FOOTER(stack)}` });
 
 // src/commands/init.ts
 var execFileAsync = promisify2(execFile2);
-var HAIVE_GITHUB_ACTION_REF = `v${"0.38.0"}`;
+var HAIVE_GITHUB_ACTION_REF = `v${"0.39.0"}`;
 var PROJECT_CONTEXT_TEMPLATE = `# Project context
 
 > Generated by \`hivelore init\`. Run \`hivelore init --bootstrap\` to auto-fill from your codebase,
@@ -6023,7 +6023,7 @@ function parseCsv4(raw) {
 function registerMemoryTried(memory2) {
   memory2.command("tried").description(
     'Record a FAILED approach \u2014 prevents repeated mistakes in future sessions.\n\n  This is the most valuable type of negative knowledge. It surfaces FIRST in\n  get_briefing so agents can\'t miss it. Auto-validated (no approval cycle).\n\n  Use this immediately when you try something and it fails.\n\n  One-shot loop close: add --sensor-pattern to validate and attach the guardrail\n  in the same command (equivalent to a follow-up `sensors propose`).\n\n  Example:\n    hivelore memory tried \\\\\n      --what "importing X with ESM dynamic import" \\\\\n      --why-failed "tsup bundles it as CJS, dynamic import fails at runtime" \\\\\n      --instead "use static import in the entry file" \\\\\n      --paths packages/cli/src/index.ts \\\\\n      --sensor-pattern "await import\\\\(" --sensor-absent "static import"\n'
-  ).requiredOption("--what <text>", "what approach was tried (short, descriptive title)").requiredOption("--why-failed <text>", "why it failed or should NOT be used (include the exact error if possible)").option("--instead <text>", "the correct approach to use instead").option("--scope <scope>", "personal | team | module", "personal").option("--module <name>", "module name (required when scope=module)").option("--tags <csv>", "comma-separated tags").option("--paths <csv>", "anchor paths, comma-separated").option("--files <csv>", "alias for --paths (matches the MCP `files` parameter)").option("--author <author>", "author email or handle").option("--sensor-pattern <regex>", "one-shot: regex matching the FAULTY usage \u2014 validates + attaches a sensor in this call").option("--sensor-command <cmd>", "one-shot BEHAVIOUR sensor: a command (test/script) the gate runs when the diff touches --paths; non-zero exit = lesson fires").option("--sensor-kind <kind>", "with --sensor-command: shell | test (default test)").option("--sensor-timeout <ms>", "with --sensor-command: max runtime in ms (default 120000)").option("--sensor-absent <regex>", "one-shot: regex marking CORRECT usage nearby (excludes it from firing)").option("--sensor-severity <level>", "one-shot sensor severity: warn | block", "block").option("--sensor-message <text>", "one-shot: self-correction message shown when the sensor fires").option("--bad-example <code>", "one-shot: code snippet the sensor must fire on (validation)").option("-d, --dir <dir>", "project root").action(async (opts) => {
+  ).requiredOption("--what <text>", "what approach was tried (short, descriptive title)").requiredOption("--why-failed <text>", "why it failed or should NOT be used (include the exact error if possible)").option("--instead <text>", "the correct approach to use instead").option("--scope <scope>", "personal | team | module (default: personal \u2014 team when a --sensor-* option arms the lesson, so the gate travels)").option("--module <name>", "module name (required when scope=module)").option("--tags <csv>", "comma-separated tags").option("--paths <csv>", "anchor paths, comma-separated").option("--files <csv>", "alias for --paths (matches the MCP `files` parameter)").option("--author <author>", "author email or handle").option("--sensor-pattern <regex>", "one-shot: regex matching the FAULTY usage \u2014 validates + attaches a sensor in this call").option("--sensor-command <cmd>", "one-shot BEHAVIOUR sensor: a command (test/script) the gate runs when the diff touches --paths; non-zero exit = lesson fires").option("--sensor-kind <kind>", "with --sensor-command: shell | test (default test)").option("--sensor-timeout <ms>", "with --sensor-command: max runtime in ms (default 120000)").option("--sensor-absent <regex>", "one-shot: regex marking CORRECT usage nearby (excludes it from firing)").option("--sensor-severity <level>", "one-shot sensor severity: warn | block", "block").option("--sensor-message <text>", "one-shot: self-correction message shown when the sensor fires").option("--bad-example <code>", "one-shot: code snippet the sensor must fire on (validation)").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot15(opts.dir);
     const paths = resolveHaivePaths14(root);
     if (!existsSync20(paths.haiveDir)) {
@@ -6040,7 +6040,8 @@ function registerMemoryTried(memory2) {
           why_failed: opts.whyFailed,
           instead: opts.instead,
           // "shared" is a legacy MemoryScope alias not accepted by mem_tried — normalize to team.
-          scope: opts.scope === "shared" ? "team" : opts.scope ?? "personal",
+          // Undefined stays undefined: mem_tried defaults it (team when a sensor is attached).
+          scope: opts.scope === "shared" ? "team" : opts.scope,
           module: opts.module,
           tags: parseCsv4(opts.tags),
           paths: parseCsv4(opts.paths ?? opts.files),
@@ -6073,7 +6074,7 @@ function registerMemoryTried(memory2) {
       return;
     }
     ui.success(`Recorded: ${path21.relative(root, result.file_path)}`);
-    ui.info(`id=${result.id}  type=attempt  status=validated (auto-approved)`);
+    ui.info(`id=${result.id}  type=attempt  scope=${result.scope}  status=validated (auto-approved)`);
     if (result.sensor_result) {
       if (result.sensor_result.accepted) {
         ui.success(`Loop closed: sensor attached (${result.sensor_result.severity}) \u2014 the gate now refuses a repeat deterministically.`);
@@ -8575,9 +8576,9 @@ function parseDays(input) {
 }
 
 // src/commands/doctor.ts
-import { existsSync as existsSync39, statSync as statSync2 } from "fs";
+import { existsSync as existsSync40, statSync as statSync3 } from "fs";
 import { readFile as readFile16, stat, writeFile as writeFile23 } from "fs/promises";
-import path36 from "path";
+import path37 from "path";
 import { execFileSync, execSync } from "child_process";
 import "commander";
 import {
@@ -8599,6 +8600,85 @@ import {
   readUsageEvents as readUsageEvents3,
   resolveHaivePaths as resolveHaivePaths33
 } from "@hivelore/core";
+
+// src/utils/post-incident-scan.ts
+import { readdirSync as readdirSync4, readFileSync, statSync as statSync2 } from "fs";
+import { existsSync as existsSync39 } from "fs";
+import path36 from "path";
+import {
+  assessScaffoldLoop,
+  loadMemoriesFromDir as loadMemoriesFromDir14,
+  SCAFFOLD_MARKER_RE
+} from "@hivelore/core";
+var PRUNED_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  ".ai",
+  "dist",
+  "build",
+  "out",
+  "coverage",
+  ".next",
+  ".venv",
+  "venv",
+  "__pycache__",
+  "target",
+  "vendor"
+]);
+var MAX_SCAFFOLD_BYTES = 64 * 1024;
+var MAX_DEPTH = 8;
+function findPostIncidentScaffoldFiles(root) {
+  const results = [];
+  const walk = (dir, depth, inIncidents) => {
+    if (depth > MAX_DEPTH) return;
+    let entries;
+    try {
+      entries = readdirSync4(dir);
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (PRUNED_DIRS.has(entry)) continue;
+      const abs = path36.join(dir, entry);
+      let stat2;
+      try {
+        stat2 = statSync2(abs);
+      } catch {
+        continue;
+      }
+      if (stat2.isDirectory()) {
+        walk(abs, depth + 1, inIncidents || entry === "incidents");
+        continue;
+      }
+      if (!inIncidents || stat2.size > MAX_SCAFFOLD_BYTES) continue;
+      try {
+        const content = readFileSync(abs, "utf8");
+        if (SCAFFOLD_MARKER_RE.test(content)) {
+          results.push({ path: path36.relative(root, abs).split(path36.sep).join("/"), content });
+        }
+      } catch {
+      }
+    }
+  };
+  walk(root, 0, false);
+  return results;
+}
+async function collectScaffoldLoopGaps(paths) {
+  const files = findPostIncidentScaffoldFiles(paths.root);
+  if (files.length === 0) return [];
+  const loaded = existsSync39(paths.memoriesDir) ? await loadMemoriesFromDir14(paths.memoriesDir) : [];
+  const memories = loaded.map(({ memory: memory2 }) => ({
+    id: memory2.frontmatter.id,
+    sensorKind: memory2.frontmatter.sensor?.kind ?? null
+  }));
+  return assessScaffoldLoop(files, memories);
+}
+function describeScaffoldGap(gap) {
+  const state = gap.memory_missing ? "lesson deleted" : gap.pending && !gap.armed ? "pending, not armed" : gap.pending ? "armed but still pending" : "not armed";
+  return `${gap.path} (${state} \u2014 ${gap.memory_id})`;
+}
+
+// src/commands/doctor.ts
 var MS_PER_DAY2 = 24 * 60 * 60 * 1e3;
 function registerDoctor(program2) {
   program2.command("doctor").description(
@@ -8609,7 +8689,7 @@ function registerDoctor(program2) {
     const findings = [];
     const repairs = [];
     const config = await loadConfig10(paths);
-    if (!existsSync39(paths.haiveDir)) {
+    if (!existsSync40(paths.haiveDir)) {
       if (opts.json) {
         console.log(JSON.stringify({
           initialized: false,
@@ -8634,7 +8714,7 @@ function registerDoctor(program2) {
         })
       );
     }
-    if (!existsSync39(paths.projectContext)) {
+    if (!existsSync40(paths.projectContext)) {
       findings.push({
         severity: "warn",
         code: "no-project-context",
@@ -8654,7 +8734,7 @@ function registerDoctor(program2) {
         });
       } else {
         const referenced = extractReferencedPaths(content);
-        const missing = referenced.filter((p) => !existsSync39(path36.resolve(root, p)));
+        const missing = referenced.filter((p) => !existsSync40(path37.resolve(root, p)));
         const grounded = referenced.length - missing.length;
         if (referenced.length >= 3 && grounded / referenced.length < 0.5) {
           findings.push({
@@ -8676,11 +8756,11 @@ function registerDoctor(program2) {
         });
       }
     }
-    const memoriesDetailed = existsSync39(paths.memoriesDir) ? await loadMemoriesFromDirDetailed(paths.memoriesDir) : { loaded: [], invalid: [] };
+    const memoriesDetailed = existsSync40(paths.memoriesDir) ? await loadMemoriesFromDirDetailed(paths.memoriesDir) : { loaded: [], invalid: [] };
     const memories = memoriesDetailed.loaded;
     const now = Date.now();
     if (memoriesDetailed.invalid.length > 0) {
-      const listed = memoriesDetailed.invalid.slice(0, 5).map((f) => `${path36.relative(root, f.filePath)} (${f.error})`).join("; ");
+      const listed = memoriesDetailed.invalid.slice(0, 5).map((f) => `${path37.relative(root, f.filePath)} (${f.error})`).join("; ");
       findings.push({
         severity: "warn",
         code: "invalid-memory-files",
@@ -8821,8 +8901,8 @@ function registerDoctor(program2) {
       const anchorPaths = s.paths.length > 0 ? s.paths : m.memory.frontmatter.anchor.paths;
       const targets = [];
       for (const rel of anchorPaths) {
-        const abs = path36.resolve(root, rel);
-        if (!existsSync39(abs)) continue;
+        const abs = path37.resolve(root, rel);
+        if (!existsSync40(abs)) continue;
         try {
           targets.push({ path: rel, content: await readFile16(abs, "utf8") });
         } catch {
@@ -8897,6 +8977,18 @@ function registerDoctor(program2) {
     }
     findings.push(...await collectHarnessCoverageFindings(codeMap, memories));
     findings.push(...await collectSemanticIndexFindings(paths, config, memories.length, codeMap));
+    try {
+      const scaffoldGaps = await collectScaffoldLoopGaps(paths);
+      if (scaffoldGaps.length > 0) {
+        findings.push({
+          severity: "warn",
+          code: "post-incident-test-unarmed",
+          message: `${scaffoldGaps.length} post-incident test(s) are scaffolded but not armed as gates \u2014 the incident is documented, nothing deterministic guards it yet: ` + scaffoldGaps.slice(0, 5).map(describeScaffoldGap).join(", ") + (scaffoldGaps.length > 5 ? ", \u2026" : "") + ".",
+          fix: "Fill the pending assertion, run it, then arm it with the `hivelore sensors propose --kind test` command in the scaffold header."
+        });
+      }
+    } catch {
+    }
     const events = await readUsageEvents3(paths);
     if (events.length === 0) {
       findings.push({
@@ -8933,9 +9025,9 @@ function registerDoctor(program2) {
       }
     }
     if (config.enforcement?.requireBriefingFirst) {
-      const claudeSettings = path36.join(root, ".claude", "settings.local.json");
+      const claudeSettings = path37.join(root, ".claude", "settings.local.json");
       let hasClaudeEnforcement = false;
-      if (existsSync39(claudeSettings)) {
+      if (existsSync40(claudeSettings)) {
         try {
           const { readFile: readFile24 } = await import("fs/promises");
           const raw = await readFile24(claudeSettings, "utf8");
@@ -8961,7 +9053,7 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `hivelore init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.38.0"));
+    findings.push(...await collectInstallFindings(root, "0.39.0"));
     findings.push(...await collectToolchainFindings(root));
     try {
       const legacyRaw = execSync("haive-mcp --version", {
@@ -8969,7 +9061,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.38.0";
+      const cliVersion = "0.39.0";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -8985,17 +9077,17 @@ npm uninstall -g @hivelore/mcp`
     }
     {
       const configPaths = [
-        path36.join(root, ".mcp.json"),
-        path36.join(root, ".cursor", "mcp.json"),
-        path36.join(root, ".vscode", "mcp.json")
+        path37.join(root, ".mcp.json"),
+        path37.join(root, ".cursor", "mcp.json"),
+        path37.join(root, ".vscode", "mcp.json")
       ];
       const staleConfigs = [];
       for (const cfgPath of configPaths) {
-        if (!existsSync39(cfgPath)) continue;
+        if (!existsSync40(cfgPath)) continue;
         try {
           const raw = await readFile16(cfgPath, "utf8");
           if (raw.includes('"haive-mcp"') || raw.includes("'haive-mcp'")) {
-            staleConfigs.push(path36.relative(root, cfgPath));
+            staleConfigs.push(path37.relative(root, cfgPath));
             if (opts.fix && !opts.dryRun) {
               const updated = raw.replace(/"command"\s*:\s*"haive-mcp"/g, '"command": "hivelore"').replace(/"args"\s*:\s*\[\]/g, '"args": ["mcp", "--stdio"]');
               await writeFile23(cfgPath, updated, "utf8");
@@ -9288,8 +9380,8 @@ which -a hivelore haive`
   const missingBins = /* @__PURE__ */ new Map();
   const staleBins = /* @__PURE__ */ new Map();
   for (const rel of integrationFiles) {
-    const file = path36.join(root, rel);
-    if (!existsSync39(file)) continue;
+    const file = path37.join(root, rel);
+    if (!existsSync40(file)) continue;
     const text = await readFile16(file, "utf8").catch(() => "");
     for (const bin of extractAbsoluteHaiveBins(text)) {
       const version = versionForBinary(bin);
@@ -9322,7 +9414,7 @@ which -a hivelore haive`
 async function collectToolchainFindings(root) {
   const findings = [];
   const pkg = await readJson(
-    path36.join(root, "package.json")
+    path37.join(root, "package.json")
   );
   const wantsPnpm = pkg?.packageManager?.startsWith("pnpm@") || Object.values(pkg?.scripts ?? {}).some((script) => /\bpnpm\b/.test(script));
   if (!wantsPnpm) return findings;
@@ -9341,10 +9433,10 @@ async function collectToolchainFindings(root) {
 }
 async function collectDistFreshnessFindings(root, expectedVersion) {
   const findings = [];
-  const isHaiveWorkspace = ["hivelore-monorepo", "haive-monorepo"].includes((await readJson(path36.join(root, "package.json")))?.name ?? "");
+  const isHaiveWorkspace = ["hivelore-monorepo", "haive-monorepo"].includes((await readJson(path37.join(root, "package.json")))?.name ?? "");
   if (!isHaiveWorkspace) return findings;
-  const cliDist = path36.join(root, "packages/cli/dist/index.js");
-  if (!existsSync39(cliDist)) {
+  const cliDist = path37.join(root, "packages/cli/dist/index.js");
+  if (!existsSync40(cliDist)) {
     findings.push({
       severity: "warn",
       code: "workspace-dist-missing",
@@ -9368,10 +9460,10 @@ async function collectDistFreshnessFindings(root, expectedVersion) {
     "packages/core/src/index.ts",
     "packages/mcp/src/server.ts",
     "packages/cli/src/index.ts"
-  ].map((rel) => path36.join(root, rel)).filter(existsSync39);
+  ].map((rel) => path37.join(root, rel)).filter(existsSync40);
   if (sourceFiles.length > 0) {
-    const distMtime = statSync2(cliDist).mtimeMs;
-    const newestSource = Math.max(...sourceFiles.map((file) => statSync2(file).mtimeMs));
+    const distMtime = statSync3(cliDist).mtimeMs;
+    const newestSource = Math.max(...sourceFiles.map((file) => statSync3(file).mtimeMs));
     if (newestSource > distMtime + 1e3) {
       findings.push({
         severity: "info",
@@ -9386,7 +9478,7 @@ async function collectDistFreshnessFindings(root, expectedVersion) {
 }
 async function collectWorkspaceVersionFindings(root, expectedVersion) {
   const findings = [];
-  const rootPkg = await readJson(path36.join(root, "package.json"));
+  const rootPkg = await readJson(path37.join(root, "package.json"));
   const workspacePackages = [
     "packages/core/package.json",
     "packages/embeddings/package.json",
@@ -9395,7 +9487,7 @@ async function collectWorkspaceVersionFindings(root, expectedVersion) {
   ];
   const existing = (await Promise.all(workspacePackages.map(async (rel) => ({
     rel,
-    pkg: await readJson(path36.join(root, rel))
+    pkg: await readJson(path37.join(root, rel))
   })))).filter((item) => item.pkg);
   const isHaiveWorkspace = rootPkg?.name === "hivelore-monorepo" || rootPkg?.name === "haive-monorepo" || existing.some((item) => item.pkg?.name?.startsWith("@hivelore/"));
   if (!isHaiveWorkspace) return findings;
@@ -9457,7 +9549,7 @@ function collectGlobalHivemoduleFindings(expectedVersion) {
   }
 }
 async function readJson(file) {
-  if (!existsSync39(file)) return null;
+  if (!existsSync40(file)) return null;
   try {
     return JSON.parse(await readFile16(file, "utf8"));
   } catch {
@@ -9522,7 +9614,7 @@ function extractAbsoluteHaiveBins(text) {
     const p = match[2];
     if (!p) continue;
     try {
-      if (statSync2(p).isDirectory()) continue;
+      if (statSync3(p).isDirectory()) continue;
     } catch {
     }
     out.add(p);
@@ -9686,23 +9778,23 @@ function runCommand(cmd, args, cwd) {
 }
 
 // src/commands/resolve-project.ts
-import path37 from "path";
+import path38 from "path";
 import "commander";
 import { resolveProjectInfo } from "@hivelore/core";
 function registerResolveProject(program2) {
   program2.command("resolve-project").description(
     "Print JSON for Hivelore project root resolution (HAIVE_PROJECT_ROOT, markers, .ai layout)."
   ).option("-d, --dir <dir>", "working directory", process.cwd()).action((opts) => {
-    const info = resolveProjectInfo({ cwd: path37.resolve(opts.dir) });
+    const info = resolveProjectInfo({ cwd: path38.resolve(opts.dir) });
     console.log(JSON.stringify({ ok: true, info }, null, 2));
   });
 }
 
 // src/commands/enforce.ts
 import { execFile as execFile5, execFileSync as execFileSync2, spawn as spawn4 } from "child_process";
-import { existsSync as existsSync41, statSync as statSync3 } from "fs";
+import { existsSync as existsSync42, statSync as statSync4 } from "fs";
 import { chmod, mkdir as mkdir16, readFile as readFile18, readdir as readdir4, rm as rm2, writeFile as writeFile25 } from "fs/promises";
-import path39 from "path";
+import path40 from "path";
 import { promisify as promisify5 } from "util";
 import "commander";
 import {
@@ -9711,6 +9803,7 @@ import {
   assessSensorHealth as assessSensorHealth3,
   sensorPromotedAtMap as sensorPromotedAtMap3,
   assessBootstrapState,
+  detectSensorWeakening,
   isSensorScannablePath,
   findProjectRoot as findProjectRoot37,
   loadCodeMap as loadCodeMap7,
@@ -9722,7 +9815,7 @@ import {
   isRetiredMemory as isRetiredMemory2,
   loadConfig as loadConfig12,
   detectAgentContext,
-  loadMemoriesFromDir as loadMemoriesFromDir14,
+  loadMemoriesFromDir as loadMemoriesFromDir15,
   loadSensorLedger as loadSensorLedger3,
   memoryMatchesAnchorPaths as memoryMatchesAnchorPaths2,
   readRecentBriefingMarker,
@@ -9741,9 +9834,9 @@ import {
 } from "@hivelore/core";
 
 // src/utils/claude-hooks.ts
-import { existsSync as existsSync40 } from "fs";
+import { existsSync as existsSync41 } from "fs";
 import { mkdir as mkdir15, readFile as readFile17, writeFile as writeFile24 } from "fs/promises";
-import path38 from "path";
+import path39 from "path";
 var HAIVE_HOOK_TAG = "haive-enforcement";
 var POST_TOOL_USE_GROUP = {
   matcher: "Edit|Write|Bash",
@@ -9829,7 +9922,7 @@ function unpatchClaudeSettings(input) {
 async function installClaudeHooksAtPath(settingsPath) {
   let raw = null;
   let created = false;
-  if (existsSync40(settingsPath)) {
+  if (existsSync41(settingsPath)) {
     try {
       raw = JSON.parse(await readFile17(settingsPath, "utf8"));
     } catch {
@@ -9839,12 +9932,12 @@ async function installClaudeHooksAtPath(settingsPath) {
     created = true;
   }
   const patched = patchClaudeSettings(raw);
-  await mkdir15(path38.dirname(settingsPath), { recursive: true });
+  await mkdir15(path39.dirname(settingsPath), { recursive: true });
   await writeFile24(settingsPath, JSON.stringify(patched, null, 2) + "\n", "utf8");
   return { settingsPath, created };
 }
 async function uninstallClaudeHooksAtPath(settingsPath) {
-  if (!existsSync40(settingsPath)) {
+  if (!existsSync41(settingsPath)) {
     return { settingsPath, created: false };
   }
   const raw = JSON.parse(await readFile17(settingsPath, "utf8"));
@@ -9855,9 +9948,9 @@ async function uninstallClaudeHooksAtPath(settingsPath) {
 function defaultClaudeSettingsPath(scope, projectRoot) {
   if (scope === "user") {
     const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-    return path38.join(home, ".claude", "settings.json");
+    return path39.join(home, ".claude", "settings.json");
   }
-  return path38.join(projectRoot, ".claude", "settings.local.json");
+  return path39.join(projectRoot, ".claude", "settings.local.json");
 }
 
 // src/utils/command-sensors.ts
@@ -10044,7 +10137,7 @@ function registerEnforce(program2) {
           ui.success(`Removed Hivelore hooks from ${result.settingsPath}`);
         } else {
           const result = await installClaudeHooksAtPath(settingsPath);
-          ui.success(`${result.created ? "Created" : "Patched"} Claude Code hooks (${path39.relative(root, result.settingsPath) || result.settingsPath})`);
+          ui.success(`${result.created ? "Created" : "Patched"} Claude Code hooks (${path40.relative(root, result.settingsPath) || result.settingsPath})`);
         }
       } catch (err) {
         ui.warn(`Claude Code hooks not ${opts.removeClaude ? "removed" : "installed"}: ${err instanceof Error ? err.message : String(err)}`);
@@ -10066,19 +10159,19 @@ function registerEnforce(program2) {
   enforce.command("cleanup").description("Remove generated Hivelore runtime/cache artifacts that should not appear in commits.").option("-d, --dir <dir>", "project root").option("--dry-run", "print what would be removed without deleting", false).action(async (opts) => {
     const root = findProjectRoot37(opts.dir);
     const paths = resolveHaivePaths35(root);
-    const cacheDir = path39.join(paths.haiveDir, ".cache");
-    if (existsSync41(cacheDir)) {
-      if (opts.dryRun) ui.info(`would clean ${path39.relative(root, cacheDir)} (preserving .gitignore)`);
+    const cacheDir = path40.join(paths.haiveDir, ".cache");
+    if (existsSync42(cacheDir)) {
+      if (opts.dryRun) ui.info(`would clean ${path40.relative(root, cacheDir)} (preserving .gitignore)`);
       else {
         const removed = await cleanupCacheDir(cacheDir);
-        ui.success(`cleaned ${path39.relative(root, cacheDir)}${removed > 0 ? ` (${removed} item${removed === 1 ? "" : "s"} removed)` : ""}`);
+        ui.success(`cleaned ${path40.relative(root, cacheDir)}${removed > 0 ? ` (${removed} item${removed === 1 ? "" : "s"} removed)` : ""}`);
       }
     }
-    if (existsSync41(paths.runtimeDir)) {
-      if (opts.dryRun) ui.info(`would clean ${path39.relative(root, paths.runtimeDir)} (preserving briefing markers)`);
+    if (existsSync42(paths.runtimeDir)) {
+      if (opts.dryRun) ui.info(`would clean ${path40.relative(root, paths.runtimeDir)} (preserving briefing markers)`);
       else {
         const removed = await cleanupRuntimeDir(paths.runtimeDir);
-        ui.success(`cleaned ${path39.relative(root, paths.runtimeDir)}${removed > 0 ? ` (${removed} item${removed === 1 ? "" : "s"} removed)` : ""}`);
+        ui.success(`cleaned ${path40.relative(root, paths.runtimeDir)}${removed > 0 ? ` (${removed} item${removed === 1 ? "" : "s"} removed)` : ""}`);
       }
     }
   });
@@ -10122,7 +10215,7 @@ function registerEnforce(program2) {
     const root = resolveRoot(opts.dir, payload);
     if (!root) return;
     const paths = resolveHaivePaths35(root);
-    if (!existsSync41(paths.haiveDir)) return;
+    if (!existsSync42(paths.haiveDir)) return;
     await mkdir16(paths.runtimeDir, { recursive: true });
     const sessionId = opts.sessionId ?? payload.session_id;
     const task = opts.task ?? payload.prompt ?? "Start an AI coding session in this Hivelore-initialized project.";
@@ -10185,7 +10278,7 @@ ${briefing.project_context.content.slice(0, 1800)}`);
     const root = resolveRoot(opts.dir, payload);
     if (!root) return;
     const paths = resolveHaivePaths35(root);
-    if (!existsSync41(paths.haiveDir)) return;
+    if (!existsSync42(paths.haiveDir)) return;
     if (!isWriteLikeTool(payload)) return;
     const config = await loadConfig12(paths);
     if (config.enforcement?.requireBriefingFirst === false) return;
@@ -10247,10 +10340,26 @@ function emitPreToolUseContext(text) {
     })
   );
 }
+async function checkPostIncidentScaffolds(paths) {
+  try {
+    const gaps = await collectScaffoldLoopGaps(paths);
+    if (gaps.length === 0) return [];
+    return [{
+      severity: "warn",
+      code: "post-incident-test-unarmed",
+      message: `${gaps.length} post-incident test(s) are scaffolded but not yet armed as gates: ` + gaps.slice(0, 5).map(describeScaffoldGap).join(", ") + (gaps.length > 5 ? ", \u2026" : "") + ".",
+      fix: "Fill the pending assertion, run the test, then arm it: the scaffold header contains the exact `hivelore sensors propose --kind test` command.",
+      memory_ids: [...new Set(gaps.map((g) => g.memory_id))].slice(0, 10),
+      impact: 0
+    }];
+  } catch {
+    return [];
+  }
+}
 async function buildFinishReport(dir) {
   const root = findProjectRoot37(dir);
   const paths = resolveHaivePaths35(root);
-  const initialized = existsSync41(paths.haiveDir);
+  const initialized = existsSync42(paths.haiveDir);
   const config = initialized ? await loadConfig12(paths) : {};
   const mode = config.enforcement?.mode ?? "strict";
   const findings = [];
@@ -10271,6 +10380,7 @@ async function buildFinishReport(dir) {
     });
   }
   findings.push(...await checkFailureCapture(paths, config));
+  findings.push(...await checkPostIncidentScaffolds(paths));
   findings.push(...await checkBootstrapComplete(paths, config, true));
   const status = await getGitSyncStatus(root);
   if (!status.available) {
@@ -10442,8 +10552,8 @@ async function buildFinishReport(dir) {
 async function checkFailureCapture(paths, config) {
   const gate = config.enforcement?.failureCaptureGate ?? "warn";
   if (gate === "off") return [];
-  const obsFile = path39.join(paths.haiveDir, ".cache", "observations.jsonl");
-  if (!existsSync41(obsFile)) return [];
+  const obsFile = path40.join(paths.haiveDir, ".cache", "observations.jsonl");
+  if (!existsSync42(obsFile)) return [];
   const failures = [];
   try {
     const raw = await readFile18(obsFile, "utf8");
@@ -10460,7 +10570,7 @@ async function checkFailureCapture(paths, config) {
     return [];
   }
   if (failures.length === 0) return [];
-  const memories = existsSync41(paths.memoriesDir) ? await loadMemoriesFromDir14(paths.memoriesDir) : [];
+  const memories = existsSync42(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
   const captureTimes = memories.filter(({ memory: memory2 }) => ["attempt", "gotcha"].includes(memory2.frontmatter.type)).map(({ memory: memory2 }) => memory2.frontmatter.created_at);
   const uncaptured = findUncapturedFailures(failures, captureTimes);
   if (uncaptured.length === 0) {
@@ -10495,7 +10605,7 @@ function finishReport(root, initialized, mode, findings, config) {
 async function runWithEnforcement(command, args, opts) {
   const root = findProjectRoot37(opts.dir);
   const paths = resolveHaivePaths35(root);
-  if (!existsSync41(paths.haiveDir)) {
+  if (!existsSync42(paths.haiveDir)) {
     ui.error(`No .ai/ found at ${root}. Run \`hivelore init\` first.`);
     process.exit(1);
   }
@@ -10514,7 +10624,7 @@ async function runWithEnforcement(command, args, opts) {
     process.exit(2);
   }
   ui.info(`Hivelore briefing marker created for wrapped agent session: ${sessionId}`);
-  ui.info(`Briefing written to ${path39.relative(root, briefingFile)} and exported as HAIVE_BRIEFING_FILE`);
+  ui.info(`Briefing written to ${path40.relative(root, briefingFile)} and exported as HAIVE_BRIEFING_FILE`);
   const child = spawn4(command, args, {
     cwd: root,
     stdio: "inherit",
@@ -10566,9 +10676,9 @@ async function writeWrapperBriefing(paths, sessionId, task) {
     source: "haive-run",
     memoryIds: briefing.memories.map((m) => m.id)
   });
-  const dir = path39.join(paths.runtimeDir, "enforcement", "briefings");
+  const dir = path40.join(paths.runtimeDir, "enforcement", "briefings");
   await mkdir16(dir, { recursive: true });
-  const file = path39.join(dir, `${sessionId}.md`);
+  const file = path40.join(dir, `${sessionId}.md`);
   const parts = [
     "# Hivelore Briefing",
     "",
@@ -10606,7 +10716,7 @@ async function checkBootstrapComplete(paths, config, productionCodeChanged) {
     projectContextRaw = await readFile18(paths.projectContext, "utf8");
   } catch {
   }
-  const memories = existsSync41(paths.memoriesDir) ? await loadMemoriesFromDir14(paths.memoriesDir) : [];
+  const memories = existsSync42(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
   const codeMap = await loadCodeMap7(paths);
   const codeFiles = codeMap ? Object.keys(codeMap.files) : [];
   let existingModules = [];
@@ -10638,7 +10748,7 @@ ${renderBootstrapChecklist(assessment)}`,
 async function buildEnforcementReport(dir, stage, sessionId) {
   const root = findProjectRoot37(dir);
   const paths = resolveHaivePaths35(root);
-  const initialized = existsSync41(paths.haiveDir);
+  const initialized = existsSync42(paths.haiveDir);
   const config = initialized ? await loadConfig12(paths) : {};
   if (initialized) {
     await applyLightweightRepairs(root, paths);
@@ -10672,7 +10782,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "Hivelore enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.38.0"));
+  findings.push(...await inspectIntegrationVersions(root, "0.39.0"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent Hivelore briefing marker exists." } : {
@@ -10743,10 +10853,14 @@ async function buildEnforcementReport(dir, stage, sessionId) {
   }
   const score = buildScore(effectiveFindings, config.enforcement?.scoreThreshold);
   if (score.score < score.threshold) {
+    const topPenalties = effectiveFindings.map((f) => ({
+      code: f.code,
+      penalty: f.severity === "error" ? f.impact ?? 25 : f.severity === "warn" ? f.impact ?? 8 : 0
+    })).filter((p) => p.penalty > 0).sort((a, b) => b.penalty - a.penalty).slice(0, 3);
     effectiveFindings = [...effectiveFindings, {
       severity: "error",
       code: "enforcement-score-below-threshold",
-      message: `Enforcement score ${score.score}% is below required threshold ${score.threshold}%.`,
+      message: `Enforcement score ${score.score}% is below required threshold ${score.threshold}%` + (topPenalties.length > 0 ? ` \u2014 top penalties: ${topPenalties.map((p) => `${p.code} (\u2212${p.penalty})`).join(", ")}` : "") + ".",
       fix: "Load the relevant briefing, address policy findings, then rerun `hivelore enforce check`.",
       impact: 0
     }];
@@ -10787,8 +10901,8 @@ function withCategories(report) {
 async function hasRecentSessionRecap(paths) {
   const handoffAge = await handoffAgeMs(paths.root);
   if (handoffAge !== null && handoffAge < SESSION_RECAP_TTL_MS) return true;
-  if (!existsSync41(paths.memoriesDir)) return false;
-  const all = await loadMemoriesFromDir14(paths.memoriesDir);
+  if (!existsSync42(paths.memoriesDir)) return false;
+  const all = await loadMemoriesFromDir15(paths.memoriesDir);
   return all.some(({ memory: memory2 }) => {
     const fm = memory2.frontmatter;
     const freshnessDate = fm.verified_at ?? fm.created_at;
@@ -10796,8 +10910,8 @@ async function hasRecentSessionRecap(paths) {
   });
 }
 async function verifyMemoryPolicy(paths, config) {
-  if (!existsSync41(paths.memoriesDir)) return [];
-  const all = await loadMemoriesFromDir14(paths.memoriesDir);
+  if (!existsSync42(paths.memoriesDir)) return [];
+  const all = await loadMemoriesFromDir15(paths.memoriesDir);
   const findings = [];
   const staleImportant = [];
   let verified = 0;
@@ -10834,12 +10948,12 @@ async function verifyMemoryPolicy(paths, config) {
   return findings;
 }
 async function verifyDecisionCoverage(paths, stage, sessionId) {
-  if (!existsSync41(paths.memoriesDir)) return [];
+  if (!existsSync42(paths.memoriesDir)) return [];
   const changedFiles = (await getChangedFiles(paths.root, stage)).filter((f) => !isGeneratedArtifact(f));
   if (changedFiles.length === 0) {
     return [{ severity: "info", code: "decision-coverage-no-changes", message: "No changed files to match against policy memories." }];
   }
-  const all = await loadMemoriesFromDir14(paths.memoriesDir);
+  const all = await loadMemoriesFromDir15(paths.memoriesDir);
   const changedSet = new Set(changedFiles);
   const policyTypes = /* @__PURE__ */ new Set(["decision", "gotcha", "architecture", "convention"]);
   const relevant = all.filter(({ memory: memory2 }) => {
@@ -10868,7 +10982,7 @@ async function verifyDecisionCoverage(paths, stage, sessionId) {
   const consulted = new Set(marker?.memory_ids ?? []);
   const missing = relevant.filter(({ memory: memory2, filePath }) => {
     if (consulted.has(memory2.frontmatter.id)) return false;
-    if (changedSet.has(path39.relative(paths.root, filePath))) return false;
+    if (changedSet.has(path40.relative(paths.root, filePath))) return false;
     return true;
   }).map(({ memory: memory2 }) => memory2);
   if (missing.length === 0) {
@@ -10910,15 +11024,27 @@ async function verifyDecisionCoverage(paths, stage, sessionId) {
   }];
 }
 async function runPrecommitPolicy(paths, gate, stage) {
+  const snapshot = await getPolicyDiffSnapshot(paths.root, stage);
+  const weakenings = detectSensorWeakening(snapshot.diff);
+  const weakeningFindings = weakenings.length > 0 ? [{
+    severity: "warn",
+    code: "sensor-weakened",
+    message: `This diff weakens the enforcement surface \u2014 ${weakenings.length} sensor change(s) need review: ` + weakenings.slice(0, 5).map((w) => `${w.memory_id} (${w.change}: ${w.detail})`).join(", ") + (weakenings.length > 5 ? ", \u2026" : "") + ".",
+    fix: "If the demotion/removal is intentional, say so in the commit message; otherwise restore the sensor (`hivelore sensors list` shows the current state).",
+    memory_ids: [...new Set(weakenings.map((w) => w.memory_id))].slice(0, 10),
+    impact: 8
+  }] : [];
   if (gate === "off") {
-    return [{ severity: "info", code: "precommit-policy-off", message: "Anti-pattern gate is disabled (enforcement.antiPatternGate=off)." }];
+    return [
+      { severity: "info", code: "precommit-policy-off", message: "Anti-pattern gate is disabled (enforcement.antiPatternGate=off)." },
+      ...weakeningFindings
+    ];
   }
-  const snapshot = await getPolicyDiffSnapshot(paths.root, stage);
   const touchedPaths = snapshot.paths;
   if (touchedPaths.length === 0) {
     const code = stage === "ci" ? "no-ci-diff-changes" : "no-staged-changes";
     const message = stage === "ci" ? "No changed files found for CI policy diff." : "No staged changes found for pre-commit policy.";
-    return [{ severity: "info", code, message }];
+    return [{ severity: "info", code, message }, ...weakeningFindings];
   }
   const { block_on, anchored_blocks } = antiPatternGateParams2(gate);
   const result = await preCommitCheck({
@@ -10933,7 +11059,7 @@ async function runPrecommitPolicy(paths, gate, stage) {
     (w) => w.level === "review" && !w.reasons.includes("sensor")
   );
   const REVIEW_SEEN_TTL_MS = 24 * 60 * 60 * 1e3;
-  const reviewSeenFile = path39.join(paths.runtimeDir, "enforcement", "review-seen.json");
+  const reviewSeenFile = path40.join(paths.runtimeDir, "enforcement", "review-seen.json");
   let reviewSeen = {};
   try {
     reviewSeen = JSON.parse(await readFile18(reviewSeenFile, "utf8"));
@@ -10960,7 +11086,7 @@ async function runPrecommitPolicy(paths, gate, stage) {
       for (const [id, at] of Object.entries(reviewSeen)) {
         if (!Number.isFinite(Date.parse(at)) || now - Date.parse(at) >= REVIEW_SEEN_TTL_MS) delete reviewSeen[id];
       }
-      await mkdir16(path39.dirname(reviewSeenFile), { recursive: true });
+      await mkdir16(path40.dirname(reviewSeenFile), { recursive: true });
       await writeFile25(reviewSeenFile, JSON.stringify(reviewSeen, null, 2), "utf8");
     } catch {
     }
@@ -10973,7 +11099,8 @@ async function runPrecommitPolicy(paths, gate, stage) {
         message: `${stage === "ci" ? "CI" : "Pre-commit"} policy passed for ${touchedPaths.length} changed file(s).`
       },
       ...reviewFinding,
-      ...sensorFindings
+      ...sensorFindings,
+      ...weakeningFindings
     ];
   }
   const blockingWarnings = result.warnings.filter((w) => w.level === "blocking");
@@ -10988,13 +11115,14 @@ async function runPrecommitPolicy(paths, gate, stage) {
       impact: 45
     },
     ...reviewFinding,
-    ...sensorFindings
+    ...sensorFindings,
+    ...weakeningFindings
   ];
 }
 async function runSensorGate(paths, diff, stage) {
-  if (!diff || !existsSync41(paths.memoriesDir)) return [];
+  if (!diff || !existsSync42(paths.memoriesDir)) return [];
   try {
-    const loaded = await loadMemoriesFromDir14(paths.memoriesDir);
+    const loaded = await loadMemoriesFromDir15(paths.memoriesDir);
     const scannable = loaded.map((l) => l.memory).filter((m) => Boolean(m.frontmatter.sensor) && !isRetiredMemory2(m.frontmatter, m.body));
     if (scannable.length === 0) return [];
     const targets = sensorTargetsFromDiff(diff).filter((t) => isSensorScannablePath(t.path));
@@ -11126,8 +11254,14 @@ command: ${run.command} (exit ${run.exit_code}, ${run.duration_ms}ms)${outputBlo
       });
     }
     return findings;
-  } catch {
-    return [];
+  } catch (err) {
+    return [{
+      severity: "warn",
+      code: "sensor-gate-errored",
+      message: `The sensor gate itself errored, so NO sensors were evaluated on this diff: ` + `${err instanceof Error ? err.message : String(err)}`.slice(0, 400),
+      fix: "Run `hivelore sensors check` to reproduce, and `hivelore doctor` for setup drift. The lessons' protection is OFF until this is fixed.",
+      impact: 5
+    }];
   }
 }
 async function findGeneratedArtifacts(paths) {
@@ -11160,16 +11294,16 @@ async function cleanupRuntimeDir(runtimeDir) {
   for (const entry of entries) {
     if (entry.name === ".gitignore" || entry.name === "README.md") continue;
     if (entry.name === "enforcement") {
-      removed += await cleanupEnforcementDir(path39.join(runtimeDir, entry.name));
+      removed += await cleanupEnforcementDir(path40.join(runtimeDir, entry.name));
       continue;
     }
-    await rm2(path39.join(runtimeDir, entry.name), { recursive: true, force: true });
+    await rm2(path40.join(runtimeDir, entry.name), { recursive: true, force: true });
     removed++;
   }
-  await writeFile25(path39.join(runtimeDir, ".gitignore"), "*\n!.gitignore\n!README.md\n", "utf8");
-  if (!existsSync41(path39.join(runtimeDir, "README.md"))) {
+  await writeFile25(path40.join(runtimeDir, ".gitignore"), "*\n!.gitignore\n!README.md\n", "utf8");
+  if (!existsSync42(path40.join(runtimeDir, "README.md"))) {
     await writeFile25(
-      path39.join(runtimeDir, "README.md"),
+      path40.join(runtimeDir, "README.md"),
       "# .ai/.runtime \u2014 disposable local layer\n\nRuntime data is local. Hivelore cleanup preserves briefing markers so enforcement state remains valid.\n",
       "utf8"
     );
@@ -11182,10 +11316,10 @@ async function cleanupCacheDir(cacheDir) {
   const entries = await readdir4(cacheDir, { withFileTypes: true }).catch(() => []);
   for (const entry of entries) {
     if (entry.name === ".gitignore") continue;
-    await rm2(path39.join(cacheDir, entry.name), { recursive: true, force: true });
+    await rm2(path40.join(cacheDir, entry.name), { recursive: true, force: true });
     removed++;
   }
-  await writeFile25(path39.join(cacheDir, ".gitignore"), "*\n!.gitignore\n", "utf8");
+  await writeFile25(path40.join(cacheDir, ".gitignore"), "*\n!.gitignore\n", "utf8");
   return removed;
 }
 async function cleanupEnforcementDir(enforcementDir) {
@@ -11193,7 +11327,7 @@ async function cleanupEnforcementDir(enforcementDir) {
   const entries = await readdir4(enforcementDir, { withFileTypes: true }).catch(() => []);
   for (const entry of entries) {
     if (entry.name === "briefings") continue;
-    await rm2(path39.join(enforcementDir, entry.name), { recursive: true, force: true });
+    await rm2(path40.join(enforcementDir, entry.name), { recursive: true, force: true });
     removed++;
   }
   return removed;
@@ -11211,8 +11345,8 @@ async function inspectIntegrationVersions(root, expectedVersion) {
   const missingBins = /* @__PURE__ */ new Map();
   const staleBins = /* @__PURE__ */ new Map();
   for (const rel of files) {
-    const file = path39.join(root, rel);
-    if (!existsSync41(file)) continue;
+    const file = path40.join(root, rel);
+    if (!existsSync42(file)) continue;
     const text = await readFile18(file, "utf8").catch(() => "");
     for (const bin of extractAbsoluteHaiveBins2(text)) {
       const version = versionForBinary2(bin);
@@ -11259,7 +11393,7 @@ function extractAbsoluteHaiveBins2(text) {
     const p = match[2];
     if (!p) continue;
     try {
-      if (statSync3(p).isDirectory()) continue;
+      if (statSync4(p).isDirectory()) continue;
     } catch {
     }
     out.add(p);
@@ -11329,7 +11463,7 @@ async function resolveCiDiffRange(root) {
 }
 async function resolveGithubEventRange(root) {
   const eventPath = process.env.GITHUB_EVENT_PATH;
-  if (!eventPath || !existsSync41(eventPath)) return null;
+  if (!eventPath || !existsSync42(eventPath)) return null;
   try {
     const event = JSON.parse(await readFile18(eventPath, "utf8"));
     const prBase = cleanGitSha(event.pull_request?.base?.sha);
@@ -11434,7 +11568,7 @@ function isShippablePath(file) {
 }
 var CI_SKIP_DIRECTIVE = /\[skip ci\]|\[ci skip\]|\[no ci\]|\[skip actions\]|\*\*\*NO_CI\*\*\*|skip-checks: *true/i;
 async function checkCommitMessageSkipCi(root, msgfile) {
-  const file = path39.isAbsolute(msgfile) ? msgfile : path39.join(root, msgfile);
+  const file = path40.isAbsolute(msgfile) ? msgfile : path40.join(root, msgfile);
   const raw = await readFile18(file, "utf8").catch(() => "");
   const cleaned = raw.split("\n").filter((line) => !line.startsWith("#")).join("\n");
   if (!CI_SKIP_DIRECTIVE.test(cleaned)) return { block: false, message: "" };
@@ -11463,7 +11597,7 @@ async function inspectReleaseVersionState(root, upstream) {
 }
 async function readPackageVersion(root, relPath) {
   try {
-    const data = JSON.parse(await readFile18(path39.join(root, relPath), "utf8"));
+    const data = JSON.parse(await readFile18(path40.join(root, relPath), "utf8"));
     return typeof data.version === "string" ? data.version : void 0;
   } catch {
     return void 0;
@@ -11651,8 +11785,8 @@ function buildScore(findings, threshold = 80) {
   };
 }
 async function installGitEnforcement(root) {
-  const hooksDir = path39.join(root, ".git", "hooks");
-  if (!existsSync41(path39.join(root, ".git"))) {
+  const hooksDir = path40.join(root, ".git", "hooks");
+  if (!existsSync42(path40.join(root, ".git"))) {
     ui.warn("No .git directory found; git enforcement hooks skipped.");
     return;
   }
@@ -11708,8 +11842,8 @@ _hivelore sync --quiet --since ORIG_HEAD || true
     }
   ];
   for (const hook of hooks) {
-    const file = path39.join(hooksDir, hook.name);
-    if (existsSync41(file)) {
+    const file = path40.join(hooksDir, hook.name);
+    if (existsSync42(file)) {
       const current = await readFile18(file, "utf8").catch(() => "");
       if (current.includes(ENFORCE_HOOK_MARKER)) {
         await writeFile25(file, hook.body, "utf8");
@@ -11726,10 +11860,10 @@ ${hook.body}`, "utf8");
   ui.success("Installed git hooks: pre-commit, pre-push, commit-msg (blocking) + post-merge, post-rewrite (sync)");
 }
 async function installCiEnforcement(root) {
-  const workflowPath = path39.join(root, ".github", "workflows", "haive-enforcement.yml");
-  await mkdir16(path39.dirname(workflowPath), { recursive: true });
+  const workflowPath = path40.join(root, ".github", "workflows", "haive-enforcement.yml");
+  await mkdir16(path40.dirname(workflowPath), { recursive: true });
   const workflow = renderCiEnforcementWorkflow();
-  if (existsSync41(workflowPath)) {
+  if (existsSync42(workflowPath)) {
     const existing = await readFile18(workflowPath, "utf8");
     const start = "# haive:enforcement-workflow:start";
     const end = "# haive:enforcement-workflow:end";
@@ -11737,14 +11871,14 @@ async function installCiEnforcement(root) {
     const endAt = existing.indexOf(end);
     if (startAt >= 0 && endAt > startAt) {
       await writeFile25(workflowPath, existing.slice(0, startAt) + workflow + existing.slice(endAt + end.length), "utf8");
-      ui.success(`Updated ${path39.relative(root, workflowPath)} managed block`);
+      ui.success(`Updated ${path40.relative(root, workflowPath)} managed block`);
     } else {
       ui.info("GitHub Actions enforcement workflow already exists without Hivelore markers \u2014 preserved");
     }
     return;
   }
   await writeFile25(workflowPath, workflow, "utf8");
-  ui.success(`Created ${path39.relative(root, workflowPath)}`);
+  ui.success(`Created ${path40.relative(root, workflowPath)}`);
 }
 function renderCiEnforcementWorkflow() {
   return `# haive:enforcement-workflow:start
@@ -11947,15 +12081,15 @@ function extractToolPaths(payload, root) {
 }
 function normalizeToolPath(file, root) {
   const normalized = file.replace(/\\/g, "/");
-  if (!path39.isAbsolute(normalized)) return normalized.replace(/^\.\//, "");
-  return path39.relative(root, normalized).replace(/\\/g, "/");
+  if (!path40.isAbsolute(normalized)) return normalized.replace(/^\.\//, "");
+  return path40.relative(root, normalized).replace(/\\/g, "/");
 }
 async function missingRequiredMemoriesForFiles(paths, files, sessionId) {
-  if (!existsSync41(paths.memoriesDir)) return [];
+  if (!existsSync42(paths.memoriesDir)) return [];
   const marker = await readRecentBriefingMarker(paths, sessionId);
   const consulted = new Set(marker?.memory_ids ?? []);
   const policyTypes = /* @__PURE__ */ new Set(["decision", "gotcha", "architecture", "convention", "attempt"]);
-  const all = await loadMemoriesFromDir14(paths.memoriesDir);
+  const all = await loadMemoriesFromDir15(paths.memoriesDir);
   return all.filter(({ memory: memory2 }) => {
     const fm = memory2.frontmatter;
     if (!policyTypes.has(fm.type)) return false;
@@ -11996,7 +12130,7 @@ async function readStdin2(maxBytes) {
 }
 var ATOMIC_STAGE_EXCLUDE = ["/.usage/", "/.runtime/", "/.cache/"];
 async function stageResyncedArtifacts(root, paths) {
-  const aiRel = path39.relative(root, paths.haiveDir);
+  const aiRel = path40.relative(root, paths.haiveDir);
   const out = await runCommand2("git", ["diff", "--name-only", "--", aiRel], root).catch(() => "");
   const toStage = out.split("\n").map((line) => line.trim()).filter(Boolean).filter((file) => !ATOMIC_STAGE_EXCLUDE.some((excl) => `/${file}`.includes(excl)));
   if (toStage.length === 0) return;
@@ -12023,9 +12157,9 @@ function runCommand2(cmd, args, cwd) {
 }
 
 // src/commands/release.ts
-import { existsSync as existsSync42 } from "fs";
+import { existsSync as existsSync43 } from "fs";
 import { readFile as readFile19, writeFile as writeFile26 } from "fs/promises";
-import path40 from "path";
+import path41 from "path";
 import "commander";
 import { findProjectRoot as findProjectRoot38 } from "@hivelore/core";
 import { execFile as execFile6 } from "child_process";
@@ -12039,7 +12173,7 @@ var VERSION_FILES2 = [
   "packages/embeddings/package.json"
 ];
 async function readCurrentVersion(root) {
-  const pkg = JSON.parse(await readFile19(path40.join(root, "package.json"), "utf8"));
+  const pkg = JSON.parse(await readFile19(path41.join(root, "package.json"), "utf8"));
   if (!pkg.version) throw new Error("Root package.json has no version field.");
   return pkg.version;
 }
@@ -12060,8 +12194,8 @@ function registerRelease(program2) {
     const current = await readCurrentVersion(root);
     const next = nextVersion(current, spec);
     for (const rel of VERSION_FILES2) {
-      const file = path40.join(root, rel);
-      if (!existsSync42(file)) {
+      const file = path41.join(root, rel);
+      if (!existsSync43(file)) {
         ui.warn(`skip ${rel} (missing)`);
         continue;
       }
@@ -12074,8 +12208,8 @@ function registerRelease(program2) {
       }
       await writeFile26(file, updated, "utf8");
     }
-    const changelog = path40.join(root, "CHANGELOG.md");
-    if (existsSync42(changelog)) {
+    const changelog = path41.join(root, "CHANGELOG.md");
+    if (existsSync43(changelog)) {
       const raw = await readFile19(changelog, "utf8");
       const heading = `## [${next}]${opts.title ? ` \u2014 ${opts.title}` : ""}`;
       if (!raw.includes(`## [${next}]`)) {
@@ -12098,8 +12232,8 @@ ${heading}
     const root = findProjectRoot38(opts.dir);
     const version = await readCurrentVersion(root);
     for (const rel of VERSION_FILES2.slice(1)) {
-      const file = path40.join(root, rel);
-      if (!existsSync42(file)) continue;
+      const file = path41.join(root, rel);
+      if (!existsSync43(file)) continue;
       const v = JSON.parse(await readFile19(file, "utf8")).version;
       if (v !== version) {
         ui.error(`${rel} is at ${v}, root at ${version} \u2014 lockstep broken; run \`hivelore release bump\` first.`);
@@ -12145,9 +12279,9 @@ function registerRun(program2) {
 
 // src/commands/sensors.ts
 import { execFile as execFile7 } from "child_process";
-import { existsSync as existsSync43 } from "fs";
+import { existsSync as existsSync44 } from "fs";
 import { chmod as chmod2, mkdir as mkdir17, readFile as readFile20, writeFile as writeFile27 } from "fs/promises";
-import path41 from "path";
+import path42 from "path";
 import { promisify as promisify7 } from "util";
 import "commander";
 import {
@@ -12160,12 +12294,13 @@ import {
   judgeProposedSensor,
   loadConfig as loadConfig13,
   loadSensorLedger as loadSensorLedger4,
-  loadMemoriesFromDir as loadMemoriesFromDir15,
+  loadMemoriesFromDir as loadMemoriesFromDir16,
   normalizeFramework,
   parseLessonFields,
   recordPreventionHits as recordPreventionHits2,
   resolveHaivePaths as resolveHaivePaths36,
   runSensors as runSensors2,
+  buildProposeCommand,
   scaffoldPostIncidentTest,
   selectCommandSensors as selectCommandSensors2,
   TEST_FRAMEWORKS,
@@ -12212,7 +12347,7 @@ function registerSensors(program2) {
     const root = findProjectRoot39(opts.dir);
     const paths = resolveHaivePaths36(root);
     const memories = await runnableSensorMemories(paths);
-    const diff = opts.diffFile ? await readFile20(path41.resolve(root, opts.diffFile), "utf8") : await stagedDiff(root);
+    const diff = opts.diffFile ? await readFile20(path42.resolve(root, opts.diffFile), "utf8") : await stagedDiff(root);
     const targets = scannableSensorTargets(diff);
     const hits = runSensors2(memories, targets);
     const config = await loadConfig13(paths);
@@ -12344,7 +12479,7 @@ function registerSensors(program2) {
     }
     const root = findProjectRoot39(opts.dir);
     const paths = resolveHaivePaths36(root);
-    const loaded = existsSync43(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
+    const loaded = existsSync44(paths.memoriesDir) ? await loadMemoriesFromDir16(paths.memoriesDir) : [];
     const found = loaded.find(({ memory: memory2 }) => memory2.frontmatter.id === id);
     if (!found) {
       ui.error(`No memory found with id ${id}`);
@@ -12411,7 +12546,7 @@ function registerSensors(program2) {
         return;
       }
       const root2 = findProjectRoot39(opts.dir);
-      const { proposeSensor } = await import("./server-HG2K3WOQ.js");
+      const { proposeSensor } = await import("./server-47VOVJJT.js");
       const out = await proposeSensor(
         {
           memory_id: id,
@@ -12455,7 +12590,7 @@ function registerSensors(program2) {
     }
     const root = findProjectRoot39(opts.dir);
     const paths = resolveHaivePaths36(root);
-    const loaded = existsSync43(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
+    const loaded = existsSync44(paths.memoriesDir) ? await loadMemoriesFromDir16(paths.memoriesDir) : [];
     const found = loaded.find(({ memory: memory2 }) => memory2.frontmatter.id === id);
     if (!found) {
       ui.error(`No memory found with id ${id}`);
@@ -12499,13 +12634,18 @@ function registerSensors(program2) {
     ui.info(
       `self-check: silent on current=${verdict.self_check.silent_on_current}` + (verdict.self_check.fires_on_bad === null ? "; no bad example tested" : `; fires on bad=${verdict.self_check.fires_on_bad}`)
     );
+    if (found.memory.frontmatter.scope === "personal") {
+      ui.warn(
+        `This lesson is personal-scoped \u2014 the sensor guards only YOUR machine (personal memories are gitignored). Promote it so the gate travels with the repo: hivelore memory promote ${id}`
+      );
+    }
   });
   sensors.command("scaffold").description(
     "Generate a PENDING post-incident test from a lesson (mem_tried/attempt/gotcha) \u2014 the on-ramp to\n  a command sensor. Writes a test stub carrying the incident's provenance, then prints the exact\n  `sensors propose --kind test` line to arm it once you've written the assertion. It never arms a\n  sensor itself \u2014 propose_sensor stays the sole validated writer.\n\n  Example:\n    hivelore sensors scaffold 2026-07-03-attempt-refund-exceeds-capture --framework vitest"
   ).argument("<memory-id>", "lesson id to scaffold a test from").option("--framework <fw>", `test framework: ${TEST_FRAMEWORKS.join(" | ")} (auto-detected when omitted)`).option("--out <path>", "override the generated test file path (project-relative)").option("--stdout", "print the test to stdout instead of writing a file", false).option("--force", "overwrite an existing file at the target path", false).option("-d, --dir <dir>", "project root").action(async (id, opts) => {
     const root = findProjectRoot39(opts.dir);
     const paths = resolveHaivePaths36(root);
-    const loaded = existsSync43(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
+    const loaded = existsSync44(paths.memoriesDir) ? await loadMemoriesFromDir16(paths.memoriesDir) : [];
     const found = loaded.find(({ memory: memory2 }) => memory2.frontmatter.id === id);
     if (!found) {
       ui.error(`No memory found with id ${id}`);
@@ -12513,43 +12653,59 @@ function registerSensors(program2) {
       return;
     }
     const fm = found.memory.frontmatter;
-    const detected = await detectTestFrameworkForPaths(root, fm.anchor.paths ?? []);
-    const framework = opts.framework ? normalizeFramework(opts.framework) : detected.framework;
-    if (!framework) {
+    const forced = opts.framework ? normalizeFramework(opts.framework) : null;
+    if (opts.framework && !forced) {
       ui.error(`Unknown --framework "${opts.framework}". Use one of: ${TEST_FRAMEWORKS.join(", ")}.`);
       process.exitCode = 1;
       return;
     }
+    const allGroups = await detectTestFrameworksForAnchors(root, fm.anchor.paths ?? []);
+    const groups = opts.out ? allGroups.slice(0, 1) : allGroups;
     const fields = parseLessonFields(found.memory.body);
-    const scaffold = scaffoldPostIncidentTest(
-      {
-        memoryId: id,
-        title: fields.title || id,
-        whyFailed: fields.whyFailed,
-        instead: fields.instead,
-        incident: fm.sensor?.incident,
-        paths: fm.anchor.paths
-      },
-      { framework, outPath: opts.out, baseDir: detected.baseDir }
+    const lesson = {
+      memoryId: id,
+      title: fields.title || id,
+      whyFailed: fields.whyFailed,
+      instead: fields.instead,
+      incident: fm.sensor?.incident,
+      paths: fm.anchor.paths
+    };
+    let scaffolds = groups.map(
+      (g) => scaffoldPostIncidentTest(lesson, { framework: forced ?? g.framework, outPath: opts.out, baseDir: g.baseDir })
     );
+    let proposeCmd = scaffolds[0].proposeCommand;
+    if (scaffolds.length > 1) {
+      proposeCmd = buildProposeCommand(lesson, scaffolds.map((s) => s.runCommand).join(" && "));
+      scaffolds = groups.map(
+        (g) => scaffoldPostIncidentTest(lesson, { framework: forced ?? g.framework, baseDir: g.baseDir, proposeCommandOverride: proposeCmd })
+      );
+    }
     if (opts.stdout) {
-      console.log(scaffold.content);
-      ui.info(`Arm it once written: ${scaffold.proposeCommand}`);
+      for (const scaffold of scaffolds) {
+        if (scaffolds.length > 1) ui.info(`--- ${scaffold.relPath} ---`);
+        console.log(scaffold.content);
+      }
+      ui.info(`Arm ${scaffolds.length > 1 ? "them" : "it"} once written: ${proposeCmd}`);
       return;
     }
-    const abs = path41.isAbsolute(scaffold.relPath) ? scaffold.relPath : path41.resolve(root, scaffold.relPath);
-    if (existsSync43(abs) && !opts.force) {
-      ui.error(`${scaffold.relPath} already exists \u2014 pass --force to overwrite, or --out <path> for a different file.`);
-      process.exitCode = 1;
-      return;
+    for (const scaffold of scaffolds) {
+      const abs = path42.isAbsolute(scaffold.relPath) ? scaffold.relPath : path42.resolve(root, scaffold.relPath);
+      if (existsSync44(abs) && !opts.force) {
+        ui.error(`${scaffold.relPath} already exists \u2014 pass --force to overwrite, or --out <path> for a different file.`);
+        process.exitCode = 1;
+        return;
+      }
+      await mkdir17(path42.dirname(abs), { recursive: true });
+      await writeFile27(abs, scaffold.content, "utf8");
+      ui.success(`Wrote ${scaffold.framework} post-incident test \u2192 ${scaffold.relPath}`);
+    }
+    if (scaffolds.length > 1) {
+      ui.info(`  Lesson spans ${scaffolds.length} packages \u2014 one pending test per owning package, ONE sensor arms them all.`);
     }
-    await mkdir17(path41.dirname(abs), { recursive: true });
-    await writeFile27(abs, scaffold.content, "utf8");
-    ui.success(`Wrote ${framework} post-incident test \u2192 ${scaffold.relPath}`);
     ui.info("  1. Fill in the assertion (RED on the incident, GREEN once fixed).");
-    ui.info(`  2. Run it: ${scaffold.runCommand}`);
+    ui.info(`  2. Run ${scaffolds.length > 1 ? "them" : "it"}: ${scaffolds.map((s) => s.runCommand).join("  &&  ")}`);
     ui.info("  3. Arm it as a deterministic gate:");
-    console.log(`     ${scaffold.proposeCommand}`);
+    console.log(`     ${proposeCmd}`);
   });
   sensors.command("export").description("Export regex sensors into .ai/generated for external toolchains").option("--format <format>", "grep | eslint", "grep").option("--out-dir <dir>", "output directory", ".ai/generated").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const format = opts.format ?? "grep";
@@ -12561,13 +12717,13 @@ function registerSensors(program2) {
     const root = findProjectRoot39(opts.dir);
     const paths = resolveHaivePaths36(root);
     const rows = await sensorRows(paths);
-    const outDir = path41.resolve(root, opts.outDir ?? ".ai/generated");
+    const outDir = path42.resolve(root, opts.outDir ?? ".ai/generated");
     await mkdir17(outDir, { recursive: true });
-    const outPath = path41.join(outDir, format === "grep" ? "haive-sensors-grep.sh" : "haive-sensors-eslint.json");
+    const outPath = path42.join(outDir, format === "grep" ? "haive-sensors-grep.sh" : "haive-sensors-eslint.json");
     const content = format === "grep" ? renderGrepScript(rows) : JSON.stringify({ sensors: rows }, null, 2) + "\n";
     await writeFile27(outPath, content, "utf8");
     if (format === "grep") await chmod2(outPath, 493);
-    ui.success(`Exported ${rows.length} sensor(s): ${path41.relative(root, outPath)}`);
+    ui.success(`Exported ${rows.length} sensor(s): ${path42.relative(root, outPath)}`);
   });
 }
 function deriveProposedMessage(body, pattern, absent) {
@@ -12600,8 +12756,8 @@ async function sensorRows(paths) {
   });
 }
 async function runnableSensorMemories(paths, regexOnly = true) {
-  if (!existsSync43(paths.memoriesDir)) return [];
-  const loaded = await loadMemoriesFromDir15(paths.memoriesDir);
+  if (!existsSync44(paths.memoriesDir)) return [];
+  const loaded = await loadMemoriesFromDir16(paths.memoriesDir);
   return loaded.map(({ memory: memory2 }) => memory2).filter((memory2) => {
     const sensor = memory2.frontmatter.sensor;
     if (!sensor) return false;
@@ -12642,15 +12798,15 @@ function shellQuote(value) {
 }
 
 // src/commands/ingest.ts
-import { existsSync as existsSync44 } from "fs";
+import { existsSync as existsSync45 } from "fs";
 import { mkdir as mkdir18, readFile as readFile21, writeFile as writeFile28 } from "fs/promises";
-import path42 from "path";
+import path43 from "path";
 import "commander";
 import {
   draftsFromFindings,
   filterNewDrafts,
   findProjectRoot as findProjectRoot40,
-  loadMemoriesFromDir as loadMemoriesFromDir16,
+  loadMemoriesFromDir as loadMemoriesFromDir17,
   memoryFilePath as memoryFilePath7,
   parseFindings,
   resolveHaivePaths as resolveHaivePaths37,
@@ -12680,7 +12836,7 @@ function registerIngest(program2) {
     }
     const root = findProjectRoot40(opts.dir);
     const paths = resolveHaivePaths37(root);
-    if (!existsSync44(paths.haiveDir)) {
+    if (!existsSync45(paths.haiveDir)) {
       ui.error(`No .ai/ found at ${root}. Run \`hivelore init\` first.`);
       process.exitCode = 1;
       return;
@@ -12701,8 +12857,8 @@ function registerIngest(program2) {
         process.exitCode = 1;
         return;
       }
-      const reportPath = path42.resolve(root, file);
-      if (!existsSync44(reportPath)) {
+      const reportPath = path43.resolve(root, file);
+      if (!existsSync45(reportPath)) {
         ui.error(`Report file not found: ${reportPath}`);
         process.exitCode = 1;
         return;
@@ -12734,7 +12890,7 @@ function registerIngest(program2) {
       process.exitCode = 1;
       return;
     }
-    const existing = existsSync44(paths.memoriesDir) ? await loadMemoriesFromDir16(paths.memoriesDir) : [];
+    const existing = existsSync45(paths.memoriesDir) ? await loadMemoriesFromDir17(paths.memoriesDir) : [];
     const existingTopics = new Set(
       existing.map(({ memory: memory2 }) => memory2.frontmatter.topic).filter((t) => Boolean(t))
     );
@@ -12796,13 +12952,13 @@ function registerIngest(program2) {
       await writeDraft(paths, draft);
       created++;
     }
-    ui.success(`Created ${created} proposed memory(ies) under ${path42.relative(root, paths.memoriesDir)}/`);
+    ui.success(`Created ${created} proposed memory(ies) under ${path43.relative(root, paths.memoriesDir)}/`);
     ui.info("Review with `hivelore memory pending`; promote sensors with `hivelore sensors promote <id> --yes`.");
   });
 }
 async function writeDraft(paths, draft) {
   const file = memoryFilePath7(paths, draft.frontmatter.scope, draft.frontmatter.id, draft.frontmatter.module);
-  await mkdir18(path42.dirname(file), { recursive: true });
+  await mkdir18(path43.dirname(file), { recursive: true });
   await writeFile28(file, serializeMemory16({ frontmatter: draft.frontmatter, body: draft.body }), "utf8");
   return file;
 }
@@ -12844,13 +13000,13 @@ async function fetchSonarIssues(opts) {
 }
 
 // src/commands/dashboard.ts
-import { existsSync as existsSync45 } from "fs";
+import { existsSync as existsSync46 } from "fs";
 import "commander";
 import {
   buildDashboard,
   findProjectRoot as findProjectRoot41,
   loadConfig as loadConfig14,
-  loadMemoriesFromDir as loadMemoriesFromDir17,
+  loadMemoriesFromDir as loadMemoriesFromDir18,
   loadPreventionEvents as loadPreventionEvents4,
   loadUsageIndex as loadUsageIndex16,
   resolveHaivePaths as resolveHaivePaths38
@@ -12861,12 +13017,12 @@ function registerDashboard(program2) {
   ).option("--json", "emit the full report as JSON", false).option("--top <n>", "rows per top-list", "10").option("--dormant-days <n>", "dormancy window for impact scoring").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot41(opts.dir);
     const paths = resolveHaivePaths38(root);
-    if (!existsSync45(paths.haiveDir)) {
+    if (!existsSync46(paths.haiveDir)) {
       ui.error(`No .ai/ found at ${root}. Run \`hivelore init\` first.`);
       process.exitCode = 1;
       return;
     }
-    const memories = existsSync45(paths.memoriesDir) ? await loadMemoriesFromDir17(paths.memoriesDir) : [];
+    const memories = existsSync46(paths.memoriesDir) ? await loadMemoriesFromDir18(paths.memoriesDir) : [];
     const usage = await loadUsageIndex16(paths);
     const preventionEvents = await loadPreventionEvents4(paths);
     const config = await loadConfig14(paths);
@@ -12992,8 +13148,8 @@ function warnNum(n) {
 // src/commands/dev-link.ts
 import { execFile as execFile8 } from "child_process";
 import { cp, readFile as readFile22 } from "fs/promises";
-import { existsSync as existsSync46 } from "fs";
-import path43 from "path";
+import { existsSync as existsSync47 } from "fs";
+import path44 from "path";
 import { promisify as promisify8 } from "util";
 import "commander";
 import { findProjectRoot as findProjectRoot42 } from "@hivelore/core";
@@ -13002,7 +13158,7 @@ function registerDevLink(program2) {
   const dev = program2.commands.find((c) => c.name() === "dev") ?? program2.command("dev").description("Developer utilities for working on Hivelore itself.");
   dev.command("link").description("Hot-swap this repo's built dist into the global @hivelore (or legacy @hiveai) install so the global binary runs your local code.").option("-d, --dir <dir>", "repo root (default: discovered from cwd)").option("--json", "emit a machine-readable summary", false).action(async (opts) => {
     const root = findProjectRoot42(opts.dir);
-    if (!existsSync46(path43.join(root, "packages", "cli", "dist", "index.js"))) {
+    if (!existsSync47(path44.join(root, "packages", "cli", "dist", "index.js"))) {
       ui.error(`Not the Hivelore monorepo (no packages/cli/dist) at ${root}. Run \`pnpm -r build\` first, or pass --dir.`);
       process.exitCode = 1;
       return;
@@ -13011,9 +13167,9 @@ function registerDevLink(program2) {
     try {
       globalModules = (await exec6("npm", ["root", "-g"])).stdout.trim();
     } catch {
-      globalModules = path43.join(path43.dirname(path43.dirname(process.execPath)), "lib", "node_modules");
+      globalModules = path44.join(path44.dirname(path44.dirname(process.execPath)), "lib", "node_modules");
     }
-    const scopeDirs = ["@hivelore", "@hiveai"].map((scope) => path43.join(globalModules, scope)).filter((dir) => existsSync46(dir));
+    const scopeDirs = ["@hivelore", "@hiveai"].map((scope) => path44.join(globalModules, scope)).filter((dir) => existsSync47(dir));
     if (scopeDirs.length === 0) {
       ui.error(`No global @hivelore (or legacy @hiveai) install under ${globalModules}. Install once with \`npm i -g @hivelore/cli\`, then re-run.`);
       process.exitCode = 1;
@@ -13021,24 +13177,24 @@ function registerDevLink(program2) {
     }
     const linked = [];
     const copyDist = async (fromPkg, toDistDir) => {
-      const from = path43.join(root, "packages", fromPkg, "dist");
-      if (!existsSync46(from) || !existsSync46(path43.dirname(toDistDir))) return;
+      const from = path44.join(root, "packages", fromPkg, "dist");
+      if (!existsSync47(from) || !existsSync47(path44.dirname(toDistDir))) return;
       await cp(from, toDistDir, { recursive: true });
-      linked.push(path43.relative(globalModules, toDistDir));
+      linked.push(path44.relative(globalModules, toDistDir));
     };
     for (const globalHive of scopeDirs) {
-      const nestedScope = path43.basename(globalHive);
+      const nestedScope = path44.basename(globalHive);
       for (const pkg of ["cli", "mcp"]) {
-        await copyDist(pkg, path43.join(globalHive, pkg, "dist"));
+        await copyDist(pkg, path44.join(globalHive, pkg, "dist"));
         for (const nested of ["core", "embeddings"]) {
-          await copyDist(nested, path43.join(globalHive, pkg, "node_modules", nestedScope, nested, "dist"));
+          await copyDist(nested, path44.join(globalHive, pkg, "node_modules", nestedScope, nested, "dist"));
         }
       }
-      await copyDist("core", path43.join(globalHive, "core", "dist"));
+      await copyDist("core", path44.join(globalHive, "core", "dist"));
     }
     let version = "unknown";
     try {
-      version = JSON.parse(await readFile22(path43.join(root, "package.json"), "utf8")).version ?? "unknown";
+      version = JSON.parse(await readFile22(path44.join(root, "package.json"), "utf8")).version ?? "unknown";
     } catch {
     }
     if (opts.json) {
@@ -13049,7 +13205,7 @@ function registerDevLink(program2) {
       ui.warn("Nothing linked \u2014 no matching dist targets were found in the global install.");
       return;
     }
-    ui.success(`Linked local dist (v${version}) into the global install(s): ${scopeDirs.map((d) => path43.basename(d)).join(", ")}`);
+    ui.success(`Linked local dist (v${version}) into the global install(s): ${scopeDirs.map((d) => path44.basename(d)).join(", ")}`);
     for (const t of linked) console.log(`  ${ui.dim("\u2192")} ${t}`);
     console.log(ui.dim("The global binary now runs your local build (git hooks + MCP included)."));
   });
@@ -13057,8 +13213,8 @@ function registerDevLink(program2) {
 
 // src/commands/coverage.ts
 import { readFile as readFile23 } from "fs/promises";
-import { existsSync as existsSync47 } from "fs";
-import path44 from "path";
+import { existsSync as existsSync48 } from "fs";
+import path45 from "path";
 import "commander";
 import {
   findCoverageGaps,
@@ -13068,7 +13224,7 @@ import {
   tallyHotFiles
 } from "@hivelore/core";
 async function readAgentHotFiles(root, cacheFile, sinceMs) {
-  if (!existsSync47(cacheFile)) return [];
+  if (!existsSync48(cacheFile)) return [];
   const raw = await readFile23(cacheFile, "utf8").catch(() => "");
   const files = [];
   for (const line of raw.split("\n")) {
@@ -13082,7 +13238,7 @@ async function readAgentHotFiles(root, cacheFile, sinceMs) {
       }
       for (const f of obs.files ?? []) {
         if (typeof f !== "string" || !f) continue;
-        const rel = path44.isAbsolute(f) ? path44.relative(root, f) : f;
+        const rel = path45.isAbsolute(f) ? path45.relative(root, f) : f;
         if (rel.startsWith("..")) continue;
         files.push(rel);
       }
@@ -13126,7 +13282,7 @@ function registerCoverage(program2) {
     }) : null;
     const gitHotFiles = (radar?.hotFiles ?? []).filter((h) => !isNoisePath(h.path)).map((h) => ({ path: h.path, changes: h.changes, source: "git" }));
     const sinceMs = Date.now() - days * 864e5;
-    const agentHotFiles = useAgent ? (await readAgentHotFiles(root, path44.join(paths.haiveDir, ".cache", "observations.jsonl"), sinceMs)).filter((h) => !isNoisePath(h.path)) : [];
+    const agentHotFiles = useAgent ? (await readAgentHotFiles(root, path45.join(paths.haiveDir, ".cache", "observations.jsonl"), sinceMs)).filter((h) => !isNoisePath(h.path)) : [];
     const hotFiles = mergeHotFiles(gitHotFiles, agentHotFiles);
     const memories = await loadMemoriesFromDir(paths.memoriesDir);
     const gaps = findCoverageGaps(hotFiles, memories, { minChanges, limit });
@@ -13164,8 +13320,8 @@ function registerCoverage(program2) {
 
 // src/commands/merge-driver.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { readFileSync, writeFileSync, existsSync as existsSync48 } from "fs";
-import path45 from "path";
+import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync49 } from "fs";
+import path46 from "path";
 import "commander";
 import { findProjectRoot as findProjectRoot44, mergeMemoryVersions } from "@hivelore/core";
 var GITATTRIBUTES_MARK = "# Hivelore merge driver";
@@ -13178,8 +13334,8 @@ function registerMergeDriver(program2) {
   const cmd = program2.command("merge-driver").description("Deterministic git merge driver for Hivelore memory files (kills .ai/ conflict markers)");
   cmd.command("run <base> <ours> <theirs>").description("Git merge-driver entrypoint: resolve ours/theirs by frontmatter order, write into <ours>").action((base, ours, theirs) => {
     try {
-      const oursContent = readFileSync(ours, "utf8");
-      const theirsContent = readFileSync(theirs, "utf8");
+      const oursContent = readFileSync2(ours, "utf8");
+      const theirsContent = readFileSync2(theirs, "utf8");
       const result = mergeMemoryVersions(oursContent, theirsContent);
       if (result.content !== oursContent) writeFileSync(ours, result.content, "utf8");
       process.exit(0);
@@ -13197,8 +13353,8 @@ function registerMergeDriver(program2) {
       process.exitCode = 1;
       return;
     }
-    const gaPath = path45.join(root, ".gitattributes");
-    let content = existsSync48(gaPath) ? readFileSync(gaPath, "utf8") : "";
+    const gaPath = path46.join(root, ".gitattributes");
+    let content = existsSync49(gaPath) ? readFileSync2(gaPath, "utf8") : "";
     if (!content.includes(GITATTRIBUTES_MARK)) {
       if (content.length > 0 && !content.endsWith("\n")) content += "\n";
       content += GITATTRIBUTES_BLOCK + "\n";
@@ -13212,8 +13368,8 @@ function registerMergeDriver(program2) {
 }
 
 // src/commands/bridges.ts
-import { existsSync as existsSync49 } from "fs";
-import path46 from "path";
+import { existsSync as existsSync50 } from "fs";
+import path47 from "path";
 import "commander";
 import {
   findProjectRoot as findProjectRoot45,
@@ -13234,7 +13390,7 @@ function registerBridges(program2) {
     const root = findProjectRoot45(opts.dir);
     const paths = resolveHaivePaths40(root);
     const dryRun = opts.dryRun === true;
-    if (!existsSync49(paths.memoriesDir)) {
+    if (!existsSync50(paths.memoriesDir)) {
       ui.warn(`No .ai/memories at ${root}. Run \`hivelore init\` first.`);
       process.exitCode = 1;
       return;
@@ -13253,7 +13409,7 @@ function registerBridges(program2) {
       targets = BRIDGE_TARGETS4;
     } else {
       targets = BRIDGE_TARGETS4.filter(
-        (t) => existsSync49(path46.join(root, BRIDGE_TARGET_PATH3[t]))
+        (t) => existsSync50(path47.join(root, BRIDGE_TARGET_PATH3[t]))
       );
       if (targets.length === 0) {
         ui.info(
@@ -13301,7 +13457,7 @@ function registerBridges(program2) {
 
 // src/index.ts
 var program = new Command48();
-program.name("hivelore").description("Hivelore - the deterministic policy gate for agent-written code (rules live as repo-native team memory)").version("0.38.0").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
+program.name("hivelore").description("Hivelore - the deterministic policy gate for agent-written code (rules live as repo-native team memory)").version("0.39.0").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
 registerInit(program);
 registerResolveProject(program);
 registerEnforce(program);