@hivelore/cli 0.42.1 → 0.44.0

package/dist/index.js

@@ -13,7 +13,7 @@ import {
   readPresumedCorrectTargets,
   runAstSensorOnContent,
   runHaiveMcpStdio
-} from "./chunk-EJ7A4IKD.js";
+} from "./chunk-6KRXMDLC.js";
 import {
   registerMemoryPending
 } from "./chunk-OYJKHD22.js";
@@ -1299,7 +1299,7 @@ function attachSemanticCommands(embeddings, naming) {
       minScore: Number(opts.minScore ?? 0)
     });
     if (!result) {
-      ui.error("No embeddings index found. Run `hivelore embeddings index` first.");
+      ui.error("No embeddings index found. Run `hivelore index memories` first.");
       process.exitCode = 1;
       return;
     }
@@ -1319,7 +1319,7 @@ function attachSemanticCommands(embeddings, naming) {
     const { indexStat } = await loadEmbeddings();
     const stat2 = await indexStat(paths);
     if (!stat2.exists) {
-      ui.warn("No embeddings index. Run `hivelore embeddings index` to create one.");
+      ui.warn("No embeddings index. Run `hivelore index memories` to create one.");
       return;
     }
     console.log(`${ui.bold("entries:")}    ${stat2.count}`);
@@ -1393,7 +1393,7 @@ function registerIndexCode(program2) {
       mod = await import("@hivelore/embeddings");
     } catch {
       ui.error(
-        "@hivelore/embeddings is not installed. Install it (`pnpm add @hivelore/embeddings`) or run `hivelore embeddings install`."
+        "@hivelore/embeddings is not installed. Install it (`pnpm add @hivelore/embeddings`) then run `hivelore index code-search`."
       );
       process.exit(1);
     }
@@ -3758,7 +3758,7 @@ ${SEED_FOOTER(stack)}` });
 
 // src/commands/init.ts
 var execFileAsync = promisify2(execFile2);
-var HAIVE_GITHUB_ACTION_REF = `v${"0.42.1"}`;
+var HAIVE_GITHUB_ACTION_REF = `v${"0.44.0"}`;
 var PROJECT_CONTEXT_TEMPLATE = `# Project context
 
 > Generated by \`hivelore init\`. Run \`hivelore init --bootstrap\` to auto-fill from your codebase,
@@ -5259,7 +5259,7 @@ Wait for **explicit confirmation** before acting.
           )
         );
       } catch {
-        ui.warn("--embed: @hivelore/embeddings not available or index build failed. Run `hivelore embeddings index` manually.");
+        ui.warn("--embed: @hivelore/embeddings not available or index build failed. Install it, then run `hivelore index memories`.");
       }
     }
   });
@@ -6974,6 +6974,7 @@ import {
   loadConfig as loadConfig6,
   loadMemoriesFromDir as loadMemoriesFromDir10,
   loadPreventionEvents,
+  readUsageEvents,
   loadUsageIndex as loadUsageIndex11,
   memoryFilePath as memoryFilePath5,
   renderCaughtForYou,
@@ -7226,6 +7227,14 @@ async function observationStart(paths) {
   }
   return first;
 }
+async function manualSessionStart(paths) {
+  const events = await readUsageEvents(paths);
+  for (let index = events.length - 1; index >= 0; index--) {
+    const event = events[index];
+    if (["get_briefing", "briefing", "session_start", "enforce_session_start"].includes(event.tool)) return event.at;
+  }
+  return null;
+}
 async function printCaughtForYou(paths, since, quiet) {
   if (quiet) return;
   const memories = existsSync32(paths.memoriesDir) ? await loadMemoriesFromDir10(paths.memoriesDir) : [];
@@ -7275,7 +7284,7 @@ function registerSessionEnd(session2) {
     let resolvedFiles = opts.files;
     let goal = opts.goal;
     let accomplished = opts.accomplished ?? opts.summary;
-    const caughtSince = opts.auto ? await observationStart(paths) : null;
+    const caughtSince = opts.auto ? await observationStart(paths) : await manualSessionStart(paths);
     if (opts.auto) {
       const autoCaptured = await autoCaptureFailureLessons(paths, root, await readObservationList(paths)).catch(() => ({ written: 0, ids: [] }));
       const synth = await buildAutoRecap(paths);
@@ -7416,7 +7425,7 @@ import {
   loadUsageIndex as loadUsageIndex12,
   loadPreventionEvents as loadPreventionEvents2,
   parseSince,
-  readUsageEvents,
+  readUsageEvents as readUsageEvents2,
   renderPreventionReceiptShare,
   resolveHaivePaths as resolveHaivePaths27,
   usageLogSize
@@ -7465,7 +7474,7 @@ function registerStats(program2) {
       );
       return;
     }
-    const events = await readUsageEvents(paths);
+    const events = await readUsageEvents2(paths);
     const since = parseSince(opts.since);
     const aggregate = aggregateUsage(events, since ?? void 0);
     if (opts.json) {
@@ -7501,7 +7510,7 @@ function registerStats(program2) {
 async function writeRoiReport(paths, root, sinceRaw, outRelative) {
   const outAbs = path30.isAbsolute(outRelative) ? path30.resolve(outRelative) : path30.resolve(root, outRelative);
   const size = await usageLogSize(paths);
-  let events = await readUsageEvents(paths);
+  let events = await readUsageEvents2(paths);
   let memoryCount = { team: 0, personal: 0, total_skipped_session: 0 };
   if (existsSync33(paths.memoriesDir)) {
     const mems = await loadMemoriesFromDir11(paths.memoriesDir);
@@ -7666,7 +7675,7 @@ function registerBench(program2) {
       },
       async () => {
         const t0 = performance.now();
-        const out = await antiPatternsCheck({ diff: task, paths: [], limit: 5, semantic: true }, ctx);
+        const out = await antiPatternsCheck({ diff: task, paths: [], limit: 5, semantic: true, track: false }, ctx);
         return summarize("anti_patterns_check", t0, out, [
           `${out.warnings.length}/${out.scanned} warn`
         ]);
@@ -7757,7 +7766,9 @@ function registerBenchmark(program2) {
       "   - Hivelore agents must run `hivelore briefing --files ... --task ...` first.",
       "   - Plain agents must not read `.ai` or call Hivelore.",
       "5. Require every agent to write `BENCHMARK_AGENT_REPORT.md`.",
+      "   Its `## Outcome` section must include: Task completed, Tests passed, Policy violations, Duration seconds, Total tokens, Runner ID, Evaluator ID, Independent evaluation.",
       "6. Run `hivelore benchmark report --dir <benchmark-root> --out RESULTS.md`.",
+      "7. Do not make comparative claims until evidence_grade=decision-ready (>=10 paired tasks with complete outcomes).",
       "",
       "Recommended metrics: pass rate, test iterations, files read, files changed, visible artifacts, decision quality, and token proxy."
     ].join("\n"));
@@ -7795,15 +7806,35 @@ function parseAgentReport(fixture, report) {
     terminal_failures: countMatches(section(report, "Terminal Errors"), /fail|error|not raised|exited with code 1/gi),
     decision_mentions: sectionBulletCount(report, "Key Decisions"),
     report_tokens_est: estimateTokens2(report),
-    haive_impact: /Hivelore Memory Impact[\s\S]*?\b(yes|directly|changed|shaped|confirmed)\b/i.test(report)
+    haive_impact: /Hivelore Memory Impact[\s\S]*?\b(yes|directly|changed|shaped|confirmed)\b/i.test(report),
+    task_completed: reportBoolean(report, "Task completed"),
+    tests_passed: reportBoolean(report, "Tests passed"),
+    policy_violations: reportNumber(report, "Policy violations"),
+    duration_seconds: reportNumber(report, "Duration seconds"),
+    total_tokens: reportNumber(report, "Total tokens"),
+    runner_id: reportValue(report, "Runner ID"),
+    evaluator_id: reportValue(report, "Evaluator ID"),
+    independent_evaluation: reportBoolean(report, "Independent evaluation")
   };
 }
 function summarizeRows(rows) {
   const byGroup = (group) => rows.filter((r) => r.group === group);
+  const haiveRows = byGroup("haive");
+  const plainRows = byGroup("plain");
+  const taskName = (fixture) => fixture.replace(/-(haive|plain)$/, "");
+  const plainTasks = new Set(plainRows.map((row) => taskName(row.fixture)));
+  const pairedTasks = new Set(haiveRows.map((row) => taskName(row.fixture)).filter((name) => plainTasks.has(name))).size;
+  const outcomeComplete = rows.length > 0 && rows.every(
+    (row) => row.task_completed !== null && row.tests_passed !== null && row.policy_violations !== null && row.duration_seconds !== null && row.total_tokens !== null && row.runner_id !== null && row.evaluator_id !== null && row.evaluator_id !== row.runner_id && row.independent_evaluation === true
+  );
+  const decisionReady = pairedTasks >= 10 && outcomeComplete;
   return {
     fixtures: rows.length,
-    haive: summarizeGroup(byGroup("haive")),
-    plain: summarizeGroup(byGroup("plain"))
+    paired_tasks: pairedTasks,
+    evidence_grade: decisionReady ? "decision-ready" : "insufficient",
+    evidence_reason: decisionReady ? "At least 10 paired tasks with complete outcomes reviewed by an evaluator distinct from the runner." : `Need >=10 paired tasks, complete Outcome fields, and independent evaluator attestations; found ${pairedTasks} pair(s), outcome_complete=${outcomeComplete}.`,
+    haive: summarizeGroup(haiveRows),
+    plain: summarizeGroup(plainRows)
   };
 }
 function summarizeGroup(rows) {
@@ -7817,7 +7848,12 @@ function summarizeGroup(rows) {
     terminal_failures: sum("terminal_failures"),
     decision_mentions: sum("decision_mentions"),
     report_tokens_est: sum("report_tokens_est"),
-    haive_impact_count: rows.filter((r) => r.haive_impact).length
+    haive_impact_count: rows.filter((r) => r.haive_impact).length,
+    completed: rows.filter((r) => r.task_completed === true).length,
+    tests_passed: rows.filter((r) => r.tests_passed === true).length,
+    policy_violations: rows.reduce((total, row) => total + (row.policy_violations ?? 0), 0),
+    duration_seconds: rows.reduce((total, row) => total + (row.duration_seconds ?? 0), 0),
+    total_tokens: rows.reduce((total, row) => total + (row.total_tokens ?? 0), 0)
   };
 }
 function renderMarkdown(root, summary, rows) {
@@ -7828,6 +7864,8 @@ function renderMarkdown(root, summary, rows) {
     "",
     "## Summary",
     "",
+    `Evidence grade: **${summary.evidence_grade}** \u2014 ${summary.evidence_reason}`,
+    "",
     "| Group | Fixtures | Commands | Files read | Files modified | Test iterations | Terminal failures | Decision mentions | Report tokens (est, report only) | Hivelore impact |",
     "| --- | ---: | ---: | ---: | ---: | ---: | ---: | ---: | ---: | ---: |",
     groupLine("Hivelore", summary.haive),
@@ -7851,6 +7889,23 @@ function renderMarkdown(root, summary, rows) {
   ];
   return lines.join("\n");
 }
+function reportValue(report, label) {
+  const match = new RegExp(`^[-*]\\s*${escapeRegExp(label)}\\s*:\\s*(.+)$`, "im").exec(report);
+  return match?.[1]?.trim() ?? null;
+}
+function reportBoolean(report, label) {
+  const value = reportValue(report, label);
+  if (!value) return null;
+  if (/^(yes|true|pass|passed|complete|completed)$/i.test(value)) return true;
+  if (/^(no|false|fail|failed|incomplete)$/i.test(value)) return false;
+  return null;
+}
+function reportNumber(report, label) {
+  const value = reportValue(report, label);
+  if (!value) return null;
+  const parsed = Number(value.replace(/,/g, ""));
+  return Number.isFinite(parsed) ? parsed : null;
+}
 function groupLine(label, group) {
   return `| ${label} | ${group.fixtures} | ${group.commands} | ${group.files_read} | ${group.files_modified} | ${group.test_iterations} | ${group.terminal_failures} | ${group.decision_mentions} | ${group.report_tokens_est} | ${group.haive_impact_count} |`;
 }
@@ -7898,7 +7953,7 @@ import {
 function registerEval(program2) {
   program2.command("eval").description(
     "Rigorous, repeatable quality eval: do the right memories surface (retrieval) and do the right sensors fire (catch-rate)? Emits a numeric 0\u2013100 score. Uses .ai/eval cases via --spec, or auto-synthesizes cases from anchored memories."
-  ).option("--spec <file>", "JSON eval spec ({ retrieval: [...], sensors: [...] })").option("--semantic-only", "self-eval probes by title alone (no anchor files) \u2014 harder retrieval", false).option("-k, --top <n>", "briefing top-k considered a hit", "8").option("--json", "emit JSON", false).option("--out <file>", "write a Markdown report").option("--fail-under <score>", "exit non-zero if the overall score is below this (0\u2013100) \u2014 for CI gates").option("--fail-under-catch-rate <pct>", "exit non-zero if sensor catch-rate is below this percentage").option("--fail-under-gate-precision <pct>", "exit non-zero if gate precision is below this percentage").option("--baseline", "save this run as the baseline (.ai/eval/baseline.json) for future --compare", false).option("--compare", "diff this run against the saved baseline and print the delta", false).option("--baseline-file <path>", "baseline file to read/write (default: .ai/eval/baseline.json)").option("--fail-on-regression", "with --compare, exit non-zero if the score dropped vs the baseline", false).option("--regression-gate", "CI-safe gate: compare against the baseline IF one exists (fail on regression), else no-op", false).option("--approve-cases", "approve every proposed golden case (gate-miss labeled) into the scored retrieval set, then exit", false).option("--record", "append this run's score to .ai/.cache/eval-history.jsonl (trend the harness over time)", false).option("--trend", "print the recorded score trend (sparkline + latest/best/delta) and exit", false).option("--ref <ref>", "version/commit label stored with a --record run").option("-d, --dir <dir>", "project root").action(async (opts) => {
+  ).option("--spec <file>", "JSON eval spec ({ retrieval: [...], sensors: [...] })").option("--semantic-only", "self-eval probes by title alone (no anchor files) \u2014 harder retrieval", false).option("--semantic-ranking", "run the real embeddings-backed ranking lane; fails if embeddings/index are unavailable", false).option("-k, --top <n>", "briefing top-k considered a hit", "8").option("--json", "emit JSON", false).option("--out <file>", "write a Markdown report").option("--fail-under <score>", "exit non-zero if the overall score is below this (0\u2013100) \u2014 for CI gates").option("--fail-under-catch-rate <pct>", "exit non-zero if sensor catch-rate is below this percentage").option("--fail-under-gate-precision <pct>", "exit non-zero if gate precision is below this percentage").option("--baseline", "save this run as the baseline (.ai/eval/baseline.json) for future --compare", false).option("--compare", "diff this run against the saved baseline and print the delta", false).option("--baseline-file <path>", "baseline file to read/write (default: .ai/eval/baseline.json)").option("--fail-on-regression", "with --compare, exit non-zero if the score dropped vs the baseline", false).option("--regression-gate", "CI-safe gate: compare against the baseline IF one exists (fail on regression), else no-op", false).option("--approve-cases", "approve every proposed golden case (gate-miss labeled) into the scored retrieval set, then exit", false).option("--record", "append this run's score to .ai/.cache/eval-history.jsonl (trend the harness over time)", false).option("--trend", "print the recorded score trend (sparkline + latest/best/delta) and exit", false).option("--ref <ref>", "version/commit label stored with a --record run").option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot31(opts.dir);
     const paths = resolveHaivePaths29(root);
     if (!existsSync35(paths.memoriesDir)) {
@@ -7960,8 +8015,15 @@ function registerEval(program2) {
     if (spec.retrieval && spec.retrieval.length > 0) {
       const results = [];
       for (const c of spec.retrieval) {
-        const surfaced = await runRetrieval(c, k, ctx);
-        results.push(scoreRetrievalCase(c.name, c.expect_ids, surfaced));
+        const retrieval = await runRetrieval(c, k, ctx, opts.semanticRanking === true);
+        if (opts.semanticRanking && retrieval.searchMode !== "semantic") {
+          ui.error(
+            "Semantic eval requested, but the embeddings package/index is unavailable. Install @hivelore/embeddings and run `hivelore index memories` first."
+          );
+          process.exitCode = 1;
+          return;
+        }
+        results.push(scoreRetrievalCase(c.name, c.expect_ids, retrieval.ids));
       }
       retrievalAgg = aggregateRetrieval(results);
     }
@@ -7978,6 +8040,8 @@ function registerEval(program2) {
     const authoredRetrievalCases = retrievalAgg ? retrievalAgg.cases.slice(resolvedSpec.synthesized) : [];
     const authoredRetrievalAgg = authoredRetrievalCases.length > 0 ? aggregateRetrieval(authoredRetrievalCases) : null;
     const authoredScore = resolvedSpec.authored > 0 && resolvedSpec.synthesized > 0 && (authoredRetrievalAgg || sensorAgg) ? overallScore(authoredRetrievalAgg, sensorAgg) : null;
+    const authoredReport = resolvedSpec.authored > 0 && (authoredRetrievalAgg || sensorAgg) ? buildReport(authoredRetrievalAgg, sensorAgg) : null;
+    const gateReport = authoredReport ?? report;
     const [usage, preventionEvents, config] = await Promise.all([
       loadUsageIndex13(paths),
       loadPreventionEvents3(paths),
@@ -7999,13 +8063,14 @@ function registerEval(program2) {
       });
       if (!opts.json) ui.success(`Recorded eval score ${report.score}/100 to history.`);
     }
-    const baselineFile = opts.baselineFile ? path32.isAbsolute(opts.baselineFile) ? opts.baselineFile : path32.join(root, opts.baselineFile) : path32.join(root, ".ai", "eval", "baseline.json");
+    const baselineFile = opts.baselineFile ? path32.isAbsolute(opts.baselineFile) ? opts.baselineFile : path32.join(root, opts.baselineFile) : path32.join(root, ".ai", "eval", opts.semanticRanking ? "semantic-baseline.json" : "baseline.json");
     if (opts.baseline) {
       const snapshot = {
         saved_at: (/* @__PURE__ */ new Date()).toISOString(),
         k,
         spec_source: resolvedSpec.source,
         report,
+        ...authoredReport ? { authored_report: authoredReport } : {},
         gate_precision: gatePrecision
       };
       await mkdir13(path32.dirname(baselineFile), { recursive: true });
@@ -8025,7 +8090,7 @@ function registerEval(program2) {
         }
       } else {
         const snapshot = JSON.parse(await readFile15(baselineFile, "utf8"));
-        delta = compareEvalReports(snapshot.report, report);
+        delta = compareEvalReports(snapshot.authored_report ?? snapshot.report, gateReport);
         if (snapshot.gate_precision) {
           gateDelta = compareGatePrecision(snapshot.gate_precision, gatePrecision);
         }
@@ -8035,6 +8100,7 @@ function registerEval(program2) {
       console.log(JSON.stringify({
         root,
         k,
+        ranking_mode: opts.semanticRanking ? "semantic" : "deterministic",
         spec_source: resolvedSpec.source,
         provenance: {
           synthesized: resolvedSpec.synthesized,
@@ -8042,6 +8108,7 @@ function registerEval(program2) {
           ...authoredScore !== null ? { authored_score: authoredScore } : {}
         },
         report,
+        ...authoredReport ? { authored_report: authoredReport } : {},
         tier_contract: { checks: tierChecks, failures: tierFailures.length },
         proposed_golden_cases: proposedGoldenCount,
         gate_precision: gatePrecision,
@@ -8049,7 +8116,7 @@ function registerEval(program2) {
         ...gateDelta ? { gate_delta: gateDelta } : {}
       }, null, 2));
       if (tierFailures.length > 0) process.exitCode = 1;
-      applyExitGates(opts, report, delta, gatePrecision, gateDelta);
+      applyExitGates(opts, gateReport, delta, gatePrecision, gateDelta);
       return;
     }
     if (resolvedSpec.authored === 0 && resolvedSpec.synthesized > 0) {
@@ -8083,7 +8150,7 @@ function registerEval(program2) {
       console.log(md);
     }
     if (tierFailures.length > 0) process.exitCode = 1;
-    applyExitGates(opts, report, delta, gatePrecision, gateDelta);
+    applyExitGates(opts, gateReport, delta, gatePrecision, gateDelta);
   });
 }
 function parsePctThreshold(label, raw) {
@@ -8172,7 +8239,7 @@ async function resolveSpec(opts, root, memoriesDir) {
   if (existsSync35(defaultSpec)) {
     const raw = await readFile15(defaultSpec, "utf8");
     const explicit = JSON.parse(raw);
-    const memories2 = await loadMemoriesFromDir(memoriesDir);
+    const memories2 = (await loadMemoriesFromDir(memoriesDir)).filter(({ memory: memory2 }) => memory2.frontmatter.scope !== "personal");
     const synthesized2 = synthesizeSelfEvalCases(memories2, { includeFiles: !opts.semanticOnly });
     return {
       spec: {
@@ -8184,7 +8251,7 @@ async function resolveSpec(opts, root, memoriesDir) {
       authored: countCases(explicit)
     };
   }
-  const memories = await loadMemoriesFromDir(memoriesDir);
+  const memories = (await loadMemoriesFromDir(memoriesDir)).filter(({ memory: memory2 }) => memory2.frontmatter.scope !== "personal");
   const synthesized = synthesizeSelfEvalCases(memories, { includeFiles: !opts.semanticOnly });
   return {
     spec: { retrieval: synthesized },
@@ -8193,7 +8260,7 @@ async function resolveSpec(opts, root, memoriesDir) {
     authored: 0
   };
 }
-async function runRetrieval(c, k, ctx) {
+async function runRetrieval(c, k, ctx, semanticRanking = false) {
   const out = await getBriefing(
     {
       task: c.task,
@@ -8206,16 +8273,18 @@ async function runRetrieval(c, k, ctx) {
       semantic: true,
       include_stale: false,
       track: false,
+      memory_scopes: ["team", "module"],
+      deterministic: !semanticRanking,
       format: "compact",
       min_semantic_score: 0
     },
     ctx
   );
-  return out.memories.map((m) => m.id);
+  return { ids: out.memories.map((m) => m.id), searchMode: out.search_mode };
 }
 async function runSensorCase(c, ctx) {
   const out = await antiPatternsCheck(
-    { diff: c.diff, paths: c.paths ?? [], limit: 50, semantic: false },
+    { diff: c.diff, paths: c.paths ?? [], limit: 50, semantic: false, track: false },
     ctx
   );
   return out.warnings.filter((w) => w.reasons.includes("sensor")).map((w) => w.id);
@@ -8308,7 +8377,7 @@ import {
   loadMemoriesFromDir as loadMemoriesFromDir12,
   memoryFilePath as memoryFilePath6,
   parseSince as parseSince2,
-  readUsageEvents as readUsageEvents2,
+  readUsageEvents as readUsageEvents3,
   resolveHaivePaths as resolveHaivePaths30,
   serializeMemory as serializeMemory13,
   suggestTopicKey
@@ -8339,7 +8408,7 @@ function registerMemorySuggest(memory2) {
     }
     const root = findProjectRoot32(opts.dir);
     const paths = resolveHaivePaths30(root);
-    const events = await readUsageEvents2(paths);
+    const events = await readUsageEvents3(paths);
     if (events.length === 0) {
       if (opts.json) {
         console.log(JSON.stringify({ suggestions: [] }));
@@ -8729,7 +8798,7 @@ import {
   loadMemoriesFromDirDetailed,
   loadSensorLedger as loadSensorLedger2,
   loadUsageIndex as loadUsageIndex15,
-  readUsageEvents as readUsageEvents3,
+  readUsageEvents as readUsageEvents4,
   resolveHaivePaths as resolveHaivePaths33
 } from "@hivelore/core";
 
@@ -8978,14 +9047,15 @@ function registerDoctor(program2) {
       }
     }
     const lintReport = await lintMemoriesAsync(root);
-    if (lintReport.findings.length > 0) {
+    const actionableLintFindings = lintReport.findings.filter((finding) => finding.severity !== "info");
+    if (actionableLintFindings.length > 0) {
       const warnCount = lintReport.findings.filter((finding) => finding.severity === "warn").length;
       const errorCount = lintReport.findings.filter((finding) => finding.severity === "error").length;
       const severity = errorCount > 0 ? "error" : warnCount > 0 ? "warn" : "info";
       findings.push({
         severity,
         code: "memory-lint-findings",
-        message: `memory lint reports ${lintReport.findings.length} finding${lintReport.findings.length === 1 ? "" : "s"} (${errorCount} error, ${warnCount} warn, ${lintReport.findings.length - errorCount - warnCount} info).`,
+        message: `memory lint reports ${actionableLintFindings.length} actionable finding${actionableLintFindings.length === 1 ? "" : "s"} (${errorCount} error, ${warnCount} warn).`,
         fix: "hivelore memory lint --fix --apply"
       });
     }
@@ -9026,9 +9096,35 @@ function registerDoctor(program2) {
         fix: "hivelore sensors list   # then `hivelore sensors promote <id>` for a trusted, non-brittle sensor \u2014 or retire the noise"
       });
     }
+    const commandSensorMemories = sensorMemories.filter((m) => {
+      const kind = m.memory.frontmatter.sensor?.kind;
+      return kind === "shell" || kind === "test";
+    });
+    if (commandSensorMemories.length > 0 && config.enforcement?.runCommandSensors !== true) {
+      findings.push({
+        severity: "error",
+        code: "command-sensors-disabled",
+        section: "Protection",
+        message: `${commandSensorMemories.length} command/test sensor(s) exist but enforcement.runCommandSensors is not true \u2014 their behaviour protection is OFF.`,
+        fix: "Set enforcement.runCommandSensors=true after reviewing the repo-authored commands."
+      });
+    }
+    const unprovenBlocks = commandSensorMemories.filter((m) => {
+      const sensor = m.memory.frontmatter.sensor;
+      return sensor.severity === "block" && sensor.red_proven !== true;
+    });
+    if (unprovenBlocks.length > 0) {
+      findings.push({
+        severity: "error",
+        code: "command-sensors-block-without-red",
+        section: "Protection",
+        message: `${unprovenBlocks.length} blocking command/test sensor(s) predate mandatory prove-RED and cannot substantiate their incident claim.`,
+        fix: "Re-propose each sensor with --red-ref <pre-fix-commit>, or demote it to warn."
+      });
+    }
     const astSensorCount = sensorMemories.filter((m) => m.memory.frontmatter.sensor?.kind === "ast").length;
     if (astSensorCount > 0) {
-      const { astEngineAvailable: astEngineAvailable2 } = await import("./server-PZWIQUU7.js");
+      const { astEngineAvailable: astEngineAvailable2 } = await import("./server-MCNCAFJN.js");
       if (!await astEngineAvailable2()) {
         findings.push({
           severity: "warn",
@@ -9111,7 +9207,7 @@ function registerDoctor(program2) {
         });
       }
       const onDisk = await countSourceFilesOnDisk(root);
-      if (onDisk >= 20 && indexedCount < onDisk * 0.5) {
+      if (isCodeMapNearEmpty(indexedCount, onDisk)) {
         findings.push({
           severity: "warn",
           code: "code-map-near-empty",
@@ -9134,7 +9230,7 @@ function registerDoctor(program2) {
       }
     } catch {
     }
-    const events = await readUsageEvents3(paths);
+    const events = await readUsageEvents4(paths);
     if (events.length === 0) {
       findings.push({
         severity: "info",
@@ -9198,7 +9294,8 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `hivelore init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.42.1"));
+    findings.push(...await collectInstallFindings(root, "0.44.0"));
+    findings.push(...await collectMcpRuntimeFindings(paths, "0.44.0"));
     findings.push(...await collectToolchainFindings(root));
     try {
       const legacyRaw = execSync("haive-mcp --version", {
@@ -9206,7 +9303,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.42.1";
+      const cliVersion = "0.44.0";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -9262,6 +9359,39 @@ npm uninstall -g @hivelore/mcp`
     emit(findings, opts, repairs);
   });
 }
+function isCodeMapNearEmpty(indexedCount, sourceFilesOnDisk) {
+  return sourceFilesOnDisk >= 20 && indexedCount < sourceFilesOnDisk * 0.05;
+}
+function mcpRuntimeVersionFinding(marker, expectedVersion, processAlive) {
+  if (!processAlive || !marker.version || marker.version === expectedVersion) return null;
+  return {
+    severity: "warn",
+    code: "active-mcp-server-stale",
+    message: `An active MCP server is still v${marker.version} while the installed CLI is v${expectedVersion}. MCP clients keep server processes alive across package upgrades.`,
+    fix: "Restart the IDE/agent MCP client, then confirm get_briefing.server_version matches `hivelore --version`.",
+    section: "Agent coverage"
+  };
+}
+async function collectMcpRuntimeFindings(paths, expectedVersion) {
+  const markerFile = path37.join(paths.runtimeDir, "mcp-server.json");
+  if (!existsSync40(markerFile)) return [];
+  try {
+    const marker = JSON.parse(await readFile16(markerFile, "utf8"));
+    let alive = false;
+    if (typeof marker.pid === "number") {
+      try {
+        process.kill(marker.pid, 0);
+        alive = true;
+      } catch {
+        alive = false;
+      }
+    }
+    const finding = mcpRuntimeVersionFinding(marker, expectedVersion, alive);
+    return finding ? [finding] : [];
+  } catch {
+    return [];
+  }
+}
 function emit(findings, opts, repairs = []) {
   const classified = findings.map((finding) => ({
     ...finding,
@@ -9441,7 +9571,7 @@ async function collectSemanticIndexFindings(paths, config, memoryCount, codeMap)
       severity: autoWantsCodeSearch ? "warn" : "info",
       code: "embeddings-unavailable",
       message: "@hivelore/embeddings is not available, so get_briefing falls back to lexical ranking and code_search cannot run.",
-      fix: "npm install -g @hivelore/cli@latest\nhaive embeddings status",
+      fix: "npm install -g @hivelore/embeddings@latest\nhivelore index status",
       section: "Index health"
     });
     return findings;
@@ -9453,7 +9583,7 @@ async function collectSemanticIndexFindings(paths, config, memoryCount, codeMap)
         severity: "warn",
         code: "semantic-memory-index-missing",
         message: "Memory embeddings index is missing or empty; get_briefing will report literal_fallback instead of semantic ranking.",
-        fix: "hivelore embeddings index",
+        fix: "hivelore index memories",
         section: "Index health"
       });
     }
@@ -10889,7 +11019,7 @@ async function checkBootstrapComplete(paths, config, productionCodeChanged) {
   }
   const memories = existsSync42(paths.memoriesDir) ? await loadMemoriesFromDir15(paths.memoriesDir) : [];
   const codeMap = await loadCodeMap7(paths);
-  const codeFiles = codeMap ? Object.keys(codeMap.files) : [];
+  const codeFiles = codeMap ? Object.keys(codeMap.files).filter((file) => existsSync42(path40.join(paths.root, file))) : [];
   let existingModules = [];
   try {
     const entries = await readdir4(paths.modulesContextDir, { withFileTypes: true });
@@ -10953,7 +11083,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "Hivelore enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.42.1"));
+  findings.push(...await inspectIntegrationVersions(root, "0.44.0"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent Hivelore briefing marker exists." } : {
@@ -10987,7 +11117,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
     findings.push(...await verifyDecisionCoverage(paths, stage, sessionId));
   }
   if (stage === "pre-commit" || stage === "ci") {
-    findings.push(...await runPrecommitPolicy(paths, config.enforcement?.antiPatternGate ?? "anchored", stage));
+    findings.push(...await runPrecommitPolicy(paths, config.enforcement?.antiPatternGate ?? "anchored", stage, config));
   } else if (stage === "local") {
     findings.push({
       severity: "info",
@@ -11194,17 +11324,28 @@ async function verifyDecisionCoverage(paths, stage, sessionId) {
     impact: Math.min(35, 10 + missing.length * 5)
   }];
 }
-async function runPrecommitPolicy(paths, gate, stage) {
+async function runPrecommitPolicy(paths, gate, stage, config) {
   const snapshot = await getPolicyDiffSnapshot(paths.root, stage);
-  const weakenings = detectSensorWeakening(snapshot.diff);
+  const weakeningApprovals = await resolveSensorWeakeningApprovals(paths.root, stage);
+  const detectedWeakenings = detectSensorWeakening(snapshot.diff);
+  const weakenings = detectedWeakenings.filter((weakening) => !weakeningApprovals.has(weakening.memory_id));
+  const approvedWeakenings = detectedWeakenings.filter((weakening) => weakeningApprovals.has(weakening.memory_id));
   const weakeningFindings = weakenings.length > 0 ? [{
-    severity: "warn",
+    severity: config.enforcement?.sensorWeakeningGate === "block" ? "error" : "warn",
     code: "sensor-weakened",
     message: `This diff weakens the enforcement surface \u2014 ${weakenings.length} sensor change(s) need review: ` + weakenings.slice(0, 5).map((w) => `${w.memory_id} (${w.change}: ${w.detail})`).join(", ") + (weakenings.length > 5 ? ", \u2026" : "") + ".",
-    fix: "If the demotion/removal is intentional, say so in the commit message; otherwise restore the sensor (`hivelore sensors list` shows the current state).",
+    fix: "If intentional, add `Hivelore-Sensor-Change: <memory-id>` to the commit message and set `HIVELORE_SENSOR_WEAKENING_APPROVALS=<memory-id>` for the local commit hook; otherwise restore the sensor.",
     memory_ids: [...new Set(weakenings.map((w) => w.memory_id))].slice(0, 10),
-    impact: 8
+    impact: config.enforcement?.sensorWeakeningGate === "block" ? 30 : 8
   }] : [];
+  if (approvedWeakenings.length > 0) {
+    weakeningFindings.push({
+      severity: "ok",
+      code: "sensor-weakening-approved",
+      message: `Reviewed sensor change(s) approved for ${[...new Set(approvedWeakenings.map((w) => w.memory_id))].join(", ")}.`,
+      memory_ids: [...new Set(approvedWeakenings.map((w) => w.memory_id))]
+    });
+  }
   if (gate === "off") {
     return [
       { severity: "info", code: "precommit-policy-off", message: "Anti-pattern gate is disabled (enforcement.antiPatternGate=off)." },
@@ -11290,6 +11431,28 @@ async function runPrecommitPolicy(paths, gate, stage) {
     ...weakeningFindings
   ];
 }
+function parseSensorWeakeningApprovals(text) {
+  const approved = /* @__PURE__ */ new Set();
+  if (!text) return approved;
+  const trailer = /^Hivelore-Sensor-Change:\s*(.+)$/gmi;
+  for (const match of text.matchAll(trailer)) {
+    for (const id of (match[1] ?? "").split(/[\s,]+/)) if (id) approved.add(id);
+  }
+  if (!text.includes("Hivelore-Sensor-Change:")) {
+    for (const id of text.split(/[\s,]+/)) if (id) approved.add(id);
+  }
+  return approved;
+}
+async function resolveSensorWeakeningApprovals(root, stage) {
+  const approved = parseSensorWeakeningApprovals(process.env["HIVELORE_SENSOR_WEAKENING_APPROVALS"]);
+  if (stage !== "ci") return approved;
+  try {
+    const { stdout } = await execFileAsync2("git", ["log", "-1", "--pretty=%B"], { cwd: root });
+    for (const id of parseSensorWeakeningApprovals(stdout)) approved.add(id);
+  } catch {
+  }
+  return approved;
+}
 async function stagedFileContent(root, rel) {
   try {
     return await runCommand2("git", ["show", `:${rel}`], root);
@@ -11367,7 +11530,7 @@ async function runSensorGate(paths, diff, stage) {
       } else {
         for (const memory2 of astSensorMemories) {
           const sensor = memory2.frontmatter.sensor;
-          if (!sensor.pattern) continue;
+          if (!sensor.pattern && !sensor.rule) continue;
           const applicable = targets.filter((t) => sensorAppliesToPath2(sensor, memory2.frontmatter.anchor.paths, t.path));
           if (applicable.length === 0) continue;
           let fired = false;
@@ -11378,6 +11541,8 @@ async function runSensorGate(paths, diff, stage) {
             if (content === null) continue;
             const scan = await runAstSensorOnContent({
               pattern: sensor.pattern,
+              rule: sensor.rule,
+              language: sensor.language,
               absent: sensor.absent,
               content,
               filePath: target.path,
@@ -11422,7 +11587,7 @@ async function runSensorGate(paths, diff, stage) {
         }
       }
     }
-    const config = await loadConfig12(paths).catch(() => null);
+    const config = await loadConfig12(paths).catch(() => ({}));
     if (config?.enforcement?.runCommandSensors === true) {
       const changedPaths = targets.map((t) => t.path).filter(Boolean);
       const specs = selectCommandSensors(scannable, changedPaths).filter((sp) => !seen.has(sp.memory_id));
@@ -11460,13 +11625,14 @@ async function runSensorGate(paths, diff, stage) {
         if (run.status === "passed") continue;
         seen.add(run.memory_id);
         if (run.status === "unrunnable") {
+          const strictUnrunnable = config.enforcement?.commandSensorUnrunnable === "block";
           findings.push({
-            severity: "warn",
+            severity: strictUnrunnable ? "error" : "warn",
             code: "command-sensor-unrunnable",
             message: `Command sensor ${run.memory_id} could not run (${run.unrunnable_reason}): \`${run.command}\`` + (run.output_tail ? `
 ${run.output_tail}` : ""),
             fix: "Fix the sensor's command (or its timeout_ms), or demote it: `hivelore sensors promote <id> --severity warn`.",
-            impact: 5
+            impact: strictUnrunnable ? 35 : 5
           });
           continue;
         }
@@ -12564,6 +12730,14 @@ import {
   withoutQuarantineNote
 } from "@hivelore/core";
 var exec5 = promisify7(execFile7);
+function rejectProposal(opts, reason, guidance) {
+  if (opts.json) console.log(JSON.stringify({ accepted: false, reason, guidance }, null, 2));
+  else {
+    ui.error(`Rejected (${reason}).`);
+    ui.warn(guidance);
+  }
+  process.exitCode = 1;
+}
 function registerSensors(program2) {
   const sensors = program2.command("sensors").description("Operate executable sensors derived from Hivelore memories");
   sensors.command("list").description("List memories carrying executable sensors").option("--json", "emit JSON", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
@@ -12589,6 +12763,7 @@ function registerSensors(program2) {
       );
       if ("absent" in row && row.absent) console.log(`     ${ui.dim("only when missing:")} ${row.absent}`);
       if (row.paths.length > 0) console.log(`     ${ui.dim("paths:")} ${row.paths.join(", ")}`);
+      if (row.red_proven) console.log(`     ${ui.green("\u2713 RED-proven")}${row.incident ? ` \u2014 ${row.incident}` : ""}`);
       if (row.last_fired) console.log(`     ${ui.dim("last fired:")} ${row.last_fired}`);
       if (brittle) console.log(`     ${ui.yellow("\u26A0 brittle:")} ${brittle} \u2014 consider rewriting or retiring this sensor`);
     }
@@ -12603,7 +12778,10 @@ function registerSensors(program2) {
     const targets = scannableSensorTargets(diff);
     const hits = runSensors2(memories, targets);
     const astMemories = (await runnableSensorMemories(paths, false)).filter(
-      (m) => m.frontmatter.sensor?.kind === "ast" && m.frontmatter.sensor.pattern
+      (m) => {
+        const sensor = m.frontmatter.sensor;
+        return sensor?.kind === "ast" && Boolean(sensor.pattern || sensor.rule);
+      }
     );
     const astHits = [];
     let astUnrunnable = 0;
@@ -12631,6 +12809,8 @@ function registerSensors(program2) {
             if (content === null) continue;
             const scan = await runAstSensorOnContent({
               pattern: sensor.pattern,
+              rule: sensor.rule,
+              language: sensor.language,
               absent: sensor.absent,
               content,
               filePath: target.path,
@@ -12798,6 +12978,11 @@ function registerSensors(program2) {
       process.exitCode = 1;
       return;
     }
+    if (severity === "block" && (sensor.kind === "shell" || sensor.kind === "test") && sensor.red_proven !== true) {
+      ui.error("Refusing to promote an unproven command/test oracle to block. Re-propose it with --red-ref <pre-fix-commit>.");
+      process.exitCode = 1;
+      return;
+    }
     const brittle = sensor.kind === "regex" && sensor.pattern ? sensorPatternBrittleness2(sensor.pattern) : null;
     if (severity === "block" && brittle && !opts.force) {
       ui.error(`Refusing to block on a brittle sensor (${brittle}). Rewrite the pattern, or pass --force.`);
@@ -12844,25 +13029,36 @@ function registerSensors(program2) {
   });
   sensors.command("propose").description(
     "Propose a discriminating sensor for a memory \u2014 you write the pattern, Hivelore validates it before\n  trusting it to block. Mirrors the MCP `propose_sensor` tool (the agent-authored path).\n\n  A `block` proposal is accepted ONLY if it is not brittle, stays SILENT on the current code,\n  and FIRES on the bad example. Rejected proposals are not written \u2014 fix and re-run.\n\n  Example:\n    hivelore sensors propose <memory-id> \\\n      --pattern 'stripe\\.paymentIntents\\.create' --absent 'idempotencyKey' \\\n      --bad-example 'stripe.paymentIntents.create({ amount })'"
-  ).argument("<memory-id>", "memory id to attach the sensor to").option("--kind <kind>", "regex (default) | ast (structural \u2014 comments/strings can't false-positive) | shell | test (route the team's own oracle)", "regex").option("--pattern <regex>", "kind=regex: regex matching the FAULTY usage").option("--command <cmd>", "kind=shell|test: command the gate runs when the diff touches the sensor's paths").option("--timeout <ms>", "kind=shell|test: max runtime in ms (default 120000)").option("--absent <regex>", "regex for the CORRECT-usage marker (makes it discriminate)").option("--bad-example <code>", "a snippet that SHOULD match (else examples are read from the lesson)").option("--severity <severity>", "block | warn", "block").option("--message <text>", "fix message shown when it fires").option("--incident <ref>", "provenance: the incident this sensor guards (e.g. 'prod #442') \u2014 shown when it fires and in the receipt").option("--red-ref <ref>", "kind=shell|test: pre-fix commit/ref \u2014 validation replays it in a scratch worktree and requires the oracle to FAIL there (records red_proven)").option("--flags <flags>", "regex flags (e.g. i)").option("--paths <csv>", "override scope paths (defaults to the memory anchors)").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
+  ).argument("<memory-id>", "memory id to attach the sensor to").option("--kind <kind>", "regex (default) | ast (structural \u2014 comments/strings can't false-positive) | shell | test (route the team's own oracle)", "regex").option("--pattern <regex>", "kind=regex: regex matching the FAULTY usage").option("--rule <json>", "kind=ast: full ast-grep Rule JSON (kind/inside/has/not/all/any)").option("--language <name>", "kind=ast: explicit language for non-standard extensions").option("--command <cmd>", "kind=shell|test: command the gate runs when the diff touches the sensor's paths").option("--timeout <ms>", "kind=shell|test: max runtime in ms (default 120000)").option("--absent <regex>", "regex for the CORRECT-usage marker (makes it discriminate)").option("--bad-example <code>", "a snippet that SHOULD match (else examples are read from the lesson)").option("--severity <severity>", "block | warn", "block").option("--message <text>", "fix message shown when it fires").option("--incident <ref>", "provenance: the incident this sensor guards (e.g. 'prod #442') \u2014 shown when it fires and in the receipt").option("--red-ref <ref>", "kind=shell|test: pre-fix commit/ref \u2014 validation replays it in a scratch worktree and requires the oracle to FAIL there (records red_proven)").option("--flags <flags>", "regex flags (e.g. i)").option("--paths <csv>", "override scope paths (defaults to the memory anchors)").option("--json", "emit a machine-readable proposal verdict", false).option("-d, --dir <dir>", "project root").action(async (id, opts) => {
     if (opts.kind === "shell" || opts.kind === "test" || opts.kind === "ast") {
       if ((opts.kind === "shell" || opts.kind === "test") && !opts.command?.trim()) {
-        ui.error("--kind shell|test requires --command.");
-        process.exitCode = 1;
+        rejectProposal(opts, "missing-command", "--kind shell|test requires --command.");
         return;
       }
-      if (opts.kind === "ast" && !opts.pattern?.trim()) {
-        ui.error("--kind ast requires --pattern (an ast-grep structural pattern).");
-        process.exitCode = 1;
+      if (opts.kind === "ast" && !opts.pattern?.trim() && !opts.rule?.trim()) {
+        rejectProposal(opts, "missing-ast-rule", "--kind ast requires --pattern or --rule <json>.");
         return;
       }
+      let astRule;
+      if (opts.rule?.trim()) {
+        try {
+          const parsed = JSON.parse(opts.rule);
+          if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("rule must be a JSON object");
+          astRule = parsed;
+        } catch (err) {
+          rejectProposal(opts, "invalid-ast-rule", `--rule must be valid ast-grep Rule JSON: ${err instanceof Error ? err.message : String(err)}`);
+          return;
+        }
+      }
       const root2 = findProjectRoot39(opts.dir);
-      const { proposeSensor } = await import("./server-PZWIQUU7.js");
+      const { proposeSensor } = await import("./server-MCNCAFJN.js");
       const out = await proposeSensor(
         {
           memory_id: id,
           kind: opts.kind,
-          pattern: opts.kind === "ast" ? opts.pattern.trim() : void 0,
+          pattern: opts.kind === "ast" ? opts.pattern?.trim() : void 0,
+          rule: astRule,
+          language: opts.kind === "ast" ? opts.language : void 0,
           command: opts.command?.trim(),
           timeout_ms: opts.timeout ? Math.max(1, Number(opts.timeout)) : void 0,
           absent: opts.kind === "ast" ? opts.absent : void 0,
@@ -12876,6 +13072,11 @@ function registerSensors(program2) {
         },
         { paths: resolveHaivePaths36(root2) }
       );
+      if (opts.json) {
+        console.log(JSON.stringify(out, null, 2));
+        if (!out.accepted) process.exitCode = 1;
+        return;
+      }
       if (out.accepted) {
         ui.success(`${opts.kind === "ast" ? "AST" : "Command"} sensor accepted (${out.severity}) on ${id}`);
         ui.info(`  ${out.guidance}`);
@@ -12887,8 +13088,7 @@ function registerSensors(program2) {
       return;
     }
     if (!opts.pattern?.trim()) {
-      ui.error("kind=regex requires --pattern.");
-      process.exitCode = 1;
+      rejectProposal(opts, "missing-pattern", "kind=regex requires --pattern.");
       return;
     }
     const severity = opts.severity === "warn" ? "warn" : "block";
@@ -12896,8 +13096,7 @@ function registerSensors(program2) {
       new RegExp(opts.pattern, opts.flags ?? "");
       if (opts.absent) new RegExp(opts.absent, opts.flags ?? "");
     } catch (err) {
-      ui.error(`Invalid regex: ${String(err)}`);
-      process.exitCode = 1;
+      rejectProposal(opts, "invalid-regex", `Invalid regex: ${String(err)}`);
       return;
     }
     const root = findProjectRoot39(opts.dir);
@@ -12905,8 +13104,7 @@ function registerSensors(program2) {
     const loaded = existsSync44(paths.memoriesDir) ? await loadMemoriesFromDir16(paths.memoriesDir) : [];
     const found = loaded.find(({ memory: memory2 }) => memory2.frontmatter.id === id);
     if (!found) {
-      ui.error(`No memory found with id ${id}`);
-      process.exitCode = 1;
+      rejectProposal(opts, "memory-not-found", `No memory found with id ${id}`);
       return;
     }
     const anchorPaths = opts.paths ? opts.paths.split(",").map((s) => s.trim()).filter(Boolean) : found.memory.frontmatter.anchor.paths;
@@ -12928,6 +13126,18 @@ function registerSensors(program2) {
       last_fired: null
     };
     const verdict = judgeProposedSensor(sensor, { currentTargets, badExamples });
+    if (opts.json && !verdict.accepted) {
+      console.log(JSON.stringify({
+        accepted: verdict.accepted,
+        reason: verdict.reason ?? null,
+        severity,
+        memory_id: id,
+        self_check: verdict.self_check,
+        brittle: verdict.brittle
+      }, null, 2));
+      if (!verdict.accepted) process.exitCode = 1;
+      return;
+    }
     if (!verdict.accepted) {
       ui.error(`Rejected (${verdict.reason}).`);
       if (verdict.reason === "fires-on-current") {
@@ -12941,6 +13151,17 @@ function registerSensors(program2) {
       return;
     }
     await writeFile27(found.filePath, serializeMemory15({ frontmatter: { ...found.memory.frontmatter, sensor }, body: found.memory.body }), "utf8");
+    if (opts.json) {
+      console.log(JSON.stringify({
+        accepted: true,
+        reason: null,
+        severity,
+        memory_id: id,
+        self_check: verdict.self_check,
+        brittle: verdict.brittle
+      }, null, 2));
+      return;
+    }
     ui.success(`Sensor accepted (${severity}) on ${id}`);
     ui.info(`pattern=${JSON.stringify(opts.pattern)}${opts.absent ? `  absent=${JSON.stringify(opts.absent)}` : ""}`);
     ui.info(
@@ -13057,10 +13278,14 @@ async function sensorRows(paths) {
       kind: sensor.kind,
       severity: sensor.severity,
       pattern: sensor.pattern,
+      rule: sensor.rule,
+      language: sensor.language,
       absent: sensor.absent,
       command: sensor.command,
       paths: sensor.paths.length > 0 ? sensor.paths : memory2.frontmatter.anchor.paths,
       message: sensor.message,
+      incident: sensor.incident,
+      red_proven: sensor.red_proven === true,
       autogen: sensor.autogen,
       last_fired: sensor.last_fired,
       ...brittle ? { brittle } : {}
@@ -13115,6 +13340,7 @@ import { mkdir as mkdir18, readFile as readFile21, writeFile as writeFile28 } fr
 import path43 from "path";
 import "commander";
 import {
+  appendProposedRetrievalCases as appendProposedRetrievalCases2,
   draftsFromFindings,
   filterNewDrafts,
   findProjectRoot as findProjectRoot40,
@@ -13248,6 +13474,7 @@ function registerIngest(program2) {
       const created2 = [];
       if (!opts.dryRun) {
         for (const draft of fresh) created2.push(await writeDraft(paths, draft));
+        if (format === "github-pr") await appendReviewGoldenCases(root, fresh);
       }
       console.log(
         JSON.stringify(
@@ -13300,6 +13527,7 @@ function registerIngest(program2) {
       await writeDraft(paths, draft);
       created++;
     }
+    if (format === "github-pr") await appendReviewGoldenCases(root, fresh);
     ui.success(`Created ${created} proposed memory(ies) under ${path43.relative(root, paths.memoriesDir)}/`);
     ui.info("Review with `hivelore memory pending`; promote sensors with `hivelore sensors promote <id> --yes`.");
   });
@@ -13310,6 +13538,19 @@ async function writeDraft(paths, draft) {
   await writeFile28(file, serializeMemory16({ frontmatter: draft.frontmatter, body: draft.body }), "utf8");
   return file;
 }
+async function appendReviewGoldenCases(root, drafts) {
+  if (drafts.length === 0) return;
+  const specFile = path43.join(root, ".ai", "eval", "spec.json");
+  const current = existsSync45(specFile) ? await readFile21(specFile, "utf8") : null;
+  const cases = drafts.map((draft) => ({
+    name: `review-learning:${draft.topic}`,
+    task: draft.finding.message,
+    ...draft.finding.path ? { files: [draft.finding.path] } : {},
+    expect_ids: [draft.frontmatter.id]
+  }));
+  await mkdir18(path43.dirname(specFile), { recursive: true });
+  await writeFile28(specFile, appendProposedRetrievalCases2(current, cases), "utf8");
+}
 async function fetchSonarIssues(opts) {
   const baseUrl = (opts.sonarUrl ?? process.env.SONAR_HOST_URL ?? "").trim().replace(/\/+$/, "");
   const token = (opts.sonarToken ?? process.env.SONAR_TOKEN ?? "").trim();
@@ -13356,17 +13597,29 @@ async function fetchPrReviewComments(root, ref) {
   const { promisify: promisify9 } = await import("util");
   const run = promisify9(execFile9);
   try {
-    const { stdout } = await run(
-      "gh",
-      ["api", `repos/{owner}/{repo}/pulls/${prNumber}/comments`, "--paginate"],
-      { cwd: root, maxBuffer: 16 * 1024 * 1024 }
-    );
-    return { ok: true, json: stdout };
+    const fetchPages = async (endpoint) => {
+      const { stdout } = await run(
+        "gh",
+        ["api", endpoint, "--paginate", "--slurp"],
+        { cwd: root, maxBuffer: 16 * 1024 * 1024 }
+      );
+      const pages = JSON.parse(stdout);
+      return Array.isArray(pages) ? pages.flatMap((page) => Array.isArray(page) ? page : []) : [];
+    };
+    const [reviewComments, issueComments] = await Promise.all([
+      fetchPages(`repos/{owner}/{repo}/pulls/${prNumber}/comments`),
+      fetchPages(`repos/{owner}/{repo}/issues/${prNumber}/comments`)
+    ]);
+    const normalizedIssueComments = issueComments.map((row) => ({
+      ...row,
+      pull_request_url: `https://api.github.com/repos/{owner}/{repo}/pulls/${prNumber}`
+    }));
+    return { ok: true, json: JSON.stringify([...reviewComments, ...normalizedIssueComments]) };
   } catch (err) {
     const e = err;
     return {
       ok: false,
-      error: `Could not fetch PR #${prNumber} review comments via gh: ${(e.stderr || e.message || String(err)).slice(0, 200)}. Install/authenticate the gh CLI, or pass a recorded comments JSON file instead.`
+      error: `Could not fetch PR #${prNumber} comments via gh: ${(e.stderr || e.message || String(err)).slice(0, 200)}. Install/authenticate the gh CLI, or pass a recorded comments JSON file instead.`
     };
   }
 }
@@ -13829,7 +14082,7 @@ function registerBridges(program2) {
 
 // src/index.ts
 var program = new Command48();
-program.name("hivelore").description("Hivelore - the deterministic policy gate for agent-written code (rules live as repo-native team memory)").version("0.42.1").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
+program.name("hivelore").description("Hivelore - the deterministic policy gate for agent-written code (rules live as repo-native team memory)").version("0.44.0").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
 registerInit(program);
 registerResolveProject(program);
 registerEnforce(program);