@jmtrin/opencode-kevin 1.2.0 → 1.4.0

package/README.md

@@ -26,7 +26,7 @@ injects exactly what matters back into the model's context, curates the best
 of it into files you control, and shares it across a team through one
 git-friendly file — deterministically, locally, with zero network calls.
 
-![version](https://img.shields.io/badge/version-1.1.0-blue)
+![version](https://img.shields.io/badge/version-1.4.0-blue)
 ![node](https://img.shields.io/badge/node-%E2%89%A522.5-green)
 ![tests](https://img.shields.io/badge/tests-1380%20passing-brightgreen)
 ![deps](https://img.shields.io/badge/runtime%20deps-1-orange)
@@ -48,10 +48,14 @@ git-friendly file — deterministically, locally, with zero network calls.
 - [Why Kevin](#-why-kevin)
 - [The Kevin loop](#-the-kevin-loop)
 - [Quick start](#-quick-start)
-- [What's new in 1.1.0](#-whats-new-in-110)
+- [What's new in 1.4.0 — Bridge](#-whats-new-in-140--bridge)
+- [What's new in 1.3.0 — Bedrock](#-whats-new-in-130--bedrock)
+- [What's new in 1.2.0 — Surface](#-whats-new-in-120--surface)
+- [What's new in 1.1.0 — Drift](#-whats-new-in-110--drift)
 - [What's new in 1.0.0](#-whats-new-in-100)
 - [How it works](#-how-it-works)
-- [The 26 tools](#-the-26-tools)
+- [The 26 tools (plugin) + 11 MCP tools](#-the-26-tools-plugin--11-mcp-tools)
+- [MCP Bridge — cross-harness memory](#-mcp-bridge--cross-harness-memory)
 - [The benchmark: proven, not promised](#-the-benchmark-proven-not-promised)
 - [Curation: from session noise to AGENTS.md](#-curation-from-session-noise-to-agentsmd)
 - [Team sharing: one file, zero servers](#-team-sharing-one-file-zero-servers)
@@ -141,7 +145,7 @@ npm install @jmtrin/opencode-kevin
 
 ### 2. Restart OpenCode
 
-On first boot Kevin migrates its database to schema version `012` and starts
+On first boot Kevin migrates its database to schema version `013` and starts
 observing. Nothing else is required.
 
 ### 3. Talk to it
@@ -176,6 +180,35 @@ kevin_doctor    → health report: hooks, deps, perf, verdict
 
 ---
 
+## 🆕 What's new in 1.4.0 — "Bridge"
+
+> 1.4.0 opens Kevin to every MCP harness — same local DB, same ranked recall, no network.
+
+- 🌉 **MCP Bridge** — new package `@jmtrin/kevin-mcp` (stdio MCP server, SDK 1.30.0): 7 read tools (`query/get/recall/why/status/trace/feedback` with provenance `{repo_id, identity_source, channel:"mcp"}` + token ceiling `ceil(chars/4)` + `pull_mcp` ledger), 3 gated write tools (`save/approve/share` behind `mcp_write_enabled` / `mcp_approve_enabled` double-gate + `mcp_writes_refused/accepted`), `ping` liveness — single binary `npx @jmtrin/kevin-mcp [--repo <id>]`, stderr `ready` line, SIGINT/SIGTERM flush.
+- 🔐 **Identity & repo scope** — `RepoIdentity` (declared → remote → path hex-16), `mcp_repo_override` setting, `--repo` CLI, scope guard `repo_mismatch` on every tool (read + write), resolves once at init (heals OKF header on rekey).
+- 🗄️ **Migration 013** — `channel TEXT DEFAULT 'plugin' CHECK(plugin|mcp)`, `injected_at_ms` probe, 5 metrics `mcp_requests_total/reads_served/writes_accepted/writes_refused/errors_total`, `schema_version 013`; `busy_timeout=5000` on Store for plugin↔MCP WAL concurrency; pre-013 DBs omit `mcp` block in `kevin_audit` (partial:true).
+- 📊 **Contracts & audit** — `C-04/C-05` since `1.4.0` (3 MCP config keys, 5 MCP metrics), `C-07` schema `013`, golden `v1.json` 35/61, `METRIC_KEY_LABELS`, `kevin_audit` gains `mcp{requests,reads,writes_accepted/refused,errors,channel_split{plugin,mcp}}`.
+- ⏱️ **Perf** — `mcp.read` p95 25/max 100, `mcp.write` p95 50/max 250, flush every 100 requests or SIGINT to `perf_samples`; concurrency stress 500×500 interleaved ops, zero `SQLITE_BUSY`.
+- 📚 **Harnesses & demo** — recipes for Claude Code / Codex / Cursor / Windsurf / Gemini CLI / Opencode (`docs/harnesses/*.md`, valid JSON blocks), 10-min cross-harness demo `docs/demo-cross-harness.md`, release ordering `core→tui→plugin→mcp` in `docs/DISTRIBUTION.md`.
+
+**Upgrade:** `npm i @jmtrin/kevin-core@1.4.0 @jmtrin/opencode-kevin@1.4.0 @jmtrin/opencode-kevin-tui@1.4.0 @jmtrin/kevin-mcp@1.4.0` — DB auto-migrates to 013; writes remain gated off until `mcp_write_enabled='1'`.
+
+---
+
+## 🆕 What's new in 1.3.0 — "Bedrock"
+
+> 1.3.0 declares the border the code already had. No visible behavior change — everything after this changes *because* of it.
+
+- 🏗️ **Monorepo with a hostless core** — root becomes a private `npm workspaces` manager; `packages/core` (`@jmtrin/kevin-core` **zero deps**), `packages/plugin` (`@jmtrin/opencode-kevin` — name frozen by C-06, now depends on core `1.3.0` exact), `packages/tui` (`@jmtrin/opencode-kevin-tui`, isolated). 60+ domain modules `plugin/*.ts` → `packages/core/src/*.ts` via `git mv`, migrations `migrations/` → `packages/core/migrations/` (12 SQL, built to `dist/migrations`).
+- 🔌 **One new type + one new export** (`KevinEnv` + `exportMigrationsDir`): every `process.cwd()`/`homedir()` touchpoint now takes an injected `KevinEnv {projectRoot,dataRoot}` via `resolveEnv()` (defaults `cwd` / `~/.opencode-kevin` only in `env.ts`). Core scans as `0` `process.cwd/homedir/node:os` outside the allowlist (K13-007), verified by `packages/core/tests/core_purity_scan.test.ts`.
+- 🔄 **Replay lives in core** — `replay.ts` + `idle-pipeline.ts` (`IDLE_STEP_ORDER` single source, `composeIdlePipeline`) moved to core; adapter and replay both mount the same pipeline (D13-07). Parity harness `packages/plugin/tests/parity.test.ts` mounts adapter vs core wirings over every `tests/replay/fixtures/*.json` and asserts byte-identical outputs (swapped-step probe proves sensitivity).
+- 📦 **Packaging proof** — both tarballs verified + offline consumer smoke (`npm install <core.tgz> <tui.tgz> <plugin.tgz>` → `Store` + `Migrate` + `exportMigrationsDir` → `schema_version 012`). Core zero-deps and `types`-first exports; plugin pins core exact `1.3.0`, `exports["./tui"]` redirects to the tui package — external specifiers unchanged.
+- 📜 **Contract unchanged** — `describeContract({scanRoots})` now accepts explicit roots (monorepo vs packed), golden values byte-equal (D13-05, 26/32/56 unchanged, no new setting/tool/metric/migration).
+
+**Upgrade:** no action required — drop-in reorganization, behavior diff empty (K13-016), DB untouched.
+
+---
+
 ## 🆕 What's new in 1.1.0 — "Drift"
 
 > 1.1.0 protects what 1.0.0 proved: a published number without a regression gate is marketing.
@@ -276,7 +309,7 @@ Kevin is an intentionally deterministic pipeline — no LLM in the core loop:
 
 ---
 
-## 🧰 The 26 tools
+## 🧰 The 26 tools (plugin) + 11 MCP tools
 
 <details open>
 <summary><b>🧠 Core memory</b></summary>
@@ -336,6 +369,22 @@ Kevin is an intentionally deterministic pipeline — no LLM in the core loop:
 
 ---
 
+## 🌉 MCP Bridge — cross-harness memory
+
+Kevin's SQLite file becomes accessible outside OpenCode via the MCP bridge — same ranking, same gates, same file you already trust.
+
+| Surface | Install | Transport | Reads | Writes |
+|---|---|---|---|---|
+| **MCP** `@jmtrin/kevin-mcp` | `npx -y @jmtrin/kevin-mcp` ( `--repo <id>` optional) | stdio (SDK 1.30.0), no HTTP/SSE | 7 tools always on (query/get/recall/why/status/trace/feedback + ping) | 3 tools gated (`save` needs `mcp_write_enabled='1'`, `approve/share` need + `mcp_approve_enabled='1'`) |
+
+- **One DB, two processes** — plugin and MCP server share `.opencode-kevin/kevin.db` via WAL + `busy_timeout=5000`; every read/write is repo-scoped (`repo_mismatch` on drift).
+- **Provenance** — every MCP response carries `{repo_id, identity_source, channel:"mcp"}` (plus confidence/evidence when applicable).
+- **Harnesses** — `docs/harnesses/{claude-code,codex,cursor,windsurf,gemini-cli,opencode}.md` with exact JSON/TOML snippets, verification, troubleshooting, uninstall; demo `docs/demo-cross-harness.md` (opencode → Claude Code recall).
+
+See `packages/mcp/README.md` for full MCP reference.
+
+---
+
 ## 📊 The benchmark: proven, not promised
 
 Kevin ships a committed synthetic corpus and a four-arm harness measuring
@@ -458,7 +507,7 @@ removals and silent changes fail loudly; additions must carry `since`.
 
 ## ⏱️ Hooks & latency budgets
 
-Six host hooks plus Kevin's own `dispose` checkpoint — eight measured scopes,
+Six host hooks plus Kevin's own `dispose` checkpoint plus two MCP bridges — ten measured scopes,
 each with a declared p95/max budget enforced by `npm run bench:check`:
 
 | Scope | p95 budget | max |
@@ -471,6 +520,8 @@ each with a declared p95/max budget enforced by `npm run bench:check`:
 | `event` | 5 ms | 25 ms |
 | `session.idle` | 150 ms | 600 ms |
 | `dispose` | 50 ms | 250 ms |
+| `mcp.read` | 25 ms | 100 ms |
+| `mcp.write` | 50 ms | 250 ms |
 
 Measured on the reference laptop: retrieval p50 ≈ 0.2 ms, p95 < 1 ms — orders
 of magnitude under budget. Samples persist to `perf_samples` at idle; a breach
@@ -518,6 +569,9 @@ client). All values are TEXT — flags compare with `=== "1"`, never truthiness.
 | `perf_flush_on_idle` | `'1'` | Persist samples at idle |
 | `contract_report_enabled` | `'1'` | Contract block in `kevin_audit` |
 | `tui_snapshots_enabled` | `'1'` | Snapshot + dashboard flush at idle (opencode-kevin/tui) |
+| `mcp_write_enabled` | `'0'` | Gate for MCP `save` (refused counter `mcp_writes_refused`) |
+| `mcp_approve_enabled` | `'0'` | Double-gate for MCP `approve`/`share` (needs + `mcp_write_enabled`) |
+| `mcp_repo_override` | `''` | Override `RepoIdentity` for MCP (hex-16 or empty) |
 
 ---
 
@@ -530,8 +584,7 @@ client). All values are TEXT — flags compare with `=== "1"`, never truthiness.
 | Node 22.5+ | `node:sqlite` behind `--experimental-sqlite` | 🔶 Works, unsupported — exercised in CI, not promised |
 | Bun ≥ 1.1 | `bun:sqlite` | ✅ **Supported** — smoke-tested in `npm run verify` |
 
-Zero process spawns, zero network calls — asserted by source scan on every
-test run.
+Zero network calls — asserted by source scan (forbidden: http/https/net/dgram/fetch/SSE/HttpTransport/child_process/spawn) on every test run; MCP uses stdio only, no spawn, logs on stderr only.
 
 ---
 
@@ -571,26 +624,35 @@ instrumentation. That is what Kevin adds around it.
 ## 🛠️ Development
 
 ```bash
-npm install
-npm run typecheck     # tsc --noEmit (strict)
-npm run lint          # biome
-npm test              # vitest — 1374 tests across 190 files
-npm run verify        # install checks + Bun smoke + verify:pack
-npm run gen:corpus    # regenerate the seeded corpus (byte-identical)
-npm run replay        # replay recorded sessions deterministically
+npm install                            # hoists workspaces (root private, 4 packages)
+npm run build                          # core → tui → plugin → mcp (tsc + copy-migrations)
+npm run typecheck                      # -w core -w tui -w plugin -w mcp + root (strict)
+npm run lint                           # biome
+npm test                               # vitest — root suite (190 files)
+npm test -w @jmtrin/kevin-core         # core only — also passes with @opencode-ai/plugin absent (K13-013)
+npm run verify                         # install checks + Bun smoke + verify:pack (×2 + consumer)
+npm run verify:pack                    # dual-tarball + offline consumer smoke (K13-014)
+npm run gen:corpus                     # regenerate the seeded corpus (byte-identical)
+npm run replay                         # replay recorded sessions deterministically (now via core)
 ```
 
-Project layout:
+Project layout (Bedrock monorepo):
 
 ```
-plugin/      53 modules — Store, MemoryService, Reflector, Perf, Contract, columns, kevin_forget …
-migrations/  001 → 012 — additive, idempotent, forward-only forever
-scripts/     bench · gen-corpus · verify-pack · verify-install · …
-tests/       unit · integration · e2e · replay fixtures
-bench/       committed corpus + committed results
-docs/        CONTRACT.md · per-release plans/tasks · roadmap
+packages/core/         @jmtrin/kevin-core — ~60 modules (zero deps), src/*.ts, migrations/ 001→013, dist/migrations
+packages/plugin/       @jmtrin/opencode-kevin — 4 modules (index, host, native, capabilities), adapter thin, depends on core+tui 1.4.0 exact
+packages/tui/          @jmtrin/opencode-kevin-tui — isolated TUI panel (target-exclusive, own package.json/exports)
+packages/mcp/          @jmtrin/kevin-mcp — MCP bridge (stdio, 11 tools, pure helper, identity+provenance)
+scripts/               bench · gen-corpus · verify-pack (dual) · verify-install · …
+tests/                 unit · integration · e2e · replay fixtures (at root, run via workspaces)
+bench/                 committed corpus + committed results
+docs/                  CONTRACT.md · per-release plans/tasks · roadmap v2
 ```
 
+> **C-10 preview** — the future public surface is the explicit re-export list at `packages/core/src/index.ts` (keep it minimal and deliberate).
+
+C-06 frozen: `plugin` package name `@jmtrin/opencode-kevin` and `exports["./tui"]` specifier unchanged; consumers see no break.
+
 ---
 
 ## 📄 License

package/dist/plugin/index.d.ts

@@ -1,5 +1,6 @@
 import type { Plugin } from "@opencode-ai/plugin";
-import { Store } from "./Store.js";
+import { Store } from "@jmtrin/kevin-core";
+import { KEVIN_VERSION } from "@jmtrin/kevin-core";
 export interface KevinPluginOptions {
     dbPath?: string;
     migrationsDir?: string;
@@ -16,10 +17,10 @@ export interface KevinPluginOptions {
  * v0.4.0 (K4-021) — settings surfaced by `kevin_config` (plan §8.8).
  * Unknown keys are rejected on `set` unless `strict: false`.
  */
-export declare const KEVIN_CONFIG_KEYS: readonly ["quality_gate_enabled", "lesson_snippet_injection", "patternminer_enabled", "cross_project_enabled", "llm_reflection_enabled", "tool_calls_dedup_enabled", "deterministic_retrieval", "pre_prompt_budget_tokens", "archive_after_days", "curation_enabled", "agents_md_path", "skill_emission_enabled", "reference_emission_enabled", "injection_confidence_floor", "repo_truth_enabled", "convention_mining_enabled", "conflict_detection_enabled", "error_lesson_mode", "shared_layer_enabled", "okf_path", "share_requires_approval", "author_identity_mode", "shared_confidence_floor", "hook_liveness_enabled", "native_registration_enabled", "host_probe_history_enabled", "dead_hook_report_threshold", "perf_enabled", "perf_ring_capacity", "perf_flush_on_idle", "contract_report_enabled", "tui_snapshots_enabled"];
+export declare const KEVIN_CONFIG_KEYS: readonly ["quality_gate_enabled", "lesson_snippet_injection", "patternminer_enabled", "cross_project_enabled", "llm_reflection_enabled", "tool_calls_dedup_enabled", "deterministic_retrieval", "pre_prompt_budget_tokens", "archive_after_days", "curation_enabled", "agents_md_path", "skill_emission_enabled", "reference_emission_enabled", "injection_confidence_floor", "repo_truth_enabled", "convention_mining_enabled", "conflict_detection_enabled", "error_lesson_mode", "shared_layer_enabled", "okf_path", "share_requires_approval", "author_identity_mode", "shared_confidence_floor", "hook_liveness_enabled", "native_registration_enabled", "host_probe_history_enabled", "dead_hook_report_threshold", "perf_enabled", "perf_ring_capacity", "perf_flush_on_idle", "contract_report_enabled", "tui_snapshots_enabled", "mcp_write_enabled", "mcp_approve_enabled", "mcp_repo_override"];
 export declare const ERROR_LESSON_MODE_VALUES: readonly ["all", "triage_only"];
-/** Plugin release version — stamped into generated files (K8-021/027). */
-export declare const KEVIN_VERSION = "1.2.0";
+/** Plugin release version — single source is @jmtrin/kevin-core (B-003 drift fix). */
+export { KEVIN_VERSION };
 export interface RekeyCounts {
     memories: number;
     shared_entries: number;

package/dist/plugin/index.js

@@ -1,55 +1,56 @@
 import { existsSync, mkdirSync } from "node:fs";
+import { createRequire } from "node:module";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { tool } from "@opencode-ai/plugin";
-import { Archiver } from "./Archiver.js";
-import { ArtifactWriter } from "./ArtifactWriter.js";
-import { CausalChain } from "./CausalChain.js";
-import { handleBridgeCommand } from "./ChatBridge.js";
-import { ConflictDetector } from "./ConflictDetector.js";
-import { ContextInjector } from "./ContextInjector.js";
-import { ConventionMiner } from "./ConventionMiner.js";
-import { Curator } from "./Curator.js";
-import { writeDashboard } from "./DashboardHtml.js";
-import { Feedback } from "./Feedback.js";
-import { HookLiveness } from "./HookLiveness.js";
-import { InjectionLedger } from "./InjectionLedger.js";
-import { Materializer, SKILL_TOPIC } from "./Materializer.js";
-import { MemoryService, hasRepoIdColumn, } from "./MemoryService.js";
-import { Migrate } from "./Migrate.js";
-import { PatternMiner } from "./PatternMiner.js";
-import { ERROR_LINE_RE, Reflector, STRONG_ERROR_RE } from "./Reflector.js";
-import * as RepoIdentity from "./RepoIdentity.js";
-import { RepoTruth } from "./RepoTruth.js";
-import { Retrospective } from "./Retrospective.js";
-import { SharedLayer } from "./SharedLayer.js";
-import { Store } from "./Store.js";
-import { ToolCallObserver } from "./ToolCallObserver.js";
-import { deleteMailbox, processActions, readMailbox, writeResults, } from "./TuiActions.js";
-import { flushSnapshots } from "./TuiSnapshots.js";
+import { Archiver } from "@jmtrin/kevin-core";
+import { ArtifactWriter } from "@jmtrin/kevin-core";
+import { CausalChain } from "@jmtrin/kevin-core";
+import { handleBridgeCommand } from "@jmtrin/kevin-core";
+import { ConflictDetector } from "@jmtrin/kevin-core";
+import { ContextInjector } from "@jmtrin/kevin-core";
+import { ConventionMiner } from "@jmtrin/kevin-core";
+import { Curator } from "@jmtrin/kevin-core";
+import { writeDashboard } from "@jmtrin/kevin-core";
+import { Feedback } from "@jmtrin/kevin-core";
+import { HookLiveness } from "@jmtrin/kevin-core";
+import { InjectionLedger } from "@jmtrin/kevin-core";
+import { Materializer, SKILL_TOPIC } from "@jmtrin/kevin-core";
+import { MemoryService, hasRepoIdColumn, } from "@jmtrin/kevin-core";
+import { Migrate } from "@jmtrin/kevin-core";
+import { PatternMiner } from "@jmtrin/kevin-core";
+import { ERROR_LINE_RE, Reflector, STRONG_ERROR_RE } from "@jmtrin/kevin-core";
+import * as RepoIdentity from "@jmtrin/kevin-core";
+import { RepoTruth } from "@jmtrin/kevin-core";
+import { Retrospective } from "@jmtrin/kevin-core";
+import { SharedLayer } from "@jmtrin/kevin-core";
+import { Store } from "@jmtrin/kevin-core";
+import { ToolCallObserver } from "@jmtrin/kevin-core";
+import { deleteMailbox, processActions, readMailbox, writeResults, } from "@jmtrin/kevin-core";
+import { flushSnapshots } from "@jmtrin/kevin-core";
 import { probe } from "./capabilities.js";
-import { computeConfidence } from "./confidence.js";
-import { contractDigest, describeContract } from "./contract.js";
+import { computeConfidence, exportMigrationsDir, composeIdlePipeline, KEVIN_VERSION } from "@jmtrin/kevin-core";
+import { contractDigest, describeContract } from "@jmtrin/kevin-core";
 import { probeHost, summarize } from "./host.js";
-import { kevinApprove } from "./kevin_approve.js";
-import { buildAudit } from "./kevin_audit.js";
-import { buildKevinBench } from "./kevin_bench.js";
-import { executeKevinConflicts } from "./kevin_conflicts.js";
-import { buildKevinContract } from "./kevin_contract.js";
-import { buildDoctor } from "./kevin_doctor.js";
-import { buildKevinFacts } from "./kevin_facts.js";
-import { handleForget } from "./kevin_forget.js";
-import { handleNative } from "./kevin_native.js";
-import { kevinPropose } from "./kevin_propose.js";
-import { kevinPublish } from "./kevin_publish.js";
-import { kevinWhy } from "./kevin_why.js";
-import { Metrics } from "./metrics.js";
+import { kevinApprove } from "@jmtrin/kevin-core";
+import { buildAudit } from "@jmtrin/kevin-core";
+import { buildKevinBench } from "@jmtrin/kevin-core";
+import { executeKevinConflicts } from "@jmtrin/kevin-core";
+import { buildKevinContract } from "@jmtrin/kevin-core";
+import { buildDoctor } from "@jmtrin/kevin-core";
+import { buildKevinFacts } from "@jmtrin/kevin-core";
+import { handleForget } from "@jmtrin/kevin-core";
+import { handleNative } from "@jmtrin/kevin-core";
+import { kevinPropose } from "@jmtrin/kevin-core";
+import { kevinPublish } from "@jmtrin/kevin-core";
+import { kevinWhy } from "@jmtrin/kevin-core";
+import { Metrics } from "@jmtrin/kevin-core";
 import { attachNative } from "./native.js";
-import { exportMarkdown, exportOkf } from "./okf-export.js";
-import { importOkf } from "./okf-import.js";
-import { Perf } from "./perf.js";
-import { uuidv7 } from "./uuid.js";
+import { exportMarkdown, exportOkf } from "@jmtrin/kevin-core";
+import { importOkf } from "@jmtrin/kevin-core";
+import { Perf } from "@jmtrin/kevin-core";
+import { uuidv7 } from "@jmtrin/kevin-core";
 // v0.6.0 (K6-019) — process-global set of reference topics already
 // registered with the host this process. Keeps re-registration idempotent
 // across sessions within one process: a topic registered once is never
@@ -122,6 +123,11 @@ export const KEVIN_CONFIG_KEYS = [
     // return { error: "unknown_key" } while `kevin_config list` still
     // shows it.
     "tui_snapshots_enabled",
+    // v1.4.0 (K14-006 / plan §4) — the three MCP bridge settings seeded by migration 013
+    // Omitting makes `kevin_config set` return { error: "unknown_key" } while list shows them.
+    "mcp_write_enabled",
+    "mcp_approve_enabled",
+    "mcp_repo_override",
 ];
 // v1.1.0 (K11-007 / D11-08) — no new settings in 1.1.0; thresholds are constants (D11-03)
 // v0.7.0 (K7-003 / plan §5.6, D7-12) — the explicit VALUE domain for
@@ -131,11 +137,41 @@ export const KEVIN_CONFIG_KEYS = [
 // at the surface rather than silently changing every installation's
 // behaviour on the next reflection.
 export const ERROR_LESSON_MODE_VALUES = ["all", "triage_only"];
-/** Plugin release version — stamped into generated files (K8-021/027). */
-export const KEVIN_VERSION = "1.2.0";
+/** Plugin release version — single source is @jmtrin/kevin-core (B-003 drift fix). */
+export { KEVIN_VERSION };
 function resolveMigrationsDir() {
+    // K13-008 (D13-04): migrations now owned by @jmtrin/kevin-core.
+    // Explicit option is handled at call site (opts.migrationsDir ?? resolve...),
+    // so this helper only resolves the core location.
+    // 1. Installed layout: walk-up via require.resolve (reuses host.ts strategy)
+    try {
+        const pkgJson = createRequire(import.meta.url).resolve("@jmtrin/kevin-core/package.json");
+        const cand = join(dirname(pkgJson), "dist", "migrations");
+        if (existsSync(cand))
+            return cand;
+    }
+    catch { }
+    // 2. Workspace sources: delegate to core's own resolver (handles both
+    //    src via tsx and dist after build).
+    try {
+        const dir = exportMigrationsDir();
+        if (existsSync(dir))
+            return dir;
+    }
+    catch { }
+    // 3. Monorepo fallback probes (dev without build)
     const here = dirname(fileURLToPath(import.meta.url));
-    return join(here, "..", "migrations");
+    const candidates = [
+        join(here, "..", "..", "core", "dist", "migrations"),
+        join(here, "..", "..", "core", "migrations"),
+        join(here, "..", "migrations"),
+        join(here, "..", "..", "migrations"),
+    ];
+    for (const c of candidates) {
+        if (existsSync(c))
+            return c;
+    }
+    return join(here, "..", "..", "core", "migrations");
 }
 const REKEY_TABLES = ["memories", "shared_entries", "okf_imports"];
 export function performRekey(store, toRepoId, opts) {
@@ -337,6 +373,8 @@ export const KevinPlugin = async (input, options) => {
     // v0.7.0 (K7-009 / plan §5.1, D7-13) — the repository truth scanner reads
     // the JSON project files. Runs once at init, gated by repo_truth_enabled.
     const projectRoot = opts.projectRoot ?? process.cwd();
+    const materializerRoot = opts.materializerRoot ?? join(homedir(), ".opencode-kevin");
+    const kevinEnv = { projectRoot, dataRoot: materializerRoot };
     const repoTruth = new RepoTruth(store, projectId, projectRoot, metrics);
     if (memoryService.getSetting("repo_truth_enabled", "0") === "1") {
         try {
@@ -376,7 +414,7 @@ export const KevinPlugin = async (input, options) => {
     const archiver = new Archiver(store, memoryService, metrics);
     const retrospective = new Retrospective(store, memoryService, {
         dir: opts.retrospectivesDir,
-    }, metrics);
+    }, metrics, kevinEnv);
     const patternMiner = new PatternMiner(store, memoryService, metrics);
     const conventionMiner = new ConventionMiner(store, memoryService, projectId, metrics);
     const conflictDetector = new ConflictDetector(store, projectId, metrics, repoTruth, memoryService);
@@ -408,13 +446,12 @@ export const KevinPlugin = async (input, options) => {
         metrics.incr("shared_entries_imported", report.imported);
         return report;
     }
-    let curator = new Curator(store, memoryService, projectId, metrics, repoId);
+    let curator = new Curator(store, memoryService, projectId, metrics, repoId, kevinEnv);
     // v0.6.0 (K6-017/018 / plan §5.6-5.7, D6-13) — pull-channel bundles and
     // the v2 domain probe. `probe()` runs ONCE at init and the result is
     // held; probing per-event is a hot-path cost for a value that cannot
     // change within a process (K6-016). The Materializer writes next to its
     // targets, so the bundle directories are created here at init.
-    const materializerRoot = opts.materializerRoot ?? join(homedir(), ".opencode-kevin");
     mkdirSync(join(materializerRoot, "skills"), { recursive: true });
     mkdirSync(join(materializerRoot, "refs"), { recursive: true });
     const capabilities = probe(input);
@@ -422,7 +459,7 @@ export const KevinPlugin = async (input, options) => {
     // When the host exposes permission.ask, the presence is noted; absence is silent no-op.
     // No new setting — bounded to tui_snapshots_enabled host-support check per spec.
     void capabilities.permissionAsk;
-    const materializer = new Materializer(store, { root: materializerRoot });
+    const materializer = new Materializer(store, { root: materializerRoot }, kevinEnv);
     // v0.9.0 (K9-016 / plan §5.4, D9-10) — native registration replaces
     // file emission. When attachNative returns a registration for a
     // surface, the corresponding *_emission_enabled path is skipped for
@@ -1002,7 +1039,7 @@ export const KevinPlugin = async (input, options) => {
                                 version: KEVIN_VERSION,
                                 writer,
                             });
-                            curator = new Curator(store, memoryService, projectId, metrics, live.repoId);
+                            curator = new Curator(store, memoryService, projectId, metrics, live.repoId, kevinEnv);
                             // v0.8.0 (BUG-003) — heal the OKF file header.
                             // Rekey changes the scope the file is written
                             // under; a stale `#repo` first line would make
@@ -1077,7 +1114,7 @@ export const KevinPlugin = async (input, options) => {
                     // block; on a pre-008 DB the block is omitted, partial:true.
                     // v0.8.0 (K8-007 / plan §5.7) — the penalized-memory rollup
                     // scopes on repoId once the 009 column exists.
-                    const report = buildAudit(store, metrics, capabilities, projectId, sessionIdentity.repoId);
+                    const report = buildAudit(store, metrics, capabilities, projectId, sessionIdentity.repoId, undefined, kevinEnv);
                     const payload = args.verbose
                         ? report
                         : { ...report, settings: undefined };
@@ -1096,7 +1133,7 @@ export const KevinPlugin = async (input, options) => {
                 description: "Doctor de Kevin (v0.9.0): salud del host, hooks, dependencias y registros nativos. Solo lectura, sin LLM ni writes, invocable en cualquier momento. Devuelve host (version, flavour, shell, v2), hooks ordenados dead primero, dependencies (zod_copies), native (enabled, registered/verified por surface), verdict (healthy|degraded|unknown) y reason. Output pensado para pegar en un issue: sin filesystem paths ni session ids.",
                 args: {},
                 async execute() {
-                    const report = buildDoctor(store, host, memoryService);
+                    const report = buildDoctor(store, host, memoryService, {}, kevinEnv);
                     return {
                         title: "Doctor de Kevin",
                         output: JSON.stringify(report),
@@ -1165,7 +1202,7 @@ export const KevinPlugin = async (input, options) => {
                         .describe("status | last"),
                 },
                 async execute(args) {
-                    const result = buildKevinBench({ store }, args);
+                    const result = buildKevinBench({ store }, args, kevinEnv);
                     return {
                         title: "Benchmark de Kevin",
                         output: JSON.stringify(result),
@@ -1843,62 +1880,39 @@ export const KevinPlugin = async (input, options) => {
                         // BUG-011 — the session is done: drop the global query
                         // so the next session cannot reuse it.
                         lastUserQuery = null;
-                        // v0.4.0 (K4-024) — plan §5.2: settle the session's
-                        // unmeasured injections (effective/ineffective +
-                        // recurrence_count charges) at idle. Best-effort: a
-                        // legacy DB without migration 005 has no ledger table.
-                        try {
-                            ledger.settle(sid);
-                        }
-                        catch {
-                            // best-effort: a legacy DB without the ledger
-                            // table must not break the idle path
-                        }
-                        // v0.5.0 (K5-012 / plan §5.4) — retire stale lessons at
-                        // idle; pre-006 DBs degrade to a no-op.
-                        try {
-                            archiver.run();
-                        }
-                        catch {
-                            // best-effort, same pattern as ledger.settle
-                        }
-                        fireAndForget(retrospective.generate(sid));
-                        memoryService.boostPositiveReflectors(sid);
-                        const recurred = memoryService.penalizeRecurringReflectors(sid);
-                        injector.setRecurrences(recurred, sid);
-                        patternMiner.mine(projectId);
-                        // v0.7.0 (K7-012 / plan §5.4, D7-10) — convention mining is
-                        // session.idle-only, default-off, and isolated from the rest of
-                        // the idle chain. Mined rules still enter the ordinary Curator
-                        // approval path; this step never writes to the repository.
-                        try {
-                            if (memoryService.getSetting("convention_mining_enabled", "0") ===
-                                "1") {
-                                const conventions = conventionMiner.mine();
-                                conventionMiner.emit(conventions);
-                            }
-                        }
-                        catch {
-                            // A throwing miner must not reject or truncate the idle chain.
-                        }
-                        // v0.7.0 (K7-016 / plan §5.5, D7-06) — conflict detection is
-                        // surfacing-only on idle. It may create/open conflict rows, but
-                        // no idle path can acknowledge or resolve one.
-                        try {
-                            if (memoryService.getSetting("conflict_detection_enabled", "0") ===
-                                "1") {
-                                conflictDetector.detect();
-                            }
-                        }
-                        catch {
-                            // Conflict surfacing is best-effort and must not reject idle.
-                        }
-                        fireAndForget(Promise.resolve()
-                            .then(() => causalChain.onSessionIdle(sid))
-                            // non-blocking — promote is a best-effort pass
-                            // (legacy DBs pre-005 lack the recurrence_count
-                            // column)
-                            .catch(() => { }));
+                        // K13-010 (D13-07) — single ORDER via composeIdlePipeline.
+                        // Ledger/archiver/reflectors/pattern are the hand-synced core;
+                        // adapter and replay both consume IDLE_STEP_ORDER so re-order is visible in both.
+                        await composeIdlePipeline({
+                            "ledger.settle": () => { ledger.settle(sid); },
+                            "archiver.run": () => { archiver.run(); },
+                            retrospective: () => {
+                                fireAndForget(retrospective.generate(sid));
+                            },
+                            "reflectors.boost": () => { memoryService.boostPositiveReflectors(sid); },
+                            "reflectors.penalize": () => {
+                                const recurred = memoryService.penalizeRecurringReflectors(sid);
+                                injector.setRecurrences(recurred, sid);
+                            },
+                            "patternMiner.mine": () => { patternMiner.mine(projectId); },
+                        });
+                        // v0.7.0 (K7-012/K7-016) + causalChain — folded into the single ORDER via composeIdlePipeline (K13-010)
+                        await composeIdlePipeline({
+                            "conventionMiner.mine": () => {
+                                if (memoryService.getSetting("convention_mining_enabled", "0") === "1") {
+                                    const conventions = conventionMiner.mine();
+                                    conventionMiner.emit(conventions);
+                                }
+                            },
+                            "conflictDetector.detect": () => {
+                                if (memoryService.getSetting("conflict_detection_enabled", "0") === "1") {
+                                    conflictDetector.detect();
+                                }
+                            },
+                            "causalChain.onSessionIdle": () => {
+                                fireAndForget(Promise.resolve().then(() => causalChain.onSessionIdle(sid)).catch(() => { }));
+                            },
+                        });
                         // v1.2.0 (K12-007/K12-011 / D12-05) — TUI mailbox: actions→curate ordering.
                         // Process mailbox BEFORE curator.propose so a fresh proposal created this idle
                         // is NOT visible to a stale token (D12-04). Best-effort, never breaks idle.
@@ -2013,7 +2027,7 @@ export const KevinPlugin = async (input, options) => {
                                             .prepare("SELECT id, kind, target_path, proposed_text, diff, memory_id, created_at FROM curation_proposals WHERE status = 'pending' ORDER BY created_at")
                                             .all();
                                     })();
-                                    const { proposalToken } = await import("./TuiActions.js");
+                                    const { proposalToken } = await import("@jmtrin/kevin-core");
                                     proposals = rawPending.map((r) => {
                                         const row = r;
                                         const id = String(row.id ?? "");
@@ -2060,7 +2074,7 @@ export const KevinPlugin = async (input, options) => {
                                 // Health
                                 let health;
                                 try {
-                                    const doc = buildDoctor(store, host, memoryService);
+                                    const doc = buildDoctor(store, host, memoryService, {}, kevinEnv);
                                     let perfRows = [];
                                     try {
                                         const stats = perf.stats?.();

package/dist/plugin/native.d.ts

@@ -1,5 +1,5 @@
-import { type Materializer } from "./Materializer.js";
-import type { Store } from "./Store.js";
+import { type Materializer } from "@jmtrin/kevin-core";
+import type { Store } from "@jmtrin/kevin-core";
 import type { HostSurface } from "./host.js";
 /** The surface `attachNative()` returned. `verified` is filled by the
  * read-back checks (K9-014/015) once the host ran `setup()`. */

package/dist/plugin/native.js

@@ -1,5 +1,5 @@
-import { SKILL_TOPIC } from "./Materializer.js";
-import { uuidv7 } from "./uuid.js";
+import { SKILL_TOPIC } from "@jmtrin/kevin-core";
+import { uuidv7 } from "@jmtrin/kevin-core";
 /** The only place in the repository allowed to name the v2 subpath. */
 export const V2_SPECIFIER = "@opencode-ai/plugin/v2/promise";
 /** The skill body Kevin registers through `skill.transform`. */