@jpcasabiancai/cayenne 0.5.11 → 0.5.13

package/dist/cli.js

@@ -554,6 +554,7 @@ var init_repositories = __esm({
       "not_found",
       "not_installed",
       "github_not_installed",
+      "github_not_connected",
       "archived",
       "repository_mismatch",
       "not_configured",
@@ -660,7 +661,7 @@ var init_skills = __esm({
 
 // ../../packages/shared/src/protocol/integrations.ts
 import { z as z7 } from "zod";
-var INTEGRATION_PROVIDERS, AUTH_KINDS, both, PROVIDER_META, IntegrationProviderSchema, AuthKindSchema, ProviderConfigPublic, ConnectStartRequest, ConnectStartResponse, ConnectCompleteRequest, DisconnectRequest, GithubInstallationId, GithubAccountLogin, GithubAccountType, GithubAvatarUrl, GithubInstallation, GithubAvailableInstallation, GithubInstallationList, GithubBindRequest, GithubBindResponse, GithubUnbindRequest, GithubUnbindResponse, MessageResourceKind, ReplyRequest, ReplyResponse, ResourceList, SetSubscriptionsRequest, INBOX_ERROR_CODES, InboxErrorCode, CONVERSATION_KINDS, ConversationKind, MESSAGE_ATTACHMENTS_MAX, MessageAttachment, MessageAttachments, INBOX_CHANNELS, InboxChannel, INBOX_CATEGORIES, InboxCategory, ATTACHMENT_KINDS, AttachmentKind, INTEL_STATUSES, IntelStatus, Probability, IntelNeeds, IntelFlags, InboxIntel, MessageIntel;
+var INTEGRATION_PROVIDERS, AUTH_KINDS, IntegrationProviderSchema, AuthKindSchema, ProviderConfigPublic, ConnectStartRequest, ConnectStartResponse, ConnectCompleteRequest, DisconnectRequest, MessageResourceKind, ReplyRequest, ReplyResponse, ResourceList, SetSubscriptionsRequest, INBOX_ERROR_CODES, InboxErrorCode, CONVERSATION_KINDS, ConversationKind, MESSAGE_ATTACHMENTS_MAX, MessageAttachment, MessageAttachments, INBOX_CHANNELS, InboxChannel, INBOX_CATEGORIES, InboxCategory, ATTACHMENT_KINDS, AttachmentKind, INTEL_STATUSES, IntelStatus, Probability, IntelNeeds, IntelFlags, InboxIntel, MessageIntel;
 var init_integrations = __esm({
   "../../packages/shared/src/protocol/integrations.ts"() {
     "use strict";
@@ -678,91 +679,6 @@ var init_integrations = __esm({
       "trello"
     ];
     AUTH_KINDS = ["native", "composio", "platform"];
-    both = () => ["native", "composio"];
-    PROVIDER_META = {
-      slack: {
-        label: "Slack",
-        badge: "SL",
-        paths: { native: null, composio: null, platform: { stage: 1 } },
-        capabilities: { messages: ["platform"], tasks: [] },
-        webhook: { fn: "slack-events", params: [] }
-      },
-      clickup: {
-        label: "ClickUp",
-        badge: "CU",
-        // Comments on the personal connection; tasks on the workspace's native connection.
-        paths: { native: { stage: 1 }, composio: null, platform: { stage: 1 } },
-        capabilities: { messages: ["platform"], tasks: ["native"] },
-        webhook: { fn: "clickup-webhook", params: ["ws", "sub"] }
-      },
-      gmail: {
-        label: "Gmail",
-        badge: "ML",
-        paths: { native: null, composio: null, platform: { stage: 1 } },
-        capabilities: { messages: ["platform"], tasks: [] },
-        webhook: null
-      },
-      teams: {
-        label: "Microsoft Teams",
-        badge: "MS",
-        // Withdrawn until a personal path exists (personal inbox §3.8); its adapter stays in the tree.
-        paths: { native: null, composio: null, platform: null },
-        capabilities: { messages: [], tasks: [] },
-        webhook: { fn: "teams-notifications", params: ["ws"] }
-      },
-      github: {
-        label: "GitHub",
-        badge: "GH",
-        // The Cayenne GitHub App (D57), a team workspace's platform path; Composio is Stage 3.
-        paths: { native: null, composio: { stage: 3, toolkit: "github" }, platform: { stage: 1 } },
-        capabilities: { messages: [], tasks: ["composio", "platform"] },
-        webhook: { fn: "github-webhook", params: [] }
-      },
-      monday: {
-        label: "Monday.com",
-        badge: "MO",
-        // Composio's Monday toolkit has no triggers; not offered.
-        paths: { native: { stage: 1 }, composio: null, platform: null },
-        capabilities: { messages: [], tasks: ["native"] },
-        webhook: { fn: "monday-webhook", params: ["ws", "sub"] }
-      },
-      linear: {
-        label: "Linear",
-        badge: "LN",
-        paths: { native: { stage: 3 }, composio: { stage: 1, toolkit: "linear" }, platform: null },
-        capabilities: { messages: [], tasks: both() },
-        webhook: { fn: "linear-webhook", params: ["ws", "sub"] }
-      },
-      jira: {
-        label: "Jira",
-        badge: "JR",
-        paths: { native: { stage: 3 }, composio: { stage: 1, toolkit: "jira" }, platform: null },
-        capabilities: { messages: [], tasks: both() },
-        // Jira signs nothing: `t` is the subscription's token, compared constant-time.
-        webhook: { fn: "jira-webhook", params: ["ws", "sub", "t"] }
-      },
-      asana: {
-        label: "Asana",
-        badge: "AS",
-        paths: { native: { stage: 3 }, composio: { stage: 1, toolkit: "asana" }, platform: null },
-        capabilities: { messages: [], tasks: both() },
-        webhook: { fn: "asana-webhook", params: ["ws", "sub"] }
-      },
-      notion: {
-        label: "Notion",
-        badge: "NO",
-        paths: { native: { stage: 3 }, composio: { stage: 1, toolkit: "notion" }, platform: null },
-        capabilities: { messages: [], tasks: both() },
-        webhook: null
-      },
-      trello: {
-        label: "Trello",
-        badge: "TR",
-        paths: { native: { stage: 3 }, composio: { stage: 1, toolkit: "trello" }, platform: null },
-        capabilities: { messages: [], tasks: both() },
-        webhook: { fn: "trello-webhook", params: ["ws", "sub"] }
-      }
-    };
     IntegrationProviderSchema = z7.enum(INTEGRATION_PROVIDERS);
     AuthKindSchema = z7.enum(AUTH_KINDS);
     ProviderConfigPublic = z7.object({
@@ -778,49 +694,11 @@ var init_integrations = __esm({
     ConnectStartRequest = z7.strictObject({
       workspaceId: z7.uuid(),
       provider: IntegrationProviderSchema,
-      acknowledged: z7.boolean().optional(),
-      intent: z7.enum(["connect", "install"]).optional()
-    }).superRefine((r, ctx) => {
-      if (r.intent === "install" && r.provider !== "github") {
-        ctx.addIssue({ code: "custom", path: ["intent"], message: "install is GitHub only" });
-      }
+      acknowledged: z7.boolean().optional()
     });
     ConnectStartResponse = z7.object({ url: z7.url({ protocol: /^https$/ }) });
     ConnectCompleteRequest = z7.strictObject({ pendingId: z7.uuid() });
     DisconnectRequest = z7.strictObject({ integrationId: z7.uuid() });
-    GithubInstallationId = z7.number().int().positive();
-    GithubAccountLogin = z7.string().min(1).max(100);
-    GithubAccountType = z7.enum(["Organization", "User"]);
-    GithubAvatarUrl = z7.url({
-      protocol: /^https$/,
-      hostname: /^avatars[.]githubusercontent[.]com$/
-    });
-    GithubInstallation = z7.object({
-      id: z7.uuid(),
-      installationId: GithubInstallationId,
-      accountLogin: GithubAccountLogin,
-      accountType: GithubAccountType,
-      avatarUrl: GithubAvatarUrl,
-      addedBy: z7.object({ id: z7.uuid(), displayName: z7.string().nullable() }).nullable(),
-      createdAt: z7.string()
-    });
-    GithubAvailableInstallation = z7.object({
-      installationId: GithubInstallationId,
-      accountLogin: GithubAccountLogin,
-      accountType: GithubAccountType,
-      avatarUrl: GithubAvatarUrl
-    });
-    GithubInstallationList = z7.object({
-      bound: z7.array(GithubInstallation),
-      available: z7.array(GithubAvailableInstallation)
-    });
-    GithubBindRequest = z7.strictObject({
-      workspaceId: z7.uuid(),
-      installationId: GithubInstallationId
-    });
-    GithubBindResponse = z7.object({ binding: GithubInstallation });
-    GithubUnbindRequest = z7.strictObject({ workspaceId: z7.uuid(), bindingId: z7.uuid() });
-    GithubUnbindResponse = z7.object({ orphaned: z7.number().int().nonnegative() });
     MessageResourceKind = z7.enum(["clickup_team", "teams_channel", "teams_chat"]);
     ReplyRequest = z7.strictObject({
       messageId: z7.uuid(),
@@ -962,9 +840,13 @@ var init_tasks = __esm({
     });
     TaskDraft = TaskPatch.required({ title: true });
     ContainerLinkRequest = z8.strictObject({
+      workspaceId: z8.uuid(),
       integrationId: z8.uuid(),
-      externalId: z8.string().min(1).max(500),
+      shareUrl: z8.string().min(1).max(2048).optional(),
+      externalId: z8.string().min(1).max(500).optional(),
       projectId: z8.uuid().optional()
+    }).refine((r) => r.shareUrl === void 0 !== (r.externalId === void 0), {
+      message: "give exactly one of shareUrl and externalId"
     });
     StatusId = z8.string().min(1).max(200);
     StatusMap = z8.strictObject({
@@ -1470,6 +1352,28 @@ var init_context = __esm({
         kind: z13.literal("claim"),
         id: z13.uuid(),
         collision: z13.enum(["overlap", "sequence"])
+      }),
+      /**
+       * A recall hit on an `items` row (layer `recall`): the item its chunk belongs to, with the item's
+       * `source_ref` when the hit carried one. Ids only: never a title or content.
+       */
+      z13.object({ kind: z13.literal("item"), id: z13.uuid(), source_ref: z13.string().max(200).optional() }),
+      /** A recall hit on a `facts` row (layer `recall`). */
+      z13.object({ kind: z13.literal("fact"), id: z13.uuid() }),
+      /**
+       * How many recall hits the block showed that are not workspace-visible, unknown visibility
+       * included (layer `recall`): never their ids or `source_ref`, since a session that turns
+       * workspace-visible later exposes its ledger with it. Strict: it carries no id.
+       */
+      z13.strictObject({ kind: z13.literal("recall_private"), count: z13.number().int().positive() }),
+      /**
+       * The earlier segment a handoff carried (layer `handoff`): `memory_recall`'s
+       * `chat_segments:<session>:<index>`. Segment `n`'s handoff is written in `n + 1`.
+       */
+      z13.object({
+        kind: z13.literal("segment"),
+        session: z13.uuid(),
+        index: z13.number().int().nonnegative()
       })
     ]);
     CONTEXT_UNAVAILABLE = "CONTEXT_UNAVAILABLE";
@@ -6100,7 +6004,7 @@ var init_credentials = __esm({
     init_introspect();
     READ_ONLY_NOT_CONNECTED = "Cayenne: this repository chat is read-only because you have not connected GitHub. Connect it in Settings \u2192 Integrations, then send your next message here.";
     READ_ONLY_NO_EXPIRY = "Cayenne: this repository chat is read-only on this runner because your GitHub token never expires, and Cayenne lends only expiring tokens to another member's runner. Reconnect GitHub in Settings \u2192 Integrations to get a token that expires, then send your next message here.";
-    READ_ONLY_GITHUB_NOT_INSTALLED = "Cayenne: this repository chat is read-only because this repository's GitHub organisation is not connected to this workspace. Add it in Settings \u2192 Integrations, then send your next message here.";
+    READ_ONLY_GITHUB_NOT_INSTALLED = "Cayenne: this repository chat is read-only because your GitHub account cannot reach this repository through the Cayenne GitHub App. Install the app on the repository's organisation from Settings \u2192 Integrations, then send your next message here.";
     READ_ONLY_SCOPE_REFUSED = "Cayenne: this repository chat is read-only because GitHub would not give your token access to this repository; your GitHub account may not have access to it. Send another message here once it does.";
     READ_ONLY_UNAVAILABLE = "Cayenne: this repository chat could not get your GitHub token, so pushing is off for now. Send another message to retry.";
     CREDENTIAL_HELPER = String.raw`!f() { test "$1" = get || exit 0; if [ -n "$GH_TOKEN" ]; then echo username=x-access-token; echo "password=$GH_TOKEN"; else printf '%s\n' "$CAYENNE_READ_ONLY" >&2; exit 1; fi; }; f`;
@@ -10123,9 +10027,13 @@ function cloneRefusal(code, slug) {
   switch (code) {
     case "not_installed":
       return `VALIDATION: ${slug} is not in the Cayenne GitHub App's installation`;
-    // D57: the repository's installation is not bound to this workspace, or there is none.
+    // D68: `/clone` mints for the runner owner, whose own GitHub token cannot read the repository or
+    // lists no installation covering it. The member reading this may not be that owner.
     case "github_not_installed":
-      return `VALIDATION: ${slug}'s GitHub organisation is not connected to this workspace; add it in Settings \u2192 Integrations`;
+      return `VALIDATION: this runner's owner cannot reach ${slug} through the Cayenne GitHub App; they need access to it on GitHub, and the app installed on its organisation from Settings \u2192 Integrations`;
+    // D68: the runner owner has no active GitHub connection of their own, or GitHub refused it.
+    case "github_not_connected":
+      return `VALIDATION: this runner cannot get ${slug} because its owner has not connected GitHub, or their connection expired; they can connect it in Settings \u2192 Integrations`;
     case "repository_mismatch":
       return `VALIDATION: ${slug} was renamed or replaced on GitHub; pick it again`;
     case "bad_default_branch":
@@ -10145,7 +10053,7 @@ var init_token_client = __esm({
     "use strict";
     init_src();
     TOKEN_SHAPE = /^[A-Za-z0-9_]{20,255}$/;
-    DEFAULT_TIMEOUT_MS = 45e3;
+    DEFAULT_TIMEOUT_MS = 9e4;
   }
 });
 
@@ -11249,6 +11157,65 @@ var init_budget = __esm({
   }
 });
 
+// src/context/ledger.ts
+function capRefs(refs, max = MAX_REFS) {
+  const counts = refs.filter((r) => COUNT_KINDS.has(r.kind)).slice(0, max);
+  const ids = refs.filter((r) => !COUNT_KINDS.has(r.kind)).slice(0, max - counts.length);
+  return [...ids, ...counts];
+}
+async function writeLedger(insert, at, rows, log) {
+  const valid = [];
+  for (const row of rows) {
+    const parsed = ContextLedgerRow.safeParse({
+      workspace_id: at.workspaceId,
+      session_id: at.sessionId,
+      segment: at.segment,
+      turn_seq: row.turn_seq ?? null,
+      layer: row.layer,
+      refs: capRefs(row.refs),
+      tokens: row.tokens
+    });
+    if (parsed.success) valid.push(parsed.data);
+    else log?.warn({ sessionId: at.sessionId, layer: row.layer }, "context ledger row refused");
+  }
+  if (valid.length === 0) return true;
+  try {
+    const { error } = await insert(valid);
+    if (!error) return true;
+    log?.warn({ sessionId: at.sessionId, err: error.message }, "context ledger write failed");
+  } catch (err) {
+    log?.warn(
+      { sessionId: at.sessionId, err: err instanceof Error ? err.message : String(err) },
+      "context ledger write failed"
+    );
+  }
+  return false;
+}
+var ledgerInsert, MAX_REFS, COUNT_KINDS;
+var init_ledger = __esm({
+  "src/context/ledger.ts"() {
+    "use strict";
+    init_src();
+    ledgerInsert = (db) => (rows) => db.from("context_ledger").insert(
+      rows.map((r) => ({
+        workspace_id: r.workspace_id,
+        session_id: r.session_id,
+        segment: r.segment,
+        turn_seq: r.turn_seq ?? null,
+        layer: r.layer,
+        refs: r.refs,
+        tokens: r.tokens
+      }))
+    );
+    MAX_REFS = 50;
+    COUNT_KINDS = /* @__PURE__ */ new Set([
+      "activity_private",
+      "person_private",
+      "recall_private"
+    ]);
+  }
+});
+
 // src/context/recall.ts
 function parseHit(v) {
   if (!isObj2(v)) return null;
@@ -11316,8 +11283,8 @@ function hitLine(hit2, contentChars) {
   const title = text2(hit2.provenance.title);
   return `- ${word(hit2.kind)}${title ? ` ${quoted(title, 160)}` : ""}${meta ? ` (${meta})` : ""}: ${quoted(hit2.content, contentChars)}`;
 }
-function recallBlock(hits, max = RECALL_MAX_TOKENS) {
-  if (hits.length === 0) return "";
+function recallFit(hits, max) {
+  if (hits.length === 0) return { text: "", shown: [] };
   const frame = `${RECALL_PREAMBLE}
 ${RECALL_OPEN}
 
@@ -11326,10 +11293,28 @@ ${RECALL_CLOSE}`;
     hits.map((h) => ({ text: hitLine(h, RECALL_HIT_CHARS) })),
     max - estimateTokens(frame)
   );
-  return fit.text ? `${RECALL_PREAMBLE}
+  if (!fit.text) return { text: "", shown: [] };
+  return {
+    text: `${RECALL_PREAMBLE}
 ${RECALL_OPEN}
 ${fit.text}
-${RECALL_CLOSE}` : "";
+${RECALL_CLOSE}`,
+    shown: hits.slice(0, fit.shown.length)
+  };
+}
+function hitLedgerRef(hit2) {
+  if (hit2.kind === "fact") return UUID4.test(hit2.id) ? { kind: "fact", id: hit2.id } : null;
+  if (hit2.item_id === null || !UUID4.test(hit2.item_id)) return null;
+  const sourceRef = text2(hit2.provenance.source_ref);
+  return sourceRef !== null && sourceRef.length <= 200 ? { kind: "item", id: hit2.item_id, source_ref: sourceRef } : { kind: "item", id: hit2.item_id };
+}
+function recallLedgerRefs(shown) {
+  const named = shown.filter((h) => h.provenance.visibility === "workspace");
+  const hidden = shown.length - named.length;
+  return capRefs([
+    ...named.flatMap((h) => hitLedgerRef(h) ?? []),
+    ...hidden > 0 ? [{ kind: "recall_private", count: hidden }] : []
+  ]);
 }
 function recallQuery(prompt) {
   let rest = prompt.trim();
@@ -11354,11 +11339,12 @@ async function firstPromptRecall(deps, at) {
     const found = await searchMemory(deps.db, { sessionId: at.sessionId, query, scope }, at.signal);
     if (at.signal.aborted || !found.ok) return null;
     const hits = shownHits(found.hits, scope);
-    const block = recallBlock(hits);
+    const { text: block, shown } = recallFit(hits, RECALL_MAX_TOKENS);
     if (!block) return null;
+    const refs = recallLedgerRefs(shown);
     return {
       text: block,
-      ledger: { layer: "recall", refs: [], tokens: estimateTokens(block), turn_seq: at.turnSeq },
+      ledger: { layer: "recall", refs, tokens: estimateTokens(block), turn_seq: at.turnSeq },
       privateSeen: scope === "all" && holdsPrivate(hits)
     };
   } catch {
@@ -11440,6 +11426,7 @@ var init_recall = __esm({
     init_rotation();
     init_budget();
     init_format();
+    init_ledger();
     RECALL_MAX_TOKENS = 3e3;
     MAX_QUERY_CHARS = 4e3;
     MEMORY_KINDS = [
@@ -12376,7 +12363,7 @@ function asInterrupted(row) {
     )
   };
 }
-var SESSION_FLAG_SETTINGS, SESSION_ASK_TOOLS, GUARD_FAILED, WRITE_TOOLS_MATCHER, CONTEXT_HOOK_TIMEOUT_MS, ASK_TOOL_REASON, CAYENNE_CHECK_MS, CAYENNE_CHECK_POLL_MS, CAYENNE_UNCONFIRMED, TOOL_FAILED, toResult, INTERRUPTED, STOPPED_TURN, ClaudeSession;
+var SESSION_FLAG_SETTINGS, SESSION_ASK_TOOLS, GUARD_FAILED, WRITE_TOOLS_MATCHER, CONTEXT_HOOK_TIMEOUT_MS, ASK_TOOL_REASON, CAYENNE_CHECK_MS, CAYENNE_CHECK_POLL_MS, CAYENNE_UNLISTED_POLL_MS, CAYENNE_UNCONFIRMED, TOOL_FAILED, toResult, INTERRUPTED, STOPPED_TURN, ClaudeSession;
 var init_session2 = __esm({
   "src/claude/session.ts"() {
     "use strict";
@@ -12399,6 +12386,7 @@ var init_session2 = __esm({
     ASK_TOOL_REASON = "This session was started from a task, so every shell command needs the member's approval.";
     CAYENNE_CHECK_MS = 1e4;
     CAYENNE_CHECK_POLL_MS = 100;
+    CAYENNE_UNLISTED_POLL_MS = 1e3;
     CAYENNE_UNCONFIRMED = "Refused: the cayenne MCP server is not confirmed as the runner\u2019s own.";
     TOOL_FAILED = "Cayenne could not answer this call.";
     toResult = (a) => ({
@@ -12678,15 +12666,21 @@ var init_session2 = __esm({
        *
        * Any other answer stops the session. A `cayenne` with another `serverInfo` or config type is a
        * foreign server (`CAYENNE_NAME_TAKEN`); one never confirmed (connected without `serverInfo`, a
-       * status other than `pending`, still pending or unlisted at the deadline, a status call that
-       * fails) ends with `CAYENNE_UNCONFIRMED_EXIT`, the reason logged at warn. Until confirmed,
-       * `canUseTool` refuses every `cayenne` tool. A session already stopping or ended is left alone.
+       * status other than `pending`, still pending at the deadline, a status call that fails) ends with
+       * `CAYENNE_UNCONFIRMED_EXIT`, the reason logged at warn. Until confirmed, `canUseTool` refuses
+       * every `cayenne` tool. A session already stopping or ended is left alone.
+       *
+       * An unlisted `cayenne` is waited for, not stopped: the CLI answers `[]` before it registers its
+       * MCP servers, and on a slow network that took longer than the window (three chats killed
+       * 2026-10-21/22). Nothing answers under the name meanwhile, so no tool of it can be called.
        */
       async confirmCayenne(q) {
         let deadline;
+        let unlistedSince;
+        let unlistedWarned = false;
+        const warn = this.opts.log?.warn ?? ((obj, m) => logger.warn(obj, m));
         const end = (fatal, fields, msg) => {
           if (this.ending) return false;
-          const warn = this.opts.log?.warn ?? ((obj, m) => logger.warn(obj, m));
           warn({ providerSessionId: this.providerSessionId, ...fields }, msg);
           this.fatal = fatal;
           void this.stop();
@@ -12701,21 +12695,33 @@ var init_session2 = __esm({
           for (; ; ) {
             if (this.ending) return false;
             const statuses = await q.mcpServerStatus();
-            deadline ??= Date.now() + CAYENNE_CHECK_MS;
             const entry = statuses.find((s) => s.name === CAYENNE_SERVER);
-            const config2 = entry?.config;
-            const info = entry?.serverInfo;
+            if (!entry) {
+              unlistedSince ??= Date.now();
+              if (!unlistedWarned && Date.now() - unlistedSince >= CAYENNE_CHECK_MS) {
+                unlistedWarned = true;
+                warn(
+                  { providerSessionId: this.providerSessionId },
+                  "cayenne MCP server not listed yet; its tools stay refused until it is"
+                );
+              }
+              await new Promise((r) => setTimeout(r, CAYENNE_UNLISTED_POLL_MS));
+              continue;
+            }
+            deadline ??= Date.now() + CAYENNE_CHECK_MS;
+            const config2 = entry.config;
+            const info = entry.serverInfo;
             if (config2 !== void 0 && config2.type !== "sdk" || info !== void 0 && (info.name !== CAYENNE_SERVER || info.version !== this.cayenneVersion)) {
-              return end(CAYENNE_NAME_TAKEN, { scope: entry?.scope }, CAYENNE_NAME_TAKEN);
+              return end(CAYENNE_NAME_TAKEN, { scope: entry.scope }, CAYENNE_NAME_TAKEN);
             }
-            if (entry?.status === "connected") {
+            if (entry.status === "connected") {
               return info !== void 0 || unconfirmed("connected without serverInfo", entry.scope);
             }
-            if (entry && entry.status !== "pending") {
+            if (entry.status !== "pending") {
               return unconfirmed(`status ${entry.status}`, entry.scope);
             }
             if (Date.now() >= deadline) {
-              return unconfirmed(entry ? "still pending" : "not listed by mcpServerStatus");
+              return unconfirmed("still pending", entry.scope);
             }
             await new Promise((r) => setTimeout(r, CAYENNE_CHECK_POLL_MS));
           }
@@ -13095,64 +13101,6 @@ ${card.data}` : card.instructions;
   }
 });
 
-// src/context/ledger.ts
-function capRefs(refs, max = MAX_REFS) {
-  const counts = refs.filter((r) => COUNT_KINDS.has(r.kind)).slice(0, max);
-  const ids = refs.filter((r) => !COUNT_KINDS.has(r.kind)).slice(0, max - counts.length);
-  return [...ids, ...counts];
-}
-async function writeLedger(insert, at, rows, log) {
-  const valid = [];
-  for (const row of rows) {
-    const parsed = ContextLedgerRow.safeParse({
-      workspace_id: at.workspaceId,
-      session_id: at.sessionId,
-      segment: at.segment,
-      turn_seq: row.turn_seq ?? null,
-      layer: row.layer,
-      refs: capRefs(row.refs),
-      tokens: row.tokens
-    });
-    if (parsed.success) valid.push(parsed.data);
-    else log?.warn({ sessionId: at.sessionId, layer: row.layer }, "context ledger row refused");
-  }
-  if (valid.length === 0) return true;
-  try {
-    const { error } = await insert(valid);
-    if (!error) return true;
-    log?.warn({ sessionId: at.sessionId, err: error.message }, "context ledger write failed");
-  } catch (err) {
-    log?.warn(
-      { sessionId: at.sessionId, err: err instanceof Error ? err.message : String(err) },
-      "context ledger write failed"
-    );
-  }
-  return false;
-}
-var ledgerInsert, MAX_REFS, COUNT_KINDS;
-var init_ledger = __esm({
-  "src/context/ledger.ts"() {
-    "use strict";
-    init_src();
-    ledgerInsert = (db) => (rows) => db.from("context_ledger").insert(
-      rows.map((r) => ({
-        workspace_id: r.workspace_id,
-        session_id: r.session_id,
-        segment: r.segment,
-        turn_seq: r.turn_seq ?? null,
-        layer: r.layer,
-        refs: r.refs,
-        tokens: r.tokens
-      }))
-    );
-    MAX_REFS = 50;
-    COUNT_KINDS = /* @__PURE__ */ new Set([
-      "activity_private",
-      "person_private"
-    ]);
-  }
-});
-
 // src/coordination/collision.ts
 function detectCollision(path, scope) {
   const hits = scope.index.collisionsFor(scope.repo, path, scope.writer);
@@ -19121,12 +19069,15 @@ var init_manager = __esm({
         ]);
       }
       /**
-       * A `<handoff segment="n">` block handed to segment `n + 1` as its `handoff` row (design §5.7 L2).
-       * No ref names the segment yet: `ContextLedgerRef` has no kind for it (protocol §2.10).
+       * A `<handoff segment="n">` block handed to segment `n + 1` as its `handoff` row (design §5.7 L2),
+       * naming segment `n` (`memory_recall`'s `chat_segments:<session>:<n>`, protocol §2.10).
        */
       ledgerHandoff(sessionId, live, block, seq) {
+        const refs = [
+          { kind: "segment", session: sessionId, index: block.segment }
+        ];
         this.writeLedgerRows(sessionId, live.renewal.segment, [
-          { layer: "handoff", refs: [], tokens: estimateTokens(block), turn_seq: seq }
+          { layer: "handoff", refs, tokens: estimateTokens(block.text), turn_seq: seq }
         ]);
       }
       /**
@@ -19870,14 +19821,14 @@ var init_manager = __esm({
         if (send === "now") {
           const queued = first !== null && rn.queued[0] === first ? rn.queued.shift() : void 0;
           if (queued && !await this.writeQueued(sessionId, live, queued)) {
-            rn.pendingBlock = handoffBlock(n, handoffText);
+            rn.pendingBlock = { text: handoffBlock(n, handoffText), segment: n };
           } else {
             const uuid = queued?.uuid ?? randomUUID5();
             live.echoed.add(uuid);
             this.ledgerHandoff(
               sessionId,
               live,
-              handoffBlock(n, handoffText),
+              { text: handoffBlock(n, handoffText), segment: n },
               live.promptSeqs.get(uuid) ?? null
             );
             live.handed.push({ text: text3, seq: live.promptSeqs.get(uuid) ?? null });
@@ -19887,7 +19838,7 @@ var init_manager = __esm({
             this.turnHandedOver(live);
           }
         } else {
-          rn.pendingBlock = handoffBlock(n, handoffText);
+          rn.pendingBlock = { text: handoffBlock(n, handoffText), segment: n };
         }
         await this.flushQueued(sessionId, live);
       }
@@ -19965,7 +19916,7 @@ ${text3}`;
         const block = rn.pendingBlock;
         if (block !== null && !isSlashCommand(text3)) {
           rn.pendingBlock = null;
-          text3 = `${block}
+          text3 = `${block.text}
 
 ${text3}`;
           this.ledgerHandoff(sessionId, live, block, live.promptSeqs.get(uuid) ?? null);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jpcasabiancai/cayenne",
-  "version": "0.5.11",
+  "version": "0.5.13",
   "files": [
     "dist/cli.js"
   ],