crbro-memory 2.9.1 → 2.11.0

package/dist/mcp-surface.json

@@ -0,0 +1 @@
+{"build":"2.11.0-facd12b9308f70d1","latest":"2025-11-25","supported":["2025-11-25","2025-06-18","2025-03-26","2024-11-05","2024-10-07"],"initialize":{"capabilities":{"tools":{"listChanged":true}},"serverInfo":{"name":"crbro-memory","version":"2.11.0"},"instructions":"CRBRO is this user's persistent memory, kept on their own machine. Start every conversation with crbro_boot: it loads what earlier sessions left — protocols to follow, open items, hot topics. Before answering OR ACTING ON anything about the user, their projects, preferences, decisions or past work, call crbro_recall: the answer is usually stored, and making them repeat it is the failure this memory exists to prevent. Recall even when you think you know. Only when the current message itself states the answer does it outrank memory: then use it — a recall that finds nothing does not make it unknown, and a stored value older than what the user just said is the one to update, not to repeat. A row in a recall's possibly_stale is a last-known value that may have changed: before answering with it, check it where it lives (the file it names, the project's files or config, or the user) and answer from that; if you cannot check, say it may be out of date — never state it as current. Then crbro_revise status=verified or crbro_learn with supersedes. Acting includes touching one of their systems: before the first command that explores or changes a project of theirs, recall what is already known about it — a stored pattern or map usually holds the very procedure you were about to reconstruct by reading files, and reconstructing it is how you end up doing the steps in the wrong order. Questions about CRBRO itself (version, counts, whether semantic recall is on) are crbro_inspect view=status. Read one entry, not a whole neuron: view=neuron gives an index, entries=[ids] the text. Save with crbro_learn as you go, and close with crbro_consolidate before the conversation ends."},"tools":{"tools":[{"name":"crbro_boot","title":"Boot the brain","description":"Read the brain at session start — call it FIRST in every conversation; writes only the boot stamp. Returns protocol_enforcement (mandatory directives: follow them), counts, open_items (due first, then newest; review:true = over a month old, no due date), recently_closed (done: never report as pending), hot_topics, recent_sessions headlines and memory_discipline; `more` names the call for what is left out. Syncs team spaces (offline is normal). Pass project (working folder or repo) to scope open items and rank its neurons first; project_neurons binds them. Close with crbro_consolidate.","inputSchema":{"type":"object","properties":{"project":{"description":"Working folder or repository; full paths tell same-named folders apart. The scope lasts for this connection.","type":"string"},"project_id":{"description":"Stable local id when declaring aliases.","type":"string"},"project_aliases":{"description":"Other folders or remotes of the same project. Nothing remote is contacted.","maxItems":31,"type":"array","items":{"type":"string"}},"project_neurons":{"description":"Neuron ids to bind to the project; replaces the binding, omitted keeps it. Unknown ids are skipped and listed in unknown_project_neurons.","maxItems":100,"type":"array","items":{"type":"string"}}}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_inspect","title":"Inspect the brain","description":"Read-only views of the brain by id or name; nothing is written. Search by content is crbro_recall. view=status: CRBRO itself — version, brain path, totals, last boot, semantic recall, shelf-life windows, retired 1.x tool names. view=neuron: an index of one neuron (header, counts, connections, one line per entry: id, kind, date, preview), paged; entries=[ids] reads those whole; detail=full dumps it, shortened when large. Absent temporal, verification and freshness mean current_claim, none, unverified. view=neurons: rows hottest first. view=sessions: day logs newest first, where session summaries are read. view=global_map: domain clusters and bridges.","inputSchema":{"type":"object","properties":{"view":{"type":"string","enum":["status","neuron","neurons","sessions","global_map"],"description":"Which read. Parameters for other views are ignored, never an error."},"neuron":{"description":"view=neuron, required: id (\"project_octochat\") or name.","type":"string"},"detail":{"description":"view=neuron: index (default, cheap) or full.","type":"string","enum":["index","full"]},"entries":{"description":"view=neuron: entry ids or exact text, any kind (\"map\" for the map); ignores detail.","type":"array","items":{"type":"string"}},"session":{"description":"view=sessions: one day log whole, e.g. \"session_2026-09-07\".","type":"string"},"domain":{"description":"view=neurons: exact domain.","type":"string"},"type":{"description":"view=neurons: only this type.","type":"string","enum":["project","tech","lang","person","domain","process","protocol"]},"min_heat":{"description":"view=neurons: minimum heat.","type":"number","minimum":0,"maximum":1},"min_strength":{"description":"view=neuron: hide weaker connections.","type":"number","minimum":0,"maximum":1},"limit":{"description":"Page size (neuron 25/200 max, neurons 50/500, sessions 10/100).","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"offset":{"description":"Items to skip (neuron index, neurons).","type":"integer","minimum":0,"maximum":9007199254740991},"include_superseded":{"description":"view=neuron: list retired entries too (default false).","type":"boolean"}},"required":["view"]},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"},"outputSchema":{"type":"object","properties":{"view":{"type":"string","enum":["status","neuron","neurons","sessions","global_map"]},"status":{"type":"object","properties":{"crbro_version":{"type":"string"}},"required":["crbro_version"],"additionalProperties":{}},"neuron":{"type":"object","properties":{},"additionalProperties":{}},"neurons":{"type":"object","properties":{"total":{"type":"number"}},"required":["total"],"additionalProperties":{}},"sessions":{"type":"object","properties":{"total":{"type":"number"}},"required":["total"],"additionalProperties":{}},"global_map":{"type":"object","properties":{"total_clusters":{"type":"number"}},"required":["total_clusters"],"additionalProperties":{}}},"required":["view"],"additionalProperties":false}},{"name":"crbro_learn","title":"Learn something","description":"Write a fact, decision, pattern, preference, error or debt to a neuron (created when the topic matches none). Recall first: it may exist. A replacement passes supersedes; retiring without one is crbro_revise; deleting is crbro_forget. A value that can change names its source (file, key, URL, person). Repeating a fact merges metadata, never verifies it (crbro_revise status=verified does). One claim per fact: past ~600 characters the answer suggests splitting; a huge neuron, crbro_revise move_to. Credentials become markers: crbro_secret them, store only the name. Returns neuron_id, action, shelf_life, near_duplicates, supersedes_unmatched (still live).","inputSchema":{"type":"object","properties":{"topic":{"description":"Topic name, e.g. \"OctoChat\"; or pass neuron_id.","type":"string"},"type":{"type":"string","enum":["fact","decision","pattern","preference","error","debt"],"description":"error = a mistake with its fix; debt = a deliberate deferral with its ceiling and revisit trigger."},"content":{"type":"string","description":"Self-contained: recalled without this conversation. For a changeable value, say where it came from (file, key, URL, person)."},"confidence":{"description":"Facts: 0-1, default 1.","type":"number","minimum":0,"maximum":1},"domain":{"description":"Set on a new neuron, or replacing \"general\".","type":"string"},"rationale":{"description":"Decisions: why. Indexed with it.","type":"string"},"neuron_id":{"description":"Exact id from crbro_recall; skips name matching.","type":"string"},"supersedes":{"description":"Ids or exact text of the facts this replaces; unmatched ones stay live.","type":"array","items":{"type":"string"}},"keywords":{"description":"Facts, expected: 2-5 words a future question may use that the text lacks (synonyms, other language, generic name).","type":"array","items":{"type":"string"}},"keywords_replace":{"description":"Replace, not merge, the keywords of an identical fact.","type":"boolean"},"shelf_life":{"description":"Facts: volatile (versions, ports, hosts, config, roles) to permanent (history). Inferred if omitted.","type":"string","enum":["volatile","normal","durable","permanent"]},"reference":{"description":"Facts: where to check it (relative file, URL, person). Data, never fetched.","type":"object","properties":{"kind":{"type":"string","enum":["file","url","person"]},"value":{"type":"string","minLength":1,"maxLength":2048},"field":{"type":"string","maxLength":256},"project":{"type":"string","maxLength":256}},"required":["kind","value"]},"temporal":{"description":"Facts: current state (default) or a historical record.","type":"string","enum":["current","historical"]}},"required":["type","content"]},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_recall","title":"Recall","description":"Read-only search of everything saved in earlier sessions. Call it BEFORE answering anything about the user, their projects, preferences, decisions or past work: the answer is usually stored. One row per neuron: the best entry (matching_content; entry_id → crbro_inspect view=neuron entries=[id] reads it whole), confidence (weak: verify; a search match, not truth) and also_matched previews. Absent fields hold their default: temporal current_claim, verification none (present = a check the caller reported), freshness unverified, provenance local. Lines not the user's own carry origin, also_matched too: team:<space> with self-declared by, or miner. Rows past their shelf life move to possibly_stale as last_known with a next_step: check before answering with one. has_map: read crbro_map before touching that system.","inputSchema":{"type":"object","properties":{"query":{"type":"string","description":"What to look for; a few distinctive terms beat a sentence."},"queries":{"description":"Other phrasings searched with query and fused: synonyms, the other language, product names. 2-4.","type":"array","items":{"type":"string"}},"domain":{"description":"Only neurons of this exact domain.","type":"string"},"limit":{"description":"Rows, default 5.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"since":{"description":"A day (\"2026-09-01\") or span (\"7d\", \"2w\", \"3m\"); undated entries are skipped and counted.","type":"string"},"kind":{"description":"Only these entry kinds, e.g. [\"error\"] before repeating a mistake. Leaves out day logs.","type":"array","items":{"type":"string","enum":["fact","decision","pattern","preference","error","debt","map"]}},"project":{"description":"Project id or alias; default the boot project of this connection.","type":"string"},"scope":{"description":"auto (default) ranks the bound project first; project restricts to it; all ignores it.","type":"string","enum":["auto","project","all"]},"neurons":{"description":"Only these neuron ids; no day logs.","maxItems":100,"type":"array","items":{"type":"string"}},"intent":{"description":"current splits historical records into historical_matches; history keeps only them; any (default).","type":"string","enum":["any","current","history"]}},"required":["query"]},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"},"outputSchema":{"type":"object","properties":{"stale_warning":{"type":"string"},"query":{"type":"string"},"total_results":{"type":"number"},"returned":{"type":"number"},"has_more":{"type":"boolean"},"results":{"type":"array","items":{"type":"object","properties":{"neuron_id":{"type":"string"},"name":{"type":"string"},"matching_content":{"type":"string"},"confidence":{"type":"string","enum":["strong","weak"]},"entry_id":{"type":"string"},"origin":{"type":"string"},"also_matched":{"type":"array","items":{"type":"object","properties":{"preview":{"type":"string"},"origin":{"type":"string"},"stale_days":{"type":"number"}},"required":["preview"],"additionalProperties":{}}}},"required":["neuron_id","name","matching_content"],"additionalProperties":{}}},"possibly_stale":{"type":"array","items":{"type":"object","properties":{"next_step":{"type":"string"},"last_known":{"type":"string"},"neuron_id":{"type":"string"}},"required":["next_step","last_known","neuron_id"],"additionalProperties":{}}},"possibly_stale_count":{"type":"number"},"historical_matches":{"type":"array","items":{}},"sessions_matched":{"type":"array","items":{}},"hint":{"type":"string"},"no_answer":{"description":"Nothing cleared the evidence bar: at most 3 weak rows, the nearest","type":"boolean"},"semantic":{"description":"warming: model still loading, keyword-only answer","type":"string"}},"required":["query","total_results","results","hint"],"additionalProperties":{}}},{"name":"crbro_revise","title":"Revise a neuron","description":"Write: change what a neuron says without deleting anything — for what stopped being true, or never was, with nothing replacing it (a replacement is crbro_learn with supersedes; what must not exist on disk, crbro_forget). facts and entries take a status: superseded or retracted retire them (kept in the file, gone from recall), active reactivates, and status verified records a check against the source. summary, domain, tags and name edit metadata in the same call; the id never changes. move_to splits: the listed entries go to another neuron with their dates. Anything in unmatched is STILL LIVE: fix and re-run.","inputSchema":{"type":"object","properties":{"neuron":{"type":"string","description":"Neuron id or name."},"facts":{"description":"Fact ids (entry_id from crbro_recall) or exact text.","type":"array","items":{"type":"string"}},"entries":{"description":"Decisions, patterns, errors or debts by exact text (or id with verified and move_to).","type":"array","items":{"type":"string"}},"status":{"description":"superseded (default: newer truth exists), retracted (never true), active (reactivate) or verified (still holds at its source).","type":"string","enum":["superseded","retracted","active","verified"]},"note":{"description":"Why; stored with the retirement.","type":"string"},"evidence":{"description":"With verified: source = you checked the reference; user = the user confirmed.","type":"object","properties":{"method":{"type":"string","enum":["source","user"]},"reference":{"type":"object","properties":{"kind":{"type":"string","enum":["file","url","person"]},"value":{"type":"string","minLength":1,"maxLength":2048},"field":{"type":"string","maxLength":256},"project":{"type":"string","maxLength":256}},"required":["kind","value"]}},"required":["method"]},"summary":{"description":"New neuron summary; credentials are redacted.","type":"string"},"domain":{"description":"New domain.","type":"string"},"tags":{"description":"Replaces the WHOLE tag list; on protocol neurons re-send priority: and source:.","type":"array","items":{"type":"string"}},"name":{"description":"Rename; id, file and links stay.","type":"string"},"move_to":{"description":"Split: move the listed facts/entries to this neuron id or name (created if missing), dates kept. Refused on a shared neuron.","type":"string"}},"required":["neuron"]},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_forget","title":"Forget for good","description":"Write, destructive: remove from disk after a quarantine copy (backup returned) — for what must not exist on disk: a credential, personal data, a whole neuron. What merely stopped being true goes to crbro_revise, which keeps the history. One mode per call: facts (entries of any kind, or the map); entire (a neuron and its synapses, in two steps: without confirm_token it is a dry run — show the user, get agreement, call again with the token); restore (the newest quarantine copy); merge_into (union a neuron into another, delete the source); session (one day log). entire and merge_into refuse a shared neuron. Rotate any removed credential.","inputSchema":{"type":"object","properties":{"neuron":{"description":"Neuron id or name (restore: exact id). Not needed for session.","type":"string"},"facts":{"description":"Entry ids or exact text; the exact map text removes the map.","type":"array","items":{"type":"string"}},"entire":{"description":"The whole neuron; without confirm_token a dry run.","type":"boolean"},"confirm_token":{"description":"From the dry run; refused if the neuron changed since.","type":"string"},"restore":{"description":"Bring back the newest quarantine copy (merged in if the neuron exists again).","type":"boolean"},"merge_into":{"description":"Target neuron id or name; `neuron` is unioned into it, then deleted.","type":"string"},"session":{"description":"Day log id (\"session_2026-09-03\" or \"2026-09-03\").","type":"string"}}},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_connect","title":"Connect two neurons","description":"Write: create, strengthen or delete the undirected synapse between two neurons (ids validated). action=connect (default) creates it at 0.5 and adds 0.1 per repeat (cap 1.0), or sets the strength given; action=disconnect deletes it — the destructive side. crbro_consolidate already links neurons written in one session: use this for relationships beyond co-occurrence. Read links with crbro_inspect view=neuron. Returns synapse_id, action (created, strengthened, disconnected, absent) and strength.","inputSchema":{"type":"object","properties":{"action":{"description":"connect (default) or disconnect; an absent synapse is action:absent, not an error.","type":"string","enum":["connect","disconnect"]},"from":{"type":"string","description":"Exact neuron id, e.g. \"project_octochat\"."},"to":{"type":"string","description":"Exact neuron id; order does not matter."},"type":{"description":"Set on creation only (default conceptual).","type":"string","enum":["dependency","causal","temporal","conceptual","hierarchy","alternative"]},"strength":{"description":"Absolute strength to set instead of the 0.5 / +0.1 rule.","type":"number","minimum":0,"maximum":1},"context":{"description":"One line on the relationship; replaces the stored one.","type":"string"}},"required":["from","to"]},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_context","title":"Working context","description":"Read or write the working context: active topics and open items. With no change field it reads (written:false) everything: each open item whole with due and done_when, and recently closed. A write returns what changed and the counts (return_context:true for the whole context). Scope: this connection's project plus global items; scope=all spans every project. resolve_pending closes items (the last 15 stay in recently_closed); discard_pending drops them without recording them as done. Prefer ids. Nothing is deleted by age. Sessions are logged by crbro_consolidate.","inputSchema":{"type":"object","properties":{"project":{"description":"Project id or alias; default the boot project.","type":"string"},"scope":{"description":"all spans every project.","type":"string","enum":["project","all"]},"due":{"description":"With add_pending: a calendar day YYYY-MM-DD, only when agreed.","type":"string"},"done_when":{"description":"With add_pending: an observable completion condition.","type":"string"},"set_topics":{"description":"Replace the active topics with these neuron ids.","type":"array","items":{"type":"string"}},"add_pending":{"description":"An open item, checkable later. Identical text is deduplicated; re-adding updates due and done_when.","type":"string"},"resolve_pending":{"description":"Close items by id (\"p_ab12cd\") or 8+ characters of their text; several can match. Empty resolved = no match.","type":"string"},"discard_pending":{"description":"Drop items, same matcher, without recording them as done.","type":"string"},"clear":{"description":"Empty topics, open and closed items (of the project only, when scoped), before the rest.","type":"boolean"},"return_context":{"description":"With a write: return the whole context instead of the change and counts.","type":"boolean"}}},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_map","title":"System map","description":"Read or replace a neuron's system map: ONE living document — where the system lives, what serves what, the traps that cost hours. Read it before working on a system touched in past sessions; after changing it, rewrite it whole. Omit content to read (map:null if none); content replaces the old map entirely; an empty string clears it. crbro_inspect view=neuron also returns it. Writing creates the neuron if needed and redacts credentials. Atomic facts go to crbro_learn — the map is the prose around them.","inputSchema":{"type":"object","properties":{"neuron":{"type":"string","description":"Neuron id or name."},"content":{"description":"The whole new map (omit to read): paths, ids, what serves what, gotchas.","type":"string"},"domain":{"description":"Domain for a neuron created by the write.","type":"string"}},"required":["neuron"]},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_consolidate","title":"Consolidate the session","description":"Write: close the session — the only way to log one; call it before the conversation ends, or the session's knowledge is lost. Logs the summary (credentials stripped), flushes the index, recalculates heat, links the neurons written this session and syncs team spaces (offline is normal). Returns session_id, facts_saved, decisions_saved, topics_touched and sync state; promotion_candidates: own lessons found in 2+ project neurons, with a suggested_target (nothing moves). Mid-session open items go to crbro_context; housekeeping, crbro_maintenance.","inputSchema":{"type":"object","properties":{"summary":{"type":"string","description":"A headline paragraph, not a report: what was done, decided and left open. Facts go to crbro_learn, where recall finds them as facts; this is narrative."},"topics_touched":{"description":"Neuron ids used without writing (recalled, inspected); unknown ids go to topics_unknown.","type":"array","items":{"type":"string"}}},"required":["summary"]},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_maintenance","title":"Brain maintenance","description":"Write: brain housekeeping — recalculate heat, prune weak synapses, check integrity, rebuild the search index. Returns a report (counts, integrity_issues, repairable, notes) and flags debts without a revisit trigger. dry_run:true writes nothing. Extras run only when asked: archive cold neurons (they stop being searchable), unarchive, purge_boilerplate, repair, backfill_dates, compact. Session close is crbro_consolidate; reading the brain is crbro_inspect.","inputSchema":{"type":"object","properties":{"dry_run":{"description":"Report only: nothing is written. Counts, debts and integrity checks still run.","type":"boolean"},"archive":{"description":"Move cold neurons (heat < 0.05, untouched 90+ days) to archives/, out of search. Dry-run first (archivable_ids); undo with unarchive.","type":"boolean"},"unarchive":{"description":"Neuron ids (or \"all\") to bring back from archives/ and reindex.","anyOf":[{"type":"array","items":{"type":"string"}},{"type":"string","const":"all"}]},"purge_boilerplate":{"description":"Delete contentless facts the miner left (counted in every report); a quarantine copy is kept.","type":"boolean"},"repair":{"description":"Fix what the integrity check found (dangling links, orphan synapses, stale keys, counters); lists repairs[].","type":"boolean"},"backfill_dates":{"description":"Date pre-1.13 entries from a day stated in their own text; nothing is guessed (dates_backfilled).","type":"boolean"},"compact":{"description":"Fold one-line neurons from a bulk import (compact_groups) into one digest per group; sources copied to quarantine first, shared neurons untouched. Dry-run first.","type":"boolean"},"stale_list":{"description":"Read-only: page through every stale entry, most overdue first (default limit 50). Runs alone.","type":"object","properties":{"offset":{"type":"integer","minimum":0,"maximum":9007199254740991},"limit":{"type":"integer","minimum":1,"maximum":200},"neuron_id":{"type":"string"}}},"stale_review":{"description":"Act on many stale entries: verify (still true; its clock restarts) or retire them (superseded / retracted). Takes the pairs stale_list returns; runs alone, not with dry_run.","type":"object","properties":{"action":{"type":"string","enum":["verify","superseded","retracted"]},"entries":{"minItems":1,"maxItems":500,"type":"array","items":{"type":"object","properties":{"neuron_id":{"type":"string"},"entry_id":{"type":"string"}},"required":["neuron_id","entry_id"]}},"note":{"type":"string"}},"required":["action","entries"]}}},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_audit","title":"Audit for credentials","description":"Read-only scan of every neuron (all entry kinds and the map) and every session log for credentials stored before the filter caught them: API keys, tokens, passwords. Reports where and what kind, never the values. Findings are also in the search index, so recall can return them: remove them with crbro_forget (facts for entries, session for a day log), then rotate them. Run it after upgrading or when a secret may have been pasted. crbro_inspect shows content; this judges it.","inputSchema":{"type":"object","properties":{}},"annotations":{"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false},"execution":{"taskSupport":"forbidden"},"outputSchema":{"type":"object","properties":{"neurons_affected":{"type":"number"},"facts_affected":{"type":"number"},"findings":{"type":"array","items":{"type":"object","properties":{"neuron_id":{"type":"string"},"kinds":{"type":"array","items":{"type":"string"}}},"required":["neuron_id","kinds"],"additionalProperties":{}}},"sessions_affected":{"type":"number"},"session_findings":{"type":"array","items":{"type":"object","properties":{"session_id":{"type":"string"},"kinds":{"type":"array","items":{"type":"string"}}},"required":["session_id","kinds"],"additionalProperties":{}}},"message":{"type":"string"},"note":{"type":"string"}},"required":["neurons_affected","facts_affected","findings","message"],"additionalProperties":false}},{"name":"crbro_secret","title":"Keychain secret","description":"Read or write credentials in the OS keychain (macOS Keychain, Linux Secret Service, Windows DPAPI); no sync or team space reaches it. When the user hands you a credential, set it, then crbro_learn only the NAME. get returns value and source: never print it unless asked; missing = found:false. Environment variables count only as CRBRO_SECRET_<NAME> or when listed in CRBRO_SECRET_ENV. Overwriting with a different value, and remove, are two-step: the first call changes nothing and returns confirm_token; show the user, get agreement, call again with confirm. A missing store file is an error, never empty; on Windows `crbro-memory secret restore` puts back a sealed copy.","inputSchema":{"type":"object","properties":{"action":{"type":"string","enum":["get","set","list","remove","status"],"description":"get one, set (store or update) one, list names only, remove one, status = which keychain this machine offers."},"name":{"description":"SCREAMING_SNAKE_CASE, e.g. WORDPRESS_APP_PASSWORD. For get, set, remove.","type":"string"},"value":{"description":"The credential, non-empty. Only for set.","type":"string"},"description":{"description":"What it is for. Only for set.","type":"string"},"confirm":{"description":"confirm_token from the first call of an overwrite or remove.","type":"string"}},"required":["action"]},"annotations":{"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":false},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_space","title":"Team space","description":"Read or write team spaces: shared memory in a private git repository holding only the projects you choose to share. create starts one; join clones a teammate's; status shows your identity and spaces; sync exchanges notes now (boot and consolidate do it on their own; offline is a normal answer); leave pushes pending notes and deletes the local copy, keeping your neurons. Joining shares nothing: each project goes in with crbro_share. create and join reply ok:false with the reason on failure.","inputSchema":{"type":"object","properties":{"action":{"type":"string","enum":["create","join","status","sync","leave"],"description":"leave = sync, then forget the space locally."},"name":{"description":"Short name, the same on every machine, e.g. \"equipo\". Required for create, join, leave; sync without it syncs all.","type":"string"},"remote":{"description":"Git URL of an EMPTY private repository for create; the creator's URL for join.","type":"string"},"author":{"description":"How your notes are signed, lowercase, e.g. \"ana\". Required for create and join.","type":"string"},"branch":{"description":"create and join: branch (default \"main\").","type":"string"}},"required":["action"]},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true},"execution":{"taskSupport":"forbidden"}},{"name":"crbro_share","title":"Share a project","description":"Write: put one neuron into a team space, or take it out with unshare. Without confirm it is a dry run: it reports what would be sent (ops_to_emit; preferences never leave this machine) and refuses outright if it finds a credential (crbro_forget it, rotate it). Show the user, get agreement, call again with the confirm token; a stale token is refused. From then on what is learned about that project reaches the team on each crbro_space sync or consolidate. unshare stops future notes; what was sent stays with the team.","inputSchema":{"type":"object","properties":{"neuron":{"type":"string","description":"Neuron id or name."},"space":{"description":"Space name from crbro_space; required unless unshare.","type":"string"},"confirm":{"description":"The dry run's confirm_token (given only when no credential was found).","type":"string"},"unshare":{"description":"Stop sending notes for `neuron`; what was sent stays with the team. space and confirm are ignored.","type":"boolean"}},"required":["neuron"]},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true},"execution":{"taskSupport":"forbidden"}}]}}

package/dist/miner/extractor.js

@@ -4,6 +4,7 @@
 // No AI required — uses regex patterns and basic NLP.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractContent = extractContent;
+exports.isMinerNoise = isMinerNoise;
 // Common technology keywords to detect
 const TECH_KEYWORDS = new Set([
     'react', 'vue', 'angular', 'svelte', 'next.js', 'nextjs', 'nuxt', 'vite',
@@ -87,7 +88,7 @@ function extractContent(text, filename) {
         let match;
         while ((match = pattern.exec(text)) !== null) {
             const decision = match[0].trim();
-            if (decision.length > 10 && decision.length < 200) {
+            if (decision.length > 10 && decision.length < 200 && !isMinerNoise(cleanExtract(decision))) {
                 decisions.push(cleanExtract(decision));
             }
         }
@@ -98,7 +99,7 @@ function extractContent(text, filename) {
         let match;
         while ((match = pattern.exec(text)) !== null) {
             const fact = match[0].trim();
-            if (fact.length > 10 && fact.length < 200) {
+            if (fact.length > 10 && fact.length < 200 && !isMinerNoise(cleanExtract(fact))) {
                 facts.push(cleanExtract(fact));
             }
         }
@@ -123,29 +124,75 @@ function cleanExtract(text) {
         .trim();
 }
 /**
- * Generate a one-line summary from the first meaningful paragraph.
+ * Lines that are scaffolding, not knowledge: a checklist item ("- [x] Navigate
+ * to https://…", or "- x Navigate to …" once the brackets were stripped, which
+ * is how ~300 of them reached a real brain as facts), a bare link, a heading,
+ * a rule. Exported for crbro_maintenance, which finds the ones already stored
+ * (purge_boilerplate, reviewed with dry_run first).
+ */
+function isMinerNoise(text) {
+    const t = (text || '').trim();
+    if (!t)
+        return true;
+    if (/^#{1,6}\s/.test(t))
+        return true; // heading
+    if (/^[-*+]\s*\[[ xX~-]?\]/.test(t))
+        return true; // - [ ] / - [x] checklist
+    if (/^[-*+]\s+[xX]\s+\S/.test(t))
+        return true; // "- x Navigate…": a checklist after cleanup
+    if (/^(?:[-*+]\s*)?<?(?:https?|file):\/\/\S+>?\.?$/i.test(t))
+        return true; // a bare link
+    if (/^[-*_=~]{3,}$/.test(t))
+        return true; // a rule
+    return false;
+}
+/** A sentence somebody wrote, not a list item, a table row, a quote, markup or a link with a few words around it. */
+function isProse(line) {
+    const t = line.trim();
+    if (isMinerNoise(t))
+        return false;
+    if (/^(?:[-*+]|\d+[.)])\s/.test(t))
+        return false; // list item
+    if (/^[|>]/.test(t) || /^<\/?[a-z]/i.test(t))
+        return false; // table, quote, HTML
+    const words = t.split(/\s+/).filter(w => /[\p{L}]/u.test(w));
+    if (words.length < 5)
+        return false;
+    const urls = (t.match(/\S*:\/\/\S+/g) || []).join('').length;
+    return urls <= t.length * 0.4;
+}
+/**
+ * A one-line summary from the first real sentence: never a heading, a list or
+ * checklist item, a table row, a link, code or frontmatter. Nothing when the
+ * file has no prose — an empty summary is better than a checklist line stored
+ * as a fact.
  */
 function generateSummary(lines) {
-    for (const line of lines) {
-        const trimmed = line.trim();
-        // Skip empty lines, headers, code blocks, frontmatter
-        if (!trimmed)
+    let inCode = false;
+    let inFrontmatter = false;
+    for (let i = 0; i < lines.length; i++) {
+        const trimmed = lines[i].trim();
+        if (trimmed.startsWith('```') || trimmed.startsWith('~~~')) {
+            inCode = !inCode;
             continue;
-        if (trimmed.startsWith('#'))
+        }
+        if (inCode)
             continue;
-        if (trimmed.startsWith('```'))
+        if (i === 0 && trimmed === '---') {
+            inFrontmatter = true;
             continue;
-        if (trimmed.startsWith('---'))
+        }
+        if (inFrontmatter) {
+            if (trimmed === '---')
+                inFrontmatter = false;
             continue;
-        if (trimmed.startsWith('|'))
+        }
+        if (trimmed.length <= 30 || !isProse(trimmed))
             continue;
-        if (trimmed.startsWith('-') && trimmed.length < 20)
+        const clean = cleanExtract(trimmed);
+        if (isMinerNoise(clean))
             continue;
-        // Found a substantial line
-        if (trimmed.length > 30) {
-            const clean = cleanExtract(trimmed);
-            return clean.length > 150 ? clean.substring(0, 150) + '...' : clean;
-        }
+        return clean.length > 150 ? clean.substring(0, 150) + '...' : clean;
     }
     return '';
 }

package/dist/miner/scheduler.js

@@ -2,28 +2,90 @@
 // ─── CRBRO Miner: Cross-Platform Scheduler ───────────────────
 // Sets up automatic mining as a scheduled task on any OS.
 Object.defineProperty(exports, "__esModule", { value: true });
+exports._setSchedulerRunnerForTests = _setSchedulerRunnerForTests;
+exports.cronWithout = cronWithout;
+exports.windowsTaskCommand = windowsTaskCommand;
+exports.windowsCreateArgs = windowsCreateArgs;
 exports.setupScheduler = setupScheduler;
 exports.getSchedulerStatus = getSchedulerStatus;
 exports.removeScheduler = removeScheduler;
+exports.linuxCronLine = linuxCronLine;
+exports.findNpxPath = findNpxPath;
 const promises_1 = require("fs/promises");
 const path_1 = require("path");
 const os_1 = require("os");
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
+const realRunner = (cmd, args, input) => {
+    const r = (0, child_process_1.spawnSync)(cmd, args, { encoding: 'utf-8', input, windowsHide: true, timeout: 30_000 });
+    return { status: r.status, stdout: r.stdout || '', stderr: r.stderr || '', error: r.error };
+};
+let run = realRunner;
+let platformOverride = null;
+const currentPlatform = () => platformOverride ?? (0, os_1.platform)();
+/** Tests only: replace the command runner and, optionally, the platform. */
+function _setSchedulerRunnerForTests(r, os = null) {
+    run = r ?? realRunner;
+    platformOverride = r ? os : null;
+}
+function must(r, what) {
+    if (r.error || r.status !== 0) {
+        throw new Error(`${what} failed: ${(r.stderr || r.error?.message || `exit ${r.status}`).trim()}`);
+    }
+    return r;
+}
+/** Where the miner logs and where a copy of the previous crontab goes. */
+function brainRoot() {
+    return process.env['CRBRO_PATH'] || (0, path_1.join)((0, os_1.homedir)(), '.crbro');
+}
+/** The current crontab, or '' when the user has none. Any other failure throws. */
+function readCrontab() {
+    const r = run('crontab', ['-l']);
+    if (r.status === 0)
+        return r.stdout;
+    if (/no crontab/i.test(r.stderr))
+        return '';
+    throw new Error(`Could not read the crontab: ${(r.stderr || r.error?.message || '').trim() || `exit ${r.status}`}`);
+}
+/** Keep the previous crontab next to the brain, then install the new one through stdin. */
+async function writeCrontab(previous, next) {
+    if (previous.trim()) {
+        await (0, promises_1.mkdir)(brainRoot(), { recursive: true });
+        const stamp = new Date().toISOString().replace(/[-:.]/g, '').slice(0, 15);
+        await (0, promises_1.writeFile)((0, path_1.join)(brainRoot(), `crontab.before-crbro-${stamp}.txt`), previous, 'utf-8');
+    }
+    must(run('crontab', ['-'], next), 'crontab');
+}
+/** The cron file without our line, the user's lines byte for byte. */
+function cronWithout(current) {
+    return current.split('\n').filter(l => !l.includes('crbro-memory mine'));
+}
+/**
+ * The /TR value for schtasks: the quoted absolute path of npx.cmd and its
+ * arguments, as one argument. Passed as an array element, not through a
+ * shell, so the quotes reach schtasks intact (I11).
+ */
+function windowsTaskCommand(npxPath) {
+    return `"${npxPath}" -y crbro-memory mine`;
+}
+function windowsCreateArgs(npxPath) {
+    return ['/Create', '/TN', TASK_NAME, '/TR', windowsTaskCommand(npxPath),
+        '/SC', 'HOURLY', '/MO', String(FREQUENCY_HOURS), '/F', '/RL', 'LIMITED'];
+}
 const TASK_NAME = 'CRBRO-AutoMiner';
 const FREQUENCY_HOURS = 2;
 /**
  * Detect the platform and set up the appropriate scheduler.
  */
 async function setupScheduler() {
-    const os = (0, os_1.platform)();
+    const os = currentPlatform();
     switch (os) {
         case 'win32':
             return setupWindows();
         case 'darwin':
             return setupMacOS();
         case 'linux':
-            return setupLinux();
+            return await setupLinux();
         default:
             return {
                 success: false,
@@ -38,7 +100,7 @@ async function setupScheduler() {
  * Check if the scheduler is already installed.
  */
 async function getSchedulerStatus() {
-    const os = (0, os_1.platform)();
+    const os = currentPlatform();
     switch (os) {
         case 'win32':
             return getWindowsStatus();
@@ -60,22 +122,26 @@ async function getSchedulerStatus() {
  * Remove the scheduled task.
  */
 async function removeScheduler() {
-    const os = (0, os_1.platform)();
+    const os = currentPlatform();
     try {
         switch (os) {
             case 'win32':
-                (0, child_process_1.execSync)(`schtasks /Delete /TN "${TASK_NAME}" /F`, { stdio: 'pipe' });
+                must(run('schtasks', ['/Delete', '/TN', TASK_NAME, '/F']), 'schtasks /Delete');
                 return { success: true, message: `Removed Windows Task Scheduler entry: ${TASK_NAME}` };
             case 'darwin': {
                 const plistPath = (0, path_1.join)((0, os_1.homedir)(), 'Library', 'LaunchAgents', `com.crbro.miner.plist`);
-                (0, child_process_1.execSync)(`launchctl unload "${plistPath}"`, { stdio: 'pipe' });
-                (0, child_process_1.execSync)(`rm "${plistPath}"`, { stdio: 'pipe' });
+                must(run('launchctl', ['unload', plistPath]), 'launchctl unload');
+                await (0, promises_1.unlink)(plistPath);
                 return { success: true, message: `Removed macOS LaunchAgent: ${plistPath}` };
             }
             case 'linux': {
-                const currentCron = (0, child_process_1.execSync)('crontab -l 2>/dev/null || echo ""', { encoding: 'utf-8' });
-                const filtered = currentCron.split('\n').filter(l => !l.includes('crbro-memory mine')).join('\n');
-                (0, child_process_1.execSync)(`echo "${filtered}" | crontab -`, { stdio: 'pipe' });
+                const currentCron = readCrontab();
+                const filtered = cronWithout(currentCron);
+                if (filtered.length === currentCron.split('\n').length) {
+                    return { success: true, message: 'No crontab entry for the CRBRO miner. Nothing changed.' };
+                }
+                const next = filtered.join('\n').replace(/\n*$/, '\n');
+                await writeCrontab(currentCron, next.trim() ? next : '');
                 return { success: true, message: 'Removed crontab entry for CRBRO miner' };
             }
             default:
@@ -90,17 +156,17 @@ async function removeScheduler() {
 function setupWindows() {
     try {
         // Remove existing task if present
-        try {
-            (0, child_process_1.execSync)(`schtasks /Delete /TN "${TASK_NAME}" /F`, { stdio: 'pipe' });
-        }
-        catch { /* doesn't exist yet */ }
-        // Find npx path
+        // Remove an existing task if present (a failure here only means there was none).
+        run('schtasks', ['/Delete', '/TN', TASK_NAME, '/F']);
+        // npx.cmd, absolute: Task Scheduler cannot run the extensionless `npx`
+        // shell script that `where npx` lists first.
         const npxPath = findNpxPath();
-        // Create the task
-        (0, child_process_1.execSync)(`schtasks /Create /TN "${TASK_NAME}" ` +
-            `/TR "\"${npxPath}\" -y crbro-memory mine" ` +
-            `/SC HOURLY /MO ${FREQUENCY_HOURS} ` +
-            `/F /RL LIMITED`, { stdio: 'pipe' });
+        must(run('schtasks', windowsCreateArgs(npxPath)), 'schtasks /Create');
+        // Check what was registered rather than trusting the exit code alone.
+        const q = run('schtasks', ['/Query', '/TN', TASK_NAME, '/XML']);
+        if (q.status === 0 && !q.stdout.includes('crbro-memory mine')) {
+            throw new Error('the task was created but its command does not run the miner');
+        }
         return {
             success: true,
             platform: 'windows',
@@ -109,7 +175,7 @@ function setupWindows() {
             message: `✅ CRBRO Auto-Miner scheduled!\n\n` +
                 `  Task Name:  ${TASK_NAME}\n` +
                 `  Frequency:  Every ${FREQUENCY_HOURS} hours\n` +
-                `  Command:    npx crbro-memory mine\n\n` +
+                `  Command:    ${windowsTaskCommand(npxPath)}\n\n` +
                 `  To check status:  npx crbro-memory miner-status\n` +
                 `  To remove:        npx crbro-memory remove-miner`,
             uninstall_command: `schtasks /Delete /TN "${TASK_NAME}" /F`,
@@ -121,13 +187,13 @@ function setupWindows() {
             platform: 'windows',
             method: 'Task Scheduler (schtasks)',
             frequency: `${FREQUENCY_HOURS}h`,
-            message: `Failed to create scheduled task: ${err instanceof Error ? err.message : String(err)}.\n\nTry running as Administrator, or create the task manually:\n  schtasks /Create /TN "${TASK_NAME}" /TR "npx -y crbro-memory mine" /SC HOURLY /MO ${FREQUENCY_HOURS}`,
+            message: `Failed to create scheduled task: ${err instanceof Error ? err.message : String(err)}.\n\nTry running as Administrator, or create the task manually:\n  schtasks /Create /TN "${TASK_NAME}" /TR "\\"<path to npx.cmd>\\" -y crbro-memory mine" /SC HOURLY /MO ${FREQUENCY_HOURS}`,
         };
     }
 }
 function getWindowsStatus() {
     try {
-        const output = (0, child_process_1.execSync)(`schtasks /Query /TN "${TASK_NAME}" /FO CSV /NH`, { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+        const output = must(run('schtasks', ['/Query', '/TN', TASK_NAME, '/FO', 'CSV', '/NH']), 'schtasks /Query').stdout;
         const parts = output.trim().split(',').map(s => s.replace(/"/g, ''));
         return {
             installed: true,
@@ -151,32 +217,32 @@ function getWindowsStatus() {
 async function setupMacOS() {
     const plistPath = (0, path_1.join)((0, os_1.homedir)(), 'Library', 'LaunchAgents', 'com.crbro.miner.plist');
     const npxPath = findNpxPath();
-    const plistContent = `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>Label</key>
-  <string>com.crbro.miner</string>
-  <key>ProgramArguments</key>
-  <array>
-    <string>${npxPath}</string>
-    <string>-y</string>
-    <string>crbro-memory</string>
-    <string>mine</string>
-  </array>
-  <key>StartInterval</key>
-  <integer>${FREQUENCY_HOURS * 3600}</integer>
-  <key>RunAtLoad</key>
-  <true/>
-  <key>StandardOutPath</key>
-  <string>${(0, path_1.join)((0, os_1.homedir)(), '.crbro', 'miner.log')}</string>
-  <key>StandardErrorPath</key>
-  <string>${(0, path_1.join)((0, os_1.homedir)(), '.crbro', 'miner_error.log')}</string>
-</dict>
+    const plistContent = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.crbro.miner</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${xmlEscape(npxPath)}</string>
+    <string>-y</string>
+    <string>crbro-memory</string>
+    <string>mine</string>
+  </array>
+  <key>StartInterval</key>
+  <integer>${FREQUENCY_HOURS * 3600}</integer>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${xmlEscape((0, path_1.join)(brainRoot(), 'miner.log'))}</string>
+  <key>StandardErrorPath</key>
+  <string>${xmlEscape((0, path_1.join)(brainRoot(), 'miner_error.log'))}</string>
+</dict>
 </plist>`;
     try {
         await (0, promises_1.writeFile)(plistPath, plistContent, 'utf-8');
-        (0, child_process_1.execSync)(`launchctl load "${plistPath}"`, { stdio: 'pipe' });
+        must(run('launchctl', ['load', plistPath]), 'launchctl load');
         return {
             success: true,
             platform: 'macos',
@@ -215,20 +281,29 @@ function getMacOSStatus() {
     };
 }
 // ─── Linux: Crontab ───────────────────────────────────────────
-function setupLinux() {
+/** cron runs the line through /bin/sh: paths are single-quoted for it. */
+function shQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function xmlEscape(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+function linuxCronLine(npxPath, logPath) {
+    return `0 */${FREQUENCY_HOURS} * * * ${shQuote(npxPath)} -y crbro-memory mine >> ${shQuote(logPath)} 2>&1`;
+}
+async function setupLinux() {
     try {
         const npxPath = findNpxPath();
-        const cronLine = `0 */${FREQUENCY_HOURS} * * * ${npxPath} -y crbro-memory mine >> ${(0, path_1.join)((0, os_1.homedir)(), '.crbro', 'miner.log')} 2>&1`;
-        // Get current crontab, filter out old CRBRO entries, add new one
-        let currentCron = '';
-        try {
-            currentCron = (0, child_process_1.execSync)('crontab -l 2>/dev/null', { encoding: 'utf-8' });
-        }
-        catch { /* no existing crontab */ }
-        const filtered = currentCron.split('\n').filter(l => !l.includes('crbro-memory mine'));
+        const cronLine = linuxCronLine(npxPath, (0, path_1.join)(brainRoot(), 'miner.log'));
+        // Current crontab, our old line out, the new one in. The user's own lines
+        // are kept byte for byte, blank lines and comments included.
+        const currentCron = readCrontab();
+        const filtered = cronWithout(currentCron);
+        while (filtered.length && !filtered[filtered.length - 1].trim())
+            filtered.pop();
         filtered.push(cronLine);
-        const newCron = filtered.filter(l => l.trim()).join('\n') + '\n';
-        (0, child_process_1.execSync)(`echo "${newCron}" | crontab -`, { stdio: 'pipe' });
+        const newCron = filtered.join('\n') + '\n';
+        await writeCrontab(currentCron, newCron);
         return {
             success: true,
             platform: 'linux',
@@ -237,7 +312,8 @@ function setupLinux() {
             message: `✅ CRBRO Auto-Miner scheduled!\n\n` +
                 `  Cron:       ${cronLine}\n` +
                 `  Frequency:  Every ${FREQUENCY_HOURS} hours\n` +
-                `  Log:        ~/.crbro/miner.log\n\n` +
+                `  Log:        ${(0, path_1.join)(brainRoot(), 'miner.log')}\n` +
+                `  The previous crontab was saved next to the brain as crontab.before-crbro-*.txt.\n\n` +
                 `  To check:   npx crbro-memory miner-status\n` +
                 `  To remove:  npx crbro-memory remove-miner`,
             uninstall_command: 'npx crbro-memory remove-miner',
@@ -255,7 +331,7 @@ function setupLinux() {
 }
 function getLinuxStatus() {
     try {
-        const cron = (0, child_process_1.execSync)('crontab -l 2>/dev/null', { encoding: 'utf-8' });
+        const cron = readCrontab();
         const hasCrbro = cron.includes('crbro-memory mine');
         return {
             installed: hasCrbro,
@@ -279,15 +355,15 @@ function getLinuxStatus() {
 }
 // ─── Utilities ────────────────────────────────────────────────
 function findNpxPath() {
-    try {
-        const os = (0, os_1.platform)();
-        if (os === 'win32') {
-            return (0, child_process_1.execSync)('where npx', { encoding: 'utf-8' }).trim().split('\n')[0].trim();
-        }
-        return (0, child_process_1.execSync)('which npx', { encoding: 'utf-8' }).trim();
-    }
-    catch {
-        return 'npx'; // Fallback to PATH
+    const os = currentPlatform();
+    if (os === 'win32') {
+        // `where npx` lists the extensionless sh script first; Task Scheduler
+        // needs the .cmd shim.
+        const r = run('where', ['npx.cmd']);
+        const first = r.status === 0 ? r.stdout.split(/\r?\n/).map(l => l.trim()).find(l => /\.cmd$/i.test(l)) : undefined;
+        return first || 'npx.cmd';
     }
+    const r = run('which', ['npx']);
+    return r.status === 0 && r.stdout.trim() ? r.stdout.trim().split('\n')[0] : 'npx';
 }
 //# sourceMappingURL=scheduler.js.map