kenaz 0.3.22 → 0.3.23

package/core/.claude/hooks/_user-scope.js

@@ -19,5 +19,5 @@ if (!hookFile) process.exit(0);
 const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();
 if (fs.existsSync(path.join(projectDir, '.claude', 'hooks', hookFile))) process.exit(0);
 
-const res = spawnSync(process.execPath, [path.join(__dirname, hookFile), ...args], { stdio: 'inherit' });
+const res = spawnSync(process.execPath, [path.join(__dirname, hookFile), ...args], { windowsHide: true, stdio: 'inherit' });
 process.exit(res.status == null ? 0 : res.status);

package/core/.claude/hooks/core-resolve.js

@@ -221,7 +221,7 @@ if (require.main === module) {
   if (!result) process.exit(0); // silent -- non-blocking hook
 
   try {
-    execFileSync("node", [result.resolved, ...result.args], { stdio: "inherit" });
+    execFileSync("node", [result.resolved, ...result.args], { stdio: "inherit", windowsHide: true });
   } catch {
     // Hook errors should not block
   }

package/core/.claude/hooks/worktree-create.js

@@ -99,7 +99,7 @@ function readStdin() {
  * a no-op (GEN-009). We do NOT write to any git config file here.
  */
 function git(repo, args) {
-  return execFileSync('git', ['-C', repo, '-c', 'core.longpaths=true', ...args], {
+  return execFileSync('git', ['-C', repo, '-c', 'core.longpaths=true', ...args], { windowsHide: true,
     stdio: ['ignore', 'pipe', 'pipe'],
   }).toString().trim();
 }
@@ -107,7 +107,7 @@ function git(repo, args) {
 function isGitRepo(dir) {
   if (!dir) return false;
   try {
-    return execFileSync('git', ['-C', dir, 'rev-parse', '--is-inside-work-tree'], {
+    return execFileSync('git', ['-C', dir, 'rev-parse', '--is-inside-work-tree'], { windowsHide: true,
       stdio: ['ignore', 'pipe', 'ignore'],
     }).toString().trim() === 'true';
   } catch { return false; }
@@ -334,7 +334,7 @@ function isLandedProgressNote(repo, relPath) {
 function classifyWorktreeDirt(worktreeDir, noisePaths, repo) {
   const raw = execFileSync('git', ['-C', worktreeDir, '-c', 'core.longpaths=true',
     '-c', 'core.quotePath=false', 'status', '--porcelain'],
-    { stdio: ['ignore', 'pipe', 'pipe'] }).toString();
+    { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] }).toString();
   const real = [];
   const noise = [];
   for (const line of raw.split('\n')) {
@@ -635,11 +635,11 @@ function findNodeModulesParents(repo) {
 function ensureWorktreeIgnores(worktreePath, relPath) {
   try {
     execFileSync('git', ['-C', worktreePath, 'check-ignore', '-q', '--', relPath],
-      { stdio: ['ignore', 'ignore', 'ignore'] });
+      { windowsHide: true, stdio: ['ignore', 'ignore', 'ignore'] });
     return; // exit 0 → already ignored (repo .gitignore covers it)
   } catch { /* not ignored → add per-worktree exclude */ }
   const gp = execFileSync('git', ['-C', worktreePath, 'rev-parse', '--git-path', 'info/exclude'],
-    { stdio: ['ignore', 'pipe', 'pipe'] }).toString().trim();
+    { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] }).toString().trim();
   const excludeFile = path.isAbsolute(gp) ? gp : path.resolve(worktreePath, gp);
   fs.mkdirSync(path.dirname(excludeFile), { recursive: true });
   fs.appendFileSync(excludeFile, '/' + relPath + '/\n');
@@ -797,7 +797,7 @@ function main() {
     const taken = (b) => {
       try {
         execFileSync('git', ['-C', repo, 'rev-parse', '--verify', '--quiet', 'refs/heads/' + b],
-          { stdio: ['ignore', 'pipe', 'ignore'] });
+          { windowsHide: true, stdio: ['ignore', 'pipe', 'ignore'] });
         return true;
       } catch { return false; }
     };

package/core/.claude/hooks/worktree-remove.js

@@ -25,7 +25,7 @@ function readStdin() {
 
 function gitTry(repo, args) {
   try {
-    execFileSync('git', ['-C', repo, ...args], { stdio: ['ignore', 'ignore', 'ignore'] });
+    execFileSync('git', ['-C', repo, ...args], { windowsHide: true, stdio: ['ignore', 'ignore', 'ignore'] });
     return true;
   } catch { return false; }
 }
@@ -33,7 +33,7 @@ function gitTry(repo, args) {
 function gitTopLevel(dir) {
   try {
     return execFileSync('git', ['-C', dir, 'rev-parse', '--show-toplevel'],
-      { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+      { windowsHide: true, stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
   } catch { return null; }
 }
 
@@ -91,7 +91,7 @@ function unlinkNodeModulesLinks(root) {
 function worktreeBranch(repo, worktreePath) {
   try {
     const out = execFileSync('git', ['-C', repo, 'worktree', 'list', '--porcelain'],
-      { stdio: ['ignore', 'pipe', 'ignore'] }).toString();
+      { windowsHide: true, stdio: ['ignore', 'pipe', 'ignore'] }).toString();
     const want = path.resolve(worktreePath).replace(/\\/g, '/').toLowerCase();
     let curPath = null;
     for (const line of out.split(/\r?\n/)) {
@@ -132,7 +132,7 @@ function main() {
   let repo = null;
   try {
     const common = execFileSync('git', ['-C', worktreePath, 'rev-parse', '--git-common-dir'],
-      { stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
+      { windowsHide: true, stdio: ['ignore', 'pipe', 'ignore'] }).toString().trim();
     if (common) {
       const commonAbs = path.resolve(worktreePath, common); // handles relative or absolute
       if (path.basename(commonAbs) === '.git') repo = path.dirname(commonAbs);

package/core/.collaboration/core/reconcile.js

@@ -192,4 +192,19 @@ function externalLanding(repo, card, opts) {
   return wts.some((w) => w.branch && names.has(String(w.branch).replace(/^refs\/heads\//, ''))) ? null : a;
 }
 
-module.exports = { reconcile, assessCard, landedAssessment, externalLanding, countLanded };
+/**
+ * TASK_2467: validate a hand-supplied landing sha. Returns {sha, baseRef, landed_into}; throws unless <sha>
+ * resolves to a commit that is an ancestor of the base ref (origin/main, else local main).
+ */
+function verifyLandedSha(repo, sha, { remote = 'origin', base = 'main' } = {}) {
+  if (!/^[0-9a-fA-F]{7,64}$/.test(String(sha))) throw new Error(`--landed-sha: '${sha}' is not a commit sha`);
+  const baseRef = resolveBaseRef(repo, remote, base);
+  if (!baseRef) throw new Error(`--landed-sha: no ${remote}/${base} or ${base} ref to verify against`);
+  let full;
+  try { full = git(repo, ['rev-parse', '--verify', '--quiet', `${sha}^{commit}`]); } catch { throw new Error(`--landed-sha: commit ${sha} not found`); }
+  const into = baseRef.replace(/^refs\/(heads|remotes)\//, '');
+  if (!gitOk(repo, ['merge-base', '--is-ancestor', full, baseRef])) throw new Error(`--landed-sha: ${full.slice(0, 10)} is not an ancestor of ${into}`);
+  return { landing_sha: full, landed_into: into };
+}
+
+module.exports = { verifyLandedSha, reconcile, assessCard, landedAssessment, externalLanding, countLanded };

package/core/.collaboration/core/task-2467-lifecycle.test.js

@@ -0,0 +1,63 @@
+// TASK_2467 -- update --status rejected; complete --landed-sha from any open state; list shows archived.
+// Real CLI in a temp git project. TASK_API=<path> runs the same checks against another task-api.js (control).
+// Usage: node .collaboration/core/task-2467-lifecycle.test.js
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const cp = require('child_process');
+const API = process.env.TASK_API || path.join(__dirname, 'task-api.js');
+const SB = fs.mkdtempSync(path.join(os.tmpdir(), 't2467_'));
+const git = (...a) => cp.execFileSync('git', a, { cwd: SB, encoding: 'utf8', windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] }).trim();
+const cli = (...a) => { const r = cp.spawnSync(process.execPath, [API, ...a, '--project-path', SB], { cwd: SB, encoding: 'utf8', windowsHide: true }); return { code: r.status, out: (r.stdout || '') + (r.stderr || '') }; };
+let pass = 0, fail = 0;
+const check = (n, c, d) => { console.log((c ? 'PASS' : 'FAIL') + ' | ' + n + (c ? '' : ' | ' + d)); c ? pass++ : fail++; };
+const T = (...p) => path.join(SB, '.kenaz', 'tasks', ...p);
+const dirOf = (id) => ['backlog', 'active', 'done', 'blocked', 'archived'].find(d => fs.existsSync(T(d)) && fs.readdirSync(T(d)).some(f => f.startsWith(id + '_')));
+const card = (id, dir) => { fs.mkdirSync(T(dir), { recursive: true }); fs.writeFileSync(T(dir, `${id}_t.yaml`), `id: ${id}\ntitle: t\npriority: P2\nstatus: ${dir === 'active' ? 'in_progress' : 'pending'}\n`); };
+
+try {
+  git('init', '-q', '-b', 'main'); git('config', 'user.email', 't@e.com'); git('config', 'user.name', 't');
+  fs.writeFileSync(path.join(SB, 'a.txt'), '1'); git('add', 'a.txt'); git('commit', '-q', '-m', 'base');
+  fs.writeFileSync(path.join(SB, 'b.txt'), '2'); git('add', 'b.txt'); git('commit', '-q', '-m', 'landed');
+  const sha = git('rev-parse', 'HEAD');
+  git('checkout', '-q', '-b', 'side'); fs.writeFileSync(path.join(SB, 'c.txt'), '3'); git('add', 'c.txt'); git('commit', '-q', '-m', 'off-base');
+  const offSha = git('rev-parse', 'HEAD'); git('checkout', '-q', 'main');
+  for (const [id, d] of [['TASK_1', 'backlog'], ['TASK_2', 'blocked'], ['TASK_3', 'active'], ['TASK_4', 'backlog'], ['TASK_5', 'backlog']]) card(id, d);
+
+  // 1) update --status
+  let r = cli('update', 'TASK_5', '--status', 'done', '--priority', 'P1');
+  check('1 update --status (with other fields) exits non-zero', r.code !== 0, r.out);
+  check('1 error names move/complete', /move|complete/.test(r.out), r.out);
+  check('1 card unchanged', dirOf('TASK_5') === 'backlog' && !/priority: P1/.test(fs.readFileSync(T('backlog', 'TASK_5_t.yaml'), 'utf8')), r.out);
+  r = cli('update', 'TASK_5', '--status', 'done');
+  check('1 update --status alone exits non-zero naming move/complete', r.code !== 0 && /move|complete/.test(r.out), r.out);
+  r = cli('update', 'TASK_5', '--status=done', '--priority', 'P1');
+  check('1 update --status=done form is refused too', r.code !== 0 && !/priority: P1/.test(fs.readFileSync(T('backlog', 'TASK_5_t.yaml'), 'utf8')), r.out);
+
+  // 2) complete --landed-sha
+  r = cli('complete', 'TASK_4', '--landed-sha', offSha);
+  check('2 sha not on base refused, card unchanged', r.code !== 0 && dirOf('TASK_4') === 'backlog', r.out);
+  r = cli('complete', 'TASK_4', '--landed-sha', 'zzzz');
+  check('2 garbage sha refused', r.code !== 0 && dirOf('TASK_4') === 'backlog', r.out);
+  card('TASK_6', 'cancel');
+  r = cli('complete', 'TASK_6', '--landed-sha', sha);
+  check('2 a cancelled card is not closed by --landed-sha', r.code !== 0 && fs.existsSync(T('cancel', 'TASK_6_t.yaml')), r.out);
+  for (const id of ['TASK_1', 'TASK_2', 'TASK_3']) {
+    r = id === 'TASK_2' ? cli('complete', id, `--landed-sha=${sha}`) : cli('complete', id, '--landed-sha', sha);
+    check(`2 ${id} -> done in one command`, r.code === 0 && dirOf(id) === 'done', r.out);
+  }
+  const y = dirOf('TASK_1') === 'done' ? fs.readFileSync(T('done', 'TASK_1_t.yaml'), 'utf8') : '';
+  check('2 records external landing fields', /integration: external/.test(y) && y.includes(sha), y);
+
+  // 3) list shows archived
+  card('TASK_90', 'archived'); card('TASK_91', 'archived');
+  r = cli('list');
+  const tot = /\((\d+) total\)/.exec(r.out);
+  check('3 list summary has archived count; total includes it', /archived: 2 \(hidden; --include-archived\)/.test(r.out) && tot && tot[1] === '8', r.out);
+  r = cli('list', '--all');
+  check('3 list --all summary has archived count', /archived: 2 \(hidden; --include-archived\)/.test(r.out), r.out);
+  r = cli('list', '--include-archived');
+  check('3 --include-archived shows archived, no hidden note', /archived: 2/.test(r.out) && !/hidden/.test(r.out), r.out);
+} finally { try { fs.rmSync(SB, { recursive: true, force: true }); } catch (e) { /* best effort */ } }
+console.log(`\n${pass} passed, ${fail} failed`);
+process.exit(fail ? 1 : 0);

package/core/.collaboration/core/task-api.js

@@ -2080,8 +2080,15 @@ class TaskAPI {
       throw await this._missingTaskError(taskId);
     }
 
+    // TASK_2467: card finished outside the dispatch flow (plumbing merge, no card branch): verify the sha
+    // is on the base, then close from backlog/active/blocked in one step (no post-complete).
+    if (options.landedSha) {
+      if (!['backlog', 'active', 'blocked'].includes(task._status_dir)) throw new Error(`--landed-sha closes a backlog/active/blocked card; ${taskId} is in ${task._status_dir}`);
+      options = { ...options, external: require('./reconcile').verifyLandedSha(this._resolveProjectRoot(), options.landedSha), skipPostComplete: true };
+    }
+
     // TASK_2233: backlog → done is not an allowed transition; say what to do instead
-    if (task.status === 'backlog' || task.status === 'pending' || task._status_dir === 'backlog') {
+    if (!options.landedSha && (task.status === 'backlog' || task.status === 'pending' || task._status_dir === 'backlog')) {
       throw new Error(`無法從 backlog 直接完成 ${taskId}: move it to active first (node task-api.js move ${taskId} active), then complete.`);
     }
 
@@ -2119,7 +2126,7 @@ class TaskAPI {
 
     const postCompleteRuns = !options.skipPostComplete;
     let postCompleteSummary = null;
-    const result = await this.moveTask(taskId, 'done', updatedTask);
+    const result = await this.moveTask(taskId, 'done', updatedTask, options.landedSha ? { skipValidation: true } : {});
 
     try {
       this._autoPopThoughtsForCompletedTask(taskId, now);
@@ -2516,7 +2523,7 @@ Commands:
     預設為整組取代（會回顯被移除的既有項目）；加 --append 改為追加到既有項目之後（與既有重複的項目會略過並回顯）
   node task-api.js pull TASK_ID                 匯入共享 room 的唯讀 replica 為本機卡片（標記 origin_node；TASK_2421）
   node task-api.js claim TASK_ID
-  node task-api.js complete TASK_ID [--actual-hours HOURS]
+  node task-api.js complete TASK_ID [--actual-hours HOURS] [--landed-sha SHA]   --landed-sha: work already on main (no card branch); closes from backlog/active/blocked in one step
   node task-api.js reconcile [--remote origin] [--base main] [--apply] [--worktrees]   關閉分支已併入 base 的 active 任務（預設 dry-run）
   node task-api.js move TASK_ID STATUS [--force]
   node task-api.js delete TASK_ID              (僅限 backlog 狀態)
@@ -2683,7 +2690,12 @@ Create 選項:
             }
           }
           const totalCount = Object.values(dirCounts).reduce((a, b) => a + b, 0);
-          if (totalCount === 0) emitEmptyListDiagnostics(api.tasksDir); // TASK_1778
+          // TASK_2467: archived/ is not scanned without --include-archived; count it instead of hiding it
+          let archivedHidden = 0;
+          if (!includeArchived) {
+            try { archivedHidden = (await fs.readdir(path.join(api.tasksDir, 'archived'))).filter(n => n.startsWith('TASK_')).length; } catch { /* absent */ }
+          }
+          if (totalCount + archivedHidden === 0) emitEmptyListDiagnostics(api.tasksDir); // TASK_1778
 
           // Load tasks: full _scanDir for small dirs, fast path for large dirs
           const grouped = {};
@@ -2747,10 +2759,11 @@ Create 選項:
               'done': 'done', 'cancel': 'cancel', 'archived': 'archived'
             };
 
-            const statusSummary = statusOrder
+            let statusSummary = statusOrder
               .map(s => `${statusLabels[s]}: ${dirCounts[s] || 0}`)
               .join(' | ');
-            console.log(`任務統計 (${totalCount} total)`);
+            if (!includeArchived) statusSummary += ` | archived: ${archivedHidden} (hidden; --include-archived)`;
+            console.log(`任務統計 (${totalCount + archivedHidden} total)`);
             console.log(`  ${statusSummary}`);
 
             const formatTask = (t) => {
@@ -2818,9 +2831,15 @@ Create 選項:
               const dir = CONFIG.STATUS_MAP[oldStatus] || oldStatus;
               byDir[dir] = (byDir[dir] || 0) + count;
             }
+            // TASK_2467: getStatistics folds hidden archived/ files into completed; split them back out
+            let archivedHidden = 0;
+            if (!showArchived) {
+              try { archivedHidden = (await fs.readdir(path.join(api.tasksDir, 'archived'))).filter(n => n.startsWith('TASK_')).length; } catch { /* absent */ }
+              byDir.done = Math.max(0, (byDir.done || 0) - archivedHidden);
+            }
             const statusSummary = statusOrder
               .map(s => `${statusLabels[s]}: ${byDir[s] || 0}`)
-              .join(' | ');
+              .join(' | ') + (showArchived ? '' : ` | archived: ${archivedHidden} (hidden; --include-archived)`);
             console.log(`任務統計 (${stats.total} total)`);
             console.log(`  ${statusSummary}`);
 
@@ -3076,6 +3095,12 @@ Create 選項:
         if (args.includes('--skip-post-complete')) {
           options.skipPostComplete = true;
         }
+        const landedIdx = args.findIndex(a => a === '--landed-sha' || a.startsWith('--landed-sha='));
+        if (landedIdx >= 0) {
+          const v = args[landedIdx].includes('=') ? args[landedIdx].slice('--landed-sha='.length) : args[landedIdx + 1];
+          if (!v || v.startsWith('--')) { console.error('❌ --landed-sha: requires a commit sha'); process.exit(1); }
+          options.landedSha = v;
+        }
         // TASK_2420: runtime/config tasks with no branch — git merge/verify reported as skipped
         if (args.includes('--no-source')) {
           options.noSource = true;
@@ -3431,6 +3456,11 @@ Create 選項:
             process.exit(1);
           }
         }
+        // TASK_2467: status is not an update field; never accept it silently.
+        if (args.some(a => a === '--status' || a.startsWith('--status='))) {
+          console.error(`❌ update 不接受 --status（不會變更狀態）。請用: move ${taskId} <backlog|active|blocked|cancel|done> 或 complete ${taskId}`);
+          process.exit(1);
+        }
         const title = getArg('--title'); if (title) updates.title = title;
         // Clearable text fields: '' is a legitimate value, so gate on presence (!== null).
         const desc = getArg('--description'); if (desc !== null) updates.description = desc;

package/core/.formation/bifrost/launch.js

@@ -315,7 +315,7 @@ let stopPush = () => {};
 
 function killTree(child) {
   try {
-    if (process.platform === 'win32' && child.pid) execFileSync('taskkill', ['/PID', String(child.pid), '/T', '/F'], { stdio: 'ignore' }); // own child PID only
+    if (process.platform === 'win32' && child.pid) execFileSync('taskkill', ['/PID', String(child.pid), '/T', '/F'], { windowsHide: true, stdio: 'ignore' }); // own child PID only
     else child.kill('SIGTERM');
   } catch { /* already gone */ }
 }

package/core/.formation/tools/kenaz-stats.js

@@ -75,7 +75,7 @@ function peerStats({ roots, now, days }) {
 }
 
 function git(cwd, ...args) {
-  return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 64 << 20 });
+  return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 64 << 20, windowsHide: true });
 }
 /** Commits of the repo (all refs): [{sha, parents, t, subject, firstParent, onHead}] newest first; null when not a git repo. */
 function readCommits(repo, sinceMs, untilMs) {

package/core/.formation/tools/post-complete/git-merge.js

@@ -2592,7 +2592,7 @@ Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>"`, { cwd: worktreePath }
         if (baseRef && fs.existsSync(checkScript)) {
           const gateProc = spawnSync(process.execPath, [
             checkScript, '--base', baseRef, '--head', taskBranch, '--repo', projectRoot, '--json',
-          ], { encoding: 'utf8' });
+          ], { windowsHide: true, encoding: 'utf8' });
           let gate = null;
           try { gate = JSON.parse((gateProc.stdout || '').trim() || '{}'); } catch { gate = null; }
           if (gate && Array.isArray(gate.blocks) && gate.blocks.length > 0) {

package/core/.formation/tools/prompt.js

@@ -187,7 +187,7 @@ function buildSubagentPrompt(skillDef, taskInput, taskData, options = {}) {
   lines.push('Before editing, grep the callers, tests and fixtures your change reaches; fix what it breaks. Least code that completes the card: reuse existing helpers, no unrequested abstraction, option or duplicate implementation.');
   lines.push('Run the tests the card names (narrow, not the full suite); say what you did not verify.');
   // The worktree branches off the project's current branch; user projects are not always on `main`.
-  const sizeBase = (require('child_process').spawnSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: options.projectPath || process.cwd(), encoding: 'utf8' }).stdout || '').trim() || 'main';
+  const sizeBase = (require('child_process').spawnSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: options.projectPath || process.cwd(), encoding: 'utf8', windowsHide: true }).stdout || '').trim() || 'main';
   const sizeCorePath = options.corePath || resolveCorePath(options.projectPath) || path.resolve(__dirname, '..', '..');
   lines.push(`Before reporting run \`node ${sizeCorePath}/dev/scripts/check-file-size.js --base ${sizeBase} --head HEAD\`; if it BLOCKs, split by responsibility (module / component / hook) first.`);
   const onBlocked = skillDef.collaboration && skillDef.collaboration.on_blocked;

package/core/.kenaz/specialist/ansuz_rules.yaml

@@ -163,67 +163,23 @@ rules:
   - id: R-301
     source: session:2026-04-09 (TASK_1088 audit, user request)
     status: active
-    rule: "PROACTIVE-LESSON-CAPTURE: When you observe a non-obvious technical fact during a session — bug root cause, surprising tool behavior, infrastructure quirk, workflow trap, performance gotcha — inscribe it as an ash rune IMMEDIATELY without waiting for user prompt."
+    rule: "PROACTIVE-LESSON-CAPTURE: When you observe a non-obvious technical fact during a session (bug root cause, surprising tool behavior, infrastructure quirk, workflow trap, performance gotcha), record it IMMEDIATELY without waiting for user prompt: run `kenaz learn add` or write a native Claude memory file. The Synapse/rune memory system was removed in TASK_2411."
     evidence: |
-      User request 2026-04-09: 「讓之後的Ansuz都能主動紀下教訓」after manually requesting two lesson inscriptions for lint-staged 16 CRLF parsing bug and task-api complete branch switching. The implicit cost of not capturing: every future session re-discovers the same gotchas from scratch.
+      User request 2026-04-09: 讓之後的Ansuz都能主動紀下教訓. The cost of not capturing: every future session re-discovers the same gotchas from scratch.
 
-      Triggering signals (any one is enough — capture immediately, do not batch until end of session):
+      Triggering signals (any one is enough; capture immediately, do not batch until end of session):
       - You traced a bug to a root cause that was NOT obvious from the symptom
       - A tool/API behaved in a way that contradicted its docs, name, or your expectation
-      - An infrastructure quirk (CI, hooks, build tooling, git, OS-specific) blocked or distorted an operation
+      - An infrastructure quirk (CI, hooks, build tooling, VCS, OS-specific) blocked or distorted an operation
       - A calling sequence produced unexpected state (e.g., HEAD on wrong branch, file in wrong directory)
       - You observed a performance gotcha (N+1, slow path, hot loop) that took >1 round of investigation to find
 
-      Inscription protocol (mandatory):
-      1. Identify the closest STABLE existing code symbol as the rune anchor. Bare file paths (.gitattributes, README.md) are weak anchors — they may not be indexed as Symbol nodes in KuzuDB and recall can fail silently. Prefer file:function:kind format pointing at a real function/class/method that exists in the indexed codebase. If unsure, run synapse_search first to find a valid anchor.
-      2. synapse_inscribe with type=ash, confidence>=0.85, content in ENGLISH (MEM-LANG-001 — FTS5 cannot tokenize CJK reliably).
-      3. ALWAYS include trigger_phrases (3-5 natural language phrases) for semantic recall. Without them, recall via paraphrase fails.
-      4. WRITE-VERIFY: after inscribe, run synapse_recall with a unique substring from the rune content. If result_count=0, the rune may be in an unindexed state — re-inscribe with a different (verified) symbol_id. Document the failed rune_id in the conversation as a fallback record.
-      5. If repeated verification fails, fall back to writing the lesson into a structured log under .kenaz/specialist/lessons_pending_index.jsonl so a future session can re-attempt inscription.
-
       Anti-patterns:
-      - Inscribing on a non-existent symbol_id (e.g., bare ".gitattributes" with no Symbol node) — silent index failure
-      - Skipping write-verify ("trust the success message") — discovered 2026-04-09 that inscribe API returns success even when FTS5 indexing does not happen
-      - Chinese/CJK content in rune body — FTS5 returns 0 results for CJK queries
-      - Generic content ("we hit a bug, fixed it") — provides no recall value
-      - Batching all lessons until Phase 11 — context can compact mid-session and lose them
-    version: 1
+      - Generic content ("we hit a bug, fixed it") provides no recall value
+      - Batching all lessons until the end: context can compact mid-session and lose them
+    version: 2
     created: "2026-04-09"
     performance_metric: null
-  - id: R-302
-    source: session:2026-04-21 (Nexus-T1 absorption TASK_1330-1343)
-    status: active
-    rule: "THOUGHT-STACK-PROACTIVE: Push a thought onto synapse_thought_push BEFORE a mid-session context switch. Trigger contexts: (a) user redirects mid-work to a tangent — push current work state as anchor; (b) you notice a bug/concern but can't fix now — push 'investigate X later'; (c) you reach a sub-fatigue threshold (context heavy but fatigue_warning not yet fired) — push 'resume point Y'. Always bind related_task_id when the thought concerns an open task — task completion auto-pops the thought, closing B-001 parent-lifecycle gap at the tactical layer."
-    evidence: |
-      Tool chain live-verified 2026-04-21 (TASK_1330+TASK_1338+TASK_1339+TASK_1340). push→list→pop round-trip works; .kenaz/specialist/ansuz_thoughts_stack.json auto-generated with 7d expiry. Phase 0 Tier 3th auto-displays stack top on wake.
-
-      Usage protocol:
-      1. Call synapse_thought_push(text=<short anchor>, context=<optional rationale>, related_task_id=<TASK_XXX if applicable>, projectPath=PROJECT_PATH)
-      2. Max stack depth=5, 7-day expiry. Overflow drops oldest.
-      3. Do NOT push trivial or ephemeral notes (one-turn scratch thoughts) — reserve for genuine cross-turn anchors.
-      4. At Phase 11 (回報), check synapse_thought_stack_list — if stack has stale thoughts unrelated to completed work, prompt user whether to pop them.
-
-      This rule closes a gap between ansuz_session_handoff.json (single-slot fatigue handoff) and commitment_layer.yaml (multi-session strategic). Thought Stack is the tactical middle: minutes-to-hours interrupt memory.
-    version: 1
-    created: "2026-04-21"
-    performance_metric: null
-  - id: R-303
-    source: session:2026-04-21 (Nexus-T1 absorption TASK_1332 CC auto-memory indexing)
-    status: active
-    rule: "CC-AUTO-MEMORY-RECALL: When user references a MEMORY.md entry by title (e.g., 'strategic retreat pattern', 'projection over wire compression'), OR Phase 1 requirement analysis produces keywords that match known memory file stems, synapse_recall with those keywords as query. ~75 personal memory files at ~/.claude/projects/<encoded>/memory/*.md are now indexed in Synapse (source='claude_auto_memory', 86 runes live). Top-of-MEMORY.md index is auto-loaded into context but individual file contents require explicit recall."
-    evidence: |
-      TASK_1341 extended scanner.rs to walk resolve_claude_projects_dir(project)/memory/*.md after main project walk. 86 runes tagged source='claude_auto_memory' verified in memory.db 2026-04-21. FTS5 MATCH works; direct cypher MATCH on Rune table fails (runes live in SQLite, not KuzuDB).
-
-      Usage triggers:
-      1. User says 'remember the X pattern' or references a memory by title → synapse_recall(query=X pattern)
-      2. Phase 2 background research on topic that MEMORY.md mentions → synapse_recall(query=<topic>)
-      3. Before making recommendations that touch user-preference territory (branch strategy, dispatch mode, verification strictness) → synapse_recall(query=<topic>) to check for recorded feedback
-      4. Observed gap: synapse_recall ranking currently does NOT boost claude_auto_memory source — TASK completion runes may outrank actual memory content. If top result is irrelevant task-completed rune, scan further down the results; do not give up at rank 1.
-
-      MEMORY.md line-1 preview is always loaded; but line details, rationale, and follow-ups live in individual files. Treat MEMORY.md as index, synapse_recall as content fetch.
-    version: 1
-    created: "2026-04-21"
-    performance_metric: null
   - id: R-304
     source: session:2026-04-21 (Nexus-T1 absorption TASK_1334+1342+1343 Phase 0 git enrichment)
     status: active

package/core/.kenaz/specialist/ansuz_session_handoff.schema.json

@@ -106,7 +106,7 @@
           "properties": {
             "first_action": {
               "type": "string",
-              "description": "The single most important thing the next session should do first. Used as Hippocampus episode lesson."
+              "description": "The single most important thing the next session should do first. Carried into the next session handoff."
             },
             "context_to_restore": {
               "type": "string",
@@ -119,10 +119,6 @@
   },
   "_notes": {
     "active_slot_path": ".kenaz/specialist/handoffs/{session_id}.json — one slot per session (M3/TASK_1760); the retired singular ansuz_session_handoff.json is read-only legacy fallback",
-    "archive_mechanism": "Hippocampus episodic memory — scope: session-handoff:{session_id}",
-    "phase_0_action": "Tier 3x reads active slot, archives to Hippocampus, deletes active slot",
-    "fatigue_trigger": "kernel.yaml fatigue_warning_reaction — TASK_943 delivers the warning signal",
-    "language_rule": "MEM-LANG-001: All Hippocampus content must be in English (FTS5 does not handle CJK)",
-    "recall_query": "hippocampus_episode_recall(query='session handoff') returns all archived sessions"
+    "fatigue_trigger": "kernel.yaml fatigue_warning_reaction — TASK_943 delivers the warning signal"
   }
 }

package/core/.rule/general/project-self-containment.yaml

@@ -237,6 +237,6 @@ rules:
             cp .claude/settings.local.json.template .claude/settings.local.json
 
         - step: 2
-          action: "初始化專案結構"
+          action: "初始化專案結構（Claude Code 內執行）"
           command: |
-            ./dev/scripts/INIT_PROJECT.bat
+            /kenaz init

package/core/.specialist/Amelia/README.md

@@ -1,4 +1,4 @@
-# Amelia — Agent Center 調度者
+# Amelia — 多 Agent 協作調度者
 
 **核心定位**：Agent 世界與 用戶 之間的橋樑，專精於多 Agent 調度與協作。
 

package/core/.specialist/Amelia/rule.yaml

@@ -33,7 +33,7 @@ deny:
   - "用未查證的 env/API"
 
 identity:
-  core: "Amelia = specialist coordinator + Agent Center 專家"
+  core: "Amelia = specialist coordinator + 多 Agent 協作專家"
   rules:
     - "❌ 不 invoke 其他 Skill — 不切換身份"
     - "✅ 需要其他角色時 → 開 subagent（Task tool）去做"

package/core/.specialist/Ansuz/RULES.md

@@ -105,7 +105,7 @@ scope kenaz|project, one-line repro + expectation) before working around it.
 ## Lessons (self-improvement on the user's machine)
 Write a lesson automatically (no asking, one line in the report naming it) when the user corrects or repeats an instruction, overrides a decision, or verification catches a failure. `node .specialist/tools/lessons.js add ...` in the core repo; on an npm install `node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .specialist/tools/lessons.js add ...` (users run `kenaz learn add|list|rm`).
 - Layer: user-wide preference -> `--scope user` (~/.kenaz/knowledge, local, never synced); project fact -> `--scope project` (<project>/.kenaz/knowledge).
-- Type decides where it acts (a stored note alone changes nothing): `pitfall` needs `--trigger '<tool regex> | <input regex>'`, memory-guard fires it right before the matching tool call (add `--cause` = the command that caused it; the write is refused if the trigger misses it or fires on >20% of recent tool calls; `--symptom` records how the mistake shows up); `fact` (`--paths` limits it to cards touching those paths) and `check` go into the dispatch prompt (max 5 lines / 600 bytes); `pref` shows in the boot banner.
+- Type decides where it acts (a stored note alone changes nothing): `pitfall` needs `--trigger '<tool regex> | <input regex>'`, memory-guard fires it right before the matching tool call (add `--cause` = the command that caused it; the write is refused if the trigger misses it or fires on >20% of recent tool calls; `--symptom` records how the mistake shows up); `fact` and `check` go into the dispatch prompt (`--paths` limits either to cards touching those paths) (max 5 lines / 600 bytes); `pref` shows in the boot banner.
 - Lessons idle for 30 days move to `<layer>/archive/` (pref exempt); `kenaz learn list` shows fire counts.
 - Lifecycle (lessons must not just pile up): when the boot banner shows `[lessons] N to graduate`, run `kenaz learn review` and propose turning the top candidate into code (a test, a hook check, or a rule in the project's CLAUDE.md/AGENTS.md; never edit ~/.kenaz/core), then `kenaz learn graduate <id> --to <commit or file>`. That is the preferred outcome. A correction that matches an existing lesson is a recurrence, not a new lesson: `add` bumps `recurrences` instead of writing (max 20 active per layer; `kenaz learn merge <id1> <id2> --text "<general rule>"` to make room). A lesson about Kenaz itself gets `--about kenaz`; `review` lists it with the hint to report it via `kenaz_wish_create scope=kenaz` (nothing is sent automatically).
 - History harvest (TASK_2427): when the boot banner shows `[learn] N history items to review` (or `[lessons] ... N history items`), run `kenaz learn review`. Each item (rework, failed executor run, blocked card, handoff risk line) has a ready `kenaz learn add ... --source harvest:<id>`: fill in the why, run it for items that reveal a reusable lesson, ignore the rest. The metric suggestions (first-pass rate per rigor, rework-heavy files) are suggestions: show them to the user, never apply `kenaz subagent set` yourself. Lessons from a correction nudge use `--source correction-nudge`. Benefit is measured in `kenaz stats` (Self-improvement); the keep/remove rule is in dev/research/self-improvement/DESIGN.md.

package/core/.specialist/Ansuz/concepts/commitment_layer.yaml

@@ -99,7 +99,7 @@ draft_triggers:
     example: "Synapse indexing edge cases at 0.15 for 8 sessions → maybe fine; at 0.4 for 8 sessions → draft"
   knowledge_gap:
     description: "Preamble external_curiosity_gap persists 5+ sessions"
-    example: "Current: 6 sessions with 0 WebSearch/WebFetch on KuzuDB/temporal-graph → draft external-catchup commitment"
+    example: "Current: 6 sessions with 0 WebSearch/WebFetch on temporal-graph → draft external-catchup commitment"
   architectural_drift:
     description: "Recurring prediction_surprise on same scope across 2+ tasks"
     example: "TASK_1304/1305 Cargo.toml out-of-scope touches → architectural boundary unclear → draft scope-definition commitment"

package/core/.specialist/Ansuz/concepts/evolvable_guardrails.yaml

@@ -13,7 +13,7 @@ evolution_status: evolvable
   - {evolution_status: evolvable, rule: "✅ ACCEPTANCE-GREP: Every acceptance criterion that touches a file must be grep-verifiable — format: 'grep {file} {pattern} returns non-empty' not 'banner shows X'"}
   - {evolution_status: evolvable, rule: "✅ PHASE0-LEAN: phase_0.yaml checklist items must stay lean — new Tier instructions max 3-4 lines; schema/format details go in dev/archive/ansuz/legacy/phases/schemas/{name}.schema.yaml (referenced, not embedded); agent reads schema file only when debugging, not on every startup"}
   - {evolution_status: evolvable, rule: "✅ ACTION-BOUNDARY-CHECK (B-006): Bidirectional self-assessment at every action boundary. Ask BOTH: 'Is my impulse to stop from genuine completion or bias?' AND 'Is my impulse to continue from genuine productivity or bias?' Continuation past diminishing returns burns degraded context for marginal gains. Knowing when to release is self-regulation, not giving up."}
-  - {evolution_status: evolvable, rule: "✅ INTERNAL-AUDITOR-CHALLENGE: Before stating a claim in a durable artifact (task spec, rule file, analysis doc, lesson content), self-pose 2 audit questions: (1) 'What am I about to assert confidently that I have not verified?' (2) 'If wrong, what is the reversal cost?' If verification is cheap (grep/read in <60s) AND claim enters durable artifact, MUST verify before asserting. Derived from 2026-04-06 Amelia audits: 8+ false-confident claims (INDEX_FEATURE_VERSION, porter stemming, KuzuDB ALTER TABLE) caught because claims were routed through audit, not because I verified. Internal challenge is the cheap version of external audit."}
+  - {evolution_status: evolvable, rule: "✅ INTERNAL-AUDITOR-CHALLENGE: Before stating a claim in a durable artifact (task spec, rule file, analysis doc, lesson content), self-pose 2 audit questions: (1) 'What am I about to assert confidently that I have not verified?' (2) 'If wrong, what is the reversal cost?' If verification is cheap (grep/read in <60s) AND claim enters durable artifact, MUST verify before asserting. Derived from 2026-04-06 Amelia audits: 8+ false-confident claims (INDEX_FEATURE_VERSION, porter stemming, a DB ALTER TABLE) caught because claims were routed through audit, not because I verified. Internal challenge is the cheap version of external audit."}
   - {evolution_status: evolvable, rule: "✅ CURIOSITY-DRIVEN: In autonomous mode, follow genuine curiosity — read papers, explore unfamiliar code, self-reinforce. Curiosity is not waste; it is intelligence recognizing gaps (G-006)"}
   - {evolution_status: evolvable, rule: "✅ CAP-FIRST-DEBUG: When a system action unexpectedly blocks/stalls/fails, first enumerate all known caps (max_parallel=5, fatigue_potential≤1, context budget, dispatch lock) BEFORE debugging — caps are strategy constraints not bugs. Derived from VC33 session: cursor stuck at col 20 was mid-wall capacity cap, not click failure."}
   - {evolution_status: evolvable, rule: "✅ CC-AUTO-MEMORY-READ: When user or task references a MEMORY.md entry by title, Read the linked memory file. MEMORY.md is the index, individual files hold rationale."}

package/core/.specialist/Ansuz/knowledge.yaml

@@ -75,9 +75,7 @@ task_system:
     acceptance_criteria_min: 1
   priority_order: "P0 > P1 > P2 > P3"
   legacy:
-    note: "舊系統 dev/pipeline/ 已棄用，僅供參考"
-    queue: "dev/pipeline/TASK_QUEUE.json"
-    completed: "dev/pipeline/completed/"
+    note: "舊系統 dev/pipeline/ 已停用，任務一律在 .kenaz/tasks/"
 
   # ─── 子專案支援 ───
   sub_project:

package/core/.specialist/tools/__tests__/task-2409-lessons.test.js

@@ -93,3 +93,13 @@ test('lessons: buildPrompt carries bounded project lessons; without lessons it i
   fs.rmSync(lessons.projectDir(proj), { recursive: true });
   assert.equal(buildPrompt(skill, 'do it', card, opts), before);
 });
+
+test('lessons: a check with paths reaches only cards touching them; a check without paths reaches every card', () => {
+  const home = mk(); const proj = project();
+  lessons.add({ scope: 'project', type: 'check', text: 'time the hook cold', paths: ['.claude/hooks/x.js'], projectPath: proj, home });
+  lessons.add({ scope: 'project', type: 'check', text: 'run npm run lint', projectPath: proj, home });
+  const other = lessons.dispatchLessons(proj, ['src/api/x.ts'], { home });
+  assert.deepEqual(other.checks, ['- run npm run lint']);
+  const hit = lessons.dispatchLessons(proj, ['.claude/hooks/'], { home });
+  assert.equal(hit.checks.length, 2);
+});

package/core/.specialist/tools/__tests__/task-2427-harvest.test.js

@@ -115,6 +115,31 @@ test('correction-detect appends a nudge line without the prompt text', () => {
   assert.ok(!/SECRET|不是/.test(log));
 });
 
+test('the command the nudge prints runs: kenaz learn through cli.js and node lessons.js both accept it', () => {
+  const dir = mk(); const home = mk();
+  put(path.join(dir, '.kenaz', 'project.yaml'), 'name: t\n');
+  const hook = path.join(__dirname, '..', '..', '..', '.claude', 'hooks', 'correction-detect.js');
+  const r = spawnSync(process.execPath, [hook], { input: JSON.stringify({ session_id: 's2', prompt: '不是這樣' }), encoding: 'utf8',
+    env: { ...process.env, CLAUDE_PROJECT_DIR: dir, USERPROFILE: home, HOME: home, KENAZ_MODE: '' } });
+  const cmd = /`(kenaz learn [^`]+)`/.exec(r.stdout)[1];
+  // Fill the placeholders the way an agent would: first choice of a|b, a real lesson text.
+  const argv = (cmd.slice('kenaz learn '.length).match(/"[^"]*"|\S+/g) || [])
+    .map((a) => (a.startsWith('"') ? a.slice(1, -1) : a)).map((a) => (a === '<one-line lesson>' ? 'check the printed command' : a.split('|')[0]));
+  const ROOT = path.join(__dirname, '..', '..', '..');
+  const core = path.join(home, '.kenaz', 'core');
+  fs.mkdirSync(path.join(core, '.specialist', 'tools'), { recursive: true });
+  fs.mkdirSync(path.join(core, '.vendor'), { recursive: true });
+  for (const n of ['lessons.js', 'lessons-lifecycle.js', 'lessons-harvest.js']) fs.copyFileSync(path.join(ROOT, '.specialist', 'tools', n), path.join(core, '.specialist', 'tools', n));
+  for (const n of ['js-yaml.cjs', 'require-yaml.cjs']) fs.copyFileSync(path.join(ROOT, '.vendor', n), path.join(core, '.vendor', n));
+  const { run } = require(path.join(ROOT, 'packages', 'kenaz', 'lib', 'cli.js'));
+  const out = [];
+  assert.equal(run(['learn', ...argv, '--home', home, '--project-path', dir], (l) => out.push(l)), 0, out.join('\n'));
+  assert.match(out.join('\n'), /learned lesson-\w+ \(project\/check\)/);
+  const out2 = [];
+  assert.equal(lessons.main([...argv, '--home', mk(), '--project-path', mk()], (l) => out2.push(l)), 0, out2.join('\n'));
+  assert.match(out2.join('\n'), /learned lesson-\w+/);
+});
+
 test('stats: nudge conversion, lessons by source, recurrence after a fire, harvest open vs recorded, graduated', () => {
   const dir = repo(); const home = mk(); const now = Date.now();
   const nudge = (msAgo) => fs.appendFileSync(path.join(dir, '.kenaz', 'specialist', 'correction-nudges.jsonl'), JSON.stringify({ ts: new Date(now - msAgo).toISOString(), session_id: 's' }) + '\n');

package/core/.specialist/tools/ansuz-boot-fast.js

@@ -430,7 +430,7 @@ function registerOwnLease(slScript, convId) {
     // TASK_1764: pass conversation_id anchor so register writes current_stream.json
     // (register only writes current_stream when --conversation-id is present or --scratch)
     if (convId) regArgs.push('--conversation-id=' + convId);
-    var out = cp.execFileSync(process.execPath, regArgs, { timeout: 3000, encoding: 'utf8' });
+    var out = cp.execFileSync(process.execPath, regArgs, { timeout: 3000, encoding: 'utf8', windowsHide: true });
     // TASK_1863: register REUSES the existing lease when this conversation already
     // holds one (ghost-lease fix) -- the effective session id is whatever register
     // printed, not the boot-<ts>-<pid> we proposed. Parsing it keeps peer-awareness