memkin 0.4.0

package/dist/install/marked-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marked-block.js","sourceRoot":"","sources":["../../src/install/marked-block.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,GAAG,YAAY,CAAC,kBAAkB,CAAC,aAAa,YAAY,CAAC,gBAAgB,CAAC,EAAE,CACjF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,KAAa;IACzD,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IAChD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ;SACpB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;AAC5C,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC"}

package/dist/install/mcp-entry.d.ts

@@ -0,0 +1,11 @@
+export type McpEntry = {
+    kind: "stdio";
+    command: string;
+    args: string[];
+} | {
+    kind: "http";
+    url: string;
+};
+export declare function stdioEntry(command: string, args: string[]): McpEntry;
+export declare function httpEntry(url: string): McpEntry;
+//# sourceMappingURL=mcp-entry.d.ts.map

package/dist/install/mcp-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-entry.d.ts","sourceRoot":"","sources":["../../src/install/mcp-entry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAEpE;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAE/C"}

package/dist/install/mcp-entry.js

@@ -0,0 +1,7 @@
+export function stdioEntry(command, args) {
+    return { kind: "stdio", command, args };
+}
+export function httpEntry(url) {
+    return { kind: "http", url };
+}
+//# sourceMappingURL=mcp-entry.js.map

package/dist/install/mcp-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-entry.js","sourceRoot":"","sources":["../../src/install/mcp-entry.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,IAAc;IACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC/B,CAAC"}

package/dist/install/skill.d.ts

@@ -0,0 +1,4 @@
+export declare const MEMKIN_SKILL = "---\nname: memkin\ndescription: The user's local-first personal memory (people, projects, decisions, tasks, history). Use it to recall who/what/why before answering, and to write durable decisions back.\n---\n\n# Memkin \u2014 your personal memory\n\nMemkin is the user's **local-first** personal memory and the source of truth about their\npeople, projects, decisions, tasks, and history. It is exposed over MCP.\n\n## When to use it\nConsult Memkin **before answering** whenever a request concerns:\n- a specific person or colleague (\"what did X tell me last week?\", \"who is X?\")\n- a project's status / progress / history (\"where is this project at?\", \"what did we decide?\")\n- the user's todos, preferences, or habits\n- anything phrased as recall: \"last week / earlier / last time / what did we\u2026\"\n\nDo **not** consult Memkin for generic questions unrelated to the user's world\n(pure syntax, general algorithms).\n\n## How to query (cheap-first)\n1. `search` \u2014 keyword FTS, zero cost. Start here.\n2. `query` / `recall` \u2014 semantic + cited; only if `search` is thin.\n3. Accept good results; don't over-escalate.\n\nAt the start of a session, call `get_session_context` for a compact digest of active\nprojects, recent decisions, open tasks, and key people.\n\nFor **project-status** questions, combine Memkin (decisions / tasks / timeline) **with**\nrepo reality (git / code) \u2014 don't answer from code alone.\n\n## Tool catalogue\n- **Retrieval**: `query`, `search`, `get_session_context`, `get_entity_profile`, `list_signals_by_entity`\n- **Synthesis**: `recall`, `synthesize`, `prep_for_person`, `daily_report`, `troubleshoot`\n- **Write**: `put_page`, `add_timeline_entry`, `manage_links`, `manage_tags`\n- **Graph / health**: `explore_graph`, `get_health`\n\n## Writing back (conservative)\nOn a clear **decision** or **discovery**, or when the user says \"remember this\", persist it:\n- `put_page(slug=\"decisions/<kebab>\", content=\"---\\ntitle: \u2026\\ntype: decision\\n---\\n<reasoning>\")`\n- `add_timeline_entry` for dated project events.\nSlugs follow stable conventions: `decisions/\u2026`, `entities/\u2026`, `projects/\u2026`. If unsure, ask.\n\n## Examples\n- *\"Where is the memkin project at?\"* \u2192 `get_session_context` + `query(\"memkin \u8FDB\u5C55\")`, then merge with the repo's git/code reality.\n- *\"What did Xu Lizi talk to me about last week?\"* \u2192 `recall(entity=\"entities/xu-lizi\")` or `query(\"\u8BB8\u529B\u5B50 \u4E0A\u5468\")`.\n";
+/** Write the memkin skill into `<dir>/memkin/SKILL.md`. Idempotent. Returns the path. */
+export declare function scaffoldSkill(dir: string): string;
+//# sourceMappingURL=skill.d.ts.map

package/dist/install/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../src/install/skill.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,YAAY,m9EA8CxB,CAAC;AAEF,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMjD"}

package/dist/install/skill.js

@@ -0,0 +1,61 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+// L3 of the progressive-disclosure stack: the full capability doc, loaded on
+// demand as a skill. Single source of truth for `memkin skill scaffold` and
+// the Hermes adapter.
+export const MEMKIN_SKILL = `---
+name: memkin
+description: The user's local-first personal memory (people, projects, decisions, tasks, history). Use it to recall who/what/why before answering, and to write durable decisions back.
+---
+
+# Memkin — your personal memory
+
+Memkin is the user's **local-first** personal memory and the source of truth about their
+people, projects, decisions, tasks, and history. It is exposed over MCP.
+
+## When to use it
+Consult Memkin **before answering** whenever a request concerns:
+- a specific person or colleague ("what did X tell me last week?", "who is X?")
+- a project's status / progress / history ("where is this project at?", "what did we decide?")
+- the user's todos, preferences, or habits
+- anything phrased as recall: "last week / earlier / last time / what did we…"
+
+Do **not** consult Memkin for generic questions unrelated to the user's world
+(pure syntax, general algorithms).
+
+## How to query (cheap-first)
+1. \`search\` — keyword FTS, zero cost. Start here.
+2. \`query\` / \`recall\` — semantic + cited; only if \`search\` is thin.
+3. Accept good results; don't over-escalate.
+
+At the start of a session, call \`get_session_context\` for a compact digest of active
+projects, recent decisions, open tasks, and key people.
+
+For **project-status** questions, combine Memkin (decisions / tasks / timeline) **with**
+repo reality (git / code) — don't answer from code alone.
+
+## Tool catalogue
+- **Retrieval**: \`query\`, \`search\`, \`get_session_context\`, \`get_entity_profile\`, \`list_signals_by_entity\`
+- **Synthesis**: \`recall\`, \`synthesize\`, \`prep_for_person\`, \`daily_report\`, \`troubleshoot\`
+- **Write**: \`put_page\`, \`add_timeline_entry\`, \`manage_links\`, \`manage_tags\`
+- **Graph / health**: \`explore_graph\`, \`get_health\`
+
+## Writing back (conservative)
+On a clear **decision** or **discovery**, or when the user says "remember this", persist it:
+- \`put_page(slug="decisions/<kebab>", content="---\\ntitle: …\\ntype: decision\\n---\\n<reasoning>")\`
+- \`add_timeline_entry\` for dated project events.
+Slugs follow stable conventions: \`decisions/…\`, \`entities/…\`, \`projects/…\`. If unsure, ask.
+
+## Examples
+- *"Where is the memkin project at?"* → \`get_session_context\` + \`query("memkin 进展")\`, then merge with the repo's git/code reality.
+- *"What did Xu Lizi talk to me about last week?"* → \`recall(entity="entities/xu-lizi")\` or \`query("许力子 上周")\`.
+`;
+/** Write the memkin skill into `<dir>/memkin/SKILL.md`. Idempotent. Returns the path. */
+export function scaffoldSkill(dir) {
+    const skillDir = join(dir, "memkin");
+    mkdirSync(skillDir, { recursive: true });
+    const path = join(skillDir, "SKILL.md");
+    writeFileSync(path, MEMKIN_SKILL);
+    return path;
+}
+//# sourceMappingURL=skill.js.map

package/dist/install/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../../src/install/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6EAA6E;AAC7E,4EAA4E;AAC5E,sBAAsB;AACtB,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8C3B,CAAC;AAEF,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/install/toml-config.d.ts

@@ -0,0 +1,4 @@
+import type { McpEntry } from "./json-config.js";
+export declare function upsertMcpServerToml(text: string, name: string, entry: McpEntry): string;
+export declare function removeMcpServerToml(text: string, name: string): string;
+//# sourceMappingURL=toml-config.d.ts.map

package/dist/install/toml-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-config.d.ts","sourceRoot":"","sources":["../../src/install/toml-config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AA6BjD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,CAcvF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAOtE"}

package/dist/install/toml-config.js

@@ -0,0 +1,54 @@
+// Minimal TOML editing for Codex ~/.codex/config.toml `[mcp_servers.<name>]`
+// tables. Intentionally dependency-free and scoped to this one table shape;
+// other tables are preserved verbatim.
+function renderTable(header, entry) {
+    if (entry.kind === "stdio") {
+        const args = entry.args.map((a) => JSON.stringify(a)).join(", ");
+        return `[${header}]\ncommand = ${JSON.stringify(entry.command)}\nargs = [${args}]`;
+    }
+    return `[${header}]\nurl = ${JSON.stringify(entry.url)}`;
+}
+// Returns [startLine, endLineExclusive] of the `[header]` table, or null.
+function findTable(lines, header) {
+    const start = lines.findIndex((l) => l.trim() === `[${header}]`);
+    if (start === -1)
+        return null;
+    let end = lines.length;
+    for (let i = start + 1; i < lines.length; i++) {
+        if (lines[i].trim().startsWith("[")) {
+            end = i;
+            break;
+        }
+    }
+    return [start, end];
+}
+function normalize(text) {
+    const tidied = text.replace(/\n{3,}/g, "\n\n").replace(/\s*$/, "");
+    return tidied === "" ? "" : `${tidied}\n`;
+}
+export function upsertMcpServerToml(text, name, entry) {
+    const header = `mcp_servers.${name}`;
+    const block = renderTable(header, entry);
+    const lines = text.split("\n");
+    const region = findTable(lines, header);
+    if (region) {
+        const [start, end] = region;
+        let e = end;
+        while (e > start + 1 && lines[e - 1].trim() === "")
+            e--;
+        const rebuilt = [...lines.slice(0, start), ...block.split("\n"), "", ...lines.slice(e)];
+        return normalize(rebuilt.join("\n"));
+    }
+    const base = text.replace(/\s*$/, "");
+    return base === "" ? `${block}\n` : `${base}\n\n${block}\n`;
+}
+export function removeMcpServerToml(text, name) {
+    const header = `mcp_servers.${name}`;
+    const lines = text.split("\n");
+    const region = findTable(lines, header);
+    if (!region)
+        return text;
+    const [start, end] = region;
+    return normalize([...lines.slice(0, start), ...lines.slice(end)].join("\n"));
+}
+//# sourceMappingURL=toml-config.js.map

package/dist/install/toml-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-config.js","sourceRoot":"","sources":["../../src/install/toml-config.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,uCAAuC;AAIvC,SAAS,WAAW,CAAC,MAAc,EAAE,KAAe;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,IAAI,MAAM,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,MAAM,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,KAAe,EAAE,MAAc;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,GAAG,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,GAAG,CAAC,CAAC;YACR,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAe;IAC7E,MAAM,MAAM,GAAG,eAAe,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,CAAC;QACZ,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,MAAM,GAAG,eAAe,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;IAC5B,OAAO,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/install/types.d.ts

@@ -0,0 +1,40 @@
+import type { LaunchCmd } from "./command.js";
+import type { McpEntry } from "./json-config.js";
+export type Scope = "global" | "project";
+export type InstallAction = "upsert" | "remove";
+export interface PlanCtx {
+    home: string;
+    platform: NodeJS.Platform;
+    scope: Scope;
+    cwd: string;
+    launch: LaunchCmd;
+    action: InstallAction;
+    transport: "stdio" | "http";
+    url?: string;
+}
+export type InstallOp = {
+    path: string;
+    kind: "json-mcp" | "toml-mcp" | "yaml-mcp";
+    action: InstallAction;
+    entry?: McpEntry;
+} | {
+    path: string;
+    kind: "marked-block" | "managed-file";
+    action: InstallAction;
+    content?: string;
+} | {
+    kind: "cli";
+    action: InstallAction;
+    args: string[];
+};
+export interface ClientAdapter {
+    id: string;
+    displayName: string;
+    supportsHttp: boolean;
+    /** Is this client installed on the machine? */
+    detect(home: string, platform: NodeJS.Platform): boolean;
+    /** Planned ops for the requested action; never touches disk. */
+    plan(ctx: PlanCtx): InstallOp[];
+}
+export declare function mcpEntry(ctx: PlanCtx): McpEntry;
+//# sourceMappingURL=types.d.ts.map

package/dist/install/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/install/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD,MAAM,MAAM,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AACzC,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAGD,MAAM,MAAM,SAAS,GACjB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzD,gEAAgE;IAChE,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,EAAE,CAAC;CACjC;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAM/C"}

package/dist/install/types.js

@@ -0,0 +1,10 @@
+import { httpEntry, stdioEntry } from "./mcp-entry.js";
+export function mcpEntry(ctx) {
+    if (ctx.transport === "http") {
+        if (!ctx.url)
+            throw new Error("http transport requires url");
+        return httpEntry(ctx.url);
+    }
+    return stdioEntry(ctx.launch.command, ctx.launch.args);
+}
+//# sourceMappingURL=types.js.map

package/dist/install/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/install/types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAqCvD,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC"}

package/dist/install/yaml-config.d.ts

@@ -0,0 +1,4 @@
+import type { McpEntry } from "./json-config.js";
+export declare function upsertMcpServerYaml(text: string, name: string, entry: McpEntry): string;
+export declare function removeMcpServerYaml(text: string, name: string): string;
+//# sourceMappingURL=yaml-config.d.ts.map

package/dist/install/yaml-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-config.d.ts","sourceRoot":"","sources":["../../src/install/yaml-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AASjD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,CAMvF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAItE"}

package/dist/install/yaml-config.js

@@ -0,0 +1,19 @@
+import { Document, parseDocument } from "yaml";
+// Minimal YAML editing for Hermes config.yaml `mcp_servers.<name>`. Uses the
+// Document API so comments and other keys/servers are preserved.
+function load(text) {
+    return text?.trim() ? parseDocument(text) : new Document({});
+}
+export function upsertMcpServerYaml(text, name, entry) {
+    const doc = load(text);
+    const value = entry.kind === "stdio" ? { command: entry.command, args: [...entry.args] } : { url: entry.url };
+    doc.setIn(["mcp_servers", name], value);
+    return doc.toString();
+}
+export function removeMcpServerYaml(text, name) {
+    const doc = load(text);
+    if (doc.hasIn(["mcp_servers", name]))
+        doc.deleteIn(["mcp_servers", name]);
+    return doc.toString();
+}
+//# sourceMappingURL=yaml-config.js.map

package/dist/install/yaml-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml-config.js","sourceRoot":"","sources":["../../src/install/yaml-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAG/C,6EAA6E;AAC7E,iEAAiE;AAEjE,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAe;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAClG,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}

package/dist/lifecycle/down.d.ts

@@ -0,0 +1,19 @@
+import type { DisableAutostartResult } from "../daemon/autostart/index.js";
+export interface DownDeps {
+    home: string;
+    platform: NodeJS.Platform;
+    acquireLock: (home: string, command: string) => {
+        release: () => void;
+    };
+    disable: () => Promise<DisableAutostartResult>;
+    /** The storage engine — "managed" triggers managed-PG teardown. */
+    engine?: string;
+    /** Called to stop managed Postgres when engine === "managed" and teardown is safe. */
+    stopManagedPg?: () => Promise<void>;
+}
+export interface DownResult {
+    stopped: boolean;
+    note: string;
+}
+export declare function down(deps: DownDeps): Promise<DownResult>;
+//# sourceMappingURL=down.d.ts.map

package/dist/lifecycle/down.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"down.d.ts","sourceRoot":"","sources":["../../src/lifecycle/down.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK;QAAE,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IACxE,OAAO,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAwB9D"}

package/dist/lifecycle/down.js

@@ -0,0 +1,24 @@
+export async function down(deps) {
+    const lock = deps.acquireLock(deps.home, "down");
+    try {
+        const result = await deps.disable();
+        if (result.outcome === "bootoutFailed") {
+            return {
+                stopped: false,
+                note: "Daemon may still be running — managed Postgres left running and daemon state preserved. Investigate, then retry `memkin down`.",
+            };
+        }
+        // outcome is "notLoaded" or "success" — safe to stop managed PG
+        if (deps.engine === "managed" && deps.stopManagedPg) {
+            await deps.stopManagedPg();
+        }
+        return {
+            stopped: true,
+            note: "Daemon stopped and autostart removed. Agent config left intact — run `memkin uninstall` to revert agents.",
+        };
+    }
+    finally {
+        lock.release();
+    }
+}
+//# sourceMappingURL=down.js.map

package/dist/lifecycle/down.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"down.js","sourceRoot":"","sources":["../../src/lifecycle/down.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAEpC,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,gIAAgI;aACvI,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,2GAA2G;SAClH,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/lifecycle/health-poll.d.ts

@@ -0,0 +1,19 @@
+export interface HealthResponse {
+    status: number;
+    body: Record<string, unknown>;
+}
+export interface ExpectedHealth {
+    instanceId: string;
+    port: number;
+    bind: string;
+    engine: string;
+}
+export declare function isReady(resp: HealthResponse, expected: ExpectedHealth): boolean;
+export interface PollOpts {
+    timeoutMs?: number;
+    intervalMs?: number;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}
+export declare function pollHealth(fetchHealth: () => Promise<HealthResponse>, expected: ExpectedHealth, opts?: PollOpts): Promise<boolean>;
+//# sourceMappingURL=health-poll.d.ts.map

package/dist/lifecycle/health-poll.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-poll.d.ts","sourceRoot":"","sources":["../../src/lifecycle/health-poll.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAW/E;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wBAAsB,UAAU,CAC9B,WAAW,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,EAC1C,QAAQ,EAAE,cAAc,EACxB,IAAI,GAAE,QAAa,GAClB,OAAO,CAAC,OAAO,CAAC,CAgBlB"}

package/dist/lifecycle/health-poll.js

@@ -0,0 +1,39 @@
+export function isReady(resp, expected) {
+    if (resp.status !== 200)
+        return false;
+    const b = resp.body;
+    if (b.instance_id !== expected.instanceId)
+        return false;
+    if (b.db_ok !== true)
+        return false;
+    if (b.read_only !== false)
+        return false;
+    if (b.engine !== expected.engine)
+        return false;
+    // port/bind are echoed by some daemons; if present they must match, if absent don't fail on them
+    if (b.port !== undefined && b.port !== expected.port)
+        return false;
+    if (b.bind !== undefined && b.bind !== expected.bind)
+        return false;
+    return true;
+}
+export async function pollHealth(fetchHealth, expected, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    const intervalMs = opts.intervalMs ?? 250;
+    const now = opts.now ?? (() => Date.now());
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const start = now();
+    // NOTE: Date.now is fine in production runtime code; tests inject `now`/`sleep`.
+    while (now() - start < timeoutMs) {
+        try {
+            if (isReady(await fetchHealth(), expected))
+                return true;
+        }
+        catch {
+            // daemon not up yet — keep polling
+        }
+        await sleep(intervalMs);
+    }
+    return false;
+}
+//# sourceMappingURL=health-poll.js.map

package/dist/lifecycle/health-poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-poll.js","sourceRoot":"","sources":["../../src/lifecycle/health-poll.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,OAAO,CAAC,IAAoB,EAAE,QAAwB;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,iGAAiG;IACjG,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,WAA0C,EAC1C,QAAwB,EACxB,OAAiB,EAAE;IAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,iFAAiF;IACjF,OAAO,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,WAAW,EAAE,EAAE,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lifecycle/install-state.d.ts

@@ -0,0 +1,34 @@
+export interface OpRef {
+    client: string;
+    scope: "global" | "project";
+    path: string;
+    op_kind: string;
+}
+export interface OriginalEntry {
+    present: boolean;
+    raw: string | null;
+}
+export interface InstallStateOp extends OpRef {
+    original: OriginalEntry;
+    managed_hash: string;
+}
+export interface InstallState {
+    ops: InstallStateOp[];
+}
+/** Composite key identifying a unique operation. */
+export declare function opKey(op: OpRef): string;
+/** Read persisted install state. Returns `{ ops: [] }` when the file is absent or unreadable. */
+export declare function readInstallState(home: string): InstallState;
+/**
+ * Record the original state of an op before memkin mutates it.
+ *
+ * First-backup-wins: if the op key already exists, `original` is NOT overwritten.
+ * `managed_hash` is always updated to the latest written value.
+ */
+export declare function recordOriginal(home: string, op: OpRef, original: OriginalEntry, managedHash: string): void;
+/**
+ * Return the stored original ONLY if `stored.managed_hash === currentHash`.
+ * Returns `null` when the op has no record, or when hashes diverge (user hand-edited).
+ */
+export declare function restorableOriginal(home: string, op: OpRef, currentHash: string): OriginalEntry | null;
+//# sourceMappingURL=install-state.d.ts.map

package/dist/lifecycle/install-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-state.d.ts","sourceRoot":"","sources":["../../src/lifecycle/install-state.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,cAAc,EAAE,CAAC;CACvB;AAED,oDAAoD;AACpD,wBAAgB,KAAK,CAAC,EAAE,EAAE,KAAK,GAAG,MAAM,CAEvC;AAMD,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAQ3D;AAcD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,KAAK,EACT,QAAQ,EAAE,aAAa,EACvB,WAAW,EAAE,MAAM,GAClB,IAAI,CAiBN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,KAAK,EACT,WAAW,EAAE,MAAM,GAClB,aAAa,GAAG,IAAI,CAStB"}

package/dist/lifecycle/install-state.js

@@ -0,0 +1,70 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/** Composite key identifying a unique operation. */
+export function opKey(op) {
+    return `${op.client}|${op.scope}|${op.path}|${op.op_kind}`;
+}
+function stateFilePath(home) {
+    return join(home, ".memkin", "install-state.json");
+}
+/** Read persisted install state. Returns `{ ops: [] }` when the file is absent or unreadable. */
+export function readInstallState(home) {
+    const filePath = stateFilePath(home);
+    if (!existsSync(filePath))
+        return { ops: [] };
+    try {
+        return JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        return { ops: [] };
+    }
+}
+/** Atomically write install state to disk (temp + rename, mode 600). */
+function writeInstallState(home, state) {
+    const stateDir = join(home, ".memkin");
+    if (!existsSync(stateDir))
+        mkdirSync(stateDir, { recursive: true });
+    const filePath = stateFilePath(home);
+    const tmpPath = `${filePath}.${randomBytes(6).toString("hex")}.tmp`;
+    writeFileSync(tmpPath, JSON.stringify(state, null, 2), { mode: 0o600 });
+    renameSync(tmpPath, filePath);
+}
+/**
+ * Record the original state of an op before memkin mutates it.
+ *
+ * First-backup-wins: if the op key already exists, `original` is NOT overwritten.
+ * `managed_hash` is always updated to the latest written value.
+ */
+export function recordOriginal(home, op, original, managedHash) {
+    const state = readInstallState(home);
+    const key = opKey(op);
+    const existing = state.ops.find((o) => opKey(o) === key);
+    if (existing) {
+        // First-backup-wins: keep existing original; update managed_hash only
+        existing.managed_hash = managedHash;
+    }
+    else {
+        state.ops.push({
+            ...op,
+            original,
+            managed_hash: managedHash,
+        });
+    }
+    writeInstallState(home, state);
+}
+/**
+ * Return the stored original ONLY if `stored.managed_hash === currentHash`.
+ * Returns `null` when the op has no record, or when hashes diverge (user hand-edited).
+ */
+export function restorableOriginal(home, op, currentHash) {
+    const state = readInstallState(home);
+    const key = opKey(op);
+    const stored = state.ops.find((o) => opKey(o) === key);
+    if (!stored)
+        return null;
+    if (stored.managed_hash !== currentHash)
+        return null;
+    return stored.original;
+}
+//# sourceMappingURL=install-state.js.map

package/dist/lifecycle/install-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-state.js","sourceRoot":"","sources":["../../src/lifecycle/install-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuBjC,oDAAoD;AACpD,MAAM,UAAU,KAAK,CAAC,EAAS;IAC7B,OAAO,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAmB;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAEpE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,EAAS,EACT,QAAuB,EACvB,WAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAEzD,IAAI,QAAQ,EAAE,CAAC;QACb,sEAAsE;QACtE,QAAQ,CAAC,YAAY,GAAG,WAAW,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YACb,GAAG,EAAE;YACL,QAAQ;YACR,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,EAAS,EACT,WAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAEvD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAErD,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}

package/dist/lifecycle/legacy-migration.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Legacy data auto-migration (R2): memoark → memkin.
+ *
+ * R1 renamed every default with NO fallback (config file, ~/.memkin data dir,
+ * project-local .memkin/ state dir). Existing users — whose real memories live
+ * under the old memoark paths — would silently start from scratch. This module
+ * performs a one-shot, seamless migration at CLI startup so nothing is lost.
+ *
+ * It is invoked ONCE, early in CLI boot (a commander `preAction` hook), BEFORE
+ * loadConfig reads memkin.yaml or any store is opened. It covers three moves:
+ *
+ *   1. user data dir   ~/.memoark      → ~/.memkin
+ *   2. config file      memoark.yaml   → memkin.yaml   (nearest-ancestor search,
+ *      mirroring resolveConfigPath's upward walk from cwd)
+ *   3. project state    .memoark/      → .memkin/      (at the config anchor dir
+ *      AND at cwd — see migrateLegacyData for why both)
+ *
+ * Design rules (see R2 spec):
+ *   - rename-only (fs.renameSync). NEVER copy-recursive — a half-copied SQLite/PG
+ *     dir is worse than none. On EXDEV / any rename failure we leave the old dir
+ *     in place and print an actionable manual-move instruction.
+ *   - both old + new exist → NEVER merge, NEVER delete. Use new, warn once.
+ *   - neither exists → silent no-op (fresh install stays zero-noise).
+ *   - idempotent: after a successful move the old path is gone, so a second run
+ *     hits the "neither / new-only" branch and stays silent.
+ *   - lock safety: refuse to move ~/.memoark while a legacy daemon lock is live
+ *     (lifecycle.lock / managed-pg.lock with an alive pid).
+ *   - backups (~/.memoark.bak.*) are intentionally left untouched.
+ *   - legacy MEMOARK_* env vars are NOT honored (clean cut) but never silently
+ *     ignored — we warn listing which are set and their MEMKIN_* replacement.
+ *
+ * All output goes through caller-supplied `notice` / `warn` sinks. In production
+ * both default to STDERR (console.error). This is deliberate: the choke point
+ * runs for every command including `serve --mcp`, where STDOUT is the JSON-RPC
+ * channel and any stray byte corrupts the transport. stderr is safe there.
+ */
+export interface MigrateLegacyOptions {
+    /** Home directory (injected for tests). */
+    home: string;
+    /** Current working directory to scan for config + project state (injected for tests). */
+    cwd: string;
+    /** Environment map to scan for legacy MEMOARK_* vars. */
+    env: Record<string, string | undefined>;
+    /** Sink for success notices. Defaults to stderr. */
+    notice?: (message: string) => void;
+    /** Sink for warnings. Defaults to stderr. */
+    warn?: (message: string) => void;
+    /** Rename primitive (injected for tests, e.g. to simulate EXDEV). Defaults to fs.renameSync. */
+    renameFn?: (oldPath: string, newPath: string) => void;
+}
+/**
+ * Run all legacy → memkin migrations. Idempotent and safe to call on every boot.
+ *
+ * Order: env warning first (cheap, always relevant), then data dir (guarded by
+ * lock check), then config file, then project state dir.
+ */
+export declare function migrateLegacyData(opts: MigrateLegacyOptions): void;
+//# sourceMappingURL=legacy-migration.d.ts.map

package/dist/lifecycle/legacy-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-migration.d.ts","sourceRoot":"","sources":["../../src/lifecycle/legacy-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAKH,MAAM,WAAW,oBAAoB;IACnC,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,oDAAoD;IACpD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,6CAA6C;IAC7C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,gGAAgG;IAChG,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACvD;AAwID;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAgFlE"}