musememory 1.6.0 → 1.6.1

package/dist/index.js

@@ -4,7 +4,6 @@ var __create = Object.create;
 var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 function __accessProp(key) {
   return this[key];
@@ -33,23 +32,6 @@ var __toESM = (mod, isNodeMode, target) => {
     cache.set(mod, to);
   return to;
 };
-var __toCommonJS = (from) => {
-  var entry = (__moduleCache ??= new WeakMap).get(from), desc;
-  if (entry)
-    return entry;
-  entry = __defProp({}, "__esModule", { value: true });
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (var key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(entry, key))
-        __defProp(entry, key, {
-          get: __accessProp.bind(from, key),
-          enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-        });
-  }
-  __moduleCache.set(from, entry);
-  return entry;
-};
-var __moduleCache;
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __returnValue = (v) => v;
 function __exportSetter(name, newValue) {
@@ -110,7 +92,7 @@ var init_secrets = __esm(() => {
     },
     {
       name: "Private Key Block",
-      pattern: /-----BEGIN (?:RSA|DSA|EC|OPENSSH|PGP|ENCRYPTED|PRIVATE)? ?KEY|PRIVATE KEY/i
+      pattern: /-----BEGIN (?:RSA|DSA|EC|OPENSSH|PGP|ENCRYPTED|PRIVATE)? ?(?:PRIVATE )?KEY/i
     },
     {
       name: "Slack Token",
@@ -3532,7 +3514,14 @@ var init_types = __esm(() => {
 // src/retrieval.ts
 import { existsSync as existsSync4 } from "node:fs";
 import { join as join4 } from "node:path";
+function tokenize(text) {
+  if (!text || typeof text !== "string")
+    return [];
+  return text.toLowerCase().match(/[a-z0-9]+/g) ?? [];
+}
 function stalePolicyDays(type2) {
+  if (!type2)
+    return DEFAULT_STALE_DAYS;
   switch (type2) {
     case "fix":
       return 90;
@@ -3548,11 +3537,6 @@ function stalePolicyDays(type2) {
       return DEFAULT_STALE_DAYS;
   }
 }
-function tokenize(text) {
-  if (!text || typeof text !== "string")
-    return [];
-  return text.toLowerCase().match(/[a-z0-9]+/g) ?? [];
-}
 function estimateEntryTokens(entry) {
   const text = `${entry.id} ${entry.status} ${entry.project} ${entry.title}
 ${entry.content}
@@ -3610,10 +3594,14 @@ function sortCandidates(candidates, queryTokens, now) {
   return candidates.map((entry) => ({ entry, score: scoreEntry(entry, queryTokens, now) })).sort((a, b) => {
     if (b.score !== a.score)
       return b.score - a.score;
-    const u = Date.parse(b.entry.updated_at) - Date.parse(a.entry.updated_at);
+    const bU = Date.parse(b.entry.updated_at);
+    const aU = Date.parse(a.entry.updated_at);
+    const u = (Number.isNaN(bU) ? 0 : bU) - (Number.isNaN(aU) ? 0 : aU);
     if (u !== 0)
       return u;
-    return Date.parse(b.entry.created_at) - Date.parse(a.entry.created_at);
+    const bC = Date.parse(b.entry.created_at);
+    const aC = Date.parse(a.entry.created_at);
+    return (Number.isNaN(bC) ? 0 : bC) - (Number.isNaN(aC) ? 0 : aC);
   });
 }
 function queryContext(store, query = "", options = {}) {
@@ -3648,14 +3636,16 @@ function queryContext(store, query = "", options = {}) {
   const limit = options.limit ?? 10;
   const results = [];
   let totalTokensUsed = 0;
-  if (options.tokenBudget && options.tokenBudget > 0) {
-    for (const item of scored) {
-      if (results.length >= limit)
-        break;
-      const tokens = estimateEntryTokens(item.entry);
-      if (totalTokensUsed + tokens <= options.tokenBudget) {
-        results.push(item);
-        totalTokensUsed += tokens;
+  if (options.tokenBudget !== undefined) {
+    if (options.tokenBudget > 0) {
+      for (const item of scored) {
+        if (results.length >= limit)
+          break;
+        const tokens = estimateEntryTokens(item.entry);
+        if (totalTokensUsed + tokens <= options.tokenBudget) {
+          results.push(item);
+          totalTokensUsed += tokens;
+        }
       }
     }
   } else {
@@ -3694,7 +3684,6 @@ function formatPromptContext(store, memoryDir, query = "", options = {}) {
     }
     parts.push("");
   }
-  const { getSessionHandoff } = (init_current(), __toCommonJS(exports_current));
   const handoff = memoryDir ? getSessionHandoff(memoryDir) : null;
   if (handoff && (handoff.status === "IN-PROGRESS" || handoff.task || handoff.lastQuery)) {
     parts.push("### Active In-Flight Context & Session Handoff (CURRENT.md)");
@@ -3721,7 +3710,6 @@ function formatPromptContext(store, memoryDir, query = "", options = {}) {
   }
   if (memoryDir && existsSync4(join4(memoryDir, "wiki"))) {
     try {
-      const { listWikiPages } = (init_wiki(), __toCommonJS(exports_wiki));
       const wikiPages = listWikiPages(memoryDir, { detailLevel: "l1", project: options.project });
       if (wikiPages.length > 0) {
         const queryTokens = tokenize(query);
@@ -3729,7 +3717,8 @@ function formatPromptContext(store, memoryDir, query = "", options = {}) {
         if (relevantWiki.length > 0) {
           parts.push("### Compiled Knowledge & Concepts (Wiki L1)");
           for (const wp of relevantWiki) {
-            parts.push(`- [[${wp.slug}]]: ${wp.title}${wp.summary ? ` — ${wp.summary}` : ""}`);
+            const sum = wp.summary;
+            parts.push(`- [[${wp.slug}]]: ${wp.title}${sum ? ` — ${sum}` : ""}`);
           }
           parts.push("");
         }
@@ -3792,12 +3781,190 @@ function formatPromptContext(store, memoryDir, query = "", options = {}) {
     userProfile
   };
 }
+var STOPWORDS;
 var init_retrieval = __esm(() => {
   init_store();
-  init_current();
+  init_governor();
+  init_compiler();
   init_user();
   init_core();
   init_types();
+  STOPWORDS = new Set([
+    "a",
+    "about",
+    "above",
+    "after",
+    "again",
+    "against",
+    "all",
+    "am",
+    "an",
+    "and",
+    "any",
+    "are",
+    "aren't",
+    "as",
+    "at",
+    "be",
+    "because",
+    "been",
+    "before",
+    "being",
+    "below",
+    "between",
+    "both",
+    "but",
+    "by",
+    "can't",
+    "cannot",
+    "could",
+    "couldn't",
+    "did",
+    "didn't",
+    "do",
+    "does",
+    "doesn't",
+    "doing",
+    "don't",
+    "down",
+    "during",
+    "each",
+    "few",
+    "for",
+    "from",
+    "further",
+    "had",
+    "hadn't",
+    "has",
+    "hasn't",
+    "have",
+    "haven't",
+    "having",
+    "he",
+    "he'd",
+    "he'll",
+    "he's",
+    "her",
+    "here",
+    "here's",
+    "hers",
+    "herself",
+    "him",
+    "himself",
+    "his",
+    "how",
+    "how's",
+    "i",
+    "i'd",
+    "i'll",
+    "i'm",
+    "i've",
+    "if",
+    "in",
+    "into",
+    "is",
+    "isn't",
+    "it",
+    "it's",
+    "its",
+    "itself",
+    "let's",
+    "me",
+    "more",
+    "most",
+    "mustn't",
+    "my",
+    "myself",
+    "no",
+    "nor",
+    "not",
+    "of",
+    "off",
+    "on",
+    "once",
+    "only",
+    "or",
+    "other",
+    "ought",
+    "our",
+    "ours",
+    "ourselves",
+    "out",
+    "over",
+    "own",
+    "same",
+    "shan't",
+    "she",
+    "she'd",
+    "she'll",
+    "she's",
+    "should",
+    "shouldn't",
+    "so",
+    "some",
+    "such",
+    "than",
+    "that",
+    "that's",
+    "the",
+    "their",
+    "theirs",
+    "them",
+    "themselves",
+    "then",
+    "there",
+    "there's",
+    "these",
+    "they",
+    "they'd",
+    "they'll",
+    "they're",
+    "they've",
+    "this",
+    "those",
+    "through",
+    "to",
+    "too",
+    "under",
+    "until",
+    "up",
+    "very",
+    "was",
+    "wasn't",
+    "we",
+    "we'd",
+    "we'll",
+    "we're",
+    "we've",
+    "were",
+    "weren't",
+    "what",
+    "what's",
+    "when",
+    "when's",
+    "where",
+    "where's",
+    "which",
+    "while",
+    "who",
+    "who's",
+    "whom",
+    "why",
+    "why's",
+    "with",
+    "won't",
+    "would",
+    "wouldn't",
+    "you",
+    "you'd",
+    "you'll",
+    "you're",
+    "you've",
+    "your",
+    "yours",
+    "yourself",
+    "yourselves"
+  ]);
 });
 
 // src/governor.ts
@@ -4062,22 +4229,6 @@ function recordSessionEnd(store, sessionId, project, summary) {
   save(store, entry);
   return entry;
 }
-function getSessionMemories(store, sessionId) {
-  return list(store).filter((e) => e.session_id === sessionId && e.type !== "session");
-}
-function linkMemoriesToSession(store, sessionId, memoryIds) {
-  const updated = [];
-  const entries = list(store);
-  for (const id of memoryIds) {
-    const entry = entries.find((e) => e.id === id);
-    if (entry) {
-      entry.session_id = sessionId;
-      save(store, entry);
-      updated.push(entry);
-    }
-  }
-  return updated;
-}
 function probeGit(workspaceRoot) {
   const items = [];
   try {
@@ -4255,266 +4406,12 @@ var init_governor = __esm(() => {
 });
 
 // src/current.ts
-var exports_current = {};
-__export(exports_current, {
-  WorkspaceGovernor: () => WorkspaceGovernor,
-  collectLoops: () => collectLoops,
-  collectNudges: () => collectNudges,
-  currentFilePath: () => currentFilePath,
-  dueEntries: () => dueEntries,
-  findSession: () => findSession,
-  getCurrent: () => getCurrent2,
-  getSessionHandoff: () => getSessionHandoff,
-  getSessionMemories: () => getSessionMemories,
-  linkMemoriesToSession: () => linkMemoriesToSession,
-  markSessionCompleted: () => markSessionCompleted,
-  parseCurrentFile: () => parseCurrentFile,
-  recordSessionEnd: () => recordSessionEnd,
-  recordSessionStart: () => recordSessionStart,
-  renderLoops: () => renderLoops,
-  renderNudges: () => renderNudges,
-  setCurrent: () => setCurrent,
-  syncConstraints: () => syncConstraints,
-  updateSessionHandoff: () => updateSessionHandoff,
-  writeCurrentFile: () => writeCurrentFile
-});
 var init_current = __esm(() => {
   init_governor();
 });
 
-// src/sqlite.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync5 } from "node:fs";
-import { dirname } from "node:path";
-function getDriver() {
-  if (sqliteDriver !== "none")
-    return sqliteDriver;
-  try {
-    if (typeof globalThis.Bun !== "undefined") {
-      sqliteDriver = "bun";
-      return "bun";
-    }
-  } catch {}
-  try {
-    __require("node:sqlite");
-    sqliteDriver = "node";
-    return "node";
-  } catch {}
-  sqliteDriver = "bun";
-  return "bun";
-}
-function openDatabase(dbPath) {
-  const dir = dirname(dbPath);
-  if (!existsSync6(dir)) {
-    mkdirSync5(dir, { recursive: true });
-  }
-  const driver = getDriver();
-  let rawDb;
-  if (driver === "bun") {
-    const { Database } = __require("bun:sqlite");
-    rawDb = new Database(dbPath, { create: true });
-    rawDb.run("PRAGMA journal_mode = WAL;");
-    rawDb.run("PRAGMA synchronous = NORMAL;");
-    const db = {
-      exec(sql) {
-        rawDb.exec(sql);
-      },
-      run(sql, params) {
-        if (params && Array.isArray(params)) {
-          rawDb.run(sql, params);
-        } else if (params && typeof params === "object") {
-          rawDb.run(sql, params);
-        } else {
-          rawDb.run(sql);
-        }
-      },
-      query(sql) {
-        const stmt = rawDb.query(sql);
-        return {
-          all(params) {
-            return params ? stmt.all(params) : stmt.all();
-          },
-          get(params) {
-            return params ? stmt.get(params) : stmt.get();
-          }
-        };
-      },
-      close() {
-        rawDb.close();
-      }
-    };
-    initSchema(db);
-    return db;
-  } else {
-    const { DatabaseSync } = __require("node:sqlite");
-    rawDb = new DatabaseSync(dbPath);
-    rawDb.exec("PRAGMA journal_mode = WAL;");
-    rawDb.exec("PRAGMA synchronous = NORMAL;");
-    const db = {
-      exec(sql) {
-        rawDb.exec(sql);
-      },
-      run(sql, params) {
-        const stmt = rawDb.prepare(sql);
-        if (params && Array.isArray(params)) {
-          stmt.run(...params);
-        } else if (params && typeof params === "object") {
-          stmt.run(params);
-        } else {
-          stmt.run();
-        }
-      },
-      query(sql) {
-        const stmt = rawDb.prepare(sql);
-        return {
-          all(params) {
-            if (params && Array.isArray(params))
-              return stmt.all(...params);
-            if (params && typeof params === "object")
-              return stmt.all(params);
-            return stmt.all();
-          },
-          get(params) {
-            if (params && Array.isArray(params))
-              return stmt.get(...params);
-            if (params && typeof params === "object")
-              return stmt.get(params);
-            return stmt.get();
-          }
-        };
-      },
-      close() {
-        rawDb.close();
-      }
-    };
-    initSchema(db);
-    return db;
-  }
-}
-function initSchema(db) {
-  db.exec(`
-    CREATE TABLE IF NOT EXISTS memories (
-      id TEXT PRIMARY KEY,
-      title TEXT NOT NULL,
-      content TEXT NOT NULL,
-      project TEXT NOT NULL,
-      type TEXT NOT NULL,
-      status TEXT NOT NULL,
-      salience REAL,
-      reinforcement INTEGER,
-      session_id TEXT,
-      due_at TEXT,
-      expires_at TEXT,
-      valid_from TEXT,
-      valid_to TEXT,
-      data TEXT NOT NULL,
-      created_at TEXT NOT NULL,
-      updated_at TEXT NOT NULL
-    );
-
-    CREATE INDEX IF NOT EXISTS idx_memories_project ON memories(project);
-    CREATE INDEX IF NOT EXISTS idx_memories_type ON memories(type);
-    CREATE INDEX IF NOT EXISTS idx_memories_status ON memories(status);
-    CREATE INDEX IF NOT EXISTS idx_memories_session_id ON memories(session_id);
-    CREATE INDEX IF NOT EXISTS idx_memories_due_at ON memories(due_at);
-    CREATE INDEX IF NOT EXISTS idx_memories_updated_at ON memories(updated_at);
-  `);
-}
-function rowToMemoryEntry(row) {
-  let parsedData = {};
-  try {
-    parsedData = JSON.parse(row.data);
-  } catch {}
-  return {
-    ...parsedData,
-    id: row.id,
-    title: row.title,
-    content: row.content,
-    project: row.project,
-    type: row.type,
-    status: row.status,
-    salience: row.salience !== null ? row.salience : parsedData.salience,
-    reinforcement: row.reinforcement !== null ? row.reinforcement : parsedData.reinforcement,
-    session_id: row.session_id !== null ? row.session_id : parsedData.session_id,
-    due_at: row.due_at !== null ? row.due_at : parsedData.due_at,
-    expires_at: row.expires_at !== null ? row.expires_at : parsedData.expires_at,
-    valid_from: row.valid_from !== null ? row.valid_from : parsedData.valid_from,
-    valid_to: row.valid_to !== null ? row.valid_to : parsedData.valid_to,
-    created_at: row.created_at || parsedData.created_at || new Date().toISOString(),
-    updated_at: row.updated_at || parsedData.updated_at || new Date().toISOString()
-  };
-}
-function insertOrReplaceMemory(db, entry) {
-  const sql = `
-    INSERT OR REPLACE INTO memories (
-      id, title, content, project, type, status, salience, reinforcement,
-      session_id, due_at, expires_at, valid_from, valid_to, data,
-      created_at, updated_at
-    ) VALUES (
-      ?, ?, ?, ?, ?, ?, ?, ?,
-      ?, ?, ?, ?, ?, ?,
-      ?, ?
-    )
-  `;
-  db.run(sql, [
-    entry.id,
-    entry.title,
-    entry.content,
-    entry.project,
-    entry.type || "discovery",
-    entry.status,
-    typeof entry.salience === "number" ? entry.salience : null,
-    typeof entry.reinforcement === "number" ? entry.reinforcement : null,
-    entry.session_id ?? null,
-    entry.due_at ?? null,
-    entry.expires_at ?? null,
-    entry.valid_from ?? null,
-    entry.valid_to ?? null,
-    JSON.stringify(entry),
-    entry.created_at,
-    entry.updated_at
-  ]);
-}
-function getMemoryById(db, id) {
-  const row = db.query(`SELECT * FROM memories WHERE id = ? LIMIT 1`).get([id]);
-  if (!row)
-    return null;
-  return rowToMemoryEntry(row);
-}
-function listMemories(db, filters) {
-  let sql = `SELECT * FROM memories`;
-  const conditions = [];
-  const params = [];
-  if (filters?.project) {
-    conditions.push(`project = ?`);
-    params.push(filters.project);
-  }
-  if (filters?.type) {
-    conditions.push(`type = ?`);
-    params.push(filters.type);
-  }
-  if (filters?.status) {
-    conditions.push(`status = ?`);
-    params.push(filters.status);
-  }
-  if (conditions.length > 0) {
-    sql += ` WHERE ` + conditions.join(` AND `);
-  }
-  sql += ` ORDER BY updated_at DESC`;
-  const rows = db.query(sql).all(params.length > 0 ? params : undefined);
-  return rows.map(rowToMemoryEntry);
-}
-function deleteMemoryById(db, id) {
-  const existing = getMemoryById(db, id);
-  if (!existing)
-    return false;
-  db.run(`DELETE FROM memories WHERE id = ?`, [id]);
-  return true;
-}
-var sqliteDriver = "none";
-var init_sqlite = () => {};
-
 // src/transcript.ts
-import { existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5 } from "node:fs";
 function parseJsonlTranscript(jsonlText) {
   if (!jsonlText)
     return [];
@@ -4565,7 +4462,7 @@ function parseJsonlTranscript(jsonlText) {
 }
 function searchTranscriptWithBookends(transcriptPathOrContent, query, options = {}) {
   let content = transcriptPathOrContent;
-  if (existsSync7(transcriptPathOrContent)) {
+  if (existsSync6(transcriptPathOrContent)) {
     content = readFileSync5(transcriptPathOrContent, "utf8");
   }
   const turns = parseJsonlTranscript(content);
@@ -4636,15 +4533,7 @@ ${m.matchedTurn}`);
 var init_transcript = () => {};
 
 // src/harvest.ts
-var exports_harvest = {};
-__export(exports_harvest, {
-  defaultSalienceForType: () => defaultSalienceForType,
-  extractCommitments: () => extractCommitments,
-  extractHarvestUnits: () => extractHarvestUnits,
-  importTranscript: () => importTranscript,
-  openLoopId: () => openLoopId
-});
-import { existsSync as existsSync8, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
 import { createHash } from "node:crypto";
 function extractHarvestUnits(text) {
   if (!text || typeof text !== "string")
@@ -4769,96 +4658,328 @@ function extractCommitments(text) {
         }
         break;
       }
-    }
+    }
+  }
+  return out;
+}
+function openLoopId(text) {
+  const h = createHash("sha256").update(text.toLowerCase().replace(/\s+/g, " ").trim()).digest("hex");
+  return `m_0_ol${h.slice(0, 12)}`;
+}
+function importTranscript(store, transcriptPathOrContent, options = {}) {
+  let content = transcriptPathOrContent;
+  if (existsSync7(transcriptPathOrContent)) {
+    content = readFileSync6(transcriptPathOrContent, "utf8");
+  }
+  const blocks = parseJsonlTranscript(content);
+  const fullText = blocks.join(`
+
+`);
+  const units = extractHarvestUnits(fullText);
+  const project = options.project ?? "default";
+  const entries = [];
+  const errors = [];
+  for (const unit of units) {
+    try {
+      const entry = propose(store, {
+        project,
+        title: unit.title,
+        content: unit.content,
+        type: unit.type,
+        tags: unit.tags,
+        source: options.source ?? "transcript_import",
+        confirmed: options.confirmed ?? false
+      });
+      if (options.sessionId) {
+        entry.session_id = options.sessionId;
+        save(store, entry);
+      }
+      entries.push(entry);
+    } catch (err) {
+      errors.push(`Failed to import unit "${unit.title}": ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  const openLoops = [];
+  if (options.openLoops !== false) {
+    const existing = new Set(list(store).map((e) => e.id));
+    for (const commitment of extractCommitments(fullText)) {
+      const id = openLoopId(commitment);
+      if (existing.has(id))
+        continue;
+      try {
+        const entry = propose(store, {
+          id,
+          project,
+          title: commitment.slice(0, 80),
+          content: commitment,
+          type: "operation",
+          tags: ["open-loop", "harvested"],
+          source: options.source ?? "transcript_import"
+        });
+        if (options.sessionId) {
+          entry.session_id = options.sessionId;
+          save(store, entry);
+        }
+        existing.add(id);
+        openLoops.push(entry);
+      } catch (err) {
+        errors.push(`Failed to record open loop "${commitment}": ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+  }
+  return {
+    imported: entries.length,
+    entries,
+    errors,
+    openLoops
+  };
+}
+var COMMITMENT_PATTERNS;
+var init_harvest = __esm(() => {
+  init_store();
+  init_transcript();
+  COMMITMENT_PATTERNS = [
+    /\btodo\b\s*[:\-]\s*(.{4,})/i,
+    /\b(?:i'll|i will|i am going to)\s+(.{4,})/i,
+    /\bneed to\s+(.{4,})/i,
+    /\bfollow up (?:on|with)\s+(.{4,})/i,
+    /\bremind me to\s+(.{4,})/i
+  ];
+});
+
+// src/sqlite.ts
+import { existsSync as existsSync8, mkdirSync as mkdirSync5 } from "node:fs";
+import { dirname } from "node:path";
+function getDriver() {
+  if (sqliteDriver !== "none")
+    return sqliteDriver;
+  try {
+    if (typeof globalThis.Bun !== "undefined") {
+      sqliteDriver = "bun";
+      return "bun";
+    }
+  } catch {}
+  try {
+    __require("node:sqlite");
+    sqliteDriver = "node";
+    return "node";
+  } catch {}
+  sqliteDriver = "bun";
+  return "bun";
+}
+function openDatabase(dbPath) {
+  const dir = dirname(dbPath);
+  if (!existsSync8(dir)) {
+    mkdirSync5(dir, { recursive: true });
+  }
+  const driver = getDriver();
+  let rawDb;
+  if (driver === "bun") {
+    const { Database } = __require("bun:sqlite");
+    rawDb = new Database(dbPath, { create: true });
+    rawDb.run("PRAGMA journal_mode = WAL;");
+    rawDb.run("PRAGMA synchronous = NORMAL;");
+    const db = {
+      exec(sql) {
+        rawDb.exec(sql);
+      },
+      run(sql, params) {
+        if (params && Array.isArray(params)) {
+          rawDb.run(sql, params);
+        } else if (params && typeof params === "object") {
+          rawDb.run(sql, params);
+        } else {
+          rawDb.run(sql);
+        }
+      },
+      query(sql) {
+        const stmt = rawDb.query(sql);
+        return {
+          all(params) {
+            return params ? stmt.all(params) : stmt.all();
+          },
+          get(params) {
+            return params ? stmt.get(params) : stmt.get();
+          }
+        };
+      },
+      close() {
+        rawDb.close();
+      }
+    };
+    initSchema(db);
+    return db;
+  } else {
+    const { DatabaseSync } = __require("node:sqlite");
+    rawDb = new DatabaseSync(dbPath);
+    rawDb.exec("PRAGMA journal_mode = WAL;");
+    rawDb.exec("PRAGMA synchronous = NORMAL;");
+    const db = {
+      exec(sql) {
+        rawDb.exec(sql);
+      },
+      run(sql, params) {
+        const stmt = rawDb.prepare(sql);
+        if (params && Array.isArray(params)) {
+          stmt.run(...params);
+        } else if (params && typeof params === "object") {
+          stmt.run(params);
+        } else {
+          stmt.run();
+        }
+      },
+      query(sql) {
+        const stmt = rawDb.prepare(sql);
+        return {
+          all(params) {
+            if (params && Array.isArray(params))
+              return stmt.all(...params);
+            if (params && typeof params === "object")
+              return stmt.all(params);
+            return stmt.all();
+          },
+          get(params) {
+            if (params && Array.isArray(params))
+              return stmt.get(...params);
+            if (params && typeof params === "object")
+              return stmt.get(params);
+            return stmt.get();
+          }
+        };
+      },
+      close() {
+        rawDb.close();
+      }
+    };
+    initSchema(db);
+    return db;
   }
-  return out;
 }
-function openLoopId(text) {
-  const h = createHash("sha256").update(text.toLowerCase().replace(/\s+/g, " ").trim()).digest("hex");
-  return `m_0_ol${h.slice(0, 12)}`;
+function initSchema(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS memories (
+      id TEXT PRIMARY KEY,
+      title TEXT NOT NULL,
+      content TEXT NOT NULL,
+      project TEXT NOT NULL,
+      type TEXT NOT NULL,
+      status TEXT NOT NULL,
+      salience REAL,
+      reinforcement INTEGER,
+      session_id TEXT,
+      due_at TEXT,
+      expires_at TEXT,
+      valid_from TEXT,
+      valid_to TEXT,
+      data TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_memories_project ON memories(project);
+    CREATE INDEX IF NOT EXISTS idx_memories_type ON memories(type);
+    CREATE INDEX IF NOT EXISTS idx_memories_status ON memories(status);
+    CREATE INDEX IF NOT EXISTS idx_memories_session_id ON memories(session_id);
+    CREATE INDEX IF NOT EXISTS idx_memories_due_at ON memories(due_at);
+    CREATE INDEX IF NOT EXISTS idx_memories_updated_at ON memories(updated_at);
+  `);
 }
-function importTranscript(store, transcriptPathOrContent, options = {}) {
-  let content = transcriptPathOrContent;
-  if (existsSync8(transcriptPathOrContent)) {
-    content = readFileSync6(transcriptPathOrContent, "utf8");
+function rowToMemoryEntry(row) {
+  let parsedData = {};
+  try {
+    parsedData = JSON.parse(row.data);
+  } catch {}
+  return {
+    ...parsedData,
+    id: row.id,
+    title: row.title,
+    content: row.content,
+    project: row.project,
+    type: row.type,
+    status: row.status,
+    salience: row.salience !== null ? row.salience : parsedData.salience,
+    reinforcement: row.reinforcement !== null ? row.reinforcement : parsedData.reinforcement,
+    session_id: row.session_id !== null ? row.session_id : parsedData.session_id,
+    due_at: row.due_at !== null ? row.due_at : parsedData.due_at,
+    expires_at: row.expires_at !== null ? row.expires_at : parsedData.expires_at,
+    valid_from: row.valid_from !== null ? row.valid_from : parsedData.valid_from,
+    valid_to: row.valid_to !== null ? row.valid_to : parsedData.valid_to,
+    created_at: row.created_at || parsedData.created_at || new Date().toISOString(),
+    updated_at: row.updated_at || parsedData.updated_at || new Date().toISOString()
+  };
+}
+function insertOrReplaceMemory(db, entry) {
+  const sql = `
+    INSERT OR REPLACE INTO memories (
+      id, title, content, project, type, status, salience, reinforcement,
+      session_id, due_at, expires_at, valid_from, valid_to, data,
+      created_at, updated_at
+    ) VALUES (
+      ?, ?, ?, ?, ?, ?, ?, ?,
+      ?, ?, ?, ?, ?, ?,
+      ?, ?
+    )
+  `;
+  db.run(sql, [
+    entry.id,
+    entry.title,
+    entry.content,
+    entry.project,
+    entry.type || "discovery",
+    entry.status,
+    typeof entry.salience === "number" ? entry.salience : null,
+    typeof entry.reinforcement === "number" ? entry.reinforcement : null,
+    entry.session_id ?? null,
+    entry.due_at ?? null,
+    entry.expires_at ?? null,
+    entry.valid_from ?? null,
+    entry.valid_to ?? null,
+    JSON.stringify(entry),
+    entry.created_at,
+    entry.updated_at
+  ]);
+}
+function getMemoryById(db, id) {
+  const row = db.query(`SELECT * FROM memories WHERE id = ? LIMIT 1`).get([id]);
+  if (!row)
+    return null;
+  return rowToMemoryEntry(row);
+}
+function listMemories(db, filters) {
+  let sql = `SELECT * FROM memories`;
+  const conditions = [];
+  const params = [];
+  if (filters?.project) {
+    conditions.push(`project = ?`);
+    params.push(filters.project);
   }
-  const blocks = parseJsonlTranscript(content);
-  const fullText = blocks.join(`
-
-`);
-  const units = extractHarvestUnits(fullText);
-  const project = options.project ?? "default";
-  const entries = [];
-  const errors = [];
-  for (const unit of units) {
-    try {
-      const entry = propose(store, {
-        project,
-        title: unit.title,
-        content: unit.content,
-        type: unit.type,
-        tags: unit.tags,
-        source: options.source ?? "transcript_import",
-        confirmed: options.confirmed ?? false
-      });
-      if (options.sessionId) {
-        entry.session_id = options.sessionId;
-        save(store, entry);
-      }
-      entries.push(entry);
-    } catch (err) {
-      errors.push(`Failed to import unit "${unit.title}": ${err instanceof Error ? err.message : String(err)}`);
-    }
+  if (filters?.type) {
+    conditions.push(`type = ?`);
+    params.push(filters.type);
   }
-  const openLoops = [];
-  if (options.openLoops !== false) {
-    const existing = new Set(list(store).map((e) => e.id));
-    for (const commitment of extractCommitments(fullText)) {
-      const id = openLoopId(commitment);
-      if (existing.has(id))
-        continue;
-      try {
-        const entry = propose(store, {
-          id,
-          project,
-          title: commitment.slice(0, 80),
-          content: commitment,
-          type: "operation",
-          tags: ["open-loop", "harvested"],
-          source: options.source ?? "transcript_import"
-        });
-        if (options.sessionId) {
-          entry.session_id = options.sessionId;
-          save(store, entry);
-        }
-        existing.add(id);
-        openLoops.push(entry);
-      } catch (err) {
-        errors.push(`Failed to record open loop "${commitment}": ${err instanceof Error ? err.message : String(err)}`);
-      }
-    }
+  if (filters?.status) {
+    conditions.push(`status = ?`);
+    params.push(filters.status);
   }
-  return {
-    imported: entries.length,
-    entries,
-    errors,
-    openLoops
-  };
+  if (conditions.length > 0) {
+    sql += ` WHERE ` + conditions.join(` AND `);
+  }
+  sql += ` ORDER BY updated_at DESC`;
+  const rows = db.query(sql).all(params.length > 0 ? params : undefined);
+  return rows.map(rowToMemoryEntry);
 }
-var COMMITMENT_PATTERNS;
-var init_harvest = __esm(() => {
-  init_store();
-  init_transcript();
-  COMMITMENT_PATTERNS = [
-    /\btodo\b\s*[:\-]\s*(.{4,})/i,
-    /\b(?:i'll|i will|i am going to)\s+(.{4,})/i,
-    /\bneed to\s+(.{4,})/i,
-    /\bfollow up (?:on|with)\s+(.{4,})/i,
-    /\bremind me to\s+(.{4,})/i
-  ];
-});
+function deleteMemoryById(db, id) {
+  const existing = getMemoryById(db, id);
+  if (!existing)
+    return false;
+  db.run(`DELETE FROM memories WHERE id = ?`, [id]);
+  return true;
+}
+var sqliteDriver = "none";
+var init_sqlite = () => {};
 
 // src/store.ts
+import { resolve } from "node:path";
 import { readdirSync, readFileSync as readFileSync7, writeFileSync as writeFileSync4, renameSync, unlinkSync, mkdirSync as mkdirSync6, existsSync as existsSync9 } from "node:fs";
 import { join as join6 } from "node:path";
 function getStorageLayout(memoryDir) {
@@ -4898,7 +5019,6 @@ function openStore(memoryDir) {
     syncConstraints(memoryDir, store);
   } catch {}
   try {
-    const { autoCompileWiki } = (init_wiki(), __toCommonJS(exports_wiki));
     autoCompileWiki(store, memoryDir);
   } catch {}
   return store;
@@ -4919,7 +5039,13 @@ function slugifyId(id) {
   return slug.length > 0 ? slug : "entry";
 }
 function fileForId(store, id) {
-  return join6(store.dir, `${slugifyId(id)}.yaml`);
+  const safeFilename = `${slugifyId(id)}.yaml`;
+  const target = resolve(store.dir, safeFilename);
+  const base = resolve(store.dir);
+  if (!target.startsWith(base)) {
+    throw new Error(`Security Violation: Path traversal detected for id "${id}"`);
+  }
+  return target;
 }
 function listIds(store) {
   const ids = new Set;
@@ -5290,8 +5416,7 @@ function deleteEntry(store, id, reason, actor) {
   return deleted;
 }
 function harvestMemories(store, params) {
-  const { extractHarvestUnits: extractHarvestUnits2 } = (init_harvest(), __toCommonJS(exports_harvest));
-  const units = extractHarvestUnits2(params.text);
+  const units = extractHarvestUnits(params.text);
   const created = [];
   for (const u of units) {
     try {
@@ -5313,6 +5438,8 @@ var init_store = __esm(() => {
   init_secrets();
   init_audit();
   init_current();
+  init_compiler();
+  init_harvest();
   init_root();
   init_sqlite();
 });
@@ -5640,7 +5767,15 @@ function loadEntities(memoryDir) {
 function findEntity(memoryDir, id) {
   const entities = loadEntities(memoryDir);
   const cleanId = slugify(id);
-  return entities.find((e) => e.id === cleanId || e.name.toLowerCase() === id.toLowerCase()) ?? null;
+  const alphanumericId = id.toLowerCase().replace(/[^a-z0-9]/g, "");
+  return entities.find((e) => {
+    if (e.id === cleanId || e.name.toLowerCase() === id.toLowerCase())
+      return true;
+    if (slugify(e.name) === cleanId)
+      return true;
+    const alphaE = e.id.toLowerCase().replace(/[^a-z0-9]/g, "");
+    return alphaE.length > 0 && alphaE === alphanumericId;
+  }) ?? null;
 }
 function findRelatedEntities(memoryDir, id) {
   const entities = loadEntities(memoryDir);
@@ -6101,6 +6236,12 @@ function buildLogPage(logEntries) {
     entries: logEntries
   };
 }
+function stripFrontmatter(content) {
+  const match = content.match(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/);
+  if (!match)
+    return content;
+  return content.slice(match[0].length);
+}
 function loadExistingConcepts(dir) {
   const map2 = new Map;
   if (!existsSync11(dir))
@@ -6112,9 +6253,7 @@ function loadExistingConcepts(dir) {
     try {
       const content = readFileSync9(join8(dir, file), "utf8");
       const frontmatter = parseFrontmatter(content);
-      map2.set(slug, { ...frontmatter, slug, content: content.slice(content.indexOf(`
----
-`) + 5) });
+      map2.set(slug, { ...frontmatter, slug, content: stripFrontmatter(content) });
     } catch {}
   }
   return map2;
@@ -6130,26 +6269,41 @@ function loadExistingEntities(dir) {
     try {
       const content = readFileSync9(join8(dir, file), "utf8");
       const frontmatter = parseFrontmatter(content);
-      map2.set(slug, { ...frontmatter, slug, content: content.slice(content.indexOf(`
----
-`) + 5) });
+      map2.set(slug, { ...frontmatter, slug, content: stripFrontmatter(content) });
     } catch {}
   }
   return map2;
 }
 function parseFrontmatter(content) {
-  const match = content.match(/^---\n([\s\S]*?)\n---/);
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match)
     return {};
-  const lines = match[1].split(`
-`);
+  const lines = match[1].split(/\r?\n/);
   const obj = {};
   for (const line of lines) {
     const idx = line.indexOf(":");
     if (idx > 0) {
       const key = line.slice(0, idx).trim();
-      const value = line.slice(idx + 1).trim();
-      obj[key] = value.replace(/^["']|["']$/g, "");
+      const rawVal = line.slice(idx + 1).trim();
+      if (rawVal.startsWith("[") && rawVal.endsWith("]")) {
+        try {
+          obj[key] = JSON.parse(rawVal);
+          continue;
+        } catch {}
+      }
+      if (rawVal === "true") {
+        obj[key] = true;
+        continue;
+      }
+      if (rawVal === "false") {
+        obj[key] = false;
+        continue;
+      }
+      if (!isNaN(Number(rawVal)) && rawVal !== "") {
+        obj[key] = Number(rawVal);
+        continue;
+      }
+      obj[key] = rawVal.replace(/^["']|["']$/g, "");
     }
   }
   return obj;
@@ -6306,18 +6460,6 @@ var init_compiler = __esm(() => {
 });
 
 // src/wiki/index.ts
-var exports_wiki = {};
-__export(exports_wiki, {
-  autoCompileWiki: () => autoCompileWiki,
-  compileWiki: () => compileWiki,
-  ensureWikiStructure: () => ensureWikiStructure,
-  getWikiPage: () => getWikiPage,
-  listWikiPages: () => listWikiPages,
-  renderConceptPage: () => renderConceptPage,
-  renderEntityPage: () => renderEntityPage,
-  renderIndexPage: () => renderIndexPage,
-  renderLogPage: () => renderLogPage
-});
 var init_wiki = __esm(() => {
   init_compiler();
 });
@@ -6454,7 +6596,8 @@ function parseFlags(args) {
 }
 function requireRoot(flags = {}) {
   const isGlobal = flags["global"] === "true";
-  const { root, memoryDir } = findOrCreateProjectRoot(process.cwd(), { global: isGlobal });
+  const startDir = flags["dir"] || process.cwd();
+  const { root, memoryDir } = findOrCreateProjectRoot(startDir, { global: isGlobal });
   return { root, memoryDir, store: openStore(memoryDir) };
 }
 function usageError(msg) {
@@ -6515,7 +6658,7 @@ function normalizeMemoryType(raw) {
 
 // src/migrator/detect.ts
 import { existsSync as existsSync13 } from "node:fs";
-import { join as join10, resolve } from "node:path";
+import { join as join10, resolve as resolve2 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 function expandPath(p, baseDir) {
   if (p.startsWith("~/") || p === "~") {
@@ -6524,7 +6667,7 @@ function expandPath(p, baseDir) {
   if (p.startsWith("/")) {
     return p;
   }
-  return resolve(baseDir, p);
+  return resolve2(baseDir, p);
 }
 function detectProviders(baseDir = process.cwd()) {
   return PROVIDER_DEFINITIONS.map((def) => {
@@ -7402,14 +7545,14 @@ ${title}`);
     input: process.stdin,
     output: process.stdout
   });
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     rl.question(`Enter selection (e.g. "1,3" or "all") [default: ${defaultAll ? "all" : "none"}]: `, (answer) => {
       rl.close();
       const result = parseSelectionInput(answer, options, defaultAll);
       if (answer.trim().toLowerCase().startsWith("q")) {
         console.log("Operation cancelled.");
       }
-      resolve2(result);
+      resolve3(result);
     });
   });
 }
@@ -7432,23 +7575,23 @@ ${title}`);
     input: process.stdin,
     output: process.stdout
   });
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     rl.question(`
 Select role archetype [1-${options.length}] (default: 1): `, (answer) => {
       rl.close();
       const trimmed = answer.trim();
       if (!trimmed) {
-        return resolve2(defaultId);
+        return resolve3(defaultId);
       }
       const num = parseInt(trimmed, 10);
       if (!isNaN(num) && num >= 1 && num <= options.length) {
-        return resolve2(options[num - 1].id);
+        return resolve3(options[num - 1].id);
       }
       const matched = options.find((o) => o.id.toLowerCase() === trimmed.toLowerCase() || o.label.toLowerCase().includes(trimmed.toLowerCase()));
       if (matched) {
-        return resolve2(matched.id);
+        return resolve3(matched.id);
       }
-      resolve2(defaultId);
+      resolve3(defaultId);
     });
   });
 }
@@ -11524,7 +11667,7 @@ var require_compile = __commonJS(function(exports) {
     const schOrFunc = root.refs[ref];
     if (schOrFunc)
       return schOrFunc;
-    let _sch = resolve2.call(this, root, ref);
+    let _sch = resolve3.call(this, root, ref);
     if (_sch === undefined) {
       const schema2 = (_a = root.localRefs) === null || _a === undefined ? undefined : _a[ref];
       const { schemaId } = this.opts;
@@ -11551,7 +11694,7 @@ var require_compile = __commonJS(function(exports) {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve2(root, ref) {
+  function resolve3(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string")
       ref = sch;
@@ -12137,7 +12280,7 @@ var require_fast_uri = __commonJS(function(exports, module) {
     }
     return uri;
   }
-  function resolve2(baseURI, relativeURI, options) {
+  function resolve3(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
     const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
@@ -12422,7 +12565,7 @@ var require_fast_uri = __commonJS(function(exports, module) {
   var fastUri = {
     SCHEMES,
     normalize,
-    resolve: resolve2,
+    resolve: resolve3,
     resolveComponent,
     equal,
     serialize,
@@ -14939,7 +15082,7 @@ var require_ajv = __commonJS(function(exports, module) {
 });
 
 // src/schema.ts
-import { readFileSync as readFileSync18 } from "node:fs";
+import { existsSync as existsSync22, readFileSync as readFileSync18 } from "node:fs";
 import { join as join19 } from "node:path";
 function getValidator() {
   if (cachedValidate)
@@ -14950,8 +15093,22 @@ function getValidator() {
       return false;
     return !Number.isNaN(Date.parse(value));
   });
-  const schemaPath = join19(import.meta.dir, "..", "schema.json");
-  const schema2 = JSON.parse(readFileSync18(schemaPath, "utf8"));
+  const candidates = [
+    join19(import.meta.dir, "..", "schema.json"),
+    join19(import.meta.dir, "schema.json"),
+    join19(process.cwd(), "schema.json")
+  ];
+  let schemaContent = null;
+  for (const p of candidates) {
+    if (existsSync22(p)) {
+      schemaContent = readFileSync18(p, "utf8");
+      break;
+    }
+  }
+  if (!schemaContent) {
+    throw new Error(`Cannot locate schema.json in ${candidates.join(", ")}`);
+  }
+  const schema2 = JSON.parse(schemaContent);
   cachedValidate = ajv.compile(schema2);
   return cachedValidate;
 }
@@ -15057,13 +15214,13 @@ __export(exports_doctor, {
   printDoctorReport: () => printDoctorReport,
   runDoctor: () => runDoctor
 });
-import { existsSync as existsSync22, statSync as statSync8, readFileSync as readFileSync19 } from "node:fs";
+import { existsSync as existsSync23, statSync as statSync8, readFileSync as readFileSync19 } from "node:fs";
 import { join as join20 } from "node:path";
 import { homedir as homedir5 } from "node:os";
 async function runDoctor(targetDir, options = {}) {
   const home = homedir5();
   const storagePath = options.global ? getGlobalMemoryDir() : findOrCreateProjectRoot(targetDir || process.cwd())?.memoryDir || join20(home, ".memory");
-  const isInitialized = existsSync22(storagePath);
+  const isInitialized = existsSync23(storagePath);
   let currentMdExists = false;
   let currentMdLines = 0;
   let totalEntries = 0;
@@ -15082,7 +15239,7 @@ async function runDoctor(targetDir, options = {}) {
   let brokenLinksCount = 0;
   if (isInitialized) {
     const currentPath = join20(storagePath, "CURRENT.md");
-    if (existsSync22(currentPath)) {
+    if (existsSync23(currentPath)) {
       currentMdExists = true;
       const content = readFileSync19(currentPath, "utf8");
       currentMdLines = content.split(`
@@ -15110,7 +15267,7 @@ async function runDoctor(targetDir, options = {}) {
   let auditCount = 0;
   let auditSize = 0;
   let lastEvent;
-  if (existsSync22(auditPath)) {
+  if (existsSync23(auditPath)) {
     auditExists = true;
     try {
       const stat = statSync8(auditPath);
@@ -15245,7 +15402,7 @@ var init_doctor = __esm(() => {
 });
 
 // src/retrieval/tree-index.ts
-import { existsSync as existsSync23, readFileSync as readFileSync20, writeFileSync as writeFileSync10, mkdirSync as mkdirSync12, rmSync } from "node:fs";
+import { existsSync as existsSync24, readFileSync as readFileSync20, writeFileSync as writeFileSync10, mkdirSync as mkdirSync12, rmSync } from "node:fs";
 import { join as join21 } from "node:path";
 function tokenize2(text) {
   if (!text || typeof text !== "string")
@@ -15460,7 +15617,7 @@ function buildTreeIndex(store, memoryDir, config = {}) {
 }
 function loadTreeIndex(memoryDir) {
   const path = globalIndexFilePath(indexDir(memoryDir));
-  if (!existsSync23(path))
+  if (!existsSync24(path))
     return null;
   try {
     const data = JSON.parse(readFileSync20(path, "utf8"));
@@ -15569,7 +15726,7 @@ function searchTree(index, options) {
     }
   }
   results.sort((a, b) => b.score - a.score);
-  const paginated = paginateResults(results, options.page ?? 1, options.pageSize ?? 10);
+  const paginated = paginateResults(results, options.page ?? 1, options.pageSize ?? options.maxNodes ?? 10);
   return {
     nodes: paginated,
     memories: [],
@@ -15608,7 +15765,7 @@ __export(exports_vector, {
   saveIndex: () => saveIndex,
   termFrequencies: () => termFrequencies
 });
-import { existsSync as existsSync24, readFileSync as readFileSync21, writeFileSync as writeFileSync11, mkdirSync as mkdirSync13 } from "node:fs";
+import { existsSync as existsSync25, readFileSync as readFileSync21, writeFileSync as writeFileSync11, mkdirSync as mkdirSync13 } from "node:fs";
 import { join as join22 } from "node:path";
 function indexFilePath(memoryDir) {
   return join22(memoryDir, "index.json");
@@ -15658,13 +15815,13 @@ function rebuildIndex(store) {
   return index;
 }
 function saveIndex(index, memoryDir) {
-  if (!existsSync24(memoryDir))
+  if (!existsSync25(memoryDir))
     mkdirSync13(memoryDir, { recursive: true });
   writeFileSync11(indexFilePath(memoryDir), JSON.stringify(index), "utf8");
 }
 function loadIndex(memoryDir) {
   const p = indexFilePath(memoryDir);
-  if (!existsSync24(p))
+  if (!existsSync25(p))
     return null;
   try {
     const parsed = JSON.parse(readFileSync21(p, "utf8"));
@@ -15739,7 +15896,7 @@ var init_vector = __esm(() => {
 });
 
 // src/pageindex/engine.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync14, readFileSync as readFileSync22, writeFileSync as writeFileSync12, rmSync as rmSync2, readdirSync as readdirSync9 } from "node:fs";
+import { existsSync as existsSync26, mkdirSync as mkdirSync14, readFileSync as readFileSync22, writeFileSync as writeFileSync12, rmSync as rmSync2, readdirSync as readdirSync9 } from "node:fs";
 import { join as join23 } from "node:path";
 function slugify2(text) {
   return text.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 50);
@@ -15884,7 +16041,7 @@ function searchPageIndex(doc, options) {
 }
 function loadPageIndex(memoryDir, project, indexId) {
   const filePath = join23(memoryDir, "pageindex", project, `${indexId}.json`);
-  if (!existsSync25(filePath))
+  if (!existsSync26(filePath))
     return null;
   try {
     return JSON.parse(readFileSync22(filePath, "utf8"));
@@ -15894,13 +16051,13 @@ function loadPageIndex(memoryDir, project, indexId) {
 }
 function listPageIndexes(memoryDir, project) {
   const base = join23(memoryDir, "pageindex");
-  if (!existsSync25(base))
+  if (!existsSync26(base))
     return [];
   const results = [];
   const projects = project ? [project] : readdirSync9(base);
   for (const p of projects) {
     const pDir = join23(base, p);
-    if (!existsSync25(pDir))
+    if (!existsSync26(pDir))
       continue;
     for (const f of readdirSync9(pDir)) {
       if (f.endsWith(".json")) {
@@ -15914,7 +16071,7 @@ function listPageIndexes(memoryDir, project) {
 }
 function deletePageIndex(memoryDir, project, indexId) {
   const base = join23(memoryDir, "pageindex");
-  if (!existsSync25(base))
+  if (!existsSync26(base))
     return { deletedCount: 0 };
   let count = 0;
   if (!project && !indexId) {
@@ -15923,13 +16080,13 @@ function deletePageIndex(memoryDir, project, indexId) {
   }
   if (project && !indexId) {
     const pDir = join23(base, project);
-    if (existsSync25(pDir)) {
+    if (existsSync26(pDir)) {
       rmSync2(pDir, { recursive: true, force: true });
       count++;
     }
   } else if (project && indexId) {
     const file = join23(base, project, `${indexId}.json`);
-    if (existsSync25(file)) {
+    if (existsSync26(file)) {
       rmSync2(file, { force: true });
       count++;
     }
@@ -15942,13 +16099,13 @@ var init_engine2 = __esm(() => {
 });
 
 // src/retrieval/engine.ts
-import { existsSync as existsSync26 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 import { join as join24 } from "node:path";
 
 class RetrievalEngine {
   static search(store, memoryDir, query, options = {}) {
     const mode = options.mode ?? "auto";
-    if (mode === "pageindex" || options.docPath && existsSync26(options.docPath)) {
+    if (mode === "pageindex" || options.docPath && existsSync27(options.docPath)) {
       try {
         const docs = listPageIndexes(memoryDir, options.project);
         if (docs.length > 0) {
@@ -15976,7 +16133,7 @@ class RetrievalEngine {
       } catch {}
     }
     const treeDir = join24(memoryDir, "tree");
-    const hasTree = existsSync26(treeDir);
+    const hasTree = existsSync27(treeDir);
     const allEntries = list(store);
     if (mode === "tree" || mode === "auto" && hasTree && allEntries.length >= 500) {
       try {
@@ -16014,7 +16171,7 @@ class RetrievalEngine {
       } catch {}
     }
     const vecPath = indexFilePath(memoryDir);
-    const hasVec = existsSync26(vecPath);
+    const hasVec = existsSync27(vecPath);
     if (mode === "hybrid" || mode === "auto" && hasVec && allEntries.length > 100) {
       try {
         const hybridResults = hybridSearch(store, memoryDir, query, {
@@ -16133,14 +16290,29 @@ __export(exports_ui, {
 });
 import { createServer } from "node:http";
 function startUiServer(opts) {
-  return new Promise((resolve2, reject2) => {
+  return new Promise((resolve3, reject2) => {
     let currentPort = opts.port ?? 2222;
     const server = createServer(async (req, res) => {
       const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
       const pathname = url.pathname;
-      res.setHeader("Access-Control-Allow-Origin", "*");
+      res.setHeader("X-Content-Type-Options", "nosniff");
+      res.setHeader("X-Frame-Options", "DENY");
+      res.setHeader("Referrer-Policy", "strict-origin-when-cross-origin");
+      res.setHeader("Content-Security-Policy", "default-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:;");
+      const origin = req.headers.origin;
+      const isLocalOrigin = !origin || /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin) || origin === "null";
+      if (origin && isLocalOrigin) {
+        res.setHeader("Access-Control-Allow-Origin", origin);
+      } else if (!origin) {
+        res.setHeader("Access-Control-Allow-Origin", `http://localhost:${currentPort}`);
+      }
       res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
       res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+      if (req.method === "POST" && !isLocalOrigin) {
+        res.writeHead(403, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "Forbidden: Cross-Origin Request Blocked" }));
+        return;
+      }
       if (req.method === "OPTIONS") {
         res.writeHead(204);
         res.end();
@@ -16400,15 +16572,15 @@ function startUiServer(opts) {
     server.on("error", (err) => {
       if (err.code === "EADDRINUSE" && !opts.port) {
         currentPort++;
-        server.listen(currentPort);
+        server.listen(currentPort, "127.0.0.1");
       } else {
         reject2(err);
       }
     });
-    server.listen(currentPort, () => {
+    server.listen(currentPort, "127.0.0.1", () => {
       const addr = server.address();
       const actualPort = typeof addr === "object" && addr ? addr.port : currentPort;
-      resolve2({
+      resolve3({
         port: actualPort,
         close: () => server.close()
       });
@@ -16416,12 +16588,21 @@ function startUiServer(opts) {
   });
 }
 function parseJsonBody(req) {
-  return new Promise((resolve2, reject2) => {
+  return new Promise((resolve3, reject2) => {
     let data = "";
-    req.on("data", (chunk) => data += chunk);
+    let byteLength = 0;
+    req.on("data", (chunk) => {
+      byteLength += typeof chunk === "string" ? Buffer.byteLength(chunk) : chunk.length;
+      if (byteLength > MAX_BODY_SIZE) {
+        req.destroy();
+        reject2(new Error("Payload too large: request body exceeds 1MB limit"));
+        return;
+      }
+      data += chunk;
+    });
     req.on("end", () => {
       try {
-        resolve2(data ? JSON.parse(data) : {});
+        resolve3(data ? JSON.parse(data) : {});
       } catch (e) {
         reject2(e);
       }
@@ -16435,7 +16616,7 @@ function exportStandaloneHtml(store) {
   return EMBEDDED_HTML.replace("</head>", `${script}
 </head>`);
 }
-var EMBEDDED_HTML = `<!DOCTYPE html>
+var MAX_BODY_SIZE, EMBEDDED_HTML = `<!DOCTYPE html>
 <html lang="en">
 <head>
   <meta charset="UTF-8">
@@ -17434,6 +17615,7 @@ var init_ui = __esm(() => {
   init_retrieval2();
   init_schema();
   init_snapshot();
+  MAX_BODY_SIZE = 1024 * 1024;
 });
 
 // node_modules/zod/v4/core/core.js
@@ -24287,7 +24469,7 @@ class Protocol {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1000;
-        await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
+        await new Promise((resolve3) => setTimeout(resolve3, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error2) {
@@ -24299,7 +24481,7 @@ class Protocol {
   }
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve2, reject2) => {
+    return new Promise((resolve3, reject2) => {
       const earlyReject = (error2) => {
         reject2(error2);
       };
@@ -24377,7 +24559,7 @@ class Protocol {
           if (!parseResult.success) {
             reject2(parseResult.error);
           } else {
-            resolve2(parseResult.data);
+            resolve3(parseResult.data);
           }
         } catch (error2) {
           reject2(error2);
@@ -24568,12 +24750,12 @@ class Protocol {
         interval = task.pollInterval;
       }
     } catch {}
-    return new Promise((resolve2, reject2) => {
+    return new Promise((resolve3, reject2) => {
       if (signal.aborted) {
         reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve2, interval);
+      const timeoutId = setTimeout(resolve3, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject2(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -25545,12 +25727,12 @@ class StdioServerTransport {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve2) => {
+    return new Promise((resolve3) => {
       const json2 = serializeMessage(message);
       if (this._stdout.write(json2)) {
-        resolve2();
+        resolve3();
       } else {
-        this._stdout.once("drain", resolve2);
+        this._stdout.once("drain", resolve3);
       }
     });
   }
@@ -25685,7 +25867,7 @@ var init_loops = __esm(() => {
 });
 
 // src/distill.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync15, writeFileSync as writeFileSync13 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync15, writeFileSync as writeFileSync13 } from "node:fs";
 import { join as join25 } from "node:path";
 function fixTokens(e) {
   const bag = tokenBag(e.title, 2);
@@ -25707,7 +25889,7 @@ function distillSkills(store, workspaceRoot, options = {}) {
     const slug = slugifyId(topic.join("-") || "skill");
     const dir = join25(skillsDir, slug);
     const memberIds = cluster.map((e) => e.id);
-    if (existsSync27(dir)) {
+    if (existsSync28(dir)) {
       report.skippedExisting.push({ slug, members: memberIds });
       continue;
     }
@@ -25762,18 +25944,18 @@ var init_distill = __esm(() => {
 // src/verify.ts
 import { execFile } from "node:child_process";
 function runCommand(command, cwd, timeoutSec) {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     execFile("/bin/sh", ["-c", command], { cwd, timeout: timeoutSec * 1000, killSignal: "SIGKILL", maxBuffer: 4 * 1024 * 1024 }, (err, stdout, stderr) => {
       if (!err) {
-        resolve2({ ok: true, ran: true, exitCode: 0, stdout: String(stdout), stderr: String(stderr), message: "command exited 0" });
+        resolve3({ ok: true, ran: true, exitCode: 0, stdout: String(stdout), stderr: String(stderr), message: "command exited 0" });
         return;
       }
       const e = err;
       if (e.killed) {
-        resolve2({ ok: false, ran: true, timedOut: true, stdout: String(stdout), stderr: String(stderr), message: `timed out after ${timeoutSec}s` });
+        resolve3({ ok: false, ran: true, timedOut: true, stdout: String(stdout), stderr: String(stderr), message: `timed out after ${timeoutSec}s` });
         return;
       }
-      resolve2({
+      resolve3({
         ok: false,
         ran: true,
         exitCode: typeof e.code === "number" ? e.code : -1,
@@ -26058,14 +26240,14 @@ var init_schema2 = __esm(() => {
 });
 
 // src/settings/loader.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync16, readFileSync as readFileSync23, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync29, mkdirSync as mkdirSync16, readFileSync as readFileSync23, writeFileSync as writeFileSync14 } from "node:fs";
 import { join as join26 } from "node:path";
 function getSettingsFilePath(memoryDir) {
   return join26(memoryDir, "settings.json");
 }
 function loadSettings(memoryDir) {
   const filePath = getSettingsFilePath(memoryDir);
-  if (!existsSync28(filePath)) {
+  if (!existsSync29(filePath)) {
     return {
       version: 1,
       global: JSON.parse(JSON.stringify(DEFAULT_SETTINGS)),
@@ -26220,7 +26402,7 @@ async function runMcpServer() {
     }
     return { activeStore: store, activeMemoryDir: memoryDir, activeRoot: root };
   }
-  const server = new Server({ name: "musememory", version: "1.4.0" }, {
+  const server = new Server({ name: "musememory", version: "1.6.0" }, {
     capabilities: { tools: {}, logging: {} },
     instructions: `MUSE MEMORY PROTOCOL:
 You are equipped with Muse Memory, an autonomous persistent cognitive memory system.
@@ -26806,22 +26988,20 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
     const a = args ?? {};
+    const { activeStore, activeMemoryDir, activeRoot } = resolveStoreForRequest(a);
     try {
       switch (name) {
         case "memory_read": {
-          const { activeStore } = resolveStoreForRequest(a);
           const entry = get2(activeStore, String(a.id));
           if (!entry)
             return toolError(`no entry with id ${a.id}`);
           return toolResult(entry);
         }
         case "get_context": {
-          const { activeStore, activeMemoryDir } = resolveStoreForRequest(a);
           const queryStr = String(a.query ?? "");
           if (queryStr && activeMemoryDir) {
             try {
-              const { updateSessionHandoff: updateSessionHandoff2 } = (init_current(), __toCommonJS(exports_current));
-              updateSessionHandoff2(activeMemoryDir, {
+              updateSessionHandoff(activeMemoryDir, {
                 status: "IN-PROGRESS",
                 lastQuery: queryStr,
                 agent: a.agent ? String(a.agent) : process.env.AGENT_NAME || "AI Assistant",
@@ -26848,10 +27028,8 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
           });
         }
         case "memory_checkpoint": {
-          const { activeMemoryDir } = resolveStoreForRequest(a);
           try {
-            const { updateSessionHandoff: updateSessionHandoff2 } = (init_current(), __toCommonJS(exports_current));
-            const handoff = updateSessionHandoff2(activeMemoryDir, {
+            const handoff = updateSessionHandoff(activeMemoryDir, {
               status: a.status ? String(a.status).toUpperCase() : "IN-PROGRESS",
               task: a.task ? String(a.task) : undefined,
               agent: a.agent ? String(a.agent) : process.env.AGENT_NAME || "AI Agent",
@@ -26865,7 +27043,6 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
         case "memory_current":
         case "memory_get_constraints":
         case "memory_set_constraints": {
-          const { activeMemoryDir, activeRoot, activeStore } = resolveStoreForRequest(a);
           const action = a.action || (name === "memory_set_constraints" ? "append" : "get");
           if (action === "append" || a.constraint) {
             const text = String(a.constraint || a.text || "");
@@ -26881,7 +27058,6 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
         }
         case "memory_recall":
         case "search": {
-          const { activeStore, activeMemoryDir } = resolveStoreForRequest(a);
           const mode = a.hybrid === true ? "hybrid" : a.tree === true ? "tree" : "auto";
           const res = RetrievalEngine.search(activeStore, activeMemoryDir, String(a.query), {
             mode,
@@ -26902,7 +27078,6 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
         }
         case "propose":
         case "memory_capture": {
-          const { activeStore, activeRoot, activeMemoryDir } = resolveStoreForRequest(a);
           const projectName = a.project ? String(a.project) : basename(activeRoot) || "default";
           try {
             const entry = propose(activeStore, {
@@ -26920,8 +27095,7 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
             }
             if (activeMemoryDir) {
               try {
-                const { updateSessionHandoff: updateSessionHandoff2 } = (init_current(), __toCommonJS(exports_current));
-                updateSessionHandoff2(activeMemoryDir, {
+                updateSessionHandoff(activeMemoryDir, {
                   discoveries: [String(a.title || a.content || "")]
                 });
               } catch {}
@@ -26932,7 +27106,7 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
           }
         }
         case "memory_harvest": {
-          const created = harvestMemories(store, {
+          const created = harvestMemories(activeStore, {
             text: String(a.text),
             project: String(a.project),
             confirmed: a.confirmed === true
@@ -26943,11 +27117,11 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
           const transcript = String(a.transcript);
           const project = a.project ? String(a.project) : undefined;
           const isConfirmed = a.confirmed === true;
-          const res = importTranscript(store, transcript, { project, confirmed: isConfirmed });
+          const res = importTranscript(activeStore, transcript, { project, confirmed: isConfirmed });
           return toolResult(res);
         }
         case "memory_confirm": {
-          const entry = confirm(store, String(a.id));
+          const entry = confirm(activeStore, String(a.id));
           if (!entry)
             return toolError(`could not confirm ${a.id} (not found or invalid status transition)`);
           return toolResult(entry);
@@ -26957,26 +27131,26 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
           const newId = String(a.with ?? a.new_id ?? "");
           if (!newId)
             return toolError("memory_supersede requires 'with' or 'new_id' parameter");
-          const entry = supersede(store, oldId, newId);
+          const entry = supersede(activeStore, oldId, newId);
           if (!entry)
             return toolError(`could not supersede ${oldId} with ${newId} (missing entry or target not confirmed)`);
           return toolResult(entry);
         }
         case "memory_link": {
           const related = Array.isArray(a.related) ? a.related.map(String) : [];
-          const entry = link2(store, String(a.id), related);
+          const entry = link2(activeStore, String(a.id), related);
           if (!entry)
             return toolError(`could not link ${a.id} (missing id or related id)`);
           return toolResult(entry);
         }
         case "memory_mark_stale": {
-          const entry = markStale(store, String(a.id), a.reason ? String(a.reason) : undefined);
+          const entry = markStale(activeStore, String(a.id), a.reason ? String(a.reason) : undefined);
           if (!entry)
             return toolError(`no entry with id ${a.id}`);
           return toolResult(entry);
         }
         case "memory_reject": {
-          const entry = reject(store, String(a.id));
+          const entry = reject(activeStore, String(a.id));
           if (!entry)
             return toolError(`no entry with id ${a.id}`);
           return toolResult(entry);
@@ -26984,13 +27158,13 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
         case "memory_delete": {
           const id = String(a.id);
           const reason = a.reason ? String(a.reason) : undefined;
-          const ok = deleteEntry(store, id, reason, "mcp_agent");
+          const ok = deleteEntry(activeStore, id, reason, "mcp_agent");
           if (!ok)
             return toolError(`no entry found with id ${id}`);
           return toolResult({ success: true, deleted_id: id });
         }
         case "memory_audit": {
-          const trail = getAuditTrail(memoryDir, {
+          const trail = getAuditTrail(activeMemoryDir, {
             operation: a.operation ? String(a.operation) : undefined,
             entryId: a.entry_id ? String(a.entry_id) : undefined,
             limit: typeof a.limit === "number" ? a.limit : 50
@@ -26998,37 +27172,37 @@ You are equipped with Muse Memory, an autonomous persistent cognitive memory sys
           return toolResult({ total: trail.length, entries: trail });
         }
         case "memory_export": {
-          const snapshot = exportSnapshot(store);
+          const snapshot = exportSnapshot(activeStore);
           return toolResult(snapshot);
         }
         case "memory_import": {
           const entries = a.entries ?? [];
-          const res = importSnapshot(store, { entries }, { overwrite: a.overwrite === true });
+          const res = importSnapshot(activeStore, { entries }, { overwrite: a.overwrite === true });
           return toolResult(res);
         }
         case "confirm_fix": {
-          const entry = get2(store, String(a.id));
+          const entry = get2(activeStore, String(a.id));
           if (!entry)
             return toolError(`no entry with id ${a.id}`);
           if (entry.status !== "disputed")
             return toolError(`entry ${a.id} is not disputed`);
-          const updated = confirm(store, entry.id);
+          const updated = confirm(activeStore, entry.id);
           if (!updated)
             return toolError(`no entry with id ${a.id}`);
           if (a.resolution) {
             updated.content = `${updated.content}
 
 Resolution: ${String(a.resolution)}`;
-            save(store, updated);
+            save(activeStore, updated);
           }
           return toolResult(updated);
         }
         case "record_session": {
-          const { entry, sessionId } = recordSessionStart(store, String(a.project), a.note ? String(a.note) : undefined);
+          const { entry, sessionId } = recordSessionStart(activeStore, String(a.project), a.note ? String(a.note) : undefined);
           return toolResult({ ...entry, sessionId });
         }
         case "memory_validate": {
-          const report = validateStore(store);
+          const report = validateStore(activeStore);
           return toolResult(report);
         }
         case "memory_core": {
@@ -27038,41 +27212,41 @@ Resolution: ${String(a.resolution)}`;
           }
           try {
             if (tier && a.set !== undefined) {
-              const tiers = setCore(memoryDir, tier, String(a.set));
+              const tiers = setCore(activeMemoryDir, tier, String(a.set));
               return toolResult({ tier, lines: tiers[tier] });
             }
             if (tier && a.remove === true) {
-              const tiers = removeCore(memoryDir, tier);
+              const tiers = removeCore(activeMemoryDir, tier);
               return toolResult({ tier, lines: tiers[tier] });
             }
             if (tier) {
-              return toolResult({ tier, lines: readCore(memoryDir)[tier] });
+              return toolResult({ tier, lines: readCore(activeMemoryDir)[tier] });
             }
-            return toolResult(readCore(memoryDir));
+            return toolResult(readCore(activeMemoryDir));
           } catch (err) {
             return toolError(err instanceof Error ? err.message : String(err));
           }
         }
         case "memory_consolidate": {
-          const report = consolidateScenes(store, {
+          const report = consolidateScenes(activeStore, {
             project: a.project ? String(a.project) : undefined,
             dryRun: a.dry_run === true
           });
           return toolResult(report);
         }
         case "memory_trace": {
-          const node = traceGraph(store, String(a.id), typeof a.depth === "number" ? a.depth : 5);
+          const node = traceGraph(activeStore, String(a.id), typeof a.depth === "number" ? a.depth : 5);
           if (!node)
             return toolError(`no entry with id ${a.id}`);
           return toolResult(node);
         }
         case "memory_loops": {
-          const report = collectLoops(store, root, memoryDir);
+          const report = collectLoops(activeStore, activeRoot, activeMemoryDir);
           return toolResult(report);
         }
         case "memory_distill": {
           try {
-            const report = distillSkills(store, root, {
+            const report = distillSkills(activeStore, activeRoot, {
               minCount: typeof a.min_count === "number" ? a.min_count : undefined,
               dryRun: a.dry_run === true
             });
@@ -27082,7 +27256,7 @@ Resolution: ${String(a.resolution)}`;
           }
         }
         case "memory_verify": {
-          const result = await verifyEntry(store, root, memoryDir, String(a.id), {
+          const result = await verifyEntry(activeStore, activeRoot, activeMemoryDir, String(a.id), {
             timeout: typeof a.timeout === "number" ? a.timeout : undefined
           });
           if (!result.ok)
@@ -27090,11 +27264,11 @@ Resolution: ${String(a.resolution)}`;
           return toolResult(result);
         }
         case "graph_status": {
-          const status = getGraphStatus(root);
+          const status = getGraphStatus(activeRoot);
           return toolResult(status);
         }
         case "memory_detect_providers": {
-          const detected = detectProviders(root);
+          const detected = detectProviders(activeRoot);
           return toolResult(detected);
         }
         case "memory_detect_agents": {
@@ -27114,7 +27288,7 @@ Resolution: ${String(a.resolution)}`;
         }
         case "memory_migrate": {
           try {
-            const report = await runMigration(store, memoryDir, {
+            const report = await runMigration(activeStore, activeMemoryDir, {
               provider: a.provider ? String(a.provider) : undefined,
               all: Boolean(a.all),
               dryRun: Boolean(a.dry_run),
@@ -27128,7 +27302,7 @@ Resolution: ${String(a.resolution)}`;
         }
         case "memory_get_user_profile": {
           const isGlobal = a.global === true;
-          const dir = isGlobal ? getGlobalMemoryDir() : memoryDir;
+          const dir = isGlobal ? getGlobalMemoryDir() : activeMemoryDir;
           const query = a.query ? String(a.query) : undefined;
           const profile = getUserProfile(dir, { query });
           return toolResult({ profile: profile ?? "No USER.md profile configured.", exists: Boolean(profile) });
@@ -27136,7 +27310,7 @@ Resolution: ${String(a.resolution)}`;
         case "memory_set_user_profile": {
           try {
             const isGlobal = a.global === true;
-            const dir = isGlobal ? getGlobalMemoryDir() : memoryDir;
+            const dir = isGlobal ? getGlobalMemoryDir() : activeMemoryDir;
             setUserProfile(dir, String(a.content));
             return toolResult({ success: true, message: `Updated USER.md in ${dir}` });
           } catch (err) {
@@ -27155,9 +27329,9 @@ Resolution: ${String(a.resolution)}`;
           }
         }
         case "memory_tree_search": {
-          let index = loadTreeIndex(memoryDir);
+          let index = loadTreeIndex(activeMemoryDir);
           if (!index) {
-            index = buildTreeIndex(store, memoryDir);
+            index = buildTreeIndex(activeStore, activeMemoryDir);
           }
           const res = searchTree(index, {
             query: String(a.query),
@@ -27170,37 +27344,37 @@ Resolution: ${String(a.resolution)}`;
           return toolResult(res);
         }
         case "memory_wiki_get": {
-          const page = getWikiPage(memoryDir, String(a.slug), a.type ? String(a.type) : undefined);
+          const page = getWikiPage(activeMemoryDir, String(a.slug), a.type ? String(a.type) : undefined);
           if (!page)
             return toolError(`Wiki page '${a.slug}' not found.`);
           return toolResult(page);
         }
         case "memory_wiki_search": {
-          const pages = listWikiPages(memoryDir, {
+          const pages = listWikiPages(activeMemoryDir, {
             project: a.project ? String(a.project) : undefined,
             type: a.type ? String(a.type) : undefined
           });
           return toolResult({ pages, count: pages.length });
         }
         case "memory_wiki_compile": {
-          const res = compileWiki(store, memoryDir, {
+          const res = compileWiki(activeStore, activeMemoryDir, {
             project: a.project ? String(a.project) : undefined,
             dryRun: a.dry_run === true
           });
           return toolResult(res);
         }
         case "memory_entities_get": {
-          const ent = findEntity(memoryDir, String(a.id));
+          const ent = findEntity(activeMemoryDir, String(a.id));
           if (!ent)
             return toolError(`Entity '${a.id}' not found.`);
           if (a.include_related === true) {
-            const rel = findRelatedEntities(memoryDir, String(a.id));
+            const rel = findRelatedEntities(activeMemoryDir, String(a.id));
             return toolResult({ entity: ent, related: rel });
           }
           return toolResult(ent);
         }
         case "memory_entities_search": {
-          let entities = loadEntities(memoryDir);
+          let entities = loadEntities(activeMemoryDir);
           if (a.type)
             entities = entities.filter((e) => e.type === a.type);
           if (a.project)
@@ -27214,7 +27388,7 @@ Resolution: ${String(a.resolution)}`;
               title: a.title ? String(a.title) : undefined,
               maxDepth: typeof a.maxDepth === "number" ? a.maxDepth : undefined,
               dryRun: a.dryRun === true,
-              memoryDir
+              memoryDir: activeMemoryDir
             });
             return toolResult(doc2);
           } catch (err) {
@@ -27223,7 +27397,7 @@ Resolution: ${String(a.resolution)}`;
         }
         case "memory_pageindex_search": {
           const project = a.project ? String(a.project) : "default";
-          const doc2 = loadPageIndex(memoryDir, project, String(a.indexId));
+          const doc2 = loadPageIndex(activeMemoryDir, project, String(a.indexId));
           if (!doc2)
             return toolError(`PageIndex '${a.indexId}' not found for project '${project}'`);
           const res = searchPageIndex(doc2, {
@@ -27236,13 +27410,13 @@ Resolution: ${String(a.resolution)}`;
         }
         case "memory_pageindex_import": {
           const project = String(a.project);
-          const doc2 = loadPageIndex(memoryDir, project, String(a.indexId));
+          const doc2 = loadPageIndex(activeMemoryDir, project, String(a.indexId));
           if (!doc2)
             return toolError(`PageIndex '${a.indexId}' not found for project '${project}'`);
           const search = searchPageIndex(doc2, { query: String(a.query), maxNodes: 5 });
           const imported = [];
           for (const item of search.results) {
-            const entry = propose(store, {
+            const entry = propose(activeStore, {
               project,
               title: item.title,
               content: `${item.summary}
@@ -27256,20 +27430,20 @@ Path: ${item.path}`,
           return toolResult({ importedCount: imported.length, entries: imported });
         }
         case "memory_disconnect_pageindex": {
-          const res = deletePageIndex(memoryDir, a.project ? String(a.project) : undefined, a.indexId ? String(a.indexId) : undefined);
+          const res = deletePageIndex(activeMemoryDir, a.project ? String(a.project) : undefined, a.indexId ? String(a.indexId) : undefined);
           return toolResult({ success: true, deletedIndexes: res.deletedCount });
         }
         case "memory_settings_get": {
-          const settings2 = a.project ? getProjectSettings(memoryDir, String(a.project)) : getSettings(memoryDir);
+          const settings2 = a.project ? getProjectSettings(activeMemoryDir, String(a.project)) : getSettings(activeMemoryDir);
           return toolResult(settings2);
         }
         case "memory_settings_set": {
           try {
             if (a.project) {
-              const updated = setProjectSettings(memoryDir, String(a.project), a.settings);
+              const updated = setProjectSettings(activeMemoryDir, String(a.project), a.settings);
               return toolResult(updated);
             } else {
-              const updated = setSettings(memoryDir, a.settings);
+              const updated = setSettings(activeMemoryDir, a.settings);
               return toolResult(updated);
             }
           } catch (err) {
@@ -27286,9 +27460,9 @@ Path: ${item.path}`,
   const transport = new StdioServerTransport;
   await server.connect(transport);
   process.stdin.resume();
-  await new Promise((resolve2) => {
-    process.stdin.on("end", () => resolve2());
-    process.stdin.on("close", () => resolve2());
+  await new Promise((resolve3) => {
+    process.stdin.on("end", () => resolve3());
+    process.stdin.on("close", () => resolve3());
   });
 }
 function toolResult(content) {
@@ -27309,7 +27483,7 @@ var init_mcp = __esm(() => {
   init_root();
   init_store();
   init_retrieval();
-  init_current();
+  init_governor();
   init_consolidate();
   init_trace();
   init_loops();
@@ -27340,7 +27514,7 @@ __export(exports_daemon, {
   startHub: () => startHub
 });
 import { createServer as createServer2 } from "node:http";
-import { existsSync as existsSync29 } from "node:fs";
+import { existsSync as existsSync30 } from "node:fs";
 import { join as join27 } from "node:path";
 import { watch } from "node:fs";
 function startHub(port, memoryDir) {
@@ -27416,20 +27590,20 @@ data: ${JSON.stringify(event)}
       }, DEBOUNCE_MS);
     };
     try {
-      if (existsSync29(memoriesDir)) {
+      if (existsSync30(memoriesDir)) {
         watchers.push(watch(memoriesDir, () => armDebounced("memory.changed")));
       }
       const currentMd = join27(memoryDir, "CURRENT.md");
-      if (existsSync29(currentMd)) {
+      if (existsSync30(currentMd)) {
         watchers.push(watch(currentMd, () => armDebounced("constraints.changed")));
       }
     } catch {}
   }
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     server.listen(port, () => {
       const address = server.address();
       const actualPort = typeof address === "object" && address ? address.port : port;
-      resolve2({
+      resolve3({
         server,
         port: actualPort,
         url: `http://localhost:${actualPort}/events`,
@@ -27454,11 +27628,11 @@ var init_daemon = () => {};
 
 // src/cli/ecosystem.ts
 import { join as join28 } from "node:path";
-import { existsSync as existsSync30, mkdirSync as mkdirSync17, writeFileSync as writeFileSync15, readFileSync as readFileSync24 } from "node:fs";
+import { existsSync as existsSync31, mkdirSync as mkdirSync17, writeFileSync as writeFileSync15, readFileSync as readFileSync24 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 function ensureProjectAgentInstructions(targetDir) {
   const agentsMdPath = join28(targetDir, "AGENTS.md");
-  if (existsSync30(agentsMdPath)) {
+  if (existsSync31(agentsMdPath)) {
     try {
       const existing = readFileSync24(agentsMdPath, "utf8");
       if (existing.includes("<!-- agentmemory:start -->")) {
@@ -27487,12 +27661,12 @@ async function handleInstallCommand({ positional, flags }) {
   mkdirSync17(join28(memoryDir, "memories"), { recursive: true });
   mkdirSync17(join28(globalDir, "memories"), { recursive: true });
   const currentPath = join28(memoryDir, "CURRENT.md");
-  if (!existsSync30(currentPath)) {
+  if (!existsSync31(currentPath)) {
     writeFileSync15(currentPath, `# Active Project Constraints
 `, "utf8");
   }
   const globalUserPath = userFilePath(globalDir);
-  if (!existsSync30(globalUserPath)) {
+  if (!existsSync31(globalUserPath)) {
     const { promptSingleSelect: promptSingleSelect2 } = await Promise.resolve().then(() => (init_prompt(), exports_prompt));
     const archetypeOptions = [
       { id: "developer", label: "Software Engineer / Developer", hint: "Code-first, direct, strict typing" },
@@ -27509,7 +27683,7 @@ async function handleInstallCommand({ positional, flags }) {
     ensureProjectAgentInstructions(targetDir);
   }
   const globalAgentsMd = join28(homedir6(), ".agents", "AGENTS.md");
-  if (existsSync30(globalAgentsMd)) {
+  if (existsSync31(globalAgentsMd)) {
     try {
       const existing = readFileSync24(globalAgentsMd, "utf8");
       if (existing.includes("<!-- agentmemory:start -->")) {
@@ -27543,10 +27717,10 @@ async function handleInstallCommand({ positional, flags }) {
 }
 async function promptOrNotifyGitHook(targetDir, autoInstall = false) {
   const gitDir = join28(targetDir, ".git");
-  if (!existsSync30(gitDir))
+  if (!existsSync31(gitDir))
     return false;
   const hookPath = join28(gitDir, "hooks", "pre-commit");
-  const isInstalled = existsSync30(hookPath) && readFileSync24(hookPath, "utf8").includes("memory harvest-auto");
+  const isInstalled = existsSync31(hookPath) && readFileSync24(hookPath, "utf8").includes("memory harvest-auto");
   if (isInstalled)
     return true;
   if (autoInstall) {
@@ -27590,7 +27764,7 @@ async function handleUninstallCommand({ positional, flags }) {
   }
   if (purge) {
     const ctx = requireRoot(flags);
-    if (ctx && existsSync30(ctx.memoryDir) && !dryRun) {
+    if (ctx && existsSync31(ctx.memoryDir) && !dryRun) {
       const { rmSync: rmSync3 } = await import("node:fs");
       rmSync3(ctx.memoryDir, { recursive: true, force: true });
       console.log(`  [PURGED] Memory directory removed: ${ctx.memoryDir}`);
@@ -27608,7 +27782,7 @@ async function handleInitCommand({ positional, flags }) {
   const memoryDir = isGlobal ? getGlobalMemoryDir() : join28(targetDir, memoryDirName);
   mkdirSync17(join28(memoryDir, "memories"), { recursive: true });
   const currentPath = join28(memoryDir, "CURRENT.md");
-  if (!existsSync30(currentPath)) {
+  if (!existsSync31(currentPath)) {
     writeFileSync15(currentPath, `# Active Project Constraints
 `, "utf8");
   }
@@ -27850,7 +28024,7 @@ var init_ecosystem = __esm(() => {
 });
 
 // src/agentcontract.ts
-import { existsSync as existsSync31 } from "node:fs";
+import { existsSync as existsSync32 } from "node:fs";
 import { join as join29 } from "node:path";
 function parseAgentMemoryContract(markdown) {
   if (!markdown || !markdown.startsWith("---"))
@@ -27883,7 +28057,7 @@ function parseAgentMemoryContract(markdown) {
 function resolveAgentFile(nameOrPath, workspaceRoot) {
   if (!nameOrPath)
     return null;
-  if (existsSync31(nameOrPath))
+  if (existsSync32(nameOrPath))
     return nameOrPath;
   const candidates = [
     join29(workspaceRoot, ".agents", `${nameOrPath}.md`),
@@ -27893,7 +28067,7 @@ function resolveAgentFile(nameOrPath, workspaceRoot) {
   if (home)
     candidates.push(join29(home, ".config", "opencode", "agents", `${nameOrPath}.md`));
   for (const c of candidates) {
-    if (existsSync31(c))
+    if (existsSync32(c))
       return c;
   }
   return null;
@@ -27903,7 +28077,7 @@ var init_agentcontract = __esm(() => {
 });
 
 // src/cli/retrieval.ts
-import { existsSync as existsSync32, readFileSync as readFileSync25 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync25 } from "node:fs";
 import { join as join30 } from "node:path";
 async function handleContextCommand({ positional, flags }) {
   let agentTypes;
@@ -28008,6 +28182,7 @@ async function handleSearchCommand({ positional, flags }) {
   const res = queryContext(ctx.store, positional[0], {
     limit,
     tokenBudget,
+    project: flags["project"],
     includeSuperseded: flags["include-superseded"] === "true",
     type: flags["type"],
     status: flags["status"],
@@ -28051,7 +28226,7 @@ async function handleHarvestCommand({ positional, flags }) {
   const project = flags["project"];
   if (!project)
     return usageError("harvest requires --project");
-  const rawText = existsSync32(target) ? readFileSync25(target, "utf8") : target;
+  const rawText = existsSync33(target) ? readFileSync25(target, "utf8") : target;
   const created = harvestMemories(ctx.store, {
     text: rawText,
     project,
@@ -28088,7 +28263,7 @@ async function handleSearchTranscriptCommand({ positional, flags }) {
   if (!query)
     return usageError("search-transcript requires <query> [file.jsonl]");
   const targetFile = filePath ? filePath.startsWith("/") ? filePath : join30(process.cwd(), filePath) : join30(process.cwd(), "transcript.jsonl");
-  if (!existsSync32(targetFile)) {
+  if (!existsSync33(targetFile)) {
     return fail(`error: transcript file not found: ${targetFile}`);
   }
   const windowSize = flags["window"] ? parseInt(flags["window"], 10) : 2;
@@ -28434,7 +28609,7 @@ function handleEntitiesCommand(parsed) {
   if (!ctx)
     return 1;
   const memoryDir = ctx.memoryDir;
-  const sub = parsed.positional[1] ?? "list";
+  const sub = parsed.positional[0] ?? "list";
   if (sub === "list" || sub === "ls") {
     const type2 = parsed.flags.type;
     const project = parsed.flags.project;
@@ -28455,7 +28630,7 @@ function handleEntitiesCommand(parsed) {
     return 0;
   }
   if (sub === "show" || sub === "get") {
-    const id = parsed.positional[2];
+    const id = parsed.positional[1];
     if (!id) {
       console.error("Error: please specify an entity ID or name (e.g. `memory entities show nextjs`)");
       return 2;
@@ -28469,7 +28644,7 @@ function handleEntitiesCommand(parsed) {
     return 0;
   }
   if (sub === "related") {
-    const id = parsed.positional[2];
+    const id = parsed.positional[1];
     if (!id) {
       console.error("Error: please specify an entity ID or name (e.g. `memory entities related nextjs`)");
       return 2;
@@ -28501,10 +28676,10 @@ function handleSettingsCommand(parsed) {
   if (!ctx)
     return 1;
   const memoryDir = ctx.memoryDir;
-  const sub = parsed.positional[1] ?? "get";
+  const sub = parsed.positional[0] ?? "get";
   const project = parsed.flags.project;
   if (sub === "get") {
-    const key = parsed.positional[2];
+    const key = parsed.positional[1];
     const settings2 = project ? getProjectSettings(memoryDir, project) : getSettings(memoryDir);
     if (key) {
       const parts = key.split(".");
@@ -28523,8 +28698,8 @@ function handleSettingsCommand(parsed) {
     return 0;
   }
   if (sub === "set") {
-    const key = parsed.positional[2];
-    const rawVal = parsed.positional[3];
+    const key = parsed.positional[1];
+    const rawVal = parsed.positional[2];
     if (!key || rawVal === undefined) {
       console.error("Error: please specify key and value (e.g. `memory settings set retrieval.defaultMode tree`)");
       return 2;
@@ -28585,7 +28760,7 @@ function handleSettingsCommand(parsed) {
     return 0;
   }
   if (sub === "import") {
-    const file = parsed.positional[2];
+    const file = parsed.positional[1];
     if (!file) {
       console.error("Error: please specify a JSON file to import (e.g. `memory settings import team-settings.json`)");
       return 2;
@@ -28614,14 +28789,14 @@ var init_nudge = __esm(() => {
 });
 
 // src/routines.ts
-import { readFileSync as readFileSync27, existsSync as existsSync33 } from "node:fs";
+import { readFileSync as readFileSync27, existsSync as existsSync34 } from "node:fs";
 import { join as join31 } from "node:path";
 function routinesPath(memoryDir) {
   return join31(memoryDir, "routines.yaml");
 }
 function loadRoutines(memoryDir) {
   const p = routinesPath(memoryDir);
-  if (!existsSync33(p))
+  if (!existsSync34(p))
     return { routines: {} };
   const doc2 = yaml.load(readFileSync27(p, "utf8"), { schema: yaml.JSON_SCHEMA }) ?? {};
   const routines = doc2.routines ?? {};
@@ -28661,7 +28836,7 @@ var init_routines = __esm(() => {
 });
 
 // src/cli/lifecycle.ts
-import { writeFileSync as writeFileSync17, readFileSync as readFileSync28, existsSync as existsSync34 } from "node:fs";
+import { writeFileSync as writeFileSync17, readFileSync as readFileSync28, existsSync as existsSync35 } from "node:fs";
 async function handleProposeCommand({ positional, flags }) {
   const ctx = requireRoot(flags);
   if (!ctx)
@@ -28824,7 +28999,7 @@ async function handleImportCommand({ positional, flags }) {
   const file = positional[0];
   if (!file)
     return usageError("import requires <file.json>");
-  if (!existsSync34(file))
+  if (!existsSync35(file))
     return fail(`error: file ${file} does not exist`);
   const raw = JSON.parse(readFileSync28(file, "utf8"));
   const res = importSnapshot(ctx.store, raw, { overwrite: flags["overwrite"] === "true" });
@@ -28975,7 +29150,7 @@ async function handleStaleCommand({ flags }) {
   const daysOverride = flags["days"] ? parseInt(flags["days"], 10) : null;
   const now = Date.now();
   const stale = list(ctx.store).filter((e) => {
-    if (e.status !== "active")
+    if (e.status !== "active" && e.status !== "confirmed")
       return false;
     const policy = stalePolicyDays(e.type);
     if (policy === null)