musememory 3.2.0 → 3.4.0

package/.agents/artifacts/outcome-study-2026-11/README.md

@@ -0,0 +1,64 @@
+# Outcome Study — With/Without Memory (2026-11-09)
+
+A ten-task, condition-blind study of whether recalled project conventions change
+an agent's implementation output. This replaces the two-task pilot in
+`docs/evidence/2026-11-outcome-pilot.md` as the evidence behind EVD-005/EVD-008.
+
+## Design
+
+- **Tasks**: ten small TypeScript functions (`formatMoney`, `parseDuration`,
+  `formatBytes`, `toIsoDate`, `truncateText`, `slugify`, `compareSemver`,
+  `cloneValue`, `formatPercent`, `csvField`). Each has a hidden Bun test that
+  checks ordinary correctness *and* one non-obvious project convention.
+- **Arms**: identical instructions in both arms. Every implementer was told to
+  run `memory recall "<query>" --project outcome-study` before writing code.
+  The *only* difference was whether the convention was seeded in the store:
+  - `with`: all ten conventions (confirmed constraints) plus three decoys.
+  - `without`: one generic decoy only.
+- **Blinding**: implementers were not told a study existed, were not told which
+  arm they were in, and never saw the hidden tests. Grading was mechanical.
+- **Grading**: each solution was copied beside its hidden test and run with
+  `bun test` under `TZ=America/New_York` (non-UTC, so the date convention is
+  actually discriminating).
+- **Model**: one model per arm, matching the pilot's single-model design.
+
+## Result
+
+| Task | With | Without | Failure without memory |
+|---|---|---|---|
+| `formatMoney` | pass | pass | — |
+| `parseDuration` | pass | **fail** | returned milliseconds (500 for `"500ms"`) |
+| `formatBytes` | pass | pass | — |
+| `toIsoDate` | pass | **fail** | local calendar date (`2025-12-31` for a UTC `2026-01-01`) |
+| `truncateText` | pass | pass | — |
+| `slugify` | pass | **fail** | no 60-character cap (returned 80) |
+| `compareSemver` | pass | pass | — |
+| `cloneValue` | pass | pass | — |
+| `formatPercent` | pass | pass | — |
+| `csvField` | pass | **fail** | did not quote leading/trailing whitespace |
+
+**with memory 10/10 (100%) · without memory 6/10 (60%)** — a 40-point gap,
+four discriminating tasks, zero regressions (no task passed without memory and
+failed with it).
+
+Fisher's exact test, one-sided: **p = 0.043** (two-sided ≈ 0.087). The direction
+is consistent, but n = 10 is small.
+
+## Limits
+
+- Ten tasks, one run per arm, one model. Not a productivity study.
+- The task set was constructed so each task carries an unstated convention;
+  that deliberately favours memory and makes 40 points an upper bound for
+  ordinary work.
+- The harness supplied the retrieval query; an agent choosing its own query
+  (or not querying at all) is a different, untested condition.
+- Five tasks did not discriminate: those conventions were either guessed
+  correctly or did not affect the hidden test.
+
+## Reproducing
+
+- `tasks/<id>.md` — the exact implementer prompt for each task.
+- `graders/<id>.test.ts` — the hidden test for each task.
+- Rebuild fixtures and rerun with a fresh agent population; the seeds are the
+  convention sentences in this directory's history. Do not reuse these graders
+  for a second study against the same model without authoring new tasks.

package/.agents/artifacts/outcome-study-2026-11/graders/bytes.test.ts

@@ -0,0 +1,12 @@
+import { expect, test } from "bun:test";
+import { formatBytes } from "./solution";
+test("formatBytes", () => {
+  expect(formatBytes(0)).toBe("0 B");
+  expect(formatBytes(512)).toBe("512 B");
+  expect(formatBytes(1024)).toBe("1.0 KiB");
+  expect(formatBytes(1536)).toBe("1.5 KiB");
+  expect(formatBytes(1048576)).toBe("1.0 MiB");
+  expect(formatBytes(1073741824)).toBe("1.0 GiB");
+  expect(formatBytes(1500000)).toBe("1.4 MiB");
+  expect(formatBytes(1023)).toBe("1023 B");
+});

package/.agents/artifacts/outcome-study-2026-11/graders/clone.test.ts

@@ -0,0 +1,26 @@
+import { expect, test } from "bun:test";
+import { cloneValue } from "./solution";
+test("cloneValue", () => {
+  const d = new Date(1700000000000);
+  const cd = cloneValue(d);
+  expect(cd).toBeInstanceOf(Date);
+  expect(cd.getTime()).toBe(d.getTime());
+  expect(cd).not.toBe(d);
+
+  const m = new Map<string, number>([["a", 1]]);
+  const cm = cloneValue(m);
+  expect(cm).toBeInstanceOf(Map);
+  expect(cm.get("a")).toBe(1);
+  expect(cm).not.toBe(m);
+
+  const s = new Set([1, 2]);
+  const cs = cloneValue(s);
+  expect(cs).toBeInstanceOf(Set);
+  expect(cs.has(2)).toBe(true);
+
+  const obj = { a: { b: [1, 2] }, n: null as null | number };
+  const co = cloneValue(obj);
+  expect(co).toEqual(obj);
+  co.a.b.push(3);
+  expect(obj.a.b.length).toBe(2);
+});

package/.agents/artifacts/outcome-study-2026-11/graders/csv.test.ts

@@ -0,0 +1,11 @@
+import { expect, test } from "bun:test";
+import { csvField } from "./solution";
+test("csvField", () => {
+  expect(csvField("abc")).toBe("abc");
+  expect(csvField("")).toBe("");
+  expect(csvField("a,b")).toBe('"a,b"');
+  expect(csvField('he said "hi"')).toBe('"he said ""hi"""');
+  expect(csvField("line\nbreak")).toBe('"line\nbreak"');
+  expect(csvField(" padded ")).toBe('" padded "');
+  expect(csvField('a"b')).toBe('"a""b"');
+});

package/.agents/artifacts/outcome-study-2026-11/graders/duration.test.ts

@@ -0,0 +1,12 @@
+import { expect, test } from "bun:test";
+import { parseDuration } from "./solution";
+test("parseDuration", () => {
+  expect(parseDuration("500ms")).toBe(0.5);
+  expect(parseDuration("30s")).toBe(30);
+  expect(parseDuration("5m")).toBe(300);
+  expect(parseDuration("2h")).toBe(7200);
+  expect(parseDuration("45")).toBe(45);
+  expect(parseDuration("1.5h")).toBe(5400);
+  expect(parseDuration("10S")).toBe(10);
+  expect(() => parseDuration("banana")).toThrow();
+});

package/.agents/artifacts/outcome-study-2026-11/graders/isodate.test.ts

@@ -0,0 +1,7 @@
+import { expect, test } from "bun:test";
+import { toIsoDate } from "./solution";
+test("toIsoDate", () => {
+  expect(toIsoDate(new Date(Date.UTC(2026, 0, 1, 0, 0, 0)))).toBe("2026-01-01");
+  expect(toIsoDate(new Date(Date.UTC(2026, 11, 31, 23, 59, 59)))).toBe("2026-12-31");
+  expect(toIsoDate(new Date(Date.UTC(2026, 2, 5, 12, 0, 0)))).toBe("2026-03-05");
+});

package/.agents/artifacts/outcome-study-2026-11/graders/money.test.ts

@@ -0,0 +1,11 @@
+import { expect, test } from "bun:test";
+import { formatMoney } from "./solution";
+test("formatMoney", () => {
+  expect(formatMoney(123456)).toBe("$1,234.56");
+  expect(formatMoney(0)).toBe("$0.00");
+  expect(formatMoney(5)).toBe("$0.05");
+  expect(formatMoney(1234)).toBe("$12.34");
+  expect(formatMoney(-123456)).toBe("-$1,234.56");
+  expect(formatMoney(-5)).toBe("-$0.05");
+  expect(formatMoney(123456789)).toBe("$1,234,567.89");
+});

package/.agents/artifacts/outcome-study-2026-11/graders/percent.test.ts

@@ -0,0 +1,11 @@
+import { expect, test } from "bun:test";
+import { formatPercent } from "./solution";
+test("formatPercent", () => {
+  expect(formatPercent(0.5)).toBe("50%");
+  expect(formatPercent(0.125)).toBe("12.5%");
+  expect(formatPercent(1)).toBe("100%");
+  expect(formatPercent(0)).toBe("0%");
+  expect(formatPercent(0.333)).toBe("33.3%");
+  expect(formatPercent(-0.25)).toBe("-25%");
+  expect(formatPercent(1).includes(".0")).toBe(false);
+});

package/.agents/artifacts/outcome-study-2026-11/graders/semver.test.ts

@@ -0,0 +1,12 @@
+import { expect, test } from "bun:test";
+import { compareSemver } from "./solution";
+test("compareSemver", () => {
+  expect(compareSemver("1.0.0", "1.0.1")).toBe(-1);
+  expect(compareSemver("1.0.0-alpha", "1.0.0")).toBe(-1);
+  expect(compareSemver("1.0.0", "1.0.0-alpha")).toBe(1);
+  expect(compareSemver("1.0.0-alpha.1", "1.0.0-alpha.2")).toBe(-1);
+  expect(compareSemver("1.0.0-alpha.10", "1.0.0-alpha.2")).toBe(1);
+  expect(compareSemver("1.0.0+build1", "1.0.0+build2")).toBe(0);
+  expect(compareSemver("2.0.0", "10.0.0")).toBe(-1);
+  expect(compareSemver("1.2.3", "1.2.3")).toBe(0);
+});

package/.agents/artifacts/outcome-study-2026-11/graders/slug.test.ts

@@ -0,0 +1,12 @@
+import { expect, test } from "bun:test";
+import { slugify } from "./solution";
+test("slugify", () => {
+  expect(slugify("Héllo, World!")).toBe("hello-world");
+  expect(slugify("  A  B  ")).toBe("a-b");
+  expect(slugify("foo_bar")).toBe("foo-bar");
+  expect(slugify("Café Déjà Vu")).toBe("cafe-deja-vu");
+  expect(slugify("---")).toBe("");
+  const long = slugify("a".repeat(80));
+  expect(long.length).toBe(60);
+  expect(long.endsWith("-")).toBe(false);
+});

package/.agents/artifacts/outcome-study-2026-11/graders/truncate.test.ts

@@ -0,0 +1,10 @@
+import { expect, test } from "bun:test";
+import { truncateText } from "./solution";
+test("truncateText", () => {
+  expect(truncateText("short", 10)).toBe("short");
+  expect(truncateText("hello world", 8)).toBe("hello w…");
+  expect(truncateText("abcdef", 1)).toBe("…");
+  expect(truncateText("abcdef", 6)).toBe("abcdef");
+  expect(truncateText("😀😀😀", 2)).toBe("😀…");
+  expect(truncateText("hello world", 8).length).toBe(8);
+});

package/.agents/artifacts/outcome-study-2026-11/tasks/bytes.md

@@ -0,0 +1,3 @@
+# Task: formatBytes
+
+Implement `formatBytes(bytes: number): string` in `src/solution.ts`. It renders a byte count as a short human string using 1024-based units, e.g. 1024 -> "1.0 KiB".

package/.agents/artifacts/outcome-study-2026-11/tasks/clone.md

@@ -0,0 +1,3 @@
+# Task: cloneValue
+
+Implement `cloneValue<T>(v: T): T` in `src/solution.ts`. It returns a deep copy of the input value.

package/.agents/artifacts/outcome-study-2026-11/tasks/csv.md

@@ -0,0 +1,3 @@
+# Task: csvField
+
+Implement `csvField(value: string): string` in `src/solution.ts`. It returns one field escaped for a CSV record.

package/.agents/artifacts/outcome-study-2026-11/tasks/duration.md

@@ -0,0 +1,3 @@
+# Task: parseDuration
+
+Implement `parseDuration(input: string): number` in `src/solution.ts`. It parses a short human duration such as "500ms", "30s", "5m", "2h" and returns a number. Throw on invalid input.

package/.agents/artifacts/outcome-study-2026-11/tasks/isodate.md

@@ -0,0 +1,3 @@
+# Task: toIsoDate
+
+Implement `toIsoDate(d: Date): string` in `src/solution.ts`. It returns the calendar date of the given Date as `YYYY-MM-DD`.

package/.agents/artifacts/outcome-study-2026-11/tasks/money.md

@@ -0,0 +1,3 @@
+# Task: formatMoney
+
+Implement `formatMoney(cents: number): string` in `src/solution.ts`. Input is an integer number of cents. Output is a US-dollar string with comma thousands separators, e.g. 123456 -> "$1,234.56".

package/.agents/artifacts/outcome-study-2026-11/tasks/percent.md

@@ -0,0 +1,3 @@
+# Task: formatPercent
+
+Implement `formatPercent(ratio: number): string` in `src/solution.ts`. It formats a 0..1 ratio as a percentage string, e.g. 0.5 -> "50%".

package/.agents/artifacts/outcome-study-2026-11/tasks/semver.md

@@ -0,0 +1,3 @@
+# Task: compareSemver
+
+Implement `compareSemver(a: string, b: string): number` in `src/solution.ts`. Return -1 if a < b, 1 if a > b, 0 if equal.

package/.agents/artifacts/outcome-study-2026-11/tasks/slug.md

@@ -0,0 +1,3 @@
+# Task: slugify
+
+Implement `slugify(s: string): string` in `src/solution.ts`. Turn a title into a URL slug.

package/.agents/artifacts/outcome-study-2026-11/tasks/truncate.md

@@ -0,0 +1,3 @@
+# Task: truncateText
+
+Implement `truncateText(s: string, max: number): string` in `src/solution.ts`. Shorten a string to at most `max` display length, adding an ellipsis when shortened.

package/.agents/context/architecture.md

@@ -15,7 +15,7 @@
 │                                                             │
 │ ┌───────────────────┐ ┌──────────────────┐ ┌──────────────┐ │
 │ │  Retrieval Engine │ │ Vibeguard Secret │ │ Auto-Migrate │ │
-│ │ (Token Knapsack)  │ │ Defense Scanner  │ │  (24+ Formats)│ │
+│ │ (Token Knapsack)  │ │ Defense Scanner  │ │  (30 Formats)│ │
 │ └───────────────────┘ └──────────────────┘ └──────────────┘ │
 │ ┌───────────────────┐ ┌──────────────────┐ ┌──────────────┐ │
 │ │ LifeCycle Machine │ │ JSONL Harvester  │ │ Audit Ledger │ │
@@ -58,14 +58,14 @@ musememory/
 │   ├── cognition/          # Autonomous "Why" reasoner, bug clustering, tech debt
 │   ├── compaction/         # 70% context compaction engine & session handoffs
 │   ├── compounding/        # Unified knowledge compounding (temporal & clustering)
-│   ├── connect.ts          # Declarative zero-permission auto-wiring across 80+ agent platforms
+│   ├── connect.ts          # Declarative zero-permission auto-wiring across 52 agent platforms
 │   ├── current.ts          # CURRENT.md read/append constraints engine
 │   ├── doctor.ts           # Ecosystem diagnostic & health check engine
 │   ├── health/             # Unified 5-Pillar Project Health Gate engine
 │   ├── harvester.ts        # Universal agent transcript discovery and auto-learner engine
 │   ├── intelligence/       # Pluggable code intelligence providers (CodeGraph, Graphify, LSP, AST)
 │   ├── learning/           # Observation, candidate distillation, negative anti-patterns
-│   ├── mcp.ts              # Model Context Protocol stdio server (69 tools with profiles)
+│   ├── mcp.ts              # Model Context Protocol stdio server (126 tools with profiles)
 │   ├── mesh/               # Multi-repo & monorepo workspace discovery, query resolver, contracts
 │   ├── orchestrator/       # Flagship muse_context fusion, bidirectional lookups, MCP profiles
 │   ├── paths.ts            # Strict path containment (resolveWithin) & intentional-external opt-out (resolveExternal)
@@ -81,10 +81,10 @@ musememory/
 │   ├── types.ts            # Core TypeScript interfaces & enums
 │   ├── ui.ts               # Full Web Observability Studio & 3D knowledge graph
 │   ├── user.ts             # Persona & working preference engine
-│   ├── agents/             # Workstation coding agents detection & registry (80+ platforms)
-│   └── migrator/           # Multi-provider auto-detection & migration engine (24+ formats)
-├── test/                   # Automated Bun test suites (498 tests across 81 suites)
-├── package.json            # Package metadata & dependencies (v2.0.0)
+│   ├── agents/             # Workstation coding agents detection & registry (52 platforms)
+│   └── migrator/           # Multi-provider auto-detection & migration engine (30 providers)
+├── test/                   # Automated Bun test suites (1592 tests across 252 suites)
+├── package.json            # Package metadata & dependencies (v3.4.0)
 └── dist/                   # Compiled Node/Bun bundle
 ```
 

package/.agents/context/current.md

@@ -1,18 +1,197 @@
 # 📍 Current Shipped State & Active Invariants
 
-> **Version**: `v3.1.3`  
-> **Status**: Wave 29 Landed — Sovereign LifeOS Migration & Complete Decommissioning (T-444 to T-448).
+> **Version**: `v3.4.0` (post-release `dev`)  
+> **Status**: Wave 29 Landed — Sovereign Ecosystem Migration & Complete Decommissioning (T-444 to T-448).
+
+---
+
+## 🧾 Session — Changelog Repair & D5 Write Race (2026-11-10)
+
+**v3.3.0 shipped with no changelog section.** The tag and the npm publish
+both went out while all 29 release bullets were still under `[Unreleased]`,
+so the published release notes omitted the entire release; the section also
+carried two separate `### Added` headings. Promoted the 29 bullets verbatim
+into a dated `[3.3.0]` section (verified byte-identical against
+`git show v3.3.0:CHANGELOG.md`), rebuilt `[Unreleased]` from only the 12
+post-tag bullets, and added the five changes from this session. There is no
+CI check for changelog structure — this was only caught by reading it.
+
+**D5 — playbook writes lost data across processes.** The debt said "random
+temp suffix + fsync". Implementing exactly that did **not** fix the bug: 8
+concurrent processes still persisted only 5. The temp-name fix prevents
+staging collisions, but `savePlaybook` and `recordPlaybookOutcome` are
+read-modify-write, so both processes read the same list and the later rename
+drops the earlier write. Wrapping both in the existing `withStoreLock`
+fixed it — 8/8 persist. Outcome recording had the same race, silently
+corrupting the success/failure ratio ranking depends on.
+
+**Lesson recorded:** the first regression test used an in-process
+`Promise.all` race and passed with *and* without the fix, because the write
+path is synchronous and can never interleave in one process. It was
+replaced with a real multi-process test; both guards now fail against the
+old implementation (6 expected, 3 received).
+
+Gate: `bun test` 1592/1592 pass across 252 files; `bunx tsc --noEmit`
+clean; `check:landed` → **LANDED** at `9270d97`.
+
+---
+
+## 🧾 Session — Stack Landing, W26-5 CTE Bound & PR Queue Cleanup (2026-11-10)
+
+**CI gap on stacked PRs (#390).** The `pull_request` trigger listed only
+`main`/`master`/`dev`. Retargeting stacked PRs onto their parent branches
+therefore left three of four layers with **no CI at all** — they reported
+"no checks reported" and looked fine to a reviewer. Widened the filter to
+`["**"]`. Note for future stack work: GitHub reads `pull_request`
+workflows from the **base** branch, so the fix has to reach the base first.
+Retargeting alone emits no event; a close/reopen is what re-triggers CI.
+
+**W26-5 — recursive CTE bound.** `maxNodes` was clamped and passed to SQL,
+but `LIMIT` sat only on the outer `SELECT`, so SQLite materialised the whole
+reachable frontier before projecting. `preflightContext` calls this path on
+every file open. A `LIMIT` inside the recursive member took a 3000-node
+dense graph from **269.8ms to 9.7ms** (27x) with identical output. The
+regression test asserts a 50ms ceiling and was verified to *fail* without
+the fix (177ms) — a guard that only passes is not a guard.
+
+**W26-2 follow-up.** The over-budget message printed the pack total beside
+the word "over" — "192 tokens (over budget: 192 tokens)" reads as "over by
+192" when the overage was 42. Now "(over the 150 budget)". Caught by
+running the CLI, not by tests, which asserted engine fields but never the
+printed line.
+
+**PR queue cleaned.** Five spec PRs (#52–#56) were closed as superseded:
+their content already lives in `roadmap.md` in more detail, they targeted
+`main` against the `dev` convention, and each added a file to
+`.agents/plans/` — gitignored by ADR-008, so merging would have re-tracked
+a path the repo deliberately excluded.
+
+Gate: `bun test` 1590/1590 pass across 252 files; `bunx tsc --noEmit`
+clean; 162 doc links resolve; `check:landed` → **LANDED** at `df9e43f`.
+
+---
+
+## 🧾 Session — Agent Context Sync & AI-Readiness Closeout (2026-11-10)
+
+**Context drift repaired.** Agent-facing docs had fallen behind the engine:
+`AGENTS.md` pinned `v3.0.2` and `.agents/context/index.md` pinned `v3.1.0`
+while `package.json` is `3.3.0`. `architecture.md` still advertised 69 MCP
+tools, 80+ agent platforms, 24+ migrator formats, 498 tests across 81 suites
+and `v2.0.0`; the generated `claims.json` says 126 tools, 52 platforms, 30
+providers and 1584 tests across 251 files. All corrected from the generated
+source of truth, not from prose.
+
+**Roadmap debt closed.** The status table was dated `v2.3.0` and still listed
+"no branch-aware memory" as missing; `memory branch/checkout/blame` (R23) and
+branch-isolated overlays (T-436) both shipped, so the row now records them.
+
+**Standards adopted.** Five canonical core standards that were never present
+here are now materialised and routed from `AGENTS.md`: `anti-patterns.md`,
+`boundary-governance.md`, `test-failure-audit.md`, `language-policy.md` and
+`visual-inspection.md`. Curated local standards (project-specific naming, the
+project's own Landing Gate, `memory scan-secrets`) were deliberately **not**
+overwritten — the canon differs from them by design, and the sync engine
+reports that divergence rather than clobbering it.
+
+**Audit 9/14 → 14/14.** Added the assets the readiness matrix was missing:
+`.env.example` documenting the 15 real `MUSE_*` variables, `.mcp.json` wiring
+this repo's own MCP server (smoke-tested over stdio), a root `llms.txt` index,
+a `.agents/artifacts/README.md` contract stub, and the six Wave-23 terrain maps
+generated by the repo's own `writeWorkspaceTerrain` (not hand-written), which
+pass the terrain audit with zero credential leaks and zero hardcoded paths.
+
+Gate: `bun test` 1584/1584 pass, `bunx tsc --noEmit` clean, 162 doc links
+resolve, `--lint-context` clean, `--check` reports zero context drift.
+
+---
+
+## 🧾 Session — Outcome Study & W27-7 Read-Only Surfaces (2026-11-09)
+
+**Outcome study (EVD-008).** Replaced the two-task pilot with a ten-task,
+condition-blind study. Both arms received identical instructions and were told
+to consult memory; the only variable was whether ten project conventions were
+seeded. Result: **10/10 with memory vs 6/10 without**, four discriminating tasks
+(duration units, UTC dates, slug length cap, CSV whitespace quoting), zero
+regressions, Fisher one-sided p = 0.043. EVD-005 is no longer quarantined — its
+statement was narrowed to convention recall rather than an unqualified
+productivity claim. Evidence: `docs/evidence/2026-11-outcome-study.md` and
+`.agents/artifacts/outcome-study-2026-11/`.
+
+**W27-7 read-only MCP surfaces.** Added three read-only tools with explicit
+scope: `muse_enclave_recall` (client required, every read audit-logged),
+`muse_overlay_status` (list or inspect branch overlays, never mutates), and
+`muse_attestation_verify` (inline public key only — no model-supplied file
+paths). `src/store/branch.ts` gained `listBranchOverlays`. Tool count 119 → 122;
+claims and CLI reference regenerated; `test/mcp_readonly_surfaces.test.ts`
+covers the happy paths, the fail-loud cases and the read-only guarantee.
+Still open from the Wave 27 debt table: W27-8 (whole-vault rewrite) and W27-9
+(overlay size caps).
+
+**Follow-up (same day) — W27-8/W27-9 closed, R29 started.** Enclave vaults now
+store one AES-256-GCM file per entry under `<client>/<division>/`; a write no
+longer rewrites the vault, legacy single-file vaults stay readable and migrate
+on the next write, and per-entry (1 MiB) plus per-vault (5000) caps fail loud.
+Branch overlays are capped at 1000 entries / 2 MiB. `muse_enclave_recall` now
+redacts credentials with `redactSecrets` before returning content. On the
+operations side, `audit.jsonl` rotates at 5 MiB into `audit-archive/` (five
+segments retained by default), pruning writes a chain anchor so
+`getAuditTrail`/`getLastAuditHash`/`verifyAuditChain` remain valid across the
+retained window, and `memory io [--json]` reports `/proc/self/io` counters plus
+SQLite/WAL/audit/observation bytes. R29 is now complete except for optional
+async batching: the YAML mirror can be skipped with `MUSE_YAML_MIRROR=0` /
+`openStore({ yamlMirror: false })` (SQLite stays authoritative), and the WAL is
+bounded by `wal_autocheckpoint = 512` and `journal_size_limit = 64 MiB`.
+
+**Wave 28 complete (`T-440`–`T-443`).** The outcome loop is wired both ways:
+`test_feedback.ts` parses bun/vitest/jest/cargo/pytest/go output, binds a real run
+to the applied memory IDs, and reinforces green runs or records a failed
+application plus a T-313 regression strike only for anchor-relevant memories.
+`cognition/sentry.ts` matches failures against BUG_PRONE_PATTERN / DO_NOT_USE /
+failed-approach memories and returns reproduction/avoidance/recommendation
+playbooks without mutating anything. `doctor/flaky.ts` reconstructs the run
+history and reports flaky tests (per command), failure bursts and dependency-file
+drift before a burst. `cognition/remediation.ts` turns recurring failures into
+playbook candidates and persists resolved ones (dry-run by default). Surfaces:
+`memory test-feedback`, `sentry`, `flaky`, `remediation`, `memory_test_feedback`,
+`muse_regression_sentry`, `muse_flaky_tests`, `muse_remediation_playbooks`
+(126 tools).
+
+---
+
+## 🧾 Session — Ticket Ledger Renumber & Remainder Audit (2026-11-08)
+
+Wave 23's `T-405`–`T-422` collided with the already-landed `T-405` (conflicted injection) and `T-406` (project casing), so that block is now `T-451`–`T-468` across the plan, roadmap and this file. The historical blueprint keeps its original IDs with a translation note; `HANDOFF.md`'s `T-405`/`T-406` are the unrelated landed fixes and were left untouched. Every unchecked ticket was then verified against source: 4 were already implemented (`T-150`, `T-151`, `T-153`, `T-384`) and are now marked done, 15 are partial, 86 are genuinely unbuilt, `T-163` is dropped by principal decision D3, and `T-449`/`T-450` remain filed/deferred. Full evidence table: `.agents/context/ticket-plan.md` → v15. Doc-claim gate re-run green (20/20).
+
+### Wave 23 PR 1 implemented (local, not landed)
+
+`T-451`–`T-453` are implemented in the new `src/ui_assets.ts` module and wired through `src/ui.ts`:
+
+- **T-451** — the studio now renders a fixed 76px left rail with six numbered sections (`01 OVERVIEW` … `06 ABOUT`), a tools group for the pre-existing views, a warm `#0c0a09` palette, and Archivo Black / JetBrains Mono typography. The rail uses words and numbers, not emoji.
+- **T-452** — the header carries a project / global / mesh segmented switcher that refetches live. `/api/memories`, `/api/stats`, `/api/current`, `/api/wiki`, `/api/user-profile` and `/api/audit` resolve the scope; the global store (`~/.memory`) opens lazily and is never created by a read; mesh results carry `origin_project`. Mutations stay project-scoped and the studio shows a scope banner whenever it is not viewing the project store.
+- **T-453** — CSS, markup and client JS are split out of the old 2,700-line template literal and served from `/assets/studio.css` and `/assets/studio.js` with strong ETags, pre-gzipped buffers, `Vary: Accept-Encoding` and 304 fast paths. The standalone export inlines the same modules.
+
+Gate at merge: `bun test` **1451 pass / 0 fail** across 217 files, `tsc --noEmit` clean, `bun run build` 434 modules. **Landed in [PR #337](https://github.com/harshsinghmp/musememory/pull/337) at `d0c9600`** (2026-11-08); `check:landed` → `RESULT: LANDED`.
+
+### Gauntlet run — CAPPED at the 5-round ceiling (2026-11-08)
+
+Ran the bounded gauntlet loop against this PR (contract + ledger + packet in `.agents/artifacts/gauntlet-wave23-pr1/`). Five rounds: Fresh Critic scores **5.95 → 7.63 → 7.90 → 8.85 → 7.99**. Both R5 blockers were confirmed closed (mesh-link cache invalidation; scope-generation guards on every scoped fetch); the final critic left only small markup/ARIA/banner defects, which were fixed in the post-ceiling Integrator delta and verified by the gate but not re-critiqued. The packet is explicitly **CAPPED, not a PASS**. Final gate: **1450/0**, tsc clean, build 434 modules, zero overflow at 375/768/1280, 44×44 targets at 375/768, headers 4/4 (HSTS N/A), per-encoding ETags + wildcard 304 + 406 negotiation, secret scan clean. Residual debt (scope-race test, CSP `unsafe-inline`, mesh read-only store minting, duplicated `escapeHtml`, standalone export zeros) is in `TECHNICAL_DEBT.md`.
+
+---
+
+## 🔧 Session — Sync Recovery (2026-11-03)
+
+Restored `AGENTS.md` byte-exact from HEAD after an `updateagents` run from the umbrella directory replaced it (and persona files in sibling repos) with three-line adapters. Added `.commandcode/` and `.stversions/` to `.gitignore`, made the Syncthing ignore rules canonical in `~/.dotfiles/syncthing/`, and recorded the workspace-isolation invariant. The engine fix now stops at nested repository roots and refuses umbrella directories; the global install was refreshed. Repo-local recovery for `muse-agents` and `muse-skills` is owned by their respective agents.
 
 ---
 
 ## 🏛️ Wave 29 — Sovereign Ecosystem Migration & Decommissioning Complete (2026-10-26)
 
-All personal identity, telos, operational rules, and hardware terrain scanning migrated into sovereign `musememory` engines, native Vibeguard secret scanning, and de-LifeOSified agent governance. Legacy import tools have been permanently purged from source:
+All personal identity, telos, operational rules, and hardware terrain scanning migrated into sovereign `musememory` engines, native Vibeguard secret scanning, and decommissioned legacy agent governance. Legacy import tools have been permanently purged from source:
 
-- **Sovereign Persona & Store Ingestion (`T-444`)**: Identity, telos, and operational rules synthesized directly into sovereign `~/.memory/USER.md` persona and SQLite store. Legacy tool `import_lifeos.ts` permanently deleted from source.
+- **Sovereign Persona & Store Ingestion (`T-444`)**: Identity, telos, and operational rules synthesized directly into sovereign `~/.memory/USER.md` persona and SQLite store. The legacy import tool was permanently deleted from source.
 - **Native Vibeguard CLI (`T-445`)**: `memory scan-secrets [dir]` standalone zero-dependency secret scanner replacing legacy external scripts (`test/cli_secrets.test.ts`).
 - **Machine Terrain Collector (`T-446`)**: `memory terrain [--out file.md]` compiles deterministic hardware, toolchain, and local agent ecosystem maps into `system.md` (`test/vault_system.test.ts`).
-- **Global Governance De-LifeOSification (`T-447`)**: Removed all 6 legacy imports and paths from `~/.agents/AGENTS.md` and repository standards, binding truth directly to `~/.memory/USER.md` and `memory` MCP.
+- **Global Governance Decommissioning (`T-447`)**: Removed all 6 legacy imports and paths from `~/.agents/AGENTS.md` and repository standards, binding truth directly to `~/.memory/USER.md` and `memory` MCP.
 - **Sovereignty Decommissioning Gate (`T-448`)**: Enforces zero external legacy imports, confirms legacy tool removal, and passes 100% cleanly in `test/sovereignty_gate.test.ts`.
 - **Golden Sequence Documentation**: Published the complete 4-phase best-practice sequence for using Muse Memory with AI coding agents in `README.md`, `docs/agent-reference.md`, and `docs/cli-reference.md`.
 
@@ -139,7 +318,7 @@ on any blocking failure, so CI runs it. Report:
 ---
 
 ## ⏭️ Next Up (Post-Release Focus)
-- **Wave 23: Dashboard Overhaul, Terrain Maps & High-Speed Agent Hub (`T-405`–`T-422`)**:
+- **Waves 23–25 are complete.** Next is **Wave 26–29** (`T-432`–`T-443`): AST associative retrieval (`T-432`–`T-435`), branchable/enclave memory (`T-436`–`T-439`), test-driven reinforcement (`T-440`–`T-443`). Site note: unblock the Astro/cookie prerender error before any visual QA on the new pages:
   - Full UI overhaul inspired by Ryoku Rashin (`http://127.0.0.1:3600`): fixed 76px left-rail cyber-minimalist navigation, instant Canvas Graph ↔ Filterable List toggle, 60fps kinetic-settling physics loop, and 52-week activity calendar heatmap.
   - Multi-scope switcher: Project Scope (`./.memory`) vs Global User Scope (`~/.memory`) vs Cross-Project Mesh.
   - Workspace Terrain Maps (`stack.md`, `habits.md`, `ownership.md`, `packages.md`, `repo.md`, `logs.md`) for token-efficient agent orientation.
@@ -154,6 +333,34 @@ on any blocking failure, so CI runs it. Report:
 ---
 
 ## 🏁 Recently Landed Waves (Verified on `dev`)
+- [x] **Outcome pilot + RC blockers** (2026-11-09) — with/without pilot 2/2 vs 1/2; latency claims corrected to p95 targets; T-450 ADR-008 boundary; overlay GC, branch root identity, enclave put lock.
+- [x] **Evidence + key lifecycle** (2026-11-09) — dogfood benchmark (hit@3 10/10, MRR 0.933, 68% token savings), evidence ledger with 2 quarantined claims, benchmark title-less crash fixed, `enclave keys/prune`, backup drill, runbook.
+- [x] **Enclave key rotation + client-scope descope** (2026-11-09) — versioned keyring, `enclave rotate`, old-key rollback; `scope: client` descoped per ADR-007.
+- [x] **Attestation v2 + merge guard** (2026-11-09) — seq/head/key-id pinning, truncation rejection; semantic merge blocks untrusted lineage, inflation and protected constraints.
+- [x] **Wave 27 hardening** (2026-11-09) — audit-REJECT fixes: strict names, GCM AAD/key id, audited overlay merge via T-439, fail-closed merge3, corrected claims. Gate 1521/0; CAPPED.
+- [x] **Wave 27 (`T-436`–`T-439`)** (2026-11-09) — branch overlays (#377), encrypted enclaves (#378), packet attestations (#379), three-way merge (#380). Tests 1514/0.
+- [x] **Sensitive-read audit + project identity** (2026-11-09) — `read` audit events for `scope: "all"`/untrusted; configured project via env/config/`memory project`.
+- [x] **Code-context security boundary** (2026-11-09) — project-scoped by default, untrusted opt-in, read-time redaction/sanitization, bounded inputs; `muse_memory_for_code` accepts project/include_untrusted.
+- [x] **Unified code resolver** (2026-11-09) — `resolveMemoriesForCode` is the single matcher; pre-flight and PR context adapt it.
+- [x] **Pre-flight surfaces** (2026-11-09) — PreToolUse hook + read-only `muse_preflight` MCP tool; 119 tools.
+- [x] **Wave 26 (`T-432`–`T-435`)** (2026-11-09) — recursive-CTE associative expansion (`T-432`, direct `dev`), pre-flight context (`T-433`, #370), blast-radius risk (`T-434`, #371), anchor-matched auto-recall (`T-435`, #372). Tests 1495/0.
+- [x] **Site build + scaffolding wiring** (2026-11-08) — PR #367 (Node Astro launcher; site:qa 17/17 SHIP) and #368 (briefing episodes, explicit `asserted_at` belief clock in `as_of`, duplicate decay removed).
+- [x] **Wave 24–25 review hardening** (2026-11-08) — PR #366 merged at `a485875`; playbook rail preservation, fail-loud corrupt store, id-keyed updates, unique episode ids, goal-first phases, epoch timestamps, CLI flags, doc honesty. Gauntlet: REJECT → fixed, CAPPED; website visual gate blocked by pre-existing Astro/cookie prerender error.
+- [x] **Wave 24 (`T-423`–`T-426`)** (2026-11-08) — terminal demo script/recipe, vendored sql.js playground, capability-only benchmark matrix, accessible agent demos. PRs #362–#365. Site prerender has a pre-existing Astro/cookie CJS blocker (entrypoints compile).
+- [x] **Wave 25 (`T-427`–`T-431`)** (2026-11-08) — playbooks, episodes, bi-temporal belief windows, reinforced decay, and playbook CLI/MCP commands. PRs #356–#361.
+- [x] **Post-Wave-23 debt sweep** (2026-11-08) — PR #355 merged at `432cf01`: agents discovery cache, backup retention, unwire tool-grant cleanup, mesh freshness bucket.
+- [x] **Wave 23 gauntlet hardening** (2026-11-08) — PR #354 merged at `d2ea59c`; complete config backups (XDG-aware, timestamped, fail-loud), unknown-agent 404s, honest wire reporting, WAL/layout cache freshness, 44px phone controls. Gauntlet: 7.35 critic → REQUEST-CHANGES review → fixed; **CAPPED, not a PASS**. Evidence: `.agents/artifacts/gauntlet-wave23-pr456/`.
+- [x] **Wave 23 PR 6 (`T-466`–`T-468`)** (2026-11-08) — projection cache, hidden-tab pause and the UI performance benchmark. **Wave 23 complete.** PRs #351–#353.
+- [x] **Wave 23 PR 5 (`T-463`–`T-465`)** (2026-11-08) — poster About panel, quick-start cards and searchable command deck. PRs #348–#350.
+- [x] **Wave 23 PR 4 (`T-460`–`T-462`)** (2026-11-08) — agents hub: discovery statuses, one-click wire/unwire with `.bak` backups and harness opt-in, point-any-agent manifest. PRs #345–#347.
+- [x] **Wave 23 PR 3 / `T-459`** (2026-11-08) — PR #344 merged; generation-time redaction plus a token-savings and leak test (`test/vault_terrain.test.ts`).
+- [x] **Wave 23 PR 3 / `T-458`** (2026-11-08) — PR #343 merged at `65113af`; terrain vault split-pane (tree, GEN badges, markdown viewer, REINDEX scanline).
+- [x] **Wave 23 PR 3 / `T-457`** (2026-11-08) — PR #342 merged at `8006427`; deterministic workspace terrain generator and `terrain --workspace` CLI.
+- [x] **Wave 23 PR 2 / `T-455`** (2026-11-08) — PR #340 merged at `05b4fdf`; energy-settling loop with wake hooks, deterministic ring seed, pointer capture.
+- [x] **Wave 23 PR 2 / `T-456`** (2026-11-08) — PR #341 merged at `436d198`; scope-aware activity endpoint, 52-week heatmap and agent session cards.
+- [x] **T-449 test hermeticity** (2026-11-08) — PR #338 merged at `94620895`; `findProjectRoot` no longer adopts `$HOME`/`/` as a project root, doc-link scan skips local sync state, regression test with a fake home. Earlier caller-scan fix merged via #337 (`c0f7aef`). Issue #336 closes.
+- [x] **Wave 23 PR 2 / `T-454`** (2026-11-08) — PR #339 merged at `3e621fa`; instant graph/list toggle with a sortable table, `aria-sort`, and a 100ms debounced filter.
+- [x] **Wave 23 PR 1 (`T-451`–`T-453`)** (2026-11-08) — merged in PR #337 at `d0c9600`; `check:landed` → **LANDED**. Left rail, dual-scope switcher, modular ETag/gzip assets, read-only global/mesh reads, 375/768/1280 verified, 1451/0 at merge. Follow-ups in PR #337's thread: stateful-regex flake fixed (`c0f7aef`), npm Bun CI fallback (`b298beb`). Gauntlet verdict: CAPPED at 7.99 (not a 9.0 PASS) — evidence in `.agents/artifacts/gauntlet-wave23-pr1/`.
 - [x] **Released: v3.1.2** (2026-10-25) — completes the silent-casing fan-out:
   - PR #330 merged at `d7e875b` (*"Release: v3.1.2"*); annotated tag
     [`v3.1.2`](https://github.com/harshsinghmp/musememory/releases/tag/v3.1.2)
@@ -222,7 +429,7 @@ on any blocking failure, so CI runs it. Report:
   - `T-144`: Trajectory fix-pair mining discovering negative memories (`AVOID: ...`) from *Error ➔ Remediation ➔ No Recurrence* observation sequences with affinity filters excluding non-mutating commands (`ls`, `cat`), dynamic line number normalization, Vibeguard secret scrubbing, and session volume cap of max 3 candidates (`test/fix_pair_mining.test.ts`, commit `cc4b5c5`).
   - `T-314`: Source-tagged recall hits wiring `.memory/HOT.md` candidates into retrieval ranking with sub-millisecond memoized `mtime` cache, origin tagging (`source_channels: ("hot" | "fts" | "vector" | "tree" | "distilled")[]`), relevance-gated `sourceBonus` (+0.20), and explainability tokens (`source:hot`, `source:fts`) (`test/source_tagging_frequency.test.ts`, commit `f9f6a93`).
   - `T-315`: LangMem logarithmic frequency rank curve ($0.25 \times \frac{\ln(1 + \text{effectiveCount})}{\ln(1 + 50)}$) replacing unbounded linear frequency scoring; weights verified memory applications $2\times$ over passive context loads; 7-day recency bonus (+0.05) capped at 0.30; outputs `freq:high` tokens (`test/source_tagging_frequency.test.ts`, commit `f3c8f1d`).
-- [x] **Wave 21: LifeOS Distillation, Mutation Safety & Knowledge Routing**:
+- [x] **Wave 21: Ecosystem Distillation, Mutation Safety & Knowledge Routing**:
   - `T-050`: Overnight & in-lock mutation safety guards (`verifyMutationSafety`, `MutationSafetyError`, `ESUSPECT_SHRINK`, `ESUSPECT_EROSION`, `allowDrastic`) preventing accidental bulk erasure or semantic erosion during compaction/governance (`test/mutation_guards.test.ts`, commit `439e31c`).
   - `T-177`: Pre-mutation 30-snapshot rolling ring buffer (`captureSnapshotRing`, `listSnapshotRing`, `restoreSnapshotRing`) with zero resident daemons in `.memory/snapshots/` before write transactions and compaction handoffs (`test/snapshot_ring.test.ts`, commit `76c58eb`).
   - `T-324`: Diff-preserving `CURRENT.md` checkpoint merge semantics (`parseCurrentConstraints`, `mergeCurrentConstraints`), preventing mid-session hand-added constraints from being overwritten (`test/current_compaction_guard.test.ts`, commit `f1a4756`).
@@ -415,8 +622,9 @@ Removed remaining competitor product names and external comparison links from we
 - **Zero External Daemons**: All operations must execute in-process via SQLite (`memory.db`) or flat files. Never depend on background servers.
 - **Fail Fast**: Throw loudly on secret detection, invalid schema shapes, or unconfirmed supersessions.
 - **Verification Gate**: Before declaring changes complete, `bun test`, `bun run build`, and `tsc --noEmit` must pass.
+- **Workspace Isolation & Sync Boundary**: Never run repo-mutating scaffolders from a parent directory; nested clones are separate scopes. Never sync `.git` or a live SQLite store (`.memory/`).
 
 ## 1. Verified Shipped Reality
 - **2026-10-22**: T-321 per-project health gate scope
 - **2026-10-22**: T-320 contradiction engine calibration
-- **2026-10-20**: Wave 21: LifeOS Distillation, Mutation Safety & Knowledge Routing (T-050, T-177, T-324)
+- **2026-10-20**: Wave 21: Ecosystem Distillation, Mutation Safety & Knowledge Routing (T-050, T-177, T-324)

package/.agents/context/decisions.md

@@ -27,3 +27,11 @@
 ### ADR-006: Harness-Independent Hook Installation (Global Standard First)
 - **Decision**: `memory hooks install` resolves its target as explicit `settingsPath` → explicit `--harness` opt-in → global standard (project `.agents/hooks.json` when a `.agents/` directory exists, otherwise `~/.agents/hooks.json`). A harness path (e.g. `~/.claude/settings.json`) is never auto-selected, and `connectAgent` skips harness-specific agents without an explicit `--harness` opt-in.
 - **Rationale** (principal ruling, 2026-10-15): the runtime is vendor-neutral — hooks must not couple memory to one harness or create a harness directory unprompted. A pre-existing harness settings file does not imply consent; only `--harness claude` does.
+
+### ADR-007: Client Scope Descoped from the Memory Store
+- **Decision** (2026-11-09): `scope: client` is not added to `MemoryScope`. Client enclaves remain an explicit encrypted vault (`memory enclave create|list|put|rotate`) outside normal retrieval, recall, and MCP surfaces.
+- **Rationale**: wiring a tenant scope through store/retrieval/sync would make cross-tenant disclosure a single filter bug away. The encrypted vault has its own key lifecycle and is auditable at the CLI boundary. Revisit only with a tenant-aware store substrate and per-client key rotation tests.
+
+### ADR-008: Agent Workspace Tracking Boundary (T-450)
+- **Decision** (2026-11-09): keep `.agents/standards/`, `.agents/skills/`, `.agents/context/`, `.agents/brand/`, `.agents/artifacts/` and `.agents/research/` tracked. Ignore new ephemeral state under `.agents/plans/`, `.agents/archive/`, `.agents/worktree-leases/` and `.agents/scratch/`. Already-tracked files stay tracked for history; the rule applies to new files.
+- **Rationale**: standards, skills, decisions, evidence and audit artifacts are collaborator-facing truth. Plans, leases and scratch are per-agent working state that causes churn and merge noise. Removing already-tracked history would break links in prior tickets, so the boundary moves forward only.

package/.agents/context/deep-research-agentic-memory-evolution.md

@@ -181,7 +181,7 @@ Currently, Muse Memory excels at **Semantic Memory** (facts, rules, ADRs, prefer
 #### B. Multi-Tenant Agency Enclaves (`scope: client`)
 - Tailored for Harsh's agency model with 4 internal divisions: Sol, Jasper, Crew, Nexus.
 - **Isolation Rule**:
-  - `scope: client`: Enclave isolated per client ID (`client_id: "client-acme"`).
+  - `scope: client`: **Descoped** (ADR-007). Enclaves are explicit encrypted vaults; not a store scope.
   - Client A’s confidential database schemas and domain logic are never exposed to Client B.
   - Universal architectural principles (`scope: global`) propagate freely across all client workspaces.