sanook-cli 0.5.1 → 0.5.5

package/second-brain/Sessions/2026-06-18-framework-dogfood-permission-and-memory.md

@@ -0,0 +1,58 @@
+---
+tags: [session, session-log, second-brain, dogfood, permission]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 — Framework Dogfood: Permission + Memory
+
+> Session evidence for using the new AI framework/context packs on a real permission-gate task plus durable memory updates.
+
+## Summary
+
+ใช้ framework ใหม่กับงานจริง 3 task-family ใน session เดียว: coding-release, second-brain maintenance, และ research/framework benchmark.
+
+## What Was Tried
+
+- **Coding & Release Work:** อ่าน diff ของ `src/tools/permission.ts` และ `src/tools/tools.test.ts`, แล้วรัน targeted test
+- **Second-Brain Maintenance:** อัปเดต [[Shared/User-Memory/user-preferences]] และ [[Shared/User-Memory/response-examples]] จาก feedback "ทำทั้งหมดได้เลย"
+- **Research To Framework / Benchmark:** รัน `Shared/Scripts/ai-second-brain-method-eval.mjs` และใช้ [[Evals/second-brain-benchmarks]] เป็น self-check
+
+## Errors
+
+- ไม่มี test failure ใน targeted permission/tools test
+- ไม่มี whitespace diff issue ตอนตรวจ `git diff --check`
+
+## Solutions
+
+- Permission/tools targeted test ผ่าน: `npm test -- src/tools/tools.test.ts`
+- เพิ่ม preference: เมื่อ scope ชัดและปลอดภัย ให้ทำครบตามรายการที่แนะนำได้เลย
+- เพิ่ม response example: "Act On All Clear Recommendations"
+- บันทึก benchmark/dogfood result ลง [[Evals/quality-ledger]]
+
+## Key Decisions
+
+- นับ session นี้เป็น dogfood ของ context packs 3 แบบ:
+  - [[Shared/Context-Packs/coding-release]]
+  - [[Shared/Context-Packs/second-brain-maintenance]]
+  - [[Shared/Context-Packs/research-to-framework]]
+- ยังไม่แก้ logic ใน `src/tools/permission.ts` เพราะ targeted tests ผ่านและ diff สอดคล้องกับเจตนาของ permission gate
+
+## Files Changed
+
+- `second-brain/Shared/User-Memory/user-preferences.md`
+- `second-brain/Shared/User-Memory/response-examples.md`
+- `second-brain/Evals/quality-ledger.md`
+- `second-brain/Shared/Operating-State/current-state.md`
+- `second-brain/Sessions/_Index.md`
+- `second-brain/Sessions/2026-06-18-framework-dogfood-permission-and-memory.md`
+
+## Next Steps
+
+- รัน full test/typecheck ถ้าจะ finalize code change ใน permission gate
+- ใช้ benchmark อีกครั้งหลัง permission changes ถูก merge หรือปรับเพิ่ม
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-hermes-second-brain-expansion-research.md

@@ -0,0 +1,52 @@
+---
+tags: [session, session-log, second-brain, hermes, research]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 — Hermes Second-Brain Expansion Research
+
+> Session log for the research pass on what to add to this second-brain for Hermes CLI support. Links to the sourced research note and leaves implementation as a next step.
+
+## Summary
+
+Researched Hermes Agent docs, context engineering guidance, agent memory papers, LangGraph memory concepts, and PARA. Main conclusion: avoid many new root folders; prioritize Hermes-specific adapter/context, memory sync policy, atomic benchmarks, golden fixtures, and scheduled vault-health reviews.
+
+## What Was Tried
+
+- Read current vault map, AI context index, evals index, context packs index, user memory index, and operating sequence.
+- Checked current worktree status and avoided unrelated CLI/search changes.
+- Searched current Hermes docs for context files, persistent memory, skills, and curator behavior.
+- Compared with external agent-memory/context sources.
+
+## Errors
+
+- Some docs pages were rendered HTML-heavy; raw GitHub markdown for Hermes docs was easier to inspect.
+
+## Solutions
+
+- Added [[Research/2026-06-18-hermes-cli-second-brain-expansion-research]] as the durable research note with source URLs and prioritized recommendations.
+
+## Key Decisions
+
+- No taxonomy folders were created yet.
+- Recommended next build is `HERMES.md` plus a small Hermes-specific shared policy area before wider taxonomy changes.
+
+## Files Changed
+
+- `second-brain/Research/2026-06-18-hermes-cli-second-brain-expansion-research.md`
+- `second-brain/Sessions/2026-06-18-hermes-second-brain-expansion-research.md`
+- `second-brain/Research/_Index.md`
+- `second-brain/Sessions/_Index.md`
+- `second-brain/Shared/Operating-State/current-state.md`
+
+## Next Steps
+
+- [ ] Decide whether to implement the recommended Hermes bundle.
+- [ ] If adding folders, update `Vault Structure Map.md` and `src/brain.ts` together.
+- [ ] If only adding files under existing folders, keep taxonomy unchanged.
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-mcp-ecosystem-and-sanook-ux-scan.md

@@ -0,0 +1,81 @@
+---
+tags: [session, session-log, mcp, sanook-cli]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 - MCP Ecosystem and Sanook UX Scan
+
+> Session log for reviewing Sanook's MCP support and current MCP registry integration opportunities.
+
+## Summary
+
+- Inspected `src/mcp.ts`, `src/mcp-server.ts`, `src/bin.ts`, `README.md`, and existing MCP tests/docs.
+- Queried the official MCP registry API and OpenAPI metadata.
+- Identified that Sanook already supports stdio + remote Streamable HTTP and can act as an MCP server.
+- Main UX gap: no registry-backed search/info/install/test wizard yet.
+- Added [[Research/2026-06-18-sanook-mcp-ecosystem-and-ux-roadmap]] and [[Shared/Tech-Standards/mcp-integration-roadmap]].
+- Implemented the P0 MCP UX inside Sanook CLI: registry search/info/install, presets, list/test/doctor probing, docs, and tests.
+- Verified local stdio MCP probing works; official GitLab remote installs from registry but returns `401 Unauthorized` without an auth header.
+
+## What Was Tried
+
+- Checked current MCP code paths with `rg`.
+- Read MCP client/server implementation.
+- Queried registry endpoints:
+  - `https://registry.modelcontextprotocol.io/v0/version`
+  - `https://registry.modelcontextprotocol.io/v0/health`
+  - `https://registry.modelcontextprotocol.io/v0/servers?...`
+  - `https://registry.modelcontextprotocol.io/openapi.json`
+- Sampled registry search terms: GitHub, GitLab, Postgres, SQLite, filesystem, Slack, Discord, Notion, Linear, Jira, Sentry, Playwright, browser, Gmail, Drive, Obsidian, Context7, fetch, Brave, Docker, Kubernetes.
+
+## Errors
+
+- Initial unquoted `curl` query with `?limit=8` was expanded by zsh; quoted URL fixed it.
+- Mintlify HTML docs are noisy for terminal extraction; the registry OpenAPI and API responses were more useful as machine-readable evidence.
+
+## Solutions
+
+- Used quoted registry URLs.
+- Used the registry OpenAPI for endpoint/field shape.
+- Captured a Sanook-specific roadmap instead of implementing a large installer in the research turn.
+- Added `src/mcp-registry.ts` for official registry parsing and install-plan generation.
+- Added `sanook mcp search`, `info`, `install`, `preset`, `test`, `doctor`, and `list --tools`.
+- Kept unit tests network-free; live registry smoke was run separately against built `dist/bin.js`.
+- Smoke result: `mcp search/info/install/list` worked against the official registry; a fake stdio MCP server passed `mcp test`; GitLab remote probe failed with `401 Unauthorized` until a token/header is supplied.
+
+## Key Decisions
+
+- Next best implementation should be `sanook mcp search/info/install/test`, not another hardcoded list.
+- Use registry metadata for env/header prompts and secret handling.
+- Keep project-local MCP behind `sanook trust`.
+- Prefer read-only / remote Streamable HTTP defaults where available.
+- Do not make the regular test suite depend on the live registry.
+- Preserve manual `--header` support because some registry entries do not yet declare required auth metadata.
+
+## Files Changed
+
+- `second-brain/Research/2026-06-18-sanook-mcp-ecosystem-and-ux-roadmap.md`
+- `second-brain/Shared/Tech-Standards/mcp-integration-roadmap.md`
+- `second-brain/Shared/Tech-Standards/_Index.md`
+- `second-brain/Research/_Index.md`
+- `second-brain/Sessions/_Index.md`
+- `second-brain/Sessions/2026-06-18-mcp-ecosystem-and-sanook-ux-scan.md`
+- `src/mcp-registry.ts`
+- `src/mcp-registry.test.ts`
+- `src/mcp.ts`
+- `src/mcp.test.ts`
+- `src/bin.ts`
+- `README.md`
+- `CHANGELOG.md`
+
+## Next Steps
+
+- Improve auth hints for hosted MCPs that return `401` but do not declare header requirements in registry metadata.
+- Add risk labels / read-write warnings before installing high-impact servers.
+- Consider registry result caching and richer install previews.
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-sanook-brain-cli-p0-implementation.md

@@ -0,0 +1,86 @@
+---
+tags: [session, session-log, sanook-cli, second-brain, implementation]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 - Sanook Brain CLI P0 Implementation
+
+> Implementation session for making the second-brain workflow first-class inside Sanook CLI.
+
+## Summary
+
+Implemented Sanook-native P0 commands for second-brain operations:
+
+- `sanook brain doctor`
+- `sanook brain context [--task "..."]`
+- `sanook brain eval`
+- `sanook brain review`
+
+## What Was Tried
+
+- Verified existing `brain doctor` implementation and tests.
+- Refactored `buildBrainContext()` so the exact prompt context is assembled from inspectable source parts.
+- Added a `brain context` module and CLI runner to show context source status, char counts, stale/missing warnings, and optional task retrieval.
+- Added a `brain eval` module and CLI runner that scores `Evals/second-brain-benchmarks.md` through static vault checks, context checks, index freshness, and retrieval probes.
+- Added a `brain review` module and CLI runner for read-only curator checks over Memory-Inbox, Context-Packs, Sessions/index coverage, eval freshness, and markdown routing hygiene.
+
+## Errors
+
+- The existing Memory-Inbox helper intentionally swallowed missing-file errors for runtime safety; `brain context` needed to distinguish `missing` from `empty`. Fixed by separating candidate parsing from file reading.
+- Review of a fresh scaffold surfaced that generated `Shared/Context-Packs/_Index.md` did not link bundled packs. Fixed scaffold generation so new vaults are discoverable immediately.
+- Review hygiene initially flagged root adapter files for missing `parent`; adjusted review to match the existing root-file exception rule.
+
+## Solutions
+
+- `src/memory.ts` now exports `buildBrainContextParts()` and `renderBrainContext()`.
+- `src/brain-context.ts` provides parser, inspector, and formatter for `sanook brain context`.
+- `src/brain-eval.ts` provides static and retrieval benchmark checks for `sanook brain eval`.
+- `src/brain-review.ts` provides read-only curator checks and formatter for `sanook brain review`.
+- `src/brain.ts` now renders seed context pack links into generated `Shared/Context-Packs/_Index.md`.
+- CLI help and REPL help now mention the new commands.
+
+## Files Changed
+
+- `CHANGELOG.md`
+- `src/bin.ts`
+- `src/commands.ts`
+- `src/memory.ts`
+- `src/brain.ts`
+- `src/brain-context.ts`
+- `src/brain-context.test.ts`
+- `src/brain-eval.ts`
+- `src/brain-eval.test.ts`
+- `src/brain-review.ts`
+- `src/brain-review.test.ts`
+- `second-brain/Projects/sanook-cli/second-brain-feature-roadmap.md`
+- `second-brain/Shared/Operating-State/current-state.md`
+
+## Verification
+
+- `npm test -- src/brain-eval.test.ts src/brain-context.test.ts src/memory.test.ts src/brain-doctor.test.ts src/brain.test.ts`
+- `npm run typecheck`
+- `npm test`
+- `npm run build`
+- `git diff --check`
+- Smoke with temp `HOME`: `brain init`, `index`, `brain doctor`, `brain context --task ... --no-content`, `brain eval --no-retrieval`
+- Smoke with temp `HOME`: `brain eval` full retrieval probes passed 15.0/15
+- `npm test -- src/brain-review.test.ts src/brain.test.ts src/memory.test.ts`
+- `npm run typecheck`
+- `npm test -- src/brain-review.test.ts src/brain-eval.test.ts src/brain-context.test.ts src/brain-doctor.test.ts src/brain.test.ts src/memory.test.ts`
+- `npm test`
+- `npm run build`
+- `git diff --check`
+- Smoke with temp `HOME`: `brain init`, `index`, `brain review` passed 0 warnings / 0 failures.
+- `node dist/bin.js --help | rg "brain (review|context|eval|doctor)"`
+
+## Next Steps
+
+- [ ] Consider `sanook brain pack list|show` for `Shared/Context-Packs/`.
+- [ ] Consider `sanook brain new <type>`.
+- [ ] Consider `sanook brain repair`.
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-sanook-brain-final-cli-final.md

@@ -0,0 +1,246 @@
+---
+tags: [final-gate, verification, sanook-cli, second-brain]
+note_type: final-gate
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+---
+
+# 2026-06-18 - Sanook Brain Final CLI - Final Gate
+
+> Evidence-backed closeout for implementing `sanook brain final`, `--from-diff`, [[Templates/final-lite]], final-gate validation, and eval coverage.
+
+## 0. Final Gate Rule
+
+- [x] This final gate was created before the final owner-facing answer.
+- [x] Every PASS/PARTIAL/FAIL/BLOCKED claim below has evidence or an explicit reason.
+- [x] No unchecked item is silently treated as done.
+- [x] If evidence is missing, status is `PARTIAL`, `FAIL`, or `BLOCKED`, not `PASS`.
+- [x] If a row has no evidence, it cannot be `PASS`.
+
+## 1. Objective / DoD Lock
+
+Original request:
+
+```text
+ทำทั้งหมดมาได้เลย
+```
+
+Expected output:
+
+- [x] Add `sanook brain final`.
+- [x] Support `--from-diff`.
+- [x] Add a final-gate validator.
+- [x] Add [[Templates/final-lite]].
+- [x] Integrate final-gate coverage with `sanook brain eval`.
+
+Definition of Done:
+
+| DoD item | Status | Evidence | Notes |
+|---|---|---|---|
+| CLI can create a final gate note in Sessions. | PASS | `src/brain-final.ts`; temp-vault smoke with `node dist/bin.js brain final --task "smoke final gate" --from-diff` | Smoke created `Sessions/2026-06-18-smoke-final-gate-final.md`. |
+| Diff prefill works. | PASS | `src/brain-final.test.ts`; smoke output `from-diff: 23 file(s)` | Prefills changed-file table from git status. |
+| Lite template exists and is scaffolded. | PASS | `second-brain/Templates/final-lite.md`; `src/brain.test.ts`; temp-vault smoke with `--lite --output Sessions/smoke-lite-final.md` | Scaffold test includes full and lite templates; smoke created a lite final gate. |
+| Review validates final-gate evidence. | PASS | `src/brain-review.ts`; `src/brain-review.test.ts` | Test catches TODO and PASS-without-evidence rows. |
+| Eval covers final-gate contract. | PASS | `src/brain-eval.ts`; `src/brain-eval.test.ts` | `SB-FINAL` case added. |
+| Work is documented and discoverable. | PASS | [[Sessions/2026-06-18-sanook-brain-final-cli]], [[Evals/quality-ledger]], [[Templates/_Index]], [[Shared/AI-Context-Index]] | Index and hot path updated. |
+
+Out of scope / non-goals:
+
+- No automatic filling of all final-gate evidence rows from tests; the CLI creates a scaffold and prefilled diff evidence, then the agent/owner must complete it.
+- No broad `sanook brain new TYPE` template generator in this change.
+
+## 2. Evidence-Backed Checklist
+
+| Gate | Status | Evidence | Notes |
+|---|---|---|---|
+| Relevant source/context was read before editing. | PASS | Read `src/brain.ts`, `src/brain-review.ts`, `src/brain-eval.ts`, `src/bin.ts`, existing templates, and tests | Matched local command/test style. |
+| Existing canonical note/file was searched before creating a new one. | PASS | `rg final-lite|brain final|review.final-gates|SB-FINAL` | No existing CLI final generator was present. |
+| Changes were made in the correct folder/module boundary. | PASS | New logic isolated in `src/brain-final.ts`; docs in second-brain templates/standards/evals | Existing `brain context/eval/review` patterns preserved. |
+| No unrelated user/worktree changes were reverted or overwritten. | PASS | `git status --short` showed `src/config.ts` and `src/config.test.ts` as pre-existing modified files; they were not edited | Mention in final answer. |
+| New/changed durable notes have `parent` and `up::`. | PASS | This file and session log include `parent` and `up::`; scaffold hygiene tests passed | Full tests passed. |
+| Index/backlink/discoverability was updated when needed. | PASS | [[Sessions/_Index]], [[Templates/_Index]], [[Shared/AI-Context-Index]], [[Evals/quality-ledger]] | Links added. |
+| Verification was run at the right scope. | PASS | Targeted tests, typecheck, full tests, build, diff check, CLI smoke | Listed in Evidence Matrix. |
+| Residual risk is stated clearly. | PASS | Residual Risk section | Known limitation documented. |
+
+## 3. Status Matrix
+
+| Work item / phase | Status | Evidence | Owner-visible outcome |
+|---|---|---|---|
+| Frame objective and DoD | PASS | Section 1 of this final gate | "ทำทั้งหมด" mapped to five concrete deliverables. |
+| Retrieve required context | PASS | Files inspected list below | Implementation follows existing Sanook brain command structure. |
+| Implement / write / edit | PASS | Files changed list below | New CLI workflow exists. |
+| Verify behavior or artifact | PASS | Commands table below | Tests/build/smoke passed. |
+| Update memory/index/session if needed | PASS | Session, final gate, current-state, quality ledger, Sessions index | Work is traceable. |
+| Prepare final response | PASS | Final-answer draft below | Response can cite verified evidence. |
+
+Blocked / partial explanation:
+
+- `PARTIAL`: none.
+- `BLOCKED`: none.
+
+## 4. Evidence Matrix
+
+Commands:
+
+| Command | Status | Important output | Scope proven |
+|---|---|---|---|
+| `npm test -- src/brain-final.test.ts src/brain-review.test.ts src/brain-eval.test.ts src/brain.test.ts` | PASS | 4 files, 37 tests passed | Targeted final/review/eval/scaffold behavior. |
+| `npm run typecheck` | PASS | `tsc --noEmit` passed | TypeScript compile surface. |
+| `npm test` | PASS | 102 files, 881 tests passed | Full current test suite. |
+| `npm run build` | PASS | `tsc -p tsconfig.build.json` passed | Build output compiles. |
+| `git diff --check` | PASS | No output | No whitespace/conflict-marker issues. |
+| `node dist/bin.js brain init ...` then `node dist/bin.js brain final --task "smoke final gate" --from-diff` | PASS | Created temp-vault final note, linked Sessions index, `from-diff: 23 file(s)` | Real CLI path from built output. |
+| `node dist/bin.js brain init ...` then `node dist/bin.js brain final --task "smoke lite final" --lite --output Sessions/smoke-lite-final.md` | PASS | Created temp-vault lite final note and linked Sessions index. | Real lite CLI path from built output. |
+
+Files inspected:
+
+| File/path | Why it matters | Evidence |
+|---|---|---|
+| `src/brain.ts` | Scaffold/copy pattern | New template covered by scaffold tests. |
+| `src/brain-review.ts` | Existing curator check shape | Added final-gate check in same pattern. |
+| `src/brain-eval.ts` | Existing benchmark runner shape | Added `SB-FINAL`. |
+| `src/bin.ts` | CLI subcommand wiring | Added `runBrainFinal` and dispatcher entry. |
+| `second-brain/Templates/final.md` | Full final gate source | Lite template mirrors section contract. |
+
+Files changed:
+
+| File/path | Change summary | Evidence |
+|---|---|---|
+| `src/brain-final.ts` | New parser, generator, diff prefill, Sessions index update, and validator helpers. | Targeted tests and typecheck passed. |
+| `src/brain-final.test.ts` | Parser/generation/validator coverage. | Targeted tests passed. |
+| `src/bin.ts` / `src/commands.ts` | CLI help and dispatcher wiring for `brain final`. | CLI smoke passed. |
+| `src/brain-review.ts` / `src/brain-review.test.ts` | Review check for final-gate templates and session final gates. | Targeted tests passed. |
+| `src/brain-eval.ts` / `src/brain-eval.test.ts` | `SB-FINAL` eval case. | Targeted tests passed. |
+| `src/brain.test.ts` | Scaffold/template coverage for `final-lite`. | Targeted tests passed. |
+| `second-brain/Templates/final-lite.md` | New compact evidence-backed final gate template. | Scaffold tests passed. |
+| `second-brain/*` indexes/standards/evals/session files | Discoverability and quality-loop closeout. | This final gate and full tests. |
+| `CHANGELOG.md` | User-facing release note. | Diff reviewed. |
+
+Artifacts/rendered outputs:
+
+| Artifact | Status | Evidence |
+|---|---|---|
+| Built CLI smoke final note in temp vault | PASS | Smoke output showed created path and Sessions index link. |
+
+External sources, if any:
+
+| Source | Claim supported | Link / citation |
+|---|---|---|
+| N/A | This task used local repo state only. | N/A |
+
+## 5. Residual Risk
+
+Known risk:
+
+| Risk | Impact | Mitigation / next check |
+|---|---|---|
+| `--from-diff` uses `git status --porcelain=v1` path parsing and does not deeply unescape exotic quoted paths. | Very unusual filenames may need manual adjustment in the generated evidence table. | Keep generated rows editable; add quoted-path parser later if a real case appears. |
+| Generated final gate still contains TODO rows by design. | `brain review` will warn until the gate is filled. | This is intentional; users/agents must complete evidence before claiming done. |
+| Worktree had unrelated config changes before this task. | Full tests cover current tree, but those files are not part of this implementation. | Final answer names them as untouched unrelated changes. |
+
+Checks not run:
+
+| Check | Reason not run | Consequence |
+|---|---|---|
+| Visual/browser QA | No frontend or visual artifact changed. | N/A |
+
+Do not claim done if:
+
+- [x] Required checks passed.
+- [x] Changed behavior was exercised by tests and CLI smoke.
+- [x] Final answer will mention residual risk and unrelated modified files.
+
+## 6. Change Summary Audit
+
+What changed:
+
+- `sanook brain final` can create full or lite final-gate notes in Sessions.
+- `--from-diff` can prefill changed-file evidence rows.
+- `brain review` validates session final gates.
+- `brain eval` includes `SB-FINAL`.
+- Second-brain docs/indexes/quality ledger/session state now point to the workflow.
+
+What did not change:
+
+- No broad template generator was added.
+- No automatic evidence completion was added.
+- Pre-existing `src/config.ts` and `src/config.test.ts` changes were not edited.
+
+Behavior before:
+
+- Final gate existed as a manual template only.
+- Review/eval did not know whether final gates existed or were complete.
+
+Behavior after:
+
+- Sanook can generate final-gate notes from CLI, smoke-tested through built `dist/bin.js`.
+- Review/eval can keep the final-gate workflow from drifting.
+
+Compatibility / migration notes:
+
+- Existing vaults without `Templates/final-lite.md` can still run the command because the generator falls back to bundled templates.
+
+## 7. Final Answer Draft
+
+```text
+ทำครบแล้วครับ: เพิ่ม `sanook brain final`, `--from-diff`, `--lite`, final-gate validator ใน `brain review`, และ `SB-FINAL` ใน `brain eval` พร้อม docs/templates/session closeout.
+
+Verified:
+- npm test -- src/brain-final.test.ts src/brain-review.test.ts src/brain-eval.test.ts src/brain.test.ts: PASS
+- npm run typecheck: PASS
+- npm test: PASS (102 files, 881 tests)
+- npm run build: PASS
+- git diff --check: PASS
+- built CLI smoke: PASS (`--from-diff` and `--lite`)
+
+Note:
+- `src/config.ts` และ `src/config.test.ts` เป็น modified อยู่ก่อนแล้ว ผมไม่ได้แตะสองไฟล์นี้
+```
+
+Final-answer safety check:
+
+- [x] Does not claim tests/build/smoke passed unless listed in Evidence Matrix.
+- [x] Names files/commands accurately.
+- [x] Mentions skipped checks or residual risk.
+- [x] Is concise enough for the owner.
+
+## 8. Second-Brain Routing / Memory Closeout
+
+Session / handoff:
+
+- [x] Added [[Sessions/2026-06-18-sanook-brain-final-cli]].
+- [x] Added this final gate note.
+- [x] Updated [[Sessions/_Index]].
+
+Durable memory:
+
+- [x] Updated [[Shared/Operating-State/current-state]].
+- [x] No new owner preference or protected fact discovered.
+
+Indexes / discoverability:
+
+- [x] Updated [[Templates/_Index]].
+- [x] Updated [[Shared/AI-Context-Index]].
+- [x] Updated [[Evals/quality-ledger]].
+- [x] Updated [[Evals/second-brain-benchmarks]].
+
+Quality loop:
+
+- [x] Added `SB-FINAL` eval case.
+- [x] Ran targeted tests, typecheck, full tests, build, diff check, and CLI smoke.
+
+## Final Verdict
+
+| Verdict | Choose one | Evidence |
+|---|---|---|
+| Ready to close | PASS | Tests, typecheck, build, diff check, and CLI smoke passed. |
+| Close with caveats | PASS | Residual risk around exotic git paths and intentionally unfilled generated gates is documented. |
+| Needs more work | N/A | No required item remains open. |
+| Blocked | N/A | No blocker. |
+
+One-line final state:
+
+> Ready to close: Sanook now has a CLI-backed final-gate workflow with diff prefill, lite template, review validation, eval coverage, and documented evidence.
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-sanook-brain-final-cli.md

@@ -0,0 +1,78 @@
+---
+tags: [session, session-log, sanook-cli, second-brain]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 - Sanook Brain Final CLI
+
+> Session log for turning the manual final-gate template into a Sanook CLI workflow with validation and eval coverage.
+
+## Summary
+
+- Added `sanook brain final [--task "..."] [--from-diff] [--lite]`.
+- Added [[Templates/final-lite]] for smaller evidence-backed closeouts.
+- Added final-gate validation to `sanook brain review`.
+- Added `SB-FINAL` coverage to `sanook brain eval`.
+- Verified with targeted tests, typecheck, full tests, build, diff check, and a temp-vault CLI smoke.
+
+## What Was Tried
+
+- Read the existing `brain context/eval/review` command pattern before adding a new subcommand.
+- Kept the generator pure/testable in `src/brain-final.ts`.
+- Used the existing Sessions folder as the canonical home for generated closeout notes.
+- Let `--from-diff` prefill changed files from `git status --porcelain=v1`.
+- Kept `brain review` non-blocking: incomplete final gates warn instead of failing the whole vault.
+
+## Errors
+
+- Initial typecheck failed because `CreateBrainFinalOptions` inherited required booleans from parsed CLI args even though runtime options are optional.
+
+## Solutions
+
+- Made `CreateBrainFinalOptions` explicitly optional for `fromDiff`, `lite`, `force`, `task`, and `output`.
+- Added tests for parser behavior, full/lite generation, overwrite protection, output path safety, and validator warnings.
+- Added a CLI smoke from `dist/bin.js` using a temp HOME and temp vault.
+
+## Key Decisions
+
+- Default output path is `Sessions/YYYY-MM-DD-<slug>-final.md`.
+- `--output` is confined inside the configured second-brain vault.
+- `--lite` uses the same eight final-gate section names so review/eval can share the same structural validator.
+- `brain review` checks session final gates only, while template files are checked structurally so scaffolded vaults do not fail because templates contain TODO placeholders.
+
+## Files Changed
+
+- `src/brain-final.ts`
+- `src/brain-final.test.ts`
+- `src/bin.ts`
+- `src/commands.ts`
+- `src/brain-review.ts`
+- `src/brain-review.test.ts`
+- `src/brain-eval.ts`
+- `src/brain-eval.test.ts`
+- `src/brain.test.ts`
+- `second-brain/Templates/final-lite.md`
+- `second-brain/Templates/_Index.md`
+- `second-brain/Shared/AI-Context-Index.md`
+- `second-brain/Shared/Tech-Standards/verification-standard.md`
+- `second-brain/Runbooks/ai-second-brain-operating-sequence.md`
+- `second-brain/Evals/second-brain-benchmarks.md`
+- `second-brain/Evals/quality-ledger.md`
+- `second-brain/Shared/Operating-State/current-state.md`
+- `CHANGELOG.md`
+
+Unrelated pre-existing changes left untouched:
+
+- `src/config.ts`
+- `src/config.test.ts`
+
+## Next Steps
+
+- Dogfood `sanook brain final --task "..." --from-diff` in future non-trivial Sanook CLI work.
+- Consider `sanook brain new TYPE` later if template instantiation becomes a broader workflow need.
+
+up:: [[Sessions/_Index]]

package/second-brain/Sessions/2026-06-18-sanook-cli-second-brain-roadmap-correction.md

@@ -0,0 +1,54 @@
+---
+tags: [session, session-log, sanook-cli, second-brain, correction]
+note_type: session-log
+created: 2026-06-18
+updated: 2026-06-18
+parent: "[[Sessions/_Index]]"
+ai_surface: history
+---
+
+# 2026-06-18 — Sanook CLI Second-Brain Roadmap Correction
+
+> Correction session after owner clarified that the target is Sanook CLI, not Hermes CLI. Captures the Sanook-native direction and leaves Hermes research as reference only.
+
+## Summary
+
+Reframed the previous Hermes-heavy research into a Sanook CLI roadmap. Sanook already has `brain init`, vault context injection, memory routing, index/search, and MCP serving, so the next useful work is CLI features: `brain doctor`, `brain context`, `brain eval`, and later `brain review`.
+
+## What Was Tried
+
+- Read `src/brain.ts`, `src/bin.ts`, `src/commands.ts`, `src/doctor.ts`, `src/knowledge.ts`, and `second-brain/SANOOK.md`.
+- Checked current command surface for `brain init`, `index`, `search`, MCP, and memory behavior.
+- Created a Sanook project workspace note under `Projects/sanook-cli/`.
+
+## Errors
+
+- Initial research over-weighted Hermes-specific implementation because the earlier wording mentioned Hermes CLI.
+
+## Solutions
+
+- Added [[Projects/sanook-cli/second-brain-feature-roadmap]] as the corrected implementation roadmap.
+- Left Hermes research as a compatibility reference, not the main next action.
+
+## Key Decisions
+
+- Do not add `HERMES.md` as the next step for this objective.
+- First Sanook-native slice should be `sanook brain doctor`.
+
+## Files Changed
+
+- `second-brain/Projects/_Index.md`
+- `second-brain/Projects/sanook-cli/_Index.md`
+- `second-brain/Projects/sanook-cli/second-brain-feature-roadmap.md`
+- `second-brain/Sessions/_Index.md`
+- `second-brain/Sessions/2026-06-18-sanook-cli-second-brain-roadmap-correction.md`
+- `second-brain/Shared/Operating-State/current-state.md`
+- `second-brain/Research/2026-06-18-hermes-cli-second-brain-expansion-research.md`
+
+## Next Steps
+
+- [ ] Implement `sanook brain doctor`.
+- [ ] Then implement `sanook brain context [--task]`.
+- [ ] Then implement `sanook brain eval`.
+
+up:: [[Sessions/_Index]]