wendkeep 0.68.6 → 0.70.0

package/hooks/observer-publish.mjs

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { pathToFileURL } from 'node:url';
+import { debugLog, readHookInput, resolveVault } from './obsidian-common.mjs';
+import { publishObserverSnapshot } from '../src/observer-publish.mjs';
+
+async function main() {
+  const input = readHookInput();
+  const resolved = resolveVault(input);
+  const result = await publishObserverSnapshot({
+    vaultBase: resolved.base,
+    projectRoot: resolved.projectRoot,
+  });
+  if (!result.ok && result.error) debugLog('Observer publish fail-open:', result.error);
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  main().catch((error) => {
+    debugLog('Observer hook falhou de forma fail-open:', error);
+    process.exitCode = 0;
+  });
+}

package/hooks/pricing.json

@@ -1,6 +1,6 @@
 {
   "_nota": "Preços API por milhão de tokens. cachedInput = cache read. Cache write aplica multiplicador no código: 5m = 1.25x input, 1h = 2x input. Editar aqui quando o provedor mudar preços (sem mexer no .mjs). Se o arquivo sumir ou ficar inválido, o hook usa a tabela embutida em token-usage.mjs.",
-  "_fonte": "OpenAI https://openai.com/index/gpt-5-6/ e https://help.openai.com/en/articles/20001325-a-preview-of-gpt-56-sol-terra-and-luna; Anthropic https://www.anthropic.com/pricing — conferido 2026-07-11",
+  "_fonte": "OpenAI https://openai.com/index/gpt-5-6/, https://openai.com/index/introducing-gpt-5-3-codex-spark/ e https://help.openai.com/en/articles/20001106-codex-rate-card; Anthropic https://www.anthropic.com/pricing — conferido 2026-08-16",
   "models": {
     "gpt-5.6-sol": { "label": "GPT-5.6 Sol API", "provider": "openai", "input": 5, "cachedInput": 0.5, "output": 30 },
     "gpt-5.6-terra": { "label": "GPT-5.6 Terra API", "provider": "openai", "input": 2.5, "cachedInput": 0.25, "output": 15 },
@@ -12,6 +12,15 @@
       "cachedInput": 0.5,
       "output": 30
     },
+    "gpt-5.3-codex-spark": {
+      "label": "GPT-5.3-Codex-Spark (research preview)",
+      "provider": "openai",
+      "pricingStatus": "research-preview",
+      "pricingNote": "Tarifa final não publicada; custo não estimado.",
+      "input": null,
+      "cachedInput": null,
+      "output": null
+    },
     "claude-opus-4.7": {
       "label": "Claude Opus 4.7 API",
       "provider": "anthropic",

package/hooks/session-ensure.mjs

@@ -36,11 +36,29 @@ import { resolveSessionIdentity } from './session-identity.mjs';
 import { readCodexRolloutMeta } from './codex-rollout-meta.mjs';
 import { mutateSessionNote } from './session-note-io.mjs';
 import { captureProjectScope, projectScopePatch } from './project-scope.mjs';
+import { sanitizeMemoryText } from './memory-schema.mjs';
 
 function sessionIdFromInput(input) {
   return input.session_id || input.sessionId || input.codex_session_id || '';
 }
 
+function workSessionIdFromInput(input = {}) {
+  const shared = input.shared || input.handoff?.shared;
+  const value = input.work_session_id
+    || input.workSessionId
+    || shared?.work_session_id
+    || shared?.workSessionId
+    || input.handoff?.work_session_id
+    || input.handoff?.workSessionId
+    || '';
+  return sanitizeMemoryText(value).trim();
+}
+
+function workSessionPatch(input = {}) {
+  const workSessionId = workSessionIdFromInput(input);
+  return workSessionId ? { work_session_id: workSessionId } : {};
+}
+
 function turnSequenceFromInput(input = {}) {
   const value = input.turn_sequence ?? input.turnSequence;
   const parsed = Number(value);
@@ -290,6 +308,7 @@ function activateExistingSession({ vaultBase, relPath, startedAt, sessionId, inp
     transcript_path: identity.transcriptPath,
     transcript_id: identity.transcriptId,
     provider: identity.provider,
+    ...workSessionPatch(input),
     ...scopePatch,
     ...causalTurnPatch(input, now),
   });
@@ -318,6 +337,7 @@ function createSession({ vaultBase, sessionId, input, now, identity, scopePatch
     transcript_path: identity.transcriptPath,
     transcript_id: identity.transcriptId,
     provider: identity.provider,
+    ...workSessionPatch(input),
     ...scopePatch,
     ...causalTurnPatch(input, now),
   });
@@ -361,6 +381,7 @@ function main() {
       upsertSessionRegistry(vaultBase, sessionId, {
         transcript_paths: [identity.transcriptPath],
         provider: identity.provider,
+        ...workSessionPatch(input),
       });
     }
     writeHookOutput({});
@@ -398,6 +419,7 @@ function main() {
           transcript_path: identity.transcriptPath,
           transcript_id: identity.transcriptId,
           provider: identity.provider,
+          ...workSessionPatch(input),
           ...scopePatch,
           ...causalTurnPatch(input, now),
         });
@@ -443,6 +465,7 @@ function main() {
         transcript_path: identity.transcriptPath,
         transcript_id: identity.transcriptId,
         provider: identity.provider,
+        ...workSessionPatch(input),
         ...scopePatch,
         ...causalTurnPatch(input, now),
       });

package/hooks/session-identity.mjs

@@ -65,8 +65,10 @@ export function resolveSessionIdentity(vaultBase, input = {}, provider = detectP
 export function resolveSessionEntry(vaultBase, input = {}, provider = detectProvider()) {
   const identity = resolveSessionIdentity(vaultBase, input, provider);
   if (identity.state !== 'resolved') return { identity, entry: null };
+  const entry = readSessionRegistry(vaultBase).sessions?.[identity.canonicalConversationId] || null;
+  const workSessionId = entry?.work_session_id ? String(entry.work_session_id) : '';
   return {
-    identity,
-    entry: readSessionRegistry(vaultBase).sessions?.[identity.canonicalConversationId] || null,
+    identity: workSessionId ? { ...identity, work_session_id: workSessionId } : identity,
+    entry,
   };
 }

package/hooks/session-stop.mjs

@@ -521,6 +521,21 @@ function shouldFinalizeSession() {
   return process.env.OBSIDIAN_NO_AUTO_FINALIZE !== '1';
 }
 
+function sharedHandoffFromInput(input = {}, entry = {}) {
+  const supplied = input.shared || input.handoff?.shared;
+  const shared = supplied && typeof supplied === 'object' && !Array.isArray(supplied)
+    ? { ...supplied }
+    : {};
+  const workSessionId = shared.work_session_id
+    || shared.workSessionId
+    || input.work_session_id
+    || input.workSessionId
+    || entry?.work_session_id
+    || '';
+  if (!shared.work_session_id && workSessionId) shared.work_session_id = workSessionId;
+  return Object.keys(shared).length ? shared : null;
+}
+
 export function commitSessionMemory(vaultBase, handoff, { projectOptions = {} } = {}) {
   if (detectMemoryMode(vaultBase).mode === 'legacy') {
     return { status: 'legacy', eventCount: 0, eventIds: [], checkpoint: null };
@@ -1378,6 +1393,7 @@ export async function main({
       summary: finalSummary,
       noteRel: sessionRel,
     });
+    const sharedHandoff = sharedHandoffFromInput(input, entry);
     memoryHandoff = {
       projectId,
       identity,
@@ -1390,6 +1406,7 @@ export async function main({
       observedAt: turnIdentity.observedAt || new Date(0).toISOString(),
       summary: finalSummary,
       evidence: memoryEvidence,
+      ...(sharedHandoff ? { shared: sharedHandoff } : {}),
     };
     memoryAttempt = stageMemory(vaultBase, {
       handoff: memoryHandoff,

package/hooks/token-usage.mjs

@@ -30,6 +30,15 @@ const DEFAULT_PRICE_REFERENCE = {
   'gpt-5.6-sol': { label: 'GPT-5.6 Sol API', provider: 'openai', input: 5, cachedInput: 0.5, output: 30 },
   'gpt-5.6-terra': { label: 'GPT-5.6 Terra API', provider: 'openai', input: 2.5, cachedInput: 0.25, output: 15 },
   'gpt-5.6-luna': { label: 'GPT-5.6 Luna API', provider: 'openai', input: 1, cachedInput: 0.1, output: 6 },
+  'gpt-5.3-codex-spark': {
+    label: 'GPT-5.3-Codex-Spark (research preview)',
+    provider: 'openai',
+    pricingStatus: 'research-preview',
+    pricingNote: 'Tarifa final não publicada; custo não estimado.',
+    input: null,
+    cachedInput: null,
+    output: null,
+  },
   'gpt-5.5': {
     label: 'GPT-5.5 API',
     provider: 'openai',
@@ -122,6 +131,10 @@ const MODEL_ALIASES = {
   'gpt-5.3-codex': 'gpt-5.5',
   'gpt-5.3': 'gpt-5.5',
   'openai/gpt-5.4': 'gpt-5.5',
+  'gpt-5.3-codex-spark': 'gpt-5.3-codex-spark',
+  'gpt-5-3-codex-spark': 'gpt-5.3-codex-spark',
+  'openai/gpt-5.3-codex-spark': 'gpt-5.3-codex-spark',
+  'openai/gpt-5-3-codex-spark': 'gpt-5.3-codex-spark',
   'claude-opus-4.7': 'claude-opus-4.7',
   'claude-opus-4-7': 'claude-opus-4.7',
   'anthropic/claude-opus-4.7': 'claude-opus-4.7',

package/hooks/vault-health.mjs

@@ -231,6 +231,12 @@ function memoryMetrics() {
     pendingOutbox: 0,
     candidates: 0,
     activeConflicts: 0,
+    semanticStatus: null,
+    semanticCode: null,
+    semanticActiveKeys: [],
+    semanticProjectedKeys: [],
+    semanticMissingKeys: [],
+    semanticCounts: {},
   };
 }
 
@@ -505,6 +511,7 @@ export function checkMemoryBundle(vaultBase, { registry } = {}) {
   for (const warning of bundle.warnings || []) warnings.push(warning);
 
   const ok = failures.length === 0;
+  const semantic = bundle.semantic || {};
   return {
     ok,
     status: ok ? (warnings.length ? 'warning' : 'healthy') : 'blocked',
@@ -519,6 +526,12 @@ export function checkMemoryBundle(vaultBase, { registry } = {}) {
       pendingOutbox: outbox.count,
       candidates: candidates.items.length,
       activeConflicts: activeConflicts.length,
+      semanticStatus: semantic.status ?? null,
+      semanticCode: semantic.code ?? null,
+      semanticActiveKeys: semantic.activeKeys || [],
+      semanticProjectedKeys: semantic.projectedKeys || [],
+      semanticMissingKeys: semantic.missingKeys || [],
+      semanticCounts: semantic.counts || {},
     },
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wendkeep",
-  "version": "0.68.6",
+  "version": "0.70.0",
   "description": "Vault-first persistent memory for AI coding agents, with an optional profile-aware governance runtime: OFF, FLOW, GUIDE, GOVERN, or ASSURE. Local-first and agent-agnostic (Claude Code, Codex, Cursor…).",
   "type": "module",
   "workspaces": [
@@ -40,7 +40,7 @@
     "node": ">=18"
   },
   "scripts": {
-    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/project-vault.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
+    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/project-vault.mjs && node --check src/observer-snapshot.mjs && node --check src/observer-store.mjs && node --check src/observer-server.mjs && node --check src/observer.mjs && node --check src/observer-publish.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check hooks/observer-publish.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
     "test": "node --test --test-concurrency=2",
     "release": "node scripts/release.mjs",
     "release:dry": "node scripts/release.mjs --dry-run",
@@ -70,6 +70,6 @@
   },
   "devDependencies": {
     "acorn": "^8.18.0",
-    "wendkeep": "^0.68.0"
+    "wendkeep": "^0.69.0"
   }
 }

package/packages/cli/src/index.mjs

@@ -49,6 +49,7 @@ Usage:
                            cannot replace itself. · --vault P · --profile <name> · --yes.
 
   wendkeep doctor [--vault P]  Run a vault health check.
+  wendkeep observer <sub>     Local multi-project Observer: serve | register | publish | status.
   wendkeep change <sub>        Change lifecycle: new [--simple] | use | bind <slug> --session <id> | continue | list | show |
                            status | done <id> | undone <id> | diff | archive [--force] | abandon | relink | backlink.
                            archive exige verdict (rode verify --deep); abandon descarta sem ADR.
@@ -107,7 +108,7 @@ Usage:
                            promote <candidate> [--event <event-id>] | reject <candidate>. --vault P.
                            Reconcile is dry-run by default; the original attempt remains audited.
   wendkeep validate-memory [path]  Validate .brain/CORE.md against the compaction
-                           protocol (cap 25, 3 sections, no secrets/PII).
+                           protocol (cap 40, warning 35, 4 KiB, 320 chars/line, 3 sections, no secrets/PII).
                            --vault <path> validates the complete v2 bundle.
   wendkeep sync-defs [opts]    Copy versioned defs from the vault's .brain into the
                            project: .brain/agents/*.toml -> .codex/agents,
@@ -199,7 +200,7 @@ async function main(argv) {
     // `sync` starts with `init` and resolves the freshly bound Vault itself. Pre-resolving
     // here would prevent that repair step from reporting a corrupt binding as its own
     // first-stage failure (and could never make it as far as the guarded init).
-    && !['init', 'sync', 'hook', '--version', '-v', '--help', '-h', 'help'].includes(cmd)) {
+    && !['init', 'sync', 'hook', 'observer', '--version', '-v', '--help', '-h', 'help'].includes(cmd)) {
     await preferProjectVault(rest);
   }
   switch (cmd) {
@@ -216,6 +217,12 @@ async function main(argv) {
       process.exit(runDoctor(rest));
       break;
     }
+    case 'observer': {
+      const { runObserver } = await import('../../../src/observer.mjs');
+      const observerExitCode = await runObserver(rest);
+      if (rest[0] !== 'serve') process.exit(observerExitCode);
+      break;
+    }
     case 'sync': {
       const { runSync } = await import('../../../src/sync.mjs');
       process.exit(await runSync(rest));

package/packages/integrations/src/host-hooks.mjs

@@ -13,7 +13,11 @@ export const SESSION_HOOKS = [
   // memory injection for the whole session.
   { event: 'SessionStart', matcher: 'startup|clear|compact', name: 'brain-inject', timeout: 45, order: -10, codex: true, statusMessage: 'wendkeep: injecting memory + active change' },
   { event: 'SessionStart', matcher: 'startup', name: 'session-start', timeout: 30, codex: true, statusMessage: 'wendkeep: opening Obsidian session' },
+  // Observer publication is a derived, fail-open projection and therefore runs only after
+  // the local lifecycle hook has written its authoritative session state.
+  { event: 'SessionStart', matcher: 'startup|resume|clear|compact', name: 'observer-publish', timeout: 5, order: 20, codex: true, statusMessage: 'wendkeep: publishing local observer snapshot' },
   { event: 'Stop', matcher: null, name: 'session-stop', timeout: 60, codex: true, statusMessage: 'wendkeep: writing session checkpoint' },
+  { event: 'Stop', matcher: null, name: 'observer-publish', timeout: 5, order: 20, codex: true, statusMessage: 'wendkeep: publishing local observer snapshot' },
   { event: 'UserPromptSubmit', matcher: null, name: 'session-ensure', timeout: 30, codex: true, statusMessage: 'wendkeep: ensuring active session' },
   // Capture an interactive decision (AskUserQuestion) — options + the user's choice — into 04-Decisões.
   // codex: AskUserQuestion is a Claude-only tool; there is nothing to match on.

package/packages/vault/src/memory-handoff.mjs

@@ -4,12 +4,55 @@ import { basename, join, relative } from 'node:path';
 
 import { sanitizeMemoryText } from './memory-schema.mjs';
 
+const SHARED_HANDOFF_FIELDS = Object.freeze([
+  ['objective', 'objective.current'],
+  ['delivered', 'state.delivered'],
+  ['constraints', 'constraint.active'],
+  ['decisions', 'decision.active'],
+  ['next_actions', 'next.action'],
+  ['blockers', 'blocker.active'],
+  ['risks', 'risk.known'],
+]);
+
 function canonicalValue(value) {
   if (Array.isArray(value)) return value.map(canonicalValue);
   if (!value || typeof value !== 'object') return value;
   return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalValue(value[key])]));
 }
 
+function sanitizeValue(value) {
+  if (typeof value === 'string') return sanitizeMemoryText(value);
+  if (Array.isArray(value)) return value.map(sanitizeValue);
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, sanitizeValue(value[key])]));
+  }
+  return value;
+}
+
+function hasMeaningfulValue(value) {
+  if (typeof value === 'string') return value.trim().length > 0;
+  if (Array.isArray(value)) return value.length > 0;
+  if (value && typeof value === 'object') return Object.keys(value).length > 0;
+  return value !== undefined && value !== null;
+}
+
+/** Normalize the portable operational handoff without inventing missing identity. */
+export function normalizeSharedHandoff(shared) {
+  if (!shared || typeof shared !== 'object' || Array.isArray(shared)) return null;
+
+  const normalized = {};
+  const workSessionId = sanitizeMemoryText(shared.work_session_id ?? shared.workSessionId ?? '').trim();
+  if (workSessionId) normalized.work_session_id = workSessionId;
+
+  for (const [field] of SHARED_HANDOFF_FIELDS) {
+    if (!Object.hasOwn(shared, field)) continue;
+    const value = sanitizeValue(shared[field]);
+    if (hasMeaningfulValue(value)) normalized[field] = value;
+  }
+
+  return Object.keys(normalized).length ? normalized : null;
+}
+
 function eventId(context, memoryKey, value) {
   const digest = createHash('sha256')
     .update(JSON.stringify([
@@ -26,8 +69,8 @@ function eventId(context, memoryKey, value) {
 }
 
 function makeEvent(context, { memoryKey, value, authority, evidence }) {
-  const cleanValue = typeof value === 'string' ? sanitizeMemoryText(value) : canonicalValue(value);
-  return {
+  const cleanValue = sanitizeValue(value);
+  const event = {
     v: 1,
     event_id: eventId(context, memoryKey, cleanValue),
     project_id: String(context.projectId || ''),
@@ -43,6 +86,8 @@ function makeEvent(context, { memoryKey, value, authority, evidence }) {
     observed_at: context.observedAt,
     evidence: (evidence || []).filter(Boolean).map((item) => sanitizeMemoryText(item)),
   };
+  if (context.workSessionId) event.work_session_id = context.workSessionId;
+  return event;
 }
 
 function readJson(path) {
@@ -133,14 +178,35 @@ export function buildSessionMemoryEvents({
   observedAt,
   summary,
   evidence = {},
+  shared,
 }) {
-  const context = { projectId, identity, activation, turn, observedAt };
-  const events = [makeEvent(context, {
-    memoryKey: 'handoff.latest',
-    value: sanitizeMemoryText(summary),
-    authority: 'reported',
-    evidence: [noteRel],
-  })];
+  const normalizedShared = normalizeSharedHandoff(shared);
+  const context = {
+    projectId, identity, activation, turn, observedAt,
+    workSessionId: normalizedShared?.work_session_id || '',
+  };
+  const events = [];
+
+  if (normalizedShared) {
+    for (const [field, memoryKey] of SHARED_HANDOFF_FIELDS) {
+      if (!Object.hasOwn(normalizedShared, field)) continue;
+      events.push(makeEvent(context, {
+        memoryKey,
+        value: normalizedShared[field],
+        authority: 'reported',
+        evidence: [noteRel],
+      }));
+    }
+  }
+
+  if (!events.length) {
+    events.push(makeEvent(context, {
+      memoryKey: 'handoff.latest',
+      value: sanitizeMemoryText(summary),
+      authority: 'reported',
+      evidence: [noteRel],
+    }));
+  }
 
   if (evidence.change?.slug && evidence.change?.status && evidence.change?.adr) {
     events.push(makeEvent(context, {

package/packages/vault/src/memory-store.mjs

@@ -437,6 +437,29 @@ function conflictCandidate(memoryKey, events, currentEvent = null) {
   };
 }
 
+function conflictReviewEvent(candidate, candidateCount = 1) {
+  const source = candidate.events?.[0] || {};
+  const memoryKey = sanitizeMemoryText(candidate.memory_key || 'unknown');
+  const eventCount = Array.isArray(candidate.event_ids) ? candidate.event_ids.length : 0;
+  return {
+    v: 1,
+    event_id: `mem-review-${candidate.candidate_id}`,
+    project_id: source.project_id || '',
+    memory_key: candidate.memory_key,
+    operation: 'assert',
+    value: `[revisão pendente: ${memoryKey}; candidates: ${candidateCount}; events: ${eventCount}]`,
+    authority: 'candidate',
+    canonical_session_id: source.canonical_session_id || 'memory-reducer',
+    activation_id: source.activation_id || 'memory-reducer',
+    activation_epoch: Number.isInteger(source.activation_epoch) ? source.activation_epoch : 0,
+    turn_sequence: 0,
+    source_turn_id: 'memory-review',
+    observed_at: source.observed_at || new Date(0).toISOString(),
+    evidence: ['MEMORY_CANDIDATES.jsonl'],
+    review_pending: true,
+  };
+}
+
 function sortedObject(entries) {
   return Object.fromEntries([...entries].sort(([left], [right]) => left.localeCompare(right)));
 }
@@ -753,14 +776,19 @@ export function reduceMemoryEvents(inputEvents = [], {
       && !resolvedCandidateIds.has(item.candidate_id));
   unresolvedCandidates.sort((left, right) => left.candidate_id.localeCompare(right.candidate_id));
   superseded.sort((left, right) => left.event_id.localeCompare(right.event_id));
-  const activeEvents = Object.entries(recordObject).map(([memoryKey, record]) => ({
-    ...record.source,
-    memory_key: memoryKey,
-    operation: 'assert',
-    value: record.value,
-  }));
   const eventCursor = events.at(-1)?.event_id || 'none';
   const stateHash = hashMemoryValue({ state, tombstones: tombstoneObject });
+  const activeEvents = [
+    ...Object.entries(recordObject).map(([memoryKey, record]) => ({
+      ...record.source,
+      memory_key: memoryKey,
+      operation: 'assert',
+      value: record.value,
+    })),
+    ...unresolvedCandidates.map((candidate) => (
+      conflictReviewEvent(candidate, unresolvedCandidates.length)
+    )),
+  ];
 
   return {
     state,

package/packages/vault/src/validate-core.mjs

@@ -1,6 +1,7 @@
 // Memory-compaction protocol for the curated .brain/CORE.md layer.
 // Ported from NutriGym-Vision's scripts/validate-brain-core.js to ESM:
-//   - cap 25 lines (hard), 22 (soft warning) — 1 durable item per line
+//   - cap 40 lines (hard), 35 (soft warning) — 1 durable item per line
+//   - 4 KiB and 320 characters per line
 //   - 3 required sections
 //   - no secrets / no real-provider PII emails
 // Plus the seeded skeleton and the protocol reference doc.
@@ -8,8 +9,12 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { isAbsolute, join, resolve } from 'node:path';
 
-const HARD_LIMIT = 25;
-const SOFT_LIMIT = 22;
+export const CORE_LIMITS = Object.freeze({
+  lines: 40,
+  warningLines: 35,
+  bytes: 4 * 1024,
+  lineChars: 320,
+});
 
 // Bilingual (0.8.0): a CORE is valid when it carries the COMPLETE section set of either
 // locale — pt-BR or en. Mixed/partial sets fail (the 3 sections are one contract).
@@ -40,16 +45,25 @@ const SECRET_PATTERNS = [
 
 const PII_EMAIL_REGEX = /\b[A-Za-z0-9._%+-]+@(?!example\.(?:com|org|net)\b)(?:gmail|hotmail|yahoo|outlook|live|icloud|protonmail)\.[A-Za-z]{2,}\b/i;
 
-// Validate CORE.md content. Returns { ok, errors, warnings, lineCount }.
+// Validate CORE.md content. Returns { ok, errors, warnings, lineCount, byteCount }.
 export function validateCore(content) {
   const text = String(content ?? '');
   const lines = text.split('\n');
   const lineCount = text.endsWith('\n') ? lines.length - 1 : lines.length;
+  const byteCount = Buffer.byteLength(text, 'utf8');
   const errors = [];
 
-  if (lineCount > HARD_LIMIT) {
-    errors.push(`Tamanho ${lineCount} > ${HARD_LIMIT} linhas (hard limit). Curar: remover itens resolvidos (detalhe vive no vault/git).`);
+  if (lineCount > CORE_LIMITS.lines) {
+    errors.push(`Tamanho ${lineCount} > ${CORE_LIMITS.lines} linhas (hard limit). Curar: remover itens resolvidos (detalhe vive no vault/git).`);
   }
+  if (byteCount > CORE_LIMITS.bytes) {
+    errors.push(`Tamanho ${byteCount} > ${CORE_LIMITS.bytes} bytes (budget do CORE). Curar: manter apenas estado durável.`);
+  }
+  lines.forEach((line, index) => {
+    if (line.length > CORE_LIMITS.lineChars) {
+      errors.push(`Linha ${index + 1} tem ${line.length} caracteres; limite ${CORE_LIMITS.lineChars}.`);
+    }
+  });
   // Pick the locale set that matches best; require it to be complete.
   const missingBySet = Object.values(SECTION_SETS).map((set) => set.filter(({ regex }) => !regex.test(text)));
   const best = missingBySet.reduce((a, b) => (b.length < a.length ? b : a));
@@ -62,11 +76,11 @@ export function validateCore(content) {
   if (em) errors.push(`Email real detectado: "${em[0]}" — usar user@example.com.`);
 
   const warnings = [];
-  if (lineCount >= SOFT_LIMIT && lineCount <= HARD_LIMIT) {
-    warnings.push(`Tamanho ${lineCount}/${HARD_LIMIT} linhas — perto do limite; remover itens resolvidos (≥${SOFT_LIMIT}).`);
+  if (lineCount >= CORE_LIMITS.warningLines && lineCount <= CORE_LIMITS.lines) {
+    warnings.push(`Tamanho ${lineCount}/${CORE_LIMITS.lines} linhas — perto do limite; remover itens resolvidos (≥${CORE_LIMITS.warningLines}).`);
   }
 
-  return { ok: errors.length === 0, errors, warnings, lineCount };
+  return { ok: errors.length === 0, errors, warnings, lineCount, byteCount };
 }
 
 // The seeded CORE.md (must pass validateCore). Bootstraps the 3 sections so the
@@ -75,7 +89,7 @@ export function renderCoreSkeleton(localeId = 'pt-BR') {
   if (localeId === 'en') {
     return `# CORE — curated memory core (.brain)
 
-> RULE #1 — the project's canonical memory. Hand-curated, 25-line cap (validate: \`wendkeep validate-memory\`). Volatile facts live in DIGEST.md (auto). Depth: /brain-recall <topic>.
+> RULE #1 — the project's canonical memory. Hand-curated, 40-line cap (validate: \`wendkeep validate-memory\`). Volatile facts live in DIGEST.md (auto). Depth: /brain-recall <topic>.
 
 ## User Preferences
 - (durable preferences: language, style, conventions)
@@ -89,7 +103,7 @@ export function renderCoreSkeleton(localeId = 'pt-BR') {
   }
   return `# CORE — núcleo curado da memória (.brain)
 
-> REGRA #1 — memória canônica do projeto. Curado à mão, cap 25 linhas (valide: \`wendkeep validate-memory\`). Volátil vive no DIGEST.md (auto). Profundidade: /brain-recall <tópico>.
+> REGRA #1 — memória canônica do projeto. Curado à mão, cap 40 linhas (valide: \`wendkeep validate-memory\`). Volátil vive no DIGEST.md (auto). Profundidade: /brain-recall <tópico>.
 
 ## Preferências do Usuário
 - (preferências duráveis: idioma, estilo, convenções)
@@ -110,8 +124,8 @@ export function renderCompactionProtocol() {
 
 ## 1. Duas camadas
 
-- **QUENTE** (auto-injetada por sessão, budget ~45 linhas):
-  - \`.brain/CORE.md\` — curado à mão, **≤25 linhas** (1 item/linha): preferências, padrões, pendências.
+- **QUENTE** (auto-injetada por sessão, com budgets por camada):
+  - \`.brain/CORE.md\` — curado à mão, **≤40 linhas** (alerta em 35; 4 KiB; 320 caracteres por linha): preferências, padrões, pendências.
   - \`.brain/DIGEST.md\` — auto-gerado (0 token LLM, ≤15 linhas): decisões/sessões/bugs/aprendizados recentes.
 - **FRIA** (sob demanda):
   - \`.brain/index.jsonl\` — índice de todas as sessões (1/linha, frontmatter).
@@ -120,7 +134,7 @@ export function renderCompactionProtocol() {
 ## 2. Compactação = regra de geração (sem trabalho manual)
 
 - **DIGEST se auto-compacta**: caps determinísticos (5 decisões, 4 sessões, 2 bugs, 2 aprendizados + \`+N mais\`). O velho cai do quente sozinho e permanece no índice/vault. **NUNCA editar** \`DIGEST.md\`/\`index.jsonl\`.
-- **CORE**: quando ≥22 linhas (soft warning), remover itens resolvidos/obsoletos — o detalhe já vive no vault e no histórico do git.
+- **CORE**: quando ≥35 linhas (soft warning), remover itens resolvidos/obsoletos — o detalhe já vive no vault e no histórico do git.
 
 ## 3. O que escrever no CORE
 
@@ -139,7 +153,7 @@ wendkeep validate-memory          # valida <vault>/.brain/CORE.md
 wendkeep validate-memory <path>   # valida outro arquivo
 \`\`\`
 
-Checa: cap 25 (soft 22), 3 seções, sem segredos/PII. Exit 0 = OK, 1 = falha.
+Checa: cap 40 (soft 35), 4 KiB, 320 caracteres por linha, 3 seções, sem segredos/PII. Exit 0 = OK, 1 = falha.
 `;
 }