wendkeep 0.72.0 → 0.72.1

package/CHANGELOG.md

@@ -4,6 +4,39 @@ All notable changes to **wendkeep** are documented here. Format based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this project follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.72.1] — 2026-08-20
+
+### Added
+
+- **Proveniência verificável de release.** A publicação gera um receipt com commit, versão, tag,
+  integridade npm, execução do workflow e GitHub Release, e recusa divergências entre o SHA testado,
+  a tag e o tarball publicado.
+- **Contrato seguro do Observer.** O Keep Core permanece em Node.js 18+, enquanto comandos SQL
+  diagnosticam `WENDKEEP_OBSERVER_NODE_UNSUPPORTED` abaixo do Node.js 22.13. Mutações exigem Bearer,
+  non-loopback exige token e requisições validam Host e Origin.
+- **Níveis de captura.** `metadata` é o padrão sem mensagens; `messages` e `full-transcript` são
+  opt-in. Caminhos absolutos não são publicados e init recomenda ignorar state e outbox SQL.
+
+### Changed
+
+- **Release somente após CI verde.** O workflow publica o SHA aprovado pela matriz Core (Node 18/20)
+  e Observer (Node 22.13/24), cria a tag no mesmo commit e pode reconciliar execuções repetidas.
+- **Dogfooding pelo working tree.** O repositório não depende mais de `wendkeep` em devDependencies;
+  seus hooks chamam `node ./bin/wendkeep.mjs`, enquanto projetos consumidores usam
+  `npx --no-install wendkeep` e o tarball continua testado isoladamente.
+
+### Fixed
+
+- **Identidade de arquivos de memória no Windows.** A revalidação compara o índice do arquivo como
+  inteiro exato e tolera a inconsistência conhecida do serial de volume do libuv antigo, evitando
+  falsos `VAULT_PATH_UNSAFE` no Node.js 22.13 sem relaxar a rejeição de hardlinks ou reparses.
+- **Ingestão SQL grande em runners lentos.** O timeout HTTP cresce com o tamanho bruto do lote até
+  120 segundos, preservando 15 segundos para payloads vazios/pequenos e evitando outbox falsa para
+  lotes gzip válidos acima de 64 MB.
+- **Trusted Publisher preservado após o gate de CI.** `auto-tag.yml`, o workflow já autorizado no
+  npm, passa a executar a matriz da `main` e mantém o publish em um job com `needs: test`;
+  `test.yml` fica exclusivo para pull requests.
+
 ## [0.72.0] — 2026-08-17
 
 ### Added
@@ -1029,7 +1062,7 @@ All notable changes to **wendkeep** are documented here. Format based on
   enum de eventos de hook do Codex.
 - A projeção Codex tem três diferenças em relação ao formato do `settings.json`, todas
   **silenciosas quando erradas** — daí valerem registro. (1) A chave de timeout é `timeoutSec`,
-  não `timeout`. (2) O comando é sempre `npx wendkeep hook <nome>`, nunca a forma node-direta:
+  não `timeout`. (2) O comando é sempre `npx --no-install wendkeep hook <nome>`, nunca a forma node-direta:
   aquela emite `${CLAUDE_PROJECT_DIR}`, que não existe no Codex, então a flag `preferLocal` é
   ignorada de propósito na projeção. (3) As chaves de evento são PascalCase — o snake_case que
   se vê em `[hooks.state]` no `~/.codex/config.toml` é o rótulo interno do evento, não a chave
@@ -1613,7 +1646,7 @@ they only read + append.
 
 ### Note
 - You do **not** need `wendkeep init` for a routine update: the hooks live in the package
-  (`settings.json` calls `npx wendkeep hook …`), so `npm i -D wendkeep@latest` updates them.
+  (`settings.json` calls `npx --no-install wendkeep hook …`), so `npm i -D wendkeep@latest` updates them.
   Re-run `init` only when a release adds new wiring (the CHANGELOG says so); it's idempotent.
 
 ## [0.26.0] — 2026-07-08
@@ -1793,7 +1826,7 @@ Fix: memory + active-change injection wired by default.
 
 ### Upgrade
 - Existing installs pick it up by re-running `wendkeep init --force` (idempotent — it only adds the
-  missing hook), or by adding `npx wendkeep hook brain-inject` to the SessionStart hooks manually.
+  missing hook), or by adding `npx --no-install wendkeep hook brain-inject` to the SessionStart hooks manually.
 
 ## [0.18.0] — 2026-07-06
 

package/docs/en/commands/observer.md

@@ -6,7 +6,7 @@
 
 The Observer consolidates observability for multiple WendKeep projects in a local service. The
 Docker volume keeps `/data/observer.sqlite` as the single authority for documents, sessions,
-agents, usage, calls, and complete transcripts. The content can be browsed and searched in the
+agents, usage, and calls. Complete transcripts are optional and require explicit capture. The content can be browsed and searched in the
 container without depending on Obsidian for queries.
 
 ## When to use
@@ -24,8 +24,9 @@ WendKeep hooks.
 
 ## Prerequisites
 
-Initialize projects with WendKeep and explicitly register each project before starting the HTTP
-server. The default local mode has no token to configure.
+Use Node.js 22.13 or newer for the SQL Observer. Keep Core and the remaining commands continue to
+support Node.js 18 or newer. Explicitly register each project and set `WENDKEEP_OBSERVER_TOKEN`;
+loopback reads remain open, while every mutation requires a Bearer token.
 
 ## Syntax
 
@@ -33,8 +34,8 @@ server. The default local mode has no token to configure.
 npx wendkeep observer status --data-dir <directory> --json
 npx wendkeep observer register --project <project> --vault <vault> --data-dir <directory>
 npx wendkeep observer publish --project <project> --vault <vault> --data-dir <directory>
-npx wendkeep observer memory import --project <project> --vault <vault> --url http://127.0.0.1:8787 --json
-npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <directory>
+npx wendkeep observer memory import --project <project> --vault <vault> --url http://127.0.0.1:8787 --token <token> --json
+npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <directory> --token <token>
 ```
 
 ## Options and exit codes
@@ -44,8 +45,9 @@ npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <directory>
 - `--project` and `--vault` identify a project for `register`, `publish`, and `memory import`.
 - `--host` accepts only `127.0.0.1`, `localhost`, or `::1`; other hosts are rejected before
   listening.
-- `/v1` is open in the default local mode; keep `--host 127.0.0.1` and do not publish the port on
-  a network address.
+- `--token` or `WENDKEEP_OBSERVER_TOKEN` authenticates mutations; `--allow-non-loopback` fails without one.
+- `WENDKEEP_OBSERVER_CAPTURE_LEVEL` accepts `metadata` (default, no messages), `messages`, or
+  `full-transcript`. Absolute local paths are never published.
 - Exit `0` means success; exit `1` means configuration or operation failure; the publisher hook
   also returns `0` when the Observer is unavailable.
 
@@ -53,7 +55,8 @@ npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <directory>
 
 ```powershell
 npx wendkeep observer register --project C:\GitHub\WendKeep --vault C:\GitHub\WendKeep\.WendKeep-vault --data-dir C:\WendKeepObserver
-npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir C:\WendKeepObserver
+$env:WENDKEEP_OBSERVER_TOKEN = '<strong-local-token>'
+npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir C:\WendKeepObserver --token $env:WENDKEEP_OBSERVER_TOKEN
 $env:WENDKEEP_OBSERVER_URL = 'http://127.0.0.1:8787'
 ```
 
@@ -66,14 +69,14 @@ docker compose -f docker/wendkeep-observer/compose.yaml up -d --build
 ## Local web dashboard
 
 With the server running, open [http://127.0.0.1:8787/](http://127.0.0.1:8787/) in a browser. The
-dashboard is served by the same process and opens directly, without a form or token. Keep the port
+dashboard is served by the same process and opens directly for reads, without a form or token. Keep the port
 bound to the computer loopback; do not expose this address on a network interface.
 
 The dashboard shows the multi-project list, version, health, latest session, active change, change
 count, and last capture time. Opening a project exposes Overview, Consumption, Sessions, Memory,
 Changes, and Sync screens. Consumption shows total cost, token categories, primary agents,
 subagents, providers, models, daily trend, historical coverage, and calls with prompt, response,
-and complete transcript. Loading, empty, unavailable-server, conflict, no-pricing, and stale-data
+and transcript content according to the selected capture level. Loading, empty, unavailable-server, conflict, no-pricing, and stale-data
 states are visible, with manual refresh and an automatic 15-second refresh.
 
 If the browser shows the shell but the list fails, check the service health at
@@ -84,7 +87,8 @@ If the browser shows the shell but the list fails, check the service health at
 `register` stores `project_id`, name, version, and registration time. `publish` reads the local
 vault, produces the snapshot, and sends idempotent events to SQLite containing the complete content
 of sessions, decisions, bugs, learnings, specs, changes, CORE, DIGEST, SHARED_MEMORY, brain state,
-agent sessions, cost rollups, calls, and transcripts. The container stores everything in
+agent sessions, cost rollups, and calls. Messages and transcripts are only sent by capture levels
+that explicitly enable them. The container stores everything in
 `/data/observer.sqlite`; it does not mount `C:\GitHub` or any `.WendKeep-vault`. Markdown is only
 the text held in SQL and is recreated as files only by an explicit read-only export.
 `memory import` performs the initial load and returns file/hash parity. During migration, the
@@ -104,7 +108,9 @@ outbox is temporary transport, not authority.
 - `project_not_registered`: run `observer register` before publishing.
 - `host loopback`: replace `0.0.0.0` or a LAN address with `127.0.0.1`.
 - Pending outbox: the service was unavailable; preserve `.brain/observer-outbox/` and
-  `.brain/observer-sql-outbox/`, then rerun the publisher. Do not delete events manually.
+  `.brain/observer-sql-outbox/`, then rerun the publisher. Also ignore
+  `.brain/observer-sql-state.json` and `.brain/observer-sql-outbox/` in a versioned vault. Do not delete events manually.
+- `WENDKEEP_OBSERVER_NODE_UNSUPPORTED`: run the Observer on Node.js 22.13 or newer.
 - If memory or usage is incomplete, check the Sync screen, preserve the outbox, and run
   `observer memory import` to rebuild the load from the vault.
 

package/docs/en/commands/sessions-and-import.md

@@ -26,11 +26,11 @@ and a vault bound to the correct project.
 ## Syntax
 
 ```bash
-npx wendkeep hook <name>
+npx --no-install wendkeep hook <name>
 npx wendkeep session list
 npx wendkeep session show <id>
 npx wendkeep session use <id>
-npx wendkeep hook session-backfill --session <id> [--write]
+npx --no-install wendkeep hook session-backfill --session <id> [--write]
 npx wendkeep import [options]
 ```
 
@@ -96,8 +96,8 @@ npx wendkeep import [options]
 ```bash
 npx wendkeep session list
 npx wendkeep session show 019abc-session-id
-npx wendkeep hook session-backfill --session 019abc-session-id
-npx wendkeep hook session-backfill --session 019abc-session-id --write
+npx --no-install wendkeep hook session-backfill --session 019abc-session-id
+npx --no-install wendkeep hook session-backfill --session 019abc-session-id --write
 npx wendkeep import --source codex --since 2026-07-01 --dry-run --json
 ```
 

package/docs/pt-BR/commands/observer.md

@@ -6,7 +6,7 @@
 
 O Observer consolida a observabilidade de vários projetos WendKeep em um serviço local. O volume
 Docker mantém o SQLite `/data/observer.sqlite` como autoridade única para documentos, sessões,
-agentes, uso, chamadas e transcripts completos. O conteúdo fica disponível para navegação e busca
+agentes, uso e chamadas. Transcripts completos são opcionais e exigem captura explícita. O conteúdo fica disponível para navegação e busca
 no próprio container, sem depender do Obsidian para consulta.
 
 ## Quando usar
@@ -24,8 +24,9 @@ pelos hooks e pelo WendKeep local.
 
 ## Pré-requisitos
 
-Tenha os projetos inicializados com WendKeep e registre explicitamente cada projeto antes de
-iniciar o servidor HTTP. No modo local padrão não há token para configurar.
+Tenha Node.js 22.13 ou mais recente para executar o Observer SQL. O Keep Core e os demais comandos
+continuam compatíveis com Node.js 18 ou mais recente. Registre explicitamente cada projeto e defina
+`WENDKEEP_OBSERVER_TOKEN`; leituras no loopback permanecem abertas, mas toda mutação exige Bearer.
 
 ## Sintaxe
 
@@ -33,8 +34,8 @@ iniciar o servidor HTTP. No modo local padrão não há token para configurar.
 npx wendkeep observer status --data-dir <diretório> --json
 npx wendkeep observer register --project <projeto> --vault <vault> --data-dir <diretório>
 npx wendkeep observer publish --project <projeto> --vault <vault> --data-dir <diretório>
-npx wendkeep observer memory import --project <projeto> --vault <vault> --url http://127.0.0.1:8787 --json
-npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <diretório>
+npx wendkeep observer memory import --project <projeto> --vault <vault> --url http://127.0.0.1:8787 --token <token> --json
+npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <diretório> --token <token>
 ```
 
 ## Opções e códigos de saída
@@ -44,8 +45,9 @@ npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <diretório>
 - `--project` e `--vault` identificam o projeto nos comandos `register`, `publish` e `memory import`.
 - `--host` aceita somente `127.0.0.1`, `localhost` ou `::1`; outros hosts são recusados antes do
   listen.
-- as rotas `/v1` ficam abertas no modo local padrão; mantenha `--host 127.0.0.1` e não publique a
-  porta em um endereço de rede.
+- `--token` ou `WENDKEEP_OBSERVER_TOKEN` autentica mutações; `--allow-non-loopback` falha sem token.
+- `WENDKEEP_OBSERVER_CAPTURE_LEVEL` aceita `metadata` (padrão, sem mensagens), `messages` ou
+  `full-transcript`. Caminhos locais absolutos nunca são publicados.
 - Exit `0` indica sucesso; exit `1` indica falha de configuração ou operação; o hook publisher
   também retorna `0` quando o Observer está indisponível.
 
@@ -53,7 +55,8 @@ npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir <diretório>
 
 ```powershell
 npx wendkeep observer register --project C:\GitHub\WendKeep --vault C:\GitHub\WendKeep\.WendKeep-vault --data-dir C:\WendKeepObserver
-npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir C:\WendKeepObserver
+$env:WENDKEEP_OBSERVER_TOKEN = '<token-local-forte>'
+npx wendkeep observer serve --host 127.0.0.1 --port 8787 --data-dir C:\WendKeepObserver --token $env:WENDKEEP_OBSERVER_TOKEN
 $env:WENDKEEP_OBSERVER_URL = 'http://127.0.0.1:8787'
 ```
 
@@ -66,14 +69,14 @@ docker compose -f docker/wendkeep-observer/compose.yaml up -d --build
 ## Painel web local
 
 Com o servidor em execução, abra [http://127.0.0.1:8787/](http://127.0.0.1:8787/) no navegador.
-O painel é servido pelo mesmo processo e abre diretamente, sem formulário ou token. A porta fica
+O painel é servido pelo mesmo processo e abre diretamente para consultas, sem formulário ou token. A porta fica
 presa ao loopback do computador; não coloque o endereço em uma interface de rede.
 
 O painel mostra a lista multi-projeto, versão, saúde, sessão mais recente, change ativa, contagem
 de changes e data da última captura. Ao abrir um projeto, o workspace oferece Overview, Consumo,
 Sessões, Memória, Changes e Sincronização. A aba Consumo mostra custo total, tokens por categoria,
 agentes principais, subagentes, provedores, modelos, tendência diária, cobertura histórica e
-chamadas com prompt, resposta e transcript completo. Os estados de carregamento, vazio, servidor
+chamadas conforme o nível de captura escolhido. Os estados de carregamento, vazio, servidor
 indisponível, conflito, modelo sem tarifa e dados desatualizados ficam visíveis, e a atualização
 pode ser manual ou automática a cada 15 segundos.
 
@@ -85,7 +88,8 @@ Se o navegador mostrar a tela mas a lista falhar, confirme a saúde em
 `register` grava `project_id`, nome, versão e data de registro. `publish` lê o vault local,
 produz o snapshot e envia eventos idempotentes para o SQLite com o conteúdo integral das sessões,
 decisões, bugs, aprendizados, specs, changes, CORE, DIGEST, SHARED_MEMORY, estado do brain,
-sessões de agentes, rollups de custo, chamadas e transcripts. O container grava tudo em
+sessões de agentes, rollups de custo e chamadas. Mensagens e transcripts só são enviados nos
+níveis de captura que os habilitam. O container grava tudo em
 `/data/observer.sqlite`; não monta `C:\GitHub` nem qualquer `.WendKeep-vault`. Markdown é aceito
 somente como conteúdo de uma coluna SQL e volta a existir como arquivo apenas pela exportação
 read-only sob demanda. `memory import` faz a carga inicial e retorna a paridade por arquivo e hash.
@@ -106,7 +110,9 @@ corpo antes de ingerir. O outbox é transporte temporário, não autoridade.
 - `project_not_registered`: rode `observer register` antes de publicar.
 - `host loopback`: troque `0.0.0.0` ou endereço LAN por `127.0.0.1`.
 - Outbox pendente: o serviço estava indisponível; preserve `.brain/observer-outbox/` e
-  `.brain/observer-sql-outbox/` e repita o publisher. Não apague eventos manualmente.
+  `.brain/observer-sql-outbox/` e repita o publisher. Adicione também
+  `.brain/observer-sql-state.json` e `.brain/observer-sql-outbox/` ao ignore do Vault. Não apague eventos manualmente.
+- `WENDKEEP_OBSERVER_NODE_UNSUPPORTED`: execute o Observer em Node.js 22.13 ou mais recente.
 - Se a memória ou o consumo ficarem incompletos, verifique a tela Sincronização, preserve o
   outbox e rode `observer memory import` para reconstruir a carga a partir do vault.
 

package/docs/pt-BR/commands/sessions-and-import.md

@@ -26,11 +26,11 @@ Claude/Codex e um vault vinculado ao projeto correto.
 ## Sintaxe
 
 ```bash
-npx wendkeep hook <nome>
+npx --no-install wendkeep hook <nome>
 npx wendkeep session list
 npx wendkeep session show <id>
 npx wendkeep session use <id>
-npx wendkeep hook session-backfill --session <id> [--write]
+npx --no-install wendkeep hook session-backfill --session <id> [--write]
 npx wendkeep import [opções]
 ```
 
@@ -95,8 +95,8 @@ npx wendkeep import [opções]
 ```bash
 npx wendkeep session list
 npx wendkeep session show 019abc-session-id
-npx wendkeep hook session-backfill --session 019abc-session-id
-npx wendkeep hook session-backfill --session 019abc-session-id --write
+npx --no-install wendkeep hook session-backfill --session 019abc-session-id
+npx --no-install wendkeep hook session-backfill --session 019abc-session-id --write
 npx wendkeep import --source codex --since 2026-07-01 --dry-run --json
 ```
 

package/hooks/understand-inject.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// understand-inject — SessionStart hook (agent-agnostic, run via `npx wendkeep hook
+// understand-inject — SessionStart hook (agent-agnostic, run via `npx --no-install wendkeep hook
 // understand-inject`). If the Understand-Anything domain graph has been generated
 // (`.understand-anything/knowledge-graph.json` at the project root), inject a cheap
 // slice of it into the session; otherwise stay silent. Never breaks the session.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wendkeep",
-  "version": "0.72.0",
+  "version": "0.72.1",
   "description": "Vault-first persistent memory for AI coding agents, with an optional profile-aware governance runtime: OFF, FLOW, GUIDE, GOVERN, or ASSURE. Local-first and agent-agnostic (Claude Code, Codex, Cursor…).",
   "type": "module",
   "workspaces": [
@@ -41,10 +41,12 @@
     "node": ">=18"
   },
   "scripts": {
-    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/project-vault.mjs && node --check src/observer-snapshot.mjs && node --check src/observer-store.mjs && node --check src/observer-memory.mjs && node --check src/observer-memory-publish.mjs && node --check src/observer-sql-store.mjs && node --check src/observer-sql-migrate.mjs && node --check src/observer-sql-publish.mjs && node --check src/observer-transcript-store.mjs && node --check src/observer-server.mjs && node --check src/observer.mjs && node --check src/observer-publish.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check web/observer/app.mjs && node --check hooks/observer-publish.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
+    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check scripts/release-provenance.mjs && node --check scripts/run-scope.mjs && node --check src/release-provenance.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/project-vault.mjs && node --check src/observer-auth.mjs && node --check src/observer-privacy.mjs && node --check src/observer-snapshot.mjs && node --check src/observer-store.mjs && node --check src/observer-memory.mjs && node --check src/observer-memory-publish.mjs && node --check src/observer-sql-store.mjs && node --check src/observer-sql-migrate.mjs && node --check src/observer-sql-publish.mjs && node --check src/observer-transcript-store.mjs && node --check src/observer-server.mjs && node --check src/observer.mjs && node --check src/observer-publish.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check web/observer/app.mjs && node --check hooks/observer-publish.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
     "test": "node --test --test-concurrency=2",
+    "test:core": "node scripts/run-scope.mjs core",
     "release": "node scripts/release.mjs",
     "release:dry": "node scripts/release.mjs --dry-run",
+    "release:provenance": "node scripts/release-provenance.mjs",
     "prepack": "node scripts/readme-pack.mjs pre",
     "postpack": "node scripts/readme-pack.mjs post"
   },
@@ -70,7 +72,6 @@
     "url": "https://github.com/rogersialves/wendkeep/issues"
   },
   "devDependencies": {
-    "acorn": "^8.18.0",
-    "wendkeep": "^0.69.0"
+    "acorn": "^8.18.0"
   }
 }

package/packages/integrations/src/host-hooks.mjs

@@ -32,7 +32,7 @@ export const SESSION_HOOKS = [
 ];
 
 export function hookCommand(name) {
-  return `npx wendkeep hook ${name}`;
+  return `npx --no-install wendkeep hook ${name}`;
 }
 
 // Forma node-direta do comando de hook: 1 processo (~100-250ms) em vez dos 3 do npx (cold-start

package/packages/vault/src/memory-store.mjs

@@ -112,12 +112,25 @@ function readCheckedMemoryFile(vaultBase, path, encoding, label, { allowMissing
   return readFileSync(checked.target, encoding);
 }
 
+export function memoryFileIdentityMatches(descriptor, target, {
+  platform = process.platform,
+} = {}) {
+  if (descriptor.ino !== target.ino) return false;
+  // libuv before 1.51 can report an inconsistent Windows volume serial number
+  // between stat(path) and fstat(fd). The inode is still the file index; path
+  // containment/reparse checks and nlink validation remain independent guards.
+  return platform === 'win32' || descriptor.dev === target.dev;
+}
+
 function assertOpenedMemoryFile(vaultBase, path, fd, label) {
   const checked = checkedMemoryFile(vaultBase, path, label, { allowMissing: false });
-  const descriptor = fstatSync(fd);
-  const target = statSync(checked.target);
-  if (!descriptor.isFile() || descriptor.nlink > 1 || target.nlink > 1
-      || descriptor.dev !== target.dev || descriptor.ino !== target.ino) {
+  // Windows file identities can exceed Number's safe integer range. Node 22.13 may
+  // round stat(path) and fstat(fd) differently for the same file, so compare the
+  // exact bigint values and keep nlink as the independent hardlink guard.
+  const descriptor = fstatSync(fd, { bigint: true });
+  const target = statSync(checked.target, { bigint: true });
+  if (!descriptor.isFile() || descriptor.nlink > 1n || target.nlink > 1n
+      || !memoryFileIdentityMatches(descriptor, target)) {
     throw unsafeMemoryPath(`${label} mudou de inode ou possui hardlink antes da mutação: ${checked.target}`);
   }
   return checked.target;

package/src/init.mjs

@@ -323,7 +323,7 @@ const MESSAGES = {
     mcpSkipped: '  [4/5] .mcp.json ignorado (--no-mcp, sem companions MCP)',
     colorsSkipped: '  [5/5] cores ignoradas (--no-colors)',
     colors: (r) => `  [5/5] cores: ${r}`,
-    runtimeIgnore: '  [!] ignore runtimes locais do wendkeep no Git quando o vault for versionado: .brain/.change-* .brain/runtime/flows/',
+    runtimeIgnore: '  [!] ignore runtimes locais do wendkeep no Git quando o vault for versionado: .brain/.change-* .brain/runtime/flows/ .brain/observer-sql-state.json .brain/observer-sql-outbox/',
     merged: 'mesclado', created: 'criado', bakSaved: ', .bak salvo',
     nextSteps: '\nPróximos passos:',
     step1: (v) => `  1. Abra o vault no Obsidian: "Abrir pasta como cofre" -> ${v}`,
@@ -352,7 +352,7 @@ const MESSAGES = {
     mcpSkipped: '  [4/5] .mcp.json skipped (--no-mcp, no MCP companions)',
     colorsSkipped: '  [5/5] colors skipped (--no-colors)',
     colors: (r) => `  [5/5] colors: ${r}`,
-    runtimeIgnore: '  [!] keep local wendkeep runtimes out of Git when the vault is versioned: .brain/.change-* .brain/runtime/flows/',
+    runtimeIgnore: '  [!] keep local wendkeep runtimes out of Git when the vault is versioned: .brain/.change-* .brain/runtime/flows/ .brain/observer-sql-state.json .brain/observer-sql-outbox/',
     merged: 'merged', created: 'created', bakSaved: ', .bak saved',
     nextSteps: '\nNext steps:',
     step1: (v) => `  1. Open the vault in Obsidian: "Open folder as vault" -> ${v}`,

package/src/observer-auth.mjs

@@ -0,0 +1,10 @@
+export function resolveObserverToken(value = '') {
+  return String(value || process.env.WENDKEEP_OBSERVER_TOKEN || '').trim();
+}
+
+export function observerAuthHeaders(token, headers = {}) {
+  const resolved = resolveObserverToken(token);
+  return resolved
+    ? { ...headers, authorization: `Bearer ${resolved}` }
+    : { ...headers };
+}

package/src/observer-memory-publish.mjs

@@ -12,6 +12,8 @@ import {
 } from 'node:fs';
 import { join } from 'node:path';
 import { MAX_MEMORY_CONTENT_BYTES } from './observer-memory.mjs';
+import { observerAuthHeaders } from './observer-auth.mjs';
+import { sanitizeObserverContent } from './observer-privacy.mjs';
 
 export const MEMORY_OUTBOX_REL = '.brain/observer-memory-outbox';
 export const MEMORY_STATE_FILE = '.brain/observer-memory-state.json';
@@ -103,7 +105,7 @@ function memoryFiles(vaultBase) {
 
 export function localMemoryManifest(vaultBase) {
   return Object.fromEntries(memoryFiles(vaultBase).map((file) => {
-    const content = readFileSync(file.absolute, 'utf8');
+    const content = sanitizeObserverContent(readFileSync(file.absolute, 'utf8'));
     return [file.logicalPath, {
       logical_path: file.logicalPath,
       content_hash: hash(content),
@@ -159,7 +161,7 @@ export function buildMemoryEventBatch({
   const events = [];
 
   for (const file of currentFiles) {
-    const content = readFileSync(file.absolute, 'utf8');
+    const content = sanitizeObserverContent(readFileSync(file.absolute, 'utf8'));
     if (Buffer.byteLength(content, 'utf8') > MAX_MEMORY_CONTENT_BYTES) {
       throw new Error('arquivo excede o limite de memória: ' + file.logicalPath);
     }
@@ -231,12 +233,12 @@ export function listMemoryOutbox(vaultBase) {
     .map((name) => join(dir, name));
 }
 
-async function postBatch(url, projectId, events, fetchImpl = globalThis.fetch) {
+async function postBatch(url, projectId, events, fetchImpl = globalThis.fetch, token = '') {
   const response = await fetchImpl(
     String(url).replace(/\/$/, '') + '/v1/projects/' + encodeURIComponent(projectId) + '/memory/events',
     {
       method: 'POST',
-      headers: { 'content-type': 'application/json', accept: 'application/json' },
+      headers: observerAuthHeaders(token, { 'content-type': 'application/json', accept: 'application/json' }),
       body: JSON.stringify({ events }),
     },
   );
@@ -249,6 +251,7 @@ export async function retryObserverMemoryOutbox({
   projectId = projectIdFromVault(vaultBase),
   url,
   fetchImpl = globalThis.fetch,
+  token = process.env.WENDKEEP_OBSERVER_TOKEN || '',
 } = {}) {
   const files = listMemoryOutbox(vaultBase);
   if (!url) return { attempted: 0, confirmed: 0, pending: files.length };
@@ -262,7 +265,7 @@ export async function retryObserverMemoryOutbox({
         unlinkSync(path);
         continue;
       }
-      await postBatch(url, projectId, batch.events, fetchImpl);
+      await postBatch(url, projectId, batch.events, fetchImpl, token);
       unlinkSync(path);
       confirmed += 1;
     } catch {
@@ -277,10 +280,11 @@ export async function compareMemoryParity({
   projectId = projectIdFromVault(vaultBase),
   url,
   fetchImpl = globalThis.fetch,
+  token = process.env.WENDKEEP_OBSERVER_TOKEN || '',
 } = {}) {
   const response = await fetchImpl(
     String(url).replace(/\/$/, '') + '/v1/projects/' + encodeURIComponent(projectId) + '/memory/tree',
-    { headers: { accept: 'application/json' } },
+    { headers: observerAuthHeaders(token, { accept: 'application/json' }) },
   );
   if (!response.ok) throw new Error('Observer respondeu HTTP ' + response.status + '.');
   const body = await response.json();
@@ -309,9 +313,10 @@ export async function publishObserverMemory({
   sourceTurnId = '',
   now = new Date(),
   fetchImpl = globalThis.fetch,
+  token = process.env.WENDKEEP_OBSERVER_TOKEN || '',
 } = {}) {
   if (!vaultBase || !projectId) throw new Error('vaultBase e projectId são obrigatórios.');
-  await retryObserverMemoryOutbox({ vaultBase, projectId, url, fetchImpl });
+  await retryObserverMemoryOutbox({ vaultBase, projectId, url, fetchImpl, token });
   const state = readState(vaultBase);
   const batch = buildMemoryEventBatch({ vaultBase, projectId, sourceSessionId, sourceTurnId, now, state });
   if (batch.events.length === 0) {
@@ -324,7 +329,7 @@ export async function publishObserverMemory({
     return { ok: false, queued: true, scanned: batch.scanned, changed: batch.changed, pending: listMemoryOutbox(vaultBase).length, hookExitCode: 0 };
   }
   try {
-    await postBatch(url, projectId, batch.events, fetchImpl);
+    await postBatch(url, projectId, batch.events, fetchImpl, token);
     commitMemoryPublishState(vaultBase, batch.nextState);
     return { ok: true, queued: false, scanned: batch.scanned, changed: batch.changed, pending: listMemoryOutbox(vaultBase).length };
   } catch (error) {

package/src/observer-privacy.mjs

@@ -0,0 +1,23 @@
+import { basename } from 'node:path';
+
+const TRANSCRIPT_PATH_KEY = /^(?:transcript_path|agent_transcript_path|transcriptPath|agentTranscriptPath)$/i;
+const TRANSCRIPT_PATH_LINE = /^(\s*["']?(?:transcript_path|agent_transcript_path|transcriptPath|agentTranscriptPath)["']?\s*:\s*)(["']?)(.*?)(\2)(\s*,?\s*)$/gmi;
+
+function sourceLabel(value) {
+  return basename(String(value || '').replaceAll('\\', '/'));
+}
+
+export function sanitizeObserverContent(content) {
+  return String(content || '').replace(TRANSCRIPT_PATH_LINE, (_line, prefix, quote, value, _closing, suffix) => (
+    `${prefix}${quote}${sourceLabel(value)}${quote}${suffix}`
+  ));
+}
+
+export function sanitizeObserverMetadata(value) {
+  if (Array.isArray(value)) return value.map(sanitizeObserverMetadata);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    TRANSCRIPT_PATH_KEY.test(key) ? sourceLabel(item) : sanitizeObserverMetadata(item),
+  ]));
+}

package/src/observer-publish.mjs

@@ -2,6 +2,7 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSyn
 import { join } from 'node:path';
 import { buildProjectSnapshot } from './observer-snapshot.mjs';
 import { publishObserverSql } from './observer-sql-publish.mjs';
+import { observerAuthHeaders, resolveObserverToken } from './observer-auth.mjs';
 
 const OUTBOX_REL = join('.brain', 'observer-outbox');
 const REQUEST_TIMEOUT_MS = 500;
@@ -46,15 +47,15 @@ function removeOutbox(vaultBase, eventId) {
   if (existsSync(path)) unlinkSync(path);
 }
 
-async function postSnapshot(url, event) {
+async function postSnapshot(url, event, token) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
   try {
     const response = await fetch(`${String(url).replace(/\/$/, '')}/v1/projects/${encodeURIComponent(event.project_id)}/snapshot`, {
       method: 'POST',
-      headers: {
+      headers: observerAuthHeaders(token, {
         'content-type': 'application/json',
-      },
+      }),
       body: JSON.stringify(event),
       signal: controller.signal,
     });
@@ -70,14 +71,14 @@ async function postSnapshot(url, event) {
   }
 }
 
-export async function retryObserverOutbox({ vaultBase, url } = {}) {
+export async function retryObserverOutbox({ vaultBase, url, token = process.env.WENDKEEP_OBSERVER_TOKEN || '' } = {}) {
   if (!url) return { attempted: 0, confirmed: 0, pending: listOutbox(vaultBase).length };
   let attempted = 0;
   let confirmed = 0;
   for (const event of listOutbox(vaultBase)) {
     attempted += 1;
     try {
-      await postSnapshot(url, event);
+      await postSnapshot(url, event, token);
       removeOutbox(vaultBase, event.event_id);
       confirmed += 1;
     } catch { /* preserve the event for a later retry */ }
@@ -91,6 +92,7 @@ export async function publishObserverSnapshot({
   url = process.env.WENDKEEP_OBSERVER_URL || '',
   now = new Date(),
   input = {},
+  token = process.env.WENDKEEP_OBSERVER_TOKEN || '',
 } = {}) {
   try {
     const event = buildProjectSnapshot({ vaultBase, projectRoot, now });
@@ -100,15 +102,16 @@ export async function publishObserverSnapshot({
       url,
       input,
       now,
+      token,
     });
     if (!url) return { ok: sql.ok, skipped: true, queued: sql.queued, hookExitCode: 0, event_id: event.event_id, sql };
 
-    await retryObserverOutbox({ vaultBase, url });
+    await retryObserverOutbox({ vaultBase, url, token });
     // SQL is the live authority. Keep the legacy-shaped `memory` field for
     // older integrations while reporting the real SQL publication separately.
     const memory = { ok: sql.ok, queued: sql.queued, changed: sql.changed, pending: sql.pending, authority: 'sqlite' };
     try {
-      const response = await postSnapshot(url, event);
+      const response = await postSnapshot(url, event, resolveObserverToken(token));
       return {
         ok: true,
         queued: false,

package/src/observer-server.mjs

@@ -1,4 +1,5 @@
 import { createServer } from 'node:http';
+import { createHash, timingSafeEqual } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { gunzipSync } from 'node:zlib';
@@ -52,6 +53,39 @@ function loopbackOnly(host) {
   return LOOPBACK_HOSTS.has(String(host || '').toLowerCase());
 }
 
+function safeTokenEqual(actual, expected) {
+  if (!actual || !expected) return false;
+  const left = createHash('sha256').update(String(actual)).digest();
+  const right = createHash('sha256').update(String(expected)).digest();
+  return timingSafeEqual(left, right);
+}
+
+function bearerToken(req) {
+  const match = String(req.headers.authorization || '').match(/^Bearer\s+(.+)$/i);
+  return match?.[1] || '';
+}
+
+function requestHostname(value) {
+  try { return new URL(`http://${String(value || '')}`).hostname.toLowerCase(); }
+  catch { return ''; }
+}
+
+function validateAuthority(req, { loopback }) {
+  const hostname = requestHostname(req.headers.host);
+  if (!hostname || (loopback && !LOOPBACK_HOSTS.has(hostname))) {
+    return { ok: false, status: 421, code: 'invalid_host', message: 'Host não corresponde ao binding do Observer.' };
+  }
+  const origin = String(req.headers.origin || '');
+  if (origin) {
+    let originHostname = '';
+    try { originHostname = new URL(origin).hostname.toLowerCase(); } catch { /* invalid below */ }
+    if (!originHostname || originHostname !== hostname) {
+      return { ok: false, status: 403, code: 'invalid_origin', message: 'Origin não corresponde ao Host do Observer.' };
+    }
+  }
+  return { ok: true };
+}
+
 function json(res, status, body) {
   const content = JSON.stringify(body);
   res.writeHead(status, {
@@ -184,10 +218,16 @@ export async function startObserverServer({
   port = 8787,
   dataDir,
   allowNonLoopback = false,
+  token = process.env.WENDKEEP_OBSERVER_TOKEN || '',
 } = {}) {
   if (!loopbackOnly(host) && !allowNonLoopback) {
     throw new Error(`Observer HTTP aceita somente host loopback; recebido: ${host}`);
   }
+  if (!loopbackOnly(host) && !token) {
+    const error = new Error('Observer non-loopback exige --token ou WENDKEEP_OBSERVER_TOKEN.');
+    error.code = 'WENDKEEP_OBSERVER_TOKEN_REQUIRED';
+    throw error;
+  }
   if (!dataDir) throw new Error('dataDir é obrigatório.');
   const sqlDb = ensureObserverDatabase(dataDir);
   const databaseMigration = migrateObserverDatabase(sqlDb);
@@ -204,6 +244,17 @@ export async function startObserverServer({
   const server = createServer(async (req, res) => {
     try {
       const pathname = new URL(req.url || '/', 'http://127.0.0.1').pathname;
+      const authority = validateAuthority(req, { loopback: loopbackOnly(host) });
+      if (!authority.ok) {
+        errorResponse(res, authority.status, authority.code, authority.message);
+        return;
+      }
+      const authenticated = safeTokenEqual(bearerToken(req), token);
+      const mutating = !['GET', 'HEAD', 'OPTIONS'].includes(String(req.method || '').toUpperCase());
+      if ((mutating || !loopbackOnly(host)) && !authenticated) {
+        errorResponse(res, 401, 'observer_auth_required', 'Bearer token válido é obrigatório para esta operação.');
+        return;
+      }
       if (req.method === 'GET' && pathname === '/healthz') {
         json(res, 200, {
           ok: true,

package/src/observer-sql-publish.mjs

@@ -13,6 +13,8 @@ import { gzipSync } from 'node:zlib';
 import { parseTranscriptContent } from '../packages/integrations/src/transcripts.mjs';
 import { parseSessionCost, } from './cost.mjs';
 import { buildSessionIdentityMap, listMigrationDocuments, parseFrontmatter, sessionEvents } from './observer-sql-migrate.mjs';
+import { observerAuthHeaders } from './observer-auth.mjs';
+import { sanitizeObserverContent, sanitizeObserverMetadata } from './observer-privacy.mjs';
 
 export const SQL_OUTBOX_REL = '.brain/observer-sql-outbox';
 export const SQL_STATE_REL = '.brain/observer-sql-state.json';
@@ -20,6 +22,28 @@ const SQL_SCHEMA_VERSION = 1;
 export const SQL_EVENT_BATCH_SIZE = 64;
 export const SQL_EVENT_BATCH_BYTES = 8 * 1024 * 1024;
 const REQUEST_TIMEOUT_MS = 15000;
+const MAX_REQUEST_TIMEOUT_MS = 120000;
+const REQUEST_TIMEOUT_BYTES_STEP = 1024 * 1024;
+const CAPTURE_LEVELS = new Set(['metadata', 'messages', 'full-transcript']);
+
+export function observerSqlRequestTimeoutMs(rawBytes) {
+  const size = Math.max(0, Number(rawBytes) || 0);
+  const oversizedBytes = Math.max(0, size - SQL_EVENT_BATCH_BYTES);
+  return Math.min(
+    MAX_REQUEST_TIMEOUT_MS,
+    REQUEST_TIMEOUT_MS + Math.ceil(oversizedBytes / REQUEST_TIMEOUT_BYTES_STEP) * 1000,
+  );
+}
+
+export function normalizeObserverCaptureLevel(value = process.env.WENDKEEP_OBSERVER_CAPTURE_LEVEL || 'metadata') {
+  const level = String(value || 'metadata').trim().toLowerCase();
+  if (!CAPTURE_LEVELS.has(level)) {
+    const error = new Error(`Nível de captura inválido: ${level}. Use metadata, messages ou full-transcript.`);
+    error.code = 'WENDKEEP_OBSERVER_CAPTURE_LEVEL_INVALID';
+    throw error;
+  }
+  return level;
+}
 
 function text(value, fallback = '') { return String(value ?? fallback); }
 function hash(value) { return createHash('sha256').update(typeof value === 'string' ? value : JSON.stringify(value)).digest('hex'); }
@@ -73,7 +97,9 @@ function tokenPayload(usage = {}) {
 }
 
 function documentEvent({ projectId, logicalPath, content, metadata, revision, occurredAt }) {
-  const contentHash = hash(content);
+  const safeContent = sanitizeObserverContent(content);
+  const safeMetadata = sanitizeObserverMetadata(metadata);
+  const contentHash = hash(safeContent);
   return {
     schema_version: 1,
     event_id: eventId('document', projectId, `${logicalPath}:${revision}:${contentHash}`),
@@ -89,11 +115,11 @@ function documentEvent({ projectId, logicalPath, content, metadata, revision, oc
               : logicalPath.startsWith('07-Specs/') ? 'spec'
                 : logicalPath.startsWith('08-Mudanças/') ? 'change' : 'memory',
       title: basename(logicalPath).replace(/\.md$/i, ''),
-      content,
+      content: safeContent,
       content_hash: contentHash,
       revision,
-      metadata,
-      source_session_id: text(metadata?.session_id),
+      metadata: safeMetadata,
+      source_session_id: text(safeMetadata?.session_id),
     },
   };
 }
@@ -123,7 +149,7 @@ function agentEvent({ projectId, sessionId, agentId, parentAgentId = '', role =
   };
 }
 
-function transcriptCalls({ projectId, sessionId, agentId, role, provider, modelFallback, transcriptId, content, occurredAt }) {
+function transcriptCalls({ projectId, sessionId, agentId, role, provider, modelFallback, transcriptId, content, occurredAt, includeMessages }) {
   let parsed;
   try { parsed = parseTranscriptContent(content); } catch { return []; }
   return (parsed.turns || []).flatMap((turn, index) => {
@@ -154,8 +180,8 @@ function transcriptCalls({ projectId, sessionId, agentId, role, provider, modelF
         cost_usd: 0,
         cost_status: 'unknown',
         transcript_id: transcriptId,
-        prompt_text: prompt,
-        response_text: response,
+        prompt_text: includeMessages ? prompt : '',
+        response_text: includeMessages ? response : '',
         status: turn.status === 'aborted' ? 'aborted' : 'complete',
         metadata: { tools: turn.tools || [], source: 'transcript-parser' },
       },
@@ -180,7 +206,7 @@ function sourceCandidates({ vaultBase, logicalPath, fm, input }) {
   return candidates;
 }
 
-function completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider, model, source, now }) {
+function completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider, model, source, now, captureLevel }) {
   const content = readFileSync(source.path, 'utf8');
   const agentId = source.role === 'subagent'
     ? `${projectId}:${sessionId}:subagent:${hash(source.path).slice(0, 16)}`
@@ -189,7 +215,7 @@ function completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider,
     ? agentEvent({ projectId, sessionId, agentId, parentAgentId: mainAgentId, role: 'subagent', provider, model, input: source.agentInput, occurredAt: now })
     : null;
   const fingerprint = hash(content);
-  const transcript = {
+  const transcript = captureLevel === 'full-transcript' ? {
     schema_version: 1,
     event_id: eventId('transcript', projectId, `${source.transcriptId}:${fingerprint}`),
     kind: 'transcript.upsert',
@@ -202,10 +228,21 @@ function completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider,
       coverage: 'complete',
       content,
       source: 'hook-transcript',
-      metadata: { original_path: source.path.replaceAll('\\', '/') },
+      metadata: { source_label: basename(source.path), source_hash: hash(normalizePath(source.path)) },
     },
-  };
-  const calls = transcriptCalls({ projectId, sessionId, agentId, role: source.role, provider, modelFallback: model, transcriptId: source.transcriptId, content, occurredAt: now });
+  } : null;
+  const calls = transcriptCalls({
+    projectId,
+    sessionId,
+    agentId,
+    role: source.role,
+    provider,
+    modelFallback: model,
+    transcriptId: source.transcriptId,
+    content,
+    occurredAt: now,
+    includeMessages: captureLevel !== 'metadata',
+  });
   return { events: [agent, transcript, ...calls].filter(Boolean), fingerprint, transcriptId: source.transcriptId };
 }
 
@@ -218,9 +255,10 @@ function dedupeEvents(events) {
   });
 }
 
-export function buildObserverSqlEventBatch({ vaultBase, projectId, input = {}, now = new Date(), state = readState(vaultBase), remoteDocuments = {} } = {}) {
+export function buildObserverSqlEventBatch({ vaultBase, projectId, input = {}, now = new Date(), state = readState(vaultBase), remoteDocuments = {}, captureLevel = process.env.WENDKEEP_OBSERVER_CAPTURE_LEVEL || 'metadata' } = {}) {
   if (!vaultBase || !projectId) throw new Error('vaultBase e projectId são obrigatórios.');
   const occurredAt = isoNow(now);
+  const resolvedCaptureLevel = normalizeObserverCaptureLevel(captureLevel);
   const nextState = { schema_version: SQL_SCHEMA_VERSION, files: { ...(state.files || {}) }, transcripts: { ...(state.transcripts || {}) } };
   const events = [];
   const sessionContexts = [];
@@ -235,7 +273,7 @@ export function buildObserverSqlEventBatch({ vaultBase, projectId, input = {}, n
   let changed = 0;
   for (const file of files) {
     const content = readFileSync(file.absolute, 'utf8');
-    const contentHash = hash(content);
+    const contentHash = hash(sanitizeObserverContent(content));
     const previous = state.files?.[file.logicalPath];
     const remote = remoteDocuments?.[file.logicalPath];
     const baseRevision = Math.max(Number(previous?.revision || 0), Number(remote?.revision || 0));
@@ -263,9 +301,10 @@ export function buildObserverSqlEventBatch({ vaultBase, projectId, input = {}, n
     for (const source of sources) {
       const content = readFileSync(source.path, 'utf8');
       const fingerprint = hash(content);
-      if (state.transcripts?.[source.transcriptId]?.content_hash === fingerprint) continue;
-      const complete = completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider, model, source, now: occurredAt });
-      nextState.transcripts[source.transcriptId] = { content_hash: complete.fingerprint, coverage: 'complete' };
+      const previousTranscript = state.transcripts?.[source.transcriptId];
+      if (previousTranscript?.content_hash === fingerprint && previousTranscript?.coverage === resolvedCaptureLevel) continue;
+      const complete = completeTranscriptEvents({ projectId, sessionId, mainAgentId, provider, model, source, now: occurredAt, captureLevel: resolvedCaptureLevel });
+      nextState.transcripts[source.transcriptId] = { content_hash: complete.fingerprint, coverage: resolvedCaptureLevel };
       const summaryId = complete.transcriptId;
       for (const event of complete.events) {
         if (event.kind === 'agent.upsert' && event.payload.agent_id !== mainAgentId) events.push(event);
@@ -297,14 +336,15 @@ export function listSqlOutbox(vaultBase) {
   });
 }
 
-async function postSqlChunk({ url, projectId, events, fetchImpl = globalThis.fetch }) {
+async function postSqlChunk({ url, projectId, events, fetchImpl = globalThis.fetch, token = '' }) {
   const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-  const wireBody = gzipSync(Buffer.from(JSON.stringify({ events }), 'utf8'));
+  const rawBody = Buffer.from(JSON.stringify({ events }), 'utf8');
+  const timer = setTimeout(() => controller.abort(), observerSqlRequestTimeoutMs(rawBody.byteLength));
+  const wireBody = gzipSync(rawBody);
   try {
     const response = await fetchImpl(`${String(url).replace(/\/$/, '')}/v1/projects/${encodeURIComponent(projectId)}/ingest`, {
       method: 'POST',
-      headers: { 'content-type': 'application/json', 'content-encoding': 'gzip', accept: 'application/json' },
+      headers: observerAuthHeaders(token, { 'content-type': 'application/json', 'content-encoding': 'gzip', accept: 'application/json' }),
       body: wireBody,
       signal: controller.signal,
     });
@@ -314,11 +354,11 @@ async function postSqlChunk({ url, projectId, events, fetchImpl = globalThis.fet
   } finally { clearTimeout(timer); }
 }
 
-async function readRemoteDocuments({ url, projectId, fetchImpl = globalThis.fetch }) {
+async function readRemoteDocuments({ url, projectId, fetchImpl = globalThis.fetch, token = '' }) {
   if (!url) return {};
   try {
     const response = await fetchImpl(`${String(url).replace(/\/$/, '')}/v1/projects/${encodeURIComponent(projectId)}/memory/tree`, {
-      headers: { accept: 'application/json' },
+      headers: observerAuthHeaders(token, { accept: 'application/json' }),
     });
     if (!response.ok) return {};
     const body = await response.json().catch(() => ({}));
@@ -328,7 +368,7 @@ async function readRemoteDocuments({ url, projectId, fetchImpl = globalThis.fetc
   }
 }
 
-async function postSqlBatch({ url, projectId, events, fetchImpl = globalThis.fetch }) {
+async function postSqlBatch({ url, projectId, events, fetchImpl = globalThis.fetch, token = '' }) {
   const aggregate = { accepted: 0, rejected: 0, conflicts: 0, stale: 0, duplicates: 0 };
   let chunk = [];
   let chunkBytes = 0;
@@ -339,6 +379,7 @@ async function postSqlBatch({ url, projectId, events, fetchImpl = globalThis.fet
       projectId,
       events: items,
       fetchImpl,
+      token,
     });
     for (const key of Object.keys(aggregate)) aggregate[key] += Number(response?.[key]) || 0;
   };
@@ -358,7 +399,7 @@ async function postSqlBatch({ url, projectId, events, fetchImpl = globalThis.fet
   return aggregate;
 }
 
-export async function retryObserverSqlOutbox({ vaultBase, projectId, url, fetchImpl = globalThis.fetch } = {}) {
+export async function retryObserverSqlOutbox({ vaultBase, projectId, url, fetchImpl = globalThis.fetch, token = process.env.WENDKEEP_OBSERVER_TOKEN || '' } = {}) {
   const pending = listSqlOutbox(vaultBase);
   if (!url) return { attempted: 0, confirmed: 0, pending: pending.length };
   let attempted = 0;
@@ -366,7 +407,7 @@ export async function retryObserverSqlOutbox({ vaultBase, projectId, url, fetchI
   for (const batch of pending) {
     attempted += 1;
     try {
-      await postSqlBatch({ url, projectId, events: batch.events, fetchImpl });
+      await postSqlBatch({ url, projectId, events: batch.events, fetchImpl, token });
       unlinkSync(batch.path);
       confirmed += 1;
     } catch { break; }
@@ -374,14 +415,14 @@ export async function retryObserverSqlOutbox({ vaultBase, projectId, url, fetchI
   return { attempted, confirmed, pending: listSqlOutbox(vaultBase).length };
 }
 
-export async function publishObserverSql({ vaultBase, projectId, url = process.env.WENDKEEP_OBSERVER_URL || '', input = {}, now = new Date(), fetchImpl = globalThis.fetch } = {}) {
+export async function publishObserverSql({ vaultBase, projectId, url = process.env.WENDKEEP_OBSERVER_URL || '', input = {}, now = new Date(), fetchImpl = globalThis.fetch, token = process.env.WENDKEEP_OBSERVER_TOKEN || '', captureLevel = process.env.WENDKEEP_OBSERVER_CAPTURE_LEVEL || 'metadata' } = {}) {
   if (!vaultBase || !projectId) throw new Error('vaultBase e projectId são obrigatórios.');
-  const replay = await retryObserverSqlOutbox({ vaultBase, projectId, url, fetchImpl });
+  const replay = await retryObserverSqlOutbox({ vaultBase, projectId, url, fetchImpl, token });
   const state = readState(vaultBase);
   const remoteDocuments = Object.keys(state.files || {}).length === 0
-    ? await readRemoteDocuments({ url, projectId, fetchImpl })
+    ? await readRemoteDocuments({ url, projectId, fetchImpl, token })
     : {};
-  const batch = buildObserverSqlEventBatch({ vaultBase, projectId, input, now, state, remoteDocuments });
+  const batch = buildObserverSqlEventBatch({ vaultBase, projectId, input, now, state, remoteDocuments, captureLevel });
   atomicJson(statePath(vaultBase), batch.nextState);
   if (!batch.events.length) return { ok: true, queued: false, scanned: batch.scanned, changed: batch.changed, pending: listSqlOutbox(vaultBase).length, replay };
   if (!url) {
@@ -389,7 +430,7 @@ export async function publishObserverSql({ vaultBase, projectId, url = process.e
     return { ok: false, queued: true, scanned: batch.scanned, changed: batch.changed, pending: listSqlOutbox(vaultBase).length, replay, hookExitCode: 0 };
   }
   try {
-    const response = await postSqlBatch({ url, projectId, events: batch.events, fetchImpl });
+    const response = await postSqlBatch({ url, projectId, events: batch.events, fetchImpl, token });
     return { ok: true, queued: false, scanned: batch.scanned, changed: batch.changed, pending: listSqlOutbox(vaultBase).length, replay, response };
   } catch (error) {
     queueOutbox(vaultBase, { schema_version: SQL_SCHEMA_VERSION, project_id: projectId, events: batch.events });

package/src/observer-sql-store.mjs

@@ -1,8 +1,8 @@
 import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync, readdirSync } from 'node:fs';
+import { createRequire } from 'node:module';
 import { join, basename, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { DatabaseSync } from 'node:sqlite';
 import { decodeTranscript, encodeTranscript } from './observer-transcript-store.mjs';
 
 export const OBSERVER_SQL_FILE = 'observer.sqlite';
@@ -16,6 +16,36 @@ const EVENT_KINDS = new Set([
   'usage.rollup', 'llm_call', 'transcript.upsert',
 ]);
 
+const OBSERVER_SQL_MINIMUM_NODE = '22.13.0';
+const require = createRequire(import.meta.url);
+let DatabaseSync;
+
+export function observerSqlRuntimeSupport(version = process.versions.node) {
+  const current = String(version || '0.0.0');
+  const [major = 0, minor = 0] = current.split('.').map((part) => Number(part) || 0);
+  return {
+    supported: major > 22 || (major === 22 && minor >= 13),
+    minimum: OBSERVER_SQL_MINIMUM_NODE,
+    current,
+  };
+}
+
+function observerSqlRuntimeError(support = observerSqlRuntimeSupport()) {
+  const error = new Error(`Observer SQL requer Node.js >= ${support.minimum}; atual: ${support.current}. O Keep Core continua compatível com Node.js >= 18.`);
+  error.code = 'WENDKEEP_OBSERVER_NODE_UNSUPPORTED';
+  return error;
+}
+
+function observerDatabaseSync() {
+  const support = observerSqlRuntimeSupport();
+  if (!support.supported) throw observerSqlRuntimeError(support);
+  if (!DatabaseSync) {
+    try { ({ DatabaseSync } = require('node:sqlite')); }
+    catch { throw observerSqlRuntimeError(support); }
+  }
+  return DatabaseSync;
+}
+
 function now() { return new Date().toISOString(); }
 
 function text(value, fallback = '') { return String(value ?? fallback); }
@@ -63,7 +93,8 @@ function migrationFiles() {
 export function openObserverDatabase(dataDir) {
   if (!dataDir) throw new Error('dataDir é obrigatório.');
   mkdirSync(dataDir, { recursive: true });
-  const db = new DatabaseSync(join(dataDir, OBSERVER_SQL_FILE));
+  const SqliteDatabase = observerDatabaseSync();
+  const db = new SqliteDatabase(join(dataDir, OBSERVER_SQL_FILE));
   db.exec('PRAGMA foreign_keys = ON; PRAGMA journal_mode = WAL; PRAGMA busy_timeout = 5000;');
   return db;
 }

package/src/observer.mjs

@@ -7,15 +7,17 @@ import { publishObserverSql } from './observer-sql-publish.mjs';
 import { startObserverServer } from './observer-server.mjs';
 import { ensureObserverDatabase, migrateObserverDatabase, listSqlProjects, OBSERVER_SQL_FILE, OBSERVER_SQL_SCHEMA_VERSION } from './observer-sql-store.mjs';
 import { resolveProjectVault } from '../packages/vault/src/project-vault.mjs';
+import { observerAuthHeaders, resolveObserverToken } from './observer-auth.mjs';
 
 export const OBSERVER_HELP = `wendkeep observer — Observer local multi-projeto
 
 Uso:
   wendkeep observer serve [--data-dir P] [--host 127.0.0.1] [--port 8787]
-                          [--allow-non-loopback]
+                          [--allow-non-loopback] [--token TOKEN]
   wendkeep observer register --project P [--vault V] [--data-dir D] [--json]
   wendkeep observer publish --project P [--vault V] [--data-dir D] [--json]
-  wendkeep observer memory import --project P [--vault V] [--url U] [--json]
+  wendkeep observer memory import --project P [--vault V] [--url U] [--token TOKEN]
+                                    [--capture-level metadata|messages|full-transcript] [--json]
   wendkeep observer status [--data-dir D] [--json]
 
 O Observer local pode manter snapshots operacionais e uma cópia completa da memória em volume
@@ -79,6 +81,7 @@ export async function runObserver(argv = [], { write = (chunk) => process.stdout
     return 0;
   }
   const dir = dataDir(argv);
+  const token = resolveObserverToken(optionValue(argv, '--token'));
 
   if (sub === 'status') {
     print({ ...summary(readObserverIndex(dir)), database: databaseSummary(dir) }, asJson, write);
@@ -92,6 +95,7 @@ export async function runObserver(argv = [], { write = (chunk) => process.stdout
       host,
       port: Number(optionValue(argv, '--port') || 8787),
       allowNonLoopback: argv.includes('--allow-non-loopback'),
+      token,
     });
     const address = server.address();
     process.stdout.write(`wendkeep observer listening: http://${address.address}:${address.port}\n`);
@@ -106,7 +110,7 @@ export async function runObserver(argv = [], { write = (chunk) => process.stdout
     const snapshot = buildProjectSnapshot({ vaultBase: vault, projectRoot: root });
     const url = optionValue(argv, '--url') || process.env.WENDKEEP_OBSERVER_URL || '';
     if (!url) throw new Error('observer memory import: --url ou WENDKEEP_OBSERVER_URL é obrigatório.');
-    const headers = { 'content-type': 'application/json', accept: 'application/json' };
+    const headers = observerAuthHeaders(token, { 'content-type': 'application/json', accept: 'application/json' });
     const registration = await fetch(
       String(url).replace(/\/$/, '') + '/v1/projects/' + encodeURIComponent(snapshot.project_id),
       {
@@ -124,11 +128,14 @@ export async function runObserver(argv = [], { write = (chunk) => process.stdout
       vaultBase: vault,
       projectId: snapshot.project_id,
       url,
+      token,
+      captureLevel: optionValue(argv, '--capture-level') || process.env.WENDKEEP_OBSERVER_CAPTURE_LEVEL || 'metadata',
     });
     const parity = await compareMemoryParity({
       vaultBase: vault,
       projectId: snapshot.project_id,
       url,
+      token,
     });
     const result = {
       ok: sql.ok && parity.missing === 0 && parity.mismatched === 0,

package/src/release-changelog.mjs

@@ -1,5 +1,5 @@
 // Pure helper: extract a single version's release notes from a Keep-a-Changelog
-// file. Reused by scripts/release.mjs and .github/workflows/release.yml so the
+// file. Reused by scripts/release.mjs and .github/workflows/auto-tag.yml so the
 // GitHub Release body always matches the committed CHANGELOG.
 
 const HEADER_RE = /^##\s*\[([^\]]+)\]\s*[—–-]\s*(.+?)\s*$/;

package/src/release-provenance.mjs

@@ -0,0 +1,68 @@
+const DEPENDENCY_FIELDS = Object.freeze([
+  'dependencies',
+  'devDependencies',
+  'optionalDependencies',
+  'peerDependencies',
+]);
+
+export function packageHasSelfDependency(pkg = {}) {
+  const name = String(pkg.name || '');
+  if (!name) return false;
+  return DEPENDENCY_FIELDS.some((field) => Object.hasOwn(pkg[field] || {}, name));
+}
+
+export function evaluateReleaseProvenance({
+  name,
+  version,
+  headCommit,
+  tagCommit = '',
+  publishedIntegrity = '',
+  localIntegrity = '',
+  requirePublished = false,
+} = {}) {
+  const tag = `v${version}`;
+  if (tagCommit && tagCommit !== headCommit) {
+    return {
+      ok: false,
+      code: 'tag_commit_mismatch',
+      message: `${tag} aponta para ${tagCommit.slice(0, 7)}, não para ${headCommit.slice(0, 7)}. Bump a versão antes de alterar a árvore publicada.`,
+    };
+  }
+  if (publishedIntegrity && !tagCommit) {
+    return {
+      ok: false,
+      code: 'published_tag_missing',
+      message: `${name}@${version} está publicado, mas ${tag} não comprova o commit correspondente.`,
+    };
+  }
+  if (requirePublished && !publishedIntegrity) {
+    return {
+      ok: false,
+      code: 'published_artifact_missing',
+      message: `${name}@${version} ainda não possui integridade consultável no npm.`,
+    };
+  }
+  if (publishedIntegrity && localIntegrity && publishedIntegrity !== localIntegrity) {
+    return {
+      ok: false,
+      code: 'tarball_integrity_mismatch',
+      message: `o tarball de ${tag} diverge do artefato publicado no npm.`,
+    };
+  }
+  if (publishedIntegrity && !localIntegrity) {
+    return {
+      ok: false,
+      code: 'local_integrity_missing',
+      message: `não foi possível calcular a integridade do tarball de ${tag}.`,
+    };
+  }
+  return {
+    ok: true,
+    code: publishedIntegrity ? 'verified' : 'release_candidate',
+    name,
+    version,
+    tag,
+    commit: headCommit,
+    integrity: publishedIntegrity || localIntegrity || '',
+  };
+}

package/src/taxonomy.mjs

@@ -131,7 +131,7 @@ export const RUNNABLE_HOOKS = [
 // the MOST agent-agnostic mechanism it supports; the Claude Code plugin entry
 // (extraKnownMarketplaces + enabledPlugins) is an additive bonus, never the base.
 //   - mcp:          .mcp.json server entry (works on any MCP-capable agent)
-//   - wendkeepHook: a wendkeep-authored hook (runs via `npx wendkeep hook`, any agent)
+//   - wendkeepHook: a wendkeep-authored hook (runs via `npx --no-install wendkeep hook`, any agent)
 //   - installer:    cross-agent install script (used on non-Claude agents)
 // marketplace/plugin shapes are verified against a real ~/.claude/settings.json.
 export const COMPANIONS = [

package/src/vault-readme.mjs

@@ -52,7 +52,7 @@ export function renderVaultReadme({ projectName, vaultPath, withMcp = true, loca
     const mcpIntro = withMcp ? ', and read/written by the **MCPVault** MCP server' : '';
     const access = [`- **Obsidian:** open this folder with "Open folder as vault" → \`${vaultPath}\``];
     if (withMcp) access.push('- **Agent (MCP):** the `wendkeep-vault` server (MCPVault) points at this vault (set in `.mcp.json`), giving the agent read/write on the notes.');
-    access.push('- **Hooks:** Codex and Claude Code call `npx wendkeep hook <name>`; the vault is discovered from the project-local `.wendkeep.json` binding and checked against `.brain/PROJECT.json`.');
+    access.push('- **Hooks:** Codex and Claude Code call `npx --no-install wendkeep hook <name>`; the vault is discovered from the project-local `.wendkeep.json` binding and checked against `.brain/PROJECT.json`.');
     return `# Obsidian vault — ${name}
 
 > Knowledge base of **${name}**, captured automatically by wendkeep from AI coding-agent
@@ -84,7 +84,7 @@ ${access.join('\n')}
   const mcpIntro = withMcp ? ', e lida/escrita pelo MCP server **MCPVault**' : '';
   const access = [`- **Obsidian:** abra esta pasta com "Open folder as vault" → \`${vaultPath}\``];
   if (withMcp) access.push('- **Agente (MCP):** o servidor `wendkeep-vault` (MCPVault) é apontado para este vault pelo `wendkeep init` (em `.mcp.json`), dando ao agente leitura/escrita das notas.');
-  access.push('- **Hooks:** Codex e Claude Code chamam `npx wendkeep hook <name>`; o vault é descoberto pelo vínculo local `.wendkeep.json` e validado contra `.brain/PROJECT.json`.');
+  access.push('- **Hooks:** Codex e Claude Code chamam `npx --no-install wendkeep hook <name>`; o vault é descoberto pelo vínculo local `.wendkeep.json` e validado contra `.brain/PROJECT.json`.');
   return `# Vault Obsidian — ${name}
 
 > Base de conhecimento de **${name}**, capturada automaticamente pelo wendkeep a