wendkeep 0.80.2 → 0.85.0

package/docs/pt-BR/commands/tdd.md

@@ -0,0 +1,96 @@
+# Atestação TDD causal
+
+**PT-BR** · [English](../../en/commands/tdd.md)
+
+## Objetivo
+
+`wendkeep tdd` registra uma prova auditável de que um teste ligado a tarefa e requisito foi
+observado em RED e depois em GREEN no mesmo projeto, repositório, worktree, work session e change.
+Ele complementa cobertura, mutação, sensores e revisão; não substitui nenhum deles.
+
+## Quando usar
+
+Use antes e depois de implementar comportamento testável ligado a uma tarefa `[tdd]`.
+
+## Quando não usar
+
+Não use para health checks, testes já verdes ou falhas de ambiente. Use sensores/doctor para
+infraestrutura e um waiver humano apenas quando o comportamento realmente não for testável.
+
+## Pré-requisitos
+
+Change ativa, active context causal, tarefa com `[req:ID]`, teste relativo ao projeto e comando
+determinístico que possa ser repetido em RED e GREEN.
+
+## Sintaxe
+
+```bash
+wendkeep tdd red <task-id> --requirement <ID> --test <path> --command "<comando>" --session <id>
+wendkeep tdd green <task-id> --command "<comando>" --session <id>
+wendkeep tdd status <task-id> --session <id> [--json]
+wendkeep tdd waive <task-id> --requirement <ID> --reason "<motivo>" --authority "<humano>" --session <id>
+```
+
+`--test` pode ser repetido. Todos os paths são relativos ao projeto. `--change <slug>`,
+`--project <raiz>`, `--vault <cofre>` e `--json` seguem as convenções dos demais comandos.
+
+## Contrato RED → GREEN
+
+- RED válido é uma falha comportamental. Teste já verde, erro de sintaxe/import, módulo ausente,
+  configuração inválida ou comando inexistente gera `invalid`.
+- GREEN precisa manter a identidade causal e a branch do RED, executar com sucesso e observar
+  uma mudança de produção posterior ao RED. GREEN de outra worktree, tarefa ou requisito não fecha.
+- Mudança de path do teste fica em `review_flags`. Refactor ou commit depois do GREEN torna a prova
+  stale até nova execução de `tdd green`; o GREEN anterior permanece em `green_history`.
+- Waiver exige motivo e autoridade humana explícita. Não existe waiver silencioso.
+
+O store `08-Mudanças/<slug>/tdd-attestations.json` guarda digests SHA-256, cauda sanitizada e
+limitada a 2.000 caracteres e paths relativos — nunca a saída completa. O Evidence Envelope,
+`verificacao.json`, handoff e Observer expõem a atestação e seu ID ao revisor.
+
+## Gate por perfil
+
+- `OFF` e `FLOW`: atestação opcional.
+- `GUIDE`: recomendada para comportamento testável.
+- `GOVERN`: obrigatória quando a tarefa possui `[tdd]`.
+- `ASSURE`: obrigatória para tarefa executável com requisito ou sensor, salvo waiver explícito.
+
+Marque a tarefa assim:
+
+```markdown
+- [ ] 1.1 persiste a preferência [req:UI-1] [sensor:tests] [tdd]
+```
+
+Atestação stale/invalid, mutante sobrevivente ou ausência de GREEN/waiver produz
+`TASK_TDD_ATTESTATION_MISSING_OR_INVALID` no Task Contract e bloqueia Execute → Verify.
+
+## Exemplos
+
+```bash
+wendkeep tdd red 1.1 --requirement UI-1 --test tests/ui.test.mjs --command "npm test" --session abc
+wendkeep tdd green 1.1 --command "npm test" --session abc
+wendkeep tdd status 1.1 --session abc --json
+```
+
+## Resultado esperado
+
+Uma entrada causal em `tdd-attestations.json`, referenciada pelo Task Contract e pelas superfícies
+de evidência, com estado atual e histórico de revalidação auditáveis.
+
+## Opções e códigos de saída
+
+- `0`: estado observado é válido (`red-observed`, `green-observed` ou `waived`; status verde/waived).
+- `1`: observação executou, mas ficou `invalid`, RED ainda não chegou a GREEN ou status está stale.
+- `2`: uso, contexto, identidade, store ou autoridade de waiver inválidos.
+
+## Erros comuns e diagnóstico
+
+- `TDD_RED_ALREADY_GREEN`: escreva primeiro o teste discriminante que falha.
+- `TDD_RED_INFRASTRUCTURE_FAILURE`: corrija import, sintaxe, configuração ou comando e repita RED.
+- `TDD_GREEN_STALE_AFTER_REFACTOR`: repita GREEN no checkout atual.
+- `TDD_IMPLEMENTATION_NOT_AFTER_RED`: a prova não observou diff de produção posterior ao RED.
+
+## Próximos passos
+
+Rode [verify](verify.md), faça o passe independente e continue o
+[ciclo de changes](changes-and-verification.md).

package/docs/pt-BR/commands/verify.md

@@ -88,6 +88,11 @@ mesmo diretório e rename atômico. No deep, `verificacao.json` e `verdict.json`
 `evidenceEnvelopeId` e `evidenceBinding` completo; o verificador independente deve preservar ambos
 no verdict.
 
+O envelope carrega `tdd_attestations`, e `verificacao.json`, `tddAttestations`. Em GOVERN, uma tarefa marcada
+`[tdd]` precisa de GREEN atual ou waiver explícito; em ASSURE, isso vale para comportamento
+testável. Refactor/commit posterior ou mutante sobrevivente invalida o GREEN no Task Contract.
+Veja [Atestação TDD causal](tdd.md).
+
 Evidência v1 continua legível como `legacy-unbound`, nunca como autoridade equivalente. Rode
 `wendkeep change status <slug>` para ver `bound`, `stale` ou `context-mismatch`.
 

package/hooks/active-context-store.mjs

@@ -740,6 +740,7 @@ export function setActiveContextChange(vaultBase, identity, slug, options = {})
   }
   return mutateActiveContext(vaultBase, identity, (context) => ({
     ...context,
+    ...(identity?.hostCoverage ? { host_coverage: structuredClone(identity.hostCoverage) } : {}),
     change_slug: normalizedSlug,
     state: 'active',
   }), options);
@@ -760,6 +761,7 @@ export function setActiveContextDelivery(vaultBase, identity, deliveryId, option
   }
   return mutateActiveContext(vaultBase, identity, (context) => ({
     ...context,
+    ...(identity?.hostCoverage ? { host_coverage: structuredClone(identity.hostCoverage) } : {}),
     delivery_id: normalizedId,
     state: 'active',
   }), options);

package/hooks/change-core.mjs

@@ -286,6 +286,7 @@ export function parseTasks(md) {
   const dependencyReG = /\[depends:\s*([\w.-]+)\]/g;
   const artifactReG = /\[artifact:\s*([\w.-]+)\]/g;
   const phaseReG = /\[phase:\s*([\w.-]+)\]/g;
+  const tddReG = /\[tdd\]/gi;
   let m;
   while ((m = re.exec(String(md))) !== null) {
     let text = m[3].trim();
@@ -294,12 +295,15 @@ export function parseTasks(md) {
     const dependencies = [...new Set([...text.matchAll(dependencyReG)].map((entry) => entry[1]))];
     const artifacts = [...new Set([...text.matchAll(artifactReG)].map((entry) => entry[1]))];
     const phases = [...new Set([...text.matchAll(phaseReG)].map((entry) => entry[1]))];
+    const tdd = tddReG.test(text);
+    tddReG.lastIndex = 0;
     const sensor = sensors[0];
     if (sensors.length) text = text.replace(sensorReG, '');
     if (reqs.length) text = text.replace(reqReG, '');
     if (dependencies.length) text = text.replace(dependencyReG, '');
     if (artifacts.length) text = text.replace(artifactReG, '');
     if (phases.length) text = text.replace(phaseReG, '');
+    if (tdd) text = text.replace(tddReG, '');
     text = text.replace(/\s+/g, ' ').trim();
     // `sensor` stays as alias of the first id — older consumers keep working.
     // `req` stays as alias of the first id — older consumers keep working.
@@ -312,6 +316,7 @@ export function parseTasks(md) {
       ...(dependencies.length ? { dependencies } : {}),
       ...(artifacts.length ? { artifacts } : {}),
       ...(phases.length ? { phase: phases[0] } : {}),
+      ...(tdd ? { tdd: true } : {}),
     });
   }
   return tasks;

package/hooks/project-scope.mjs

@@ -1,6 +1,7 @@
 import { realpathSync } from 'node:fs';
 import { isAbsolute, resolve } from 'node:path';
 import { spawnSync } from 'node:child_process';
+import { resolveMcpToolEffect } from '../packages/mcp/src/effects.mjs';
 
 const TOOL_CWD_FIELDS = ['cwd', 'workdir', 'work_dir', 'working_directory', 'directory'];
 const SAFE_GIT_COMMANDS = new Set([
@@ -396,7 +397,7 @@ export function concurrentScopeConflicts(expectedScope, activeSessions = [], cur
 
 function toolIsMutable(input) {
   const name = input?.tool_name || input?.toolName || '';
-  if (/^mcp__/i.test(name)) return true;
+  if (/^mcp__/i.test(name)) return resolveMcpToolEffect(name).effect !== 'read';
   return MUTABLE_TOOL_NAMES.has(name) || /^mcp__.*(?:write|edit|delete|move|rename|apply)/i.test(name);
 }
 

package/hooks/session-ensure.mjs

@@ -36,6 +36,7 @@ import { resolveSessionIdentity, sessionWorkSessionPatch } from './session-ident
 import { readCodexRolloutMeta } from './codex-rollout-meta.mjs';
 import { mutateSessionNote } from './session-note-io.mjs';
 import { captureProjectScope, projectScopePatch } from './project-scope.mjs';
+import { buildHostCoverage } from '../src/host-capabilities.mjs';
 
 function sessionIdFromInput(input) {
   return input.session_id || input.sessionId || input.codex_session_id || '';
@@ -162,13 +163,16 @@ function allocateSessionPath(vaultBase, now, summary = 'session') {
   };
 }
 
-function buildAdditionalContext({ relPath, startedAt, vaultBase }) {
+function buildAdditionalContext({ relPath, startedAt, vaultBase, hostCoverage = null }) {
   const controlRel = toVaultRelative(vaultBase, controlPath(vaultBase));
   return [
     '<obsidian_session>',
     `Sessão Obsidian ativa: ${relPath}`,
     `Controle atualizado: ${controlRel}`,
     `Início: ${startedAt}`,
+    '<host_capability_coverage>',
+    `Host: ${hostCoverage?.host_id || 'unknown'}; coverage: ${hostCoverage?.degraded ? 'degraded' : 'complete'}.`,
+    '</host_capability_coverage>',
     '',
     'Use a sessão ativa como log desta conversa.',
     'Antes de registrar informações, leia `.brain/CURRENT_SESSION.md` no vault.',
@@ -273,7 +277,7 @@ function findSessionForInput(vaultBase, input, control) {
   return { sessionId, relPath: '', startedAt: '', fromRegistry: false };
 }
 
-function activateExistingSession({ vaultBase, relPath, startedAt, sessionId, input, now, identity, scopePatch = {} }) {
+function activateExistingSession({ vaultBase, relPath, startedAt, sessionId, input, now, identity, scopePatch = {}, hostCoverage = null }) {
   const sessionPath = join(vaultBase, relPath);
   if (!existsSync(sessionPath)) return false;
 
@@ -296,6 +300,7 @@ function activateExistingSession({ vaultBase, relPath, startedAt, sessionId, inp
     transcript_path: identity.transcriptPath,
     transcript_id: identity.transcriptId,
     provider: identity.provider,
+    host_coverage: hostCoverage,
     ...workSessionPatch(vaultBase, sessionId, input),
     ...scopePatch,
     ...causalTurnPatch(input, now),
@@ -303,7 +308,7 @@ function activateExistingSession({ vaultBase, relPath, startedAt, sessionId, inp
   return true;
 }
 
-function createSession({ vaultBase, sessionId, input, now, identity, scopePatch = {} }) {
+function createSession({ vaultBase, sessionId, input, now, identity, scopePatch = {}, hostCoverage = null }) {
   const summary = sessionSummaryFromInput(input);
   const { absPath, relPath } = allocateSessionPath(vaultBase, now, summary);
   const startedAt = formatLocalIso(now);
@@ -325,6 +330,7 @@ function createSession({ vaultBase, sessionId, input, now, identity, scopePatch
     transcript_path: identity.transcriptPath,
     transcript_id: identity.transcriptId,
     provider: identity.provider,
+    host_coverage: hostCoverage,
     ...workSessionPatch(vaultBase, sessionId, input),
     ...scopePatch,
     ...causalTurnPatch(input, now),
@@ -332,11 +338,11 @@ function createSession({ vaultBase, sessionId, input, now, identity, scopePatch
   return { relPath, startedAt };
 }
 
-function outputActiveContext({ relPath, startedAt, vaultBase, message }) {
+function outputActiveContext({ relPath, startedAt, vaultBase, message, hostCoverage = null }) {
   writeHookOutput({
     hookSpecificOutput: {
       hookEventName: 'UserPromptSubmit',
-      additionalContext: buildAdditionalContext({ relPath, startedAt, vaultBase }),
+      additionalContext: buildAdditionalContext({ relPath, startedAt, vaultBase, hostCoverage }),
     },
     systemMessage: message,
   });
@@ -359,6 +365,11 @@ function main() {
     return;
   }
   const sessionId = identity.canonicalConversationId;
+  const hostCoverage = buildHostCoverage({
+    hostId: identity.provider,
+    hostVersion: input.host_version || input.hostVersion || process.env.WENDKEEP_HOST_VERSION || '',
+    observedAt: now.toISOString(),
+  });
 
   // UserPromptSubmit also fires inside Codex subagents. The child belongs to the parent's
   // observability graph, but it is not a new main turn: registering it through causalTurnPatch
@@ -369,6 +380,7 @@ function main() {
       upsertSessionRegistry(vaultBase, sessionId, {
         transcript_paths: [identity.transcriptPath],
         provider: identity.provider,
+        host_coverage: hostCoverage,
         ...workSessionPatch(vaultBase, sessionId, input),
       });
     }
@@ -407,6 +419,7 @@ function main() {
           transcript_path: identity.transcriptPath,
           transcript_id: identity.transcriptId,
           provider: identity.provider,
+          host_coverage: hostCoverage,
           ...workSessionPatch(vaultBase, sessionId, input),
           ...scopePatch,
           ...causalTurnPatch(input, now),
@@ -453,6 +466,7 @@ function main() {
         transcript_path: identity.transcriptPath,
         transcript_id: identity.transcriptId,
         provider: identity.provider,
+        host_coverage: hostCoverage,
         ...workSessionPatch(vaultBase, sessionId || control.session_id, input),
         ...scopePatch,
         ...causalTurnPatch(input, now),
@@ -466,22 +480,24 @@ function main() {
   const resolvedTarget = registered?.session_file
     ? { sessionId, relPath: registered.session_file, startedAt: registered.started_at || '' }
     : { sessionId, relPath: '', startedAt: '' };
-  if (resolvedTarget.relPath && activateExistingSession({ vaultBase, relPath: resolvedTarget.relPath, startedAt: resolvedTarget.startedAt, sessionId, input, now, identity, scopePatch })) {
+  if (resolvedTarget.relPath && activateExistingSession({ vaultBase, relPath: resolvedTarget.relPath, startedAt: resolvedTarget.startedAt, sessionId, input, now, identity, scopePatch, hostCoverage })) {
     outputActiveContext({
       relPath: resolvedTarget.relPath,
       startedAt: resolvedTarget.startedAt || formatLocalIso(now),
       vaultBase,
       message: `Sessão Obsidian reaberta em ${resolvedTarget.relPath}. ${basename(controlPath(vaultBase))} atualizado.`,
+      hostCoverage,
     });
     return;
   }
 
-  const created = createSession({ vaultBase, sessionId, input, now, identity, scopePatch });
+  const created = createSession({ vaultBase, sessionId, input, now, identity, scopePatch, hostCoverage });
   outputActiveContext({
     relPath: created.relPath,
     startedAt: created.startedAt,
     vaultBase,
     message: `Sessão Obsidian criada em ${created.relPath}. ${basename(controlPath(vaultBase))} atualizado.`,
+    hostCoverage,
   });
 }
 

package/hooks/session-start.mjs

@@ -34,6 +34,7 @@ import {
 } from './obsidian-common.mjs';
 import { resolveSessionIdentity, sessionWorkSessionPatch } from './session-identity.mjs';
 import { captureProjectScope, projectScopePatch } from './project-scope.mjs';
+import { buildHostCoverage } from '../src/host-capabilities.mjs';
 
 export function buildSessionContent({ relPath, now, summary = 'session', provider: providerId, sessionId = '' }) {
   const date = formatDate(now);
@@ -133,13 +134,21 @@ export function allocateSessionPath(vaultBase, now, summary = 'session') {
   };
 }
 
-function buildAdditionalContext({ relPath, startedAt, vaultBase }) {
+function buildAdditionalContext({ relPath, startedAt, vaultBase, hostCoverage = null }) {
   const controlRel = toVaultRelative(vaultBase, controlPath(vaultBase));
+  const degradation = (hostCoverage?.degradations || [])
+    .filter((item) => item.capability)
+    .map((item) => `${item.capability}=${item.state}`)
+    .join(', ');
   return [
     '<obsidian_session>',
     `Sessão Obsidian ativa: ${relPath}`,
     `Controle atualizado: ${controlRel}`,
     `Início: ${startedAt}`,
+    '<host_capability_coverage>',
+    `Host: ${hostCoverage?.host_id || 'unknown'}; coverage: ${hostCoverage?.degraded ? 'degraded' : 'complete'}.`,
+    ...(degradation ? [`Lacunas declaradas: ${degradation}. Não fabrique autoridade ausente.`] : []),
+    '</host_capability_coverage>',
     '',
     'Use a sessão ativa como log desta conversa.',
     'Antes de registrar informações, leia `.brain/CURRENT_SESSION.md` no vault.',
@@ -159,6 +168,11 @@ function main() {
   warnIfDefaultVault(input);
   const now = new Date();
   const provider = providerMeta();
+  const hostCoverage = buildHostCoverage({
+    hostId: provider.id,
+    hostVersion: input.host_version || input.hostVersion || process.env.WENDKEEP_HOST_VERSION || '',
+    observedAt: now.toISOString(),
+  });
   const identity = resolveSessionIdentity(vaultBase, input, provider.id);
   if (identity.state !== 'resolved') {
     writeHookOutput({
@@ -194,6 +208,7 @@ function main() {
   const activationStartedAt = formatLocalIso(now);
   const registerActivation = (canonicalSessionId, patch) => upsertSessionRegistry(vaultBase, canonicalSessionId, {
     ...patch,
+    host_coverage: hostCoverage,
     ...workSessionPatchFor(canonicalSessionId),
     ...scopePatchFor(canonicalSessionId),
     activation_id: activationId,
@@ -232,7 +247,7 @@ function main() {
           additionalContext: buildAdditionalContext({
             relPath: control.session_file,
             startedAt: control.started_at,
-            vaultBase,
+            vaultBase, hostCoverage,
           }),
         },
       });
@@ -275,7 +290,7 @@ function main() {
       writeHookOutput({
         hookSpecificOutput: {
           hookEventName: 'SessionStart',
-          additionalContext: buildAdditionalContext({ relPath: known.session_file, startedAt, vaultBase }),
+          additionalContext: buildAdditionalContext({ relPath: known.session_file, startedAt, vaultBase, hostCoverage }),
         },
       });
       return;
@@ -318,7 +333,7 @@ function main() {
       writeHookOutput({
         hookSpecificOutput: {
           hookEventName: 'SessionStart',
-          additionalContext: buildAdditionalContext({ relPath: match.session_file, startedAt, vaultBase }),
+          additionalContext: buildAdditionalContext({ relPath: match.session_file, startedAt, vaultBase, hostCoverage }),
         },
       });
       return;
@@ -349,7 +364,7 @@ function main() {
   writeHookOutput({
     hookSpecificOutput: {
       hookEventName: 'SessionStart',
-      additionalContext: buildAdditionalContext({ relPath, startedAt, vaultBase }),
+      additionalContext: buildAdditionalContext({ relPath, startedAt, vaultBase, hostCoverage }),
     },
     systemMessage: [
       `Sessão ${provider.label} criada em ${relPath}.`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wendkeep",
-  "version": "0.80.2",
+  "version": "0.85.0",
   "description": "Vault-first persistent memory for AI coding agents, with an optional profile-aware governance runtime: OFF, FLOW, GUIDE, GOVERN, or ASSURE. Local-first and agent-agnostic (Claude Code, Codex, Cursor…).",
   "type": "module",
   "workspaces": [
@@ -41,8 +41,8 @@
     "node": ">=18"
   },
   "scripts": {
-    "precheck": "node --check src/task-contracts.mjs && node --check src/task-leases.mjs && node --check src/task.mjs && node --check src/change.mjs && node --check src/archive-operation-lock.mjs && node --check src/worktree.mjs && node --check src/worktree-cleanup.mjs && node --check src/provenance-gate.mjs && node --check src/provenance-sources.mjs && node --check src/receipt-ledger.mjs && node --check src/evidence-envelope.mjs && node --check src/context.mjs && node --check src/active-context-health.mjs && node --check src/active-context-runtime.mjs && node --check hooks/active-context-store.mjs && node --check hooks/change-core.mjs && node --check hooks/brain-inject.mjs && node --check hooks/change-context.mjs && node --check hooks/session-stop.mjs && node --check packages/vault/src/worktree-metadata.mjs && node --check packages/vault/src/evidence-envelope.mjs && node --check packages/vault/src/memory-handoff.mjs",
-    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check scripts/release-provenance.mjs && node --check scripts/run-scope.mjs && node --check src/release-provenance.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/active-context-health.mjs && node --check src/project-vault.mjs && node --check src/observer-auth.mjs && node --check src/observer-privacy.mjs && node --check src/observer-snapshot.mjs && node --check src/observer-store.mjs && node --check src/observer-memory.mjs && node --check src/observer-memory-publish.mjs && node --check src/observer-sql-store.mjs && node --check src/observer-sql-migrate.mjs && node --check src/observer-sql-publish.mjs && node --check src/observer-transcript-store.mjs && node --check src/observer-server.mjs && node --check src/observer.mjs && node --check src/observer-publish.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check src/work-kind.mjs && node --check src/delivery.mjs && node --check web/observer/app.mjs && node --check hooks/observer-publish.mjs && node --check hooks/evidence-context.mjs && node --check hooks/active-context-handoff-evidence.mjs && node --check hooks/evidence-recall.mjs && node --check hooks/memory-scope.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-scope.mjs && node --check packages/vault/src/memory-candidate-policy.mjs && node --check packages/vault/src/evidence-recall.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
+    "precheck": "node --check src/capabilities.mjs && node --check src/host-capabilities.mjs && node --check src/task-contracts.mjs && node --check src/task-leases.mjs && node --check src/task.mjs && node --check src/change.mjs && node --check src/archive-operation-lock.mjs && node --check src/worktree.mjs && node --check src/worktree-cleanup.mjs && node --check src/provenance-gate.mjs && node --check src/provenance-sources.mjs && node --check src/receipt-ledger.mjs && node --check src/evidence-envelope.mjs && node --check src/context.mjs && node --check src/active-context-health.mjs && node --check src/active-context-runtime.mjs && node --check hooks/active-context-store.mjs && node --check hooks/change-core.mjs && node --check hooks/brain-inject.mjs && node --check hooks/change-context.mjs && node --check hooks/session-stop.mjs && node --check packages/vault/src/worktree-metadata.mjs && node --check packages/vault/src/evidence-envelope.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/integrations/src/capabilities.mjs && node --check packages/pi/src/index.mjs && node --check src/sync-protocol.mjs && node --check src/sync-outbox.mjs && node --check src/sync-adapters.mjs && node --check src/sync-protocol-cli.mjs && node --check packages/mcp/src/sync.mjs && node --check src/portable.mjs && node --check src/tdd.mjs && node --check src/tdd-attestation.mjs && node --check src/tdd-attestation-store.mjs",
+    "check": "node --check scripts/release.mjs && node --check scripts/release-plan.mjs && node --check scripts/release-provenance.mjs && node --check scripts/run-scope.mjs && node --check src/release-provenance.mjs && node --check bin/wendkeep.mjs && node --check packages/cli/src/index.mjs && node --check src/mcp.mjs && node --check src/init.mjs && node --check src/doctor.mjs && node --check src/active-context-health.mjs && node --check src/project-vault.mjs && node --check src/observer-auth.mjs && node --check src/observer-privacy.mjs && node --check src/observer-snapshot.mjs && node --check src/observer-store.mjs && node --check src/observer-memory.mjs && node --check src/observer-memory-publish.mjs && node --check src/observer-sql-store.mjs && node --check src/observer-sql-migrate.mjs && node --check src/observer-sql-publish.mjs && node --check src/observer-transcript-store.mjs && node --check src/observer-server.mjs && node --check src/observer.mjs && node --check src/observer-publish.mjs && node --check src/operating-profile.mjs && node --check src/profile.mjs && node --check src/flow.mjs && node --check src/work-kind.mjs && node --check src/delivery.mjs && node --check web/observer/app.mjs && node --check hooks/observer-publish.mjs && node --check hooks/evidence-context.mjs && node --check hooks/active-context-handoff-evidence.mjs && node --check hooks/evidence-recall.mjs && node --check hooks/memory-scope.mjs && node --check hooks/operating-profile-runtime.mjs && node --check hooks/operating-profile-task-store.mjs && node --check hooks/flow-core.mjs && node --check hooks/flow-protected-policy.mjs && node --check hooks/git-snapshot.mjs && node --check hooks/vault-path-safety.mjs && node --check hooks/vault-runtime-store.mjs && node --check packages/harness/src/index.mjs && node --check packages/harness/src/flow-store.mjs && node --check packages/harness/src/operating-profile.mjs && node --check packages/harness/src/sensors-core.mjs && node --check packages/integrations/src/host-hooks.mjs && node --check packages/integrations/src/hook-envelope.mjs && node --check packages/integrations/src/prompt-content.mjs && node --check packages/integrations/src/transcript-usage.mjs && node --check packages/integrations/src/transcripts.mjs && node --check packages/integrations/src/session-identity.mjs && node --check packages/integrations/src/index.mjs && node --check packages/mcp/src/audit.mjs && node --check packages/mcp/src/cli.mjs && node --check packages/mcp/src/config.mjs && node --check packages/mcp/src/effects.mjs && node --check packages/mcp/src/executor.mjs && node --check packages/mcp/src/server.mjs && node --check packages/mcp/src/stdio.mjs && node --check packages/mcp/src/index.mjs && node --check packages/vault/src/index.mjs && node --check packages/vault/src/project-vault.mjs && node --check packages/vault/src/vault-path-safety.mjs && node --check packages/vault/src/locale.mjs && node --check packages/vault/src/memory-schema.mjs && node --check packages/vault/src/memory-mode.mjs && node --check packages/vault/src/memory-scope.mjs && node --check packages/vault/src/memory-candidate-policy.mjs && node --check packages/vault/src/evidence-recall.mjs && node --check packages/vault/src/memory-handoff.mjs && node --check packages/vault/src/memory-store.mjs && node --check packages/vault/src/validate-core.mjs && node --check packages/vault/src/validate-memory.mjs",
     "test": "node --test --test-concurrency=2",
     "test:core": "node scripts/run-scope.mjs core",
     "release": "node scripts/release.mjs",

package/packages/cli/src/index.mjs

@@ -28,7 +28,7 @@ Usage:
     --vault <path>         Obsidian vault folder (default: <project>/.<project-name>-vault).
     --project <path>       Project root to wire (default: current directory).
     --profile <name>       Operating profile: OFF, FLOW, GUIDE, GOVERN (default), or ASSURE.
-    --no-mcp               Do not add the mcpvault MCP server to .mcp.json.
+    --no-mcp               Do not add the native WendKeep MCP server to .mcp.json.
     --companions <csv>     Companion plugins/MCP to pin: context-mode,caveman,understand-anything
                            (default: none — opt in explicitly). dotcontext is legacy — the native a2 loop replaces it.
     --no-companions        Skip companion plugins/MCP entirely.
@@ -49,8 +49,16 @@ Usage:
                            package first (npm i -D wendkeep@latest); a running process
                            cannot replace itself. · --vault P · --profile <name> · --yes
                            · --vscode-worktree-tasks.
+  wendkeep sync status [...]   Optional local-first protocol: status | push | pull | conflicts | resolve.
+                           Uses explicit CAS/conflicts and an offline outbox; --remote path or --url HTTPS.
 
   wendkeep doctor [--vault P]  Health check. --scope core|runtime · --strict for CI/release.
+  wendkeep portable <sub>      Shared authored state: status | export | import | diff.
+                           Default file: .wendkeep/portable/state.json; private runtime stays local.
+  wendkeep mcp <serve|config>  Native semantic MCP over stdio, or client config generation.
+                           serve: --vault P · --timeout-ms N.
+                           config: --client generic|claude|codex|cursor · --vault P.
+  wendkeep capabilities [...]  Show declared lifecycle/effect coverage by host. --host <id> · --host-version <v> · --json.
   wendkeep observer <sub>     Local multi-project Observer: serve | register | publish | reconcile | status.
   wendkeep worktree create <slug> [--base ref] [--branch name] [--open vscode|none] [--json]
   wendkeep worktree list [--json]
@@ -66,6 +74,8 @@ Usage:
                            Repair revalidates orphan/removed contexts or expired request leases without deleting history.
   wendkeep task <sub>          Typed task contracts: list | show | evaluate | claim | release.
                            Resolves the change from the causal active context; supports --session/--change/--json.
+  wendkeep tdd <sub>           Causal TDD attestations: red | green | status | waive.
+                           Binds task, requirement, test paths, worktree and work session.
   wendkeep change <sub>        Change lifecycle: new [--simple|--guide] | use | bind <slug> --session <id> | continue | list | show |
                            status | done <id> | undone <id> | diff | archive [--force] | abandon | relink | backlink.
                            --session <id> selects the causal active_context for implicit change operations.
@@ -213,6 +223,15 @@ async function main(argv) {
     } else if (cmd === 'context') {
       const { CONTEXT_HELP } = await import('../../../src/context.mjs');
       process.stdout.write(CONTEXT_HELP);
+    } else if (cmd === 'portable') {
+      const { PORTABLE_HELP } = await import('../../../src/portable.mjs');
+      process.stdout.write(PORTABLE_HELP);
+    } else if (cmd === 'mcp') {
+      const { MCP_HELP } = await import('../../../src/mcp.mjs');
+      process.stdout.write(MCP_HELP);
+    } else if (cmd === 'capabilities') {
+      const { CAPABILITIES_HELP } = await import('../../../src/capabilities.mjs');
+      process.stdout.write(CAPABILITIES_HELP);
     } else {
       process.stdout.write(HELP);
     }
@@ -226,7 +245,7 @@ async function main(argv) {
     // `sync` starts with `init` and resolves the freshly bound Vault itself. Pre-resolving
     // here would prevent that repair step from reporting a corrupt binding as its own
     // first-stage failure (and could never make it as far as the guarded init).
-    && !['init', 'sync', 'worktree', 'hook', 'observer', '--version', '-v', '--help', '-h', 'help'].includes(cmd)) {
+    && !['init', 'sync', 'worktree', 'hook', 'observer', 'mcp', 'capabilities', '--version', '-v', '--help', '-h', 'help'].includes(cmd)) {
     await preferProjectVault(rest);
   }
   switch (cmd) {
@@ -243,12 +262,28 @@ async function main(argv) {
       process.exit(runDoctor(rest));
       break;
     }
+    case 'portable': {
+      const { runPortable } = await import('../../../src/portable.mjs');
+      process.exit(runPortable(rest));
+      break;
+    }
     case 'observer': {
       const { runObserver } = await import('../../../src/observer.mjs');
       const observerExitCode = await runObserver(rest);
       if (rest[0] !== 'serve') process.exit(observerExitCode);
       break;
     }
+    case 'mcp': {
+      const { runMcp } = await import('../../../src/mcp.mjs');
+      const mcpExitCode = await runMcp(rest);
+      if (mcpExitCode) process.exit(mcpExitCode);
+      break;
+    }
+    case 'capabilities': {
+      const { runCapabilities } = await import('../../../src/capabilities.mjs');
+      process.exit(runCapabilities(rest));
+      break;
+    }
     case 'worktree': {
       const { runWorktree } = await import('../../../src/worktree.mjs');
       process.exit(await runWorktree(rest));
@@ -299,6 +334,11 @@ async function main(argv) {
       process.exit(runTask(rest));
       break;
     }
+    case 'tdd': {
+      const { runTdd } = await import('../../../src/tdd.mjs');
+      process.exit(runTdd(rest));
+      break;
+    }
     case 'session': {
       const { runSession } = await import('../../../src/session.mjs');
       runSession(rest);

package/packages/harness/src/sensors-core.mjs

@@ -73,12 +73,25 @@ export function loadSensors(projectRoot, file = 'wendkeep.sensors.json') {
 // both into [] made every sensor report "sensor não definido" — a misleading diagnosis.
 export function loadSensorsDetailed(projectRoot, file = 'wendkeep.sensors.json') {
   const path = join(projectRoot, file);
-  if (!existsSync(path)) return { sensors: [], missing: true, error: null, path };
+  if (!existsSync(path)) return {
+    sensors: [], requiredHostCapabilities: [], hostCapabilityWaivers: [], missing: true, error: null, path,
+  };
   try {
     const data = JSON.parse(readFileSync(path, 'utf8'));
-    return { sensors: Array.isArray(data.sensors) ? data.sensors : [], missing: false, error: null, path };
+    return {
+      sensors: Array.isArray(data.sensors) ? data.sensors : [],
+      requiredHostCapabilities: Array.isArray(data.requires_host_capabilities)
+        ? data.requires_host_capabilities : [],
+      hostCapabilityWaivers: Array.isArray(data.host_capability_waivers)
+        ? data.host_capability_waivers : [],
+      missing: false,
+      error: null,
+      path,
+    };
   } catch (e) {
-    return { sensors: [], missing: false, error: e.message, path };
+    return {
+      sensors: [], requiredHostCapabilities: [], hostCapabilityWaivers: [], missing: false, error: e.message, path,
+    };
   }
 }