@aliyunrds/ctxdb 1.0.7 → 1.0.8-beta.1

package/dist/cli/main.js

@@ -16,13 +16,17 @@ import {
   uploadFile,
   uploadText,
   validateLocalFile
-} from "../chunk-QVXDI77N.js";
+} from "../chunk-NFAPLK4C.js";
 import {
+  AGENT_CHOICES,
+  CtxdbError,
   DEFAULT_BASE_URL,
   DEFAULT_USER_ID,
   HttpClient,
+  PACKAGE_NAME,
   PACKAGE_VERSION,
   SUPPORTED_AGENTS,
+  SUPPORTED_AGENT_CHOICES,
   agentFromEnv,
   agentHomeDir,
   agentHomeDirs,
@@ -39,12 +43,16 @@ import {
   save,
   updateConfiguredDebug,
   writeInstalledPkgVersion
-} from "../chunk-S5W4FQ7M.js";
+} from "../chunk-KYW76CL7.js";
 import {
   beginUpdateNotification,
   completeUpdateNotification,
   runSelfUpdate
-} from "../chunk-Z6OHSEF2.js";
+} from "../chunk-ULAWTBBC.js";
+import {
+  DISTRIBUTION_MANIFEST
+} from "../chunk-R67JELM7.js";
+import "../chunk-VIG4SYLU.js";
 
 // src/cli/util.ts
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
@@ -55,6 +63,8 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   // setup / init
   "no-install-skill",
   "no-validate",
+  "no-browser",
+  "device-code",
   // update / upgrade
   "self-update",
   "no-self-update",
@@ -78,8 +88,34 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   // memory search / kb search (three-tier projection)
   "raw",
   // kb search / memory search --knowledge (W3 compaction bypass)
-  "full"
+  "full",
   // debug recall full-content human output
+  // promotion
+  "is-default",
+  // promotion template create / update
+  "clear-default-kb",
+  // promotion settings update (clears with an empty string)
+  // review
+  "default",
+  // review template create/update --default
+  "no-default",
+  // review template update --no-default
+  "review-enabled",
+  // review settings update
+  "no-review-enabled",
+  // review settings update
+  "rewrite-enabled",
+  // review settings update
+  "no-rewrite-enabled",
+  // review settings update
+  "conflict-detection-enabled",
+  // review settings update
+  "no-conflict-detection-enabled",
+  // review settings update
+  "rewrite-auto-ingest-enabled",
+  // review settings update
+  "no-rewrite-auto-ingest-enabled"
+  // review settings update
 ]);
 function parseArgs(argv, booleanFlags = BOOLEAN_FLAGS) {
   const positional = [];
@@ -306,7 +342,9 @@ function fail(message, code = 1) {
 }
 
 // src/cli/main.ts
+import { realpathSync } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
+import { basename as basename2, resolve as resolve2 } from "path";
 
 // src/setup/installer.ts
 import {
@@ -327,8 +365,9 @@ import { join, dirname, resolve } from "path";
 import { fileURLToPath } from "url";
 import { execFileSync } from "child_process";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
-var UNINSTALL_NPM_HINT = "To also remove the npm binaries: `npm uninstall -g @aliyunrds/ctxdb @aliyunrds/ctxdb-shared`";
-var UNINSTALL_ORDER_HINT = "When you eventually want to uninstall: run `ctxdb uninstall --purge-all` FIRST, then `npm uninstall -g @aliyunrds/ctxdb @aliyunrds/ctxdb-shared`. (npm 7+ removed uninstall lifecycle hooks, so the order matters \u2014 otherwise agent settings.json hooks + ~/.ctxdb/ residue stay behind.)";
+var PACKAGE_UNINSTALL_TARGETS = DISTRIBUTION_MANIFEST.id === "internal" ? DISTRIBUTION_MANIFEST.packageName : `${PACKAGE_NAME} @aliyunrds/ctxdb-shared`;
+var UNINSTALL_NPM_HINT = `To also remove the npm binaries: \`npm uninstall -g ${PACKAGE_UNINSTALL_TARGETS}\``;
+var UNINSTALL_ORDER_HINT = `When you eventually want to uninstall: run \`ctxdb uninstall --purge-all\` FIRST, then \`npm uninstall -g ${PACKAGE_UNINSTALL_TARGETS}\`. (npm 7+ removed uninstall lifecycle hooks, so the order matters \u2014 otherwise agent settings.json hooks + ~/.ctxdb/ residue stay behind.)`;
 var HERMES_RESTART_HINT = "Restart any running Hermes CLI or gateway process to load the registered hooks; Hermes registers shell hooks only at process startup.";
 var HERMES_ALLOWLIST_ACTION_HINT = "Next action [hermes-hook-allowlist]: run `hermes --accept-hooks chat`; after Hermes starts, exit the chat and rerun `ctxdb setup --agent hermes`, then restart any running Hermes CLI or gateway process.";
 var HERMES_WEBUI_GATEWAY_HINT = "Using hermes-webui? Its default legacy backend does not load Hermes shell hooks. Set `HERMES_WEBUI_CHAT_BACKEND=gateway` to route chat through Hermes Gateway; if the gateway requires authentication, also set `HERMES_WEBUI_GATEWAY_API_KEY`, then restart hermes-webui. Reference: https://github.com/nesquena/hermes-webui/blob/master/docs/advanced-chat-setup.md#gateway-backed-browser-chat";
@@ -349,6 +388,8 @@ function skillInstallRoot(agent) {
       return join(homedir(), ".config", "opencode", "skills");
     case "hermes":
       return join(homedir(), ".hermes", "skills");
+    case "workbuddy":
+      return join(homedir(), ".workbuddy", "skills");
   }
 }
 var SKILL_DIRS = ["contextdb-memory", "contextdb-knowledge"];
@@ -369,6 +410,8 @@ function hookConfigPath(agent) {
       return join(homedir(), ".codex", "hooks.json");
     case "claude":
       return join(homedir(), ".claude", "settings.json");
+    case "workbuddy":
+      return join(homedir(), ".workbuddy", "settings.json");
     case "opencode":
     case "hermes":
       return null;
@@ -424,6 +467,7 @@ async function runSetup(options) {
     existingAgentHomes = inspectAgentHomes(agent).existing;
   }
   const cfg = load({ agent });
+  const persistedCredentialConfig = options.persistCredential === false ? load({ agent, env: {}, managedCredentials: false }) : null;
   if (options.apiKey) cfg.apiKey = options.apiKey;
   if (options.baseUrl) cfg.baseUrl = options.baseUrl.replace(/\/+$/, "");
   else if (!cfg.baseUrl) cfg.baseUrl = DEFAULT_BASE_URL;
@@ -436,19 +480,38 @@ async function runSetup(options) {
     });
     return { ok: false, steps };
   }
-  save(cfg, void 0, { agent });
+  const omitApiKey = options.persistCredential === false;
+  const persistedCfg = omitApiKey ? {
+    ...cfg,
+    apiKey: null,
+    baseUrl: persistedCredentialConfig?.baseUrl ?? DEFAULT_BASE_URL
+  } : cfg;
+  save(persistedCfg, void 0, { agent, omitApiKey });
   steps.push({
     step: "write-config",
     ok: true,
     detail: `${agent}: ${cfg.baseUrl} (user_id=${cfg.userId})`
   });
-  if (isBuiltinAgent(agent) && !configuredAgents().includes("default")) {
-    save(cfg, void 0, { agent: "default" });
-    steps.push({
-      step: "write-default-config",
-      ok: true,
-      detail: `default: copied from ${agent}`
-    });
+  if (isBuiltinAgent(agent)) {
+    const hasDefault = configuredAgents().includes("default");
+    if (!hasDefault) {
+      save(persistedCfg, void 0, { agent: "default", omitApiKey });
+      steps.push({
+        step: "write-default-config",
+        ok: true,
+        detail: `default: copied from ${agent}`
+      });
+    } else if (omitApiKey) {
+      const persistedDefault = load({
+        agent: "default",
+        env: {},
+        managedCredentials: false
+      });
+      save(persistedDefault, void 0, {
+        agent: "default",
+        omitApiKey: true
+      });
+    }
   }
   if (installSkill && isBuiltinAgent(agent) && existingAgentHomes.includes(agentHomeDir(agent))) {
     const installRoot = skillInstallRoot(agent);
@@ -758,6 +821,7 @@ async function runSetupAll(options = {}, dependencies = {}) {
       apiKey,
       baseUrl: options.baseUrl ?? existing.baseUrl,
       userId: options.userId ?? existing.userId,
+      persistCredential: options.persistCredential,
       installSkill: options.installSkill,
       validate: options.validate
     }));
@@ -1308,9 +1372,13 @@ function stripCtxdbHooks(agent) {
   if (!path) return 0;
   return stripCtxdbHooksFromFile(path);
 }
+var CTXDB_PACKAGE_NAMES = [
+  "@aliyunrds/ctxdb",
+  "@ali/ctxdb-internal"
+];
 function locateHookPaths() {
   const here = dirname(fileURLToPath(import.meta.url));
-  const pkgRoot = walkUpToPackageJson(here, "@aliyunrds/ctxdb");
+  const pkgRoot = walkUpToPackageJson(here, CTXDB_PACKAGE_NAMES);
   if (!pkgRoot) return null;
   const preferSrc = here.includes("/src/") || here.includes("\\src\\");
   if (preferSrc) {
@@ -1344,7 +1412,7 @@ function hookPathsFromDir(dir, ext) {
 }
 function locateSkillDir(variant) {
   const here = dirname(fileURLToPath(import.meta.url));
-  const pkgRoot = walkUpToPackageJson(here, "@aliyunrds/ctxdb");
+  const pkgRoot = walkUpToPackageJson(here, CTXDB_PACKAGE_NAMES);
   if (!pkgRoot) return null;
   const preferSrc = here.includes("/src/") || here.includes("\\src\\");
   if (preferSrc) {
@@ -1358,13 +1426,14 @@ function locateSkillDir(variant) {
   return null;
 }
 function walkUpToPackageJson(start, expectedName) {
+  const expectedNames = Array.isArray(expectedName) ? expectedName : [expectedName];
   let cur = start;
   for (let i = 0; i < 8; i++) {
     const p = join(cur, "package.json");
     if (existsSync(p)) {
       try {
         const pkg = JSON.parse(readFileSync(p, "utf-8"));
-        if (pkg.name === expectedName) return cur;
+        if (expectedNames.includes(pkg.name)) return cur;
       } catch {
       }
     }
@@ -1403,7 +1472,8 @@ var SKILL_INSTALL_TARGETS = {
   claude: join(homedir(), ".claude", "skills"),
   opencode: join(homedir(), ".config", "opencode", "skills"),
   openclaw: join(homedir(), ".openclaw", "skills"),
-  hermes: join(homedir(), ".hermes", "skills")
+  hermes: join(homedir(), ".hermes", "skills"),
+  workbuddy: join(homedir(), ".workbuddy", "skills")
 };
 function skillInstallTargetPath(target) {
   return SKILL_INSTALL_TARGETS[target] ?? null;
@@ -1467,7 +1537,7 @@ function opencodeBundlePath() {
 }
 function resolveOpencodePluginEntry() {
   const here = dirname(fileURLToPath(import.meta.url));
-  const pkgRoot = walkUpToPackageJson(here, "@aliyunrds/ctxdb");
+  const pkgRoot = walkUpToPackageJson(here, CTXDB_PACKAGE_NAMES);
   if (!pkgRoot) return null;
   const candidates = [
     join(pkgRoot, "dist", "opencode", "index.js"),
@@ -1508,7 +1578,7 @@ var LEGACY_MARKER_VALUES = ["@aliyunrds/ctxdb-qoder"];
 var TOOL_SCOPED_EVENTS = /* @__PURE__ */ new Set(["PreToolUse", "PostToolUse"]);
 function appendOne(hooks, event, command, agent) {
   if (!Array.isArray(hooks[event])) hooks[event] = [];
-  const useExecForm = agent === "claude";
+  const useExecForm = agent === "claude" || agent === "workbuddy";
   const cmdRunner = agent === "qoder";
   const shellCmd = process.platform === "win32" ? cmdRunner ? `node ${command.replace(/\\/g, "/")} --agent=${agent}` : `"${process.execPath.replace(/\\/g, "/")}" "${command.replace(/\\/g, "/")}" --agent=${agent}` : `${process.execPath} ${command} --agent=${agent}`;
   const dup = hooks[event].some(
@@ -1997,6 +2067,7 @@ async function runUpgrade(options = {}) {
   for (const agent of agents) {
     results[agent] = await runSetup({
       agent,
+      persistCredential: options.persistCredential,
       // Updating local package artifacts must not depend on service
       // connectivity. Users can run `ctxdb ping` separately.
       validate: false
@@ -2010,7 +2081,7 @@ async function runUpgrade(options = {}) {
 var STATUS_HELP = `ctxdb status \u2014 inspect configuration and connectivity
 
 USAGE
-  ctxdb status [--agent <qoder|qoderwork|qwenwork|codex|claude|opencode|hermes|default> | --all] [--json]
+  ctxdb status [--agent <${AGENT_CHOICES}> | --all] [--json]
 
 FLAGS
   --agent <name>  Inspect exactly one Agent profile
@@ -2136,7 +2207,7 @@ async function ping(args) {
 var HELP = `ctxdb setup \u2014 configure an agent
 
 USAGE
-  ctxdb setup [--agent <qoder|qoderwork|qwenwork|codex|claude|opencode|hermes> | --all]
+  ctxdb setup [--agent <${SUPPORTED_AGENT_CHOICES}> | --all]
               [--api-key=K] [--base-url=URL] [--user-id=ID]
               [--no-install-skill] [--no-validate] [--json]
 
@@ -2157,7 +2228,7 @@ BEHAVIOR
                    any running Hermes CLI/gateway process to load the hooks.
 
 FLAGS
-  --agent <name>        Target agent (qoder|qoderwork|qwenwork|codex|claude|opencode|hermes)
+  --agent <name>        Target agent (${SUPPORTED_AGENT_CHOICES})
   --all                 Target every setup-compatible detected Agent
   --api-key <key>       API key (required on first setup)
   --base-url <url>      Server URL (default: https://context-database.aliyuncs.com)
@@ -2200,20 +2271,49 @@ function parseAgent(args) {
 }
 async function setup(args) {
   if (args.flags.help || args.flags.h) {
-    process.stdout.write(HELP);
+    process.stdout.write(
+      DISTRIBUTION_MANIFEST.capabilities.managedCredentials ? HELP.replace(
+        "              [--api-key=K] [--base-url=URL] [--user-id=ID]",
+        "              [--user-id=ID]"
+      ).replace(
+        "                   Rerun for a new Agent, to repair integration files, or\n                   with --api-key <new-key> to replace that Agent's key.\n",
+        "                   Rerun after ctxdb login to add or repair Agent integration files.\n"
+      ).replace(
+        "  --api-key <key>       API key (required on first setup)\n",
+        ""
+      ).replace(
+        "  --base-url <url>      Server URL (default: https://context-database.aliyuncs.com)\n",
+        ""
+      ) : HELP
+    );
     return 0;
   }
   const json = !!args.flags.json;
   const all = args.flags.all === true;
+  const explicitApiKey = typeof args.flags["api-key"] === "string" ? args.flags["api-key"] : void 0;
+  if (DISTRIBUTION_MANIFEST.capabilities.managedCredentials && explicitApiKey) {
+    process.stderr.write(
+      "--api-key is not supported by this distribution; use ctxdb login so the credential is stored in credentials.json\n"
+    );
+    return 2;
+  }
+  if (DISTRIBUTION_MANIFEST.capabilities.managedCredentials && typeof args.flags["base-url"] === "string") {
+    process.stderr.write(
+      "--base-url is not supported by this distribution; use ctxdb login --server so the DATA URL is supplied by the login service\n"
+    );
+    return 2;
+  }
+  const persistCredential = !DISTRIBUTION_MANIFEST.capabilities.managedCredentials;
   if (all && args.flags.agent !== void 0) {
     process.stderr.write("cannot use --all and --agent together\n");
     return 2;
   }
   if (all) {
     const result2 = await runSetupAll({
-      apiKey: typeof args.flags["api-key"] === "string" ? args.flags["api-key"] : void 0,
+      apiKey: explicitApiKey,
       baseUrl: typeof args.flags["base-url"] === "string" ? args.flags["base-url"] : void 0,
       userId: typeof args.flags["user-id"] === "string" ? args.flags["user-id"] : void 0,
+      persistCredential,
       installSkill: !args.flags["no-install-skill"],
       validate: !args.flags["no-validate"]
     });
@@ -2237,15 +2337,16 @@ ${highlightInlineCode(hint)}
   const agent = parseAgent(args);
   if (agent === "default" && !json && !configuredAgents().includes("default")) {
     process.stderr.write(
-      `hint: creating CLI-only "default" agent (no hooks/skills). Use --agent <claude|qoder|qoderwork|qwenwork|codex|opencode|hermes> for full setup.
+      `hint: creating CLI-only "default" agent (no hooks/skills). Use --agent <${SUPPORTED_AGENT_CHOICES}> for full setup.
 `
     );
   }
   const result = await runSetup({
     agent,
-    apiKey: typeof args.flags["api-key"] === "string" ? args.flags["api-key"] : void 0,
+    apiKey: explicitApiKey,
     baseUrl: typeof args.flags["base-url"] === "string" ? args.flags["base-url"] : void 0,
     userId: typeof args.flags["user-id"] === "string" ? args.flags["user-id"] : void 0,
+    persistCredential,
     installSkill: !args.flags["no-install-skill"],
     validate: !args.flags["no-validate"]
   });
@@ -2264,14 +2365,15 @@ ${highlightInlineCode(h)}
 }
 
 // src/cli/teardown.ts
+var PACKAGE_UNINSTALL_TARGETS2 = DISTRIBUTION_MANIFEST.id === "internal" ? DISTRIBUTION_MANIFEST.packageName : `${PACKAGE_NAME} @aliyunrds/ctxdb-shared`;
 var HELP2 = `ctxdb uninstall \u2014 remove hooks + skills
 
 USAGE
-  ctxdb uninstall [--agent <qoder|qoderwork|qwenwork|codex|claude|opencode|hermes>] [--purge-config] [--purge-logs] [--purge-all] [--json]
+  ctxdb uninstall [--agent <${SUPPORTED_AGENT_CHOICES}>] [--purge-config] [--purge-logs] [--purge-all] [--json]
 
 DEFAULT BEHAVIOR (no --agent, no purge flags)
-  Strips ctxdb hook entries and skill directories for ALL agents (qoder,
-  qoderwork, qwenwork, codex, claude, opencode, hermes). Keeps ~/.ctxdb/ctxdb.json (credentials) and ~/.ctxdb/logs/
+  Strips ctxdb hook entries and skill directories for ALL agents
+  (${SUPPORTED_AGENTS.join(", ")}). Keeps ~/.ctxdb/ctxdb.json (credentials) and ~/.ctxdb/logs/
   so you can re-run \`ctxdb setup\` later without losing configuration.
 
 WITH --agent <name>
@@ -2279,7 +2381,7 @@ WITH --agent <name>
   Other agents remain untouched.
 
 FLAGS
-  --agent <name>   Target a single agent (qoder|qoderwork|qwenwork|codex|claude|opencode|hermes)
+  --agent <name>   Target a single agent (${SUPPORTED_AGENT_CHOICES})
   --purge-config   Also delete ~/.ctxdb/ctxdb.json
   --purge-logs     Also delete ~/.ctxdb/logs/
   --purge-all      Delete everything under ~/.ctxdb/
@@ -2287,7 +2389,7 @@ FLAGS
 
 NOTE
   Does not run \`npm uninstall\`. After uninstall completes, remove the
-  npm package separately: npm uninstall -g @aliyunrds/ctxdb @aliyunrds/ctxdb-shared
+  npm package separately: npm uninstall -g ${PACKAGE_UNINSTALL_TARGETS2}
 `;
 function uninstall(args) {
   if (args.flags.help || args.flags.h) {
@@ -2328,25 +2430,29 @@ ${h}
 }
 
 // src/cli/upgrade.ts
+var UPDATE_PACKAGE_NAME = DISTRIBUTION_MANIFEST.packageName || PACKAGE_NAME;
+var UPDATE_REGISTRY_ARG = DISTRIBUTION_MANIFEST.packageRegistry ? ` --registry ${DISTRIBUTION_MANIFEST.packageRegistry}` : "";
 var HELP3 = `ctxdb upgrade \u2014 refresh skills + hooks
 
 USAGE
-  ctxdb upgrade [--agent <qoder|qoderwork|qwenwork|codex|claude|opencode|hermes>] [--no-self-update] [--json]
+  ctxdb upgrade [--agent <${SUPPORTED_AGENT_CHOICES}>] [--no-self-update] [--json]
 
 BEHAVIOR
-  Pulls the latest @aliyunrds/ctxdb package from npm, then re-runs setup
+  Pulls the latest ${UPDATE_PACKAGE_NAME} package from npm, then re-runs setup
   for configured agents using their existing credentials.
 
   Without --agent: sets up all configured built-in agents.
   With --agent:    sets up only the specified agent.
 
 FLAGS
-  --agent <name>   Target a single agent (qoder|qoderwork|qwenwork|codex|claude|opencode|hermes)
+  --agent <name>   Target a single agent (${SUPPORTED_AGENT_CHOICES})
   --self-update    Pull latest package from npm (enabled by default)
   --no-self-update Skip the npm package update and only re-run setup
   --json           Machine-readable JSON output
 `;
-var MANUAL_UPDATE_HINT = "Automatic update failed. Please run manually:\n  npm install -g @aliyunrds/ctxdb\n  ctxdb setup";
+var MANUAL_UPDATE_HINT = `Automatic update failed. Please run manually:
+  npm install -g ${UPDATE_PACKAGE_NAME}${UPDATE_REGISTRY_ARG}
+  ctxdb setup`;
 function printUpdateFailure(error, json) {
   if (json) {
     process.stdout.write(JSON.stringify({ ok: false, error, hint: MANUAL_UPDATE_HINT }) + "\n");
@@ -2392,7 +2498,10 @@ async function upgrade(args) {
     process.stderr.write("nothing to upgrade for default agent (no hooks or skills)\n");
     return 0;
   }
-  const result = await runUpgrade({ agent: agentFlag });
+  const result = await runUpgrade({
+    agent: agentFlag,
+    persistCredential: !DISTRIBUTION_MANIFEST.capabilities.managedCredentials
+  });
   if (result.ok) {
     try {
       writeInstalledPkgVersion(PACKAGE_VERSION);
@@ -2421,6 +2530,7 @@ ${h}
 
 // src/cli/skill-cli.ts
 var SUPPORTED_TARGETS = Object.keys(SKILL_INSTALL_TARGETS);
+var SUPPORTED_TARGET_CHOICES = SUPPORTED_TARGETS.join("|");
 var HELP4 = `ctxdb skill install \u2014 install skill files to an agent's skill directory
 
 USAGE
@@ -2993,6 +3103,1195 @@ async function debugRecall(args) {
   return 0;
 }
 
+// src/cli/promotion-cli.ts
+var GENERATE_USAGE = "usage: ctxdb memory promotion generate <topic> [--knowledge-base-id=<kb-id>] [--agent=<name>] [--json]";
+var LIST_USAGE = "usage: ctxdb memory promotion list [--status=<generating|pending_review|approving|approved|rejected|generation_failed>] [--page=N] [--page-size=N] [--sort-by=quality_score] [--sort-order=asc|desc] [--raw] [--agent=<name>] [--json]";
+var GET_USAGE = "usage: ctxdb memory promotion get <promotion-id> [--raw] [--agent=<name>] [--json]";
+var APPROVE_USAGE = "usage: ctxdb memory promotion approve --promotion-id=<id> --knowledge-base-id=<kb-id> [--agent=<name>] [--json]";
+var REJECT_USAGE = "usage: ctxdb memory promotion reject --promotion-id=<id> [--reason=<text>] [--agent=<name>] [--json]";
+var BATCH_ACTION_USAGE = "usage: ctxdb memory promotion batch-action --action=<approve|reject> --ids=<id1,id2,...> [--knowledge-base-id=<kb-id> (required for approve)] [--reason=<text>] [--agent=<name>] [--json]";
+var BATCH_DELETE_USAGE = "usage: ctxdb memory promotion batch-delete --ids=<id1,id2,...> [--agent=<name>] [--json]";
+var RESOLVE_DOUBTS_USAGE = `usage: ctxdb memory promotion resolve-doubts --promotion-id=<id> --resolutions-json='[{"index":0,"choice":"<label-or-custom>","comment":"..."}]' [--title=<title>] [--content=<markdown>] [--agent=<name>] [--json]`;
+var TEMPLATE_CREATE_USAGE = `usage: ctxdb memory promotion template create --name=<name> --sections-json='[{"title":"...","guidance":"...","level":1}]' [--is-default] [--agent=<name>] [--json]`;
+var TEMPLATE_GET_USAGE = "usage: ctxdb memory promotion template get <template-id> [--agent=<name>] [--json]";
+var TEMPLATE_UPDATE_USAGE = `usage: ctxdb memory promotion template update <template-id> --name=<name> --sections-json='[{"title":"...","guidance":"...","level":1}]' [--is-default] [--agent=<name>] [--json]`;
+var TEMPLATE_DELETE_USAGE = "usage: ctxdb memory promotion template delete <template-id> [--agent=<name>] [--json]";
+var TEMPLATE_SET_DEFAULT_USAGE = "usage: ctxdb memory promotion template set-default <template-id> [--agent=<name>] [--json]";
+var TEMPLATE_CLEAR_DEFAULT_USAGE = "usage: ctxdb memory promotion template clear-default [--agent=<name>] [--json]";
+var SETTINGS_UPDATE_USAGE = "usage: ctxdb memory promotion settings update [--auto-ingest-enabled=<true|false>] [--auto-ingest-threshold=<0..1>] [--default-kb-id=<kb-id> | --clear-default-kb] [--agent=<name>] [--json]";
+var PROMOTION_STATUSES = [
+  "generating",
+  "pending_review",
+  "approving",
+  "approved",
+  "rejected",
+  "generation_failed"
+];
+var BATCH_ACTIONS = ["approve", "reject"];
+var BATCH_MAX_ITEMS = 50;
+var TEMPLATE_SECTIONS_MAX = 15;
+var PROMOTION_LIST_FIELDS = [
+  "promotion_id",
+  "topic",
+  "title",
+  "status",
+  "source_type",
+  "quality_score",
+  "auto_ingested",
+  "target_kb_id",
+  "updated_at"
+];
+var PROMOTION_DETAIL_FIELDS = [
+  "promotion_id",
+  "topic",
+  "title",
+  "content",
+  "whats_new",
+  "status",
+  "source_type",
+  "quality_score",
+  "auto_ingested",
+  "doubts",
+  "doubt_resolutions",
+  "memory_count",
+  "rejection_reason",
+  "target_kb_id",
+  "target_document_id",
+  "last_error",
+  "reviewed_by",
+  "reviewed_at",
+  "created_at",
+  "updated_at"
+];
+async function promotionGenerate(args) {
+  const topic = args.positional[0];
+  if (!topic || topic.trim() === "") fail(GENERATE_USAGE, 2);
+  const ctx = buildContext(args);
+  const body = { topic };
+  const kbId = stringFlag(args, "knowledge-base-id");
+  if (kbId !== void 0) body.knowledge_base_id = kbId;
+  const resp = await ctx.client.postJson("/v1/memory_promotions/generate", body);
+  emit(args, resp, "memory promotion generate", (data) => data);
+  return 0;
+}
+async function promotionList(args) {
+  const params = {};
+  const status2 = stringFlag(args, "status");
+  if (status2 !== void 0) {
+    if (!PROMOTION_STATUSES.includes(status2)) {
+      fail(`invalid --status: ${status2} (expected one of ${PROMOTION_STATUSES.join("|")})
+${LIST_USAGE}`, 2);
+    }
+    params.status = status2;
+  }
+  const page = intFlag(args, "page", LIST_USAGE);
+  if (page !== void 0) params.page = page;
+  const pageSize = intFlag(args, "page-size", LIST_USAGE);
+  if (pageSize !== void 0) params.page_size = pageSize;
+  const sortBy = stringFlag(args, "sort-by");
+  if (sortBy !== void 0) {
+    if (sortBy !== "quality_score") {
+      fail(`invalid --sort-by: ${sortBy} (expected quality_score)
+${LIST_USAGE}`, 2);
+    }
+    params.sort_by = sortBy;
+  }
+  const sortOrder = stringFlag(args, "sort-order");
+  if (sortOrder !== void 0) {
+    if (sortOrder !== "asc" && sortOrder !== "desc") {
+      fail(`invalid --sort-order: ${sortOrder} (expected asc|desc)
+${LIST_USAGE}`, 2);
+    }
+    params.sort_order = sortOrder;
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/memory_promotions", params);
+  emit(args, resp, "memory promotion list", compactList);
+  return 0;
+}
+async function promotionGet(args) {
+  const promotionId = args.positional[0];
+  if (!promotionId || promotionId.trim() === "") fail(GET_USAGE, 2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/memory_promotions/detail", {
+    promotion_id: promotionId
+  });
+  emit(args, resp, "memory promotion get", compactDetail);
+  return 0;
+}
+async function promotionApprove(args) {
+  const promotionId = requireIdFlag(args, "promotion-id", APPROVE_USAGE);
+  const kbId = requireIdFlag(args, "knowledge-base-id", APPROVE_USAGE);
+  const ctx = buildContext(args);
+  const body = {
+    promotion_id: promotionId,
+    knowledge_base_id: kbId
+  };
+  const resp = await ctx.client.postJson("/v1/memory_promotions/approve", body);
+  emit(args, resp, "memory promotion approve", (data) => data);
+  return 0;
+}
+async function promotionReject(args) {
+  const promotionId = requireIdFlag(args, "promotion-id", REJECT_USAGE);
+  const ctx = buildContext(args);
+  const body = { promotion_id: promotionId };
+  const reason = stringFlag(args, "reason");
+  if (reason !== void 0) body.reason = reason;
+  const resp = await ctx.client.postJson("/v1/memory_promotions/reject", body);
+  emit(args, resp, "memory promotion reject", (data) => data);
+  return 0;
+}
+async function promotionBatchAction(args) {
+  const action = stringFlag(args, "action");
+  if (action === void 0 || !BATCH_ACTIONS.includes(action)) {
+    fail(`--action is required and must be one of ${BATCH_ACTIONS.join("|")}
+${BATCH_ACTION_USAGE}`, 2);
+  }
+  const ids = parseIdsFlag(args, BATCH_ACTION_USAGE);
+  const kbId = action === "approve" ? requireIdFlag(args, "knowledge-base-id", BATCH_ACTION_USAGE) : stringFlag(args, "knowledge-base-id");
+  const ctx = buildContext(args);
+  const body = { action, ids };
+  if (kbId !== void 0) body.knowledge_base_id = kbId;
+  const reason = stringFlag(args, "reason");
+  if (reason !== void 0) body.reason = reason;
+  const resp = await ctx.client.postJson("/v1/memory_promotions/batch", body);
+  const data = emit(args, resp, "memory promotion batch-action", (data2) => data2);
+  return batchExitCode(data);
+}
+async function promotionBatchDelete(args) {
+  const ids = parseIdsFlag(args, BATCH_DELETE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.deleteJson(
+    "/v1/memory_promotions/batch",
+    { ids }
+  );
+  const data = emit(args, resp, "memory promotion batch-delete", (data2) => data2);
+  return batchExitCode(data);
+}
+async function promotionResolveDoubts(args) {
+  const promotionId = requireIdFlag(args, "promotion-id", RESOLVE_DOUBTS_USAGE);
+  const resolutionsRaw = args.flags["resolutions-json"];
+  if (typeof resolutionsRaw !== "string" || resolutionsRaw.trim() === "") {
+    fail(`--resolutions-json is required
+${RESOLVE_DOUBTS_USAGE}`, 2);
+  }
+  const resolutions = parseResolutions(resolutionsRaw, RESOLVE_DOUBTS_USAGE);
+  const ctx = buildContext(args);
+  const body = {
+    promotion_id: promotionId,
+    doubt_resolutions: resolutions
+  };
+  const title = stringFlag(args, "title");
+  if (title !== void 0) body.title = title;
+  const content = stringFlag(args, "content");
+  if (content !== void 0) body.content = content;
+  const resp = await ctx.client.postJson(
+    "/v1/memory_promotions/resolve_doubts",
+    body
+  );
+  emit(args, resp, "memory promotion resolve-doubts", (data) => data);
+  return 0;
+}
+async function promotionTemplateList(args) {
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/memory_promotions/templates");
+  emit(args, resp, "memory promotion template list", compactTemplateList);
+  return 0;
+}
+async function promotionTemplateCreate(args) {
+  const body = buildTemplateUpsertBody(args, TEMPLATE_CREATE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson("/v1/memory_promotions/templates", body);
+  emit(args, resp, "memory promotion template create", (data) => data);
+  return 0;
+}
+async function promotionTemplateGet(args) {
+  const templateId = requireTemplateIdPositional(args, TEMPLATE_GET_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get(
+    `/v1/memory_promotions/templates/${encodeURIComponent(templateId)}`
+  );
+  emit(args, resp, "memory promotion template get", (data) => data);
+  return 0;
+}
+async function promotionTemplateUpdate(args) {
+  const templateId = requireTemplateIdPositional(args, TEMPLATE_UPDATE_USAGE);
+  const body = buildTemplateUpsertBody(args, TEMPLATE_UPDATE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.putJson(
+    `/v1/memory_promotions/templates/${encodeURIComponent(templateId)}`,
+    body
+  );
+  emit(args, resp, "memory promotion template update", (data) => data);
+  return 0;
+}
+async function promotionTemplateDelete(args) {
+  const templateId = requireTemplateIdPositional(args, TEMPLATE_DELETE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.delete(
+    `/v1/memory_promotions/templates/${encodeURIComponent(templateId)}`
+  );
+  emit(args, resp, "memory promotion template delete", (data) => data);
+  return 0;
+}
+async function promotionTemplateSetDefault(args) {
+  const templateId = requireTemplateIdPositional(args, TEMPLATE_SET_DEFAULT_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson(
+    `/v1/memory_promotions/templates/${encodeURIComponent(templateId)}/set_default`
+  );
+  emit(args, resp, "memory promotion template set-default", (data) => data);
+  return 0;
+}
+async function promotionTemplateClearDefault(args) {
+  if (args.positional.length > 0) fail(TEMPLATE_CLEAR_DEFAULT_USAGE, 2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.delete("/v1/memory_promotions/templates/default");
+  emit(args, resp, "memory promotion template clear-default", (data) => data);
+  return 0;
+}
+async function promotionSettingsGet(args) {
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/memory_promotions/settings");
+  emit(args, resp, "memory promotion settings get", (data) => data);
+  return 0;
+}
+async function promotionSettingsUpdate(args) {
+  const body = {};
+  const enabled = stringFlag(args, "auto-ingest-enabled");
+  if (enabled !== void 0) {
+    if (enabled !== "true" && enabled !== "false") {
+      fail(`invalid --auto-ingest-enabled: ${enabled} (expected true|false)
+${SETTINGS_UPDATE_USAGE}`, 2);
+    }
+    body.auto_ingest_enabled = enabled === "true";
+  }
+  const threshold = stringFlag(args, "auto-ingest-threshold");
+  if (threshold !== void 0) {
+    const n = Number(threshold);
+    if (!Number.isFinite(n) || n < 0 || n > 1) {
+      fail(`invalid --auto-ingest-threshold: ${threshold} (expected a number in [0,1])
+${SETTINGS_UPDATE_USAGE}`, 2);
+    }
+    body.auto_ingest_threshold = n;
+  }
+  const defaultKbId = stringFlag(args, "default-kb-id");
+  const clearDefaultKb = args.flags["clear-default-kb"] === true;
+  if (defaultKbId !== void 0 && clearDefaultKb) {
+    fail(`cannot use --default-kb-id and --clear-default-kb together
+${SETTINGS_UPDATE_USAGE}`, 2);
+  }
+  if (defaultKbId !== void 0) body.default_kb_id = defaultKbId;
+  if (clearDefaultKb) body.default_kb_id = "";
+  if (Object.keys(body).length === 0) {
+    fail(`at least one setting flag is required
+${SETTINGS_UPDATE_USAGE}`, 2);
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.putJson("/v1/memory_promotions/settings", body);
+  emit(args, resp, "memory promotion settings update", (data) => data);
+  return 0;
+}
+function stringFlag(args, name) {
+  const value = args.flags[name];
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function requireIdFlag(args, name, usage) {
+  const value = stringFlag(args, name);
+  if (value === void 0) fail(`--${name} is required
+${usage}`, 2);
+  return value;
+}
+function requireTemplateIdPositional(args, usage) {
+  const templateId = args.positional[0];
+  if (!templateId || templateId.trim() === "") fail(usage, 2);
+  return templateId;
+}
+function intFlag(args, name, usage) {
+  const raw = stringFlag(args, name);
+  if (raw === void 0) return void 0;
+  const n = Number(raw);
+  if (!Number.isInteger(n) || n < 1) {
+    fail(`invalid --${name}: ${raw} (expected a positive integer)
+${usage}`, 2);
+  }
+  return n;
+}
+function parseIdsFlag(args, usage) {
+  const raw = stringFlag(args, "ids");
+  if (raw === void 0) fail(`--ids is required (comma-separated)
+${usage}`, 2);
+  const ids = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  if (ids.length === 0) fail(`--ids must contain at least one id
+${usage}`, 2);
+  if (ids.length > BATCH_MAX_ITEMS) {
+    fail(`--ids accepts at most ${BATCH_MAX_ITEMS} items per request (got ${ids.length})
+${usage}`, 2);
+  }
+  return ids;
+}
+function parseResolutions(raw, usage) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    fail(`--resolutions-json is not valid JSON
+${usage}`, 2);
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0) {
+    fail(`--resolutions-json must be a non-empty array
+${usage}`, 2);
+  }
+  return parsed.map((entry, i) => {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+      fail(`--resolutions-json[${i}] must be an object
+${usage}`, 2);
+    }
+    const e = entry;
+    if (typeof e.index !== "number" || !Number.isInteger(e.index) || e.index < 0) {
+      fail(`--resolutions-json[${i}].index must be a non-negative integer
+${usage}`, 2);
+    }
+    if (typeof e.choice !== "string" || e.choice.trim() === "") {
+      fail(`--resolutions-json[${i}].choice must be a non-empty string
+${usage}`, 2);
+    }
+    const out = { index: e.index, choice: e.choice };
+    if (e.comment !== void 0 && e.comment !== null) {
+      if (typeof e.comment !== "string") {
+        fail(`--resolutions-json[${i}].comment must be a string
+${usage}`, 2);
+      }
+      out.comment = e.comment;
+    }
+    return out;
+  });
+}
+function buildTemplateUpsertBody(args, usage) {
+  const name = stringFlag(args, "name");
+  if (name === void 0) fail(`--name is required
+${usage}`, 2);
+  const sectionsRaw = args.flags["sections-json"];
+  if (typeof sectionsRaw !== "string" || sectionsRaw.trim() === "") {
+    fail(`--sections-json is required
+${usage}`, 2);
+  }
+  const sections = parseSections(sectionsRaw, usage);
+  const body = { name, sections };
+  if (args.flags["is-default"] === true) body.is_default = true;
+  return body;
+}
+function parseSections(raw, usage) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    fail(`--sections-json is not valid JSON
+${usage}`, 2);
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0) {
+    fail(`--sections-json must be a non-empty array
+${usage}`, 2);
+  }
+  if (parsed.length > TEMPLATE_SECTIONS_MAX) {
+    fail(`--sections-json accepts at most ${TEMPLATE_SECTIONS_MAX} sections (got ${parsed.length})
+${usage}`, 2);
+  }
+  return parsed.map((entry, i) => {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+      fail(`--sections-json[${i}] must be an object
+${usage}`, 2);
+    }
+    const e = entry;
+    if (typeof e.title !== "string" || e.title.trim() === "") {
+      fail(`--sections-json[${i}].title must be a non-empty string
+${usage}`, 2);
+    }
+    if (/[\r\n]/.test(e.title.trim())) {
+      fail(`--sections-json[${i}].title must not contain line breaks
+${usage}`, 2);
+    }
+    if (typeof e.guidance !== "string" || e.guidance.trim() === "") {
+      fail(`--sections-json[${i}].guidance must be a non-empty string
+${usage}`, 2);
+    }
+    const out = { title: e.title, guidance: e.guidance };
+    if (e.level !== void 0 && e.level !== null) {
+      if (typeof e.level !== "number" || !Number.isInteger(e.level) || e.level < 1 || e.level > 3) {
+        fail(`--sections-json[${i}].level must be an integer in 1-3
+${usage}`, 2);
+      }
+      out.level = e.level;
+    }
+    return out;
+  });
+}
+function unwrapBox(response, operation) {
+  if (!response || typeof response !== "object" || Array.isArray(response)) {
+    throw new CtxdbError(`${operation} returned an invalid response`);
+  }
+  const box = response;
+  const errorCode = box.errorCode;
+  const failed = typeof errorCode === "number" && errorCode !== 0 || typeof errorCode === "string" && errorCode.trim() !== "" && errorCode.trim() !== "0";
+  if (failed) {
+    const message = typeof box.errorMessage === "string" && box.errorMessage ? box.errorMessage : `errorCode=${box.errorCode}`;
+    throw new CtxdbError(`${operation} failed: ${message}`);
+  }
+  return Object.hasOwn(box, "data") ? box.data : response;
+}
+function emit(args, response, operation, compact) {
+  const data = unwrapBox(response, operation);
+  const out = args.flags.raw ? response : compact(data);
+  printResult(out, !!args.flags.json);
+  return data;
+}
+function batchExitCode(data) {
+  if (!data || typeof data !== "object" || Array.isArray(data)) return 0;
+  const failed = data.failed;
+  return typeof failed === "number" && failed > 0 ? 1 : 0;
+}
+function pickFields(source, fields) {
+  const out = {};
+  for (const key of fields) {
+    const value = source[key];
+    if (value !== void 0 && value !== null) out[key] = value;
+  }
+  return out;
+}
+function compactList(data) {
+  if (!data || typeof data !== "object" || Array.isArray(data)) return data;
+  const d = data;
+  const rows = Array.isArray(d.promotions) ? d.promotions : [];
+  const out = {
+    promotions: rows.filter((p) => p && typeof p === "object" && !Array.isArray(p)).map((p) => pickFields(p, PROMOTION_LIST_FIELDS))
+  };
+  for (const key of ["total", "page", "page_size"]) {
+    if (typeof d[key] === "number") out[key] = d[key];
+  }
+  return out;
+}
+function compactDetail(data) {
+  if (!data || typeof data !== "object" || Array.isArray(data)) return data;
+  return pickFields(data, PROMOTION_DETAIL_FIELDS);
+}
+function compactTemplateList(data) {
+  if (!Array.isArray(data)) return data;
+  return data.filter((t) => t && typeof t === "object" && !Array.isArray(t)).map((t) => {
+    const template = t;
+    const out = pickFields(template, [
+      "id",
+      "name",
+      "is_default",
+      "updatedAt"
+    ]);
+    if (Array.isArray(template.sections)) {
+      out.sections = template.sections.filter((s) => s && typeof s === "object" && !Array.isArray(s)).map(
+        (s) => pickFields(s, ["level", "title"])
+      );
+    }
+    return out;
+  });
+}
+
+// src/cli/review-cli.ts
+import { readFileSync as readFileSync2 } from "fs";
+
+// src/lib/review.ts
+function unwrapReviewData(response, operation) {
+  if (!response || typeof response !== "object" || Array.isArray(response)) {
+    throw new CtxdbError(`${operation} returned an invalid response`);
+  }
+  const box = response;
+  const errorCode = box.errorCode;
+  const failed = typeof errorCode === "number" && errorCode !== 0 || typeof errorCode === "string" && errorCode.trim() !== "" && errorCode.trim() !== "0";
+  if (failed) {
+    const message = typeof box.errorMessage === "string" && box.errorMessage ? box.errorMessage : `errorCode=${errorCode}`;
+    throw new CtxdbError(`${operation} failed: ${message}`);
+  }
+  return box.data ?? null;
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function pickString(record, field) {
+  const value = record[field];
+  return typeof value === "string" ? value : "";
+}
+function pickNumber(record, field) {
+  const value = record[field];
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function pickBoolean(record, field) {
+  const value = record[field];
+  return typeof value === "boolean" ? value : void 0;
+}
+function parseEmbeddedJson(value) {
+  if (typeof value !== "string" || value.trim() === "") return void 0;
+  try {
+    return JSON.parse(value);
+  } catch {
+    return void 0;
+  }
+}
+function countArrayEntries(value) {
+  return Array.isArray(value) ? value.length : void 0;
+}
+function readReviewListData(data) {
+  const record = asRecord(data);
+  return {
+    reviews: record && Array.isArray(record.reviews) ? record.reviews : [],
+    total: record ? pickNumber(record, "total") : void 0,
+    page: record ? pickNumber(record, "page") : void 0,
+    page_size: record ? pickNumber(record, "page_size") : void 0
+  };
+}
+function minimalReviewListItem(raw) {
+  const r = asRecord(raw) ?? {};
+  const out = {
+    review_id: pickString(r, "review_id"),
+    document_name: pickString(r, "document_name"),
+    decision: pickString(r, "decision"),
+    review_status: pickString(r, "review_status")
+  };
+  const score = pickNumber(r, "confidence_score");
+  if (score !== void 0) out.confidence_score = score;
+  const canApproveReview = pickBoolean(r, "can_approve_review");
+  if (canApproveReview !== void 0) out.can_approve_review = canApproveReview;
+  const createdAt = pickString(r, "created_at");
+  if (createdAt) out.created_at = createdAt;
+  return out;
+}
+function compactReviewListItem(raw) {
+  const r = asRecord(raw) ?? {};
+  const out = {
+    ...minimalReviewListItem(raw),
+    document_id: pickString(r, "document_id"),
+    knowledge_base_id: pickString(r, "knowledge_base_id")
+  };
+  const hasConflicts = pickBoolean(r, "has_conflicts");
+  if (hasConflicts !== void 0) out.has_conflicts = hasConflicts;
+  const hasContradictions = pickBoolean(r, "has_contradictions");
+  if (hasContradictions !== void 0) out.has_contradictions = hasContradictions;
+  const rewriteNeeded = pickBoolean(r, "rewrite_needed");
+  if (rewriteNeeded !== void 0) out.rewrite_needed = rewriteNeeded;
+  const humanAction = pickString(r, "human_action");
+  if (humanAction) out.human_action = humanAction;
+  return out;
+}
+function projectReviewList(data, projectItem) {
+  const { reviews, total, page, page_size } = readReviewListData(data);
+  const out = { reviews: reviews.map(projectItem) };
+  if (total !== void 0) out.total = total;
+  if (page !== void 0) out.page = page;
+  if (page_size !== void 0) out.page_size = page_size;
+  return out;
+}
+function minimalReviewListResponse(data) {
+  return projectReviewList(data, minimalReviewListItem);
+}
+function compactReviewListResponse(data) {
+  return projectReviewList(data, compactReviewListItem);
+}
+function minimalReviewDetail(raw) {
+  const r = asRecord(raw);
+  if (!r) return {};
+  const out = {
+    review_id: pickString(r, "review_id"),
+    document_name: pickString(r, "document_name"),
+    decision: pickString(r, "decision"),
+    review_status: pickString(r, "review_status")
+  };
+  for (const field of [
+    "document_id",
+    "knowledge_base_id",
+    "decision_reason",
+    "rewrite_strategy",
+    "human_action",
+    "created_at"
+  ]) {
+    const value = pickString(r, field);
+    if (value) out[field] = value;
+  }
+  for (const field of [
+    "confidence_score",
+    "logic_score",
+    "noise_score",
+    "contradiction_score"
+  ]) {
+    const value = pickNumber(r, field);
+    if (value !== void 0) out[field] = value;
+  }
+  for (const field of ["has_contradictions", "rewrite_needed"]) {
+    const value = pickBoolean(r, field);
+    if (value !== void 0) out[field] = value;
+  }
+  const conflictCount = countArrayEntries(parseEmbeddedJson(r.conflicts));
+  if (conflictCount !== void 0) out.conflict_count = conflictCount;
+  const originalContent = asRecord(r.original_content);
+  if (originalContent) {
+    const contentPage = pickNumber(originalContent, "page");
+    if (contentPage !== void 0) out.content_page = contentPage;
+    const totalPages = pickNumber(originalContent, "total_pages");
+    if (totalPages !== void 0) out.content_total_pages = totalPages;
+    const totalChars = pickNumber(originalContent, "total_chars");
+    if (totalChars !== void 0) out.content_total_chars = totalChars;
+  }
+  return out;
+}
+var DETAIL_JSON_STRING_FIELDS = [
+  "contradictions",
+  "conflicts",
+  "quality_details",
+  "original_contradictions",
+  "rewrite_info_check",
+  "human_conflict_resolutions"
+];
+function compactReviewDetail(raw) {
+  const r = asRecord(raw);
+  if (!r) return {};
+  const out = { ...r };
+  for (const field of DETAIL_JSON_STRING_FIELDS) {
+    const parsed = parseEmbeddedJson(r[field]);
+    if (parsed !== void 0) out[field] = parsed;
+  }
+  return out;
+}
+function minimalReviewTemplate(raw) {
+  const r = asRecord(raw) ?? {};
+  return {
+    id: pickString(r, "id"),
+    name: pickString(r, "name"),
+    is_default: pickBoolean(r, "is_default") ?? false,
+    knowledge_base_id: pickString(r, "knowledge_base_id"),
+    section_count: Array.isArray(r.sections) ? r.sections.length : 0
+  };
+}
+function compactReviewTemplate(raw) {
+  return asRecord(raw) ?? {};
+}
+function minimalReviewTemplateListResponse(data) {
+  const items = Array.isArray(data) ? data : [];
+  const templates = items.map(minimalReviewTemplate);
+  return { templates, count: templates.length };
+}
+function minimalReviewTemplateDetail(raw) {
+  const r = asRecord(raw);
+  if (!r) return {};
+  const out = { ...r };
+  delete out.content;
+  return out;
+}
+var REVIEW_ACTIONS = [
+  "confirm",
+  "force_accept",
+  "accept_rewrite",
+  "reject",
+  "reject_reupload"
+];
+var REVIEW_BATCH_ACTIONS = ["confirm", "reject"];
+var CONFLICT_RESOLUTIONS = [
+  "use_new",
+  "keep_old",
+  "merge",
+  "annotate_divergence"
+];
+var REVIEW_STATUS_FILTERS = ["pending", "reviewed", "rejected"];
+var BATCH_MAX_ITEMS2 = 50;
+var TEMPLATE_MAX_SECTIONS = 15;
+var TEMPLATE_MAX_NAME_LENGTH = 128;
+function reviewBatchExitCode(data) {
+  const failed = asRecord(data)?.failed;
+  return typeof failed === "number" && failed > 0 ? 1 : 0;
+}
+function parseIdList(raw) {
+  return raw.split(",").map((s) => s.trim()).filter(Boolean);
+}
+function parseConflictResolutions(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(
+      'resolutions must be a JSON array: [{"conflict_id": "...", "resolution": "use_new|keep_old|merge|annotate_divergence"}]'
+    );
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0) {
+    throw new Error("resolutions must be a non-empty JSON array");
+  }
+  return parsed.map((entry, index) => {
+    const record = asRecord(entry);
+    const conflictId = record ? record.conflict_id : void 0;
+    const resolution = record ? record.resolution : void 0;
+    if (typeof conflictId !== "string" || conflictId.trim() === "") {
+      throw new Error(`resolutions[${index}].conflict_id must be a non-empty string`);
+    }
+    if (typeof resolution !== "string" || !CONFLICT_RESOLUTIONS.includes(resolution)) {
+      throw new Error(
+        `resolutions[${index}].resolution must be one of ${CONFLICT_RESOLUTIONS.join("|")}`
+      );
+    }
+    return { conflict_id: conflictId.trim(), resolution };
+  });
+}
+function parseTemplateSections(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(
+      'sections must be a JSON array: [{"level": 1, "title": "...", "guidance": "..."}]'
+    );
+  }
+  if (!Array.isArray(parsed) || parsed.length === 0) {
+    throw new Error("sections must be a non-empty JSON array");
+  }
+  if (parsed.length > TEMPLATE_MAX_SECTIONS) {
+    throw new Error(`sections must have at most ${TEMPLATE_MAX_SECTIONS} entries`);
+  }
+  return parsed.map((entry, index) => {
+    const record = asRecord(entry);
+    const title = record ? record.title : void 0;
+    const guidance = record ? record.guidance : void 0;
+    if (typeof title !== "string" || title.trim() === "") {
+      throw new Error(`sections[${index}].title must be a non-empty string`);
+    }
+    if (title.includes("\n")) {
+      throw new Error(`sections[${index}].title must be a single line`);
+    }
+    if (typeof guidance !== "string" || guidance.trim() === "") {
+      throw new Error(`sections[${index}].guidance must be a non-empty string`);
+    }
+    const out = { title, guidance };
+    if (record && record.level !== void 0) {
+      const level = record.level;
+      if (typeof level !== "number" || !Number.isInteger(level) || level < 1 || level > 3) {
+        throw new Error(`sections[${index}].level must be an integer between 1 and 3`);
+      }
+      out.level = level;
+    }
+    return out;
+  });
+}
+
+// src/cli/review-cli.ts
+var REVIEW_LIST_USAGE = "usage: ctxdb kb review list [--knowledge-base-id=<id>] [--decision=<d>]\n                           [--review-status=<pending|reviewed|rejected>]\n                           [--page=N] [--page-size=N] [--sort-by=confidence_score]\n                           [--sort-order=asc|desc] [--verbose] [--raw] [--json]";
+var REVIEW_GET_USAGE = "usage: ctxdb kb review get <review-id> [--content-page=N] [--verbose] [--raw] [--json]";
+var REVIEW_ACTION_USAGE = `usage: ctxdb kb review action <review-id> --action=<${REVIEW_ACTIONS.join("|")}>
+                             [--edited-content=<text> | --edited-content-file=<path>]
+                             [--conflict-resolutions=<json>] [--verbose] [--raw] [--json]`;
+var REVIEW_RESOLVE_USAGE = 'usage: ctxdb kb review resolve-conflicts <review-id>\n                             (--resolutions=<json> | --resolutions-file=<path>) [--verbose] [--raw] [--json]\n                             resolutions: [{"conflict_id": "...", "resolution": "' + CONFLICT_RESOLUTIONS.join("|") + '"}]';
+var REVIEW_BATCH_ACTION_USAGE = `usage: ctxdb kb review batch-action --action=<${REVIEW_BATCH_ACTIONS.join("|")}> --ids=<id1,id2,...> [--json]  (max ${BATCH_MAX_ITEMS2} ids)`;
+var REVIEW_BATCH_DELETE_USAGE = `usage: ctxdb kb review batch-delete --ids=<id1,id2,...> [--json]  (max ${BATCH_MAX_ITEMS2} ids)`;
+var REVIEW_DELETE_USAGE = "usage: ctxdb kb review delete <review-id> [--json]";
+var TEMPLATE_LIST_USAGE = "usage: ctxdb kb review template list <knowledge-base-id> [--verbose] [--raw] [--json]";
+var TEMPLATE_CREATE_USAGE2 = 'usage: ctxdb kb review template create <knowledge-base-id> --name=<name>\n                                      (--sections=<json> | --sections-file=<path>) [--default] [--verbose] [--raw] [--json]\n                                      sections: [{"level": 1, "title": "...", "guidance": "..."}] (max 15)';
+var TEMPLATE_UPDATE_USAGE2 = "usage: ctxdb kb review template update <knowledge-base-id> <template-id>\n                                      [--name=<name>] [--sections=<json> | --sections-file=<path>]\n                                      [--default | --no-default] [--verbose] [--raw] [--json]";
+var TEMPLATE_DELETE_USAGE2 = "usage: ctxdb kb review template delete <knowledge-base-id> <template-id> [--json]";
+var TEMPLATE_GET_USAGE2 = "usage: ctxdb kb review template get <knowledge-base-id> <template-id> [--verbose] [--raw] [--json]";
+var TEMPLATE_SET_DEFAULT_USAGE2 = "usage: ctxdb kb review template set-default <knowledge-base-id> <template-id> [--verbose] [--raw] [--json]";
+var TEMPLATE_CLEAR_DEFAULT_USAGE2 = "usage: ctxdb kb review template clear-default <knowledge-base-id> [--json]";
+var SETTINGS_GET_USAGE = "usage: ctxdb kb review settings get <knowledge-base-id> [--json]";
+var SETTINGS_UPDATE_USAGE2 = "usage: ctxdb kb review settings update <knowledge-base-id>\n                                      [--review-enabled | --no-review-enabled]\n                                      [--high-threshold=F] [--logic-rewrite-threshold=F]\n                                      [--noise-rewrite-threshold=F] [--max-rewrite-iterations=N]\n                                      [--rewrite-enabled | --no-rewrite-enabled]\n                                      [--conflict-detection-enabled | --no-conflict-detection-enabled]\n                                      [--rewrite-auto-ingest-enabled | --no-rewrite-auto-ingest-enabled] [--json]";
+function stringValue(args, name) {
+  const value = args.flags[name];
+  return typeof value === "string" && value.trim() !== "" ? value : void 0;
+}
+function requireId(args, flagName, positionalIndex, usage) {
+  const positional = args.positional[positionalIndex]?.trim();
+  const value = positional !== void 0 && positional !== "" ? positional : stringValue(args, flagName);
+  if (value === void 0) fail(usage, 2);
+  return value.trim();
+}
+function requireEnumFlag(args, flagName, allowed, usage) {
+  const value = stringValue(args, flagName);
+  if (value === void 0) fail(usage, 2);
+  if (!allowed.includes(value)) {
+    fail(`${flagName} must be one of ${allowed.join("|")}
+${usage}`, 2);
+  }
+  return value;
+}
+function positiveIntFlag(args, flagName, usage) {
+  const value = args.flags[flagName];
+  if (value === void 0) return void 0;
+  if (typeof value !== "string") fail(usage, 2);
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed < 1) {
+    fail(`${flagName} must be a positive integer
+${usage}`, 2);
+  }
+  return parsed;
+}
+function readPayloadInput(args, inlineFlag, fileFlag, usage) {
+  const inline = stringValue(args, inlineFlag);
+  const filePath = stringValue(args, fileFlag);
+  if (inline !== void 0 && filePath !== void 0) {
+    fail(`cannot use --${inlineFlag} and --${fileFlag} together
+${usage}`, 2);
+  }
+  if (inline !== void 0) return inline;
+  if (filePath !== void 0) {
+    try {
+      return readFileSync2(filePath, "utf-8");
+    } catch (error) {
+      fail(
+        `cannot read --${fileFlag} ${filePath}: ${error instanceof Error ? error.message : String(error)}`,
+        2
+      );
+    }
+  }
+  fail(usage, 2);
+}
+function parseIdsFlag2(args, usage) {
+  const raw = stringValue(args, "ids");
+  if (raw === void 0) fail(usage, 2);
+  const ids = parseIdList(raw);
+  if (ids.length === 0) fail(`--ids must contain at least one id
+${usage}`, 2);
+  if (ids.length > BATCH_MAX_ITEMS2) {
+    fail(`--ids accepts at most ${BATCH_MAX_ITEMS2} ids per request
+${usage}`, 2);
+  }
+  return ids;
+}
+function project(args, response, operation, minimal, compact) {
+  const data = unwrapReviewData(response, operation);
+  if (args.flags.raw) return response;
+  if (args.flags.verbose) return compact(data);
+  return minimal(data);
+}
+async function reviewList(args) {
+  const params = {};
+  const knowledgeBaseId = stringValue(args, "knowledge-base-id");
+  if (knowledgeBaseId !== void 0) params.knowledge_base_id = knowledgeBaseId;
+  const decision = stringValue(args, "decision");
+  if (decision !== void 0) params.decision = decision;
+  const reviewStatus = stringValue(args, "review-status");
+  if (reviewStatus !== void 0) {
+    if (!REVIEW_STATUS_FILTERS.includes(reviewStatus)) {
+      fail(`review-status must be one of ${REVIEW_STATUS_FILTERS.join("|")}
+${REVIEW_LIST_USAGE}`, 2);
+    }
+    params.review_status = reviewStatus;
+  }
+  const page = positiveIntFlag(args, "page", REVIEW_LIST_USAGE);
+  if (page !== void 0) params.page = page;
+  const pageSize = positiveIntFlag(args, "page-size", REVIEW_LIST_USAGE);
+  if (pageSize !== void 0) params.page_size = pageSize;
+  const sortBy = stringValue(args, "sort-by");
+  if (sortBy !== void 0) {
+    if (sortBy !== "confidence_score") {
+      fail(`sort-by only supports confidence_score
+${REVIEW_LIST_USAGE}`, 2);
+    }
+    params.sort_by = sortBy;
+  }
+  const sortOrder = stringValue(args, "sort-order");
+  if (sortOrder !== void 0) {
+    if (sortBy === void 0) {
+      fail(`sort-order requires sort-by
+${REVIEW_LIST_USAGE}`, 2);
+    }
+    if (sortOrder !== "asc" && sortOrder !== "desc") {
+      fail(`sort-order must be asc or desc
+${REVIEW_LIST_USAGE}`, 2);
+    }
+    params.sort_order = sortOrder;
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/knowledge/reviews", params);
+  const out = project(
+    args,
+    resp,
+    "review list",
+    minimalReviewListResponse,
+    compactReviewListResponse
+  );
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+async function reviewGet(args) {
+  const reviewId = requireId(args, "review-id", 0, REVIEW_GET_USAGE);
+  const contentPage = positiveIntFlag(args, "content-page", REVIEW_GET_USAGE);
+  const params = { review_id: reviewId };
+  if (contentPage !== void 0) params.content_page = contentPage;
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/knowledge/reviews/detail", params);
+  const out = project(args, resp, "review get", minimalReviewDetail, compactReviewDetail);
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+async function reviewAction(args) {
+  const reviewId = requireId(args, "review-id", 0, REVIEW_ACTION_USAGE);
+  const action = requireEnumFlag(args, "action", REVIEW_ACTIONS, REVIEW_ACTION_USAGE);
+  const body = { review_id: reviewId, action };
+  const editedContent = stringValue(args, "edited-content");
+  const editedContentFile = stringValue(args, "edited-content-file");
+  if (editedContent !== void 0 && editedContentFile !== void 0) {
+    fail(`cannot use --edited-content and --edited-content-file together
+${REVIEW_ACTION_USAGE}`, 2);
+  }
+  if (editedContent !== void 0) body.edited_content = editedContent;
+  else if (editedContentFile !== void 0) {
+    try {
+      body.edited_content = readFileSync2(editedContentFile, "utf-8");
+    } catch (error) {
+      fail(
+        `cannot read --edited-content-file ${editedContentFile}: ${error instanceof Error ? error.message : String(error)}`,
+        2
+      );
+    }
+  }
+  const conflictResolutionsRaw = stringValue(args, "conflict-resolutions");
+  if (conflictResolutionsRaw !== void 0) {
+    try {
+      body.conflict_resolutions = parseConflictResolutions(conflictResolutionsRaw);
+    } catch (error) {
+      fail(`${error instanceof Error ? error.message : String(error)}
+${REVIEW_ACTION_USAGE}`, 2);
+    }
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson("/v1/knowledge/reviews/action", body);
+  const out = project(args, resp, "review action", minimalReviewDetail, compactReviewDetail);
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+async function reviewResolveConflicts(args) {
+  const reviewId = requireId(args, "review-id", 0, REVIEW_RESOLVE_USAGE);
+  const raw = readPayloadInput(args, "resolutions", "resolutions-file", REVIEW_RESOLVE_USAGE);
+  let resolutions;
+  try {
+    resolutions = parseConflictResolutions(raw);
+  } catch (error) {
+    fail(`${error instanceof Error ? error.message : String(error)}
+${REVIEW_RESOLVE_USAGE}`, 2);
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson("/v1/knowledge/reviews/resolve-conflicts", {
+    review_id: reviewId,
+    resolutions
+  });
+  const out = project(args, resp, "review resolve-conflicts", minimalReviewDetail, compactReviewDetail);
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+async function reviewBatchAction(args) {
+  const action = requireEnumFlag(args, "action", REVIEW_BATCH_ACTIONS, REVIEW_BATCH_ACTION_USAGE);
+  const ids = parseIdsFlag2(args, REVIEW_BATCH_ACTION_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson("/v1/knowledge/reviews/batch", { action, ids });
+  const data = unwrapReviewData(resp, "review batch-action");
+  printResult(data, !!args.flags.json);
+  return reviewBatchExitCode(data);
+}
+async function reviewBatchDelete(args) {
+  const ids = parseIdsFlag2(args, REVIEW_BATCH_DELETE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.deleteJson("/v1/knowledge/reviews/batch", { ids });
+  const data = unwrapReviewData(resp, "review batch-delete");
+  printResult(data, !!args.flags.json);
+  return reviewBatchExitCode(data);
+}
+async function reviewDelete(args) {
+  const reviewId = requireId(args, "review-id", 0, REVIEW_DELETE_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.delete("/v1/knowledge/reviews", { review_id: reviewId });
+  printResult(unwrapReviewData(resp, "review delete"), !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateList(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_LIST_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/knowledge/review_templates", {
+    knowledge_base_id: kbId
+  });
+  const data = unwrapReviewData(resp, "review template list");
+  if (args.flags.raw) {
+    printResult(resp, !!args.flags.json);
+    return 0;
+  }
+  const out = args.flags.verbose ? Array.isArray(data) ? data.map(compactReviewTemplate) : [] : minimalReviewTemplateListResponse(data);
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+function buildTemplateUpsertBody2(args, usage, requireNameAndSections) {
+  const body = {};
+  const name = stringValue(args, "name");
+  if (name !== void 0) {
+    if (name.length > TEMPLATE_MAX_NAME_LENGTH) {
+      fail(`--name must be at most ${TEMPLATE_MAX_NAME_LENGTH} characters
+${usage}`, 2);
+    }
+    body.name = name;
+  }
+  const hasSectionsInput = Object.hasOwn(args.flags, "sections") || Object.hasOwn(args.flags, "sections-file");
+  if (hasSectionsInput) {
+    const raw = readPayloadInput(args, "sections", "sections-file", usage);
+    try {
+      body.sections = parseTemplateSections(raw);
+    } catch (error) {
+      fail(`${error instanceof Error ? error.message : String(error)}
+${usage}`, 2);
+    }
+  }
+  if (requireNameAndSections && (body.name === void 0 || body.sections === void 0)) {
+    fail(usage, 2);
+  }
+  return body;
+}
+function projectTemplateResult(args, resp, operation) {
+  const data = unwrapReviewData(resp, operation);
+  if (args.flags.raw) return resp;
+  if (data === null) return { ok: true };
+  if (args.flags.verbose) return compactReviewTemplate(data);
+  return minimalReviewTemplateDetail(data);
+}
+async function reviewTemplateCreate(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_CREATE_USAGE2);
+  const body = buildTemplateUpsertBody2(args, TEMPLATE_CREATE_USAGE2, true);
+  if (args.flags.default) body.is_default = true;
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson("/v1/knowledge/review_templates", body, {
+    knowledge_base_id: kbId
+  });
+  printResult(projectTemplateResult(args, resp, "review template create"), !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateUpdate(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_UPDATE_USAGE2);
+  const templateId = requireId(args, "template-id", 1, TEMPLATE_UPDATE_USAGE2);
+  const body = buildTemplateUpsertBody2(args, TEMPLATE_UPDATE_USAGE2, false);
+  const setDefault = args.flags.default !== void 0;
+  const clearDefault = args.flags["no-default"] !== void 0;
+  if (setDefault && clearDefault) {
+    fail(`cannot use --default and --no-default together
+${TEMPLATE_UPDATE_USAGE2}`, 2);
+  }
+  if (setDefault) body.is_default = true;
+  else if (clearDefault) body.is_default = false;
+  if (Object.keys(body).length === 0) {
+    fail(`nothing to update: provide --name, --sections/--sections-file or --default/--no-default
+${TEMPLATE_UPDATE_USAGE2}`, 2);
+  }
+  const ctx = buildContext(args);
+  const resp = await ctx.client.putJson("/v1/knowledge/review_templates", body, {
+    knowledge_base_id: kbId,
+    template_id: templateId
+  });
+  printResult(projectTemplateResult(args, resp, "review template update"), !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateDelete(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_DELETE_USAGE2);
+  const templateId = requireId(args, "template-id", 1, TEMPLATE_DELETE_USAGE2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.delete("/v1/knowledge/review_templates", {
+    knowledge_base_id: kbId,
+    template_id: templateId
+  });
+  printResult(unwrapReviewData(resp, "review template delete"), !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateGet(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_GET_USAGE2);
+  const templateId = requireId(args, "template-id", 1, TEMPLATE_GET_USAGE2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/knowledge/review_templates/detail", {
+    knowledge_base_id: kbId,
+    template_id: templateId
+  });
+  const data = unwrapReviewData(resp, "review template get");
+  if (args.flags.raw) {
+    printResult(resp, !!args.flags.json);
+    return 0;
+  }
+  if (data === null) {
+    printResult({ found: false, template_id: templateId }, !!args.flags.json);
+    return 0;
+  }
+  const out = args.flags.verbose ? compactReviewTemplate(data) : minimalReviewTemplateDetail(data);
+  printResult(out, !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateSetDefault(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_SET_DEFAULT_USAGE2);
+  const templateId = requireId(args, "template-id", 1, TEMPLATE_SET_DEFAULT_USAGE2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.postJson(
+    "/v1/knowledge/review_templates/set_default",
+    {},
+    { knowledge_base_id: kbId, template_id: templateId }
+  );
+  printResult(projectTemplateResult(args, resp, "review template set-default"), !!args.flags.json);
+  return 0;
+}
+async function reviewTemplateClearDefault(args) {
+  const kbId = requireId(args, "kb-id", 0, TEMPLATE_CLEAR_DEFAULT_USAGE2);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.delete("/v1/knowledge/review_templates/default", {
+    knowledge_base_id: kbId
+  });
+  printResult(unwrapReviewData(resp, "review template clear-default"), !!args.flags.json);
+  return 0;
+}
+async function reviewSettingsGet(args) {
+  const kbId = requireId(args, "kb-id", 0, SETTINGS_GET_USAGE);
+  const ctx = buildContext(args);
+  const resp = await ctx.client.get("/v1/knowledge/review_settings", {
+    knowledge_base_id: kbId
+  });
+  printResult(unwrapReviewData(resp, "review settings get"), !!args.flags.json);
+  return 0;
+}
+var SETTINGS_BOOL_FLAG_FIELDS = [
+  ["review-enabled", "review_enabled"],
+  ["rewrite-enabled", "rewrite_enabled"],
+  ["conflict-detection-enabled", "conflict_detection_enabled"],
+  ["rewrite-auto-ingest-enabled", "rewrite_auto_ingest_enabled"]
+];
+var SETTINGS_NUMBER_FLAG_FIELDS = [
+  ["high-threshold", "high_threshold", false],
+  ["logic-rewrite-threshold", "logic_rewrite_threshold", false],
+  ["noise-rewrite-threshold", "noise_rewrite_threshold", false],
+  ["max-rewrite-iterations", "max_rewrite_iterations", true]
+];
+async function reviewSettingsUpdate(args) {
+  const kbId = requireId(args, "kb-id", 0, SETTINGS_UPDATE_USAGE2);
+  const body = {};
+  for (const [flag, field] of SETTINGS_BOOL_FLAG_FIELDS) {
+    const on = args.flags[flag] !== void 0;
+    const off = args.flags[`no-${flag}`] !== void 0;
+    if (on && off) {
+      fail(`cannot use --${flag} and --no-${flag} together
+${SETTINGS_UPDATE_USAGE2}`, 2);
+    }
+    if (on) body[field] = true;
+    else if (off) body[field] = false;
+  }
+  for (const [flag, field, integer] of SETTINGS_NUMBER_FLAG_FIELDS) {
+    const value = args.flags[flag];
+    if (value === void 0) continue;
+    if (typeof value !== "string") fail(SETTINGS_UPDATE_USAGE2, 2);
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || integer && !Number.isInteger(parsed)) {
+      fail(`--${flag} must be ${integer ? "an integer" : "a number"}
+${SETTINGS_UPDATE_USAGE2}`, 2);
+    }
+    body[field] = parsed;
+  }
+  if (Object.keys(body).length === 0) {
+    fail(`nothing to update: provide at least one settings field
+${SETTINGS_UPDATE_USAGE2}`, 2);
+  }
+  body.knowledge_base_id = kbId;
+  const ctx = buildContext(args);
+  const resp = await ctx.client.patchJson("/v1/knowledge/review_settings", body);
+  const data = unwrapReviewData(resp, "review settings update");
+  printResult(data ?? { ok: true }, !!args.flags.json);
+  return 0;
+}
+
 // src/cli/main.ts
 var HELP5 = `ctxdb v${PACKAGE_VERSION} \u2014 RDS ContextDatabase CLI (multi-agent)
 
@@ -3000,18 +4299,20 @@ USAGE
   ctxdb <command> [args] [--flags]
 
 COMMANDS
-  setup [--agent <qoder|qoderwork|qwenwork|codex|claude|opencode|hermes> | --all]
+  setup [--agent <${SUPPORTED_AGENT_CHOICES}> | --all]
         [--api-key=K] [--base-url=URL] [--user-id=ID]
         [--no-install-skill] [--no-validate] [--json]
                                  Without --agent \u2192 writes agents.default (CLI-only, no hooks/skills)
                                  Qoder      \u2192 writes agents.qoder config + ~/.qoder/settings.json hooks + skill
                                  QoderWork  \u2192 writes agents.qoderwork config + ~/.qoderwork/settings.json hooks + skill
+                                 QwenWork   \u2192 writes agents.qwenwork config + ~/.qwenwork/settings.json hooks + skill
                                  Codex      \u2192 writes agents.codex config + ~/.codex/hooks.json hooks + skill
                                  Claude     \u2192 writes agents.claude config + ~/.claude/settings.json hooks + skill
                                  OpenCode   \u2192 writes agents.opencode config + ~/.config/opencode/plugins/ctxdb.ts shim + skill
                                  Hermes     \u2192 writes agents.hermes config + ~/.hermes/config.yaml pre/post_llm_call hooks + skill
                                               Approve pre_llm_call + post_llm_call with \`hermes --accept-hooks chat\`
                                               (exit chat, rerun setup, then restart any running Hermes CLI/gateway)
+                                 WorkBuddy  \u2192 writes agents.workbuddy config + ~/.workbuddy/settings.json hooks + skill
                                  --all       \u2192 detects and configures every setup-compatible built-in Agent
   status [--agent <name> | --all] [--json]
                                  Inspect configuration, connectivity, and integration health.
@@ -3047,6 +4348,42 @@ COMMANDS
   memory update <memory-id> --text=<new-text> [--agent=<name>]
   memory delete <memory-id> | --all [--agent=<name>]
 
+  memory promotion generate <topic> [--knowledge-base-id=<kb-id>] [--agent=<name>]
+  memory promotion list [--status=<generating|pending_review|approving|approved|rejected|generation_failed>]
+                 [--page=N] [--page-size=N] [--sort-by=quality_score]
+                 [--sort-order=asc|desc] [--raw] [--agent=<name>]
+  memory promotion get <promotion-id> [--raw] [--agent=<name>]
+  memory promotion approve --promotion-id=<id> --knowledge-base-id=<kb-id> [--agent=<name>]
+  memory promotion reject --promotion-id=<id> [--reason=<text>] [--agent=<name>]
+  memory promotion batch-action --action=<approve|reject> --ids=<id1,id2,...>
+                         [--knowledge-base-id=<kb-id> (required for approve)] [--reason=<text>] [--agent=<name>]
+  memory promotion batch-delete --ids=<id1,id2,...> [--agent=<name>]
+  memory promotion resolve-doubts --promotion-id=<id>
+                           --resolutions-json='[{"index":0,"choice":"<label>","comment":"..."}]'
+                           [--title=<title>] [--content=<markdown>] [--agent=<name>]
+  memory promotion template list [--raw] [--agent=<name>]
+  memory promotion template create --name=<name>
+                            --sections-json='[{"title":"...","guidance":"...","level":1}]'
+                            [--is-default] [--agent=<name>]
+  memory promotion template get <template-id> [--agent=<name>]
+  memory promotion template update <template-id> --name=<name> --sections-json='[...]'
+                            [--is-default] [--agent=<name>]
+  memory promotion template delete <template-id> [--agent=<name>]
+  memory promotion template set-default <template-id> [--agent=<name>]
+  memory promotion template clear-default [--agent=<name>]
+  memory promotion settings get [--agent=<name>]
+  memory promotion settings update [--auto-ingest-enabled=<true|false>]
+                            [--auto-ingest-threshold=<0..1>]
+                            [--default-kb-id=<kb-id> | --clear-default-kb] [--agent=<name>]
+                                 Memory promotion (\u8BB0\u5FC6\u6210\u6587): generate, review,
+                                 approve/reject promotion tasks; manage doc
+                                 templates and auto-ingest settings. Batch
+                                 requests accept at most 50 ids.
+                                 Default output is a compact agent-friendly
+                                 view; --raw returns the server envelope
+                                 verbatim.
+
+
   kb create <kb-name> [--description=<desc>] [--agent=<name>]
   kb upload-text <kb-name> <doc-name> --text=<body> [--agent=<name>]
                  [--file-path=<server-logical-path>] [--wait|--no-wait]
@@ -3073,8 +4410,58 @@ COMMANDS
                                  --verbose: compact view adds doc_name/kb_id/
                                  doc_id?/tags? for citation.
                                  --raw: server response verbatim (curl parity).
+  kb review list [--knowledge-base-id=<id>] [--decision=<d>]
+                 [--review-status=<pending|reviewed|rejected>]
+                 [--page=N] [--page-size=N] [--sort-by=confidence_score]
+                 [--sort-order=asc|desc] [--verbose] [--raw]
+                                 List knowledge review records (newest first
+                                 by default; --sort-by sorts by quality score).
+  kb review get <review-id> [--content-page=N] [--verbose] [--raw]
+                                 Review detail: scores, decision, conflicts
+                                 and paginated original content.
+  kb review action <review-id> --action=<confirm|force_accept|accept_rewrite|reject|reject_reupload>
+                 [--edited-content=<text> | --edited-content-file=<path>]
+                 [--conflict-resolutions=<json>] [--verbose] [--raw]
+                                 Perform one human review action.
+  kb review resolve-conflicts <review-id>
+                 (--resolutions=<json> | --resolutions-file=<path>) [--verbose] [--raw]
+                                 Resolve conflicts one by one. resolutions:
+                                 [{"conflict_id": "...", "resolution":
+                                 "use_new|keep_old|merge|annotate_divergence"}]
+  kb review batch-action --action=<confirm|reject> --ids=<id1,id2,...>
+                                 Batch confirm/reject up to 50 reviews.
+  kb review batch-delete --ids=<id1,id2,...>
+                                 Batch delete up to 50 reviewed/rejected records.
+  kb review delete <review-id>   Delete one reviewed/rejected record.
+  kb review template list <kb-id> [--verbose] [--raw]
+  kb review template create <kb-id> --name=<name>
+                 (--sections=<json> | --sections-file=<path>) [--default]
+  kb review template update <kb-id> <template-id> [--name=<name>]
+                 [--sections=<json> | --sections-file=<path>]
+                 [--default | --no-default]
+  kb review template delete <kb-id> <template-id>
+  kb review template get <kb-id> <template-id> [--verbose] [--raw]
+  kb review template set-default <kb-id> <template-id>
+  kb review template clear-default <kb-id>
+                                 Manage KB review-rewrite templates
+                                 (max 5 per KB). sections JSON:
+                                 [{"level": 1, "title": "...", "guidance": "..."}]
+  kb review settings get <kb-id> [--json]
+  kb review settings update <kb-id> [--review-enabled | --no-review-enabled]
+                 [--high-threshold=F] [--logic-rewrite-threshold=F]
+                 [--noise-rewrite-threshold=F] [--max-rewrite-iterations=N]
+                 [--rewrite-enabled | --no-rewrite-enabled]
+                 [--conflict-detection-enabled | --no-conflict-detection-enabled]
+                 [--rewrite-auto-ingest-enabled | --no-rewrite-auto-ingest-enabled]
+                                 Per-KB knowledge-review enablement, thresholds,
+                                 and rewrite/auto-ingest switches.
+                                 kb review list/detail/template default to the
+                                 minimal agent view; --verbose adds fields,
+                                 --raw ships the server envelope verbatim.
+                                 All kb review commands accept --json.
+
 
-  skill install --target <qoder|qoderwork|qwenwork|codex|claude|opencode|openclaw|hermes> [--json]
+  skill install --target <${SUPPORTED_TARGET_CHOICES}> [--json]
   skill install --path <dir> [--json]
                                  Install skill files (contextdb-memory,
                                  contextdb-knowledge) to an agent's skill directory.
@@ -3096,7 +4483,7 @@ HOOK ENV VARS:
   CTXDB_SKIP_HOOKS=TRUE       Hook/plugin entrypoints exit immediately.
                               Direct ctxdb CLI commands are unchanged.
 
-CONFIG: ~/.ctxdb/ctxdb.json (agents.default / agents.qoder / agents.qoderwork / agents.codex / agents.claude / agents.opencode / agents.hermes)
+CONFIG: ~/.ctxdb/ctxdb.json (agents.default / ${SUPPORTED_AGENTS.map((agent) => `agents.${agent}`).join(" / ")})
 LOGS:   ~/.ctxdb/logs/ctxdb.log, ~/.ctxdb/logs/recall-trace.jsonl
 `;
 var ROUTES = {
@@ -3121,7 +4508,30 @@ var ROUTES = {
     list: memoryList,
     get: memoryGet,
     update: memoryUpdate,
-    delete: memoryDelete
+    delete: memoryDelete,
+    promotion: {
+      generate: promotionGenerate,
+      list: promotionList,
+      get: promotionGet,
+      approve: promotionApprove,
+      reject: promotionReject,
+      "batch-action": promotionBatchAction,
+      "batch-delete": promotionBatchDelete,
+      "resolve-doubts": promotionResolveDoubts,
+      template: {
+        list: promotionTemplateList,
+        create: promotionTemplateCreate,
+        get: promotionTemplateGet,
+        update: promotionTemplateUpdate,
+        delete: promotionTemplateDelete,
+        "set-default": promotionTemplateSetDefault,
+        "clear-default": promotionTemplateClearDefault
+      },
+      settings: {
+        get: promotionSettingsGet,
+        update: promotionSettingsUpdate
+      }
+    }
   },
   kb: {
     create: kbCreate,
@@ -3132,12 +4542,34 @@ var ROUTES = {
     list: kbList,
     "documents-list": kbDocumentsList,
     "document-get": kbDocumentGet,
-    search: kbSearch
+    search: kbSearch,
+    review: {
+      list: reviewList,
+      get: reviewGet,
+      action: reviewAction,
+      "resolve-conflicts": reviewResolveConflicts,
+      "batch-action": reviewBatchAction,
+      "batch-delete": reviewBatchDelete,
+      delete: reviewDelete,
+      template: {
+        list: reviewTemplateList,
+        create: reviewTemplateCreate,
+        update: reviewTemplateUpdate,
+        delete: reviewTemplateDelete,
+        get: reviewTemplateGet,
+        "set-default": reviewTemplateSetDefault,
+        "clear-default": reviewTemplateClearDefault
+      },
+      settings: {
+        get: reviewSettingsGet,
+        update: reviewSettingsUpdate
+      }
+    }
   }
 };
-async function dispatch(argv) {
+async function dispatch(argv, routes = ROUTES, help = HELP5) {
   if (argv.length === 0 || argv[0] === "-h" || argv[0] === "--help") {
-    process.stdout.write(HELP5);
+    process.stdout.write(help);
     return 0;
   }
   if (argv[0] === "-v" || argv[0] === "--version") {
@@ -3146,61 +4578,82 @@ async function dispatch(argv) {
     return 0;
   }
   const [first, ...rest] = argv;
-  const route = ROUTES[first];
+  const route = routes[first];
   if (!route) {
     process.stderr.write(`unknown command: ${first}
 `);
-    process.stderr.write(HELP5);
+    process.stderr.write(help);
     return 2;
   }
   if (typeof route === "function") {
     return Promise.resolve(route(parseArgs(rest)));
   }
-  if (rest.length === 0) {
-    process.stderr.write(
-      `usage: ctxdb ${first} <${Object.keys(route).join("|")}> ...
-`
-    );
+  return dispatchGroup([first], route, rest);
+}
+async function dispatchGroup(path, group, argv) {
+  const usage = `usage: ctxdb ${path.join(" ")} <${Object.keys(group).join("|")}> ...
+`;
+  if (argv.length === 0) {
+    process.stderr.write(usage);
     return 2;
   }
-  if (rest[0] === "-h" || rest[0] === "--help") {
-    process.stdout.write(
-      `usage: ctxdb ${first} <${Object.keys(route).join("|")}> ...
-`
-    );
+  if (argv[0] === "-h" || argv[0] === "--help") {
+    process.stdout.write(usage);
     return 0;
   }
-  const [sub, ...subRest] = rest;
-  const handler = route[sub];
+  const [sub, ...subRest] = argv;
+  const handler = group[sub];
   if (!handler) {
-    process.stderr.write(`unknown subcommand: ${first} ${sub}
+    process.stderr.write(`unknown subcommand: ${[...path, sub].join(" ")}
 `);
     return 2;
   }
-  return Promise.resolve(handler(parseArgs(subRest)));
+  if (typeof handler === "function") {
+    return Promise.resolve(handler(parseArgs(subRest)));
+  }
+  return dispatchGroup([...path, sub], handler, subRest);
 }
-async function main(argv = process.argv.slice(2)) {
+async function main(argv = process.argv.slice(2), routes = ROUTES, help = HELP5) {
   const notification = beginUpdateNotification(argv, {
     currentVersion: PACKAGE_VERSION,
     workerPath: fileURLToPath2(new URL("../workers/version-check.js", import.meta.url))
   });
-  const code = await dispatch(argv);
+  const code = await dispatch(argv, routes, help);
   completeUpdateNotification(notification, code);
   return code;
 }
-main().then(
-  (code) => {
-    if (typeof code === "number") process.exitCode = code;
-  },
-  (err) => {
-    process.stderr.write(`error: ${err?.message ?? err}
+function runMain(routes = ROUTES, help = HELP5) {
+  main(process.argv.slice(2), routes, help).then(
+    (code) => {
+      if (typeof code === "number") process.exitCode = code;
+    },
+    (err) => {
+      process.stderr.write(`error: ${err?.message ?? err}
 `);
-    if (process.env.RDS_CTXDB_DEBUG === "1" && err?.stack) {
-      process.stderr.write(err.stack + "\n");
+      if (process.env.RDS_CTXDB_DEBUG === "1" && err?.stack) {
+        process.stderr.write(err.stack + "\n");
+      }
+      process.exitCode = 1;
     }
-    process.exitCode = 1;
+  );
+}
+var directEntry = (() => {
+  try {
+    const modulePath = resolve2(fileURLToPath2(import.meta.url));
+    const argvPath = resolve2(process.argv[1] ?? "");
+    return modulePath === argvPath || realpathSync(modulePath) === realpathSync(argvPath);
+  } catch {
+    return false;
   }
-);
+})();
+var directEntryName = basename2(fileURLToPath2(import.meta.url));
+if (directEntry && (directEntryName === "main.ts" || directEntryName === "main.js")) {
+  runMain();
+}
 export {
-  main
+  HELP5 as HELP,
+  ROUTES,
+  dispatch,
+  main,
+  runMain
 };