@inkeep/open-knowledge 0.42.0-beta.8 → 0.42.0-beta.9

package/dist/{acp-harness-probe-BLfn73i6.mjs → acp-harness-probe-DOzi_1ED.mjs}

@@ -1,3 +1,3 @@
-import{K as e}from"./sleep-B2L0pvp4.mjs";import{_ as t,b as n,d as r}from"./write-project-skill-7eiqv4-L.mjs";import{d as i}from"./init-WcxdIpWm.mjs";import{execFileSync as a}from"node:child_process";import{dirname as o,join as s}from"node:path";import{existsSync as c,mkdirSync as l,readFileSync as u,writeFileSync as d}from"node:fs";import{homedir as f}from"node:os";var p=e();const m=`open-knowledge`;function h(e){try{e()}catch{}}var g=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(m,e).getPassword()}catch(t){return h(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return h(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return h(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(m,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(m,e).deletePassword()}catch{}}},_=class{backend=`file`;authFile;constructor(e){this.authFile=e??s(f(),`.ok`,`auth.yml`)}read(){if(!c(this.authFile))return{};try{return(0,p.parse)(u(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=o(this.authFile);c(t)||l(t,{recursive:!0,mode:448}),d(this.authFile,(0,p.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},v=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function y(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(m,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
+import{K as e}from"./sleep-B2L0pvp4.mjs";import{_ as t,b as n,d as r}from"./write-project-skill-CeYehb7h.mjs";import{d as i}from"./init-CJBY0h7f.mjs";import{execFileSync as a}from"node:child_process";import{dirname as o,join as s}from"node:path";import{existsSync as c,mkdirSync as l,readFileSync as u,writeFileSync as d}from"node:fs";import{homedir as f}from"node:os";var p=e();const m=`open-knowledge`;function h(e){try{e()}catch{}}var g=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(m,e).getPassword()}catch(t){return h(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return h(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return h(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(m,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(m,e).deletePassword()}catch{}}},_=class{backend=`file`;authFile;constructor(e){this.authFile=e??s(f(),`.ok`,`auth.yml`)}read(){if(!c(this.authFile))return{};try{return(0,p.parse)(u(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=o(this.authFile);c(t)||l(t,{recursive:!0,mode:448}),d(this.authFile,(0,p.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},v=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function y(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(m,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
 `),h(()=>t?.onBackendSelected?.({backend:`keyring`})),new v(new g(t?.onKeychainRead),new _(e))}catch(n){let r=n instanceof Error?`${n.name}: ${n.message}`:String(n);return process.stderr.write(`[auth] token storage: file (~/.ok/auth.yml) — OS keychain unavailable: ${r}\n`),h(()=>t?.onBackendSelected?.({backend:`file`,reason:r})),new _(e)}}function b(e){let t=null;return function(){if(t)return t;let n=2e3;return t=(async()=>{let t=null,r=new Promise(r=>{t=setTimeout(()=>{process.stderr.write(`[auth] token storage: keyring init exceeded ${n}ms; falling back to file (~/.ok/auth.yml)\n`),r(new _(e))},n)});try{return await Promise.race([y(e),r])}catch{return new _(e)}finally{t!==null&&clearTimeout(t)}})(),t}}function x(e){let t=b(e);return{async get(e){let n=await(await t()).get(e);return n===null?null:{token:n.token}}}}function S(e){let t=b(e);return{backend:`file`,async get(e){return(await t()).get(e)},async set(e,n,r,i){return(await t()).set(e,n,r,i)},async clear(e){return(await t()).clear(e)}}}async function C(e,t){let n=[],r=new _(t);await r.get(e)!=null&&(await r.clear(e),n.push(`file`));let i;try{let{Entry:t}=await import(`@napi-rs/keyring`);new t(m,`__probe__`);let r,a=await new g(e=>{e.kind===`read-error`&&(r=e.error??`read-error`)}).get(e);if(r!==void 0)i=r;else if(a!=null)try{new t(m,e).deletePassword(),n.push(`keychain`)}catch(e){i=e instanceof Error?e.name:`delete-error`}}catch{}return{touched:n,keychainError:i}}const w=[`/opt/homebrew/bin/gh`,`/usr/local/bin/gh`,`/opt/local/bin/gh`,`/snap/bin/gh`,`/usr/bin/gh`],T={encoding:`utf-8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0};function E(e,t={}){let n=t._exec??a,r=t._fileExists??c,i=[`auth`,`token`,...e?[`--hostname`,e]:[]],o=[`gh`,...w.filter(r)];for(let e of o)try{let t=n(e,i,T).toString().trim();if(t.length>0)return{available:!0,token:t}}catch{}return{available:!1}}function D(e,a,o){let s=r[e],c=e===`opencode`?n:t,l=[],u=s.projectConfigPath?.(a);u!==void 0&&l.push({scope:`project`,configPath:u});try{l.push({scope:`user`,configPath:s.configPath(a,o)})}catch{}for(let t of l){let n=i(s,a,o,t.configPath);if(n!==null&&c(n))return{editorId:e,scope:t.scope,configPath:t.configPath}}return null}export{x as a,y as i,E as n,S as o,C as r,D as t};
-//# sourceMappingURL=acp-harness-probe-BLfn73i6.mjs.map
+//# sourceMappingURL=acp-harness-probe-DOzi_1ED.mjs.map

package/dist/assets/skills/discovery/SKILL.md

@@ -3,7 +3,7 @@ name: open-knowledge-discovery
 description: "Read when the user asks what OpenKnowledge is, wants to install it on a repository, wants to share an OpenKnowledge project with collaborators, or asks how `ok init` / `ok cowork` / OK Desktop set up a project. Do NOT load to perform OpenKnowledge reads/writes — the runtime guidance for editing markdown inside an initialized OK project ships as a separate project-local skill at `.claude/skills/open-knowledge/` whenever `ok init` runs. If the user appears to be editing markdown inside a `.ok/` project and this is the only OK skill loaded, advise them to re-run `ok init` to install the project-local skill."
 compatibility: "Any agent host — no MCP server required. Pure discovery + install guidance."
 metadata:
-  version: "0.42.0-beta.8"
+  version: "0.42.0-beta.9"
   author: "Inkeep"
   repository: "https://github.com/inkeep/open-knowledge"
 ---

package/dist/assets/skills/project/SKILL.md

@@ -3,7 +3,7 @@ name: open-knowledge
 description: "Authoritative agent-runtime contract for working inside an OpenKnowledge project — a markdown-CRDT knowledge base exposed over MCP. Use whenever reading, listing, searching, editing, or linting any `.md` or `.mdx` file in the project, and before any `mcp__open-knowledge__*` tool call (`exec`, `search`, `write`, `edit`, `lint`, and the rest). Installed by `ok init`, so its presence means this is an OpenKnowledge project and it governs every markdown file here. Covers the read/write tool surface, grounding and linking rules, folder/template conventions, the live browser preview, and the rule that OK's MCP tools — never native file tools — handle in-scope markdown."
 compatibility: "Claude Code, Claude Desktop, Claude Cowork, Claude.ai web. Requires OpenKnowledge MCP server + code execution."
 metadata:
-  version: "0.42.0-beta.8"
+  version: "0.42.0-beta.9"
   author: "Inkeep"
   repository: "https://github.com/inkeep/open-knowledge"
 ---

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./chunk-DTipWd-i.mjs";import{B as t,Ci as n,Ha as r,Ka as i,L as a,Na as o,Ta as s,Ti as c,Wi as l,ai as u,ca as d,ct as f,ka as p,la as m,lt as h,mo as g,oi as _,pa as v,sa as y,to as b,wa as x,wi as S}from"./src-C4HvLmg1.mjs";import{$ as C,$t as w,Ai as T,B as ee,Br as te,Ft as ne,Hr as re,Ht as E,It as ie,Lr as ae,Lt as oe,Ni as se,Oi as ce,Qr as le,Qt as D,R as ue,Rt as de,Ut as fe,V as pe,Xt as me,Z as he,_ as ge,_a as _e,_t as ve,a as ye,ar as be,bi as xe,bt as Se,ct as Ce,di as we,dt as Te,et as Ee,f as De,fn as Oe,fr as ke,ft as Ae,ga as je,gn as Me,gr as Ne,gt as Pe,ha as Fe,hi as Ie,hn as Le,hr as Re,ht as ze,ir as Be,ki as Ve,lt as He,ma as Ue,mi as We,mt as Ge,n as Ke,nt as qe,ot as Je,p as Ye,pt as Xe,r as Ze,sr as Qe,t as $e,tt as et,ui as O,ut as tt,vt as nt,w as rt,yi as it,z as at,zr as ot}from"./src-ZTjj6Vbn.mjs";import{C as st,I as ct,K as lt,N as ut,Pt as dt,X as ft,a as pt,ct as mt,dt as ht,et as gt,ht as k,l as _t,lt as vt,nt as A,r as yt,tt as j,ut as bt,v as xt,vt as St,xt as Ct,y as wt,z as Tt}from"./sleep-B2L0pvp4.mjs";import{O as Et,P as Dt,k as Ot}from"./fs-traced-Cc6WsRtP.mjs";import{a as kt}from"./git-handle-CnUwtybc.mjs";import{g as At,i as jt,v as Mt}from"./server-lock-TC0vRJO5.mjs";import{C as M,c as Nt,d as Pt,l as Ft,n as It,x as Lt}from"./write-project-skill-7eiqv4-L.mjs";import{C as Rt,D as zt,E as Bt,O as Vt,S as Ht,a as Ut,b as Wt,d as Gt,i as Kt,m as qt,o as Jt,p as Yt,s as Xt,v as Zt,x as Qt,y as $t}from"./src-BkLr-Kxa.mjs";import{c as en,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-BsmVIwfM.mjs";import{i as tn,n as nn,o as rn,r as an}from"./acp-harness-probe-BLfn73i6.mjs";import{n as on,r as sn,t as cn}from"./dist-bundle-CFfKBclM.mjs";import{A as ln,B as un,C as dn,F as fn,H as pn,L as mn,M as hn,N as gn,O as _n,P as vn,R as yn,T as bn,U as xn,V as Sn,j as Cn,u as wn,w as Tn,z as En}from"./init-WcxdIpWm.mjs";import{n as Dn,t as On}from"./constants-WSErvfZx.mjs";import{C as kn,E as An,S as jn,T as Mn,_ as Nn,m as Pn,w as Fn}from"./start-CrZJy3Yc.mjs";import{n as In,t as Ln}from"./loader-DKjlOOL4.mjs";import{t as Rn}from"./launch-json-removal-DcIuSt6G.mjs";import{n as zn}from"./repair-skills-wN4Q8hDX.mjs";import{execFile as Bn,execFileSync as Vn,execSync as Hn,spawn as Un,spawnSync as Wn}from"node:child_process";import{basename as Gn,dirname as Kn,isAbsolute as qn,join as z,relative as B,resolve as V,sep as Jn}from"node:path";import{accessSync as Yn,appendFileSync as Xn,closeSync as Zn,constants as Qn,existsSync as H,lstatSync as $n,mkdirSync as er,mkdtempSync as tr,openSync as nr,readFileSync as U,readdirSync as rr,realpathSync as ir,renameSync as ar,rmSync as or,statSync as W,unlinkSync as G,writeFileSync as sr}from"node:fs";import{homedir as cr,platform as lr,tmpdir as ur}from"node:os";import{rm as dr}from"node:fs/promises";import fr from"node:process";import{fileURLToPath as pr}from"node:url";import{randomUUID as mr}from"node:crypto";import{setTimeout as hr}from"node:timers/promises";import{promisify as gr}from"node:util";import{createServer as _r,request as vr}from"node:http";import{createInterface as yr}from"node:readline/promises";import{connect as br}from"node:net";const xr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Sr;(function(e){})(Sr||={});function Cr(e){return Ct(ft,e)}async function wr(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=le({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},d=te(t,r,l),f=new Map,p=e=>{let t=Kn(e),r=f.get(t);if(r)return r;let i=ot(d,re(n,e,l));return f.set(t,i),i},m=[],h=Tr(i,n);h.kind===`file`?m.push(B(n,h.path)):g(h.path);function g(e){let t;try{t=rr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${B(n,e)||`.`}: ${Dr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;g(t)}else if(r.isFile()){if(!Er(r.name)||s.isExcluded(i))continue;m.push(i)}}}m.sort();let v=[],y=0,b=0,x=0;for(let e of m){let t=z(n,e),r;try{r=U(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Dr(t)}`);continue}let i=p(e),s=!1;if(a&&i.enabled){let n=u(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{sr(i,n,`utf-8`),ar(i,t),r=n,s=!0,x++}catch(t){try{G(i)}catch{}o.push(`could not write fix to ${e}: ${Dr(t)}`)}}}let c=await _(r,i,e);for(let e of c)e.severity===`error`?y++:b++;v.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:v,warnings:o,fileCount:m.length,errorCount:y,warningCount:b,fixedCount:x}}function Tr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=qn(e)?e:V(t,e);try{if(W(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Er(e){let t=e.toLowerCase();return i.some(e=>t.endsWith(e))}function Dr(e){return e instanceof Error?e.message:String(e)}function Or(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Ve(r,i),o=t===void 0?void 0:kr(t,Bt()),s=r.contentRules,l=await wr({projectDir:i,contentDir:a,baseConfig:s?S(s):c,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${Mr(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:Ar(l))&&(process.exitCode=1)})}function kr(e,t){return V(t,e)}function Ar(e){return e.errorCount>0||e.warningCount>0}function jr(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Mr(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...jr(n));for(let n of e.warnings)t.push(L(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
+import{o as e}from"./chunk-DTipWd-i.mjs";import{B as t,Ci as n,Ha as r,Ka as i,L as a,Na as o,Ta as s,Ti as c,Wi as l,ai as u,ca as d,ct as f,ka as p,la as m,lt as h,mo as g,oi as _,pa as v,sa as y,to as b,wa as x,wi as S}from"./src-CJ8mKCzo.mjs";import{$ as C,$t as w,Ai as T,B as ee,Br as te,Ft as ne,Hr as re,Ht as E,It as ie,Lr as ae,Lt as oe,Ni as se,Oi as ce,Qr as le,Qt as D,R as ue,Rt as de,Ut as fe,V as pe,Xt as me,Z as he,_ as ge,_a as _e,_t as ve,a as ye,ar as be,bi as xe,bt as Se,ct as Ce,di as we,dt as Te,et as Ee,f as De,fn as Oe,fr as ke,ft as Ae,ga as je,gn as Me,gr as Ne,gt as Pe,ha as Fe,hi as Ie,hn as Le,hr as Re,ht as ze,ir as Be,ki as Ve,lt as He,ma as Ue,mi as We,mt as Ge,n as Ke,nt as qe,ot as Je,p as Ye,pt as Xe,r as Ze,sr as Qe,t as $e,tt as et,ui as O,ut as tt,vt as nt,w as rt,yi as it,z as at,zr as ot}from"./src-CIFd3tOE.mjs";import{C as st,I as ct,K as lt,N as ut,Pt as dt,X as ft,a as pt,ct as mt,dt as ht,et as gt,ht as k,l as _t,lt as vt,nt as A,r as yt,tt as j,ut as bt,v as xt,vt as St,xt as Ct,y as wt,z as Tt}from"./sleep-B2L0pvp4.mjs";import{O as Et,P as Dt,k as Ot}from"./fs-traced-Cc6WsRtP.mjs";import{a as kt}from"./git-handle-B1TJqyoh.mjs";import{g as At,i as jt,v as Mt}from"./server-lock-Cr23NqXF.mjs";import{C as M,c as Nt,d as Pt,l as Ft,n as It,x as Lt}from"./write-project-skill-CeYehb7h.mjs";import{C as Rt,D as zt,E as Bt,O as Vt,S as Ht,a as Ut,b as Wt,d as Gt,i as Kt,m as qt,o as Jt,p as Yt,s as Xt,v as Zt,x as Qt,y as $t}from"./src-C4H4J7S8.mjs";import{c as en,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-BsmVIwfM.mjs";import{i as tn,n as nn,o as rn,r as an}from"./acp-harness-probe-DOzi_1ED.mjs";import{n as on,r as sn,t as cn}from"./dist-bundle-CFfKBclM.mjs";import{A as ln,B as un,C as dn,F as fn,H as pn,L as mn,M as hn,N as gn,O as _n,P as vn,R as yn,T as bn,U as xn,V as Sn,j as Cn,u as wn,w as Tn,z as En}from"./init-CJBY0h7f.mjs";import{n as Dn,t as On}from"./constants-BU4A6vbq.mjs";import{C as kn,E as An,S as jn,T as Mn,_ as Nn,m as Pn,w as Fn}from"./start-DsU4nHte.mjs";import{n as In,t as Ln}from"./loader-CvlOZSkR.mjs";import{t as Rn}from"./launch-json-removal-CFvmMnMo.mjs";import{n as zn}from"./repair-skills-DllMOsvZ.mjs";import{execFile as Bn,execFileSync as Vn,execSync as Hn,spawn as Un,spawnSync as Wn}from"node:child_process";import{basename as Gn,dirname as Kn,isAbsolute as qn,join as z,relative as B,resolve as V,sep as Jn}from"node:path";import{accessSync as Yn,appendFileSync as Xn,closeSync as Zn,constants as Qn,existsSync as H,lstatSync as $n,mkdirSync as er,mkdtempSync as tr,openSync as nr,readFileSync as U,readdirSync as rr,realpathSync as ir,renameSync as ar,rmSync as or,statSync as W,unlinkSync as G,writeFileSync as sr}from"node:fs";import{homedir as cr,platform as lr,tmpdir as ur}from"node:os";import{rm as dr}from"node:fs/promises";import fr from"node:process";import{fileURLToPath as pr}from"node:url";import{randomUUID as mr}from"node:crypto";import{setTimeout as hr}from"node:timers/promises";import{promisify as gr}from"node:util";import{createServer as _r,request as vr}from"node:http";import{createInterface as yr}from"node:readline/promises";import{connect as br}from"node:net";const xr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Sr;(function(e){})(Sr||={});function Cr(e){return Ct(ft,e)}async function wr(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=le({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},d=te(t,r,l),f=new Map,p=e=>{let t=Kn(e),r=f.get(t);if(r)return r;let i=ot(d,re(n,e,l));return f.set(t,i),i},m=[],h=Tr(i,n);h.kind===`file`?m.push(B(n,h.path)):g(h.path);function g(e){let t;try{t=rr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${B(n,e)||`.`}: ${Dr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;g(t)}else if(r.isFile()){if(!Er(r.name)||s.isExcluded(i))continue;m.push(i)}}}m.sort();let v=[],y=0,b=0,x=0;for(let e of m){let t=z(n,e),r;try{r=U(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Dr(t)}`);continue}let i=p(e),s=!1;if(a&&i.enabled){let n=u(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{sr(i,n,`utf-8`),ar(i,t),r=n,s=!0,x++}catch(t){try{G(i)}catch{}o.push(`could not write fix to ${e}: ${Dr(t)}`)}}}let c=await _(r,i,e);for(let e of c)e.severity===`error`?y++:b++;v.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:v,warnings:o,fileCount:m.length,errorCount:y,warningCount:b,fixedCount:x}}function Tr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=qn(e)?e:V(t,e);try{if(W(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Er(e){let t=e.toLowerCase();return i.some(e=>t.endsWith(e))}function Dr(e){return e instanceof Error?e.message:String(e)}function Or(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Ve(r,i),o=t===void 0?void 0:kr(t,Bt()),s=r.contentRules,l=await wr({projectDir:i,contentDir:a,baseConfig:s?S(s):c,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${Mr(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:Ar(l))&&(process.exitCode=1)})}function kr(e,t){return V(t,e)}function Ar(e){return e.errorCount>0||e.warningCount>0}function jr(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Mr(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...jr(n));for(let n of e.warnings)t.push(L(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
 `)}const Nr={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Pr(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await Fr(t,n,e(),process.cwd(),Bt());r!==0&&(process.exitCode=r)})}async function Fr(e,t,r,i,a,o=Nr){let s=Ve(r,i),c;if(e!==void 0){let t=Ir(e,a,s);if(t===null)return o.err(`Path is outside the content directory (${s}): ${e}`),1;c=t===``?void 0:t}let l=jt(T(i));if(!l||l.port<=0)return o.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let u=c===void 0?``:`?path=${encodeURIComponent(c)}`,d;try{d=await fetch(`http://127.0.0.1:${l.port}/api/audit${u}`,{headers:g({kind:`cli`,runtimeVersion:At})})}catch(e){return o.err(`Could not reach the OpenKnowledge server on port ${l.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>({}));return o.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${d.status}`}`),1}let f=n.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return o.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;return t.json===!0?o.out(JSON.stringify(p,null,2)):o.out(Mr(Lr(p))),+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function Ir(e,t,n){let r=B(n,V(t,e));return r===``?``:r.startsWith(`..`)||qn(r)?null:r.split(Jn).join(`/`)}function Lr(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0}}async function Rr(e,t,n,r){let i=zr(await Br(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function zr(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Br(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Vr(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Rr(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await Ye(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await Ye(n),process.exit(1)}}),n}function Hr(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Ur(e,t,n){let r={baseUrl:Hr(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new on(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Wr(e){let t=e.request||cn,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Ur(t,`POST /login/device/code`,n)}async function Gr(e){let t=await Ur(e.request||cn,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Kr(e,t.data.expires_in),n.refreshTokenExpiresAt=Kr(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Kr(e,t){return new Date(e+t*1e3).toISOString()}async function qr(e,t){let n=Jr(e,t.auth);if(n)return n;let{data:r}=await Wr({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Xr(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Jr(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)?n:!1}async function Yr(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Xr(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Gr({...i,clientType:`oauth-app`}):await Gr({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Yr(r.interval),Xr(e,t,n,r);if(a===`slow_down`)return await Yr(r.interval+7),Xr(e,t,n,r);throw i}}async function Zr(e,t){return qr(e,{auth:t})}async function Qr(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await qr(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var $r=`0.0.0-development`;function ei(e){let t=e.request||cn.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${$r} ${sn()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Zr.bind(null,i),{hook:Qr.bind(null,i)})}async function ti(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ei({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-BT5p_5Yl.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function ni(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function K(e){let t=e.toLowerCase().replace(/:\d+$/,``);o.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function ri(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function ii(e,t,n=ti){let r=ni(),{host:i,json:a}=e;K(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?ri(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?ri(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function ai(e){return new M(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??ae(process.cwd()),r=await e();await ii({...t,host:n},r)})}const oi={style:{maskedText:`[input is masked]`}};var si=mn((e,t)=>{let{validate:n=()=>!0}=e,r=Sn(oi,e.theme),[i,a]=pn(`idle`),[o,s]=pn(),[c,l]=pn(``),u=un({status:i,theme:r});En(async(e,r)=>{if(i===`idle`)if(xn(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${yn}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function ci(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>ci.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function li(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function ui(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const di=Function.bind,fi=di.bind(di);function pi(e,t,n){let r=fi(ui,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=fi(li,null).apply(null,i)})}function mi(){let e=Symbol(`Singular`),t={registry:{}},n=ci.bind(null,t,e);return pi(n,t,e),n}function hi(){let e={registry:{}},t=ci.bind(null,e);return pi(t,e),t}var gi={Singular:mi,Collection:hi},_i=`0.0.0-development`;function vi(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
@@ -8,9 +8,9 @@ import{o as e}from"./chunk-DTipWd-i.mjs";import{B as t,Ci as n,Ha as r,Ka as i,L
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function pa(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??ae(process.cwd());await fa({...e,host:t})})}async function ma(e,t,n=nn){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function ha(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function ga(e,t){let{host:n,json:r}=e;K(n);let i=t.backend,a=await ma(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(ha(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new na({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(ha(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=aa(e,n);r?process.stdout.write(`${JSON.stringify(ha(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function _a(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??ae(process.cwd());await ga({...t,host:n},await e())})}function va(e){let t=new M(`auth`);t.description(`GitHub authentication management`);let n=e=>tn(void 0,e);return t.addCommand(ai(n)),t.addCommand(_a(n)),t.addCommand(da(n)),t.addCommand(pa()),t.addCommand(ca(n)),t.addCommand(Vr(n,e)),t}function ya(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in Finder (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in Finder`).action(async e=>{try{let{zipPath:t,summary:n}=await Wt({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:Rt(),logger:Af()});if(process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&lr()===`darwin`)try{An(`/usr/bin/open`,[`-R`,t])}catch{}}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function ba(e,t){let n=[];for(let[r,i]of[[`server`,e],[`ui`,t]])(i.status===`dead-pid`||i.status===`corrupt`)&&n.push({name:r,lockPath:i.lockPath,reason:i.status});return{prune:n}}function xa(e){let t=e.inspect??(t=>$t(e.lockDir,t)),n=e.unlink??(e=>G(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=ba(t(`server`),t(`ui`));if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Sa(e){return new M(`clean`).description(`Prune stale / corrupt open-knowledge lock files (never touches live locks)`).action(()=>{e(),xa({lockDir:T(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Ca(e){return`credential.helper=!${e.map(v).join(` `)} auth git-credential`}async function wa(e,t,n={},r=nn){let i=[`credential.helper=`,Ca(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e);if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Ta(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Ea=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Da(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Ea)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Oa(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function ka(e,t=process.env){let n=Oa(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST),n}function Aa(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function ja(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ma=d;async function Na(e){try{return await e.clone(ja(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ma(t))return e.onFallback(e.branch),await e.clone(ja(null)),{fellBack:!0};throw t}}function Pa(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Fa(e,t,n){return e===`https`&&t===`github.com`&&n}function Ia(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function La(e,t,n,r=process.cwd()){let i=Zt(e);if(!i)throw Error(`Invalid git URL: ${e}`);let a=Ia(e,i),o=t.dir?V(r,t.dir):V(r,i.name);if(H(o)&&rr(o).length>0)throw Error(`Target directory is not empty: ${o}`);Qe();let s=rn(),c=i.protocol===`https`&&i.hostname===`github.com`?await Ta(i.owner,i.name):!1,l=Fa(i.protocol,i.hostname,c)?{tier:`none`,gitConfig:[]}:await wa(i.hostname,s,{selfCliArgs:Aa()}),u=ka(l),d=kt(Pa(r,l.gitConfig)).env(u),f=-1;d.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Da(e);n&&n.pct!==f&&(f=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Na({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>d.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-C8rkx5j9.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Ra(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Ra(e){let t=_n(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const za=/^[A-Za-z0-9._/:@-]+$/;function Ba(e){return za.test(e)?e:v(e)}function Va(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ba(t)}`:``;return`ok clone ${Ba(e)}${n}`}function Ha(e){let t=y(e.error);if(t.kind!==`auth`)return null;if(m(t)){let t=Va(e.url,e.branch);return[`✗ Couldn't clone ${e.url} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-Byoir7UR.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Ra(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Ra(e){let t=_n(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const za=/^[A-Za-z0-9._/:@-]+$/;function Ba(e){return za.test(e)?e:v(e)}function Va(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ba(t)}`:``;return`ok clone ${Ba(e)}${n}`}function Ha(e){let t=y(e.error);if(t.kind!==`auth`)return null;if(m(t)){let t=Va(e.url,e.branch);return[`✗ Couldn't clone ${e.url} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}if(t.subclass===`403`){let t=typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``;return`✗ Access denied when cloning ${e.url}${t}. Check that your account has access to the repository.`}return t.subclass===`ssh-auth`?`✗ Couldn't clone ${e.url} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Va(e.url,e.branch)}`].join(`
-`)}function Ua(e){let t=e.error instanceof Error?e.error.message:String(e.error);if(e.json){e.emit({type:`error`,message:t});return}let n=Ha({error:e.error,url:e.url,branch:e.branch,principal:e.principal});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Wa(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Ga(e){let t=y(e.error),n=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){let t=Zt(e.url);t&&(n=await(e.resolvePrincipal??(e=>Wa(rn(),e)))(t.hostname))}Ua({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:n,emit:e.emit,printStderr:e.printStderr})}function Ka(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e();try{let a=await La(t,{json:r.json,dir:n,branch:r.branch??null},i);if(r.json)q(!0,{type:`complete`,dir:a});else{process.stderr.write(`✓ Cloned to ${a}\n`),process.chdir(a);let{startCommand:t}=await import(`./start-CFsgb8aj.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Be||e instanceof be){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Ga({error:e,url:t,branch:r.branch??null,json:r.json,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var qa=lt();const Ja=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],[`server`,`port`],...pt.map(e=>e.path)];function Ya(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??In;try{let{sources:n}=r(e.cwd);return t(`✓ Configuration valid (sources: ${n.length===0?`defaults only`:n.join(`, `)})`),{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function Xa(e){let t=(0,qa.parseDocument)(U(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of Ja)t.hasIn(e)&&n.push(e.join(`.`));return n}function Za(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function Qa(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=Za(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}async function $a(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`both`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ot,s=[];(r===`project`||r===`both`)&&s.push({scope:`project`,absPath:Et(`project`,a,e.homedirOverride)}),(r===`user`||r===`both`)&&s.push({scope:`user`,absPath:Et(`user`,a,e.homedirOverride)});let c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=Xa(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:Qa(Ja.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:_t(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}function eo(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{Ya({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*, server.port)`).option(`--scope <scope>`,`Which scope to migrate: project | user | both`,`both`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=e.scope;if(t!==`project`&&t!==`user`&&t!==`both`){console.error(`Invalid --scope: ${t}. Expected: project | user | both`),process.exitCode=2;return}(await $a({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const to=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],no=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function ro(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(no),t.join(`
+`)}function Ua(e){let t=e.error instanceof Error?e.error.message:String(e.error);if(e.json){e.emit({type:`error`,message:t});return}let n=Ha({error:e.error,url:e.url,branch:e.branch,principal:e.principal});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Wa(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Ga(e){let t=y(e.error),n=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){let t=Zt(e.url);t&&(n=await(e.resolvePrincipal??(e=>Wa(rn(),e)))(t.hostname))}Ua({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:n,emit:e.emit,printStderr:e.printStderr})}function Ka(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e();try{let a=await La(t,{json:r.json,dir:n,branch:r.branch??null},i);if(r.json)q(!0,{type:`complete`,dir:a});else{process.stderr.write(`✓ Cloned to ${a}\n`),process.chdir(a);let{startCommand:t}=await import(`./start-BcW2zDmT.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Be||e instanceof be){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Ga({error:e,url:t,branch:r.branch??null,json:r.json,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var qa=lt();const Ja=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],[`server`,`port`],...pt.map(e=>e.path)];function Ya(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??In;try{let{sources:n}=r(e.cwd);return t(`✓ Configuration valid (sources: ${n.length===0?`defaults only`:n.join(`, `)})`),{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function Xa(e){let t=(0,qa.parseDocument)(U(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of Ja)t.hasIn(e)&&n.push(e.join(`.`));return n}function Za(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function Qa(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=Za(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}async function $a(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`both`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ot,s=[];(r===`project`||r===`both`)&&s.push({scope:`project`,absPath:Et(`project`,a,e.homedirOverride)}),(r===`user`||r===`both`)&&s.push({scope:`user`,absPath:Et(`user`,a,e.homedirOverride)});let c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=Xa(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:Qa(Ja.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:_t(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}function eo(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{Ya({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*, server.port)`).option(`--scope <scope>`,`Which scope to migrate: project | user | both`,`both`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=e.scope;if(t!==`project`&&t!==`user`&&t!==`both`){console.error(`Invalid --scope: ${t}. Expected: project | user | both`),process.exitCode=2;return}(await $a({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const to=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],no=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function ro(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(no),t.join(`
 `)}function io(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ~/.ok/skill-state.yml`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function ao(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),...to,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function oo(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function so(e={}){let t=await Ne(e);return t.status===`failed`?{...t,message:oo(t),exitCode:1}:t.status===`skip-current`?{...t,message:io(t),exitCode:0}:t.status===`installed`?{...t,message:ao(t),exitCode:0}:{...t,message:ro(t),exitCode:0}}function co(){return new M(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await so({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function lo(e,t){let n=yr({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function uo(e={}){let t=e.productName??`OpenKnowledge`;return z(Lt(e),t)}function fo(e){if(typeof e!=`object`||!e)return null;let t=e.recentProjects;if(!Array.isArray(t))return null;let n=[];for(let e of t){if(typeof e!=`object`||!e)continue;let t=e;typeof t.path==`string`&&typeof t.name==`string`&&n.push({path:t.path,name:t.name})}return n}function po(e){let t=z(e,`state.json`);if(!H(t))return[];let n;try{n=JSON.parse(U(t,`utf-8`))}catch{return[]}return fo(n)??[]}function mo(e){let t=z(e,`state.json`);if(!H(t))return!1;try{return fo(JSON.parse(U(t,`utf-8`)))!==null}catch{return!1}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function ho(e){return Jn===`/`?e:e.split(Jn).join(`/`)}function go(e,t,n=`This project`){let i=[];i.push({kind:`stop-server`,group:n,label:`Stop the project server (if running)`,lockDir:T(e)});let a=new Set;for(let r of Ft){let o=Pt[r];if(!o.projectConfigPath)continue;let s=o.projectConfigPath(e);a.add(ho(B(e,s))),i.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${o.label} (${ho(B(e,s))})`,editorId:r,scope:`project`,cwd:e,home:t,configPath:s})}i.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),i.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let o=new Set([...Cn(e),...r]);for(let t of o){let r=t.replace(/\/$/,``);a.has(r)||r!==`.claude/launch.json`&&i.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:z(e,r),containWithin:e})}try{i.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:_e(e)})}catch{}return i}function _o(e,t){return{scope:`deinit`,ops:go(e,t)}}function vo(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(z(e,`..`,`..`),t)}`,lockDir:e});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...bo(a,t));for(let e of Ft){let n=Pt[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of Nt(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});c.push(...xo(t,n,e.env));for(let e of o)c.push(...go(e,t,`Project: ${Gn(e)}`));return c.push({kind:`remove-path`,group:`Global directory`,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:z(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function yo(e){return[z(e,`.zshrc`),z(e,`.bash_profile`),z(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function bo(e,t){let n=[],r=new Set([...yo(t),...e?.rcFiles??[]]);for(let e of r)H(e)&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function xo(e,t,n){if(t!==`darwin`)return[];let r={home:e,platformName:t,env:n},i=uo(r),a=uo({...r,productName:`Open Knowledge`}),o=z(e,`Library`,`Caches`,`OpenKnowledge-updater`);return[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i},{kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)} (only if it is OpenKnowledge's)`,path:a,requireOurState:!0},{kind:`remove-path`,group:`Application data`,label:`Remove ${J(o,e)}`,path:o}]}async function So(e,t={}){let n=t.clearToken??an,r=t.clearEmbeddingsKey??We,i=t.stopServer??(e=>{let t=Kt({lockDir:e,log:()=>{},error:()=>{}});return{stopped:t.stopped.length,failed:t.failed.map(e=>({pid:e.target.pid,error:e.error}))}}),a=[];for(let t of e.ops)try{a.push(await Co(t,{clearToken:n,clearEmbeddingsKey:r,stopServer:i}))}catch(e){a.push({op:t,status:`failed`,detail:e instanceof Error?e.message:String(e)})}return{results:a,removed:a.filter(e=>e.status===`removed`),failed:a.filter(e=>e.status===`failed`)}}async function Co(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r}=t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); a process may still be using files that were removed`}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{if(!H(e.rcFile))return{op:e,status:`not-present`};let{text:t,changed:n,emptyAfter:r}=qt(U(e.rcFile,`utf-8`));return n?r?(or(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(Dt(e.rcFile,t,{mode:bn(e.rcFile)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return Gt(e.path,e.target)?(G(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let t=Xt(Pt[e.editorId],e.cwd,e.home,e.configPath);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:return{op:e,status:`skipped`,detail:`declined (${t.reason})`};default:throw Error(`unhandled mcp-remove outcome: ${t.kind}`)}}case`launch-entry`:{let t=Rn(e.projectRoot);switch(t.kind){case`removed`:case`removed-file`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return{op:e,status:`skipped`,detail:`declined (unparseable)`};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{if(ln(e.projectRoot).length===0)return{op:e,status:`not-present`};let t=fn(e.projectRoot,Cn(e.projectRoot));return t.kind===`no-exclude`?t.reason===`inaccessible`?{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`}:{op:e,status:`not-present`,detail:t.reason}:{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return wo(e)}}function wo(e){if(e.requireOurState&&!mo(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&It(e.path,e.containWithin);let t;try{t=$n(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return G(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of rr(e.path))t.has(r)||(or(z(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return or(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function To(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Eo(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of To(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
@@ -39,7 +39,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),r}async function os(e,t,n,r,i){let a=as(e,t,z(r,`cpu.cpuprofile`)),o=!1,s=Un(process.execPath,[a],O({stdio:`ignore`})),c=setInterval(()=>{let e=ts(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{or(z(a,`..`),{recursive:!0,force:!0})}catch{}return o}function ss(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function cs(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??Je,s=t.inspect??$t,c=t.resolveCommand??Ce,l=t.resolveUsage??He,u=t.collectLsofFn??ns,d=t.getEndpoints??is,f=t.profiler??os,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e,`server`);if(t.status!==`missing`&&t.status!==`corrupt`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?z(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):z(process.cwd(),`ok-diagnose-${n}-${b}`);try{er(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{sr(z(x,e),t),a(`  wrote ${e}`)},C=c(n),w=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:w,lockInfo:y},null,2)),a(`  sampling lsof`);let T=u(n);if(T&&S(`lsof.txt`,T),!i){let e=T?rs(T).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,ss(U(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function ls(e){let t=yr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function us(e){let t=tr(z(ur(),`ok-bundle-process-`));return await cs({pid:e,output:t}),t}function ds(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function fs(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function ps(e,t,n){let{summary:r,manifest:i}=t;e(``),e(Y.default.bold(`ok diagnose bundle — content summary`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${ds(r.totalBytes)} uncompressed`),e(`  doc.name attributes:  ${r.docNameCount} occurrence(s) in telemetry${r.redacted?` (values hashed)`:``}`),e(`  Content-dir path:    ${r.contentDirVisible?`visible (${i.contentDir.absolutePath})`:`not visible`}`),e(`  Redacted:            ${r.redacted?`yes`:`no`}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function ms(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??ls,i=t.runProcessDiagnose??us,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=Kn(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);er(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=await Qt({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:e.redact===!0,deps:t.collectDeps});try{return c.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),ps(n,c,o),e.yes!==!0&&!fs(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Ht({collected:c,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(c.cleanup(),s!==void 0)try{or(s,{recursive:!0,force:!0})}catch{}}}function hs(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await cs({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(es()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--redact`,`Hash doc names and strip the content-dir prefix from the staged bundle`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BzBN0303.mjs`),{resolveContentDir:r}=await import(`./src-Cedat7Lt.mjs`),i=process.cwd(),{config:a}=n(i);await ms({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact===!0})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function gs(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await si({message:`Enter embeddings provider API key:`})).trim()}function _s(e){return we(e)}async function vs(e,t){let n=await xe(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function ys(e){try{let t=jt(T(e));if(!t||t.port<=0||!Mt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function bs(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await gs();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,ss(U(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function ls(e){let t=yr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function us(e){let t=tr(z(ur(),`ok-bundle-process-`));return await cs({pid:e,output:t}),t}function ds(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function fs(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function ps(e,t,n){let{summary:r,manifest:i}=t;e(``),e(Y.default.bold(`ok diagnose bundle — content summary`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${ds(r.totalBytes)} uncompressed`),e(`  doc.name attributes:  ${r.docNameCount} occurrence(s) in telemetry${r.redacted?` (values hashed)`:``}`),e(`  Content-dir path:    ${r.contentDirVisible?`visible (${i.contentDir.absolutePath})`:`not visible`}`),e(`  Redacted:            ${r.redacted?`yes`:`no`}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function ms(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??ls,i=t.runProcessDiagnose??us,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=Kn(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);er(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=await Qt({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:e.redact===!0,deps:t.collectDeps});try{return c.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),ps(n,c,o),e.yes!==!0&&!fs(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Ht({collected:c,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(c.cleanup(),s!==void 0)try{or(s,{recursive:!0,force:!0})}catch{}}}function hs(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await cs({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(es()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--redact`,`Hash doc names and strip the content-dir prefix from the staged bundle`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BlJfxAty.mjs`),{resolveContentDir:r}=await import(`./src-DHVO9P4d.mjs`),i=process.cwd(),{config:a}=n(i);await ms({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact===!0})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function gs(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await si({message:`Enter embeddings provider API key:`})).trim()}function _s(e){return we(e)}async function vs(e,t){let n=await xe(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function ys(e){try{let t=jt(T(e));if(!t||t.port<=0||!Mt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function bs(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await gs();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=V(e.cwd??process.cwd()),{baseUrl:r}=_s(n);try{await Ie().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -74,7 +74,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function Eu(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function Du(e){return/\s/.test(e)?`<${e}>`:e}function Ou(e,t={}){let{header:n,rows:r}=Zl(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(Eu).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=Eu(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${Du(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function ku(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function Au(e,t){return`# ${e}\n\n${t}\n`}const ju=[`links`,`frontmatter`,`callouts`,`images`,`tables`],Mu=/\.mdx?$/i;function Nu(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function Pu(e,t={}){let n=t.selected??new Set(ju),r=vu(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:Nu(!1)};let i=Nu(r),a=hu(e),o=ou(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!Mu.test(e)||s&&l.has(e))continue;let r;try{r=U(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Xl(a,Gn(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:z(Kn(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Kl(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=Tu(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=mu(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=Ou(e.csvText,{linkForTitle:t=>{let n=ru(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?B(Kn(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=U(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=Au(o===null?e.fallbackTitle:ku(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=mu(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function Fu(e){for(let t of e.assets)er(Kn(t.path),{recursive:!0}),sr(t.path,t.bytes);for(let t of e.changes)er(Kn(t.path),{recursive:!0}),sr(t.path,t.content,`utf8`);for(let t of e.deletions)try{G(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const Iu={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},Lu=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function Ru(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of Lu)n.push(`  ${Iu[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function zu(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Bu(e){let t=new Set(ju);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${ju.join(`, `)}`);return e})}function Vu(e,t){let n=new Set(ju);if(e&&(n=new Set(Bu(e))),t)for(let e of Bu(t))n.delete(e);return n}function Hu(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=Vu(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Pu(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Fu(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?zu(a,{applied:t.apply??!1}):Ru(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Uu(e=()=>Fn(kn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>qe({lockDir:T(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return W(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:e=>{An(`open`,[e])},log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Wu(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Gu(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install OK Desktop, or start a UI with `ok ui`, then retry."),1}function Ku(e,t,n,r){let i=`openknowledge://open?project=${encodeURIComponent(e)}&${t}=${encodeURIComponent(n)}`;r.openTarget(i)}function qu(e,t,n){let r=V(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Wu(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!b.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${b.join(`, `)}.`),1;if(n.detectBundlePath())return Ku(r,`doc`,`__skill__/${e}/${i}`,n),n.log(`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`),0;let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${et(e,i)}`;return n.openTarget(t),n.log(`Opening skill ${i} (${e}) in your browser: ${t}`),0}return Gu(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return Ku(r,`folder`,i,n),n.log(`Opening folder ${i} in the OpenKnowledge desktop app.`),0;let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${Ee(i)}`;return n.openTarget(t),n.log(`Opening folder ${i} in your browser: ${t}`),0}return Gu(n)}if(o)return Ku(r,`doc`,i,n),n.log(`Opening ${i} in the OpenKnowledge desktop app.`),0;let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${C(i)}`;return n.openTarget(e),n.log(`Opening ${i} in your browser: ${e}`),0}return Gu(n)}function Ju(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${b.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action((e,t)=>{process.exitCode=qu(e,t,Uu())})}function Yu(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DhJpRIag.mjs`),r=e(),i=process.cwd(),a=Ve(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Xu(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Zu(e,t,n=process.cwd()){let r=e.op??`sync`,i=jt(T(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...g({kind:`cli`,runtimeVersion:At})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Xu(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=kt({baseDir:n});if(r===`sync`||r===`pull`){Xu(e.json,{type:`step`,step:`pull`});let t=await a.pull();Xu(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Xu(e.json,{type:`step`,step:`push`}),await a.push(),Xu(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}function zu(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Bu(e){let t=new Set(ju);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${ju.join(`, `)}`);return e})}function Vu(e,t){let n=new Set(ju);if(e&&(n=new Set(Bu(e))),t)for(let e of Bu(t))n.delete(e);return n}function Hu(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=Vu(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Pu(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Fu(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?zu(a,{applied:t.apply??!1}):Ru(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Uu(e=()=>Fn(kn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>qe({lockDir:T(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return W(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:e=>{An(`open`,[e])},log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Wu(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Gu(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install OK Desktop, or start a UI with `ok ui`, then retry."),1}function Ku(e,t,n,r){let i=`openknowledge://open?project=${encodeURIComponent(e)}&${t}=${encodeURIComponent(n)}`;r.openTarget(i)}function qu(e,t,n){let r=V(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Wu(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!b.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${b.join(`, `)}.`),1;if(n.detectBundlePath())return Ku(r,`doc`,`__skill__/${e}/${i}`,n),n.log(`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`),0;let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${et(e,i)}`;return n.openTarget(t),n.log(`Opening skill ${i} (${e}) in your browser: ${t}`),0}return Gu(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return Ku(r,`folder`,i,n),n.log(`Opening folder ${i} in the OpenKnowledge desktop app.`),0;let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${Ee(i)}`;return n.openTarget(t),n.log(`Opening folder ${i} in your browser: ${t}`),0}return Gu(n)}if(o)return Ku(r,`doc`,i,n),n.log(`Opening ${i} in the OpenKnowledge desktop app.`),0;let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${C(i)}`;return n.openTarget(e),n.log(`Opening ${i} in your browser: ${e}`),0}return Gu(n)}function Ju(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${b.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action((e,t)=>{process.exitCode=qu(e,t,Uu())})}function Yu(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-ChQ6Nj5u.mjs`),r=e(),i=process.cwd(),a=Ve(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Xu(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Zu(e,t,n=process.cwd()){let r=e.op??`sync`,i=jt(T(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...g({kind:`cli`,runtimeVersion:At})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Xu(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=kt({baseDir:n});if(r===`sync`||r===`pull`){Xu(e.json,{type:`step`,step:`pull`});let t=await a.pull();Xu(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Xu(e.json,{type:`step`,step:`push`}),await a.push(),Xu(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)),Xu(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Qu(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Zu({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function $u(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Zu({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function ed(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Zu({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}function td(e){return typeof e==`string`&&fe.includes(e)}async function nd(e={}){let t=V(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!E[n])return{status:`failed`,message:`${I(`Error:`)} Unknown pack "${n}". Available: ${fe.join(`, `)}`,exitCode:1};let r;try{r=await ie({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof me?{status:`prerequisite-missing`,message:`${I(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${I(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(r.created.length===0){let e=E[n].name;return{status:`no-op`,message:`${F(`Your ${e} pack is already seeded.`)}\n${P(`Nothing to do.`)}`,plan:r,exitCode:0}}if(e.dryRun){let e=ne(E[n]);return{status:`dry-run`,message:`${R(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${R(`Plan:`)}\n\n${id(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await ad(`${R(`Plan:`)}\n\n${id(r,t)}\n\n${R(`Apply?`)} ${P(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:P(`Cancelled.`),plan:r,exitCode:0};let i=await oe(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${I(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${L(`Applied`)} ${i.applied} entries, ${L(String(i.errors.length))} error(s):`,...e].join(`
 `),plan:r,exitCode:1}}let a=E[n].name,o=i.packSkillsInstalled.length>0?`\n${P(`Installed the ${a} skill for: ${i.packSkillsInstalled.join(`, `)}`)}`:``;return{status:`applied`,message:`${F(`✓ Seeded ${a}`)} ${P(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}`,plan:r,exitCode:0}}function rd(){let e=[R(`Available packs:`)];for(let t of fe){let n=E[t];e.push(`  ${F(t)}  ${P(`—`)} ${n.name}: ${n.description}`)}return e.join(`
 `)}function id(e,t){let n=[],r=e.created.filter(e=>e.kind===`folder`),i=e.created.filter(e=>e.kind===`file`);if(r.length>0){n.push(R(`Folders to create:`));for(let e of r)n.push(`  ${F(`+`)} ${N(B(t,V(t,e.path))||e.path)}${P(`/`)}`)}if(i.length>0){n.length>0&&n.push(``),n.push(R(`Files to create:`));for(let e of i)n.push(`  ${F(`+`)} ${N(B(t,V(t,e.path))||e.path)}`)}if(e.skipped.length>0){n.length>0&&n.push(``),n.push(P(`Already present (skipped):`));for(let t of e.skipped)n.push(`  ${P(`· ${t.path} (${t.reason})`)}`)}if(e.warnings.length>0){n.length>0&&n.push(``),n.push(L(`Warnings:`));for(let t of e.warnings)n.push(`  ${L(`!`)} ${t}`)}return n.join(`
@@ -83,9 +83,9 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function ld(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await cd(t,await e())})}async function ud(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function dd(e,t){let{host:n,json:r}=e;K(n);let i=await la(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await ud(new na({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function fd(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await dd(t,await e())})}function pd(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function md(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function hd(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function gd(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function _d(e){return kt(Pa(e,[])).env(Oa())}function vd(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const yd={ensureOkScaffold:e=>{Oe(e)},gitFactory:_d};async function bd(e){let t={...yd,...e.deps},n=V(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await gd(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:pd(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n);if(!H(z(n,`.git`)))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let a;try{a=await md({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(pd(t)===`name-conflict`){let t=await hd(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};a=t}else return{kind:`error`,code:pd(t)}}try{await i.addRemote(`origin`,a.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let o=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{o=!0}if(o)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let s=vd(a.cloneUrl,e.token);try{await i.raw([`push`,s,`HEAD:refs/heads/${a.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${a.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:a.cloneUrl,defaultBranch:a.defaultBranch}}}function xd(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Sd(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;K(n);let l=await la(n,t);if(l==null){xd(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new na({auth:l,...u?{baseUrl:u}:{}});try{Hn(`git config user.email`,O({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}xd(c,await bd({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Cd(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Sd(t,await e())})}function wd(){let e=new M(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>tn();return e.addCommand(fd(t)),e.addCommand(ld(t)),e.addCommand(Cd(t)),e}function Td(){return new M(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=gn(t),r=fn(t,Cn(t));if(r.kind===`no-exclude`){Ed(e.json,t,r.reason);return}let i=gn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:i,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){process.stderr.write(`${N(`Sharing mode is already`)} ${R(`shared`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${R(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Ed(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Dd(){return new M(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=gn(t),r=vn(t),i=[...ln(t)],a=hn(t,Cn(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,skillsShared:r,excluded:i,trackedUpstream:a};process.stdout.write(`${JSON.stringify(e)}\n`);return}let o=[];if(o.push(`OpenKnowledge sharing mode: ${Od(n)}`),r&&o.push(`  ${R(`.ok/skills`)} is committable (carved out); the rest of .ok/ stays local.`),o.push(``),o.push(`Excluded from git via ${R(`.git/info/exclude`)}:`),i.length===0)o.push(`  (none)`);else for(let e of i)o.push(`  ${e}`);if(o.push(``),o.push(`Other OK paths exist but are tracked upstream:`),a.length===0)o.push(`  (none)`);else for(let e of a)o.push(`  ${e}`);o.push(``),o.push(`Toggle with: ${N(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),r&&o.push(`  (that shares the whole project; to undo only the skills carve-out, use the desktop app: Settings > Config sharing)`),process.stdout.write(`${o.join(`
-`)}\n`)})}function Od(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function kd(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=_n(t,Cn(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){Ad(e.json,t,n.reason);return}let r=gn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function Ad(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function jd(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Td()),e.addCommand(kd()),e.addCommand(Dd()),e}const Md=new Set([`--cwd`,`--log-level`]);function Nd(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){Md.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function Pd(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Fd(e){return/\.(md|mdx)$/i.test(e)}function Id(e,t){if(Fd(t))return!0;try{return W(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Ld(e=()=>Fn(kn())){return{prepare:ye,detectBundlePath:()=>e().bundlePath??null,openTarget:e=>{An(`open`,[e])},runProjectOpen:(e,t)=>qu(e,{project:t},Uu()),runBrowserOpen:e=>Bd(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Rd(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof Ke||e instanceof $e||e instanceof Ze)return t.error(e.message),1;throw e}if(n.mode===`project`)return t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`;return t.openTarget(e),t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0}return await t.runBrowserOpen(n),0}function zd(){let e=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[V(e,`public`),V(e,`../../app/dist`),V(e,`../../../app/dist`)].find(e=>H(e))}async function Bd(e){let{createEphemeralProjectDir:t}=await import(`./src-Cedat7Lt.mjs`),{loadConfig:n}=await import(`./index.mjs`),{bootStartServer:r,resolveHost:i}=await import(`./start-CFsgb8aj.mjs`),{openBrowser:a}=await import(`./open-browser-Dx055WwC.mjs`),o=zd();o||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let s=t(e.contentDir),c=!1,l,u=async()=>{if(!c){c=!0;try{await l?.destroy()}catch{}try{await dr(s,{recursive:!0,force:!0})}catch{}}},d=()=>{u().then(()=>process.exit(0))};process.once(`SIGINT`,d),process.once(`SIGTERM`,d);let{config:f}=n(s),p=i({},process.env);try{l=await r({config:f,cwd:s,host:p,port:0,projectDir:s,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:o,idleThresholdMs:6e5})}catch(t){await u(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let m=`http://${p}:${l.port}/#/${C(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${m}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${m}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Od(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function kd(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=_n(t,Cn(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){Ad(e.json,t,n.reason);return}let r=gn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function Ad(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function jd(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Td()),e.addCommand(kd()),e.addCommand(Dd()),e}const Md=new Set([`--cwd`,`--log-level`]);function Nd(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){Md.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function Pd(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Fd(e){return/\.(md|mdx)$/i.test(e)}function Id(e,t){if(Fd(t))return!0;try{return W(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Ld(e=()=>Fn(kn())){return{prepare:ye,detectBundlePath:()=>e().bundlePath??null,openTarget:e=>{An(`open`,[e])},runProjectOpen:(e,t)=>qu(e,{project:t},Uu()),runBrowserOpen:e=>Bd(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Rd(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof Ke||e instanceof $e||e instanceof Ze)return t.error(e.message),1;throw e}if(n.mode===`project`)return t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`;return t.openTarget(e),t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0}return await t.runBrowserOpen(n),0}function zd(){let e=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[V(e,`public`),V(e,`../../app/dist`),V(e,`../../../app/dist`)].find(e=>H(e))}async function Bd(e){let{createEphemeralProjectDir:t}=await import(`./src-DHVO9P4d.mjs`),{loadConfig:n}=await import(`./index.mjs`),{bootStartServer:r,resolveHost:i}=await import(`./start-BcW2zDmT.mjs`),{openBrowser:a}=await import(`./open-browser-CXby8R3t.mjs`),o=zd();o||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let s=t(e.contentDir),c=!1,l,u=async()=>{if(!c){c=!0;try{await l?.destroy()}catch{}try{await dr(s,{recursive:!0,force:!0})}catch{}}},d=()=>{u().then(()=>process.exit(0))};process.once(`SIGINT`,d),process.once(`SIGTERM`,d);let{config:f}=n(s),p=i({},process.env);try{l=await r({config:f,cwd:s,host:p,port:0,projectDir:s,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:o,idleThresholdMs:6e5})}catch(t){await u(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let m=`http://${p}:${l.port}/#/${C(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${m}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${m}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),a(m)),await new Promise(()=>{})}function Vd(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`manage`).description(`Control whether OK adopts your editor skills into this project. Default: off — OK only manages skills already under .ok/skills.`).option(`--on`,`Make this project OK-managed: import existing editor skills and adopt new ones.`).option(`--off`,`Stop adopting editor skills (non-destructive — existing .ok/skills + symlinks stay).`).option(`--status`,`Print the current setting.`).action(async e=>{let t=V(process.cwd());if([e.on,e.off,e.status].filter(Boolean).length!==1){process.stderr.write(`${I(`Error:`)} pass exactly one of --on, --off, --status.\n`),process.exitCode=1;return}if(e.status){let e=ke(t);process.stdout.write(`Skill management for ${R(t)}: ${e?F(`on`):P(`off (default)`)}\n`);return}let n=!!e.on;try{await Re(t,{manageEditorSkills:n,surface:`cli`})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not write skill-management marker: ${t}\n`),process.exitCode=1;return}process.stdout.write(n?`${F(`OK now manages skills for this project.`)} Existing editor skills are imported into ${R(`.ok/skills`)} on the next ${R(`ok start`)} / project open, and new ones adopted automatically.\n`:`${N(`OK will no longer adopt editor skills here.`)} Existing ${R(`.ok/skills`)} content + symlinks are left intact.\n`)}),e}function Hd(e,t){return{server:Ud(`server`,e),ui:Ud(`ui`,t)}}function Ud(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function Wd(e){return`${Gd(e.server)}\n${Gd(e.ui)}`}function Gd(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Kd(e){let t=e.inspect??(t=>$t(e.lockDir,t)),n=e.log??(e=>console.log(e)),r=Hd(t(`server`),t(`ui`));return e.json?n(JSON.stringify(r,null,2)):n(Wd(r)),r}function qd(e){return new M(`status`).description(`Show live state of the server + ui lockfiles for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Kd({lockDir:T(process.cwd()),json:t.json===!0})})}function Jd(e,t,n,r,i){let a=`urn:uuid:${mr()}`;if(e.headersSent||e.writableEnded||e.destroyed){console.error(`[ok ui] emitProblem called after headers sent — suppressed`,{type:n,status:t,instance:a});return}let o={type:n,title:r,status:t,instance:a,...i===void 0?{}:{detail:i}},s=l.safeParse(o);if(!s.success){console.error(`[ok ui] emitProblem produced an invalid ProblemDetails body:`,{issues:s.error.issues,originalStatus:t,body:o}),e.writeHead(500,{"Content-Type":`application/problem+json`,"X-Content-Type-Options":`nosniff`,"Cache-Control":`no-store`}),e.end(JSON.stringify({type:`urn:ok:error:internal-server-error`,title:`Internal server error.`,status:500,instance:a}));return}e.writeHead(t,{"Content-Type":`application/problem+json`,"X-Content-Type-Options":`nosniff`,"Cache-Control":`no-store`}),e.end(JSON.stringify(o))}const Yd=1e4;function Xd(e,t){let n=e.socket?.remoteAddress;if(n!==void 0&&!w(n))return Jd(t,403,`urn:ok:error:loopback-required`,`Request must originate from a loopback address.`),!0;if(!D(e.headers.host))return Jd(t,403,`urn:ok:error:host-not-allowed`,`Host header is not in the loopback allowlist.`),!0;let r=e.headers.origin;return r!==void 0&&!se(r)?(Jd(t,403,`urn:ok:error:invalid-origin`,`Origin header is not in the loopback allowlist.`),!0):!1}const Zd=3e4;function Qd(e,t){let n=e.socket?.remoteAddress;if(n!==void 0&&!w(n)||!D(e.headers.host))return t.destroy(),!0;let r=e.headers.origin;return typeof r==`string`&&!se(r)?(t.destroy(),!0):!1}function $d(e,t,n,r,i,a){a.add(t),t.once(`close`,()=>a.delete(t));let o=br({host:r,port:i,timeout:Yd});a.add(o),o.once(`close`,()=>a.delete(o));let s=!1,c=n=>{if(!s){if(s=!0,n!==void 0){let t=n.err;console.warn(JSON.stringify({event:n.event,upstreamHost:r,upstreamPort:i,url:e.url,code:t instanceof Error?t.code:void 0,message:t instanceof Error?t.message:void 0}))}try{o.destroy()}catch{}try{t.destroy()}catch{}}};o.once(`connect`,()=>{o.setTimeout(0);let a=[`${e.method??`GET`} ${e.url??`/`} HTTP/1.1`,`host: ${r}:${i}`];for(let[t,n]of Object.entries(e.headers))if(t.toLowerCase()!==`host`&&n!==void 0)if(Array.isArray(n))for(let e of n)a.push(`${t}: ${e}`);else a.push(`${t}: ${n}`);try{o.write(`${a.join(`\r
-`)}\r\n\r\n`),n.length>0&&o.write(n)}catch(e){c({event:`proxy-upgrade-handshake-write-failed`,err:e});return}o.on(`data`,e=>{t.writable&&t.write(e)}),t.on(`data`,e=>{o.writable&&o.write(e)})}),o.once(`timeout`,()=>{c({event:`proxy-upgrade-upstream-connect-timeout`})}),o.on(`error`,e=>c({event:`proxy-upgrade-upstream-error`,err:e})),t.on(`error`,e=>c({event:`proxy-upgrade-client-error`,err:e})),o.once(`close`,()=>c()),t.once(`close`,()=>c())}const ef=[`connection`,`keep-alive`,`proxy-authenticate`,`proxy-authorization`,`te`,`trailer`,`transfer-encoding`,`upgrade`,`cookie`,`set-cookie`];async function tf(e){let t=e.upstreamTimeoutMs??Yd,n=new Set,r=_r((n,r)=>{Xd(n,r)||rf(n,r,e.upstreamHost,e.upstreamPort,t)});r.on(`upgrade`,(t,r,i)=>{Qd(t,r)||$d(t,r,i,e.upstreamHost,e.upstreamPort,n)}),await new Promise((t,n)=>{let i=e=>n(e);r.once(`error`,i),r.listen(e.listenPort,e.host,()=>{r.off(`error`,i),t()})});let i=r.address();return{httpServer:r,port:typeof i==`object`&&i?i.port:e.listenPort,close:()=>new Promise(e=>{for(let e of n)try{e.destroy()}catch{}n.clear(),r.close(()=>e()),r.closeIdleConnections()})}}function nf(e,t,n){rf(e,t,n.upstreamHost,n.upstreamPort,n.upstreamTimeoutMs??Yd)}function rf(e,t,n,r,i){let a={...e.headers};delete a.host;for(let e of ef)delete a[e];e.setTimeout(Zd,()=>{if(t.headersSent)try{t.end()}catch{}else try{Jd(t,408,`urn:ok:error:request-timeout`,`Proxy request exceeded the per-request deadline.`,`Slow-loris-class: client did not finish within ${Zd/1e3}s.`)}catch{}try{e.socket?.destroy()}catch{}});let o=vr({host:n,port:r,method:e.method,path:e.url,headers:{...a,host:`${n}:${r}`}},e=>{let n={...e.headers};for(let e of ef)delete n[e];t.writeHead(e.statusCode??502,n),e.pipe(t),e.once(`error`,()=>{try{t.end()}catch{}})});i>0&&o.setTimeout(i,()=>{if(!t.headersSent)Jd(t,504,`urn:ok:error:gateway-timeout`,`Upstream did not respond before the gateway deadline.`,`Upstream timeout: ${i/1e3}s elapsed without a response.`);else try{t.end()}catch{}o.destroy()}),o.on(`error`,()=>{if(!t.headersSent)Jd(t,502,`urn:ok:error:collab-server-not-running`,`Collab server is unreachable.`,`Upstream connection failed or dropped before a response was received.`);else try{t.end()}catch{}}),e.on(`error`,()=>{o.destroy()}),e.pipe(o)}const af=39847;async function of(e){await Promise.all(e.map(e=>new Promise(t=>{e.close(()=>t())})))}async function sf(e){let{existsSync:n}=await import(`node:fs`),{createServer:r}=await import(`node:http`),{resolve:i}=await import(`node:path`),{acquireUiLock:a,createAssetServeMiddleware:o,createContentFilter:c,readServerLock:l,releaseUiLock:u,updateUiLockPort:d}=await import(`./src-Cedat7Lt.mjs`),{default:f}=await import(`./build-L3kflBeC.mjs`),{resolveContentDir:p,resolveLockDir:m}=await import(`./src-Cedat7Lt.mjs`),h=p(e.config,e.cwd),g=m(e.cwd);a(g,{port:0,worktreeRoot:e.cwd});let _=import.meta.dirname??new URL(`.`,import.meta.url).pathname,v=[i(_,`public`),i(_,`../../app/dist`),i(_,`../../../app/dist`)],y=e.assetDir??v.find(e=>n(e)),b=y?f(y,{single:!0,gzip:!0,etag:!0,dev:!0,extensions:[]}):null,x=n(h)?o({contentFilter:c({projectDir:e.cwd,contentDir:h}),contentSirv:f(h,{dotfiles:!1,dev:!0,extensions:[]}),inlineExtensions:Tt,assetExtensions:ut,blocklistExtensions:ct}):null,S=e.port,C=null,w=(e,t)=>{let n=e.url?.split(`?`)[0];if((n===`/`||n===``)&&(e.url=`/index.html`),!(n?.startsWith(`/api/`)&&Xd(e,t))){if(n===`/api/config`&&(e.method===`GET`||e.method===`HEAD`)){C?.();let n=l(g),r=e.headers.host??`localhost:${S}`,i=n&&n.port>0?`ws://${r}/collab`:null,a=JSON.stringify({collabUrl:i,previewUrl:null,port:S});t.setHeader(`Content-Type`,`application/json`),t.setHeader(`Cache-Control`,`no-store`),t.setHeader(`X-Content-Type-Options`,`nosniff`),t.statusCode=200,e.method===`HEAD`?t.end():t.end(a);return}if(n?.startsWith(`/api/`)){C?.();let r=l(g);if(!r||r.port<=0){Jd(t,503,`urn:ok:error:collab-server-not-running`,"Collab server not running. Start `ok start` or run `ok status`.",`Path: ${n}`);return}nf(e,t,{upstreamHost:s,upstreamPort:r.port});return}if(b&&n?.startsWith(`/assets/`)){b(e,t,()=>{x?x(e,t,()=>cf(t)):cf(t)});return}if(x){x(e,t,()=>{b?b(e,t):cf(t)});return}if(b){b(e,t);return}cf(t)}},T=new Set,ee=(e,t,n)=>{if(Qd(e,t))return;let r=e.url?.split(`?`)[0]??``;if(r!==`/collab`&&!r.startsWith(`/collab/`)){t.destroy();return}let i=l(g);if(!i||i.port<=0){console.warn(JSON.stringify({event:`ok-ui-upgrade-no-collab-lock`,url:r,reason:"server.lock missing or port unbound — is `ok start` running?"})),t.destroy();return}$d(e,t,n,s,i.port,T)},te=()=>{for(let e of T)try{e.destroy()}catch{}T.clear()},ne=e.host===void 0?[`::1`,`127.0.0.1`]:[e.host],re=[],E=e.port,ie=e=>e instanceof Error&&e.code===`EADDRINUSE`,ae=async()=>{await Promise.all(re.splice(0).map(e=>new Promise(t=>{try{e.close(()=>t())}catch{t()}})))},oe=async e=>{E=e;for(let e of ne){let t=r(w);t.on(`upgrade`,ee),re.push(t),await new Promise((n,r)=>{let i=e=>r(e);t.once(`error`,i),t.listen(E,e,()=>{t.off(`error`,i);let e=t.address();typeof e==`object`&&e&&(E=e.port),n()})})}};try{try{await oe(e.port)}catch(t){if(e.fallbackToKernel===!0&&ie(t))await ae(),await oe(0);else throw t}}catch(e){await ae();try{u(g)}catch{}throw e}let se=E;S=se,d(g,se);let ce=e.scheduler??t,le=e.safetyNetMs??432e5,D=null,ue=!1,de=!1,fe=()=>{ue||(ue=!0,D!==null&&(ce.clearTimeout(D),D=null))},pe=()=>{if(fe(),!de){de=!0;try{u(g)}catch{}}},me=()=>{ue||le<=0||(D!==null&&(ce.clearTimeout(D),D=null),D=ce.setTimeout(()=>{D=null,console.warn(`[ui] safety-net (${le}ms) reached — shutting down (D-025 backstop)`);try{e.onSafetyNet?.()}catch{}te();for(let e of re)try{e.close()}catch{}pe()},le))},he=()=>{ue||le<=0||me()};return C=he,me(),{httpServers:re,port:se,release:pe,detachSafetyNet:fe,nudgeSafetyNet:he,drainUpgradeSockets:te}}function cf(e){e.headersSent||e.writableEnded||e.destroyed||(e.setHeader(`X-Content-Type-Options`,`nosniff`),e.setHeader(`Cache-Control`,`no-store`),e.statusCode=404,e.end())}function lf(e,t){if(e!==void 0){let t=Number.parseInt(e,10);if(Number.isNaN(t)||t<0||t>65535)throw Error(`Invalid --port value '${e}'`);return{port:t,fallbackToKernel:!1}}if(t!==void 0&&t!==``){let e=Number.parseInt(t,10);if(Number.isNaN(e)||e<0||e>65535)throw Error(`Invalid PORT env value '${t}'`);return{port:e,fallbackToKernel:!1}}return{port:af,fallbackToKernel:!0}}async function uf(e){let t=e.readLock??(async()=>{let{readUiLock:t}=await import(`./src-Cedat7Lt.mjs`);return t(e.lockDir)}),n=await t();if(!n)throw Error(`UI lock collision reported but the lock disappeared before handling — retry acquiring.`);if(n.port===e.requestedPort&&n.port>0)return{mode:`already-running`,port:n.port};let r=n.port;if(r===0){let n=Date.now()+(e.pollDeadlineMs??2e3),i=e.pollIntervalMs??100;for(;Date.now()<n;){await new Promise(e=>{setTimeout(e,i)});let e=await t();if(e&&e.port>0){r=e.port;break}}if(r===0)throw Error("UI did not bind within 2s; run `ok clean`");if(r===e.requestedPort)return{mode:`already-running`,port:r}}return{mode:`proxy`,handle:await tf({listenPort:e.requestedPort,host:e.host,upstreamHost:`localhost`,upstreamPort:r}),upstreamPort:r}}function df(e){return new M(`ui`).description(`Serve the OpenKnowledge React editor UI`).option(`-p, --port <port>`,`UI port (default: $PORT env or ${af}, kernel-allocated fallback if busy)`).option(`-H, --host <host>`,"UI host. Default: two-socket loopback bind (`[::1]` + `127.0.0.1`) so cross-family collisions fail loud. Pass an explicit host (e.g. `127.0.0.1`, `0.0.0.0`) to bind a single socket on that host.").action(async t=>{let{dim:n}=await import(`./colors-MGDi6UGf.mjs`),{UiLockCollisionError:r}=await import(`./src-Cedat7Lt.mjs`),{resolveLockDir:i}=await import(`./src-Cedat7Lt.mjs`),a=e(),o=t.host,s;try{s=lf(t.port,process.env.PORT)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=1;return}let c=s.port;try{let e=await sf({config:a,cwd:process.cwd(),port:c,fallbackToKernel:s.fallbackToKernel,host:o}),t=o===void 0||o===`::`||o===`0.0.0.0`?`localhost`:o;console.log(`${n(`[ui]`)} listening on http://${t}:${e.port}`);let r=!1,i=t=>{if(r)return;r=!0,console.log(n(`\n[ui] Shutting down (${t})`)),e.detachSafetyNet();let i=()=>{try{e.release()}finally{process.exit(process.exitCode??0)}};e.drainUpgradeSockets(),of(e.httpServers).then(i,i),setTimeout(i,2e3).unref()};process.once(`SIGINT`,()=>i(`SIGINT`)),process.once(`SIGTERM`,()=>i(`SIGTERM`));return}catch(e){if(!(e instanceof r))throw e;let t=i(process.cwd()),a=o??`localhost`,s;try{s=await uf({requestedPort:c,host:a,lockDir:t})}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exit(1)}if(s.mode===`already-running`){if(console.log(`UI already running at http://${a}:${s.port}`),ff(process)){await new Promise(e=>{let t=t=>{console.log(n(`\n[ui-keepalive] Shutting down (${t})`)),e()};process.once(`SIGINT`,()=>t(`SIGINT`)),process.once(`SIGTERM`,()=>t(`SIGTERM`))});return}process.exit(0)}console.log(`UI running at http://${a}:${s.upstreamPort}; acting as HTTP proxy on port ${s.handle.port}`);let l=!1,u=e=>{l||(l=!0,console.log(n(`\n[ui-proxy] Shutting down (${e})`)),s.handle.close().finally(()=>process.exit(process.exitCode??0)),setTimeout(()=>process.exit(process.exitCode??0),2e3).unref())};process.once(`SIGINT`,()=>u(`SIGINT`)),process.once(`SIGTERM`,()=>u(`SIGTERM`))}})}function ff(e){let t=e.stdout.isTTY===!0,n=typeof e.env.PORT==`string`&&e.env.PORT!==``;return!t||n}function pf(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function mf(e,t){let n=yr({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function hf(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
+`)}\r\n\r\n`),n.length>0&&o.write(n)}catch(e){c({event:`proxy-upgrade-handshake-write-failed`,err:e});return}o.on(`data`,e=>{t.writable&&t.write(e)}),t.on(`data`,e=>{o.writable&&o.write(e)})}),o.once(`timeout`,()=>{c({event:`proxy-upgrade-upstream-connect-timeout`})}),o.on(`error`,e=>c({event:`proxy-upgrade-upstream-error`,err:e})),t.on(`error`,e=>c({event:`proxy-upgrade-client-error`,err:e})),o.once(`close`,()=>c()),t.once(`close`,()=>c())}const ef=[`connection`,`keep-alive`,`proxy-authenticate`,`proxy-authorization`,`te`,`trailer`,`transfer-encoding`,`upgrade`,`cookie`,`set-cookie`];async function tf(e){let t=e.upstreamTimeoutMs??Yd,n=new Set,r=_r((n,r)=>{Xd(n,r)||rf(n,r,e.upstreamHost,e.upstreamPort,t)});r.on(`upgrade`,(t,r,i)=>{Qd(t,r)||$d(t,r,i,e.upstreamHost,e.upstreamPort,n)}),await new Promise((t,n)=>{let i=e=>n(e);r.once(`error`,i),r.listen(e.listenPort,e.host,()=>{r.off(`error`,i),t()})});let i=r.address();return{httpServer:r,port:typeof i==`object`&&i?i.port:e.listenPort,close:()=>new Promise(e=>{for(let e of n)try{e.destroy()}catch{}n.clear(),r.close(()=>e()),r.closeIdleConnections()})}}function nf(e,t,n){rf(e,t,n.upstreamHost,n.upstreamPort,n.upstreamTimeoutMs??Yd)}function rf(e,t,n,r,i){let a={...e.headers};delete a.host;for(let e of ef)delete a[e];e.setTimeout(Zd,()=>{if(t.headersSent)try{t.end()}catch{}else try{Jd(t,408,`urn:ok:error:request-timeout`,`Proxy request exceeded the per-request deadline.`,`Slow-loris-class: client did not finish within ${Zd/1e3}s.`)}catch{}try{e.socket?.destroy()}catch{}});let o=vr({host:n,port:r,method:e.method,path:e.url,headers:{...a,host:`${n}:${r}`}},e=>{let n={...e.headers};for(let e of ef)delete n[e];t.writeHead(e.statusCode??502,n),e.pipe(t),e.once(`error`,()=>{try{t.end()}catch{}})});i>0&&o.setTimeout(i,()=>{if(!t.headersSent)Jd(t,504,`urn:ok:error:gateway-timeout`,`Upstream did not respond before the gateway deadline.`,`Upstream timeout: ${i/1e3}s elapsed without a response.`);else try{t.end()}catch{}o.destroy()}),o.on(`error`,()=>{if(!t.headersSent)Jd(t,502,`urn:ok:error:collab-server-not-running`,`Collab server is unreachable.`,`Upstream connection failed or dropped before a response was received.`);else try{t.end()}catch{}}),e.on(`error`,()=>{o.destroy()}),e.pipe(o)}const af=39847;async function of(e){await Promise.all(e.map(e=>new Promise(t=>{e.close(()=>t())})))}async function sf(e){let{existsSync:n}=await import(`node:fs`),{createServer:r}=await import(`node:http`),{resolve:i}=await import(`node:path`),{acquireUiLock:a,createAssetServeMiddleware:o,createContentFilter:c,readServerLock:l,releaseUiLock:u,updateUiLockPort:d}=await import(`./src-DHVO9P4d.mjs`),{default:f}=await import(`./build-L3kflBeC.mjs`),{resolveContentDir:p,resolveLockDir:m}=await import(`./src-DHVO9P4d.mjs`),h=p(e.config,e.cwd),g=m(e.cwd);a(g,{port:0,worktreeRoot:e.cwd});let _=import.meta.dirname??new URL(`.`,import.meta.url).pathname,v=[i(_,`public`),i(_,`../../app/dist`),i(_,`../../../app/dist`)],y=e.assetDir??v.find(e=>n(e)),b=y?f(y,{single:!0,gzip:!0,etag:!0,dev:!0,extensions:[]}):null,x=n(h)?o({contentFilter:c({projectDir:e.cwd,contentDir:h}),contentSirv:f(h,{dotfiles:!1,dev:!0,extensions:[]}),inlineExtensions:Tt,assetExtensions:ut,blocklistExtensions:ct}):null,S=e.port,C=null,w=(e,t)=>{let n=e.url?.split(`?`)[0];if((n===`/`||n===``)&&(e.url=`/index.html`),!(n?.startsWith(`/api/`)&&Xd(e,t))){if(n===`/api/config`&&(e.method===`GET`||e.method===`HEAD`)){C?.();let n=l(g),r=e.headers.host??`localhost:${S}`,i=n&&n.port>0?`ws://${r}/collab`:null,a=JSON.stringify({collabUrl:i,previewUrl:null,port:S});t.setHeader(`Content-Type`,`application/json`),t.setHeader(`Cache-Control`,`no-store`),t.setHeader(`X-Content-Type-Options`,`nosniff`),t.statusCode=200,e.method===`HEAD`?t.end():t.end(a);return}if(n?.startsWith(`/api/`)){C?.();let r=l(g);if(!r||r.port<=0){Jd(t,503,`urn:ok:error:collab-server-not-running`,"Collab server not running. Start `ok start` or run `ok status`.",`Path: ${n}`);return}nf(e,t,{upstreamHost:s,upstreamPort:r.port});return}if(b&&n?.startsWith(`/assets/`)){b(e,t,()=>{x?x(e,t,()=>cf(t)):cf(t)});return}if(x){x(e,t,()=>{b?b(e,t):cf(t)});return}if(b){b(e,t);return}cf(t)}},T=new Set,ee=(e,t,n)=>{if(Qd(e,t))return;let r=e.url?.split(`?`)[0]??``;if(r!==`/collab`&&!r.startsWith(`/collab/`)){t.destroy();return}let i=l(g);if(!i||i.port<=0){console.warn(JSON.stringify({event:`ok-ui-upgrade-no-collab-lock`,url:r,reason:"server.lock missing or port unbound — is `ok start` running?"})),t.destroy();return}$d(e,t,n,s,i.port,T)},te=()=>{for(let e of T)try{e.destroy()}catch{}T.clear()},ne=e.host===void 0?[`::1`,`127.0.0.1`]:[e.host],re=[],E=e.port,ie=e=>e instanceof Error&&e.code===`EADDRINUSE`,ae=async()=>{await Promise.all(re.splice(0).map(e=>new Promise(t=>{try{e.close(()=>t())}catch{t()}})))},oe=async e=>{E=e;for(let e of ne){let t=r(w);t.on(`upgrade`,ee),re.push(t),await new Promise((n,r)=>{let i=e=>r(e);t.once(`error`,i),t.listen(E,e,()=>{t.off(`error`,i);let e=t.address();typeof e==`object`&&e&&(E=e.port),n()})})}};try{try{await oe(e.port)}catch(t){if(e.fallbackToKernel===!0&&ie(t))await ae(),await oe(0);else throw t}}catch(e){await ae();try{u(g)}catch{}throw e}let se=E;S=se,d(g,se);let ce=e.scheduler??t,le=e.safetyNetMs??432e5,D=null,ue=!1,de=!1,fe=()=>{ue||(ue=!0,D!==null&&(ce.clearTimeout(D),D=null))},pe=()=>{if(fe(),!de){de=!0;try{u(g)}catch{}}},me=()=>{ue||le<=0||(D!==null&&(ce.clearTimeout(D),D=null),D=ce.setTimeout(()=>{D=null,console.warn(`[ui] safety-net (${le}ms) reached — shutting down (D-025 backstop)`);try{e.onSafetyNet?.()}catch{}te();for(let e of re)try{e.close()}catch{}pe()},le))},he=()=>{ue||le<=0||me()};return C=he,me(),{httpServers:re,port:se,release:pe,detachSafetyNet:fe,nudgeSafetyNet:he,drainUpgradeSockets:te}}function cf(e){e.headersSent||e.writableEnded||e.destroyed||(e.setHeader(`X-Content-Type-Options`,`nosniff`),e.setHeader(`Cache-Control`,`no-store`),e.statusCode=404,e.end())}function lf(e,t){if(e!==void 0){let t=Number.parseInt(e,10);if(Number.isNaN(t)||t<0||t>65535)throw Error(`Invalid --port value '${e}'`);return{port:t,fallbackToKernel:!1}}if(t!==void 0&&t!==``){let e=Number.parseInt(t,10);if(Number.isNaN(e)||e<0||e>65535)throw Error(`Invalid PORT env value '${t}'`);return{port:e,fallbackToKernel:!1}}return{port:af,fallbackToKernel:!0}}async function uf(e){let t=e.readLock??(async()=>{let{readUiLock:t}=await import(`./src-DHVO9P4d.mjs`);return t(e.lockDir)}),n=await t();if(!n)throw Error(`UI lock collision reported but the lock disappeared before handling — retry acquiring.`);if(n.port===e.requestedPort&&n.port>0)return{mode:`already-running`,port:n.port};let r=n.port;if(r===0){let n=Date.now()+(e.pollDeadlineMs??2e3),i=e.pollIntervalMs??100;for(;Date.now()<n;){await new Promise(e=>{setTimeout(e,i)});let e=await t();if(e&&e.port>0){r=e.port;break}}if(r===0)throw Error("UI did not bind within 2s; run `ok clean`");if(r===e.requestedPort)return{mode:`already-running`,port:r}}return{mode:`proxy`,handle:await tf({listenPort:e.requestedPort,host:e.host,upstreamHost:`localhost`,upstreamPort:r}),upstreamPort:r}}function df(e){return new M(`ui`).description(`Serve the OpenKnowledge React editor UI`).option(`-p, --port <port>`,`UI port (default: $PORT env or ${af}, kernel-allocated fallback if busy)`).option(`-H, --host <host>`,"UI host. Default: two-socket loopback bind (`[::1]` + `127.0.0.1`) so cross-family collisions fail loud. Pass an explicit host (e.g. `127.0.0.1`, `0.0.0.0`) to bind a single socket on that host.").action(async t=>{let{dim:n}=await import(`./colors-MGDi6UGf.mjs`),{UiLockCollisionError:r}=await import(`./src-DHVO9P4d.mjs`),{resolveLockDir:i}=await import(`./src-DHVO9P4d.mjs`),a=e(),o=t.host,s;try{s=lf(t.port,process.env.PORT)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=1;return}let c=s.port;try{let e=await sf({config:a,cwd:process.cwd(),port:c,fallbackToKernel:s.fallbackToKernel,host:o}),t=o===void 0||o===`::`||o===`0.0.0.0`?`localhost`:o;console.log(`${n(`[ui]`)} listening on http://${t}:${e.port}`);let r=!1,i=t=>{if(r)return;r=!0,console.log(n(`\n[ui] Shutting down (${t})`)),e.detachSafetyNet();let i=()=>{try{e.release()}finally{process.exit(process.exitCode??0)}};e.drainUpgradeSockets(),of(e.httpServers).then(i,i),setTimeout(i,2e3).unref()};process.once(`SIGINT`,()=>i(`SIGINT`)),process.once(`SIGTERM`,()=>i(`SIGTERM`));return}catch(e){if(!(e instanceof r))throw e;let t=i(process.cwd()),a=o??`localhost`,s;try{s=await uf({requestedPort:c,host:a,lockDir:t})}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exit(1)}if(s.mode===`already-running`){if(console.log(`UI already running at http://${a}:${s.port}`),ff(process)){await new Promise(e=>{let t=t=>{console.log(n(`\n[ui-keepalive] Shutting down (${t})`)),e()};process.once(`SIGINT`,()=>t(`SIGINT`)),process.once(`SIGTERM`,()=>t(`SIGTERM`))});return}process.exit(0)}console.log(`UI running at http://${a}:${s.upstreamPort}; acting as HTTP proxy on port ${s.handle.port}`);let l=!1,u=e=>{l||(l=!0,console.log(n(`\n[ui-proxy] Shutting down (${e})`)),s.handle.close().finally(()=>process.exit(process.exitCode??0)),setTimeout(()=>process.exit(process.exitCode??0),2e3).unref())};process.once(`SIGINT`,()=>u(`SIGINT`)),process.once(`SIGTERM`,()=>u(`SIGTERM`))}})}function ff(e){let t=e.stdout.isTTY===!0,n=typeof e.env.PORT==`string`&&e.env.PORT!==``;return!t||n}function pf(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function mf(e,t){let n=yr({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function hf(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await dn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:x.length+1,choices:[...x.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await mf(t,P(`Anything else we should know? (optional) `)),i=await mf(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function gf(e){if(!pf(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>hf(e)))()}catch{return`failed`}return f(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??h)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function _f(e,t,n=vf,r=H){let i=[];for(let t of[`/Applications/OpenKnowledge.app`,z(e,`Applications`,`OpenKnowledge.app`)])r(t)&&i.push({method:`app`,label:`OK Desktop (${t})`,instruction:`Move ${t} to the Trash (or: rm -rf "${t}")`});return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&i.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&i.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),i}function vf(e){try{return Vn(`npm`,e,O({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const yf=`━`.repeat(64);function bf(e){let t=[L(yf),R(`  One more step — remove the OpenKnowledge app itself`),P(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0)t.push(P(`  Install method not detected. If you installed it, remove it via:`)),t.push(`    ${N(`OK Desktop`)} — move /Applications/OpenKnowledge.app to the Trash`),t.push(`    ${N(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),t.push(`    ${N(`npx`)} — nothing to remove (runs from a temporary cache)`);else for(let n of e)t.push(`  ${N(n.label)}`),t.push(`    ${n.instruction}`);return t.push(L(yf)),t.join(`
 `)}function xf(e){return V(e,`..`,`..`)}function Sf(e){return H(z(e,`.ok`))}async function Cf(e){let t=e.findRoot??Le,n=e.readRecents??po,r=t(e.cwd)?.rootPath??null,i=uo({home:e.home,platformName:e.platform,env:e.env}),a=new Set;for(let e of n(i))a.add(V(e.path));let o=new Set(e.lockDirs.map(xf));for(let e of o)a.add(e);r&&a.delete(r);let s=[];r&&Sf(r)&&s.push({path:r,running:o.has(r),current:!0});for(let e of a)Sf(e)&&s.push({path:e,running:o.has(e),current:!1});return s.length===0?[]:e.allProjects?s.map(e=>e.path):e.yes||e.dryRun||!(e.isTTY??process.stdout.isTTY)?[]:(e.promptFn??wf)(s)}async function wf(e){return Tn({message:`Also remove OpenKnowledge from these projects? (space to toggle; none selected by default)

package/dist/constants-BU4A6vbq.mjs

@@ -0,0 +1,2 @@
+import"./src-CJ8mKCzo.mjs";var e=`0.42.0-beta.9`;const t=`config.yml`,n=e;export{n,t};
+//# sourceMappingURL=constants-BU4A6vbq.mjs.map