npm - @inkeep/open-knowledge - Versions diffs - 0.47.1 → 0.47.2 - Mend

@inkeep/open-knowledge 0.47.1 → 0.47.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (126) hide show

package/dist/{acp-harness-probe-qJUo1ApO.mjs → acp-harness-probe-BS_GVpXi.mjs} RENAMED Viewed

@@ -1,3 +1,3 @@
-import{Y as e}from"./sleep-C5OfWWWx.mjs";import{S as t,d as n,y as r}from"./write-project-skill-B8LGhuHT.mjs";import{d as i}from"./init-C55e2NNl.mjs";import{execFileSync as a}from"node:child_process";import{dirname as o,join as s}from"node:path";import{existsSync as c,mkdirSync as l,readFileSync as u,writeFileSync as d}from"node:fs";import{homedir as f}from"node:os";var p=e();const m=`open-knowledge`;function h(e){try{e()}catch{}}var g=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(m,e).getPassword()}catch(t){return h(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return h(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return h(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(m,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(m,e).deletePassword()}catch{}}},_=class{backend=`file`;authFile;constructor(e){this.authFile=e??s(f(),`.ok`,`auth.yml`)}read(){if(!c(this.authFile))return{};try{return(0,p.parse)(u(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=o(this.authFile);c(t)||l(t,{recursive:!0,mode:448}),d(this.authFile,(0,p.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},v=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function y(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(m,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
+import{Y as e}from"./sleep-jUpHbV7f.mjs";import{S as t,d as n,y as r}from"./write-project-skill-BMSsRN12.mjs";import{d as i}from"./init-BeYJKmNg.mjs";import{execFileSync as a}from"node:child_process";import{dirname as o,join as s}from"node:path";import{existsSync as c,mkdirSync as l,readFileSync as u,writeFileSync as d}from"node:fs";import{homedir as f}from"node:os";var p=e();const m=`open-knowledge`;function h(e){try{e()}catch{}}var g=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(m,e).getPassword()}catch(t){return h(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return h(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return h(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(m,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(m,e).deletePassword()}catch{}}},_=class{backend=`file`;authFile;constructor(e){this.authFile=e??s(f(),`.ok`,`auth.yml`)}read(){if(!c(this.authFile))return{};try{return(0,p.parse)(u(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=o(this.authFile);c(t)||l(t,{recursive:!0,mode:448}),d(this.authFile,(0,p.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},v=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function y(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(m,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
 `),h(()=>t?.onBackendSelected?.({backend:`keyring`})),new v(new g(t?.onKeychainRead),new _(e))}catch(n){let r=n instanceof Error?`${n.name}: ${n.message}`:String(n);return process.stderr.write(`[auth] token storage: file (~/.ok/auth.yml) — OS keychain unavailable: ${r}\n`),h(()=>t?.onBackendSelected?.({backend:`file`,reason:r})),new _(e)}}function b(e){let t=null;return function(){if(t)return t;let n=2e3;return t=(async()=>{let t=null,r=new Promise(r=>{t=setTimeout(()=>{process.stderr.write(`[auth] token storage: keyring init exceeded ${n}ms; falling back to file (~/.ok/auth.yml)\n`),r(new _(e))},n)});try{return await Promise.race([y(e),r])}catch{return new _(e)}finally{t!==null&&clearTimeout(t)}})(),t}}function x(e){let t=b(e);return{async get(e){let n=await(await t()).get(e);return n===null?null:{token:n.token}}}}function S(e){let t=b(e);return{backend:`file`,async get(e){return(await t()).get(e)},async set(e,n,r,i){return(await t()).set(e,n,r,i)},async clear(e){return(await t()).clear(e)}}}async function C(e,t){let n=[],r=new _(t);await r.get(e)!=null&&(await r.clear(e),n.push(`file`));let i;try{let{Entry:t}=await import(`@napi-rs/keyring`);new t(m,`__probe__`);let r,a=await new g(e=>{e.kind===`read-error`&&(r=e.error??`read-error`)}).get(e);if(r!==void 0)i=r;else if(a!=null)try{new t(m,e).deletePassword(),n.push(`keychain`)}catch(e){i=e instanceof Error?e.name:`delete-error`}}catch{}return{touched:n,keychainError:i}}const w=[`/opt/homebrew/bin/gh`,`/usr/local/bin/gh`,`/opt/local/bin/gh`,`/snap/bin/gh`,`/usr/bin/gh`],T={encoding:`utf-8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0};function E(e,t={}){let n=t._exec??a,r=t._fileExists??c,i=[`auth`,`token`,...e?[`--hostname`,e]:[]],o=[`gh`,...w.filter(r)];for(let e of o)try{let t=n(e,i,T).toString().trim();if(t.length>0)return{available:!0,token:t}}catch{}return{available:!1}}function D(e,a,o){let s=n[e],c=e===`opencode`?t:r,l=[],u=s.projectConfigPath?.(a);u!==void 0&&l.push({scope:`project`,configPath:u});try{l.push({scope:`user`,configPath:s.configPath(a,o)})}catch{}for(let t of l){let n=i(s,a,o,t.configPath);if(n!==null&&c(n))return{editorId:e,scope:t.scope,configPath:t.configPath}}return null}export{x as a,y as i,E as n,S as o,C as r,D as t};
-//# sourceMappingURL=acp-harness-probe-qJUo1ApO.mjs.map
+//# sourceMappingURL=acp-harness-probe-BS_GVpXi.mjs.map

package/dist/cli.mjs CHANGED Viewed

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./chunk-DTipWd-i.mjs";import{$ as t,F as n,R as r,Rt as i,T as a,Tt as o,V as s,Y as c,a as l,at as u,b as d,d as f,dt as p,ft as m,it as h,mt as g,pt as _,r as v,rt as y,vt as b,x,xt as S}from"./sleep-C5OfWWWx.mjs";import{Ca as C,Co as ee,Cs as w,Ha as te,Io as ne,It as re,Ko as ie,Lt as ae,Mo as oe,Oo as T,Q as se,Sa as ce,Xo as le,co as ue,fo as de,it as fe,na as E,oo as pe,os as me,so as he,st as ge,ta as _e,w as ve,xa as ye}from"./src-pJ6LEXKc.mjs";import{$t as be,Bt as xe,F as Se,Ft as Ce,Gr as we,Hr as Te,I as Ee,Kr as De,L as Oe,Mt as ke,Nt as Ae,P as je,Pt as Me,Q as Ne,Vr as D,X as Pe,Xr as Fe,Y as Ie,Z as Le,Zr as Re,_ as ze,_a as Be,_i as Ve,_r as He,a as Ue,ai as We,at as Ge,ct as Ke,dt as qe,en as Je,f as Ye,ft as Xe,ga as Ze,gi as Qe,gr as $e,gt as et,hi as tt,hn as nt,it as rt,kr as it,lt as at,mr as ot,mt as st,n as ct,nn as lt,nt as ut,oi as dt,ot as ft,p as pt,pt as mt,q as ht,qn as gt,qt as _t,r as vt,si as O,st as yt,t as bt,ui as xt,ut as St,va as Ct,vn as wt,w as Tt,ya as Et,yn as Dt,yr as Ot,zt as kt}from"./src-CWDcUomk.mjs";import{F as At,O as jt,P as Mt,k as Nt}from"./fs-traced-OS6B1cZZ.mjs";import{a as Pt}from"./git-handle-RLYVdszV.mjs";import{g as Ft,i as It,x as Lt}from"./server-lock-DgWnoftI.mjs";import{C as Rt,T as k,c as zt,d as Bt,l as Vt,n as Ht}from"./write-project-skill-B8LGhuHT.mjs";import{C as Ut,D as Wt,E as Gt,S as Kt,T as qt,a as Jt,b as Yt,d as Xt,i as Zt,m as Qt,o as $t,p as en,s as tn,v as nn,x as rn,y as an}from"./src-Cgpp8Pf-.mjs";import{c as on,i as A,n as j,o as M,r as N,s as P,t as F}from"./colors-BsmVIwfM.mjs";import{i as sn,n as cn,o as ln,r as un}from"./acp-harness-probe-qJUo1ApO.mjs";import{n as dn,r as fn,t as pn}from"./dist-bundle-CFfKBclM.mjs";import{A as mn,B as hn,C as gn,F as _n,H as vn,L as yn,M as bn,N as xn,O as Sn,P as Cn,R as wn,T as Tn,U as En,V as Dn,j as On,u as kn,w as An,z as jn}from"./init-C55e2NNl.mjs";import{n as Mn,t as Nn}from"./constants-CUaf8eE_.mjs";import{C as Pn,D as Fn,E as In,T as Ln,h as Rn,v as zn,w as Bn}from"./start-TnxpB5de.mjs";import{n as Vn,t as Hn}from"./loader-BsX_JrrA.mjs";import{t as Un}from"./launch-json-removal-D3Q9yvyd.mjs";import{n as Wn}from"./repair-skills-BikzcmQr.mjs";import{execFile as Gn,execFileSync as Kn,execSync as qn,spawn as Jn,spawnSync as Yn}from"node:child_process";import{basename as Xn,dirname as I,isAbsolute as Zn,join as L,relative as R,resolve as z,sep as Qn}from"node:path";import $n from"node:process";import{fileURLToPath as er}from"node:url";import{accessSync as tr,appendFileSync as nr,closeSync as rr,constants as ir,existsSync as B,lstatSync as ar,mkdirSync as or,mkdtempSync as sr,openSync as cr,readFileSync as V,readdirSync as lr,realpathSync as ur,renameSync as dr,rmSync as fr,statSync as H,unlinkSync as U,writeFileSync as pr}from"node:fs";import{homedir as mr,platform as hr,tmpdir as gr}from"node:os";import{rm as _r}from"node:fs/promises";import{randomUUID as vr}from"node:crypto";import{setTimeout as yr}from"node:timers/promises";import{promisify as br}from"node:util";import{createServer as xr,request as Sr}from"node:http";import{createInterface as Cr}from"node:readline/promises";import{connect as wr}from"node:net";const Tr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Er;(function(e){})(Er||={});function Dr(e){return o(t,e)}async function Or(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=it({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=He(t,r,l),d=new Map,f=e=>{let t=I(e),r=d.get(t);if(r)return r;let i=$e(u,Ot(n,e,l));return d.set(t,i),i},p=[],m=kr(i,n);m.kind===`file`?p.push(R(n,m.path)):h(m.path);function h(e){let t;try{t=lr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${R(n,e)||`.`}: ${jr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=L(e,r.name),i=R(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;h(t)}else if(r.isFile()){if(!Ar(r.name)||s.isExcluded(i))continue;p.push(i)}}}p.sort();let g=[],_=0,v=0,y=0;for(let e of p){let t=L(n,e),r;try{r=V(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${jr(t)}`);continue}let i=f(e),s=!1;if(a&&i.enabled){let n=_e(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{pr(i,n,`utf-8`),dr(i,t),r=n,s=!0,y++}catch(t){try{U(i)}catch{}o.push(`could not write fix to ${e}: ${jr(t)}`)}}}let c=await E(r,i,e);for(let e of c)e.severity===`error`?_++:v++;g.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:g,warnings:o,fileCount:p.length,errorCount:_,warningCount:v,fixedCount:y}}function kr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Zn(e)?e:z(t,e);try{if(H(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ar(e){let t=e.toLowerCase();return le.some(e=>t.endsWith(e))}function jr(e){return e instanceof Error?e.message:String(e)}function Mr(e){return new k(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=dt(r,i),o=t===void 0?void 0:Nr(t,qt()),s=r.contentRules,c=await Or({projectDir:i,contentDir:a,baseConfig:s?ce(s):C,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Ir(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Pr(c))&&(process.exitCode=1)})}function Nr(e,t){return z(t,e)}function Pr(e){return e.errorCount>0||e.warningCount>0}function Fr(e){let t=[F(e.file)+(e.fixed?j(` (fixed)`):``)];for(let n of e.diagnostics){let e=j(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?N(`error  `):P(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${j(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Ir(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Fr(n));for(let n of e.warnings)t.push(P(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(M(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${N(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(j(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
+import{o as e}from"./chunk-DTipWd-i.mjs";import{$ as t,F as n,R as r,Rt as i,T as a,Tt as o,V as s,Y as c,a as l,at as u,b as d,d as f,dt as p,ft as m,it as h,mt as g,pt as _,r as v,rt as y,vt as b,x,xt as S}from"./sleep-jUpHbV7f.mjs";import{Ca as C,Co as ee,Cs as w,Ha as te,Io as ne,It as re,Ko as ie,Lt as ae,Mo as oe,Oo as T,Q as se,Sa as ce,Xo as le,co as ue,fo as de,it as fe,na as E,oo as pe,os as me,so as he,st as ge,ta as _e,w as ve,xa as ye}from"./src-CHSJwcpc.mjs";import{$t as be,Bt as xe,F as Se,Ft as Ce,Gr as we,Hr as Te,I as Ee,Kr as De,L as Oe,Mt as ke,Nt as Ae,P as je,Pt as Me,Q as Ne,Vr as D,X as Pe,Xr as Fe,Y as Ie,Z as Le,Zr as Re,_ as ze,_a as Be,_i as Ve,_r as He,a as Ue,ai as We,at as Ge,ct as Ke,dt as qe,en as Je,f as Ye,ft as Xe,ga as Ze,gi as Qe,gr as $e,gt as et,hi as tt,hn as nt,it as rt,kr as it,lt as at,mr as ot,mt as st,n as ct,nn as lt,nt as ut,oi as dt,ot as ft,p as pt,pt as mt,q as ht,qn as gt,qt as _t,r as vt,si as O,st as yt,t as bt,ui as xt,ut as St,va as Ct,vn as wt,w as Tt,ya as Et,yn as Dt,yr as Ot,zt as kt}from"./src-DvOvMMTH.mjs";import{F as At,O as jt,P as Mt,k as Nt}from"./fs-traced-D12ehU8a.mjs";import{a as Pt}from"./git-handle-CllEzrX4.mjs";import{g as Ft,i as It,x as Lt}from"./server-lock-CmYdHyX7.mjs";import{C as Rt,T as k,c as zt,d as Bt,l as Vt,n as Ht}from"./write-project-skill-BMSsRN12.mjs";import{C as Ut,D as Wt,E as Gt,S as Kt,T as qt,a as Jt,b as Yt,d as Xt,i as Zt,m as Qt,o as $t,p as en,s as tn,v as nn,x as rn,y as an}from"./src-hJ2UwH81.mjs";import{c as on,i as A,n as j,o as M,r as N,s as P,t as F}from"./colors-BsmVIwfM.mjs";import{i as sn,n as cn,o as ln,r as un}from"./acp-harness-probe-BS_GVpXi.mjs";import{n as dn,r as fn,t as pn}from"./dist-bundle-CFfKBclM.mjs";import{A as mn,B as hn,C as gn,F as _n,H as vn,L as yn,M as bn,N as xn,O as Sn,P as Cn,R as wn,T as Tn,U as En,V as Dn,j as On,u as kn,w as An,z as jn}from"./init-BeYJKmNg.mjs";import{n as Mn,t as Nn}from"./constants-B6Rluza9.mjs";import{C as Pn,D as Fn,E as In,T as Ln,h as Rn,v as zn,w as Bn}from"./start-Cq99D9qF.mjs";import{n as Vn,t as Hn}from"./loader-BkpwQ1M5.mjs";import{t as Un}from"./launch-json-removal-DdX9rfjT.mjs";import{n as Wn}from"./repair-skills-CvmGaGx7.mjs";import{execFile as Gn,execFileSync as Kn,execSync as qn,spawn as Jn,spawnSync as Yn}from"node:child_process";import{basename as Xn,dirname as I,isAbsolute as Zn,join as L,relative as R,resolve as z,sep as Qn}from"node:path";import $n from"node:process";import{fileURLToPath as er}from"node:url";import{accessSync as tr,appendFileSync as nr,closeSync as rr,constants as ir,existsSync as B,lstatSync as ar,mkdirSync as or,mkdtempSync as sr,openSync as cr,readFileSync as V,readdirSync as lr,realpathSync as ur,renameSync as dr,rmSync as fr,statSync as H,unlinkSync as U,writeFileSync as pr}from"node:fs";import{homedir as mr,platform as hr,tmpdir as gr}from"node:os";import{rm as _r}from"node:fs/promises";import{randomUUID as vr}from"node:crypto";import{setTimeout as yr}from"node:timers/promises";import{promisify as br}from"node:util";import{createServer as xr,request as Sr}from"node:http";import{createInterface as Cr}from"node:readline/promises";import{connect as wr}from"node:net";const Tr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Er;(function(e){})(Er||={});function Dr(e){return o(t,e)}async function Or(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=it({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=He(t,r,l),d=new Map,f=e=>{let t=I(e),r=d.get(t);if(r)return r;let i=$e(u,Ot(n,e,l));return d.set(t,i),i},p=[],m=kr(i,n);m.kind===`file`?p.push(R(n,m.path)):h(m.path);function h(e){let t;try{t=lr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${R(n,e)||`.`}: ${jr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=L(e,r.name),i=R(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;h(t)}else if(r.isFile()){if(!Ar(r.name)||s.isExcluded(i))continue;p.push(i)}}}p.sort();let g=[],_=0,v=0,y=0;for(let e of p){let t=L(n,e),r;try{r=V(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${jr(t)}`);continue}let i=f(e),s=!1;if(a&&i.enabled){let n=_e(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{pr(i,n,`utf-8`),dr(i,t),r=n,s=!0,y++}catch(t){try{U(i)}catch{}o.push(`could not write fix to ${e}: ${jr(t)}`)}}}let c=await E(r,i,e);for(let e of c)e.severity===`error`?_++:v++;g.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:g,warnings:o,fileCount:p.length,errorCount:_,warningCount:v,fixedCount:y}}function kr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Zn(e)?e:z(t,e);try{if(H(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ar(e){let t=e.toLowerCase();return le.some(e=>t.endsWith(e))}function jr(e){return e instanceof Error?e.message:String(e)}function Mr(e){return new k(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=dt(r,i),o=t===void 0?void 0:Nr(t,qt()),s=r.contentRules,c=await Or({projectDir:i,contentDir:a,baseConfig:s?ce(s):C,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Ir(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Pr(c))&&(process.exitCode=1)})}function Nr(e,t){return z(t,e)}function Pr(e){return e.errorCount>0||e.warningCount>0}function Fr(e){let t=[F(e.file)+(e.fixed?j(` (fixed)`):``)];for(let n of e.diagnostics){let e=j(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?N(`error  `):P(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${j(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Ir(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Fr(n));for(let n of e.warnings)t.push(P(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(M(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${N(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(j(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
 `)}const Lr={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Rr(e){return new k(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await zr(t,n,e(),process.cwd(),qt());r!==0&&(process.exitCode=r)})}async function zr(e,t,n,r,i,a=Lr){let o=dt(n,r),s;if(e!==void 0){let t=Br(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let c=It(O(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=s===void 0?``:`?path=${encodeURIComponent(s)}`,u;try{u=await fetch(`http://127.0.0.1:${c.port}/api/audit${l}`,{headers:w({kind:`cli`,runtimeVersion:Ft})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!u.ok){let e=await u.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${u.status}`}`),1}let d=ye.safeParse(await u.json().catch(()=>null));if(!d.success){let e=d.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let f=d.data;return t.json===!0?a.out(JSON.stringify(f,null,2)):a.out(Ir(Vr(f))),+(t.errorsOnly===!0?f.errorCount>0:f.errorCount+f.warningCount>0)}function Br(e,t,n){let r=R(n,z(t,e));return r===``?``:r.startsWith(`..`)||Zn(r)?null:r.split(Qn).join(`/`)}function Vr(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0}}async function Hr(e,t,n,r){let i=Ur(await Wr(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function Ur(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Wr(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Gr(e,t){let n=new k(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Hr(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await pt(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await pt(n),process.exit(1)}}),n}function Kr(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function qr(e,t,n){let r={baseUrl:Kr(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new dn(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Jr(e){let t=e.request||pn,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),qr(t,`POST /login/device/code`,n)}async function Yr(e){let t=await qr(e.request||pn,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Xr(e,t.data.expires_in),n.refreshTokenExpiresAt=Xr(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Xr(e,t){return new Date(e+t*1e3).toISOString()}async function Zr(e,t){let n=Qr(e,t.auth);if(n)return n;let{data:r}=await Jr({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await ei(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Qr(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)?n:!1}async function $r(e){await new Promise(t=>setTimeout(t,e*1e3))}async function ei(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Yr({...i,clientType:`oauth-app`}):await Yr({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await $r(r.interval),ei(e,t,n,r);if(a===`slow_down`)return await $r(r.interval+7),ei(e,t,n,r);throw i}}async function ti(e,t){return Zr(e,{auth:t})}async function ni(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Zr(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var ri=`0.0.0-development`;function ii(e){let t=e.request||pn.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${ri} ${fn()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(ti.bind(null,i),{hook:ni.bind(null,i)})}async function ai(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ii({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-BT5p_5Yl.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function oi(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function W(e){let t=e.toLowerCase().replace(/:\d+$/,``);ne.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function si(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function ci(e,t,n=ai){let r=oi(),{host:i,json:a}=e;W(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?si(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?si(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function li(e){return new k(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??ot(process.cwd()),r=await e();await ci({...t,host:n},r)})}const ui={style:{maskedText:`[input is masked]`}};var di=yn((e,t)=>{let{validate:n=()=>!0}=e,r=Dn(ui,e.theme),[i,a]=vn(`idle`),[o,s]=vn(),[c,l]=vn(``),u=hn({status:i,theme:r});jn(async(e,r)=>{if(i===`idle`)if(En(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${wn}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function fi(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>fi.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function pi(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function mi(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const hi=Function.bind,gi=hi.bind(hi);function _i(e,t,n){let r=gi(mi,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=gi(pi,null).apply(null,i)})}function vi(){let e=Symbol(`Singular`),t={registry:{}},n=fi.bind(null,t,e);return _i(n,t,e),n}function yi(){let e={registry:{}},t=fi.bind(null,e);return _i(t,e),t}var bi={Singular:vi,Collection:yi},xi=`0.0.0-development`;function Si(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
@@ -8,9 +8,9 @@ import{o as e}from"./chunk-DTipWd-i.mjs";import{$ as t,F as n,R as r,Rt as i,T a
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function ga(){return new k(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??ot(process.cwd());await ha({...e,host:t})})}async function _a(e,t,n=cn){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function va(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function ya(e,t){let{host:n,json:r}=e;W(n);let i=t.backend,a=await _a(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(va(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new aa({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(va(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ca(e,n);r?process.stdout.write(`${JSON.stringify(va(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function ba(e){return new k(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??ot(process.cwd());await ya({...t,host:n},await e())})}function xa(e){let t=new k(`auth`);t.description(`GitHub authentication management`);let n=e=>sn(void 0,e);return t.addCommand(li(n)),t.addCommand(ba(n)),t.addCommand(ma(n)),t.addCommand(ga()),t.addCommand(da(n)),t.addCommand(Gr(n,e)),t}function Sa(){return new k(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in Finder (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in Finder`).action(async e=>{try{let{zipPath:t,summary:n}=await Yt({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:Ut(),logger:zf()});if(process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&hr()===`darwin`)try{Fn(`/usr/bin/open`,[`-R`,t])}catch{}}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Ca(e,t){let n=[];for(let[r,i]of[[`server`,e],[`ui`,t]])(i.status===`dead-pid`||i.status===`corrupt`)&&n.push({name:r,lockPath:i.lockPath,reason:i.status});return{prune:n}}function wa(e){let t=e.inspect??(t=>an(e.lockDir,t)),n=e.unlink??(e=>U(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Ca(t(`server`),t(`ui`));if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Ta(e){return new k(`clean`).description(`Prune stale / corrupt open-knowledge lock files (never touches live locks)`).action(()=>{e(),wa({lockDir:O(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Ea(e){return`credential.helper=!${e.map(de).join(` `)} auth git-credential`}async function Da(e,t,n={},r=cn){let i=[`credential.helper=`,Ea(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e);if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Oa(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const ka=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Aa(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of ka)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function K(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function ja(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ma(e,t=process.env){let n=ja(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST),n}function Na(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Pa(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Fa=he;async function Ia(e){try{return await e.clone(Pa(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Fa(t))return e.onFallback(e.branch),await e.clone(Pa(null)),{fellBack:!0};throw t}}function La(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Ra(e,t,n){return e===`https`&&t===`github.com`&&n}function za(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Ba(e,t,n,r=process.cwd()){let i=nn(e);if(!i)throw Error(`Invalid git URL: ${e}`);let a=za(e,i),o=t.dir?z(r,t.dir):z(r,i.name);if(B(o)&&lr(o).length>0)throw Error(`Target directory is not empty: ${o}`);lt();let s=ln(),c=i.protocol===`https`&&i.hostname===`github.com`?await Oa(i.owner,i.name):!1,l=Ra(i.protocol,i.hostname,c)?{tier:`none`,gitConfig:[]}:await Da(i.hostname,s,{selfCliArgs:Na()}),u=Ma(l),d=Pt(La(r,l.gitConfig)).env(u),f=-1;d.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Aa(e);n&&n.pct!==f&&(f=n.pct,K(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Ia({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>d.clone(a,o,e),onFallback:e=>{K(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-D8a-XbzA.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?K(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Va(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Va(e){let t=Sn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Ha=/^[A-Za-z0-9._/:@-]+$/;function Ua(e){return Ha.test(e)?e:de(e)}function Wa(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ua(t)}`:``;return`ok clone ${Ua(e)}${n}`}function Ga(e){let t=pe(e.error);if(t.kind!==`auth`)return null;if(ue(t)){let t=Wa(e.url,e.branch);return[`✗ Couldn't clone ${e.url} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-BPi9Ds95.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?K(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Va(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Va(e){let t=Sn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Ha=/^[A-Za-z0-9._/:@-]+$/;function Ua(e){return Ha.test(e)?e:de(e)}function Wa(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ua(t)}`:``;return`ok clone ${Ua(e)}${n}`}function Ga(e){let t=pe(e.error);if(t.kind!==`auth`)return null;if(ue(t)){let t=Wa(e.url,e.branch);return[`✗ Couldn't clone ${e.url} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}if(t.subclass===`403`){let t=typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``;return`✗ Access denied when cloning ${e.url}${t}. Check that your account has access to the repository.`}return t.subclass===`ssh-auth`?`✗ Couldn't clone ${e.url} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Wa(e.url,e.branch)}`].join(`
-`)}function Ka(e){let t=e.error instanceof Error?e.error.message:String(e.error);if(e.json){e.emit({type:`error`,message:t});return}let n=Ga({error:e.error,url:e.url,branch:e.branch,principal:e.principal});e.printStderr(`${n??`✗ ${t}`}\n`)}async function qa(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Ja(e){let t=pe(e.error),n=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){let t=nn(e.url);t&&(n=await(e.resolvePrincipal??(e=>qa(ln(),e)))(t.hostname))}Ka({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:n,emit:e.emit,printStderr:e.printStderr})}function Ya(e){return new k(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e();try{let a=await Ba(t,{json:r.json,dir:n,branch:r.branch??null},i);if(r.json)K(!0,{type:`complete`,dir:a});else{process.stderr.write(`✓ Cloned to ${a}\n`),process.chdir(a);let{startCommand:t}=await import(`./start-tOC8nkMr.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof be||e instanceof Je){r.json?K(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Ja({error:e,url:t,branch:r.branch??null,json:r.json,emit:e=>K(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Xa=c();const Za=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],[`server`,`port`],...l.map(e=>e.path)];function Qa(e){return At({absPath:jt(`project-local`,e),sideline:!1}).diagnostics}function $a(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Vn;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??Qa)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(f(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function eo(e){let t=(0,Xa.parseDocument)(V(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of Za)t.hasIn(e)&&n.push(e.join(`.`));return n}function to(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function no(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=to(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ro(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function io(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Nt,s=ro(r).map(t=>({scope:t,absPath:jt(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!B(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=eo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:no(Za.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:f(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const ao=`project | project-local | user | all`,oo=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function so(e){return e!==`config`}function co(){let e=new k(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{$a({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*, server.port)`).option(`--scope <scope>`,`Which scope to migrate: ${ao}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!oo.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${ao}`),process.exitCode=2;return}(await io({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const lo=[`    1. ${F(`Customize`)} (sidebar) → ${F(`Skills`)}`,`    2. Click the ${F(`+`)} button`,`    3. Click ${F(`Create skill`)}`,`    4. Click ${F(`Upload skill`)}`,`    5. Pick ${F(`openknowledge.skill`)} from Downloads`],uo=A(`  Open the Claude Desktop App, then: ${F(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function fo(e){let t=[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(P(`  Handoff failed: ${e.handoffError.message}`)),t.push(uo),t.join(`
+`)}function Ka(e){let t=e.error instanceof Error?e.error.message:String(e.error);if(e.json){e.emit({type:`error`,message:t});return}let n=Ga({error:e.error,url:e.url,branch:e.branch,principal:e.principal});e.printStderr(`${n??`✗ ${t}`}\n`)}async function qa(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Ja(e){let t=pe(e.error),n=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){let t=nn(e.url);t&&(n=await(e.resolvePrincipal??(e=>qa(ln(),e)))(t.hostname))}Ka({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:n,emit:e.emit,printStderr:e.printStderr})}function Ya(e){return new k(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e();try{let a=await Ba(t,{json:r.json,dir:n,branch:r.branch??null},i);if(r.json)K(!0,{type:`complete`,dir:a});else{process.stderr.write(`✓ Cloned to ${a}\n`),process.chdir(a);let{startCommand:t}=await import(`./start-Bd2DGUlf.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof be||e instanceof Je){r.json?K(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Ja({error:e,url:t,branch:r.branch??null,json:r.json,emit:e=>K(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Xa=c();const Za=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],[`server`,`port`],...l.map(e=>e.path)];function Qa(e){return At({absPath:jt(`project-local`,e),sideline:!1}).diagnostics}function $a(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Vn;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??Qa)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(f(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function eo(e){let t=(0,Xa.parseDocument)(V(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of Za)t.hasIn(e)&&n.push(e.join(`.`));return n}function to(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function no(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=to(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ro(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function io(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Nt,s=ro(r).map(t=>({scope:t,absPath:jt(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!B(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=eo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:no(Za.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:f(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const ao=`project | project-local | user | all`,oo=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function so(e){return e!==`config`}function co(){let e=new k(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{$a({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*, server.port)`).option(`--scope <scope>`,`Which scope to migrate: ${ao}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!oo.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${ao}`),process.exitCode=2;return}(await io({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const lo=[`    1. ${F(`Customize`)} (sidebar) → ${F(`Skills`)}`,`    2. Click the ${F(`+`)} button`,`    3. Click ${F(`Create skill`)}`,`    4. Click ${F(`Upload skill`)}`,`    5. Pick ${F(`openknowledge.skill`)} from Downloads`],uo=A(`  Open the Claude Desktop App, then: ${F(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function fo(e){let t=[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(P(`  Handoff failed: ${e.handoffError.message}`)),t.push(uo),t.join(`
 `)}function po(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[A(`OpenKnowledge skill ${F(`v${t}`)} already delivered to Claude Desktop.`),j(`  Recorded at ${n} in ~/.ok/skill-state.yml`),j(`  Use ${F(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function mo(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),A(`  Claude Desktop App opened. Now upload the file manually:`),...lo,j(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function ho(e){return`${N(`Error:`)} ${e.buildError??`unknown build failure`}`}async function go(e={}){let t=await gt(e);return t.status===`failed`?{...t,message:ho(t),exitCode:1}:t.status===`skip-current`?{...t,message:po(t),exitCode:0}:t.status===`installed`?{...t,message:mo(t),exitCode:0}:{...t,message:fo(t),exitCode:0}}function _o(){return new k(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await go({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function vo(e,t){let n=Cr({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function yo(e={}){let t=e.productName??`OpenKnowledge`;return L(Rt(e),t)}function bo(e){if(typeof e!=`object`||!e)return null;let t=e.recentProjects;if(!Array.isArray(t))return null;let n=[];for(let e of t){if(typeof e!=`object`||!e)continue;let t=e;typeof t.path==`string`&&typeof t.name==`string`&&n.push({path:t.path,name:t.name})}return n}function xo(e){let t=L(e,`state.json`);if(!B(t))return[];let n;try{n=JSON.parse(V(t,`utf-8`))}catch{return[]}return bo(n)??[]}function So(e){let t=L(e,`state.json`);if(!B(t))return!1;try{return bo(JSON.parse(V(t,`utf-8`)))!==null}catch{return!1}}function q(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Co(e){return Qn===`/`?e:e.split(Qn).join(`/`)}function wo(e,t,n=`This project`){let r=[];r.push({kind:`stop-server`,group:n,label:`Stop the project server (if running)`,lockDir:O(e)});let i=new Set;for(let a of Vt){let o=Bt[a];if(!o.projectConfigPath)continue;let s=o.projectConfigPath(e);i.add(Co(R(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${o.label} (${Co(R(e,s))})`,editorId:a,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let a=new Set([...On(e),...ie]);for(let t of a){let a=t.replace(/\/$/,``);i.has(a)||a!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:L(e,a),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:Et(e)})}catch{}return r}function To(e,t){return{scope:`deinit`,ops:wo(e,t)}}function Eo(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${q(L(e,`..`,`..`),t)}`,lockDir:e});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Oo(a,t));for(let e of Vt){let n=Bt[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${q(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of zt(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${q(e.path,t)}`,path:e.path});c.push(...ko(t,n,e.env));for(let e of o)c.push(...wo(e,t,`Project: ${Xn(e)}`));return c.push({kind:`remove-path`,group:`Global directory`,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:L(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function Do(e){return[L(e,`.zshrc`),L(e,`.bash_profile`),L(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Oo(e,t){let n=[],r=new Set([...Do(t),...e?.rcFiles??[]]);for(let e of r)B(e)&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${q(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${q(r.path,t)}`,path:r.path,target:r.target});return n}function ko(e,t,n){if(t!==`darwin`)return[];let r={home:e,platformName:t,env:n},i=yo(r),a=yo({...r,productName:`Open Knowledge`}),o=L(e,`Library`,`Caches`,`OpenKnowledge-updater`);return[{kind:`remove-path`,group:`Application data`,label:`Remove ${q(i,e)}`,path:i},{kind:`remove-path`,group:`Application data`,label:`Remove ${q(a,e)} (only if it is OpenKnowledge's)`,path:a,requireOurState:!0},{kind:`remove-path`,group:`Application data`,label:`Remove ${q(o,e)}`,path:o}]}async function Ao(e,t={}){let n=t.clearToken??un,r=t.clearEmbeddingsKey??we,i=t.stopServer??(e=>{let t=Zt({lockDir:e,log:()=>{},error:()=>{}});return{stopped:t.stopped.length,failed:t.failed.map(e=>({pid:e.target.pid,error:e.error}))}}),a=[];for(let t of e.ops)try{a.push(await jo(t,{clearToken:n,clearEmbeddingsKey:r,stopServer:i}))}catch(e){a.push({op:t,status:`failed`,detail:e instanceof Error?e.message:String(e)})}return{results:a,removed:a.filter(e=>e.status===`removed`),failed:a.filter(e=>e.status===`failed`)}}async function jo(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r}=t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); a process may still be using files that were removed`}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{if(!B(e.rcFile))return{op:e,status:`not-present`};let{text:t,changed:n,emptyAfter:r}=Qt(V(e.rcFile,`utf-8`));return n?r?(fr(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(Mt(e.rcFile,t,{mode:Tn(e.rcFile)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return Xt(e.path,e.target)?(U(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let t=tn(Bt[e.editorId],e.cwd,e.home,e.configPath);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:return{op:e,status:`skipped`,detail:`declined (${t.reason})`};default:throw Error(`unhandled mcp-remove outcome: ${t.kind}`)}}case`launch-entry`:{let t=Un(e.projectRoot);switch(t.kind){case`removed`:case`removed-file`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return{op:e,status:`skipped`,detail:`declined (unparseable)`};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{if(mn(e.projectRoot).length===0)return{op:e,status:`not-present`};let t=_n(e.projectRoot,On(e.projectRoot));return t.kind===`no-exclude`?t.reason===`inaccessible`?{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`}:{op:e,status:`not-present`,detail:t.reason}:{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Mo(e)}}function Mo(e){if(e.requireOurState&&!So(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Ht(e.path,e.containWithin);let t;try{t=ar(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return U(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of lr(e.path))t.has(r)||(fr(L(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return fr(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function No(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Po(e){if(e.ops.length===0)return j(`Nothing to remove.`);let t=[];for(let[n,r]of No(e.ops)){t.length>0&&t.push(``),t.push(F(`${n}:`));for(let e of r)t.push(`  ${P(`-`)} ${e.label}`)}return t.join(`
@@ -39,7 +39,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),r}async function ms(e,t,n,r,i){let a=ps(e,t,L(r,`cpu.cpuprofile`)),o=!1,s=Jn(process.execPath,[a],D({stdio:`ignore`})),c=setInterval(()=>{let e=ls(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{fr(L(a,`..`),{recursive:!0,force:!0})}catch{}return o}function hs(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function gs(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??ut,s=t.inspect??an,c=t.resolveCommand??rt,l=t.resolveUsage??Ge,u=t.collectLsofFn??us,d=t.getEndpoints??fs,f=t.profiler??ms,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(J.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e,`server`);if(t.status!==`missing`&&t.status!==`corrupt`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?L(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):L(process.cwd(),`ok-diagnose-${n}-${b}`);try{or(x,{recursive:!0})}catch(e){a(J.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(J.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{pr(L(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?ds(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(J.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(J.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,hs(V(L(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(J.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(J.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(J.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${J.default.bold(x)}`)}async function _s(e){let t=Cr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function vs(e){let t=sr(L(gr(),`ok-bundle-process-`));return await gs({pid:e,output:t}),t}function ys(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function bs(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function xs(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Ss(e){let t=e.manifest.redaction.secretScrub;return t===void 0?J.default.yellow(`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${t.redactedLineCount} line(s) across ${t.redactions.length} file(s))`}function Cs(e,t,n){let{summary:r,manifest:i}=t;e(``),e(J.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${ys(r.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${r.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${xs(t)}`),e(`  Credentials:         ${Ss(t)}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function ws(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??_s,i=t.runProcessDiagnose??vs,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=I(o);if(!B(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=L(e.contentDir,`.ok`,`local`,`diagnostics`);or(n,{recursive:!0}),o=L(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(J.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=await rn({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,deps:t.collectDeps});try{return l.manifest.serverStatus===`not-running`&&n(J.default.yellow(`  server not running — live state unavailable`)),Cs(n,l,o),e.yes!==!0&&!bs(await r(`Write bundle? [y/N]: `))?(n(J.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Kt({collected:l,outputPath:o}),n(J.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(l.cleanup(),s!==void 0)try{fr(s,{recursive:!0,force:!0})}catch{}}}function Ts(){let e=new k(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(J.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(J.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await gs({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(cs()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(J.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-O6z6lVhP.mjs`),{resolveContentDir:r}=await import(`./src-CGOjzQCL.mjs`),i=process.cwd(),{config:a}=n(i);await ws({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(J.default.red(t)),process.exit(1)}}),e}async function Es(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await di({message:`Enter embeddings provider API key:`})).trim()}function Ds(e){return Te(e)}async function Os(e,t){let n=await Re(De(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function ks(e){try{let t=It(O(e));if(!t||t.port<=0||!Lt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function As(){return new k(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Es();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,hs(V(L(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(J.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(J.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(J.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${J.default.bold(x)}`)}async function _s(e){let t=Cr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function vs(e){let t=sr(L(gr(),`ok-bundle-process-`));return await gs({pid:e,output:t}),t}function ys(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function bs(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function xs(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Ss(e){let t=e.manifest.redaction.secretScrub;return t===void 0?J.default.yellow(`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${t.redactedLineCount} line(s) across ${t.redactions.length} file(s))`}function Cs(e,t,n){let{summary:r,manifest:i}=t;e(``),e(J.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${ys(r.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${r.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${xs(t)}`),e(`  Credentials:         ${Ss(t)}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function ws(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??_s,i=t.runProcessDiagnose??vs,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=I(o);if(!B(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=L(e.contentDir,`.ok`,`local`,`diagnostics`);or(n,{recursive:!0}),o=L(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(J.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=await rn({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,deps:t.collectDeps});try{return l.manifest.serverStatus===`not-running`&&n(J.default.yellow(`  server not running — live state unavailable`)),Cs(n,l,o),e.yes!==!0&&!bs(await r(`Write bundle? [y/N]: `))?(n(J.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Kt({collected:l,outputPath:o}),n(J.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(l.cleanup(),s!==void 0)try{fr(s,{recursive:!0,force:!0})}catch{}}}function Ts(){let e=new k(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(J.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(J.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await gs({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(cs()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(J.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-dfPeN6AB.mjs`),{resolveContentDir:r}=await import(`./src-DaT-nAW_.mjs`),i=process.cwd(),{config:a}=n(i);await ws({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(J.default.red(t)),process.exit(1)}}),e}async function Es(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await di({message:`Enter embeddings provider API key:`})).trim()}function Ds(e){return Te(e)}async function Os(e,t){let n=await Re(De(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function ks(e){try{let t=It(O(e));if(!t||t.port<=0||!Lt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function As(){return new k(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Es();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=z(e.cwd??process.cwd()),{baseUrl:r}=Ds(n);try{await De().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -74,7 +74,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function Iu(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function Lu(e){return/\s/.test(e)?`<${e}>`:e}function Ru(e,t={}){let{header:n,rows:r}=su(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(Iu).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=Iu(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${Lu(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function zu(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function Bu(e,t){return`# ${e}\n\n${t}\n`}const Vu=[`links`,`frontmatter`,`callouts`,`images`,`tables`],Hu=/\.mdx?$/i;function Uu(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function Wu(e,t={}){let n=t.selected??new Set(Vu),r=Ou(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:Uu(!1)};let i=Uu(r),a=Tu(e),o=gu(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!Hu.test(e)||s&&l.has(e))continue;let r;try{r=V(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=ou(a,Xn(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:L(I(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=nu(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=Fu(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=wu(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=Ru(e.csvText,{linkForTitle:t=>{let n=pu(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?R(I(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=V(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=Bu(o===null?e.fallbackTitle:zu(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=wu(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function Gu(e){for(let t of e.assets)or(I(t.path),{recursive:!0}),pr(t.path,t.bytes);for(let t of e.changes)or(I(t.path),{recursive:!0}),pr(t.path,t.content,`utf8`);for(let t of e.deletions)try{U(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const Ku={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},qu=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function Ju(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of qu)n.push(`  ${Ku[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function Yu(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Xu(e){let t=new Set(Vu);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${Vu.join(`, `)}`);return e})}function Zu(e,t){let n=new Set(Vu);if(e&&(n=new Set(Xu(e))),t)for(let e of Xu(t))n.delete(e);return n}function Qu(){let e=new k(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=z(e??process.cwd()),r;try{r=Zu(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Wu(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Gu(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?Yu(a,{applied:t.apply??!1}):Ju(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function $u(e=()=>Ln(Bn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ne({lockDir:O(e)}).baseUrl,classifyName:(e,t)=>{let n=L(e,t);try{return H(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:e=>{Fn(`open`,[e])},log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function ed(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function td(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install OK Desktop, or start a UI with `ok ui`, then retry."),1}function nd(e,t,n,r){let i=`openknowledge://open?project=${encodeURIComponent(e)}&${t}=${encodeURIComponent(n)}`;r.openTarget(i)}function rd(e,t,n){let r=z(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(ed(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!me.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${me.join(`, `)}.`),1;if(n.detectBundlePath())return nd(r,`doc`,`__skill__/${e}/${i}`,n),n.log(`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`),0;let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${Le(e,i)}`;return n.openTarget(t),n.log(`Opening skill ${i} (${e}) in your browser: ${t}`),0}return td(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return nd(r,`folder`,i,n),n.log(`Opening folder ${i} in the OpenKnowledge desktop app.`),0;let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${Pe(i)}`;return n.openTarget(t),n.log(`Opening folder ${i} in your browser: ${t}`),0}return td(n)}if(o)return nd(r,`doc`,i,n),n.log(`Opening ${i} in the OpenKnowledge desktop app.`),0;let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${Ie(i)}`;return n.openTarget(e),n.log(`Opening ${i} in your browser: ${e}`),0}return td(n)}function id(){return new k(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${me.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action((e,t)=>{process.exitCode=rd(e,t,$u())})}function ad(e){return new k(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-Bq9cv2G5.mjs`),r=e(),i=process.cwd(),a=dt(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function od(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function sd(e,t,n=process.cwd()){let r=e.op??`sync`,i=It(O(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...w({kind:`cli`,runtimeVersion:Ft})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}od(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=Pt({baseDir:n});if(r===`sync`||r===`pull`){od(e.json,{type:`step`,step:`pull`});let t=await a.pull();od(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(od(e.json,{type:`step`,step:`push`}),await a.push(),od(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}function Yu(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Xu(e){let t=new Set(Vu);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${Vu.join(`, `)}`);return e})}function Zu(e,t){let n=new Set(Vu);if(e&&(n=new Set(Xu(e))),t)for(let e of Xu(t))n.delete(e);return n}function Qu(){let e=new k(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=z(e??process.cwd()),r;try{r=Zu(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Wu(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Gu(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?Yu(a,{applied:t.apply??!1}):Ju(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function $u(e=()=>Ln(Bn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ne({lockDir:O(e)}).baseUrl,classifyName:(e,t)=>{let n=L(e,t);try{return H(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:e=>{Fn(`open`,[e])},log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function ed(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function td(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install OK Desktop, or start a UI with `ok ui`, then retry."),1}function nd(e,t,n,r){let i=`openknowledge://open?project=${encodeURIComponent(e)}&${t}=${encodeURIComponent(n)}`;r.openTarget(i)}function rd(e,t,n){let r=z(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(ed(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!me.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${me.join(`, `)}.`),1;if(n.detectBundlePath())return nd(r,`doc`,`__skill__/${e}/${i}`,n),n.log(`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`),0;let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${Le(e,i)}`;return n.openTarget(t),n.log(`Opening skill ${i} (${e}) in your browser: ${t}`),0}return td(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return nd(r,`folder`,i,n),n.log(`Opening folder ${i} in the OpenKnowledge desktop app.`),0;let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${Pe(i)}`;return n.openTarget(t),n.log(`Opening folder ${i} in your browser: ${t}`),0}return td(n)}if(o)return nd(r,`doc`,i,n),n.log(`Opening ${i} in the OpenKnowledge desktop app.`),0;let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${Ie(i)}`;return n.openTarget(e),n.log(`Opening ${i} in your browser: ${e}`),0}return td(n)}function id(){return new k(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${me.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action((e,t)=>{process.exitCode=rd(e,t,$u())})}function ad(e){return new k(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-D-HMAFqO.mjs`),r=e(),i=process.cwd(),a=dt(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function od(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function sd(e,t,n=process.cwd()){let r=e.op??`sync`,i=It(O(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...w({kind:`cli`,runtimeVersion:Ft})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}od(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=Pt({baseDir:n});if(r===`sync`||r===`pull`){od(e.json,{type:`step`,step:`pull`});let t=await a.pull();od(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(od(e.json,{type:`step`,step:`push`}),await a.push(),od(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)),od(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function cd(e){return new k(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await sd({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function ld(e){return new k(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await sd({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function ud(e){return new k(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await sd({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}function dd(e){return typeof e==`string`&&xe.includes(e)}async function fd(e={}){let t=z(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!kt[n])return{status:`failed`,message:`${N(`Error:`)} Unknown pack "${n}". Available: ${xe.join(`, `)}`,exitCode:1};let r;try{r=await Ae({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof _t?{status:`prerequisite-missing`,message:`${N(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${N(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(r.created.length===0&&!r.packSkills?.some(e=>e.pending)){let e=kt[n].name;return{status:`no-op`,message:`${M(`Your ${e} pack is already seeded.`)}\n${j(`Nothing to do.`)}`,plan:r,exitCode:0}}if(e.dryRun){let e=ke(kt[n]);return{status:`dry-run`,message:`${F(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${F(`Plan:`)}\n\n${md(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await hd(`${F(`Plan:`)}\n\n${md(r,t)}\n\n${F(`Apply?`)} ${j(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:j(`Cancelled.`),plan:r,exitCode:0};let i=await Me(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${N(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${P(`Applied`)} ${i.applied} entries, ${P(String(i.errors.length))} error(s):`,...e].join(`
 `),plan:r,exitCode:1}}let a=kt[n].name,o=i.packSkillsInstalled.length>0?`\n${j(`Installed the ${a} skills for: ${i.packSkillsInstalled.join(`, `)}`)}`:``;return{status:`applied`,message:`${M(`✓ Seeded ${a}`)} ${j(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}`,plan:r,exitCode:0}}function pd(){let e=[F(`Available packs:`)];for(let t of xe){let n=kt[t];e.push(`  ${M(t)}  ${j(`—`)} ${n.name}: ${n.description}`)}return e.join(`
 `)}function md(e,t){let n=[],r=e.created.filter(e=>e.kind===`folder`),i=e.created.filter(e=>e.kind===`file`);if(r.length>0){n.push(F(`Folders to create:`));for(let e of r)n.push(`  ${M(`+`)} ${A(R(t,z(t,e.path))||e.path)}${j(`/`)}`)}if(i.length>0){n.length>0&&n.push(``),n.push(F(`Files to create:`));for(let e of i)n.push(`  ${M(`+`)} ${A(R(t,z(t,e.path))||e.path)}`)}if(e.skipped.length>0){n.length>0&&n.push(``),n.push(j(`Already present (skipped):`));for(let t of e.skipped)n.push(`  ${j(`· ${t.path} (${t.reason})`)}`)}if(e.warnings.length>0){n.length>0&&n.push(``),n.push(P(`Warnings:`));for(let t of e.warnings)n.push(`  ${P(`!`)} ${t}`)}return n.join(`
@@ -83,9 +83,9 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function yd(e){return new k(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await vd(t,await e())})}async function bd(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function xd(e,t){let{host:n,json:r}=e;W(n);let i=await fa(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await bd(new aa({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function Sd(e){return new k(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await xd(t,await e())})}function Cd(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function wd(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Td(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Ed(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function Dd(e){return Pt(La(e,[])).env(ja())}function Od(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const kd={ensureOkScaffold:e=>{nt(e)},gitFactory:Dd};async function Ad(e){let t={...kd,...e.deps},n=z(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Ed(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Cd(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n);if(!B(L(n,`.git`)))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let a;try{a=await wd({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Cd(t)===`name-conflict`){let t=await Td(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};a=t}else return{kind:`error`,code:Cd(t)}}try{await i.addRemote(`origin`,a.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let o=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{o=!0}if(o)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let s=Od(a.cloneUrl,e.token);try{await i.raw([`push`,s,`HEAD:refs/heads/${a.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${a.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:a.cloneUrl,defaultBranch:a.defaultBranch}}}function jd(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Md(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;W(n);let l=await fa(n,t);if(l==null){jd(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new aa({auth:l,...u?{baseUrl:u}:{}});try{qn(`git config user.email`,D({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}jd(c,await Ad({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Nd(e){return new k(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Md(t,await e())})}function Pd(){let e=new k(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>sn();return e.addCommand(Sd(t)),e.addCommand(yd(t)),e.addCommand(Nd(t)),e}function Fd(){return new k(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=xn(t),r=_n(t,On(t));if(r.kind===`no-exclude`){Id(e.json,t,r.reason);return}let i=xn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:i,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){process.stderr.write(`${A(`Sharing mode is already`)} ${F(`shared`)} ${A(`— nothing to do.`)}\n`);return}process.stderr.write(`${M(`✓`)} ${F(`Sharing mode set to`)} ${M(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${F(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Id(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${P({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Ld(){return new k(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=xn(t),r=Cn(t),i=[...mn(t)],a=bn(t,On(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,skillsShared:r,excluded:i,trackedUpstream:a};process.stdout.write(`${JSON.stringify(e)}\n`);return}let o=[];if(o.push(`OpenKnowledge sharing mode: ${Rd(n)}`),r&&o.push(`  ${F(`.ok/skills`)} is committable (carved out); the rest of .ok/ stays local.`),o.push(``),o.push(`Excluded from git via ${F(`.git/info/exclude`)}:`),i.length===0)o.push(`  (none)`);else for(let e of i)o.push(`  ${e}`);if(o.push(``),o.push(`Other OK paths exist but are tracked upstream:`),a.length===0)o.push(`  (none)`);else for(let e of a)o.push(`  ${e}`);o.push(``),o.push(`Toggle with: ${A(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),r&&o.push(`  (that shares the whole project; to undo only the skills carve-out, use the desktop app: Settings > Config sharing)`),process.stdout.write(`${o.join(`
-`)}\n`)})}function Rd(e){switch(e){case`shared`:return M(`shared`);case`local-only`:return M(`local-only`);case`no-git`:return P(`no-git (not a git repository)`)}}function zd(){return new k(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=Sn(t,On(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){Bd(e.json,t,n.reason);return}let r=xn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${F(`Sharing mode is already`)} ${M(`local-only`)} ${F(`— nothing to do.`)}\n`);return}process.stderr.write(`${M(`✓`)} ${F(`Sharing mode set to`)} ${M(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${F(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function Bd(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${P({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Vd(){let e=new k(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Fd()),e.addCommand(zd()),e.addCommand(Ld()),e}const Hd=new Set([`--cwd`,`--log-level`]);function Ud(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){Hd.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function Wd(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Gd(e){return/\.(md|mdx)$/i.test(e)}function Kd(e,t){if(Gd(t))return!0;try{return H(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function qd(e=()=>Ln(Bn())){return{prepare:Ue,detectBundlePath:()=>e().bundlePath??null,openTarget:e=>{Fn(`open`,[e])},runProjectOpen:(e,t)=>rd(e,{project:t},$u()),runBrowserOpen:e=>Xd(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Jd(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof ct||e instanceof bt||e instanceof vt)return t.error(e.message),1;throw e}if(n.mode===`project`)return t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`;return t.openTarget(e),t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0}return await t.runBrowserOpen(n),0}function Yd(){let e=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[z(e,`public`),z(e,`../../app/dist`),z(e,`../../../app/dist`)].find(e=>B(e))}async function Xd(e){let{createEphemeralProjectDir:t}=await import(`./src-CGOjzQCL.mjs`),{loadConfig:n}=await import(`./index.mjs`),{bootStartServer:r,resolveHost:i}=await import(`./start-tOC8nkMr.mjs`),{openBrowser:a}=await import(`./open-browser-4sOlBbCM.mjs`),o=Yd();o||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let s=t(e.contentDir),c=!1,l,u=async()=>{if(!c){c=!0;try{await l?.destroy()}catch{}try{await _r(s,{recursive:!0,force:!0})}catch{}}},d=()=>{u().then(()=>process.exit(0))};process.once(`SIGINT`,d),process.once(`SIGTERM`,d);let{config:f}=n(s),p=i({},process.env);try{l=await r({config:f,cwd:s,host:p,port:0,projectDir:s,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:o,idleThresholdMs:6e5})}catch(t){await u(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let m=`http://${p}:${l.port}/#/${Ie(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${m}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${m}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Rd(e){switch(e){case`shared`:return M(`shared`);case`local-only`:return M(`local-only`);case`no-git`:return P(`no-git (not a git repository)`)}}function zd(){return new k(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=Sn(t,On(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){Bd(e.json,t,n.reason);return}let r=xn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${F(`Sharing mode is already`)} ${M(`local-only`)} ${F(`— nothing to do.`)}\n`);return}process.stderr.write(`${M(`✓`)} ${F(`Sharing mode set to`)} ${M(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${F(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function Bd(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${P({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Vd(){let e=new k(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Fd()),e.addCommand(zd()),e.addCommand(Ld()),e}const Hd=new Set([`--cwd`,`--log-level`]);function Ud(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){Hd.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function Wd(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Gd(e){return/\.(md|mdx)$/i.test(e)}function Kd(e,t){if(Gd(t))return!0;try{return H(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function qd(e=()=>Ln(Bn())){return{prepare:Ue,detectBundlePath:()=>e().bundlePath??null,openTarget:e=>{Fn(`open`,[e])},runProjectOpen:(e,t)=>rd(e,{project:t},$u()),runBrowserOpen:e=>Xd(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Jd(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof ct||e instanceof bt||e instanceof vt)return t.error(e.message),1;throw e}if(n.mode===`project`)return t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`;return t.openTarget(e),t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0}return await t.runBrowserOpen(n),0}function Yd(){let e=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[z(e,`public`),z(e,`../../app/dist`),z(e,`../../../app/dist`)].find(e=>B(e))}async function Xd(e){let{createEphemeralProjectDir:t}=await import(`./src-DaT-nAW_.mjs`),{loadConfig:n}=await import(`./index.mjs`),{bootStartServer:r,resolveHost:i}=await import(`./start-Bd2DGUlf.mjs`),{openBrowser:a}=await import(`./open-browser-CMjR6jVI.mjs`),o=Yd();o||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let s=t(e.contentDir),c=!1,l,u=async()=>{if(!c){c=!0;try{await l?.destroy()}catch{}try{await _r(s,{recursive:!0,force:!0})}catch{}}},d=()=>{u().then(()=>process.exit(0))};process.once(`SIGINT`,d),process.once(`SIGTERM`,d);let{config:f}=n(s),p=i({},process.env);try{l=await r({config:f,cwd:s,host:p,port:0,projectDir:s,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:o,idleThresholdMs:6e5})}catch(t){await u(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let m=`http://${p}:${l.port}/#/${Ie(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${m}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${m}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),a(m)),await new Promise(()=>{})}function Zd(){let e=new k(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=z(process.cwd()),n=Ct(wt(t)?.rootPath??t),r=Ve({projectDir:n}),i={...r,skills:r.skills.filter(e=>ve(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${j(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${F(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?j(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?j(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${M(e.name)}${t}  ${j(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${F(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${A(e.name)} ${j(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=an(O(process.cwd()),`server`);if(n.status!==`alive`){process.stderr.write(`${N(`Error:`)} no running Open Knowledge server for this project. Start it with ${F(`ok start`)} and retry.\n`),process.exitCode=1;return}let r;try{r=await fetch(`http://127.0.0.1:${n.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${N(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let i=await r.json().catch(()=>({}));if(!r.ok){let e=i.detail??i.title??`HTTP ${r.status}`;process.stderr.write(`${N(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let a=i.name;if(i.alreadyImported){process.stdout.write(`${A(`Already imported:`)} ${F(a)} (identical content).\n`);return}let o=i.provenance??{},s=i.collisionRenamedFrom;process.stdout.write(`${M(`Imported`)} ${F(a)}${s?j(` (renamed from ${s} — name was taken)`):``} from ${j(o.source??e)}${o.publisher?j(` · ${o.publisher}`):``}.\n${j(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of i.warnings??[])process.stdout.write(`  ${j(`! ${e}`)}\n`)}),e}function Qd(e,t){return{server:$d(`server`,e),ui:$d(`ui`,t)}}function $d(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function ef(e){return`${tf(e.server)}\n${tf(e.ui)}`}function tf(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function nf(e){let t=e.inspect??(t=>an(e.lockDir,t)),n=e.log??(e=>console.log(e)),r=Qd(t(`server`),t(`ui`));return e.json?n(JSON.stringify(r,null,2)):n(ef(r)),r}function rf(e){return new k(`status`).description(`Show live state of the server + ui lockfiles for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),nf({lockDir:O(process.cwd()),json:t.json===!0})})}function Z(e,t,n,r,i){let a=`urn:uuid:${vr()}`;if(e.headersSent||e.writableEnded||e.destroyed){console.error(`[ok ui] emitProblem called after headers sent — suppressed`,{type:n,status:t,instance:a});return}let o={type:n,title:r,status:t,instance:a,...i===void 0?{}:{detail:i}},s=te.safeParse(o);if(!s.success){console.error(`[ok ui] emitProblem produced an invalid ProblemDetails body:`,{issues:s.error.issues,originalStatus:t,body:o}),e.writeHead(500,{"Content-Type":`application/problem+json`,"X-Content-Type-Options":`nosniff`,"Cache-Control":`no-store`}),e.end(JSON.stringify({type:`urn:ok:error:internal-server-error`,title:`Internal server error.`,status:500,instance:a}));return}e.writeHead(t,{"Content-Type":`application/problem+json`,"X-Content-Type-Options":`nosniff`,"Cache-Control":`no-store`}),e.end(JSON.stringify(o))}const af=1e4;function of(e,t){let n=e.socket?.remoteAddress;if(n!==void 0&&!Qe(n))return Z(t,403,`urn:ok:error:loopback-required`,`Request must originate from a loopback address.`),!0;if(!tt(e.headers.host))return Z(t,403,`urn:ok:error:host-not-allowed`,`Host header is not in the loopback allowlist.`),!0;let r=e.headers.origin;return r!==void 0&&!xt(r)?(Z(t,403,`urn:ok:error:invalid-origin`,`Origin header is not in the loopback allowlist.`),!0):!1}const sf=3e4;function cf(e,t){let n=e.socket?.remoteAddress;if(n!==void 0&&!Qe(n)||!tt(e.headers.host))return t.destroy(),!0;let r=e.headers.origin;return typeof r==`string`&&!xt(r)?(t.destroy(),!0):!1}function lf(e,t,n,r,i,a){a.add(t),t.once(`close`,()=>a.delete(t));let o=wr({host:r,port:i,timeout:af});a.add(o),o.once(`close`,()=>a.delete(o));let s=!1,c=n=>{if(!s){if(s=!0,n!==void 0){let t=n.err;console.warn(JSON.stringify({event:n.event,upstreamHost:r,upstreamPort:i,url:e.url,code:t instanceof Error?t.code:void 0,message:t instanceof Error?t.message:void 0}))}try{o.destroy()}catch{}try{t.destroy()}catch{}}};o.once(`connect`,()=>{o.setTimeout(0);let a=[`${e.method??`GET`} ${e.url??`/`} HTTP/1.1`,`host: ${r}:${i}`];for(let[t,n]of Object.entries(e.headers))if(t.toLowerCase()!==`host`&&n!==void 0)if(Array.isArray(n))for(let e of n)a.push(`${t}: ${e}`);else a.push(`${t}: ${n}`);try{o.write(`${a.join(`\r
-`)}\r\n\r\n`),n.length>0&&o.write(n)}catch(e){c({event:`proxy-upgrade-handshake-write-failed`,err:e});return}o.on(`data`,e=>{t.writable&&t.write(e)}),t.on(`data`,e=>{o.writable&&o.write(e)})}),o.once(`timeout`,()=>{c({event:`proxy-upgrade-upstream-connect-timeout`})}),o.on(`error`,e=>c({event:`proxy-upgrade-upstream-error`,err:e})),t.on(`error`,e=>c({event:`proxy-upgrade-client-error`,err:e})),o.once(`close`,()=>c()),t.once(`close`,()=>c())}const uf=[`connection`,`keep-alive`,`proxy-authenticate`,`proxy-authorization`,`te`,`trailer`,`transfer-encoding`,`upgrade`,`cookie`,`set-cookie`];async function df(e){let t=e.upstreamTimeoutMs??af,n=new Set,r=xr((n,r)=>{of(n,r)||pf(n,r,e.upstreamHost,e.upstreamPort,t)});r.on(`upgrade`,(t,r,i)=>{cf(t,r)||lf(t,r,i,e.upstreamHost,e.upstreamPort,n)}),await new Promise((t,n)=>{let i=e=>n(e);r.once(`error`,i),r.listen(e.listenPort,e.host,()=>{r.off(`error`,i),t()})});let i=r.address();return{httpServer:r,port:typeof i==`object`&&i?i.port:e.listenPort,close:()=>new Promise(e=>{for(let e of n)try{e.destroy()}catch{}n.clear(),r.close(()=>e()),r.closeIdleConnections()})}}function ff(e,t,n){pf(e,t,n.upstreamHost,n.upstreamPort,n.upstreamTimeoutMs??af)}function pf(e,t,n,r,i){let a={...e.headers};delete a.host;for(let e of uf)delete a[e];e.setTimeout(sf,()=>{if(t.headersSent)try{t.end()}catch{}else try{Z(t,408,`urn:ok:error:request-timeout`,`Proxy request exceeded the per-request deadline.`,`Slow-loris-class: client did not finish within ${sf/1e3}s.`)}catch{}try{e.socket?.destroy()}catch{}});let o=Sr({host:n,port:r,method:e.method,path:e.url,headers:{...a,host:`${n}:${r}`}},e=>{let n={...e.headers};for(let e of uf)delete n[e];t.writeHead(e.statusCode??502,n),e.pipe(t),e.once(`error`,()=>{try{t.end()}catch{}})});i>0&&o.setTimeout(i,()=>{if(!t.headersSent)Z(t,504,`urn:ok:error:gateway-timeout`,`Upstream did not respond before the gateway deadline.`,`Upstream timeout: ${i/1e3}s elapsed without a response.`);else try{t.end()}catch{}o.destroy()}),o.on(`error`,()=>{if(!t.headersSent)Z(t,502,`urn:ok:error:collab-server-not-running`,`Collab server is unreachable.`,`Upstream connection failed or dropped before a response was received.`);else try{t.end()}catch{}}),e.on(`error`,()=>{o.destroy()}),e.pipe(o)}const mf=39847;async function hf(e){await Promise.all(e.map(e=>new Promise(t=>{e.close(()=>t())})))}async function gf(e){let{existsSync:t}=await import(`node:fs`),{createServer:i}=await import(`node:http`),{resolve:a}=await import(`node:path`),{acquireUiLock:o,createAssetServeMiddleware:c,createContentFilter:l,readServerLock:u,releaseUiLock:d,updateUiLockPort:f}=await import(`./src-CGOjzQCL.mjs`),{default:p}=await import(`./build-DcqN8tua.mjs`),{resolveContentDir:m,resolveLockDir:h}=await import(`./src-CGOjzQCL.mjs`),g=m(e.config,e.cwd),_=h(e.cwd);o(_,{port:0,worktreeRoot:e.cwd});let v=import.meta.dirname??new URL(`.`,import.meta.url).pathname,y=[a(v,`public`),a(v,`../../app/dist`),a(v,`../../../app/dist`)],b=e.assetDir??y.find(e=>t(e)),x=b?p(b,{single:!0,gzip:!0,etag:!0,dev:!0,extensions:[]}):null,S=t(g)?c({contentFilter:l({projectDir:e.cwd,contentDir:g}),contentSirv:p(g,{dotfiles:!1,dev:!0,extensions:[]}),inlineExtensions:s,assetExtensions:n,blocklistExtensions:r}):null,C=e.port,ee=null,w=(e,t)=>{let n=e.url?.split(`?`)[0];if((n===`/`||n===``)&&(e.url=`/index.html`),!(n?.startsWith(`/api/`)&&of(e,t))){if(n===`/api/config`&&(e.method===`GET`||e.method===`HEAD`)){ee?.();let n=u(_),r=e.headers.host??`localhost:${C}`,i=n&&n.port>0?`ws://${r}/collab`:null,a=JSON.stringify({collabUrl:i,previewUrl:null,port:C});t.setHeader(`Content-Type`,`application/json`),t.setHeader(`Cache-Control`,`no-store`),t.setHeader(`X-Content-Type-Options`,`nosniff`),t.statusCode=200,e.method===`HEAD`?t.end():t.end(a);return}if(n?.startsWith(`/api/`)){ee?.();let r=u(_);if(!r||r.port<=0){Z(t,503,`urn:ok:error:collab-server-not-running`,"Collab server not running. Start `ok start` or run `ok status`.",`Path: ${n}`);return}ff(e,t,{upstreamHost:T,upstreamPort:r.port});return}if(x&&n?.startsWith(`/assets/`)){x(e,t,()=>{S?S(e,t,()=>_f(t)):_f(t)});return}if(S){S(e,t,()=>{x?x(e,t):_f(t)});return}if(x){x(e,t);return}_f(t)}},te=new Set,ne=(e,t,n)=>{if(cf(e,t))return;let r=e.url?.split(`?`)[0]??``;if(r!==`/collab`&&!r.startsWith(`/collab/`)){t.destroy();return}let i=u(_);if(!i||i.port<=0){console.warn(JSON.stringify({event:`ok-ui-upgrade-no-collab-lock`,url:r,reason:"server.lock missing or port unbound — is `ok start` running?"})),t.destroy();return}lf(e,t,n,T,i.port,te)},re=()=>{for(let e of te)try{e.destroy()}catch{}te.clear()},ie=e.host===void 0?[`::1`,`127.0.0.1`]:[e.host],ae=[],oe=e.port,se=e=>e instanceof Error&&e.code===`EADDRINUSE`,ce=async()=>{await Promise.all(ae.splice(0).map(e=>new Promise(t=>{try{e.close(()=>t())}catch{t()}})))},le=async e=>{oe=e;for(let e of ie){let t=i(w);t.on(`upgrade`,ne),ae.push(t),await new Promise((n,r)=>{let i=e=>r(e);t.once(`error`,i),t.listen(oe,e,()=>{t.off(`error`,i);let e=t.address();typeof e==`object`&&e&&(oe=e.port),n()})})}};try{try{await le(e.port)}catch(t){if(e.fallbackToKernel===!0&&se(t))await ce(),await le(0);else throw t}}catch(e){await ce();try{d(_)}catch{}throw e}let ue=oe;C=ue,f(_,ue);let de=e.scheduler??ge,fe=e.safetyNetMs??432e5,E=null,pe=!1,me=!1,he=()=>{pe||(pe=!0,E!==null&&(de.clearTimeout(E),E=null))},_e=()=>{if(he(),!me){me=!0;try{d(_)}catch{}}},ve=()=>{pe||fe<=0||(E!==null&&(de.clearTimeout(E),E=null),E=de.setTimeout(()=>{E=null,console.warn(`[ui] safety-net (${fe}ms) reached — shutting down (D-025 backstop)`);try{e.onSafetyNet?.()}catch{}re();for(let e of ae)try{e.close()}catch{}_e()},fe))},ye=()=>{pe||fe<=0||ve()};return ee=ye,ve(),{httpServers:ae,port:ue,release:_e,detachSafetyNet:he,nudgeSafetyNet:ye,drainUpgradeSockets:re}}function _f(e){e.headersSent||e.writableEnded||e.destroyed||(e.setHeader(`X-Content-Type-Options`,`nosniff`),e.setHeader(`Cache-Control`,`no-store`),e.statusCode=404,e.end())}function vf(e,t){if(e!==void 0){let t=Number.parseInt(e,10);if(Number.isNaN(t)||t<0||t>65535)throw Error(`Invalid --port value '${e}'`);return{port:t,fallbackToKernel:!1}}if(t!==void 0&&t!==``){let e=Number.parseInt(t,10);if(Number.isNaN(e)||e<0||e>65535)throw Error(`Invalid PORT env value '${t}'`);return{port:e,fallbackToKernel:!1}}return{port:mf,fallbackToKernel:!0}}async function yf(e){let t=e.readLock??(async()=>{let{readUiLock:t}=await import(`./src-CGOjzQCL.mjs`);return t(e.lockDir)}),n=await t();if(!n)throw Error(`UI lock collision reported but the lock disappeared before handling — retry acquiring.`);if(n.port===e.requestedPort&&n.port>0)return{mode:`already-running`,port:n.port};let r=n.port;if(r===0){let n=Date.now()+(e.pollDeadlineMs??2e3),i=e.pollIntervalMs??100;for(;Date.now()<n;){await new Promise(e=>{setTimeout(e,i)});let e=await t();if(e&&e.port>0){r=e.port;break}}if(r===0)throw Error("UI did not bind within 2s; run `ok clean`");if(r===e.requestedPort)return{mode:`already-running`,port:r}}return{mode:`proxy`,handle:await df({listenPort:e.requestedPort,host:e.host,upstreamHost:`localhost`,upstreamPort:r}),upstreamPort:r}}function bf(e){return new k(`ui`).description(`Serve the OpenKnowledge React editor UI`).option(`-p, --port <port>`,`UI port (default: $PORT env or ${mf}, kernel-allocated fallback if busy)`).option(`-H, --host <host>`,"UI host. Default: two-socket loopback bind (`[::1]` + `127.0.0.1`) so cross-family collisions fail loud. Pass an explicit host (e.g. `127.0.0.1`, `0.0.0.0`) to bind a single socket on that host.").action(async t=>{let{dim:n}=await import(`./colors-MGDi6UGf.mjs`),{UiLockCollisionError:r}=await import(`./src-CGOjzQCL.mjs`),{resolveLockDir:i}=await import(`./src-CGOjzQCL.mjs`),a=e(),o=t.host,s;try{s=vf(t.port,process.env.PORT)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=1;return}let c=s.port;try{let e=await gf({config:a,cwd:process.cwd(),port:c,fallbackToKernel:s.fallbackToKernel,host:o}),t=o===void 0||o===`::`||o===`0.0.0.0`?`localhost`:o;console.log(`${n(`[ui]`)} listening on http://${t}:${e.port}`);let r=!1,i=t=>{if(r)return;r=!0,console.log(n(`\n[ui] Shutting down (${t})`)),e.detachSafetyNet();let i=()=>{try{e.release()}finally{process.exit(process.exitCode??0)}};e.drainUpgradeSockets(),hf(e.httpServers).then(i,i),setTimeout(i,2e3).unref()};process.once(`SIGINT`,()=>i(`SIGINT`)),process.once(`SIGTERM`,()=>i(`SIGTERM`));return}catch(e){if(!(e instanceof r))throw e;let t=i(process.cwd()),a=o??`localhost`,s;try{s=await yf({requestedPort:c,host:a,lockDir:t})}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exit(1)}if(s.mode===`already-running`){if(console.log(`UI already running at http://${a}:${s.port}`),xf(process)){await new Promise(e=>{let t=t=>{console.log(n(`\n[ui-keepalive] Shutting down (${t})`)),e()};process.once(`SIGINT`,()=>t(`SIGINT`)),process.once(`SIGTERM`,()=>t(`SIGTERM`))});return}process.exit(0)}console.log(`UI running at http://${a}:${s.upstreamPort}; acting as HTTP proxy on port ${s.handle.port}`);let l=!1,u=e=>{l||(l=!0,console.log(n(`\n[ui-proxy] Shutting down (${e})`)),s.handle.close().finally(()=>process.exit(process.exitCode??0)),setTimeout(()=>process.exit(process.exitCode??0),2e3).unref())};process.once(`SIGINT`,()=>u(`SIGINT`)),process.once(`SIGTERM`,()=>u(`SIGTERM`))}})}function xf(e){let t=e.stdout.isTTY===!0,n=typeof e.env.PORT==`string`&&e.env.PORT!==``;return!t||n}function Sf(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Cf(e,t){let n=Cr({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function wf(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(j(`
+`)}\r\n\r\n`),n.length>0&&o.write(n)}catch(e){c({event:`proxy-upgrade-handshake-write-failed`,err:e});return}o.on(`data`,e=>{t.writable&&t.write(e)}),t.on(`data`,e=>{o.writable&&o.write(e)})}),o.once(`timeout`,()=>{c({event:`proxy-upgrade-upstream-connect-timeout`})}),o.on(`error`,e=>c({event:`proxy-upgrade-upstream-error`,err:e})),t.on(`error`,e=>c({event:`proxy-upgrade-client-error`,err:e})),o.once(`close`,()=>c()),t.once(`close`,()=>c())}const uf=[`connection`,`keep-alive`,`proxy-authenticate`,`proxy-authorization`,`te`,`trailer`,`transfer-encoding`,`upgrade`,`cookie`,`set-cookie`];async function df(e){let t=e.upstreamTimeoutMs??af,n=new Set,r=xr((n,r)=>{of(n,r)||pf(n,r,e.upstreamHost,e.upstreamPort,t)});r.on(`upgrade`,(t,r,i)=>{cf(t,r)||lf(t,r,i,e.upstreamHost,e.upstreamPort,n)}),await new Promise((t,n)=>{let i=e=>n(e);r.once(`error`,i),r.listen(e.listenPort,e.host,()=>{r.off(`error`,i),t()})});let i=r.address();return{httpServer:r,port:typeof i==`object`&&i?i.port:e.listenPort,close:()=>new Promise(e=>{for(let e of n)try{e.destroy()}catch{}n.clear(),r.close(()=>e()),r.closeIdleConnections()})}}function ff(e,t,n){pf(e,t,n.upstreamHost,n.upstreamPort,n.upstreamTimeoutMs??af)}function pf(e,t,n,r,i){let a={...e.headers};delete a.host;for(let e of uf)delete a[e];e.setTimeout(sf,()=>{if(t.headersSent)try{t.end()}catch{}else try{Z(t,408,`urn:ok:error:request-timeout`,`Proxy request exceeded the per-request deadline.`,`Slow-loris-class: client did not finish within ${sf/1e3}s.`)}catch{}try{e.socket?.destroy()}catch{}});let o=Sr({host:n,port:r,method:e.method,path:e.url,headers:{...a,host:`${n}:${r}`}},e=>{let n={...e.headers};for(let e of uf)delete n[e];t.writeHead(e.statusCode??502,n),e.pipe(t),e.once(`error`,()=>{try{t.end()}catch{}})});i>0&&o.setTimeout(i,()=>{if(!t.headersSent)Z(t,504,`urn:ok:error:gateway-timeout`,`Upstream did not respond before the gateway deadline.`,`Upstream timeout: ${i/1e3}s elapsed without a response.`);else try{t.end()}catch{}o.destroy()}),o.on(`error`,()=>{if(!t.headersSent)Z(t,502,`urn:ok:error:collab-server-not-running`,`Collab server is unreachable.`,`Upstream connection failed or dropped before a response was received.`);else try{t.end()}catch{}}),e.on(`error`,()=>{o.destroy()}),e.pipe(o)}const mf=39847;async function hf(e){await Promise.all(e.map(e=>new Promise(t=>{e.close(()=>t())})))}async function gf(e){let{existsSync:t}=await import(`node:fs`),{createServer:i}=await import(`node:http`),{resolve:a}=await import(`node:path`),{acquireUiLock:o,createAssetServeMiddleware:c,createContentFilter:l,readServerLock:u,releaseUiLock:d,updateUiLockPort:f}=await import(`./src-DaT-nAW_.mjs`),{default:p}=await import(`./build-DcqN8tua.mjs`),{resolveContentDir:m,resolveLockDir:h}=await import(`./src-DaT-nAW_.mjs`),g=m(e.config,e.cwd),_=h(e.cwd);o(_,{port:0,worktreeRoot:e.cwd});let v=import.meta.dirname??new URL(`.`,import.meta.url).pathname,y=[a(v,`public`),a(v,`../../app/dist`),a(v,`../../../app/dist`)],b=e.assetDir??y.find(e=>t(e)),x=b?p(b,{single:!0,gzip:!0,etag:!0,dev:!0,extensions:[]}):null,S=t(g)?c({contentFilter:l({projectDir:e.cwd,contentDir:g}),contentSirv:p(g,{dotfiles:!1,dev:!0,extensions:[]}),inlineExtensions:s,assetExtensions:n,blocklistExtensions:r}):null,C=e.port,ee=null,w=(e,t)=>{let n=e.url?.split(`?`)[0];if((n===`/`||n===``)&&(e.url=`/index.html`),!(n?.startsWith(`/api/`)&&of(e,t))){if(n===`/api/config`&&(e.method===`GET`||e.method===`HEAD`)){ee?.();let n=u(_),r=e.headers.host??`localhost:${C}`,i=n&&n.port>0?`ws://${r}/collab`:null,a=JSON.stringify({collabUrl:i,previewUrl:null,port:C});t.setHeader(`Content-Type`,`application/json`),t.setHeader(`Cache-Control`,`no-store`),t.setHeader(`X-Content-Type-Options`,`nosniff`),t.statusCode=200,e.method===`HEAD`?t.end():t.end(a);return}if(n?.startsWith(`/api/`)){ee?.();let r=u(_);if(!r||r.port<=0){Z(t,503,`urn:ok:error:collab-server-not-running`,"Collab server not running. Start `ok start` or run `ok status`.",`Path: ${n}`);return}ff(e,t,{upstreamHost:T,upstreamPort:r.port});return}if(x&&n?.startsWith(`/assets/`)){x(e,t,()=>{S?S(e,t,()=>_f(t)):_f(t)});return}if(S){S(e,t,()=>{x?x(e,t):_f(t)});return}if(x){x(e,t);return}_f(t)}},te=new Set,ne=(e,t,n)=>{if(cf(e,t))return;let r=e.url?.split(`?`)[0]??``;if(r!==`/collab`&&!r.startsWith(`/collab/`)){t.destroy();return}let i=u(_);if(!i||i.port<=0){console.warn(JSON.stringify({event:`ok-ui-upgrade-no-collab-lock`,url:r,reason:"server.lock missing or port unbound — is `ok start` running?"})),t.destroy();return}lf(e,t,n,T,i.port,te)},re=()=>{for(let e of te)try{e.destroy()}catch{}te.clear()},ie=e.host===void 0?[`::1`,`127.0.0.1`]:[e.host],ae=[],oe=e.port,se=e=>e instanceof Error&&e.code===`EADDRINUSE`,ce=async()=>{await Promise.all(ae.splice(0).map(e=>new Promise(t=>{try{e.close(()=>t())}catch{t()}})))},le=async e=>{oe=e;for(let e of ie){let t=i(w);t.on(`upgrade`,ne),ae.push(t),await new Promise((n,r)=>{let i=e=>r(e);t.once(`error`,i),t.listen(oe,e,()=>{t.off(`error`,i);let e=t.address();typeof e==`object`&&e&&(oe=e.port),n()})})}};try{try{await le(e.port)}catch(t){if(e.fallbackToKernel===!0&&se(t))await ce(),await le(0);else throw t}}catch(e){await ce();try{d(_)}catch{}throw e}let ue=oe;C=ue,f(_,ue);let de=e.scheduler??ge,fe=e.safetyNetMs??432e5,E=null,pe=!1,me=!1,he=()=>{pe||(pe=!0,E!==null&&(de.clearTimeout(E),E=null))},_e=()=>{if(he(),!me){me=!0;try{d(_)}catch{}}},ve=()=>{pe||fe<=0||(E!==null&&(de.clearTimeout(E),E=null),E=de.setTimeout(()=>{E=null,console.warn(`[ui] safety-net (${fe}ms) reached — shutting down (D-025 backstop)`);try{e.onSafetyNet?.()}catch{}re();for(let e of ae)try{e.close()}catch{}_e()},fe))},ye=()=>{pe||fe<=0||ve()};return ee=ye,ve(),{httpServers:ae,port:ue,release:_e,detachSafetyNet:he,nudgeSafetyNet:ye,drainUpgradeSockets:re}}function _f(e){e.headersSent||e.writableEnded||e.destroyed||(e.setHeader(`X-Content-Type-Options`,`nosniff`),e.setHeader(`Cache-Control`,`no-store`),e.statusCode=404,e.end())}function vf(e,t){if(e!==void 0){let t=Number.parseInt(e,10);if(Number.isNaN(t)||t<0||t>65535)throw Error(`Invalid --port value '${e}'`);return{port:t,fallbackToKernel:!1}}if(t!==void 0&&t!==``){let e=Number.parseInt(t,10);if(Number.isNaN(e)||e<0||e>65535)throw Error(`Invalid PORT env value '${t}'`);return{port:e,fallbackToKernel:!1}}return{port:mf,fallbackToKernel:!0}}async function yf(e){let t=e.readLock??(async()=>{let{readUiLock:t}=await import(`./src-DaT-nAW_.mjs`);return t(e.lockDir)}),n=await t();if(!n)throw Error(`UI lock collision reported but the lock disappeared before handling — retry acquiring.`);if(n.port===e.requestedPort&&n.port>0)return{mode:`already-running`,port:n.port};let r=n.port;if(r===0){let n=Date.now()+(e.pollDeadlineMs??2e3),i=e.pollIntervalMs??100;for(;Date.now()<n;){await new Promise(e=>{setTimeout(e,i)});let e=await t();if(e&&e.port>0){r=e.port;break}}if(r===0)throw Error("UI did not bind within 2s; run `ok clean`");if(r===e.requestedPort)return{mode:`already-running`,port:r}}return{mode:`proxy`,handle:await df({listenPort:e.requestedPort,host:e.host,upstreamHost:`localhost`,upstreamPort:r}),upstreamPort:r}}function bf(e){return new k(`ui`).description(`Serve the OpenKnowledge React editor UI`).option(`-p, --port <port>`,`UI port (default: $PORT env or ${mf}, kernel-allocated fallback if busy)`).option(`-H, --host <host>`,"UI host. Default: two-socket loopback bind (`[::1]` + `127.0.0.1`) so cross-family collisions fail loud. Pass an explicit host (e.g. `127.0.0.1`, `0.0.0.0`) to bind a single socket on that host.").action(async t=>{let{dim:n}=await import(`./colors-MGDi6UGf.mjs`),{UiLockCollisionError:r}=await import(`./src-DaT-nAW_.mjs`),{resolveLockDir:i}=await import(`./src-DaT-nAW_.mjs`),a=e(),o=t.host,s;try{s=vf(t.port,process.env.PORT)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=1;return}let c=s.port;try{let e=await gf({config:a,cwd:process.cwd(),port:c,fallbackToKernel:s.fallbackToKernel,host:o}),t=o===void 0||o===`::`||o===`0.0.0.0`?`localhost`:o;console.log(`${n(`[ui]`)} listening on http://${t}:${e.port}`);let r=!1,i=t=>{if(r)return;r=!0,console.log(n(`\n[ui] Shutting down (${t})`)),e.detachSafetyNet();let i=()=>{try{e.release()}finally{process.exit(process.exitCode??0)}};e.drainUpgradeSockets(),hf(e.httpServers).then(i,i),setTimeout(i,2e3).unref()};process.once(`SIGINT`,()=>i(`SIGINT`)),process.once(`SIGTERM`,()=>i(`SIGTERM`));return}catch(e){if(!(e instanceof r))throw e;let t=i(process.cwd()),a=o??`localhost`,s;try{s=await yf({requestedPort:c,host:a,lockDir:t})}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exit(1)}if(s.mode===`already-running`){if(console.log(`UI already running at http://${a}:${s.port}`),xf(process)){await new Promise(e=>{let t=t=>{console.log(n(`\n[ui-keepalive] Shutting down (${t})`)),e()};process.once(`SIGINT`,()=>t(`SIGINT`)),process.once(`SIGTERM`,()=>t(`SIGTERM`))});return}process.exit(0)}console.log(`UI running at http://${a}:${s.upstreamPort}; acting as HTTP proxy on port ${s.handle.port}`);let l=!1,u=e=>{l||(l=!0,console.log(n(`\n[ui-proxy] Shutting down (${e})`)),s.handle.close().finally(()=>process.exit(process.exitCode??0)),setTimeout(()=>process.exit(process.exitCode??0),2e3).unref())};process.once(`SIGINT`,()=>u(`SIGINT`)),process.once(`SIGTERM`,()=>u(`SIGTERM`))}})}function xf(e){let t=e.stdout.isTTY===!0,n=typeof e.env.PORT==`string`&&e.env.PORT!==``;return!t||n}function Sf(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Cf(e,t){let n=Cr({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function wf(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(j(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await gn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:ee.length+1,choices:[...ee.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Cf(t,j(`Anything else we should know? (optional) `)),i=await Cf(t,j(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function Tf(e){if(!Sf(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>wf(e)))()}catch{return`failed`}return re(t)?((e.output??process.stderr).write(`\n${F(`Thank you. We read every response.`)}\n\n`),(await(e.submit??ae)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function Ef(e,t,n=Df,r=B){let i=[];for(let t of[`/Applications/OpenKnowledge.app`,L(e,`Applications`,`OpenKnowledge.app`)])r(t)&&i.push({method:`app`,label:`OK Desktop (${t})`,instruction:`Move ${t} to the Trash (or: rm -rf "${t}")`});return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&i.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&i.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),i}function Df(e){try{return Kn(`npm`,e,D({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const Of=`━`.repeat(64);function kf(e){let t=[P(Of),F(`  One more step — remove the OpenKnowledge app itself`),j(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0)t.push(j(`  Install method not detected. If you installed it, remove it via:`)),t.push(`    ${A(`OK Desktop`)} — move /Applications/OpenKnowledge.app to the Trash`),t.push(`    ${A(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),t.push(`    ${A(`npx`)} — nothing to remove (runs from a temporary cache)`);else for(let n of e)t.push(`  ${A(n.label)}`),t.push(`    ${n.instruction}`);return t.push(P(Of)),t.join(`
 `)}function Af(e){return z(e,`..`,`..`)}function jf(e){return B(L(e,`.ok`))}async function Mf(e){let t=e.findRoot??wt,n=e.readRecents??xo,r=t(e.cwd)?.rootPath??null,i=yo({home:e.home,platformName:e.platform,env:e.env}),a=new Set;for(let e of n(i))a.add(z(e.path));let o=new Set(e.lockDirs.map(Af));for(let e of o)a.add(e);r&&a.delete(r);let s=[];r&&jf(r)&&s.push({path:r,running:o.has(r),current:!0});for(let e of a)jf(e)&&s.push({path:e,running:o.has(e),current:!1});return s.length===0?[]:e.allProjects?s.map(e=>e.path):e.yes||e.dryRun||!(e.isTTY??process.stdout.isTTY)?[]:(e.promptFn??Nf)(s)}async function Nf(e){return An({message:`Also remove OpenKnowledge from these projects? (space to toggle; none selected by default)

package/dist/config-schema.json CHANGED Viewed

@@ -275,7 +275,8 @@
     },
     "editor": {
       "default": {
-        "wordWrap": true
+        "wordWrap": true,
+        "previewTabs": true
       },
       "type": "object",
       "properties": {
@@ -286,6 +287,14 @@
           "agentSettable": false,
           "defaultScope": "user",
           "description": "Soft-wrap long lines in the source (CodeMirror) editor. A personal preference (user scope)."
+        },
+        "previewTabs": {
+          "default": true,
+          "type": "boolean",
+          "scope": "user",
+          "agentSettable": false,
+          "defaultScope": "user",
+          "description": "Reuse one tab when clicking through the Files and Skills sidebars, the way an editor preview tab works. Turn off to open every click in its own tab. Pinned tabs keep their own tab either way. A personal preference (user scope)."
         }
       },
       "additionalProperties": {}

package/dist/config.user.schema.json CHANGED Viewed

@@ -211,7 +211,8 @@
     },
     "editor": {
       "default": {
-        "wordWrap": true
+        "wordWrap": true,
+        "previewTabs": true
       },
       "type": "object",
       "properties": {
@@ -222,6 +223,14 @@
           "agentSettable": false,
           "defaultScope": "user",
           "description": "Soft-wrap long lines in the source (CodeMirror) editor. A personal preference (user scope)."
+        },
+        "previewTabs": {
+          "default": true,
+          "type": "boolean",
+          "scope": "user",
+          "agentSettable": false,
+          "defaultScope": "user",
+          "description": "Reuse one tab when clicking through the Files and Skills sidebars, the way an editor preview tab works. Turn off to open every click in its own tab. Pinned tabs keep their own tab either way. A personal preference (user scope)."
         }
       },
       "additionalProperties": {}

package/dist/constants-B6Rluza9.mjs ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ import"./src-CHSJwcpc.mjs";var e=`0.47.2`;const t=`config.yml`,n=e;export{n,t};
2	+ //# sourceMappingURL=constants-B6Rluza9.mjs.map

package/dist/fs-traced-C-HqiL6u.mjs ADDED Viewed

	@@ -0,0 +1 @@
1	+ import{_ as e,c as t}from"./fs-traced-D12ehU8a.mjs";export{t as tracedMkdir,e as tracedWriteFile};