@inkeep/open-knowledge 0.59.0-beta.27 → 0.59.0-beta.29

package/dist/{start-Cxm5f8Vn.mjs → start-7do63YHY.mjs}

@@ -1,4 +1,4 @@
-import{j as e}from"./sleep-DXvB05wr.mjs";import{_c as t,cc as n,dc as r,gc as i,hc as a}from"./src-UoW_X1C6.mjs";import{Fn as o,a as s,ui as c}from"./src-DC0dXNgq.mjs";import{r as l}from"./server-lock-D3OwE6nq.mjs";import{b as u,x as d}from"./resolve-project-root-CjlK19bg.mjs";import{a as f,f as p,i as m,l as h,o as g,r as _,t as v}from"./acp-harness-probe-CHDRVQpq.mjs";import{y}from"./init-zTOfz-Hi.mjs";import{n as b}from"./constants-DSNC3wSl.mjs";import{spawn as x}from"node:child_process";import{basename as S,resolve as C}from"node:path";import{existsSync as w}from"node:fs";import{rm as T}from"node:fs/promises";import{setTimeout as E}from"node:timers/promises";function D(e,t){return e.bind?.[0]??t.HOST??`127.0.0.1`}function O(e){if(e===`server`)return e;throw new d(`--only must be 'server'`)}function k(e=w){let t=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[C(t,`public`),C(t,`../../app/dist`),C(t,`../../../app/dist`)].find(t=>e(t))}function A(e){if(e.explicitDir!==void 0)return{dir:e.explicitDir,missingBundle:!1};if(e.only===`server`)return{dir:void 0,missingBundle:!1};let t=e.findBundledDir();return{dir:t,missingBundle:t===void 0}}function j(t){if(t===`off`)return`off`;if(!e.test(t))throw new d(`--idle-shutdown must be 'off' or a duration like 90s, 30m, 2h`);return t}function M(e){return e===`localhost`||e===`::1`||e===`[::1]`||e.startsWith(`127.`)}function N(e){return!e.flagBindSet&&!e.okBindSet&&e.hostEnvSet&&e.fileBindCount>1}function P(e){return!e.openBrowser||e.ephemeral||e.only===`server`||!e.servesUi?!1:(e.explicitOn||M(e.host))&&e.isTTY}function F(e,t){let n;try{n=new URL(t)}catch{throw new d(`${e} is not a valid URL: ${t}`)}if(n.protocol!==`http:`&&n.protocol!==`https:`)throw new d(`${e} must be an http(s) origin (got: ${t})`);return t}function I(e){return F(`--external-url`,e)}function L(e){let t=S(e).replace(/[^\x20-\x7E]/g,``).trim().slice(0,64);return`open-knowledge-server ${t.length>0?t:`unknown`}`}var R=class extends Error{cwd;constructor(e){super("This directory isn't set up yet. Run `ok init` first, then `ok start` again."),this.name=`OkDirMissingError`,this.cwd=e}};function z(e,t,n=e=>T(e,{recursive:!0,force:!0})){return async()=>{try{await e()}finally{try{await n(t)}catch(e){process.stderr.write(`[start] ephemeral temp dir reap failed for ${t}: ${e instanceof Error?e.message:String(e)}\n`)}}}}function B(e,t={}){let n=t.exit??(e=>process.exit(e)),r=t.getActiveHandles??(()=>{let e=process._getActiveHandles;return e?e.call(process):null});return async()=>{let i=!1;try{await e()}catch(e){i=!0,t.log?.error({err:e},`idle-shutdown: destroy failed — exiting anyway`)}finally{let e=null;try{let t=r();if(t!==null){e={};for(let n of t){let t=n?.constructor?.name??`unknown`;e[t]=(e[t]??0)+1}}}catch{e=null}t.log?.info({event:`idle-shutdown-exit`,exitCode:+!!i,openHandles:e??{},handlesAvailable:e!==null},`idle-shutdown: teardown finished — exiting process`),n(+!!i)}}}async function V(e){let{config:t,cwd:n,host:r}=e,i=e.skipAutoInit??!1,a=e.idleThresholdMs===void 0?18e5:e.idleThresholdMs,{existsSync:l,mkdirSync:u}=await import(`node:fs`),{basename:d,dirname:f}=await import(`node:path`),{bootServer:m,getLogger:g,resolveContentDir:_,resolveLockDir:b,waitForServerLockDrain:x}=await import(`./src-DRQtLkln.mjs`),S=e.log??g(`start`),C=e.singleFile!==void 0,w=e.projectDir??n,T=C?s(e.singleFile).canonicalFilePath:void 0,E=T?f(T):void 0,D=T?d(T):void 0;if(!C){if(!i&&!o(n))throw new R(n);let t=process.env.OK_RECLAIM_DISABLE??null,r=e=>{let t=typeof e.event==`string`?e.event:``;(t.endsWith(`-failed`)||t.endsWith(`-error`)||t.endsWith(`-missing`))&&S.warn({event:e},`[start] reclaim sweep reported a problem`)};try{(e.repairMcpConfigsFn??(await import(`./repair-mcp-configs-DHHaYqN1.mjs`)).repairMcpConfigs)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] mcp-config repair sweep failed; continuing`)}try{(e.repairLaunchJsonFn??(await import(`./repair-launch-json-CSJT9xyg.mjs`)).repairLaunchJson)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] launch.json repair sweep failed; continuing`)}try{await(e.repairSkillsFn??(await import(`./repair-skills-DpzyUqvM.mjs`)).repairSkills)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] skill repair sweep failed; continuing`)}}let O=E??_(t,n);!C&&!l(O)&&(u(O,{recursive:!0}),S.info({contentDir:O},`Created content directory`));let k=p(),A=c();{let e=b(C?w:n),t=Date.now(),r=await x(e);r!==`no-drain`&&S.info({event:`start-waited-for-draining-predecessor`,outcome:r,waitedMs:Date.now()-t,drainLockDir:e},r===`released`?`[start] predecessor server finished draining — proceeding`:`[start] predecessor server still draining after wait — proceeding to collide`)}let j=await m({config:t,contentDir:O,projectDir:C?w:n,contentRoot:C?void 0:t.content.dir,port:e.port,host:r,quiet:!1,detectGh:h,tokenStore:k,embeddingsKeyStore:A,mcpTomlEditor:y(),...C?{ephemeral:!0,singleDocRelPath:D,gitEnabled:!1,gitPreflight:()=>({ok:!0,version:`0.0.0`,resolvedPath:`git`,source:`PATH`})}:{},localOpCliArgs:[process.execPath,process.argv[1]],probeHarnessManagedMcpEntry:(e,t)=>v(e,t),idleShutdownMs:a,...e.serverRuntime===void 0?{}:{serverRuntime:e.serverRuntime},...e.bind===void 0?{}:{bind:e.bind},skipAutoInit:!0,idleShutdownHandler:t=>{let n=t;return B(C?z(n,w):n,{log:S,exit:e.idleExit})},log:S,...e.serveContentAssets===void 0?{}:{serveContentAssets:e.serveContentAssets},...e.reactShellDistDir?{reactShellDistDir:e.reactShellDistDir}:{}});return{httpServer:j.httpServer,destroy:j.destroy,lockDir:j.lockDir,contentDir:O,port:j.port,ready:j.ready,degraded:j.degraded}}function H(e){if(e===`browser`||e===`app`)return e;throw new d(`--mode must be 'browser' or 'app'`)}function U(e){return e.OK_CONSOLE_LEVEL!==void 0||e.LOG_LEVEL!==void 0?null:`warn`}function W(e){let t=[`Stopping OpenKnowledge…`,`Saving pending changes and releasing the server lock — this can take a few seconds.`];return e===`SIGINT`&&t.push(`Press Ctrl+C again to force quit.`),t}async function G(e,o){let s=U(process.env);s!==null&&(process.env.OK_CONSOLE_LEVEL=s);let{renderBanner:c}=await import(`./banner-B14xalho.mjs`),{accent:l,dim:u,error:d,warning:f}=await import(`./colors-CpP5E4wV.mjs`),p=process.cwd();process.title=L(p);let m;try{m=t(process.env)}catch(e){throw e instanceof a&&(console.error(d(e.message)),process.exit(78)),e}for(let e of m.diagnostics)console.warn(f(`[config] ${e.message}`));let h=i(e,m.layer),g=m.overrides.some(e=>e.envVar===`OK_BIND`),_=o.bind!==void 0&&o.bind.length>0?o.bind:void 0,v=process.env.HOST,y=v!==void 0&&v.trim()!==``?v:void 0,x=r(h),S=_??(g||y===void 0?[...x.bind]:[y]);N({flagBindSet:_!==void 0,okBindSet:g,hostEnvSet:y!==void 0,fileBindCount:x.bind.length})&&console.warn(f(`[config] HOST=${y} overrides server.bind — dropping the file-configured addresses (${x.bind.join(`, `)}). Use OK_BIND with a space-separated list to keep multiple binds.`));let C=S[0]??`127.0.0.1`,w=S,T=o.externalUrl,D=r(i(h,{server:{bind:w,...T===void 0?{}:{externalUrl:T}}}));if(D.allowExternal&&(!D.loopbackOnly||D.externalUrl)){let e=D.externalUrl??D.bind.join(`, `);console.warn(f([``,`⚠  EXTERNAL ACCESS ENABLED (server.allowExternal) — no server-side authentication.`,`   This server is reachable beyond this machine (${e}). Anyone who can`,`   reach it has FULL control of this knowledge base — sync, publishing, GitHub`,`   credentials, and local operations (clone, sign-in, repo spawn).`,`   Restrict who can reach it at the edge: a Tailscale ACL, a reverse proxy with`,`   auth (Cloudflare Access, oauth2-proxy), or a firewall.`,``].join(`
-`)))}let O=o.port===void 0?void 0:Number(o.port),j=m.overrides.find(e=>e.envVar===`PORT`)?.value,M=O??j??e.server?.port,F=A({explicitDir:o.reactShellDistDir,only:o.only,findBundledDir:k}),I=F.dir;F.missingBundle&&console.warn(`bundled web UI not found — serving /api and /mcp only. Reinstall @inkeep/open-knowledge, or build packages/app in a source checkout.`);let z;try{z=await V({config:e,cwd:p,host:C,port:M,bind:w,...o.serveContentAssets===void 0?{}:{serveContentAssets:o.serveContentAssets},...I?{reactShellDistDir:I}:{},idleThresholdMs:n(o.idleShutdown??D.idleShutdown),serverRuntime:D,...o.singleFile?{singleFile:o.singleFile}:{},...o.projectDir?{projectDir:o.projectDir}:{}})}catch(e){e instanceof R&&(console.error(d(e.message)),process.exit(1));let t=await import(`./src-DRQtLkln.mjs`);if((e instanceof t.GitNotAvailableError||e instanceof t.GitTooOldError)&&process.exit(78),e instanceof t.ExposureConsentError&&(console.error(d(e.message)),process.exit(78)),(e instanceof t.SingleFileNotFoundError||e instanceof t.SingleFileNotAFileError||e instanceof t.SingleFileNotMarkdownError)&&(console.error(d(e.message)),process.exit(1)),J(e,t)){let e=t.resolveLockDir(p),n=null;try{n=await K({readServerLock:()=>t.readServerLock(e),now:Date.now,sleep:e=>E(e),timeoutMs:3e3,pollIntervalMs:50})}catch(e){process.stderr.write(`[start] spawn-or-reuse: lock poll failed (${e instanceof Error?e.message:String(e)}) — falling back to the collision message\n`)}if(n!==null){let[e,...t]=q(n);console.log(l(e));for(let e of t)console.log(u(e));process.exit(0)}}let n=Y(e,p,t);n!==null&&(console.error(d(n)),process.exit(1)),console.error(`${d(`Failed to start:`)} ${e instanceof Error?e.stack??e.message:String(e)}`),process.exit(1)}let B=!1,H=async e=>{if(B)return;B=!0;let[t,...n]=W(e);console.log(l(`\n${t}`));for(let e of n)console.log(u(`  ${e}`));try{await z.destroy()}catch(e){console.error(`${d(`destroy() failed:`)} ${e instanceof Error?e.stack??e.message:String(e)}`),process.exitCode=1}process.exit(process.exitCode??0)};process.once(`SIGINT`,()=>{H(`SIGINT`)}),process.once(`SIGTERM`,()=>{H(`SIGTERM`)});let G=`http://${C.includes(`:`)&&!C.startsWith(`[`)?`[${C}]`:C}:${z.port}`,X=C===`0.0.0.0`||C===`::`?`http://0.0.0.0:${z.port}`:void 0,Z=G;console.log(c({name:`open-knowledge`,version:b,localUrl:Z,networkUrl:X,nextSteps:[`Open the Editor URL in your browser to start editing.`]}));let Q={"shadow-repo":`Version history and branch-switch safety unavailable`,"file-watcher":`External file changes will not sync to the editor`,"head-watcher":`Git branch switches may cause document inconsistency`};z.ready.then(async()=>{if(z.degraded.length>0){console.log();for(let e of z.degraded){let t=Q[e]??`${e} (check server logs for details)`;console.warn(`  ${f(`⚠`)} ${f(e)}: ${u(t)}`)}console.log()}if(P({openBrowser:o.openBrowser!==!1&&D.openBrowser,explicitOn:o.openBrowser!==!1&&h.server?.openBrowser===!0,host:C,isTTY:process.stdout.isTTY===!0,ephemeral:o.singleFile!==void 0,only:o.only,servesUi:I!==void 0})){let{openBrowser:e}=await import(`./open-browser-DD5VHxHl.mjs`);e(Z)}}).catch(e=>{console.error(`  ${d(`Server initialization failed:`)} ${e instanceof Error?e.message:String(e)}`)})}async function K(e){let t=e.now()+e.timeoutMs,n=e.readServerLock();for(;n!==null&&n.draining!==!0&&n.port<=0&&e.now()<t;)await e.sleep(e.pollIntervalMs),n=e.readServerLock();return n===null||n.draining===!0||n.port<=0?null:l(n)&&n.url!==void 0?{url:n.url,kind:n.kind,pid:n.pid,servesUi:!0}:{url:n.url??`http://127.0.0.1:${n.port}`,kind:n.kind,pid:n.pid,servesUi:!1}}function q(e){return[`${e.kind===`mcp-spawned`?`An MCP-spawned OpenKnowledge server is already running on this project`:`OpenKnowledge is already running on this project`} (pid ${e.pid}).`,`  ${e.url}`,"Leaving it running — run `ok stop` first if you want a fresh server."]}function J(e,t){let n=t.ServerLockCollisionError;return n!==void 0&&e instanceof n}function Y(e,t,n){let r=n.ServerLockCollisionError;if(r===void 0||!(e instanceof r))return null;try{let e=n.readServerLock(n.resolveLockDir(t));return e&&e.kind===`mcp-spawned`?"An MCP-spawned server holds this lock; it should release on idle-shutdown (~30 min). Or run `ok stop`.":"OpenKnowledge server is already running on this project — check `ok status` or `ok stop`."}catch{return null}}function X(e){return new u(`start`).description(`Start the OpenKnowledge server (UI + API + MCP + collab on one port)`).option(`-p, --port <port>`,`Server port`,void 0).option(`--bind <address>`,`Bind address (repeatable; default 127.0.0.1 — loopback only)`,(e,t)=>[...t??[],e]).option(`--no-open-browser`,`Do not open the browser after start (interactive loopback starts open it by default)`).option(`--only <module>`,`Serve one module: 'server' (API + MCP only, no shell or browser)`,O).option(`--idle-shutdown <duration>`,`Shut the server down after this long with no connected clients ('off', or a duration like 90s, 30m, 2h; default 30m)`,j).option(`--mode <mode>`,`Force dispatch mode: 'browser' or 'app'`,H).option(`--serve-content-assets`,`Serve content assets from this server (now the default; kept for compatibility)`).option(`--react-shell-dist-dir <path>`,`Serve React shell from <path>`).option(`--single-file <path>`,`No-project ephemeral single-file mode: scope the server to one markdown file (git + MCP off)`).option(`--project-dir <dir>`,`Throwaway project root for --single-file (where ephemeral .ok/ state lives)`).option(`--external-url <url>`,`Canonical external origin clients dial (sets server.externalUrl for this run) — its host joins the Host/Origin allowlists (CORS + external-Host admission). External exposure additionally requires consent (OK_ALLOW_EXTERNAL=1 or server.allowExternal).`,I).action(async t=>{let n=e();if(t.only===`server`&&t.reactShellDistDir!==void 0&&(process.stderr.write(`error: option '--only server' cannot be combined with '--react-shell-dist-dir'
+import{j as e}from"./sleep-DXvB05wr.mjs";import{_c as t,fc as n,gc as r,lc as i,vc as a}from"./src-Dm-FGyIz.mjs";import{Fn as o,a as s,ui as c}from"./src-vJKK8Bgd.mjs";import{r as l}from"./server-lock-DCzdk2Up.mjs";import{b as u,x as d}from"./resolve-project-root-BD_5TDzP.mjs";import{a as f,f as p,i as m,l as h,o as g,r as _,t as v}from"./acp-harness-probe-BJFGLFDN.mjs";import{y}from"./init-xLzJlygq.mjs";import{n as b}from"./constants-CdBtCoQb.mjs";import{spawn as x}from"node:child_process";import{basename as S,resolve as C}from"node:path";import{existsSync as w}from"node:fs";import{rm as T}from"node:fs/promises";import{setTimeout as E}from"node:timers/promises";function D(e,t){return e.bind?.[0]??t.HOST??`127.0.0.1`}function O(e){if(e===`server`)return e;throw new d(`--only must be 'server'`)}function k(e=w){let t=import.meta.dirname??new URL(`.`,import.meta.url).pathname;return[C(t,`public`),C(t,`../../app/dist`),C(t,`../../../app/dist`)].find(t=>e(t))}function A(e){if(e.explicitDir!==void 0)return{dir:e.explicitDir,missingBundle:!1};if(e.only===`server`)return{dir:void 0,missingBundle:!1};let t=e.findBundledDir();return{dir:t,missingBundle:t===void 0}}function j(t){if(t===`off`)return`off`;if(!e.test(t))throw new d(`--idle-shutdown must be 'off' or a duration like 90s, 30m, 2h`);return t}function M(e){return e===`localhost`||e===`::1`||e===`[::1]`||e.startsWith(`127.`)}function N(e){return!e.flagBindSet&&!e.okBindSet&&e.hostEnvSet&&e.fileBindCount>1}function P(e){return!e.openBrowser||e.ephemeral||e.only===`server`||!e.servesUi?!1:(e.explicitOn||M(e.host))&&e.isTTY}function F(e,t){let n;try{n=new URL(t)}catch{throw new d(`${e} is not a valid URL: ${t}`)}if(n.protocol!==`http:`&&n.protocol!==`https:`)throw new d(`${e} must be an http(s) origin (got: ${t})`);return t}function I(e){return F(`--external-url`,e)}function L(e){let t=S(e).replace(/[^\x20-\x7E]/g,``).trim().slice(0,64);return`open-knowledge-server ${t.length>0?t:`unknown`}`}var R=class extends Error{cwd;constructor(e){super("This directory isn't set up yet. Run `ok init` first, then `ok start` again."),this.name=`OkDirMissingError`,this.cwd=e}};function z(e,t,n=e=>T(e,{recursive:!0,force:!0})){return async()=>{try{await e()}finally{try{await n(t)}catch(e){process.stderr.write(`[start] ephemeral temp dir reap failed for ${t}: ${e instanceof Error?e.message:String(e)}\n`)}}}}function B(e,t={}){let n=t.exit??(e=>process.exit(e)),r=t.getActiveHandles??(()=>{let e=process._getActiveHandles;return e?e.call(process):null});return async()=>{let i=!1;try{await e()}catch(e){i=!0,t.log?.error({err:e},`idle-shutdown: destroy failed — exiting anyway`)}finally{let e=null;try{let t=r();if(t!==null){e={};for(let n of t){let t=n?.constructor?.name??`unknown`;e[t]=(e[t]??0)+1}}}catch{e=null}t.log?.info({event:`idle-shutdown-exit`,exitCode:+!!i,openHandles:e??{},handlesAvailable:e!==null},`idle-shutdown: teardown finished — exiting process`),n(+!!i)}}}async function V(e){let{config:t,cwd:n,host:r}=e,i=e.skipAutoInit??!1,a=e.idleThresholdMs===void 0?18e5:e.idleThresholdMs,{existsSync:l,mkdirSync:u}=await import(`node:fs`),{basename:d,dirname:f}=await import(`node:path`),{bootServer:m,getLogger:g,resolveContentDir:_,resolveLockDir:b,waitForServerLockDrain:x}=await import(`./src-D28v5dI-.mjs`),S=e.log??g(`start`),C=e.singleFile!==void 0,w=e.projectDir??n,T=C?s(e.singleFile).canonicalFilePath:void 0,E=T?f(T):void 0,D=T?d(T):void 0;if(!C){if(!i&&!o(n))throw new R(n);let t=process.env.OK_RECLAIM_DISABLE??null,r=e=>{let t=typeof e.event==`string`?e.event:``;(t.endsWith(`-failed`)||t.endsWith(`-error`)||t.endsWith(`-missing`))&&S.warn({event:e},`[start] reclaim sweep reported a problem`)};try{(e.repairMcpConfigsFn??(await import(`./repair-mcp-configs-B1Sn-_ip.mjs`)).repairMcpConfigs)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] mcp-config repair sweep failed; continuing`)}try{(e.repairLaunchJsonFn??(await import(`./repair-launch-json-D6Vjzoqv.mjs`)).repairLaunchJson)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] launch.json repair sweep failed; continuing`)}try{await(e.repairSkillsFn??(await import(`./repair-skills-Bn47U59J.mjs`)).repairSkills)({projectDir:n,reclaimDisableEnv:t,logger:r})}catch(e){S.warn({err:e},`[start] skill repair sweep failed; continuing`)}}let O=E??_(t,n);!C&&!l(O)&&(u(O,{recursive:!0}),S.info({contentDir:O},`Created content directory`));let k=p(),A=c();{let e=b(C?w:n),t=Date.now(),r=await x(e);r!==`no-drain`&&S.info({event:`start-waited-for-draining-predecessor`,outcome:r,waitedMs:Date.now()-t,drainLockDir:e},r===`released`?`[start] predecessor server finished draining — proceeding`:`[start] predecessor server still draining after wait — proceeding to collide`)}let j=await m({config:t,contentDir:O,projectDir:C?w:n,contentRoot:C?void 0:t.content.dir,port:e.port,host:r,quiet:!1,detectGh:h,tokenStore:k,embeddingsKeyStore:A,mcpTomlEditor:y(),...C?{ephemeral:!0,singleDocRelPath:D,gitEnabled:!1,gitPreflight:()=>({ok:!0,version:`0.0.0`,resolvedPath:`git`,source:`PATH`})}:{},localOpCliArgs:[process.execPath,process.argv[1]],probeHarnessManagedMcpEntry:(e,t)=>v(e,t),idleShutdownMs:a,...e.serverRuntime===void 0?{}:{serverRuntime:e.serverRuntime},...e.bind===void 0?{}:{bind:e.bind},skipAutoInit:!0,idleShutdownHandler:t=>{let n=t;return B(C?z(n,w):n,{log:S,exit:e.idleExit})},log:S,...e.serveContentAssets===void 0?{}:{serveContentAssets:e.serveContentAssets},...e.reactShellDistDir?{reactShellDistDir:e.reactShellDistDir}:{}});return{httpServer:j.httpServer,destroy:j.destroy,lockDir:j.lockDir,contentDir:O,port:j.port,ready:j.ready,degraded:j.degraded}}function H(e){if(e===`browser`||e===`app`)return e;throw new d(`--mode must be 'browser' or 'app'`)}function U(e){return e.OK_CONSOLE_LEVEL!==void 0||e.LOG_LEVEL!==void 0?null:`warn`}function W(e){let t=[`Stopping OpenKnowledge…`,`Saving pending changes and releasing the server lock — this can take a few seconds.`];return e===`SIGINT`&&t.push(`Press Ctrl+C again to force quit.`),t}async function G(e,o){let s=U(process.env);s!==null&&(process.env.OK_CONSOLE_LEVEL=s);let{renderBanner:c}=await import(`./banner-B14xalho.mjs`),{accent:l,dim:u,error:d,warning:f}=await import(`./colors-CpP5E4wV.mjs`),p=process.cwd();process.title=L(p);let m;try{m=a(process.env)}catch(e){throw e instanceof r&&(console.error(d(e.message)),process.exit(78)),e}for(let e of m.diagnostics)console.warn(f(`[config] ${e.message}`));let h=t(e,m.layer),g=m.overrides.some(e=>e.envVar===`OK_BIND`),_=o.bind!==void 0&&o.bind.length>0?o.bind:void 0,v=process.env.HOST,y=v!==void 0&&v.trim()!==``?v:void 0,x=n(h),S=_??(g||y===void 0?[...x.bind]:[y]);N({flagBindSet:_!==void 0,okBindSet:g,hostEnvSet:y!==void 0,fileBindCount:x.bind.length})&&console.warn(f(`[config] HOST=${y} overrides server.bind — dropping the file-configured addresses (${x.bind.join(`, `)}). Use OK_BIND with a space-separated list to keep multiple binds.`));let C=S[0]??`127.0.0.1`,w=S,T=o.externalUrl,D=n(t(h,{server:{bind:w,...T===void 0?{}:{externalUrl:T}}}));if(D.allowExternal&&(!D.loopbackOnly||D.externalUrl)){let e=D.externalUrl??D.bind.join(`, `);console.warn(f([``,`⚠  EXTERNAL ACCESS ENABLED (server.allowExternal) — no server-side authentication.`,`   This server is reachable beyond this machine (${e}). Anyone who can`,`   reach it has FULL control of this knowledge base — sync, publishing, GitHub`,`   credentials, and local operations (clone, sign-in, repo spawn).`,`   Restrict who can reach it at the edge: a Tailscale ACL, a reverse proxy with`,`   auth (Cloudflare Access, oauth2-proxy), or a firewall.`,``].join(`
+`)))}let O=o.port===void 0?void 0:Number(o.port),j=m.overrides.find(e=>e.envVar===`PORT`)?.value,M=O??j??e.server?.port,F=A({explicitDir:o.reactShellDistDir,only:o.only,findBundledDir:k}),I=F.dir;F.missingBundle&&console.warn(`bundled web UI not found — serving /api and /mcp only. Reinstall @inkeep/open-knowledge, or build packages/app in a source checkout.`);let z;try{z=await V({config:e,cwd:p,host:C,port:M,bind:w,...o.serveContentAssets===void 0?{}:{serveContentAssets:o.serveContentAssets},...I?{reactShellDistDir:I}:{},idleThresholdMs:i(o.idleShutdown??D.idleShutdown),serverRuntime:D,...o.singleFile?{singleFile:o.singleFile}:{},...o.projectDir?{projectDir:o.projectDir}:{}})}catch(e){e instanceof R&&(console.error(d(e.message)),process.exit(1));let t=await import(`./src-D28v5dI-.mjs`);if((e instanceof t.GitNotAvailableError||e instanceof t.GitTooOldError)&&process.exit(78),e instanceof t.ExposureConsentError&&(console.error(d(e.message)),process.exit(78)),(e instanceof t.SingleFileNotFoundError||e instanceof t.SingleFileNotAFileError||e instanceof t.SingleFileNotMarkdownError)&&(console.error(d(e.message)),process.exit(1)),J(e,t)){let e=t.resolveLockDir(p),n=null;try{n=await K({readServerLock:()=>t.readServerLock(e),now:Date.now,sleep:e=>E(e),timeoutMs:3e3,pollIntervalMs:50})}catch(e){process.stderr.write(`[start] spawn-or-reuse: lock poll failed (${e instanceof Error?e.message:String(e)}) — falling back to the collision message\n`)}if(n!==null){let[e,...t]=q(n);console.log(l(e));for(let e of t)console.log(u(e));process.exit(0)}}let n=Y(e,p,t);n!==null&&(console.error(d(n)),process.exit(1)),console.error(`${d(`Failed to start:`)} ${e instanceof Error?e.stack??e.message:String(e)}`),process.exit(1)}let B=!1,H=async e=>{if(B)return;B=!0;let[t,...n]=W(e);console.log(l(`\n${t}`));for(let e of n)console.log(u(`  ${e}`));try{await z.destroy()}catch(e){console.error(`${d(`destroy() failed:`)} ${e instanceof Error?e.stack??e.message:String(e)}`),process.exitCode=1}process.exit(process.exitCode??0)};process.once(`SIGINT`,()=>{H(`SIGINT`)}),process.once(`SIGTERM`,()=>{H(`SIGTERM`)});let G=`http://${C.includes(`:`)&&!C.startsWith(`[`)?`[${C}]`:C}:${z.port}`,X=C===`0.0.0.0`||C===`::`?`http://0.0.0.0:${z.port}`:void 0,Z=G;console.log(c({name:`open-knowledge`,version:b,localUrl:Z,networkUrl:X,nextSteps:[`Open the Editor URL in your browser to start editing.`]}));let Q={"shadow-repo":`Version history and branch-switch safety unavailable`,"file-watcher":`External file changes will not sync to the editor`,"head-watcher":`Git branch switches may cause document inconsistency`};z.ready.then(async()=>{if(z.degraded.length>0){console.log();for(let e of z.degraded){let t=Q[e]??`${e} (check server logs for details)`;console.warn(`  ${f(`⚠`)} ${f(e)}: ${u(t)}`)}console.log()}if(P({openBrowser:o.openBrowser!==!1&&D.openBrowser,explicitOn:o.openBrowser!==!1&&h.server?.openBrowser===!0,host:C,isTTY:process.stdout.isTTY===!0,ephemeral:o.singleFile!==void 0,only:o.only,servesUi:I!==void 0})){let{openBrowser:e}=await import(`./open-browser-CB0sbYH4.mjs`);e(Z)}}).catch(e=>{console.error(`  ${d(`Server initialization failed:`)} ${e instanceof Error?e.message:String(e)}`)})}async function K(e){let t=e.now()+e.timeoutMs,n=e.readServerLock();for(;n!==null&&n.draining!==!0&&n.port<=0&&e.now()<t;)await e.sleep(e.pollIntervalMs),n=e.readServerLock();return n===null||n.draining===!0||n.port<=0?null:l(n)&&n.url!==void 0?{url:n.url,kind:n.kind,pid:n.pid,servesUi:!0}:{url:n.url??`http://127.0.0.1:${n.port}`,kind:n.kind,pid:n.pid,servesUi:!1}}function q(e){return[`${e.kind===`mcp-spawned`?`An MCP-spawned OpenKnowledge server is already running on this project`:`OpenKnowledge is already running on this project`} (pid ${e.pid}).`,`  ${e.url}`,"Leaving it running — run `ok stop` first if you want a fresh server."]}function J(e,t){let n=t.ServerLockCollisionError;return n!==void 0&&e instanceof n}function Y(e,t,n){let r=n.ServerLockCollisionError;if(r===void 0||!(e instanceof r))return null;try{let e=n.readServerLock(n.resolveLockDir(t));return e&&e.kind===`mcp-spawned`?"An MCP-spawned server holds this lock; it should release on idle-shutdown (~30 min). Or run `ok stop`.":"OpenKnowledge server is already running on this project — check `ok status` or `ok stop`."}catch{return null}}function X(e){return new u(`start`).description(`Start the OpenKnowledge server (UI + API + MCP + collab on one port)`).option(`-p, --port <port>`,`Server port`,void 0).option(`--bind <address>`,`Bind address (repeatable; default 127.0.0.1 — loopback only)`,(e,t)=>[...t??[],e]).option(`--no-open-browser`,`Do not open the browser after start (interactive loopback starts open it by default)`).option(`--only <module>`,`Serve one module: 'server' (API + MCP only, no shell or browser)`,O).option(`--idle-shutdown <duration>`,`Shut the server down after this long with no connected clients ('off', or a duration like 90s, 30m, 2h; default 30m)`,j).option(`--mode <mode>`,`Force dispatch mode: 'browser' or 'app'`,H).option(`--serve-content-assets`,`Serve content assets from this server (now the default; kept for compatibility)`).option(`--react-shell-dist-dir <path>`,`Serve React shell from <path>`).option(`--single-file <path>`,`No-project ephemeral single-file mode: scope the server to one markdown file (git + MCP off)`).option(`--project-dir <dir>`,`Throwaway project root for --single-file (where ephemeral .ok/ state lives)`).option(`--external-url <url>`,`Canonical external origin clients dial (sets server.externalUrl for this run) — its host joins the Host/Origin allowlists (CORS + external-Host admission). External exposure additionally requires consent (OK_ALLOW_EXTERNAL=1 or server.allowExternal).`,I).action(async t=>{let n=e();if(t.only===`server`&&t.reactShellDistDir!==void 0&&(process.stderr.write(`error: option '--only server' cannot be combined with '--react-shell-dist-dir'
 `),process.exit(2)),t.mode===`app`){let e=[];if(t.port!==void 0&&e.push(`--port`),t.bind!==void 0&&e.push(`--bind`),t.only!==void 0&&e.push(`--only`),t.idleShutdown!==void 0&&e.push(`--idle-shutdown`),t.openBrowser===!1&&e.push(`--no-open-browser`),t.externalUrl!==void 0&&e.push(`--external-url`),e.length>0){let t=process.env.OK_LOG_LEVEL??`info`;(t===`debug`||t===`trace`)&&console.error(`--mode=app: ignoring ${e.join(`, `)}`)}let n=m(_());if(n.available){f({spawn:x},n);return}console.error(g(n.reason)),process.exit(1)}await G(n,t)})}export{B as S,P as _,W as a,Y as b,I as c,k as d,D as f,G as g,A as h,q as i,j as l,U as m,V as n,M as o,K as p,L as r,J as s,R as t,O as u,N as v,z as x,X as y};
-//# sourceMappingURL=start-Cxm5f8Vn.mjs.map
+//# sourceMappingURL=start-7do63YHY.mjs.map

package/dist/start-B5Kxjkxg.mjs

@@ -0,0 +1 @@
+import{d as e,f as t,n,y as r}from"./start-7do63YHY.mjs";export{n as bootStartServer,e as resolveBundledReactShellDir,t as resolveHost,r as startCommand};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/open-knowledge",
-  "version": "0.59.0-beta.27",
+  "version": "0.59.0-beta.29",
   "description": "Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor",
   "keywords": [
     "knowledge-base",
@@ -71,10 +71,10 @@
     "ajv-formats": "^3.0.1",
     "tsdown": "^0.21.7",
     "typescript": "^5.9.3",
-    "@inkeep/open-knowledge-app": "0.59.0-beta.27",
-    "@inkeep/open-knowledge-server": "0.59.0-beta.27",
-    "@inkeep/open-knowledge-native-config": "0.0.0",
-    "@inkeep/open-knowledge-core": "0.59.0-beta.27"
+    "@inkeep/open-knowledge-app": "0.59.0-beta.29",
+    "@inkeep/open-knowledge-server": "0.59.0-beta.29",
+    "@inkeep/open-knowledge-core": "0.59.0-beta.29",
+    "@inkeep/open-knowledge-native-config": "0.0.0"
   },
   "scripts": {
     "build:cli": "rm -rf dist && tsdown",

package/dist/constants-DSNC3wSl.mjs

@@ -1,2 +0,0 @@
-import"./src-UoW_X1C6.mjs";var e=`0.59.0-beta.27`;const t=`config.yml`,n=e;export{n,t};
-//# sourceMappingURL=constants-DSNC3wSl.mjs.map

package/dist/git-handle-DmslHvlR.mjs

@@ -1 +0,0 @@
-import{i as e}from"./git-handle-v3HRk0k0.mjs";export{e as createGitInstance};

package/dist/init-CcwKgR9R.mjs

@@ -1 +0,0 @@
-import"./src-DC0dXNgq.mjs";import{g as e}from"./init-zTOfz-Hi.mjs";export{e as runInit};

package/dist/loader-Bbx1ChcV.mjs

@@ -1 +0,0 @@
-import{n as e}from"./loader-ChVnFNzU.mjs";export{e as loadConfig};

package/dist/md-manager-7voOTrzM.mjs

@@ -1,2 +0,0 @@
-import{Yo as e,co as t,es as n}from"./src-UoW_X1C6.mjs";const r=new t({extensions:e,deriveStructuralFreshness:!0}),i=n(e);export{i as n,r as t};
-//# sourceMappingURL=md-manager-7voOTrzM.mjs.map

package/dist/preview-DcSm8SQu.mjs

@@ -1 +0,0 @@
-import{n as e,t}from"./preview-CIkhwrjV.mjs";export{t as formatPreviewBlock,e as previewContent};

package/dist/public/assets/FeedbackForm-DfjQFt_o.js

@@ -1 +0,0 @@
-import{t as e}from"./index-DVAzmNmM.js";export{e as FeedbackForm};

package/dist/public/assets/ManagedArtifactProperties-DkmtIVIZ.js

@@ -1 +0,0 @@
-import{t as e}from"./ManagedArtifactProperties-CPsIQVz8.js";export{e as ManagedArtifactProperties};

package/dist/public/assets/i18n-DyGGRo1x.js

@@ -1 +0,0 @@
-import"./dist-Cjt7VASv2.js";import{t as e}from"./dist-BgXDUIPy.js";import{t}from"./messages-W4EQLozB.js";e.load(`en`,t.messages),e.activate(`en`);

package/dist/repair-skills-DpzyUqvM.mjs

@@ -1 +0,0 @@
-import{t as e}from"./repair-skills-DTu-V4yJ.mjs";export{e as repairSkills};

package/dist/server-lock-BZd8WJ5h.mjs

@@ -1 +0,0 @@
-import{i as e,o as t,s as n}from"./server-lock-D3OwE6nq.mjs";export{e as markServerLockDraining,t as releaseServerLock,n as updateServerLockPort};

package/dist/src-BgcwWUW8.mjs

@@ -1 +0,0 @@
-import"./src-UoW_X1C6.mjs";import"./resolve-project-root-CjlK19bg.mjs";import"./src-D81I39eV.mjs";import"./acp-harness-probe-CHDRVQpq.mjs";import"./init-zTOfz-Hi.mjs";import{n as e}from"./loader-ChVnFNzU.mjs";import"./skill-teardown-dynTQKdJ.mjs";import"./preview-CIkhwrjV.mjs";import"./mcp-migrate-event-9DFnNzHa.mjs";export{e as loadConfig};

package/dist/start-CZTOPPJD.mjs

@@ -1 +0,0 @@
-import{d as e,f as t,n,y as r}from"./start-Cxm5f8Vn.mjs";export{n as bootStartServer,e as resolveBundledReactShellDir,t as resolveHost,r as startCommand};