@inkeep/open-knowledge 0.63.0-beta.12 → 0.63.0-beta.14

package/dist/{acp-harness-probe-DNTafWkM.mjs → acp-harness-probe-DRbySBVr.mjs}

@@ -1,7 +1,7 @@
-import{pt as e}from"./sleep-BZo73vVn.mjs";import{Ri as t}from"./src-BbDOpWQ2.mjs";import{F as n,M as r,N as i}from"./fs-traced-Cu6kXy54.mjs";import{b as a,g as o,m as s,p as c,s as l}from"./resolve-project-root-BOhfHVtL.mjs";import{S as ee,T as u,d as te,o as d,v as f,x as ne}from"./init-CUwUUK6I.mjs";import{t as p}from"./is-object-Bw0-z8qH.mjs";import{execFileSync as m,spawn as h}from"node:child_process";import{basename as re,dirname as g,join as _,resolve as ie,win32 as v}from"node:path";import{existsSync as y,mkdirSync as b,readFileSync as x,readdirSync as ae,statSync as oe,writeFileSync as se}from"node:fs";import{homedir as S}from"node:os";var C=e();const w=`open-knowledge`;function T(e){try{e()}catch{}}var E=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(w,e).getPassword()}catch(t){return T(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return T(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return T(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(w,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(w,e).deletePassword()}catch{}}},D=class{backend=`file`;authFile;constructor(e){this.authFile=e??_(S(),`.ok`,`auth.yml`)}read(){if(!y(this.authFile))return{};try{return(0,C.parse)(x(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=g(this.authFile);y(t)||b(t,{recursive:!0,mode:448}),se(this.authFile,(0,C.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},ce=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function O(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(w,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
+import{pt as e}from"./sleep-BZo73vVn.mjs";import{Ri as t}from"./src-DifwZnFy.mjs";import{F as n,M as r,N as i}from"./fs-traced-Cu6kXy54.mjs";import{b as a,g as o,m as s,p as c,s as l}from"./resolve-project-root-BmEYZjtQ.mjs";import{S as ee,T as u,d as te,o as d,v as f,x as ne}from"./init-44bY7bDu.mjs";import{t as p}from"./is-object-Bw0-z8qH.mjs";import{execFileSync as m,spawn as h}from"node:child_process";import{basename as re,dirname as g,join as _,resolve as ie,win32 as v}from"node:path";import{existsSync as y,mkdirSync as b,readFileSync as x,readdirSync as ae,statSync as oe,writeFileSync as se}from"node:fs";import{homedir as S}from"node:os";var C=e();const w=`open-knowledge`;function T(e){try{e()}catch{}}var E=class{backend=`keyring`;constructor(e){this.onKeychainRead=e}async get(e){let{Entry:t}=await import(`@napi-rs/keyring`),n;try{n=new t(w,e).getPassword()}catch(t){return T(()=>this.onKeychainRead?.({kind:`read-error`,host:e,error:t instanceof Error?t.name:`unknown`})),null}if(n==null)return T(()=>this.onKeychainRead?.({kind:`absent`,host:e})),null;try{return JSON.parse(n)}catch{return T(()=>this.onKeychainRead?.({kind:`corrupt-entry`,host:e,error:`corrupt-entry`})),null}}async set(e,t,n,r){let{Entry:i}=await import(`@napi-rs/keyring`),a=new i(w,e),o={login:t,token:n,...r};a.setPassword(JSON.stringify(o))}async clear(e){let{Entry:t}=await import(`@napi-rs/keyring`);try{new t(w,e).deletePassword()}catch{}}},D=class{backend=`file`;authFile;constructor(e){this.authFile=e??_(S(),`.ok`,`auth.yml`)}read(){if(!y(this.authFile))return{};try{return(0,C.parse)(x(this.authFile,`utf-8`))??{}}catch(e){let t=e instanceof Error?e.message:`unknown error`;return process.stderr.write(`[auth] Failed to parse ${this.authFile}: ${t}. Starting with empty credentials.\n`),{}}}write(e){let t=g(this.authFile);y(t)||b(t,{recursive:!0,mode:448}),se(this.authFile,(0,C.stringify)(e),{mode:384})}async get(e){return this.read()[e]??null}async set(e,t,n,r){let i=this.read();i[e]={login:t,token:n,...r},this.write(i)}async clear(e){let t=this.read();delete t[e],this.write(t)}},ce=class{backend=`keyring`;constructor(e,t){this.keychain=e,this.file=t}async get(e){let t=await this.keychain.get(e);if(t!=null)return t;let n=await this.file.get(e);if(n==null)return null;try{await this.keychain.set(e,n.login,n.token,{gitProtocol:n.gitProtocol,name:n.name,email:n.email}),await this.file.clear(e),process.stderr.write(`[auth] migrated ${e} credential from ~/.ok/auth.yml to the OS keychain\n`)}catch{}return n}set(e,t,n,r){return this.keychain.set(e,t,n,r)}async clear(e){await this.keychain.clear(e),await this.file.get(e)!=null&&await this.file.clear(e)}};async function O(e,t){try{let{Entry:n}=await import(`@napi-rs/keyring`);return new n(w,`__probe__`),process.stderr.write(`[auth] token storage: OS keychain
 `),T(()=>t?.onBackendSelected?.({backend:`keyring`})),new ce(new E(t?.onKeychainRead),new D(e))}catch(n){let r=n instanceof Error?`${n.name}: ${n.message}`:String(n);return process.stderr.write(`[auth] token storage: file (~/.ok/auth.yml) — OS keychain unavailable: ${r}\n`),T(()=>t?.onBackendSelected?.({backend:`file`,reason:r})),new D(e)}}function k(e){let t=null;return function(){if(t)return t;let n=2e3;return t=(async()=>{let t=null,r=new Promise(r=>{t=setTimeout(()=>{process.stderr.write(`[auth] token storage: keyring init exceeded ${n}ms; falling back to file (~/.ok/auth.yml)\n`),r(new D(e))},n)});try{return await Promise.race([O(e),r])}catch{return new D(e)}finally{t!==null&&clearTimeout(t)}})(),t}}function le(e){let t=k(e);return{async get(e){let n=await(await t()).get(e);return n===null?null:{token:n.token,login:n.login}}}}function ue(e){let t=k(e);return{backend:`file`,async get(e){return(await t()).get(e)},async set(e,n,r,i){return(await t()).set(e,n,r,i)},async clear(e){return(await t()).clear(e)}}}async function de(e,t){let n=[],r=new D(t);await r.get(e)!=null&&(await r.clear(e),n.push(`file`));let i;try{let{Entry:t}=await import(`@napi-rs/keyring`);new t(w,`__probe__`);let r,a=await new E(e=>{e.kind===`read-error`&&(r=e.error??`read-error`)}).get(e);if(r!==void 0)i=r;else if(a!=null)try{new t(w,e).deletePassword(),n.push(`keychain`)}catch(e){i=e instanceof Error?e.name:`delete-error`}}catch{}return{touched:n,keychainError:i}}const fe=[`/opt/homebrew/bin/gh`,`/usr/local/bin/gh`,`/opt/local/bin/gh`,`/snap/bin/gh`,`/usr/bin/gh`],A={encoding:`utf-8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0};function j(e,t={}){let{login:n}=t,r=t._exec??m,i=M(t._fileExists??y),a=e?[`--hostname`,e]:[];if(n){let e=N(r,i,[`auth`,`token`,...a,`--user`,n]);if(e)return{available:!0,token:e,resolvedLogin:n,fallback:!1}}let o=N(r,i,[`auth`,`token`,...a]);return o?n?{available:!0,token:o,fallback:!0}:{available:!0,token:o}:{available:!1}}function M(e){return[`gh`,...fe.filter(e)]}function N(e,t,n){for(let r of t)try{let t=e(r,n,A).toString().trim();if(t.length>0)return t}catch{}}function P(e,t={}){let n=t._exec??m,r=M(t._fileExists??y),i=[`auth`,`status`,...e?[`--hostname`,e]:[]],a=N(n,r,[...i,`--json`,`hosts`]);if(a!==void 0){let t=I(a,e);if(t)return t}let o=N(n,r,i);if(o!==void 0){let e=V(o);if(e.length>0)return e}}function F(e){return typeof e==`object`&&e&&!Array.isArray(e)?e:void 0}function I(e,t){let n;try{n=JSON.parse(e)}catch{return}let r=F(F(n)?.hosts);if(!r||t!==void 0&&r[t]===void 0)return;let i=t===void 0?Object.values(r):[r[t]],a=[];for(let e of i){if(!Array.isArray(e))return;for(let t of e){let e=F(t);if(!e)continue;let n=e.login;typeof n!=`string`||n.length===0||a.push({login:n,active:e.active===!0})}}return a}const L=/Logged in to \S+ account (\S+) \(/,R=/(?:Failed to log in to|Timeout trying to log in to) \S+/,z=/^\s*-\s*Active account:\s*true\s*$/,B=/\u001b\[[0-9;]*m/g;function V(e){let t=[],n;for(let r of e.split(`
 `)){let e=r.replace(B,``),i=L.exec(e)?.[1];if(i){n={login:i,active:!1},t.push(n);continue}if(R.test(e)){n=void 0;continue}n&&z.test(e)&&(n.active=!0)}return t}function pe(e){let t={...e};return delete t.ELECTRON_RUN_AS_NODE,t}function H(e){let t=e?.code;return t===`ENOENT`||t===`EACCES`||t===`EPERM`?{ok:!1,reason:`not-installed`}:{ok:!1,reason:`spawn-error`}}function U(e){return t({detached:!0,stdio:`ignore`,shell:!1,env:pe(e)})}function W(e,t,n={}){let r=(n.spawn??h)(e,[...t],U(n.env??process.env));return r.unref(),r}function me(e,t,n={}){let r=n.spawn??h,i=n.timeoutMs??2e3;return new Promise(a=>{let o=!1,s=e=>{o||(o=!0,a(e))},c=setTimeout(()=>s({ok:!1,reason:`timeout`}),i);try{let i=r(e,[...t],U(n.env??process.env));i.once(`error`,e=>{clearTimeout(c),s(H(e))}),i.once(`spawn`,()=>{clearTimeout(c),s({ok:!0})});try{i.unref()}catch{}}catch(e){clearTimeout(c),s(H(e))}})}const G=`com.inkeep.open-knowledge`,K=`OpenKnowledge.app`,q=`/Applications/${K}`;function he(){return{platform:process.platform,env:process.env,execPath:process.execPath,isTTY:process.stdout.isTTY,statSync:e=>{try{return oe(e,{throwIfNoEntry:!1})??null}catch{return null}}}}function ge(e){if(e.env.ELECTRON_RUN_AS_NODE===`1`){let t=/(.+?\.app)\/Contents\/MacOS\//.exec(e.execPath);if(t?.[1])return t[1]}if(J(e,q))return q;let t=_(e.homeDir??S(),`Applications`,K);return J(e,t)?t:null}function J(e,t){return Y(e,_(t,`Contents`,`MacOS`,`OpenKnowledge`))}function Y(e,t){try{let n=e.statSync(t);return n&&typeof n.isFile==`function`?n.isFile():!1}catch{return!1}}const _e=[`@inkeepopen-knowledge-desktop`,`OpenKnowledge`];function ve(e){if(e.env.ELECTRON_RUN_AS_NODE===`1`&&/\\OpenKnowledge\.exe$/i.test(e.execPath))return e.execPath;let t=e.env.LOCALAPPDATA;if(t)for(let n of _e){let r=v.join(t,`Programs`,n,`OpenKnowledge.exe`);if(Y(e,r))return r}return null}function ye(e){if(e.env.ELECTRON_RUN_AS_NODE===`1`&&e.execPath.endsWith(`/openknowledge`))return e.execPath;let t=`/opt/OpenKnowledge/openknowledge`;return Y(e,t)?t:null}function be(e){if(e.env.OK_FORCE_BROWSER===`1`)return{available:!1,reason:`force-browser`};if(e.platform!==`darwin`&&e.platform!==`win32`&&e.platform!==`linux`)return{available:!1,reason:`unsupported-platform`};let t;try{t=e.platform===`darwin`?ge(e):e.platform===`win32`?ve(e):ye(e)}catch{return{available:!1,reason:`stat-error`}}return t?e.env.OK_FORCE_DESKTOP===`1`?{available:!0,reason:`available`,bundlePath:t}:!(e.isTTY===!0||e.platform===`win32`&&e.isTTY===void 0&&!e.env.CI)||e.env.SSH_CONNECTION||e.env.SSH_TTY||e.platform===`linux`&&!e.env.DISPLAY&&!e.env.WAYLAND_DISPLAY?{available:!1,reason:`headless`,bundlePath:t}:{available:!0,reason:`available`,bundlePath:t}:{available:!1,reason:`no-bundle`}}function xe(e,t){let n=e.log??(e=>console.error(e)),r=e.platform??process.platform;if(n("Launching OpenKnowledge desktop (use `ok start` for the browser server, or `OK_FORCE_BROWSER=1` to always skip)"),r===`darwin`){W(`open`,[`-b`,G],{spawn:e.spawn});return}let i=t?.bundlePath;if(!i){n(`Desktop launch skipped: no resolved desktop executable (caller bug).`);return}W(i,[],{spawn:e.spawn})}function Se(e=`no-bundle`){switch(e){case`no-bundle`:return`Desktop app not found (checked the standard install locations for this OS). Install it from https://openknowledge.ai/download, or omit --mode for browser mode.`;case`darwin-only`:case`unsupported-platform`:return`Desktop app is not available on this platform. Use --mode=browser, or omit --mode for the server fallback.`;case`headless`:return`Desktop launch is gated in headless contexts (CI, SSH, non-TTY stdout). Set OK_FORCE_DESKTOP=1 to override, or use --mode=browser.`;case`force-browser`:return`OK_FORCE_BROWSER=1 is set — desktop dispatch is disabled. Unset it to use --mode=app.`;case`stat-error`:return`Failed to inspect the desktop install (filesystem error). Check permissions or use --mode=browser.`;case`available`:return`Desktop app appears available but launch dispatch did not fire (caller bug).`}}function X(e,t){let n=ie(e),r=t===void 0?a():a({home:t,env:{}});return{cwd:n,bridgePath:l.pi.projectConfigPath?.(n)??``,trustPath:_(r,`trust.json`)}}function Z(e,t,n){let r=d(l.pi,e,n,t);if(r.kind===`absent`)return{state:`absent`,text:null};if(r.kind!==`present`)return{state:`unreadable`,text:null};let i=r.entry,a=Array.isArray(i.args)&&typeof i.args[0]==`string`?i.args[0]:null;return s(i)?{state:`own-current`,text:a}:ee(i)?{state:`own-stale`,text:a}:{state:`foreign`,text:a}}function Q(e,t){let n;try{n=x(e,`utf-8`)}catch(e){let t=e.code;return t===`ENOENT`||t===`ENOTDIR`?{state:`untrusted`,entries:{},trailingNewline:!1}:{state:`unreadable`,entries:null,trailingNewline:!1}}if(n.trim()===``)return{state:`untrusted`,entries:{},trailingNewline:!1};let r;try{r=JSON.parse(n)}catch{return{state:`unreadable`,entries:null,trailingNewline:!1}}return p(r)?{state:r[t]===!0?`trusted`:`untrusted`,entries:r,trailingNewline:n.endsWith(`
 `)}:{state:`unreadable`,entries:null,trailingNewline:!1}}function Ce(e,t){let n=X(e,t),r=Z(n.cwd,n.bridgePath,t).state,i=Q(n.trustPath,n.cwd).state;return{...n,bridge:r,trust:i,bridgeLoadable:(r===`own-current`||r===`own-stale`)&&i===`trusted`,otherExtensions:$(n.bridgePath).names}}function $(e){let t=g(e),n=re(e);try{return{names:ae(t).filter(e=>e!==n&&e.endsWith(`.ts`)).sort(),verified:!0}}catch(e){let t=e.code;return{names:[],verified:t===`ENOENT`||t===`ENOTDIR`}}}async function we(e,t={mode:`published`},n){let r=X(e,n),i=Z(r.cwd,r.bridgePath,n);if(i.state===`foreign`)return{...r,ok:!1,bridge:`refused-foreign`,trust:`skipped`};if(i.state===`unreadable`)return{...r,ok:!1,bridge:`refused-unreadable`,trust:`skipped`};let a;if(i.state===`absent`)a=`written`;else{let e;try{e=ne(t)}catch{e=void 0}a=e!==void 0&&i.text===e?`unchanged`:`refreshed`}if(a!==`unchanged`){let e=f(l.pi,r.cwd,t,n,r.bridgePath);if(e.action!==`written`&&e.action!==`overwritten`)return{...r,ok:!1,bridge:`failed`,trust:`skipped`,error:e.error??`bridge write ${e.action}`}}let o=await Te(r.trustPath,r.cwd);return{...r,ok:o.action===`already-trusted`||o.action===`added`,bridge:a,trust:o.action,...o.error===void 0?{}:{error:o.error}}}async function Te(e,t){try{b(g(e),{recursive:!0})}catch(e){return{action:`failed`,error:e instanceof Error?e.message:String(e)}}let i={action:`added`};try{await r(`${e}.lock`,async()=>{let r=Q(e,t);if(r.state===`trusted`){i.action=`already-trusted`;return}if(r.entries===null){i.action=`refused-unreadable`;return}let a={...r.entries,[t]:!0},o=JSON.stringify(a,null,2)+(r.trailingNewline?`
 `:``),s=u(e);n(e,o,s===void 0?void 0:{mode:s}),i.action=`added`})}catch(e){return{action:`failed`,error:e instanceof Error?e.message:String(e)}}return i.action===`refused-unreadable`?{action:`refused-unreadable`,error:`trust store is not a readable JSON object`}:{action:i.action}}function Ee(e,t){let r=X(e,t),a=$(r.bridgePath);if(!a.verified)return{action:`kept-unverified`,error:`could not read the Pi extensions folder`};if(a.names.length>0)return{action:`kept-shared`};if(!y(r.trustPath))return{action:`not-present`};let o={action:`removed`};try{i(`${r.trustPath}.lock`,()=>{let e=Q(r.trustPath,r.cwd);if(e.entries===null){o.action=e.state===`unreadable`?`refused-unreadable`:`not-present`;return}if(!(r.cwd in e.entries)){o.action=`not-present`;return}let t={...e.entries};delete t[r.cwd];let i=JSON.stringify(t,null,2)+(e.trailingNewline?`
 `:``),a=u(r.trustPath);n(r.trustPath,i,a===void 0?void 0:{mode:a}),o.action=`removed`})}catch(e){return{action:`failed`,error:e instanceof Error?e.message:String(e)}}return o.action===`refused-unreadable`?{action:`refused-unreadable`,error:`trust store is not a readable JSON object`}:{action:o.action}}function De(e){return e===`opencode`?o:c}function Oe(e,t,n){let r=l[e],i=De(e),a=[],o=r.projectConfigPath?.(t);o!==void 0&&a.push({scope:`project`,configPath:o});try{a.push({scope:`user`,configPath:r.configPath(t,n)})}catch{}for(let o of a){let a=te(r,t,n,o.configPath);if(a!==null&&i(a))return{editorId:e,scope:o.scope,configPath:o.configPath}}return null}export{ue as _,G as a,xe as c,me as d,j as f,le as g,O as h,Ee as i,Se as l,de as m,we as n,he as o,P as p,Ce as r,be as s,Oe as t,W as u};
-//# sourceMappingURL=acp-harness-probe-DNTafWkM.mjs.map
+//# sourceMappingURL=acp-harness-probe-DRbySBVr.mjs.map

package/dist/assets/skills/packs/codebase-wiki/references/generate-and-refresh.md

@@ -102,10 +102,10 @@ Atomic pages for domain terms and core abstractions (one term each): definition,
 ### Phase 7 — Link-graph activation + audit
 
 1. Confirm **OVERVIEW links every page** (it is the nav hub). Add any missing nav links. This is OVERVIEW's check — it's a *source* (high out-degree), verified by forward links here, not by the `hubs` view below.
-2. Run `links({ kind: ["orphans", "hubs"] })`, then `audit` for dead links:
+2. Run `links({ kind: ["orphans", "hubs"] })`, then `audit`:
    - **orphans** — pages nothing links to. Adopt each by linking it from OVERVIEW or a relevant section page (or, rarely, justify it as intentionally standalone).
    - **hubs** — ranks by *inbound* links. Confirm your **concept/module pages** show up here — that's the signal cross-linking actually happened. Don't expect `OVERVIEW`: a freshly authored nav page has almost no inbound links, so it won't appear (and that's correct — its coverage was checked in step 1).
-   - **dead** (`audit`) — fix or remove every dead link. (Source-file links don't appear in this graph — only `.md`/`.mdx` edges are tracked — but they ARE validated by `brokenLinks` on each write/edit, per the code-reference rule above.)
+   - **`audit`** — returns clean (every lint violation + broken internal link) — fix every finding. (This covers links to source files too, not just `.md`/`.mdx`: it's the `orphans`/`hubs` graph above that tracks doc-to-doc edges only. `brokenLinks` on each write/edit is the same check per-write, per the code-reference rule above.)
 3. Append a `wiki/log.md` entry (see *Log discipline*).
 4. Tell the user the wiki is ready and surface the OVERVIEW preview URL.
 

package/dist/assets/skills/packs/knowledge-base/research/SKILL.md

@@ -336,7 +336,7 @@ Run this checklist before marking complete:
 - File exists at the chosen path under the content directory
 - Frontmatter has `title`, `description`, `type: research-note`, `status: draft`, `date`, and an object-shaped `sources:` list
 - `exec("ls -A <dir>")` lists the new file with frontmatter enrichment
-- `audit({ path: "<doc-path>.md" })` returns clean — zero dead links (fix or remove every one)
+- `audit({ path: "<doc-path>.md" })` returns clean (every lint violation + broken internal link) — fix every finding
 - Every factual claim in Findings cites a source inline
 - Linked source files from Step 3 all exist (broken source links → ingest went wrong somewhere)
 - At least 1-2 neighbor docs now link to this research (per Step 6's "After writing, update ..." rule)

package/dist/assets/skills/packs/software-lifecycle/frame-a-proposal/SKILL.md

@@ -184,7 +184,7 @@ Run before you tell the user it's ready:
 
 - Every referenced decision, spec, or guide is a plain markdown relative link (`[text](./decisions/0004-x.md)`), never backticked, never an HTML anchor.
 - Add backlinks from 1–2 closely related docs so the proposal is discoverable — the accepted decision it revisits, a related spec, the relevant guide. `links({ kind: "backlinks", ... })` to see what already points where.
-- `audit({ path: "proposals/0007-async-export-pipeline.md" })` returns clean — fix or remove every dead link.
+- `audit({ path: "proposals/0007-async-export-pipeline.md" })` returns clean (every lint violation + broken internal link) — fix every finding.
 - Frontmatter complete: `type: proposal`, a one-line `description`, `status: draft`, `authors`, `created`, `tags: [proposal]`.
 - All five H2 sections present and non-empty: `## Motivation`, `## Design`, `## Drawbacks`, `## Alternatives`, `## Unresolved questions`. An empty Drawbacks or a strawman Alternatives fails this check even though the section technically exists.
 - `status` is still `draft`. You do not advance it — see Non-goals.

package/dist/assets/skills/packs/software-lifecycle/record-a-decision/SKILL.md

@@ -160,7 +160,7 @@ Then add a line near the top of the old record's Context (or a short `> Supersed
 ## Step 8 — Link and validate
 
 - **Backlinks in:** ensure the parent proposal links forward to this decision, and any spec that *implements* this decision links back to it. `links({ kind: "backlinks", document: "decisions/0012-adopt-event-sourcing-for-orders" })` to see who points here; add the missing ones so the record is discoverable.
-- **Dead links out:** `audit({ path: "decisions/0012-adopt-event-sourcing-for-orders.md" })` returns clean — zero dead links. Fix or remove every one; a broken link to a superseded record defeats the whole chain.
+- **Validate:** `audit({ path: "decisions/0012-adopt-event-sourcing-for-orders.md" })` returns clean (every lint violation + broken internal link) — fix every finding; a broken link to a superseded record defeats the whole chain.
 - **Frontmatter complete:** `type`, `description`, `status`, `date`, `deciders`, `supersedes`, `tags` all present and correct.
 - **Status reflects reality:** if the deciders have accepted, flip `status: proposed` → `accepted`. If they haven't, leave it `proposed` and tell the user it's awaiting sign-off. Do not mark a decision `accepted` on the user's behalf.
 - **Body shape:** exactly `## Context`, `## Decision`, `## Consequences`, in order. No extra top-level sections — depth that doesn't fit these three belongs in a linked spec.

package/dist/assets/skills/packs/software-lifecycle/write-a-postmortem/SKILL.md

@@ -175,7 +175,7 @@ Pre-fill the stub with the **symptom** (how you'd recognize this again — "chec
 - Add a `## Related` section linking **every prior postmortem that shares a subsystem** (from Step 2), plus the `decisions/` and `specs/` implicated — the decision that set the config policy, the spec for the component that failed. `[2024-01-11 payments pool](./postmortems/2024-01-11-payments-pool.md)`, `[connection-pool sizing decision](./decisions/2023-11-04-pool-sizing.md)`.
 - Link the runbook stubs you created in Step 9 from their action items (done above) and from `## Related`.
 - Update the hub of any folder you touched if it has one (an `INDEX.md` in `postmortems/`) so the new incident shows up in the index — the preview becomes a live progress bar.
-- Validate: `audit({ path: "postmortems/YYYY-MM-DD-name.md" })` returns clean — fix or drop every dead link. Confirm frontmatter is complete and the Summary / Timeline / Root cause / What went well / Action items sections are all filled, none left as template placeholder.
+- Validate: `audit({ path: "postmortems/YYYY-MM-DD-name.md" })` returns clean (every lint violation + broken internal link) — fix every finding. Confirm frontmatter is complete and the Summary / Timeline / Root cause / What went well / Action items sections are all filled, none left as template placeholder.
 
 ---
 

package/dist/assets/skills/packs/software-lifecycle/write-a-spec/SKILL.md

@@ -262,7 +262,7 @@ Specs that don't link back are islands. Wire the spec into the graph and prove i
 - **Backlink the parent proposal** inline in the spec body: `derived from [Payment retries proposal](./proposals/0004-payment-retries.md)`. Plain markdown relative link — never backticked, never an HTML anchor.
 - **Link every decision the spec depends on** — if the design rests on a frozen record in `decisions/`, link it where it's relied upon.
 - Update the parent proposal (and any hub) to link forward to this spec, so the spec is discoverable via backlinks. `links({ kind: "backlinks", ... })` to confirm the reverse edge registered.
-- `audit({ path: "specs/004-payment-retries/spec.md" })` — returns clean, zero dead links. Fix or remove every one.
+- `audit({ path: "specs/004-payment-retries/spec.md" })` returns clean (every lint violation + broken internal link) — fix every finding.
 - Frontmatter complete: `type`, `description`, `status`, `owner`, `parent_proposal`, `created`, `tags` all present.
 
 ---

package/dist/assets/skills/project/SKILL.md

@@ -25,7 +25,7 @@ OpenKnowledge (OK) is a markdown-CRDT collaboration platform exposed via MCP. Th
 
 ## Tool index — 21 tools (router; the MCP tool descriptions carry each tool's full contract)
 
-- **Reads** — `exec` (primary; read-only `cat`/`ls`/`grep`/… plus frontmatter/backlink/history enrichment; one command or one pipe, not a shell), `search` (ranked BM25 + recency), `history` (doc versions), `links` (`kind: backlinks|forward|dead|orphans|hubs|suggest`, or an array for one call), `skills` (search + read: `query` → skills.sh; omit `name` to LIST managed (Project + Global); `name` READs one — by `name`+`scope`, never path), `config` (resolved config), `palette` (authoring forms + `html preview` starters + theme tokens; `palette({ components })` for JSX schemas), `preview_url` (browser preview URL on demand), `share_link` (GitHub-substrate share URL; read-only, errors without a GitHub remote), `lint` (markdown-lint violations: `document` for one doc, omit for the project; `fix: true` with `document` auto-fixes fixable rules in place — attributed, live in the preview; the rest need `edit`/`write`), `audit` (every lint violation + broken internal link in one read-only report, by source file with lines; `path` scopes; for link VALIDATION use this, not `links`).
+- **Reads** — `exec` (primary; read-only `cat`/`ls`/`grep`/… plus frontmatter/backlink/history enrichment; one command or one pipe, not a shell), `search` (ranked BM25 + recency), `history` (doc versions), `links` (`kind: backlinks|forward|dead|orphans|hubs|suggest`, or an array for one call), `skills` (search + read: `query` → skills.sh; omit `name` to LIST managed (Project + Global); `name` READs one — by `name`+`scope`, never path), `config` (resolved config), `palette` (authoring forms + `html preview` starters + theme tokens; `palette({ components })` for JSX schemas), `preview_url` (browser preview URL on demand), `share_link` (GitHub-substrate share URL; read-only, errors without a GitHub remote), `lint` (markdown-lint violations: `document` for one doc, omit for the project; `fix: true` with `document` auto-fixes fixable rules in place — attributed, live in the preview; the rest need `edit`/`write`), `audit` (every lint violation + broken internal link in one read-only report, by source file with lines; `path` scopes; for link VALIDATION use this, not `links`; caveats in `references/linking.md`).
 - **Writes** — four native CRUD verbs, polymorphic over `document` / `folder` / `template` / `skill` / `asset` (pass EXACTLY ONE target, nested under its address key): `write` (create/overwrite; `write({ skill: {…} })` authors a skill as a REAL folder at the project's default skill home — live immediately for that folder's agent), `edit` (body find/replace/frontmatter merge-patch; no asset), `delete` (remove), `move` (move/rename, rewrites referrers; a skill also takes `scope`/`toScope` for Project↔Global — history resets, re-`install`). Output mirrors the input key; the preview envelope (`previewUrl`, `warning`) stays top-level. Plus `install` (WHERE a `skill` lives: `add`/`remove` locations additively — editor ids, `agents`, or custom roots; `mode` + `convert` re-form ONLY the locations named; `source` moves the real folder. The source folder IS the skill — no "uninstall everywhere"; a skill dies only via `delete`), `import` (acquire a skill-dir into `add`'s locations; scripts never run), `checkpoint` (named version), and `restore_version` (roll back). A folder's frontmatter is open-shape and self-only (does NOT cascade); templates are what new docs start with.
 - **Conflicts** — `conflicts` (`kind: list|content`), `resolve_conflict` (write a resolution + commit; destructive). See `references/conflict-resolution.md`.
 

package/dist/assets/skills/project/references/linking.md

@@ -10,7 +10,7 @@
 - **Never wrap a link in backticks.** `` `[text](./foo.md)` `` is a bug — the backticks make it render as literal code rather than a link.
 - **Never use HTML anchors** (`<a href="...">`). Markdown link syntax only.
 - **`brokenLinks` on the write/edit response is your primary check — read it before walking away.** Every `write`/`edit` returns `brokenLinks` in the SAME payload: `[]` means every outbound link resolves; a populated list names each broken `href` with its `resolvedTo` + `reason` (`no-such-doc` = resolved to a doc that doesn't exist; `no-such-file` = resolved to a linked asset / source file that isn't on disk at that path; `unresolvable` = the path escapes the content root, usually one `../` too many). This validates **every** local link, not just doc links: a wrong-depth `[src](../../foo.py)` to a source file is caught too. It is report-only — the write landed regardless; fix or remove every one in a follow-up `edit`.
-- **`audit` is the authoritative end-state link check** — run it once at the end of a multi-doc pass. Caveat: `audit` reports links only while the project's `validation.links` setting is not `off` (at `off` it returns clean with no warning), so if the project has silenced link validation, fall back to `links({ kind: "dead" })` — the unconditional read of the same dead-link data (optionally scoped: `links({ kind: "dead", sourceDocuments: ["your/doc"] })`). Otherwise `links` is the graph-navigation reader, supplemental to `audit`, not a substitute. Companion `links` kinds: `backlinks` (incoming), `forward` (outgoing), `orphans` (no incoming), `hubs` (high-incoming), `suggest` (untextualized mentions worth linking).
+- **`audit` is the authoritative end-state link check** — run it once at the end of a multi-doc pass. Caveat: `audit` reports links only while the project's `validation.links` setting is not `off` (at `off` it returns clean with no warning), so if the project has silenced link validation, fall back to `links({ kind: "dead" })` — the unconditional read of the dead-link graph, which also lists sources `audit` excludes, such as skill-bundle docs (optionally scoped: `links({ kind: "dead", sourceDocuments: ["your/doc"] })`). Otherwise `links` is the graph-navigation reader, supplemental to `audit`, not a substitute. Companion `links` kinds: `backlinks` (incoming), `forward` (outgoing), `orphans` (no incoming), `hubs` (high-incoming), `suggest` (untextualized mentions worth linking).
 - **The tool and the editor agree.** Both resolve a bare name the same way — exact, then slug, then folder index, then basename — so a link that opens when you click it is never reported dead, and a link reported dead is genuinely unresolvable. A target that names an asset, or names nothing at all, stays silent rather than being reported as a broken doc link.
 
 **Note on wiki-link syntax (`[[Page]]`):** the parser still handles it for legacy content, but it's NO LONGER the recommended default. Write new content with standard markdown links per above. Seed-pack templates (`ok seed --pack <name>`) may still emit `[[Page]]` placeholders inside template body text — those are legacy. When you instantiate a seed-pack template, replace the legacy placeholders with standard markdown links during the `{shape}`-fill pass.

package/dist/assets/skills/project/references/onboard-existing-repo.md

@@ -179,7 +179,7 @@ Six sub-passes, each with its own STOP gate.
 
 ### 5c. Dead-link sweep (STOP gate 5c)
 
-1. Run `audit` (the authoritative end-state link check; it covers the whole corpus). `links({ kind: "dead" })` is the graph-navigation view of the same data, useful for browsing but not the validation step.
+1. Run `audit` (the authoritative end-state link check; it covers the whole corpus — caveats in `references/linking.md`). `links({ kind: "dead" })` is the graph reader, not the validation step; it is a superset on the source side (it also lists dead links whose source is a skill-bundle doc, which `audit` skips).
 2. For each dead link, propose: a fix candidate (via `search` for the correct target), or deletion (remove the link, or the prose around it). Leaving it as an "intentional redlink" is not an option — every dead link is fixed or removed.
 3. Confirm per dead-link. Apply confirmed fixes via `edit`.
 

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./chunk-DTipWd-i.mjs";import{At as t,Bt as n,Ct as r,E as i,Lt as a,M as o,Mt as s,Nt as c,St as l,T as u,Wt as d,a as f,c as p,jt as m,p as h,pt as g,rn as _,vt as v,wt as y}from"./sleep-BZo73vVn.mjs";import{As as ee,Ba as b,Cs as x,Ec as te,Gt as S,Hs as ne,Js as re,Lc as ie,M as ae,Os as oe,Ps as se,Q as ce,Qo as le,Us as ue,Wt as de,Xo as fe,Zo as pe,Zs as me,_a as he,_t as ge,dt as _e,hs as ve,ms as ye,ro as be,rs as xe,sc as Se,va as Ce,za as we,zs as Te}from"./src-B5PnzP5L.mjs";import{$ as Ee,$n as De,Ai as Oe,An as ke,B as Ae,Bt as je,Cr as Me,D as Ne,E as Pe,Gt as Fe,Kr as Ie,L as Le,Lt as Re,Ma as ze,Na as Be,Ni as Ve,Nr as He,Oi as Ue,Pa as We,Qt as Ge,R as Ke,Ri as C,Rt as qe,Wt as Je,Xr as Ye,Yr as Xe,Z as Ze,_r as Qe,_t as $e,br as et,bt as tt,ct as nt,di as w,ei as rt,et as it,fn as at,ft as ot,gr as st,gt as ct,h as lt,hn as ut,hr as dt,ht as ft,i as pt,ja as mt,ji as ht,ki as gt,kn as _t,li as vt,lt as yt,m as bt,mt as xt,n as St,nt as Ct,o as wt,ot as Tt,pt as Et,r as Dt,ti as Ot,tt as kt,ui as At,ut as jt,vn as Mt,vr as Nt,vt as Pt,xi as Ft,xr as It,y as Lt,z as Rt,zt}from"./src-BbDOpWQ2.mjs";import{A as T,F as Bt,I as Vt,k as Ht}from"./fs-traced-Cu6kXy54.mjs";import{s as Ut}from"./git-handle-NTLKBuxQ.mjs";import{S as Wt,a as Gt,b as E,d as Kt,r as qt}from"./server-lock-_XWgcmNh.mjs";import{_ as Jt,a as Yt,r as Xt,s as Zt,v as Qt,x as D}from"./resolve-project-root-BOhfHVtL.mjs";import{b as $t,c as en,d as tn,f as nn,g as rn,h as an,i as on,l as sn,m as cn,n as ln,o as un,p as dn,r as fn,t as pn,u as mn,v as hn,y as gn}from"./src-cXr-39Er.mjs";import{c as _n,i as O,n as k,o as A,r as j,s as M,t as N}from"./colors-DSyAT9Cz.mjs";import{_ as vn,c as yn,d as bn,f as xn,h as Sn,m as Cn,o as wn,s as Tn,u as En}from"./acp-harness-probe-DNTafWkM.mjs";import{n as Dn,r as On,t as P}from"./dist-bundle-EXrl9_Zm.mjs";import{A as kn,B as An,C as jn,F as Mn,H as Nn,I as Pn,L as Fn,M as In,N as Ln,O as Rn,P as zn,R as Bn,T as Vn,V as Hn,j as Un,u as Wn,w as Gn,z as Kn}from"./init-CUwUUK6I.mjs";import{n as qn,t as Jn}from"./constants-Dt5JkLq7.mjs";import{n as Yn,t as Xn}from"./loader-CEUMASIi.mjs";import{S as Zn,y as Qn}from"./start-D-Dpix5m.mjs";import{i as $n}from"./skill-teardown-DlA20B43.mjs";import{t as er}from"./launch-json-removal-LDzw4axF.mjs";import{n as tr}from"./repair-skills-CVHryUJ2.mjs";import{execFile as nr,execFileSync as rr,execSync as ir,spawn as ar,spawnSync as or}from"node:child_process";import{basename as sr,dirname as F,isAbsolute as cr,join as I,posix as lr,relative as L,resolve as R,sep as ur}from"node:path";import dr from"node:process";import{fileURLToPath as fr}from"node:url";import{accessSync as pr,appendFileSync as mr,closeSync as hr,constants as gr,existsSync as z,lstatSync as _r,mkdirSync as B,mkdtempSync as vr,openSync as yr,readFileSync as V,readdirSync as br,realpathSync as xr,renameSync as Sr,rmSync as Cr,statSync as H,unlinkSync as U,writeFileSync as wr}from"node:fs";import{homedir as Tr,platform as Er,tmpdir as Dr}from"node:os";import{rm as Or}from"node:fs/promises";import{randomUUID as kr}from"node:crypto";import{setTimeout as Ar}from"node:timers/promises";import{promisify as jr}from"node:util";import{createInterface as Mr}from"node:readline/promises";const Nr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Pr;(function(e){})(Pr||={});function Fr(e){return d(v,e)}async function Ir(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=He({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=It(t,r,l),d=new Map,f=e=>{let t=F(e),r=d.get(t);if(r)return r;let i=et(u,Me(n,e,l));return d.set(t,i),i},p=[],m=Lr(i,n);m.kind===`file`?p.push(L(n,m.path)):h(m.path);function h(e){let t;try{t=br(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${L(n,e)||`.`}: ${zr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=I(e,r.name),i=L(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;h(t)}else if(r.isFile()){if(!Rr(r.name)||s.isExcluded(i))continue;p.push(i)}}}p.sort();let g=[],_=0,v=0,y=0;for(let e of p){let t=I(n,e),r;try{r=V(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${zr(t)}`);continue}let i=f(e),s=!1;if(a&&i.enabled){let n=he(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{wr(i,n,`utf-8`),Sr(i,t),r=n,s=!0,y++}catch(t){try{U(i)}catch{}o.push(`could not write fix to ${e}: ${zr(t)}`)}}}let c=await Ce(r,i,e);for(let e of c)e.severity===`error`?_++:v++;g.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:g,warnings:o,fileCount:p.length,errorCount:_,warningCount:v,fixedCount:y}}function Lr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=cr(e)?e:R(t,e);try{if(H(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Rr(e){let t=e.toLowerCase();return me.some(e=>t.endsWith(e))}function zr(e){return e instanceof Error?e.message:String(e)}function Br(e){return new D(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=At(r,i),o=t===void 0?void 0:Vr(t,hn()),s=r.contentRules,c=await Ir({projectDir:i,contentDir:a,baseConfig:s?b(s):be,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Wr(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Hr(c))&&(process.exitCode=1)})}function Vr(e,t){return R(t,e)}function Hr(e){return e.errorCount>0||e.warningCount>0}function Ur(e){let t=[N(e.file)+(e.fixed?k(` (fixed)`):``)];for(let n of e.diagnostics){let e=k(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?j(`error  `):M(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${k(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Wr(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Ur(n));for(let n of e.warnings)t.push(M(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(A(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${j(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(k(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
+import{o as e}from"./chunk-DTipWd-i.mjs";import{At as t,Bt as n,Ct as r,E as i,Lt as a,M as o,Mt as s,Nt as c,St as l,T as u,Wt as d,a as f,c as p,jt as m,p as h,pt as g,rn as _,vt as v,wt as y}from"./sleep-BZo73vVn.mjs";import{As as ee,Ba as b,Cs as x,Ec as te,Gt as S,Hs as ne,Js as re,Lc as ie,M as ae,Os as oe,Ps as se,Q as ce,Qo as le,Us as ue,Wt as de,Xo as fe,Zo as pe,Zs as me,_a as he,_t as ge,dt as _e,hs as ve,ms as ye,ro as be,rs as xe,sc as Se,va as Ce,za as we,zs as Te}from"./src-B5PnzP5L.mjs";import{$ as Ee,$n as De,Ai as Oe,An as ke,B as Ae,Bt as je,Cr as Me,D as Ne,E as Pe,Gt as Fe,Kr as Ie,L as Le,Lt as Re,Ma as ze,Na as Be,Ni as Ve,Nr as He,Oi as Ue,Pa as We,Qt as Ge,R as Ke,Ri as C,Rt as qe,Wt as Je,Xr as Ye,Yr as Xe,Z as Ze,_r as Qe,_t as $e,br as et,bt as tt,ct as nt,di as w,ei as rt,et as it,fn as at,ft as ot,gr as st,gt as ct,h as lt,hn as ut,hr as dt,ht as ft,i as pt,ja as mt,ji as ht,ki as gt,kn as _t,li as vt,lt as yt,m as bt,mt as xt,n as St,nt as Ct,o as wt,ot as Tt,pt as Et,r as Dt,ti as Ot,tt as kt,ui as At,ut as jt,vn as Mt,vr as Nt,vt as Pt,xi as Ft,xr as It,y as Lt,z as Rt,zt}from"./src-DifwZnFy.mjs";import{A as T,F as Bt,I as Vt,k as Ht}from"./fs-traced-Cu6kXy54.mjs";import{s as Ut}from"./git-handle-NTLKBuxQ.mjs";import{S as Wt,a as Gt,b as E,d as Kt,r as qt}from"./server-lock-_XWgcmNh.mjs";import{_ as Jt,a as Yt,r as Xt,s as Zt,v as Qt,x as D}from"./resolve-project-root-BmEYZjtQ.mjs";import{b as $t,c as en,d as tn,f as nn,g as rn,h as an,i as on,l as sn,m as cn,n as ln,o as un,p as dn,r as fn,t as pn,u as mn,v as hn,y as gn}from"./src-CNBY5GiX.mjs";import{c as _n,i as O,n as k,o as A,r as j,s as M,t as N}from"./colors-DSyAT9Cz.mjs";import{_ as vn,c as yn,d as bn,f as xn,h as Sn,m as Cn,o as wn,s as Tn,u as En}from"./acp-harness-probe-DRbySBVr.mjs";import{n as Dn,r as On,t as P}from"./dist-bundle-EXrl9_Zm.mjs";import{A as kn,B as An,C as jn,F as Mn,H as Nn,I as Pn,L as Fn,M as In,N as Ln,O as Rn,P as zn,R as Bn,T as Vn,V as Hn,j as Un,u as Wn,w as Gn,z as Kn}from"./init-44bY7bDu.mjs";import{n as qn,t as Jn}from"./constants-C7GcNmeI.mjs";import{n as Yn,t as Xn}from"./loader-Bqy2LPc4.mjs";import{S as Zn,y as Qn}from"./start-D6zGIr_Q.mjs";import{i as $n}from"./skill-teardown-DJadYmS9.mjs";import{t as er}from"./launch-json-removal-NGM0vd0O.mjs";import{n as tr}from"./repair-skills-DD0pO9KG.mjs";import{execFile as nr,execFileSync as rr,execSync as ir,spawn as ar,spawnSync as or}from"node:child_process";import{basename as sr,dirname as F,isAbsolute as cr,join as I,posix as lr,relative as L,resolve as R,sep as ur}from"node:path";import dr from"node:process";import{fileURLToPath as fr}from"node:url";import{accessSync as pr,appendFileSync as mr,closeSync as hr,constants as gr,existsSync as z,lstatSync as _r,mkdirSync as B,mkdtempSync as vr,openSync as yr,readFileSync as V,readdirSync as br,realpathSync as xr,renameSync as Sr,rmSync as Cr,statSync as H,unlinkSync as U,writeFileSync as wr}from"node:fs";import{homedir as Tr,platform as Er,tmpdir as Dr}from"node:os";import{rm as Or}from"node:fs/promises";import{randomUUID as kr}from"node:crypto";import{setTimeout as Ar}from"node:timers/promises";import{promisify as jr}from"node:util";import{createInterface as Mr}from"node:readline/promises";const Nr={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Pr;(function(e){})(Pr||={});function Fr(e){return d(v,e)}async function Ir(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=He({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=It(t,r,l),d=new Map,f=e=>{let t=F(e),r=d.get(t);if(r)return r;let i=et(u,Me(n,e,l));return d.set(t,i),i},p=[],m=Lr(i,n);m.kind===`file`?p.push(L(n,m.path)):h(m.path);function h(e){let t;try{t=br(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${L(n,e)||`.`}: ${zr(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=I(e,r.name),i=L(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;h(t)}else if(r.isFile()){if(!Rr(r.name)||s.isExcluded(i))continue;p.push(i)}}}p.sort();let g=[],_=0,v=0,y=0;for(let e of p){let t=I(n,e),r;try{r=V(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${zr(t)}`);continue}let i=f(e),s=!1;if(a&&i.enabled){let n=he(r,i);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{wr(i,n,`utf-8`),Sr(i,t),r=n,s=!0,y++}catch(t){try{U(i)}catch{}o.push(`could not write fix to ${e}: ${zr(t)}`)}}}let c=await Ce(r,i,e);for(let e of c)e.severity===`error`?_++:v++;g.push({file:e,diagnostics:c,fixed:s})}return{contentDir:n,files:g,warnings:o,fileCount:p.length,errorCount:_,warningCount:v,fixedCount:y}}function Lr(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=cr(e)?e:R(t,e);try{if(H(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Rr(e){let t=e.toLowerCase();return me.some(e=>t.endsWith(e))}function zr(e){return e instanceof Error?e.message:String(e)}function Br(e){return new D(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=At(r,i),o=t===void 0?void 0:Vr(t,hn()),s=r.contentRules,c=await Ir({projectDir:i,contentDir:a,baseConfig:s?b(s):be,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Wr(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Hr(c))&&(process.exitCode=1)})}function Vr(e,t){return R(t,e)}function Hr(e){return e.errorCount>0||e.warningCount>0}function Ur(e){let t=[N(e.file)+(e.fixed?k(` (fixed)`):``)];for(let n of e.diagnostics){let e=k(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?j(`error  `):M(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${k(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Wr(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Ur(n));for(let n of e.warnings)t.push(M(`! ${n}`));e.warnings.length>0&&t.push(``);let n=e.errorCount+e.warningCount;if(n===0)t.push(A(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${j(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}return e.fixedCount>0&&t.push(k(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.join(`
 `)}const Gr={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Kr(e){return new D(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await qr(t,n,e(),process.cwd(),hn());r!==0&&(process.exitCode=r)})}async function qr(e,t,n,r,i,a=Gr){let o=At(n,r),s;if(e!==void 0){let t=Jr(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let c=Gt(w(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=s===void 0?``:`?path=${encodeURIComponent(s)}`,u;try{u=await fetch(`http://127.0.0.1:${c.port}/api/audit${l}`,{headers:ie({kind:`cli`,runtimeVersion:E})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!u.ok){let e=await u.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${u.status}`}`),1}let d=we.safeParse(await u.json().catch(()=>null));if(!d.success){let e=d.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let f=d.data;return t.json===!0?a.out(JSON.stringify(f,null,2)):a.out(Wr(Yr(f))),+(t.errorsOnly===!0?f.errorCount>0:f.errorCount+f.warningCount>0)}function Jr(e,t,n){let r=L(n,R(t,e));return r===``?``:r.startsWith(`..`)||cr(r)?null:r.split(ur).join(`/`)}function Yr(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0}}async function Xr(e,t,n,r){let i=Zr(await Qr(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function Zr(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Qr(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function $r(e,t){let n=new D(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Xr(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await lt(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await lt(n),process.exit(1)}}),n}function ei(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function ti(e,t,n){let r={baseUrl:ei(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new Dn(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function ni(e){let t=e.request||P,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),ti(t,`POST /login/device/code`,n)}async function ri(e){let t=await ti(e.request||P,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=ii(e,t.data.expires_in),n.refreshTokenExpiresAt=ii(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function ii(e,t){return new Date(e+t*1e3).toISOString()}async function ai(e,t){let n=oi(e,t.auth);if(n)return n;let{data:r}=await ni({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await ci(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function oi(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)?n:!1}async function si(e){await new Promise(t=>setTimeout(t,e*1e3))}async function ci(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await ri({...i,clientType:`oauth-app`}):await ri({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await si(r.interval),ci(e,t,n,r);if(a===`slow_down`)return await si(r.interval+7),ci(e,t,n,r);throw i}}async function li(e,t){return ai(e,{auth:t})}async function ui(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await ai(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var di=`0.0.0-development`;function fi(e){let t=e.request||P.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${di} ${On()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(li.bind(null,i),{hook:ui.bind(null,i)})}async function pi(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=fi({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-CtDa6mtZ.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function mi(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function W(e){let t=e.toLowerCase().replace(/:\d+$/,``);se.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function hi(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function gi(e,t,n=pi){let r=mi(),{host:i,json:a}=e;W(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?hi(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?hi(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function _i(e){return new D(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??Qe(process.cwd()),r=await e();await gi({...t,host:n},r)})}const vi={style:{maskedText:`[input is masked]`}};var yi=Pn((e,t)=>{let{validate:n=()=>!0}=e,r=An(vi,e.theme),[i,a]=Hn(`idle`),[o,s]=Hn(),[c,l]=Hn(``),u=Kn({status:i,theme:r});Bn(async(e,r)=>{if(i===`idle`)if(Nn(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${Fn}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function bi(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>bi.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function xi(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function Si(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const Ci=Function.bind,wi=Ci.bind(Ci);function Ti(e,t,n){let r=wi(Si,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=wi(xi,null).apply(null,i)})}function Ei(){let e=Symbol(`Singular`),t={registry:{}},n=bi.bind(null,t,e);return Ti(n,t,e),n}function Di(){let e={registry:{}},t=bi.bind(null,e);return Ti(t,e),t}var Oi={Singular:Ei,Collection:Di},ki=`0.0.0-development`;function Ai(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
@@ -8,9 +8,9 @@ import{o as e}from"./chunk-DTipWd-i.mjs";import{At as t,Bt as n,Ct as r,E as i,L
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function Ca(){return new D(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??Qe(process.cwd());await Sa({...e,host:t})})}async function wa(e,t,n=xn){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function Ta(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function Ea(e,t){let{host:n,json:r}=e;W(n);let i=t.backend,a=await wa(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(Ta(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new K({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(Ta(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ha(e,n);r?process.stdout.write(`${JSON.stringify(Ta(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function Da(e){return new D(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??Qe(process.cwd());await Ea({...t,host:n},await e())})}function Oa(e){let t=new D(`auth`);t.description(`GitHub authentication management`);let n=e=>Sn(void 0,e);return t.addCommand(_i(n)),t.addCommand(Da(n)),t.addCommand(xa(n)),t.addCommand(Ca()),t.addCommand(va(n)),t.addCommand($r(n,e)),t}function ka(e,t=Er(),n=En){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[F(e)])}catch{}}function Aa(){return new D(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await dn({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:rn(),logger:Hf()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&ka(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function ja(e,t){let n=[];for(let[r,i]of[[`server`,e],[`ui`,t]])(i.status===`dead-pid`||i.status===`corrupt`)&&n.push({name:r,lockPath:i.lockPath,reason:i.status});return{prune:n}}function Ma(e){let t=e.inspect??(t=>t===`ui`?tn(e.lockDir):nn(e.lockDir,t)),n=e.unlink??(e=>U(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=ja(t(`server`),t(`ui`));if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Na(e){return new D(`clean`).description(`Prune stale / corrupt open-knowledge lock files (never touches live locks)`).action(()=>{e(),Ma({lockDir:w(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Pa(e){return`credential.helper=!${e.map(xe).join(` `)} auth git-credential`}async function Fa(e,t,n={},r=xn){let i=[`credential.helper=`,Pa(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Ia(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const La=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Ra(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of La)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function za(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ba(e,t=process.env){let n=za(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Va(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Ha(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ua=pe;async function Wa(e){try{return await e.clone(Ha(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ua(t))return e.onFallback(e.branch),await e.clone(Ha(null)),{fellBack:!0};throw t}}function Ga(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Ka(e,t,n){return e===`https`&&t===`github.com`&&n}function qa(e){if(e===void 0)return null;let{declaredLogin:t,declaredSource:n}=e,r;switch(n){case`remote-url`:r=`The clone URL names ${t}`;break;case`credential-config`:r=`Your Git credential configuration names ${t}`;break;default:r=`Your Git configuration names ${t}`}return`⚠ ${r}, but the GitHub CLI couldn't confirm that account — the clone used its active account.\n  Run \`gh auth status\` to see which account that is. If ${t} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}async function Ja(e,t,n={}){let r=mn(e);if(!r)throw Error(`Invalid git URL: ${$a(e)}`);let i=Ne(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await Fa(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!Nt(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function Ya(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Xa(e,t,n,r=process.cwd()){let i=mn(e);if(!i)throw Error(`Invalid git URL: ${$a(e)}`);let a=Ya(e,i),o=t.dir?R(r,t.dir):R(r,i.name);if(z(o)&&br(o).length>0)throw Error(`Target directory is not empty: ${o}`);Ve();let s=vn(),c=i.protocol===`https`&&i.hostname===`github.com`?await Ia(i.owner,i.name):!1,l=Ka(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await Ja(a,s,{selfCliArgs:Va(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=qa(l.declaredMiss);e&&process.stderr.write(e)}let d=Ba(u),f=Ut(Ga(r,u.gitConfig)).env(d),p=-1;f.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Ra(e);n&&n.pct!==p&&(p=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Wa({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>f.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-B0nDv2Za.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Za(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Za(e){let t=Rn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Qa=/^[A-Za-z0-9._/:@-]+$/;function $a(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&st(i)!==void 0?`${t}${i}@`:t})}function eo(e){return Qa.test(e)?e:xe(e)}function to(e,t){let n=typeof t==`string`&&t.length>0?` -b ${eo(t)}`:``;return`ok clone ${eo(e)}${n}`}function no(e){let t=fe(e.error);if(t.kind!==`auth`)return null;let n=$a(e.url);if(le(t)){let t=to(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-JcBDV_oY.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Za(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Za(e){let t=Rn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Qa=/^[A-Za-z0-9._/:@-]+$/;function $a(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&st(i)!==void 0?`${t}${i}@`:t})}function eo(e){return Qa.test(e)?e:xe(e)}function to(e,t){let n=typeof t==`string`&&t.length>0?` -b ${eo(t)}`:``;return`ok clone ${eo(e)}${n}`}function no(e){let t=fe(e.error);if(t.kind!==`auth`)return null;let n=$a(e.url);if(le(t)){let t=to(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${to(n,e.branch)}`].join(`
-`)}function ro(e){let t=dt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=no({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function io(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function ao(e){let t=fe(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=mn(e.url);t&&(r=await(e.resolvePrincipal??(e=>io(vn(),e)))(t.hostname))}}ro({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function oo(e){return new D(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Xa(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BSdUOq1f.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Oe||e instanceof ht){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await ao({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var so=g();const co=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...p.map(e=>e.path)];function lo(e){return Vt({absPath:Ht(`project-local`,e),sideline:!1}).diagnostics}function uo(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Yn;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??lo)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(h(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function fo(e){let t=(0,so.parseDocument)(V(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of co)t.hasIn(e)&&n.push(e.join(`.`));return n}function po(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function mo(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=po(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ho(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function go(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??T,s=ho(r).map(t=>({scope:t,absPath:Ht(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!z(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=fo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:mo(co.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:h(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const _o=`project | project-local | user | all`,vo=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function yo(e){return e!==`config`}function bo(){let e=new D(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{uo({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${_o}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!vo.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${_o}`),process.exitCode=2;return}(await go({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const xo=[`    1. ${N(`Customize`)} (sidebar) → ${N(`Skills`)}`,`    2. Click the ${N(`+`)} button`,`    3. Click ${N(`Create skill`)}`,`    4. Click ${N(`Upload skill`)}`,`    5. Pick ${N(`openknowledge.skill`)} from Downloads`],So=O(`  Open the Claude Desktop App, then: ${N(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Co(e){let t=[A(`Built ${e.outputPath}`),k(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(M(`  Handoff failed: ${e.handoffError.message}`)),t.push(So),t.join(`
+`)}function ro(e){let t=dt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=no({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function io(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function ao(e){let t=fe(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=mn(e.url);t&&(r=await(e.resolvePrincipal??(e=>io(vn(),e)))(t.hostname))}}ro({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function oo(e){return new D(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Xa(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-D8D6GD4Q.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Oe||e instanceof ht){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await ao({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var so=g();const co=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...p.map(e=>e.path)];function lo(e){return Vt({absPath:Ht(`project-local`,e),sideline:!1}).diagnostics}function uo(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Yn;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??lo)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(h(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function fo(e){let t=(0,so.parseDocument)(V(e,`utf-8`));if(t.errors.length>0)throw Error(`Could not parse ${e}: ${t.errors.map(e=>e.message).join(`; `)}`);let n=[];for(let e of co)t.hasIn(e)&&n.push(e.join(`.`));return n}function po(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function mo(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=po(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ho(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function go(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??T,s=ho(r).map(t=>({scope:t,absPath:Ht(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!z(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=fo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:mo(co.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:h(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const _o=`project | project-local | user | all`,vo=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function yo(e){return e!==`config`}function bo(){let e=new D(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{uo({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${_o}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!vo.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${_o}`),process.exitCode=2;return}(await go({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const xo=[`    1. ${N(`Customize`)} (sidebar) → ${N(`Skills`)}`,`    2. Click the ${N(`+`)} button`,`    3. Click ${N(`Create skill`)}`,`    4. Click ${N(`Upload skill`)}`,`    5. Pick ${N(`openknowledge.skill`)} from Downloads`],So=O(`  Open the Claude Desktop App, then: ${N(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Co(e){let t=[A(`Built ${e.outputPath}`),k(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(M(`  Handoff failed: ${e.handoffError.message}`)),t.push(So),t.join(`
 `)}function wo(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[O(`OpenKnowledge skill ${N(`v${t}`)} already delivered to Claude Desktop.`),k(`  Recorded at ${n} in ~/.ok/skill-state.yml`),k(`  Use ${N(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function To(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[A(`Built ${e.outputPath}`),k(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),O(`  Claude Desktop App opened. Now upload the file manually:`),...xo,k(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function Eo(e){return`${j(`Error:`)} ${e.buildError??`unknown build failure`}`}async function Do(e={}){let t=await De(e);return t.status===`failed`?{...t,message:Eo(t),exitCode:1}:t.status===`skip-current`?{...t,message:wo(t),exitCode:0}:t.status===`installed`?{...t,message:To(t),exitCode:0}:{...t,message:Co(t),exitCode:0}}function Oo(){return new D(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await Do({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function ko(e,t){let n=Mr({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function Ao(e={}){let t=e.platformName??process.platform,n=e.productName??`OpenKnowledge`;return Jt(t).join(Qt({...e,platformName:t}),n)}function jo(e={}){let t=e.platformName??process.platform,n=e.home??Tr(),r=e.env??process.env,i=Jt(t),a;return a=t===`win32`?r.LOCALAPPDATA||i.join(n,`AppData`,`Local`):t===`darwin`?i.join(n,`Library`,`Caches`):r.XDG_CACHE_HOME||i.join(n,`.cache`),i.join(a,`@inkeepopen-knowledge-desktop-updater`)}function Mo(e){if(typeof e!=`object`||!e)return null;let t=e.recentProjects;if(!Array.isArray(t))return null;let n=[];for(let e of t){if(typeof e!=`object`||!e)continue;let t=e;typeof t.path==`string`&&typeof t.name==`string`&&n.push({path:t.path,name:t.name})}return n}function No(e){let t=I(e,`state.json`);if(!z(t))return[];let n;try{n=JSON.parse(V(t,`utf-8`))}catch{return[]}return Mo(n)??[]}function Po(e){let t=I(e,`state.json`);if(!z(t))return!1;try{return Mo(JSON.parse(V(t,`utf-8`)))!==null}catch{return!1}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Fo(e){return ur===`/`?e:e.split(ur).join(`/`)}function Io(e,t,n=`This project`){let r=[];r.push({kind:`stop-server`,group:n,label:`Stop the project server (if running)`,lockDir:w(e)});let i=new Set;for(let a of Yt){let o=Zt[a];if(!o.projectConfigPath)continue;let s=o.projectConfigPath(e);i.add(Fo(L(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${o.label} (${Fo(L(e,s))})`,editorId:a,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let a=new Set([...Un(e),...ue]);for(let t of a){let a=t.replace(/\/$/,``);i.has(a)||a!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:I(e,a),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:We(e)})}catch{}return r}function Lo(e,t){return{scope:`deinit`,ops:Io(e,t)}}function Ro(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(I(e,`..`,`..`),t)}`,lockDir:e});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Bo(a,t));for(let e of Yt){let n=Zt[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of $n(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});c.push(...Vo(t,n,e.env));for(let e of o)c.push(...Io(e,t,`Project: ${sr(e)}`));return c.push({kind:`remove-path`,group:`Global directory`,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:I(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function zo(e){return[I(e,`.zshrc`),I(e,`.bash_profile`),I(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Bo(e,t){let n=[],r=new Set([...zo(t),...e?.rcFiles??[]]);for(let e of r)z(e)&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Vo(e,t,n){let r={home:e,platformName:t,env:n},i=Ao(r),a=jo(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Ao({...r,productName:`Open Knowledge`});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Ho(e,t={}){let n=t.clearToken??Cn,r=t.clearEmbeddingsKey??Xe,i=t.stopServer??(e=>{let t=pn({lockDir:e,log:()=>{},error:()=>{}});return{stopped:t.stopped.length,failed:t.failed.map(e=>({pid:e.target.pid,error:e.error}))}}),a=[];for(let t of e.ops)try{a.push(await Uo(t,{clearToken:n,clearEmbeddingsKey:r,stopServer:i}))}catch(e){a.push({op:t,status:`failed`,detail:e instanceof Error?e.message:String(e)})}return{results:a,removed:a.filter(e=>e.status===`removed`),failed:a.filter(e=>e.status===`failed`)}}async function Uo(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r}=t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); a process may still be using files that were removed`}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{if(!z(e.rcFile))return{op:e,status:`not-present`};let{text:t,changed:n,emptyAfter:r}=sn(V(e.rcFile,`utf-8`));return n?r?(Cr(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(Bt(e.rcFile,t,{mode:Vn(e.rcFile)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return un(e.path,e.target)?(U(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let t=on(Zt[e.editorId],e.cwd,e.home,e.configPath);switch(t.kind){case`removed`:switch(t.trust){case void 0:case`removed`:case`not-present`:return{op:e,status:`removed`};case`kept-shared`:return{op:e,status:`removed`,detail:`kept Pi's folder trust — another extension there still needs it`};case`kept-unverified`:return{op:e,status:`removed`,detail:`kept Pi's folder trust — couldn't read the extensions folder to see what else needs it`};default:return{op:e,status:`failed`,detail:`removed the bridge file, but couldn't revoke Pi's folder trust (${t.trust})${t.trustError===void 0?``:`: ${t.trustError}`}`}}case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:return{op:e,status:`skipped`,detail:`declined (${t.reason})`};default:throw Error(`unhandled mcp-remove outcome: ${t.kind}`)}}case`launch-entry`:{let t=er(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return{op:e,status:`skipped`,detail:`declined (unparseable)`};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{if(kn(e.projectRoot).length===0)return{op:e,status:`not-present`};let t=Mn(e.projectRoot,Un(e.projectRoot));return t.kind===`no-exclude`?t.reason===`inaccessible`?{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`}:{op:e,status:`not-present`,detail:t.reason}:{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Wo(e)}}function Wo(e){if(e.requireOurState&&!Po(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Xt(e.path,e.containWithin);let t;try{t=_r(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return U(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of br(e.path))t.has(r)||(Cr(I(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return Cr(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function Go(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Ko(e){if(e.ops.length===0)return k(`Nothing to remove.`);let t=[];for(let[n,r]of Go(e.ops)){t.length>0&&t.push(``),t.push(N(`${n}:`));for(let e of r)t.push(`  ${M(`-`)} ${e.label}`)}return t.join(`
@@ -39,7 +39,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),r}async function Es(e,t,n,r,i){let a=Ts(e,t,I(r,`cpu.cpuprofile`)),o=!1,s=ar(process.execPath,[a],C({stdio:`ignore`})),c=setInterval(()=>{let e=xs(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{Cr(I(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Ds(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function Os(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??Tt,s=t.inspect??nn,c=t.resolveCommand??nt,l=t.resolveUsage??yt,u=t.collectLsofFn??Ss,d=t.getEndpoints??ws,f=t.profiler??Es,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e,`server`);if(t.status!==`missing`&&t.status!==`corrupt`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let ee=new Date().toISOString().replace(/[:.]/g,`-`),b=e.output?e.output:v?I(v,`.ok`,`local`,`diagnostics`,`process-${n}-${ee}`):I(process.cwd(),`ok-diagnose-${n}-${ee}`);try{B(b,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${b}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${b}`),a(``);let x=(e,t)=>{wr(I(b,e),t),a(`  wrote ${e}`)},te=c(n),S=l(n);x(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:te,usage:S,lockInfo:y},null,2)),a(`  sampling lsof`);let ne=u(n);if(ne&&x(`lsof.txt`,ne),!i){let e=ne?Cs(ne).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){x(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,b,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&x(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{x(`stacks.txt`,Ds(V(I(b,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(b)}`)}async function ks(e){let t=Mr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function As(e){let t=vr(I(Dr(),`ok-bundle-process-`));return await Os({pid:e,output:t}),t}function js(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Ms(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Ns(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Ps(e){let t=e.manifest.redaction.secretScrub;return t===void 0?Y.default.yellow(`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${t.redactedLineCount} line(s) across ${t.redactions.length} file(s))`}function Fs(e,t,n){let{summary:r,manifest:i}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${js(r.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${r.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Ns(t)}`),e(`  Credentials:         ${Ps(t)}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function Is(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??ks,i=t.runProcessDiagnose??As,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=F(o);if(!z(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=I(e.contentDir,`.ok`,`local`,`diagnostics`);B(n,{recursive:!0}),o=I(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=await cn({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,deps:t.collectDeps});try{return l.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Fs(n,l,o),e.yes!==!0&&!Ms(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await an({collected:l,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(l.cleanup(),s!==void 0)try{Cr(s,{recursive:!0,force:!0})}catch{}}}function Ls(){let e=new D(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Os({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(bs()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-C-QrCX6R.mjs`),{resolveContentDir:r}=await import(`./src-D8-g0N2O.mjs`),i=process.cwd(),{config:a}=n(i);await Is({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Rs(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await yi({message:`Enter embeddings provider API key:`})).trim()}function zs(e){return Ie(e)}async function Bs(e,t){let n=await Ot(Ye(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Vs(e){try{let t=Gt(w(e));if(!t||t.port<=0||!Wt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function Hs(){return new D(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Rs();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{x(`stacks.txt`,Ds(V(I(b,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(b)}`)}async function ks(e){let t=Mr({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function As(e){let t=vr(I(Dr(),`ok-bundle-process-`));return await Os({pid:e,output:t}),t}function js(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Ms(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Ns(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Ps(e){let t=e.manifest.redaction.secretScrub;return t===void 0?Y.default.yellow(`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${t.redactedLineCount} line(s) across ${t.redactions.length} file(s))`}function Fs(e,t,n){let{summary:r,manifest:i}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${r.fileCount}`),e(`  Total size:          ${js(r.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${r.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Ns(t)}`),e(`  Credentials:         ${Ps(t)}`),e(`  Server status:       ${i.serverStatus}`),e(`  Output:              ${n}`),e(``)}async function Is(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??ks,i=t.runProcessDiagnose??As,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=F(o);if(!z(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=I(e.contentDir,`.ok`,`local`,`diagnostics`);B(n,{recursive:!0}),o=I(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=await cn({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,deps:t.collectDeps});try{return l.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Fs(n,l,o),e.yes!==!0&&!Ms(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await an({collected:l,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(l.cleanup(),s!==void 0)try{Cr(s,{recursive:!0,force:!0})}catch{}}}function Ls(){let e=new D(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Os({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(bs()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-B56L22Gi.mjs`),{resolveContentDir:r}=await import(`./src-Db2adcph.mjs`),i=process.cwd(),{config:a}=n(i);await Is({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Rs(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await yi({message:`Enter embeddings provider API key:`})).trim()}function zs(e){return Ie(e)}async function Bs(e,t){let n=await Ot(Ye(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Vs(e){try{let t=Gt(w(e));if(!t||t.port<=0||!Wt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function Hs(){return new D(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Rs();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=R(e.cwd??process.cwd()),{baseUrl:r}=zs(n);try{await Ye().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -74,7 +74,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function $u(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function ed(e){return/\s/.test(e)?`<${e}>`:e}function td(e,t={}){let{header:n,rows:r}=wu(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map($u).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=$u(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${ed(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function nd(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function rd(e,t){return`# ${e}\n\n${t}\n`}const id=[`links`,`frontmatter`,`callouts`,`images`,`tables`],ad=/\.mdx?$/i;function od(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function sd(e,t={}){let n=t.selected??new Set(id),r=Gu(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:od(!1)};let i=od(r),a=Hu(e),o=Nu(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!ad.test(e)||s&&l.has(e))continue;let r;try{r=V(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Cu(a,sr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:I(F(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=yu(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=Qu(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Vu(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=td(e.csvText,{linkForTitle:t=>{let n=Au(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?L(F(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=V(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=rd(o===null?e.fallbackTitle:nd(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Vu(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function cd(e){for(let t of e.assets)B(F(t.path),{recursive:!0}),wr(t.path,t.bytes);for(let t of e.changes)B(F(t.path),{recursive:!0}),wr(t.path,t.content,`utf8`);for(let t of e.deletions)try{U(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const ld={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},ud=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function dd(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of ud)n.push(`  ${ld[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function fd(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function pd(e){let t=new Set(id);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${id.join(`, `)}`);return e})}function md(e,t){let n=new Set(id);if(e&&(n=new Set(pd(e))),t)for(let e of pd(t))n.delete(e);return n}function hd(){let e=new D(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=R(e??process.cwd()),r;try{r=md(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=sd(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{cd(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?fd(a,{applied:t.apply??!1}):dd(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function gd(e,t){return t===`darwin`?{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function _d(e,t={}){let n=gd(e,t.platform??process.platform);return bn(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function vd(e,t,n=process.platform){let r=gd(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function yd(e=()=>Tn(wn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ct({lockDir:w(e)}).baseUrl,classifyName:(e,t)=>{let n=I(e,t);try{return H(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:_d,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function bd(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function xd(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function Sd(e,t,n){let r=await n.openTarget(e);return r.ok?(n.log(t),0):(n.error(`Could not open ${e}: ${vd(r.reason,e)}.`),1)}async function Cd(e,t,n){let r=R(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(bd(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!Se.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${Se.join(`, `)}.`),1;if(n.detectBundlePath())return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&doc=${encodeURIComponent(`__skill__/${e}/${i}`)}`,`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`,n);let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${kt(e,i)}`;return Sd(t,`Opening skill ${i} (${e}) in your browser: ${t}`,n)}return xd(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&folder=${encodeURIComponent(i)}`,`Opening folder ${i} in the OpenKnowledge desktop app.`,n);let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${it(i)}`;return Sd(t,`Opening folder ${i} in your browser: ${t}`,n)}return xd(n)}if(o)return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&doc=${encodeURIComponent(i)}`,`Opening ${i} in the OpenKnowledge desktop app.`,n);let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${Ee(i)}`;return Sd(e,`Opening ${i} in your browser: ${e}`,n)}return xd(n)}function wd(){return new D(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${Se.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action(async(e,t)=>{process.exitCode=await Cd(e,t,yd())})}function Td(e){return new D(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DOyhLjdF.mjs`),r=e(),i=process.cwd(),a=At(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ed(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Dd(e,t,n=process.cwd()){let r=e.op??`sync`,i=Gt(w(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...ie({kind:`cli`,runtimeVersion:E})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ed(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=Ut({baseDir:n});if(r===`sync`||r===`pull`){Ed(e.json,{type:`step`,step:`pull`});let t=await a.pull();Ed(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ed(e.json,{type:`step`,step:`push`}),await a.push(),Ed(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}function fd(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function pd(e){let t=new Set(id);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${id.join(`, `)}`);return e})}function md(e,t){let n=new Set(id);if(e&&(n=new Set(pd(e))),t)for(let e of pd(t))n.delete(e);return n}function hd(){let e=new D(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=R(e??process.cwd()),r;try{r=md(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=sd(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{cd(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?fd(a,{applied:t.apply??!1}):dd(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function gd(e,t){return t===`darwin`?{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function _d(e,t={}){let n=gd(e,t.platform??process.platform);return bn(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function vd(e,t,n=process.platform){let r=gd(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function yd(e=()=>Tn(wn())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ct({lockDir:w(e)}).baseUrl,classifyName:(e,t)=>{let n=I(e,t);try{return H(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:_d,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function bd(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function xd(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function Sd(e,t,n){let r=await n.openTarget(e);return r.ok?(n.log(t),0):(n.error(`Could not open ${e}: ${vd(r.reason,e)}.`),1)}async function Cd(e,t,n){let r=R(t.project??process.cwd()),i=e.replace(/\/+$/,``);if(!i)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(bd(i))return n.error(`Invalid name "${i}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!Se.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${Se.join(`, `)}.`),1;if(n.detectBundlePath())return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&doc=${encodeURIComponent(`__skill__/${e}/${i}`)}`,`Opening skill ${i} (${e}) in the OpenKnowledge desktop app.`,n);let a=n.resolveBaseUrl(r);if(a){let t=`${a}/#/${kt(e,i)}`;return Sd(t,`Opening skill ${i} (${e}) in your browser: ${t}`,n)}return xd(n)}let a=/\/+$/.test(e)||n.classifyName(r,i)===`folder`,o=n.detectBundlePath();if(a){if(o)return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&folder=${encodeURIComponent(i)}`,`Opening folder ${i} in the OpenKnowledge desktop app.`,n);let e=n.resolveBaseUrl(r);if(e){let t=`${e}/#/${it(i)}`;return Sd(t,`Opening folder ${i} in your browser: ${t}`,n)}return xd(n)}if(o)return Sd(`openknowledge://open?project=${encodeURIComponent(r)}&doc=${encodeURIComponent(i)}`,`Opening ${i} in the OpenKnowledge desktop app.`,n);let s=n.resolveBaseUrl(r);if(s){let e=`${s}/#/${Ee(i)}`;return Sd(e,`Opening ${i} in your browser: ${e}`,n)}return xd(n)}function wd(){return new D(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${Se.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the current directory)`).action(async(e,t)=>{process.exitCode=await Cd(e,t,yd())})}function Td(e){return new D(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CD2IbfNk.mjs`),r=e(),i=process.cwd(),a=At(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ed(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Dd(e,t,n=process.cwd()){let r=e.op??`sync`,i=Gt(w(n));if(i&&i.port>0){let t=`http://127.0.0.1:${i.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${i.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...ie({kind:`cli`,runtimeVersion:E})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ed(e.json,{type:`triggered`,op:r,port:i.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let a=Ut({baseDir:n});if(r===`sync`||r===`pull`){Ed(e.json,{type:`step`,step:`pull`});let t=await a.pull();Ed(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ed(e.json,{type:`step`,step:`push`}),await a.push(),Ed(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)),Ed(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Od(e){return new D(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Dd({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function kd(e){return new D(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Dd({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Ad(e){return new D(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Dd({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}function jd(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${M(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let n=[...new Set([ve,...ne.map(e=>Te[e])].filter(e=>e!==null).map(re))].map(e=>`${e}/`);return`\n${M(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${n.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function Md(e){return typeof e==`string`&&Fe.includes(e)}async function Nd(e={}){let t=R(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Je[n])return{status:`failed`,message:`${j(`Error:`)} Unknown pack "${n}". Available: ${Fe.join(`, `)}`,exitCode:1};let r;try{r=await qe({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Ge?{status:`prerequisite-missing`,message:`${j(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${j(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!ce(r)){let e=Je[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${M(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=jd(r,e);return{status:`no-op`,message:`${A(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${k(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Re(Je[n]);return{status:`dry-run`,message:`${N(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${N(`Plan:`)}\n\n${Fd(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await Id(`${N(`Plan:`)}\n\n${Fd(r,t)}\n\n${N(`Apply?`)} ${k(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:k(`Cancelled.`),plan:r,exitCode:0};let i=await zt(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${j(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${M(`Applied`)} ${i.applied} entries, ${M(String(i.errors.length))} error(s):`,...e].join(`
 `),plan:r,exitCode:1}}let a=Je[n].name,o=i.packSkillsInstalled.length>0?`\n${k(`Installed the ${a} skills for: ${i.packSkillsInstalled.join(`, `)}`)}`:``,s=i.pluginsEnabled.length>0?`\n${k(`Enabled plugin(s) included with this pack: ${i.pluginsEnabled.join(`, `)} — turn off any time in Settings.`)}`:``,c=(i.packSkillConflicts??[]).map(e=>e.hosts===void 0||e.hosts.length===0?`\n${M(`!`)} Skill "${e.name}" was not installed — you already have your own skill with that name. Rename yours if you want the pack's version.`:`\n${M(`!`)} Skill "${e.name}" was not installed for ${e.hosts.join(`, `)} — you already have your own skill with that name there. Rename yours if you want the pack's version.`).join(``);return{status:`applied`,message:`${A(`✓ Seeded ${a}`)} ${k(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}${s}${jd(r,a)}${c}`,plan:r,exitCode:0}}function Pd(){let e=[N(`Available packs:`)];for(let t of Fe){let n=Je[t];e.push(`  ${A(t)}  ${k(`—`)} ${n.name}: ${n.description}`)}return e.join(`
 `)}function Fd(e,t){let n=[],r=e.created.filter(e=>e.kind===`folder`),i=e.created.filter(e=>e.kind===`file`);if(r.length>0){n.push(N(`Folders to create:`));for(let e of r)n.push(`  ${A(`+`)} ${O(L(t,R(t,e.path))||e.path)}${k(`/`)}`)}if(i.length>0){n.length>0&&n.push(``),n.push(N(`Files to create:`));for(let e of i)n.push(`  ${A(`+`)} ${O(L(t,R(t,e.path))||e.path)}`)}if(e.skipped.length>0){n.length>0&&n.push(``),n.push(k(`Already present (skipped):`));for(let t of e.skipped)n.push(`  ${k(`· ${t.path} (${t.reason})`)}`)}if(e.warnings.length>0){n.length>0&&n.push(``),n.push(M(`Warnings:`));for(let t of e.warnings)n.push(`  ${M(`!`)} ${t}`)}let a=(e.packSkills??[]).filter(e=>e.conflict);if(a.length>0){n.length>0&&n.push(``),n.push(M(`Name collisions:`));for(let e of a)n.push(`  ${M(`!`)} Skill "${e.name}" is your own — the pack's version will not be installed. Rename yours to install the pack's version.`)}return n.join(`
@@ -83,7 +83,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function Bd(e){return new D(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await zd(t,await e())})}async function Vd(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Hd(e,t){let{host:n,json:r}=e;W(n);let i=await ya(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await Vd(new K({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function Ud(e){return new D(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Hd(t,await e())})}function Wd(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Gd(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Kd(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function qd(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function Jd(e){return Ut(Ga(e,[])).env(za())}function Yd(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const Xd={ensureOkScaffold:e=>{at(e)},gitFactory:Jd};async function Zd(e){let t={...Xd,...e.deps},n=R(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await qd(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Wd(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n);if(!z(I(n,`.git`)))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let a;try{a=await Gd({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Wd(t)===`name-conflict`){let t=await Kd(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};a=t}else return{kind:`error`,code:Wd(t)}}try{await i.addRemote(`origin`,a.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let o=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{o=!0}if(o)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let s=Yd(a.cloneUrl,e.token);try{await i.raw([`push`,s,`HEAD:refs/heads/${a.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${a.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:a.cloneUrl,defaultBranch:a.defaultBranch}}}function Qd(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function $d(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(W(n),Mt(s)){process.stderr.write(`${new ut(R(s)).message}\n`),process.exitCode=64;return}let l=await ya(n,t);if(l==null){Qd(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new K({auth:l,...u?{baseUrl:u}:{}});try{ir(`git config user.email`,C({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Qd(c,await Zd({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function ef(e){return new D(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await $d(t,await e())})}function tf(){let e=new D(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Sn();return e.addCommand(Ud(t)),e.addCommand(Bd(t)),e.addCommand(ef(t)),e}function nf(){return new D(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=R(e.project??process.cwd()),n=Ln(t),r=Mn(t,Un(t));if(r.kind===`no-exclude`){rf(e.json,t,r.reason);return}let i=Ln(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:i,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){process.stderr.write(`${O(`Sharing mode is already`)} ${N(`shared`)} ${O(`— nothing to do.`)}\n`);return}process.stderr.write(`${A(`✓`)} ${N(`Sharing mode set to`)} ${A(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${N(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function rf(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${M({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function af(){return new D(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=R(e.project??process.cwd()),n=Ln(t),r=zn(t),i=[...kn(t)],a=In(t,Un(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,skillsShared:r,excluded:i,trackedUpstream:a};process.stdout.write(`${JSON.stringify(e)}\n`);return}let o=[];if(o.push(`OpenKnowledge sharing mode: ${of(n)}`),r&&o.push(`  ${N(`.ok/skills`)} is committable (carved out); the rest of .ok/ stays local.`),o.push(``),o.push(`Excluded from git via ${N(`.git/info/exclude`)}:`),i.length===0)o.push(`  (none)`);else for(let e of i)o.push(`  ${e}`);if(o.push(``),o.push(`Other OK paths exist but are tracked upstream:`),a.length===0)o.push(`  (none)`);else for(let e of a)o.push(`  ${e}`);o.push(``),o.push(`Toggle with: ${O(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),r&&o.push(`  (that shares the whole project; to undo only the skills carve-out, use the desktop app: Settings > Sync & sharing)`),process.stdout.write(`${o.join(`
-`)}\n`)})}function of(e){switch(e){case`shared`:return A(`shared`);case`local-only`:return A(`local-only`);case`no-git`:return M(`no-git (not a git repository)`)}}function sf(){return new D(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=R(e.project??process.cwd()),n=Rn(t,Un(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){cf(e.json,t,n.reason);return}let r=Ln(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${N(`Sharing mode is already`)} ${A(`local-only`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${A(`✓`)} ${N(`Sharing mode set to`)} ${A(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${N(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function cf(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${M({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function lf(){let e=new D(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(nf()),e.addCommand(sf()),e.addCommand(af()),e}const uf=new Set([`--cwd`,`--log-level`]);function df(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){uf.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function ff(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function pf(e){return/\.(md|mdx)$/i.test(e)}function mf(e,t){if(pf(t))return!0;try{return H(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function hf(e=()=>Tn(wn())){return{prepare:wt,detectBundlePath:()=>e().bundlePath??null,openTarget:_d,runProjectOpen:(e,t)=>Cd(e,{project:t},yd()),runBrowserOpen:e=>_f(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function gf(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof Dt||e instanceof St||e instanceof pt)return t.error(e.message),1;throw e}if(n.mode===`project`)return await t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`,r=await t.openTarget(e);return r.ok?(t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${vd(r.reason,e)}.`),1)}return await t.runBrowserOpen(n),0}async function _f(e){let{createEphemeralProjectDir:t}=await import(`./src-D8-g0N2O.mjs`),{loadConfig:n}=await import(`./src-64lDxLkp.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BSdUOq1f.mjs`),{openBrowser:o}=await import(`./open-browser-Bfb2pWyj.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy()}catch{}try{await Or(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ee(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function of(e){switch(e){case`shared`:return A(`shared`);case`local-only`:return A(`local-only`);case`no-git`:return M(`no-git (not a git repository)`)}}function sf(){return new D(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=R(e.project??process.cwd()),n=Rn(t,Un(t));if(n.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:n.tracked,remediation:n.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${n.remediation}\n`);process.exitCode=1;return}if(n.kind===`no-exclude`){cf(e.json,t,n.reason);return}let r=Ln(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:r,appended:n.appended,alreadyPresent:n.alreadyPresent};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n.appended.length===0){process.stderr.write(`${N(`Sharing mode is already`)} ${A(`local-only`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${A(`✓`)} ${N(`Sharing mode set to`)} ${A(`local-only`)}\n`),process.stderr.write(`  Added ${n.appended.length} path(s) to ${N(`.git/info/exclude`)} (per-clone, not committed).\n`)})}function cf(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${M({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function lf(){let e=new D(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(nf()),e.addCommand(sf()),e.addCommand(af()),e}const uf=new Set([`--cwd`,`--log-level`]);function df(e){let t=[],n=null,r=!1;for(let i=0;i<e.length;i++){let a=e[i];if(a===`--help`||a===`-h`||a===`--version`||a===`-V`){r=!0;break}if(a===`--cwd`||a===`--log-level`){a===`--cwd`&&(n=e[i+1]??null),i++;continue}if(a.startsWith(`--cwd=`)){n=a.slice(6);continue}if(!a.startsWith(`--log-level=`)&&!(a===`--no-color`||a===`--color`)){if(a.startsWith(`-`)){uf.has(a)&&i++;continue}t.push(a)}}return{operands:t,cwd:n,sawTerminalFlag:r}}function ff(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function pf(e){return/\.(md|mdx)$/i.test(e)}function mf(e,t){if(pf(t))return!0;try{return H(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function hf(e=()=>Tn(wn())){return{prepare:wt,detectBundlePath:()=>e().bundlePath??null,openTarget:_d,runProjectOpen:(e,t)=>Cd(e,{project:t},yd()),runBrowserOpen:e=>_f(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function gf(e,t){let n;try{n=t.prepare(e)}catch(e){if(e instanceof Dt||e instanceof St||e instanceof pt)return t.error(e.message),1;throw e}if(n.mode===`project`)return await t.runProjectOpen(n.docName,n.projectRoot);if(t.detectBundlePath()){let e=`openknowledge://open?file=${encodeURIComponent(n.canonicalFilePath)}`,r=await t.openTarget(e);return r.ok?(t.log(`Opening ${n.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${vd(r.reason,e)}.`),1)}return await t.runBrowserOpen(n),0}async function _f(e){let{createEphemeralProjectDir:t}=await import(`./src-Db2adcph.mjs`),{loadConfig:n}=await import(`./src-qYDMEf4S.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-D8D6GD4Q.mjs`),{openBrowser:o}=await import(`./open-browser-CTBKeB6u.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy()}catch{}try{await Or(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ee(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function vf(){let e=new D(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=R(process.cwd()),n=Be(_t(t)?.rootPath??t),r=Ft({projectDir:n}),i={...r,skills:r.skills.filter(e=>ae(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${k(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${N(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?k(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?k(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${A(e.name)}${t}  ${k(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${N(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${O(e.name)} ${k(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=nn(w(process.cwd()),`server`);if(n.status!==`alive`){process.stderr.write(`${j(`Error:`)} no running Open Knowledge server for this project. Start it with ${N(`ok start`)} and retry.\n`),process.exitCode=1;return}let r;try{r=await fetch(`http://127.0.0.1:${n.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${j(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let i=await r.json().catch(()=>({}));if(!r.ok){let e=i.detail??i.title??`HTTP ${r.status}`;process.stderr.write(`${j(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let a=i.name;if(i.alreadyImported){process.stdout.write(`${O(`Already imported:`)} ${N(a)} (identical content).\n`);return}let o=i.provenance??{},s=i.collisionRenamedFrom;process.stdout.write(`${A(`Imported`)} ${N(a)}${s?k(` (renamed from ${s} — name was taken)`):``} from ${k(o.source??e)}${o.publisher?k(` · ${o.publisher}`):``}.\n${k(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of i.warnings??[])process.stdout.write(`  ${k(`! ${e}`)}\n`)}),e}function yf(e){return{server:bf(`server`,e),ui:e.status===`alive`&&qt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function bf(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function xf(e){return`${Sf(e.server)}\n${Sf(e.ui)}`}function Sf(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Cf(e){let t=e.inspect??(()=>nn(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=yf(t());return e.json?n(JSON.stringify(r,null,2)):n(xf(r)),r}function wf(e){return new D(`status`).description(`Show live state of the server + ui lockfiles for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Cf({lockDir:w(process.cwd()),json:t.json===!0})})}function Tf(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Ef(e,t){let n=Mr({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function Df(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(k(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await jn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:ye.length+1,choices:[...ye.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Ef(t,k(`Anything else we should know? (optional) `)),i=await Ef(t,k(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function Of(e){if(!Tf(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>Df(e)))()}catch{return`failed`}return de(t)?((e.output??process.stderr).write(`\n${N(`Thank you. We read every response.`)}\n\n`),(await(e.submit??S)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function kf(e,t,n=Af,r=z,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of[`/Applications/OpenKnowledge.app`,I(e,`Applications`,`OpenKnowledge.app`)])r(t)&&a.push({method:`app`,label:`OK Desktop (${t})`,instruction:`Move ${t} to the Trash (or: rm -rf "${t}")`});else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of[`@inkeepopen-knowledge-desktop`,`OpenKnowledge`]){let n=I(e,`Programs`,t,`OpenKnowledge.exe`);if(r(n)){a.push({method:`app`,label:`OK Desktop (${n})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → OpenKnowledge`});break}}}else o===`linux`&&r(`/opt/OpenKnowledge/openknowledge`)&&a.push({method:`app`,label:`OK Desktop (/opt/OpenKnowledge)`,instruction:`Remove with your package manager: sudo apt remove openknowledge (Debian/Ubuntu) or sudo dnf remove OpenKnowledge (Fedora/RHEL)`});return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function Af(e){try{return rr(`npm`,e,C({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const jf=`━`.repeat(64);function Mf(e,t=process.platform){let n=[M(jf),N(`  One more step — remove the OpenKnowledge app itself`),k(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(k(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${O(`OK Desktop`)} — ${e}`),n.push(`    ${O(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${O(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${O(t.label)}`),n.push(`    ${t.instruction}`);return n.push(M(jf)),n.join(`

package/dist/constants-C7GcNmeI.mjs

@@ -0,0 +1,2 @@
+import"./src-B5PnzP5L.mjs";var e=`0.63.0-beta.14`;const t=`config.yml`,n=e;export{n,t};
+//# sourceMappingURL=constants-C7GcNmeI.mjs.map

package/dist/index.mjs

@@ -1528,6 +1528,6 @@ export default function okBridge(pi: {
 `))}function j9(e,t){let n=S(e,`utf-8`);if(n.trim().length!==0)try{let r=k9(JSON.parse(n),t),i=n.endsWith(`
 `)?`
 `:``;te(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=O9(n,t.contentDir);r!==n&&te(e,r)}}function M9(e,t){let n=S(e,`utf-8`),r=O9(n,t.contentDir);r!==n&&te(e,r)}function N9(e){try{return C(e,{withFileTypes:!0}).filter(e=>e.isFile()).map(t=>N(e,t.name))}catch{return[]}}const gTe=new Set([`agent-presence.json`,`agent-effects.json`,`runtime.json`]);function P9(e){return/\.log\.\d+$/.test(e)}function _Te(e){return e.endsWith(`.jsonl`)||e.endsWith(`.log`)||P9(e)}function vTe(e){let t={contentDir:e.contentDir};for(let n of[`telemetry`,`logs`,`process`])for(let r of N9(N(e.stagingDir,n)))_Te(r)?A9(r,t):r.endsWith(`.json`)?j9(r,t):M9(r,t);for(let n of N9(N(e.stagingDir,`state`))){let e=fe(n);n.endsWith(`.jsonl`)?A9(n,t):gTe.has(e)?j9(n,t):M9(n,t)}}const F9=[`.ok`,`local`,`telemetry`],I9=[`.ok`,`local`,`logs`],L9=[`.ok`,`local`,`loss-capture`],R9=`spans-current.jsonl`,z9=`spans-prev.jsonl`,B9=`server-current.jsonl`,V9=`server-prev.jsonl`,H9=`loss-current.jsonl`,U9=`loss-prev.jsonl`;function yTe(e){return N(e,...F9,R9)}function bTe(e){return N(e,...F9,z9)}function xTe(e){return N(e,...I9,B9)}function STe(e){return N(e,...I9,V9)}function CTe(e){return N(e,...L9,H9)}function wTe(e){return N(e,...L9,U9)}const W9=1e3;async function TTe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-presence`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function ETe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-effects`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function DTe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/watcher-recent`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}function OTe(e){try{let t=JSON.parse(e);if(typeof t!=`object`||!t)return null;let n=t.decisions;return Array.isArray(n)?n.length===0?``:`${n.map(e=>JSON.stringify(e)).join(`
-`)}\n`:null}catch{return null}}function kTe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=u(`git`,[`-C`,t,`log`,`--oneline`,`-50`],d3({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function ATe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=u(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],d3({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function jTe(){return{nodeVersion:process.version,platform:k(),arch:re()}}function MTe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,on.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function NTe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return NTe(e.maxBytes)}function PTe(e){let t=q9(XQ(`project`,e)),n=q9(XQ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function FTe(e){return Ae(`sha256`).update(e).digest(`hex`)}function ITe(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}function LTe(e){let t=S(e,`utf-8`),n=`"doc.name"`,r=0,i=t.indexOf(n);for(;i!==-1;)r++,i=t.indexOf(n,i+10);return r}function X9(e,t){if(!g(e))return!1;try{return v(pe(t),{recursive:!0}),m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=C(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const RTe=new Set([`.jsonl`]);function Q9(e){let t=e.lastIndexOf(`.`);return t===-1?!1:RTe.has(e.slice(t))}const zTe=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`]);function BTe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t===-1?!1:zTe.has(e.slice(t))}function VTe(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!BTe(r))continue;let{redacted:i,patterns:a,lineCount:o}=Oo(S(n,`utf-8`));a.length!==0&&(te(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return _e(e,t).split(ye).join(`/`)}async function HTe(e){let t=ve(e.contentDir),n=ve(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??TTe,a=r.fetchAgentEffects??ETe,o=r.fetchWatcherRecent??DTe,s=r.readShadowHead??kTe,c=r.readCheckpointRefs??ATe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.63.0-beta.12`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??jTe,h=r.isOtlpPushEnabled??MTe,_=y(N(le(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(yTe(n),N(_,`telemetry`,R9)),X9(bTe(n),N(_,`telemetry`,z9)),X9(xTe(n),N(_,`logs`,B9)),X9(STe(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,fe(t)));for(let t of e.userStateFiles??[])X9(t,N(_,Eo,fe(t)));let y=N(n,`.ok`,`local`),b=N(y,`server.lock`),x=`not-running`,C=`no server.lock`,w=null;if(g(b)){X9(b,N(_,`state`,`server.lock`));try{let e=S(b,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?w=t.port:C=`lock present but no port`}catch{C=`lock present but unparseable`}}if(w!==null){let e=await i(w);e===null?C=`agent-presence endpoint at :${w} unreachable`:(te(N(_,`state`,`agent-presence.json`),e),x=`running`,C=``);let t=await a(w);t!==null&&te(N(_,`state`,`agent-effects.json`),t);let n=await o(w);if(n!==null){let e=OTe(n);e!==null&&te(N(_,`state`,`watcher-recent.jsonl`),e)}}let T=s(t);T!==null&&te(N(_,`state`,`shadow-head.txt`),T);let E=c(t);E!==null&&te(N(_,`state`,`checkpoint-refs.txt`),E),X9(CTe(n),N(_,`state`,H9)),X9(wTe(n),N(_,`state`,U9)),X9(N(y,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(y,iX),N(_,`state`,iX)),X9(N(y,aX),N(_,`state`,aX));let ee=p(),ne=d(),re=f(),ie={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:re}};te(N(_,`state`,`runtime.json`),`${JSON.stringify(ie,null,2)}\n`);let ae=x===`running`?`running
+`)}\n`:null}catch{return null}}function kTe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=u(`git`,[`-C`,t,`log`,`--oneline`,`-50`],d3({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function ATe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=u(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],d3({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function jTe(){return{nodeVersion:process.version,platform:k(),arch:re()}}function MTe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,on.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function NTe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return NTe(e.maxBytes)}function PTe(e){let t=q9(XQ(`project`,e)),n=q9(XQ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function FTe(e){return Ae(`sha256`).update(e).digest(`hex`)}function ITe(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}function LTe(e){let t=S(e,`utf-8`),n=`"doc.name"`,r=0,i=t.indexOf(n);for(;i!==-1;)r++,i=t.indexOf(n,i+10);return r}function X9(e,t){if(!g(e))return!1;try{return v(pe(t),{recursive:!0}),m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=C(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const RTe=new Set([`.jsonl`]);function Q9(e){let t=e.lastIndexOf(`.`);return t===-1?!1:RTe.has(e.slice(t))}const zTe=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`]);function BTe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t===-1?!1:zTe.has(e.slice(t))}function VTe(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!BTe(r))continue;let{redacted:i,patterns:a,lineCount:o}=Oo(S(n,`utf-8`));a.length!==0&&(te(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return _e(e,t).split(ye).join(`/`)}async function HTe(e){let t=ve(e.contentDir),n=ve(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??TTe,a=r.fetchAgentEffects??ETe,o=r.fetchWatcherRecent??DTe,s=r.readShadowHead??kTe,c=r.readCheckpointRefs??ATe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.63.0-beta.14`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??jTe,h=r.isOtlpPushEnabled??MTe,_=y(N(le(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(yTe(n),N(_,`telemetry`,R9)),X9(bTe(n),N(_,`telemetry`,z9)),X9(xTe(n),N(_,`logs`,B9)),X9(STe(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,fe(t)));for(let t of e.userStateFiles??[])X9(t,N(_,Eo,fe(t)));let y=N(n,`.ok`,`local`),b=N(y,`server.lock`),x=`not-running`,C=`no server.lock`,w=null;if(g(b)){X9(b,N(_,`state`,`server.lock`));try{let e=S(b,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?w=t.port:C=`lock present but no port`}catch{C=`lock present but unparseable`}}if(w!==null){let e=await i(w);e===null?C=`agent-presence endpoint at :${w} unreachable`:(te(N(_,`state`,`agent-presence.json`),e),x=`running`,C=``);let t=await a(w);t!==null&&te(N(_,`state`,`agent-effects.json`),t);let n=await o(w);if(n!==null){let e=OTe(n);e!==null&&te(N(_,`state`,`watcher-recent.jsonl`),e)}}let T=s(t);T!==null&&te(N(_,`state`,`shadow-head.txt`),T);let E=c(t);E!==null&&te(N(_,`state`,`checkpoint-refs.txt`),E),X9(CTe(n),N(_,`state`,H9)),X9(wTe(n),N(_,`state`,U9)),X9(N(y,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(y,iX),N(_,`state`,iX)),X9(N(y,aX),N(_,`state`,aX));let ee=p(),ne=d(),re=f(),ie={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:re}};te(N(_,`state`,`runtime.json`),`${JSON.stringify(ie,null,2)}\n`);let ae=x===`running`?`running
 `:`not-running (${C})\n`;if(te(N(_,`state`,`server-status.txt`),ae),e.processDir&&g(e.processDir)){let t=N(_,`process`);v(t,{recursive:!0}),m(e.processDir,t,{recursive:!0})}let oe=e.redact===!0;oe&&vTe({stagingDir:_,contentDir:t}),e.note&&te(N(_,`note.txt`),e.note);let se=null;e.scrubSecrets===!0&&(se=VTe(_));for(let t of e.extraFiles??[])X9(t.sourcePath,N(_,`extra`,t.zipName??fe(t.sourcePath)))||r.logger?.warn({sourcePath:t.sourcePath},`extra file missing; omitted from bundle`);let k=PTe(n),ce=Z9(_),le=[],ue=0,A=0;for(let e of ce){let t=$9(_,e),n=O(e).size,r=Q9(t)?ITe(e):0;le.push({path:t,bytes:n,lines:r}),ue+=n,t.startsWith(`telemetry/`)&&Q9(t)&&(A+=LTe(e))}let j={applied:oe};se!==null&&(j.secretScrub=se);let de={schemaVersion:2,createdAt:l().toISOString(),ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:re},contentDir:{pathSha256:FTe(t),absolutePath:oe?`<CONTENT_DIR>`:t},telemetry:{localSink:k,otlpPushEnabled:h()},redaction:j,serverStatus:x,files:le};te(N(_,`manifest.json`),`${JSON.stringify(de,null,2)}\n`);let pe=ce.some(e=>{try{return S(e,`utf-8`).includes(t)}catch{return!1}}),me={totalBytes:ue,fileCount:le.length,docNameCount:A,contentDirVisible:pe,redacted:oe},M=!1;return{stagingDir:_,manifest:de,summary:me,cleanup:()=>{M||(M=!0,D(_,{recursive:!0,force:!0}))}}}catch(e){throw D(_,{recursive:!0,force:!0}),e}}async function UTe(e){let{collected:t,outputPath:n}=e,r=pe(n);if(!g(r))throw Error(`ok diagnose bundle: parent directory does not exist: ${r}. Create it or pass --out with an existing parent.`);let i=new gye.ZipFile,a=Z9(t.stagingDir);for(let e of a){let n=$9(t.stagingDir,e);i.addFile(e,n)}i.end();let o=h(n);return i.outputStream.pipe(o),await new Promise((e,t)=>{o.on(`close`,e),o.on(`error`,t),i.outputStream.on(`error`,t)}),n}function WTe(e,t){let n=N(e,`.ok`,`config.yml`);if(g(n))try{let t=(0,on.parse)(S(n,`utf-8`)),r=k7(t)?t.content:void 0,i=k7(r)?r.dir:void 0;if(typeof i==`string`&&i.length>0)return ve(e,i)}catch(e){t?.warn({configPath:n,err:e},`bug-report: failed to read .ok/config.yml; falling back to project root as content dir`)}return ve(e)}async function GTe(e,t,n,r){let i=o9(t,e.logger),a=await HTe({contentDir:WTe(t,e.logger),projectDir:t,redact:e.redact,scrubSecrets:e.redact,note:e.note,extraFiles:e.extraFiles,userLogFiles:[...Fwe(i,e.userLogsDir??N(oe(),`.ok`,`logs`)),...c9(e.cachesDir??N(oe(),`Library`,`Caches`))],userStateFiles:l9(e.bugReportsDir??a9()),deps:{readDesktopEnv:n,readLanguage:r,logger:e.logger}});try{v(pe(e.outputPath),{recursive:!0}),await UTe({collected:a,outputPath:e.outputPath});let t=a.manifest.redaction.secretScrub;return{zipPath:e.outputPath,summary:{level:`full`,systemWide:!1,projectSlug:i,files:a.manifest.files.map(e=>e.path),redactions:t?.redactions??[],redactedLineCount:t?.redactedLineCount??0,generatedAt:a.manifest.createdAt}}}finally{a.cleanup()}}async function KTe(e){let{projectDir:t}=e,n=e.readDesktopEnv??G9,r=e.readLanguage??D9;if(e.level===`full`&&t!==void 0)return GTe(e,t,n,r);let{zipPath:i,summary:a}=await zwe({projectDir:t,redact:e.redact,outputPath:e.outputPath,userLogsDir:e.userLogsDir,shipItLogFiles:c9(e.cachesDir??N(oe(),`Library`,`Caches`)),bugReportLedgerFiles:l9(e.bugReportsDir??a9()),logger:e.logger,note:e.note,extraFiles:e.extraFiles,desktop:n(),language:r()});return{zipPath:i,summary:{level:e.level,systemWide:t===void 0,projectSlug:a.projectSlug,files:a.files,redactions:a.redactions,redactedLineCount:a.redactedLineCount,generatedAt:a.generatedAt}}}export{N5 as ALL_EDITOR_IDS,P5 as EDITOR_LABELS,t7 as EDITOR_TARGETS,HSe as HOSTS_WITH_USER_SKILL_DIR,wwe as LAUNCH_CONFIG_NAME,aTe as PATH_SHIM_BEGIN,sTe as PATH_SHIM_BLOCK_RE,oTe as PATH_SHIM_END,rwe as addOkPathsToGitExclude,x7 as assertProjectPathSafe,U5 as buildManagedServerEntry,Ywe as buildMcpConfigDeclineEvent,Xwe as buildMcpConfigMigrateEvent,i9 as classifyExistingMcpEntry,KTe as collectReportBundle,un as createTokenStore,Mwe as defaultBugReportZipPath,Be as detectGh,Ue as detectGhAccounts,kwe as detectInstalledEditors,tCe as editorConfigPathDisplay,eCe as editorEntryLocator,Vwe as ensurePiBridge,R7 as formatTrackedRemediation,owe as getExcludedOkPaths,nwe as getNativeTomlMcpEditor,I7 as getOkArtifactPaths,V5 as isEntryUpToDate,W5 as isOwnManagedEntry,nTe as loadConfig,fee as makeLazyProbeTokenStore,a9 as okBugReportsDir,C9 as parseGitHubBlobUrl,rTe as parseGitHubShareUrl,w9 as parseGitHubTreeUrl,S9 as parseGitUrl,cTe as pathInstallMarkerPath,FCe as previewContent,jwe as probeOwnManagedEditorMcpEntry,Bwe as probePiBridgeState,L7 as probeTrackedOkPaths,n9 as readExistingMcpEntry,awe as readSharingMode,swe as readSkillsShared,Oo as redactContent,iwe as removeOkPathsFromGitExclude,Gwe as removeOwnMcpEntry,GCe as removeProjectSkill,uTe as removeUserGlobalSkillBundle,VCe as resolveProjectRoot,eTe as runStop,cwe as setSkillsShared,v9 as truncatePriorEntry,E9 as userGlobalSkillBundleTargets,iTe as validateLocalFolderForShare,t9 as writeEditorMcpConfig,pTe as writeProjectAiIntegrations,w7 as writeProjectSkill,Owe as writeUserMcpConfigs};
 //# sourceMappingURL=index.mjs.map