@inkeep/open-knowledge 0.70.0-beta.1 → 0.70.0-beta.2

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$u as t,Eu as n,Ft as r,Gs as i,Gu as a,Hn as o,Io as s,Js as c,La as l,Nu as u,Ps as d,Qc as f,Qo as p,Rc as m,Sc as h,Su as g,Ts as _,Ui as v,Xl as y,Xo as b,Yu as x,Z as S,Zc as C,_c as ee,ad as w,bo as te,bu as ne,co as re,cu as ie,dc as ae,ed as oe,et as se,fu as ce,ho as le,id as ue,ks as de,ku as fe,ll as pe,ma as me,mu as T,oc as he,oo as ge,ou as _e,pu as E,qi as ve,su as ye,tu as be,us as xe,va as Se,wl as Ce,wo as we,xu as Te,yu as Ee}from"./md-manager-BGnqyqi1-BRU4tUy7.mjs";import{$a as De,$n as Oe,Ai as ke,Ao as Ae,C as je,Ci as Me,Co as Ne,Di as Pe,Do as Fe,Dr as Ie,Eo as Le,F as Re,Ha as ze,Hi as Be,Ji as D,Jn as Ve,Jt as He,K as Ue,Ki as We,Ln as Ge,Lr as Ke,Mi as qe,Oo as Je,P as Ye,Pn as Xe,Qr as Ze,Rn as Qe,Rr as $e,Rt as et,Si as tt,St as nt,T as rt,Vi as it,Vo as at,Xa as O,Xn as ot,Xr as st,Yi as ct,Yr as lt,Zt as ut,_n as dt,_o as ft,_t as pt,an as mt,ao as ht,at as gt,b as _t,bo as vt,br as yt,co as bt,d as xt,di as St,dn as Ct,ea as wt,fi as Tt,gi as Et,gr as Dt,gt as Ot,hn as kt,ii as At,in as jt,ji as Mt,jt as Nt,ko as Pt,kt as Ft,ln as It,lo as Lt,lt as Rt,m as zt,ma as Bt,mi as Vt,oo as Ht,pa as Ut,pi as Wt,pr as Gt,pt as Kt,qi as qt,ro as Jt,rr as Yt,so as Xt,un as Zt,uo as Qt,ut as $t,vo as en,vt as tn,xi as nn,xo as rn,xr as an,yo as on,yt as sn,z as cn,zn as ln}from"./dist-C4d76Rpb.mjs";import{D as un,E as dn,F as fn,G as pn,H as mn,K as hn,M as gn,O as _n,P as vn,U as yn,V as bn,W as xn,X as Sn,Y as Cn,_t as wn,dt as Tn,ft as En,gt as Dn,ht as On,j as kn,mt as An,pt as jn,q as Mn,u as Nn,vt as k,z as Pn}from"./init-BkJMnAZa.mjs";import{_ as Fn,b as In,d as Ln,f as Rn,g as zn,h as Bn,m as Vn,o as Hn,u as Un,x as Wn,y as Gn}from"./registry-probes-DXcLFqVT.mjs";import{C as Kn,S as qn,T as Jn,_ as Yn,a as Xn,b as Zn,c as Qn,d as $n,f as er,g as tr,i as nr,l as rr,m as ir,n as ar,o as or,p as sr,r as cr,s as lr,t as ur,u as dr,v as fr,w as pr,x as mr,y as hr}from"./src-BLfDAAYe.mjs";import{c as gr,i as A,n as j,o as M,r as N,s as P,t as F}from"./colors-r_owlCuY.mjs";import{n as _r,r as vr,t as yr}from"./dist-bundle-T0gq9zHH.mjs";import{E as br,S as xr,y as Sr}from"./start-Mm-GMb4m.mjs";import{n as Cr,t as wr}from"./constants-oXxsVSOP.mjs";import{n as Tr,t as Er}from"./loader-BGPXyqhj.mjs";import{t as Dr}from"./removal-file-path-D1d9Bfvc.mjs";import{t as Or}from"./launch-json-removal-BoCDtAfN.mjs";import{execFile as kr,execFileSync as Ar,execSync as jr,spawn as Mr,spawnSync as Nr}from"node:child_process";import{basename as Pr,dirname as I,isAbsolute as Fr,join as L,posix as Ir,relative as R,resolve as z,sep as Lr,win32 as Rr}from"node:path";import zr from"node:process";import{fileURLToPath as Br}from"node:url";import{accessSync as Vr,appendFileSync as Hr,closeSync as Ur,constants as Wr,existsSync as B,lstatSync as Gr,mkdirSync as V,mkdtempSync as Kr,readFileSync as H,readdirSync as qr,readlinkSync as Jr,realpathSync as Yr,renameSync as Xr,rmSync as Zr,statSync as U,unlinkSync as W,writeFileSync as Qr}from"node:fs";import{homedir as G,platform as $r,tmpdir as ei}from"node:os";import{rm as ti}from"node:fs/promises";import{randomUUID as ni}from"node:crypto";import{promisify as ri}from"node:util";import{setTimeout as ii}from"node:timers/promises";import{createInterface as ai}from"node:readline/promises";const oi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var si;si||={};function ci(e){return u(ie,e)}async function li(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],c=kt({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),o.push(e))},f=mt(t,r,d),p=l(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,v=e=>{let t=I(e),r=g.get(t);if(r)return r;let i=ct(n,e,d),a=jt(f,i);return g.set(t,a),a},y=[],b=ui(i,n);b.kind===`file`?y.push(R(n,b.path)):x(b.path);function x(e){let t;try{t=qr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${R(n,e)||`.`}: ${fi(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=L(e,r.name),i=R(n,t);if(r.isDirectory()){if(c.isDirExcluded(i))continue;x(t)}else if(r.isFile()){if(!di(r.name)||c.isExcluded(i))continue;y.push(i)}}}y.sort();let S=[],C=0,ee=0,w=0;for(let e of y){let t=L(n,e),r;try{r=H(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${fi(t)}`);continue}let i=v(e),c=!1;if(a&&i.enabled){let n=ge(r,i,e,h);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{Qr(i,n,`utf-8`),Xr(i,t),r=n,c=!0,w++}catch(t){try{W(i)}catch{}o.push(`could not write fix to ${e}: ${fi(t)}`)}}}let l=await s(r,i,e,h);for(let e of l)e.severity===`error`?C++:ee++;S.push({file:e,diagnostics:l,fixed:c})}return o.push(..._(m)),{contentDir:n,files:S,warnings:o,fileCount:y.length,errorCount:C,warningCount:ee,fixedCount:w,ran:p}}function ui(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Fr(e)?e:z(t,e);try{if(U(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function di(e){let t=e.toLowerCase();return o.some(e=>t.endsWith(e))}function fi(e){return e instanceof Error?e.message:String(e)}function pi(e){return new k(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Be(r,i),o=t===void 0?void 0:mi(t,Kn()),s=r.contentRules,c=await li({projectDir:i,contentDir:a,baseConfig:s?de(s):S,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${_i(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:hi(c))&&(process.exitCode=1)})}function mi(e,t){return z(t,e)}function hi(e){return e.errorCount>0||e.warningCount>0}function gi(e){let t=[F(e.file)+(e.fixed?j(` (fixed)`):``)];for(let n of e.diagnostics){let e=j(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?N(`error  `):P(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${j(`${n.source}/${n.code}`)}`)}return t.push(``),t}function _i(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...gi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(M(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${N(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(j(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...d(e.ran).map(e=>j(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(P(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$u as t,Eu as n,Ft as r,Gs as i,Gu as a,Hn as o,Io as s,Js as c,La as l,Nu as u,Ps as d,Qc as f,Qo as p,Rc as m,Sc as h,Su as g,Ts as _,Ui as v,Xl as y,Xo as b,Yu as x,Z as S,Zc as C,_c as ee,ad as w,bo as te,bu as ne,co as re,cu as ie,dc as ae,ed as oe,et as se,fu as ce,ho as le,id as ue,ks as de,ku as fe,ll as pe,ma as me,mu as T,oc as he,oo as ge,ou as _e,pu as E,qi as ve,su as ye,tu as be,us as xe,va as Se,wl as Ce,wo as we,xu as Te,yu as Ee}from"./md-manager-BGnqyqi1-BRU4tUy7.mjs";import{$a as De,$n as Oe,Ai as ke,Ao as Ae,C as je,Ci as Me,Co as Ne,Di as Pe,Do as Fe,Dr as Ie,Eo as Le,F as Re,Ha as ze,Hi as Be,Ji as D,Jn as Ve,Jt as He,K as Ue,Ki as We,Ln as Ge,Lr as Ke,Mi as qe,Oo as Je,P as Ye,Pn as Xe,Qr as Ze,Rn as Qe,Rr as $e,Rt as et,Si as tt,St as nt,T as rt,Vi as it,Vo as at,Xa as O,Xn as ot,Xr as st,Yi as ct,Yr as lt,Zt as ut,_n as dt,_o as ft,_t as pt,an as mt,ao as ht,at as gt,b as _t,bo as vt,br as yt,co as bt,d as xt,di as St,dn as Ct,ea as wt,fi as Tt,gi as Et,gr as Dt,gt as Ot,hn as kt,ii as At,in as jt,ji as Mt,jt as Nt,ko as Pt,kt as Ft,ln as It,lo as Lt,lt as Rt,m as zt,ma as Bt,mi as Vt,oo as Ht,pa as Ut,pi as Wt,pr as Gt,pt as Kt,qi as qt,ro as Jt,rr as Yt,so as Xt,un as Zt,uo as Qt,ut as $t,vo as en,vt as tn,xi as nn,xo as rn,xr as an,yo as on,yt as sn,z as cn,zn as ln}from"./dist-C4d76Rpb.mjs";import{D as un,E as dn,F as fn,G as pn,H as mn,K as hn,M as gn,O as _n,P as vn,U as yn,V as bn,W as xn,X as Sn,Y as Cn,_t as wn,dt as Tn,ft as En,gt as Dn,ht as On,j as kn,mt as An,pt as jn,q as Mn,u as Nn,vt as k,z as Pn}from"./init-B8otmhem.mjs";import{_ as Fn,b as In,d as Ln,f as Rn,g as zn,h as Bn,m as Vn,o as Hn,u as Un,x as Wn,y as Gn}from"./registry-probes-QaKSE8L7.mjs";import{C as Kn,S as qn,T as Jn,_ as Yn,a as Xn,b as Zn,c as Qn,d as $n,f as er,g as tr,i as nr,l as rr,m as ir,n as ar,o as or,p as sr,r as cr,s as lr,t as ur,u as dr,v as fr,w as pr,x as mr,y as hr}from"./src-BSRKGNp2.mjs";import{c as gr,i as A,n as j,o as M,r as N,s as P,t as F}from"./colors-r_owlCuY.mjs";import{n as _r,r as vr,t as yr}from"./dist-bundle-T0gq9zHH.mjs";import{E as br,S as xr,y as Sr}from"./start-CsbVSNv_.mjs";import{n as Cr,t as wr}from"./constants-Bc5xIETT.mjs";import{n as Tr,t as Er}from"./loader-DM3RDJSO.mjs";import{t as Dr}from"./removal-file-path-ucl0tG3x.mjs";import{t as Or}from"./launch-json-removal-CSUPTNXq.mjs";import{execFile as kr,execFileSync as Ar,execSync as jr,spawn as Mr,spawnSync as Nr}from"node:child_process";import{basename as Pr,dirname as I,isAbsolute as Fr,join as L,posix as Ir,relative as R,resolve as z,sep as Lr,win32 as Rr}from"node:path";import zr from"node:process";import{fileURLToPath as Br}from"node:url";import{accessSync as Vr,appendFileSync as Hr,closeSync as Ur,constants as Wr,existsSync as B,lstatSync as Gr,mkdirSync as V,mkdtempSync as Kr,readFileSync as H,readdirSync as qr,readlinkSync as Jr,realpathSync as Yr,renameSync as Xr,rmSync as Zr,statSync as U,unlinkSync as W,writeFileSync as Qr}from"node:fs";import{homedir as G,platform as $r,tmpdir as ei}from"node:os";import{rm as ti}from"node:fs/promises";import{randomUUID as ni}from"node:crypto";import{promisify as ri}from"node:util";import{setTimeout as ii}from"node:timers/promises";import{createInterface as ai}from"node:readline/promises";const oi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var si;si||={};function ci(e){return u(ie,e)}async function li(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],c=kt({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),o.push(e))},f=mt(t,r,d),p=l(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,v=e=>{let t=I(e),r=g.get(t);if(r)return r;let i=ct(n,e,d),a=jt(f,i);return g.set(t,a),a},y=[],b=ui(i,n);b.kind===`file`?y.push(R(n,b.path)):x(b.path);function x(e){let t;try{t=qr(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${R(n,e)||`.`}: ${fi(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=L(e,r.name),i=R(n,t);if(r.isDirectory()){if(c.isDirExcluded(i))continue;x(t)}else if(r.isFile()){if(!di(r.name)||c.isExcluded(i))continue;y.push(i)}}}y.sort();let S=[],C=0,ee=0,w=0;for(let e of y){let t=L(n,e),r;try{r=H(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${fi(t)}`);continue}let i=v(e),c=!1;if(a&&i.enabled){let n=ge(r,i,e,h);if(n!==r){let i=`${t}.tmp.${process.pid}.${Date.now()}`;try{Qr(i,n,`utf-8`),Xr(i,t),r=n,c=!0,w++}catch(t){try{W(i)}catch{}o.push(`could not write fix to ${e}: ${fi(t)}`)}}}let l=await s(r,i,e,h);for(let e of l)e.severity===`error`?C++:ee++;S.push({file:e,diagnostics:l,fixed:c})}return o.push(..._(m)),{contentDir:n,files:S,warnings:o,fileCount:y.length,errorCount:C,warningCount:ee,fixedCount:w,ran:p}}function ui(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Fr(e)?e:z(t,e);try{if(U(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function di(e){let t=e.toLowerCase();return o.some(e=>t.endsWith(e))}function fi(e){return e instanceof Error?e.message:String(e)}function pi(e){return new k(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Be(r,i),o=t===void 0?void 0:mi(t,Kn()),s=r.contentRules,c=await li({projectDir:i,contentDir:a,baseConfig:s?de(s):S,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${_i(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:hi(c))&&(process.exitCode=1)})}function mi(e,t){return z(t,e)}function hi(e){return e.errorCount>0||e.warningCount>0}function gi(e){let t=[F(e.file)+(e.fixed?j(` (fixed)`):``)];for(let n of e.diagnostics){let e=j(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?N(`error  `):P(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${j(`${n.source}/${n.code}`)}`)}return t.push(``),t}function _i(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...gi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(M(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${N(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(j(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...d(e.ran).map(e=>j(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(P(`! ${n}`))}return t.join(`
 `)}const vi={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function yi(e){return new k(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await bi(t,n,e(),process.cwd(),Kn());r!==0&&(process.exitCode=r)})}async function bi(e,t,n,r,i,a=vi){let o=Be(n,r),s;if(e!==void 0){let t=xi(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let c=tt(D(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=s===void 0?``:`?path=${encodeURIComponent(s)}`,u;try{u=await fetch(`http://127.0.0.1:${c.port}/api/audit${l}`,{headers:Se({kind:`cli`,runtimeVersion:gt})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!u.ok){let e=await u.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${u.status}`}`),1}let d=ve.safeParse(await u.json().catch(()=>null));if(!d.success){let e=d.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let f=d.data;return t.json===!0?a.out(JSON.stringify(f,null,2)):a.out(_i(Si(f))),+(t.errorsOnly===!0?f.errorCount>0:f.errorCount+f.warningCount>0)}function xi(e,t,n){let r=R(n,z(t,e));return r===``?``:r.startsWith(`..`)||Fr(r)?null:r.split(Lr).join(`/`)}function Si(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Ci(e,t,n,r){let i=wi(await Ti(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function wi(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ti(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Ei(e,t){let n=new k(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Ci(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await ot(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await ot(n),process.exit(1)}}),n}function Di(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Oi(e,t,n){let r={baseUrl:Di(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new _r(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function ki(e){let t=e.request||yr,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Oi(t,`POST /login/device/code`,n)}async function Ai(e){let t=await Oi(e.request||yr,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=ji(e,t.data.expires_in),n.refreshTokenExpiresAt=ji(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function ji(e,t){return new Date(e+t*1e3).toISOString()}async function Mi(e,t){let n=Ni(e,t.auth);if(n)return n;let{data:r}=await ki({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Fi(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Ni(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Pi(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Fi(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Ai({...i,clientType:`oauth-app`}):await Ai({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Pi(r.interval),Fi(e,t,n,r);if(a===`slow_down`)return await Pi(r.interval+7),Fi(e,t,n,r);throw i}}async function Ii(e,t){return Mi(e,{auth:t})}async function Li(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Mi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var Ri=`0.0.0-development`;function zi(e){let t=e.request||yr.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${Ri} ${vr()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Ii.bind(null,i),{hook:Li.bind(null,i)})}async function Bi(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=zi({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function Vi(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function K(e){let t=e.toLowerCase().replace(/:\d+$/,``);r.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function Hi(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Ui(e,t,n=Bi){let r=Vi(),{host:i,json:a}=e;K(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?Hi(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?Hi(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function Wi(e){return new k(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??At(process.cwd()),r=await e();await Ui({...t,host:n},r)})}const Gi={style:{maskedText:`[input is masked]`}};var Ki=Tn((e,t)=>{let{validate:n=()=>!0}=e,r=On(Gi,e.theme),[i,a]=Dn(`idle`),[o,s]=Dn(),[c,l]=Dn(``),u=An({status:i,theme:r});jn(async(e,r)=>{if(i===`idle`){if(wn(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)}});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${En}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function qi(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>qi.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function Ji(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function Yi(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const Xi=Function.bind,Zi=Xi.bind(Xi);function Qi(e,t,n){let r=Zi(Yi,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=Zi(Ji,null).apply(null,i)})}function $i(){let e=Symbol(`Singular`),t={registry:{}},n=qi.bind(null,t,e);return Qi(n,t,e),n}function ea(){let e={registry:{}},t=qi.bind(null,e);return Qi(t,e),t}var ta={Singular:$i,Collection:ea},na=`0.0.0-development`;function ra(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
@@ -8,9 +8,9 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$u as t,Eu as n,Ft as
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function Xa(){return new k(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??At(process.cwd());await Ya({...e,host:t})})}async function Za(e,t,n=br){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function Qa(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function $a(e,t){let{host:n,json:r}=e;K(n);let i=t.backend,a=await Za(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(Qa(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new za({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(Qa(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=Ha(e,n);r?process.stdout.write(`${JSON.stringify(Qa(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function eo(e){return new k(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??At(process.cwd());await $a({...t,host:n},await e())})}function to(e){let t=new k(`auth`);t.description(`GitHub authentication management`);let n=e=>Fn(void 0,e);return t.addCommand(Wi(n)),t.addCommand(eo(n)),t.addCommand(Ja(n)),t.addCommand(Xa()),t.addCommand(Ga(n)),t.addCommand(Ei(n,e)),t}function no(e,t=$r(),n=Vn){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[I(e)])}catch{}}function ro(){return new k(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await $n({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:ir(),logger:In()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&no(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function io(e){let t=[];return(e.status===`dead-pid`||e.status===`corrupt`)&&t.push({name:`server`,lockPath:e.lockPath,reason:e.status}),{prune:t}}function ao(e){let t=e.inspect??(()=>dr(e.lockDir,`server`)),n=e.unlink??(e=>W(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=io(t());if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function oo(e){return new k(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),ao({lockDir:D(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function so(e){return`credential.helper=!${e.map(ye).join(` `)} auth git-credential`}async function co(e,t,n={},r=br){let i=[`credential.helper=`,so(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function lo(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const uo=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function fo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of uo)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function po(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function mo(e,t=process.env){let n=po(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function ho(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function go(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const _o=te;async function vo(e){try{return await e.clone(go(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&_o(t))return e.onFallback(e.branch),await e.clone(go(null)),{fellBack:!0};throw t}}function yo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function bo(e,t,n){return e===`https`&&t===`github.com`&&n}function xo(e){if(e===void 0)return null;let{declaredLogin:t,declaredSource:n}=e,r;switch(n){case`remote-url`:r=`The clone URL names ${t}`;break;case`credential-config`:r=`Your Git credential configuration names ${t}`;break;default:r=`Your Git configuration names ${t}`}return`⚠ ${r}, but the GitHub CLI couldn't confirm that account — the clone used its active account.\n  Run \`gh auth status\` to see which account that is. If ${t} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}async function So(e,t,n={}){let r=rr(e);if(!r)throw Error(`Invalid git URL: ${Do(e)}`);let i=qt(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await co(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!Ut(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function Co(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function wo(e,t,n,r=process.cwd()){let i=rr(e);if(!i)throw Error(`Invalid git URL: ${Do(e)}`);let a=Co(e,i),o=t.dir?z(r,t.dir):z(r,i.name);if(B(o)&&qr(o).length>0)throw Error(`Target directory is not empty: ${o}`);Nt();let s=Gn(),c=i.protocol===`https`&&i.hostname===`github.com`&&await lo(i.owner,i.name),l=bo(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await So(a,s,{selfCliArgs:ho(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=xo(l.declaredMiss);e&&process.stderr.write(e)}let d=mo(u),f=yo(r,u.gitConfig),p=en(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=fo(e);n&&n.pct!==m&&(m=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await vo({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>p.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-C1kwc9vl.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{To(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function To(e){let t=Pn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Eo=/^[A-Za-z0-9._/:@-]+$/;function Do(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Ze(i)!==void 0?`${t}${i}@`:t})}function Oo(e){return Eo.test(e)?e:ye(e)}function ko(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Oo(t)}`:``;return`ok clone ${Oo(e)}${n}`}function Ao(e){let t=me(e.error);if(t.kind!==`auth`)return null;let n=Do(e.url);if(we(t)){let t=ko(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-VOay_9uk.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{To(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function To(e){let t=Pn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Eo=/^[A-Za-z0-9._/:@-]+$/;function Do(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Ze(i)!==void 0?`${t}${i}@`:t})}function Oo(e){return Eo.test(e)?e:ye(e)}function ko(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Oo(t)}`:``;return`ok clone ${Oo(e)}${n}`}function Ao(e){let t=me(e.error);if(t.kind!==`auth`)return null;let n=Do(e.url);if(we(t)){let t=ko(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${ko(n,e.branch)}`].join(`
-`)}function jo(e){let t=Mt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=Ao({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Mo(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function No(e){let t=me(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=rr(e.url);t&&(r=await(e.resolvePrincipal??(e=>Mo(Gn(),e)))(t.hostname))}}jo({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function Po(e){return new k(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await wo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-CsCpTOdD.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Ye||e instanceof Re){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await No({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Fo=y();const Io=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...he.map(e=>e.path)];function Lo(e){return rn({absPath:Ne(`project-local`,e),sideline:!1}).diagnostics}function Ro(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Tr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??Lo)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(h(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function zo(e){let t=H(e,`utf-8`),n=(0,Fo.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of Io)n.hasIn(e)&&r.push(e.join(`.`));return r}function Bo(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function Vo(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=Bo(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function Ho(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function Uo(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Le,s=Ho(r).map(t=>({scope:t,absPath:Ne(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!B(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=zo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:Vo(Io.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:h(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const Wo=`project | project-local | user | all`,Go=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Ko(e){return e!==`config`}function qo(){let e=new k(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{Ro({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${Wo}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!Go.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${Wo}`),process.exitCode=2;return}(await Uo({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const Jo=[`    1. ${F(`Customize`)} (sidebar) → ${F(`Skills`)}`,`    2. Click the ${F(`+`)} button`,`    3. Click ${F(`Create skill`)}`,`    4. Click ${F(`Upload skill`)}`,`    5. Pick ${F(`openknowledge.skill`)} from Downloads`],Yo=A(`  Open the Claude Desktop App, then: ${F(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Xo(e){let t=[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(P(`  Handoff failed: ${e.handoffError.message}`)),t.push(Yo),t.join(`
+`)}function jo(e){let t=Mt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=Ao({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Mo(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function No(e){let t=me(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=rr(e.url);t&&(r=await(e.resolvePrincipal??(e=>Mo(Gn(),e)))(t.hostname))}}jo({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function Po(e){return new k(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await wo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-B1MHILpQ.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Ye||e instanceof Re){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await No({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Fo=y();const Io=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...he.map(e=>e.path)];function Lo(e){return rn({absPath:Ne(`project-local`,e),sideline:!1}).diagnostics}function Ro(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Tr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??Lo)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(h(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function zo(e){let t=H(e,`utf-8`),n=(0,Fo.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of Io)n.hasIn(e)&&r.push(e.join(`.`));return r}function Bo(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function Vo(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=Bo(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function Ho(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function Uo(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Le,s=Ho(r).map(t=>({scope:t,absPath:Ne(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!B(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=zo(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:Vo(Io.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:h(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const Wo=`project | project-local | user | all`,Go=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Ko(e){return e!==`config`}function qo(){let e=new k(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{Ro({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${Wo}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!Go.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${Wo}`),process.exitCode=2;return}(await Uo({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const Jo=[`    1. ${F(`Customize`)} (sidebar) → ${F(`Skills`)}`,`    2. Click the ${F(`+`)} button`,`    3. Click ${F(`Create skill`)}`,`    4. Click ${F(`Upload skill`)}`,`    5. Pick ${F(`openknowledge.skill`)} from Downloads`],Yo=A(`  Open the Claude Desktop App, then: ${F(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Xo(e){let t=[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(P(`  Handoff failed: ${e.handoffError.message}`)),t.push(Yo),t.join(`
 `)}function Zo(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[A(`OpenKnowledge skill ${F(`v${t}`)} already delivered to Claude Desktop.`),j(`  Recorded at ${n} in ~/.ok/skill-state.yml`),j(`  Use ${F(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function Qo(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[M(`Built ${e.outputPath}`),j(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),A(`  Claude Desktop App opened. Now upload the file manually:`),...Jo,j(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function $o(e){return`${N(`Error:`)} ${e.buildError??`unknown build failure`}`}async function es(e={}){let t=await et(e);return t.status===`failed`?{...t,message:$o(t),exitCode:1}:t.status===`skip-current`?{...t,message:Zo(t),exitCode:0}:t.status===`installed`?{...t,message:Qo(t),exitCode:0}:{...t,message:Xo(t),exitCode:0}}function ts(){return new k(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await es({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function ns(e,t){let n=ai({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const rs=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function is(e){return L(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const as={existsSync:e=>B(e),readFileSync:(e,t)=>H(e,t),lstatSync:e=>Gr(e),readlinkSync:e=>Jr(e)};function os(e,t=as){let n=is(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function ss(e){let t=e.replace(rs,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function cs(e,t,n=as){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function ls(e,t={}){if(!Number.isSafeInteger(e)||e<=0)return null;let n=t.platform??process.platform,r=t.env??process.env,i=t.run??Ar;try{let t,a={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...r,LC_ALL:`C`,TZ:`UTC0`}};if(n===`win32`){let n=Object.entries(r).find(([e])=>e.toLowerCase()===`systemroot`)?.[1]?.trim();t=i(Rr.join(n&&Rr.isAbsolute(n)?n:`C:\\Windows`,`System32`,`WindowsPowerShell`,`v1.0`,`powershell.exe`),[`-NoLogo`,`-NoProfile`,`-NonInteractive`,`-Command`,`$ErrorActionPreference = 'Stop'; (Get-Process -Id ${e}).StartTime.ToUniversalTime().ToString('O')`],a).trim()}else if(n===`darwin`||n===`linux`){let n=i(`/bin/ps`,[`-p`,String(e),`-o`,`lstart=`],a).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(n))return null;t=`${n} UTC`}else return null;let o=Date.parse(t);return Number.isFinite(o)?o:null}catch{return null}}async function us(e,t={}){let n=t.isAlive??Ke,r=dr(e,`server`,{isAlive:n}),i=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${r.lockPath} and retry cleanup.`,a=t=>(In()?.warn({lockDir:e,lockPath:r.lockPath,status:r.status},t),Error(t));if(r.status===`corrupt`)throw a(`Cannot verify shutdown from the unreadable server lock at ${r.lockPath}. ${i}`);if(r.status===`foreign-host`)throw a(`Cannot verify shutdown: the server lock at ${r.lockPath} belongs to another machine. Stop OpenKnowledge on the owning machine. Confirm that no OpenKnowledge server is using this directory on the owning machine or any other machine sharing it. Only then remove the stale lock file at ${r.lockPath} and retry cleanup.`);if(r.status===`alive`){let e=typeof r.lock.startedAt==`string`?Date.parse(r.lock.startedAt):NaN;if(!Number.isFinite(e))throw a(`The server lock has no valid start time. ${i}`);let o=(t.readProcessStart??ls)(r.lock.pid);if(o===null){if(!n(r.lock.pid))return{stopped:0,failed:[]};let e=process.platform===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:`Stop the server manually. `;throw a(`Cannot verify the identity of process ${r.lock.pid}; the OS process-start query failed or is unavailable, so it was not signalled. `+e+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`)}if(o>e)throw a(`Process ${r.lock.pid} started after the server lock was acquired; it was not signalled. ${i}`)}let o=await ar({lockDir:e,inspect:()=>r,force:!0,log:()=>{},error:()=>{}}),s=o.failed.map(e=>({pid:e.target.pid,error:e.error})),c=new Set(o.stopped.map(e=>e.pid)),l=t.timeoutMs??1e4,u=performance.now()+l;for(;c.size>0;){for(let e of c)n(e)||c.delete(e);if(c.size===0)break;let e=u-performance.now();if(e<=0)break;await ii(Math.min(t.pollIntervalMs??50,e))}for(let e of c)s.push({pid:e,error:`still running ${l}ms after SIGTERM`});return{stopped:o.stopped.length-c.size,failed:s}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function ds(e){return Lr===`/`?e:e.split(Lr).join(`/`)}function fs(e,t,n=`This project`){let r=[];r.push({kind:`stop-server`,group:n,label:`Stop the project server (if running)`,lockDir:D(e)});let i=new Set;for(let a of Mn){let o=Cn[a];if(!o.projectConfigPath)continue;let s=o.projectConfigPath(e);i.add(ds(R(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${o.label} (${ds(R(e,s))})`,editorId:a,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let a=new Set([...yn(e),...mn(e),...oe]);for(let t of a){let a=t.replace(/\/$/,``);i.has(a)||a!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:L(e,a),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:Ae(e)})}catch{}let o=L(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===o)-Number(t.kind===`remove-path`&&t.path===o)),r.map(t=>t.kind===`stop-server`?t:{...t,requiresStoppedServers:[D(e)],...t.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function ps(e,t){return{scope:`deinit`,ops:fs(e,t)}}function ms(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(L(e,`..`,`..`),t)}`,lockDir:e});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...gs(a,t));for(let e of Mn){let n=Cn[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of Qn(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...fs(e,t,`Project: ${Pr(e)}`));return c.push(..._s(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:L(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function hs(e){return[L(e,`.zshrc`),L(e,`.bash_profile`),L(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function gs(e,t){let n=[],r=new Set([...hs(t),...e?.rcFiles??[]]);for(let e of r)Dr(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function _s(e,t,n){let r={home:e,platformName:t,env:n},i=Zn(r),a=hr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Zn({...r,productName:fr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function vs(e,t={}){let n={clearToken:t.clearToken??zn,clearEmbeddingsKey:t.clearEmbeddingsKey??ut,stopServer:t.stopServer??us,env:t.env??{}},r=async e=>{try{return await bs(e,n)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},i=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=z(t.lockDir);i.has(e)||i.set(e,await r(t))}let a=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=i.get(z(t.lockDir));e&&a.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...i.keys()],n=e.filter(e=>{let t=i.get(z(e));return!t||t.status===`failed`});if(n.length>0){a.push({op:t,status:`failed`,detail:`left untouched because server shutdown was not verified: ${n.join(`, `)}. Stop the server and retry cleanup.`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&a.some(n=>n.status===`failed`?!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)):!1)){a.push({op:t,status:`failed`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}a.push(await r(t))}return{results:a,removed:a.filter(e=>e.status===`removed`),failed:a.filter(e=>e.status===`failed`)}}async function ys(e,t=ur){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function bs(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Dr(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${xs(t.reason)}: ${e.rcFile}`};let n;try{n=H(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${xs(gn(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=ss(n);return i?a&&!t.symlink?(Zr(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(on(t.path,r,{mode:_n(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return cs(e.path,e.target)?(W(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=Hn(Cn[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:xs(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Or(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${L(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:xs(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=hn(e.projectRoot,Cs(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${L(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Ss(e)}}function xs(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${kn(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Ss(e){if(e.requireOurState&&!qn(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&fn(e.path,e.containWithin);let t;try{t=Gr(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return W(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of qr(e.path))t.has(r)||(Zr(L(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return Zr(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function Cs(e){let t=new Set([L(e,`.claude`,`launch.json`)]);for(let n of Mn){let r=Cn[n].projectConfigPath?.(e);r&&t.add(r)}return yn(e).filter(n=>{let r=L(e,n);if(!t.has(r))return!0;try{return Gr(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function ws(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Ts(e){if(e.ops.length===0)return j(`Nothing to remove.`);let t=[];for(let[n,r]of ws(e.ops)){t.length>0&&t.push(``),t.push(F(`${n}:`));for(let e of r)t.push(`  ${P(`-`)} ${e.label}`)}return t.join(`
@@ -42,7 +42,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function oc(e,t,n,r,i){let a=ac(e,t,L(r,`cpu.cpuprofile`)),o=!1,s=Mr(process.execPath,[a],O({stdio:`ignore`})),c=setInterval(()=>{let e=tc(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{Zr(L(a,`..`),{recursive:!0,force:!0})}catch{}return o}function sc(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function cc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??Xe,s=t.inspect??(e=>dr(e,`server`)),c=t.resolveCommand??Wt,l=t.resolveUsage??Vt,u=t.collectLsofFn??nc,d=t.getEndpoints??ic,f=t.profiler??oc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?L(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):L(process.cwd(),`ok-diagnose-${n}-${b}`);try{V(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{Qr(L(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?rc(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,sc(H(L(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function lc(e){let t=ai({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function uc(e){let t=Kr(L(ei(),`ok-bundle-process-`));return await cc({pid:e,output:t}),t}function dc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function fc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function pc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function mc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function hc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${dc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${pc(t)}`),e(`  Credentials:         ${mc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Yn(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function gc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??lc,i=t.runProcessDiagnose??uc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=I(o);if(!B(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=L(e.contentDir,`.ok`,`local`,`diagnostics`);V(n,{recursive:!0}),o=L(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=tr(t.diagnosticReportsDir??L(G(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await er({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),hc(n,u,o,l),e.yes!==!0&&!fc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await sr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{Zr(s,{recursive:!0,force:!0})}catch{}}}function _c(){let e=new k(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await cc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(ec()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-CVGLLZ3N.mjs`),{resolveContentDir:r}=await import(`./dist-DSfQybpf.mjs`),i=process.cwd(),{config:a}=n(i);await gc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function vc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await Ki({message:`Enter embeddings provider API key:`})).trim()}function yc(e){return nn(e)}async function bc(e,t){let n=await We(dt(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function xc(e){try{let t=tt(D(e));if(!t||t.port<=0||!Ke(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function Sc(){return new k(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await vc();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,sc(H(L(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function lc(e){let t=ai({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function uc(e){let t=Kr(L(ei(),`ok-bundle-process-`));return await cc({pid:e,output:t}),t}function dc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function fc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function pc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function mc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function hc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${dc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${pc(t)}`),e(`  Credentials:         ${mc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Yn(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function gc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??lc,i=t.runProcessDiagnose??uc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=I(o);if(!B(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=L(e.contentDir,`.ok`,`local`,`diagnostics`);V(n,{recursive:!0}),o=L(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=tr(t.diagnosticReportsDir??L(G(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await er({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),hc(n,u,o,l),e.yes!==!0&&!fc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await sr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{Zr(s,{recursive:!0,force:!0})}catch{}}}function _c(){let e=new k(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await cc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(ec()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-Bw8wLLLY.mjs`),{resolveContentDir:r}=await import(`./dist-DSfQybpf.mjs`),i=process.cwd(),{config:a}=n(i);await gc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function vc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await Ki({message:`Enter embeddings provider API key:`})).trim()}function yc(e){return nn(e)}async function bc(e,t){let n=await We(dt(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function xc(e){try{let t=tt(D(e));if(!t||t.port<=0||!Ke(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=await n.json();return typeof r.embedded!=`number`||typeof r.total!=`number`?null:{embedded:r.embedded,total:r.total}}catch{return null}}function Sc(){return new k(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await vc();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=z(e.cwd??process.cwd()),{baseUrl:r}=yc(n);try{await dt().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -77,7 +77,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function Pd(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function Fd(e){return/\s/.test(e)?`<${e}>`:e}function Id(e,t={}){let{header:n,rows:r}=ad(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(Pd).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=Pd(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${Fd(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function Ld(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function Rd(e,t){return`# ${e}\n\n${t}\n`}const zd=[`links`,`frontmatter`,`callouts`,`images`,`tables`],Bd=/\.mdx?$/i;function Vd(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function Hd(e,t={}){let n=t.selected??new Set(zd),r=Ed(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:Vd(!1)};let i=Vd(r),a=Cd(e),o=md(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!Bd.test(e)||s&&l.has(e))continue;let r;try{r=H(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=id(a,Pr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:L(I(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=ed(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=Nd(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Sd(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=Id(e.csvText,{linkForTitle:t=>{let n=dd(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?R(I(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=H(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=Rd(o===null?e.fallbackTitle:Ld(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Sd(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function Ud(e){for(let t of e.assets)V(I(t.path),{recursive:!0}),Qr(t.path,t.bytes);for(let t of e.changes)V(I(t.path),{recursive:!0}),Qr(t.path,t.content,`utf8`);for(let t of e.deletions)try{W(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const Wd={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},Gd=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function Kd(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of Gd)n.push(`  ${Wd[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function qd(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Jd(e){let t=new Set(zd);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${zd.join(`, `)}`);return e})}function Yd(e,t){let n=new Set(zd);if(e&&(n=new Set(Jd(e))),t)for(let e of Jd(t))n.delete(e);return n}function Xd(){let e=new k(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=z(e??process.cwd()),r;try{r=Yd(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Hd(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Ud(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?qd(a,{applied:t.apply??!1}):Kd(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Zd(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Qd(e,t={}){let n=Zd(e,t.platform??process.platform,t.desktopBundlePath);return Bn(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function $d(e,t,n=process.platform){let r=Zd(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function ef(e=()=>Ln(Un())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>wt({lockDir:D(e)}).baseUrl,classifyName:(e,t)=>{let n=L(e,t);try{return U(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Qd,findAncestorProject:e=>Ve(I(z(e)))?.rootPath??null,isProjectRoot:e=>Ve(e)?.distance===0,enclosingProject:e=>Ve(z(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function tf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function nf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function rf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${$d(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function af(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=z(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(tf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!pe.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${pe.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${ln(e,s)}`;return rf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return nf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${Qe(s)}`;return rf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return nf(n)}if(l)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${Ge(s)}`;return rf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return nf(n)}function of(){return new k(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${pe.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await af(e,t,ef())})}function sf(e){return new k(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-C0qb1iLo.mjs`),r=e(),i=process.cwd(),a=Be(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function cf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function lf(e,t,n=process.cwd()){let r=e.op??`sync`,i=D(n),a=tt(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...Se({kind:`cli`,runtimeVersion:gt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}cf(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=en({baseDir:n});if(r===`sync`||r===`pull`){cf(e.json,{type:`step`,step:`pull`});let t=await o.pull();cf(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(cf(e.json,{type:`step`,step:`push`}),await o.push(),cf(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}function qd(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Jd(e){let t=new Set(zd);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${zd.join(`, `)}`);return e})}function Yd(e,t){let n=new Set(zd);if(e&&(n=new Set(Jd(e))),t)for(let e of Jd(t))n.delete(e);return n}function Xd(){let e=new k(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=z(e??process.cwd()),r;try{r=Yd(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=Hd(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Ud(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?qd(a,{applied:t.apply??!1}):Kd(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Zd(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Qd(e,t={}){let n=Zd(e,t.platform??process.platform,t.desktopBundlePath);return Bn(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function $d(e,t,n=process.platform){let r=Zd(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function ef(e=()=>Ln(Un())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>wt({lockDir:D(e)}).baseUrl,classifyName:(e,t)=>{let n=L(e,t);try{return U(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Qd,findAncestorProject:e=>Ve(I(z(e)))?.rootPath??null,isProjectRoot:e=>Ve(e)?.distance===0,enclosingProject:e=>Ve(z(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function tf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function nf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function rf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${$d(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function af(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=z(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(tf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!pe.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${pe.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${ln(e,s)}`;return rf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return nf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${Qe(s)}`;return rf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return nf(n)}if(l)return rf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${Ge(s)}`;return rf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return nf(n)}function of(){return new k(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${pe.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await af(e,t,ef())})}function sf(e){return new k(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-BBMcu2-A.mjs`),r=e(),i=process.cwd(),a=Be(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function cf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function lf(e,t,n=process.cwd()){let r=e.op??`sync`,i=D(n),a=tt(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...Se({kind:`cli`,runtimeVersion:gt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}cf(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=en({baseDir:n});if(r===`sync`||r===`pull`){cf(e.json,{type:`step`,step:`pull`});let t=await o.pull();cf(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(cf(e.json,{type:`step`,step:`push`}),await o.push(),cf(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)),cf(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function uf(e){return new k(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await lf({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function df(e){return new k(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await lf({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function ff(e){return new k(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await lf({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const pf={existsSync:e=>B(e),isDirectory:e=>{try{return U(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>qr(e),readFileSync:e=>H(e),writeFileSync:(e,t)=>{Qr(e,t)},mkdirSync:(e,t)=>{V(e,t)},rmSync:(e,t)=>{Zr(e,t)}},mf={resolveProjectBundledSkillDir:()=>it(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>it(e,{checkDesktop:!1}),readBundledVersion:()=>Me(),readRecordedVersion:e=>Pe(e,`cli-hosts`),writeRecordedVersion:(e,t)=>Jt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>ke(e),readBundleDecision:(e,t)=>Et(e,t),writeBundleDecision:(e,t,n)=>De(e,t,n),removeBundleFromDisk:(e,t)=>lr(e,t)};function hf(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function gf(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(I(t),{recursive:!0}),_f(e,t,n)}function _f(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=L(e,r),a=L(t,r);n.isDirectory(i)?_f(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function vf(e,t,n){return n.existsSync(L(e,`.agents`,`skills`,t))||ue.some(r=>n.existsSync(L(e,r.skillsRoot,t)))}function yf(e,t,n,r,i,a){let o=[],s=L(e,`.agents`,`skills`,t);if(vf(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of ue){let i=L(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(L(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(L(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{gf(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of ue){let l=L(e,c.hostDir),u=L(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{gf(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function bf(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function xf(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>L(He(I(e)),Pr(e));return a(t)===a(i)}function Sf(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Sn){let s=L(e,n.hostDir,`skills`,`open-knowledge`),c=L(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Cn[n.editorId],u=l?.projectConfigPath?.(e);if(xf(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!bf(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{vn(s,e),gf(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function Cf(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of nt)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=zt[i.id],o=vf(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!xe(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>vf(e,zt[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===nt.length,m=[];for(let{id:t,sourceDir:i}of u){let a=yf(e,zt[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function wf(e){let t=e.logger??hf,n=e.fs??pf,r=e.home??G(),i={...mf,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=Sf(e.projectDir,r,i,n,t),o=await Cf(r,i,n,t),s=or(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=Xn(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function Tf(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function Ef(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function Df(){return new k(`repair-skills`).description("Refresh bundled SKILL.md files for installed AI editors (project-local + user-global). Runs automatically during `ok start`; this command forces an explicit sweep.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await wf({projectDir:z(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>Of(t,{yes:e.yes===!0})});process.stdout.write(`${Ef(t)}\n`),process.exitCode=Tf(t)})}async function Of(e,t){let n=G(),r=e=>`~/${R(n,e)}`,i=t.input??process.stdin,a=[``,F(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),j(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${F(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${F(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,j(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
 `)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${P("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=ai({input:i,output:process.stdout});try{let e=(await o.question(`\n${F(`Remove them?`)} ${j(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function kf(e,n){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${P(`!`)} The ${n} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let r=[...new Set([f,...t.map(e=>x[e])].filter(e=>e!==null).map(w))].map(e=>`${e}/`);return`\n${P(`!`)} The ${n} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${r.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function Af(e){return typeof e==`string`&&$t.includes(e)}async function jf(e={}){let t=z(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Rt[n])return{status:`failed`,message:`${N(`Error:`)} Unknown pack "${n}". Available: ${$t.join(`, `)}`,exitCode:1};let r;try{r=await St({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Kt?{status:`prerequisite-missing`,message:`${N(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${N(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!b(r)){let e=Rt[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${P(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=kf(r,e);return{status:`no-op`,message:`${M(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${j(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Oe(Rt[n]);return{status:`dry-run`,message:`${F(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${F(`Plan:`)}\n\n${Nf(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await Pf(`${F(`Plan:`)}\n\n${Nf(r,t)}\n\n${F(`Apply?`)} ${j(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:j(`Cancelled.`),plan:r,exitCode:0};let i=await Ft(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${N(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${P(`Applied`)} ${i.applied} entries, ${P(String(i.errors.length))} error(s):`,...e].join(`
@@ -88,7 +88,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function Rf(e){return new k(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Lf(t,await e())})}async function zf(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Bf(e,t){let{host:n,json:r}=e;K(n);let i=await Ka(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await zf(new za({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function Vf(e){return new k(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Bf(t,await e())})}function Hf(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Uf(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Wf(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Gf(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function Kf(e){return en(yo(e,[])).env(po())}function qf(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const Jf={ensureOkScaffold:e=>{Dt(e)},gitFactory:Kf};async function Yf(e){let t={...Jf,...e.deps},n=z(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Gf(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Hf(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=L(n,`.git`);if(!B(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Uf({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Hf(t)===`name-conflict`){let t=await Wf(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Hf(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=qf(o.cloneUrl,e.token);try{await i.raw([`push`,c,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Xf(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Zf(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(K(n),Ie(s)){process.stderr.write(`${new cn(z(s)).message}\n`),process.exitCode=64;return}let l=await Ka(n,t);if(l==null){Xf(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new za({auth:l,...u?{baseUrl:u}:{}});try{jr(`git config user.email`,O({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Xf(c,await Yf({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Qf(e){return new k(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Zf(t,await e())})}function $f(){let e=new k(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Fn();return e.addCommand(Vf(t)),e.addCommand(Rf(t)),e.addCommand(Qf(t)),e}function ep(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function tp(){return new k(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=yn(t),r=Pn(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){np(e.json,t,r.reason);return}let i=pn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${M(`✓`)} ${F(`Sharing mode is already`)} ${M(`local-only`)}${F(`.`)}\n`),ep(r.removed);return}process.stderr.write(`${F(`Sharing mode is already`)} ${M(`local-only`)} ${F(`— nothing to do.`)}\n`);return}process.stderr.write(`${M(`✓`)} ${F(`Sharing mode set to`)} ${M(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${F(`.git/info/exclude`)} (per-clone, not committed).\n`),ep(r.removed)})}function np(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${P({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function rp(){return new k(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=pn(t),r=yn(t),i=hn(t,r);if(i.kind===`no-exclude`){ip(e.json,t,i.reason);return}let a=pn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${M(`✓`)} ${A(`Sharing mode is already`)} ${F(`shared`)}${A(`.`)}\n`),ep(i.removed);return}process.stderr.write(`${A(`Sharing mode is already`)} ${F(`shared`)} ${A(`— nothing to do.`)}\n`);return}process.stderr.write(`${M(`✓`)} ${F(`Sharing mode set to`)} ${M(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${F(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function ip(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${P({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function ap(){return new k(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=z(e.project??process.cwd()),n=pn(t),r=[...bn(t)],i=xn(t,yn(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${op(n)}`),a.push(``),a.push(`Excluded from git via ${F(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${A(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function op(e){switch(e){case`shared`:return M(`shared`);case`local-only`:return M(`local-only`);case`no-git`:return P(`no-git (not a git repository)`)}}function sp(){let e=new k(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(rp()),e.addCommand(tp()),e.addCommand(ap()),e}const cp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function lp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(cp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function up(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function dp(e){return/\.(md|mdx)$/i.test(e)}function fp(e,t){if(dp(t))return!0;try{return U(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function pp(e,t){let n=lp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=up(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function mp(e=()=>Ln(Un())){return{prepare:Tt,detectBundlePath:()=>e().bundlePath??null,openTarget:Qd,runProjectOpen:(e,t)=>af(e,{project:t},ef()),runBrowserOpen:e=>gp(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function hp(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof pt||e instanceof Ot||e instanceof tn||e instanceof sn)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${$d(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function gp(e){let{createEphemeralProjectDir:t}=await import(`./dist-DSfQybpf.mjs`),{loadConfig:n}=await import(`./src-BTuKN-IA.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-CsCpTOdD.mjs`),{openBrowser:o}=await import(`./open-browser-DuRYNL6B.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ti(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ge(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function op(e){switch(e){case`shared`:return M(`shared`);case`local-only`:return M(`local-only`);case`no-git`:return P(`no-git (not a git repository)`)}}function sp(){let e=new k(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(rp()),e.addCommand(tp()),e.addCommand(ap()),e}const cp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function lp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(cp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function up(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function dp(e){return/\.(md|mdx)$/i.test(e)}function fp(e,t){if(dp(t))return!0;try{return U(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function pp(e,t){let n=lp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=up(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function mp(e=()=>Ln(Un())){return{prepare:Tt,detectBundlePath:()=>e().bundlePath??null,openTarget:Qd,runProjectOpen:(e,t)=>af(e,{project:t},ef()),runBrowserOpen:e=>gp(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function hp(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof pt||e instanceof Ot||e instanceof tn||e instanceof sn)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${$d(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function gp(e){let{createEphemeralProjectDir:t}=await import(`./dist-DSfQybpf.mjs`),{loadConfig:n}=await import(`./src-BHAV63UV.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-B1MHILpQ.mjs`),{openBrowser:o}=await import(`./open-browser-DuRYNL6B.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ti(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ge(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function _p(){let e=new k(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=z(process.cwd()),n=Pt(Ve(t)?.rootPath??t),r=ft({projectDir:n}),i={...r,skills:r.skills.filter(e=>Ce(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${j(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${F(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?j(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?j(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${M(e.name)}${t}  ${j(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${F(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${A(e.name)} ${j(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=D(process.cwd()),r=dr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${N(`Error:`)} no running Open Knowledge server for this project. Start it with ${F(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${N(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${N(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${A(`Already imported:`)} ${F(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${M(`Imported`)} ${F(o)}${c?j(` (renamed from ${c} — name was taken)`):``} from ${j(s.source??e)}${s.publisher?j(` · ${s.publisher}`):``}.\n${j(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${j(`! ${e}`)}\n`)}),e}function vp(e){return{server:yp(`server`,e),ui:e.status===`alive`&&lt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function yp(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function bp(e){return`${xp(e.server)}\n${xp(e.ui)}`}function xp(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Sp(e){let t=e.inspect??(()=>dr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=vp(t());return e.json?n(JSON.stringify(r,null,2)):n(bp(r)),r}function Cp(e){return new k(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Sp({lockDir:D(process.cwd()),json:t.json===!0})})}function wp(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Tp(e,t){let n=ai({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function Ep(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(j(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await dn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:v.length+1,choices:[...v.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Tp(t,j(`Anything else we should know? (optional) `)),i=await Tp(t,j(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function Dp(e){if(!wp(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>Ep(e)))()}catch{return`failed`}return le(t)?((e.output??process.stderr).write(`\n${F(`Thank you. We read every response.`)}\n\n`),(await(e.submit??p)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function Op(e,t,n=kp,r=B,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of[`/Applications/OpenKnowledge.app`,L(e,`Applications`,`OpenKnowledge.app`)])r(t)&&a.push({method:`app`,label:`OK Desktop (${t})`,instruction:`Move ${t} to the Trash (or: rm -rf "${t}")`});else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of[`@inkeepopen-knowledge-desktop`,`OpenKnowledge`]){let n=L(e,`Programs`,t,`OpenKnowledge.exe`);if(r(n)){a.push({method:`app`,label:`OK Desktop (${n})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → OpenKnowledge`});break}}}else o===`linux`&&r(`/opt/OpenKnowledge/openknowledge`)&&a.push({method:`app`,label:`OK Desktop (/opt/OpenKnowledge)`,instruction:`Remove with your package manager: sudo apt remove openknowledge (Debian/Ubuntu) or sudo dnf remove OpenKnowledge (Fedora/RHEL)`});return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function kp(e){try{return Ar(`npm`,e,O({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const Ap=`━`.repeat(64);function jp(e,t=process.platform){let n=[P(Ap),F(`  One more step — remove the OpenKnowledge app itself`),j(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(j(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${A(`OK Desktop`)} — ${e}`),n.push(`    ${A(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${A(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${A(t.label)}`),n.push(`    ${t.instruction}`);return n.push(P(Ap)),n.join(`

package/dist/constants-Bc5xIETT.mjs

@@ -0,0 +1 @@
+import"./md-manager-BGnqyqi1-BRU4tUy7.mjs";var e=`0.70.0-beta.2`;const t=`config.yml`,n=e;export{n,t};

package/dist/index.d.mts

@@ -2413,6 +2413,8 @@ interface TerminalLaunchCommand {
 }
 declare const WINDOWS_SHELL_FAMILY_VOCABULARY: readonly ['powershell', 'cmd', 'bash'];
 type WindowsShellFamily = (typeof WINDOWS_SHELL_FAMILY_VOCABULARY)[number];
+declare const WINDOWS_SHELL_LAUNCH_FAILURE_VOCABULARY: readonly ['unsupported-shell', 'invalid-launch', 'unsafe-argument'];
+type WindowsShellLaunchFailureReason = (typeof WINDOWS_SHELL_LAUNCH_FAILURE_VOCABULARY)[number];
 type TerminalCli = 'claude' | 'codex' | 'copilot' | 'cursor' | 'opencode' | 'pi' | 'antigravity' | 'openclaw' | 'hermes';
 //#endregion
 //#region ../core/dist/i18n/locales.d.mts
@@ -11079,18 +11081,20 @@ type OkServerRestartOutcome = {
   readonly ok: false;
   readonly reason: 'eperm' | 'other';
 };
+type OkPtyCreateReason = 'no-project' | 'not-consented';
 type OkPtyCreateResult = {
   readonly ok: true;
   readonly ptyId: string;
 } | {
   readonly ok: false;
-  readonly reason: 'no-project' | 'not-consented';
+  readonly reason: OkPtyCreateReason;
 };
 interface OkPtyListEntry {
   readonly ptyId: string;
   readonly customLabel: string | null;
   readonly ordinal: number | null;
 }
+type OkPtyAdoptReason = 'unknown-session' | 'not-started' | 'not-consented' | 'host-unavailable';
 type OkPtyAdoptResult = {
   readonly ok: true;
   readonly replay: string;
@@ -11098,18 +11102,26 @@ type OkPtyAdoptResult = {
   readonly shellNoticeReason?: Extract<TerminalShellNoticeReason, 'unsupported-family'>;
 } | {
   readonly ok: false;
-  readonly reason: 'unknown-session';
+  readonly reason: OkPtyAdoptReason;
 };
 interface OkPtyData {
   readonly ptyId: string;
   readonly data: string;
 }
-interface OkPtyExit {
+type OkPtyExit = {
   readonly ptyId: string;
+  readonly neverStarted: true;
+  readonly error?: string;
+  readonly hostExited?: true;
+  readonly launchFailure?: WindowsShellLaunchFailureReason;
+} | {
+  readonly ptyId: string;
+  readonly neverStarted?: false;
   readonly exitCode: number;
   readonly signal: number | null;
   readonly error?: string;
-}
+  readonly hostExited?: true;
+};
 declare const TERMINAL_SHELL_NOTICE_REASON_VOCABULARY: readonly ['config-unreadable', 'invalid-value', 'not-absolute', 'not-found', 'unsupported-family'];
 type TerminalShellNoticeReason = (typeof TERMINAL_SHELL_NOTICE_REASON_VOCABULARY)[number];
 declare const TERMINAL_SUPPORT_FILE_NOTICE_REASON_VOCABULARY: readonly ['containment-refused', 'write-failed'];
@@ -11481,7 +11493,10 @@ interface OkDesktopBridge {
     kill(ptyId: string): Promise<void>;
     drain(ptyId: string, bytes: number): void;
     list(): Promise<OkPtyListEntry[]>;
-    adopt(ptyId: string): Promise<OkPtyAdoptResult>;
+    adopt(ptyId: string, opts?: {
+      start?: boolean;
+    }): Promise<OkPtyAdoptResult>;
+    start(ptyId: string): Promise<OkPtyAdoptResult>;
     setMeta(ptyId: string, meta: {
       customLabel?: string | null;
       ordinal?: number;

package/dist/index.mjs

@@ -1531,6 +1531,6 @@ GFS4: `),console.error(e)}),r[c]||(d(r,global[c]||[]),r.close=(function(e){funct
 `);re(e,o)}function j9(e,t){let n=S(e,`utf-8`);if(n.trim().length!==0)try{let r=k9(JSON.parse(n),t),i=n.endsWith(`
 `)?`
 `:``;re(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=O9(n,t.contentDir);r!==n&&re(e,r)}}function M9(e,t){let n=S(e,`utf-8`),r=O9(n,t.contentDir);r!==n&&re(e,r)}function N9(e){try{return w(e,{withFileTypes:!0}).filter(e=>e.isFile()).map(t=>N(e,t.name))}catch{return[]}}const Cke=new Set([`agent-presence.json`,`agent-effects.json`,`runtime.json`]);function P9(e){return/\.log\.\d+$/.test(e)}function wke(e){return e.endsWith(`.jsonl`)||e.endsWith(`.log`)||P9(e)}const Tke=[`telemetry`,`logs`,`process`,`diagnostic-reports`];function Eke(e){let t={contentDir:e.contentDir};for(let n of Tke)for(let r of N9(N(e.stagingDir,n)))wke(r)?A9(r,t):r.endsWith(`.json`)?j9(r,t):M9(r,t);for(let n of N9(N(e.stagingDir,`state`))){let e=me(n);n.endsWith(`.jsonl`)?A9(n,t):Cke.has(e)?j9(n,t):M9(n,t)}}const F9=[`.ok`,`local`,`telemetry`],I9=[`.ok`,`local`,`logs`],L9=[`.ok`,`local`,`loss-capture`],R9=`spans-current.jsonl`,z9=`spans-prev.jsonl`,B9=`server-current.jsonl`,V9=`server-prev.jsonl`,H9=`loss-current.jsonl`,U9=`loss-prev.jsonl`;function Dke(e){return N(e,...F9,R9)}function Oke(e){return N(e,...F9,z9)}function kke(e){return N(e,...I9,B9)}function Ake(e){return N(e,...I9,V9)}function jke(e){return N(e,...L9,H9)}function Mke(e){return N(e,...L9,U9)}const W9=1e3;async function Nke(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-presence`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function Pke(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-effects`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function Fke(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/watcher-recent`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}function Ike(e){try{let t=JSON.parse(e);if(typeof t!=`object`||!t)return null;let n=t.decisions;return Array.isArray(n)?n.length===0?``:`${n.map(e=>JSON.stringify(e)).join(`
-`)}\n`:null}catch{return null}}function Lke(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],W6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function Rke(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],W6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function zke(){return{nodeVersion:process.version,platform:le(),arch:ae()}}function Bke(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,nn.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function Vke(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return Vke(e.maxBytes)}function Hke(e){let t=q9(zQ(`project`,e)),n=q9(zQ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function Uke(e){return Ne(`sha256`).update(e).digest(`hex`)}function Wke(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const Gke=[`"doc.name"`,`"docName"`];function Kke(e){let t=S(e,`utf-8`),n=0;for(let e of Gke){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function X9(e,t){if(!g(e))return!1;try{return v(M(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,C7(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const qke=new Set([`.jsonl`]);function Jke(e){let t=e.lastIndexOf(`.`);return t!==-1&&qke.has(e.slice(t))}const Yke=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function Xke(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&Yke.has(e.slice(t))}function Q9(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!Xke(r))continue;let{redacted:i,patterns:a,lineCount:o}=wB(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return ye(e,t).split(xe).join(`/`)}async function Zke(e){let t=be(e.contentDir),n=be(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??Nke,a=r.fetchAgentEffects??Pke,o=r.fetchWatcherRecent??Fke,s=r.readShadowHead??Lke,c=r.readCheckpointRefs??Rke,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.70.0-beta.1`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??zke,h=r.isOtlpPushEnabled??Bke,_=y(N(A(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(Dke(n),N(_,`telemetry`,R9)),X9(Oke(n),N(_,`telemetry`,z9)),X9(kke(n),N(_,`logs`,B9)),X9(Ake(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,me(t)));for(let t of e.userStateFiles??[])X9(t,N(_,aR,me(t)));let y=0;for(let t of e.diagnosticReports?.files??[])X9(t,N(_,`diagnostic-reports`,me(t)))&&(y+=1);let b=N(n,`.ok`,`local`),x=N(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){X9(x,N(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(N(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(N(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=Ike(n);e!==null&&re(N(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(N(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(N(_,`state`,`checkpoint-refs.txt`),D),X9(jke(n),N(_,`state`,H9)),X9(Mke(n),N(_,`state`,U9)),X9(N(b,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(b,Iu),N(_,`state`,Iu)),X9(N(b,Lu),N(_,`state`,Lu));let ee=p(),ne=d(),ie=f(),ae={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(N(_,`state`,`runtime.json`),`${JSON.stringify(ae,null,2)}\n`);let oe=C===`running`?`running
+`)}\n`:null}catch{return null}}function Lke(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],W6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function Rke(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],W6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function zke(){return{nodeVersion:process.version,platform:le(),arch:ae()}}function Bke(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,nn.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function Vke(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return Vke(e.maxBytes)}function Hke(e){let t=q9(zQ(`project`,e)),n=q9(zQ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function Uke(e){return Ne(`sha256`).update(e).digest(`hex`)}function Wke(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const Gke=[`"doc.name"`,`"docName"`];function Kke(e){let t=S(e,`utf-8`),n=0;for(let e of Gke){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function X9(e,t){if(!g(e))return!1;try{return v(M(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,C7(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const qke=new Set([`.jsonl`]);function Jke(e){let t=e.lastIndexOf(`.`);return t!==-1&&qke.has(e.slice(t))}const Yke=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function Xke(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&Yke.has(e.slice(t))}function Q9(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!Xke(r))continue;let{redacted:i,patterns:a,lineCount:o}=wB(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return ye(e,t).split(xe).join(`/`)}async function Zke(e){let t=be(e.contentDir),n=be(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??Nke,a=r.fetchAgentEffects??Pke,o=r.fetchWatcherRecent??Fke,s=r.readShadowHead??Lke,c=r.readCheckpointRefs??Rke,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.70.0-beta.2`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??zke,h=r.isOtlpPushEnabled??Bke,_=y(N(A(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(Dke(n),N(_,`telemetry`,R9)),X9(Oke(n),N(_,`telemetry`,z9)),X9(kke(n),N(_,`logs`,B9)),X9(Ake(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,me(t)));for(let t of e.userStateFiles??[])X9(t,N(_,aR,me(t)));let y=0;for(let t of e.diagnosticReports?.files??[])X9(t,N(_,`diagnostic-reports`,me(t)))&&(y+=1);let b=N(n,`.ok`,`local`),x=N(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){X9(x,N(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(N(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(N(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=Ike(n);e!==null&&re(N(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(N(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(N(_,`state`,`checkpoint-refs.txt`),D),X9(jke(n),N(_,`state`,H9)),X9(Mke(n),N(_,`state`,U9)),X9(N(b,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(b,Iu),N(_,`state`,Iu)),X9(N(b,Lu),N(_,`state`,Lu));let ee=p(),ne=d(),ie=f(),ae={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(N(_,`state`,`runtime.json`),`${JSON.stringify(ae,null,2)}\n`);let oe=C===`running`?`running
 `:`not-running (${w})\n`;re(N(_,`state`,`server-status.txt`),oe);let se=e.diagnosticReports===void 0?`not-collected (no collection attempted)`:S7(e.diagnosticReports,y);if(re(N(_,`state`,`diagnostic-reports-status.txt`),`${se}\n`),e.processDir&&g(e.processDir)){let t=N(_,`process`);v(t,{recursive:!0}),m(e.processDir,t,{recursive:!0})}let k=e.redact===!0;k&&Eke({stagingDir:_,contentDir:t}),e.note&&re(N(_,`note.txt`),e.note);let ce=null;e.scrubSecrets===!0&&(ce=Q9(_));for(let t of e.extraFiles??[])X9(t.sourcePath,N(_,`extra`,t.zipName??me(t.sourcePath)))||r.logger?.warn({sourcePath:t.sourcePath},`extra file missing; omitted from bundle`);let le=Hke(n),ue=Z9(_),A=[],j=0,de=0;for(let e of ue){let t=$9(_,e),n=te(e).size,r=Jke(t)?Wke(e):0;A.push({path:t,bytes:n,lines:r}),j+=n,(t.startsWith(`telemetry/`)||t.startsWith(`logs/`))&&(de+=Kke(e))}let fe={applied:k};ce!==null&&(fe.secretScrub=ce);let pe={schemaVersion:2,createdAt:l().toISOString(),ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie},contentDir:{pathSha256:Uke(t),absolutePath:k?`<CONTENT_DIR>`:t},telemetry:{localSink:le,otlpPushEnabled:h()},redaction:fe,serverStatus:C,files:A};re(N(_,`manifest.json`),`${JSON.stringify(pe,null,2)}\n`);let M=ue.some(e=>{try{return S(e,`utf-8`).includes(t)}catch{return!1}}),he={stagedDiagnosticReports:y,totalBytes:j,fileCount:A.length,docNameCount:de,contentDirVisible:M,redacted:k},ge=!1;return{stagingDir:_,manifest:pe,summary:he,cleanup:()=>{ge||(ge=!0,O(_,{recursive:!0,force:!0}))}}}catch(e){throw O(_,{recursive:!0,force:!0}),e}}async function Qke(e){let{collected:t,outputPath:n}=e,r=M(n);if(!g(r))throw Error(`ok diagnose bundle: parent directory does not exist: ${r}. Create it or pass --out with an existing parent.`);let i=new _Se.ZipFile,a=Z9(t.stagingDir);for(let e of a){let n=$9(t.stagingDir,e);i.addFile(e,n)}i.end();let o=h(n);return i.outputStream.pipe(o),await new Promise((e,t)=>{o.on(`close`,e),o.on(`error`,t),i.outputStream.on(`error`,t)}),n}function $ke(e,t){let n=N(e,`.ok`,`config.yml`);if(g(n))try{let t=(0,nn.parse)(S(n,`utf-8`)),r=K8(t)?t.content:void 0,i=K8(r)?r.dir:void 0;if(typeof i==`string`&&i.length>0)return be(e,i)}catch(e){t?.warn({configPath:n,err:e},`bug-report: failed to read .ok/config.yml; falling back to project root as content dir`)}return be(e)}async function eAe(e,t,n,r,i){let a=T7(t,e.logger),o=await Zke({contentDir:$ke(t,e.logger),projectDir:t,redact:e.redact,scrubSecrets:e.redact,note:e.note,extraFiles:e.extraFiles,userLogFiles:[...dOe(a,e.userLogsDir??N(k(),`.ok`,`logs`)),...D7(e.cachesDir??N(k(),`Library`,`Caches`))],userStateFiles:O7(e.bugReportsDir??w7()),diagnosticReports:i,deps:{readDesktopEnv:n,readLanguage:r,logger:e.logger}});try{v(M(e.outputPath),{recursive:!0}),await Qke({collected:o,outputPath:e.outputPath});let t=o.manifest.redaction.secretScrub;return{zipPath:e.outputPath,summary:{level:`full`,systemWide:!1,projectSlug:a,files:o.manifest.files.map(e=>e.path),redactions:t?.redactions??[],redactedLineCount:t?.redactedLineCount??0,generatedAt:o.manifest.createdAt}}}finally{o.cleanup()}}async function tAe(e){let{projectDir:t}=e,n=e.readDesktopEnv??G9,r=e.readLanguage??D9,i=()=>sOe(e.diagnosticReportsDir??N(k(),`Library`,`Logs`,`DiagnosticReports`),new Date);if(e.level===`full`&&t!==void 0)return eAe(e,t,n,r,i());let{zipPath:a,summary:o}=await gOe({projectDir:t,redact:e.redact,revealDocNames:e.level===`full`,outputPath:e.outputPath,userLogsDir:e.userLogsDir,shipItLogFiles:D7(e.cachesDir??N(k(),`Library`,`Caches`)),bugReportLedgerFiles:O7(e.bugReportsDir??w7()),diagnosticReports:e.level===`full`?i():void 0,logger:e.logger,note:e.note,extraFiles:e.extraFiles,desktop:n(),language:r()});return{zipPath:a,summary:{level:e.level,systemWide:t===void 0,projectSlug:o.projectSlug,files:o.files,redactions:o.redactions,redactedLineCount:o.redactedLineCount,generatedAt:o.generatedAt}}}export{$8 as ALL_EDITOR_IDS,e5 as EDITOR_LABELS,A5 as EDITOR_TARGETS,AEe as HOSTS_WITH_USER_SKILL_DIR,qDe as LAUNCH_CONFIG_NAME,ake as PATH_SHIM_BEGIN,ske as PATH_SHIM_BLOCK_RE,oke as PATH_SHIM_END,ODe as addOkPathsToGitExclude,L5 as assertProjectPathSafe,f5 as buildManagedServerEntry,YOe as buildMcpConfigDeclineEvent,XOe as buildMcpConfigMigrateEvent,y7 as classifyExistingMcpEntry,tAe as collectReportBundle,fke as createCliProbeResolver,sn as createTokenStore,cOe as defaultBugReportZipPath,We as detectGh,qe as detectGhAccounts,ZDe as detectInstalledEditors,x5 as droppedManagedKeys,ZEe as editorConfigPathDisplay,XEe as editorEntryLocator,ROe as ensurePiBridge,Z5 as formatTrackedRemediation,jDe as getExcludedOkPaths,Y5 as getInstalledSkillProjectionPaths,kEe as getNativeTomlMcpEditor,J5 as getOkArtifactPaths,u5 as isEntryUpToDate,p5 as isOwnManagedEntry,nke as loadConfig,yee as makeLazyProbeTokenStore,w7 as okBugReportsDir,y9 as parseGitHubBlobUrl,rke as parseGitHubShareUrl,b9 as parseGitHubTreeUrl,v9 as parseGitUrl,cke as pathInstallMarkerPath,fDe as previewContent,QDe as probeOwnManagedEditorMcpEntry,IOe as probePiBridgeState,X5 as probeTrackedOkPaths,_7 as readExistingMcpEntry,ADe as readSharingMode,wB as redactContent,kDe as removeOkPathsFromGitExclude,GOe as removeOwnMcpEntry,wDe as removeProjectSkill,mke as removeUserGlobalSkillBundle,bke as removeUserSkill,vDe as resolveProjectRoot,$Oe as runStop,m9 as truncatePriorEntry,T9 as userGlobalSkillBundleTargets,yke as userSkillPresentAnywhere,ike as validateLocalFolderForShare,g7 as writeEditorMcpConfig,_ke as writeProjectAiIntegrations,U5 as writeProjectSkill,XDe as writeUserMcpConfigs,vke as writeUserSkill};
 //# sourceMappingURL=index.mjs.map