@inkeep/open-knowledge 0.77.9-beta.3 → 0.77.9-beta.5

package/dist/cli.mjs

@@ -1,26 +1,26 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$o as t,Aa as n,Bt as r,Do as i,Fa as a,Fl as o,Hd as s,Il as c,Jd as l,Ju as u,Ls as d,Mc as f,Na as p,Od as m,Pd as h,Po as g,Pu as _,Qn as v,Rd as y,Sl as b,Ss as x,To as S,Ud as ee,Uo as C,Uu as te,Wc as ne,Wu as re,Xu as w,Yc as ie,Yu as T,ac as ae,as as oe,at as se,bc as ce,ca as le,cd as E,cu as ue,dc as de,eo as fe,fd as pe,gd as me,id as D,it as he,kc as ge,kd as _e,nd as ve,no as ye,ol as O,qd as be,ql as xe,ra as Se,rd as Ce,tc as we,td as Te,tl as Ee,to as De,tt as Oe,ws as ke,yr as Ae,zo as je}from"./md-manager-BGnqyqi1-RmPtbV-6.mjs";import{$a as Me,$n as Ne,Ao as Pe,Bi as Fe,Bo as Ie,Ca as Le,Ci as Re,Dr as ze,Ea as Be,Er as Ve,Fo as He,Fr as Ue,H as We,Hi as Ge,Hn as Ke,Ho as qe,Ht as Je,Kr as Ye,L as Xe,Li as Ze,Mi as Qe,Mo as $e,Mt as et,Ni as tt,No as nt,O as rt,Oo as it,Pt as at,Qi as ot,Qt as st,R as ct,Ro as lt,Sa as ut,Si as dt,Sr as ft,St as pt,T as mt,Ti as ht,Tt as gt,Un as _t,Vi as vt,Vo as yt,Wn as bt,Y as xt,Zi as St,_o as Ct,aa as wt,ai as Tt,ar as Et,bi as Dt,bo as Ot,bt as kt,cn as At,ct as jt,d as Mt,ft as Nt,go as Pt,gt as Ft,hn as It,ia as k,ii as Lt,ji as Rt,jo as zt,kn as Bt,ko as Vt,ln as Ht,lr as Ut,m as Wt,mn as Gt,mo as Kt,na as qt,nr as Jt,pi as Yt,pn as Xt,pt as Zt,qr as Qt,ra as $t,si as en,so as A,tn,tr as nn,ua as rn,uo as an,vo as on,x as sn,xi as cn,xn as ln,xo as un,xt as dn,yn as fn,yo as pn,yr as mn,yt as hn,zn as gn,zo as _n,zr as vn}from"./dist-CdMoMubk.mjs";import{B as yn,Ct as j,D as bn,E as xn,F as Sn,G as Cn,H as wn,I as Tn,J as En,K as Dn,M as On,O as kn,St as An,U as jn,W as Mn,X as Nn,Z as Pn,_t as Fn,bt as In,ft as Ln,gt as Rn,ht as zn,j as Bn,mt as Vn,pt as Hn,q as Un,u as Wn,vt as Gn,xt as Kn,yt as qn}from"./init-DGGNUxmW.mjs";import{_ as Jn,b as Yn,d as Xn,f as Zn,g as Qn,h as $n,m as er,o as tr,u as nr,x as rr,y as ir}from"./registry-probes-BT8xMvB6.mjs";import{C as ar,E as or,S as sr,T as cr,_ as lr,a as ur,b as dr,c as fr,d as pr,f as mr,h as hr,i as gr,l as _r,m as vr,n as yr,o as br,p as xr,r as Sr,s as Cr,t as wr,u as Tr,v as Er,w as Dr,x as Or,y as kr}from"./src-CmtHAL03.mjs";import{c as Ar,i as M,n as N,o as P,r as F,s as I,t as L}from"./colors-r_owlCuY.mjs";import{n as jr,r as Mr,t as Nr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Pr,S as Fr,y as Ir}from"./start-aJh2xhgP.mjs";import{n as Lr,t as Rr}from"./constants-DcuP0UuN.mjs";import{n as zr,t as Br}from"./loader-BoZJ8Vjn.mjs";import{t as Vr}from"./removal-file-path-BXwTLg4T.mjs";import{t as Hr}from"./launch-json-removal-BKSxoHv2.mjs";import{execFile as Ur,execFileSync as Wr,execSync as Gr,spawn as Kr,spawnSync as qr}from"node:child_process";import{basename as Jr,dirname as R,isAbsolute as Yr,join as z,posix as Xr,relative as B,resolve as V,sep as Zr}from"node:path";import Qr from"node:process";import{fileURLToPath as $r}from"node:url";import{accessSync as ei,appendFileSync as ti,closeSync as ni,constants as ri,existsSync as H,lstatSync as ii,mkdirSync as U,mkdtempSync as ai,readFileSync as W,readdirSync as oi,readlinkSync as si,realpathSync as ci,renameSync as li,rmSync as ui,statSync as G,unlinkSync as K,writeFileSync as di}from"node:fs";import{homedir as fi,platform as pi,tmpdir as mi}from"node:os";import{realpath as hi,rm as gi}from"node:fs/promises";import{randomUUID as _i}from"node:crypto";import{promisify as vi}from"node:util";import{setTimeout as yi}from"node:timers/promises";import{createInterface as bi}from"node:readline/promises";const xi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Si;Si||={};function Ci(e){return me(re,e)}async function wi(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=fn({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=Ht(t,r,l),d=fe(u,{mode:`lint`}),f=[],p=e=>{f.push(e)},m=new Map,h=e=>{let t=R(e),r=m.get(t);if(r)return r;let i=wt(n,e,l),a=At(u,i);return m.set(t,a),a},g=[],_=Ti(i,n);_.kind===`file`?g.push(B(n,_.path)):v(_.path);function v(e){let t;try{t=oi(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${B(n,e)||`.`}: ${Di(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;v(t)}else if(r.isFile()){if(!Ei(r.name)||s.isExcluded(i))continue;g.push(i)}}}g.sort();let y=[],b=0,x=0,ee=0;for(let e of g){let t=z(n,e),r;try{r=W(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Di(t)}`);continue}let i=h(e),s=!1;if(a&&i.enabled){let n=S(r,i,e,p);if(n!==r){let i=Pe(t);try{di(i,n,`utf-8`),li(i,t),r=n,s=!0,ee++}catch(t){try{K(i)}catch{}o.push(`could not write fix to ${e}: ${Di(t)}`)}}}let c=await oe(r,i,e,p);for(let e of c)e.severity===`error`?b++:x++;y.push({file:e,diagnostics:c,fixed:s})}return o.push(...we(f)),{contentDir:n,files:y,warnings:o,fileCount:g.length,errorCount:b,warningCount:x,fixedCount:ee,ran:d}}function Ti(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Yr(e)?e:V(t,e);try{if(G(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ei(e){let t=e.toLowerCase();return v.some(e=>t.endsWith(e))}function Di(e){return e instanceof Error?e.message:String(e)}function Oi(e){return new j(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=ot(r,i),o=t===void 0?void 0:ki(t,Dr()),s=r.contentRules,c=await wi({projectDir:i,contentDir:a,baseConfig:s?ae(s):Oe,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Mi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Ai(c))&&(process.exitCode=1)})}function ki(e,t){return V(t,e)}function Ai(e){return e.errorCount>0||e.warningCount>0}function ji(e){let t=[L(e.file)+(e.fixed?N(` (fixed)`):``)];for(let n of e.diagnostics){let e=N(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?F(`error  `):I(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${N(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Mi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ji(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(P(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${F(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(N(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...de(e.ran).map(e=>N(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(I(`! ${n}`))}return t.join(`
-`)}const Ni={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Pi(e){return new j(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await Fi(t,n,e(),process.cwd(),Dr());r!==0&&(process.exitCode=r)})}async function Fi(e,t,n,r,i,o=Ni){let s=ot(n,r),c;if(e!==void 0){let t=Ii(e,i,s);if(t===null)return o.err(`Path is outside the content directory (${s}): ${e}`),1;c=t===``?void 0:t}let l=Qe(k(r));if(!l||l.port<=0)return o.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let u=`http://127.0.0.1:${l.port}`,d=c===void 0?``:`?path=${encodeURIComponent(c)}`,f;try{f=await fetch(`${u}/api/audit${d}`,{headers:a({kind:`cli`,runtimeVersion:jt})})}catch(e){return o.err(`Could not reach the OpenKnowledge server on port ${l.port}: ${String(e)}`),1}if(!f.ok){let e=await f.json().catch(()=>({}));return o.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${f.status}`}`),1}let p=le.safeParse(await f.json().catch(()=>null));if(!p.success){let e=p.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return o.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let m=p.data;if(t.json===!0)o.out(JSON.stringify(m,null,2));else{let e=m.brokenLinkSuppression?Jt(m.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:u}):void 0;o.out([Mi(Li(m)),...e===void 0?[]:[e]].join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$o as t,Aa as n,Ac as r,Ad as i,Bt as a,Cl as o,Do as s,Fa as c,Fd as l,Fu as u,Gc as d,Gu as f,Il as p,Jd as m,Jl as h,Ll as g,Ls as _,Na as v,Nc as y,Po as b,Qn as x,Ss as S,To as ee,Ud as te,Uo as C,Wd as ne,Wu as re,Xc as ie,Xu as w,Yd as ae,Yu as oe,Zu as T,_d as se,ac as ce,ad as E,as as le,at as ue,bc as de,ca as fe,dc as pe,eo as me,id as he,it as ge,kd as _e,ld as D,lu as ve,nd as ye,nl as be,no as xe,pd as Se,ra as Ce,rd as we,sl as O,tc as Te,to as Ee,tt as De,ws as Oe,yr as ke,zd as Ae,zo as je}from"./md-manager-BGnqyqi1-BmeBaisX.mjs";import{$a as Me,$n as Ne,Ao as Pe,Bi as Fe,Bo as Ie,Ca as Le,Ci as Re,Dr as ze,Ea as Be,Er as Ve,Fo as He,Fr as Ue,H as We,Hi as Ge,Hn as Ke,Ho as qe,Ht as Je,Kr as Ye,L as Xe,Li as Ze,Mi as Qe,Mo as $e,Mt as et,Ni as tt,No as nt,O as rt,Oo as it,Pt as at,Qi as ot,Qt as st,R as ct,Ro as lt,Sa as ut,Si as dt,Sr as ft,St as pt,T as mt,Ti as ht,Tt as gt,Un as _t,Vi as vt,Vo as yt,Wn as bt,Y as xt,Zi as St,_o as Ct,aa as wt,ai as Tt,ar as Et,bi as Dt,bo as Ot,bt as kt,cn as At,ct as jt,d as Mt,ft as Nt,go as Pt,gt as Ft,hn as It,ia as k,ii as Lt,ji as Rt,jo as zt,kn as Bt,ko as Vt,ln as Ht,lr as Ut,m as Wt,mn as Gt,mo as Kt,na as qt,nr as Jt,pi as Yt,pn as Xt,pt as Zt,qr as Qt,ra as $t,si as en,so as A,tn,tr as nn,ua as rn,uo as an,vo as on,x as sn,xi as cn,xn as ln,xo as un,xt as dn,yn as fn,yo as pn,yr as mn,yt as hn,zn as gn,zo as _n,zr as vn}from"./dist-CNo9_UDM.mjs";import{B as yn,Ct as j,D as bn,E as xn,F as Sn,G as Cn,H as wn,I as Tn,J as En,K as Dn,M as On,O as kn,St as An,U as jn,W as Mn,X as Nn,Z as Pn,_t as Fn,bt as In,ft as Ln,gt as Rn,ht as zn,j as Bn,mt as Vn,pt as Hn,q as Un,u as Wn,vt as Gn,xt as Kn,yt as qn}from"./init-BByey1I0.mjs";import{_ as Jn,b as Yn,d as Xn,f as Zn,g as Qn,h as $n,m as er,o as tr,u as nr,x as rr,y as ir}from"./registry-probes-DCS9YHMm.mjs";import{C as ar,E as or,S as sr,T as cr,_ as lr,a as ur,b as dr,c as fr,d as pr,f as mr,h as hr,i as gr,l as _r,m as vr,n as yr,o as br,p as xr,r as Sr,s as Cr,t as wr,u as Tr,v as Er,w as Dr,x as Or,y as kr}from"./src-BV_1tpSB.mjs";import{c as Ar,i as M,n as N,o as P,r as F,s as I,t as L}from"./colors-r_owlCuY.mjs";import{n as jr,r as Mr,t as Nr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Pr,S as Fr,y as Ir}from"./start-Z4klo3Gn.mjs";import{n as Lr,t as Rr}from"./constants-CFxJJ9cG.mjs";import{n as zr,t as Br}from"./loader-CXm1l7nf.mjs";import{t as Vr}from"./removal-file-path-cPiYyGfY.mjs";import{t as Hr}from"./launch-json-removal-CKskytRd.mjs";import{execFile as Ur,execFileSync as Wr,execSync as Gr,spawn as Kr,spawnSync as qr}from"node:child_process";import{basename as Jr,dirname as R,isAbsolute as Yr,join as z,posix as Xr,relative as B,resolve as V,sep as Zr}from"node:path";import Qr from"node:process";import{fileURLToPath as $r}from"node:url";import{accessSync as ei,appendFileSync as ti,closeSync as ni,constants as ri,existsSync as H,lstatSync as ii,mkdirSync as U,mkdtempSync as ai,readFileSync as W,readdirSync as oi,readlinkSync as si,realpathSync as ci,renameSync as li,rmSync as ui,statSync as G,unlinkSync as K,writeFileSync as di}from"node:fs";import{homedir as fi,platform as pi,tmpdir as mi}from"node:os";import{realpath as hi,rm as gi}from"node:fs/promises";import{randomUUID as _i}from"node:crypto";import{promisify as vi}from"node:util";import{setTimeout as yi}from"node:timers/promises";import{createInterface as bi}from"node:readline/promises";const xi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Si;Si||={};function Ci(e){return se(f,e)}async function wi(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=fn({projectDir:t,contentDir:n}),c=new Set,l=e=>{c.has(e)||(c.add(e),o.push(e))},u=Ht(t,r,l),d=me(u,{mode:`lint`}),f=[],p=e=>{f.push(e)},m=new Map,h=e=>{let t=R(e),r=m.get(t);if(r)return r;let i=wt(n,e,l),a=At(u,i);return m.set(t,a),a},g=[],_=Ti(i,n);_.kind===`file`?g.push(B(n,_.path)):v(_.path);function v(e){let t;try{t=oi(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${B(n,e)||`.`}: ${Di(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;v(t)}else if(r.isFile()){if(!Ei(r.name)||s.isExcluded(i))continue;g.push(i)}}}g.sort();let y=[],b=0,x=0,S=0;for(let e of g){let t=z(n,e),r;try{r=W(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Di(t)}`);continue}let i=h(e),s=!1;if(a&&i.enabled){let n=ee(r,i,e,p);if(n!==r){let i=Pe(t);try{di(i,n,`utf-8`),li(i,t),r=n,s=!0,S++}catch(t){try{K(i)}catch{}o.push(`could not write fix to ${e}: ${Di(t)}`)}}}let c=await le(r,i,e,p);for(let e of c)e.severity===`error`?b++:x++;y.push({file:e,diagnostics:c,fixed:s})}return o.push(...Te(f)),{contentDir:n,files:y,warnings:o,fileCount:g.length,errorCount:b,warningCount:x,fixedCount:S,ran:d}}function Ti(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Yr(e)?e:V(t,e);try{if(G(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ei(e){let t=e.toLowerCase();return x.some(e=>t.endsWith(e))}function Di(e){return e instanceof Error?e.message:String(e)}function Oi(e){return new j(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=ot(r,i),o=t===void 0?void 0:ki(t,Dr()),s=r.contentRules,c=await wi({projectDir:i,contentDir:a,baseConfig:s?ce(s):De,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Mi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Ai(c))&&(process.exitCode=1)})}function ki(e,t){return V(t,e)}function Ai(e){return e.errorCount>0||e.warningCount>0}function ji(e){let t=[L(e.file)+(e.fixed?N(` (fixed)`):``)];for(let n of e.diagnostics){let e=N(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?F(`error  `):I(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${N(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Mi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ji(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(P(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${F(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(N(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...pe(e.ran).map(e=>N(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(I(`! ${n}`))}return t.join(`
+`)}const Ni={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Pi(e){return new j(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await Fi(t,n,e(),process.cwd(),Dr());r!==0&&(process.exitCode=r)})}async function Fi(e,t,n,r,i,a=Ni){let o=ot(n,r),s;if(e!==void 0){let t=Ii(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let l=Qe(k(r));if(!l||l.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let u=`http://127.0.0.1:${l.port}`,d=s===void 0?``:`?path=${encodeURIComponent(s)}`,f;try{f=await fetch(`${u}/api/audit${d}`,{headers:c({kind:`cli`,runtimeVersion:jt})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${l.port}: ${String(e)}`),1}if(!f.ok){let e=await f.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${f.status}`}`),1}let p=fe.safeParse(await f.json().catch(()=>null));if(!p.success){let e=p.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let m=p.data;if(t.json===!0)a.out(JSON.stringify(m,null,2));else{let e=m.brokenLinkSuppression?Jt(m.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:u}):void 0;a.out([Mi(Li(m)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?m.errorCount>0:m.errorCount+m.warningCount>0)}function Ii(e,t,n){let r=B(n,V(t,e));return r===``?``:r.startsWith(`..`)||Yr(r)?null:r.split(Zr).join(`/`)}function Li(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Ri(e,t,n,r){let i=zi(await Bi(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function zi(e){let t={};for(let n of e.split(`
-`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Bi(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Vi(e,t){let n=new j(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Ri(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await nn(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await nn(n),process.exit(1)}}),n}function Hi(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Ui(e,t,n){let r={baseUrl:Hi(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new jr(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Wi(e){let t=e.request||Nr,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Ui(t,`POST /login/device/code`,n)}async function Gi(e){let t=await Ui(e.request||Nr,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Ki(e,t.data.expires_in),n.refreshTokenExpiresAt=Ki(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Ki(e,t){return new Date(e+t*1e3).toISOString()}async function qi(e,t){let n=Ji(e,t.auth);if(n)return n;let{data:r}=await Wi({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Xi(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Ji(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Yi(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Xi(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Gi({...i,clientType:`oauth-app`}):await Gi({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Yi(r.interval),Xi(e,t,n,r);if(a===`slow_down`)return await Yi(r.interval+7),Xi(e,t,n,r);throw i}}async function Zi(e,t){return qi(e,{auth:t})}async function Qi(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await qi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var $i=`0.0.0-development`;function ea(e){let t=e.request||Nr.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${$i} ${Mr()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Zi.bind(null,i),{hook:Qi.bind(null,i)})}async function ta(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ea({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function na(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function ra(e){let t=e.toLowerCase().replace(/:\d+$/,``);r.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function ia(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function aa(e,t,n=ta){let r=na(),{host:i,json:a}=e;ra(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?ia(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?ia(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function oa(e){return new j(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??Yt(process.cwd()),r=await e();await aa({...t,host:n},r)})}const sa={style:{maskedText:`[input is masked]`}};var ca=Rn((e,t)=>{let{validate:n=()=>!0}=e,r=In(sa,e.theme),[i,a]=Kn(`idle`),[o,s]=Kn(),[c,l]=Kn(``),u=qn({status:i,theme:r});Gn(async(e,r)=>{if(i===`idle`){if(An(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)}});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${Fn}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function la(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>la.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function ua(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function da(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const fa=Function.bind,pa=fa.bind(fa);function ma(e,t,n){let r=pa(da,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=pa(ua,null).apply(null,i)})}function ha(){let e=Symbol(`Singular`),t={registry:{}},n=la.bind(null,t,e);return ma(n,t,e),n}function ga(){let e={registry:{}},t=la.bind(null,e);return ma(t,e),t}var _a={Singular:ha,Collection:ga},va=`0.0.0-development`;function ya(e){return`Request failed due to following response errors:
+`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Bi(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Vi(e,t){let n=new j(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Ri(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await nn(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await nn(n),process.exit(1)}}),n}function Hi(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Ui(e,t,n){let r={baseUrl:Hi(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new jr(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Wi(e){let t=e.request||Nr,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Ui(t,`POST /login/device/code`,n)}async function Gi(e){let t=await Ui(e.request||Nr,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Ki(e,t.data.expires_in),n.refreshTokenExpiresAt=Ki(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Ki(e,t){return new Date(e+t*1e3).toISOString()}async function qi(e,t){let n=Ji(e,t.auth);if(n)return n;let{data:r}=await Wi({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Xi(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Ji(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Yi(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Xi(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Gi({...i,clientType:`oauth-app`}):await Gi({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Yi(r.interval),Xi(e,t,n,r);if(a===`slow_down`)return await Yi(r.interval+7),Xi(e,t,n,r);throw i}}async function Zi(e,t){return qi(e,{auth:t})}async function Qi(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await qi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var $i=`0.0.0-development`;function ea(e){let t=e.request||Nr.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${$i} ${Mr()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Zi.bind(null,i),{hook:Qi.bind(null,i)})}async function ta(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ea({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function na(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function ra(e){let t=e.toLowerCase().replace(/:\d+$/,``);a.has(t)&&(process.stderr.write(`Error: ${e} is not a GitHub host. Only GitHub and GitHub Enterprise Server are supported.\n`),process.exit(1))}function ia(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function aa(e,t,n=ta){let r=na(),{host:i,json:a}=e;ra(i),a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?ia(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?ia(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function oa(e){return new j(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=t.host??Yt(process.cwd()),r=await e();await aa({...t,host:n},r)})}const sa={style:{maskedText:`[input is masked]`}};var ca=Rn((e,t)=>{let{validate:n=()=>!0}=e,r=In(sa,e.theme),[i,a]=Kn(`idle`),[o,s]=Kn(),[c,l]=Kn(``),u=qn({status:i,theme:r});Gn(async(e,r)=>{if(i===`idle`){if(An(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)}});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${Fn}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function la(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>la.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function ua(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function da(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const fa=Function.bind,pa=fa.bind(fa);function ma(e,t,n){let r=pa(da,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=pa(ua,null).apply(null,i)})}function ha(){let e=Symbol(`Singular`),t={registry:{}},n=la.bind(null,t,e);return ma(n,t,e),n}function ga(){let e={registry:{}},t=la.bind(null,e);return ma(t,e),t}var _a={Singular:ha,Collection:ga},va=`0.0.0-development`;function ya(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
 `)}var ba=class extends Error{constructor(e,t,n){super(ya(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}name=`GraphqlResponseError`;errors;data},xa=[`method`,`baseUrl`,`url`,`headers`,`request`,`query`,`mediaType`,`operationName`],Sa=[`query`,`method`,`url`],Ca=/\/api\/v3\/?$/;function wa(e,t,n){if(n){if(typeof t==`string`&&`query`in n)return Promise.reject(Error(`[@octokit/graphql] "query" cannot be used as variable name`));for(let e in n)if(Sa.includes(e))return Promise.reject(Error(`[@octokit/graphql] "${e}" cannot be used as variable name`))}let r=typeof t==`string`?Object.assign({query:t},n):t,i=Object.keys(r).reduce((e,t)=>xa.includes(t)?(e[t]=r[t],e):(e.variables||={},e.variables[t]=r[t],e),{}),a=r.baseUrl||e.endpoint.DEFAULTS.baseUrl;return Ca.test(a)&&(i.url=a.replace(Ca,`/api/graphql`)),e(i).then(e=>{if(e.data.errors){let t={};for(let n of Object.keys(e.headers))t[n]=e.headers[n];throw new ba(i,t,e.data)}return e.data.data})}function Ta(e,t){let n=e.defaults(t);return Object.assign((e,t)=>wa(n,e,t),{defaults:Ta.bind(null,n),endpoint:n.endpoint})}Ta(Nr,{headers:{"user-agent":`octokit-graphql.js/${va} ${Mr()}`},method:`POST`,url:`/graphql`});function Ea(e){return Ta(e,{method:`POST`,url:`/graphql`})}var Da=`(?:[a-zA-Z0-9_-]+)`,Oa=`\\.`,ka=RegExp(`^${Da}${Oa}${Da}${Oa}${Da}$`),Aa=ka.test.bind(ka);async function ja(e){let t=Aa(e),n=e.startsWith(`v1.`)||e.startsWith(`ghs_`),r=e.startsWith(`ghu_`);return{type:`token`,token:e,tokenType:t?`app`:n?`installation`:r?`user-to-server`:`oauth`}}function Ma(e){return e.split(/\./).length===3?`bearer ${e}`:`token ${e}`}async function Na(e,t,n,r){let i=t.endpoint.merge(n,r);return i.headers.authorization=Ma(e),t(i)}var Pa=function(e){if(!e)throw Error(`[@octokit/auth-token] No token passed to createTokenAuth`);if(typeof e!=`string`)throw Error(`[@octokit/auth-token] Token passed to createTokenAuth is not a string`);return e=e.replace(/^(token|bearer) +/i,``),Object.assign(ja.bind(null,e),{hook:Na.bind(null,e)})};const Fa=`7.0.6`,Ia=()=>{},La=console.warn.bind(console),Ra=console.error.bind(console);function za(e={}){return typeof e.debug!=`function`&&(e.debug=Ia),typeof e.info!=`function`&&(e.info=Ia),typeof e.warn!=`function`&&(e.warn=La),typeof e.error!=`function`&&(e.error=Ra),e}const Ba=`octokit-core.js/${Fa} ${Mr()}`;var Va=class{static VERSION=Fa;static defaults(e){return class extends this{constructor(...t){let n=t[0]||{};if(typeof e==`function`){super(e(n));return}super(Object.assign({},e,n,n.userAgent&&e.userAgent?{userAgent:`${n.userAgent} ${e.userAgent}`}:null))}}}static plugins=[];static plugin(...e){let t=this.plugins;return class extends this{static plugins=t.concat(e.filter(e=>!t.includes(e)))}}constructor(e={}){let t=new _a.Collection,n={baseUrl:Nr.endpoint.DEFAULTS.baseUrl,headers:{},request:Object.assign({},e.request,{hook:t.bind(null,`request`)}),mediaType:{previews:[],format:``}};if(n.headers[`user-agent`]=e.userAgent?`${e.userAgent} ${Ba}`:Ba,e.baseUrl&&(n.baseUrl=e.baseUrl),e.previews&&(n.mediaType.previews=e.previews),e.timeZone&&(n.headers[`time-zone`]=e.timeZone),this.request=Nr.defaults(n),this.graphql=Ea(this.request).defaults(n),this.log=za(e.log),this.hook=t,e.authStrategy){let{authStrategy:n,...r}=e,i=n(Object.assign({request:this.request,log:this.log,octokit:this,octokitOptions:r},e.auth));t.wrap(`request`,i.hook),this.auth=i}else if(!e.auth)this.auth=async()=>({type:`unauthenticated`});else{let n=Pa(e.auth);t.wrap(`request`,n.hook),this.auth=n}let r=this.constructor;for(let t=0;t<r.plugins.length;++t)Object.assign(this,r.plugins[t](this,e))}request;graphql;log;hook;auth};function Ha(e){e.hook.wrap(`request`,(t,n)=>{e.log.debug(`request`,n);let r=Date.now(),i=e.request.endpoint.parse(n),a=i.url.replace(n.baseUrl,``);return t(n).then(t=>{let n=t.headers[`x-github-request-id`];return e.log.info(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t}).catch(t=>{let n=t.response?.headers[`x-github-request-id`]||`UNKNOWN`;throw e.log.error(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t})})}Ha.VERSION=`6.0.0`;var Ua=`0.0.0-development`;function Wa(e){if(!e.data)return{...e,data:[]};if(!((`total_count`in e.data||`total_commits`in e.data)&&!(`url`in e.data)))return e;let t=e.data.incomplete_results,n=e.data.repository_selection,r=e.data.total_count,i=e.data.total_commits;delete e.data.incomplete_results,delete e.data.repository_selection,delete e.data.total_count,delete e.data.total_commits;let a=Object.keys(e.data)[0];return e.data=e.data[a],t!==void 0&&(e.data.incomplete_results=t),n!==void 0&&(e.data.repository_selection=n),e.data.total_count=r,e.data.total_commits=i,e}function Ga(e,t,n){let r=typeof t==`function`?t.endpoint(n):e.request.endpoint(t,n),i=typeof t==`function`?t:e.request,a=r.method,o=r.headers,s=r.url;return{[Symbol.asyncIterator]:()=>({async next(){if(!s)return{done:!0};try{let e=Wa(await i({method:a,url:s,headers:o}));if(s=((e.headers.link||``).match(/<([^<>]+)>;\s*rel="next"/)||[])[1],!s&&`total_commits`in e.data){let t=new URL(e.url),n=t.searchParams,r=parseInt(n.get(`page`)||`1`,10);r*parseInt(n.get(`per_page`)||`250`,10)<e.data.total_commits&&(n.set(`page`,String(r+1)),s=t.toString())}return{value:e}}catch(e){if(e.status!==409)throw e;return s=``,{value:{status:200,headers:{},data:[]}}}}})}}function Ka(e,t,n,r){return typeof n==`function`&&(r=n,n=void 0),qa(e,[],Ga(e,t,n)[Symbol.asyncIterator](),r)}function qa(e,t,n,r){return n.next().then(i=>{if(i.done)return t;let a=!1;function o(){a=!0}return t=t.concat(r?r(i.value,o):i.value.data),a?t:qa(e,t,n,r)})}Object.assign(Ka,{iterator:Ga});function Ja(e){return{paginate:Object.assign(Ka.bind(null,e),{iterator:Ga.bind(null,e)})}}Ja.VERSION=Ua;var Ya={actions:{addCustomLabelsToSelfHostedRunnerForOrg:[`POST /orgs/{org}/actions/runners/{runner_id}/labels`],addCustomLabelsToSelfHostedRunnerForRepo:[`POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],addRepoAccessToSelfHostedRunnerGroupInOrg:[`PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],approveWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/approve`],cancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel`],createEnvironmentVariable:[`POST /repos/{owner}/{repo}/environments/{environment_name}/variables`],createHostedRunnerForOrg:[`POST /orgs/{org}/actions/hosted-runners`],createOrUpdateEnvironmentSecret:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}`],createOrgVariable:[`POST /orgs/{org}/actions/variables`],createRegistrationTokenForOrg:[`POST /orgs/{org}/actions/runners/registration-token`],createRegistrationTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/registration-token`],createRemoveTokenForOrg:[`POST /orgs/{org}/actions/runners/remove-token`],createRemoveTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/remove-token`],createRepoVariable:[`POST /repos/{owner}/{repo}/actions/variables`],createWorkflowDispatch:[`POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches`],deleteActionsCacheById:[`DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}`],deleteActionsCacheByKey:[`DELETE /repos/{owner}/{repo}/actions/caches{?key,ref}`],deleteArtifact:[`DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],deleteCustomImageFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],deleteCustomImageVersionFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],deleteEnvironmentSecret:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],deleteEnvironmentVariable:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],deleteHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],deleteOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}`],deleteOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}`],deleteRepoVariable:[`DELETE /repos/{owner}/{repo}/actions/variables/{name}`],deleteSelfHostedRunnerFromOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}`],deleteSelfHostedRunnerFromRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}`],deleteWorkflowRun:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}`],deleteWorkflowRunLogs:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],disableSelectedRepositoryGithubActionsOrganization:[`DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}`],disableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable`],downloadArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}`],downloadJobLogsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs`],downloadWorkflowRunAttemptLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs`],downloadWorkflowRunLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],enableSelectedRepositoryGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories/{repository_id}`],enableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable`],forceCancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel`],generateRunnerJitconfigForOrg:[`POST /orgs/{org}/actions/runners/generate-jitconfig`],generateRunnerJitconfigForRepo:[`POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig`],getActionsCacheList:[`GET /repos/{owner}/{repo}/actions/caches`],getActionsCacheUsage:[`GET /repos/{owner}/{repo}/actions/cache/usage`],getActionsCacheUsageByRepoForOrg:[`GET /orgs/{org}/actions/cache/usage-by-repository`],getActionsCacheUsageForOrg:[`GET /orgs/{org}/actions/cache/usage`],getAllowedActionsOrganization:[`GET /orgs/{org}/actions/permissions/selected-actions`],getAllowedActionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/selected-actions`],getArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],getCustomImageForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],getCustomImageVersionForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],getCustomOidcSubClaimForRepo:[`GET /repos/{owner}/{repo}/actions/oidc/customization/sub`],getEnvironmentPublicKey:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key`],getEnvironmentSecret:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],getEnvironmentVariable:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],getGithubActionsDefaultWorkflowPermissionsOrganization:[`GET /orgs/{org}/actions/permissions/workflow`],getGithubActionsDefaultWorkflowPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/workflow`],getGithubActionsPermissionsOrganization:[`GET /orgs/{org}/actions/permissions`],getGithubActionsPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions`],getHostedRunnerForOrg:[`GET /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],getHostedRunnersGithubOwnedImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/github-owned`],getHostedRunnersLimitsForOrg:[`GET /orgs/{org}/actions/hosted-runners/limits`],getHostedRunnersMachineSpecsForOrg:[`GET /orgs/{org}/actions/hosted-runners/machine-sizes`],getHostedRunnersPartnerImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/partner`],getHostedRunnersPlatformsForOrg:[`GET /orgs/{org}/actions/hosted-runners/platforms`],getJobForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}`],getOrgPublicKey:[`GET /orgs/{org}/actions/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}`],getOrgVariable:[`GET /orgs/{org}/actions/variables/{name}`],getPendingDeploymentsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],getRepoPermissions:[`GET /repos/{owner}/{repo}/actions/permissions`,{},{renamed:[`actions`,`getGithubActionsPermissionsRepository`]}],getRepoPublicKey:[`GET /repos/{owner}/{repo}/actions/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/actions/secrets/{secret_name}`],getRepoVariable:[`GET /repos/{owner}/{repo}/actions/variables/{name}`],getReviewsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals`],getSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}`],getSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}`],getWorkflow:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}`],getWorkflowAccessToRepository:[`GET /repos/{owner}/{repo}/actions/permissions/access`],getWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}`],getWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}`],getWorkflowRunUsage:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/timing`],getWorkflowUsage:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timing`],listArtifactsForRepo:[`GET /repos/{owner}/{repo}/actions/artifacts`],listCustomImageVersionsForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions`],listCustomImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom`],listEnvironmentSecrets:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets`],listEnvironmentVariables:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables`],listGithubHostedRunnersInGroupForOrg:[`GET /orgs/{org}/actions/runner-groups/{runner_group_id}/hosted-runners`],listHostedRunnersForOrg:[`GET /orgs/{org}/actions/hosted-runners`],listJobsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs`],listJobsForWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs`],listLabelsForSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}/labels`],listLabelsForSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],listOrgSecrets:[`GET /orgs/{org}/actions/secrets`],listOrgVariables:[`GET /orgs/{org}/actions/variables`],listRepoOrganizationSecrets:[`GET /repos/{owner}/{repo}/actions/organization-secrets`],listRepoOrganizationVariables:[`GET /repos/{owner}/{repo}/actions/organization-variables`],listRepoSecrets:[`GET /repos/{owner}/{repo}/actions/secrets`],listRepoVariables:[`GET /repos/{owner}/{repo}/actions/variables`],listRepoWorkflows:[`GET /repos/{owner}/{repo}/actions/workflows`],listRunnerApplicationsForOrg:[`GET /orgs/{org}/actions/runners/downloads`],listRunnerApplicationsForRepo:[`GET /repos/{owner}/{repo}/actions/runners/downloads`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}/repositories`],listSelectedReposForOrgVariable:[`GET /orgs/{org}/actions/variables/{name}/repositories`],listSelectedRepositoriesEnabledGithubActionsOrganization:[`GET /orgs/{org}/actions/permissions/repositories`],listSelfHostedRunnersForOrg:[`GET /orgs/{org}/actions/runners`],listSelfHostedRunnersForRepo:[`GET /repos/{owner}/{repo}/actions/runners`],listWorkflowRunArtifacts:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts`],listWorkflowRuns:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs`],listWorkflowRunsForRepo:[`GET /repos/{owner}/{repo}/actions/runs`],reRunJobForWorkflowRun:[`POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun`],reRunWorkflow:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun`],reRunWorkflowFailedJobs:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs`],removeAllCustomLabelsFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels`],removeAllCustomLabelsFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],removeCustomLabelFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}`],removeCustomLabelFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],reviewCustomGatesForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/deployment_protection_rule`],reviewPendingDeploymentsForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],setAllowedActionsOrganization:[`PUT /orgs/{org}/actions/permissions/selected-actions`],setAllowedActionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/selected-actions`],setCustomLabelsForSelfHostedRunnerForOrg:[`PUT /orgs/{org}/actions/runners/{runner_id}/labels`],setCustomLabelsForSelfHostedRunnerForRepo:[`PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],setCustomOidcSubClaimForRepo:[`PUT /repos/{owner}/{repo}/actions/oidc/customization/sub`],setGithubActionsDefaultWorkflowPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions/workflow`],setGithubActionsDefaultWorkflowPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/workflow`],setGithubActionsPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions`],setGithubActionsPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories`],setSelectedReposForOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories`],setSelectedRepositoriesEnabledGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories`],setWorkflowAccessToRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/access`],updateEnvironmentVariable:[`PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],updateHostedRunnerForOrg:[`PATCH /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],updateOrgVariable:[`PATCH /orgs/{org}/actions/variables/{name}`],updateRepoVariable:[`PATCH /repos/{owner}/{repo}/actions/variables/{name}`]},activity:{checkRepoIsStarredByAuthenticatedUser:[`GET /user/starred/{owner}/{repo}`],deleteRepoSubscription:[`DELETE /repos/{owner}/{repo}/subscription`],deleteThreadSubscription:[`DELETE /notifications/threads/{thread_id}/subscription`],getFeeds:[`GET /feeds`],getRepoSubscription:[`GET /repos/{owner}/{repo}/subscription`],getThread:[`GET /notifications/threads/{thread_id}`],getThreadSubscriptionForAuthenticatedUser:[`GET /notifications/threads/{thread_id}/subscription`],listEventsForAuthenticatedUser:[`GET /users/{username}/events`],listNotificationsForAuthenticatedUser:[`GET /notifications`],listOrgEventsForAuthenticatedUser:[`GET /users/{username}/events/orgs/{org}`],listPublicEvents:[`GET /events`],listPublicEventsForRepoNetwork:[`GET /networks/{owner}/{repo}/events`],listPublicEventsForUser:[`GET /users/{username}/events/public`],listPublicOrgEvents:[`GET /orgs/{org}/events`],listReceivedEventsForUser:[`GET /users/{username}/received_events`],listReceivedPublicEventsForUser:[`GET /users/{username}/received_events/public`],listRepoEvents:[`GET /repos/{owner}/{repo}/events`],listRepoNotificationsForAuthenticatedUser:[`GET /repos/{owner}/{repo}/notifications`],listReposStarredByAuthenticatedUser:[`GET /user/starred`],listReposStarredByUser:[`GET /users/{username}/starred`],listReposWatchedByUser:[`GET /users/{username}/subscriptions`],listStargazersForRepo:[`GET /repos/{owner}/{repo}/stargazers`],listWatchedReposForAuthenticatedUser:[`GET /user/subscriptions`],listWatchersForRepo:[`GET /repos/{owner}/{repo}/subscribers`],markNotificationsAsRead:[`PUT /notifications`],markRepoNotificationsAsRead:[`PUT /repos/{owner}/{repo}/notifications`],markThreadAsDone:[`DELETE /notifications/threads/{thread_id}`],markThreadAsRead:[`PATCH /notifications/threads/{thread_id}`],setRepoSubscription:[`PUT /repos/{owner}/{repo}/subscription`],setThreadSubscription:[`PUT /notifications/threads/{thread_id}/subscription`],starRepoForAuthenticatedUser:[`PUT /user/starred/{owner}/{repo}`],unstarRepoForAuthenticatedUser:[`DELETE /user/starred/{owner}/{repo}`]},apps:{addRepoToInstallation:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`addRepoToInstallationForAuthenticatedUser`]}],addRepoToInstallationForAuthenticatedUser:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`],checkToken:[`POST /applications/{client_id}/token`],createFromManifest:[`POST /app-manifests/{code}/conversions`],createInstallationAccessToken:[`POST /app/installations/{installation_id}/access_tokens`],deleteAuthorization:[`DELETE /applications/{client_id}/grant`],deleteInstallation:[`DELETE /app/installations/{installation_id}`],deleteToken:[`DELETE /applications/{client_id}/token`],getAuthenticated:[`GET /app`],getBySlug:[`GET /apps/{app_slug}`],getInstallation:[`GET /app/installations/{installation_id}`],getOrgInstallation:[`GET /orgs/{org}/installation`],getRepoInstallation:[`GET /repos/{owner}/{repo}/installation`],getSubscriptionPlanForAccount:[`GET /marketplace_listing/accounts/{account_id}`],getSubscriptionPlanForAccountStubbed:[`GET /marketplace_listing/stubbed/accounts/{account_id}`],getUserInstallation:[`GET /users/{username}/installation`],getWebhookConfigForApp:[`GET /app/hook/config`],getWebhookDelivery:[`GET /app/hook/deliveries/{delivery_id}`],listAccountsForPlan:[`GET /marketplace_listing/plans/{plan_id}/accounts`],listAccountsForPlanStubbed:[`GET /marketplace_listing/stubbed/plans/{plan_id}/accounts`],listInstallationReposForAuthenticatedUser:[`GET /user/installations/{installation_id}/repositories`],listInstallationRequestsForAuthenticatedApp:[`GET /app/installation-requests`],listInstallations:[`GET /app/installations`],listInstallationsForAuthenticatedUser:[`GET /user/installations`],listPlans:[`GET /marketplace_listing/plans`],listPlansStubbed:[`GET /marketplace_listing/stubbed/plans`],listReposAccessibleToInstallation:[`GET /installation/repositories`],listSubscriptionsForAuthenticatedUser:[`GET /user/marketplace_purchases`],listSubscriptionsForAuthenticatedUserStubbed:[`GET /user/marketplace_purchases/stubbed`],listWebhookDeliveries:[`GET /app/hook/deliveries`],redeliverWebhookDelivery:[`POST /app/hook/deliveries/{delivery_id}/attempts`],removeRepoFromInstallation:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`removeRepoFromInstallationForAuthenticatedUser`]}],removeRepoFromInstallationForAuthenticatedUser:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`],resetToken:[`PATCH /applications/{client_id}/token`],revokeInstallationAccessToken:[`DELETE /installation/token`],scopeToken:[`POST /applications/{client_id}/token/scoped`],suspendInstallation:[`PUT /app/installations/{installation_id}/suspended`],unsuspendInstallation:[`DELETE /app/installations/{installation_id}/suspended`],updateWebhookConfigForApp:[`PATCH /app/hook/config`]},billing:{getGithubActionsBillingOrg:[`GET /orgs/{org}/settings/billing/actions`],getGithubActionsBillingUser:[`GET /users/{username}/settings/billing/actions`],getGithubBillingPremiumRequestUsageReportOrg:[`GET /organizations/{org}/settings/billing/premium_request/usage`],getGithubBillingPremiumRequestUsageReportUser:[`GET /users/{username}/settings/billing/premium_request/usage`],getGithubBillingUsageReportOrg:[`GET /organizations/{org}/settings/billing/usage`],getGithubBillingUsageReportUser:[`GET /users/{username}/settings/billing/usage`],getGithubPackagesBillingOrg:[`GET /orgs/{org}/settings/billing/packages`],getGithubPackagesBillingUser:[`GET /users/{username}/settings/billing/packages`],getSharedStorageBillingOrg:[`GET /orgs/{org}/settings/billing/shared-storage`],getSharedStorageBillingUser:[`GET /users/{username}/settings/billing/shared-storage`]},campaigns:{createCampaign:[`POST /orgs/{org}/campaigns`],deleteCampaign:[`DELETE /orgs/{org}/campaigns/{campaign_number}`],getCampaignSummary:[`GET /orgs/{org}/campaigns/{campaign_number}`],listOrgCampaigns:[`GET /orgs/{org}/campaigns`],updateCampaign:[`PATCH /orgs/{org}/campaigns/{campaign_number}`]},checks:{create:[`POST /repos/{owner}/{repo}/check-runs`],createSuite:[`POST /repos/{owner}/{repo}/check-suites`],get:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}`],getSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}`],listAnnotations:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations`],listForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-runs`],listForSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs`],listSuitesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-suites`],rerequestRun:[`POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest`],rerequestSuite:[`POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest`],setSuitesPreferences:[`PATCH /repos/{owner}/{repo}/check-suites/preferences`],update:[`PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}`]},codeScanning:{commitAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix/commits`],createAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],createVariantAnalysis:[`POST /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses`],deleteAnalysis:[`DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}{?confirm_delete}`],deleteCodeqlDatabase:[`DELETE /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getAlert:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`,{},{renamedParameters:{alert_id:`alert_number`}}],getAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}`],getAutofix:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],getCodeqlDatabase:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getDefaultSetup:[`GET /repos/{owner}/{repo}/code-scanning/default-setup`],getSarif:[`GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}`],getVariantAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}`],getVariantAnalysisRepoTask:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}`],listAlertInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`],listAlertsForOrg:[`GET /orgs/{org}/code-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/code-scanning/alerts`],listAlertsInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`,{},{renamed:[`codeScanning`,`listAlertInstances`]}],listCodeqlDatabases:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases`],listRecentAnalyses:[`GET /repos/{owner}/{repo}/code-scanning/analyses`],updateAlert:[`PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`],updateDefaultSetup:[`PATCH /repos/{owner}/{repo}/code-scanning/default-setup`],uploadSarif:[`POST /repos/{owner}/{repo}/code-scanning/sarifs`]},codeSecurity:{attachConfiguration:[`POST /orgs/{org}/code-security/configurations/{configuration_id}/attach`],attachEnterpriseConfiguration:[`POST /enterprises/{enterprise}/code-security/configurations/{configuration_id}/attach`],createConfiguration:[`POST /orgs/{org}/code-security/configurations`],createConfigurationForEnterprise:[`POST /enterprises/{enterprise}/code-security/configurations`],deleteConfiguration:[`DELETE /orgs/{org}/code-security/configurations/{configuration_id}`],deleteConfigurationForEnterprise:[`DELETE /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],detachConfiguration:[`DELETE /orgs/{org}/code-security/configurations/detach`],getConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}`],getConfigurationForRepository:[`GET /repos/{owner}/{repo}/code-security-configuration`],getConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations`],getConfigurationsForOrg:[`GET /orgs/{org}/code-security/configurations`],getDefaultConfigurations:[`GET /orgs/{org}/code-security/configurations/defaults`],getDefaultConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/defaults`],getRepositoriesForConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories`],getRepositoriesForEnterpriseConfiguration:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}/repositories`],getSingleConfigurationForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],setConfigurationAsDefault:[`PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults`],setConfigurationAsDefaultForEnterprise:[`PUT /enterprises/{enterprise}/code-security/configurations/{configuration_id}/defaults`],updateConfiguration:[`PATCH /orgs/{org}/code-security/configurations/{configuration_id}`],updateEnterpriseConfiguration:[`PATCH /enterprises/{enterprise}/code-security/configurations/{configuration_id}`]},codesOfConduct:{getAllCodesOfConduct:[`GET /codes_of_conduct`],getConductCode:[`GET /codes_of_conduct/{key}`]},codespaces:{addRepositoryForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],checkPermissionsForDevcontainer:[`GET /repos/{owner}/{repo}/codespaces/permissions_check`],codespaceMachinesForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/machines`],createForAuthenticatedUser:[`POST /user/codespaces`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],createOrUpdateSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}`],createWithPrForAuthenticatedUser:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaces`],createWithRepoForAuthenticatedUser:[`POST /repos/{owner}/{repo}/codespaces`],deleteForAuthenticatedUser:[`DELETE /user/codespaces/{codespace_name}`],deleteFromOrganization:[`DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],deleteSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}`],exportForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/exports`],getCodespacesForUserInOrg:[`GET /orgs/{org}/members/{username}/codespaces`],getExportDetailsForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/exports/{export_id}`],getForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}`],getOrgPublicKey:[`GET /orgs/{org}/codespaces/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}`],getPublicKeyForAuthenticatedUser:[`GET /user/codespaces/secrets/public-key`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/codespaces/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],getSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}`],listDevcontainersInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/devcontainers`],listForAuthenticatedUser:[`GET /user/codespaces`],listInOrganization:[`GET /orgs/{org}/codespaces`,{},{renamedParameters:{org_id:`org`}}],listInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces`],listOrgSecrets:[`GET /orgs/{org}/codespaces/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/codespaces/secrets`],listRepositoriesForSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}/repositories`],listSecretsForAuthenticatedUser:[`GET /user/codespaces/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],preFlightWithRepoForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/new`],publishForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/publish`],removeRepositoryForSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],repoMachinesForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/machines`],setRepositoriesForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],startForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/start`],stopForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/stop`],stopInOrganization:[`POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop`],updateForAuthenticatedUser:[`PATCH /user/codespaces/{codespace_name}`]},copilot:{addCopilotSeatsForTeams:[`POST /orgs/{org}/copilot/billing/selected_teams`],addCopilotSeatsForUsers:[`POST /orgs/{org}/copilot/billing/selected_users`],cancelCopilotSeatAssignmentForTeams:[`DELETE /orgs/{org}/copilot/billing/selected_teams`],cancelCopilotSeatAssignmentForUsers:[`DELETE /orgs/{org}/copilot/billing/selected_users`],copilotMetricsForOrganization:[`GET /orgs/{org}/copilot/metrics`],copilotMetricsForTeam:[`GET /orgs/{org}/team/{team_slug}/copilot/metrics`],getCopilotOrganizationDetails:[`GET /orgs/{org}/copilot/billing`],getCopilotSeatDetailsForUser:[`GET /orgs/{org}/members/{username}/copilot`],listCopilotSeats:[`GET /orgs/{org}/copilot/billing/seats`]},credentials:{revoke:[`POST /credentials/revoke`]},dependabot:{addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],getAlert:[`GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],getOrgPublicKey:[`GET /orgs/{org}/dependabot/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/dependabot/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],listAlertsForEnterprise:[`GET /enterprises/{enterprise}/dependabot/alerts`],listAlertsForOrg:[`GET /orgs/{org}/dependabot/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/dependabot/alerts`],listOrgSecrets:[`GET /orgs/{org}/dependabot/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/dependabot/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],repositoryAccessForOrg:[`GET /organizations/{org}/dependabot/repository-access`],setRepositoryAccessDefaultLevel:[`PUT /organizations/{org}/dependabot/repository-access/default-level`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],updateAlert:[`PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],updateRepositoryAccessForOrg:[`PATCH /organizations/{org}/dependabot/repository-access`]},dependencyGraph:{createRepositorySnapshot:[`POST /repos/{owner}/{repo}/dependency-graph/snapshots`],diffRange:[`GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}`],exportSbom:[`GET /repos/{owner}/{repo}/dependency-graph/sbom`]},emojis:{get:[`GET /emojis`]},enterpriseTeamMemberships:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove`],get:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],list:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships`],remove:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`]},enterpriseTeamOrganizations:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/remove`],delete:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignment:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignments:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations`]},enterpriseTeams:{create:[`POST /enterprises/{enterprise}/teams`],delete:[`DELETE /enterprises/{enterprise}/teams/{team_slug}`],get:[`GET /enterprises/{enterprise}/teams/{team_slug}`],list:[`GET /enterprises/{enterprise}/teams`],update:[`PATCH /enterprises/{enterprise}/teams/{team_slug}`]},gists:{checkIsStarred:[`GET /gists/{gist_id}/star`],create:[`POST /gists`],createComment:[`POST /gists/{gist_id}/comments`],delete:[`DELETE /gists/{gist_id}`],deleteComment:[`DELETE /gists/{gist_id}/comments/{comment_id}`],fork:[`POST /gists/{gist_id}/forks`],get:[`GET /gists/{gist_id}`],getComment:[`GET /gists/{gist_id}/comments/{comment_id}`],getRevision:[`GET /gists/{gist_id}/{sha}`],list:[`GET /gists`],listComments:[`GET /gists/{gist_id}/comments`],listCommits:[`GET /gists/{gist_id}/commits`],listForUser:[`GET /users/{username}/gists`],listForks:[`GET /gists/{gist_id}/forks`],listPublic:[`GET /gists/public`],listStarred:[`GET /gists/starred`],star:[`PUT /gists/{gist_id}/star`],unstar:[`DELETE /gists/{gist_id}/star`],update:[`PATCH /gists/{gist_id}`],updateComment:[`PATCH /gists/{gist_id}/comments/{comment_id}`]},git:{createBlob:[`POST /repos/{owner}/{repo}/git/blobs`],createCommit:[`POST /repos/{owner}/{repo}/git/commits`],createRef:[`POST /repos/{owner}/{repo}/git/refs`],createTag:[`POST /repos/{owner}/{repo}/git/tags`],createTree:[`POST /repos/{owner}/{repo}/git/trees`],deleteRef:[`DELETE /repos/{owner}/{repo}/git/refs/{ref}`],getBlob:[`GET /repos/{owner}/{repo}/git/blobs/{file_sha}`],getCommit:[`GET /repos/{owner}/{repo}/git/commits/{commit_sha}`],getRef:[`GET /repos/{owner}/{repo}/git/ref/{ref}`],getTag:[`GET /repos/{owner}/{repo}/git/tags/{tag_sha}`],getTree:[`GET /repos/{owner}/{repo}/git/trees/{tree_sha}`],listMatchingRefs:[`GET /repos/{owner}/{repo}/git/matching-refs/{ref}`],updateRef:[`PATCH /repos/{owner}/{repo}/git/refs/{ref}`]},gitignore:{getAllTemplates:[`GET /gitignore/templates`],getTemplate:[`GET /gitignore/templates/{name}`]},hostedCompute:{createNetworkConfigurationForOrg:[`POST /orgs/{org}/settings/network-configurations`],deleteNetworkConfigurationFromOrg:[`DELETE /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkConfigurationForOrg:[`GET /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkSettingsForOrg:[`GET /orgs/{org}/settings/network-settings/{network_settings_id}`],listNetworkConfigurationsForOrg:[`GET /orgs/{org}/settings/network-configurations`],updateNetworkConfigurationForOrg:[`PATCH /orgs/{org}/settings/network-configurations/{network_configuration_id}`]},interactions:{getRestrictionsForAuthenticatedUser:[`GET /user/interaction-limits`],getRestrictionsForOrg:[`GET /orgs/{org}/interaction-limits`],getRestrictionsForRepo:[`GET /repos/{owner}/{repo}/interaction-limits`],getRestrictionsForYourPublicRepos:[`GET /user/interaction-limits`,{},{renamed:[`interactions`,`getRestrictionsForAuthenticatedUser`]}],removeRestrictionsForAuthenticatedUser:[`DELETE /user/interaction-limits`],removeRestrictionsForOrg:[`DELETE /orgs/{org}/interaction-limits`],removeRestrictionsForRepo:[`DELETE /repos/{owner}/{repo}/interaction-limits`],removeRestrictionsForYourPublicRepos:[`DELETE /user/interaction-limits`,{},{renamed:[`interactions`,`removeRestrictionsForAuthenticatedUser`]}],setRestrictionsForAuthenticatedUser:[`PUT /user/interaction-limits`],setRestrictionsForOrg:[`PUT /orgs/{org}/interaction-limits`],setRestrictionsForRepo:[`PUT /repos/{owner}/{repo}/interaction-limits`],setRestrictionsForYourPublicRepos:[`PUT /user/interaction-limits`,{},{renamed:[`interactions`,`setRestrictionsForAuthenticatedUser`]}]},issues:{addAssignees:[`POST /repos/{owner}/{repo}/issues/{issue_number}/assignees`],addBlockedByDependency:[`POST /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],addLabels:[`POST /repos/{owner}/{repo}/issues/{issue_number}/labels`],addSubIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],checkUserCanBeAssigned:[`GET /repos/{owner}/{repo}/assignees/{assignee}`],checkUserCanBeAssignedToIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}`],create:[`POST /repos/{owner}/{repo}/issues`],createComment:[`POST /repos/{owner}/{repo}/issues/{issue_number}/comments`],createLabel:[`POST /repos/{owner}/{repo}/labels`],createMilestone:[`POST /repos/{owner}/{repo}/milestones`],deleteComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}`],deleteLabel:[`DELETE /repos/{owner}/{repo}/labels/{name}`],deleteMilestone:[`DELETE /repos/{owner}/{repo}/milestones/{milestone_number}`],get:[`GET /repos/{owner}/{repo}/issues/{issue_number}`],getComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}`],getEvent:[`GET /repos/{owner}/{repo}/issues/events/{event_id}`],getLabel:[`GET /repos/{owner}/{repo}/labels/{name}`],getMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}`],getParent:[`GET /repos/{owner}/{repo}/issues/{issue_number}/parent`],list:[`GET /issues`],listAssignees:[`GET /repos/{owner}/{repo}/assignees`],listComments:[`GET /repos/{owner}/{repo}/issues/{issue_number}/comments`],listCommentsForRepo:[`GET /repos/{owner}/{repo}/issues/comments`],listDependenciesBlockedBy:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],listDependenciesBlocking:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocking`],listEvents:[`GET /repos/{owner}/{repo}/issues/{issue_number}/events`],listEventsForRepo:[`GET /repos/{owner}/{repo}/issues/events`],listEventsForTimeline:[`GET /repos/{owner}/{repo}/issues/{issue_number}/timeline`],listForAuthenticatedUser:[`GET /user/issues`],listForOrg:[`GET /orgs/{org}/issues`],listForRepo:[`GET /repos/{owner}/{repo}/issues`],listLabelsForMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels`],listLabelsForRepo:[`GET /repos/{owner}/{repo}/labels`],listLabelsOnIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/labels`],listMilestones:[`GET /repos/{owner}/{repo}/milestones`],listSubIssues:[`GET /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],lock:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/lock`],removeAllLabels:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels`],removeAssignees:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees`],removeDependencyBlockedBy:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by/{issue_id}`],removeLabel:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}`],removeSubIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/sub_issue`],reprioritizeSubIssue:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}/sub_issues/priority`],setLabels:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/labels`],unlock:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock`],update:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}`],updateComment:[`PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}`],updateLabel:[`PATCH /repos/{owner}/{repo}/labels/{name}`],updateMilestone:[`PATCH /repos/{owner}/{repo}/milestones/{milestone_number}`]},licenses:{get:[`GET /licenses/{license}`],getAllCommonlyUsed:[`GET /licenses`],getForRepo:[`GET /repos/{owner}/{repo}/license`]},markdown:{render:[`POST /markdown`],renderRaw:[`POST /markdown/raw`,{headers:{"content-type":`text/plain; charset=utf-8`}}]},meta:{get:[`GET /meta`],getAllVersions:[`GET /versions`],getOctocat:[`GET /octocat`],getZen:[`GET /zen`],root:[`GET /`]},migrations:{deleteArchiveForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/archive`],deleteArchiveForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/archive`],downloadArchiveForOrg:[`GET /orgs/{org}/migrations/{migration_id}/archive`],getArchiveForAuthenticatedUser:[`GET /user/migrations/{migration_id}/archive`],getStatusForAuthenticatedUser:[`GET /user/migrations/{migration_id}`],getStatusForOrg:[`GET /orgs/{org}/migrations/{migration_id}`],listForAuthenticatedUser:[`GET /user/migrations`],listForOrg:[`GET /orgs/{org}/migrations`],listReposForAuthenticatedUser:[`GET /user/migrations/{migration_id}/repositories`],listReposForOrg:[`GET /orgs/{org}/migrations/{migration_id}/repositories`],listReposForUser:[`GET /user/migrations/{migration_id}/repositories`,{},{renamed:[`migrations`,`listReposForAuthenticatedUser`]}],startForAuthenticatedUser:[`POST /user/migrations`],startForOrg:[`POST /orgs/{org}/migrations`],unlockRepoForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/repos/{repo_name}/lock`],unlockRepoForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/repos/{repo_name}/lock`]},oidc:{getOidcCustomSubTemplateForOrg:[`GET /orgs/{org}/actions/oidc/customization/sub`],updateOidcCustomSubTemplateForOrg:[`PUT /orgs/{org}/actions/oidc/customization/sub`]},orgs:{addSecurityManagerTeam:[`PUT /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.addSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#add-a-security-manager-team`}],assignTeamToOrgRole:[`PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],assignUserToOrgRole:[`PUT /orgs/{org}/organization-roles/users/{username}/{role_id}`],blockUser:[`PUT /orgs/{org}/blocks/{username}`],cancelInvitation:[`DELETE /orgs/{org}/invitations/{invitation_id}`],checkBlockedUser:[`GET /orgs/{org}/blocks/{username}`],checkMembershipForUser:[`GET /orgs/{org}/members/{username}`],checkPublicMembershipForUser:[`GET /orgs/{org}/public_members/{username}`],convertMemberToOutsideCollaborator:[`PUT /orgs/{org}/outside_collaborators/{username}`],createArtifactStorageRecord:[`POST /orgs/{org}/artifacts/metadata/storage-record`],createInvitation:[`POST /orgs/{org}/invitations`],createIssueType:[`POST /orgs/{org}/issue-types`],createWebhook:[`POST /orgs/{org}/hooks`],customPropertiesForOrgsCreateOrUpdateOrganizationValues:[`PATCH /organizations/{org}/org-properties/values`],customPropertiesForOrgsGetOrganizationValues:[`GET /organizations/{org}/org-properties/values`],customPropertiesForReposCreateOrUpdateOrganizationDefinition:[`PUT /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposCreateOrUpdateOrganizationDefinitions:[`PATCH /orgs/{org}/properties/schema`],customPropertiesForReposCreateOrUpdateOrganizationValues:[`PATCH /orgs/{org}/properties/values`],customPropertiesForReposDeleteOrganizationDefinition:[`DELETE /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinition:[`GET /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinitions:[`GET /orgs/{org}/properties/schema`],customPropertiesForReposGetOrganizationValues:[`GET /orgs/{org}/properties/values`],delete:[`DELETE /orgs/{org}`],deleteAttestationsBulk:[`POST /orgs/{org}/attestations/delete-request`],deleteAttestationsById:[`DELETE /orgs/{org}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /orgs/{org}/attestations/digest/{subject_digest}`],deleteIssueType:[`DELETE /orgs/{org}/issue-types/{issue_type_id}`],deleteWebhook:[`DELETE /orgs/{org}/hooks/{hook_id}`],disableSelectedRepositoryImmutableReleasesOrganization:[`DELETE /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],enableSelectedRepositoryImmutableReleasesOrganization:[`PUT /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],get:[`GET /orgs/{org}`],getImmutableReleasesSettings:[`GET /orgs/{org}/settings/immutable-releases`],getImmutableReleasesSettingsRepositories:[`GET /orgs/{org}/settings/immutable-releases/repositories`],getMembershipForAuthenticatedUser:[`GET /user/memberships/orgs/{org}`],getMembershipForUser:[`GET /orgs/{org}/memberships/{username}`],getOrgRole:[`GET /orgs/{org}/organization-roles/{role_id}`],getOrgRulesetHistory:[`GET /orgs/{org}/rulesets/{ruleset_id}/history`],getOrgRulesetVersion:[`GET /orgs/{org}/rulesets/{ruleset_id}/history/{version_id}`],getWebhook:[`GET /orgs/{org}/hooks/{hook_id}`],getWebhookConfigForOrg:[`GET /orgs/{org}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}`],list:[`GET /organizations`],listAppInstallations:[`GET /orgs/{org}/installations`],listArtifactStorageRecords:[`GET /orgs/{org}/artifacts/{subject_digest}/metadata/storage-records`],listAttestationRepositories:[`GET /orgs/{org}/attestations/repositories`],listAttestations:[`GET /orgs/{org}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /orgs/{org}/attestations/bulk-list{?per_page,before,after}`],listBlockedUsers:[`GET /orgs/{org}/blocks`],listFailedInvitations:[`GET /orgs/{org}/failed_invitations`],listForAuthenticatedUser:[`GET /user/orgs`],listForUser:[`GET /users/{username}/orgs`],listInvitationTeams:[`GET /orgs/{org}/invitations/{invitation_id}/teams`],listIssueTypes:[`GET /orgs/{org}/issue-types`],listMembers:[`GET /orgs/{org}/members`],listMembershipsForAuthenticatedUser:[`GET /user/memberships/orgs`],listOrgRoleTeams:[`GET /orgs/{org}/organization-roles/{role_id}/teams`],listOrgRoleUsers:[`GET /orgs/{org}/organization-roles/{role_id}/users`],listOrgRoles:[`GET /orgs/{org}/organization-roles`],listOrganizationFineGrainedPermissions:[`GET /orgs/{org}/organization-fine-grained-permissions`],listOutsideCollaborators:[`GET /orgs/{org}/outside_collaborators`],listPatGrantRepositories:[`GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories`],listPatGrantRequestRepositories:[`GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories`],listPatGrantRequests:[`GET /orgs/{org}/personal-access-token-requests`],listPatGrants:[`GET /orgs/{org}/personal-access-tokens`],listPendingInvitations:[`GET /orgs/{org}/invitations`],listPublicMembers:[`GET /orgs/{org}/public_members`],listSecurityManagerTeams:[`GET /orgs/{org}/security-managers`,{},{deprecated:`octokit.rest.orgs.listSecurityManagerTeams() is deprecated, see https://docs.github.com/rest/orgs/security-managers#list-security-manager-teams`}],listWebhookDeliveries:[`GET /orgs/{org}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /orgs/{org}/hooks`],pingWebhook:[`POST /orgs/{org}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeMember:[`DELETE /orgs/{org}/members/{username}`],removeMembershipForUser:[`DELETE /orgs/{org}/memberships/{username}`],removeOutsideCollaborator:[`DELETE /orgs/{org}/outside_collaborators/{username}`],removePublicMembershipForAuthenticatedUser:[`DELETE /orgs/{org}/public_members/{username}`],removeSecurityManagerTeam:[`DELETE /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.removeSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#remove-a-security-manager-team`}],reviewPatGrantRequest:[`POST /orgs/{org}/personal-access-token-requests/{pat_request_id}`],reviewPatGrantRequestsInBulk:[`POST /orgs/{org}/personal-access-token-requests`],revokeAllOrgRolesTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}`],revokeAllOrgRolesUser:[`DELETE /orgs/{org}/organization-roles/users/{username}`],revokeOrgRoleTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],revokeOrgRoleUser:[`DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}`],setImmutableReleasesSettings:[`PUT /orgs/{org}/settings/immutable-releases`],setImmutableReleasesSettingsRepositories:[`PUT /orgs/{org}/settings/immutable-releases/repositories`],setMembershipForUser:[`PUT /orgs/{org}/memberships/{username}`],setPublicMembershipForAuthenticatedUser:[`PUT /orgs/{org}/public_members/{username}`],unblockUser:[`DELETE /orgs/{org}/blocks/{username}`],update:[`PATCH /orgs/{org}`],updateIssueType:[`PUT /orgs/{org}/issue-types/{issue_type_id}`],updateMembershipForAuthenticatedUser:[`PATCH /user/memberships/orgs/{org}`],updatePatAccess:[`POST /orgs/{org}/personal-access-tokens/{pat_id}`],updatePatAccesses:[`POST /orgs/{org}/personal-access-tokens`],updateWebhook:[`PATCH /orgs/{org}/hooks/{hook_id}`],updateWebhookConfigForOrg:[`PATCH /orgs/{org}/hooks/{hook_id}/config`]},packages:{deletePackageForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}`],deletePackageForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}`],deletePackageForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}`],deletePackageVersionForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getAllPackageVersionsForAPackageOwnedByAnOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByOrg`]}],getAllPackageVersionsForAPackageOwnedByTheAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByAuthenticatedUser`]}],getAllPackageVersionsForPackageOwnedByAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions`],getPackageForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}`],getPackageForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}`],getPackageForUser:[`GET /users/{username}/packages/{package_type}/{package_name}`],getPackageVersionForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],listDockerMigrationConflictingPackagesForAuthenticatedUser:[`GET /user/docker/conflicts`],listDockerMigrationConflictingPackagesForOrganization:[`GET /orgs/{org}/docker/conflicts`],listDockerMigrationConflictingPackagesForUser:[`GET /users/{username}/docker/conflicts`],listPackagesForAuthenticatedUser:[`GET /user/packages`],listPackagesForOrganization:[`GET /orgs/{org}/packages`],listPackagesForUser:[`GET /users/{username}/packages`],restorePackageForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageVersionForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`]},privateRegistries:{createOrgPrivateRegistry:[`POST /orgs/{org}/private-registries`],deleteOrgPrivateRegistry:[`DELETE /orgs/{org}/private-registries/{secret_name}`],getOrgPrivateRegistry:[`GET /orgs/{org}/private-registries/{secret_name}`],getOrgPublicKey:[`GET /orgs/{org}/private-registries/public-key`],listOrgPrivateRegistries:[`GET /orgs/{org}/private-registries`],updateOrgPrivateRegistry:[`PATCH /orgs/{org}/private-registries/{secret_name}`]},projects:{addItemForOrg:[`POST /orgs/{org}/projectsV2/{project_number}/items`],addItemForUser:[`POST /users/{username}/projectsV2/{project_number}/items`],deleteItemForOrg:[`DELETE /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],deleteItemForUser:[`DELETE /users/{username}/projectsV2/{project_number}/items/{item_id}`],getFieldForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields/{field_id}`],getFieldForUser:[`GET /users/{username}/projectsV2/{project_number}/fields/{field_id}`],getForOrg:[`GET /orgs/{org}/projectsV2/{project_number}`],getForUser:[`GET /users/{username}/projectsV2/{project_number}`],getOrgItem:[`GET /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],getUserItem:[`GET /users/{username}/projectsV2/{project_number}/items/{item_id}`],listFieldsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields`],listFieldsForUser:[`GET /users/{username}/projectsV2/{project_number}/fields`],listForOrg:[`GET /orgs/{org}/projectsV2`],listForUser:[`GET /users/{username}/projectsV2`],listItemsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/items`],listItemsForUser:[`GET /users/{username}/projectsV2/{project_number}/items`],updateItemForOrg:[`PATCH /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],updateItemForUser:[`PATCH /users/{username}/projectsV2/{project_number}/items/{item_id}`]},pulls:{checkIfMerged:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/merge`],create:[`POST /repos/{owner}/{repo}/pulls`],createReplyForReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies`],createReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],createReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments`],deletePendingReview:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],deleteReviewComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}`],dismissReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals`],get:[`GET /repos/{owner}/{repo}/pulls/{pull_number}`],getReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],getReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}`],list:[`GET /repos/{owner}/{repo}/pulls`],listCommentsForReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments`],listCommits:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/commits`],listFiles:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/files`],listRequestedReviewers:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],listReviewComments:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/comments`],listReviewCommentsForRepo:[`GET /repos/{owner}/{repo}/pulls/comments`],listReviews:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],merge:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge`],removeRequestedReviewers:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],requestReviewers:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],submitReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events`],update:[`PATCH /repos/{owner}/{repo}/pulls/{pull_number}`],updateBranch:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch`],updateReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],updateReviewComment:[`PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}`]},rateLimit:{get:[`GET /rate_limit`]},reactions:{createForCommitComment:[`POST /repos/{owner}/{repo}/comments/{comment_id}/reactions`],createForIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/reactions`],createForIssueComment:[`POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],createForPullRequestReviewComment:[`POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],createForRelease:[`POST /repos/{owner}/{repo}/releases/{release_id}/reactions`],createForTeamDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],createForTeamDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`],deleteForCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}`],deleteForIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}`],deleteForIssueComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}`],deleteForPullRequestComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}`],deleteForRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}/reactions/{reaction_id}`],deleteForTeamDiscussion:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}`],deleteForTeamDiscussionComment:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}`],listForCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}/reactions`],listForIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/reactions`],listForIssueComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],listForPullRequestReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],listForRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}/reactions`],listForTeamDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],listForTeamDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`]},repos:{acceptInvitation:[`PATCH /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`acceptInvitationForAuthenticatedUser`]}],acceptInvitationForAuthenticatedUser:[`PATCH /user/repository_invitations/{invitation_id}`],addAppAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],addCollaborator:[`PUT /repos/{owner}/{repo}/collaborators/{username}`],addStatusCheckContexts:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],addTeamAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],addUserAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],cancelPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel`],checkAutomatedSecurityFixes:[`GET /repos/{owner}/{repo}/automated-security-fixes`],checkCollaborator:[`GET /repos/{owner}/{repo}/collaborators/{username}`],checkImmutableReleases:[`GET /repos/{owner}/{repo}/immutable-releases`],checkPrivateVulnerabilityReporting:[`GET /repos/{owner}/{repo}/private-vulnerability-reporting`],checkVulnerabilityAlerts:[`GET /repos/{owner}/{repo}/vulnerability-alerts`],codeownersErrors:[`GET /repos/{owner}/{repo}/codeowners/errors`],compareCommits:[`GET /repos/{owner}/{repo}/compare/{base}...{head}`],compareCommitsWithBasehead:[`GET /repos/{owner}/{repo}/compare/{basehead}`],createAttestation:[`POST /repos/{owner}/{repo}/attestations`],createAutolink:[`POST /repos/{owner}/{repo}/autolinks`],createCommitComment:[`POST /repos/{owner}/{repo}/commits/{commit_sha}/comments`],createCommitSignatureProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],createCommitStatus:[`POST /repos/{owner}/{repo}/statuses/{sha}`],createDeployKey:[`POST /repos/{owner}/{repo}/keys`],createDeployment:[`POST /repos/{owner}/{repo}/deployments`],createDeploymentBranchPolicy:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],createDeploymentProtectionRule:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],createDeploymentStatus:[`POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],createDispatchEvent:[`POST /repos/{owner}/{repo}/dispatches`],createForAuthenticatedUser:[`POST /user/repos`],createFork:[`POST /repos/{owner}/{repo}/forks`],createInOrg:[`POST /orgs/{org}/repos`],createOrUpdateEnvironment:[`PUT /repos/{owner}/{repo}/environments/{environment_name}`],createOrUpdateFileContents:[`PUT /repos/{owner}/{repo}/contents/{path}`],createOrgRuleset:[`POST /orgs/{org}/rulesets`],createPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments`],createPagesSite:[`POST /repos/{owner}/{repo}/pages`],createRelease:[`POST /repos/{owner}/{repo}/releases`],createRepoRuleset:[`POST /repos/{owner}/{repo}/rulesets`],createUsingTemplate:[`POST /repos/{template_owner}/{template_repo}/generate`],createWebhook:[`POST /repos/{owner}/{repo}/hooks`],customPropertiesForReposCreateOrUpdateRepositoryValues:[`PATCH /repos/{owner}/{repo}/properties/values`],customPropertiesForReposGetRepositoryValues:[`GET /repos/{owner}/{repo}/properties/values`],declineInvitation:[`DELETE /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`declineInvitationForAuthenticatedUser`]}],declineInvitationForAuthenticatedUser:[`DELETE /user/repository_invitations/{invitation_id}`],delete:[`DELETE /repos/{owner}/{repo}`],deleteAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],deleteAdminBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],deleteAnEnvironment:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}`],deleteAutolink:[`DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}`],deleteBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection`],deleteCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}`],deleteCommitSignatureProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],deleteDeployKey:[`DELETE /repos/{owner}/{repo}/keys/{key_id}`],deleteDeployment:[`DELETE /repos/{owner}/{repo}/deployments/{deployment_id}`],deleteDeploymentBranchPolicy:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],deleteFile:[`DELETE /repos/{owner}/{repo}/contents/{path}`],deleteInvitation:[`DELETE /repos/{owner}/{repo}/invitations/{invitation_id}`],deleteOrgRuleset:[`DELETE /orgs/{org}/rulesets/{ruleset_id}`],deletePagesSite:[`DELETE /repos/{owner}/{repo}/pages`],deletePullRequestReviewProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],deleteRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}`],deleteReleaseAsset:[`DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}`],deleteRepoRuleset:[`DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}`],deleteWebhook:[`DELETE /repos/{owner}/{repo}/hooks/{hook_id}`],disableAutomatedSecurityFixes:[`DELETE /repos/{owner}/{repo}/automated-security-fixes`],disableDeploymentProtectionRule:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],disableImmutableReleases:[`DELETE /repos/{owner}/{repo}/immutable-releases`],disablePrivateVulnerabilityReporting:[`DELETE /repos/{owner}/{repo}/private-vulnerability-reporting`],disableVulnerabilityAlerts:[`DELETE /repos/{owner}/{repo}/vulnerability-alerts`],downloadArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`,{},{renamed:[`repos`,`downloadZipballArchive`]}],downloadTarballArchive:[`GET /repos/{owner}/{repo}/tarball/{ref}`],downloadZipballArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`],enableAutomatedSecurityFixes:[`PUT /repos/{owner}/{repo}/automated-security-fixes`],enableImmutableReleases:[`PUT /repos/{owner}/{repo}/immutable-releases`],enablePrivateVulnerabilityReporting:[`PUT /repos/{owner}/{repo}/private-vulnerability-reporting`],enableVulnerabilityAlerts:[`PUT /repos/{owner}/{repo}/vulnerability-alerts`],generateReleaseNotes:[`POST /repos/{owner}/{repo}/releases/generate-notes`],get:[`GET /repos/{owner}/{repo}`],getAccessRestrictions:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],getAdminBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],getAllDeploymentProtectionRules:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],getAllEnvironments:[`GET /repos/{owner}/{repo}/environments`],getAllStatusCheckContexts:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`],getAllTopics:[`GET /repos/{owner}/{repo}/topics`],getAppsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`],getAutolink:[`GET /repos/{owner}/{repo}/autolinks/{autolink_id}`],getBranch:[`GET /repos/{owner}/{repo}/branches/{branch}`],getBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection`],getBranchRules:[`GET /repos/{owner}/{repo}/rules/branches/{branch}`],getClones:[`GET /repos/{owner}/{repo}/traffic/clones`],getCodeFrequencyStats:[`GET /repos/{owner}/{repo}/stats/code_frequency`],getCollaboratorPermissionLevel:[`GET /repos/{owner}/{repo}/collaborators/{username}/permission`],getCombinedStatusForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/status`],getCommit:[`GET /repos/{owner}/{repo}/commits/{ref}`],getCommitActivityStats:[`GET /repos/{owner}/{repo}/stats/commit_activity`],getCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}`],getCommitSignatureProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],getCommunityProfileMetrics:[`GET /repos/{owner}/{repo}/community/profile`],getContent:[`GET /repos/{owner}/{repo}/contents/{path}`],getContributorsStats:[`GET /repos/{owner}/{repo}/stats/contributors`],getCustomDeploymentProtectionRule:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],getDeployKey:[`GET /repos/{owner}/{repo}/keys/{key_id}`],getDeployment:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}`],getDeploymentBranchPolicy:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],getDeploymentStatus:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}`],getEnvironment:[`GET /repos/{owner}/{repo}/environments/{environment_name}`],getLatestPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/latest`],getLatestRelease:[`GET /repos/{owner}/{repo}/releases/latest`],getOrgRuleSuite:[`GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}`],getOrgRuleSuites:[`GET /orgs/{org}/rulesets/rule-suites`],getOrgRuleset:[`GET /orgs/{org}/rulesets/{ruleset_id}`],getOrgRulesets:[`GET /orgs/{org}/rulesets`],getPages:[`GET /repos/{owner}/{repo}/pages`],getPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/{build_id}`],getPagesDeployment:[`GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}`],getPagesHealthCheck:[`GET /repos/{owner}/{repo}/pages/health`],getParticipationStats:[`GET /repos/{owner}/{repo}/stats/participation`],getPullRequestReviewProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],getPunchCardStats:[`GET /repos/{owner}/{repo}/stats/punch_card`],getReadme:[`GET /repos/{owner}/{repo}/readme`],getReadmeInDirectory:[`GET /repos/{owner}/{repo}/readme/{dir}`],getRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}`],getReleaseAsset:[`GET /repos/{owner}/{repo}/releases/assets/{asset_id}`],getReleaseByTag:[`GET /repos/{owner}/{repo}/releases/tags/{tag}`],getRepoRuleSuite:[`GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}`],getRepoRuleSuites:[`GET /repos/{owner}/{repo}/rulesets/rule-suites`],getRepoRuleset:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}`],getRepoRulesetHistory:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history`],getRepoRulesetVersion:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history/{version_id}`],getRepoRulesets:[`GET /repos/{owner}/{repo}/rulesets`],getStatusChecksProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],getTeamsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`],getTopPaths:[`GET /repos/{owner}/{repo}/traffic/popular/paths`],getTopReferrers:[`GET /repos/{owner}/{repo}/traffic/popular/referrers`],getUsersWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`],getViews:[`GET /repos/{owner}/{repo}/traffic/views`],getWebhook:[`GET /repos/{owner}/{repo}/hooks/{hook_id}`],getWebhookConfigForRepo:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}`],listActivities:[`GET /repos/{owner}/{repo}/activity`],listAttestations:[`GET /repos/{owner}/{repo}/attestations/{subject_digest}`],listAutolinks:[`GET /repos/{owner}/{repo}/autolinks`],listBranches:[`GET /repos/{owner}/{repo}/branches`],listBranchesForHeadCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head`],listCollaborators:[`GET /repos/{owner}/{repo}/collaborators`],listCommentsForCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/comments`],listCommitCommentsForRepo:[`GET /repos/{owner}/{repo}/comments`],listCommitStatusesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/statuses`],listCommits:[`GET /repos/{owner}/{repo}/commits`],listContributors:[`GET /repos/{owner}/{repo}/contributors`],listCustomDeploymentRuleIntegrations:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps`],listDeployKeys:[`GET /repos/{owner}/{repo}/keys`],listDeploymentBranchPolicies:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],listDeploymentStatuses:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],listDeployments:[`GET /repos/{owner}/{repo}/deployments`],listForAuthenticatedUser:[`GET /user/repos`],listForOrg:[`GET /orgs/{org}/repos`],listForUser:[`GET /users/{username}/repos`],listForks:[`GET /repos/{owner}/{repo}/forks`],listInvitations:[`GET /repos/{owner}/{repo}/invitations`],listInvitationsForAuthenticatedUser:[`GET /user/repository_invitations`],listLanguages:[`GET /repos/{owner}/{repo}/languages`],listPagesBuilds:[`GET /repos/{owner}/{repo}/pages/builds`],listPublic:[`GET /repositories`],listPullRequestsAssociatedWithCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls`],listReleaseAssets:[`GET /repos/{owner}/{repo}/releases/{release_id}/assets`],listReleases:[`GET /repos/{owner}/{repo}/releases`],listTags:[`GET /repos/{owner}/{repo}/tags`],listTeams:[`GET /repos/{owner}/{repo}/teams`],listWebhookDeliveries:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /repos/{owner}/{repo}/hooks`],merge:[`POST /repos/{owner}/{repo}/merges`],mergeUpstream:[`POST /repos/{owner}/{repo}/merge-upstream`],pingWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeAppAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],removeCollaborator:[`DELETE /repos/{owner}/{repo}/collaborators/{username}`],removeStatusCheckContexts:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],removeStatusCheckProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],removeTeamAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],removeUserAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],renameBranch:[`POST /repos/{owner}/{repo}/branches/{branch}/rename`],replaceAllTopics:[`PUT /repos/{owner}/{repo}/topics`],requestPagesBuild:[`POST /repos/{owner}/{repo}/pages/builds`],setAdminBranchProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],setAppAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],setStatusCheckContexts:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],setTeamAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],setUserAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],testPushWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/tests`],transfer:[`POST /repos/{owner}/{repo}/transfer`],update:[`PATCH /repos/{owner}/{repo}`],updateBranchProtection:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection`],updateCommitComment:[`PATCH /repos/{owner}/{repo}/comments/{comment_id}`],updateDeploymentBranchPolicy:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],updateInformationAboutPagesSite:[`PUT /repos/{owner}/{repo}/pages`],updateInvitation:[`PATCH /repos/{owner}/{repo}/invitations/{invitation_id}`],updateOrgRuleset:[`PUT /orgs/{org}/rulesets/{ruleset_id}`],updatePullRequestReviewProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],updateRelease:[`PATCH /repos/{owner}/{repo}/releases/{release_id}`],updateReleaseAsset:[`PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}`],updateRepoRuleset:[`PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}`],updateStatusCheckPotection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`,{},{renamed:[`repos`,`updateStatusCheckProtection`]}],updateStatusCheckProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],updateWebhook:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}`],updateWebhookConfigForRepo:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config`],uploadReleaseAsset:[`POST /repos/{owner}/{repo}/releases/{release_id}/assets{?name,label}`,{baseUrl:`https://uploads.github.com`}]},search:{code:[`GET /search/code`],commits:[`GET /search/commits`],issuesAndPullRequests:[`GET /search/issues`],labels:[`GET /search/labels`],repos:[`GET /search/repositories`],topics:[`GET /search/topics`],users:[`GET /search/users`]},secretScanning:{createPushProtectionBypass:[`POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses`],getAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],getScanHistory:[`GET /repos/{owner}/{repo}/secret-scanning/scan-history`],listAlertsForOrg:[`GET /orgs/{org}/secret-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/secret-scanning/alerts`],listLocationsForAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations`],listOrgPatternConfigs:[`GET /orgs/{org}/secret-scanning/pattern-configurations`],updateAlert:[`PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],updateOrgPatternConfigs:[`PATCH /orgs/{org}/secret-scanning/pattern-configurations`]},securityAdvisories:{createFork:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks`],createPrivateVulnerabilityReport:[`POST /repos/{owner}/{repo}/security-advisories/reports`],createRepositoryAdvisory:[`POST /repos/{owner}/{repo}/security-advisories`],createRepositoryAdvisoryCveRequest:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve`],getGlobalAdvisory:[`GET /advisories/{ghsa_id}`],getRepositoryAdvisory:[`GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}`],listGlobalAdvisories:[`GET /advisories`],listOrgRepositoryAdvisories:[`GET /orgs/{org}/security-advisories`],listRepositoryAdvisories:[`GET /repos/{owner}/{repo}/security-advisories`],updateRepositoryAdvisory:[`PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}`]},teams:{addOrUpdateMembershipForUserInOrg:[`PUT /orgs/{org}/teams/{team_slug}/memberships/{username}`],addOrUpdateRepoPermissionsInOrg:[`PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],checkPermissionsForRepoInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],create:[`POST /orgs/{org}/teams`],createDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],createDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions`],deleteDiscussionCommentInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],deleteDiscussionInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],deleteInOrg:[`DELETE /orgs/{org}/teams/{team_slug}`],getByName:[`GET /orgs/{org}/teams/{team_slug}`],getDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],getDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],getMembershipForUserInOrg:[`GET /orgs/{org}/teams/{team_slug}/memberships/{username}`],list:[`GET /orgs/{org}/teams`],listChildInOrg:[`GET /orgs/{org}/teams/{team_slug}/teams`],listDiscussionCommentsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],listDiscussionsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions`],listForAuthenticatedUser:[`GET /user/teams`],listMembersInOrg:[`GET /orgs/{org}/teams/{team_slug}/members`],listPendingInvitationsInOrg:[`GET /orgs/{org}/teams/{team_slug}/invitations`],listReposInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos`],removeMembershipForUserInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}`],removeRepoInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],updateDiscussionCommentInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],updateDiscussionInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],updateInOrg:[`PATCH /orgs/{org}/teams/{team_slug}`]},users:{addEmailForAuthenticated:[`POST /user/emails`,{},{renamed:[`users`,`addEmailForAuthenticatedUser`]}],addEmailForAuthenticatedUser:[`POST /user/emails`],addSocialAccountForAuthenticatedUser:[`POST /user/social_accounts`],block:[`PUT /user/blocks/{username}`],checkBlocked:[`GET /user/blocks/{username}`],checkFollowingForUser:[`GET /users/{username}/following/{target_user}`],checkPersonIsFollowedByAuthenticated:[`GET /user/following/{username}`],createGpgKeyForAuthenticated:[`POST /user/gpg_keys`,{},{renamed:[`users`,`createGpgKeyForAuthenticatedUser`]}],createGpgKeyForAuthenticatedUser:[`POST /user/gpg_keys`],createPublicSshKeyForAuthenticated:[`POST /user/keys`,{},{renamed:[`users`,`createPublicSshKeyForAuthenticatedUser`]}],createPublicSshKeyForAuthenticatedUser:[`POST /user/keys`],createSshSigningKeyForAuthenticatedUser:[`POST /user/ssh_signing_keys`],deleteAttestationsBulk:[`POST /users/{username}/attestations/delete-request`],deleteAttestationsById:[`DELETE /users/{username}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /users/{username}/attestations/digest/{subject_digest}`],deleteEmailForAuthenticated:[`DELETE /user/emails`,{},{renamed:[`users`,`deleteEmailForAuthenticatedUser`]}],deleteEmailForAuthenticatedUser:[`DELETE /user/emails`],deleteGpgKeyForAuthenticated:[`DELETE /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`deleteGpgKeyForAuthenticatedUser`]}],deleteGpgKeyForAuthenticatedUser:[`DELETE /user/gpg_keys/{gpg_key_id}`],deletePublicSshKeyForAuthenticated:[`DELETE /user/keys/{key_id}`,{},{renamed:[`users`,`deletePublicSshKeyForAuthenticatedUser`]}],deletePublicSshKeyForAuthenticatedUser:[`DELETE /user/keys/{key_id}`],deleteSocialAccountForAuthenticatedUser:[`DELETE /user/social_accounts`],deleteSshSigningKeyForAuthenticatedUser:[`DELETE /user/ssh_signing_keys/{ssh_signing_key_id}`],follow:[`PUT /user/following/{username}`],getAuthenticated:[`GET /user`],getById:[`GET /user/{account_id}`],getByUsername:[`GET /users/{username}`],getContextForUser:[`GET /users/{username}/hovercard`],getGpgKeyForAuthenticated:[`GET /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`getGpgKeyForAuthenticatedUser`]}],getGpgKeyForAuthenticatedUser:[`GET /user/gpg_keys/{gpg_key_id}`],getPublicSshKeyForAuthenticated:[`GET /user/keys/{key_id}`,{},{renamed:[`users`,`getPublicSshKeyForAuthenticatedUser`]}],getPublicSshKeyForAuthenticatedUser:[`GET /user/keys/{key_id}`],getSshSigningKeyForAuthenticatedUser:[`GET /user/ssh_signing_keys/{ssh_signing_key_id}`],list:[`GET /users`],listAttestations:[`GET /users/{username}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /users/{username}/attestations/bulk-list{?per_page,before,after}`],listBlockedByAuthenticated:[`GET /user/blocks`,{},{renamed:[`users`,`listBlockedByAuthenticatedUser`]}],listBlockedByAuthenticatedUser:[`GET /user/blocks`],listEmailsForAuthenticated:[`GET /user/emails`,{},{renamed:[`users`,`listEmailsForAuthenticatedUser`]}],listEmailsForAuthenticatedUser:[`GET /user/emails`],listFollowedByAuthenticated:[`GET /user/following`,{},{renamed:[`users`,`listFollowedByAuthenticatedUser`]}],listFollowedByAuthenticatedUser:[`GET /user/following`],listFollowersForAuthenticatedUser:[`GET /user/followers`],listFollowersForUser:[`GET /users/{username}/followers`],listFollowingForUser:[`GET /users/{username}/following`],listGpgKeysForAuthenticated:[`GET /user/gpg_keys`,{},{renamed:[`users`,`listGpgKeysForAuthenticatedUser`]}],listGpgKeysForAuthenticatedUser:[`GET /user/gpg_keys`],listGpgKeysForUser:[`GET /users/{username}/gpg_keys`],listPublicEmailsForAuthenticated:[`GET /user/public_emails`,{},{renamed:[`users`,`listPublicEmailsForAuthenticatedUser`]}],listPublicEmailsForAuthenticatedUser:[`GET /user/public_emails`],listPublicKeysForUser:[`GET /users/{username}/keys`],listPublicSshKeysForAuthenticated:[`GET /user/keys`,{},{renamed:[`users`,`listPublicSshKeysForAuthenticatedUser`]}],listPublicSshKeysForAuthenticatedUser:[`GET /user/keys`],listSocialAccountsForAuthenticatedUser:[`GET /user/social_accounts`],listSocialAccountsForUser:[`GET /users/{username}/social_accounts`],listSshSigningKeysForAuthenticatedUser:[`GET /user/ssh_signing_keys`],listSshSigningKeysForUser:[`GET /users/{username}/ssh_signing_keys`],setPrimaryEmailVisibilityForAuthenticated:[`PATCH /user/email/visibility`,{},{renamed:[`users`,`setPrimaryEmailVisibilityForAuthenticatedUser`]}],setPrimaryEmailVisibilityForAuthenticatedUser:[`PATCH /user/email/visibility`],unblock:[`DELETE /user/blocks/{username}`],unfollow:[`DELETE /user/following/{username}`],updateAuthenticated:[`PATCH /user`]}};const Xa=new Map;for(let[e,t]of Object.entries(Ya))for(let[n,r]of Object.entries(t)){let[t,i,a]=r,[o,s]=t.split(/ /),c=Object.assign({method:o,url:s},i);Xa.has(e)||Xa.set(e,new Map),Xa.get(e).set(n,{scope:e,methodName:n,endpointDefaults:c,decorations:a})}const Za={has({scope:e},t){return Xa.get(e).has(t)},getOwnPropertyDescriptor(e,t){return{value:this.get(e,t),configurable:!0,writable:!0,enumerable:!0}},defineProperty(e,t,n){return Object.defineProperty(e.cache,t,n),!0},deleteProperty(e,t){return delete e.cache[t],!0},ownKeys({scope:e}){return[...Xa.get(e).keys()]},set(e,t,n){return e.cache[t]=n},get({octokit:e,scope:t,cache:n},r){if(n[r])return n[r];let i=Xa.get(t).get(r);if(!i)return;let{endpointDefaults:a,decorations:o}=i;return n[r]=o?$a(e,t,r,a,o):e.request.defaults(a),n[r]}};function Qa(e){let t={};for(let n of Xa.keys())t[n]=new Proxy({octokit:e,scope:n,cache:{}},Za);return t}function $a(e,t,n,r,i){let a=e.request.defaults(r);function o(...r){let o=a.endpoint.merge(...r);if(i.mapToData)return o=Object.assign({},o,{data:o[i.mapToData],[i.mapToData]:void 0}),a(o);if(i.renamed){let[r,a]=i.renamed;e.log.warn(`octokit.${t}.${n}() has been renamed to octokit.${r}.${a}()`)}if(i.deprecated&&e.log.warn(i.deprecated),i.renamedParameters){let o=a.endpoint.merge(...r);for(let[r,a]of Object.entries(i.renamedParameters))r in o&&(e.log.warn(`"${r}" parameter is deprecated for "octokit.${t}.${n}()". Use "${a}" instead`),a in o||(o[a]=o[r]),delete o[r]);return a(o)}return a(...r)}return Object.assign(o,a)}function eo(e){let t=Qa(e);return{...t,rest:t}}eo.VERSION=`17.0.0`;const to=Va.plugin(Ha,eo,Ja).defaults({userAgent:`octokit-rest.js/22.0.1`});function no(e){let t=e?.cause;if(typeof t?.code==`string`)return t.code;let n=e?.code;return typeof n==`string`?n:void 0}const ro=[`CERT`,`SELF_SIGNED`,`SIGNATURE`,`ISSUER`];function io(e,t){let n=no(e);if(n&&ro.some(e=>n.includes(e)))return{kind:`tls`,message:`Could not verify the TLS certificate for ${t}. If this is a GitHub Enterprise Server with a self-signed or internal-CA certificate, add its CA to your system trust store (macOS Keychain, Windows certificate store, or your distro's ca-certificates).`};let r=e?.status;return r===401?{kind:`token`,message:`Token invalid for ${t}`}:r===403?{kind:`token`,message:`Token rejected by ${t} — check that it has the repo and read:user scopes, and that it is authorized for SSO if the organization requires it`}:n?{kind:`network`,message:`Could not reach ${t} (${n})`}:{kind:`token`,message:`Authentication failed for ${t}`}}async function ao(){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf8`).trim()}async function oo(e,t,n){let{host:r,json:i}=e;ra(r);let a=await(n??(()=>ca({message:`Enter PAT:`})))();a||(process.stderr.write(`No token provided
 `),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new to({auth:a,...o?{baseUrl:o}:{}}),c=`unknown`,l,u;try{let{data:e}=await s.users.getAuthenticated();c=e.login,l=e.name??void 0,u=e.email??void 0}catch(e){let t=io(e,r).message;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}await t.set(r,c,a,{gitProtocol:`https`,name:l,email:u}),i?process.stdout.write(`${JSON.stringify({type:`complete`,host:r,login:c})}\n`):process.stderr.write(`✓ PAT stored for ${c} on ${r}\n`)}function so(e){return new j(`pat`).description(`Store a Personal Access Token`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=t.host??Yt(process.cwd()),r=t.tokenStdin?ao:void 0;await oo({host:n,json:t.json},await e(),r)})}async function co(e,t,n=Pr){let r=n(e);return r.available&&r.token?r.token:(await t.get(e))?.token??null}async function lo(e,t){let{host:n,json:r}=e;ra(n);let i=await co(n,t);i??(process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=new to({auth:i,...a?{baseUrl:a}:{}}),s=[];for await(let e of o.paginate.iterator(o.repos.listForAuthenticatedUser,{per_page:100,sort:`updated`}))for(let t of e.data)s.push({full_name:t.full_name,clone_url:t.clone_url,private:t.private});if(r)process.stdout.write(`${JSON.stringify({type:`repos`,host:n,repos:s})}\n`);else for(let e of s)process.stdout.write(`${e.full_name}  ${e.clone_url}\n`)}function uo(e){return new j(`repos`).description(`List accessible repositories`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??Yt(process.cwd());await lo({...t,host:n},await e())})}async function fo(e){let{host:t}=e,{touched:n}=await Qn(t);if(n.length===0){process.stderr.write(`Not signed in to ${t}\n`);return}process.stderr.write(`✓ Signed out from ${t}\n`),n.includes(`keychain`)&&process.stderr.write(`  cleared from OS keychain
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
-`)}function po(){return new j(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??Yt(process.cwd());await fo({...e,host:t})})}async function mo(e,t,n=Pr){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function ho(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function go(e,t){let{host:n,json:r}=e;ra(n);let i=t.backend,a=await mo(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new to({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=io(e,n);r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function _o(e){return new j(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??Yt(process.cwd());await go({...t,host:n},await e())})}function vo(e){let t=new j(`auth`);t.description(`GitHub authentication management`);let n=e=>Jn(void 0,e);return t.addCommand(oa(n)),t.addCommand(_o(n)),t.addCommand(uo(n)),t.addCommand(po()),t.addCommand(so(n)),t.addCommand(Vi(n,e)),t}function yo(e,t=pi(),n=er){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[R(e)])}catch{}}function bo(){return new j(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await mr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:hr(),logger:Yn()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&yo(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function xo(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:Tr(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:Tr(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function So(e){let t=e.inspect??(()=>pr(e.lockDir,`server`,{isAlive:vn})),n=e.unlink??(e=>K(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=xo(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Co(e){return new j(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),So({lockDir:k(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function wo(e){return`credential.helper=!${e.map(te).join(` `)} auth git-credential`}async function To(e,t,n={},r=Pr){let i=[`credential.helper=`,wo(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Eo(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Do=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Oo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Do)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function ko(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ao(e,t=process.env){let n=ko(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function jo(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Mo(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const No=je;async function Po(e){try{return await e.clone(Mo(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&No(t))return e.onFallback(e.branch),await e.clone(Mo(null)),{fellBack:!0};throw t}}function Fo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Io(e,t,n){return e===`https`&&t===`github.com`&&n}function Lo(e){if(e===void 0)return null;let{declaredLogin:t,declaredSource:n}=e,r;switch(n){case`remote-url`:r=`The clone URL names ${t}`;break;case`credential-config`:r=`Your Git credential configuration names ${t}`;break;default:r=`Your Git configuration names ${t}`}return`⚠ ${r}, but the GitHub CLI couldn't confirm that account — the clone used its active account.\n  Run \`gh auth status\` to see which account that is. If ${t} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}async function Ro(e,t,n={}){let r=_r(e);if(!r)throw Error(`Invalid git URL: ${Uo(e)}`);let i=$t(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await To(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!ut(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function zo(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Bo(e,t,n,r=process.cwd()){let i=_r(e);if(!i)throw Error(`Invalid git URL: ${Uo(e)}`);let a=zo(e,i),o=t.dir?V(r,t.dir):V(r,i.name);if(H(o)&&oi(o).length>0)throw Error(`Target directory is not empty: ${o}`);at();let s=ir(),c=i.protocol===`https`&&i.hostname===`github.com`&&await Eo(i.owner,i.name),l=Io(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await Ro(a,s,{selfCliArgs:jo(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=Lo(l.declaredMiss);e&&process.stderr.write(e)}let d=Ao(u),f=Fo(r,u.gitConfig),p=Vt(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
+`)}function po(){return new j(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).action(async e=>{let t=e.host??Yt(process.cwd());await fo({...e,host:t})})}async function mo(e,t,n=Pr){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function ho(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function go(e,t){let{host:n,json:r}=e;ra(n);let i=t.backend,a=await mo(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new to({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=io(e,n);r?process.stdout.write(`${JSON.stringify(ho(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function _o(e){return new j(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: workspace origin host)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=t.host??Yt(process.cwd());await go({...t,host:n},await e())})}function vo(e){let t=new j(`auth`);t.description(`GitHub authentication management`);let n=e=>Jn(void 0,e);return t.addCommand(oa(n)),t.addCommand(_o(n)),t.addCommand(uo(n)),t.addCommand(po()),t.addCommand(so(n)),t.addCommand(Vi(n,e)),t}function yo(e,t=pi(),n=er){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[R(e)])}catch{}}function bo(){return new j(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await mr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:hr(),logger:Yn()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&yo(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function xo(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:Tr(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:Tr(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function So(e){let t=e.inspect??(()=>pr(e.lockDir,`server`,{isAlive:vn})),n=e.unlink??(e=>K(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=xo(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Co(e){return new j(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),So({lockDir:k(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function wo(e){return`credential.helper=!${e.map(re).join(` `)} auth git-credential`}async function To(e,t,n={},r=Pr){let i=[`credential.helper=`,wo(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Eo(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Do=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Oo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Do)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function ko(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ao(e,t=process.env){let n=ko(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function jo(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Mo(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const No=je;async function Po(e){try{return await e.clone(Mo(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&No(t))return e.onFallback(e.branch),await e.clone(Mo(null)),{fellBack:!0};throw t}}function Fo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Io(e,t,n){return e===`https`&&t===`github.com`&&n}function Lo(e){if(e===void 0)return null;let{declaredLogin:t,declaredSource:n}=e,r;switch(n){case`remote-url`:r=`The clone URL names ${t}`;break;case`credential-config`:r=`Your Git credential configuration names ${t}`;break;default:r=`Your Git configuration names ${t}`}return`⚠ ${r}, but the GitHub CLI couldn't confirm that account — the clone used its active account.\n  Run \`gh auth status\` to see which account that is. If ${t} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}async function Ro(e,t,n={}){let r=_r(e);if(!r)throw Error(`Invalid git URL: ${Uo(e)}`);let i=$t(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await To(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!ut(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function zo(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Bo(e,t,n,r=process.cwd()){let i=_r(e);if(!i)throw Error(`Invalid git URL: ${Uo(e)}`);let a=zo(e,i),o=t.dir?V(r,t.dir):V(r,i.name);if(H(o)&&oi(o).length>0)throw Error(`Target directory is not empty: ${o}`);at();let s=ir(),c=i.protocol===`https`&&i.hostname===`github.com`&&await Eo(i.owner,i.name),l=Io(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await Ro(a,s,{selfCliArgs:jo(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=Lo(l.declaredMiss);e&&process.stderr.write(e)}let d=Ao(u),f=Fo(r,u.gitConfig),p=Vt(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Oo(e);n&&n.pct!==m&&(m=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Po({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>p.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-BlRA0-yn.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Vo(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Vo(e){let t=yn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Ho=/^[A-Za-z0-9._/:@-]+$/;function Uo(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&en(i)!==void 0?`${t}${i}@`:t})}function Wo(e){return Ho.test(e)?e:te(e)}function Go(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Wo(t)}`:``;return`ok clone ${Wo(e)}${n}`}function Ko(e){let t=n(e.error);if(t.kind!==`auth`)return null;let r=Uo(e.url);if(C(t)){let t=Go(r,e.branch);return[`✗ Couldn't clone ${r} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-NMflbaUx.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Vo(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Vo(e){let t=yn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Ho=/^[A-Za-z0-9._/:@-]+$/;function Uo(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&en(i)!==void 0?`${t}${i}@`:t})}function Wo(e){return Ho.test(e)?e:re(e)}function Go(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Wo(t)}`:``;return`ok clone ${Wo(e)}${n}`}function Ko(e){let t=n(e.error);if(t.kind!==`auth`)return null;let r=Uo(e.url);if(C(t)){let t=Go(r,e.branch);return[`✗ Couldn't clone ${r} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${r}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${r} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${r}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Go(r,e.branch)}`].join(`
-`)}function qo(e){let t=vt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=Ko({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Jo(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Yo(e){let t=n(e.error),r=e.auth?.tier===`A`?e.auth:void 0,i=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(r)i=r.login??null;else if(e.auth?.tier!==`none`){let t=_r(e.url);t&&(i=await(e.resolvePrincipal??(e=>Jo(ir(),e)))(t.hostname))}}qo({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:i,resolvedLogin:r?.login??null,emit:e.emit,printStderr:e.printStderr})}function Xo(e){return new j(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Bo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-CFXx2ECs.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Xe||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Yo({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Zo=_();const Qo=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...ne.map(e=>e.path)];function $o(e){return nt({absPath:He(`project-local`,e),sideline:!1}).diagnostics}function es(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??zr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??$o)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(O(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function ts(e){let t=W(e,`utf-8`),n=(0,Zo.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of Qo)n.hasIn(e)&&r.push(e.join(`.`));return r}function ns(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function rs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=ns(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function is(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function as(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??lt,s=is(r).map(t=>({scope:t,absPath:He(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=ts(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:rs(Qo.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:O(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const os=`project | project-local | user | all`,ss=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function cs(e){return e!==`config`}function ls(){let e=new j(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{es({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${os}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!ss.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${os}`),process.exitCode=2;return}(await as({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const us=[`    1. ${L(`Customize`)} (sidebar) → ${L(`Skills`)}`,`    2. Click the ${L(`+`)} button`,`    3. Click ${L(`Create skill`)}`,`    4. Click ${L(`Upload skill`)}`,`    5. Pick ${L(`openknowledge.skill`)} from Downloads`],ds=M(`  Open the Claude Desktop App, then: ${L(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function fs(e){let t=[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(I(`  Handoff failed: ${e.handoffError.message}`)),t.push(ds),t.join(`
+`)}function qo(e){let t=vt(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=Ko({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function Jo(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function Yo(e){let t=n(e.error),r=e.auth?.tier===`A`?e.auth:void 0,i=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(r)i=r.login??null;else if(e.auth?.tier!==`none`){let t=_r(e.url);t&&(i=await(e.resolvePrincipal??(e=>Jo(ir(),e)))(t.hostname))}}qo({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:i,resolvedLogin:r?.login??null,emit:e.emit,printStderr:e.printStderr})}function Xo(e){return new j(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Bo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BODrVK-4.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Xe||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await Yo({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var Zo=u();const Qo=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...d.map(e=>e.path)];function $o(e){return nt({absPath:He(`project-local`,e),sideline:!1}).diagnostics}function es(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??zr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??$o)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(O(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function ts(e){let t=W(e,`utf-8`),n=(0,Zo.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of Qo)n.hasIn(e)&&r.push(e.join(`.`));return r}function ns(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function rs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=ns(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function is(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function as(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??lt,s=is(r).map(t=>({scope:t,absPath:He(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=ts(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:rs(Qo.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:O(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const os=`project | project-local | user | all`,ss=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function cs(e){return e!==`config`}function ls(){let e=new j(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{es({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${os}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!ss.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${os}`),process.exitCode=2;return}(await as({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const us=[`    1. ${L(`Customize`)} (sidebar) → ${L(`Skills`)}`,`    2. Click the ${L(`+`)} button`,`    3. Click ${L(`Create skill`)}`,`    4. Click ${L(`Upload skill`)}`,`    5. Pick ${L(`openknowledge.skill`)} from Downloads`],ds=M(`  Open the Claude Desktop App, then: ${L(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function fs(e){let t=[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(I(`  Handoff failed: ${e.handoffError.message}`)),t.push(ds),t.join(`
 `)}function ps(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[M(`OpenKnowledge skill ${L(`v${t}`)} already delivered to Claude Desktop.`),N(`  Recorded at ${n} in ~/.ok/skill-state.yml`),N(`  Use ${L(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function ms(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),M(`  Claude Desktop App opened. Now upload the file manually:`),...us,N(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
-`)}function hs(e){return`${F(`Error:`)} ${e.buildError??`unknown build failure`}`}async function gs(e={}){let t=await Je(e);return t.status===`failed`?{...t,message:hs(t),exitCode:1}:t.status===`skip-current`?{...t,message:ps(t),exitCode:0}:t.status===`installed`?{...t,message:ms(t),exitCode:0}:{...t,message:fs(t),exitCode:0}}function _s(){return new j(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await gs({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function vs(e,t){let n=bi({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const ys=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function bs(e){return z(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const xs={existsSync:e=>H(e),readFileSync:(e,t)=>W(e,t),lstatSync:e=>ii(e),readlinkSync:e=>si(e)};function Ss(e,t=xs){let n=bs(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function Cs(e){let t=e.replace(ys,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function ws(e,t,n=xs){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function Ts(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Vn(e)} readProcessStart=${t}`}function Es(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Ln(n,r),t.onNativeFailure?.({kind:e,reason:Hn(n,r)})};try{if(n===`win32`){let n=!1,a=zn(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Ts(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Vn(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Wr,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Ds(e,t={}){let n=t.probe??Bt(),r=t.isAlive??(e=>vn(e,n(e))),i=t.isAlive??Ye,a=pr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(Yn()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(Tr(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>Be(n)))(),u=await hi(e).catch(()=>V(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Es)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ~/.ok/logs. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await yr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await yi(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Os(e){return Zr===`/`?e:e.split(Zr).join(`/`)}function ks(e,t,n=`This project`){let r=[],i=[k(e)],a=z(e,`.ok`);Vr(z(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of En){let a=Nn[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Os(B(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Os(B(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Mn(e),...jn(e),...ee]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:z(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:qe(e)})}catch{}let c=z(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function As(e,t){return{scope:`deinit`,ops:ks(e,t)}}function js(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(z(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Ns(a,t));for(let e of En){let n=Nn[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of fr(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...ks(e,t,`Project: ${Jr(e)}`));return c.push(...Ps(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:z(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function Ms(e){return[z(e,`.zshrc`),z(e,`.bash_profile`),z(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Ns(e,t){let n=[],r=new Set([...Ms(t),...e?.rcFiles??[]]);for(let e of r)Vr(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Ps(e,t,n){let r={home:e,platformName:t,env:n},i=Or(r),a=dr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Or({...r,productName:kr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Fs(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??Qn,r=t.clearEmbeddingsKey??tn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[V(e.lockDir)]:[])),a=Bt(),o=t.scanProcesses??(()=>Be(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Ds(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(V(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Ls(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=V(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(V(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(V(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Is(e,t=wr){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Ls(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Vr(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Rs(t.reason)}: ${e.rcFile}`};let n;try{n=W(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Rs(On(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=Cs(n);return i?a&&!t.symlink?(ui(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(zt(t.path,r,{mode:kn(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return ws(e.path,e.target)?(K(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=tr(Nn[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Rs(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Hr(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${z(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Rs(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=Un(e.projectRoot,Bs(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${z(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return zs(e)}}function Rs(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Bn(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function zs(e){if(e.requireOurState&&!ar(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Tn(e.path,e.containWithin);let t;try{t=ii(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return K(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of oi(e.path))t.has(r)||(ui(z(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return ui(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function Bs(e){let t=new Set([z(e,`.claude`,`launch.json`)]);for(let n of En){let r=Nn[n].projectConfigPath?.(e);r&&t.add(r)}return Mn(e).filter(n=>{let r=z(e,n);if(!t.has(r))return!0;try{return ii(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Vs(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Hs(e){if(e.ops.length===0)return N(`Nothing to remove.`);let t=[];for(let[n,r]of Vs(e.ops)){t.length>0&&t.push(``),t.push(L(`${n}:`));for(let e of r)t.push(`  ${I(`-`)} ${e.label}`)}return t.join(`
+`)}function hs(e){return`${F(`Error:`)} ${e.buildError??`unknown build failure`}`}async function gs(e={}){let t=await Je(e);return t.status===`failed`?{...t,message:hs(t),exitCode:1}:t.status===`skip-current`?{...t,message:ps(t),exitCode:0}:t.status===`installed`?{...t,message:ms(t),exitCode:0}:{...t,message:fs(t),exitCode:0}}function _s(){return new j(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await gs({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function vs(e,t){let n=bi({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const ys=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function bs(e){return z(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const xs={existsSync:e=>H(e),readFileSync:(e,t)=>W(e,t),lstatSync:e=>ii(e),readlinkSync:e=>si(e)};function Ss(e,t=xs){let n=bs(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function Cs(e){let t=e.replace(ys,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function ws(e,t,n=xs){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function Ts(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Vn(e)} readProcessStart=${t}`}function Es(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Ln(n,r),t.onNativeFailure?.({kind:e,reason:Hn(n,r)})};try{if(n===`win32`){let n=!1,a=zn(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Ts(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Vn(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Wr,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Ds(e,t={}){let n=t.probe??Bt(),r=t.isAlive??(e=>vn(e,n(e))),i=t.isAlive??Ye,a=pr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(Yn()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(Tr(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>Be(n)))(),u=await hi(e).catch(()=>V(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Es)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ~/.ok/logs. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await yr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await yi(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Os(e){return Zr===`/`?e:e.split(Zr).join(`/`)}function ks(e,t,n=`This project`){let r=[],i=[k(e)],a=z(e,`.ok`);Vr(z(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of En){let a=Nn[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Os(B(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Os(B(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Mn(e),...jn(e),...ne]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:z(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:qe(e)})}catch{}let c=z(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function As(e,t){return{scope:`deinit`,ops:ks(e,t)}}function js(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(z(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Ns(a,t));for(let e of En){let n=Nn[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of fr(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...ks(e,t,`Project: ${Jr(e)}`));return c.push(...Ps(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:z(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function Ms(e){return[z(e,`.zshrc`),z(e,`.bash_profile`),z(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Ns(e,t){let n=[],r=new Set([...Ms(t),...e?.rcFiles??[]]);for(let e of r)Vr(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Ps(e,t,n){let r={home:e,platformName:t,env:n},i=Or(r),a=dr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Or({...r,productName:kr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Fs(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??Qn,r=t.clearEmbeddingsKey??tn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[V(e.lockDir)]:[])),a=Bt(),o=t.scanProcesses??(()=>Be(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Ds(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(V(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Ls(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=V(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(V(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(V(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Is(e,t=wr){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Ls(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Vr(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Rs(t.reason)}: ${e.rcFile}`};let n;try{n=W(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Rs(On(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=Cs(n);return i?a&&!t.symlink?(ui(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(zt(t.path,r,{mode:kn(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return ws(e.path,e.target)?(K(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=tr(Nn[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Rs(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Hr(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${z(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Rs(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=Un(e.projectRoot,Bs(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${z(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return zs(e)}}function Rs(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Bn(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function zs(e){if(e.requireOurState&&!ar(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Tn(e.path,e.containWithin);let t;try{t=ii(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return K(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of oi(e.path))t.has(r)||(ui(z(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return ui(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function Bs(e){let t=new Set([z(e,`.claude`,`launch.json`)]);for(let n of En){let r=Nn[n].projectConfigPath?.(e);r&&t.add(r)}return Mn(e).filter(n=>{let r=z(e,n);if(!t.has(r))return!0;try{return ii(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Vs(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Hs(e){if(e.ops.length===0)return N(`Nothing to remove.`);let t=[];for(let[n,r]of Vs(e.ops)){t.length>0&&t.push(``),t.push(L(`${n}:`));for(let e of r)t.push(`  ${I(`-`)} ${e.label}`)}return t.join(`
 `)}function Us(e){return e.replaceAll(`
 `,`
       `)}function Ws(e){let t=e.removed.length,n=e.failed.filter(e=>e.status!==`blocked`),r=e.results.filter(e=>e.status===`blocked`),i=n.length,a=e.results.filter(e=>e.status===`not-present`).length,o=e.results.filter(e=>e.status===`skipped`),s=[];s.push(e.failed.length>0?I(`Removed ${t} item${t===1?``:`s`}, ${i} could not be removed.`):P(`✓ Removed ${t} item${t===1?``:`s`}.`)),r.length>0&&s.push(I(`  ${r.length} dependent items left untouched; resolve the failures below and retry.`)),a>0&&s.push(N(`  ${a} already absent.`));for(let t of e.removed)t.detail!==void 0&&s.push(`  ${I(`·`)} ${t.op.label} — ${N(Us(t.detail))}`);for(let e of o)s.push(`  ${I(`·`)} ${e.op.kind===`stop-server`?`Skipped`:`Left in place`}: ${e.op.label}${e.detail?` — ${N(Us(e.detail))}`:``}`);if(i>0){s.push(``),s.push(F(`Could not remove:`));for(let e of n)s.push(`  ${F(`✗`)} ${e.op.label}${e.detail?` — ${Us(e.detail)}`:``}`)}return s.join(`
 `)}function Gs(e,t=[]){return{scope:e.scope,mode:`dry-run`,planned:e.ops.map(e=>({kind:e.kind,label:e.label})),attachedClients:t}}function Ks(e,t,n=[]){return{scope:e,mode:`applied`,removed:t.removed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),skipped:t.results.filter(e=>e.status===`skipped`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),blocked:t.results.filter(e=>e.status===`blocked`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),failed:t.failed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),attachedClients:n}}async function qs(e={}){let t=V(e.cwd??process.cwd()),n=e.home??fi();if(Ue(t,n))return{status:`failed`,message:`${F(`Refusing to deinit your home directory.`)}\n  ${t}/.ok is OpenKnowledge's user-global directory (global.yml, skills/,\n  auth.yml), not a project. Removing it would delete your global settings and skills.\n  To remove OpenKnowledge everywhere, use 'ok uninstall'.`,exitCode:64};if(!H(z(t,`.ok`)))return{status:`no-op`,message:N(`No OpenKnowledge project found at ${t}. Nothing to remove.`),exitCode:0};let r=As(t,n),i=await Is(r,e.probeClients),a=i.length>0?`\n\n${i.map(e=>I(e)).join(`
-`)}`:``;if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(Gs(r,i),null,2):`${L(`Would remove (dry-run — no changes made):`)}\n\n${Hs(r)}${a}`,exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${F(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes&&(process.stderr.write(`${L(`Remove OpenKnowledge from ${t}:`)}\n\n${Hs(r)}${a}\n\n`),!await vs(`${L(`Remove these?`)} ${N(`[y/N] `)}`,e.confirmStream)))return{status:`cancelled`,message:N(`Cancelled.`),exitCode:0};let o=await Fs(r,{env:e.env??(e.home===void 0?process.env:{}),...e.runRemovalDeps});return{status:o.failed.length>0?`failed`:`done`,message:e.json?JSON.stringify(Ks(`deinit`,o,i),null,2):Ws(o),exitCode:+(o.failed.length>0)}}function Js(){return new j(`deinit`).description("Remove OpenKnowledge from this project (its .ok/, editor MCP entries, git-exclude lines, shadow repo) while leaving your markdown content untouched. Re-run `ok start` to re-scaffold.").argument(`[path]`,`Project directory (defaults to the current project)`).option(`-y, --yes`,`Skip the confirmation prompt`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).action(async(e,t)=>{let n=await qs({cwd:e??process.cwd(),yes:t.yes,dryRun:t.dryRun,json:t.json});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}var Y=e(Ar(),1);function Ys(){let e=qr(`bun`,[`--version`],A({encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}}));return e.error?{ok:!1,error:e.error.message}:e.signal===`SIGTERM`?{ok:!1,error:`probe timed out`}:e.status===0?{ok:!0,version:e.stdout.trim()}:{ok:!1,error:e.stderr?.trim()||`exit code ${e.status}`}}function Xs(e={}){let t=e.probe??Ys;return{name:`bun`,run:async()=>{let e=t();return e.ok?{name:`bun`,status:`pass`,summary:`bun ${e.version}`}:{name:`bun`,status:`fail`,summary:`bun not found on PATH`,remediation:`Install Bun: https://bun.sh/docs/installation`,detail:e.error}}}}function Zs(e={}){let t=e.loader??zr;return{name:`config-yaml`,run:async e=>{let n=V(e.cwd,`.ok`,Rr);if(!H(n))return{name:`config-yaml`,status:`warn`,summary:`.ok/${Rr} not found (project not initialized)`,remediation:"Run `ok init` to scaffold the project."};try{let{config:n,sources:r}=t(e.cwd);return{name:`config-yaml`,status:`pass`,summary:`parses; content.dir = ${n.content.dir}`,detail:`sources: ${r.join(`, `)}`}}catch(e){let t=e instanceof Error?e.message:String(e);return{name:`config-yaml`,status:`fail`,summary:`.ok/${Rr} failed to parse`,detail:t}}}}}function Qs(e){try{return ei(e,ri.W_OK),{writable:!0}}catch(e){return{writable:!1,reason:e instanceof Error?e.message:String(e)}}}function $s(e={}){let t=e.loader??zr,n=e.probeWritable??Qs;return{name:`content-dir`,run:async e=>{let r=V(e.cwd,`.ok`,Rr);if(!H(r))return{name:`content-dir`,status:`warn`,summary:`project not initialized`,remediation:"Run `ok init` to scaffold the project."};let i;try{let{config:n}=t(e.cwd);i=V(e.cwd,n.content.dir)}catch(e){return{name:`content-dir`,status:`fail`,summary:`content.dir unresolved (config invalid)`,detail:e instanceof Error?e.message:String(e)}}if(!H(i))return{name:`content-dir`,status:`fail`,summary:`content.dir does not exist: ${i}`,remediation:`Create the directory or fix \`content.dir\` in .ok/${Rr}.`};if(!G(i).isDirectory())return{name:`content-dir`,status:`fail`,summary:`content.dir is not a directory: ${i}`};let a=n(i);return a.writable?{name:`content-dir`,status:`pass`,summary:`${i} (writable)`}:{name:`content-dir`,status:`fail`,summary:`content.dir is not writable: ${i}`,detail:a.reason}}}}function ec(e={}){let t=e.assert??at;return{name:`git`,run:async()=>{try{let e=t();return{name:`git`,status:`pass`,summary:`git ${e.version} (${e.source} — ${e.resolvedPath})`}}catch(e){if(e instanceof Xe)return{name:`git`,status:`fail`,summary:`git not found`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};if(e instanceof ct)return{name:`git`,status:`fail`,summary:`git ${e.detected} is older than required ${e.required}`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};throw e}}}}function tc(e){let t=qr(`codesign`,[`--verify`,`--deep`,`--strict`,e],{encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}});return t.error?{ok:!1,stderr:t.error.message}:t.signal===`SIGTERM`?{ok:!1,stderr:`codesign probe timed out`}:{ok:t.status===0,stderr:(t.stderr??``).trim()}}function nc(e={}){let t=e.platform??process.platform,n=e.execPath??process.execPath,r=e.codesignVerify??tc;return{name:`macos-codesig`,run:async()=>{if(t!==`darwin`)return{name:`macos-codesig`,status:`pass`,summary:`skipped on ${t} (macOS-only check)`};let e=n.indexOf(`/Contents/MacOS/`);if(e===-1)return{name:`macos-codesig`,status:`pass`,summary:`dev mode (no app bundle)`};let i=n.slice(0,e);if(i.startsWith(`/private/var/folders/`))return{name:`macos-codesig`,status:`fail`,summary:`app is running translocated (quarantine sandbox)`,remediation:`Drag OpenKnowledge.app to /Applications/ and re-launch.`,detail:`bundlePath: ${i}`};let a=r(i);return a.ok?{name:`macos-codesig`,status:`pass`,summary:`signed bundle at ${i}`}:{name:`macos-codesig`,status:`fail`,summary:`codesign --verify failed`,remediation:`Re-download OpenKnowledge from the official releases page.`,detail:`bundlePath: ${i}\n${a.stderr}`}}}}const rc=[`git`,`bun`,`config-yaml`,`content-dir`,`server-lock`,`shadow-repo`,`shadow-health`,`macos-codesig`];function ic(e){return rc.includes(e)}async function ac(e,t,n={}){let r=n.timeoutMs??5e3,i,a=Math.round(r/1e3);try{let n=new Promise(t=>{i=setTimeout(()=>{t({name:e.name,status:`fail`,summary:`check timed out after ${a}s`})},r)}),o=e.run(t),s=await Promise.race([o,n]);return o.catch(()=>{}),s}catch(t){let n=t instanceof Error?t.message:String(t);return{name:e.name,status:`fail`,summary:`check crashed: ${n}`}}finally{i!==void 0&&clearTimeout(i)}}async function oc(e,t,n={}){let r=[];for(let i of e)r.push(await ac(i,t,n));return r}function sc(e={}){let t=e.inspect??(e=>pr(e,`server`));return{name:`server-lock`,run:async e=>{let n=k(e.cwd);if(!H(n))return{name:`server-lock`,status:`pass`,summary:"no server lock (no `.ok/local/` yet)"};let r=t(n);switch(r.status){case`missing`:return{name:`server-lock`,status:`pass`,summary:`no server holding the lock`};case`alive`:return{name:`server-lock`,status:`fail`,summary:`server lock held by pid ${r.lock.pid} on this host`,remediation:"Stop the other OpenKnowledge process or run `ok stop`.",detail:`lockPath: ${r.lockPath}; port: ${r.lock.port}; started: ${r.lock.startedAt}`};case`unverified-owner`:return{name:`server-lock`,status:`warn`,summary:`unverified owner; recorded pid ${r.pid} is alive locally`,remediation:Tr(r),detail:`lockPath: ${r.lockPath}; pid: ${r.pid}`};case`foreign-host`:return{name:`server-lock`,status:`warn`,summary:`lock claimed by ${r.lock.hostname} (foreign host)`,remediation:`Stop the server on its owning machine and confirm the directory is no longer in use before removing the lock.`,detail:`lockPath: ${r.lockPath}; pid: ${r.lock.pid}`};case`dead-pid`:return{name:`server-lock`,status:`warn`,summary:`stale lock for non-existent pid ${r.lock.pid}`,remediation:"Run `ok clean` to prune.",detail:`lockPath: ${r.lockPath}`};case`read-error`:return{name:`server-lock`,status:`fail`,summary:`server.lock could not be read`,remediation:`Restore file and parent-directory access, then retry.`,detail:`${r.lockPath}: ${r.error}`};case`corrupt`:return{name:`server-lock`,status:`warn`,summary:`server.lock is corrupt (unparseable or invalid pid)`,remediation:`Delete ${r.lockPath} and rerun.`};default:return r}}}}async function cc(e,t){let n={gitDir:e,workTree:t},r=await Xt(n),i=await It(n),a=await Gt(n,Date.now()-18e5),s=mn(n),c=null;for(let t of[`objects/info/commit-graph`,`objects/info/commit-graphs`]){let n=V(e,t);if(H(n))try{c=Math.max(c??0,G(n).mtimeMs)}catch{}}let l=null;try{let n=Vt({baseDir:t,timeout:{block:4e3}}).env({GIT_DIR:e}),r=(await n.raw(`for-each-ref`,`--sort=-creatordate`,`--format=%(objectname)`,`refs/checkpoints/`)).trim().split(`
-`).filter(Boolean).slice(0,25);for(let e of r){let t=(await n.raw(`log`,`-1`,`--format=%cI%x00%B`,e)).trim(),r=t.indexOf(`\0`);if(r<0)continue;let i=t.slice(0,r),a=t.slice(r+1);if(o(a)?.kind===`auto-consolidation`){let e=Date.parse(i);Number.isFinite(e)&&(l=e);break}}}catch{}return{looseObjects:r.looseObjects,packfiles:r.packfiles,wipWidth:i,deadChains:a,gcLogLatch:s,lastPackedAtMs:c,lastConsolidationAtMs:l}}function lc(e){if(e===null)return`never`;let t=Date.now()-e,n=t/864e5;if(n>=1)return`${Math.round(n)}d ago`;let r=t/36e5;return r>=1?`${Math.round(r)}h ago`:`${Math.max(0,Math.round(t/6e4))}m ago`}function uc(e={}){let t=e.resolveDir??qe,n=e.readFacts??cc;return{name:`shadow-health`,run:async e=>{let r=V(e.cwd,`.git`);if(!H(r))return{name:`shadow-health`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let i;try{i=t(e.cwd)}catch(e){return{name:`shadow-health`,status:`warn`,summary:`cannot resolve shadow gitdir: ${e instanceof Error?e.message:String(e)}`}}if(!H(i))return{name:`shadow-health`,status:`warn`,summary:`shadow repo not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let a=await n(i,e.cwd),o=[];a.gcLogLatch&&o.push(`gc.log latch present (auto-packing disabled until it self-expires)`),a.looseObjects>2e3?o.push(`${a.looseObjects} loose objects (unpacked)`):a.packfiles===0&&a.looseObjects>512&&o.push(`${a.looseObjects} loose objects, never packed`),a.deadChains>5&&o.push(`${a.deadChains} dead chains unfolded (auto-consolidation not keeping up)`),a.wipWidth>20&&o.push(`${a.wipWidth} WIP refs (version-journal width high)`);let s=[`loose objects: ${a.looseObjects}`,`packfiles: ${a.packfiles}`,`WIP refs: ${a.wipWidth}`,`dead chains: ${a.deadChains}`,`gc.log latch: ${a.gcLogLatch?`present`:`none`}`,`last packed: ${lc(a.lastPackedAtMs)}`,`last fold: ${lc(a.lastConsolidationAtMs)}`].join(`, `);return o.length>0?{name:`shadow-health`,status:`warn`,summary:`history may be slow: ${o.join(`; `)}`,remediation:`Packing and journal cleanup run automatically on the next server start and during use. If this persists, check the server logs.`,detail:s}:{name:`shadow-health`,status:`pass`,summary:`${a.looseObjects} loose, ${a.packfiles} packs, ${a.wipWidth} WIP refs`,detail:s}}}}function dc(e={}){let t=e.resolve??qe;return{name:`shadow-repo`,run:async e=>{let n=V(e.cwd,`.git`);if(!H(n))return{name:`shadow-repo`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let r;try{r=t(e.cwd)}catch(e){if(e instanceof Ie||e instanceof _n)return{name:`shadow-repo`,status:`fail`,summary:`cannot resolve shadow gitdir: ${e.message}`};throw e}if(!H(r))return{name:`shadow-repo`,status:`warn`,summary:`shadow repo at ${r} not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let i=V(r,`HEAD`);if(!H(i))return{name:`shadow-repo`,status:`fail`,summary:`shadow repo at ${r} is missing HEAD`};let a;try{a=W(i,`utf-8`).trim()}catch(e){return{name:`shadow-repo`,status:`fail`,summary:`cannot read shadow HEAD: ${e instanceof Error?e.message:String(e)}`}}return{name:`shadow-repo`,status:`pass`,summary:`${r} (HEAD: ${a})`}}}}function fc(){return[ec(),Xs(),Zs(),$s(),sc(),dc(),uc(),nc()]}function pc(e){switch(e){case`pass`:return Y.default.green(`✓`);case`warn`:return Y.default.yellow(`!`);case`fail`:return Y.default.red(`✗`)}}function mc(e,t){let n=[`[${pc(e.status)}] ${e.name}: ${e.summary}`];if(e.remediation!==void 0&&e.status!==`pass`&&n.push(`    → ${e.remediation}`),t&&e.detail!==void 0)for(let t of e.detail.split(`
+`)}`:``;if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(Gs(r,i),null,2):`${L(`Would remove (dry-run — no changes made):`)}\n\n${Hs(r)}${a}`,exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${F(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes&&(process.stderr.write(`${L(`Remove OpenKnowledge from ${t}:`)}\n\n${Hs(r)}${a}\n\n`),!await vs(`${L(`Remove these?`)} ${N(`[y/N] `)}`,e.confirmStream)))return{status:`cancelled`,message:N(`Cancelled.`),exitCode:0};let o=await Fs(r,{env:e.env??(e.home===void 0?process.env:{}),...e.runRemovalDeps});return{status:o.failed.length>0?`failed`:`done`,message:e.json?JSON.stringify(Ks(`deinit`,o,i),null,2):Ws(o),exitCode:+(o.failed.length>0)}}function Js(){return new j(`deinit`).description("Remove OpenKnowledge from this project (its .ok/, editor MCP entries, git-exclude lines, shadow repo) while leaving your markdown content untouched. Re-run `ok start` to re-scaffold.").argument(`[path]`,`Project directory (defaults to the current project)`).option(`-y, --yes`,`Skip the confirmation prompt`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).action(async(e,t)=>{let n=await qs({cwd:e??process.cwd(),yes:t.yes,dryRun:t.dryRun,json:t.json});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}var Y=e(Ar(),1);function Ys(){let e=qr(`bun`,[`--version`],A({encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}}));return e.error?{ok:!1,error:e.error.message}:e.signal===`SIGTERM`?{ok:!1,error:`probe timed out`}:e.status===0?{ok:!0,version:e.stdout.trim()}:{ok:!1,error:e.stderr?.trim()||`exit code ${e.status}`}}function Xs(e={}){let t=e.probe??Ys;return{name:`bun`,run:async()=>{let e=t();return e.ok?{name:`bun`,status:`pass`,summary:`bun ${e.version}`}:{name:`bun`,status:`fail`,summary:`bun not found on PATH`,remediation:`Install Bun: https://bun.sh/docs/installation`,detail:e.error}}}}function Zs(e={}){let t=e.loader??zr;return{name:`config-yaml`,run:async e=>{let n=V(e.cwd,`.ok`,Rr);if(!H(n))return{name:`config-yaml`,status:`warn`,summary:`.ok/${Rr} not found (project not initialized)`,remediation:"Run `ok init` to scaffold the project."};try{let{config:n,sources:r}=t(e.cwd);return{name:`config-yaml`,status:`pass`,summary:`parses; content.dir = ${n.content.dir}`,detail:`sources: ${r.join(`, `)}`}}catch(e){let t=e instanceof Error?e.message:String(e);return{name:`config-yaml`,status:`fail`,summary:`.ok/${Rr} failed to parse`,detail:t}}}}}function Qs(e){try{return ei(e,ri.W_OK),{writable:!0}}catch(e){return{writable:!1,reason:e instanceof Error?e.message:String(e)}}}function $s(e={}){let t=e.loader??zr,n=e.probeWritable??Qs;return{name:`content-dir`,run:async e=>{let r=V(e.cwd,`.ok`,Rr);if(!H(r))return{name:`content-dir`,status:`warn`,summary:`project not initialized`,remediation:"Run `ok init` to scaffold the project."};let i;try{let{config:n}=t(e.cwd);i=V(e.cwd,n.content.dir)}catch(e){return{name:`content-dir`,status:`fail`,summary:`content.dir unresolved (config invalid)`,detail:e instanceof Error?e.message:String(e)}}if(!H(i))return{name:`content-dir`,status:`fail`,summary:`content.dir does not exist: ${i}`,remediation:`Create the directory or fix \`content.dir\` in .ok/${Rr}.`};if(!G(i).isDirectory())return{name:`content-dir`,status:`fail`,summary:`content.dir is not a directory: ${i}`};let a=n(i);return a.writable?{name:`content-dir`,status:`pass`,summary:`${i} (writable)`}:{name:`content-dir`,status:`fail`,summary:`content.dir is not writable: ${i}`,detail:a.reason}}}}function ec(e={}){let t=e.assert??at;return{name:`git`,run:async()=>{try{let e=t();return{name:`git`,status:`pass`,summary:`git ${e.version} (${e.source} — ${e.resolvedPath})`}}catch(e){if(e instanceof Xe)return{name:`git`,status:`fail`,summary:`git not found`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};if(e instanceof ct)return{name:`git`,status:`fail`,summary:`git ${e.detected} is older than required ${e.required}`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};throw e}}}}function tc(e){let t=qr(`codesign`,[`--verify`,`--deep`,`--strict`,e],{encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}});return t.error?{ok:!1,stderr:t.error.message}:t.signal===`SIGTERM`?{ok:!1,stderr:`codesign probe timed out`}:{ok:t.status===0,stderr:(t.stderr??``).trim()}}function nc(e={}){let t=e.platform??process.platform,n=e.execPath??process.execPath,r=e.codesignVerify??tc;return{name:`macos-codesig`,run:async()=>{if(t!==`darwin`)return{name:`macos-codesig`,status:`pass`,summary:`skipped on ${t} (macOS-only check)`};let e=n.indexOf(`/Contents/MacOS/`);if(e===-1)return{name:`macos-codesig`,status:`pass`,summary:`dev mode (no app bundle)`};let i=n.slice(0,e);if(i.startsWith(`/private/var/folders/`))return{name:`macos-codesig`,status:`fail`,summary:`app is running translocated (quarantine sandbox)`,remediation:`Drag OpenKnowledge.app to /Applications/ and re-launch.`,detail:`bundlePath: ${i}`};let a=r(i);return a.ok?{name:`macos-codesig`,status:`pass`,summary:`signed bundle at ${i}`}:{name:`macos-codesig`,status:`fail`,summary:`codesign --verify failed`,remediation:`Re-download OpenKnowledge from the official releases page.`,detail:`bundlePath: ${i}\n${a.stderr}`}}}}const rc=[`git`,`bun`,`config-yaml`,`content-dir`,`server-lock`,`shadow-repo`,`shadow-health`,`macos-codesig`];function ic(e){return rc.includes(e)}async function ac(e,t,n={}){let r=n.timeoutMs??5e3,i,a=Math.round(r/1e3);try{let n=new Promise(t=>{i=setTimeout(()=>{t({name:e.name,status:`fail`,summary:`check timed out after ${a}s`})},r)}),o=e.run(t),s=await Promise.race([o,n]);return o.catch(()=>{}),s}catch(t){let n=t instanceof Error?t.message:String(t);return{name:e.name,status:`fail`,summary:`check crashed: ${n}`}}finally{i!==void 0&&clearTimeout(i)}}async function oc(e,t,n={}){let r=[];for(let i of e)r.push(await ac(i,t,n));return r}function sc(e={}){let t=e.inspect??(e=>pr(e,`server`));return{name:`server-lock`,run:async e=>{let n=k(e.cwd);if(!H(n))return{name:`server-lock`,status:`pass`,summary:"no server lock (no `.ok/local/` yet)"};let r=t(n);switch(r.status){case`missing`:return{name:`server-lock`,status:`pass`,summary:`no server holding the lock`};case`alive`:return{name:`server-lock`,status:`fail`,summary:`server lock held by pid ${r.lock.pid} on this host`,remediation:"Stop the other OpenKnowledge process or run `ok stop`.",detail:`lockPath: ${r.lockPath}; port: ${r.lock.port}; started: ${r.lock.startedAt}`};case`unverified-owner`:return{name:`server-lock`,status:`warn`,summary:`unverified owner; recorded pid ${r.pid} is alive locally`,remediation:Tr(r),detail:`lockPath: ${r.lockPath}; pid: ${r.pid}`};case`foreign-host`:return{name:`server-lock`,status:`warn`,summary:`lock claimed by ${r.lock.hostname} (foreign host)`,remediation:`Stop the server on its owning machine and confirm the directory is no longer in use before removing the lock.`,detail:`lockPath: ${r.lockPath}; pid: ${r.lock.pid}`};case`dead-pid`:return{name:`server-lock`,status:`warn`,summary:`stale lock for non-existent pid ${r.lock.pid}`,remediation:"Run `ok clean` to prune.",detail:`lockPath: ${r.lockPath}`};case`read-error`:return{name:`server-lock`,status:`fail`,summary:`server.lock could not be read`,remediation:`Restore file and parent-directory access, then retry.`,detail:`${r.lockPath}: ${r.error}`};case`corrupt`:return{name:`server-lock`,status:`warn`,summary:`server.lock is corrupt (unparseable or invalid pid)`,remediation:`Delete ${r.lockPath} and rerun.`};default:return r}}}}async function cc(e,t){let n={gitDir:e,workTree:t},r=await Xt(n),i=await It(n),a=await Gt(n,Date.now()-18e5),o=mn(n),s=null;for(let t of[`objects/info/commit-graph`,`objects/info/commit-graphs`]){let n=V(e,t);if(H(n))try{s=Math.max(s??0,G(n).mtimeMs)}catch{}}let c=null;try{let n=Vt({baseDir:t,timeout:{block:4e3}}).env({GIT_DIR:e}),r=(await n.raw(`for-each-ref`,`--sort=-creatordate`,`--format=%(objectname)`,`refs/checkpoints/`)).trim().split(`
+`).filter(Boolean).slice(0,25);for(let e of r){let t=(await n.raw(`log`,`-1`,`--format=%cI%x00%B`,e)).trim(),r=t.indexOf(`\0`);if(r<0)continue;let i=t.slice(0,r),a=t.slice(r+1);if(p(a)?.kind===`auto-consolidation`){let e=Date.parse(i);Number.isFinite(e)&&(c=e);break}}}catch{}return{looseObjects:r.looseObjects,packfiles:r.packfiles,wipWidth:i,deadChains:a,gcLogLatch:o,lastPackedAtMs:s,lastConsolidationAtMs:c}}function lc(e){if(e===null)return`never`;let t=Date.now()-e,n=t/864e5;if(n>=1)return`${Math.round(n)}d ago`;let r=t/36e5;return r>=1?`${Math.round(r)}h ago`:`${Math.max(0,Math.round(t/6e4))}m ago`}function uc(e={}){let t=e.resolveDir??qe,n=e.readFacts??cc;return{name:`shadow-health`,run:async e=>{let r=V(e.cwd,`.git`);if(!H(r))return{name:`shadow-health`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let i;try{i=t(e.cwd)}catch(e){return{name:`shadow-health`,status:`warn`,summary:`cannot resolve shadow gitdir: ${e instanceof Error?e.message:String(e)}`}}if(!H(i))return{name:`shadow-health`,status:`warn`,summary:`shadow repo not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let a=await n(i,e.cwd),o=[];a.gcLogLatch&&o.push(`gc.log latch present (auto-packing disabled until it self-expires)`),a.looseObjects>2e3?o.push(`${a.looseObjects} loose objects (unpacked)`):a.packfiles===0&&a.looseObjects>512&&o.push(`${a.looseObjects} loose objects, never packed`),a.deadChains>5&&o.push(`${a.deadChains} dead chains unfolded (auto-consolidation not keeping up)`),a.wipWidth>20&&o.push(`${a.wipWidth} WIP refs (version-journal width high)`);let s=[`loose objects: ${a.looseObjects}`,`packfiles: ${a.packfiles}`,`WIP refs: ${a.wipWidth}`,`dead chains: ${a.deadChains}`,`gc.log latch: ${a.gcLogLatch?`present`:`none`}`,`last packed: ${lc(a.lastPackedAtMs)}`,`last fold: ${lc(a.lastConsolidationAtMs)}`].join(`, `);return o.length>0?{name:`shadow-health`,status:`warn`,summary:`history may be slow: ${o.join(`; `)}`,remediation:`Packing and journal cleanup run automatically on the next server start and during use. If this persists, check the server logs.`,detail:s}:{name:`shadow-health`,status:`pass`,summary:`${a.looseObjects} loose, ${a.packfiles} packs, ${a.wipWidth} WIP refs`,detail:s}}}}function dc(e={}){let t=e.resolve??qe;return{name:`shadow-repo`,run:async e=>{let n=V(e.cwd,`.git`);if(!H(n))return{name:`shadow-repo`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let r;try{r=t(e.cwd)}catch(e){if(e instanceof Ie||e instanceof _n)return{name:`shadow-repo`,status:`fail`,summary:`cannot resolve shadow gitdir: ${e.message}`};throw e}if(!H(r))return{name:`shadow-repo`,status:`warn`,summary:`shadow repo at ${r} not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let i=V(r,`HEAD`);if(!H(i))return{name:`shadow-repo`,status:`fail`,summary:`shadow repo at ${r} is missing HEAD`};let a;try{a=W(i,`utf-8`).trim()}catch(e){return{name:`shadow-repo`,status:`fail`,summary:`cannot read shadow HEAD: ${e instanceof Error?e.message:String(e)}`}}return{name:`shadow-repo`,status:`pass`,summary:`${r} (HEAD: ${a})`}}}}function fc(){return[ec(),Xs(),Zs(),$s(),sc(),dc(),uc(),nc()]}function pc(e){switch(e){case`pass`:return Y.default.green(`✓`);case`warn`:return Y.default.yellow(`!`);case`fail`:return Y.default.red(`✗`)}}function mc(e,t){let n=[`[${pc(e.status)}] ${e.name}: ${e.summary}`];if(e.remediation!==void 0&&e.status!==`pass`&&n.push(`    → ${e.remediation}`),t&&e.detail!==void 0)for(let t of e.detail.split(`
 `))n.push(`    ${Y.default.dim(t)}`);return n}function hc(e){let t=e.filter(e=>e.status===`fail`).length,n=e.filter(e=>e.status===`warn`).length;if(t===0&&n===0)return`All checks passed`;let r=[];return t>0&&r.push(`${t} error${t===1?``:`s`}`),n>0&&r.push(`${n} warning${n===1?``:`s`}`),r.join(`, `)}async function gc(e,t={}){let n=t.checks??fc(),r=t.stdout??(e=>console.log(e)),i=t.stderr??(e=>console.error(e)),a=e.quiet??!1,o=e.json??!1,s=e.verbose??!1,c;if(e.check!==void 0){if(!ic(e.check))return i(Y.default.red(`unknown check '${e.check}'. Valid: ${rc.join(`, `)}`)),2;let t=e.check,r=n.find(e=>e.name===t);if(!r)return i(Y.default.red(`internal error: check '${e.check}' not registered`)),2;c=[r]}else c=[...n];let l={cwd:e.cwd},u=await oc(c,l,t.timeoutMs===void 0?{}:{timeoutMs:t.timeoutMs});if(!a){if(o)for(let e of u)r(JSON.stringify(e));else{for(let e of u)for(let t of mc(e,s))r(t);r(``),r(hc(u))}}return+!!u.some(e=>e.status===`fail`)}function _c(){return new j(`health`).description(`Run environment health checks (${rc.join(`, `)})`).option(`--json`,`Emit NDJSON (one CheckResult per line)`).option(`--verbose`,`Include detail field + probe context in human-readable output`).option(`--check <name>`,`Run only the named check. One of: ${rc.join(`, `)}`).option(`--quiet`,`Suppress output; exit code only`).action(async e=>{let t=await gc({cwd:process.cwd(),json:e.json,verbose:e.verbose,check:e.check,quiet:e.quiet});process.exit(t)})}function vc(e){let t=qr(`ps`,[`-p`,String(e),`-o`,`%cpu=,%mem=,rss=,vsz=`],A({encoding:`utf-8`,timeout:2e3}));if(t.error||!t.stdout?.trim())return null;let[n,r,i,a]=t.stdout.trim().split(/\s+/),o=Number.parseFloat(n??``),s=Number.parseFloat(r??``),c=Number.parseInt(i??``,10),l=Number.parseInt(a??``,10);return Number.isNaN(o)||Number.isNaN(s)||Number.isNaN(c)||Number.isNaN(l)?null:{ts:new Date().toISOString(),pid:e,cpuPercent:o,memPercent:s,rssKb:c,vszKb:l}}function yc(e){let t=qr(`lsof`,[`-p`,String(e)],A({encoding:`utf-8`,timeout:5e3}));return t.error||!t.stdout?null:t.stdout}function bc(e){let t=[];for(let n of e.split(`
 `)){let e=n.match(/127\.0\.0\.1:(\d+)\s*\(LISTEN\)/);if(e){let n=Number.parseInt(e[1]??``,10);Number.isNaN(n)||t.push(n)}}return t}function xc(e){let t=qr(`curl`,[`-s`,`--max-time`,`2`,`http://127.0.0.1:${e}/json/list`],A({encoding:`utf-8`,timeout:3e3}));if(t.error||!t.stdout?.trim())return null;try{let e=JSON.parse(t.stdout);return Array.isArray(e)?e:null}catch{return null}}function Sc(e,t,n){let r=ai(z(mi(),`ok-cdp-`)),i=z(r,`profiler.mjs`);return di(i,`import { writeFileSync } from 'node:fs';
 const ws = new WebSocket(${JSON.stringify(e)});
@@ -42,18 +42,18 @@ ws.addEventListener('close', () => process.exit(0));
 ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function Cc(e,t,n,r,i){let a=Sc(e,t,z(r,`cpu.cpuprofile`)),o=!1,s=Kr(process.execPath,[a],A({stdio:`ignore`})),c=setInterval(()=>{let e=vc(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{ui(z(a,`..`),{recursive:!0,force:!0})}catch{}return o}function wc(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
-`)}async function Tc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??gn,s=t.inspect??(e=>pr(e,`server`)),c=t.resolveCommand??dt,l=t.resolveUsage??Re,u=t.collectLsofFn??yc,d=t.getEndpoints??xc,f=t.profiler??Cc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?z(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):z(process.cwd(),`ok-diagnose-${n}-${b}`);try{U(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{di(z(x,e),t),a(`  wrote ${e}`)},ee=c(n),C=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:ee,usage:C,lockInfo:y},null,2)),a(`  sampling lsof`);let te=u(n);if(te&&S(`lsof.txt`,te),!i){let e=te?bc(te).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,wc(W(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Ec(e){let t=bi({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Dc(e){let t=ai(z(mi(),`ok-bundle-process-`));return await Tc({pid:e,output:t}),t}function Oc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function kc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Ac(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function jc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Mc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Oc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Ac(t)}`),e(`  Credentials:         ${jc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Er(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Nc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Ec,i=t.runProcessDiagnose??Dc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=R(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);U(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=lr(t.diagnosticReportsDir??z(fi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await xr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Mc(n,u,o,l),e.yes!==!0&&!kc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await vr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{ui(s,{recursive:!0,force:!0})}catch{}}}function Pc(){let e=new j(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Tc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(_c()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-Dehf67Df.mjs`),{resolveContentDir:r}=await import(`./dist-CupHag_I.mjs`),i=process.cwd(),{config:a}=n(i);await Nc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Fc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ca({message:`Enter embeddings provider API key:`})).trim()}function Ic(e){return Rt(e)}async function Lc(e,t){let n=await qt(ln(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Rc(e){try{let t=Qe(k(e));if(!t||t.port<=0||!Ye(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=Ae.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function zc(e,t){if(!e)return`unavailable (search stays lexical)`;let n=p(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Bc(){return new j(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Fc();if(!t){process.stderr.write(`No key provided.
+`)}async function Tc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??gn,s=t.inspect??(e=>pr(e,`server`)),c=t.resolveCommand??dt,l=t.resolveUsage??Re,u=t.collectLsofFn??yc,d=t.getEndpoints??xc,f=t.profiler??Cc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?z(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):z(process.cwd(),`ok-diagnose-${n}-${b}`);try{U(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{di(z(x,e),t),a(`  wrote ${e}`)},ee=c(n),te=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:ee,usage:te,lockInfo:y},null,2)),a(`  sampling lsof`);let C=u(n);if(C&&S(`lsof.txt`,C),!i){let e=C?bc(C).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
+`)}\n`);try{S(`stacks.txt`,wc(W(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Ec(e){let t=bi({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Dc(e){let t=ai(z(mi(),`ok-bundle-process-`));return await Tc({pid:e,output:t}),t}function Oc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function kc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Ac(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function jc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Mc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Oc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Ac(t)}`),e(`  Credentials:         ${jc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Er(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Nc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Ec,i=t.runProcessDiagnose??Dc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=R(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);U(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=lr(t.diagnosticReportsDir??z(fi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await xr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Mc(n,u,o,l),e.yes!==!0&&!kc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await vr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{ui(s,{recursive:!0,force:!0})}catch{}}}function Pc(){let e=new j(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Tc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(_c()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-Svz-LLuj.mjs`),{resolveContentDir:r}=await import(`./dist-CnJNy-bS.mjs`),i=process.cwd(),{config:a}=n(i);await Nc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Fc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ca({message:`Enter embeddings provider API key:`})).trim()}function Ic(e){return Rt(e)}async function Lc(e,t){let n=await qt(ln(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Rc(e){try{let t=Qe(k(e));if(!t||t.port<=0||!Ye(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ke.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function zc(e,t){if(!e)return`unavailable (search stays lexical)`;let n=v(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Bc(){return new j(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Fc();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=V(e.cwd??process.cwd()),{baseUrl:r}=Ic(n);try{await ln().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
 `)})}function Vc(){return new j(`clear-key`).description(`Remove the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=V(e.cwd??process.cwd()),{baseUrl:n}=Ic(t),r;try{r=await ln().clearForProject(t,n)}catch(e){process.stderr.write(`Failed to clear the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}if(!r){process.stderr.write(`No stored embeddings key found for ${n}.\n`);return}process.stderr.write(`✓ Embeddings API key cleared for ${n}.\n`)})}function Hc(){return new j(`list`).description(`List every project + endpoint that has a stored embeddings key`).action(async()=>{let e=await ln().listProjects();if(e.length===0){process.stderr.write(`No project embeddings keys stored.
 `);return}let t=[`Stored embeddings keys (this machine):`,``];for(let{projectKey:n,endpoints:r}of e){t.push(`  ${n}`);for(let{endpoint:e,hint:n}of r)t.push(`    ${e}  →  ${n?`••••${n}`:`set`}`)}process.stdout.write(`${t.join(`
-`)}\n`)})}function Uc(){return new j(`set-url`).description(`Set the embeddings API endpoint for this project (project-local)`).argument(`<url>`,`OpenAI-compatible base URL, e.g. https://api.openai.com/v1`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim(),r=Ee(n);if(r!==null){process.stderr.write(r===`invalid-url`?`Not a valid URL: ${e}\n`:`Refusing an insecure endpoint: use https:// (http:// is allowed only for loopback endpoints). Got: ${e}\n`),process.exitCode=1;return}let i=V(t.cwd??process.cwd()),a=await lt({cwd:i,scope:`project-local`,patch:{search:{semantic:{baseUrl:n}}}});if(!a.ok){process.stderr.write(`Failed to set the embeddings endpoint — ${O(a.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint set to ${n} for ${i}\n`)})}function Wc(){return new j(`clear-url`).description(`Reset the embeddings API endpoint to the default OpenAI endpoint (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=V(e.cwd??process.cwd()),n=await lt({cwd:t,scope:`project-local`,patch:{search:{semantic:{baseUrl:ge}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings endpoint — ${O(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint reset to ${ge} for ${t}\n`)})}function Gc(){return new j(`set-model`).description(`Set the embeddings model for this project (project-local)`).argument(`<model>`,`Model id served by the configured endpoint, e.g. nomic-embed-text`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim();if(!n){process.stderr.write("Model id cannot be empty. Use `clear-model` to reset the default.\n"),process.exitCode=1;return}let r=V(t.cwd??process.cwd()),i=await lt({cwd:r,scope:`project-local`,patch:{search:{semantic:{model:n}}}});if(!i.ok){process.stderr.write(`Failed to set the embeddings model — ${O(i.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model set to ${n} for ${r}\n  Changing the model re-embeds the corpus on the next search.
-`)})}function Kc(){return new j(`clear-model`).description(`Reset the embeddings model to ${f} (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=V(e.cwd??process.cwd()),n=await lt({cwd:t,scope:`project-local`,patch:{search:{semantic:{model:f}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings model — ${O(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model reset to ${f} for ${t}\n`)})}function qc(e,t){return new j(e).description(`Turn semantic search ${t?`on`:`off`} for this project (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async n=>{let r=V(n.cwd??process.cwd()),i=await lt({cwd:r,scope:`project-local`,patch:{search:{semantic:{enabled:t}}}});if(!i.ok){process.stderr.write(`Failed to ${e} semantic search — ${O(i.error)}\n`),process.exitCode=1;return}if(process.stderr.write(`✓ Semantic search ${t?`enabled`:`disabled`} for ${r}\n`),t){let{present:e,notRequired:t}=await Lc(r,Ic(r).baseUrl);!e&&!t&&process.stderr.write("  Note: no API key set yet — run `ok embeddings set-key`. Until then, search stays lexical.\n")}})}function Jc(){return new j(`status`).description(`Show semantic-search capability: key presence, enabled, coverage, provider`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).option(`--json`,`Output JSON`,!1).action(async e=>{let n=V(e.cwd??process.cwd()),r=Ic(n),{present:i,notRequired:a,source:o}=await Lc(n,r.baseUrl),s=t({enabled:r.enabled,keyPresent:i,keyNotRequired:a}),c=s?await Rc(n):null;if(e.json){process.stdout.write(`${JSON.stringify({project:n,key:{present:i,notRequired:a,source:o},project_config:{enabled:r.enabled,capable:s,coverage:c?{embedded:c.embedded,total:c.total}:null,provider_error:c?{active:c.providerError===!0,reason:c.providerErrorReason??null}:null,provider:{baseUrl:r.baseUrl,model:r.model,dimensions:r.dimensions??null},transport:{maxBatchSize:r.maxBatchSize,maxBatchChars:r.maxBatchChars,docTimeoutMs:r.docTimeoutMs}}})}\n`);return}let l=i?`set for this endpoint — ${o===`env`?`environment (${rt})`:`~/.ok/secrets.yml`}`:a?`not required (loopback endpoint)`:`not set`,u=s?c?`${c.embedded} / ${c.total} pages embedded`:`server not running — start it to index (or it has not embedded yet)`:null,d=zc(s,c),f=[`Semantic search`,`  project:     ${n}`,``,`  This project:`,`    enabled:    ${r.enabled?`yes`:`no`}`,`    API key:    ${l}`,`    capability: ${d}`,...u?[`    coverage:   ${u}`]:[],`    provider:   ${r.baseUrl}`,`    model:      ${r.model}`,`    dimensions: ${r.dimensions??`auto (detected from the endpoint)`}`,`    batch size: ${r.maxBatchSize} chunks maximum per indexing request`,`    characters: ${r.maxBatchChars} approximate characters per indexing request`,`    timeout:    ${r.docTimeoutMs} ms per indexing request attempt`],p=[];!i&&!a&&p.push(`Set a key:  ok embeddings set-key   (or export ${rt})`),r.enabled||p.push(`Enable it:  ok embeddings enable   (in this project folder)`),p.length>0&&f.push(``,...p.map(e=>`  ${e}`)),process.stdout.write(`${f.join(`
-`)}\n`)})}function Yc(){return new j(`embeddings`).description(`Manage the semantic-search embeddings provider key + status`).addCommand(Bc()).addCommand(Vc()).addCommand(Uc()).addCommand(Wc()).addCommand(Gc()).addCommand(Kc()).addCommand(qc(`enable`,!0)).addCommand(qc(`disable`,!1)).addCommand(Hc()).addCommand(Jc())}const Xc=z(`Contents`,`Resources`,`cli`,`bin`,`ok.sh`),Zc=/Contents\/Resources\/cli\/dist\/cli\.mjs$/;function Qc(e,t,n){return e===`darwin`?[se.stable,se.beta].flatMap(e=>[z(t,`Applications`),`/Applications`].map(t=>z(t,`${e.productName}.app`,Xc))).find(e=>n.existsSync(e))??null:null}function $c(e,t,n){if(n!==`darwin`)return{proxy:!1,suppressedBy:`platform`};let r=e.OK_BUNDLE_PROXY?.toLowerCase();return r===`0`||r===`false`?{proxy:!1,suppressedBy:`env`}:t.includes(`--no-bundle-proxy`)?{proxy:!1,suppressedBy:`flag`}:typeof t[1]==`string`&&Zc.test(t[1])?{proxy:!1,suppressedBy:`self`}:{proxy:!0,suppressedBy:null}}function el(e){e.stderr.write(`${JSON.stringify({event:`mcp-bundle-proxy`,mode:e.mode,bundlePath:e.bundlePath,reason:e.reason,hint:`Suppress with --no-bundle-proxy or OK_BUNDLE_PROXY=0.`})}\n`)}function tl(e){el({stderr:e.stderr,mode:`bundled`,bundlePath:e.bundlePath,reason:null});let t=e.spawnImpl??Kr,n=e.exitProcess??(e=>process.exit(e)),r=e.now??(()=>Date.now()),i=r(),a=e.startupFailureWindowMs??1e3;return new Promise((o,s)=>{let c=t(e.bundlePath,e.argv.filter(e=>e!==`--no-bundle-proxy`),{env:{...e.env,OK_BUNDLE_PROXY:`0`},stdio:`inherit`,windowsHide:!0}),l=e=>{c.kill(e)},u=()=>{process.off(`SIGTERM`,l),process.off(`SIGINT`,l)};process.on(`SIGTERM`,l),process.on(`SIGINT`,l),c.once(`error`,e=>{u(),s(e)}),c.once(`exit`,(e,t)=>{if(u(),t){s(Error(`bundle process exited by signal ${t}`));return}let o=e??0,c=r()-i;if(o!==0&&c<=a){s(Error(`bundle process exited during startup with code ${o}`));return}n(o)})})}function nl(e){let t=e.scheduler??{setTimeout:(e,t)=>globalThis.setTimeout(e,t),clearTimeout:e=>globalThis.clearTimeout(e)},n=e.initialBackoffMs??1e3,r=e.maxBackoffMs??3e4,i=e.rng??Math.random,a=e.createWebSocket??(e=>new WebSocket(e)),o=e.logger??null,s=e.log,c=null,l=null,u=!1,d=n;function f(e,t,n){try{o?o[e](t,n):s?.(t)}catch{}}function p(){if(u)return;l!==null&&t.clearTimeout(l);let e=d;d=Math.min(d*2,r);let n=i(),a=Math.max(1,Math.floor(e*(1-n/2)));f(`debug`,`scheduling reconnect`,{backoffMs:a,ceilMs:e}),l=t.setTimeout(()=>{l=null,m().catch(e=>f(`warn`,`reconnect failed`,{error:String(e)}))},a)}async function m(){if(u)return;let t;try{t=await e.resolveWsUrl()}catch(e){f(`warn`,`resolveWsUrl threw`,{error:String(e)}),p();return}if(!t){p();return}let r=[];e.pid!==void 0&&r.push(`pid=${encodeURIComponent(String(e.pid))}`),e.connectionId&&r.push(`connectionId=${encodeURIComponent(e.connectionId)}`),e.connectionId&&e.displayName!==void 0&&e.clientName!==void 0&&e.colorSeed!==void 0&&(r.push(`displayName=${encodeURIComponent(e.displayName)}`),r.push(`clientName=${encodeURIComponent(e.clientName)}`),r.push(`colorSeed=${encodeURIComponent(e.colorSeed)}`));let i=r.length>0?`?${r.join(`&`)}`:``,o=`${t}/collab/keepalive${i}`;try{c=a(o)}catch(e){f(`warn`,`WebSocket constructor failed`,{url:o,error:String(e)}),c=null,p();return}c.addEventListener(`open`,()=>{f(`info`,`connected`,{url:t}),d=n}),c.addEventListener(`close`,()=>{u||(f(`info`,`disconnected`,{url:t}),c=null,p())}),c.addEventListener(`error`,()=>{f(`debug`,`websocket error observed`,{url:t,readyState:c?.readyState,reason:`error-event`})})}return queueMicrotask(()=>{m().catch(e=>f(`warn`,`initial connect failed`,{error:String(e)}))}),{close:()=>{if(!u&&(u=!0,l!==null&&(t.clearTimeout(l),l=null),c)){try{c.close()}catch{}c=null}},isConnected:()=>c!==null&&c.readyState===1}}var rl=class{append(e){this._buffer=this._buffer?Buffer.concat([this._buffer,e]):e}readMessage(){if(!this._buffer)return null;let e=this._buffer.indexOf(`
+`)}\n`)})}function Uc(){return new j(`set-url`).description(`Set the embeddings API endpoint for this project (project-local)`).argument(`<url>`,`OpenAI-compatible base URL, e.g. https://api.openai.com/v1`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim(),r=be(n);if(r!==null){process.stderr.write(r===`invalid-url`?`Not a valid URL: ${e}\n`:`Refusing an insecure endpoint: use https:// (http:// is allowed only for loopback endpoints). Got: ${e}\n`),process.exitCode=1;return}let i=V(t.cwd??process.cwd()),a=await lt({cwd:i,scope:`project-local`,patch:{search:{semantic:{baseUrl:n}}}});if(!a.ok){process.stderr.write(`Failed to set the embeddings endpoint — ${O(a.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint set to ${n} for ${i}\n`)})}function Wc(){return new j(`clear-url`).description(`Reset the embeddings API endpoint to the default OpenAI endpoint (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=V(e.cwd??process.cwd()),n=await lt({cwd:t,scope:`project-local`,patch:{search:{semantic:{baseUrl:r}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings endpoint — ${O(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint reset to ${r} for ${t}\n`)})}function Gc(){return new j(`set-model`).description(`Set the embeddings model for this project (project-local)`).argument(`<model>`,`Model id served by the configured endpoint, e.g. nomic-embed-text`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim();if(!n){process.stderr.write("Model id cannot be empty. Use `clear-model` to reset the default.\n"),process.exitCode=1;return}let r=V(t.cwd??process.cwd()),i=await lt({cwd:r,scope:`project-local`,patch:{search:{semantic:{model:n}}}});if(!i.ok){process.stderr.write(`Failed to set the embeddings model — ${O(i.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model set to ${n} for ${r}\n  Changing the model re-embeds the corpus on the next search.
+`)})}function Kc(){return new j(`clear-model`).description(`Reset the embeddings model to ${y} (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=V(e.cwd??process.cwd()),n=await lt({cwd:t,scope:`project-local`,patch:{search:{semantic:{model:y}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings model — ${O(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model reset to ${y} for ${t}\n`)})}function qc(e,t){return new j(e).description(`Turn semantic search ${t?`on`:`off`} for this project (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async n=>{let r=V(n.cwd??process.cwd()),i=await lt({cwd:r,scope:`project-local`,patch:{search:{semantic:{enabled:t}}}});if(!i.ok){process.stderr.write(`Failed to ${e} semantic search — ${O(i.error)}\n`),process.exitCode=1;return}if(process.stderr.write(`✓ Semantic search ${t?`enabled`:`disabled`} for ${r}\n`),t){let{present:e,notRequired:t}=await Lc(r,Ic(r).baseUrl);!e&&!t&&process.stderr.write("  Note: no API key set yet — run `ok embeddings set-key`. Until then, search stays lexical.\n")}})}function Jc(){return new j(`status`).description(`Show semantic-search capability: key presence, enabled, coverage, provider`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).option(`--json`,`Output JSON`,!1).action(async e=>{let n=V(e.cwd??process.cwd()),r=Ic(n),{present:i,notRequired:a,source:o}=await Lc(n,r.baseUrl),s=t({enabled:r.enabled,keyPresent:i,keyNotRequired:a}),c=s?await Rc(n):null;if(e.json){process.stdout.write(`${JSON.stringify({project:n,key:{present:i,notRequired:a,source:o},project_config:{enabled:r.enabled,capable:s,coverage:c?{embedded:c.embedded,total:c.total}:null,provider_error:c?{active:c.providerError===!0,reason:c.providerErrorReason??null}:null,provider:{baseUrl:r.baseUrl,model:r.model,dimensions:r.dimensions??null},transport:{maxBatchSize:r.maxBatchSize,maxBatchChars:r.maxBatchChars,docTimeoutMs:r.docTimeoutMs}}})}\n`);return}let l=i?`set for this endpoint — ${o===`env`?`environment (${rt})`:`~/.ok/secrets.yml`}`:a?`not required (loopback endpoint)`:`not set`,u=s?c?`${c.embedded} / ${c.total} pages embedded`:`server not running — start it to index (or it has not embedded yet)`:null,d=zc(s,c),f=[`Semantic search`,`  project:     ${n}`,``,`  This project:`,`    enabled:    ${r.enabled?`yes`:`no`}`,`    API key:    ${l}`,`    capability: ${d}`,...u?[`    coverage:   ${u}`]:[],`    provider:   ${r.baseUrl}`,`    model:      ${r.model}`,`    dimensions: ${r.dimensions??`auto (detected from the endpoint)`}`,`    batch size: ${r.maxBatchSize} chunks maximum per indexing request`,`    characters: ${r.maxBatchChars} approximate characters per indexing request`,`    timeout:    ${r.docTimeoutMs} ms per indexing request attempt`],p=[];!i&&!a&&p.push(`Set a key:  ok embeddings set-key   (or export ${rt})`),r.enabled||p.push(`Enable it:  ok embeddings enable   (in this project folder)`),p.length>0&&f.push(``,...p.map(e=>`  ${e}`)),process.stdout.write(`${f.join(`
+`)}\n`)})}function Yc(){return new j(`embeddings`).description(`Manage the semantic-search embeddings provider key + status`).addCommand(Bc()).addCommand(Vc()).addCommand(Uc()).addCommand(Wc()).addCommand(Gc()).addCommand(Kc()).addCommand(qc(`enable`,!0)).addCommand(qc(`disable`,!1)).addCommand(Hc()).addCommand(Jc())}const Xc=z(`Contents`,`Resources`,`cli`,`bin`,`ok.sh`),Zc=/Contents\/Resources\/cli\/dist\/cli\.mjs$/;function Qc(e,t,n){return e===`darwin`?[ue.stable,ue.beta].flatMap(e=>[z(t,`Applications`),`/Applications`].map(t=>z(t,`${e.productName}.app`,Xc))).find(e=>n.existsSync(e))??null:null}function $c(e,t,n){if(n!==`darwin`)return{proxy:!1,suppressedBy:`platform`};let r=e.OK_BUNDLE_PROXY?.toLowerCase();return r===`0`||r===`false`?{proxy:!1,suppressedBy:`env`}:t.includes(`--no-bundle-proxy`)?{proxy:!1,suppressedBy:`flag`}:typeof t[1]==`string`&&Zc.test(t[1])?{proxy:!1,suppressedBy:`self`}:{proxy:!0,suppressedBy:null}}function el(e){e.stderr.write(`${JSON.stringify({event:`mcp-bundle-proxy`,mode:e.mode,bundlePath:e.bundlePath,reason:e.reason,hint:`Suppress with --no-bundle-proxy or OK_BUNDLE_PROXY=0.`})}\n`)}function tl(e){el({stderr:e.stderr,mode:`bundled`,bundlePath:e.bundlePath,reason:null});let t=e.spawnImpl??Kr,n=e.exitProcess??(e=>process.exit(e)),r=e.now??(()=>Date.now()),i=r(),a=e.startupFailureWindowMs??1e3;return new Promise((o,s)=>{let c=t(e.bundlePath,e.argv.filter(e=>e!==`--no-bundle-proxy`),{env:{...e.env,OK_BUNDLE_PROXY:`0`},stdio:`inherit`,windowsHide:!0}),l=e=>{c.kill(e)},u=()=>{process.off(`SIGTERM`,l),process.off(`SIGINT`,l)};process.on(`SIGTERM`,l),process.on(`SIGINT`,l),c.once(`error`,e=>{u(),s(e)}),c.once(`exit`,(e,t)=>{if(u(),t){s(Error(`bundle process exited by signal ${t}`));return}let o=e??0,c=r()-i;if(o!==0&&c<=a){s(Error(`bundle process exited during startup with code ${o}`));return}n(o)})})}function nl(e){let t=e.scheduler??{setTimeout:(e,t)=>globalThis.setTimeout(e,t),clearTimeout:e=>globalThis.clearTimeout(e)},n=e.initialBackoffMs??1e3,r=e.maxBackoffMs??3e4,i=e.rng??Math.random,a=e.createWebSocket??(e=>new WebSocket(e)),o=e.logger??null,s=e.log,c=null,l=null,u=!1,d=n;function f(e,t,n){try{o?o[e](t,n):s?.(t)}catch{}}function p(){if(u)return;l!==null&&t.clearTimeout(l);let e=d;d=Math.min(d*2,r);let n=i(),a=Math.max(1,Math.floor(e*(1-n/2)));f(`debug`,`scheduling reconnect`,{backoffMs:a,ceilMs:e}),l=t.setTimeout(()=>{l=null,m().catch(e=>f(`warn`,`reconnect failed`,{error:String(e)}))},a)}async function m(){if(u)return;let t;try{t=await e.resolveWsUrl()}catch(e){f(`warn`,`resolveWsUrl threw`,{error:String(e)}),p();return}if(!t){p();return}let r=[];e.pid!==void 0&&r.push(`pid=${encodeURIComponent(String(e.pid))}`),e.connectionId&&r.push(`connectionId=${encodeURIComponent(e.connectionId)}`),e.connectionId&&e.displayName!==void 0&&e.clientName!==void 0&&e.colorSeed!==void 0&&(r.push(`displayName=${encodeURIComponent(e.displayName)}`),r.push(`clientName=${encodeURIComponent(e.clientName)}`),r.push(`colorSeed=${encodeURIComponent(e.colorSeed)}`));let i=r.length>0?`?${r.join(`&`)}`:``,o=`${t}/collab/keepalive${i}`;try{c=a(o)}catch(e){f(`warn`,`WebSocket constructor failed`,{url:o,error:String(e)}),c=null,p();return}c.addEventListener(`open`,()=>{f(`info`,`connected`,{url:t}),d=n}),c.addEventListener(`close`,()=>{u||(f(`info`,`disconnected`,{url:t}),c=null,p())}),c.addEventListener(`error`,()=>{f(`debug`,`websocket error observed`,{url:t,readyState:c?.readyState,reason:`error-event`})})}return queueMicrotask(()=>{m().catch(e=>f(`warn`,`initial connect failed`,{error:String(e)}))}),{close:()=>{if(!u&&(u=!0,l!==null&&(t.clearTimeout(l),l=null),c)){try{c.close()}catch{}c=null}},isConnected:()=>c!==null&&c.readyState===1}}var rl=class{append(e){this._buffer=this._buffer?Buffer.concat([this._buffer,e]):e}readMessage(){if(!this._buffer)return null;let e=this._buffer.indexOf(`
 `);if(e===-1)return null;let t=this._buffer.toString(`utf8`,0,e).replace(/\r$/,``);return this._buffer=this._buffer.subarray(e+1),il(t)}clear(){this._buffer=void 0}};function il(e){return Ct.parse(JSON.parse(e))}function al(e){return JSON.stringify(e)+`
-`}var ol=class{constructor(e=Qr.stdin,t=Qr.stdout){this._stdin=e,this._stdout=t,this._readBuffer=new rl,this._started=!1,this._ondata=e=>{this._readBuffer.append(e),this.processReadBuffer()},this._onerror=e=>{this.onerror?.(e)}}async start(){if(this._started)throw Error(`StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.`);this._started=!0,this._stdin.on(`data`,this._ondata),this._stdin.on(`error`,this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e)}catch(e){this.onerror?.(e)}}async close(){this._stdin.off(`data`,this._ondata),this._stdin.off(`error`,this._onerror),this._stdin.listenerCount(`data`)===0&&this._stdin.pause(),this._readBuffer.clear(),this.onclose?.()}send(e){return new Promise(t=>{let n=al(e);this._stdout.write(n)?t():this._stdout.once(`drain`,t)})}};function sl(e){if(e.platform!==`darwin`)return{kind:`unchanged`};let t;try{t=e.realpath(e.bundleAnchorPath)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}let n;try{n=e.statInode(t)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}return n===e.currentInode?{kind:`unchanged`}:{kind:`replaced`,currentInode:e.currentInode,onDiskInode:n}}function cl(e){let t=e.setInterval??setInterval,n=e.clearInterval??clearInterval,r=e.intervalMs??3e5,i=!0,a=!1,o=!1,s=t(()=>{if(!i)return;let t;try{t=e.detect()}catch(t){e.log(`bundle identity check threw unexpectedly (contract violation): ${t instanceof Error?t.message:String(t)}`);return}if(t.kind===`unreadable`){o||(o=!0,e.log(`bundle identity check unreadable${t.reason?`: ${t.reason}`:``} — will retry on next tick`));return}o&&(o=!1,e.log(`bundle identity check recovered from unreadable`)),t.kind!==`unchanged`&&(i=!1,e.onReplaced(t))},r);return typeof s.unref==`function`&&s.unref(),{stop:()=>{a||(a=!0,i=!1,n(s))}}}function ll(e,t){let n;try{n=t.realpathSync(e)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (realpath failed): ${e instanceof Error?e.message:String(e)}`);return}let r;try{r=t.statInoSync(n)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (stat failed): ${e instanceof Error?e.message:String(e)}`);return}return{resolvedPath:n,inode:r}}function ul(e){let t=e.scheduler??{setInterval:(e,t)=>globalThis.setInterval(e,t),clearInterval:e=>globalThis.clearInterval(e)},n=e.getPpid();if(n<=1)return{stop:()=>{}};let r=!1,i=t.setInterval(()=>{if(r)return;let a=e.getPpid();a!==n&&(r=!0,t.clearInterval(i),e.onHostGone(`host process exited (ppid ${n} -> ${a})`))},e.intervalMs??1e3);return i.unref?.(),{stop:()=>t.clearInterval(i)}}function dl(e){let t=t=>{try{e.log(t)}catch{}},n=e.transport.onclose;e.transport.onclose=()=>{t(`[mcp] stdio transport closed (internal shutdown)`),n?.()},e.stdin.once(`end`,()=>t(`[mcp] stdin EOF (host closed pipe)`)),e.stdin.once(`close`,()=>t(`[mcp] stdin closed`)),e.process.on(`exit`,e=>{t(`[mcp] exit code=${e}`)}),e.process.on(`uncaughtExceptionMonitor`,(e,n)=>{let r=e instanceof Error?e.stack??e.message:String(e);t(`[mcp] uncaughtException origin=${n}: ${r}`)})}function fl(e){return e?e instanceof Headers?Object.fromEntries(e.entries()):Array.isArray(e)?Object.fromEntries(e):{...e}:{}}function pl(e=fetch,t){return t?async(n,r)=>e(n,{...t,...r,headers:r?.headers?{...fl(t.headers),...fl(r.headers)}:t.headers}):e}let ml;ml=globalThis.crypto?.webcrypto??globalThis.crypto??import(`node:crypto`).then(e=>e.webcrypto);async function hl(e){return(await ml).getRandomValues(new Uint8Array(e))}async function gl(e){let t=``;for(;t.length<e;){let n=await hl(e-t.length);for(let e of n)e<198&&(t+=`abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~`[e%66])}return t}async function _l(e){return await gl(e)}async function vl(e){let t=await(await ml).subtle.digest(`SHA-256`,new TextEncoder().encode(e));return btoa(String.fromCharCode(...new Uint8Array(t))).replace(/\//g,`_`).replace(/\+/g,`-`).replace(/=/g,``)}async function yl(e){if(e||=43,e<43||e>128)throw`Expected a length between 43 and 128. Received ${e}.`;let t=await _l(e);return{code_verifier:t,code_challenge:await vl(t)}}const X=pe().superRefine((e,t)=>{if(!URL.canParse(e))return t.addIssue({code:xi.custom,message:`URL must be parseable`,fatal:!0}),m}).refine(e=>{let t=new URL(e);return t.protocol!==`javascript:`&&t.protocol!==`data:`&&t.protocol!==`vbscript:`},{message:`URL cannot use javascript:, data:, or vbscript: scheme`}),bl=ve({resource:E().url(),authorization_servers:T(X).optional(),jwks_uri:E().url().optional(),scopes_supported:T(E()).optional(),bearer_methods_supported:T(E()).optional(),resource_signing_alg_values_supported:T(E()).optional(),resource_name:E().optional(),resource_documentation:E().optional(),resource_policy_uri:E().url().optional(),resource_tos_uri:E().url().optional(),tls_client_certificate_bound_access_tokens:w().optional(),authorization_details_types_supported:T(E()).optional(),dpop_signing_alg_values_supported:T(E()).optional(),dpop_bound_access_tokens_required:w().optional()}),xl=ve({issuer:E(),authorization_endpoint:X,token_endpoint:X,registration_endpoint:X.optional(),scopes_supported:T(E()).optional(),response_types_supported:T(E()),response_modes_supported:T(E()).optional(),grant_types_supported:T(E()).optional(),token_endpoint_auth_methods_supported:T(E()).optional(),token_endpoint_auth_signing_alg_values_supported:T(E()).optional(),service_documentation:X.optional(),revocation_endpoint:X.optional(),revocation_endpoint_auth_methods_supported:T(E()).optional(),revocation_endpoint_auth_signing_alg_values_supported:T(E()).optional(),introspection_endpoint:E().optional(),introspection_endpoint_auth_methods_supported:T(E()).optional(),introspection_endpoint_auth_signing_alg_values_supported:T(E()).optional(),code_challenge_methods_supported:T(E()).optional(),client_id_metadata_document_supported:w().optional()}),Sl=ve({issuer:E(),authorization_endpoint:X,token_endpoint:X,userinfo_endpoint:X.optional(),jwks_uri:X,registration_endpoint:X.optional(),scopes_supported:T(E()).optional(),response_types_supported:T(E()),response_modes_supported:T(E()).optional(),grant_types_supported:T(E()).optional(),acr_values_supported:T(E()).optional(),subject_types_supported:T(E()),id_token_signing_alg_values_supported:T(E()),id_token_encryption_alg_values_supported:T(E()).optional(),id_token_encryption_enc_values_supported:T(E()).optional(),userinfo_signing_alg_values_supported:T(E()).optional(),userinfo_encryption_alg_values_supported:T(E()).optional(),userinfo_encryption_enc_values_supported:T(E()).optional(),request_object_signing_alg_values_supported:T(E()).optional(),request_object_encryption_alg_values_supported:T(E()).optional(),request_object_encryption_enc_values_supported:T(E()).optional(),token_endpoint_auth_methods_supported:T(E()).optional(),token_endpoint_auth_signing_alg_values_supported:T(E()).optional(),display_values_supported:T(E()).optional(),claim_types_supported:T(E()).optional(),claims_supported:T(E()).optional(),service_documentation:E().optional(),claims_locales_supported:T(E()).optional(),ui_locales_supported:T(E()).optional(),claims_parameter_supported:w().optional(),request_parameter_supported:w().optional(),request_uri_parameter_supported:w().optional(),require_request_uri_registration:w().optional(),op_policy_uri:X.optional(),op_tos_uri:X.optional(),client_id_metadata_document_supported:w().optional()}),Cl=D({...Sl.shape,...xl.pick({code_challenge_methods_supported:!0}).shape}),wl=D({access_token:E(),id_token:E().optional(),token_type:E(),expires_in:Ci().optional(),scope:E().optional(),refresh_token:E().optional()}).strip(),Tl=D({error:E(),error_description:E().optional(),error_uri:E().optional()}),El=X.optional().or(Te(``).transform(()=>void 0)),Dl=D({redirect_uris:T(X),token_endpoint_auth_method:E().optional(),grant_types:T(E()).optional(),response_types:T(E()).optional(),client_name:E().optional(),client_uri:X.optional(),logo_uri:El,scope:E().optional(),contacts:T(E()).optional(),tos_uri:El,policy_uri:E().optional(),jwks_uri:X.optional(),jwks:u().optional(),software_id:E().optional(),software_version:E().optional(),software_statement:E().optional()}).strip(),Ol=D({client_id:E(),client_secret:E().optional(),client_id_issued_at:Ce().optional(),client_secret_expires_at:Ce().optional()}).strip(),kl=Dl.merge(Ol);D({error:E(),error_description:E().optional()}).strip(),D({token:E(),token_type_hint:E().optional()}).strip();function Al(e){let t=typeof e==`string`?new URL(e):new URL(e.href);return t.hash=``,t}function jl({requestedResource:e,configuredResource:t}){let n=typeof e==`string`?new URL(e):new URL(e.href),r=typeof t==`string`?new URL(t):new URL(t.href);if(n.origin!==r.origin||n.pathname.length<r.pathname.length)return!1;let i=n.pathname.endsWith(`/`)?n.pathname:n.pathname+`/`,a=r.pathname.endsWith(`/`)?r.pathname:r.pathname+`/`;return i.startsWith(a)}var Z=class extends Error{constructor(e,t){super(e),this.errorUri=t,this.name=this.constructor.name}toResponseObject(){let e={error:this.errorCode,error_description:this.message};return this.errorUri&&(e.error_uri=this.errorUri),e}get errorCode(){return this.constructor.errorCode}},Ml=class extends Z{};Ml.errorCode=`invalid_request`;var Nl=class extends Z{};Nl.errorCode=`invalid_client`;var Pl=class extends Z{};Pl.errorCode=`invalid_grant`;var Fl=class extends Z{};Fl.errorCode=`unauthorized_client`;var Il=class extends Z{};Il.errorCode=`unsupported_grant_type`;var Ll=class extends Z{};Ll.errorCode=`invalid_scope`;var Rl=class extends Z{};Rl.errorCode=`access_denied`;var zl=class extends Z{};zl.errorCode=`server_error`;var Bl=class extends Z{};Bl.errorCode=`temporarily_unavailable`;var Vl=class extends Z{};Vl.errorCode=`unsupported_response_type`;var Hl=class extends Z{};Hl.errorCode=`unsupported_token_type`;var Ul=class extends Z{};Ul.errorCode=`invalid_token`;var Wl=class extends Z{};Wl.errorCode=`method_not_allowed`;var Gl=class extends Z{};Gl.errorCode=`too_many_requests`;var Kl=class extends Z{};Kl.errorCode=`invalid_client_metadata`;var ql=class extends Z{};ql.errorCode=`insufficient_scope`;var Jl=class extends Z{};Jl.errorCode=`invalid_target`;const Yl={[Ml.errorCode]:Ml,[Nl.errorCode]:Nl,[Pl.errorCode]:Pl,[Fl.errorCode]:Fl,[Il.errorCode]:Il,[Ll.errorCode]:Ll,[Rl.errorCode]:Rl,[zl.errorCode]:zl,[Bl.errorCode]:Bl,[Vl.errorCode]:Vl,[Hl.errorCode]:Hl,[Ul.errorCode]:Ul,[Wl.errorCode]:Wl,[Gl.errorCode]:Gl,[Kl.errorCode]:Kl,[ql.errorCode]:ql,[Jl.errorCode]:Jl};var Xl=class extends Error{constructor(e){super(e??`Unauthorized`)}};function Zl(e){return[`client_secret_basic`,`client_secret_post`,`none`].includes(e)}const Ql=`code`,$l=`S256`;function eu(e,t){let n=e.client_secret!==void 0;return`token_endpoint_auth_method`in e&&e.token_endpoint_auth_method&&Zl(e.token_endpoint_auth_method)&&(t.length===0||t.includes(e.token_endpoint_auth_method))?e.token_endpoint_auth_method:t.length===0?n?`client_secret_basic`:`none`:n&&t.includes(`client_secret_basic`)?`client_secret_basic`:n&&t.includes(`client_secret_post`)?`client_secret_post`:t.includes(`none`)?`none`:n?`client_secret_post`:`none`}function tu(e,t,n,r){let{client_id:i,client_secret:a}=t;switch(e){case`client_secret_basic`:nu(i,a,n);return;case`client_secret_post`:ru(i,a,r);return;case`none`:iu(i,r);return;default:throw Error(`Unsupported client authentication method: ${e}`)}}function nu(e,t,n){if(!t)throw Error(`client_secret_basic authentication requires a client_secret`);let r=btoa(`${e}:${t}`);n.set(`Authorization`,`Basic ${r}`)}function ru(e,t,n){n.set(`client_id`,e),t&&n.set(`client_secret`,t)}function iu(e,t){t.set(`client_id`,e)}async function au(e){let t=e instanceof Response?e.status:void 0,n=e instanceof Response?await e.text():e;try{let{error:e,error_description:t,error_uri:r}=Tl.parse(JSON.parse(n));return new(Yl[e]||zl)(t||``,r)}catch(e){return new zl(`${t?`HTTP ${t}: `:``}Invalid OAuth error response: ${e}. Raw body: ${n}`)}}async function ou(e,t){try{return await su(e,t)}catch(n){if(n instanceof Nl||n instanceof Fl)return await e.invalidateCredentials?.(`all`),await su(e,t);if(n instanceof Pl)return await e.invalidateCredentials?.(`tokens`),await su(e,t);throw n}}async function su(e,{serverUrl:t,authorizationCode:n,scope:r,resourceMetadataUrl:i,fetchFn:a}){let o=await e.discoveryState?.(),s,c,l,u=i;if(!u&&o?.resourceMetadataUrl&&(u=new URL(o.resourceMetadataUrl)),o?.authorizationServerUrl){if(c=o.authorizationServerUrl,s=o.resourceMetadata,l=o.authorizationServerMetadata??await yu(c,{fetchFn:a}),!s)try{s=await fu(t,{resourceMetadataUrl:u},a)}catch{}(l!==o.authorizationServerMetadata||s!==o.resourceMetadata)&&await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}else{let n=await bu(t,{resourceMetadataUrl:u,fetchFn:a});c=n.authorizationServerUrl,l=n.authorizationServerMetadata,s=n.resourceMetadata,await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}let d=await lu(t,e,s),f=r||s?.scopes_supported?.join(` `)||e.clientMetadata.scope,p=await Promise.resolve(e.clientInformation());if(!p){if(n!==void 0)throw Error(`Existing OAuth client information is required when exchanging an authorization code`);let t=l?.client_id_metadata_document_supported===!0,r=e.clientMetadataUrl;if(r&&!cu(r))throw new Kl(`clientMetadataUrl must be a valid HTTPS URL with a non-root pathname, got: ${r}`);if(t&&r)p={client_id:r},await e.saveClientInformation?.(p);else{if(!e.saveClientInformation)throw Error(`OAuth client information must be saveable for dynamic registration`);let t=await Eu(c,{metadata:l,clientMetadata:e.clientMetadata,scope:f,fetchFn:a});await e.saveClientInformation(t),p=t}}let m=!e.redirectUrl;if(n!==void 0||m){let t=await Tu(e,c,{metadata:l,resource:d,authorizationCode:n,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}let h=await e.tokens();if(h?.refresh_token)try{let t=await wu(c,{metadata:l,clientInformation:p,refreshToken:h.refresh_token,resource:d,addClientAuthentication:e.addClientAuthentication,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}catch(e){if(!(!(e instanceof Z)||e instanceof zl))throw e}let g=e.state?await e.state():void 0,{authorizationUrl:_,codeVerifier:v}=await xu(c,{metadata:l,clientInformation:p,state:g,redirectUrl:e.redirectUrl,scope:f,resource:d});return await e.saveCodeVerifier(v),await e.redirectToAuthorization(_),`REDIRECT`}function cu(e){if(!e)return!1;try{let t=new URL(e);return t.protocol===`https:`&&t.pathname!==`/`}catch{return!1}}async function lu(e,t,n){let r=Al(e);if(t.validateResourceURL)return await t.validateResourceURL(r,n?.resource);if(n){if(!jl({requestedResource:r,configuredResource:n.resource}))throw Error(`Protected resource ${n.resource} does not match expected ${r} (or origin)`);return new URL(n.resource)}}function uu(e){let t=e.headers.get(`WWW-Authenticate`);if(!t)return{};let[n,r]=t.split(` `);if(n.toLowerCase()!==`bearer`||!r)return{};let i=du(e,`resource_metadata`)||void 0,a;if(i)try{a=new URL(i)}catch{}let o=du(e,`scope`)||void 0,s=du(e,`error`)||void 0;return{resourceMetadataUrl:a,scope:o,error:s}}function du(e,t){let n=e.headers.get(`WWW-Authenticate`);if(!n)return null;let r=RegExp(`${t}=(?:"([^"]+)"|([^\\s,]+))`),i=n.match(r);return i?i[1]||i[2]:null}async function fu(e,t,n=fetch){let r=await _u(e,`oauth-protected-resource`,n,{protocolVersion:t?.protocolVersion,metadataUrl:t?.resourceMetadataUrl});if(!r||r.status===404)throw await r?.body?.cancel(),Error(`Resource server does not implement OAuth 2.0 Protected Resource Metadata.`);if(!r.ok)throw await r.body?.cancel(),Error(`HTTP ${r.status} trying to load well-known OAuth protected resource metadata.`);return bl.parse(await r.json())}async function pu(e,t,n=fetch){try{return await n(e,{headers:t})}catch(r){if(r instanceof TypeError)return t?pu(e,void 0,n):void 0;throw r}}function mu(e,t=``,n={}){return t.endsWith(`/`)&&(t=t.slice(0,-1)),n.prependPathname?`${t}/.well-known/${e}`:`/.well-known/${e}${t}`}async function hu(e,t,n=fetch){return await pu(e,{"MCP-Protocol-Version":t},n)}function gu(e,t){return!e||e.status>=400&&e.status<500&&t!==`/`}async function _u(e,t,n,r){let i=new URL(e),a=r?.protocolVersion??`2025-11-25`,o;if(r?.metadataUrl)o=new URL(r.metadataUrl);else{let e=mu(t,i.pathname);o=new URL(e,r?.metadataServerUrl??i),o.search=i.search}let s=await hu(o,a,n);return!r?.metadataUrl&&gu(s,i.pathname)&&(s=await hu(new URL(`/.well-known/${t}`,i),a,n)),s}function vu(e){let t=typeof e==`string`?new URL(e):e,n=t.pathname!==`/`,r=[];if(!n)return r.push({url:new URL(`/.well-known/oauth-authorization-server`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration`,t.origin),type:`oidc`}),r;let i=t.pathname;return i.endsWith(`/`)&&(i=i.slice(0,-1)),r.push({url:new URL(`/.well-known/oauth-authorization-server${i}`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration${i}`,t.origin),type:`oidc`}),r.push({url:new URL(`${i}/.well-known/openid-configuration`,t.origin),type:`oidc`}),r}async function yu(e,{fetchFn:t=fetch,protocolVersion:n=on}={}){let r={"MCP-Protocol-Version":n,Accept:`application/json`},i=vu(e);for(let{url:e,type:n}of i){let i=await pu(e,r,t);if(i){if(!i.ok){if(await i.body?.cancel(),i.status>=400&&i.status<500)continue;throw Error(`HTTP ${i.status} trying to load ${n===`oauth`?`OAuth`:`OpenID provider`} metadata from ${e}`)}return n===`oauth`?xl.parse(await i.json()):Cl.parse(await i.json())}}}async function bu(e,t){let n,r;try{n=await fu(e,{resourceMetadataUrl:t?.resourceMetadataUrl},t?.fetchFn),n.authorization_servers&&n.authorization_servers.length>0&&(r=n.authorization_servers[0])}catch{}r||=String(new URL(`/`,e));let i=await yu(r,{fetchFn:t?.fetchFn});return{authorizationServerUrl:r,authorizationServerMetadata:i,resourceMetadata:n}}async function xu(e,{metadata:t,clientInformation:n,redirectUrl:r,scope:i,state:a,resource:o}){let s;if(t){if(s=new URL(t.authorization_endpoint),!t.response_types_supported.includes(Ql))throw Error(`Incompatible auth server: does not support response type ${Ql}`);if(t.code_challenge_methods_supported&&!t.code_challenge_methods_supported.includes($l))throw Error(`Incompatible auth server: does not support code challenge method ${$l}`)}else s=new URL(`/authorize`,e);let c=await yl(),l=c.code_verifier,u=c.code_challenge;return s.searchParams.set(`response_type`,Ql),s.searchParams.set(`client_id`,n.client_id),s.searchParams.set(`code_challenge`,u),s.searchParams.set(`code_challenge_method`,$l),s.searchParams.set(`redirect_uri`,String(r)),a&&s.searchParams.set(`state`,a),i&&s.searchParams.set(`scope`,i),i?.includes(`offline_access`)&&s.searchParams.append(`prompt`,`consent`),o&&s.searchParams.set(`resource`,o.href),{authorizationUrl:s,codeVerifier:l}}function Su(e,t,n){return new URLSearchParams({grant_type:`authorization_code`,code:e,code_verifier:t,redirect_uri:String(n)})}async function Cu(e,{metadata:t,tokenRequestParams:n,clientInformation:r,addClientAuthentication:i,resource:a,fetchFn:o}){let s=t?.token_endpoint?new URL(t.token_endpoint):new URL(`/token`,e),c=new Headers({"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`});a&&n.set(`resource`,a.href),i?await i(c,n,s,t):r&&tu(eu(r,t?.token_endpoint_auth_methods_supported??[]),r,c,n);let l=await(o??fetch)(s,{method:`POST`,headers:c,body:n});if(!l.ok)throw await au(l);return wl.parse(await l.json())}async function wu(e,{metadata:t,clientInformation:n,refreshToken:r,resource:i,addClientAuthentication:a,fetchFn:o}){return{refresh_token:r,...await Cu(e,{metadata:t,tokenRequestParams:new URLSearchParams({grant_type:`refresh_token`,refresh_token:r}),clientInformation:n,addClientAuthentication:a,resource:i,fetchFn:o})}}async function Tu(e,t,{metadata:n,resource:r,authorizationCode:i,fetchFn:a}={}){let o=e.clientMetadata.scope,s;if(e.prepareTokenRequest&&(s=await e.prepareTokenRequest(o)),!s){if(!i)throw Error(`Either provider.prepareTokenRequest() or authorizationCode is required`);if(!e.redirectUrl)throw Error(`redirectUrl is required for authorization_code flow`);s=Su(i,await e.codeVerifier(),e.redirectUrl)}let c=await e.clientInformation();return Cu(t,{metadata:n,tokenRequestParams:s,clientInformation:c??void 0,addClientAuthentication:e.addClientAuthentication,resource:r,fetchFn:a})}async function Eu(e,{metadata:t,clientMetadata:n,scope:r,fetchFn:i}){let a;if(t){if(!t.registration_endpoint)throw Error(`Incompatible auth server: does not support dynamic client registration`);a=new URL(t.registration_endpoint)}else a=new URL(`/register`,e);let o=await(i??fetch)(a,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({...n,...r===void 0?{}:{scope:r}})});if(!o.ok)throw await au(o);return kl.parse(await o.json())}var Du=class extends Error{constructor(e,t){super(e),this.name=`ParseError`,this.type=t.type,this.field=t.field,this.value=t.value,this.line=t.line}};function Ou(e){}function ku(e){if(typeof e==`function`)throw TypeError("`config` must be an object, got a function instead. Did you mean `createParser({onEvent: fn})`?");let{onEvent:t=Ou,onError:n=Ou,onRetry:r=Ou,onComment:i,maxBufferSize:a}=e,o=[],s=0,c=!0,l,u=``,d=0,f,p=!1;function m(e){if(p)throw Error("Cannot feed parser: it was terminated after exceeding the configured max buffer size. Call `reset()` to resume parsing.");if(c&&(c=!1,e.charCodeAt(0)===239&&e.charCodeAt(1)===187&&e.charCodeAt(2)===191&&(e=e.slice(3))),o.length===0){let t=g(e);t!==``&&(o.push(t),s=t.length),h();return}if(e.indexOf(`
+`}var ol=class{constructor(e=Qr.stdin,t=Qr.stdout){this._stdin=e,this._stdout=t,this._readBuffer=new rl,this._started=!1,this._ondata=e=>{this._readBuffer.append(e),this.processReadBuffer()},this._onerror=e=>{this.onerror?.(e)}}async start(){if(this._started)throw Error(`StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.`);this._started=!0,this._stdin.on(`data`,this._ondata),this._stdin.on(`error`,this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e)}catch(e){this.onerror?.(e)}}async close(){this._stdin.off(`data`,this._ondata),this._stdin.off(`error`,this._onerror),this._stdin.listenerCount(`data`)===0&&this._stdin.pause(),this._readBuffer.clear(),this.onclose?.()}send(e){return new Promise(t=>{let n=al(e);this._stdout.write(n)?t():this._stdout.once(`drain`,t)})}};function sl(e){if(e.platform!==`darwin`)return{kind:`unchanged`};let t;try{t=e.realpath(e.bundleAnchorPath)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}let n;try{n=e.statInode(t)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}return n===e.currentInode?{kind:`unchanged`}:{kind:`replaced`,currentInode:e.currentInode,onDiskInode:n}}function cl(e){let t=e.setInterval??setInterval,n=e.clearInterval??clearInterval,r=e.intervalMs??3e5,i=!0,a=!1,o=!1,s=t(()=>{if(!i)return;let t;try{t=e.detect()}catch(t){e.log(`bundle identity check threw unexpectedly (contract violation): ${t instanceof Error?t.message:String(t)}`);return}if(t.kind===`unreadable`){o||(o=!0,e.log(`bundle identity check unreadable${t.reason?`: ${t.reason}`:``} — will retry on next tick`));return}o&&(o=!1,e.log(`bundle identity check recovered from unreadable`)),t.kind!==`unchanged`&&(i=!1,e.onReplaced(t))},r);return typeof s.unref==`function`&&s.unref(),{stop:()=>{a||(a=!0,i=!1,n(s))}}}function ll(e,t){let n;try{n=t.realpathSync(e)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (realpath failed): ${e instanceof Error?e.message:String(e)}`);return}let r;try{r=t.statInoSync(n)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (stat failed): ${e instanceof Error?e.message:String(e)}`);return}return{resolvedPath:n,inode:r}}function ul(e){let t=e.scheduler??{setInterval:(e,t)=>globalThis.setInterval(e,t),clearInterval:e=>globalThis.clearInterval(e)},n=e.getPpid();if(n<=1)return{stop:()=>{}};let r=!1,i=t.setInterval(()=>{if(r)return;let a=e.getPpid();a!==n&&(r=!0,t.clearInterval(i),e.onHostGone(`host process exited (ppid ${n} -> ${a})`))},e.intervalMs??1e3);return i.unref?.(),{stop:()=>t.clearInterval(i)}}function dl(e){let t=t=>{try{e.log(t)}catch{}},n=e.transport.onclose;e.transport.onclose=()=>{t(`[mcp] stdio transport closed (internal shutdown)`),n?.()},e.stdin.once(`end`,()=>t(`[mcp] stdin EOF (host closed pipe)`)),e.stdin.once(`close`,()=>t(`[mcp] stdin closed`)),e.process.on(`exit`,e=>{t(`[mcp] exit code=${e}`)}),e.process.on(`uncaughtExceptionMonitor`,(e,n)=>{let r=e instanceof Error?e.stack??e.message:String(e);t(`[mcp] uncaughtException origin=${n}: ${r}`)})}function fl(e){return e?e instanceof Headers?Object.fromEntries(e.entries()):Array.isArray(e)?Object.fromEntries(e):{...e}:{}}function pl(e=fetch,t){return t?async(n,r)=>e(n,{...t,...r,headers:r?.headers?{...fl(t.headers),...fl(r.headers)}:t.headers}):e}let ml;ml=globalThis.crypto?.webcrypto??globalThis.crypto??import(`node:crypto`).then(e=>e.webcrypto);async function hl(e){return(await ml).getRandomValues(new Uint8Array(e))}async function gl(e){let t=``;for(;t.length<e;){let n=await hl(e-t.length);for(let e of n)e<198&&(t+=`abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~`[e%66])}return t}async function _l(e){return await gl(e)}async function vl(e){let t=await(await ml).subtle.digest(`SHA-256`,new TextEncoder().encode(e));return btoa(String.fromCharCode(...new Uint8Array(t))).replace(/\//g,`_`).replace(/\+/g,`-`).replace(/=/g,``)}async function yl(e){if(e||=43,e<43||e>128)throw`Expected a length between 43 and 128. Received ${e}.`;let t=await _l(e);return{code_verifier:t,code_challenge:await vl(t)}}const X=Se().superRefine((e,t)=>{if(!URL.canParse(e))return t.addIssue({code:xi.custom,message:`URL must be parseable`,fatal:!0}),_e}).refine(e=>{let t=new URL(e);return t.protocol!==`javascript:`&&t.protocol!==`data:`&&t.protocol!==`vbscript:`},{message:`URL cannot use javascript:, data:, or vbscript: scheme`}),bl=we({resource:D().url(),authorization_servers:w(X).optional(),jwks_uri:D().url().optional(),scopes_supported:w(D()).optional(),bearer_methods_supported:w(D()).optional(),resource_signing_alg_values_supported:w(D()).optional(),resource_name:D().optional(),resource_documentation:D().optional(),resource_policy_uri:D().url().optional(),resource_tos_uri:D().url().optional(),tls_client_certificate_bound_access_tokens:T().optional(),authorization_details_types_supported:w(D()).optional(),dpop_signing_alg_values_supported:w(D()).optional(),dpop_bound_access_tokens_required:T().optional()}),xl=we({issuer:D(),authorization_endpoint:X,token_endpoint:X,registration_endpoint:X.optional(),scopes_supported:w(D()).optional(),response_types_supported:w(D()),response_modes_supported:w(D()).optional(),grant_types_supported:w(D()).optional(),token_endpoint_auth_methods_supported:w(D()).optional(),token_endpoint_auth_signing_alg_values_supported:w(D()).optional(),service_documentation:X.optional(),revocation_endpoint:X.optional(),revocation_endpoint_auth_methods_supported:w(D()).optional(),revocation_endpoint_auth_signing_alg_values_supported:w(D()).optional(),introspection_endpoint:D().optional(),introspection_endpoint_auth_methods_supported:w(D()).optional(),introspection_endpoint_auth_signing_alg_values_supported:w(D()).optional(),code_challenge_methods_supported:w(D()).optional(),client_id_metadata_document_supported:T().optional()}),Sl=we({issuer:D(),authorization_endpoint:X,token_endpoint:X,userinfo_endpoint:X.optional(),jwks_uri:X,registration_endpoint:X.optional(),scopes_supported:w(D()).optional(),response_types_supported:w(D()),response_modes_supported:w(D()).optional(),grant_types_supported:w(D()).optional(),acr_values_supported:w(D()).optional(),subject_types_supported:w(D()),id_token_signing_alg_values_supported:w(D()),id_token_encryption_alg_values_supported:w(D()).optional(),id_token_encryption_enc_values_supported:w(D()).optional(),userinfo_signing_alg_values_supported:w(D()).optional(),userinfo_encryption_alg_values_supported:w(D()).optional(),userinfo_encryption_enc_values_supported:w(D()).optional(),request_object_signing_alg_values_supported:w(D()).optional(),request_object_encryption_alg_values_supported:w(D()).optional(),request_object_encryption_enc_values_supported:w(D()).optional(),token_endpoint_auth_methods_supported:w(D()).optional(),token_endpoint_auth_signing_alg_values_supported:w(D()).optional(),display_values_supported:w(D()).optional(),claim_types_supported:w(D()).optional(),claims_supported:w(D()).optional(),service_documentation:D().optional(),claims_locales_supported:w(D()).optional(),ui_locales_supported:w(D()).optional(),claims_parameter_supported:T().optional(),request_parameter_supported:T().optional(),request_uri_parameter_supported:T().optional(),require_request_uri_registration:T().optional(),op_policy_uri:X.optional(),op_tos_uri:X.optional(),client_id_metadata_document_supported:T().optional()}),Cl=E({...Sl.shape,...xl.pick({code_challenge_methods_supported:!0}).shape}),wl=E({access_token:D(),id_token:D().optional(),token_type:D(),expires_in:Ci().optional(),scope:D().optional(),refresh_token:D().optional()}).strip(),Tl=E({error:D(),error_description:D().optional(),error_uri:D().optional()}),El=X.optional().or(ye(``).transform(()=>void 0)),Dl=E({redirect_uris:w(X),token_endpoint_auth_method:D().optional(),grant_types:w(D()).optional(),response_types:w(D()).optional(),client_name:D().optional(),client_uri:X.optional(),logo_uri:El,scope:D().optional(),contacts:w(D()).optional(),tos_uri:El,policy_uri:D().optional(),jwks_uri:X.optional(),jwks:oe().optional(),software_id:D().optional(),software_version:D().optional(),software_statement:D().optional()}).strip(),Ol=E({client_id:D(),client_secret:D().optional(),client_id_issued_at:he().optional(),client_secret_expires_at:he().optional()}).strip(),kl=Dl.merge(Ol);E({error:D(),error_description:D().optional()}).strip(),E({token:D(),token_type_hint:D().optional()}).strip();function Al(e){let t=typeof e==`string`?new URL(e):new URL(e.href);return t.hash=``,t}function jl({requestedResource:e,configuredResource:t}){let n=typeof e==`string`?new URL(e):new URL(e.href),r=typeof t==`string`?new URL(t):new URL(t.href);if(n.origin!==r.origin||n.pathname.length<r.pathname.length)return!1;let i=n.pathname.endsWith(`/`)?n.pathname:n.pathname+`/`,a=r.pathname.endsWith(`/`)?r.pathname:r.pathname+`/`;return i.startsWith(a)}var Z=class extends Error{constructor(e,t){super(e),this.errorUri=t,this.name=this.constructor.name}toResponseObject(){let e={error:this.errorCode,error_description:this.message};return this.errorUri&&(e.error_uri=this.errorUri),e}get errorCode(){return this.constructor.errorCode}},Ml=class extends Z{};Ml.errorCode=`invalid_request`;var Nl=class extends Z{};Nl.errorCode=`invalid_client`;var Pl=class extends Z{};Pl.errorCode=`invalid_grant`;var Fl=class extends Z{};Fl.errorCode=`unauthorized_client`;var Il=class extends Z{};Il.errorCode=`unsupported_grant_type`;var Ll=class extends Z{};Ll.errorCode=`invalid_scope`;var Rl=class extends Z{};Rl.errorCode=`access_denied`;var zl=class extends Z{};zl.errorCode=`server_error`;var Bl=class extends Z{};Bl.errorCode=`temporarily_unavailable`;var Vl=class extends Z{};Vl.errorCode=`unsupported_response_type`;var Hl=class extends Z{};Hl.errorCode=`unsupported_token_type`;var Ul=class extends Z{};Ul.errorCode=`invalid_token`;var Wl=class extends Z{};Wl.errorCode=`method_not_allowed`;var Gl=class extends Z{};Gl.errorCode=`too_many_requests`;var Kl=class extends Z{};Kl.errorCode=`invalid_client_metadata`;var ql=class extends Z{};ql.errorCode=`insufficient_scope`;var Jl=class extends Z{};Jl.errorCode=`invalid_target`;const Yl={[Ml.errorCode]:Ml,[Nl.errorCode]:Nl,[Pl.errorCode]:Pl,[Fl.errorCode]:Fl,[Il.errorCode]:Il,[Ll.errorCode]:Ll,[Rl.errorCode]:Rl,[zl.errorCode]:zl,[Bl.errorCode]:Bl,[Vl.errorCode]:Vl,[Hl.errorCode]:Hl,[Ul.errorCode]:Ul,[Wl.errorCode]:Wl,[Gl.errorCode]:Gl,[Kl.errorCode]:Kl,[ql.errorCode]:ql,[Jl.errorCode]:Jl};var Xl=class extends Error{constructor(e){super(e??`Unauthorized`)}};function Zl(e){return[`client_secret_basic`,`client_secret_post`,`none`].includes(e)}const Ql=`code`,$l=`S256`;function eu(e,t){let n=e.client_secret!==void 0;return`token_endpoint_auth_method`in e&&e.token_endpoint_auth_method&&Zl(e.token_endpoint_auth_method)&&(t.length===0||t.includes(e.token_endpoint_auth_method))?e.token_endpoint_auth_method:t.length===0?n?`client_secret_basic`:`none`:n&&t.includes(`client_secret_basic`)?`client_secret_basic`:n&&t.includes(`client_secret_post`)?`client_secret_post`:t.includes(`none`)?`none`:n?`client_secret_post`:`none`}function tu(e,t,n,r){let{client_id:i,client_secret:a}=t;switch(e){case`client_secret_basic`:nu(i,a,n);return;case`client_secret_post`:ru(i,a,r);return;case`none`:iu(i,r);return;default:throw Error(`Unsupported client authentication method: ${e}`)}}function nu(e,t,n){if(!t)throw Error(`client_secret_basic authentication requires a client_secret`);let r=btoa(`${e}:${t}`);n.set(`Authorization`,`Basic ${r}`)}function ru(e,t,n){n.set(`client_id`,e),t&&n.set(`client_secret`,t)}function iu(e,t){t.set(`client_id`,e)}async function au(e){let t=e instanceof Response?e.status:void 0,n=e instanceof Response?await e.text():e;try{let{error:e,error_description:t,error_uri:r}=Tl.parse(JSON.parse(n));return new(Yl[e]||zl)(t||``,r)}catch(e){return new zl(`${t?`HTTP ${t}: `:``}Invalid OAuth error response: ${e}. Raw body: ${n}`)}}async function ou(e,t){try{return await su(e,t)}catch(n){if(n instanceof Nl||n instanceof Fl)return await e.invalidateCredentials?.(`all`),await su(e,t);if(n instanceof Pl)return await e.invalidateCredentials?.(`tokens`),await su(e,t);throw n}}async function su(e,{serverUrl:t,authorizationCode:n,scope:r,resourceMetadataUrl:i,fetchFn:a}){let o=await e.discoveryState?.(),s,c,l,u=i;if(!u&&o?.resourceMetadataUrl&&(u=new URL(o.resourceMetadataUrl)),o?.authorizationServerUrl){if(c=o.authorizationServerUrl,s=o.resourceMetadata,l=o.authorizationServerMetadata??await yu(c,{fetchFn:a}),!s)try{s=await fu(t,{resourceMetadataUrl:u},a)}catch{}(l!==o.authorizationServerMetadata||s!==o.resourceMetadata)&&await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}else{let n=await bu(t,{resourceMetadataUrl:u,fetchFn:a});c=n.authorizationServerUrl,l=n.authorizationServerMetadata,s=n.resourceMetadata,await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}let d=await lu(t,e,s),f=r||s?.scopes_supported?.join(` `)||e.clientMetadata.scope,p=await Promise.resolve(e.clientInformation());if(!p){if(n!==void 0)throw Error(`Existing OAuth client information is required when exchanging an authorization code`);let t=l?.client_id_metadata_document_supported===!0,r=e.clientMetadataUrl;if(r&&!cu(r))throw new Kl(`clientMetadataUrl must be a valid HTTPS URL with a non-root pathname, got: ${r}`);if(t&&r)p={client_id:r},await e.saveClientInformation?.(p);else{if(!e.saveClientInformation)throw Error(`OAuth client information must be saveable for dynamic registration`);let t=await Eu(c,{metadata:l,clientMetadata:e.clientMetadata,scope:f,fetchFn:a});await e.saveClientInformation(t),p=t}}let m=!e.redirectUrl;if(n!==void 0||m){let t=await Tu(e,c,{metadata:l,resource:d,authorizationCode:n,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}let h=await e.tokens();if(h?.refresh_token)try{let t=await wu(c,{metadata:l,clientInformation:p,refreshToken:h.refresh_token,resource:d,addClientAuthentication:e.addClientAuthentication,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}catch(e){if(!(!(e instanceof Z)||e instanceof zl))throw e}let g=e.state?await e.state():void 0,{authorizationUrl:_,codeVerifier:v}=await xu(c,{metadata:l,clientInformation:p,state:g,redirectUrl:e.redirectUrl,scope:f,resource:d});return await e.saveCodeVerifier(v),await e.redirectToAuthorization(_),`REDIRECT`}function cu(e){if(!e)return!1;try{let t=new URL(e);return t.protocol===`https:`&&t.pathname!==`/`}catch{return!1}}async function lu(e,t,n){let r=Al(e);if(t.validateResourceURL)return await t.validateResourceURL(r,n?.resource);if(n){if(!jl({requestedResource:r,configuredResource:n.resource}))throw Error(`Protected resource ${n.resource} does not match expected ${r} (or origin)`);return new URL(n.resource)}}function uu(e){let t=e.headers.get(`WWW-Authenticate`);if(!t)return{};let[n,r]=t.split(` `);if(n.toLowerCase()!==`bearer`||!r)return{};let i=du(e,`resource_metadata`)||void 0,a;if(i)try{a=new URL(i)}catch{}let o=du(e,`scope`)||void 0,s=du(e,`error`)||void 0;return{resourceMetadataUrl:a,scope:o,error:s}}function du(e,t){let n=e.headers.get(`WWW-Authenticate`);if(!n)return null;let r=RegExp(`${t}=(?:"([^"]+)"|([^\\s,]+))`),i=n.match(r);return i?i[1]||i[2]:null}async function fu(e,t,n=fetch){let r=await _u(e,`oauth-protected-resource`,n,{protocolVersion:t?.protocolVersion,metadataUrl:t?.resourceMetadataUrl});if(!r||r.status===404)throw await r?.body?.cancel(),Error(`Resource server does not implement OAuth 2.0 Protected Resource Metadata.`);if(!r.ok)throw await r.body?.cancel(),Error(`HTTP ${r.status} trying to load well-known OAuth protected resource metadata.`);return bl.parse(await r.json())}async function pu(e,t,n=fetch){try{return await n(e,{headers:t})}catch(r){if(r instanceof TypeError)return t?pu(e,void 0,n):void 0;throw r}}function mu(e,t=``,n={}){return t.endsWith(`/`)&&(t=t.slice(0,-1)),n.prependPathname?`${t}/.well-known/${e}`:`/.well-known/${e}${t}`}async function hu(e,t,n=fetch){return await pu(e,{"MCP-Protocol-Version":t},n)}function gu(e,t){return!e||e.status>=400&&e.status<500&&t!==`/`}async function _u(e,t,n,r){let i=new URL(e),a=r?.protocolVersion??`2025-11-25`,o;if(r?.metadataUrl)o=new URL(r.metadataUrl);else{let e=mu(t,i.pathname);o=new URL(e,r?.metadataServerUrl??i),o.search=i.search}let s=await hu(o,a,n);return!r?.metadataUrl&&gu(s,i.pathname)&&(s=await hu(new URL(`/.well-known/${t}`,i),a,n)),s}function vu(e){let t=typeof e==`string`?new URL(e):e,n=t.pathname!==`/`,r=[];if(!n)return r.push({url:new URL(`/.well-known/oauth-authorization-server`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration`,t.origin),type:`oidc`}),r;let i=t.pathname;return i.endsWith(`/`)&&(i=i.slice(0,-1)),r.push({url:new URL(`/.well-known/oauth-authorization-server${i}`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration${i}`,t.origin),type:`oidc`}),r.push({url:new URL(`${i}/.well-known/openid-configuration`,t.origin),type:`oidc`}),r}async function yu(e,{fetchFn:t=fetch,protocolVersion:n=on}={}){let r={"MCP-Protocol-Version":n,Accept:`application/json`},i=vu(e);for(let{url:e,type:n}of i){let i=await pu(e,r,t);if(i){if(!i.ok){if(await i.body?.cancel(),i.status>=400&&i.status<500)continue;throw Error(`HTTP ${i.status} trying to load ${n===`oauth`?`OAuth`:`OpenID provider`} metadata from ${e}`)}return n===`oauth`?xl.parse(await i.json()):Cl.parse(await i.json())}}}async function bu(e,t){let n,r;try{n=await fu(e,{resourceMetadataUrl:t?.resourceMetadataUrl},t?.fetchFn),n.authorization_servers&&n.authorization_servers.length>0&&(r=n.authorization_servers[0])}catch{}r||=String(new URL(`/`,e));let i=await yu(r,{fetchFn:t?.fetchFn});return{authorizationServerUrl:r,authorizationServerMetadata:i,resourceMetadata:n}}async function xu(e,{metadata:t,clientInformation:n,redirectUrl:r,scope:i,state:a,resource:o}){let s;if(t){if(s=new URL(t.authorization_endpoint),!t.response_types_supported.includes(Ql))throw Error(`Incompatible auth server: does not support response type ${Ql}`);if(t.code_challenge_methods_supported&&!t.code_challenge_methods_supported.includes($l))throw Error(`Incompatible auth server: does not support code challenge method ${$l}`)}else s=new URL(`/authorize`,e);let c=await yl(),l=c.code_verifier,u=c.code_challenge;return s.searchParams.set(`response_type`,Ql),s.searchParams.set(`client_id`,n.client_id),s.searchParams.set(`code_challenge`,u),s.searchParams.set(`code_challenge_method`,$l),s.searchParams.set(`redirect_uri`,String(r)),a&&s.searchParams.set(`state`,a),i&&s.searchParams.set(`scope`,i),i?.includes(`offline_access`)&&s.searchParams.append(`prompt`,`consent`),o&&s.searchParams.set(`resource`,o.href),{authorizationUrl:s,codeVerifier:l}}function Su(e,t,n){return new URLSearchParams({grant_type:`authorization_code`,code:e,code_verifier:t,redirect_uri:String(n)})}async function Cu(e,{metadata:t,tokenRequestParams:n,clientInformation:r,addClientAuthentication:i,resource:a,fetchFn:o}){let s=t?.token_endpoint?new URL(t.token_endpoint):new URL(`/token`,e),c=new Headers({"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`});a&&n.set(`resource`,a.href),i?await i(c,n,s,t):r&&tu(eu(r,t?.token_endpoint_auth_methods_supported??[]),r,c,n);let l=await(o??fetch)(s,{method:`POST`,headers:c,body:n});if(!l.ok)throw await au(l);return wl.parse(await l.json())}async function wu(e,{metadata:t,clientInformation:n,refreshToken:r,resource:i,addClientAuthentication:a,fetchFn:o}){return{refresh_token:r,...await Cu(e,{metadata:t,tokenRequestParams:new URLSearchParams({grant_type:`refresh_token`,refresh_token:r}),clientInformation:n,addClientAuthentication:a,resource:i,fetchFn:o})}}async function Tu(e,t,{metadata:n,resource:r,authorizationCode:i,fetchFn:a}={}){let o=e.clientMetadata.scope,s;if(e.prepareTokenRequest&&(s=await e.prepareTokenRequest(o)),!s){if(!i)throw Error(`Either provider.prepareTokenRequest() or authorizationCode is required`);if(!e.redirectUrl)throw Error(`redirectUrl is required for authorization_code flow`);s=Su(i,await e.codeVerifier(),e.redirectUrl)}let c=await e.clientInformation();return Cu(t,{metadata:n,tokenRequestParams:s,clientInformation:c??void 0,addClientAuthentication:e.addClientAuthentication,resource:r,fetchFn:a})}async function Eu(e,{metadata:t,clientMetadata:n,scope:r,fetchFn:i}){let a;if(t){if(!t.registration_endpoint)throw Error(`Incompatible auth server: does not support dynamic client registration`);a=new URL(t.registration_endpoint)}else a=new URL(`/register`,e);let o=await(i??fetch)(a,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({...n,...r===void 0?{}:{scope:r}})});if(!o.ok)throw await au(o);return kl.parse(await o.json())}var Du=class extends Error{constructor(e,t){super(e),this.name=`ParseError`,this.type=t.type,this.field=t.field,this.value=t.value,this.line=t.line}};function Ou(e){}function ku(e){if(typeof e==`function`)throw TypeError("`config` must be an object, got a function instead. Did you mean `createParser({onEvent: fn})`?");let{onEvent:t=Ou,onError:n=Ou,onRetry:r=Ou,onComment:i,maxBufferSize:a}=e,o=[],s=0,c=!0,l,u=``,d=0,f,p=!1;function m(e){if(p)throw Error("Cannot feed parser: it was terminated after exceeding the configured max buffer size. Call `reset()` to resume parsing.");if(c&&(c=!1,e.charCodeAt(0)===239&&e.charCodeAt(1)===187&&e.charCodeAt(2)===191&&(e=e.slice(3))),o.length===0){let t=g(e);t!==``&&(o.push(t),s=t.length),h();return}if(e.indexOf(`
 `)===-1&&e.indexOf(`\r`)===-1){o.push(e),s+=e.length,h();return}o.push(e);let t=o.join(``);o.length=0,s=0;let n=g(t);n!==``&&(o.push(n),s=n.length),h()}function h(){a!==void 0&&(s+u.length<=a||(p=!0,o.length=0,s=0,l=void 0,u=``,d=0,f=void 0,n(new Du(`Buffered data exceeded max buffer size of ${a} characters`,{type:`max-buffer-size-exceeded`}))))}function g(e){let n=0;if(e.indexOf(`\r`)===-1){let r=e.indexOf(`
 `,n);for(;r!==-1;){if(n===r){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0,n=r+1,r=e.indexOf(`
 `,n);continue}let i=e.charCodeAt(n);if(Au(e,n,i)){let i=e.charCodeAt(n+5)===32?n+6:n+5,a=e.slice(i,r);if(d===0&&e.charCodeAt(r+1)===10){t({id:l,event:f,data:a}),l=void 0,u=``,f=void 0,n=r+2,r=e.indexOf(`
@@ -62,11 +62,11 @@ ${a}`,d++}else ju(e,n,i)?f=e.slice(e.charCodeAt(n+6)===32?n+7:n+6,r)||void 0:_(e
 `,n)}return e.slice(n)}for(;n<e.length;){let t=e.indexOf(`\r`,n),r=e.indexOf(`
 `,n),i=-1;if(t!==-1&&r!==-1?i=t<r?t:r:t===-1?r!==-1&&(i=r):i=t===e.length-1?-1:t,i===-1)break;_(e,n,i),n=i+1,e.charCodeAt(n-1)===13&&e.charCodeAt(n)===10&&n++}return e.slice(n)}function _(e,t,n){if(t===n){y();return}let r=e.charCodeAt(t);if(Au(e,t,r)){let r=e.charCodeAt(t+5)===32?t+6:t+5,i=e.slice(r,n);u=d===0?i:`${u}
 ${i}`,d++;return}if(ju(e,t,r)){f=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+3)===32?t+4:t+3,n);l=r.includes(`\0`)?void 0:r;return}if(r===58){if(i){let r=e.slice(t,n);i(r.slice(e.charCodeAt(t+1)===32?2:1))}return}let a=e.slice(t,n),o=a.indexOf(`:`);if(o===-1){v(a,``,a);return}let s=a.slice(0,o),c=a.charCodeAt(o+1)===32?2:1;v(s,a.slice(o+c),a)}function v(e,t,i){switch(e){case`event`:f=t||void 0;break;case`data`:u=d===0?t:`${u}
-${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.test(t)?r(parseInt(t,10)):n(new Du(`Invalid \`retry\` value: "${t}"`,{type:`invalid-retry`,value:t,line:i}));break;default:n(new Du(`Unknown field "${e.length>20?`${e.slice(0,20)}\u2026`:e}"`,{type:`unknown-field`,field:e,value:t,line:i}))}}function y(){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0}function b(e={}){if(e.consume&&o.length>0){let e=o.join(``);_(e,0,e.length)}c=!0,l=void 0,u=``,d=0,f=void 0,o.length=0,s=0,p=!1}return{feed:m,reset:b}}function Au(e,t,n){return n===100&&e.charCodeAt(t+1)===97&&e.charCodeAt(t+2)===116&&e.charCodeAt(t+3)===97&&e.charCodeAt(t+4)===58}function ju(e,t,n){return n===101&&e.charCodeAt(t+1)===118&&e.charCodeAt(t+2)===101&&e.charCodeAt(t+3)===110&&e.charCodeAt(t+4)===116&&e.charCodeAt(t+5)===58}var Mu=class extends TransformStream{constructor({onError:e,onRetry:t,onComment:n,maxBufferSize:r}={}){let i;super({start(a){i=ku({onEvent:e=>{a.enqueue(e)},onError(t){typeof e==`function`&&e(t),(e===`terminate`||t.type===`max-buffer-size-exceeded`)&&a.error(t)},onRetry:t,onComment:n,maxBufferSize:r})},transform(e){i.feed(e)}})}};const Nu={initialReconnectionDelay:1e3,maxReconnectionDelay:3e4,reconnectionDelayGrowFactor:1.5,maxRetries:2};var Pu=class extends Error{constructor(e,t){super(`Streamable HTTP error: ${t}`),this.code=e}},Fu=class{constructor(e,t){this._hasCompletedAuthFlow=!1,this._url=e,this._resourceMetadataUrl=void 0,this._scope=void 0,this._requestInit=t?.requestInit,this._authProvider=t?.authProvider,this._fetch=t?.fetch,this._fetchWithInit=pl(t?.fetch,t?.requestInit),this._sessionId=t?.sessionId,this._reconnectionOptions=t?.reconnectionOptions??Nu}async _authThenStart(){if(!this._authProvider)throw new Xl(`No auth provider`);let e;try{e=await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})}catch(e){throw this.onerror?.(e),e}if(e!==`AUTHORIZED`)throw new Xl;return await this._startOrAuthSse({resumptionToken:void 0})}async _commonHeaders(){let e={};if(this._authProvider){let t=await this._authProvider.tokens();t&&(e.Authorization=`Bearer ${t.access_token}`)}this._sessionId&&(e[`mcp-session-id`]=this._sessionId),this._protocolVersion&&(e[`mcp-protocol-version`]=this._protocolVersion);let t=fl(this._requestInit?.headers);return new Headers({...e,...t})}async _startOrAuthSse(e){let{resumptionToken:t}=e;try{let n=await this._commonHeaders();n.set(`Accept`,`text/event-stream`),t&&n.set(`last-event-id`,t);let r=await(this._fetch??fetch)(this._url,{method:`GET`,headers:n,signal:this._abortController?.signal});if(!r.ok){if(await r.body?.cancel(),r.status===401&&this._authProvider)return await this._authThenStart();if(r.status===405)return;throw new Pu(r.status,`Failed to open SSE stream: ${r.statusText}`)}this._handleSseStream(r.body,e,!0)}catch(e){throw this.onerror?.(e),e}}_getNextReconnectionDelay(e){if(this._serverRetryMs!==void 0)return this._serverRetryMs;let t=this._reconnectionOptions.initialReconnectionDelay,n=this._reconnectionOptions.reconnectionDelayGrowFactor,r=this._reconnectionOptions.maxReconnectionDelay;return Math.min(t*n**+e,r)}_scheduleReconnection(e,t=0){let n=this._reconnectionOptions.maxRetries;if(t>=n){this.onerror?.(Error(`Maximum reconnection attempts (${n}) exceeded.`));return}let r=this._getNextReconnectionDelay(t);this._reconnectionTimeout=setTimeout(()=>{this._startOrAuthSse(e).catch(n=>{this.onerror?.(Error(`Failed to reconnect SSE stream: ${n instanceof Error?n.message:String(n)}`)),this._scheduleReconnection(e,t+1)})},r)}_handleSseStream(e,t,n){if(!e)return;let{onresumptiontoken:r,replayMessageId:i}=t,a,o=!1,s=!1;(async()=>{try{let t=e.pipeThrough(new TextDecoderStream).pipeThrough(new Mu({onRetry:e=>{this._serverRetryMs=e}})).getReader();for(;;){let{value:e,done:n}=await t.read();if(n)break;if(e.id&&(a=e.id,o=!0,r?.(e.id)),e.data&&(!e.event||e.event===`message`))try{let t=Ct.parse(JSON.parse(e.data));un(t)&&(s=!0,i!==void 0&&(t.id=i)),this.onmessage?.(t)}catch(e){this.onerror?.(e)}}(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted&&this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){if(this.onerror?.(Error(`SSE stream disconnected: ${e}`)),(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted)try{this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){this.onerror?.(Error(`Failed to reconnect: ${e instanceof Error?e.message:String(e)}`))}}})()}async start(){if(this._abortController)throw Error(`StreamableHTTPClientTransport already started! If using Client class, note that connect() calls start() automatically.`);this._abortController=new AbortController}async finishAuth(e){if(!this._authProvider)throw new Xl(`No auth provider`);if(await ou(this._authProvider,{serverUrl:this._url,authorizationCode:e,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Xl(`Failed to authorize`)}async close(){this._reconnectionTimeout&&=(clearTimeout(this._reconnectionTimeout),void 0),this._abortController?.abort(),this.onclose?.()}async send(e,t){try{let{resumptionToken:n,onresumptiontoken:r}=t||{};if(n){this._startOrAuthSse({resumptionToken:n,replayMessageId:Ot(e)?e.id:void 0}).catch(e=>this.onerror?.(e));return}let i=await this._commonHeaders();i.set(`content-type`,`application/json`),i.set(`accept`,`application/json, text/event-stream`);let a={...this._requestInit,method:`POST`,headers:i,body:JSON.stringify(e),signal:this._abortController?.signal},o=await(this._fetch??fetch)(this._url,a),s=o.headers.get(`mcp-session-id`);if(s&&(this._sessionId=s),!o.ok){let t=await o.text().catch(()=>null);if(o.status===401&&this._authProvider){if(this._hasCompletedAuthFlow)throw new Pu(401,`Server returned 401 after successful authentication`);let{resourceMetadataUrl:t,scope:n}=uu(o);if(this._resourceMetadataUrl=t,this._scope=n,await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Xl;return this._hasCompletedAuthFlow=!0,this.send(e)}if(o.status===403&&this._authProvider){let{resourceMetadataUrl:t,scope:n,error:r}=uu(o);if(r===`insufficient_scope`){let r=o.headers.get(`WWW-Authenticate`);if(this._lastUpscopingHeader===r)throw new Pu(403,`Server returned 403 after trying upscoping`);if(n&&(this._scope=n),t&&(this._resourceMetadataUrl=t),this._lastUpscopingHeader=r??void 0,await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetch})!==`AUTHORIZED`)throw new Xl;return this.send(e)}}throw new Pu(o.status,`Error POSTing to endpoint: ${t}`)}if(this._hasCompletedAuthFlow=!1,this._lastUpscopingHeader=void 0,o.status===202){await o.body?.cancel(),pn(e)&&this._startOrAuthSse({resumptionToken:void 0}).catch(e=>this.onerror?.(e));return}let c=(Array.isArray(e)?e:[e]).filter(e=>`method`in e&&`id`in e&&e.id!==void 0).length>0,l=o.headers.get(`content-type`);if(c){if(l?.includes(`text/event-stream`))this._handleSseStream(o.body,{onresumptiontoken:r},!1);else if(l?.includes(`application/json`)){let e=await o.json(),t=Array.isArray(e)?e.map(e=>Ct.parse(e)):[Ct.parse(e)];for(let e of t)this.onmessage?.(e)}else throw await o.body?.cancel(),new Pu(-1,`Unexpected content type: ${l}`)}else await o.body?.cancel()}catch(e){throw this.onerror?.(e),e}}get sessionId(){return this._sessionId}async terminateSession(){if(this._sessionId)try{let e=await this._commonHeaders(),t={...this._requestInit,method:`DELETE`,headers:e,signal:this._abortController?.signal},n=await(this._fetch??fetch)(this._url,t);if(await n.body?.cancel(),!n.ok&&n.status!==405)throw new Pu(n.status,`Failed to terminate session: ${n.statusText}`);this._sessionId=void 0}catch(e){throw this.onerror?.(e),e}}setProtocolVersion(e){this._protocolVersion=e}get protocolVersion(){return this._protocolVersion}async resumeStream(e,t){await this._startOrAuthSse({resumptionToken:e,onresumptiontoken:t?.onresumptiontoken})}};function Iu(e){return Xr.join(Xr.dirname(e),`..`,`Frameworks`,`OpenKnowledge Server.app`,`Contents`,`MacOS`,`OpenKnowledge Helper`)}const Lu=/\/[^/]+\.app\/Contents\/MacOS\/[^/]+$/;function Ru(e){if(e.platform!==`darwin`||!Lu.test(e.execPath))return null;let t=Iu(e.execPath);return e.exists(t)?t:null}function zu(e={}){let t=e.execPath??process.execPath,n=e.platform??process.platform,r=e.argv??process.argv,i=e.exists??H,a=r[1];return a?{command:Ru({execPath:t,platform:n,exists:i})??t,prefixArgs:[a]}:(console.warn(`[self-spawn] process.argv[1] is empty — falling back to \`npx -y @inkeep/open-knowledge@latest\`. This re-introduces the registry-fetch surface that re-exec was fixing. Observed argv: ${JSON.stringify(r)}`),{command:`npx`,prefixArgs:[`-y`,`@inkeep/open-knowledge@latest`]})}function Bu(e){return(t,n)=>{if((n?.method??`GET`).toUpperCase()===`GET`)return globalThis.fetch(t,n);let r=new AbortController,i=setTimeout(()=>r.abort(Error(`MCP request timed out after ${e}ms`)),e),a=n?.signal instanceof AbortSignal?AbortSignal.any([n.signal,r.signal]):r.signal;return globalThis.fetch(t,{...n,signal:a}).finally(()=>clearTimeout(i))}}function Vu(e){if(e===void 0||e===``)return;let t=Number.parseInt(e,10);if(!(Number.isNaN(t)||t<=0))return t}function Hu(e){return e===`0.0.0.0`||e===`::`?`localhost`:e.includes(`:`)&&!e.startsWith(`[`)?`[${e}]`:e}function Uu(e,t){return`http://${Hu(e)}:${t}/mcp`}function Wu(e){return`${e}/mcp`}function Gu(e){return e.replace(/^http/,`ws`)}function Ku(e){let t=new URL(e);return t.protocol=t.protocol===`https:`?`wss:`:`ws:`,t.pathname=``,t.search=``,t.hash=``,t.toString().replace(/\/$/,``)}function qu(e,t){if(e&&e.draining!==!0&&t(e.pid))return Tt(e,{fallbackHost:`127.0.0.1`})??void 0}function Ju(e){if(!H(e))return``;let t=b(W(e,`utf-8`)).trim();return t.length>8192?`…${t.slice(-8192)}`:t}function Yu(e,t){return`server did not start within ${e}ms${t?` stderr:\n${t}`:``}`}function Xu(e){if(e&&typeof e==`object`&&`method`in e&&`id`in e)return e.id}function Zu(e){if(!e||typeof e!=`object`||!(`result`in e))return;let t=e.result;if(!t||typeof t!=`object`||!(`protocolVersion`in t))return;let n=t.protocolVersion;return typeof n==`string`?n:void 0}function Qu(e,t){return{jsonrpc:`2.0`,id:e,error:{code:-32e3,message:t instanceof Error?t.message:String(t)}}}async function $u(e){let t=e.readLock??(()=>Qe(e.lockDir)),n=e.isAlive??Ye,r=e.sleep??(e=>yi(e)),i=e.spawn??Kr,a=e.readErrorLog??Ju,o=e.openErrorLog??(e=>$e(e,process.pid)),s=e.closeFd??ni,c=e.timeoutMs??5e3,l=e.pollIntervalMs??100;if(e.portOverride!==void 0){let t=Number.parseInt(e.portOverride,10);if(Number.isNaN(t)||t<=0)throw Error(`invalid --port value '${e.portOverride}' — HTTP MCP shim requires a positive port`);return Uu(he,t)}let u=t(),d=qu(u,n);if(d!==void 0)return Wu(d);if(e.envAutoStart===`0`)throw new Mt(`OpenKnowledge server is not running and OK_MCP_AUTOSTART=0 disables auto-start.`);if(u!==null&&u.draining===!0&&n(u.pid)){let e=Date.now(),i=e+c,a=!0;for(;Date.now()<i;){let e=t();if(e===null||e.draining!==!0||!n(e.pid)){a=!1;break}await r(l)}console.error(`[mcp-shim] waited ${Date.now()-e}ms for a draining predecessor server${a?` (timed out — proceeding anyway)`:``}`);let o=qu(t(),n);if(o!==void 0)return Wu(o)}H(e.lockDir)||U(e.lockDir,{recursive:!0});let f=z(e.lockDir,ie),p=o(f),m,h,g=zu();try{try{m=i(g.command,[...g.prefixArgs,`start`],{detached:!0,stdio:[`ignore`,`ignore`,p],windowsHide:!0,cwd:e.contentDir,env:{...process.env,OK_LOCK_KIND:`mcp-spawned`,ELECTRON_RUN_AS_NODE:`1`}}),m.on(`error`,e=>{h=e instanceof Error?e.message:String(e)}),m.unref()}catch(e){h=e instanceof Error?e.message:String(e)}}finally{try{s(p)}catch{}}let _=Date.now()+c;for(;Date.now()<_;){if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}`)}await r(l);let e=qu(t(),n);if(e!==void 0)return Wu(e)}if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}`)}throw Error(Yu(c,a(f)))}function ed(e,t){if(e.portOverride!==void 0)return Ku(t);let n=e.readLock??(()=>Qe(e.lockDir)),r=e.isAlive??Ye,i=qu(n(),r);if(i!==void 0)return Gu(i)}async function td(e,t={}){let n=t.stderr??process.stderr,r=t.requestTimeoutMs??12e4,i=t.createStdioTransport?t.createStdioTransport(t.stdin,t.stdout):new ol(t.stdin,t.stdout),o=t.createHttpTransport?t.createHttpTransport(new URL(e)):new Fu(new URL(e),{fetch:Bu(r),requestInit:{headers:{...a({kind:`mcp`,runtimeVersion:jt}),...t.connectionId===void 0?{}:{[xt]:t.connectionId}}}}),s=!1,c=async()=>{s||(s=!0,t.onclose?.(),await Promise.allSettled([i.close(),o.close()]))};i.onerror=e=>{n.write(`[mcp-shim] stdio error: ${e.message}\n`)},o.onerror=e=>{n.write(`[mcp-shim] HTTP transport error: ${e.message}\n`)},i.onclose=()=>{c()},o.onclose=()=>{c()};let l=Promise.resolve();i.onmessage=e=>{l=l.then(async()=>{try{await o.send(e)}catch(t){let r=Xu(e);if(r===void 0){n.write(`[mcp-shim] failed to forward stdio notification: ${t instanceof Error?t.message:String(t)}\n`);return}await i.send(Qu(r,t)).catch(e=>{n.write(`[mcp-shim] failed to write stdio error response: ${e instanceof Error?e.message:String(e)}\n`)})}}).catch(e=>{n.write(`[mcp-shim] unexpected stdio forwarding failure: ${e instanceof Error?e.message:String(e)}\n`)})},o.onmessage=e=>{let t=Zu(e);t&&o.setProtocolVersion?.(t),i.send(e).catch(e=>{n.write(`[mcp-shim] failed to write stdio response: ${e instanceof Error?e.message:String(e)}\n`)})};try{await o.start(),await i.start()}catch(e){throw await c(),e}return{close:c}}async function nd(e){let t=e.stderr??process.stderr,n=e.bridgeFn??td,r=await $u(e),i=e.createConnectionId?.()??_i(),a=!1,o=(e.startKeepalive??nl)({connectionId:i,pid:process.pid,resolveWsUrl:async()=>ed(e,r),log:e=>t.write(`[mcp-shim] keepalive: ${e}\n`)});t.write(`[mcp-shim] proxying stdio to ${r}\n`);let s;try{s=await n(r,{stderr:t,connectionId:i,onclose:()=>{a||(o.close(),process.exit(0))}})}catch(e){throw o.close(),e}let c=()=>{a=!0,o.close(),s.close().finally(()=>{process.exit(0)})};process.once(`SIGINT`,c),process.once(`SIGTERM`,c)}const rd=/^mcp\.\d{4}-\d{2}-\d{2}\.log$/;function id(){return z(fi(),`.ok`,`logs`)}function ad(e,t=()=>new Date){try{let n=t().getTime(),r=oi(e).filter(e=>rd.test(e)).flatMap(t=>{try{let n=G(z(e,t));return[{name:t,mtime:n.mtimeMs,size:n.size}]}catch{return[]}}),i=[];for(let t of r)if(n-t.mtime>6048e5)try{K(z(e,t.name))}catch{}else i.push(t);i.sort((e,t)=>e.mtime-t.mtime);let a=i.reduce((e,t)=>e+t.size,0);for(let t of i){if(a<=47185920)break;try{K(z(e,t.name)),a-=t.size}catch{}}}catch{}}function od(e={}){let t=e.logsDir??id(),n=e.now??(()=>new Date),r=e.pruneDelayMs??5e3;r<=0?ad(t,n):setTimeout(()=>ad(t,n),r).unref?.();let i=0,a=!1;return{write(e){if(!(i>=5))try{a||=(U(t,{recursive:!0}),!0);let r=n().toISOString(),o=z(t,`mcp.${r.slice(0,10)}.log`);ti(o,`${r} ${e}`),i=0}catch{a=!1,i++}}}}const sd=$r(import.meta.url),cd=vi(Ur);async function ld(e){try{let{stdout:t}=await cd(`git`,[`-C`,e,`worktree`,`list`,`--porcelain`],A({timeout:2e3}));return t.split(`
-`).filter(e=>e.startsWith(`worktree `)).length}catch{return 0}}function ud(e){let t=V(e);for(;;){if(Qt(t))return t;let n=R(t);if(n===t)throw Error(`No OpenKnowledge project found at or above ${e}. Pass an explicit \`cwd\` argument that points inside an OK project (a directory with a \`${ce}\`).`);t=n}}function dd(e){try{let t=new URL(e);return t.protocol===`file:`?$r(t):void 0}catch{return}}async function fd(e){if(!e.getClientCapabilities()?.roots)return;let t;try{t=await e.listRoots()}catch(t){e.log?.(`listRoots fallback failed: ${t instanceof Error?t.message:String(t)}`);return}let n=t.roots??[];if(n.length!==1)return;let r=dd(n[0].uri);return r===void 0&&e.log?.(`single root URI not usable as fs path: ${n[0].uri}`),r}async function pd(e,t,n,r=ud){if(e!==void 0){let t=r(e);return{projectDir:t,viaRootGuess:!1,nextSticky:t}}if(t!==void 0){let e=r(t);return{projectDir:e,viaRootGuess:!1,nextSticky:e}}let i=await n();return i===void 0?{projectDir:void 0,viaRootGuess:!1,nextSticky:void 0}:{projectDir:r(i),viaRootGuess:!0,nextSticky:void 0}}async function md(e){let t=od(),n={write:e=>(t.write(e),process.stderr.write(e))},r=e.spawnTimeoutMs??Vu(process.env.OK_MCP_SPAWN_TIMEOUT_MS),i=e.envAutoStart??process.env.OK_MCP_AUTOSTART,a=Br({startupCwd:e.startupCwd,startupConfig:e.startupConfig}),o=new Pt({name:_e,version:jt});ze(o);let s=_i(),c={current:{connectionId:s,displayName:s,colorSeed:s}},l=new Map,u=e=>{if(l.has(e))return;let t=Ut(e),r=c.current,i=nl({connectionId:s,pid:process.pid,displayName:r.displayName,clientName:r.clientInfo?.name??r.displayName,colorSeed:r.colorSeed,resolveWsUrl:async()=>ed({lockDir:t,contentDir:e},``),log:t=>n.write(`[mcp] keepalive[${e}]: ${t}\n`)});l.set(e,i)},d=()=>fd({getClientCapabilities:()=>o.server.getClientCapabilities(),listRoots:()=>o.server.listRoots(),log:e=>n.write(`[mcp] ${e}\n`)}),f,p=!1,m=async e=>{if(p)return;p=!0;let t=await ld(e);if(t<=1){p=!1;return}let r=`Routed to ${e} from the MCP client's single advertised root, but this repo has ${t} git worktrees. If you are working in a worktree, pass its path as \`cwd\` on OK tool calls once — it sticks for the session, so reads, writes, and the preview all target that worktree instead of this checkout.`;try{n.write(`[mcp] ${r}\n`),await o.server.sendLoggingMessage({level:`warning`,data:r})}catch{}},g=async e=>{let t=await pd(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)throw Error("`cwd` is required for tool calls against the global MCP server. Pass an absolute path inside an OpenKnowledge project, or have the MCP client advertise a single root.");return t.viaRootGuess&&m(t.projectDir),t.projectDir},_=async e=>{let t=await pd(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)return;t.viaRootGuess&&m(t.projectDir);let n=t.projectDir,o=await a(n),s=await $u({lockDir:Ut(n),contentDir:ot(o,n),envAutoStart:i,...r===void 0?{}:{timeoutMs:r}});return u(n),s.replace(/\/mcp$/,``)};o.server.oninitialized=()=>{let e=o.server.getClientVersion(),t=Le(e?.name,s);c.current={connectionId:s,clientInfo:e?{name:t,version:e.version}:void 0,displayName:t,colorSeed:t}},Ge(o,{serverUrl:_,resolveCwd:g,config:a,identityRef:c,isHostedAgent:h(process.env)}),Ve(o);let v=new ol,y=!1,b,x,S=async()=>{if(y)return;y=!0,b?.stop(),x?.stop();for(let e of l.values())try{e.close()}catch(e){n.write(`[mcp] keepalive close error: ${e instanceof Error?e.message:String(e)}\n`)}l.clear();let e=await Promise.allSettled([o.close(),v.close()]);for(let t of e)if(t.status===`rejected`){let e=t.reason;n.write(`[mcp] shutdown close error: ${e instanceof Error?e.message:String(e)}\n`)}};await o.connect(v),n.write(`[mcp] global stdio server ready (per-call project routing)
-`);let ee=!1,C=()=>{ee||(ee=!0,setTimeout(()=>{n.write(`[mcp] shutdown deadline (5s) reached — forcing exit(1)
-`),process.exit(1)},5e3).unref(),S().finally(()=>{process.exit(0)}))};if(process.once(`SIGINT`,C),process.once(`SIGTERM`,C),process.stdin.on(`end`,()=>{n.write(`[mcp] stdin end — host disconnected, shutting down
-`),C()}),process.stdin.on(`error`,e=>{n.write(`[mcp] stdin error (${e instanceof Error?e.message:String(e)}) — host disconnected, shutting down\n`),C()}),x=ul({getPpid:()=>process.ppid,onHostGone:e=>{n.write(`[mcp] ${e} — shutting down\n`),C()}}),dl({log:e=>n.write(`${e}\n`),transport:v,process,stdin:process.stdin}),process.platform===`darwin`){let e=ll(sd,{realpathSync:ci,statInoSync:e=>G(e).ino,log:e=>n.write(`${e}\n`)});if(e!==void 0){n.write(`[mcp] bundle identity anchor=${e.resolvedPath} inode=${e.inode} version=${jt}\n`);let{resolvedPath:t,inode:r}=e;b=cl({detect:()=>sl({bundleAnchorPath:sd,currentInode:r,platform:process.platform,realpath:ci,statInode:e=>G(e).ino}),onReplaced:e=>{n.write(`[mcp] bundle replaced anchor=${t} bootInode=${e.currentInode} onDiskInode=${e.onDiskInode} version=${jt} — exiting for host respawn\n`),C()},log:e=>n.write(`[mcp] ${e}\n`)})}}return{close:S}}function hd(e){return new j(`mcp`).description(`Start MCP stdio server for project knowledge base`).option(`-p, --port <port>`,`Override per-call routing and proxy stdio to this HTTP MCP port (skips bundle proxy)`,void 0).option(`--no-bundle-proxy`,`Run the npm-fetched MCP server in-process instead of proxying to the Desktop app bundle (macOS-only proxy; no-op elsewhere; equivalent: OK_BUNDLE_PROXY=0)`).action(async t=>{try{let n=e(),r=process.cwd();if(t.port!==void 0){let e=Vu(process.env.OK_MCP_SPAWN_TIMEOUT_MS);await nd({lockDir:``,contentDir:``,portOverride:t.port,envAutoStart:process.env.OK_MCP_AUTOSTART,timeoutMs:e});return}let i=t.bundleProxy===!1?[...process.argv,`--no-bundle-proxy`]:process.argv,a=$c(process.env,i,process.platform);if(a.proxy){let e=Qc(process.platform,fi(),{existsSync:H});if(e===null)el({stderr:process.stderr,mode:`fallback-absent`,bundlePath:null,reason:`no installed OpenKnowledge.app bundle found`});else try{await tl({bundlePath:e,argv:process.argv.slice(2),env:process.env,stderr:process.stderr});return}catch(t){el({stderr:process.stderr,mode:`fallback-exec-failed`,bundlePath:e,reason:t instanceof Error?t.message:String(t)})}}else{let e=a.suppressedBy===`env`?`suppressed-env`:a.suppressedBy===`flag`?`suppressed-flag`:a.suppressedBy===`self`?`suppressed-self`:`suppressed-platform`;el({stderr:process.stderr,mode:e,bundlePath:null,reason:null})}await md({startupCwd:r,startupConfig:n})}catch(e){process.stderr.write(`MCP server failed to start: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1}})}const gd=/<aside>\s*([\s\S]*?)\s*<\/aside>/g,_d=/^(?:\p{Extended_Pictographic}️?\s*)+/u;function vd(e){return e.replace(gd,(e,t)=>{let n=t.replace(/\r\n/g,`
+${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.test(t)?r(parseInt(t,10)):n(new Du(`Invalid \`retry\` value: "${t}"`,{type:`invalid-retry`,value:t,line:i}));break;default:n(new Du(`Unknown field "${e.length>20?`${e.slice(0,20)}\u2026`:e}"`,{type:`unknown-field`,field:e,value:t,line:i}))}}function y(){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0}function b(e={}){if(e.consume&&o.length>0){let e=o.join(``);_(e,0,e.length)}c=!0,l=void 0,u=``,d=0,f=void 0,o.length=0,s=0,p=!1}return{feed:m,reset:b}}function Au(e,t,n){return n===100&&e.charCodeAt(t+1)===97&&e.charCodeAt(t+2)===116&&e.charCodeAt(t+3)===97&&e.charCodeAt(t+4)===58}function ju(e,t,n){return n===101&&e.charCodeAt(t+1)===118&&e.charCodeAt(t+2)===101&&e.charCodeAt(t+3)===110&&e.charCodeAt(t+4)===116&&e.charCodeAt(t+5)===58}var Mu=class extends TransformStream{constructor({onError:e,onRetry:t,onComment:n,maxBufferSize:r}={}){let i;super({start(a){i=ku({onEvent:e=>{a.enqueue(e)},onError(t){typeof e==`function`&&e(t),(e===`terminate`||t.type===`max-buffer-size-exceeded`)&&a.error(t)},onRetry:t,onComment:n,maxBufferSize:r})},transform(e){i.feed(e)}})}};const Nu={initialReconnectionDelay:1e3,maxReconnectionDelay:3e4,reconnectionDelayGrowFactor:1.5,maxRetries:2};var Pu=class extends Error{constructor(e,t){super(`Streamable HTTP error: ${t}`),this.code=e}},Fu=class{constructor(e,t){this._hasCompletedAuthFlow=!1,this._url=e,this._resourceMetadataUrl=void 0,this._scope=void 0,this._requestInit=t?.requestInit,this._authProvider=t?.authProvider,this._fetch=t?.fetch,this._fetchWithInit=pl(t?.fetch,t?.requestInit),this._sessionId=t?.sessionId,this._reconnectionOptions=t?.reconnectionOptions??Nu}async _authThenStart(){if(!this._authProvider)throw new Xl(`No auth provider`);let e;try{e=await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})}catch(e){throw this.onerror?.(e),e}if(e!==`AUTHORIZED`)throw new Xl;return await this._startOrAuthSse({resumptionToken:void 0})}async _commonHeaders(){let e={};if(this._authProvider){let t=await this._authProvider.tokens();t&&(e.Authorization=`Bearer ${t.access_token}`)}this._sessionId&&(e[`mcp-session-id`]=this._sessionId),this._protocolVersion&&(e[`mcp-protocol-version`]=this._protocolVersion);let t=fl(this._requestInit?.headers);return new Headers({...e,...t})}async _startOrAuthSse(e){let{resumptionToken:t}=e;try{let n=await this._commonHeaders();n.set(`Accept`,`text/event-stream`),t&&n.set(`last-event-id`,t);let r=await(this._fetch??fetch)(this._url,{method:`GET`,headers:n,signal:this._abortController?.signal});if(!r.ok){if(await r.body?.cancel(),r.status===401&&this._authProvider)return await this._authThenStart();if(r.status===405)return;throw new Pu(r.status,`Failed to open SSE stream: ${r.statusText}`)}this._handleSseStream(r.body,e,!0)}catch(e){throw this.onerror?.(e),e}}_getNextReconnectionDelay(e){if(this._serverRetryMs!==void 0)return this._serverRetryMs;let t=this._reconnectionOptions.initialReconnectionDelay,n=this._reconnectionOptions.reconnectionDelayGrowFactor,r=this._reconnectionOptions.maxReconnectionDelay;return Math.min(t*n**+e,r)}_scheduleReconnection(e,t=0){let n=this._reconnectionOptions.maxRetries;if(t>=n){this.onerror?.(Error(`Maximum reconnection attempts (${n}) exceeded.`));return}let r=this._getNextReconnectionDelay(t);this._reconnectionTimeout=setTimeout(()=>{this._startOrAuthSse(e).catch(n=>{this.onerror?.(Error(`Failed to reconnect SSE stream: ${n instanceof Error?n.message:String(n)}`)),this._scheduleReconnection(e,t+1)})},r)}_handleSseStream(e,t,n){if(!e)return;let{onresumptiontoken:r,replayMessageId:i}=t,a,o=!1,s=!1;(async()=>{try{let t=e.pipeThrough(new TextDecoderStream).pipeThrough(new Mu({onRetry:e=>{this._serverRetryMs=e}})).getReader();for(;;){let{value:e,done:n}=await t.read();if(n)break;if(e.id&&(a=e.id,o=!0,r?.(e.id)),e.data&&(!e.event||e.event===`message`))try{let t=Ct.parse(JSON.parse(e.data));un(t)&&(s=!0,i!==void 0&&(t.id=i)),this.onmessage?.(t)}catch(e){this.onerror?.(e)}}(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted&&this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){if(this.onerror?.(Error(`SSE stream disconnected: ${e}`)),(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted)try{this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){this.onerror?.(Error(`Failed to reconnect: ${e instanceof Error?e.message:String(e)}`))}}})()}async start(){if(this._abortController)throw Error(`StreamableHTTPClientTransport already started! If using Client class, note that connect() calls start() automatically.`);this._abortController=new AbortController}async finishAuth(e){if(!this._authProvider)throw new Xl(`No auth provider`);if(await ou(this._authProvider,{serverUrl:this._url,authorizationCode:e,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Xl(`Failed to authorize`)}async close(){this._reconnectionTimeout&&=(clearTimeout(this._reconnectionTimeout),void 0),this._abortController?.abort(),this.onclose?.()}async send(e,t){try{let{resumptionToken:n,onresumptiontoken:r}=t||{};if(n){this._startOrAuthSse({resumptionToken:n,replayMessageId:Ot(e)?e.id:void 0}).catch(e=>this.onerror?.(e));return}let i=await this._commonHeaders();i.set(`content-type`,`application/json`),i.set(`accept`,`application/json, text/event-stream`);let a={...this._requestInit,method:`POST`,headers:i,body:JSON.stringify(e),signal:this._abortController?.signal},o=await(this._fetch??fetch)(this._url,a),s=o.headers.get(`mcp-session-id`);if(s&&(this._sessionId=s),!o.ok){let t=await o.text().catch(()=>null);if(o.status===401&&this._authProvider){if(this._hasCompletedAuthFlow)throw new Pu(401,`Server returned 401 after successful authentication`);let{resourceMetadataUrl:t,scope:n}=uu(o);if(this._resourceMetadataUrl=t,this._scope=n,await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Xl;return this._hasCompletedAuthFlow=!0,this.send(e)}if(o.status===403&&this._authProvider){let{resourceMetadataUrl:t,scope:n,error:r}=uu(o);if(r===`insufficient_scope`){let r=o.headers.get(`WWW-Authenticate`);if(this._lastUpscopingHeader===r)throw new Pu(403,`Server returned 403 after trying upscoping`);if(n&&(this._scope=n),t&&(this._resourceMetadataUrl=t),this._lastUpscopingHeader=r??void 0,await ou(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetch})!==`AUTHORIZED`)throw new Xl;return this.send(e)}}throw new Pu(o.status,`Error POSTing to endpoint: ${t}`)}if(this._hasCompletedAuthFlow=!1,this._lastUpscopingHeader=void 0,o.status===202){await o.body?.cancel(),pn(e)&&this._startOrAuthSse({resumptionToken:void 0}).catch(e=>this.onerror?.(e));return}let c=(Array.isArray(e)?e:[e]).filter(e=>`method`in e&&`id`in e&&e.id!==void 0).length>0,l=o.headers.get(`content-type`);if(c){if(l?.includes(`text/event-stream`))this._handleSseStream(o.body,{onresumptiontoken:r},!1);else if(l?.includes(`application/json`)){let e=await o.json(),t=Array.isArray(e)?e.map(e=>Ct.parse(e)):[Ct.parse(e)];for(let e of t)this.onmessage?.(e)}else throw await o.body?.cancel(),new Pu(-1,`Unexpected content type: ${l}`)}else await o.body?.cancel()}catch(e){throw this.onerror?.(e),e}}get sessionId(){return this._sessionId}async terminateSession(){if(this._sessionId)try{let e=await this._commonHeaders(),t={...this._requestInit,method:`DELETE`,headers:e,signal:this._abortController?.signal},n=await(this._fetch??fetch)(this._url,t);if(await n.body?.cancel(),!n.ok&&n.status!==405)throw new Pu(n.status,`Failed to terminate session: ${n.statusText}`);this._sessionId=void 0}catch(e){throw this.onerror?.(e),e}}setProtocolVersion(e){this._protocolVersion=e}get protocolVersion(){return this._protocolVersion}async resumeStream(e,t){await this._startOrAuthSse({resumptionToken:e,onresumptiontoken:t?.onresumptiontoken})}};function Iu(e){return Xr.join(Xr.dirname(e),`..`,`Frameworks`,`OpenKnowledge Server.app`,`Contents`,`MacOS`,`OpenKnowledge Helper`)}const Lu=/\/[^/]+\.app\/Contents\/MacOS\/[^/]+$/;function Ru(e){if(e.platform!==`darwin`||!Lu.test(e.execPath))return null;let t=Iu(e.execPath);return e.exists(t)?t:null}function zu(e={}){let t=e.execPath??process.execPath,n=e.platform??process.platform,r=e.argv??process.argv,i=e.exists??H,a=r[1];return a?{command:Ru({execPath:t,platform:n,exists:i})??t,prefixArgs:[a]}:(console.warn(`[self-spawn] process.argv[1] is empty — falling back to \`npx -y @inkeep/open-knowledge@latest\`. This re-introduces the registry-fetch surface that re-exec was fixing. Observed argv: ${JSON.stringify(r)}`),{command:`npx`,prefixArgs:[`-y`,`@inkeep/open-knowledge@latest`]})}function Bu(e){return(t,n)=>{if((n?.method??`GET`).toUpperCase()===`GET`)return globalThis.fetch(t,n);let r=new AbortController,i=setTimeout(()=>r.abort(Error(`MCP request timed out after ${e}ms`)),e),a=n?.signal instanceof AbortSignal?AbortSignal.any([n.signal,r.signal]):r.signal;return globalThis.fetch(t,{...n,signal:a}).finally(()=>clearTimeout(i))}}function Vu(e){if(e===void 0||e===``)return;let t=Number.parseInt(e,10);if(!(Number.isNaN(t)||t<=0))return t}function Hu(e){return e===`0.0.0.0`||e===`::`?`localhost`:e.includes(`:`)&&!e.startsWith(`[`)?`[${e}]`:e}function Uu(e,t){return`http://${Hu(e)}:${t}/mcp`}function Wu(e){return`${e}/mcp`}function Gu(e){return e.replace(/^http/,`ws`)}function Ku(e){let t=new URL(e);return t.protocol=t.protocol===`https:`?`wss:`:`ws:`,t.pathname=``,t.search=``,t.hash=``,t.toString().replace(/\/$/,``)}function qu(e,t){if(e&&e.draining!==!0&&t(e.pid))return Tt(e,{fallbackHost:`127.0.0.1`})??void 0}function Ju(e){if(!H(e))return``;let t=o(W(e,`utf-8`)).trim();return t.length>8192?`…${t.slice(-8192)}`:t}function Yu(e,t){return`server did not start within ${e}ms${t?` stderr:\n${t}`:``}`}function Xu(e){if(e&&typeof e==`object`&&`method`in e&&`id`in e)return e.id}function Zu(e){if(!e||typeof e!=`object`||!(`result`in e))return;let t=e.result;if(!t||typeof t!=`object`||!(`protocolVersion`in t))return;let n=t.protocolVersion;return typeof n==`string`?n:void 0}function Qu(e,t){return{jsonrpc:`2.0`,id:e,error:{code:-32e3,message:t instanceof Error?t.message:String(t)}}}async function $u(e){let t=e.readLock??(()=>Qe(e.lockDir)),n=e.isAlive??Ye,r=e.sleep??(e=>yi(e)),i=e.spawn??Kr,a=e.readErrorLog??Ju,o=e.openErrorLog??(e=>$e(e,process.pid)),s=e.closeFd??ni,c=e.timeoutMs??5e3,l=e.pollIntervalMs??100;if(e.portOverride!==void 0){let t=Number.parseInt(e.portOverride,10);if(Number.isNaN(t)||t<=0)throw Error(`invalid --port value '${e.portOverride}' — HTTP MCP shim requires a positive port`);return Uu(ge,t)}let u=t(),d=qu(u,n);if(d!==void 0)return Wu(d);if(e.envAutoStart===`0`)throw new Mt(`OpenKnowledge server is not running and OK_MCP_AUTOSTART=0 disables auto-start.`);if(u!==null&&u.draining===!0&&n(u.pid)){let e=Date.now(),i=e+c,a=!0;for(;Date.now()<i;){let e=t();if(e===null||e.draining!==!0||!n(e.pid)){a=!1;break}await r(l)}console.error(`[mcp-shim] waited ${Date.now()-e}ms for a draining predecessor server${a?` (timed out — proceeding anyway)`:``}`);let o=qu(t(),n);if(o!==void 0)return Wu(o)}H(e.lockDir)||U(e.lockDir,{recursive:!0});let f=z(e.lockDir,ie),p=o(f),m,h,g=zu();try{try{m=i(g.command,[...g.prefixArgs,`start`],{detached:!0,stdio:[`ignore`,`ignore`,p],windowsHide:!0,cwd:e.contentDir,env:{...process.env,OK_LOCK_KIND:`mcp-spawned`,ELECTRON_RUN_AS_NODE:`1`}}),m.on(`error`,e=>{h=e instanceof Error?e.message:String(e)}),m.unref()}catch(e){h=e instanceof Error?e.message:String(e)}}finally{try{s(p)}catch{}}let _=Date.now()+c;for(;Date.now()<_;){if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}`)}await r(l);let e=qu(t(),n);if(e!==void 0)return Wu(e)}if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}`)}throw Error(Yu(c,a(f)))}function ed(e,t){if(e.portOverride!==void 0)return Ku(t);let n=e.readLock??(()=>Qe(e.lockDir)),r=e.isAlive??Ye,i=qu(n(),r);if(i!==void 0)return Gu(i)}async function td(e,t={}){let n=t.stderr??process.stderr,r=t.requestTimeoutMs??12e4,i=t.createStdioTransport?t.createStdioTransport(t.stdin,t.stdout):new ol(t.stdin,t.stdout),a=t.createHttpTransport?t.createHttpTransport(new URL(e)):new Fu(new URL(e),{fetch:Bu(r),requestInit:{headers:{...c({kind:`mcp`,runtimeVersion:jt}),...t.connectionId===void 0?{}:{[xt]:t.connectionId}}}}),o=!1,s=async()=>{o||(o=!0,t.onclose?.(),await Promise.allSettled([i.close(),a.close()]))};i.onerror=e=>{n.write(`[mcp-shim] stdio error: ${e.message}\n`)},a.onerror=e=>{n.write(`[mcp-shim] HTTP transport error: ${e.message}\n`)},i.onclose=()=>{s()},a.onclose=()=>{s()};let l=Promise.resolve();i.onmessage=e=>{l=l.then(async()=>{try{await a.send(e)}catch(t){let r=Xu(e);if(r===void 0){n.write(`[mcp-shim] failed to forward stdio notification: ${t instanceof Error?t.message:String(t)}\n`);return}await i.send(Qu(r,t)).catch(e=>{n.write(`[mcp-shim] failed to write stdio error response: ${e instanceof Error?e.message:String(e)}\n`)})}}).catch(e=>{n.write(`[mcp-shim] unexpected stdio forwarding failure: ${e instanceof Error?e.message:String(e)}\n`)})},a.onmessage=e=>{let t=Zu(e);t&&a.setProtocolVersion?.(t),i.send(e).catch(e=>{n.write(`[mcp-shim] failed to write stdio response: ${e instanceof Error?e.message:String(e)}\n`)})};try{await a.start(),await i.start()}catch(e){throw await s(),e}return{close:s}}async function nd(e){let t=e.stderr??process.stderr,n=e.bridgeFn??td,r=await $u(e),i=e.createConnectionId?.()??_i(),a=!1,o=(e.startKeepalive??nl)({connectionId:i,pid:process.pid,resolveWsUrl:async()=>ed(e,r),log:e=>t.write(`[mcp-shim] keepalive: ${e}\n`)});t.write(`[mcp-shim] proxying stdio to ${r}\n`);let s;try{s=await n(r,{stderr:t,connectionId:i,onclose:()=>{a||(o.close(),process.exit(0))}})}catch(e){throw o.close(),e}let c=()=>{a=!0,o.close(),s.close().finally(()=>{process.exit(0)})};process.once(`SIGINT`,c),process.once(`SIGTERM`,c)}const rd=/^mcp\.\d{4}-\d{2}-\d{2}\.log$/;function id(){return z(fi(),`.ok`,`logs`)}function ad(e,t=()=>new Date){try{let n=t().getTime(),r=oi(e).filter(e=>rd.test(e)).flatMap(t=>{try{let n=G(z(e,t));return[{name:t,mtime:n.mtimeMs,size:n.size}]}catch{return[]}}),i=[];for(let t of r)if(n-t.mtime>6048e5)try{K(z(e,t.name))}catch{}else i.push(t);i.sort((e,t)=>e.mtime-t.mtime);let a=i.reduce((e,t)=>e+t.size,0);for(let t of i){if(a<=47185920)break;try{K(z(e,t.name)),a-=t.size}catch{}}}catch{}}function od(e={}){let t=e.logsDir??id(),n=e.now??(()=>new Date),r=e.pruneDelayMs??5e3;r<=0?ad(t,n):setTimeout(()=>ad(t,n),r).unref?.();let i=0,a=!1;return{write(e){if(!(i>=5))try{a||=(U(t,{recursive:!0}),!0);let r=n().toISOString(),o=z(t,`mcp.${r.slice(0,10)}.log`);ti(o,`${r} ${e}`),i=0}catch{a=!1,i++}}}}const sd=$r(import.meta.url),cd=vi(Ur);async function ld(e){try{let{stdout:t}=await cd(`git`,[`-C`,e,`worktree`,`list`,`--porcelain`],A({timeout:2e3}));return t.split(`
+`).filter(e=>e.startsWith(`worktree `)).length}catch{return 0}}function ud(e){let t=V(e);for(;;){if(Qt(t))return t;let n=R(t);if(n===t)throw Error(`No OpenKnowledge project found at or above ${e}. Pass an explicit \`cwd\` argument that points inside an OK project (a directory with a \`${de}\`).`);t=n}}function dd(e){try{let t=new URL(e);return t.protocol===`file:`?$r(t):void 0}catch{return}}async function fd(e){if(!e.getClientCapabilities()?.roots)return;let t;try{t=await e.listRoots()}catch(t){e.log?.(`listRoots fallback failed: ${t instanceof Error?t.message:String(t)}`);return}let n=t.roots??[];if(n.length!==1)return;let r=dd(n[0].uri);return r===void 0&&e.log?.(`single root URI not usable as fs path: ${n[0].uri}`),r}async function pd(e,t,n,r=ud){if(e!==void 0){let t=r(e);return{projectDir:t,viaRootGuess:!1,nextSticky:t}}if(t!==void 0){let e=r(t);return{projectDir:e,viaRootGuess:!1,nextSticky:e}}let i=await n();return i===void 0?{projectDir:void 0,viaRootGuess:!1,nextSticky:void 0}:{projectDir:r(i),viaRootGuess:!0,nextSticky:void 0}}async function md(e){let t=od(),n={write:e=>(t.write(e),process.stderr.write(e))},r=e.spawnTimeoutMs??Vu(process.env.OK_MCP_SPAWN_TIMEOUT_MS),a=e.envAutoStart??process.env.OK_MCP_AUTOSTART,o=Br({startupCwd:e.startupCwd,startupConfig:e.startupConfig}),s=new Pt({name:i,version:jt});ze(s);let c=_i(),u={current:{connectionId:c,displayName:c,colorSeed:c}},d=new Map,f=e=>{if(d.has(e))return;let t=Ut(e),r=u.current,i=nl({connectionId:c,pid:process.pid,displayName:r.displayName,clientName:r.clientInfo?.name??r.displayName,colorSeed:r.colorSeed,resolveWsUrl:async()=>ed({lockDir:t,contentDir:e},``),log:t=>n.write(`[mcp] keepalive[${e}]: ${t}\n`)});d.set(e,i)},p=()=>fd({getClientCapabilities:()=>s.server.getClientCapabilities(),listRoots:()=>s.server.listRoots(),log:e=>n.write(`[mcp] ${e}\n`)}),m,h=!1,g=async e=>{if(h)return;h=!0;let t=await ld(e);if(t<=1){h=!1;return}let r=`Routed to ${e} from the MCP client's single advertised root, but this repo has ${t} git worktrees. If you are working in a worktree, pass its path as \`cwd\` on OK tool calls once — it sticks for the session, so reads, writes, and the preview all target that worktree instead of this checkout.`;try{n.write(`[mcp] ${r}\n`),await s.server.sendLoggingMessage({level:`warning`,data:r})}catch{}},_=async e=>{let t=await pd(e,m,p);if(m=t.nextSticky??m,t.projectDir===void 0)throw Error("`cwd` is required for tool calls against the global MCP server. Pass an absolute path inside an OpenKnowledge project, or have the MCP client advertise a single root.");return t.viaRootGuess&&g(t.projectDir),t.projectDir},v=async e=>{let t=await pd(e,m,p);if(m=t.nextSticky??m,t.projectDir===void 0)return;t.viaRootGuess&&g(t.projectDir);let n=t.projectDir,i=await o(n),s=await $u({lockDir:Ut(n),contentDir:ot(i,n),envAutoStart:a,...r===void 0?{}:{timeoutMs:r}});return f(n),s.replace(/\/mcp$/,``)};s.server.oninitialized=()=>{let e=s.server.getClientVersion(),t=Le(e?.name,c);u.current={connectionId:c,clientInfo:e?{name:t,version:e.version}:void 0,displayName:t,colorSeed:t}},Ge(s,{serverUrl:v,resolveCwd:_,config:o,identityRef:u,isHostedAgent:l(process.env)}),Ve(s);let y=new ol,b=!1,x,S,ee=async()=>{if(b)return;b=!0,x?.stop(),S?.stop();for(let e of d.values())try{e.close()}catch(e){n.write(`[mcp] keepalive close error: ${e instanceof Error?e.message:String(e)}\n`)}d.clear();let e=await Promise.allSettled([s.close(),y.close()]);for(let t of e)if(t.status===`rejected`){let e=t.reason;n.write(`[mcp] shutdown close error: ${e instanceof Error?e.message:String(e)}\n`)}};await s.connect(y),n.write(`[mcp] global stdio server ready (per-call project routing)
+`);let te=!1,C=()=>{te||(te=!0,setTimeout(()=>{n.write(`[mcp] shutdown deadline (5s) reached — forcing exit(1)
+`),process.exit(1)},5e3).unref(),ee().finally(()=>{process.exit(0)}))};if(process.once(`SIGINT`,C),process.once(`SIGTERM`,C),process.stdin.on(`end`,()=>{n.write(`[mcp] stdin end — host disconnected, shutting down
+`),C()}),process.stdin.on(`error`,e=>{n.write(`[mcp] stdin error (${e instanceof Error?e.message:String(e)}) — host disconnected, shutting down\n`),C()}),S=ul({getPpid:()=>process.ppid,onHostGone:e=>{n.write(`[mcp] ${e} — shutting down\n`),C()}}),dl({log:e=>n.write(`${e}\n`),transport:y,process,stdin:process.stdin}),process.platform===`darwin`){let e=ll(sd,{realpathSync:ci,statInoSync:e=>G(e).ino,log:e=>n.write(`${e}\n`)});if(e!==void 0){n.write(`[mcp] bundle identity anchor=${e.resolvedPath} inode=${e.inode} version=${jt}\n`);let{resolvedPath:t,inode:r}=e;x=cl({detect:()=>sl({bundleAnchorPath:sd,currentInode:r,platform:process.platform,realpath:ci,statInode:e=>G(e).ino}),onReplaced:e=>{n.write(`[mcp] bundle replaced anchor=${t} bootInode=${e.currentInode} onDiskInode=${e.onDiskInode} version=${jt} — exiting for host respawn\n`),C()},log:e=>n.write(`[mcp] ${e}\n`)})}}return{close:ee}}function hd(e){return new j(`mcp`).description(`Start MCP stdio server for project knowledge base`).option(`-p, --port <port>`,`Override per-call routing and proxy stdio to this HTTP MCP port (skips bundle proxy)`,void 0).option(`--no-bundle-proxy`,`Run the npm-fetched MCP server in-process instead of proxying to the Desktop app bundle (macOS-only proxy; no-op elsewhere; equivalent: OK_BUNDLE_PROXY=0)`).action(async t=>{try{let n=e(),r=process.cwd();if(t.port!==void 0){let e=Vu(process.env.OK_MCP_SPAWN_TIMEOUT_MS);await nd({lockDir:``,contentDir:``,portOverride:t.port,envAutoStart:process.env.OK_MCP_AUTOSTART,timeoutMs:e});return}let i=t.bundleProxy===!1?[...process.argv,`--no-bundle-proxy`]:process.argv,a=$c(process.env,i,process.platform);if(a.proxy){let e=Qc(process.platform,fi(),{existsSync:H});if(e===null)el({stderr:process.stderr,mode:`fallback-absent`,bundlePath:null,reason:`no installed OpenKnowledge.app bundle found`});else try{await tl({bundlePath:e,argv:process.argv.slice(2),env:process.env,stderr:process.stderr});return}catch(t){el({stderr:process.stderr,mode:`fallback-exec-failed`,bundlePath:e,reason:t instanceof Error?t.message:String(t)})}}else{let e=a.suppressedBy===`env`?`suppressed-env`:a.suppressedBy===`flag`?`suppressed-flag`:a.suppressedBy===`self`?`suppressed-self`:`suppressed-platform`;el({stderr:process.stderr,mode:e,bundlePath:null,reason:null})}await md({startupCwd:r,startupConfig:n})}catch(e){process.stderr.write(`MCP server failed to start: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1}})}const gd=/<aside>\s*([\s\S]*?)\s*<\/aside>/g,_d=/^(?:\p{Extended_Pictographic}️?\s*)+/u;function vd(e){return e.replace(gd,(e,t)=>{let n=t.replace(/\r\n/g,`
 `).split(`
 `);for(;n.length>0&&n[0].trim()===``;)n.shift();for(;n.length>0&&n[n.length-1].trim()===``;)n.pop();if(n.length>0)for(n[0]=n[0].replace(_d,``);n.length>0&&n[0].trim()===``;)n.shift();let r=n.map(e=>e.trim()===``?`>`:`> ${e}`).join(`
 `);return r?`> [!note]\n${r}`:`> [!note]`})}const yd=/(!?)\[([^\]]*)\]\(data:image\/([a-z0-9.+-]+);base64,([A-Za-z0-9+/=\s]+?)\)/gi,bd={png:`png`,jpeg:`jpg`,jpg:`jpg`,gif:`gif`,webp:`webp`,"svg+xml":`svg`};function xd(e){return e.replace(/\.(md|mdx)$/i,``).replace(/[^A-Za-z0-9]+/g,`-`).replace(/^-+|-+$/g,``).toLowerCase()||`inline`}function Sd(e,t,n={}){let r=[],i=xd(t),a=0;return{markdown:e.replace(yd,(e,t,o,s,c)=>{if(n.strip)return``;a+=1;let l=bd[s.toLowerCase()]??s.toLowerCase().replace(/[^a-z0-9]/g,``),u=`${i}-inline-${a}.${l}`,d=new Uint8Array(Buffer.from(c.replace(/\s+/g,``),`base64`));return r.push({filename:u,bytes:d}),`![${o}](${u})`}),assets:r}}function Cd(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n=[],r=``,i=[],a=!1,o=!1,s=()=>{i.push(r),r=``},c=()=>{s(),n.push(i),i=[],o=!1};for(let e=0;e<t.length;e++){let n=t[e];if(a){n===`"`?t[e+1]===`"`?(r+=`"`,e++):a=!1:r+=n,o=!0;continue}n===`"`?(a=!0,o=!0):n===`,`?(s(),o=!0):n===`
@@ -78,10 +78,10 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function Qd(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function $d(e){return/\s/.test(e)?`<${e}>`:e}function ef(e,t={}){let{header:n,rows:r}=Cd(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(Qd).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=Qd(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${$d(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function tf(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function nf(e,t){return`# ${e}\n\n${t}\n`}const rf=[`links`,`frontmatter`,`callouts`,`images`,`tables`],af=/\.mdx?$/i;function of(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function sf(e,t={}){let n=t.selected??new Set(rf),r=Wd(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:of(!1)};let i=of(r),a=Vd(e),o=Md(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!af.test(e)||s&&l.has(e))continue;let r;try{r=W(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Sd(a,Jr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:z(R(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=vd(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=Zd(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Bd(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=ef(e.csvText,{linkForTitle:t=>{let n=kd(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?B(R(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=W(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=nf(o===null?e.fallbackTitle:tf(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Bd(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function cf(e){for(let t of e.assets)U(R(t.path),{recursive:!0}),di(t.path,t.bytes);for(let t of e.changes)U(R(t.path),{recursive:!0}),di(t.path,t.content,`utf8`);for(let t of e.deletions)try{K(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const lf={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},uf=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function df(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of uf)n.push(`  ${lf[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function ff(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function pf(e){let t=new Set(rf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${rf.join(`, `)}`);return e})}function mf(e,t){let n=new Set(rf);if(e&&(n=new Set(pf(e))),t)for(let e of pf(t))n.delete(e);return n}function hf(){let e=new j(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=mf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=sf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{cf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?ff(a,{applied:t.apply??!1}):df(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function gf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function _f(e,t={}){let n=gf(e,t.platform??process.platform,t.desktopBundlePath);return $n(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function vf(e,t,n=process.platform){let r=gf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function yf(e=()=>Xn(nr())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>rn({lockDir:k(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:_f,findAncestorProject:e=>Ne(R(V(e)))?.rootPath??null,isProjectRoot:e=>Ne(e)?.distance===0,enclosingProject:e=>Ne(V(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function bf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function xf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function Sf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${vf(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Cf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=V(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(bf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!xe.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${xe.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${bt(e,s)}`;return Sf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return xf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${_t(s)}`;return Sf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return xf(n)}if(l)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${Ke(s)}`;return Sf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return xf(n)}function wf(){return new j(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${xe.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Cf(e,t,yf())})}function Tf(e){return new j(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CW03bkke.mjs`),r=e(),i=process.cwd(),a=ot(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ef(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Df(e,t,n=process.cwd()){let r=e.op??`sync`,i=k(n),o=Qe(i);if(o&&o.port>0){let t=`http://127.0.0.1:${o.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${o.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...a({kind:`cli`,runtimeVersion:jt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ef(e.json,{type:`triggered`,op:r,port:o.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let s=Vt({baseDir:n});if(r===`sync`||r===`pull`){Ef(e.json,{type:`step`,step:`pull`});let t=await s.pull();Ef(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ef(e.json,{type:`step`,step:`push`}),await s.push(),Ef(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
-`)),Ef(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Of(e){return new j(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function kf(e){return new j(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Af(e){return new j(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const jf={existsSync:e=>H(e),isDirectory:e=>{try{return G(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>oi(e),readFileSync:e=>W(e),writeFileSync:(e,t)=>{di(e,t)},mkdirSync:(e,t)=>{U(e,t)},rmSync:(e,t)=>{ui(e,t)}},Mf={resolveProjectBundledSkillDir:()=>St(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>St(e,{checkDesktop:!1}),readBundledVersion:()=>tt(),readRecordedVersion:e=>Ze(e,`cli-hosts`),writeRecordedVersion:(e,t)=>Kt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>Fe(e),readBundleDecision:(e,t)=>ht(e,t),writeBundleDecision:(e,t,n)=>an(e,t,n),removeBundleFromDisk:(e,t)=>Cr(e,t)};function Nf(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function Pf(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(R(t),{recursive:!0}),Ff(e,t,n)}function Ff(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=z(e,r),a=z(t,r);n.isDirectory(i)?Ff(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function If(e,t,n){return n.existsSync(z(e,`.agents`,`skills`,t))||be.some(r=>n.existsSync(z(e,r.skillsRoot,t)))}function Lf(e,t,n,r,i,a){let o=[],s=z(e,`.agents`,`skills`,t);if(If(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of be){let i=z(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(z(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(z(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{Pf(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of be){let l=z(e,c.hostDir),u=z(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{Pf(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function Rf(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function zf(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>z(st(R(e)),Jr(e));return a(t)===a(i)}function Bf(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Pn){let s=z(e,n.hostDir,`skills`,`open-knowledge`),c=z(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Nn[n.editorId],u=l?.projectConfigPath?.(e);if(zf(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!Rf(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Sn(s,e),Pf(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function Vf(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of gt)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=Wt[i.id],o=If(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!d(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let f=u.every(t=>If(e,Wt[t.id],n));if(s!==null&&s===o&&f)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let p=[],m=c.length===gt.length,h=[];for(let{id:t,sourceDir:i}of u){let a=Lf(e,Wt[t],i,n,r,o);p.push(...a.entries),h.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let g=h.some(e=>e.centralFailed),_=h.every(e=>e.landed);if(m&&_&&!g){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of h)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{m||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of h)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:p}}async function Hf(e){let t=e.logger??Nf,n=e.fs??jf,r=e.home??fi(),i={...Mf,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=Bf(e.projectDir,r,i,n,t),o=await Vf(r,i,n,t),s=br(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=ur(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function Uf(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function Wf(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
+`)}function ff(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function pf(e){let t=new Set(rf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${rf.join(`, `)}`);return e})}function mf(e,t){let n=new Set(rf);if(e&&(n=new Set(pf(e))),t)for(let e of pf(t))n.delete(e);return n}function hf(){let e=new j(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=mf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=sf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{cf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?ff(a,{applied:t.apply??!1}):df(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function gf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function _f(e,t={}){let n=gf(e,t.platform??process.platform,t.desktopBundlePath);return $n(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function vf(e,t,n=process.platform){let r=gf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function yf(e=()=>Xn(nr())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>rn({lockDir:k(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:_f,findAncestorProject:e=>Ne(R(V(e)))?.rootPath??null,isProjectRoot:e=>Ne(e)?.distance===0,enclosingProject:e=>Ne(V(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function bf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function xf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function Sf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${vf(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Cf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=V(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(bf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!h.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${h.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${bt(e,s)}`;return Sf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return xf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${_t(s)}`;return Sf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return xf(n)}if(l)return Sf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${Ke(s)}`;return Sf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return xf(n)}function wf(){return new j(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${h.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Cf(e,t,yf())})}function Tf(e){return new j(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-D5inGBaA.mjs`),r=e(),i=process.cwd(),a=ot(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ef(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function Df(e,t,n=process.cwd()){let r=e.op??`sync`,i=k(n),a=Qe(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...c({kind:`cli`,runtimeVersion:jt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ef(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=Vt({baseDir:n});if(r===`sync`||r===`pull`){Ef(e.json,{type:`step`,step:`pull`});let t=await o.pull();Ef(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ef(e.json,{type:`step`,step:`push`}),await o.push(),Ef(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)),Ef(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Of(e){return new j(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function kf(e){return new j(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Af(e){return new j(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Df({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const jf={existsSync:e=>H(e),isDirectory:e=>{try{return G(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>oi(e),readFileSync:e=>W(e),writeFileSync:(e,t)=>{di(e,t)},mkdirSync:(e,t)=>{U(e,t)},rmSync:(e,t)=>{ui(e,t)}},Mf={resolveProjectBundledSkillDir:()=>St(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>St(e,{checkDesktop:!1}),readBundledVersion:()=>tt(),readRecordedVersion:e=>Ze(e,`cli-hosts`),writeRecordedVersion:(e,t)=>Kt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>Fe(e),readBundleDecision:(e,t)=>ht(e,t),writeBundleDecision:(e,t,n)=>an(e,t,n),removeBundleFromDisk:(e,t)=>Cr(e,t)};function Nf(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function Pf(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(R(t),{recursive:!0}),Ff(e,t,n)}function Ff(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=z(e,r),a=z(t,r);n.isDirectory(i)?Ff(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function If(e,t,n){return n.existsSync(z(e,`.agents`,`skills`,t))||m.some(r=>n.existsSync(z(e,r.skillsRoot,t)))}function Lf(e,t,n,r,i,a){let o=[],s=z(e,`.agents`,`skills`,t);if(If(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of m){let i=z(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(z(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(z(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{Pf(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of m){let l=z(e,c.hostDir),u=z(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{Pf(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function Rf(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function zf(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>z(st(R(e)),Jr(e));return a(t)===a(i)}function Bf(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Pn){let s=z(e,n.hostDir,`skills`,`open-knowledge`),c=z(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Nn[n.editorId],u=l?.projectConfigPath?.(e);if(zf(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!Rf(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Sn(s,e),Pf(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function Vf(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of gt)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=Wt[i.id],o=If(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!_(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>If(e,Wt[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===gt.length,m=[];for(let{id:t,sourceDir:i}of u){let a=Lf(e,Wt[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function Hf(e){let t=e.logger??Nf,n=e.fs??jf,r=e.home??fi(),i={...Mf,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=Bf(e.projectDir,r,i,n,t),o=await Vf(r,i,n,t),s=br(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=ur(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function Uf(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function Wf(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function Gf(){return new j(`repair-skills`).description("Refresh bundled SKILL.md files for installed AI editors (project-local + user-global). Runs automatically during `ok start`; this command forces an explicit sweep.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await Hf({projectDir:V(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>Kf(t,{yes:e.yes===!0})});process.stdout.write(`${Wf(t)}\n`),process.exitCode=Uf(t)})}async function Kf(e,t){let n=fi(),r=e=>`~/${B(n,e)}`,i=t.input??process.stdin,a=[``,L(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),N(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${L(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${L(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,N(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
-`)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${I("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=bi({input:i,output:process.stdout});try{let e=(await o.question(`\n${L(`Remove them?`)} ${N(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function qf(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${I(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let n=[...new Set([c,...s.map(e=>y[e])].filter(e=>e!==null).map(l))].map(e=>`${e}/`);return`\n${I(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${n.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function Jf(e){return typeof e==`string`&&Zt.includes(e)}async function Yf(e={}){let t=V(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Nt[n])return{status:`failed`,message:`${F(`Error:`)} Unknown pack "${n}". Available: ${Zt.join(`, `)}`,exitCode:1};let r;try{r=await Dt({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Ft?{status:`prerequisite-missing`,message:`${F(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${F(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!x(r)){let e=Nt[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${I(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=qf(r,e);return{status:`no-op`,message:`${P(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${N(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Et(Nt[n]);return{status:`dry-run`,message:`${L(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${L(`Plan:`)}\n\n${Zf(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await Qf(`${L(`Plan:`)}\n\n${Zf(r,t)}\n\n${L(`Apply?`)} ${N(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:N(`Cancelled.`),plan:r,exitCode:0};let i=await et(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${F(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${I(`Applied`)} ${i.applied} entries, ${I(String(i.errors.length))} error(s):`,...e].join(`
+`)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${I("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=bi({input:i,output:process.stdout});try{let e=(await o.question(`\n${L(`Remove them?`)} ${N(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function qf(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${I(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let n=[...new Set([g,...te.map(e=>Ae[e])].filter(e=>e!==null).map(ae))].map(e=>`${e}/`);return`\n${I(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${n.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function Jf(e){return typeof e==`string`&&Zt.includes(e)}async function Yf(e={}){let t=V(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Nt[n])return{status:`failed`,message:`${F(`Error:`)} Unknown pack "${n}". Available: ${Zt.join(`, `)}`,exitCode:1};let r;try{r=await Dt({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Ft?{status:`prerequisite-missing`,message:`${F(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${F(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!S(r)){let e=Nt[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${I(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=qf(r,e);return{status:`no-op`,message:`${P(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${N(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Et(Nt[n]);return{status:`dry-run`,message:`${L(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${L(`Plan:`)}\n\n${Zf(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await Qf(`${L(`Plan:`)}\n\n${Zf(r,t)}\n\n${L(`Apply?`)} ${N(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:N(`Cancelled.`),plan:r,exitCode:0};let i=await et(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${F(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${I(`Applied`)} ${i.applied} entries, ${I(String(i.errors.length))} error(s):`,...e].join(`
 `),plan:r,exitCode:1}}let a=Nt[n].name,o=i.packSkillsInstalled.length>0?`\n${N(`Installed the ${a} skills for: ${i.packSkillsInstalled.join(`, `)}`)}`:``,s=i.pluginsEnabled.length>0?`\n${N(`Enabled plugin(s) included with this pack: ${i.pluginsEnabled.join(`, `)} — turn off any time in Settings.`)}`:``,c=(i.packSkillConflicts??[]).map(e=>e.hosts===void 0||e.hosts.length===0?`\n${I(`!`)} Skill "${e.name}" was not installed — you already have your own skill with that name. Rename yours if you want the pack's version.`:`\n${I(`!`)} Skill "${e.name}" was not installed for ${e.hosts.join(`, `)} — you already have your own skill with that name there. Rename yours if you want the pack's version.`).join(``);return{status:`applied`,message:`${P(`✓ Seeded ${a}`)} ${N(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}${s}${qf(r,a)}${c}`,plan:r,exitCode:0}}function Xf(){let e=[L(`Available packs:`)];for(let t of Zt){let n=Nt[t];e.push(`  ${P(t)}  ${N(`—`)} ${n.name}: ${n.description}`)}return e.join(`
 `)}function Zf(e,t){let n=[],r=e.created.filter(e=>e.kind===`folder`),i=e.created.filter(e=>e.kind===`file`);if(r.length>0){n.push(L(`Folders to create:`));for(let e of r)n.push(`  ${P(`+`)} ${M(B(t,V(t,e.path))||e.path)}${N(`/`)}`)}if(i.length>0){n.length>0&&n.push(``),n.push(L(`Files to create:`));for(let e of i)n.push(`  ${P(`+`)} ${M(B(t,V(t,e.path))||e.path)}`)}if(e.skipped.length>0){n.length>0&&n.push(``),n.push(N(`Already present (skipped):`));for(let t of e.skipped)n.push(`  ${N(`· ${t.path} (${t.reason})`)}`)}if(e.warnings.length>0){n.length>0&&n.push(``),n.push(I(`Warnings:`));for(let t of e.warnings)n.push(`  ${I(`!`)} ${t}`)}let a=(e.packSkills??[]).filter(e=>e.conflict);if(a.length>0){n.length>0&&n.push(``),n.push(I(`Name collisions:`));for(let e of a)n.push(`  ${I(`!`)} Skill "${e.name}" is your own — the pack's version will not be installed. Rename yours to install the pack's version.`)}return n.join(`
 `)}async function Qf(e,t){let n=bi({input:t??process.stdin,output:process.stdout});try{let t=(await n.question(e)).trim().toLowerCase();return t===``||t===`y`||t===`yes`}finally{n.close()}}function $f(){return new j(`seed`).description(`Scaffold a starter pack into the project. Defaults to "${mt}" — the Karpathy three-layer knowledge base. Use --pack to pick a different pack (run with --list-packs to see all). Use --root to place pack folders inside a subfolder instead of the project root.`).argument(`[path]`,`Project directory (defaults to cwd)`).option(`-p, --pack <id>`,`Starter pack to scaffold. One of: ${Zt.join(`, `)}. Defaults to "${mt}".`).option(`-r, --root <path>`,`Subfolder (relative to the project dir) to scaffold into — created if missing. Defaults to the project root.`).option(`--list-packs`,`List available starter packs and exit.`).option(`-y, --yes`,`Skip confirmation prompt`).option(`--dry-run`,`Print the plan and exit without writing`).action(async(e,t)=>{if(t.listPacks){process.stdout.write(`${Xf()}\n`);return}if(t.pack!==void 0&&!Jf(t.pack)){process.stderr.write(`${F(`Error:`)} Unknown pack "${t.pack}". Available: ${Zt.join(`, `)}\n`),process.exitCode=1;return}let n=await Yf({cwd:e??process.cwd(),pack:t.pack,root:t.root,yes:t.yes,dryRun:t.dryRun});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}async function ep(e,t,n){try{return await e.repos.get({owner:t,repo:n}),{kind:`ok`,available:!1}}catch(e){let t=e.status;return t===404?{kind:`ok`,available:!0}:t===401?{kind:`auth-required`}:{kind:`network`}}}async function tp(e,t){let{host:n,owner:r,name:i,json:a}=e;ra(n);let o=await co(n,t);if(o==null){if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let s=n===`github.com`?void 0:`https://${n}/api/v3`,c=await ep(new to({auth:o,...s?{baseUrl:s}:{}}),r,i);if(c.kind===`ok`){a?process.stdout.write(`${JSON.stringify({type:`name-check`,available:c.available})}\n`):process.stdout.write(c.available?`available
@@ -89,10 +89,10 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function np(e){return new j(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await tp(t,await e())})}async function rp(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function ip(e,t){let{host:n,json:r}=e;ra(n);let i=await co(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await rp(new to({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function ap(e){return new j(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await ip(t,await e())})}function op(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function sp(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function cp(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function lp(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function up(e){return Vt(Fo(e,[])).env(ko())}function dp(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const fp={ensureOkScaffold:e=>{ft(e)},gitFactory:up};async function pp(e){let t={...fp,...e.deps},n=V(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await lp(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:op(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=z(n,`.git`);if(!H(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await sp({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(op(t)===`name-conflict`){let t=await cp(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:op(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=dp(o.cloneUrl,e.token);try{await i.raw([`push`,c,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function mp(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function hp(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(ra(n),Ue(s)){process.stderr.write(`${new We(V(s)).message}\n`),process.exitCode=64;return}let l=await co(n,t);if(l==null){mp(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new to({auth:l,...u?{baseUrl:u}:{}});try{Gr(`git config user.email`,A({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}mp(c,await pp({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function gp(e){return new j(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await hp(t,await e())})}function _p(){let e=new j(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Jn();return e.addCommand(ap(t)),e.addCommand(np(t)),e.addCommand(gp(t)),e}function vp(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function yp(){return new j(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=Mn(t),r=yn(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){bp(e.json,t,r.reason);return}let i=Dn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${P(`✓`)} ${L(`Sharing mode is already`)} ${P(`local-only`)}${L(`.`)}\n`),vp(r.removed);return}process.stderr.write(`${L(`Sharing mode is already`)} ${P(`local-only`)} ${L(`— nothing to do.`)}\n`);return}process.stderr.write(`${P(`✓`)} ${L(`Sharing mode set to`)} ${P(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${L(`.git/info/exclude`)} (per-clone, not committed).\n`),vp(r.removed)})}function bp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${I({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function xp(){return new j(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=Dn(t),r=Mn(t),i=Un(t,r);if(i.kind===`no-exclude`){Sp(e.json,t,i.reason);return}let a=Dn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${P(`✓`)} ${M(`Sharing mode is already`)} ${L(`shared`)}${M(`.`)}\n`),vp(i.removed);return}process.stderr.write(`${M(`Sharing mode is already`)} ${L(`shared`)} ${M(`— nothing to do.`)}\n`);return}process.stderr.write(`${P(`✓`)} ${L(`Sharing mode set to`)} ${P(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${L(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Sp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${I({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Cp(){return new j(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=Dn(t),r=[...wn(t)],i=Cn(t,Mn(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${wp(n)}`),a.push(``),a.push(`Excluded from git via ${L(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${M(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function wp(e){switch(e){case`shared`:return P(`shared`);case`local-only`:return P(`local-only`);case`no-git`:return I(`no-git (not a git repository)`)}}function Tp(){let e=new j(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(xp()),e.addCommand(yp()),e.addCommand(Cp()),e}const Ep=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Dp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Ep.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Op(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function kp(e){return/\.(md|mdx)$/i.test(e)}function Ap(e,t){if(kp(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function jp(e,t){let n=Dp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Op(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Mp(e=()=>Xn(nr())){return{prepare:cn,detectBundlePath:()=>e().bundlePath??null,openTarget:_f,runProjectOpen:(e,t)=>Cf(e,{project:t},yf()),runBrowserOpen:e=>Pp(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Np(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof kt||e instanceof hn||e instanceof dn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${vf(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function Pp(e){let{createEphemeralProjectDir:t}=await import(`./dist-CupHag_I.mjs`),{loadConfig:n}=await import(`./src-B3l1_6dr.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-CFXx2ECs.mjs`),{openBrowser:o}=await import(`./open-browser-yaMqhpHT.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await gi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ke(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
-`),o(h)),await new Promise(()=>{})}function Fp(){let e=new j(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=V(process.cwd()),n=yt(Ne(t)?.rootPath??t),r=it({projectDir:n}),i={...r,skills:r.skills.filter(e=>ue(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${N(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${L(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?N(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?N(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${P(e.name)}${t}  ${N(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${L(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${M(e.name)} ${N(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=k(process.cwd()),r=pr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${F(`Error:`)} no running Open Knowledge server for this project. Start it with ${L(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${F(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${F(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${M(`Already imported:`)} ${L(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${P(`Imported`)} ${L(o)}${c?N(` (renamed from ${c} — name was taken)`):``} from ${N(s.source??e)}${s.publisher?N(` · ${s.publisher}`):``}.\n${N(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${N(`! ${e}`)}\n`)}),e}function Ip(e){return{server:Lp(`server`,e),ui:e.status===`alive`&&Lt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function Lp(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function Rp(e){return`${zp(e.server)}\n${zp(e.ui)}`}function zp(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Bp(e){let t=e.inspect??(()=>pr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=Ip(t());return e.json?n(JSON.stringify(r,null,2)):n(Rp(r)),r}function Vp(e){return new j(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Bp({lockDir:k(process.cwd()),json:t.json===!0})})}function Hp(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Up(e,t){let n=bi({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function Wp(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(N(`
+`)}\n`)})}function wp(e){switch(e){case`shared`:return P(`shared`);case`local-only`:return P(`local-only`);case`no-git`:return I(`no-git (not a git repository)`)}}function Tp(){let e=new j(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(xp()),e.addCommand(yp()),e.addCommand(Cp()),e}const Ep=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Dp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Ep.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Op(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function kp(e){return/\.(md|mdx)$/i.test(e)}function Ap(e,t){if(kp(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function jp(e,t){let n=Dp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Op(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Mp(e=()=>Xn(nr())){return{prepare:cn,detectBundlePath:()=>e().bundlePath??null,openTarget:_f,runProjectOpen:(e,t)=>Cf(e,{project:t},yf()),runBrowserOpen:e=>Pp(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Np(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof kt||e instanceof hn||e instanceof dn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${vf(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function Pp(e){let{createEphemeralProjectDir:t}=await import(`./dist-CnJNy-bS.mjs`),{loadConfig:n}=await import(`./src-Lf_tsvZf.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BODrVK-4.mjs`),{openBrowser:o}=await import(`./open-browser-CujV-JOE.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await gi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${Ke(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`),o(h)),await new Promise(()=>{})}function Fp(){let e=new j(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=V(process.cwd()),n=yt(Ne(t)?.rootPath??t),r=it({projectDir:n}),i={...r,skills:r.skills.filter(e=>ve(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${N(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${L(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?N(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?N(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${P(e.name)}${t}  ${N(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${L(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${M(e.name)} ${N(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=k(process.cwd()),r=pr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${F(`Error:`)} no running Open Knowledge server for this project. Start it with ${L(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${F(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${F(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${M(`Already imported:`)} ${L(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${P(`Imported`)} ${L(o)}${c?N(` (renamed from ${c} — name was taken)`):``} from ${N(s.source??e)}${s.publisher?N(` · ${s.publisher}`):``}.\n${N(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${N(`! ${e}`)}\n`)}),e}function Ip(e){return{server:Lp(`server`,e),ui:e.status===`alive`&&Lt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function Lp(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function Rp(e){return`${zp(e.server)}\n${zp(e.ui)}`}function zp(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Bp(e){let t=e.inspect??(()=>pr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=Ip(t());return e.json?n(JSON.stringify(r,null,2)):n(Rp(r)),r}function Vp(e){return new j(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Bp({lockDir:k(process.cwd()),json:t.json===!0})})}function Hp(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Up(e,t){let n=bi({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function Wp(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(N(`
 What you share is sent to the OpenKnowledge team.
-`));let n=await xn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:Se.length+1,choices:[...Se.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Up(t,N(`Anything else we should know? (optional) `)),i=await Up(t,N(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function Gp(e){if(!Hp(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>Wp(e)))()}catch{return`failed`}return g(t)?((e.output??process.stderr).write(`\n${L(`Thank you. We read every response.`)}\n\n`),(await(e.submit??ke)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}const Kp=[se.stable,se.beta];function qp(e,t,n=Jp,r=H,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of Kp)for(let n of[`/Applications`,z(e,`Applications`)]){let e=z(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of Kp)for(let n of ye(t)){let i=z(e,`Programs`,n,De(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of Kp){let t=`/opt/${e.productName}`;if(r(z(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function Jp(e){try{return Wr(`npm`,e,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const Yp=`━`.repeat(64);function Xp(e,t=process.platform){let n=[I(Yp),L(`  One more step — remove the OpenKnowledge app itself`),N(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(N(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${M(`OK Desktop`)} — ${e}`),n.push(`    ${M(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${M(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${M(t.label)}`),n.push(`    ${t.instruction}`);return n.push(I(Yp)),n.join(`
+`));let n=await xn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:Ce.length+1,choices:[...Ce.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Up(t,N(`Anything else we should know? (optional) `)),i=await Up(t,N(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function Gp(e){if(!Hp(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>Wp(e)))()}catch{return`failed`}return b(t)?((e.output??process.stderr).write(`\n${L(`Thank you. We read every response.`)}\n\n`),(await(e.submit??Oe)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}const Kp=[ue.stable,ue.beta];function qp(e,t,n=Jp,r=H,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of Kp)for(let n of[`/Applications`,z(e,`Applications`)]){let e=z(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of Kp)for(let n of xe(t)){let i=z(e,`Programs`,n,Ee(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of Kp){let t=`/opt/${e.productName}`;if(r(z(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function Jp(e){try{return Wr(`npm`,e,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const Yp=`━`.repeat(64);function Xp(e,t=process.platform){let n=[I(Yp),L(`  One more step — remove the OpenKnowledge app itself`),N(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(N(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${M(`OK Desktop`)} — ${e}`),n.push(`    ${M(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${M(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${M(t.label)}`),n.push(`    ${t.instruction}`);return n.push(I(Yp)),n.join(`
 `)}function Zp(e){return V(e,`..`,`..`)}function Qp(e){return H(z(e,`.ok`))}async function $p(e){let t=e.findRoot??Ne,n=e.readRecents??sr,r=t(e.cwd)?.rootPath??null,i=Or({home:e.home,platformName:e.platform,env:e.env}),a=new Set;for(let e of n(i))a.add(V(e.path));let o=new Set(e.lockDirs.map(Zp));for(let e of o)a.add(e);r&&a.delete(r);let s=[];r&&Qp(r)&&s.push({path:r,running:o.has(r),current:!0});for(let e of a)Qp(e)&&s.push({path:e,running:o.has(e),current:!1});return s.length===0?[]:e.allProjects?s.map(e=>e.path):e.yes||e.dryRun||!(e.isTTY??process.stdout.isTTY)?[]:(e.promptFn??em)(s)}async function em(e){return bn({message:`Also remove OpenKnowledge from these projects? (space to toggle; none selected by default)
   Removes each project's .ok/ config, editor MCP entries, and OK edit-history
   (.git/ok/). Your markdown content is kept — \`ok start\` re-adds OK later.
@@ -100,7 +100,7 @@ What you share is sent to the OpenKnowledge team.
 `)}`:``,m=N("Individual projects are only removed when you select them (or pass --all-projects). To remove OpenKnowledge from one project, run `ok deinit` inside it."),h=()=>Xp(l(t,e.argv1??process.argv[1],void 0,void 0,{platform:n,env:r}),n);if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(Gs(d,f),null,2):[L(`Would remove (dry-run — no changes made):`),``,`${Hs(d)}${p}`,``,m,``,h()].join(`
 `),exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${F(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes){if(!(e.isTTY??process.stdout.isTTY))return{status:`cancelled`,message:`${F(`Aborted:`)} refusing to uninstall non-interactively without --yes.`,exitCode:1};if(process.stderr.write(`${L(`This will remove OpenKnowledge from your machine:`)}\n\n${Hs(d)}${p}\n\n${I(`This cannot be undone.`)}\n\n`),!await vs(`${L(`Remove all of the above?`)} ${N(`[y/N] `)}`,e.confirmStream))return{status:`cancelled`,message:N(`Cancelled. Nothing was removed.`),exitCode:0}}let g=await Fs(d,{env:e.env??(e.home===void 0?process.env:{}),...e.deps?.runRemovalDeps}),_=g.failed.length===0?async()=>{await Gp({stdinIsTTY:e.isStdinTTY,stdoutIsTTY:e.isTTY,yes:e.yes,json:e.json,appVersion:Lr,platform:n,...e.deps?.feedback})}:void 0,v=[e.json?JSON.stringify(Ks(`uninstall`,g,f),null,2):Ws(g)];return e.json||(v.push(``,m,tm),g.failed.length===0&&v.push(``,P(`OpenKnowledge's files have been removed from this machine.`)),v.push(``,h())),{status:g.failed.length>0?`failed`:`done`,message:v.join(`
 `),exitCode:+(g.failed.length>0),runFeedbackAfterReport:_}}function rm(){return new j(`uninstall`).description(`Remove OpenKnowledge from your machine — credentials, PATH entries, editor MCP configs, skill bundles, app data, and ~/.ok. Keeps your markdown content and your authored skills (~/.ok/skills) unless --purge-content. Detects the app install and prints how to remove it; never self-deletes.`).option(`-y, --yes`,`Skip the confirmation prompt (removes the global footprint only; add --all-projects to also deinit projects)`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).option(`--purge-content`,`Also remove user-authored content (~/.ok/skills)`).option(`--all-projects`,`Also deinit every recent/running project (by default no project is removed — you pick them interactively)`).action(async e=>{let t=await nm({yes:e.yes,dryRun:e.dryRun,json:e.json,purgeContent:e.purgeContent,allProjects:e.allProjects});process.stdout.write(`${t.message}\n`),await t.runFeedbackAfterReport?.(),t.exitCode!==0&&(process.exitCode=t.exitCode)})}function im(e){return[e,`Copyright (C) 2026 Inkeep, Inc.`,`License GPL-3.0-or-later: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.`,`This is free software: you are free to change and redistribute it.`,`There is NO WARRANTY, to the extent permitted by law.`].join(`
-`)}process.argv.includes(`--no-color`)?(process.env.NO_COLOR=`1`,delete process.env.FORCE_COLOR):process.argv.includes(`--color`)&&(process.env.FORCE_COLOR=`1`,delete process.env.NO_COLOR),Me();const Q=new j;let $;Q.name(`open-knowledge`).description(`Local-first knowledge base with CRDT collaboration`).usage(`[options] [file | command]`).version(im(Lr)).option(`--cwd <path>`,`Working directory`).option(`--log-level <level>`,`Log level: silent, error, warn, info (default), debug, trace`,`info`).option(`--no-color`,`Disable color output`).option(`--color`,`Force color output`).hook(`preAction`,e=>{let t=e.opts().cwd;if(t!==void 0&&process.chdir(t),Q.getOptionValueSource(`logLevel`)===`cli`){let e=String(Q.opts().logLevel);process.env.LOG_LEVEL=e,process.env.OK_CONSOLE_LEVEL=e}let n=e.args?.[0],r=or(n,process.cwd());r!==null&&(cr(process.cwd()),process.chdir(r),console.error(`[ok] Using OpenKnowledge project at ${r}`));let a;try{let e=zr(r??t);if(a=e.config,cs(n))for(let t of e.diagnostics)t.code===`REMOVED_KEY`&&console.error(`[ok] ${O(t)}`);for(let t of e.ignoredCommittedKeys)console.error(`[ok] ${i(t)}`)}catch(e){if(n===`uninstall`||n===`deinit`)console.error(`[ok] project config could not be loaded; ${n} will use defaults: ${e instanceof Error?e.message:String(e)}`),a=sn.parse({});else throw e}$=a;let o=e.args?.[0]??e.name()??`cli`;rr({command:o,cwd:process.cwd(),configuredProjectName:a.project?.name??void 0})}),Q.action(async()=>{let e=Xn(nr());if(e.available){Zn({spawn:Kr},e);return}await Ir($,{})});const am=Fr(()=>$);Q.addCommand(am);const om=hd(()=>$);Q.addCommand(om),Q.addCommand(Wn()),Q.addCommand($f()),Q.addCommand(hf()),Q.addCommand(_s(),{hidden:!0}),Q.addCommand(Gf()),Q.addCommand(Fp());const sm=Tf(()=>$);Q.addCommand(sm),Q.addCommand(Oi(()=>$)),Q.addCommand(Pi(()=>$));const cm=new j(`ui`).description("Removed: the editor UI is served by `ok start`").allowUnknownOption().allowExcessArguments().argument(`[args...]`).action(()=>{console.error("`ok ui` was removed — the editor UI is served by the project server. Run `ok start` instead."),process.exit(1)});Q.addCommand(cm,{hidden:!0}),Q.addCommand(wf()),Q.addCommand(Sr(()=>$)),Q.addCommand(Co(()=>$)),Q.addCommand(Vp(()=>$)),Q.addCommand(Js()),Q.addCommand(rm()),Q.addCommand(gr()),Q.addCommand(Pc()),Q.addCommand(bo()),Q.addCommand(ls()),Q.addCommand(vo(Yn)),Q.addCommand(Yc()),Q.addCommand(Xo(()=>$)),Q.addCommand(Of(()=>$)),Q.addCommand(Af(()=>$)),Q.addCommand(kf(()=>$)),Q.addCommand(_p()),Q.addCommand(Tp()),Q.addHelpText(`after`,`
+`)}process.argv.includes(`--no-color`)?(process.env.NO_COLOR=`1`,delete process.env.FORCE_COLOR):process.argv.includes(`--color`)&&(process.env.FORCE_COLOR=`1`,delete process.env.NO_COLOR),Me();const Q=new j;let $;Q.name(`open-knowledge`).description(`Local-first knowledge base with CRDT collaboration`).usage(`[options] [file | command]`).version(im(Lr)).option(`--cwd <path>`,`Working directory`).option(`--log-level <level>`,`Log level: silent, error, warn, info (default), debug, trace`,`info`).option(`--no-color`,`Disable color output`).option(`--color`,`Force color output`).hook(`preAction`,e=>{let t=e.opts().cwd;if(t!==void 0&&process.chdir(t),Q.getOptionValueSource(`logLevel`)===`cli`){let e=String(Q.opts().logLevel);process.env.LOG_LEVEL=e,process.env.OK_CONSOLE_LEVEL=e}let n=e.args?.[0],r=or(n,process.cwd());r!==null&&(cr(process.cwd()),process.chdir(r),console.error(`[ok] Using OpenKnowledge project at ${r}`));let i;try{let e=zr(r??t);if(i=e.config,cs(n))for(let t of e.diagnostics)t.code===`REMOVED_KEY`&&console.error(`[ok] ${O(t)}`);for(let t of e.ignoredCommittedKeys)console.error(`[ok] ${s(t)}`)}catch(e){if(n===`uninstall`||n===`deinit`)console.error(`[ok] project config could not be loaded; ${n} will use defaults: ${e instanceof Error?e.message:String(e)}`),i=sn.parse({});else throw e}$=i;let a=e.args?.[0]??e.name()??`cli`;rr({command:a,cwd:process.cwd(),configuredProjectName:i.project?.name??void 0})}),Q.action(async()=>{let e=Xn(nr());if(e.available){Zn({spawn:Kr},e);return}await Ir($,{})});const am=Fr(()=>$);Q.addCommand(am);const om=hd(()=>$);Q.addCommand(om),Q.addCommand(Wn()),Q.addCommand($f()),Q.addCommand(hf()),Q.addCommand(_s(),{hidden:!0}),Q.addCommand(Gf()),Q.addCommand(Fp());const sm=Tf(()=>$);Q.addCommand(sm),Q.addCommand(Oi(()=>$)),Q.addCommand(Pi(()=>$));const cm=new j(`ui`).description("Removed: the editor UI is served by `ok start`").allowUnknownOption().allowExcessArguments().argument(`[args...]`).action(()=>{console.error("`ok ui` was removed — the editor UI is served by the project server. Run `ok start` instead."),process.exit(1)});Q.addCommand(cm,{hidden:!0}),Q.addCommand(wf()),Q.addCommand(Sr(()=>$)),Q.addCommand(Co(()=>$)),Q.addCommand(Vp(()=>$)),Q.addCommand(Js()),Q.addCommand(rm()),Q.addCommand(gr()),Q.addCommand(Pc()),Q.addCommand(bo()),Q.addCommand(ls()),Q.addCommand(vo(Yn)),Q.addCommand(Yc()),Q.addCommand(Xo(()=>$)),Q.addCommand(Of(()=>$)),Q.addCommand(Af(()=>$)),Q.addCommand(kf(()=>$)),Q.addCommand(_p()),Q.addCommand(Tp()),Q.addHelpText(`after`,`
 Examples:
   ok                       Launch the desktop app (or start a local server if it isn't installed)
   ok notes.md              Open a single markdown file in the editor