@inkeep/open-knowledge 0.78.0-beta.5 → 0.78.0-beta.6

package/dist/assets/skills/project/SKILL.md

@@ -79,7 +79,7 @@ KB docs are factual artifacts: every claim traceable, and **the source lives ins
 - **No evidence?** Search and ingest the result, OR mark `(TODO: needs source)`, OR don't write the claim. Do NOT fabricate — unsourced speculation rots into untraceable tribal lore.
 ## Linking — standard markdown links (MUST)
 
-Link every noun-phrase that names another document — `[text](./relative/path.md)` — and link liberally. **Every link must resolve to a doc that exists by the time you're done** (a same-pass forward-reference you create later in the pass is fine; for one that genuinely won't exist, leave the mention as plain prose + a tracked task). Never backtick a link (`` `[text](./foo.md)` `` is a bug) and never use HTML `<a>`. **After every `write`/`edit`, read `brokenLinks`: fix reported `href`s; `[]` means all links resolve unless `brokenLinkSuppression` withheld reserved-log findings; those are not yours to repair.** `audit` is authoritative; its same marker carries the same meaning. External web sources are NOT inline body links (see Grounding). Full rule set + the `[[Page]]` legacy note: `references/linking.md`.
+Link every noun-phrase that names another document — `[text](./relative/path.md)` — and link liberally. To point at one section of a long doc, in chat replies too, link `./path.md#heading-slug`. **Every link must resolve to a doc that exists by the time you're done** (a same-pass forward-reference you create later in the pass is fine; for one that genuinely won't exist, leave the mention as plain prose + a tracked task). Never backtick a link (`` `[text](./foo.md)` `` is a bug) and never use HTML `<a>`. **After every `write`/`edit`, read `brokenLinks`: fix reported `href`s; `[]` means all links resolve unless `brokenLinkSuppression` withheld reserved-log findings; those are not yours to repair.** `audit` is authoritative; its same marker carries the same meaning. External web sources are NOT inline body links (see Grounding). Full rule set, slug rule + the `[[Page]]` legacy note: `references/linking.md`.
 
 ## Folders, frontmatter, templates
 

package/dist/assets/skills/project/references/linking.md

@@ -6,6 +6,7 @@
 - **Never glue `./` onto a content-root path.** `./wiki/modules/tasks`, written from a doc already inside `wiki/`, resolves to the doubled garbage `wiki/wiki/modules/tasks` — correct resolution of a malformed path, i.e. a silently broken link. Pick ONE form: a relative path from your doc (`./tasks.md`, `../modules/tasks.md`), or a `/`-rooted absolute path (`/wiki/modules/tasks.md`). The `./` prefix and a content-root path never combine.
 - **External web sources are NOT inline body links.** Per the Grounding rule, web URLs live in the `source_url:` frontmatter of an ingested doc under `external-sources/` (or the project's equivalent raw-sources folder); the body cites the local path: `[source name](./external-sources/source-slug.md)`. A raw `[source](https://...)` inline in the body is a TODO, not a citation — see Grounding for the closed-loop contract.
 - **Internal cross-refs between OK docs** → `[text](./other-doc.md)` — link liberally to aid navigation.
+- **Link the section when you mean one part of a long document** — `[text](./spec.md#heading-slug)`, in docs and in chat replies alike, so the reader lands on the heading instead of scrolling a long file (in the WYSIWYG editor; the source editor ignores the fragment and opens at the top). In a chat reply there is no document for a relative path to start from: write the path from the content root, as `./specs/spec.md#heading-slug` or `/specs/spec.md#heading-slug`, never with `../`, which the chat cannot resolve. The slug is the heading's text lowercased, accents dropped, with each run of characters that are not letters or digits replaced by one `-` and edge hyphens removed (`## Data model: v2` → `#data-model-v2`); the second identical heading in a doc gets `-1`, the third `-2`. Copy the heading text rather than guessing: `brokenLinks` and `audit` check only the path before `#`, so a wrong slug still resolves as a link to the top of the doc.
 - **Every link must resolve to a doc that exists by the time you're done.** Within a single multi-doc authoring pass, linking a page you'll create later in the same pass is fine — `brokenLinks` reports it as `no-such-doc` until the target lands, an expected transient forward-reference rather than a wrong-path error. What's not acceptable is *leaving* a dead link behind: create the target in the same pass, or record it as a tracked task (`TaskCreate`, or your host's task tool — if the host has none, tell the user) and leave the mention as plain prose.
 - **Never wrap a link in backticks.** `` `[text](./foo.md)` `` is a bug — the backticks make it render as literal code rather than a link.
 - **Never use HTML anchors** (`<a href="...">`). Markdown link syntax only.

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$d as n,$s as r,Bd as i,Bl as a,Co as o,El as s,Fd as c,Fs as l,Gc as u,Jd as d,Lo as f,Mo as p,Na as m,Oa as h,Oc as g,Pd as _,Qa as v,Ql as y,Sd as b,Ss as x,To as S,Vl as ee,Vo as te,Wd as C,Xc as ne,Xn as re,Xu as ie,Yd as ae,Yu as oe,Zo as se,_r as ce,bl as le,bs as ue,cd as de,cl as w,dl as fe,ed as pe,ef as me,eo as he,et as ge,it as _e,ja as ve,jc as ye,lc as be,ld as xe,md as T,nd as E,nl as Se,oa as Ce,pu as we,rc as Te,rs as Ee,rt as De,sd as Oe,ta as ke,td as D,ud as O,vc as Ae,vd as je,zu as Me}from"./md-manager-BGnqyqi1-CTvRTh-G.mjs";import{$i as Ne,$n as Pe,Ao as Fe,Bo as Ie,Co as Le,Dr as Re,Er as ze,Fo as Be,Fr as Ve,H as He,Hi as Ue,Hn as We,Ho as Ge,Ht as Ke,Kr as qe,L as Je,Lo as Ye,Mi as Xe,Mo as Ze,Mt as Qe,Ni as $e,No as et,O as tt,Oa as nt,Pi as rt,Po as it,Pt as at,Qi as ot,Qt as st,R as ct,Ri as lt,Si as ut,So as dt,Sr as ft,St as pt,T as mt,Ta as ht,Ti as gt,Tt as _t,Ui as vt,Un as yt,Uo as bt,Vi as xt,Vo as St,Wn as Ct,Wo as wt,Y as Tt,aa as Et,ai as Dt,ar as Ot,bi as kt,bo as At,bt as jt,cn as Mt,ct as Nt,d as Pt,fa as Ft,fo as It,ft as Lt,go as Rt,gt as zt,hn as Bt,ia as Vt,ii as Ht,jo as Ut,kn as Wt,ln as Gt,lo as k,lr as Kt,m as qt,mn as Jt,nr as Yt,oa as A,pn as Xt,pt as Zt,qr as Qt,ra as $t,sa as en,si as tn,tn as nn,to as rn,tr as an,vo as on,wa as sn,wi as cn,x as ln,xi as un,xn as dn,xo as fn,xt as pn,yi as mn,yn as hn,yo as gn,yr as _n,yt as vn,zn as yn,zr as bn}from"./dist-C9hrA0xr.mjs";import{B as xn,Ct as j,D as Sn,E as Cn,F as wn,G as Tn,H as En,I as Dn,J as On,K as kn,M as An,O as jn,St as Mn,U as Nn,W as Pn,X as Fn,Z as In,_t as Ln,bt as Rn,ft as zn,gt as Bn,ht as Vn,j as Hn,mt as Un,pt as Wn,q as Gn,u as Kn,vt as qn,xt as Jn,yt as Yn}from"./init-CMZ1xdkA.mjs";import{_ as Xn,b as Zn,d as Qn,f as $n,g as er,h as tr,m as nr,o as rr,u as ir,x as ar,y as or}from"./registry-probes-CHLJIRQ4.mjs";import{C as sr,E as cr,S as lr,T as ur,_ as dr,a as fr,b as pr,c as mr,d as hr,f as gr,h as _r,i as vr,l as yr,m as br,n as xr,o as Sr,p as Cr,r as wr,s as Tr,t as Er,u as Dr,v as Or,w as kr,x as Ar,y as jr}from"./src-DtEzWpk5.mjs";import{c as Mr,i as M,n as N,o as P,r as F,s as I,t as L}from"./colors-r_owlCuY.mjs";import{n as Nr,r as Pr,t as Fr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Ir,S as Lr,y as Rr}from"./start-ufRM13rZ.mjs";import{n as zr,t as Br}from"./constants-C_LhGnYS.mjs";import{n as Vr,t as Hr}from"./loader-C96mSVCK.mjs";import{t as Ur}from"./removal-file-path-Db5k0FY2.mjs";import{t as Wr}from"./launch-json-removal-BuZBUdUh.mjs";import{execFile as Gr,execFileSync as Kr,execSync as qr,spawn as Jr,spawnSync as Yr}from"node:child_process";import{basename as Xr,dirname as R,isAbsolute as Zr,join as z,posix as Qr,relative as B,resolve as V,sep as $r}from"node:path";import ei from"node:process";import{fileURLToPath as ti}from"node:url";import{accessSync as ni,appendFileSync as ri,closeSync as ii,constants as ai,existsSync as H,lstatSync as oi,mkdirSync as U,mkdtempSync as si,readFileSync as W,readdirSync as ci,readlinkSync as li,realpathSync as ui,renameSync as di,rmSync as fi,statSync as G,unlinkSync as K,writeFileSync as pi}from"node:fs";import{homedir as mi,platform as hi,tmpdir as gi}from"node:os";import{realpath as _i,rm as vi}from"node:fs/promises";import{randomUUID as yi}from"node:crypto";import{promisify as bi}from"node:util";import{setTimeout as xi}from"node:timers/promises";import{createInterface as Si}from"node:readline/promises";const Ci={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var wi;wi||={};function Ti(e){return b(ie,e)}async function Ei(e){let{projectDir:t,contentDir:n,baseConfig:i,targetPath:a,fix:s=!1}=e,c=[],l=hn({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=Gt(t,i,d),p=v(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,_=e=>{let t=R(e),r=g.get(t);if(r)return r;let i=en(n,e,d),a=Mt(f,i);return g.set(t,a),a},y=[],b=Di(a,n);b.kind===`file`?y.push(B(n,b.path)):x(b.path);function x(e){let t;try{t=ci(e,{withFileTypes:!0})}catch(t){c.push(`could not read directory ${B(n,e)||`.`}: ${ki(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(l.isDirExcluded(i))continue;x(t)}else if(r.isFile()){if(!Oi(r.name)||l.isExcluded(i))continue;y.push(i)}}}y.sort();let S=[],ee=0,te=0,C=0;for(let e of y){let t=z(n,e),r;try{r=W(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${ki(t)}`);continue}let i=_(e),a=!1;if(s&&i.enabled){let n=o(r,i,e,h);if(n!==r){let i=Ze(t);try{pi(i,n,`utf-8`),di(i,t),r=n,a=!0,C++}catch(t){try{K(i)}catch{}c.push(`could not write fix to ${e}: ${ki(t)}`)}}}let l=await Ee(r,i,e,h);for(let e of l)e.severity===`error`?ee++:te++;S.push({file:e,diagnostics:l,fixed:a})}return c.push(...r(m)),{contentDir:n,files:S,warnings:c,fileCount:y.length,errorCount:ee,warningCount:te,fixedCount:C,ran:p}}function Di(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Zr(e)?e:V(t,e);try{if(G(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Oi(e){let t=e.toLowerCase();return re.some(e=>t.endsWith(e))}function ki(e){return e instanceof Error?e.message:String(e)}function Ai(e){return new j(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Ne(r,i),o=t===void 0?void 0:ji(t,kr()),s=r.contentRules,c=await Ei({projectDir:i,contentDir:a,baseConfig:s?Te(s):ge,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Pi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Mi(c))&&(process.exitCode=1)})}function ji(e,t){return V(t,e)}function Mi(e){return e.errorCount>0||e.warningCount>0}function Ni(e){let t=[L(e.file)+(e.fixed?N(` (fixed)`):``)];for(let n of e.diagnostics){let e=N(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?F(`error  `):I(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${N(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Pi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Ni(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(P(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${F(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(N(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...be(e.ran).map(e=>N(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(I(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$d as n,$s as r,Bd as i,Bl as a,Co as o,El as s,Fd as c,Fs as l,Gc as u,Jd as d,Lo as f,Mo as p,Na as m,Oa as h,Oc as g,Pd as _,Qa as v,Ql as y,Sd as b,Ss as x,To as S,Vl as ee,Vo as te,Wd as C,Xc as ne,Xn as re,Xu as ie,Yd as ae,Yu as oe,Zo as se,_r as ce,bl as le,bs as ue,cd as de,cl as w,dl as fe,ed as pe,ef as me,eo as he,et as ge,it as _e,ja as ve,jc as ye,lc as be,ld as xe,md as T,nd as E,nl as Se,oa as Ce,pu as we,rc as Te,rs as Ee,rt as De,sd as Oe,ta as ke,td as D,ud as O,vc as Ae,vd as je,zu as Me}from"./md-manager-BGnqyqi1-CTvRTh-G.mjs";import{$i as Ne,$n as Pe,Ao as Fe,Bo as Ie,Co as Le,Dr as Re,Er as ze,Fo as Be,Fr as Ve,H as He,Hi as Ue,Hn as We,Ho as Ge,Ht as Ke,Kr as qe,L as Je,Lo as Ye,Mi as Xe,Mo as Ze,Mt as Qe,Ni as $e,No as et,O as tt,Oa as nt,Pi as rt,Po as it,Pt as at,Qi as ot,Qt as st,R as ct,Ri as lt,Si as ut,So as dt,Sr as ft,St as pt,T as mt,Ta as ht,Ti as gt,Tt as _t,Ui as vt,Un as yt,Uo as bt,Vi as xt,Vo as St,Wn as Ct,Wo as wt,Y as Tt,aa as Et,ai as Dt,ar as Ot,bi as kt,bo as At,bt as jt,cn as Mt,ct as Nt,d as Pt,fa as Ft,fo as It,ft as Lt,go as Rt,gt as zt,hn as Bt,ia as Vt,ii as Ht,jo as Ut,kn as Wt,ln as Gt,lo as k,lr as Kt,m as qt,mn as Jt,nr as Yt,oa as A,pn as Xt,pt as Zt,qr as Qt,ra as $t,sa as en,si as tn,tn as nn,to as rn,tr as an,vo as on,wa as sn,wi as cn,x as ln,xi as un,xn as dn,xo as fn,xt as pn,yi as mn,yn as hn,yo as gn,yr as _n,yt as vn,zn as yn,zr as bn}from"./dist-DeGSxFUJ.mjs";import{B as xn,Ct as j,D as Sn,E as Cn,F as wn,G as Tn,H as En,I as Dn,J as On,K as kn,M as An,O as jn,St as Mn,U as Nn,W as Pn,X as Fn,Z as In,_t as Ln,bt as Rn,ft as zn,gt as Bn,ht as Vn,j as Hn,mt as Un,pt as Wn,q as Gn,u as Kn,vt as qn,xt as Jn,yt as Yn}from"./init-__dFxXcd.mjs";import{_ as Xn,b as Zn,d as Qn,f as $n,g as er,h as tr,m as nr,o as rr,u as ir,x as ar,y as or}from"./registry-probes-BCPhKQte.mjs";import{C as sr,E as cr,S as lr,T as ur,_ as dr,a as fr,b as pr,c as mr,d as hr,f as gr,h as _r,i as vr,l as yr,m as br,n as xr,o as Sr,p as Cr,r as wr,s as Tr,t as Er,u as Dr,v as Or,w as kr,x as Ar,y as jr}from"./src-B8i0Z_NO.mjs";import{c as Mr,i as M,n as N,o as P,r as F,s as I,t as L}from"./colors-r_owlCuY.mjs";import{n as Nr,r as Pr,t as Fr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Ir,S as Lr,y as Rr}from"./start-MMCeO0I3.mjs";import{n as zr,t as Br}from"./constants-B5vbbQ59.mjs";import{n as Vr,t as Hr}from"./loader-Dbk8NaZV.mjs";import{t as Ur}from"./removal-file-path-D8sfQtGu.mjs";import{t as Wr}from"./launch-json-removal-D-bsUXkT.mjs";import{execFile as Gr,execFileSync as Kr,execSync as qr,spawn as Jr,spawnSync as Yr}from"node:child_process";import{basename as Xr,dirname as R,isAbsolute as Zr,join as z,posix as Qr,relative as B,resolve as V,sep as $r}from"node:path";import ei from"node:process";import{fileURLToPath as ti}from"node:url";import{accessSync as ni,appendFileSync as ri,closeSync as ii,constants as ai,existsSync as H,lstatSync as oi,mkdirSync as U,mkdtempSync as si,readFileSync as W,readdirSync as ci,readlinkSync as li,realpathSync as ui,renameSync as di,rmSync as fi,statSync as G,unlinkSync as K,writeFileSync as pi}from"node:fs";import{homedir as mi,platform as hi,tmpdir as gi}from"node:os";import{realpath as _i,rm as vi}from"node:fs/promises";import{randomUUID as yi}from"node:crypto";import{promisify as bi}from"node:util";import{setTimeout as xi}from"node:timers/promises";import{createInterface as Si}from"node:readline/promises";const Ci={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var wi;wi||={};function Ti(e){return b(ie,e)}async function Ei(e){let{projectDir:t,contentDir:n,baseConfig:i,targetPath:a,fix:s=!1}=e,c=[],l=hn({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=Gt(t,i,d),p=v(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,_=e=>{let t=R(e),r=g.get(t);if(r)return r;let i=en(n,e,d),a=Mt(f,i);return g.set(t,a),a},y=[],b=Di(a,n);b.kind===`file`?y.push(B(n,b.path)):x(b.path);function x(e){let t;try{t=ci(e,{withFileTypes:!0})}catch(t){c.push(`could not read directory ${B(n,e)||`.`}: ${ki(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=z(e,r.name),i=B(n,t);if(r.isDirectory()){if(l.isDirExcluded(i))continue;x(t)}else if(r.isFile()){if(!Oi(r.name)||l.isExcluded(i))continue;y.push(i)}}}y.sort();let S=[],ee=0,te=0,C=0;for(let e of y){let t=z(n,e),r;try{r=W(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${ki(t)}`);continue}let i=_(e),a=!1;if(s&&i.enabled){let n=o(r,i,e,h);if(n!==r){let i=Ze(t);try{pi(i,n,`utf-8`),di(i,t),r=n,a=!0,C++}catch(t){try{K(i)}catch{}c.push(`could not write fix to ${e}: ${ki(t)}`)}}}let l=await Ee(r,i,e,h);for(let e of l)e.severity===`error`?ee++:te++;S.push({file:e,diagnostics:l,fixed:a})}return c.push(...r(m)),{contentDir:n,files:S,warnings:c,fileCount:y.length,errorCount:ee,warningCount:te,fixedCount:C,ran:p}}function Di(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Zr(e)?e:V(t,e);try{if(G(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Oi(e){let t=e.toLowerCase();return re.some(e=>t.endsWith(e))}function ki(e){return e instanceof Error?e.message:String(e)}function Ai(e){return new j(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Ne(r,i),o=t===void 0?void 0:ji(t,kr()),s=r.contentRules,c=await Ei({projectDir:i,contentDir:a,baseConfig:s?Te(s):ge,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Pi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Mi(c))&&(process.exitCode=1)})}function ji(e,t){return V(t,e)}function Mi(e){return e.errorCount>0||e.warningCount>0}function Ni(e){let t=[L(e.file)+(e.fixed?N(` (fixed)`):``)];for(let n of e.diagnostics){let e=N(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?F(`error  `):I(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${N(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Pi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Ni(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(P(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${F(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(N(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...be(e.ran).map(e=>N(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(I(`! ${n}`))}return t.join(`
 `)}const Fi={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Ii(e){return new j(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await Li(t,n,e(),process.cwd(),kr());r!==0&&(process.exitCode=r)})}async function Li(e,t,n,r,i,a=Fi){let o=Ne(n,r),s;if(e!==void 0){let t=Ri(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let c=$e(A(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:m({kind:`cli`,runtimeVersion:Nt})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${d.status}`}`),1}let f=Ce.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;if(t.json===!0)a.out(JSON.stringify(p,null,2));else{let e=p.brokenLinkSuppression?Yt(p.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([Pi(zi(p)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function Ri(e,t,n){let r=B(n,V(t,e));return r===``?``:r.startsWith(`..`)||Zr(r)?null:r.split($r).join(`/`)}function zi(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Bi(e,t,n,r){let i=Vi(await Hi(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function Vi(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Hi(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Ui(e,t){let n=new j(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Bi(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await an(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await an(n),process.exit(1)}}),n}function Wi(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Gi(e,t,n){let r={baseUrl:Wi(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new Nr(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Ki(e){let t=e.request||Fr,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Gi(t,`POST /login/device/code`,n)}async function qi(e){let t=await Gi(e.request||Fr,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Ji(e,t.data.expires_in),n.refreshTokenExpiresAt=Ji(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Ji(e,t){return new Date(e+t*1e3).toISOString()}async function Yi(e,t){let n=Xi(e,t.auth);if(n)return n;let{data:r}=await Ki({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Qi(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Xi(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Zi(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Qi(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await qi({...i,clientType:`oauth-app`}):await qi({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Zi(r.interval),Qi(e,t,n,r);if(a===`slow_down`)return await Zi(r.interval+7),Qi(e,t,n,r);throw i}}async function $i(e,t){return Yi(e,{auth:t})}async function ea(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Yi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var ta=`0.0.0-development`;function na(e){let t=e.request||Fr.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${ta} ${Pr()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign($i.bind(null,i),{hook:ea.bind(null,i)})}async function ra(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=na({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function ia(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function aa(){let e=process.cwd();return Pe(e)?.rootPath??e}function oa(e){return`~/.ok/global.yml:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function sa(e){return`${F(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${oa(e)}`}function ca(e){return fe(e,gt())?null:sa(le(e))}function la(e){let t=ca(e);t!==null&&(process.stderr.write(t),process.exit(1))}function ua(e){return(e===null?`${F(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\n`:`${F(`Error:`)} this project's git remote is ${e}, which is not a GitHub host, so GitHub sign-in does not apply here.\n`)+(e===null?`Pass --host <hostname> to target a GitHub host explicitly.
@@ -10,9 +10,9 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$d as n,$s as
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function So(){return new j(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=fa(e.host);await xo({...e,host:t})})}async function Co(e,t,n=Ir){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function wo(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function To(e,t){let{host:n,json:r}=e,i=t.backend,a=await Co(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(wo(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new uo({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(wo(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=mo(e,n);r?process.stdout.write(`${JSON.stringify(wo(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function Eo(e){return new j(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=da(t.host);await To({...t,host:n},await e())})}function Do(e){let t=new j(`auth`);t.description(`GitHub authentication management`);let n=e=>Xn(void 0,e);return t.addCommand(ha(n)),t.addCommand(Eo(n)),t.addCommand(bo(n)),t.addCommand(So()),t.addCommand(_o(n)),t.addCommand(Ui(n,e)),t}function Oo(e,t=hi(),n=nr){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[R(e)])}catch{}}function ko(){return new j(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await gr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:_r(),logger:Zn()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&Oo(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Ao(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:Dr(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:Dr(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function jo(e){let t=e.inspect??(()=>hr(e.lockDir,`server`,{isAlive:bn})),n=e.unlink??(e=>K(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Ao(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Mo(e){return new j(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),jo({lockDir:A(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function No(e){return`credential.helper=!${e.map(oe).join(` `)} auth git-credential`}async function Po(e,t,n={},r=Ir){let i=[`credential.helper=`,No(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Fo(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Io=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Lo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Io)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ro(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function zo(e,t=process.env){let n=Ro(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Bo(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Vo(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ho=f;async function Uo(e){try{return await e.clone(Vo(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ho(t))return e.onFallback(e.branch),await e.clone(Vo(null)),{fellBack:!0};throw t}}function Wo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0}}}function Go(e,t,n){return e===`https`&&t===`github.com`&&n}function Ko(e){if(e===void 0)return null;let{declaredLogin:t,declaredSource:n}=e,r;switch(n){case`remote-url`:r=`The clone URL names ${t}`;break;case`credential-config`:r=`Your Git credential configuration names ${t}`;break;default:r=`Your Git configuration names ${t}`}return`⚠ ${r}, but the GitHub CLI couldn't confirm that account — the clone used its active account.\n  Run \`gh auth status\` to see which account that is. If ${t} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}async function qo(e,t,n={}){let r=yr(e);if(!r)throw Error(`Invalid git URL: ${Qo(e)}`);let i=Vt(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await Po(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!sn(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function Jo(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Yo(e,t,n,r=process.cwd()){let i=yr(e);if(!i)throw Error(`Invalid git URL: ${Qo(e)}`);let a=Jo(e,i),o=t.dir?V(r,t.dir):V(r,i.name);if(H(o)&&ci(o).length>0)throw Error(`Target directory is not empty: ${o}`);at();let s=or(),c=i.protocol===`https`&&i.hostname===`github.com`&&await Fo(i.owner,i.name),l=Go(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await qo(a,s,{selfCliArgs:Bo(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=Ko(l.declaredMiss);e&&process.stderr.write(e)}let d=zo(u),f=Wo(r,u.gitConfig),p=Ut(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Lo(e);n&&n.pct!==m&&(m=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Uo({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>p.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-DCPTgvxB.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Xo(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Xo(e){let t=xn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Zo=/^[A-Za-z0-9._/:@-]+$/;function Qo(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&tn(i)!==void 0?`${t}${i}@`:t})}function $o(e){return Zo.test(e)?e:oe(e)}function es(e,t){let n=typeof t==`string`&&t.length>0?` -b ${$o(t)}`:``;return`ok clone ${$o(e)}${n}`}function ts(e){let t=h(e.error);if(t.kind!==`auth`)return null;let n=Qo(e.url);if(te(t)){let t=es(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-UUEtW3_5.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Xo(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Xo(e){let t=xn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Zo=/^[A-Za-z0-9._/:@-]+$/;function Qo(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&tn(i)!==void 0?`${t}${i}@`:t})}function $o(e){return Zo.test(e)?e:oe(e)}function es(e,t){let n=typeof t==`string`&&t.length>0?` -b ${$o(t)}`:``;return`ok clone ${$o(e)}${n}`}function ts(e){let t=h(e.error);if(t.kind!==`auth`)return null;let n=Qo(e.url);if(te(t)){let t=es(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${es(n,e.branch)}`].join(`
-`)}function ns(e){let t=Ue(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=ts({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function rs(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function is(e){let t=h(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=yr(e.url);t&&(r=await(e.resolvePrincipal??(e=>rs(or(),e)))(t.hostname))}}ns({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function as(e){return new j(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Yo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-u8_lFdEN.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Je||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await is({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var os=Me();const ss=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...u.map(e=>e.path)];function cs(e){return Be({absPath:Ye(`project-local`,e),sideline:!1}).diagnostics}function ls(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Vr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??cs)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(w(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function us(e){let t=W(e,`utf-8`),n=(0,os.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ss)n.hasIn(e)&&r.push(e.join(`.`));return r}function ds(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function fs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=ds(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ps(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function ms(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ie,s=ps(r).map(t=>({scope:t,absPath:Ye(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=us(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:fs(ss.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:w(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const hs=`project | project-local | user | all`,gs=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function _s(e){return e!==`config`}function vs(){let e=new j(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{ls({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${hs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!gs.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${hs}`),process.exitCode=2;return}(await ms({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const ys=[`    1. ${L(`Customize`)} (sidebar) → ${L(`Skills`)}`,`    2. Click the ${L(`+`)} button`,`    3. Click ${L(`Create skill`)}`,`    4. Click ${L(`Upload skill`)}`,`    5. Pick ${L(`openknowledge.skill`)} from Downloads`],bs=M(`  Open the Claude Desktop App, then: ${L(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function xs(e){let t=[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(I(`  Handoff failed: ${e.handoffError.message}`)),t.push(bs),t.join(`
+`)}function ns(e){let t=Ue(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=ts({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin});e.printStderr(`${n??`✗ ${t}`}\n`)}async function rs(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function is(e){let t=h(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=yr(e.url);t&&(r=await(e.resolvePrincipal??(e=>rs(or(),e)))(t.hostname))}}ns({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function as(e){return new j(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Yo(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-CuAZYwLo.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Je||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await is({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var os=Me();const ss=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...u.map(e=>e.path)];function cs(e){return Be({absPath:Ye(`project-local`,e),sideline:!1}).diagnostics}function ls(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Vr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??cs)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(w(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function us(e){let t=W(e,`utf-8`),n=(0,os.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ss)n.hasIn(e)&&r.push(e.join(`.`));return r}function ds(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function fs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=ds(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ps(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function ms(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ie,s=ps(r).map(t=>({scope:t,absPath:Ye(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!H(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=us(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:fs(ss.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:w(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const hs=`project | project-local | user | all`,gs=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function _s(e){return e!==`config`}function vs(){let e=new j(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{ls({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${hs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!gs.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${hs}`),process.exitCode=2;return}(await ms({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const ys=[`    1. ${L(`Customize`)} (sidebar) → ${L(`Skills`)}`,`    2. Click the ${L(`+`)} button`,`    3. Click ${L(`Create skill`)}`,`    4. Click ${L(`Upload skill`)}`,`    5. Pick ${L(`openknowledge.skill`)} from Downloads`],bs=M(`  Open the Claude Desktop App, then: ${L(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function xs(e){let t=[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(I(`  Handoff failed: ${e.handoffError.message}`)),t.push(bs),t.join(`
 `)}function Ss(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[M(`OpenKnowledge skill ${L(`v${t}`)} already delivered to Claude Desktop.`),N(`  Recorded at ${n} in ~/.ok/skill-state.yml`),N(`  Use ${L(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function Cs(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[P(`Built ${e.outputPath}`),N(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),M(`  Claude Desktop App opened. Now upload the file manually:`),...ys,N(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function ws(e){return`${F(`Error:`)} ${e.buildError??`unknown build failure`}`}async function Ts(e={}){let t=await Ke(e);return t.status===`failed`?{...t,message:ws(t),exitCode:1}:t.status===`skip-current`?{...t,message:Ss(t),exitCode:0}:t.status===`installed`?{...t,message:Cs(t),exitCode:0}:{...t,message:xs(t),exitCode:0}}function Es(){return new j(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await Ts({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function Ds(e,t){let n=Si({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const Os=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function ks(e){return z(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const As={existsSync:e=>H(e),readFileSync:(e,t)=>W(e,t),lstatSync:e=>oi(e),readlinkSync:e=>li(e)};function js(e,t=As){let n=ks(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function Ms(e){let t=e.replace(Os,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function Ns(e,t,n=As){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function Ps(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Un(e)} readProcessStart=${t}`}function Fs(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{zn(n,r),t.onNativeFailure?.({kind:e,reason:Wn(n,r)})};try{if(n===`win32`){let n=!1,a=Vn(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Ps(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Un(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Kr,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Is(e,t={}){let n=t.probe??Wt(),r=t.isAlive??(e=>bn(e,n(e))),i=t.isAlive??qe,a=hr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(Zn()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(Dr(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>nt(n)))(),u=await _i(e).catch(()=>V(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Fs)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ~/.ok/logs. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await xr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await xi(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Ls(e){return $r===`/`?e:e.split($r).join(`/`)}function Rs(e,t,n=`This project`){let r=[],i=[A(e)],a=z(e,`.ok`);Ur(z(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of On){let a=Fn[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Ls(B(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Ls(B(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Pn(e),...Nn(e),...ae]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:z(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:wt(e)})}catch{}let c=z(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function zs(e,t){return{scope:`deinit`,ops:Rs(e,t)}}function Bs(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(z(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Hs(a,t));for(let e of On){let n=Fn[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of mr(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...Rs(e,t,`Project: ${Xr(e)}`));return c.push(...Us(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:z(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function Vs(e){return[z(e,`.zshrc`),z(e,`.bash_profile`),z(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Hs(e,t){let n=[],r=new Set([...Vs(t),...e?.rcFiles??[]]);for(let e of r)Ur(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Us(e,t,n){let r={home:e,platformName:t,env:n},i=Ar(r),a=pr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Ar({...r,productName:jr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Ws(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??er,r=t.clearEmbeddingsKey??nn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[V(e.lockDir)]:[])),a=Wt(),o=t.scanProcesses??(()=>nt(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Is(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(V(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Ks(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=V(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(V(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(V(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Gs(e,t=Er){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Ks(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Ur(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${qs(t.reason)}: ${e.rcFile}`};let n;try{n=W(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${qs(An(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=Ms(n);return i?a&&!t.symlink?(fi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(et(t.path,r,{mode:jn(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return Ns(e.path,e.target)?(K(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=rr(Fn[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:qs(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Wr(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${z(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:qs(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=Gn(e.projectRoot,Ys(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${z(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Js(e)}}function qs(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Hn(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Js(e){if(e.requireOurState&&!sr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Dn(e.path,e.containWithin);let t;try{t=oi(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return K(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of ci(e.path))t.has(r)||(fi(z(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return fi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function Ys(e){let t=new Set([z(e,`.claude`,`launch.json`)]);for(let n of On){let r=Fn[n].projectConfigPath?.(e);r&&t.add(r)}return Pn(e).filter(n=>{let r=z(e,n);if(!t.has(r))return!0;try{return oi(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Xs(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Zs(e){if(e.ops.length===0)return N(`Nothing to remove.`);let t=[];for(let[n,r]of Xs(e.ops)){t.length>0&&t.push(``),t.push(L(`${n}:`));for(let e of r)t.push(`  ${I(`-`)} ${e.label}`)}return t.join(`
@@ -44,7 +44,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function Mc(e,t,n,r,i){let a=jc(e,t,z(r,`cpu.cpuprofile`)),o=!1,s=Jr(process.execPath,[a],k({stdio:`ignore`})),c=setInterval(()=>{let e=Dc(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{fi(z(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Nc(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function Pc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??yn,s=t.inspect??(e=>hr(e,`server`)),c=t.resolveCommand??un,l=t.resolveUsage??ut,u=t.collectLsofFn??Oc,d=t.getEndpoints??Ac,f=t.profiler??Mc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?z(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):z(process.cwd(),`ok-diagnose-${n}-${b}`);try{U(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{pi(z(x,e),t),a(`  wrote ${e}`)},ee=c(n),te=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:ee,usage:te,lockInfo:y},null,2)),a(`  sampling lsof`);let C=u(n);if(C&&S(`lsof.txt`,C),!i){let e=C?kc(C).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,Nc(W(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Fc(e){let t=Si({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Ic(e){let t=si(z(gi(),`ok-bundle-process-`));return await Pc({pid:e,output:t}),t}function Lc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Rc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function zc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Bc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Vc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Lc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${zc(t)}`),e(`  Credentials:         ${Bc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Or(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Hc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Fc,i=t.runProcessDiagnose??Ic,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=R(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);U(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=dr(t.diagnosticReportsDir??z(mi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Cr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Vc(n,u,o,l),e.yes!==!0&&!Rc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await br({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{fi(s,{recursive:!0,force:!0})}catch{}}}function Uc(){let e=new j(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Pc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(Ec()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BXm1oZrQ.mjs`),{resolveContentDir:r}=await import(`./dist-Bm-n9FIx.mjs`),i=process.cwd(),{config:a}=n(i);await Hc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Wc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await _a({message:`Enter embeddings provider API key:`})).trim()}function Gc(e){return Xe(e)}async function Kc(e,t){let n=await $t(dn(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function qc(e){try{let t=$e(A(e));if(!t||t.port<=0||!qe(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ce.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Jc(e,t){if(!e)return`unavailable (search stays lexical)`;let n=ve(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Yc(){return new j(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Wc();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,Nc(W(z(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Fc(e){let t=Si({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Ic(e){let t=si(z(gi(),`ok-bundle-process-`));return await Pc({pid:e,output:t}),t}function Lc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Rc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function zc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Bc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Vc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Lc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${zc(t)}`),e(`  Credentials:         ${Bc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Or(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Hc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Fc,i=t.runProcessDiagnose??Ic,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=R(o);if(!H(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=z(e.contentDir,`.ok`,`local`,`diagnostics`);U(n,{recursive:!0}),o=z(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=dr(t.diagnosticReportsDir??z(mi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Cr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Vc(n,u,o,l),e.yes!==!0&&!Rc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await br({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{fi(s,{recursive:!0,force:!0})}catch{}}}function Uc(){let e=new j(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Pc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(Ec()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BI5MbK2x.mjs`),{resolveContentDir:r}=await import(`./dist-DhGQyLku.mjs`),i=process.cwd(),{config:a}=n(i);await Hc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Wc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await _a({message:`Enter embeddings provider API key:`})).trim()}function Gc(e){return Xe(e)}async function Kc(e,t){let n=await $t(dn(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function qc(e){try{let t=$e(A(e));if(!t||t.port<=0||!qe(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ce.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Jc(e,t){if(!e)return`unavailable (search stays lexical)`;let n=ve(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Yc(){return new j(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Wc();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=V(e.cwd??process.cwd()),{baseUrl:r}=Gc(n);try{await dn().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -79,7 +79,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function cf(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function lf(e){return/\s/.test(e)?`<${e}>`:e}function uf(e,t={}){let{header:n,rows:r}=Md(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(cf).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=cf(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${lf(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function df(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function ff(e,t){return`# ${e}\n\n${t}\n`}const pf=[`links`,`frontmatter`,`callouts`,`images`,`tables`],mf=/\.mdx?$/i;function hf(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function gf(e,t={}){let n=t.selected??new Set(pf),r=$d(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:hf(!1)};let i=hf(r),a=Xd(e),o=Vd(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!mf.test(e)||s&&l.has(e))continue;let r;try{r=W(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=jd(a,Xr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:z(R(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Dd(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=sf(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Yd(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=uf(e.csvText,{linkForTitle:t=>{let n=Rd(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?B(R(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=W(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=ff(o===null?e.fallbackTitle:df(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Yd(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function _f(e){for(let t of e.assets)U(R(t.path),{recursive:!0}),pi(t.path,t.bytes);for(let t of e.changes)U(R(t.path),{recursive:!0}),pi(t.path,t.content,`utf8`);for(let t of e.deletions)try{K(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const vf={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},yf=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function bf(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of yf)n.push(`  ${vf[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function xf(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Sf(e){let t=new Set(pf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${pf.join(`, `)}`);return e})}function Cf(e,t){let n=new Set(pf);if(e&&(n=new Set(Sf(e))),t)for(let e of Sf(t))n.delete(e);return n}function wf(){let e=new j(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=Cf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=gf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{_f(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?xf(a,{applied:t.apply??!1}):bf(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Tf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Ef(e,t={}){let n=Tf(e,t.platform??process.platform,t.desktopBundlePath);return tr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Df(e,t,n=process.platform){let r=Tf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Of(e=()=>Qn(ir())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ft({lockDir:A(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Ef,findAncestorProject:e=>Pe(R(V(e)))?.rootPath??null,isProjectRoot:e=>Pe(e)?.distance===0,enclosingProject:e=>Pe(V(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function kf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Af(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function jf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Df(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Mf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=V(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(kf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!y.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${y.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Ct(e,s)}`;return jf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Af(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${yt(s)}`;return jf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Af(n)}if(l)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${We(s)}`;return jf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Af(n)}function Nf(){return new j(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${y.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Mf(e,t,Of())})}function Pf(e){return new j(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-qA7eAGIs.mjs`),r=e(),i=process.cwd(),a=Ne(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ff(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function If(e,t,n=process.cwd()){let r=e.op??`sync`,i=A(n),a=$e(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...m({kind:`cli`,runtimeVersion:Nt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ff(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=Ut({baseDir:n});if(r===`sync`||r===`pull`){Ff(e.json,{type:`step`,step:`pull`});let t=await o.pull();Ff(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ff(e.json,{type:`step`,step:`push`}),await o.push(),Ff(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}function xf(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Sf(e){let t=new Set(pf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${pf.join(`, `)}`);return e})}function Cf(e,t){let n=new Set(pf);if(e&&(n=new Set(Sf(e))),t)for(let e of Sf(t))n.delete(e);return n}function wf(){let e=new j(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=V(e??process.cwd()),r;try{r=Cf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=gf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{_f(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?xf(a,{applied:t.apply??!1}):bf(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Tf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Ef(e,t={}){let n=Tf(e,t.platform??process.platform,t.desktopBundlePath);return tr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Df(e,t,n=process.platform){let r=Tf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Of(e=()=>Qn(ir())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Ft({lockDir:A(e)}).baseUrl,classifyName:(e,t)=>{let n=z(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Ef,findAncestorProject:e=>Pe(R(V(e)))?.rootPath??null,isProjectRoot:e=>Pe(e)?.distance===0,enclosingProject:e=>Pe(V(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function kf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Af(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function jf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Df(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Mf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=V(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(kf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!y.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${y.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Ct(e,s)}`;return jf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Af(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${yt(s)}`;return jf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Af(n)}if(l)return jf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${We(s)}`;return jf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Af(n)}function Nf(){return new j(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${y.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Mf(e,t,Of())})}function Pf(e){return new j(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DAraVn8e.mjs`),r=e(),i=process.cwd(),a=Ne(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Ff(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function If(e,t,n=process.cwd()){let r=e.op??`sync`,i=A(n),a=$e(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...m({kind:`cli`,runtimeVersion:Nt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Ff(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=Ut({baseDir:n});if(r===`sync`||r===`pull`){Ff(e.json,{type:`step`,step:`pull`});let t=await o.pull();Ff(e.json,{type:`pull`,summary:t.summary}),e.json||process.stderr.write(`  pull: ${t.summary.changes} changes\n`)}(r===`sync`||r===`push`)&&(Ff(e.json,{type:`step`,step:`push`}),await o.push(),Ff(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)),Ff(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Lf(e){return new j(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await If({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Rf(e){return new j(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await If({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function zf(e){return new j(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await If({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const Bf={existsSync:e=>H(e),isDirectory:e=>{try{return G(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>ci(e),readFileSync:e=>W(e),writeFileSync:(e,t)=>{pi(e,t)},mkdirSync:(e,t)=>{U(e,t)},rmSync:(e,t)=>{fi(e,t)}},Vf={resolveProjectBundledSkillDir:()=>ot(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>ot(e,{checkDesktop:!1}),readBundledVersion:()=>rt(),readRecordedVersion:e=>lt(e,`cli-hosts`),writeRecordedVersion:(e,t)=>Rt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>xt(e),readBundleDecision:(e,t)=>cn(e,t),writeBundleDecision:(e,t,n)=>It(e,t,n),removeBundleFromDisk:(e,t)=>Tr(e,t)};function Hf(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function Uf(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(R(t),{recursive:!0}),Wf(e,t,n)}function Wf(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=z(e,r),a=z(t,r);n.isDirectory(i)?Wf(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function Gf(e,t,r){return r.existsSync(z(e,`.agents`,`skills`,t))||n.some(n=>r.existsSync(z(e,n.skillsRoot,t)))}function Kf(e,t,r,i,a,o){let s=[],c=z(e,`.agents`,`skills`,t);if(Gf(e,t,i)){i.existsSync(c)&&s.push({kind:`central`,path:c,outcome:`skipped-present`});for(let r of n){let n=z(e,r.skillsRoot,t);if(n!==c){if(!i.existsSync(z(e,r.hostDir))){s.push({kind:`host`,editorId:r.editorId,hostDir:r.hostDir,path:n,outcome:`skipped-host-absent`});continue}i.existsSync(n)&&s.push({kind:`host`,editorId:r.editorId,hostDir:r.hostDir,path:n,outcome:`skipped-present`})}}return{entries:s,anyWritten:!1,anyDestinationSucceeded:!0}}let l=i.existsSync(z(e,`.agents`));if(l&&i.existsSync(c))s.push({kind:`central`,path:c,outcome:`skipped-present`});else if(l)try{Uf(r,c,i),s.push({kind:`central`,path:c,outcome:`written`}),a({event:`user-skill-reclaim-central-written`,scope:`user`,path:c,preexisting:!1,version:o})}catch(e){let t=e instanceof Error?e.message:String(e);s.push({kind:`central`,path:c,outcome:`failed`,error:t}),a({event:`user-skill-reclaim-central-failed`,scope:`user`,path:c,error:t})}for(let l of n){let n=z(e,l.hostDir),u=z(e,l.skillsRoot,t);if(u===c){s.push({kind:`host`,editorId:l.editorId,hostDir:l.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!i.existsSync(n)){s.push({kind:`host`,editorId:l.editorId,hostDir:l.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(i.existsSync(u)){s.push({kind:`host`,editorId:l.editorId,hostDir:l.hostDir,path:u,outcome:`skipped-present`});continue}try{Uf(r,u,i),s.push({kind:`host`,editorId:l.editorId,hostDir:l.hostDir,path:u,outcome:`written`}),a({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:l.editorId,hostDir:l.hostDir,path:u,preexisting:!1,version:o})}catch(e){let t=e instanceof Error?e.message:String(e);s.push({kind:`host`,editorId:l.editorId,hostDir:l.hostDir,path:u,outcome:`failed`,error:t}),a({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:l.editorId,hostDir:l.hostDir,path:u,error:t})}}return{entries:s,anyWritten:s.some(e=>e.outcome===`written`),anyDestinationSucceeded:s.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function qf(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function Jf(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>z(st(R(e)),Xr(e));return a(t)===a(i)}function Yf(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of In){let s=z(e,n.hostDir,`skills`,`open-knowledge`),c=z(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Fn[n.editorId],u=l?.projectConfigPath?.(e);if(Jf(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!qf(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{wn(s,e),Uf(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function Xf(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],u=null;for(let e of _t)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){u=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:u??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${u}`}),{outcome:`skipped`,reason:`bundle-missing`};let d=[];for(let i of c){let a=qt[i.id],o=Gf(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!l(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}d.push(i)}if(d.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let f=d.every(t=>Gf(e,qt[t.id],n));if(s!==null&&s===o&&f)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let p=[],m=c.length===_t.length,h=[];for(let{id:t,sourceDir:i}of d){let a=Kf(e,qt[t],i,n,r,o);p.push(...a.entries),h.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let g=h.some(e=>e.centralFailed),_=h.every(e=>e.landed);if(m&&_&&!g){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of h)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{m||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of h)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:p}}async function Zf(e){let t=e.logger??Hf,n=e.fs??Bf,r=e.home??mi(),i={...Vf,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=Yf(e.projectDir,r,i,n,t),o=await Xf(r,i,n,t),s=Sr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=fr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function Qf(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function $f(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function ep(){return new j(`repair-skills`).description("Refresh bundled SKILL.md files for installed AI editors (project-local + user-global). Runs automatically during `ok start`; this command forces an explicit sweep.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await Zf({projectDir:V(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>tp(t,{yes:e.yes===!0})});process.stdout.write(`${$f(t)}\n`),process.exitCode=Qf(t)})}async function tp(e,t){let n=mi(),r=e=>`~/${B(n,e)}`,i=t.input??process.stdin,a=[``,L(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),N(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${L(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${L(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,N(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
 `)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${I("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=Si({input:i,output:process.stdout});try{let e=(await o.question(`\n${L(`Remove them?`)} ${N(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function np(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${I(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let n=[...new Set([ee,...d.map(e=>C[e])].filter(e=>e!==null).map(me))].map(e=>`${e}/`);return`\n${I(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${n.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function rp(e){return typeof e==`string`&&Zt.includes(e)}async function ip(e={}){let t=V(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Lt[n])return{status:`failed`,message:`${F(`Error:`)} Unknown pack "${n}". Available: ${Zt.join(`, `)}`,exitCode:1};let r;try{r=await mn({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof zt?{status:`prerequisite-missing`,message:`${F(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${F(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!ue(r)){let e=Lt[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${I(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=np(r,e);return{status:`no-op`,message:`${P(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${N(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Ot(Lt[n]);return{status:`dry-run`,message:`${L(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${L(`Plan:`)}\n\n${op(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await sp(`${L(`Plan:`)}\n\n${op(r,t)}\n\n${L(`Apply?`)} ${N(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:N(`Cancelled.`),plan:r,exitCode:0};let i=await Qe(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${F(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${I(`Applied`)} ${i.applied} entries, ${I(String(i.errors.length))} error(s):`,...e].join(`
@@ -90,7 +90,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function dp(e){return new j(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await up(t,await e())})}async function fp(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function pp(e,t){let{host:n,json:r}=e;la(n);let i=await vo(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await fp(new uo({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function mp(e){return new j(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await pp(t,await e())})}function hp(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function gp(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function _p(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function vp(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function yp(e){return Ut(Wo(e,[])).env(Ro())}function bp(e,t){if(!e.startsWith(`https://`))return e;try{if(new URL(e).hostname!==`github.com`)return e}catch{return e}return e.replace(`https://`,`https://x-access-token:${t}@`)}const xp={ensureOkScaffold:e=>{ft(e)},gitFactory:yp};async function Sp(e){let t={...xp,...e.deps},n=V(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await vp(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:hp(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=z(n,`.git`);if(!H(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await gp({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(hp(t)===`name-conflict`){let t=await _p(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:hp(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=bp(o.cloneUrl,e.token);try{await i.raw([`push`,c,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Cp(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function wp(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(la(n),Ve(s)){process.stderr.write(`${new He(V(s)).message}\n`),process.exitCode=64;return}let l=await vo(n,t);if(l==null){Cp(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new uo({auth:l,...u?{baseUrl:u}:{}});try{qr(`git config user.email`,k({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Cp(c,await Sp({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Tp(e){return new j(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await wp(t,await e())})}function Ep(){let e=new j(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Xn();return e.addCommand(mp(t)),e.addCommand(dp(t)),e.addCommand(Tp(t)),e}function Dp(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Op(){return new j(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=Pn(t),r=xn(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){kp(e.json,t,r.reason);return}let i=kn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${P(`✓`)} ${L(`Sharing mode is already`)} ${P(`local-only`)}${L(`.`)}\n`),Dp(r.removed);return}process.stderr.write(`${L(`Sharing mode is already`)} ${P(`local-only`)} ${L(`— nothing to do.`)}\n`);return}process.stderr.write(`${P(`✓`)} ${L(`Sharing mode set to`)} ${P(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${L(`.git/info/exclude`)} (per-clone, not committed).\n`),Dp(r.removed)})}function kp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${I({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Ap(){return new j(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=kn(t),r=Pn(t),i=Gn(t,r);if(i.kind===`no-exclude`){jp(e.json,t,i.reason);return}let a=kn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${P(`✓`)} ${M(`Sharing mode is already`)} ${L(`shared`)}${M(`.`)}\n`),Dp(i.removed);return}process.stderr.write(`${M(`Sharing mode is already`)} ${L(`shared`)} ${M(`— nothing to do.`)}\n`);return}process.stderr.write(`${P(`✓`)} ${L(`Sharing mode set to`)} ${P(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${L(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function jp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${I({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Mp(){return new j(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=V(e.project??process.cwd()),n=kn(t),r=[...En(t)],i=Tn(t,Pn(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${Np(n)}`),a.push(``),a.push(`Excluded from git via ${L(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${M(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function Np(e){switch(e){case`shared`:return P(`shared`);case`local-only`:return P(`local-only`);case`no-git`:return I(`no-git (not a git repository)`)}}function Pp(){let e=new j(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Ap()),e.addCommand(Op()),e.addCommand(Mp()),e}const Fp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Ip(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Fp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Lp(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Rp(e){return/\.(md|mdx)$/i.test(e)}function zp(e,t){if(Rp(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Bp(e,t){let n=Ip(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Lp(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Vp(e=()=>Qn(ir())){return{prepare:kt,detectBundlePath:()=>e().bundlePath??null,openTarget:Ef,runProjectOpen:(e,t)=>Mf(e,{project:t},Of()),runBrowserOpen:e=>Up(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Hp(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof jt||e instanceof vn||e instanceof pn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Df(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function Up(e){let{createEphemeralProjectDir:t}=await import(`./dist-Bm-n9FIx.mjs`),{loadConfig:n}=await import(`./src-x20mMyjG.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-u8_lFdEN.mjs`),{openBrowser:o}=await import(`./open-browser-CG-plfXw.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await vi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${We(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Np(e){switch(e){case`shared`:return P(`shared`);case`local-only`:return P(`local-only`);case`no-git`:return I(`no-git (not a git repository)`)}}function Pp(){let e=new j(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Ap()),e.addCommand(Op()),e.addCommand(Mp()),e}const Fp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Ip(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Fp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Lp(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Rp(e){return/\.(md|mdx)$/i.test(e)}function zp(e,t){if(Rp(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Bp(e,t){let n=Ip(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Lp(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Vp(e=()=>Qn(ir())){return{prepare:kt,detectBundlePath:()=>e().bundlePath??null,openTarget:Ef,runProjectOpen:(e,t)=>Mf(e,{project:t},Of()),runBrowserOpen:e=>Up(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Hp(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof jt||e instanceof vn||e instanceof pn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Df(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function Up(e){let{createEphemeralProjectDir:t}=await import(`./dist-DhGQyLku.mjs`),{loadConfig:n}=await import(`./src-BSG5D3Tb.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-CuAZYwLo.mjs`),{openBrowser:o}=await import(`./open-browser-DB4_oZoA.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await vi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${We(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function Wp(){let e=new j(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=V(process.cwd()),n=bt(Pe(t)?.rootPath??t),r=Fe({projectDir:n}),i={...r,skills:r.skills.filter(e=>we(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${N(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${L(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?N(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?N(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${P(e.name)}${t}  ${N(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${L(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${M(e.name)} ${N(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=A(process.cwd()),r=hr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${F(`Error:`)} no running Open Knowledge server for this project. Start it with ${L(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${F(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${F(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${M(`Already imported:`)} ${L(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${P(`Imported`)} ${L(o)}${c?N(` (renamed from ${c} — name was taken)`):``} from ${N(s.source??e)}${s.publisher?N(` · ${s.publisher}`):``}.\n${N(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${N(`! ${e}`)}\n`)}),e}function Gp(e){return{server:Kp(`server`,e),ui:e.status===`alive`&&Ht(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function Kp(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function qp(e){return`${Jp(e.server)}\n${Jp(e.ui)}`}function Jp(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function Yp(e){let t=e.inspect??(()=>hr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=Gp(t());return e.json?n(JSON.stringify(r,null,2)):n(qp(r)),r}function Xp(e){return new j(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),Yp({lockDir:A(process.cwd()),json:t.json===!0})})}function Zp(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function Qp(e,t){let n=Si({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function $p(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(N(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await Cn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:ke.length+1,choices:[...ke.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await Qp(t,N(`Anything else we should know? (optional) `)),i=await Qp(t,N(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function em(e){if(!Zp(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>$p(e)))()}catch{return`failed`}return p(t)?((e.output??process.stderr).write(`\n${L(`Thank you. We read every response.`)}\n\n`),(await(e.submit??x)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}const tm=[_e.stable,_e.beta];function nm(e,n,r=rm,i=H,a={}){let o=[],s=a.platform??process.platform,c=a.env??process.env;if(s===`darwin`)for(let t of tm)for(let n of[`/Applications`,z(e,`Applications`)]){let e=z(n,`${t.productName}.app`);i(e)&&o.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(s===`win32`){let e=c.LOCALAPPDATA;if(e)for(let n of tm)for(let r of he(n)){let a=z(e,`Programs`,r,t(n));if(i(a)){o.push({method:`app`,label:`${n.productName} (${a})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${n.productName}`});break}}}else if(s===`linux`)for(let e of tm){let t=`/opt/${e.productName}`;if(i(z(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;o.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return r([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&o.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),n&&/[/\\]_npx[/\\]/.test(n)&&o.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),o}function rm(e){try{return Kr(`npm`,e,k({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const im=`━`.repeat(64);function am(e,t=process.platform){let n=[I(im),L(`  One more step — remove the OpenKnowledge app itself`),N(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(N(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${M(`OK Desktop`)} — ${e}`),n.push(`    ${M(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${M(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${M(t.label)}`),n.push(`    ${t.instruction}`);return n.push(I(im)),n.join(`

package/dist/constants-B5vbbQ59.mjs

@@ -0,0 +1 @@
+import"./md-manager-BGnqyqi1-CTvRTh-G.mjs";var e=`0.78.0-beta.6`;const t=`config.yml`,n=e;export{n,t};