@inkeep/open-knowledge 0.79.12-beta.1 → 0.80.0-beta.1

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$s as n,Aa as r,Bd as i,Cd as a,Co as o,Dd as s,Fa as c,Fs as l,Gd as u,Gl as d,Ic as f,Kl as p,Lo as m,Mo as h,Na as g,Nc as _,Qn as v,Sc as y,Ss as b,Tl as x,To as S,Vo as ee,Wu as te,Xc as C,Yd as ne,Zo as re,_c as ie,ad as ae,af as oe,bs as se,ca as ce,ed as le,ef as ue,eo as de,et as fe,fd as pe,gc as me,gl as he,hc as ge,hd as w,if as _e,jl as ve,lc as ye,mc as be,md as xe,od as T,pd as Se,pl as E,ra as Ce,rc as we,rs as Te,rt as Ee,ru as De,sd as D,sl as Oe,td as ke,tl as Ae,vu as je,yd as O,yr as Me,zd as Ne}from"./md-manager-BGnqyqi1-Dk1RYEeF.mjs";import{Bo as Pe,Ci as Fe,Cn as Ie,Co as Le,Do as Re,Eo as ze,Fo as Be,Gi as Ve,Gn as He,H as Ue,Hi as We,Ii as Ge,Io as Ke,It as qe,Jo as Je,Ki as Ye,Kn as Xe,Ko as Ze,L as Qe,Li as $e,Lo as k,Lr as et,Ma as tt,O as nt,Oa as rt,Oi as it,Oo as at,Or as ot,Pt as st,R as ct,Ri as lt,Ro as ut,Si as dt,St as ft,T as pt,Ti as mt,To as ht,Tt as gt,Uo as _t,Vn as vt,Vo as yt,Vr as bt,Wn as xt,Wt as St,Xo as Ct,Xr as wt,Y as Tt,Yo as Et,Yr as Dt,_n as Ot,_o as kt,bt as At,ca as jt,ci as Mt,ct as Nt,d as Pt,da as Ft,dn as It,dr as Lt,en as Rt,ft as zt,ga as Bt,gn as Vt,gt as Ht,hn as Ut,ir as Wt,jn as Gt,ka as Kt,ki as qt,kr as Jt,la as Yt,m as Xt,mo as A,na as Zt,oo as Qt,pt as $t,qi as en,qo as tn,ra as nn,rn,rr as an,sa as on,si as sn,sr as cn,tr as ln,ua as j,ui as un,un as dn,wi as fn,wo as pn,wr as mn,x as hn,xn as gn,xo as _n,xr as vn,xt as yn,yt as bn,zo as xn}from"./dist-BUgYLrP6.mjs";import{B as Sn,Ct as M,D as Cn,E as wn,F as Tn,G as En,H as Dn,I as On,J as kn,K as An,M as jn,O as Mn,St as Nn,U as Pn,W as Fn,X as In,Z as Ln,_t as Rn,bt as zn,ft as Bn,gt as Vn,ht as Hn,j as Un,mt as Wn,pt as Gn,q as Kn,u as qn,vt as Jn,xt as Yn,yt as Xn}from"./init-CcjVDQWl.mjs";import{_ as Zn,b as Qn,d as $n,f as er,g as tr,h as nr,m as rr,o as ir,u as ar,x as or,y as sr}from"./registry-probes-CjxjiAEq.mjs";import{C as cr,E as lr,S as ur,T as dr,_ as fr,a as pr,b as mr,c as hr,d as gr,f as _r,h as vr,i as yr,l as br,m as xr,n as Sr,o as Cr,p as wr,r as Tr,s as Er,t as Dr,u as Or,v as kr,w as Ar,x as jr,y as Mr}from"./src-CbGQxtfI.mjs";import{c as Nr,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as Pr,r as Fr,t as Ir}from"./dist-bundle-T0gq9zHH.mjs";import{E as Lr,S as Rr,y as zr}from"./start-Diabosxg.mjs";import{n as Br,t as Vr}from"./constants-xgxoGkPa.mjs";import{n as Hr,t as Ur}from"./loader-1dOvB9ce.mjs";import{t as Wr}from"./removal-file-path-DXGkA0l-.mjs";import{t as Gr}from"./launch-json-removal-C3-Wrnqf.mjs";import{execFile as Kr,execFileSync as qr,execSync as Jr,spawn as Yr,spawnSync as Xr}from"node:child_process";import{basename as Zr,dirname as z,isAbsolute as Qr,join as B,posix as $r,relative as V,resolve as H,sep as ei}from"node:path";import ti from"node:process";import{fileURLToPath as ni}from"node:url";import{accessSync as ri,appendFileSync as ii,closeSync as ai,constants as oi,existsSync as U,lstatSync as si,mkdirSync as W,mkdtempSync as ci,readFileSync as G,readdirSync as li,readlinkSync as ui,realpathSync as di,renameSync as fi,rmSync as pi,statSync as K,unlinkSync as mi,writeFileSync as hi}from"node:fs";import{homedir as gi,platform as _i,tmpdir as vi}from"node:os";import{realpath as yi,rm as bi}from"node:fs/promises";import{randomUUID as xi}from"node:crypto";import{promisify as Si}from"node:util";import{setTimeout as Ci}from"node:timers/promises";import{createInterface as wi}from"node:readline/promises";const Ti={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Ei;Ei||={};function Di(e){return s(ke,e)}async function Oi(e){let{projectDir:t,contentDir:r,baseConfig:i,targetPath:a,fix:s=!1}=e,c=[],l=gn({projectDir:t,contentDir:r}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=It(t,i,d),p=de(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,_=e=>{let t=z(e),n=g.get(t);if(n)return n;let i=Ft(r,e,d),a=dn(f,i);return g.set(t,a),a},v=[],y=ki(a,r);y.kind===`file`?v.push(V(r,y.path)):b(y.path);function b(e){let t;try{t=li(e,{withFileTypes:!0})}catch(t){c.push(`could not read directory ${V(r,e)||`.`}: ${ji(t)}`);return}for(let n of t){if(n.name.startsWith(`.`))continue;let t=B(e,n.name),i=V(r,t);if(n.isDirectory()){if(l.isDirExcluded(i))continue;b(t)}else if(n.isFile()){if(!Ai(n.name)||l.isExcluded(i))continue;v.push(i)}}}v.sort();let x=[],S=0,ee=0,te=0;for(let e of v){let t=B(r,e),n;try{n=G(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${ji(t)}`);continue}let i=_(e),a=!1;if(s&&i.enabled){let r=o(n,i,e,h);if(r!==n){let i=ut(t);try{hi(i,r,`utf-8`),fi(i,t),n=r,a=!0,te++}catch(t){try{mi(i)}catch{}c.push(`could not write fix to ${e}: ${ji(t)}`)}}}let l=await Te(n,i,e,h);for(let e of l)e.severity===`error`?S++:ee++;x.push({file:e,diagnostics:l,fixed:a})}return c.push(...n(m)),{contentDir:r,files:x,warnings:c,fileCount:v.length,errorCount:S,warningCount:ee,fixedCount:te,ran:p}}function ki(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Qr(e)?e:H(t,e);try{if(K(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ai(e){let t=e.toLowerCase();return v.some(e=>t.endsWith(e))}function ji(e){return e instanceof Error?e.message:String(e)}function Mi(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=nn(r,i),o=t===void 0?void 0:Ni(t,Ar()),s=r.contentRules,c=await Oi({projectDir:i,contentDir:a,baseConfig:s?we(s):fe,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Ii(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Pi(c))&&(process.exitCode=1)})}function Ni(e,t){return H(t,e)}function Pi(e){return e.errorCount>0||e.warningCount>0}function Fi(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Ii(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Fi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...ye(e.ran).map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(L(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$s as n,Aa as r,Bd as i,Cd as a,Co as o,Dd as s,Fa as c,Fs as l,Gd as u,Gl as d,Ic as f,Kl as p,Lo as m,Mo as h,Na as g,Nc as _,Qn as v,Sc as y,Ss as b,Tl as x,To as S,Vo as ee,Wu as te,Xc as C,Yd as ne,Zo as re,_c as ie,ad as ae,af as oe,bs as se,ca as ce,ed as le,ef as ue,eo as de,et as fe,fd as pe,gc as me,gl as he,hc as ge,hd as w,if as _e,jl as ve,lc as ye,mc as be,md as xe,od as T,pd as Se,pl as E,ra as Ce,rc as we,rs as Te,rt as Ee,ru as De,sd as D,sl as Oe,td as ke,tl as Ae,vu as je,yd as O,yr as Me,zd as Ne}from"./md-manager-BGnqyqi1-Dk1RYEeF.mjs";import{Bo as Pe,Ci as Fe,Cn as Ie,Co as Le,Do as Re,Eo as ze,Fo as Be,Gi as Ve,Gn as He,H as Ue,Hi as We,Ii as Ge,Io as Ke,It as qe,Jo as Je,Ki as Ye,Kn as Xe,Ko as Ze,L as Qe,Li as $e,Lo as k,Lr as et,Ma as tt,O as nt,Oa as rt,Oi as it,Oo as at,Or as ot,Pt as st,R as ct,Ri as lt,Ro as ut,Si as dt,St as ft,T as pt,Ti as mt,To as ht,Tt as gt,Uo as _t,Vn as vt,Vo as yt,Vr as bt,Wn as xt,Wt as St,Xo as Ct,Xr as wt,Y as Tt,Yo as Et,Yr as Dt,_n as Ot,_o as kt,bt as At,ca as jt,ci as Mt,ct as Nt,d as Pt,da as Ft,dn as It,dr as Lt,en as Rt,ft as zt,ga as Bt,gn as Vt,gt as Ht,hn as Ut,ir as Wt,jn as Gt,ka as Kt,ki as qt,kr as Jt,la as Yt,m as Xt,mo as A,na as Zt,oo as Qt,pt as $t,qi as en,qo as tn,ra as nn,rn,rr as an,sa as on,si as sn,sr as cn,tr as ln,ua as j,ui as un,un as dn,wi as fn,wo as pn,wr as mn,x as hn,xn as gn,xo as _n,xr as vn,xt as yn,yt as bn,zo as xn}from"./dist-BUgYLrP6.mjs";import{B as Sn,Ct as M,D as Cn,E as wn,F as Tn,G as En,H as Dn,I as On,J as kn,K as An,M as jn,O as Mn,St as Nn,U as Pn,W as Fn,X as In,Z as Ln,_t as Rn,bt as zn,ft as Bn,gt as Vn,ht as Hn,j as Un,mt as Wn,pt as Gn,q as Kn,u as qn,vt as Jn,xt as Yn,yt as Xn}from"./init-97wsDy06.mjs";import{_ as Zn,b as Qn,d as $n,f as er,g as tr,h as nr,m as rr,o as ir,u as ar,x as or,y as sr}from"./registry-probes-DSWdtiBs.mjs";import{C as cr,E as lr,S as ur,T as dr,_ as fr,a as pr,b as mr,c as hr,d as gr,f as _r,h as vr,i as yr,l as br,m as xr,n as Sr,o as Cr,p as wr,r as Tr,s as Er,t as Dr,u as Or,v as kr,w as Ar,x as jr,y as Mr}from"./src-DOWbTqxX.mjs";import{c as Nr,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as Pr,r as Fr,t as Ir}from"./dist-bundle-T0gq9zHH.mjs";import{E as Lr,S as Rr,y as zr}from"./start-aWGO-2bx.mjs";import{n as Br,t as Vr}from"./constants-EITGH-YO.mjs";import{n as Hr,t as Ur}from"./loader-C1w1Oy0w.mjs";import{t as Wr}from"./removal-file-path-Dv3HfdEg.mjs";import{t as Gr}from"./launch-json-removal-CdkJ815L.mjs";import{execFile as Kr,execFileSync as qr,execSync as Jr,spawn as Yr,spawnSync as Xr}from"node:child_process";import{basename as Zr,dirname as z,isAbsolute as Qr,join as B,posix as $r,relative as V,resolve as H,sep as ei}from"node:path";import ti from"node:process";import{fileURLToPath as ni}from"node:url";import{accessSync as ri,appendFileSync as ii,closeSync as ai,constants as oi,existsSync as U,lstatSync as si,mkdirSync as W,mkdtempSync as ci,readFileSync as G,readdirSync as li,readlinkSync as ui,realpathSync as di,renameSync as fi,rmSync as pi,statSync as K,unlinkSync as mi,writeFileSync as hi}from"node:fs";import{homedir as gi,platform as _i,tmpdir as vi}from"node:os";import{realpath as yi,rm as bi}from"node:fs/promises";import{randomUUID as xi}from"node:crypto";import{promisify as Si}from"node:util";import{setTimeout as Ci}from"node:timers/promises";import{createInterface as wi}from"node:readline/promises";const Ti={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Ei;Ei||={};function Di(e){return s(ke,e)}async function Oi(e){let{projectDir:t,contentDir:r,baseConfig:i,targetPath:a,fix:s=!1}=e,c=[],l=gn({projectDir:t,contentDir:r}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=It(t,i,d),p=de(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},g=new Map,_=e=>{let t=z(e),n=g.get(t);if(n)return n;let i=Ft(r,e,d),a=dn(f,i);return g.set(t,a),a},v=[],y=ki(a,r);y.kind===`file`?v.push(V(r,y.path)):b(y.path);function b(e){let t;try{t=li(e,{withFileTypes:!0})}catch(t){c.push(`could not read directory ${V(r,e)||`.`}: ${ji(t)}`);return}for(let n of t){if(n.name.startsWith(`.`))continue;let t=B(e,n.name),i=V(r,t);if(n.isDirectory()){if(l.isDirExcluded(i))continue;b(t)}else if(n.isFile()){if(!Ai(n.name)||l.isExcluded(i))continue;v.push(i)}}}v.sort();let x=[],S=0,ee=0,te=0;for(let e of v){let t=B(r,e),n;try{n=G(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${ji(t)}`);continue}let i=_(e),a=!1;if(s&&i.enabled){let r=o(n,i,e,h);if(r!==n){let i=ut(t);try{hi(i,r,`utf-8`),fi(i,t),n=r,a=!0,te++}catch(t){try{mi(i)}catch{}c.push(`could not write fix to ${e}: ${ji(t)}`)}}}let l=await Te(n,i,e,h);for(let e of l)e.severity===`error`?S++:ee++;x.push({file:e,diagnostics:l,fixed:a})}return c.push(...n(m)),{contentDir:r,files:x,warnings:c,fileCount:v.length,errorCount:S,warningCount:ee,fixedCount:te,ran:p}}function ki(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=Qr(e)?e:H(t,e);try{if(K(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function Ai(e){let t=e.toLowerCase();return v.some(e=>t.endsWith(e))}function ji(e){return e instanceof Error?e.message:String(e)}function Mi(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=nn(r,i),o=t===void 0?void 0:Ni(t,Ar()),s=r.contentRules,c=await Oi({projectDir:i,contentDir:a,baseConfig:s?we(s):fe,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Ii(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Pi(c))&&(process.exitCode=1)})}function Ni(e,t){return H(t,e)}function Pi(e){return e.errorCount>0||e.warningCount>0}function Fi(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Ii(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Fi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...ye(e.ran).map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(L(`! ${n}`))}return t.join(`
 `)}const Li={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Ri(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await zi(t,n,e(),process.cwd(),Ar());r!==0&&(process.exitCode=r)})}async function zi(e,t,n,r,i,a=Li){let o=nn(n,r),s;if(e!==void 0){let t=Bi(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let l=$e(j(r));if(!l||l.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let u=`http://127.0.0.1:${l.port}`,d=s===void 0?``:`?path=${encodeURIComponent(s)}`,f;try{f=await fetch(`${u}/api/audit${d}`,{headers:c({kind:`cli`,runtimeVersion:Nt})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${l.port}: ${String(e)}`),1}if(!f.ok){let e=await f.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${f.status}`}`),1}let p=ce.safeParse(await f.json().catch(()=>null));if(!p.success){let e=p.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let m=p.data;if(t.json===!0)a.out(JSON.stringify(m,null,2));else{let e=m.brokenLinkSuppression?Wt(m.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:u}):void 0;a.out([Ii(Vi(m)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?m.errorCount>0:m.errorCount+m.warningCount>0)}function Bi(e,t,n){let r=V(n,H(t,e));return r===``?``:r.startsWith(`..`)||Qr(r)?null:r.split(ei).join(`/`)}function Vi(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Hi(e,t,n,r){let i=Ui(await Wi(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function Ui(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Wi(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Gi(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Hi(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await an(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await an(n),process.exit(1)}}),n}function Ki(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function qi(e,t,n){let r={baseUrl:Ki(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new Pr(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Ji(e){let t=e.request||Ir,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),qi(t,`POST /login/device/code`,n)}async function Yi(e){let t=await qi(e.request||Ir,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Xi(e,t.data.expires_in),n.refreshTokenExpiresAt=Xi(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Xi(e,t){return new Date(e+t*1e3).toISOString()}async function Zi(e,t){let n=Qi(e,t.auth);if(n)return n;let{data:r}=await Ji({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await ea(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Qi(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function $i(e){await new Promise(t=>setTimeout(t,e*1e3))}async function ea(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Yi({...i,clientType:`oauth-app`}):await Yi({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await $i(r.interval),ea(e,t,n,r);if(a===`slow_down`)return await $i(r.interval+7),ea(e,t,n,r);throw i}}async function ta(e,t){return Zi(e,{auth:t})}async function na(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Zi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var ra=`0.0.0-development`;function ia(e){let t=e.request||Ir.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${ra} ${Fr()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(ta.bind(null,i),{hook:na.bind(null,i)})}async function aa(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ia({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function oa(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function sa(){let e=process.cwd();return ln(e)?.rootPath??e}function ca(e){return`~/.ok/global.yml:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function la(e){return`${I(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${ca(e)}`}function ua(e){return he(e,qt())?null:la(x(e))}function da(e){let t=ua(e);t!==null&&(process.stderr.write(t),process.exit(1))}function fa(e){return(e===null?`${I(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\n`:`${I(`Error:`)} this project's git remote is ${e}, which is not a GitHub host, so GitHub sign-in does not apply here.\n`)+(e===null?`Pass --host <hostname> to target a GitHub host explicitly.
@@ -10,10 +10,10 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$s as n,Aa as
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function wo(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=ma(e.host);await Co({...e,host:t})})}async function To(e,t,n=Lr){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function Eo(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function Do(e,t){let{host:n,json:r}=e,i=t.backend,a=await To(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(Eo(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new po({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(Eo(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=go(e,n);r?process.stdout.write(`${JSON.stringify(Eo(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function Oo(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=pa(t.host);await Do({...t,host:n},await e())})}function ko(e){let t=new M(`auth`);t.description(`GitHub authentication management`);let n=e=>Zn(void 0,e);return t.addCommand(_a(n)),t.addCommand(Oo(n)),t.addCommand(So(n)),t.addCommand(wo()),t.addCommand(yo(n)),t.addCommand(Gi(n,e)),t}function Ao(e,t=_i(),n=rr){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[z(e)])}catch{}}function jo(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await _r({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:vr(),logger:Qn()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&Ao(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Mo(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:Or(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:Or(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function No(e){let t=e.inspect??(()=>gr(e.lockDir,`server`,{isAlive:bt})),n=e.unlink??(e=>mi(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Mo(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Po(e){return new M(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),No({lockDir:j(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Fo(e){return`!${e.map(le).join(` `)} auth git-credential`}function Io(e){return`credential.helper=${Fo(e)}`}function Lo(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Fo(e)}`]}async function Ro(e,t,n={},r=Lr){let i=[`credential.helper=`,Io(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function zo(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Bo=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Vo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Bo)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ho(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Uo(e,t=process.env){let n=Ho(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Wo(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Go(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ko=m;async function qo(e){try{return await e.clone(Go(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ko(t))return e.onFallback(e.branch),await e.clone(Go(null)),{fellBack:!0};throw t}}function Jo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function Yo(e,t,n){return e===`https`&&t===`github.com`&&n}function Xo(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Zo(e){return Xo(e,{url:`The clone URL`,operation:`the clone`})}async function Qo(e,t,n={}){let r=br(e);if(!r)throw Error(`Invalid git URL: ${rs(e)}`);let i=jt(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await Ro(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!rt(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function $o(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function es(e,t,n,r=process.cwd()){let i=br(e);if(!i)throw Error(`Invalid git URL: ${rs(e)}`);let a=$o(e,i),o=t.dir?H(r,t.dir):H(r,i.name);if(U(o)&&li(o).length>0)throw Error(`Target directory is not empty: ${o}`);qe();let s=sr(),c=i.protocol===`https`&&i.hostname===`github.com`&&await zo(i.owner,i.name),l=Yo(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await Qo(a,s,{selfCliArgs:Wo(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=Zo(l.declaredMiss);e&&process.stderr.write(e)}let d=Uo(u),f=Jo(r,u.gitConfig),p=k(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Vo(e);n&&n.pct!==m&&(m=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await qo({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>p.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-BbqGtQgJ.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{ts(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function ts(e){let t=Sn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const ns=/^[A-Za-z0-9._/:@-]+$/;function rs(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&un(i)!==void 0?`${t}${i}@`:t})}function is(e){return ns.test(e)?e:le(e)}function as(e,t){let n=typeof t==`string`&&t.length>0?` -b ${is(t)}`:``;return`ok clone ${is(e)}${n}`}function os(e){let t=r(e.error);if(t.kind!==`auth`)return null;let n=rs(e.url);if(ee(t)){let t=as(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-BDa_n55R.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{ts(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function ts(e){let t=Sn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const ns=/^[A-Za-z0-9._/:@-]+$/;function rs(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&un(i)!==void 0?`${t}${i}@`:t})}function is(e){return ns.test(e)?e:le(e)}function as(e,t){let n=typeof t==`string`&&t.length>0?` -b ${is(t)}`:``;return`ok clone ${is(e)}${n}`}function os(e){let t=r(e.error);if(t.kind!==`auth`)return null;let n=rs(e.url);if(ee(t)){let t=as(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${as(n,e.branch)}`].join(`
 `)}function ss(e){if(!(e.error instanceof Ke)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=rs(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${as(t,e.branch)}`].join(`
-`)}function cs(e){let t=Ye(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=os({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??ss({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function ls(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function us(e){let t=r(e.error),n=e.auth?.tier===`A`?e.auth:void 0,i=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)i=n.login??null;else if(e.auth?.tier!==`none`){let t=br(e.url);t&&(i=await(e.resolvePrincipal??(e=>ls(sr(),e)))(t.hostname))}}cs({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:i,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function ds(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await es(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-1IqofTR6.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Qe||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await us({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var fs=te();const ps=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...C.map(e=>e.path)];function ms(e){return yt({absPath:_t(`project-local`,e),sideline:!1}).diagnostics}function hs(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Hr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ms)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(E(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function gs(e){let t=G(e,`utf-8`),n=(0,fs.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ps)n.hasIn(e)&&r.push(e.join(`.`));return r}function _s(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function vs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=_s(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ys(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function bs(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ze,s=ys(r).map(t=>({scope:t,absPath:_t(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=gs(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:vs(ps.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:E(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const xs=`project | project-local | user | all`,Ss=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Cs(e){return e!==`config`}function ws(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{hs({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${xs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!Ss.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${xs}`),process.exitCode=2;return}(await bs({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const Ts=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],Es=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Ds(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(Es),t.join(`
+`)}function cs(e){let t=Ye(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=os({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??ss({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function ls(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function us(e){let t=r(e.error),n=e.auth?.tier===`A`?e.auth:void 0,i=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)i=n.login??null;else if(e.auth?.tier!==`none`){let t=br(e.url);t&&(i=await(e.resolvePrincipal??(e=>ls(sr(),e)))(t.hostname))}}cs({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:i,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function ds(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await es(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BuUZ2MA8.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Qe||e instanceof ct){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await us({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var fs=te();const ps=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...C.map(e=>e.path)];function ms(e){return yt({absPath:_t(`project-local`,e),sideline:!1}).diagnostics}function hs(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Hr;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ms)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(E(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function gs(e){let t=G(e,`utf-8`),n=(0,fs.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ps)n.hasIn(e)&&r.push(e.join(`.`));return r}function _s(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function vs(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=_s(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function ys(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function bs(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ze,s=ys(r).map(t=>({scope:t,absPath:_t(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=gs(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:vs(ps.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:E(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const xs=`project | project-local | user | all`,Ss=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Cs(e){return e!==`config`}function ws(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{hs({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${xs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!Ss.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${xs}`),process.exitCode=2;return}(await bs({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const Ts=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],Es=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Ds(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(Es),t.join(`
 `)}function Os(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ~/.ok/skill-state.yml`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function ks(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),...Ts,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function As(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function js(e={}){let t=await St(e);return t.status===`failed`?{...t,message:As(t),exitCode:1}:t.status===`skip-current`?{...t,message:Os(t),exitCode:0}:t.status===`installed`?{...t,message:ks(t),exitCode:0}:{...t,message:Ds(t),exitCode:0}}function Ms(){return new M(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await js({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function Ns(e,t){let n=wi({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const Ps=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function Fs(e){return B(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const Is={existsSync:e=>U(e),readFileSync:(e,t)=>G(e,t),lstatSync:e=>si(e),readlinkSync:e=>ui(e)};function Ls(e,t=Is){let n=Fs(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function Rs(e){let t=e.replace(Ps,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function zs(e,t,n=Is){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function Bs(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Wn(e)} readProcessStart=${t}`}function Vs(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Bn(n,r),t.onNativeFailure?.({kind:e,reason:Gn(n,r)})};try{if(n===`win32`){let n=!1,a=Hn(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Bs(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Wn(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??qr,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Hs(e,t={}){let n=t.probe??Gt(),r=t.isAlive??(e=>bt(e,n(e))),i=t.isAlive??Dt,a=gr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(Qn()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(Or(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>tt(n)))(),u=await yi(e).catch(()=>H(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Vs)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ~/.ok/logs. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await Sr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await Ci(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Us(e){return ei===`/`?e:e.split(ei).join(`/`)}function Ws(e,t,n=`This project`){let r=[],i=[j(e)],a=B(e,`.ok`);Wr(B(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of kn){let a=In[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Us(V(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Us(V(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Fn(e),...Pn(e),...ue]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:B(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:Ct(e)})}catch{}let c=B(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function Gs(e,t){return{scope:`deinit`,ops:Ws(e,t)}}function Ks(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(B(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...Js(a,t));for(let e of kn){let n=In[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of hr(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...Ws(e,t,`Project: ${Zr(e)}`));return c.push(...Ys(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:B(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function qs(e){return[B(e,`.zshrc`),B(e,`.bash_profile`),B(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function Js(e,t){let n=[],r=new Set([...qs(t),...e?.rcFiles??[]]);for(let e of r)Wr(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Ys(e,t,n){let r={home:e,platformName:t,env:n},i=jr(r),a=mr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=jr({...r,productName:Mr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Xs(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??tr,r=t.clearEmbeddingsKey??rn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[H(e.lockDir)]:[])),a=Gt(),o=t.scanProcesses??(()=>tt(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Hs(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(H(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Qs(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=H(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(H(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(H(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Zs(e,t=Dr){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Qs(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Wr(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${$s(t.reason)}: ${e.rcFile}`};let n;try{n=G(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${$s(jn(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=Rs(n);return i?a&&!t.symlink?(pi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(xn(t.path,r,{mode:Mn(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return zs(e.path,e.target)?(mi(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=ir(In[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:$s(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Gr(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${B(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:$s(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=Kn(e.projectRoot,tc(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${B(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return ec(e)}}function $s(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Un(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function ec(e){if(e.requireOurState&&!cr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&On(e.path,e.containWithin);let t;try{t=si(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return mi(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of li(e.path))t.has(r)||(pi(B(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return pi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function tc(e){let t=new Set([B(e,`.claude`,`launch.json`)]);for(let n of kn){let r=In[n].projectConfigPath?.(e);r&&t.add(r)}return Fn(e).filter(n=>{let r=B(e,n);if(!t.has(r))return!0;try{return si(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function nc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function rc(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of nc(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
@@ -45,7 +45,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function Rc(e,t,n,r,i){let a=Lc(e,t,B(r,`cpu.cpuprofile`)),o=!1,s=Yr(process.execPath,[a],A({stdio:`ignore`})),c=setInterval(()=>{let e=Nc(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{pi(B(a,`..`),{recursive:!0,force:!0})}catch{}return o}function zc(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function Bc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??vt,s=t.inspect??(e=>gr(e,`server`)),c=t.resolveCommand??fn,l=t.resolveUsage??mt,u=t.collectLsofFn??Pc,d=t.getEndpoints??Ic,f=t.profiler??Rc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?B(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):B(process.cwd(),`ok-diagnose-${n}-${b}`);try{W(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{hi(B(x,e),t),a(`  wrote ${e}`)},ee=c(n),te=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:ee,usage:te,lockInfo:y},null,2)),a(`  sampling lsof`);let C=u(n);if(C&&S(`lsof.txt`,C),!i){let e=C?Fc(C).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,zc(G(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Vc(e){let t=wi({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Hc(e){let t=ci(B(vi(),`ok-bundle-process-`));return await Bc({pid:e,output:t}),t}function Uc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Wc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Gc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Kc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function qc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Uc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Gc(t)}`),e(`  Credentials:         ${Kc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${kr(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Jc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Vc,i=t.runProcessDiagnose??Hc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);W(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=fr(t.diagnosticReportsDir??B(gi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await wr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),qc(n,u,o,l),e.yes!==!0&&!Wc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await xr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{pi(s,{recursive:!0,force:!0})}catch{}}}function Yc(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Bc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(Mc()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-DIVmIjca.mjs`),{resolveContentDir:r}=await import(`./dist-vTnz4KIT.mjs`),i=process.cwd(),{config:a}=n(i);await Jc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Xc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ya({message:`Enter embeddings provider API key:`})).trim()}function Zc(e){return Ge(e)}async function Qc(e,t){let n=await on(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function $c(e){try{let t=$e(j(e));if(!t||t.port<=0||!Dt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=Me.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function el(e,t){if(!e)return`unavailable (search stays lexical)`;let n=g(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function tl(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Xc();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,zc(G(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Vc(e){let t=wi({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Hc(e){let t=ci(B(vi(),`ok-bundle-process-`));return await Bc({pid:e,output:t}),t}function Uc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Wc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Gc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Kc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function qc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Uc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Gc(t)}`),e(`  Credentials:         ${Kc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${kr(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function Jc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Vc,i=t.runProcessDiagnose??Hc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);W(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=fr(t.diagnosticReportsDir??B(gi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await wr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),qc(n,u,o,l),e.yes!==!0&&!Wc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await xr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{pi(s,{recursive:!0,force:!0})}catch{}}}function Yc(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Bc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(Mc()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BQt7L1Ak.mjs`),{resolveContentDir:r}=await import(`./dist-vTnz4KIT.mjs`),i=process.cwd(),{config:a}=n(i);await Jc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Xc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ya({message:`Enter embeddings provider API key:`})).trim()}function Zc(e){return Ge(e)}async function Qc(e,t){let n=await on(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function $c(e){try{let t=$e(j(e));if(!t||t.port<=0||!Dt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=Me.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function el(e,t){if(!e)return`unavailable (search stays lexical)`;let n=g(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function tl(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Xc();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=H(e.cwd??process.cwd()),{baseUrl:r}=Zc(n);try{await Ie().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -80,7 +80,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function gf(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function _f(e){return/\s/.test(e)?`<${e}>`:e}function vf(e,t={}){let{header:n,rows:r}=Bd(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(gf).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=gf(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${_f(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function yf(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function bf(e,t){return`# ${e}\n\n${t}\n`}const xf=[`links`,`frontmatter`,`callouts`,`images`,`tables`],Sf=/\.mdx?$/i;function Cf(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function wf(e,t={}){let n=t.selected??new Set(xf),r=cf(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:Cf(!1)};let i=Cf(r),a=af(e),o=Yd(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!Sf.test(e)||s&&l.has(e))continue;let r;try{r=G(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=zd(a,Zr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:B(z(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Fd(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=hf(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=rf(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=vf(e.csvText,{linkForTitle:t=>{let n=Kd(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?V(z(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=G(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=bf(o===null?e.fallbackTitle:yf(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=rf(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function Tf(e){for(let t of e.assets)W(z(t.path),{recursive:!0}),hi(t.path,t.bytes);for(let t of e.changes)W(z(t.path),{recursive:!0}),hi(t.path,t.content,`utf8`);for(let t of e.deletions)try{mi(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const Ef={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},Df=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function Of(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of Df)n.push(`  ${Ef[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function kf(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Af(e){let t=new Set(xf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${xf.join(`, `)}`);return e})}function jf(e,t){let n=new Set(xf);if(e&&(n=new Set(Af(e))),t)for(let e of Af(t))n.delete(e);return n}function Mf(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=jf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=wf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Tf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?kf(a,{applied:t.apply??!1}):Of(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Nf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Pf(e,t={}){let n=Nf(e,t.platform??process.platform,t.desktopBundlePath);return nr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Ff(e,t,n=process.platform){let r=Nf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function If(e=()=>$n(ar())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Bt({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return K(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Pf,findAncestorProject:e=>ln(z(H(e)))?.rootPath??null,isProjectRoot:e=>ln(e)?.distance===0,enclosingProject:e=>ln(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Lf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Rf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function zf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Ff(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Bf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Lf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!De.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${De.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Xe(e,s)}`;return zf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Rf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${He(s)}`;return zf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Rf(n)}if(l)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${xt(s)}`;return zf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Rf(n)}function Vf(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${De.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Bf(e,t,If())})}function Hf(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CciXiIqM.mjs`),r=e(),i=process.cwd(),a=nn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Uf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Wf(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Gf(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Wf((await e.raw([`remote`])).split(`
+`)}function kf(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Af(e){let t=new Set(xf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${xf.join(`, `)}`);return e})}function jf(e,t){let n=new Set(xf);if(e&&(n=new Set(Af(e))),t)for(let e of Af(t))n.delete(e);return n}function Mf(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=jf(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=wf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Tf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?kf(a,{applied:t.apply??!1}):Of(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Nf(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Pf(e,t={}){let n=Nf(e,t.platform??process.platform,t.desktopBundlePath);return nr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Ff(e,t,n=process.platform){let r=Nf(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function If(e=()=>$n(ar())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Bt({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return K(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Pf,findAncestorProject:e=>ln(z(H(e)))?.rootPath??null,isProjectRoot:e=>ln(e)?.distance===0,enclosingProject:e=>ln(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Lf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Rf(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function zf(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Ff(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Bf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Lf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!De.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${De.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Xe(e,s)}`;return zf(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Rf(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${He(s)}`;return zf(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Rf(n)}if(l)return zf(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${xt(s)}`;return zf(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Rf(n)}function Vf(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${De.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Bf(e,t,If())})}function Hf(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CTm5ZGBZ.mjs`),r=e(),i=process.cwd(),a=nn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Uf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Wf(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Gf(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Wf((await e.raw([`remote`])).split(`
 `).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Kf(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===x(t)?t:null}const qf=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function Jf(e,t){return qf.some(n=>Array.from(e.matchAll(n)).some(e=>Kf(e[1])===t))}function Yf(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function Xf(e,t,n){let r={git:k({baseDir:e})},i=t===null?null:Kf(t);if(t===null||i===null||br(t)===null||!he(i,qt()))return r;let{auth:a,declaredMiss:o}=await Qo(t,n.tokenStore,{cwd:e,...n.detectGh?{_detectGhFn:n.detectGh}:{}});return a.tier===`none`?r:{git:k(Jo(e,Lo(Wo(),i))).env(Yf(Uo(a))),signIn:{host:i,tier:a.tier},...o===void 0?{}:{declaredMiss:o}}}function Zf(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`ok auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ok auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Qf(e,t,n){try{return await n(e.git)}catch(n){let i=n instanceof Error?n.message:String(n),a=e.signIn===void 0||!Jf(i,e.signIn.host)?null:Zf(t,e.signIn,r(n));throw a===null?n:Error(`${i.trimEnd()}\n${a}`,{cause:n})}}async function $f(e,t,n=process.cwd()){let r=e.op??`sync`,i=j(n),a=$e(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...c({kind:`cli`,runtimeVersion:Nt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Uf(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=k({baseDir:n}),s={tokenStore:e.tokenStore??sr(),detectGh:e._detectGhFn},l=async t=>{let i=await Xf(n,t,s),a=Xo(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Uf(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},u;if(r===`sync`||r===`pull`){Uf(e.json,{type:`step`,step:`pull`});let t=await Gf(o,`pull`);u={url:t,remote:await l(t)};let n=await Qf(u.remote,`pull`,e=>e.pull());Uf(e.json,{type:`pull`,summary:n.summary}),e.json||process.stderr.write(`  pull: ${n.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Uf(e.json,{type:`step`,step:`push`});let t=await Gf(o,`push`);await Qf(u!==void 0&&u.url===t?u.remote:await l(t),`push`,e=>e.push()),Uf(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)}Uf(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function ep(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await $f({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function tp(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await $f({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function np(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await $f({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const rp={existsSync:e=>U(e),isDirectory:e=>{try{return K(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>li(e),readFileSync:e=>G(e),writeFileSync:(e,t)=>{hi(e,t)},mkdirSync:(e,t)=>{W(e,t)},rmSync:(e,t)=>{pi(e,t)}},ip={resolveProjectBundledSkillDir:()=>Zt(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>Zt(e,{checkDesktop:!1}),readBundledVersion:()=>lt(),readRecordedVersion:e=>We(e,`cli-hosts`),writeRecordedVersion:(e,t)=>_n(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>Ve(e),readBundleDecision:(e,t)=>it(e,t),writeBundleDecision:(e,t,n)=>kt(e,t,n),removeBundleFromDisk:(e,t)=>Er(e,t)};function ap(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function op(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(z(t),{recursive:!0}),sp(e,t,n)}function sp(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=B(e,r),a=B(t,r);n.isDirectory(i)?sp(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function cp(e,t,n){return n.existsSync(B(e,`.agents`,`skills`,t))||_e.some(r=>n.existsSync(B(e,r.skillsRoot,t)))}function lp(e,t,n,r,i,a){let o=[],s=B(e,`.agents`,`skills`,t);if(cp(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of _e){let i=B(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(B(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(B(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{op(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of _e){let l=B(e,c.hostDir),u=B(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{op(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function up(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function dp(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>B(Rt(z(e)),Zr(e));return a(t)===a(i)}function fp(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Ln){let s=B(e,n.hostDir,`skills`,`open-knowledge`),c=B(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=In[n.editorId],u=l?.projectConfigPath?.(e);if(dp(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!up(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Tn(s,e),op(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function pp(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],u=null;for(let e of gt)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){u=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:u??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${u}`}),{outcome:`skipped`,reason:`bundle-missing`};let d=[];for(let i of c){let a=Xt[i.id],o=cp(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!l(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}d.push(i)}if(d.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let f=d.every(t=>cp(e,Xt[t.id],n));if(s!==null&&s===o&&f)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let p=[],m=c.length===gt.length,h=[];for(let{id:t,sourceDir:i}of d){let a=lp(e,Xt[t],i,n,r,o);p.push(...a.entries),h.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let g=h.some(e=>e.centralFailed),_=h.every(e=>e.landed);if(m&&_&&!g){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of h)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{m||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of h)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:p}}async function mp(e){let t=e.logger??ap,n=e.fs??rp,r=e.home??gi(),i={...ip,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=fp(e.projectDir,r,i,n,t),o=await pp(r,i,n,t),s=Cr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=pr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function hp(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function gp(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function _p(){return new M(`repair-skills`).description("Refresh bundled SKILL.md files for installed AI editors (project-local + user-global). Runs automatically during `ok start`; this command forces an explicit sweep.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await mp({projectDir:H(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>vp(t,{yes:e.yes===!0})});process.stdout.write(`${gp(t)}\n`),process.exitCode=hp(t)})}async function vp(e,t){let n=gi(),r=e=>`~/${V(n,e)}`,i=t.input??process.stdin,a=[``,R(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),P(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${R(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${R(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,P(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
@@ -92,7 +92,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function Op(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Dp(t,await e())})}async function kp(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Ap(e,t){let{host:n,json:r}=e;da(n);let i=await bo(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await kp(new po({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function jp(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Ap(t,await e())})}function Mp(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Np(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Pp(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Fp(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function Ip(e,t){return t===void 0?k(Jo(e,[])).env(Ho()):k(Jo(e,Lo(Wo(),t.host))).env(Uo({relayToken:t}))}function Lp(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const Rp={ensureOkScaffold:e=>{mn(e)},gitFactory:Ip};async function zp(e){let t={...Rp,...e.deps},n=H(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Fp(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Mp(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=B(n,`.git`);if(!U(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Np({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Mp(t)===`name-conflict`){let t=await Pp(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Mp(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Lp(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Bp(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Vp(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(da(n),et(s)){process.stderr.write(`${new Ue(H(s)).message}\n`),process.exitCode=64;return}let l=await bo(n,t);if(l==null){Bp(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new po({auth:l,...u?{baseUrl:u}:{}});try{Jr(`git config user.email`,A({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Bp(c,await zp({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Hp(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Vp(t,await e())})}function Up(){let e=new M(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Zn();return e.addCommand(jp(t)),e.addCommand(Op(t)),e.addCommand(Hp(t)),e}function Wp(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Gp(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Fn(t),r=Sn(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){Kp(e.json,t,r.reason);return}let i=An(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${F(`✓`)} ${R(`Sharing mode is already`)} ${F(`local-only`)}${R(`.`)}\n`),Wp(r.removed);return}process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`),Wp(r.removed)})}function Kp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function qp(){return new M(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=An(t),r=Fn(t),i=Kn(t,r);if(i.kind===`no-exclude`){Jp(e.json,t,i.reason);return}let a=An(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${F(`✓`)} ${N(`Sharing mode is already`)} ${R(`shared`)}${N(`.`)}\n`),Wp(i.removed);return}process.stderr.write(`${N(`Sharing mode is already`)} ${R(`shared`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${R(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Jp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Yp(){return new M(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=An(t),r=[...Dn(t)],i=En(t,Fn(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${Xp(n)}`),a.push(``),a.push(`Excluded from git via ${R(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${N(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function Xp(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Zp(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(qp()),e.addCommand(Gp()),e.addCommand(Yp()),e}const Qp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function $p(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Qp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function em(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function tm(e){return/\.(md|mdx)$/i.test(e)}function nm(e,t){if(tm(t))return!0;try{return K(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function rm(e,t){let n=$p(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=em(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function im(e=()=>$n(ar())){return{prepare:Fe,detectBundlePath:()=>e().bundlePath??null,openTarget:Pf,runProjectOpen:(e,t)=>Bf(e,{project:t},If()),runBrowserOpen:e=>om(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function am(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof At||e instanceof bn||e instanceof yn||e instanceof ft)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Ff(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function om(e){let{createEphemeralProjectDir:t}=await import(`./dist-vTnz4KIT.mjs`),{loadConfig:n}=await import(`./src-Dy8bEmOM.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-1IqofTR6.mjs`),{openBrowser:o}=await import(`./open-browser-u9vaqtv4.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await bi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${xt(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Xp(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Zp(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(qp()),e.addCommand(Gp()),e.addCommand(Yp()),e}const Qp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function $p(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Qp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function em(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function tm(e){return/\.(md|mdx)$/i.test(e)}function nm(e,t){if(tm(t))return!0;try{return K(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function rm(e,t){let n=$p(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=em(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function im(e=()=>$n(ar())){return{prepare:Fe,detectBundlePath:()=>e().bundlePath??null,openTarget:Pf,runProjectOpen:(e,t)=>Bf(e,{project:t},If()),runBrowserOpen:e=>om(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function am(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof At||e instanceof bn||e instanceof yn||e instanceof ft)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Ff(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function om(e){let{createEphemeralProjectDir:t}=await import(`./dist-vTnz4KIT.mjs`),{loadConfig:n}=await import(`./src-DEGLTHnw.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BuUZ2MA8.mjs`),{openBrowser:o}=await import(`./open-browser-u9vaqtv4.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await bi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${xt(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function sm(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=H(process.cwd()),n=Et(ln(t)?.rootPath??t),r=Be({projectDir:n}),i={...r,skills:r.skills.filter(e=>je(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${P(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${R(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?P(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?P(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${F(e.name)}${t}  ${P(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${R(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${N(e.name)} ${P(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=j(process.cwd()),r=gr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${I(`Error:`)} no running Open Knowledge server for this project. Start it with ${R(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${I(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${N(`Already imported:`)} ${R(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${F(`Imported`)} ${R(o)}${c?P(` (renamed from ${c} — name was taken)`):``} from ${P(s.source??e)}${s.publisher?P(` · ${s.publisher}`):``}.\n${P(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${P(`! ${e}`)}\n`)}),e}function cm(e){return{server:lm(`server`,e),ui:e.status===`alive`&&sn(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function lm(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function um(e){return`${dm(e.server)}\n${dm(e.ui)}`}function dm(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function fm(e){let t=e.inspect??(()=>gr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=cm(t());return e.json?n(JSON.stringify(r,null,2)):n(um(r)),r}function pm(e){return new M(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),fm({lockDir:j(process.cwd()),json:t.json===!0})})}function mm(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function hm(e,t){let n=wi({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function gm(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await wn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:Ce.length+1,choices:[...Ce.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await hm(t,P(`Anything else we should know? (optional) `)),i=await hm(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function _m(e){if(!mm(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>gm(e)))()}catch{return`failed`}return h(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??b)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}const vm=[be.stable,be.beta];function ym(e,t,n=bm,r=U,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of vm)for(let n of[`/Applications`,B(e,`Applications`)]){let e=B(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of vm)for(let n of ie(t)){let i=B(e,`Programs`,n,me(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of vm){let t=`/opt/${e.productName}`;if(r(B(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function bm(e){try{return qr(`npm`,e,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const xm=`━`.repeat(64);function Sm(e,t=process.platform){let n=[L(xm),R(`  One more step — remove the OpenKnowledge app itself`),P(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(P(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${N(`OK Desktop`)} — ${e}`),n.push(`    ${N(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${N(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${N(t.label)}`),n.push(`    ${t.instruction}`);return n.push(L(xm)),n.join(`

package/dist/constants-EITGH-YO.mjs

@@ -0,0 +1 @@
+import"./md-manager-BGnqyqi1-Dk1RYEeF.mjs";var e=`0.80.0-beta.1`;const t=`config.yml`,n=e;export{n,t};

package/dist/index.d.mts

@@ -11266,6 +11266,17 @@ interface CliReadiness {
   readonly onPath: 'present' | 'not-found' | 'unknown';
   readonly okServerConfigured?: boolean;
 }
+interface CopyImageRequest {
+  readonly src: string;
+}
+type CopyImageFailureReason = 'fetch-failed' | 'path-escape' | 'empty-image' | 'read-error' | 'write-error';
+type CopyImageResult = {
+  ok: true;
+} | {
+  ok: false;
+  reason: CopyImageFailureReason;
+  detail?: string;
+};
 interface OkDesktopBridge {
   readonly config: OkDesktopConfig;
   onProjectSwitched(cb: (next: OkDesktopConfig) => void): OkUnsubscribe;
@@ -11356,16 +11367,7 @@ interface OkDesktopBridge {
   };
   clipboard: {
     writeText(text: string): Promise<void>;
-    copyImage(params: {
-      readonly src: string;
-      readonly alt: string;
-    }): Promise<{
-      ok: true;
-    } | {
-      ok: false;
-      reason: 'fetch-failed' | 'path-escape' | 'empty-image' | 'read-error' | 'write-error';
-      detail?: string;
-    }>;
+    copyImage(request: CopyImageRequest): Promise<CopyImageResult>;
   };
   project: {
     listRecent(): Promise<RecentProjectEntry[]>;

package/dist/index.mjs

@@ -1539,6 +1539,6 @@ GFS4: `),console.error(e)}),r[c]||(d(r,global[c]||[]),r.close=(function(e){funct
 `);re(e,o)}function j9(e,t){let n=S(e,`utf-8`);if(n.trim().length!==0)try{let r=k9(JSON.parse(n),t),i=n.endsWith(`
 `)?`
 `:``;re(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=O9(n,t.contentDir);r!==n&&re(e,r)}}function M9(e,t){let n=S(e,`utf-8`),r=O9(n,t.contentDir);r!==n&&re(e,r)}function N9(e){try{return w(e,{withFileTypes:!0}).filter(e=>e.isFile()).map(t=>N(e,t.name))}catch{return[]}}const zje=new Set([`agent-presence.json`,`agent-effects.json`,`runtime.json`]);function P9(e){return/\.log\.\d+$/.test(e)}function Bje(e){return e.endsWith(`.jsonl`)||e.endsWith(`.log`)||P9(e)}const Vje=[`telemetry`,`logs`,`process`,`diagnostic-reports`];function Hje(e){let t={contentDir:e.contentDir};for(let n of Vje)for(let r of N9(N(e.stagingDir,n)))Bje(r)?A9(r,t):r.endsWith(`.json`)?j9(r,t):M9(r,t);for(let n of N9(N(e.stagingDir,`state`))){let e=me(n);n.endsWith(`.jsonl`)?A9(n,t):zje.has(e)?j9(n,t):M9(n,t)}}const F9=[`.ok`,`local`,`telemetry`],I9=[`.ok`,`local`,`logs`],L9=[`.ok`,`local`,`loss-capture`],R9=`spans-current.jsonl`,z9=`spans-prev.jsonl`,B9=`server-current.jsonl`,V9=`server-prev.jsonl`,H9=`loss-current.jsonl`,U9=`loss-prev.jsonl`;function Uje(e){return N(e,...F9,R9)}function Wje(e){return N(e,...F9,z9)}function Gje(e){return N(e,...I9,B9)}function Kje(e){return N(e,...I9,V9)}function qje(e){return N(e,...L9,H9)}function Jje(e){return N(e,...L9,U9)}const W9=1e3;async function Yje(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-presence`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function Xje(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-effects`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function Zje(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/watcher-recent`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}function Qje(e){try{let t=JSON.parse(e);if(typeof t!=`object`||!t)return null;let n=t.decisions;return Array.isArray(n)?n.length===0?``:`${n.map(e=>JSON.stringify(e)).join(`
-`)}\n`:null}catch{return null}}function $je(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],L6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function eMe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],L6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function tMe(){return{nodeVersion:process.version,platform:le(),arch:ae()}}function nMe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,hs.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function rMe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return rMe(e.maxBytes)}function iMe(e){let t=q9(kl(`project`,e)),n=q9(kl(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function aMe(e){return De(`sha256`).update(e).digest(`hex`)}function oMe(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const sMe=[`"doc.name"`,`"docName"`];function cMe(e){let t=S(e,`utf-8`),n=0;for(let e of sMe){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function X9(e,t){if(!g(e))return!1;try{return v(M(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,S7(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const lMe=new Set([`.jsonl`]);function uMe(e){let t=e.lastIndexOf(`.`);return t!==-1&&lMe.has(e.slice(t))}const Q9=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function dMe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&Q9.has(e.slice(t))}function fMe(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!dMe(r))continue;let{redacted:i,patterns:a,lineCount:o}=aV(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return ye(e,t).split(xe).join(`/`)}async function pMe(e){let t=be(e.contentDir),n=be(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??Yje,a=r.fetchAgentEffects??Xje,o=r.fetchWatcherRecent??Zje,s=r.readShadowHead??$je,c=r.readCheckpointRefs??eMe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.79.12-beta.1`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??tMe,h=r.isOtlpPushEnabled??nMe,_=y(N(A(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(Uje(n),N(_,`telemetry`,R9)),X9(Wje(n),N(_,`telemetry`,z9)),X9(Gje(n),N(_,`logs`,B9)),X9(Kje(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,me(t)));for(let t of e.userStateFiles??[])X9(t,N(_,OR,me(t)));let y=0;for(let t of e.diagnosticReports?.files??[])X9(t,N(_,`diagnostic-reports`,me(t)))&&(y+=1);let b=N(n,`.ok`,`local`),x=N(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){X9(x,N(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(N(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(N(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=Qje(n);e!==null&&re(N(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(N(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(N(_,`state`,`checkpoint-refs.txt`),D),X9(qje(n),N(_,`state`,H9)),X9(Jje(n),N(_,`state`,U9)),X9(N(b,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(b,Zc),N(_,`state`,Zc)),X9(N(b,Qc),N(_,`state`,Qc)),X9(N(b,Xc),N(_,`state`,Xc));let ee=p(),ne=d(),ie=f(),ae={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(N(_,`state`,`runtime.json`),`${JSON.stringify(ae,null,2)}\n`);let oe=C===`running`?`running
+`)}\n`:null}catch{return null}}function $je(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],L6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function eMe(e){let t=N(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],L6({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function tMe(){return{nodeVersion:process.version,platform:le(),arch:ae()}}function nMe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,hs.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function rMe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return rMe(e.maxBytes)}function iMe(e){let t=q9(kl(`project`,e)),n=q9(kl(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function aMe(e){return De(`sha256`).update(e).digest(`hex`)}function oMe(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const sMe=[`"doc.name"`,`"docName"`];function cMe(e){let t=S(e,`utf-8`),n=0;for(let e of sMe){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function X9(e,t){if(!g(e))return!1;try{return v(M(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,S7(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Z9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=N(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const lMe=new Set([`.jsonl`]);function uMe(e){let t=e.lastIndexOf(`.`);return t!==-1&&lMe.has(e.slice(t))}const Q9=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function dMe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&Q9.has(e.slice(t))}function fMe(e){let t=[];for(let n of Z9(e)){let r=$9(e,n);if(!dMe(r))continue;let{redacted:i,patterns:a,lineCount:o}=aV(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return ye(e,t).split(xe).join(`/`)}async function pMe(e){let t=be(e.contentDir),n=be(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??Yje,a=r.fetchAgentEffects??Xje,o=r.fetchWatcherRecent??Zje,s=r.readShadowHead??$je,c=r.readCheckpointRefs??eMe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.80.0-beta.1`),d=r.readDesktopEnv??G9,f=r.readLanguage??D9,p=r.readRuntime??tMe,h=r.isOtlpPushEnabled??nMe,_=y(N(A(),`ok-bundle-`));try{v(N(_,`telemetry`),{recursive:!0}),v(N(_,`logs`),{recursive:!0}),v(N(_,`state`),{recursive:!0}),X9(Uje(n),N(_,`telemetry`,R9)),X9(Wje(n),N(_,`telemetry`,z9)),X9(Gje(n),N(_,`logs`,B9)),X9(Kje(n),N(_,`logs`,V9));for(let t of e.userLogFiles??[])X9(t,N(_,`logs`,me(t)));for(let t of e.userStateFiles??[])X9(t,N(_,OR,me(t)));let y=0;for(let t of e.diagnosticReports?.files??[])X9(t,N(_,`diagnostic-reports`,me(t)))&&(y+=1);let b=N(n,`.ok`,`local`),x=N(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){X9(x,N(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(N(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(N(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=Qje(n);e!==null&&re(N(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(N(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(N(_,`state`,`checkpoint-refs.txt`),D),X9(qje(n),N(_,`state`,H9)),X9(Jje(n),N(_,`state`,U9)),X9(N(b,`last-spawn-error.log`),N(_,`state`,`last-spawn-error.log`)),X9(N(b,Zc),N(_,`state`,Zc)),X9(N(b,Qc),N(_,`state`,Qc)),X9(N(b,Xc),N(_,`state`,Xc));let ee=p(),ne=d(),ie=f(),ae={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(N(_,`state`,`runtime.json`),`${JSON.stringify(ae,null,2)}\n`);let oe=C===`running`?`running
 `:`not-running (${w})\n`;re(N(_,`state`,`server-status.txt`),oe);let se=e.diagnosticReports===void 0?`not-collected (no collection attempted)`:x7(e.diagnosticReports,y);if(re(N(_,`state`,`diagnostic-reports-status.txt`),`${se}\n`),e.processDir&&g(e.processDir)){let t=N(_,`process`);v(t,{recursive:!0}),m(e.processDir,t,{recursive:!0})}let k=e.redact===!0;k&&Hje({stagingDir:_,contentDir:t}),e.note&&re(N(_,`note.txt`),e.note);let ce=null;e.scrubSecrets===!0&&(ce=fMe(_));for(let t of e.extraFiles??[]){let e=t.zipName??me(t.sourcePath);if(!X9(t.sourcePath,N(_,`extra`,e))){r.logger?.warn({sourcePath:t.sourcePath},`extra file missing; omitted from bundle`);continue}let n=w7(t,`extra/${e}`);n!==null&&(ce??={redactions:[],redactedLineCount:0},ce.redactions.push(n),ce.redactedLineCount+=n.lineCount)}let le=iMe(n),ue=Z9(_),A=[],j=0,de=0;for(let e of ue){let t=$9(_,e),n=te(e).size,r=uMe(t)?oMe(e):0;A.push({path:t,bytes:n,lines:r}),j+=n,(t.startsWith(`telemetry/`)||t.startsWith(`logs/`))&&(de+=cMe(e))}let fe={applied:k};ce!==null&&(fe.secretScrub=ce);let pe={schemaVersion:2,createdAt:l().toISOString(),ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie},contentDir:{pathSha256:aMe(t),absolutePath:k?`<CONTENT_DIR>`:t},telemetry:{localSink:le,otlpPushEnabled:h()},redaction:fe,serverStatus:C,files:A};re(N(_,`manifest.json`),`${JSON.stringify(pe,null,2)}\n`);let M=ue.some(e=>{try{return S(e,`utf-8`).includes(t)}catch{return!1}}),he={stagedDiagnosticReports:y,totalBytes:j,fileCount:A.length,docNameCount:de,contentDirVisible:M,redacted:k},ge=!1;return{stagingDir:_,manifest:pe,summary:he,cleanup:()=>{ge||(ge=!0,O(_,{recursive:!0,force:!0}))}}}catch(e){throw O(_,{recursive:!0,force:!0}),e}}async function mMe(e){let{collected:t,outputPath:n}=e,r=M(n);if(!g(r))throw Error(`ok diagnose bundle: parent directory does not exist: ${r}. Create it or pass --out with an existing parent.`);let i=new pwe.ZipFile,a=Z9(t.stagingDir);for(let e of a){let n=$9(t.stagingDir,e);i.addFile(e,n)}i.end();let o=h(n);return i.outputStream.pipe(o),await new Promise((e,t)=>{o.on(`close`,e),o.on(`error`,t),i.outputStream.on(`error`,t)}),n}function hMe(e,t){let n=N(e,`.ok`,`config.yml`);if(g(n))try{let t=(0,hs.parse)(S(n,`utf-8`)),r=W8(t)?t.content:void 0,i=W8(r)?r.dir:void 0;if(typeof i==`string`&&i.length>0)return be(e,i)}catch(e){t?.warn({configPath:n,err:e},`bug-report: failed to read .ok/config.yml; falling back to project root as content dir`)}return be(e)}async function gMe(e,t,n,r,i){let a=T7(t,e.logger),o=await pMe({contentDir:hMe(t,e.logger),projectDir:t,redact:e.redact,scrubSecrets:e.redact,note:e.note,extraFiles:e.extraFiles,userLogFiles:[...DAe(a,e.userLogsDir??N(k(),`.ok`,`logs`)),...D7(e.cachesDir??N(k(),`Library`,`Caches`))],userStateFiles:O7(e.bugReportsDir??C7()),diagnosticReports:i,deps:{readDesktopEnv:n,readLanguage:r,logger:e.logger}});try{v(M(e.outputPath),{recursive:!0}),await mMe({collected:o,outputPath:e.outputPath});let t=o.manifest.redaction.secretScrub;return{zipPath:e.outputPath,summary:{level:`full`,systemWide:!1,projectSlug:a,files:o.manifest.files.map(e=>e.path),redactions:t?.redactions??[],redactedLineCount:t?.redactedLineCount??0,generatedAt:o.manifest.createdAt}}}finally{o.cleanup()}}async function _Me(e){let{projectDir:t}=e,n=e.readDesktopEnv??G9,r=e.readLanguage??D9,i=()=>SAe(e.diagnosticReportsDir??N(k(),`Library`,`Logs`,`DiagnosticReports`),new Date);if(e.level===`full`&&t!==void 0)return gMe(e,t,n,r,i());let{zipPath:a,summary:o}=await MAe({projectDir:t,redact:e.redact,revealDocNames:e.level===`full`,outputPath:e.outputPath,userLogsDir:e.userLogsDir,shipItLogFiles:D7(e.cachesDir??N(k(),`Library`,`Caches`)),bugReportLedgerFiles:O7(e.bugReportsDir??C7()),diagnosticReports:e.level===`full`?i():void 0,logger:e.logger,note:e.note,extraFiles:e.extraFiles,desktop:n(),language:r()});return{zipPath:a,summary:{level:e.level,systemWide:t===void 0,projectSlug:o.projectSlug,files:o.files,redactions:o.redactions,redactedLineCount:o.redactedLineCount,generatedAt:o.generatedAt}}}export{Z8 as ALL_EDITOR_IDS,Q8 as EDITOR_LABELS,O5 as EDITOR_TARGETS,HOe as HOSTS_WITH_USER_SKILL_DIR,cAe as LAUNCH_CONFIG_NAME,xje as PATH_SHIM_BEGIN,Cje as PATH_SHIM_BLOCK_RE,Sje as PATH_SHIM_END,F5 as ProjectPathSafetyError,Bke as addOkPathsToGitExclude,I5 as assertProjectPathSafe,u5 as buildManagedServerEntry,dje as buildMcpConfigDeclineEvent,fje as buildMcpConfigMigrateEvent,v7 as classifyExistingMcpEntry,_Me as collectReportBundle,Oje as createCliProbeResolver,Bl as createTokenStore,wAe as defaultBugReportZipPath,We as detectGh,qe as detectGhAccounts,fAe as detectInstalledEditors,y5 as droppedManagedKeys,lke as editorConfigPathDisplay,cke as editorEntryLocator,eje as ensurePiBridge,X5 as formatTrackedRemediation,Uke as getExcludedOkPaths,J5 as getInstalledSkillProjectionPaths,VOe as getNativeTomlMcpEditor,q5 as getOkArtifactPaths,c5 as isEntryUpToDate,d5 as isOwnManagedEntry,vje as loadConfig,Hl as makeLazyProbeTokenStore,C7 as okBugReportsDir,y9 as parseGitHubBlobUrl,yje as parseGitHubShareUrl,b9 as parseGitHubTreeUrl,v9 as parseGitUrl,wje as pathInstallMarkerPath,wke as previewContent,pAe as probeOwnManagedEditorMcpEntry,QAe as probePiBridgeState,Y5 as probeTrackedOkPaths,g7 as readExistingMcpEntry,Hke as readSharingMode,aV as redactContent,Vke as removeOkPathsFromGitExclude,sje as removeOwnMcpEntry,Ike as removeProjectSkill,Aje as removeUserGlobalSkillBundle,Ije as removeUserSkill,Ake as resolveProjectRoot,hje as runStop,m9 as truncatePriorEntry,T9 as userGlobalSkillBundleTargets,Fje as userSkillPresentAnywhere,bje as validateLocalFolderForShare,h7 as writeEditorMcpConfig,Nje as writeProjectAiIntegrations,H5 as writeProjectSkill,dAe as writeUserMcpConfigs,Pje as writeUserSkill};
 //# sourceMappingURL=index.mjs.map