npm - @inkeep/open-knowledge - Versions diffs - 0.79.6-beta.0 → 0.79.6 - Mend

@inkeep/open-knowledge 0.79.6-beta.0 → 0.79.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (149) hide show

package/dist/cli.mjs CHANGED Viewed

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$n as n,$u as r,Al as i,Bo as a,Cs as o,Ed as s,Eo as c,Fc as l,Fo as u,Gl as d,Ia as f,Jd as p,Mc as m,Oo as h,Pa as g,Qd as _,Rd as v,Rs as y,Sd as b,Ts as x,Uu as S,Wd as ee,Wl as C,Wo as te,Yc as ne,_u as re,ad as w,br as ie,dd as ae,ed as oe,el as se,es as ce,et as le,fc as ue,fd as de,fl as T,hl as fe,ia as pe,id as me,if as he,it as ge,ja as _e,la as ve,md as ye,nc as be,no as xe,nu as Se,oc as Ce,od as E,ol as we,os as Te,pd as Ee,rf as De,ro as Oe,rt as ke,to as Ae,vd as D,wl as je,xc as Me,zd as Ne}from"./md-manager-BGnqyqi1-6BkNojVX.mjs";import{Bo as Pe,Ci as Fe,Cn as Ie,Co as Le,Do as Re,Eo as ze,Fo as Be,Gi as Ve,Gn as He,H as Ue,Hi as We,Ii as Ge,Io as Ke,It as qe,Jo as Je,Ki as Ye,Kn as Xe,Ko as Ze,L as Qe,Li as $e,Lo as et,Lr as tt,Ma as nt,O as rt,Oa as it,Oi as at,Oo as ot,Or as st,Pt as ct,R as lt,Ri as ut,Ro as dt,Si as ft,St as pt,T as mt,Ti as ht,To as gt,Tt as _t,Uo as vt,Vn as yt,Vo as bt,Vr as xt,Wn as St,Wt as Ct,Xo as wt,Xr as Tt,Y as Et,Yo as Dt,Yr as Ot,_n as kt,_o as At,bt as jt,ca as Mt,ci as Nt,ct as Pt,d as Ft,da as It,dn as Lt,dr as Rt,en as zt,ft as Bt,ga as Vt,gn as Ht,gt as Ut,hn as Wt,ir as Gt,jn as Kt,ka as qt,ki as Jt,kr as Yt,la as Xt,m as Zt,mo as O,na as Qt,oo as $t,pt as en,qi as tn,qo as nn,ra as rn,rn as an,rr as on,sa as sn,si as cn,sr as ln,tr as un,ua as k,ui as dn,un as fn,wi as pn,wo as mn,wr as hn,x as gn,xn as _n,xo as vn,xr as yn,xt as bn,yt as xn,zo as Sn}from"./dist-vJEqztHl.mjs";import{B as Cn,Ct as A,D as wn,E as Tn,F as En,G as Dn,H as On,I as kn,J as An,K as jn,M as Mn,O as Nn,St as Pn,U as Fn,W as In,X as Ln,Z as Rn,_t as zn,bt as Bn,ft as Vn,gt as Hn,ht as Un,j as Wn,mt as Gn,pt as Kn,q as qn,u as Jn,vt as Yn,xt as Xn,yt as Zn}from"./init-iVr1XGUM.mjs";import{_ as Qn,b as $n,d as er,f as tr,g as nr,h as rr,m as ir,o as ar,u as or,x as sr,y as cr}from"./registry-probes-8q1p1y8f.mjs";import{C as lr,E as ur,S as dr,T as fr,_ as pr,a as mr,b as hr,c as gr,d as _r,f as vr,h as yr,i as br,l as xr,m as Sr,n as Cr,o as wr,p as Tr,r as Er,s as Dr,t as Or,u as kr,v as Ar,w as jr,x as Mr,y as Nr}from"./src-s7tPX5nB.mjs";import{c as Pr,i as j,n as M,o as N,r as P,s as F,t as I}from"./colors-r_owlCuY.mjs";import{n as Fr,r as Ir,t as Lr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Rr,S as zr,y as Br}from"./start-36sJ0GyQ.mjs";import{n as Vr,t as Hr}from"./constants-lIktLBG-.mjs";import{n as Ur,t as Wr}from"./loader-DHV2EStN.mjs";import{t as Gr}from"./removal-file-path-DGn6zVse.mjs";import{t as Kr}from"./launch-json-removal-DkyR7wIA.mjs";import{execFile as qr,execFileSync as Jr,execSync as Yr,spawn as Xr,spawnSync as Zr}from"node:child_process";import{basename as Qr,dirname as L,isAbsolute as $r,join as R,posix as ei,relative as z,resolve as B,sep as ti}from"node:path";import ni from"node:process";import{fileURLToPath as ri}from"node:url";import{accessSync as ii,appendFileSync as ai,closeSync as oi,constants as si,existsSync as V,lstatSync as ci,mkdirSync as H,mkdtempSync as li,readFileSync as U,readdirSync as ui,readlinkSync as di,realpathSync as fi,renameSync as pi,rmSync as mi,statSync as W,unlinkSync as G,writeFileSync as hi}from"node:fs";import{homedir as K,platform as gi,tmpdir as _i}from"node:os";import{realpath as vi,rm as yi}from"node:fs/promises";import{randomUUID as bi}from"node:crypto";import{promisify as xi}from"node:util";import{setTimeout as Si}from"node:timers/promises";import{createInterface as Ci}from"node:readline/promises";const wi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Ti;Ti||={};function Ei(e){return s(oe,e)}async function Di(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=_n({projectDir:t,contentDir:n}),l=new Set,u=e=>{l.has(e)||(l.add(e),o.push(e))},d=Lt(t,r,u),f=Ae(d,{mode:`lint`}),p=[],m=e=>{p.push(e)},h=new Map,g=e=>{let t=L(e),r=h.get(t);if(r)return r;let i=It(n,e,u),a=fn(d,i);return h.set(t,a),a},_=[],v=Oi(i,n);v.kind===`file`?_.push(z(n,v.path)):y(v.path);function y(e){let t;try{t=ui(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${z(n,e)||`.`}: ${Ai(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=R(e,r.name),i=z(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;y(t)}else if(r.isFile()){if(!ki(r.name)||s.isExcluded(i))continue;_.push(i)}}}_.sort();let b=[],x=0,S=0,ee=0;for(let e of _){let t=R(n,e),r;try{r=U(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Ai(t)}`);continue}let i=g(e),s=!1;if(a&&i.enabled){let n=c(r,i,e,m);if(n!==r){let i=dt(t);try{hi(i,n,`utf-8`),pi(i,t),r=n,s=!0,ee++}catch(t){try{G(i)}catch{}o.push(`could not write fix to ${e}: ${Ai(t)}`)}}}let l=await Te(r,i,e,m);for(let e of l)e.severity===`error`?x++:S++;b.push({file:e,diagnostics:l,fixed:s})}return o.push(...be(p)),{contentDir:n,files:b,warnings:o,fileCount:_.length,errorCount:x,warningCount:S,fixedCount:ee,ran:f}}function Oi(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=$r(e)?e:B(t,e);try{if(W(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function ki(e){let t=e.toLowerCase();return n.some(e=>t.endsWith(e))}function Ai(e){return e instanceof Error?e.message:String(e)}function ji(e){return new A(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=rn(r,i),o=t===void 0?void 0:Mi(t,jr()),s=r.contentRules,c=await Di({projectDir:i,contentDir:a,baseConfig:s?Ce(s):le,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Fi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Ni(c))&&(process.exitCode=1)})}function Mi(e,t){return B(t,e)}function Ni(e){return e.errorCount>0||e.warningCount>0}function Pi(e){let t=[I(e.file)+(e.fixed?M(` (fixed)`):``)];for(let n of e.diagnostics){let e=M(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?P(`error  `):F(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${M(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Fi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Pi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(N(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${P(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(M(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...ue(e.ran).map(e=>M(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(F(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$n as n,$u as r,Al as i,Bo as a,Cs as o,Ed as s,Eo as c,Fc as l,Fo as u,Gl as d,Ia as f,Jd as p,Mc as m,Oo as h,Pa as g,Qd as _,Rd as v,Rs as y,Sd as b,Ts as x,Uu as S,Wd as ee,Wl as C,Wo as te,Yc as ne,_u as re,ad as w,br as ie,dd as ae,ed as oe,el as se,es as ce,et as le,fc as ue,fd as de,fl as T,hl as fe,ia as pe,id as me,if as he,it as ge,ja as _e,la as ve,md as ye,nc as be,no as xe,nu as Se,oc as Ce,od as E,ol as we,os as Te,pd as Ee,rf as De,ro as Oe,rt as ke,to as Ae,vd as D,wl as je,xc as Me,zd as Ne}from"./md-manager-BGnqyqi1-6BkNojVX.mjs";import{Bo as Pe,Ci as Fe,Cn as Ie,Co as Le,Do as Re,Eo as ze,Fo as Be,Gi as Ve,Gn as He,H as Ue,Hi as We,Ii as Ge,Io as Ke,It as qe,Jo as Je,Ki as Ye,Kn as Xe,Ko as Ze,L as Qe,Li as $e,Lo as et,Lr as tt,Ma as nt,O as rt,Oa as it,Oi as at,Oo as ot,Or as st,Pt as ct,R as lt,Ri as ut,Ro as dt,Si as ft,St as pt,T as mt,Ti as ht,To as gt,Tt as _t,Uo as vt,Vn as yt,Vo as bt,Vr as xt,Wn as St,Wt as Ct,Xo as wt,Xr as Tt,Y as Et,Yo as Dt,Yr as Ot,_n as kt,_o as At,bt as jt,ca as Mt,ci as Nt,ct as Pt,d as Ft,da as It,dn as Lt,dr as Rt,en as zt,ft as Bt,ga as Vt,gn as Ht,gt as Ut,hn as Wt,ir as Gt,jn as Kt,ka as qt,ki as Jt,kr as Yt,la as Xt,m as Zt,mo as O,na as Qt,oo as $t,pt as en,qi as tn,qo as nn,ra as rn,rn as an,rr as on,sa as sn,si as cn,sr as ln,tr as un,ua as k,ui as dn,un as fn,wi as pn,wo as mn,wr as hn,x as gn,xn as _n,xo as vn,xr as yn,xt as bn,yt as xn,zo as Sn}from"./dist-Cyu0_4Hk.mjs";import{B as Cn,Ct as A,D as wn,E as Tn,F as En,G as Dn,H as On,I as kn,J as An,K as jn,M as Mn,O as Nn,St as Pn,U as Fn,W as In,X as Ln,Z as Rn,_t as zn,bt as Bn,ft as Vn,gt as Hn,ht as Un,j as Wn,mt as Gn,pt as Kn,q as qn,u as Jn,vt as Yn,xt as Xn,yt as Zn}from"./init-Dz-SuYPo.mjs";import{_ as Qn,b as $n,d as er,f as tr,g as nr,h as rr,m as ir,o as ar,u as or,x as sr,y as cr}from"./registry-probes-AMDeRKc3.mjs";import{C as lr,E as ur,S as dr,T as fr,_ as pr,a as mr,b as hr,c as gr,d as _r,f as vr,h as yr,i as br,l as xr,m as Sr,n as Cr,o as wr,p as Tr,r as Er,s as Dr,t as Or,u as kr,v as Ar,w as jr,x as Mr,y as Nr}from"./src-BuHN7jEL.mjs";import{c as Pr,i as j,n as M,o as N,r as P,s as F,t as I}from"./colors-r_owlCuY.mjs";import{n as Fr,r as Ir,t as Lr}from"./dist-bundle-T0gq9zHH.mjs";import{E as Rr,S as zr,y as Br}from"./start-DrBWagMS.mjs";import{n as Vr,t as Hr}from"./constants-DluBjYIw.mjs";import{n as Ur,t as Wr}from"./loader-wYBD49Jq.mjs";import{t as Gr}from"./removal-file-path-BzKPMogn.mjs";import{t as Kr}from"./launch-json-removal-D6mWmYTa.mjs";import{execFile as qr,execFileSync as Jr,execSync as Yr,spawn as Xr,spawnSync as Zr}from"node:child_process";import{basename as Qr,dirname as L,isAbsolute as $r,join as R,posix as ei,relative as z,resolve as B,sep as ti}from"node:path";import ni from"node:process";import{fileURLToPath as ri}from"node:url";import{accessSync as ii,appendFileSync as ai,closeSync as oi,constants as si,existsSync as V,lstatSync as ci,mkdirSync as H,mkdtempSync as li,readFileSync as U,readdirSync as ui,readlinkSync as di,realpathSync as fi,renameSync as pi,rmSync as mi,statSync as W,unlinkSync as G,writeFileSync as hi}from"node:fs";import{homedir as K,platform as gi,tmpdir as _i}from"node:os";import{realpath as vi,rm as yi}from"node:fs/promises";import{randomUUID as bi}from"node:crypto";import{promisify as xi}from"node:util";import{setTimeout as Si}from"node:timers/promises";import{createInterface as Ci}from"node:readline/promises";const wi={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var Ti;Ti||={};function Ei(e){return s(oe,e)}async function Di(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=[],s=_n({projectDir:t,contentDir:n}),l=new Set,u=e=>{l.has(e)||(l.add(e),o.push(e))},d=Lt(t,r,u),f=Ae(d,{mode:`lint`}),p=[],m=e=>{p.push(e)},h=new Map,g=e=>{let t=L(e),r=h.get(t);if(r)return r;let i=It(n,e,u),a=fn(d,i);return h.set(t,a),a},_=[],v=Oi(i,n);v.kind===`file`?_.push(z(n,v.path)):y(v.path);function y(e){let t;try{t=ui(e,{withFileTypes:!0})}catch(t){o.push(`could not read directory ${z(n,e)||`.`}: ${Ai(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=R(e,r.name),i=z(n,t);if(r.isDirectory()){if(s.isDirExcluded(i))continue;y(t)}else if(r.isFile()){if(!ki(r.name)||s.isExcluded(i))continue;_.push(i)}}}_.sort();let b=[],x=0,S=0,ee=0;for(let e of _){let t=R(n,e),r;try{r=U(t,`utf-8`)}catch(t){o.push(`could not read ${e}: ${Ai(t)}`);continue}let i=g(e),s=!1;if(a&&i.enabled){let n=c(r,i,e,m);if(n!==r){let i=dt(t);try{hi(i,n,`utf-8`),pi(i,t),r=n,s=!0,ee++}catch(t){try{G(i)}catch{}o.push(`could not write fix to ${e}: ${Ai(t)}`)}}}let l=await Te(r,i,e,m);for(let e of l)e.severity===`error`?x++:S++;b.push({file:e,diagnostics:l,fixed:s})}return o.push(...be(p)),{contentDir:n,files:b,warnings:o,fileCount:_.length,errorCount:x,warningCount:S,fixedCount:ee,ran:f}}function Oi(e,t){if(e===void 0||e===``)return{kind:`dir`,path:t};let n=$r(e)?e:B(t,e);try{if(W(n).isFile())return{kind:`file`,path:n}}catch{}return{kind:`dir`,path:n}}function ki(e){let t=e.toLowerCase();return n.some(e=>t.endsWith(e))}function Ai(e){return e instanceof Error?e.message:String(e)}function ji(e){return new A(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=rn(r,i),o=t===void 0?void 0:Mi(t,jr()),s=r.contentRules,c=await Di({projectDir:i,contentDir:a,baseConfig:s?Ce(s):le,targetPath:o,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(c,null,2)}\n`):process.stdout.write(`${Fi(c)}\n`),(n.errorsOnly===!0?c.errorCount>0:Ni(c))&&(process.exitCode=1)})}function Mi(e,t){return B(t,e)}function Ni(e){return e.errorCount>0||e.warningCount>0}function Pi(e){let t=[I(e.file)+(e.fixed?M(` (fixed)`):``)];for(let n of e.diagnostics){let e=M(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?P(`error  `):F(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${M(`${n.source}/${n.code}`)}`)}return t.push(``),t}function Fi(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...Pi(n));let n=e.errorCount+e.warningCount;if(n===0)t.push(N(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${P(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}if(e.fixedCount>0&&t.push(M(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`)),t.push(...ue(e.ran).map(e=>M(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(F(`! ${n}`))}return t.join(`
 `)}const Ii={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)};function Li(e){return new A(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await Ri(t,n,e(),process.cwd(),jr());r!==0&&(process.exitCode=r)})}async function Ri(e,t,n,r,i,a=Ii){let o=rn(n,r),s;if(e!==void 0){let t=zi(e,i,o);if(t===null)return a.err(`Path is outside the content directory (${o}): ${e}`),1;s=t===``?void 0:t}let c=$e(k(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:f({kind:`cli`,runtimeVersion:Pt})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>({}));return a.err(`Audit failed: ${e.title??e.error??e.message??`server responded with ${d.status}`}`),1}let p=ve.safeParse(await d.json().catch(()=>null));if(!p.success){let e=p.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let m=p.data;if(t.json===!0)a.out(JSON.stringify(m,null,2));else{let e=m.brokenLinkSuppression?Gt(m.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([Fi(Bi(m)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?m.errorCount>0:m.errorCount+m.warningCount>0)}function zi(e,t,n){let r=z(n,B(t,e));return r===``?``:r.startsWith(`..`)||$r(r)?null:r.split(ti).join(`/`)}function Bi(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Vi(e,t,n,r){let i=Hi(await Ui(e)).host??``,a=e=>e.replace(/[\r\n]/g,``);if(!i)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;let o=process.env.OK_GH_TOKEN,s=process.env.OK_GH_TOKEN_HOST;if(o&&s===i)return r?.log?.debug({host:i,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${a(o)}\n`),0;let c=await n.get(i),l=r?.getDiag?.(),u=c==null?l?.kind??`absent`:`found`;if(r?.log){let e={host:i,outcome:u,backend:n.backend,...l?.error?{keychainError:l.error}:{}};u===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return c==null?1:(t.write(`username=${a(c.login)}\npassword=${a(c.token)}\n`),0)}function Hi(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ui(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Wi(e,t){let n=new A(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Vi(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await on(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await on(n),process.exit(1)}}),n}function Gi(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Ki(e,t,n){let r={baseUrl:Gi(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new Fr(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function qi(e){let t=e.request||Lr,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Ki(t,`POST /login/device/code`,n)}async function Ji(e){let t=await Ki(e.request||Lr,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Yi(e,t.data.expires_in),n.refreshTokenExpiresAt=Yi(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Yi(e,t){return new Date(e+t*1e3).toISOString()}async function Xi(e,t){let n=Zi(e,t.auth);if(n)return n;let{data:r}=await qi({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await $i(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Zi(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Qi(e){await new Promise(t=>setTimeout(t,e*1e3))}async function $i(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Ji({...i,clientType:`oauth-app`}):await Ji({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Qi(r.interval),$i(e,t,n,r);if(a===`slow_down`)return await Qi(r.interval+7),$i(e,t,n,r);throw i}}async function ea(e,t){return Xi(e,{auth:t})}async function ta(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Xi(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var na=`0.0.0-development`;function ra(e){let t=e.request||Lr.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${na} ${Ir()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(ea.bind(null,i),{hook:ta.bind(null,i)})}async function ia(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=ra({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function aa(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function oa(){let e=process.cwd();return un(e)?.rootPath??e}function sa(e){return`~/.ok/global.yml:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function ca(e){return`${P(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${sa(e)}`}function la(e){return fe(e,Jt())?null:ca(je(e))}function ua(e){let t=la(e);t!==null&&(process.stderr.write(t),process.exit(1))}function da(e){return(e===null?`${P(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\n`:`${P(`Error:`)} this project's git remote is ${e}, which is not a GitHub host, so GitHub sign-in does not apply here.\n`)+(e===null?`Pass --host <hostname> to target a GitHub host explicitly.
@@ -10,10 +10,10 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$n as n,$u as
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ~/.ok/auth.yml
 `)}function Co(){return new A(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=pa(e.host);await So({...e,host:t})})}async function wo(e,t,n=Rr){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function To(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function Eo(e,t){let{host:n,json:r}=e,i=t.backend,a=await wo(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(To(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new fo({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(To(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ho(e,n);r?process.stdout.write(`${JSON.stringify(To(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function Do(e){return new A(`status`).description(`Show authentication status`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=fa(t.host);await Eo({...t,host:n},await e())})}function Oo(e){let t=new A(`auth`);t.description(`GitHub authentication management`);let n=e=>Qn(void 0,e);return t.addCommand(ga(n)),t.addCommand(Do(n)),t.addCommand(xo(n)),t.addCommand(Co()),t.addCommand(vo(n)),t.addCommand(Wi(n,e)),t}function ko(e,t=gi(),n=ir){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[L(e)])}catch{}}function Ao(){return new A(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await vr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:yr(),logger:$n()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&ko(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function jo(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:kr(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:kr(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function Mo(e){let t=e.inspect??(()=>_r(e.lockDir,`server`,{isAlive:xt})),n=e.unlink??(e=>G(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=jo(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function No(e){return new A(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),Mo({lockDir:k(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Po(e){return`!${e.map(r).join(` `)} auth git-credential`}function Fo(e){return`credential.helper=${Po(e)}`}function Io(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Po(e)}`]}async function Lo(e,t,n={},r=Rr){let i=[`credential.helper=`,Fo(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function Ro(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const zo=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Bo(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of zo)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Vo(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ho(e,t=process.env){let n=Vo(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Uo(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Wo(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Go=a;async function Ko(e){try{return await e.clone(Wo(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Go(t))return e.onFallback(e.branch),await e.clone(Wo(null)),{fellBack:!0};throw t}}function qo(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function Jo(e,t,n){return e===`https`&&t===`github.com`&&n}function Yo(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Xo(e){return Yo(e,{url:`The clone URL`,operation:`the clone`})}async function Zo(e,t,n={}){let r=xr(e);if(!r)throw Error(`Invalid git URL: ${ns(e)}`);let i=Mt(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=await Lo(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login},n._detectGhFn),o=i.login!==void 0&&a.tier===`A`&&!it(a.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:a,...o===void 0?{}:{declaredMiss:o}}}function Qo(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function $o(e,t,n,r=process.cwd()){let i=xr(e);if(!i)throw Error(`Invalid git URL: ${ns(e)}`);let a=Qo(e,i),o=t.dir?B(r,t.dir):B(r,i.name);if(V(o)&&ui(o).length>0)throw Error(`Target directory is not empty: ${o}`);qe();let s=cr(),c=i.protocol===`https`&&i.hostname===`github.com`&&await Ro(i.owner,i.name),l=Jo(i.protocol,i.hostname,c)?{auth:{tier:`none`,gitConfig:[]}}:await Zo(a,s,{selfCliArgs:Uo(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),u=l.auth;if(t.onAuthResolved?.({tier:u.tier,login:u.relayToken?.login}),!t.json){let e=Xo(l.declaredMiss);e&&process.stderr.write(e)}let d=Ho(u),f=qo(r,u.gitConfig),p=et(f).env(d),m=-1;p.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Bo(e);n&&n.pct!==m&&(m=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Ko({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>p.clone(a,o,e),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);try{let{runInit:e}=await import(`./init-B9ReK6M2.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{es(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function es(e){let t=Cn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const ts=/^[A-Za-z0-9._/:@-]+$/;function ns(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&dn(i)!==void 0?`${t}${i}@`:t})}function rs(e){return ts.test(e)?e:r(e)}function is(e,t){let n=typeof t==`string`&&t.length>0?` -b ${rs(t)}`:``;return`ok clone ${rs(e)}${n}`}function as(e){let t=_e(e.error);if(t.kind!==`auth`)return null;let n=ns(e.url);if(te(t)){let t=is(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);try{let{runInit:e}=await import(`./init-D6wcfeSx.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{es(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function es(e){let t=Cn(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const ts=/^[A-Za-z0-9._/:@-]+$/;function ns(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&dn(i)!==void 0?`${t}${i}@`:t})}function rs(e){return ts.test(e)?e:r(e)}function is(e,t){let n=typeof t==`string`&&t.length>0?` -b ${rs(t)}`:``;return`ok clone ${rs(e)}${n}`}function as(e){let t=_e(e.error);if(t.kind!==`auth`)return null;let n=ns(e.url);if(te(t)){let t=is(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${is(n,e.branch)}`].join(`
 `)}function os(e){if(!(e.error instanceof Ke)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=ns(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${is(t,e.branch)}`].join(`
-`)}function ss(e){let t=Ye(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=as({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??os({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function cs(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function ls(e){let t=_e(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=xr(e.url);t&&(r=await(e.resolvePrincipal??(e=>cs(cr(),e)))(t.hostname))}}ss({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function us(e){return new A(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await $o(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BCh7NQ9Z.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Qe||e instanceof lt){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await ls({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var ds=S();const fs=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...ne.map(e=>e.path)];function ps(e){return bt({absPath:vt(`project-local`,e),sideline:!1}).diagnostics}function ms(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Ur;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ps)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(T(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function hs(e){let t=U(e,`utf-8`),n=(0,ds.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of fs)n.hasIn(e)&&r.push(e.join(`.`));return r}function gs(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function _s(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=gs(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function vs(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function ys(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ze,s=vs(r).map(t=>({scope:t,absPath:vt(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!V(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=hs(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:_s(fs.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:T(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const bs=`project | project-local | user | all`,xs=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Ss(e){return e!==`config`}function Cs(){let e=new A(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{ms({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${bs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!xs.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${bs}`),process.exitCode=2;return}(await ys({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const ws=[`    1. ${I(`Customize`)} (sidebar) → ${I(`Skills`)}`,`    2. Click the ${I(`+`)} button`,`    3. Click ${I(`Create skill`)}`,`    4. Click ${I(`Upload skill`)}`,`    5. Pick ${I(`openknowledge.skill`)} from Downloads`],Ts=j(`  Open the Claude Desktop App, then: ${I(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Es(e){let t=[N(`Built ${e.outputPath}`),M(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(F(`  Handoff failed: ${e.handoffError.message}`)),t.push(Ts),t.join(`
+`)}function ss(e){let t=Ye(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit({type:`error`,message:t});return}let n=as({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??os({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function cs(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function ls(e){let t=_e(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=xr(e.url);t&&(r=await(e.resolvePrincipal??(e=>cs(cr(),e)))(t.hostname))}}ss({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function us(e){return new A(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await $o(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-C7RXRmnq.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Qe||e instanceof lt){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await ls({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var ds=S();const fs=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...ne.map(e=>e.path)];function ps(e){return bt({absPath:vt(`project-local`,e),sideline:!1}).diagnostics}function ms(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Ur;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ps)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(T(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function hs(e){let t=U(e,`utf-8`),n=(0,ds.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of fs)n.hasIn(e)&&r.push(e.join(`.`));return r}function gs(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function _s(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=gs(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function vs(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function ys(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??Ze,s=vs(r).map(t=>({scope:t,absPath:vt(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!V(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=hs(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:_s(fs.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:T(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const bs=`project | project-local | user | all`,xs=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function Ss(e){return e!==`config`}function Cs(){let e=new A(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{ms({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${bs}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!xs.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${bs}`),process.exitCode=2;return}(await ys({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const ws=[`    1. ${I(`Customize`)} (sidebar) → ${I(`Skills`)}`,`    2. Click the ${I(`+`)} button`,`    3. Click ${I(`Create skill`)}`,`    4. Click ${I(`Upload skill`)}`,`    5. Pick ${I(`openknowledge.skill`)} from Downloads`],Ts=j(`  Open the Claude Desktop App, then: ${I(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function Es(e){let t=[N(`Built ${e.outputPath}`),M(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(F(`  Handoff failed: ${e.handoffError.message}`)),t.push(Ts),t.join(`
 `)}function Ds(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[j(`OpenKnowledge skill ${I(`v${t}`)} already delivered to Claude Desktop.`),M(`  Recorded at ${n} in ~/.ok/skill-state.yml`),M(`  Use ${I(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function Os(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[N(`Built ${e.outputPath}`),M(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),j(`  Claude Desktop App opened. Now upload the file manually:`),...ws,M(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function ks(e){return`${P(`Error:`)} ${e.buildError??`unknown build failure`}`}async function As(e={}){let t=await Ct(e);return t.status===`failed`?{...t,message:ks(t),exitCode:1}:t.status===`skip-current`?{...t,message:Ds(t),exitCode:0}:t.status===`installed`?{...t,message:Os(t),exitCode:0}:{...t,message:Es(t),exitCode:0}}function js(){return new A(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await As({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function Ms(e,t){let n=Ci({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}const Ns=/^# >>> open-knowledge cli >>>\n[\s\S]*?^# <<< open-knowledge cli <<<\n?/m;function Ps(e){return R(e,`Library`,`Application Support`,`OpenKnowledge`,`path-install.json`)}const Fs={existsSync:e=>V(e),readFileSync:(e,t)=>U(e,t),lstatSync:e=>ci(e),readlinkSync:e=>di(e)};function Is(e,t=Fs){let n=Ps(e);if(!t.existsSync(n))return null;try{let e=JSON.parse(t.readFileSync(n,`utf8`));return e?.version===1?e:null}catch{return null}}function Ls(e){let t=e.replace(Ns,``);return{text:t,changed:t!==e,emptyAfter:t.trim()===``}}function Rs(e,t,n=Fs){try{return n.lstatSync(e).isSymbolicLink()?n.readlinkSync(e)===t:!1}catch{return!1}}function zs(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Gn(e)} readProcessStart=${t}`}function Bs(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Vn(n,r),t.onNativeFailure?.({kind:e,reason:Kn(n,r)})};try{if(n===`win32`){let n=!1,a=Un(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:zs(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Gn(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Jr,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Vs(e,t={}){let n=t.probe??Kt(),r=t.isAlive??(e=>xt(e,n(e))),i=t.isAlive??Ot,a=_r(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>($n()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(kr(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>nt(n)))(),u=await vi(e).catch(()=>B(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Bs)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ~/.ok/logs. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await Cr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await Si(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Hs(e){return ti===`/`?e:e.split(ti).join(`/`)}function Us(e,n,r=`This project`){let i=[],a=[k(e)],o=R(e,`.ok`);Gr(R(o,`server.lock`)).kind!==`not-present`&&a.push(o);for(let e of a)i.push({kind:`stop-server`,group:r,label:e===o?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let s=new Set;for(let t of An){let a=Ln[t];if(!a.projectConfigPath)continue;let o=a.projectConfigPath(e);s.add(Hs(z(e,o))),i.push({kind:`mcp-entry`,group:r,label:`Remove OK's MCP entry from ${a.label} (${Hs(z(e,o))})`,editorId:t,scope:`project`,cwd:e,home:n,configPath:o})}i.push({kind:`launch-entry`,group:r,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),i.push({kind:`git-exclude`,group:r,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let c=new Set([...In(e),...Fn(e),...t]);for(let t of c){let n=t.replace(/\/$/,``);s.has(n)||n!==`.claude/launch.json`&&i.push({kind:`remove-path`,group:r,label:`Remove ${t}`,path:R(e,n),containWithin:e})}try{i.push({kind:`remove-path`,group:r,label:`Remove the OK shadow repo (.git/ok/)`,path:wt(e)})}catch{}let l=R(e,`.ok`);return i.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===l)-Number(t.kind===`remove-path`&&t.path===l)),i.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:a,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function Ws(e,t){return{scope:`deinit`,ops:Us(e,t)}}function Gs(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(R(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + auth.yml`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (secrets.yml)`}),c.push(...qs(a,t));for(let e of An){let n=Ln[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of gr(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...Us(e,t,`Project: ${Qr(e)}`));return c.push(...Js(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e)),c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills)`:`Remove ~/.ok (keeping ~/.ok/skills)`,path:R(t,`.ok`),preserve:s?void 0:[`skills`]}),{scope:`uninstall`,ops:c}}function Ks(e){return[R(e,`.zshrc`),R(e,`.bash_profile`),R(e,`.config`,`fish`,`conf.d`,`open-knowledge.fish`)]}function qs(e,t){let n=[],r=new Set([...Ks(t),...e?.rcFiles??[]]);for(let e of r)Gr(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Js(e,t,n){let r={home:e,platformName:t,env:n},i=Mr(r),a=hr(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`){let t=Mr({...r,productName:Nr});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Ys(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??nr,r=t.clearEmbeddingsKey??an,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[B(e.lockDir)]:[])),a=Kt(),o=t.scanProcesses??(()=>nt(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Vs(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(B(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Zs(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=B(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(B(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(B(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Xs(e,t=Or){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Zs(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "open-knowledge"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Gr(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Qs(t.reason)}: ${e.rcFile}`};let n;try{n=U(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Qs(Mn(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=Ls(n);return i?a&&!t.symlink?(mi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(Sn(t.path,r,{mode:Nn(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return Rs(e.path,e.target)?(G(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=ar(Ln[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Qs(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Kr(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${R(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Qs(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=qn(e.projectRoot,ec(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${R(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return $s(e)}}function Qs(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Wn(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function $s(e){if(e.requireOurState&&!lr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&kn(e.path,e.containWithin);let t;try{t=ci(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}if(!t)return{op:e,status:`not-present`};if(t.isSymbolicLink())return G(e.path),{op:e,status:`removed`};if(e.preserve&&e.preserve.length>0){let t=new Set(e.preserve),n=!1;for(let r of ui(e.path))t.has(r)||(mi(R(e.path,r),{recursive:!0,force:!0}),n=!0);return{op:e,status:n?`removed`:`not-present`}}return mi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}}function ec(e){let t=new Set([R(e,`.claude`,`launch.json`)]);for(let n of An){let r=Ln[n].projectConfigPath?.(e);r&&t.add(r)}return In(e).filter(n=>{let r=R(e,n);if(!t.has(r))return!0;try{return ci(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function tc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function nc(e){if(e.ops.length===0)return M(`Nothing to remove.`);let t=[];for(let[n,r]of tc(e.ops)){t.length>0&&t.push(``),t.push(I(`${n}:`));for(let e of r)t.push(`  ${F(`-`)} ${e.label}`)}return t.join(`
@@ -45,7 +45,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function Lc(e,t,n,r,i){let a=Ic(e,t,R(r,`cpu.cpuprofile`)),o=!1,s=Xr(process.execPath,[a],O({stdio:`ignore`})),c=setInterval(()=>{let e=Mc(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{mi(R(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Rc(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function zc(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??yt,s=t.inspect??(e=>_r(e,`server`)),c=t.resolveCommand??pn,l=t.resolveUsage??ht,u=t.collectLsofFn??Nc,d=t.getEndpoints??Fc,f=t.profiler??Lc,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?R(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):R(process.cwd(),`ok-diagnose-${n}-${b}`);try{H(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{hi(R(x,e),t),a(`  wrote ${e}`)},ee=c(n),C=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:ee,usage:C,lockInfo:y},null,2)),a(`  sampling lsof`);let te=u(n);if(te&&S(`lsof.txt`,te),!i){let e=te?Pc(te).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,Rc(U(R(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Bc(e){let t=Ci({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Vc(e){let t=li(R(_i(),`ok-bundle-process-`));return await zc({pid:e,output:t}),t}function Hc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Uc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Wc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Gc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Kc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Hc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Wc(t)}`),e(`  Credentials:         ${Gc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Ar(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function qc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Bc,i=t.runProcessDiagnose??Vc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=L(o);if(!V(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=R(e.contentDir,`.ok`,`local`,`diagnostics`);H(n,{recursive:!0}),o=R(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=pr(t.diagnosticReportsDir??R(K(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Tr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Kc(n,u,o,l),e.yes!==!0&&!Uc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Sr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{mi(s,{recursive:!0,force:!0})}catch{}}}function Jc(){let e=new A(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await zc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(jc()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-1m1hFeCr.mjs`),{resolveContentDir:r}=await import(`./dist-FjdiIkRL.mjs`),i=process.cwd(),{config:a}=n(i);await qc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Yc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await va({message:`Enter embeddings provider API key:`})).trim()}function Xc(e){return Ge(e)}async function Zc(e,t){let n=await sn(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Qc(e){try{let t=$e(k(e));if(!t||t.port<=0||!Ot(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ie.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function $c(e,t){if(!e)return`unavailable (search stays lexical)`;let n=g(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function el(){return new A(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Yc();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,Rc(U(R(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Bc(e){let t=Ci({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Vc(e){let t=li(R(_i(),`ok-bundle-process-`));return await zc({pid:e,output:t}),t}function Hc(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Uc(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Wc(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Gc(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Kc(e,t,n,r){let{summary:i,manifest:a}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${i.fileCount}`),e(`  Total size:          ${Hc(i.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${i.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Wc(t)}`),e(`  Credentials:         ${Gc(t,i.stagedDiagnosticReports)}`),e(`  Server status:       ${a.serverStatus}`),e(`  macOS crash reports: ${Ar(r,i.stagedDiagnosticReports)}`),i.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  Output:              ${n}`),e(``)}async function qc(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Bc,i=t.runProcessDiagnose??Vc,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=L(o);if(!V(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=R(e.contentDir,`.ok`,`local`,`diagnostics`);H(n,{recursive:!0}),o=R(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=pr(t.diagnosticReportsDir??R(K(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Tr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,deps:t.collectDeps});try{return u.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Kc(n,u,o,l),e.yes!==!0&&!Uc(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await Sr({collected:u,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(u.cleanup(),s!==void 0)try{mi(s,{recursive:!0,force:!0})}catch{}}}function Jc(){let e=new A(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await zc({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(jc()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-v199po3F.mjs`),{resolveContentDir:r}=await import(`./dist-Wp7q1s6Y.mjs`),i=process.cwd(),{config:a}=n(i);await qc({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Yc(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await va({message:`Enter embeddings provider API key:`})).trim()}function Xc(e){return Ge(e)}async function Zc(e,t){let n=await sn(Ie(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Qc(e){try{let t=$e(k(e));if(!t||t.port<=0||!Ot(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ie.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function $c(e,t){if(!e)return`unavailable (search stays lexical)`;let n=g(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function el(){return new A(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Yc();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=B(e.cwd??process.cwd()),{baseUrl:r}=Xc(n);try{await Ie().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ~/.ok/secrets.yml, 0600, this machine only — never in the project).
   Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
@@ -80,7 +80,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function pf(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function mf(e){return/\s/.test(e)?`<${e}>`:e}function hf(e,t={}){let{header:n,rows:r}=Ld(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(pf).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=pf(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${mf(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function gf(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function _f(e,t){return`# ${e}\n\n${t}\n`}const vf=[`links`,`frontmatter`,`callouts`,`images`,`tables`],yf=/\.mdx?$/i;function bf(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function xf(e,t={}){let n=t.selected??new Set(vf),r=af(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:bf(!1)};let i=bf(r),a=tf(e),o=Kd(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!yf.test(e)||s&&l.has(e))continue;let r;try{r=U(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Id(a,Qr(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:R(L(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Md(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=ff(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=ef(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=hf(e.csvText,{linkForTitle:t=>{let n=Ud(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?z(L(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=U(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=_f(o===null?e.fallbackTitle:gf(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=ef(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function Sf(e){for(let t of e.assets)H(L(t.path),{recursive:!0}),hi(t.path,t.bytes);for(let t of e.changes)H(L(t.path),{recursive:!0}),hi(t.path,t.content,`utf8`);for(let t of e.deletions)try{G(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const Cf={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},wf=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function Tf(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of wf)n.push(`  ${Cf[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function Ef(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Df(e){let t=new Set(vf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${vf.join(`, `)}`);return e})}function Of(e,t){let n=new Set(vf);if(e&&(n=new Set(Df(e))),t)for(let e of Df(t))n.delete(e);return n}function kf(){let e=new A(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=B(e??process.cwd()),r;try{r=Of(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=xf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Sf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?Ef(a,{applied:t.apply??!1}):Tf(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Af(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function jf(e,t={}){let n=Af(e,t.platform??process.platform,t.desktopBundlePath);return rr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Mf(e,t,n=process.platform){let r=Af(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Nf(e=()=>er(or())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Vt({lockDir:k(e)}).baseUrl,classifyName:(e,t)=>{let n=R(e,t);try{return W(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:jf,findAncestorProject:e=>un(L(B(e)))?.rootPath??null,isProjectRoot:e=>un(e)?.distance===0,enclosingProject:e=>un(B(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Pf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Ff(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function If(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Mf(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Lf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=B(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Pf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!Se.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${Se.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return If(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Xe(e,s)}`;return If(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Ff(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return If(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${He(s)}`;return If(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Ff(n)}if(l)return If(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${St(s)}`;return If(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Ff(n)}function Rf(){return new A(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${Se.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Lf(e,t,Nf())})}function zf(e){return new A(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CTOdP1bA.mjs`),r=e(),i=process.cwd(),a=rn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Bf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Vf(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Hf(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Vf((await e.raw([`remote`])).split(`
+`)}function Ef(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function Df(e){let t=new Set(vf);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${vf.join(`, `)}`);return e})}function Of(e,t){let n=new Set(vf);if(e&&(n=new Set(Df(e))),t)for(let e of Df(t))n.delete(e);return n}function kf(){let e=new A(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=B(e??process.cwd()),r;try{r=Of(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=xf(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{Sf(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?Ef(a,{applied:t.apply??!1}):Tf(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Af(e,t,n){return t===`darwin`?n&&e.startsWith(`openknowledge://`)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function jf(e,t={}){let n=Af(e,t.platform??process.platform,t.desktopBundlePath);return rr(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Mf(e,t,n=process.platform){let r=Af(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Nf(e=()=>er(or())){return{detectBundlePath:()=>e().bundlePath??null,resolveBaseUrl:e=>Vt({lockDir:k(e)}).baseUrl,classifyName:(e,t)=>{let n=R(e,t);try{return W(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:jf,findAncestorProject:e=>un(L(B(e)))?.rootPath??null,isProjectRoot:e=>un(e)?.distance===0,enclosingProject:e=>un(B(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Pf(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Ff(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function If(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Mf(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Lf(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=B(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Pf(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!Se.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${Se.join(`, `)}.`),1;let r=n.detectBundlePath();if(r)return If(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Xe(e,s)}`;return If(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Ff(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectBundlePath();if(c){if(l)return If(`openknowledge://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${He(s)}`;return If(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Ff(n)}if(l)return If(`openknowledge://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${St(s)}`;return If(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Ff(n)}function Rf(){return new A(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${Se.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Lf(e,t,Nf())})}function zf(e){return new A(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CmEZgBjI.mjs`),r=e(),i=process.cwd(),a=rn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Bf(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Vf(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Hf(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Vf((await e.raw([`remote`])).split(`
 `).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Uf(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===je(t)?t:null}const Wf=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function Gf(e,t){return Wf.some(n=>Array.from(e.matchAll(n)).some(e=>Uf(e[1])===t))}function Kf(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function qf(e,t,n){let r={git:et({baseDir:e})},i=t===null?null:Uf(t);if(t===null||i===null||xr(t)===null||!fe(i,Jt()))return r;let{auth:a,declaredMiss:o}=await Zo(t,n.tokenStore,{cwd:e,...n.detectGh?{_detectGhFn:n.detectGh}:{}});return a.tier===`none`?r:{git:et(qo(e,Io(Uo(),i))).env(Kf(Ho(a))),signIn:{host:i,tier:a.tier},...o===void 0?{}:{declaredMiss:o}}}function Jf(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`ok auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ok auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Yf(e,t,n){try{return await n(e.git)}catch(n){let r=n instanceof Error?n.message:String(n),i=e.signIn===void 0||!Gf(r,e.signIn.host)?null:Jf(t,e.signIn,_e(n));throw i===null?n:Error(`${r.trimEnd()}\n${i}`,{cause:n})}}async function Xf(e,t,n=process.cwd()){let r=e.op??`sync`,i=k(n),a=$e(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...f({kind:`cli`,runtimeVersion:Pt})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Bf(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=et({baseDir:n}),s={tokenStore:e.tokenStore??cr(),detectGh:e._detectGhFn},c=async t=>{let i=await qf(n,t,s),a=Yo(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Bf(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},l;if(r===`sync`||r===`pull`){Bf(e.json,{type:`step`,step:`pull`});let t=await Hf(o,`pull`);l={url:t,remote:await c(t)};let n=await Yf(l.remote,`pull`,e=>e.pull());Bf(e.json,{type:`pull`,summary:n.summary}),e.json||process.stderr.write(`  pull: ${n.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Bf(e.json,{type:`step`,step:`push`});let t=await Hf(o,`push`);await Yf(l!==void 0&&l.url===t?l.remote:await c(t),`push`,e=>e.push()),Bf(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)}Bf(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Zf(e){return new A(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Xf({json:t.json,op:`sync`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Qf(e){return new A(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Xf({json:t.json,op:`pull`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function $f(e){return new A(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Xf({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const ep={existsSync:e=>V(e),isDirectory:e=>{try{return W(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>ui(e),readFileSync:e=>U(e),writeFileSync:(e,t)=>{hi(e,t)},mkdirSync:(e,t)=>{H(e,t)},rmSync:(e,t)=>{mi(e,t)}},tp={resolveProjectBundledSkillDir:()=>Qt(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>Qt(e,{checkDesktop:!1}),readBundledVersion:()=>ut(),readRecordedVersion:e=>We(e,`cli-hosts`),writeRecordedVersion:(e,t)=>vn(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>Ve(e),readBundleDecision:(e,t)=>at(e,t),writeBundleDecision:(e,t,n)=>At(e,t,n),removeBundleFromDisk:(e,t)=>Dr(e,t)};function np(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function rp(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(L(t),{recursive:!0}),ip(e,t,n)}function ip(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=R(e,r),a=R(t,r);n.isDirectory(i)?ip(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function ap(e,t,n){return n.existsSync(R(e,`.agents`,`skills`,t))||De.some(r=>n.existsSync(R(e,r.skillsRoot,t)))}function op(e,t,n,r,i,a){let o=[],s=R(e,`.agents`,`skills`,t);if(ap(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of De){let i=R(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(R(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(R(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{rp(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of De){let l=R(e,c.hostDir),u=R(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{rp(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function sp(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function cp(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>R(zt(L(e)),Qr(e));return a(t)===a(i)}function lp(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Rn){let s=R(e,n.hostDir,`skills`,`open-knowledge`),c=R(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Ln[n.editorId],u=l?.projectConfigPath?.(e);if(cp(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!sp(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{En(s,e),rp(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function up(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of _t)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=Zt[i.id],o=ap(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!y(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>ap(e,Zt[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===_t.length,m=[];for(let{id:t,sourceDir:i}of u){let a=op(e,Zt[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function dp(e){let t=e.logger??np,n=e.fs??ep,r=e.home??K(),i={...tp,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=lp(e.projectDir,r,i,n,t),o=await up(r,i,n,t),s=wr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=mr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function fp(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function pp(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function mp(){return new A(`repair-skills`).description("Refresh bundled SKILL.md files for installed AI editors (project-local + user-global). Runs automatically during `ok start`; this command forces an explicit sweep.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await dp({projectDir:B(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>hp(t,{yes:e.yes===!0})});process.stdout.write(`${pp(t)}\n`),process.exitCode=fp(t)})}async function hp(e,t){let n=K(),r=e=>`~/${z(n,e)}`,i=t.input??process.stdin,a=[``,I(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),M(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${I(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${I(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,M(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
@@ -92,7 +92,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function Tp(e){return new A(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await wp(t,await e())})}async function Ep(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Dp(e,t){let{host:n,json:r}=e;ua(n);let i=await yo(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await Ep(new fo({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function Op(e){return new A(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Dp(t,await e())})}function kp(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Ap(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function jp(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Mp(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function Np(e,t){return t===void 0?et(qo(e,[])).env(Vo()):et(qo(e,Io(Uo(),t.host))).env(Ho({relayToken:t}))}function Pp(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const Fp={ensureOkScaffold:e=>{hn(e)},gitFactory:Np};async function Ip(e){let t={...Fp,...e.deps},n=B(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Mp(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:kp(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=R(n,`.git`);if(!V(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Ap({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(kp(t)===`name-conflict`){let t=await jp(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:kp(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Pp(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Lp(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Rp(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(ua(n),tt(s)){process.stderr.write(`${new Ue(B(s)).message}\n`),process.exitCode=64;return}let l=await yo(n,t);if(l==null){Lp(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new fo({auth:l,...u?{baseUrl:u}:{}});try{Yr(`git config user.email`,O({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Lp(c,await Ip({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function zp(e){return new A(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Rp(t,await e())})}function Bp(){let e=new A(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>Qn();return e.addCommand(Op(t)),e.addCommand(Tp(t)),e.addCommand(zp(t)),e}function Vp(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Hp(){return new A(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=B(e.project??process.cwd()),n=In(t),r=Cn(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){Up(e.json,t,r.reason);return}let i=jn(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${N(`✓`)} ${I(`Sharing mode is already`)} ${N(`local-only`)}${I(`.`)}\n`),Vp(r.removed);return}process.stderr.write(`${I(`Sharing mode is already`)} ${N(`local-only`)} ${I(`— nothing to do.`)}\n`);return}process.stderr.write(`${N(`✓`)} ${I(`Sharing mode set to`)} ${N(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${I(`.git/info/exclude`)} (per-clone, not committed).\n`),Vp(r.removed)})}function Up(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${F({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Wp(){return new A(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=B(e.project??process.cwd()),n=jn(t),r=In(t),i=qn(t,r);if(i.kind===`no-exclude`){Gp(e.json,t,i.reason);return}let a=jn(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${N(`✓`)} ${j(`Sharing mode is already`)} ${I(`shared`)}${j(`.`)}\n`),Vp(i.removed);return}process.stderr.write(`${j(`Sharing mode is already`)} ${I(`shared`)} ${j(`— nothing to do.`)}\n`);return}process.stderr.write(`${N(`✓`)} ${I(`Sharing mode set to`)} ${N(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${I(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Gp(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${F({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Kp(){return new A(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=B(e.project??process.cwd()),n=jn(t),r=[...On(t)],i=Dn(t,In(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${qp(n)}`),a.push(``),a.push(`Excluded from git via ${I(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${j(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function qp(e){switch(e){case`shared`:return N(`shared`);case`local-only`:return N(`local-only`);case`no-git`:return F(`no-git (not a git repository)`)}}function Jp(){let e=new A(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Wp()),e.addCommand(Hp()),e.addCommand(Kp()),e}const Yp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Xp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Yp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Zp(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Qp(e){return/\.(md|mdx)$/i.test(e)}function $p(e,t){if(Qp(t))return!0;try{return W(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function em(e,t){let n=Xp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Zp(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function tm(e=()=>er(or())){return{prepare:Fe,detectBundlePath:()=>e().bundlePath??null,openTarget:jf,runProjectOpen:(e,t)=>Lf(e,{project:t},Nf()),runBrowserOpen:e=>rm(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function nm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof jt||e instanceof xn||e instanceof bn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Mf(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function rm(e){let{createEphemeralProjectDir:t}=await import(`./dist-FjdiIkRL.mjs`),{loadConfig:n}=await import(`./src-CY9mxmlb.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BCh7NQ9Z.mjs`),{openBrowser:o}=await import(`./open-browser-DLKK4ylU.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await yi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${St(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function qp(e){switch(e){case`shared`:return N(`shared`);case`local-only`:return N(`local-only`);case`no-git`:return F(`no-git (not a git repository)`)}}function Jp(){let e=new A(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Wp()),e.addCommand(Hp()),e.addCommand(Kp()),e}const Yp=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Xp(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Yp.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Zp(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Qp(e){return/\.(md|mdx)$/i.test(e)}function $p(e,t){if(Qp(t))return!0;try{return W(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function em(e,t){let n=Xp(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Zp(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function tm(e=()=>er(or())){return{prepare:Fe,detectBundlePath:()=>e().bundlePath??null,openTarget:jf,runProjectOpen:(e,t)=>Lf(e,{project:t},Nf()),runBrowserOpen:e=>rm(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function nm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof jt||e instanceof xn||e instanceof bn||e instanceof pt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectBundlePath();if(i){let e=`openknowledge://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Mf(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function rm(e){let{createEphemeralProjectDir:t}=await import(`./dist-Wp7q1s6Y.mjs`),{loadConfig:n}=await import(`./src-Cx7Zw3GX.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-C7RXRmnq.mjs`),{openBrowser:o}=await import(`./open-browser-DDm3O1M4.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await yi(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${St(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function im(){let e=new A(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=B(process.cwd()),n=Dt(un(t)?.rootPath??t),r=Be({projectDir:n}),i={...r,skills:r.skills.filter(e=>re(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${M(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${I(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?M(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?M(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${N(e.name)}${t}  ${M(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${I(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${j(e.name)} ${M(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=k(process.cwd()),r=_r(n,`server`);if(r.status!==`alive`){process.stderr.write(`${P(`Error:`)} no running Open Knowledge server for this project. Start it with ${I(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${P(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${P(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${j(`Already imported:`)} ${I(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${N(`Imported`)} ${I(o)}${c?M(` (renamed from ${c} — name was taken)`):``} from ${M(s.source??e)}${s.publisher?M(` · ${s.publisher}`):``}.\n${M(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${M(`! ${e}`)}\n`)}),e}function am(e){return{server:om(`server`,e),ui:e.status===`alive`&&cn(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function om(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function sm(e){return`${cm(e.server)}\n${cm(e.ui)}`}function cm(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function lm(e){let t=e.inspect??(()=>_r(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=am(t());return e.json?n(JSON.stringify(r,null,2)):n(sm(r)),r}function um(e){return new A(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),lm({lockDir:k(process.cwd()),json:t.json===!0})})}function dm(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function fm(e,t){let n=Ci({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function pm(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(M(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await Tn({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:pe.length+1,choices:[...pe.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await fm(t,M(`Anything else we should know? (optional) `)),i=await fm(t,M(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function mm(e){if(!dm(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>pm(e)))()}catch{return`failed`}return u(t)?((e.output??process.stderr).write(`\n${I(`Thank you. We read every response.`)}\n\n`),(await(e.submit??x)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}const hm=[ge.stable,ge.beta];function gm(e,t,n=_m,r=V,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env;if(o===`darwin`)for(let t of hm)for(let n of[`/Applications`,R(e,`Applications`)]){let e=R(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of hm)for(let n of Oe(t)){let i=R(e,`Programs`,n,xe(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of hm){let t=`/opt/${e.productName}`;if(r(R(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function _m(e){try{return Jr(`npm`,e,O({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const vm=`━`.repeat(64);function ym(e,t=process.platform){let n=[F(vm),I(`  One more step — remove the OpenKnowledge app itself`),M(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(M(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${j(`OK Desktop`)} — ${e}`),n.push(`    ${j(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${j(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${j(t.label)}`),n.push(`    ${t.instruction}`);return n.push(F(vm)),n.join(`

package/dist/constants-DluBjYIw.mjs ADDED Viewed

	@@ -0,0 +1 @@
1	+ import"./md-manager-BGnqyqi1-6BkNojVX.mjs";var e=`0.79.6`;const t=`config.yml`,n=e;export{n,t};