npm - @inkeep/open-knowledge - Versions diffs - 0.86.12 → 0.86.13-beta.0 - Mend

@inkeep/open-knowledge 0.86.12 → 0.86.13-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (95) hide show

package/dist/cli.mjs CHANGED Viewed

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$d as t,$l as n,Ac as r,Ao as i,Co as a,Dd as o,Df as s,Ed as c,Ef as l,Hc as u,Ic as d,Id as f,Io as p,Ja as m,Jl as h,Js as g,K as _,Ka as v,Kc as y,Lc as b,Lo as x,M as S,Md as C,Nr as ee,Oa as w,Od as T,P as te,Ql as ne,Ro as re,Sf as ie,Sl as ae,Td as oe,Tf as se,Vd as ce,Xi as le,Xl as ue,Y as de,Yc as fe,Ys as pe,Zl as me,_o as he,ac as ge,af as _e,bd as E,ea as ve,ec as ye,el as be,fl as xe,fo as Se,gc as Ce,lf as we,ll as Te,ls as Ee,lu as De,m as Oe,md as ke,mf as Ae,nf as je,oc as Me,p as Ne,qs as Pe,qu as Fe,r as Ie,uf as Le,vd as Re,vf as ze,xf as Be,xo as Ve,yd as D,yf as O,za as He,zc as Ue}from"./md-manager-BGnqyqi1-C80pMLi7.mjs";import{$o as We,$r as Ge,At as Ke,Bo as qe,Br as Je,Bt as Ye,Ca as Xe,Ci as Ze,Cs as Qe,Dn as $e,Dt as et,Ea as tt,En as nt,Et as rt,F as it,Fi as at,Fr as ot,Gt as st,Hi as ct,Hn as lt,Ho as ut,Ii as dt,Io as ft,Li as pt,Mn as mt,Mo as ht,Mr as gt,O as _t,On as vt,Pn as yt,Qi as bt,Qn as xt,Qo as k,Qt as St,R as Ct,Ri as wt,Ro as Tt,Sa as Et,Sn as Dt,Sr as Ot,T as kt,Ta as A,Tt as At,U as jt,Ua as Mt,Ui as Nt,Uo as Pt,Ut as Ft,Vi as It,Vo as Lt,Vt as Rt,Wa as zt,Wt as Bt,X as Vt,Xi as Ht,Xo as Ut,Yr as Wt,Zi as Gt,Zo as Kt,_a as qt,_t as Jt,aa as Yt,as as Xt,bi as Zt,bn as Qt,ci as $t,cs as en,d as tn,dn as nn,ds as rn,es as an,fr as on,fs as sn,ha as cn,hr as ln,ja as un,jt as dn,ko as j,ks as fn,ls as pn,lt as mn,m as hn,mn as gn,mr as _n,mt as vn,na as yn,nr as bn,ns as xn,oa as Sn,pt as Cn,qa as wn,qr as Tn,rr as En,rs as Dn,sa as On,si as kn,tn as An,tr as jn,ts as Mn,us as Nn,va as Pn,vr as Fn,wa as In,wt as Ln,x as Rn,xi as zn,xn as Bn,xo as Vn,yt as Hn,z as Un,zo as Wn,zr as Gn}from"./dist-mO8anSf2.mjs";import{A as Kn,C as qn,D as Jn,E as Yn,M as Xn,N as Zn,O as Qn,P as $n,T as er,_ as tr,a as nr,b as rr,c as ir,f as ar,g as or,h as sr,i as cr,j as lr,k as ur,m as dr,n as fr,o as pr,p as mr,r as hr,s as gr,t as _r,u as vr,v as yr,w as br,x as xr,y as Sr}from"./src-DINjBDn3.mjs";import{B as Cr,Ct as M,D as wr,E as Tr,F as Er,G as Dr,H as Or,I as kr,J as Ar,K as jr,M as Mr,O as Nr,St as Pr,U as Fr,W as Ir,X as Lr,Z as Rr,_t as zr,bt as Br,ft as Vr,gt as Hr,ht as Ur,j as Wr,mt as Gr,pt as Kr,q as qr,u as Jr,vt as Yr,xt as Xr,yt as Zr}from"./init-2IGWwNzA.mjs";import{C as Qr,T as $r,_ as ei,b as ti,d as ni,f as ri,g as ii,m as ai,o as oi,p as si,u as ci,v as li,w as ui,x as di,y as fi}from"./registry-probes-C43IMprg.mjs";import{c as pi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as mi,r as hi,t as gi}from"./dist-bundle-T0gq9zHH.mjs";import{E as _i,S as vi,y as yi}from"./start-BqkV6Teh.mjs";import{n as bi,t as xi}from"./constants-Bs7sLJ8_.mjs";import{n as Si,t as Ci}from"./loader-DSL3DF59.mjs";import{t as wi}from"./removal-file-path-B0_K1Cgm.mjs";import{t as Ti}from"./launch-json-removal-BIbc-XZ-.mjs";import{execFile as Ei,execFileSync as Di,execSync as Oi,spawn as ki,spawnSync as Ai}from"node:child_process";import{basename as ji,dirname as z,isAbsolute as Mi,join as B,posix as Ni,relative as V,resolve as H,sep as Pi}from"node:path";import Fi from"node:process";import{fileURLToPath as Ii}from"node:url";import{accessSync as Li,appendFileSync as Ri,closeSync as zi,constants as Bi,existsSync as U,lstatSync as Vi,mkdirSync as W,mkdtempSync as Hi,readFileSync as G,readdirSync as Ui,realpathSync as Wi,renameSync as Gi,rmSync as Ki,statSync as K,unlinkSync as qi,writeFileSync as Ji}from"node:fs";import{homedir as Yi,platform as Xi,tmpdir as Zi}from"node:os";import{realpath as Qi,rm as $i}from"node:fs/promises";import{randomUUID as ea}from"node:crypto";import{promisify as ta}from"node:util";import{setTimeout as na}from"node:timers/promises";import{createInterface as ra}from"node:readline/promises";const ia={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var aa;aa||={};function oa(e){return ce(ke,e)}function sa(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function ca(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:a,fix:o=!1}=e,s=e.resolvedScope===void 0?cn(a,n):{ok:!0,scope:e.resolvedScope};if(!s.ok)throw Error(s.title);let c=s.scope,l=[],u=mt({projectDir:t,contentDir:n}),d=new Set,f=e=>{d.has(e)||(d.add(e),l.push(e))},m=Dt(t,r,f),h=he(m,{mode:`lint`}),g=[],_=e=>{g.push(e)},y=new Map,b=e=>{let t=z(e),r=y.get(t);if(r)return r;let i=tt(n,e,f),a=Bn(m,i);return y.set(t,a),a},x=[],S=!1,C=V(n,c.path),ee=C.split(Pi).some(e=>e.startsWith(`.`)&&e!==`..`);c.kind===`file`?x.push(C):(C===``||ee||!u.isDirExcluded(C))&&w(c.path);function w(e){let t;try{t=Ui(e,{withFileTypes:!0})}catch(t){S=!0,l.push(`could not read directory ${V(n,e)||`.`}: ${ua(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(u.isDirExcluded(i))continue;w(t)}else if(r.isFile()){if(!la(r.name)||u.isExcluded(i))continue;x.push(i)}}}x.sort(),x.length===0&&!S&&l.push(v);let T=[],te=0,ne=0,re=0;for(let e of x){let t=B(n,e),r;try{r=G(t,`utf-8`)}catch(t){l.push(`could not read ${e}: ${ua(t)}`);continue}let a=b(e),s=!1;if(o&&a.enabled){let n=Ve(r,a,e,_);if(n!==r){let i=We(t);try{Ji(i,n,`utf-8`),Gi(i,t),r=n,s=!0,re++}catch(t){try{qi(i)}catch{}l.push(`could not write fix to ${e}: ${ua(t)}`)}}}let c=await i(r,a,e,_);for(let e of c)e.severity===`error`?te++:ne++;T.push({file:e,diagnostics:c,fixed:s})}return l.push(...p(g)),{contentDir:n,files:T,warnings:l,fileCount:x.length,errorCount:te,warningCount:ne,fixedCount:re,ran:h}}function la(e){let t=e.toLowerCase();return Me.some(e=>t.endsWith(e))}function ua(e){return e instanceof Error?e.message:String(e)}function da(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Pn(r,i),o=t===void 0?void 0:fa(t,Xn()),s=cn(o,a);if(!s.ok){let e={type:`urn:ok:error:not-found`,title:t===void 0||s.path===a?s.title:St(t),status:404,instance:`urn:uuid:${ea()}`};n.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let c=r.contentRules,l=await ca({projectDir:i,contentDir:a,baseConfig:c?x(c):m,targetPath:o,resolvedScope:s.scope,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${ha(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:pa(l))&&(process.exitCode=1)})}function fa(e,t){return H(t,e)}function pa(e){return e.errorCount>0||e.warningCount>0}function ma(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ha(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ma(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=re(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(a(n)?P(n):L(`! ${n}`))}return t.join(`
-`)}const ga={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)},_a=T({title:C().optional(),error:C().optional(),message:C().optional()});function va(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await ya(t,n,e(),process.cwd(),Xn());r!==0&&(process.exitCode=r)})}async function ya(e,t,n,r,i,a=ga){let o=Pn(n,r),s;if(e!==void 0){let t=ba(e,i,o);if(t===null){if(cn(void 0,o).ok)return a.err(`Path is outside the content directory (${o}): ${e}`),1}else s=t===``?void 0:t}let c=Gt(A(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:fn({kind:`cli`,runtimeVersion:mn})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>null),n=Ee.safeParse(e);if(n.success)t.json===!0?a.out(JSON.stringify(n.data,null,2)):a.err(`Audit failed: ${n.data.title}`);else{let t=_a.safeParse(e),n=t.success?t.data.title??t.data.error??t.data.message:void 0;a.err(`Audit failed: ${n??`server responded with ${d.status}`}`)}return 1}let f=Se.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;if(t.json===!0)a.out(JSON.stringify(p,null,2));else{let e=p.brokenLinkSuppression?ln(p.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([ha(xa(p)),...e===void 0?[]:[e]].join(`
-`))}return+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function ba(e,t,n){let r=V(n,H(t,e));return r===``?``:r.startsWith(`..`)||Mi(r)?null:r.split(Pi).join(`/`)}function xa(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Sa(e,t,n,r){let i=Ca(await wa(e)),a=i.host??``,o=e=>e.replace(/[\r\n]/g,``);if(!a)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;if(i.protocol!==void 0&&i.protocol!==`https`)return r?.log?.warn({host:a,protocol:i.protocol,outcome:`insecure-protocol`,backend:n.backend},`[auth] git-credential get`),1;let s=ue(a,i.protocol),c=process.env.OK_GH_TOKEN,l=process.env.OK_GH_TOKEN_HOST;if(c&&l&&ue(l)===s)return r?.log?.debug({host:a,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${o(c)}\n`),0;let u=await n.get(s)??(s===a?null:await n.get(a)),d=r?.getDiag?.(),f=u==null?d?.kind??`absent`:`found`;if(r?.log){let e={host:a,outcome:f,backend:n.backend,...d?.error?{keychainError:d.error}:{}};f===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return u==null?1:(t.write(`username=${o(u.login)}\npassword=${o(u.token)}\n`),0)}function Ca(e){let t={};for(let n of e.split(`
-`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function wa(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Ta(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Sa(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await _n(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await _n(n),process.exit(1)}}),n}function Ea(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Da(e,t,n){let r={baseUrl:Ea(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new mi(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Oa(e){let t=e.request||gi,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Da(t,`POST /login/device/code`,n)}async function ka(e){let t=await Da(e.request||gi,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Aa(e,t.data.expires_in),n.refreshTokenExpiresAt=Aa(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Aa(e,t){return new Date(e+t*1e3).toISOString()}async function ja(e,t){let n=Ma(e,t.auth);if(n)return n;let{data:r}=await Oa({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Pa(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Ma(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Na(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Pa(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await ka({...i,clientType:`oauth-app`}):await ka({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Na(r.interval),Pa(e,t,n,r);if(a===`slow_down`)return await Na(r.interval+7),Pa(e,t,n,r);throw i}}async function Fa(e,t){return ja(e,{auth:t})}async function Ia(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await ja(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var La=`0.0.0-development`;function Ra(e){let t=e.request||gi.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${La} ${hi()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Fa.bind(null,i),{hook:Ia.bind(null,i)})}async function za(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=Ra({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function Ba(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function Va(){let e=process.cwd();return on(e)?.rootPath??e}function Ha(e){return`${u(`global.yml`)}:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function Ua(e){return`  ok auth token --host ${e} --username <username>`}function Wa(e){return`If ${e} is not a GitHub host, store an access token for git with:\n\n${Ua(e)}\n`}function Ga(e){return`${I(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${Ha(e)}\n`+Wa(e)}function Ka(e){return ne(e,ct())}function qa(e){return Ka(e)?null:Ga(n(e))}function Ja(e){let t=qa(e);t!==null&&(process.stderr.write(t),process.exit(1))}function Ya(e,t){if(e===null)return`${I(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\nPass --host <hostname> to target a GitHub host explicitly.
-`;let r=n(e),i=t?`, or, if ${r} runs GitHub Enterprise Server, declare it in ${Ha(r)}\n`:`.
-`;return`${I(`Error:`)} this project's git remote is ${r}, which is not a GitHub host, so GitHub sign-in does not apply here.\nPass --host <hostname> to target a GitHub host explicitly${i}`+Wa(e)}function Xa(e,t=Va()){if(e!==void 0)return Ka(e)?{kind:`github`,host:e}:{kind:`other`,host:ue(e)};let n=In(t);if(n.kind===`ok`)return{kind:`github`,host:n.host};let r=Nt(t)??n.host;if(r!==null)return{kind:`other`,host:r};process.stderr.write(Ya(null,!1)),process.exit(1)}function Za(e,t=Va()){let n=In(t,e);if(n.kind===`ok`)return n.host;process.stderr.write(n.kind===`rejected-explicit`?Ga(n.host):Ya(Nt(t)??n.host,n.host!==null)),process.exit(1)}function Qa(e,t=Va()){if(e!==void 0)return Ka(e)?e:ue(e);let r=In(t);if(r.kind===`ok`)return r.host;let i=Nt(t)??r.host,a=i===null?`Cannot determine a hostname from this project's git remote.`:`This project's git remote is ${n(i)}, which is not a known GitHub host.`;process.stderr.write(`${I(`Error:`)} ${a}\nRun ok auth signout --host ${i??`<hostname>`} to remove stored local credentials. No provider declaration is required.\n`),process.exit(1)}function $a(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function eo(e,t,n=za){let r=Ba(),{host:i,json:a}=e;a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?$a(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?$a(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function to(e){return new M(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=Za(t.host),r=await e();await eo({...t,host:n},r)})}const no={style:{maskedText:`[input is masked]`}};var ro=Hr((e,t)=>{let{validate:n=()=>!0}=e,r=Br(no,e.theme),[i,a]=Xr(`idle`),[o,s]=Xr(),[c,l]=Xr(``),u=Zr({status:i,theme:r});Yr(async(e,r)=>{if(i===`idle`){if(Pr(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)}});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${zr}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function io(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>io.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function ao(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function oo(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const so=Function.bind,co=so.bind(so);function lo(e,t,n){let r=co(oo,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=co(ao,null).apply(null,i)})}function uo(){let e=Symbol(`Singular`),t={registry:{}},n=io.bind(null,t,e);return lo(n,t,e),n}function fo(){let e={registry:{}},t=io.bind(null,e);return lo(t,e),t}var po={Singular:uo,Collection:fo},mo=`0.0.0-development`;function ho(e){return`Request failed due to following response errors:
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$l as t,Ba as n,Bc as r,Cf as i,Cl as a,Dd as o,Df as s,Ed as c,Ef as l,F as u,Hd as d,Js as f,Ju as p,Lc as m,Ld as h,Lo as g,N as _,Nd as v,Od as y,Of as b,Pr as x,Ql as S,Rc as C,Ro as ee,Sf as w,So as te,Uc as ne,X as re,Xc as ie,Xs as ae,Ya as oe,Yl as se,Ys as ce,Zi as le,Zl as ue,_c as de,bd as T,bf as fe,df as pe,ef as me,eu as he,hd as ge,hf as _e,jc as E,jo as ve,ka as ye,kd as D,m as be,oc as xe,of as Se,p as Ce,pl as we,po as Te,q as Ee,qa as De,qc as Oe,r as ke,rf as Ae,sc as je,ta as Me,tc as Ne,tl as Pe,uf as Fe,ul as Ie,us as Le,uu as Re,vo as ze,wo as Be,xd as O,yd as Ve,yf as He,zo as Ue}from"./md-manager-BGnqyqi1-B6Vk34FK.mjs";import{$i as We,$n as Ge,$o as k,$t as Ke,Ao as A,As as qe,Bo as Je,Br as Ye,Ca as Xe,Cn as Ze,Cr as Qe,Da as $e,Dn as et,Dt as tt,Ea as j,Et as nt,F as rt,Fn as it,Ga as at,Gt as ot,Hi as st,Ho as ct,Ht as lt,Ii as ut,Ir as dt,Ja as ft,Jr as pt,Kt as mt,Li as ht,Lo as gt,Ma as _t,Mt as vt,Nn as yt,No as bt,Nr as xt,O as St,On as Ct,Qi as wt,Qo as Tt,R as Et,Ri as Dt,Si as Ot,Sn as kt,So as At,T as jt,Ta as Mt,Tt as Nt,U as Pt,Ui as Ft,Un as It,Uo as Lt,Vo as Rt,Vr as zt,Vt as Bt,Wa as Vt,Wi as Ht,Wo as Ut,Wt,X as Gt,Xr as Kt,Zi as qt,Zo as Jt,_t as Yt,ca as Xt,ci as Zt,d as Qt,ds as $t,ei as en,es as tn,fn as nn,fs as rn,ga as an,gr as on,hn as sn,hr as cn,ir as ln,is as un,jt as dn,kn as fn,li as pn,ls as mn,lt as hn,m as gn,mt as _n,nn as vn,nr as yn,ns as bn,oa as xn,os as Sn,pr as Cn,ps as wn,pt as Tn,ra as En,rr as Dn,rs as On,sa as kn,ts as An,us as jn,va as Mn,wa as Nn,wi as Pn,ws as Fn,wt as In,x as Ln,xi as Rn,xn as zn,ya as Bn,yr as Vn,yt as Hn,z as Un,zi as Wn,zo as Gn}from"./dist-CerHybyM.mjs";import{A as Kn,C as qn,D as Jn,E as Yn,M as Xn,N as Zn,O as Qn,P as $n,T as er,_ as tr,a as nr,b as rr,c as ir,f as ar,g as or,h as sr,i as cr,j as lr,k as ur,m as dr,n as fr,o as pr,p as mr,r as hr,s as gr,t as _r,u as vr,v as yr,w as br,x as xr,y as Sr}from"./src-TUmzQrPO.mjs";import{B as Cr,Ct as M,D as wr,E as Tr,F as Er,G as Dr,H as Or,I as kr,J as Ar,K as jr,M as Mr,O as Nr,St as Pr,U as Fr,W as Ir,X as Lr,Z as Rr,_t as zr,bt as Br,ft as Vr,gt as Hr,ht as Ur,j as Wr,mt as Gr,pt as Kr,q as qr,u as Jr,vt as Yr,xt as Xr,yt as Zr}from"./init-PHFeZ_1F.mjs";import{C as Qr,T as $r,_ as ei,b as ti,d as ni,f as ri,g as ii,m as ai,o as oi,p as si,u as ci,v as li,w as ui,x as di,y as fi}from"./registry-probes-C7uxu4tM.mjs";import{c as pi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as mi,r as hi,t as gi}from"./dist-bundle-T0gq9zHH.mjs";import{E as _i,S as vi,y as yi}from"./start-DpDSIaR1.mjs";import{n as bi,t as xi}from"./constants-owtVyfa1.mjs";import{n as Si,t as Ci}from"./loader-CyiDGUuQ.mjs";import{t as wi}from"./removal-file-path-DZDrG3zb.mjs";import{t as Ti}from"./launch-json-removal-GsI1u0J-.mjs";import{execFile as Ei,execFileSync as Di,execSync as Oi,spawn as ki,spawnSync as Ai}from"node:child_process";import{basename as ji,dirname as z,isAbsolute as Mi,join as B,posix as Ni,relative as V,resolve as H,sep as Pi}from"node:path";import Fi from"node:process";import{fileURLToPath as Ii}from"node:url";import{accessSync as Li,appendFileSync as Ri,closeSync as zi,constants as Bi,existsSync as U,lstatSync as Vi,mkdirSync as Hi,mkdtempSync as Ui,readFileSync as W,readdirSync as Wi,realpathSync as Gi,renameSync as Ki,rmSync as qi,statSync as G,unlinkSync as Ji,writeFileSync as Yi}from"node:fs";import{homedir as Xi,platform as Zi,tmpdir as Qi}from"node:os";import{realpath as $i,rm as ea}from"node:fs/promises";import{randomUUID as ta}from"node:crypto";import{promisify as na}from"node:util";import{setTimeout as ra}from"node:timers/promises";import{createInterface as ia}from"node:readline/promises";const aa={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var oa;oa||={};function sa(e){return d(ge,e)}function ca(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function la(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=e.resolvedScope===void 0?an(i,n):{ok:!0,scope:e.resolvedScope};if(!o.ok)throw Error(o.title);let s=o.scope,c=[],l=yt({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=Ze(t,r,d),p=ze(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},_=new Map,v=e=>{let t=z(e),r=_.get(t);if(r)return r;let i=$e(n,e,d),a=kt(f,i);return _.set(t,a),a},y=[],b=!1,x=V(n,s.path),S=x.split(Pi).some(e=>e.startsWith(`.`)&&e!==`..`);s.kind===`file`?y.push(x):(x===``||S||!l.isDirExcluded(x))&&C(s.path);function C(e){let t;try{t=Wi(e,{withFileTypes:!0})}catch(t){b=!0,c.push(`could not read directory ${V(n,e)||`.`}: ${da(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(l.isDirExcluded(i))continue;C(t)}else if(r.isFile()){if(!ua(r.name)||l.isExcluded(i))continue;y.push(i)}}}y.sort(),y.length===0&&!b&&c.push(De);let ee=[],w=0,ne=0,re=0;for(let e of y){let t=B(n,e),r;try{r=W(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${da(t)}`);continue}let i=v(e),o=!1;if(a&&i.enabled){let n=te(r,i,e,h);if(n!==r){let i=tn(t);try{Yi(i,n,`utf-8`),Ki(i,t),r=n,o=!0,re++}catch(t){try{Ji(i)}catch{}c.push(`could not write fix to ${e}: ${da(t)}`)}}}let s=await ve(r,i,e,h);for(let e of s)e.severity===`error`?w++:ne++;ee.push({file:e,diagnostics:s,fixed:o})}return c.push(...g(m)),{contentDir:n,files:ee,warnings:c,fileCount:y.length,errorCount:w,warningCount:ne,fixedCount:re,ran:p}}function ua(e){let t=e.toLowerCase();return je.some(e=>t.endsWith(e))}function da(e){return e instanceof Error?e.message:String(e)}function fa(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Bn(r,i),o=t===void 0?void 0:pa(t,Xn()),s=an(o,a);if(!s.ok){let e={type:`urn:ok:error:not-found`,title:t===void 0||s.path===a?s.title:Ke(t),status:404,instance:`urn:uuid:${ta()}`};n.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let c=r.contentRules,l=await la({projectDir:i,contentDir:a,baseConfig:c?ee(c):oe,targetPath:o,resolvedScope:s.scope,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${ga(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:ma(l))&&(process.exitCode=1)})}function pa(e,t){return H(t,e)}function ma(e){return e.errorCount>0||e.warningCount>0}function ha(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ga(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ha(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=Ue(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(Be(n)?P(n):L(`! ${n}`))}return t.join(`
+`)}const _a={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)},va=D({title:v().optional(),error:v().optional(),message:v().optional()});function ya(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await ba(t,n,e(),process.cwd(),Xn());r!==0&&(process.exitCode=r)})}async function ba(e,t,n,r,i,a=_a){let o=Bn(n,r),s;if(e!==void 0){let t=xa(e,i,o);if(t===null){if(an(void 0,o).ok)return a.err(`Path is outside the content directory (${o}): ${e}`),1}else s=t===``?void 0:t}let c=wt(j(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:qe({kind:`cli`,runtimeVersion:hn})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>null),n=Le.safeParse(e);if(n.success)t.json===!0?a.out(JSON.stringify(n.data,null,2)):a.err(`Audit failed: ${n.data.title}`);else{let t=va.safeParse(e),n=t.success?t.data.title??t.data.error??t.data.message:void 0;a.err(`Audit failed: ${n??`server responded with ${d.status}`}`)}return 1}let f=Te.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;if(t.json===!0)a.out(JSON.stringify(p,null,2));else{let e=p.brokenLinkSuppression?on(p.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([ga(Sa(p)),...e===void 0?[]:[e]].join(`
+`))}return+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function xa(e,t,n){let r=V(n,H(t,e));return r===``?``:r.startsWith(`..`)||Mi(r)?null:r.split(Pi).join(`/`)}function Sa(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Ca(e,t,n,r){let i=wa(await Ta(e)),a=i.host??``,o=e=>e.replace(/[\r\n]/g,``);if(!a)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;if(i.protocol!==void 0&&i.protocol!==`https`)return r?.log?.warn({host:a,protocol:i.protocol,outcome:`insecure-protocol`,backend:n.backend},`[auth] git-credential get`),1;let s=ue(a,i.protocol),c=process.env.OK_GH_TOKEN,l=process.env.OK_GH_TOKEN_HOST;if(c&&l&&ue(l)===s)return r?.log?.debug({host:a,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${o(c)}\n`),0;let u=await n.get(s)??(s===a?null:await n.get(a)),d=r?.getDiag?.(),f=u==null?d?.kind??`absent`:`found`;if(r?.log){let e={host:a,outcome:f,backend:n.backend,...d?.error?{keychainError:d.error}:{}};f===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return u==null?1:(t.write(`username=${o(u.login)}\npassword=${o(u.token)}\n`),0)}function wa(e){let t={};for(let n of e.split(`
+`)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ta(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Ea(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Ca(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await cn(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await cn(n),process.exit(1)}}),n}function Da(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Oa(e,t,n){let r={baseUrl:Da(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new mi(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function ka(e){let t=e.request||gi,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Oa(t,`POST /login/device/code`,n)}async function Aa(e){let t=await Oa(e.request||gi,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=ja(e,t.data.expires_in),n.refreshTokenExpiresAt=ja(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function ja(e,t){return new Date(e+t*1e3).toISOString()}async function Ma(e,t){let n=Na(e,t.auth);if(n)return n;let{data:r}=await ka({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Fa(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Na(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Pa(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Fa(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Aa({...i,clientType:`oauth-app`}):await Aa({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Pa(r.interval),Fa(e,t,n,r);if(a===`slow_down`)return await Pa(r.interval+7),Fa(e,t,n,r);throw i}}async function Ia(e,t){return Ma(e,{auth:t})}async function La(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Ma(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var Ra=`0.0.0-development`;function za(e){let t=e.request||gi.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${Ra} ${hi()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Ia.bind(null,i),{hook:La.bind(null,i)})}async function Ba(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=za({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function Va(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function Ha(){let e=process.cwd();return Cn(e)?.rootPath??e}function Ua(e){return`${ne(`global.yml`)}:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function Wa(e){return`  ok auth token --host ${e} --username <username>`}function Ga(e){return`If ${e} is not a GitHub host, store an access token for git with:\n\n${Wa(e)}\n`}function Ka(e){return`${I(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${Ua(e)}\n`+Ga(e)}function qa(e){return t(e,Ft())}function Ja(e){return qa(e)?null:Ka(he(e))}function Ya(e){let t=Ja(e);t!==null&&(process.stderr.write(t),process.exit(1))}function Xa(e,t){if(e===null)return`${I(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\nPass --host <hostname> to target a GitHub host explicitly.
+`;let n=he(e),r=t?`, or, if ${n} runs GitHub Enterprise Server, declare it in ${Ua(n)}\n`:`.
+`;return`${I(`Error:`)} this project's git remote is ${n}, which is not a GitHub host, so GitHub sign-in does not apply here.\nPass --host <hostname> to target a GitHub host explicitly${r}`+Ga(e)}function Za(e,t=Ha()){if(e!==void 0)return qa(e)?{kind:`github`,host:e}:{kind:`other`,host:ue(e)};let n=Mt(t);if(n.kind===`ok`)return{kind:`github`,host:n.host};let r=Ht(t)??n.host;if(r!==null)return{kind:`other`,host:r};process.stderr.write(Xa(null,!1)),process.exit(1)}function Qa(e,t=Ha()){let n=Mt(t,e);if(n.kind===`ok`)return n.host;process.stderr.write(n.kind===`rejected-explicit`?Ka(n.host):Xa(Ht(t)??n.host,n.host!==null)),process.exit(1)}function $a(e,t=Ha()){if(e!==void 0)return qa(e)?e:ue(e);let n=Mt(t);if(n.kind===`ok`)return n.host;let r=Ht(t)??n.host,i=r===null?`Cannot determine a hostname from this project's git remote.`:`This project's git remote is ${he(r)}, which is not a known GitHub host.`;process.stderr.write(`${I(`Error:`)} ${i}\nRun ok auth signout --host ${r??`<hostname>`} to remove stored local credentials. No provider declaration is required.\n`),process.exit(1)}function eo(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}async function to(e,t,n=Ba){let r=Va(),{host:i,json:a}=e;a||process.stderr.write(`Logging in to ${i}\n`);let o=await n({clientId:r,host:i===`github.com`?void 0:i,onVerification:e=>{e.userCode,e.verificationUri,a?eo(!0,{type:`verification`,user_code:e.userCode,verification_uri:e.verificationUri,expires_in:e.expiresIn}):process.stderr.write(`Open: ${e.verificationUri}\nEnter code: ${e.userCode}\n`)}}),s=`unknown`,c,l;try{let e=i===`github.com`?`https://api.github.com`:`https://${i}/api/v3`,t=await fetch(`${e}/user`,{headers:{Authorization:`Bearer ${o.token}`,"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}});if(t.ok){let e=await t.json();s=e.login??s,c=e.name??void 0,l=e.email??void 0}}catch{}await t.set(i,s,o.token,{gitProtocol:`https`,name:c,email:l}),a?eo(!0,{type:`complete`,host:i,login:s}):process.stderr.write(`✓ Logged in as ${s} on ${i}\n`)}function no(e){return new M(`login`).description(`Authenticate with GitHub via Device Flow`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{let n=Qa(t.host),r=await e();await to({...t,host:n},r)})}const ro={style:{maskedText:`[input is masked]`}};var io=Hr((e,t)=>{let{validate:n=()=>!0}=e,r=Br(ro,e.theme),[i,a]=Xr(`idle`),[o,s]=Xr(),[c,l]=Xr(``),u=Zr({status:i,theme:r});Yr(async(e,r)=>{if(i===`idle`){if(Pr(e)){let e=c;a(`loading`);let i=await n(e);i===!0?(l(e),a(`done`),t(e)):(r.write(c),s(i||`You must provide a valid value`),a(`idle`))}else l(r.line),s(void 0)}});let d=r.style.message(e.message,i),f=``,p;e.mask?f=(typeof e.mask==`string`?e.mask:`*`).repeat(c.length):i!==`done`&&(p=`${r.style.help(r.style.maskedText)}${zr}`),i===`done`&&(f=r.style.answer(f));let m=``;return o&&(m=r.style.error(o)),[[u,d,e.mask?f:p].join(` `),m]});function ao(e,t,n,r){if(typeof n!=`function`)throw Error(`method for before hook must be a function`);return r||={},Array.isArray(t)?t.reverse().reduce((t,n)=>ao.bind(null,e,n,t,r),n)():Promise.resolve().then(()=>e.registry[t]?e.registry[t].reduce((e,t)=>t.hook.bind(null,e,r),n)():n(r))}function oo(e,t,n,r){let i=r;e.registry[n]||(e.registry[n]=[]),t===`before`&&(r=(e,t)=>Promise.resolve().then(i.bind(null,t)).then(e.bind(null,t))),t===`after`&&(r=(e,t)=>{let n;return Promise.resolve().then(e.bind(null,t)).then(e=>(n=e,i(n,t))).then(()=>n)}),t===`error`&&(r=(e,t)=>Promise.resolve().then(e.bind(null,t)).catch(e=>i(e,t))),e.registry[n].push({hook:r,orig:i})}function so(e,t,n){if(!e.registry[t])return;let r=e.registry[t].map(e=>e.orig).indexOf(n);r!==-1&&e.registry[t].splice(r,1)}const co=Function.bind,lo=co.bind(co);function uo(e,t,n){let r=lo(so,null).apply(null,n?[t,n]:[t]);e.api={remove:r},e.remove=r,[`before`,`error`,`after`,`wrap`].forEach(r=>{let i=n?[t,r,n]:[t,r];e[r]=e.api[r]=lo(oo,null).apply(null,i)})}function fo(){let e=Symbol(`Singular`),t={registry:{}},n=ao.bind(null,t,e);return uo(n,t,e),n}function po(){let e={registry:{}},t=ao.bind(null,e);return uo(t,e),t}var mo={Singular:fo,Collection:po},ho=`0.0.0-development`;function go(e){return`Request failed due to following response errors:
 `+e.errors.map(e=>` - ${e.message}`).join(`
-`)}var go=class extends Error{constructor(e,t,n){super(ho(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}name=`GraphqlResponseError`;errors;data},_o=[`method`,`baseUrl`,`url`,`headers`,`request`,`query`,`mediaType`,`operationName`],vo=[`query`,`method`,`url`],yo=/\/api\/v3\/?$/;function bo(e,t,n){if(n){if(typeof t==`string`&&`query`in n)return Promise.reject(Error(`[@octokit/graphql] "query" cannot be used as variable name`));for(let e in n)if(vo.includes(e))return Promise.reject(Error(`[@octokit/graphql] "${e}" cannot be used as variable name`))}let r=typeof t==`string`?Object.assign({query:t},n):t,i=Object.keys(r).reduce((e,t)=>_o.includes(t)?(e[t]=r[t],e):(e.variables||={},e.variables[t]=r[t],e),{}),a=r.baseUrl||e.endpoint.DEFAULTS.baseUrl;return yo.test(a)&&(i.url=a.replace(yo,`/api/graphql`)),e(i).then(e=>{if(e.data.errors){let t={};for(let n of Object.keys(e.headers))t[n]=e.headers[n];throw new go(i,t,e.data)}return e.data.data})}function xo(e,t){let n=e.defaults(t);return Object.assign((e,t)=>bo(n,e,t),{defaults:xo.bind(null,n),endpoint:n.endpoint})}xo(gi,{headers:{"user-agent":`octokit-graphql.js/${mo} ${hi()}`},method:`POST`,url:`/graphql`});function So(e){return xo(e,{method:`POST`,url:`/graphql`})}var Co=`(?:[a-zA-Z0-9_-]+)`,wo=`\\.`,To=RegExp(`^${Co}${wo}${Co}${wo}${Co}$`),Eo=To.test.bind(To);async function Do(e){let t=Eo(e),n=e.startsWith(`v1.`)||e.startsWith(`ghs_`),r=e.startsWith(`ghu_`);return{type:`token`,token:e,tokenType:t?`app`:n?`installation`:r?`user-to-server`:`oauth`}}function Oo(e){return e.split(/\./).length===3?`bearer ${e}`:`token ${e}`}async function ko(e,t,n,r){let i=t.endpoint.merge(n,r);return i.headers.authorization=Oo(e),t(i)}var Ao=function(e){if(!e)throw Error(`[@octokit/auth-token] No token passed to createTokenAuth`);if(typeof e!=`string`)throw Error(`[@octokit/auth-token] Token passed to createTokenAuth is not a string`);return e=e.replace(/^(token|bearer) +/i,``),Object.assign(Do.bind(null,e),{hook:ko.bind(null,e)})};const jo=`7.0.6`,Mo=()=>{},No=console.warn.bind(console),Po=console.error.bind(console);function Fo(e={}){return typeof e.debug!=`function`&&(e.debug=Mo),typeof e.info!=`function`&&(e.info=Mo),typeof e.warn!=`function`&&(e.warn=No),typeof e.error!=`function`&&(e.error=Po),e}const Io=`octokit-core.js/${jo} ${hi()}`;var Lo=class{static VERSION=jo;static defaults(e){return class extends this{constructor(...t){let n=t[0]||{};if(typeof e==`function`){super(e(n));return}super(Object.assign({},e,n,n.userAgent&&e.userAgent?{userAgent:`${n.userAgent} ${e.userAgent}`}:null))}}}static plugins=[];static plugin(...e){let t=this.plugins;return class extends this{static plugins=t.concat(e.filter(e=>!t.includes(e)))}}constructor(e={}){let t=new po.Collection,n={baseUrl:gi.endpoint.DEFAULTS.baseUrl,headers:{},request:Object.assign({},e.request,{hook:t.bind(null,`request`)}),mediaType:{previews:[],format:``}};if(n.headers[`user-agent`]=e.userAgent?`${e.userAgent} ${Io}`:Io,e.baseUrl&&(n.baseUrl=e.baseUrl),e.previews&&(n.mediaType.previews=e.previews),e.timeZone&&(n.headers[`time-zone`]=e.timeZone),this.request=gi.defaults(n),this.graphql=So(this.request).defaults(n),this.log=Fo(e.log),this.hook=t,e.authStrategy){let{authStrategy:n,...r}=e,i=n(Object.assign({request:this.request,log:this.log,octokit:this,octokitOptions:r},e.auth));t.wrap(`request`,i.hook),this.auth=i}else if(!e.auth)this.auth=async()=>({type:`unauthenticated`});else{let n=Ao(e.auth);t.wrap(`request`,n.hook),this.auth=n}let r=this.constructor;for(let t=0;t<r.plugins.length;++t)Object.assign(this,r.plugins[t](this,e))}request;graphql;log;hook;auth};function Ro(e){e.hook.wrap(`request`,(t,n)=>{e.log.debug(`request`,n);let r=Date.now(),i=e.request.endpoint.parse(n),a=i.url.replace(n.baseUrl,``);return t(n).then(t=>{let n=t.headers[`x-github-request-id`];return e.log.info(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t}).catch(t=>{let n=t.response?.headers[`x-github-request-id`]||`UNKNOWN`;throw e.log.error(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t})})}Ro.VERSION=`6.0.0`;var zo=`0.0.0-development`;function Bo(e){if(!e.data)return{...e,data:[]};if(!((`total_count`in e.data||`total_commits`in e.data)&&!(`url`in e.data)))return e;let t=e.data.incomplete_results,n=e.data.repository_selection,r=e.data.total_count,i=e.data.total_commits;delete e.data.incomplete_results,delete e.data.repository_selection,delete e.data.total_count,delete e.data.total_commits;let a=Object.keys(e.data)[0];return e.data=e.data[a],t!==void 0&&(e.data.incomplete_results=t),n!==void 0&&(e.data.repository_selection=n),e.data.total_count=r,e.data.total_commits=i,e}function Vo(e,t,n){let r=typeof t==`function`?t.endpoint(n):e.request.endpoint(t,n),i=typeof t==`function`?t:e.request,a=r.method,o=r.headers,s=r.url;return{[Symbol.asyncIterator]:()=>({async next(){if(!s)return{done:!0};try{let e=Bo(await i({method:a,url:s,headers:o}));if(s=((e.headers.link||``).match(/<([^<>]+)>;\s*rel="next"/)||[])[1],!s&&`total_commits`in e.data){let t=new URL(e.url),n=t.searchParams,r=parseInt(n.get(`page`)||`1`,10);r*parseInt(n.get(`per_page`)||`250`,10)<e.data.total_commits&&(n.set(`page`,String(r+1)),s=t.toString())}return{value:e}}catch(e){if(e.status!==409)throw e;return s=``,{value:{status:200,headers:{},data:[]}}}}})}}function Ho(e,t,n,r){return typeof n==`function`&&(r=n,n=void 0),Uo(e,[],Vo(e,t,n)[Symbol.asyncIterator](),r)}function Uo(e,t,n,r){return n.next().then(i=>{if(i.done)return t;let a=!1;function o(){a=!0}return t=t.concat(r?r(i.value,o):i.value.data),a?t:Uo(e,t,n,r)})}Object.assign(Ho,{iterator:Vo});function Wo(e){return{paginate:Object.assign(Ho.bind(null,e),{iterator:Vo.bind(null,e)})}}Wo.VERSION=zo;var Go={actions:{addCustomLabelsToSelfHostedRunnerForOrg:[`POST /orgs/{org}/actions/runners/{runner_id}/labels`],addCustomLabelsToSelfHostedRunnerForRepo:[`POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],addRepoAccessToSelfHostedRunnerGroupInOrg:[`PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],approveWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/approve`],cancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel`],createEnvironmentVariable:[`POST /repos/{owner}/{repo}/environments/{environment_name}/variables`],createHostedRunnerForOrg:[`POST /orgs/{org}/actions/hosted-runners`],createOrUpdateEnvironmentSecret:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}`],createOrgVariable:[`POST /orgs/{org}/actions/variables`],createRegistrationTokenForOrg:[`POST /orgs/{org}/actions/runners/registration-token`],createRegistrationTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/registration-token`],createRemoveTokenForOrg:[`POST /orgs/{org}/actions/runners/remove-token`],createRemoveTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/remove-token`],createRepoVariable:[`POST /repos/{owner}/{repo}/actions/variables`],createWorkflowDispatch:[`POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches`],deleteActionsCacheById:[`DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}`],deleteActionsCacheByKey:[`DELETE /repos/{owner}/{repo}/actions/caches{?key,ref}`],deleteArtifact:[`DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],deleteCustomImageFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],deleteCustomImageVersionFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],deleteEnvironmentSecret:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],deleteEnvironmentVariable:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],deleteHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],deleteOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}`],deleteOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}`],deleteRepoVariable:[`DELETE /repos/{owner}/{repo}/actions/variables/{name}`],deleteSelfHostedRunnerFromOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}`],deleteSelfHostedRunnerFromRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}`],deleteWorkflowRun:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}`],deleteWorkflowRunLogs:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],disableSelectedRepositoryGithubActionsOrganization:[`DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}`],disableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable`],downloadArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}`],downloadJobLogsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs`],downloadWorkflowRunAttemptLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs`],downloadWorkflowRunLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],enableSelectedRepositoryGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories/{repository_id}`],enableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable`],forceCancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel`],generateRunnerJitconfigForOrg:[`POST /orgs/{org}/actions/runners/generate-jitconfig`],generateRunnerJitconfigForRepo:[`POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig`],getActionsCacheList:[`GET /repos/{owner}/{repo}/actions/caches`],getActionsCacheUsage:[`GET /repos/{owner}/{repo}/actions/cache/usage`],getActionsCacheUsageByRepoForOrg:[`GET /orgs/{org}/actions/cache/usage-by-repository`],getActionsCacheUsageForOrg:[`GET /orgs/{org}/actions/cache/usage`],getAllowedActionsOrganization:[`GET /orgs/{org}/actions/permissions/selected-actions`],getAllowedActionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/selected-actions`],getArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],getCustomImageForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],getCustomImageVersionForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],getCustomOidcSubClaimForRepo:[`GET /repos/{owner}/{repo}/actions/oidc/customization/sub`],getEnvironmentPublicKey:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key`],getEnvironmentSecret:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],getEnvironmentVariable:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],getGithubActionsDefaultWorkflowPermissionsOrganization:[`GET /orgs/{org}/actions/permissions/workflow`],getGithubActionsDefaultWorkflowPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/workflow`],getGithubActionsPermissionsOrganization:[`GET /orgs/{org}/actions/permissions`],getGithubActionsPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions`],getHostedRunnerForOrg:[`GET /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],getHostedRunnersGithubOwnedImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/github-owned`],getHostedRunnersLimitsForOrg:[`GET /orgs/{org}/actions/hosted-runners/limits`],getHostedRunnersMachineSpecsForOrg:[`GET /orgs/{org}/actions/hosted-runners/machine-sizes`],getHostedRunnersPartnerImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/partner`],getHostedRunnersPlatformsForOrg:[`GET /orgs/{org}/actions/hosted-runners/platforms`],getJobForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}`],getOrgPublicKey:[`GET /orgs/{org}/actions/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}`],getOrgVariable:[`GET /orgs/{org}/actions/variables/{name}`],getPendingDeploymentsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],getRepoPermissions:[`GET /repos/{owner}/{repo}/actions/permissions`,{},{renamed:[`actions`,`getGithubActionsPermissionsRepository`]}],getRepoPublicKey:[`GET /repos/{owner}/{repo}/actions/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/actions/secrets/{secret_name}`],getRepoVariable:[`GET /repos/{owner}/{repo}/actions/variables/{name}`],getReviewsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals`],getSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}`],getSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}`],getWorkflow:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}`],getWorkflowAccessToRepository:[`GET /repos/{owner}/{repo}/actions/permissions/access`],getWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}`],getWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}`],getWorkflowRunUsage:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/timing`],getWorkflowUsage:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timing`],listArtifactsForRepo:[`GET /repos/{owner}/{repo}/actions/artifacts`],listCustomImageVersionsForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions`],listCustomImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom`],listEnvironmentSecrets:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets`],listEnvironmentVariables:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables`],listGithubHostedRunnersInGroupForOrg:[`GET /orgs/{org}/actions/runner-groups/{runner_group_id}/hosted-runners`],listHostedRunnersForOrg:[`GET /orgs/{org}/actions/hosted-runners`],listJobsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs`],listJobsForWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs`],listLabelsForSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}/labels`],listLabelsForSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],listOrgSecrets:[`GET /orgs/{org}/actions/secrets`],listOrgVariables:[`GET /orgs/{org}/actions/variables`],listRepoOrganizationSecrets:[`GET /repos/{owner}/{repo}/actions/organization-secrets`],listRepoOrganizationVariables:[`GET /repos/{owner}/{repo}/actions/organization-variables`],listRepoSecrets:[`GET /repos/{owner}/{repo}/actions/secrets`],listRepoVariables:[`GET /repos/{owner}/{repo}/actions/variables`],listRepoWorkflows:[`GET /repos/{owner}/{repo}/actions/workflows`],listRunnerApplicationsForOrg:[`GET /orgs/{org}/actions/runners/downloads`],listRunnerApplicationsForRepo:[`GET /repos/{owner}/{repo}/actions/runners/downloads`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}/repositories`],listSelectedReposForOrgVariable:[`GET /orgs/{org}/actions/variables/{name}/repositories`],listSelectedRepositoriesEnabledGithubActionsOrganization:[`GET /orgs/{org}/actions/permissions/repositories`],listSelfHostedRunnersForOrg:[`GET /orgs/{org}/actions/runners`],listSelfHostedRunnersForRepo:[`GET /repos/{owner}/{repo}/actions/runners`],listWorkflowRunArtifacts:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts`],listWorkflowRuns:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs`],listWorkflowRunsForRepo:[`GET /repos/{owner}/{repo}/actions/runs`],reRunJobForWorkflowRun:[`POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun`],reRunWorkflow:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun`],reRunWorkflowFailedJobs:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs`],removeAllCustomLabelsFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels`],removeAllCustomLabelsFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],removeCustomLabelFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}`],removeCustomLabelFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],reviewCustomGatesForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/deployment_protection_rule`],reviewPendingDeploymentsForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],setAllowedActionsOrganization:[`PUT /orgs/{org}/actions/permissions/selected-actions`],setAllowedActionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/selected-actions`],setCustomLabelsForSelfHostedRunnerForOrg:[`PUT /orgs/{org}/actions/runners/{runner_id}/labels`],setCustomLabelsForSelfHostedRunnerForRepo:[`PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],setCustomOidcSubClaimForRepo:[`PUT /repos/{owner}/{repo}/actions/oidc/customization/sub`],setGithubActionsDefaultWorkflowPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions/workflow`],setGithubActionsDefaultWorkflowPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/workflow`],setGithubActionsPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions`],setGithubActionsPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories`],setSelectedReposForOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories`],setSelectedRepositoriesEnabledGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories`],setWorkflowAccessToRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/access`],updateEnvironmentVariable:[`PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],updateHostedRunnerForOrg:[`PATCH /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],updateOrgVariable:[`PATCH /orgs/{org}/actions/variables/{name}`],updateRepoVariable:[`PATCH /repos/{owner}/{repo}/actions/variables/{name}`]},activity:{checkRepoIsStarredByAuthenticatedUser:[`GET /user/starred/{owner}/{repo}`],deleteRepoSubscription:[`DELETE /repos/{owner}/{repo}/subscription`],deleteThreadSubscription:[`DELETE /notifications/threads/{thread_id}/subscription`],getFeeds:[`GET /feeds`],getRepoSubscription:[`GET /repos/{owner}/{repo}/subscription`],getThread:[`GET /notifications/threads/{thread_id}`],getThreadSubscriptionForAuthenticatedUser:[`GET /notifications/threads/{thread_id}/subscription`],listEventsForAuthenticatedUser:[`GET /users/{username}/events`],listNotificationsForAuthenticatedUser:[`GET /notifications`],listOrgEventsForAuthenticatedUser:[`GET /users/{username}/events/orgs/{org}`],listPublicEvents:[`GET /events`],listPublicEventsForRepoNetwork:[`GET /networks/{owner}/{repo}/events`],listPublicEventsForUser:[`GET /users/{username}/events/public`],listPublicOrgEvents:[`GET /orgs/{org}/events`],listReceivedEventsForUser:[`GET /users/{username}/received_events`],listReceivedPublicEventsForUser:[`GET /users/{username}/received_events/public`],listRepoEvents:[`GET /repos/{owner}/{repo}/events`],listRepoNotificationsForAuthenticatedUser:[`GET /repos/{owner}/{repo}/notifications`],listReposStarredByAuthenticatedUser:[`GET /user/starred`],listReposStarredByUser:[`GET /users/{username}/starred`],listReposWatchedByUser:[`GET /users/{username}/subscriptions`],listStargazersForRepo:[`GET /repos/{owner}/{repo}/stargazers`],listWatchedReposForAuthenticatedUser:[`GET /user/subscriptions`],listWatchersForRepo:[`GET /repos/{owner}/{repo}/subscribers`],markNotificationsAsRead:[`PUT /notifications`],markRepoNotificationsAsRead:[`PUT /repos/{owner}/{repo}/notifications`],markThreadAsDone:[`DELETE /notifications/threads/{thread_id}`],markThreadAsRead:[`PATCH /notifications/threads/{thread_id}`],setRepoSubscription:[`PUT /repos/{owner}/{repo}/subscription`],setThreadSubscription:[`PUT /notifications/threads/{thread_id}/subscription`],starRepoForAuthenticatedUser:[`PUT /user/starred/{owner}/{repo}`],unstarRepoForAuthenticatedUser:[`DELETE /user/starred/{owner}/{repo}`]},apps:{addRepoToInstallation:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`addRepoToInstallationForAuthenticatedUser`]}],addRepoToInstallationForAuthenticatedUser:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`],checkToken:[`POST /applications/{client_id}/token`],createFromManifest:[`POST /app-manifests/{code}/conversions`],createInstallationAccessToken:[`POST /app/installations/{installation_id}/access_tokens`],deleteAuthorization:[`DELETE /applications/{client_id}/grant`],deleteInstallation:[`DELETE /app/installations/{installation_id}`],deleteToken:[`DELETE /applications/{client_id}/token`],getAuthenticated:[`GET /app`],getBySlug:[`GET /apps/{app_slug}`],getInstallation:[`GET /app/installations/{installation_id}`],getOrgInstallation:[`GET /orgs/{org}/installation`],getRepoInstallation:[`GET /repos/{owner}/{repo}/installation`],getSubscriptionPlanForAccount:[`GET /marketplace_listing/accounts/{account_id}`],getSubscriptionPlanForAccountStubbed:[`GET /marketplace_listing/stubbed/accounts/{account_id}`],getUserInstallation:[`GET /users/{username}/installation`],getWebhookConfigForApp:[`GET /app/hook/config`],getWebhookDelivery:[`GET /app/hook/deliveries/{delivery_id}`],listAccountsForPlan:[`GET /marketplace_listing/plans/{plan_id}/accounts`],listAccountsForPlanStubbed:[`GET /marketplace_listing/stubbed/plans/{plan_id}/accounts`],listInstallationReposForAuthenticatedUser:[`GET /user/installations/{installation_id}/repositories`],listInstallationRequestsForAuthenticatedApp:[`GET /app/installation-requests`],listInstallations:[`GET /app/installations`],listInstallationsForAuthenticatedUser:[`GET /user/installations`],listPlans:[`GET /marketplace_listing/plans`],listPlansStubbed:[`GET /marketplace_listing/stubbed/plans`],listReposAccessibleToInstallation:[`GET /installation/repositories`],listSubscriptionsForAuthenticatedUser:[`GET /user/marketplace_purchases`],listSubscriptionsForAuthenticatedUserStubbed:[`GET /user/marketplace_purchases/stubbed`],listWebhookDeliveries:[`GET /app/hook/deliveries`],redeliverWebhookDelivery:[`POST /app/hook/deliveries/{delivery_id}/attempts`],removeRepoFromInstallation:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`removeRepoFromInstallationForAuthenticatedUser`]}],removeRepoFromInstallationForAuthenticatedUser:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`],resetToken:[`PATCH /applications/{client_id}/token`],revokeInstallationAccessToken:[`DELETE /installation/token`],scopeToken:[`POST /applications/{client_id}/token/scoped`],suspendInstallation:[`PUT /app/installations/{installation_id}/suspended`],unsuspendInstallation:[`DELETE /app/installations/{installation_id}/suspended`],updateWebhookConfigForApp:[`PATCH /app/hook/config`]},billing:{getGithubActionsBillingOrg:[`GET /orgs/{org}/settings/billing/actions`],getGithubActionsBillingUser:[`GET /users/{username}/settings/billing/actions`],getGithubBillingPremiumRequestUsageReportOrg:[`GET /organizations/{org}/settings/billing/premium_request/usage`],getGithubBillingPremiumRequestUsageReportUser:[`GET /users/{username}/settings/billing/premium_request/usage`],getGithubBillingUsageReportOrg:[`GET /organizations/{org}/settings/billing/usage`],getGithubBillingUsageReportUser:[`GET /users/{username}/settings/billing/usage`],getGithubPackagesBillingOrg:[`GET /orgs/{org}/settings/billing/packages`],getGithubPackagesBillingUser:[`GET /users/{username}/settings/billing/packages`],getSharedStorageBillingOrg:[`GET /orgs/{org}/settings/billing/shared-storage`],getSharedStorageBillingUser:[`GET /users/{username}/settings/billing/shared-storage`]},campaigns:{createCampaign:[`POST /orgs/{org}/campaigns`],deleteCampaign:[`DELETE /orgs/{org}/campaigns/{campaign_number}`],getCampaignSummary:[`GET /orgs/{org}/campaigns/{campaign_number}`],listOrgCampaigns:[`GET /orgs/{org}/campaigns`],updateCampaign:[`PATCH /orgs/{org}/campaigns/{campaign_number}`]},checks:{create:[`POST /repos/{owner}/{repo}/check-runs`],createSuite:[`POST /repos/{owner}/{repo}/check-suites`],get:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}`],getSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}`],listAnnotations:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations`],listForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-runs`],listForSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs`],listSuitesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-suites`],rerequestRun:[`POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest`],rerequestSuite:[`POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest`],setSuitesPreferences:[`PATCH /repos/{owner}/{repo}/check-suites/preferences`],update:[`PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}`]},codeScanning:{commitAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix/commits`],createAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],createVariantAnalysis:[`POST /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses`],deleteAnalysis:[`DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}{?confirm_delete}`],deleteCodeqlDatabase:[`DELETE /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getAlert:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`,{},{renamedParameters:{alert_id:`alert_number`}}],getAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}`],getAutofix:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],getCodeqlDatabase:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getDefaultSetup:[`GET /repos/{owner}/{repo}/code-scanning/default-setup`],getSarif:[`GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}`],getVariantAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}`],getVariantAnalysisRepoTask:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}`],listAlertInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`],listAlertsForOrg:[`GET /orgs/{org}/code-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/code-scanning/alerts`],listAlertsInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`,{},{renamed:[`codeScanning`,`listAlertInstances`]}],listCodeqlDatabases:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases`],listRecentAnalyses:[`GET /repos/{owner}/{repo}/code-scanning/analyses`],updateAlert:[`PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`],updateDefaultSetup:[`PATCH /repos/{owner}/{repo}/code-scanning/default-setup`],uploadSarif:[`POST /repos/{owner}/{repo}/code-scanning/sarifs`]},codeSecurity:{attachConfiguration:[`POST /orgs/{org}/code-security/configurations/{configuration_id}/attach`],attachEnterpriseConfiguration:[`POST /enterprises/{enterprise}/code-security/configurations/{configuration_id}/attach`],createConfiguration:[`POST /orgs/{org}/code-security/configurations`],createConfigurationForEnterprise:[`POST /enterprises/{enterprise}/code-security/configurations`],deleteConfiguration:[`DELETE /orgs/{org}/code-security/configurations/{configuration_id}`],deleteConfigurationForEnterprise:[`DELETE /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],detachConfiguration:[`DELETE /orgs/{org}/code-security/configurations/detach`],getConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}`],getConfigurationForRepository:[`GET /repos/{owner}/{repo}/code-security-configuration`],getConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations`],getConfigurationsForOrg:[`GET /orgs/{org}/code-security/configurations`],getDefaultConfigurations:[`GET /orgs/{org}/code-security/configurations/defaults`],getDefaultConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/defaults`],getRepositoriesForConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories`],getRepositoriesForEnterpriseConfiguration:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}/repositories`],getSingleConfigurationForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],setConfigurationAsDefault:[`PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults`],setConfigurationAsDefaultForEnterprise:[`PUT /enterprises/{enterprise}/code-security/configurations/{configuration_id}/defaults`],updateConfiguration:[`PATCH /orgs/{org}/code-security/configurations/{configuration_id}`],updateEnterpriseConfiguration:[`PATCH /enterprises/{enterprise}/code-security/configurations/{configuration_id}`]},codesOfConduct:{getAllCodesOfConduct:[`GET /codes_of_conduct`],getConductCode:[`GET /codes_of_conduct/{key}`]},codespaces:{addRepositoryForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],checkPermissionsForDevcontainer:[`GET /repos/{owner}/{repo}/codespaces/permissions_check`],codespaceMachinesForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/machines`],createForAuthenticatedUser:[`POST /user/codespaces`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],createOrUpdateSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}`],createWithPrForAuthenticatedUser:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaces`],createWithRepoForAuthenticatedUser:[`POST /repos/{owner}/{repo}/codespaces`],deleteForAuthenticatedUser:[`DELETE /user/codespaces/{codespace_name}`],deleteFromOrganization:[`DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],deleteSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}`],exportForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/exports`],getCodespacesForUserInOrg:[`GET /orgs/{org}/members/{username}/codespaces`],getExportDetailsForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/exports/{export_id}`],getForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}`],getOrgPublicKey:[`GET /orgs/{org}/codespaces/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}`],getPublicKeyForAuthenticatedUser:[`GET /user/codespaces/secrets/public-key`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/codespaces/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],getSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}`],listDevcontainersInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/devcontainers`],listForAuthenticatedUser:[`GET /user/codespaces`],listInOrganization:[`GET /orgs/{org}/codespaces`,{},{renamedParameters:{org_id:`org`}}],listInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces`],listOrgSecrets:[`GET /orgs/{org}/codespaces/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/codespaces/secrets`],listRepositoriesForSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}/repositories`],listSecretsForAuthenticatedUser:[`GET /user/codespaces/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],preFlightWithRepoForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/new`],publishForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/publish`],removeRepositoryForSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],repoMachinesForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/machines`],setRepositoriesForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],startForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/start`],stopForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/stop`],stopInOrganization:[`POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop`],updateForAuthenticatedUser:[`PATCH /user/codespaces/{codespace_name}`]},copilot:{addCopilotSeatsForTeams:[`POST /orgs/{org}/copilot/billing/selected_teams`],addCopilotSeatsForUsers:[`POST /orgs/{org}/copilot/billing/selected_users`],cancelCopilotSeatAssignmentForTeams:[`DELETE /orgs/{org}/copilot/billing/selected_teams`],cancelCopilotSeatAssignmentForUsers:[`DELETE /orgs/{org}/copilot/billing/selected_users`],copilotMetricsForOrganization:[`GET /orgs/{org}/copilot/metrics`],copilotMetricsForTeam:[`GET /orgs/{org}/team/{team_slug}/copilot/metrics`],getCopilotOrganizationDetails:[`GET /orgs/{org}/copilot/billing`],getCopilotSeatDetailsForUser:[`GET /orgs/{org}/members/{username}/copilot`],listCopilotSeats:[`GET /orgs/{org}/copilot/billing/seats`]},credentials:{revoke:[`POST /credentials/revoke`]},dependabot:{addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],getAlert:[`GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],getOrgPublicKey:[`GET /orgs/{org}/dependabot/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/dependabot/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],listAlertsForEnterprise:[`GET /enterprises/{enterprise}/dependabot/alerts`],listAlertsForOrg:[`GET /orgs/{org}/dependabot/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/dependabot/alerts`],listOrgSecrets:[`GET /orgs/{org}/dependabot/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/dependabot/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],repositoryAccessForOrg:[`GET /organizations/{org}/dependabot/repository-access`],setRepositoryAccessDefaultLevel:[`PUT /organizations/{org}/dependabot/repository-access/default-level`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],updateAlert:[`PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],updateRepositoryAccessForOrg:[`PATCH /organizations/{org}/dependabot/repository-access`]},dependencyGraph:{createRepositorySnapshot:[`POST /repos/{owner}/{repo}/dependency-graph/snapshots`],diffRange:[`GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}`],exportSbom:[`GET /repos/{owner}/{repo}/dependency-graph/sbom`]},emojis:{get:[`GET /emojis`]},enterpriseTeamMemberships:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove`],get:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],list:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships`],remove:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`]},enterpriseTeamOrganizations:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/remove`],delete:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignment:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignments:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations`]},enterpriseTeams:{create:[`POST /enterprises/{enterprise}/teams`],delete:[`DELETE /enterprises/{enterprise}/teams/{team_slug}`],get:[`GET /enterprises/{enterprise}/teams/{team_slug}`],list:[`GET /enterprises/{enterprise}/teams`],update:[`PATCH /enterprises/{enterprise}/teams/{team_slug}`]},gists:{checkIsStarred:[`GET /gists/{gist_id}/star`],create:[`POST /gists`],createComment:[`POST /gists/{gist_id}/comments`],delete:[`DELETE /gists/{gist_id}`],deleteComment:[`DELETE /gists/{gist_id}/comments/{comment_id}`],fork:[`POST /gists/{gist_id}/forks`],get:[`GET /gists/{gist_id}`],getComment:[`GET /gists/{gist_id}/comments/{comment_id}`],getRevision:[`GET /gists/{gist_id}/{sha}`],list:[`GET /gists`],listComments:[`GET /gists/{gist_id}/comments`],listCommits:[`GET /gists/{gist_id}/commits`],listForUser:[`GET /users/{username}/gists`],listForks:[`GET /gists/{gist_id}/forks`],listPublic:[`GET /gists/public`],listStarred:[`GET /gists/starred`],star:[`PUT /gists/{gist_id}/star`],unstar:[`DELETE /gists/{gist_id}/star`],update:[`PATCH /gists/{gist_id}`],updateComment:[`PATCH /gists/{gist_id}/comments/{comment_id}`]},git:{createBlob:[`POST /repos/{owner}/{repo}/git/blobs`],createCommit:[`POST /repos/{owner}/{repo}/git/commits`],createRef:[`POST /repos/{owner}/{repo}/git/refs`],createTag:[`POST /repos/{owner}/{repo}/git/tags`],createTree:[`POST /repos/{owner}/{repo}/git/trees`],deleteRef:[`DELETE /repos/{owner}/{repo}/git/refs/{ref}`],getBlob:[`GET /repos/{owner}/{repo}/git/blobs/{file_sha}`],getCommit:[`GET /repos/{owner}/{repo}/git/commits/{commit_sha}`],getRef:[`GET /repos/{owner}/{repo}/git/ref/{ref}`],getTag:[`GET /repos/{owner}/{repo}/git/tags/{tag_sha}`],getTree:[`GET /repos/{owner}/{repo}/git/trees/{tree_sha}`],listMatchingRefs:[`GET /repos/{owner}/{repo}/git/matching-refs/{ref}`],updateRef:[`PATCH /repos/{owner}/{repo}/git/refs/{ref}`]},gitignore:{getAllTemplates:[`GET /gitignore/templates`],getTemplate:[`GET /gitignore/templates/{name}`]},hostedCompute:{createNetworkConfigurationForOrg:[`POST /orgs/{org}/settings/network-configurations`],deleteNetworkConfigurationFromOrg:[`DELETE /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkConfigurationForOrg:[`GET /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkSettingsForOrg:[`GET /orgs/{org}/settings/network-settings/{network_settings_id}`],listNetworkConfigurationsForOrg:[`GET /orgs/{org}/settings/network-configurations`],updateNetworkConfigurationForOrg:[`PATCH /orgs/{org}/settings/network-configurations/{network_configuration_id}`]},interactions:{getRestrictionsForAuthenticatedUser:[`GET /user/interaction-limits`],getRestrictionsForOrg:[`GET /orgs/{org}/interaction-limits`],getRestrictionsForRepo:[`GET /repos/{owner}/{repo}/interaction-limits`],getRestrictionsForYourPublicRepos:[`GET /user/interaction-limits`,{},{renamed:[`interactions`,`getRestrictionsForAuthenticatedUser`]}],removeRestrictionsForAuthenticatedUser:[`DELETE /user/interaction-limits`],removeRestrictionsForOrg:[`DELETE /orgs/{org}/interaction-limits`],removeRestrictionsForRepo:[`DELETE /repos/{owner}/{repo}/interaction-limits`],removeRestrictionsForYourPublicRepos:[`DELETE /user/interaction-limits`,{},{renamed:[`interactions`,`removeRestrictionsForAuthenticatedUser`]}],setRestrictionsForAuthenticatedUser:[`PUT /user/interaction-limits`],setRestrictionsForOrg:[`PUT /orgs/{org}/interaction-limits`],setRestrictionsForRepo:[`PUT /repos/{owner}/{repo}/interaction-limits`],setRestrictionsForYourPublicRepos:[`PUT /user/interaction-limits`,{},{renamed:[`interactions`,`setRestrictionsForAuthenticatedUser`]}]},issues:{addAssignees:[`POST /repos/{owner}/{repo}/issues/{issue_number}/assignees`],addBlockedByDependency:[`POST /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],addLabels:[`POST /repos/{owner}/{repo}/issues/{issue_number}/labels`],addSubIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],checkUserCanBeAssigned:[`GET /repos/{owner}/{repo}/assignees/{assignee}`],checkUserCanBeAssignedToIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}`],create:[`POST /repos/{owner}/{repo}/issues`],createComment:[`POST /repos/{owner}/{repo}/issues/{issue_number}/comments`],createLabel:[`POST /repos/{owner}/{repo}/labels`],createMilestone:[`POST /repos/{owner}/{repo}/milestones`],deleteComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}`],deleteLabel:[`DELETE /repos/{owner}/{repo}/labels/{name}`],deleteMilestone:[`DELETE /repos/{owner}/{repo}/milestones/{milestone_number}`],get:[`GET /repos/{owner}/{repo}/issues/{issue_number}`],getComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}`],getEvent:[`GET /repos/{owner}/{repo}/issues/events/{event_id}`],getLabel:[`GET /repos/{owner}/{repo}/labels/{name}`],getMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}`],getParent:[`GET /repos/{owner}/{repo}/issues/{issue_number}/parent`],list:[`GET /issues`],listAssignees:[`GET /repos/{owner}/{repo}/assignees`],listComments:[`GET /repos/{owner}/{repo}/issues/{issue_number}/comments`],listCommentsForRepo:[`GET /repos/{owner}/{repo}/issues/comments`],listDependenciesBlockedBy:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],listDependenciesBlocking:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocking`],listEvents:[`GET /repos/{owner}/{repo}/issues/{issue_number}/events`],listEventsForRepo:[`GET /repos/{owner}/{repo}/issues/events`],listEventsForTimeline:[`GET /repos/{owner}/{repo}/issues/{issue_number}/timeline`],listForAuthenticatedUser:[`GET /user/issues`],listForOrg:[`GET /orgs/{org}/issues`],listForRepo:[`GET /repos/{owner}/{repo}/issues`],listLabelsForMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels`],listLabelsForRepo:[`GET /repos/{owner}/{repo}/labels`],listLabelsOnIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/labels`],listMilestones:[`GET /repos/{owner}/{repo}/milestones`],listSubIssues:[`GET /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],lock:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/lock`],removeAllLabels:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels`],removeAssignees:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees`],removeDependencyBlockedBy:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by/{issue_id}`],removeLabel:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}`],removeSubIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/sub_issue`],reprioritizeSubIssue:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}/sub_issues/priority`],setLabels:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/labels`],unlock:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock`],update:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}`],updateComment:[`PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}`],updateLabel:[`PATCH /repos/{owner}/{repo}/labels/{name}`],updateMilestone:[`PATCH /repos/{owner}/{repo}/milestones/{milestone_number}`]},licenses:{get:[`GET /licenses/{license}`],getAllCommonlyUsed:[`GET /licenses`],getForRepo:[`GET /repos/{owner}/{repo}/license`]},markdown:{render:[`POST /markdown`],renderRaw:[`POST /markdown/raw`,{headers:{"content-type":`text/plain; charset=utf-8`}}]},meta:{get:[`GET /meta`],getAllVersions:[`GET /versions`],getOctocat:[`GET /octocat`],getZen:[`GET /zen`],root:[`GET /`]},migrations:{deleteArchiveForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/archive`],deleteArchiveForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/archive`],downloadArchiveForOrg:[`GET /orgs/{org}/migrations/{migration_id}/archive`],getArchiveForAuthenticatedUser:[`GET /user/migrations/{migration_id}/archive`],getStatusForAuthenticatedUser:[`GET /user/migrations/{migration_id}`],getStatusForOrg:[`GET /orgs/{org}/migrations/{migration_id}`],listForAuthenticatedUser:[`GET /user/migrations`],listForOrg:[`GET /orgs/{org}/migrations`],listReposForAuthenticatedUser:[`GET /user/migrations/{migration_id}/repositories`],listReposForOrg:[`GET /orgs/{org}/migrations/{migration_id}/repositories`],listReposForUser:[`GET /user/migrations/{migration_id}/repositories`,{},{renamed:[`migrations`,`listReposForAuthenticatedUser`]}],startForAuthenticatedUser:[`POST /user/migrations`],startForOrg:[`POST /orgs/{org}/migrations`],unlockRepoForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/repos/{repo_name}/lock`],unlockRepoForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/repos/{repo_name}/lock`]},oidc:{getOidcCustomSubTemplateForOrg:[`GET /orgs/{org}/actions/oidc/customization/sub`],updateOidcCustomSubTemplateForOrg:[`PUT /orgs/{org}/actions/oidc/customization/sub`]},orgs:{addSecurityManagerTeam:[`PUT /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.addSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#add-a-security-manager-team`}],assignTeamToOrgRole:[`PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],assignUserToOrgRole:[`PUT /orgs/{org}/organization-roles/users/{username}/{role_id}`],blockUser:[`PUT /orgs/{org}/blocks/{username}`],cancelInvitation:[`DELETE /orgs/{org}/invitations/{invitation_id}`],checkBlockedUser:[`GET /orgs/{org}/blocks/{username}`],checkMembershipForUser:[`GET /orgs/{org}/members/{username}`],checkPublicMembershipForUser:[`GET /orgs/{org}/public_members/{username}`],convertMemberToOutsideCollaborator:[`PUT /orgs/{org}/outside_collaborators/{username}`],createArtifactStorageRecord:[`POST /orgs/{org}/artifacts/metadata/storage-record`],createInvitation:[`POST /orgs/{org}/invitations`],createIssueType:[`POST /orgs/{org}/issue-types`],createWebhook:[`POST /orgs/{org}/hooks`],customPropertiesForOrgsCreateOrUpdateOrganizationValues:[`PATCH /organizations/{org}/org-properties/values`],customPropertiesForOrgsGetOrganizationValues:[`GET /organizations/{org}/org-properties/values`],customPropertiesForReposCreateOrUpdateOrganizationDefinition:[`PUT /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposCreateOrUpdateOrganizationDefinitions:[`PATCH /orgs/{org}/properties/schema`],customPropertiesForReposCreateOrUpdateOrganizationValues:[`PATCH /orgs/{org}/properties/values`],customPropertiesForReposDeleteOrganizationDefinition:[`DELETE /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinition:[`GET /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinitions:[`GET /orgs/{org}/properties/schema`],customPropertiesForReposGetOrganizationValues:[`GET /orgs/{org}/properties/values`],delete:[`DELETE /orgs/{org}`],deleteAttestationsBulk:[`POST /orgs/{org}/attestations/delete-request`],deleteAttestationsById:[`DELETE /orgs/{org}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /orgs/{org}/attestations/digest/{subject_digest}`],deleteIssueType:[`DELETE /orgs/{org}/issue-types/{issue_type_id}`],deleteWebhook:[`DELETE /orgs/{org}/hooks/{hook_id}`],disableSelectedRepositoryImmutableReleasesOrganization:[`DELETE /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],enableSelectedRepositoryImmutableReleasesOrganization:[`PUT /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],get:[`GET /orgs/{org}`],getImmutableReleasesSettings:[`GET /orgs/{org}/settings/immutable-releases`],getImmutableReleasesSettingsRepositories:[`GET /orgs/{org}/settings/immutable-releases/repositories`],getMembershipForAuthenticatedUser:[`GET /user/memberships/orgs/{org}`],getMembershipForUser:[`GET /orgs/{org}/memberships/{username}`],getOrgRole:[`GET /orgs/{org}/organization-roles/{role_id}`],getOrgRulesetHistory:[`GET /orgs/{org}/rulesets/{ruleset_id}/history`],getOrgRulesetVersion:[`GET /orgs/{org}/rulesets/{ruleset_id}/history/{version_id}`],getWebhook:[`GET /orgs/{org}/hooks/{hook_id}`],getWebhookConfigForOrg:[`GET /orgs/{org}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}`],list:[`GET /organizations`],listAppInstallations:[`GET /orgs/{org}/installations`],listArtifactStorageRecords:[`GET /orgs/{org}/artifacts/{subject_digest}/metadata/storage-records`],listAttestationRepositories:[`GET /orgs/{org}/attestations/repositories`],listAttestations:[`GET /orgs/{org}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /orgs/{org}/attestations/bulk-list{?per_page,before,after}`],listBlockedUsers:[`GET /orgs/{org}/blocks`],listFailedInvitations:[`GET /orgs/{org}/failed_invitations`],listForAuthenticatedUser:[`GET /user/orgs`],listForUser:[`GET /users/{username}/orgs`],listInvitationTeams:[`GET /orgs/{org}/invitations/{invitation_id}/teams`],listIssueTypes:[`GET /orgs/{org}/issue-types`],listMembers:[`GET /orgs/{org}/members`],listMembershipsForAuthenticatedUser:[`GET /user/memberships/orgs`],listOrgRoleTeams:[`GET /orgs/{org}/organization-roles/{role_id}/teams`],listOrgRoleUsers:[`GET /orgs/{org}/organization-roles/{role_id}/users`],listOrgRoles:[`GET /orgs/{org}/organization-roles`],listOrganizationFineGrainedPermissions:[`GET /orgs/{org}/organization-fine-grained-permissions`],listOutsideCollaborators:[`GET /orgs/{org}/outside_collaborators`],listPatGrantRepositories:[`GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories`],listPatGrantRequestRepositories:[`GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories`],listPatGrantRequests:[`GET /orgs/{org}/personal-access-token-requests`],listPatGrants:[`GET /orgs/{org}/personal-access-tokens`],listPendingInvitations:[`GET /orgs/{org}/invitations`],listPublicMembers:[`GET /orgs/{org}/public_members`],listSecurityManagerTeams:[`GET /orgs/{org}/security-managers`,{},{deprecated:`octokit.rest.orgs.listSecurityManagerTeams() is deprecated, see https://docs.github.com/rest/orgs/security-managers#list-security-manager-teams`}],listWebhookDeliveries:[`GET /orgs/{org}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /orgs/{org}/hooks`],pingWebhook:[`POST /orgs/{org}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeMember:[`DELETE /orgs/{org}/members/{username}`],removeMembershipForUser:[`DELETE /orgs/{org}/memberships/{username}`],removeOutsideCollaborator:[`DELETE /orgs/{org}/outside_collaborators/{username}`],removePublicMembershipForAuthenticatedUser:[`DELETE /orgs/{org}/public_members/{username}`],removeSecurityManagerTeam:[`DELETE /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.removeSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#remove-a-security-manager-team`}],reviewPatGrantRequest:[`POST /orgs/{org}/personal-access-token-requests/{pat_request_id}`],reviewPatGrantRequestsInBulk:[`POST /orgs/{org}/personal-access-token-requests`],revokeAllOrgRolesTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}`],revokeAllOrgRolesUser:[`DELETE /orgs/{org}/organization-roles/users/{username}`],revokeOrgRoleTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],revokeOrgRoleUser:[`DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}`],setImmutableReleasesSettings:[`PUT /orgs/{org}/settings/immutable-releases`],setImmutableReleasesSettingsRepositories:[`PUT /orgs/{org}/settings/immutable-releases/repositories`],setMembershipForUser:[`PUT /orgs/{org}/memberships/{username}`],setPublicMembershipForAuthenticatedUser:[`PUT /orgs/{org}/public_members/{username}`],unblockUser:[`DELETE /orgs/{org}/blocks/{username}`],update:[`PATCH /orgs/{org}`],updateIssueType:[`PUT /orgs/{org}/issue-types/{issue_type_id}`],updateMembershipForAuthenticatedUser:[`PATCH /user/memberships/orgs/{org}`],updatePatAccess:[`POST /orgs/{org}/personal-access-tokens/{pat_id}`],updatePatAccesses:[`POST /orgs/{org}/personal-access-tokens`],updateWebhook:[`PATCH /orgs/{org}/hooks/{hook_id}`],updateWebhookConfigForOrg:[`PATCH /orgs/{org}/hooks/{hook_id}/config`]},packages:{deletePackageForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}`],deletePackageForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}`],deletePackageForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}`],deletePackageVersionForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getAllPackageVersionsForAPackageOwnedByAnOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByOrg`]}],getAllPackageVersionsForAPackageOwnedByTheAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByAuthenticatedUser`]}],getAllPackageVersionsForPackageOwnedByAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions`],getPackageForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}`],getPackageForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}`],getPackageForUser:[`GET /users/{username}/packages/{package_type}/{package_name}`],getPackageVersionForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],listDockerMigrationConflictingPackagesForAuthenticatedUser:[`GET /user/docker/conflicts`],listDockerMigrationConflictingPackagesForOrganization:[`GET /orgs/{org}/docker/conflicts`],listDockerMigrationConflictingPackagesForUser:[`GET /users/{username}/docker/conflicts`],listPackagesForAuthenticatedUser:[`GET /user/packages`],listPackagesForOrganization:[`GET /orgs/{org}/packages`],listPackagesForUser:[`GET /users/{username}/packages`],restorePackageForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageVersionForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`]},privateRegistries:{createOrgPrivateRegistry:[`POST /orgs/{org}/private-registries`],deleteOrgPrivateRegistry:[`DELETE /orgs/{org}/private-registries/{secret_name}`],getOrgPrivateRegistry:[`GET /orgs/{org}/private-registries/{secret_name}`],getOrgPublicKey:[`GET /orgs/{org}/private-registries/public-key`],listOrgPrivateRegistries:[`GET /orgs/{org}/private-registries`],updateOrgPrivateRegistry:[`PATCH /orgs/{org}/private-registries/{secret_name}`]},projects:{addItemForOrg:[`POST /orgs/{org}/projectsV2/{project_number}/items`],addItemForUser:[`POST /users/{username}/projectsV2/{project_number}/items`],deleteItemForOrg:[`DELETE /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],deleteItemForUser:[`DELETE /users/{username}/projectsV2/{project_number}/items/{item_id}`],getFieldForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields/{field_id}`],getFieldForUser:[`GET /users/{username}/projectsV2/{project_number}/fields/{field_id}`],getForOrg:[`GET /orgs/{org}/projectsV2/{project_number}`],getForUser:[`GET /users/{username}/projectsV2/{project_number}`],getOrgItem:[`GET /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],getUserItem:[`GET /users/{username}/projectsV2/{project_number}/items/{item_id}`],listFieldsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields`],listFieldsForUser:[`GET /users/{username}/projectsV2/{project_number}/fields`],listForOrg:[`GET /orgs/{org}/projectsV2`],listForUser:[`GET /users/{username}/projectsV2`],listItemsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/items`],listItemsForUser:[`GET /users/{username}/projectsV2/{project_number}/items`],updateItemForOrg:[`PATCH /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],updateItemForUser:[`PATCH /users/{username}/projectsV2/{project_number}/items/{item_id}`]},pulls:{checkIfMerged:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/merge`],create:[`POST /repos/{owner}/{repo}/pulls`],createReplyForReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies`],createReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],createReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments`],deletePendingReview:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],deleteReviewComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}`],dismissReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals`],get:[`GET /repos/{owner}/{repo}/pulls/{pull_number}`],getReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],getReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}`],list:[`GET /repos/{owner}/{repo}/pulls`],listCommentsForReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments`],listCommits:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/commits`],listFiles:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/files`],listRequestedReviewers:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],listReviewComments:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/comments`],listReviewCommentsForRepo:[`GET /repos/{owner}/{repo}/pulls/comments`],listReviews:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],merge:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge`],removeRequestedReviewers:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],requestReviewers:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],submitReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events`],update:[`PATCH /repos/{owner}/{repo}/pulls/{pull_number}`],updateBranch:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch`],updateReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],updateReviewComment:[`PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}`]},rateLimit:{get:[`GET /rate_limit`]},reactions:{createForCommitComment:[`POST /repos/{owner}/{repo}/comments/{comment_id}/reactions`],createForIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/reactions`],createForIssueComment:[`POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],createForPullRequestReviewComment:[`POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],createForRelease:[`POST /repos/{owner}/{repo}/releases/{release_id}/reactions`],createForTeamDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],createForTeamDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`],deleteForCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}`],deleteForIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}`],deleteForIssueComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}`],deleteForPullRequestComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}`],deleteForRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}/reactions/{reaction_id}`],deleteForTeamDiscussion:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}`],deleteForTeamDiscussionComment:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}`],listForCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}/reactions`],listForIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/reactions`],listForIssueComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],listForPullRequestReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],listForRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}/reactions`],listForTeamDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],listForTeamDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`]},repos:{acceptInvitation:[`PATCH /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`acceptInvitationForAuthenticatedUser`]}],acceptInvitationForAuthenticatedUser:[`PATCH /user/repository_invitations/{invitation_id}`],addAppAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],addCollaborator:[`PUT /repos/{owner}/{repo}/collaborators/{username}`],addStatusCheckContexts:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],addTeamAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],addUserAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],cancelPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel`],checkAutomatedSecurityFixes:[`GET /repos/{owner}/{repo}/automated-security-fixes`],checkCollaborator:[`GET /repos/{owner}/{repo}/collaborators/{username}`],checkImmutableReleases:[`GET /repos/{owner}/{repo}/immutable-releases`],checkPrivateVulnerabilityReporting:[`GET /repos/{owner}/{repo}/private-vulnerability-reporting`],checkVulnerabilityAlerts:[`GET /repos/{owner}/{repo}/vulnerability-alerts`],codeownersErrors:[`GET /repos/{owner}/{repo}/codeowners/errors`],compareCommits:[`GET /repos/{owner}/{repo}/compare/{base}...{head}`],compareCommitsWithBasehead:[`GET /repos/{owner}/{repo}/compare/{basehead}`],createAttestation:[`POST /repos/{owner}/{repo}/attestations`],createAutolink:[`POST /repos/{owner}/{repo}/autolinks`],createCommitComment:[`POST /repos/{owner}/{repo}/commits/{commit_sha}/comments`],createCommitSignatureProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],createCommitStatus:[`POST /repos/{owner}/{repo}/statuses/{sha}`],createDeployKey:[`POST /repos/{owner}/{repo}/keys`],createDeployment:[`POST /repos/{owner}/{repo}/deployments`],createDeploymentBranchPolicy:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],createDeploymentProtectionRule:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],createDeploymentStatus:[`POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],createDispatchEvent:[`POST /repos/{owner}/{repo}/dispatches`],createForAuthenticatedUser:[`POST /user/repos`],createFork:[`POST /repos/{owner}/{repo}/forks`],createInOrg:[`POST /orgs/{org}/repos`],createOrUpdateEnvironment:[`PUT /repos/{owner}/{repo}/environments/{environment_name}`],createOrUpdateFileContents:[`PUT /repos/{owner}/{repo}/contents/{path}`],createOrgRuleset:[`POST /orgs/{org}/rulesets`],createPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments`],createPagesSite:[`POST /repos/{owner}/{repo}/pages`],createRelease:[`POST /repos/{owner}/{repo}/releases`],createRepoRuleset:[`POST /repos/{owner}/{repo}/rulesets`],createUsingTemplate:[`POST /repos/{template_owner}/{template_repo}/generate`],createWebhook:[`POST /repos/{owner}/{repo}/hooks`],customPropertiesForReposCreateOrUpdateRepositoryValues:[`PATCH /repos/{owner}/{repo}/properties/values`],customPropertiesForReposGetRepositoryValues:[`GET /repos/{owner}/{repo}/properties/values`],declineInvitation:[`DELETE /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`declineInvitationForAuthenticatedUser`]}],declineInvitationForAuthenticatedUser:[`DELETE /user/repository_invitations/{invitation_id}`],delete:[`DELETE /repos/{owner}/{repo}`],deleteAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],deleteAdminBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],deleteAnEnvironment:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}`],deleteAutolink:[`DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}`],deleteBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection`],deleteCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}`],deleteCommitSignatureProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],deleteDeployKey:[`DELETE /repos/{owner}/{repo}/keys/{key_id}`],deleteDeployment:[`DELETE /repos/{owner}/{repo}/deployments/{deployment_id}`],deleteDeploymentBranchPolicy:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],deleteFile:[`DELETE /repos/{owner}/{repo}/contents/{path}`],deleteInvitation:[`DELETE /repos/{owner}/{repo}/invitations/{invitation_id}`],deleteOrgRuleset:[`DELETE /orgs/{org}/rulesets/{ruleset_id}`],deletePagesSite:[`DELETE /repos/{owner}/{repo}/pages`],deletePullRequestReviewProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],deleteRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}`],deleteReleaseAsset:[`DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}`],deleteRepoRuleset:[`DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}`],deleteWebhook:[`DELETE /repos/{owner}/{repo}/hooks/{hook_id}`],disableAutomatedSecurityFixes:[`DELETE /repos/{owner}/{repo}/automated-security-fixes`],disableDeploymentProtectionRule:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],disableImmutableReleases:[`DELETE /repos/{owner}/{repo}/immutable-releases`],disablePrivateVulnerabilityReporting:[`DELETE /repos/{owner}/{repo}/private-vulnerability-reporting`],disableVulnerabilityAlerts:[`DELETE /repos/{owner}/{repo}/vulnerability-alerts`],downloadArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`,{},{renamed:[`repos`,`downloadZipballArchive`]}],downloadTarballArchive:[`GET /repos/{owner}/{repo}/tarball/{ref}`],downloadZipballArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`],enableAutomatedSecurityFixes:[`PUT /repos/{owner}/{repo}/automated-security-fixes`],enableImmutableReleases:[`PUT /repos/{owner}/{repo}/immutable-releases`],enablePrivateVulnerabilityReporting:[`PUT /repos/{owner}/{repo}/private-vulnerability-reporting`],enableVulnerabilityAlerts:[`PUT /repos/{owner}/{repo}/vulnerability-alerts`],generateReleaseNotes:[`POST /repos/{owner}/{repo}/releases/generate-notes`],get:[`GET /repos/{owner}/{repo}`],getAccessRestrictions:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],getAdminBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],getAllDeploymentProtectionRules:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],getAllEnvironments:[`GET /repos/{owner}/{repo}/environments`],getAllStatusCheckContexts:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`],getAllTopics:[`GET /repos/{owner}/{repo}/topics`],getAppsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`],getAutolink:[`GET /repos/{owner}/{repo}/autolinks/{autolink_id}`],getBranch:[`GET /repos/{owner}/{repo}/branches/{branch}`],getBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection`],getBranchRules:[`GET /repos/{owner}/{repo}/rules/branches/{branch}`],getClones:[`GET /repos/{owner}/{repo}/traffic/clones`],getCodeFrequencyStats:[`GET /repos/{owner}/{repo}/stats/code_frequency`],getCollaboratorPermissionLevel:[`GET /repos/{owner}/{repo}/collaborators/{username}/permission`],getCombinedStatusForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/status`],getCommit:[`GET /repos/{owner}/{repo}/commits/{ref}`],getCommitActivityStats:[`GET /repos/{owner}/{repo}/stats/commit_activity`],getCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}`],getCommitSignatureProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],getCommunityProfileMetrics:[`GET /repos/{owner}/{repo}/community/profile`],getContent:[`GET /repos/{owner}/{repo}/contents/{path}`],getContributorsStats:[`GET /repos/{owner}/{repo}/stats/contributors`],getCustomDeploymentProtectionRule:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],getDeployKey:[`GET /repos/{owner}/{repo}/keys/{key_id}`],getDeployment:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}`],getDeploymentBranchPolicy:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],getDeploymentStatus:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}`],getEnvironment:[`GET /repos/{owner}/{repo}/environments/{environment_name}`],getLatestPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/latest`],getLatestRelease:[`GET /repos/{owner}/{repo}/releases/latest`],getOrgRuleSuite:[`GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}`],getOrgRuleSuites:[`GET /orgs/{org}/rulesets/rule-suites`],getOrgRuleset:[`GET /orgs/{org}/rulesets/{ruleset_id}`],getOrgRulesets:[`GET /orgs/{org}/rulesets`],getPages:[`GET /repos/{owner}/{repo}/pages`],getPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/{build_id}`],getPagesDeployment:[`GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}`],getPagesHealthCheck:[`GET /repos/{owner}/{repo}/pages/health`],getParticipationStats:[`GET /repos/{owner}/{repo}/stats/participation`],getPullRequestReviewProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],getPunchCardStats:[`GET /repos/{owner}/{repo}/stats/punch_card`],getReadme:[`GET /repos/{owner}/{repo}/readme`],getReadmeInDirectory:[`GET /repos/{owner}/{repo}/readme/{dir}`],getRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}`],getReleaseAsset:[`GET /repos/{owner}/{repo}/releases/assets/{asset_id}`],getReleaseByTag:[`GET /repos/{owner}/{repo}/releases/tags/{tag}`],getRepoRuleSuite:[`GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}`],getRepoRuleSuites:[`GET /repos/{owner}/{repo}/rulesets/rule-suites`],getRepoRuleset:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}`],getRepoRulesetHistory:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history`],getRepoRulesetVersion:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history/{version_id}`],getRepoRulesets:[`GET /repos/{owner}/{repo}/rulesets`],getStatusChecksProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],getTeamsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`],getTopPaths:[`GET /repos/{owner}/{repo}/traffic/popular/paths`],getTopReferrers:[`GET /repos/{owner}/{repo}/traffic/popular/referrers`],getUsersWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`],getViews:[`GET /repos/{owner}/{repo}/traffic/views`],getWebhook:[`GET /repos/{owner}/{repo}/hooks/{hook_id}`],getWebhookConfigForRepo:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}`],listActivities:[`GET /repos/{owner}/{repo}/activity`],listAttestations:[`GET /repos/{owner}/{repo}/attestations/{subject_digest}`],listAutolinks:[`GET /repos/{owner}/{repo}/autolinks`],listBranches:[`GET /repos/{owner}/{repo}/branches`],listBranchesForHeadCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head`],listCollaborators:[`GET /repos/{owner}/{repo}/collaborators`],listCommentsForCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/comments`],listCommitCommentsForRepo:[`GET /repos/{owner}/{repo}/comments`],listCommitStatusesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/statuses`],listCommits:[`GET /repos/{owner}/{repo}/commits`],listContributors:[`GET /repos/{owner}/{repo}/contributors`],listCustomDeploymentRuleIntegrations:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps`],listDeployKeys:[`GET /repos/{owner}/{repo}/keys`],listDeploymentBranchPolicies:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],listDeploymentStatuses:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],listDeployments:[`GET /repos/{owner}/{repo}/deployments`],listForAuthenticatedUser:[`GET /user/repos`],listForOrg:[`GET /orgs/{org}/repos`],listForUser:[`GET /users/{username}/repos`],listForks:[`GET /repos/{owner}/{repo}/forks`],listInvitations:[`GET /repos/{owner}/{repo}/invitations`],listInvitationsForAuthenticatedUser:[`GET /user/repository_invitations`],listLanguages:[`GET /repos/{owner}/{repo}/languages`],listPagesBuilds:[`GET /repos/{owner}/{repo}/pages/builds`],listPublic:[`GET /repositories`],listPullRequestsAssociatedWithCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls`],listReleaseAssets:[`GET /repos/{owner}/{repo}/releases/{release_id}/assets`],listReleases:[`GET /repos/{owner}/{repo}/releases`],listTags:[`GET /repos/{owner}/{repo}/tags`],listTeams:[`GET /repos/{owner}/{repo}/teams`],listWebhookDeliveries:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /repos/{owner}/{repo}/hooks`],merge:[`POST /repos/{owner}/{repo}/merges`],mergeUpstream:[`POST /repos/{owner}/{repo}/merge-upstream`],pingWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeAppAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],removeCollaborator:[`DELETE /repos/{owner}/{repo}/collaborators/{username}`],removeStatusCheckContexts:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],removeStatusCheckProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],removeTeamAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],removeUserAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],renameBranch:[`POST /repos/{owner}/{repo}/branches/{branch}/rename`],replaceAllTopics:[`PUT /repos/{owner}/{repo}/topics`],requestPagesBuild:[`POST /repos/{owner}/{repo}/pages/builds`],setAdminBranchProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],setAppAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],setStatusCheckContexts:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],setTeamAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],setUserAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],testPushWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/tests`],transfer:[`POST /repos/{owner}/{repo}/transfer`],update:[`PATCH /repos/{owner}/{repo}`],updateBranchProtection:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection`],updateCommitComment:[`PATCH /repos/{owner}/{repo}/comments/{comment_id}`],updateDeploymentBranchPolicy:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],updateInformationAboutPagesSite:[`PUT /repos/{owner}/{repo}/pages`],updateInvitation:[`PATCH /repos/{owner}/{repo}/invitations/{invitation_id}`],updateOrgRuleset:[`PUT /orgs/{org}/rulesets/{ruleset_id}`],updatePullRequestReviewProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],updateRelease:[`PATCH /repos/{owner}/{repo}/releases/{release_id}`],updateReleaseAsset:[`PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}`],updateRepoRuleset:[`PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}`],updateStatusCheckPotection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`,{},{renamed:[`repos`,`updateStatusCheckProtection`]}],updateStatusCheckProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],updateWebhook:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}`],updateWebhookConfigForRepo:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config`],uploadReleaseAsset:[`POST /repos/{owner}/{repo}/releases/{release_id}/assets{?name,label}`,{baseUrl:`https://uploads.github.com`}]},search:{code:[`GET /search/code`],commits:[`GET /search/commits`],issuesAndPullRequests:[`GET /search/issues`],labels:[`GET /search/labels`],repos:[`GET /search/repositories`],topics:[`GET /search/topics`],users:[`GET /search/users`]},secretScanning:{createPushProtectionBypass:[`POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses`],getAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],getScanHistory:[`GET /repos/{owner}/{repo}/secret-scanning/scan-history`],listAlertsForOrg:[`GET /orgs/{org}/secret-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/secret-scanning/alerts`],listLocationsForAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations`],listOrgPatternConfigs:[`GET /orgs/{org}/secret-scanning/pattern-configurations`],updateAlert:[`PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],updateOrgPatternConfigs:[`PATCH /orgs/{org}/secret-scanning/pattern-configurations`]},securityAdvisories:{createFork:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks`],createPrivateVulnerabilityReport:[`POST /repos/{owner}/{repo}/security-advisories/reports`],createRepositoryAdvisory:[`POST /repos/{owner}/{repo}/security-advisories`],createRepositoryAdvisoryCveRequest:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve`],getGlobalAdvisory:[`GET /advisories/{ghsa_id}`],getRepositoryAdvisory:[`GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}`],listGlobalAdvisories:[`GET /advisories`],listOrgRepositoryAdvisories:[`GET /orgs/{org}/security-advisories`],listRepositoryAdvisories:[`GET /repos/{owner}/{repo}/security-advisories`],updateRepositoryAdvisory:[`PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}`]},teams:{addOrUpdateMembershipForUserInOrg:[`PUT /orgs/{org}/teams/{team_slug}/memberships/{username}`],addOrUpdateRepoPermissionsInOrg:[`PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],checkPermissionsForRepoInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],create:[`POST /orgs/{org}/teams`],createDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],createDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions`],deleteDiscussionCommentInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],deleteDiscussionInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],deleteInOrg:[`DELETE /orgs/{org}/teams/{team_slug}`],getByName:[`GET /orgs/{org}/teams/{team_slug}`],getDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],getDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],getMembershipForUserInOrg:[`GET /orgs/{org}/teams/{team_slug}/memberships/{username}`],list:[`GET /orgs/{org}/teams`],listChildInOrg:[`GET /orgs/{org}/teams/{team_slug}/teams`],listDiscussionCommentsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],listDiscussionsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions`],listForAuthenticatedUser:[`GET /user/teams`],listMembersInOrg:[`GET /orgs/{org}/teams/{team_slug}/members`],listPendingInvitationsInOrg:[`GET /orgs/{org}/teams/{team_slug}/invitations`],listReposInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos`],removeMembershipForUserInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}`],removeRepoInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],updateDiscussionCommentInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],updateDiscussionInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],updateInOrg:[`PATCH /orgs/{org}/teams/{team_slug}`]},users:{addEmailForAuthenticated:[`POST /user/emails`,{},{renamed:[`users`,`addEmailForAuthenticatedUser`]}],addEmailForAuthenticatedUser:[`POST /user/emails`],addSocialAccountForAuthenticatedUser:[`POST /user/social_accounts`],block:[`PUT /user/blocks/{username}`],checkBlocked:[`GET /user/blocks/{username}`],checkFollowingForUser:[`GET /users/{username}/following/{target_user}`],checkPersonIsFollowedByAuthenticated:[`GET /user/following/{username}`],createGpgKeyForAuthenticated:[`POST /user/gpg_keys`,{},{renamed:[`users`,`createGpgKeyForAuthenticatedUser`]}],createGpgKeyForAuthenticatedUser:[`POST /user/gpg_keys`],createPublicSshKeyForAuthenticated:[`POST /user/keys`,{},{renamed:[`users`,`createPublicSshKeyForAuthenticatedUser`]}],createPublicSshKeyForAuthenticatedUser:[`POST /user/keys`],createSshSigningKeyForAuthenticatedUser:[`POST /user/ssh_signing_keys`],deleteAttestationsBulk:[`POST /users/{username}/attestations/delete-request`],deleteAttestationsById:[`DELETE /users/{username}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /users/{username}/attestations/digest/{subject_digest}`],deleteEmailForAuthenticated:[`DELETE /user/emails`,{},{renamed:[`users`,`deleteEmailForAuthenticatedUser`]}],deleteEmailForAuthenticatedUser:[`DELETE /user/emails`],deleteGpgKeyForAuthenticated:[`DELETE /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`deleteGpgKeyForAuthenticatedUser`]}],deleteGpgKeyForAuthenticatedUser:[`DELETE /user/gpg_keys/{gpg_key_id}`],deletePublicSshKeyForAuthenticated:[`DELETE /user/keys/{key_id}`,{},{renamed:[`users`,`deletePublicSshKeyForAuthenticatedUser`]}],deletePublicSshKeyForAuthenticatedUser:[`DELETE /user/keys/{key_id}`],deleteSocialAccountForAuthenticatedUser:[`DELETE /user/social_accounts`],deleteSshSigningKeyForAuthenticatedUser:[`DELETE /user/ssh_signing_keys/{ssh_signing_key_id}`],follow:[`PUT /user/following/{username}`],getAuthenticated:[`GET /user`],getById:[`GET /user/{account_id}`],getByUsername:[`GET /users/{username}`],getContextForUser:[`GET /users/{username}/hovercard`],getGpgKeyForAuthenticated:[`GET /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`getGpgKeyForAuthenticatedUser`]}],getGpgKeyForAuthenticatedUser:[`GET /user/gpg_keys/{gpg_key_id}`],getPublicSshKeyForAuthenticated:[`GET /user/keys/{key_id}`,{},{renamed:[`users`,`getPublicSshKeyForAuthenticatedUser`]}],getPublicSshKeyForAuthenticatedUser:[`GET /user/keys/{key_id}`],getSshSigningKeyForAuthenticatedUser:[`GET /user/ssh_signing_keys/{ssh_signing_key_id}`],list:[`GET /users`],listAttestations:[`GET /users/{username}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /users/{username}/attestations/bulk-list{?per_page,before,after}`],listBlockedByAuthenticated:[`GET /user/blocks`,{},{renamed:[`users`,`listBlockedByAuthenticatedUser`]}],listBlockedByAuthenticatedUser:[`GET /user/blocks`],listEmailsForAuthenticated:[`GET /user/emails`,{},{renamed:[`users`,`listEmailsForAuthenticatedUser`]}],listEmailsForAuthenticatedUser:[`GET /user/emails`],listFollowedByAuthenticated:[`GET /user/following`,{},{renamed:[`users`,`listFollowedByAuthenticatedUser`]}],listFollowedByAuthenticatedUser:[`GET /user/following`],listFollowersForAuthenticatedUser:[`GET /user/followers`],listFollowersForUser:[`GET /users/{username}/followers`],listFollowingForUser:[`GET /users/{username}/following`],listGpgKeysForAuthenticated:[`GET /user/gpg_keys`,{},{renamed:[`users`,`listGpgKeysForAuthenticatedUser`]}],listGpgKeysForAuthenticatedUser:[`GET /user/gpg_keys`],listGpgKeysForUser:[`GET /users/{username}/gpg_keys`],listPublicEmailsForAuthenticated:[`GET /user/public_emails`,{},{renamed:[`users`,`listPublicEmailsForAuthenticatedUser`]}],listPublicEmailsForAuthenticatedUser:[`GET /user/public_emails`],listPublicKeysForUser:[`GET /users/{username}/keys`],listPublicSshKeysForAuthenticated:[`GET /user/keys`,{},{renamed:[`users`,`listPublicSshKeysForAuthenticatedUser`]}],listPublicSshKeysForAuthenticatedUser:[`GET /user/keys`],listSocialAccountsForAuthenticatedUser:[`GET /user/social_accounts`],listSocialAccountsForUser:[`GET /users/{username}/social_accounts`],listSshSigningKeysForAuthenticatedUser:[`GET /user/ssh_signing_keys`],listSshSigningKeysForUser:[`GET /users/{username}/ssh_signing_keys`],setPrimaryEmailVisibilityForAuthenticated:[`PATCH /user/email/visibility`,{},{renamed:[`users`,`setPrimaryEmailVisibilityForAuthenticatedUser`]}],setPrimaryEmailVisibilityForAuthenticatedUser:[`PATCH /user/email/visibility`],unblock:[`DELETE /user/blocks/{username}`],unfollow:[`DELETE /user/following/{username}`],updateAuthenticated:[`PATCH /user`]}};const Ko=new Map;for(let[e,t]of Object.entries(Go))for(let[n,r]of Object.entries(t)){let[t,i,a]=r,[o,s]=t.split(/ /),c=Object.assign({method:o,url:s},i);Ko.has(e)||Ko.set(e,new Map),Ko.get(e).set(n,{scope:e,methodName:n,endpointDefaults:c,decorations:a})}const qo={has({scope:e},t){return Ko.get(e).has(t)},getOwnPropertyDescriptor(e,t){return{value:this.get(e,t),configurable:!0,writable:!0,enumerable:!0}},defineProperty(e,t,n){return Object.defineProperty(e.cache,t,n),!0},deleteProperty(e,t){return delete e.cache[t],!0},ownKeys({scope:e}){return[...Ko.get(e).keys()]},set(e,t,n){return e.cache[t]=n},get({octokit:e,scope:t,cache:n},r){if(n[r])return n[r];let i=Ko.get(t).get(r);if(!i)return;let{endpointDefaults:a,decorations:o}=i;return n[r]=o?Yo(e,t,r,a,o):e.request.defaults(a),n[r]}};function Jo(e){let t={};for(let n of Ko.keys())t[n]=new Proxy({octokit:e,scope:n,cache:{}},qo);return t}function Yo(e,t,n,r,i){let a=e.request.defaults(r);function o(...r){let o=a.endpoint.merge(...r);if(i.mapToData)return o=Object.assign({},o,{data:o[i.mapToData],[i.mapToData]:void 0}),a(o);if(i.renamed){let[r,a]=i.renamed;e.log.warn(`octokit.${t}.${n}() has been renamed to octokit.${r}.${a}()`)}if(i.deprecated&&e.log.warn(i.deprecated),i.renamedParameters){let o=a.endpoint.merge(...r);for(let[r,a]of Object.entries(i.renamedParameters))r in o&&(e.log.warn(`"${r}" parameter is deprecated for "octokit.${t}.${n}()". Use "${a}" instead`),a in o||(o[a]=o[r]),delete o[r]);return a(o)}return a(...r)}return Object.assign(o,a)}function Xo(e){let t=Jo(e);return{...t,rest:t}}Xo.VERSION=`17.0.0`;const Zo=Lo.plugin(Ro,Xo,Wo).defaults({userAgent:`octokit-rest.js/22.0.1`});function Qo(e){let t=e?.cause;if(typeof t?.code==`string`)return t.code;let n=e?.code;return typeof n==`string`?n:void 0}const $o=[`CERT`,`SELF_SIGNED`,`SIGNATURE`,`ISSUER`];function es(e,t){let n=Qo(e);if(n&&$o.some(e=>n.includes(e)))return{kind:`tls`,message:`Could not verify the TLS certificate for ${t}. If this is a GitHub Enterprise Server with a self-signed or internal-CA certificate, add its CA to your system trust store (macOS Keychain, Windows certificate store, or your distro's ca-certificates).`};let r=e?.status;return r===401?{kind:`token`,message:`Token invalid for ${t}`}:r===403?{kind:`token`,message:`Token rejected by ${t} — check that it has the repo and read:user scopes, and that it is authorized for SSO if the organization requires it`}:n?{kind:`network`,message:`Could not reach ${t} (${n})`}:{kind:`token`,message:`Authentication failed for ${t}`}}async function ts(){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf8`).trim()}async function ns(e,t,n){let{host:r,json:i}=e,a=await(n??(()=>ro({message:`Enter PAT for ${r}:`})))();a||(process.stderr.write(`No token provided
-`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new Zo({auth:a,...o?{baseUrl:o}:{}}),c=`unknown`,l,u;try{let{data:e}=await s.users.getAuthenticated();c=e.login,l=e.name??void 0,u=e.email??void 0}catch(e){let t=es(e,r).message;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}try{await t.set(r,c,a,{gitProtocol:`https`,name:l,email:u})}catch(e){let t=`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}i?process.stdout.write(`${JSON.stringify({type:`complete`,host:r,login:c})}\n`):process.stderr.write(`✓ PAT stored for ${c} on ${r}\n`)}function rs(e){return new M(`pat`).description(`Store a Personal Access Token`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=Za(t.host),r=t.tokenStdin?ts:void 0;await ns({host:n,json:t.json},await e(),r)})}async function is(e,t,n=_i){let r=n(e);return r.available&&r.token?r.token:(await t.get(e))?.token??null}async function as(e,t){let{host:n,json:r}=e,i=await is(n,t);i??(process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=new Zo({auth:i,...a?{baseUrl:a}:{}}),s=[];for await(let e of o.paginate.iterator(o.repos.listForAuthenticatedUser,{per_page:100,sort:`updated`}))for(let t of e.data)s.push({full_name:t.full_name,clone_url:t.clone_url,private:t.private});if(r)process.stdout.write(`${JSON.stringify({type:`repos`,host:n,repos:s})}\n`);else for(let e of s)process.stdout.write(`${e.full_name}  ${e.clone_url}\n`)}function os(e){return new M(`repos`).description(`List accessible repositories`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Za(t.host);await as({...t,host:n},await e())})}async function ss(e){let{host:t}=e,{touched:n}=await ti(t);if(n.length===0){process.stderr.write(`Not signed in to ${t}\n`);return}process.stderr.write(`✓ Signed out from ${t}\n`),n.includes(`keychain`)&&process.stderr.write(`  cleared from OS keychain
-`),n.includes(`file`)&&process.stderr.write(`  cleared from ${fi()}\n`)}function cs(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=Qa(e.host);await ss({...e,host:t})})}async function ls(e,t,n=_i){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function us(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function ds(e,t){let n=await t.get(e);return n==null?{authenticated:!1}:{authenticated:!1,unverified:!0,login:n.login}}function fs(e,t){return e.unverified===!0?`Token stored for ${e.login} on ${t}. ${t} is not a GitHub host, so OpenKnowledge does not verify it; git uses this credential to push and pull.`:`No token stored for ${t}. Store one with:\n\n${Ua(t)}`}async function ps(e,t){let{host:n,json:r}=e,i=await ds(n,t);r?process.stdout.write(`${JSON.stringify(us(n,t.backend,i))}\n`):process.stderr.write(`${fs(i,n)}\n`),process.exit(i.unverified===!0?0:1)}async function ms(e,t){let{host:n,json:r}=e,i=t.backend,a=await ls(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(us(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new Zo({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(us(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=es(e,n);r?process.stdout.write(`${JSON.stringify(us(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function hs(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`Git hostname (default: the origin host, or github.com with no origin; required when origin has no hostname, such as a local path). A non-GitHub host reports its stored token without verifying it`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Xa(t.host);if(n.kind===`other`){await ps({...t,host:n.host},await e());return}await ms({...t,host:n.host},await e())})}function gs(e,t){return t?process.stdout.write(`${JSON.stringify(e)}\n`):e.type===`error`?process.stderr.write(`${e.message}\n`):process.stderr.write(`✓ Token stored for ${e.login} on ${e.host}\n`),e}async function _s(e,t,n){let{json:r}=e,i=e.host?.trim()??``;if(!i)return gs({type:`error`,message:`A host is required. Pass --host <host>.`},r);if(!me(i))return gs({type:`error`,message:`${i} is not a host name. Pass the host git connects to, with an optional :port and no scheme or path, for example git.example.com or git.example.com:8443.`},r);let a=ue(i);if(Ka(a))return gs({type:`error`,message:`${a} is a GitHub host. Use ok auth pat --host ${a}, which checks the token with GitHub before storing it.`},r);let o=e.username?.trim()??``;if(!o)return gs({type:`error`,message:`A username is required. Pass --username <username>.`},r);let s=await(n??(()=>ro({message:`Enter token:`})))();if(!s)return gs({type:`error`,message:`No token provided`},r);try{await t.set(a,o,s,{gitProtocol:`https`})}catch(e){return gs({type:`error`,message:`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`},r)}return gs({type:`complete`,host:a,login:o},r)}function vs(e){return new M(`token`).description(`Store an access token for any git host`).option(`--host <host>`,`Git host to store the token for`).option(`--username <username>`,`Username git sends with the token (Bitbucket: x-bitbucket-api-token-auth for an API token, x-token-auth for a repository or workspace access token; oauth2 for GitLab; your Gitea username; any non-empty value for Azure DevOps)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=t.tokenStdin?ts:void 0;(await _s({host:t.host,username:t.username,json:t.json},await e(),n)).type===`error`&&process.exit(1)})}function ys(e){let t=new M(`auth`);t.description(`Git host authentication management`);let n=e=>di(void 0,e);return t.addCommand(to(n)),t.addCommand(hs(n)),t.addCommand(os(n)),t.addCommand(cs()),t.addCommand(rs(n)),t.addCommand(vs(n)),t.addCommand(Ta(n,e)),t}function bs(e,t=Xi(),n=ei){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[z(e)])}catch{}}function xs(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await yr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:xr(),logger:ui()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&bs(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Ss(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function Cs(e){let t=e.inspect??(()=>tr(e.lockDir,`server`,{isAlive:Ge})),n=e.unlink??(e=>qi(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Ss(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function ws(e){return new M(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),Cs({lockDir:A(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Ts(e){return`!${e.map(je).join(` `)} auth git-credential`}function Es(e){return`credential.helper=${Ts(e)}`}function Ds(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Ts(e)}`]}async function Os(e,t,n={},r=_i){let i=[`credential.helper=`,Es(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=(n.credentialHost===void 0?null:await t.get(n.credentialHost))??await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function ks(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const As=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function js(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of As)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ms(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ns(e,t=process.env){let n=Ms(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Ps(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Fs(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Is=g;async function Ls(e){try{return await e.clone(Fs(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Is(t))return e.onFallback(e.branch),await e.clone(Fs(null)),{fellBack:!0};throw t}}function Rs(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function zs(e,t,n){return e===`https`&&t===`github.com`&&n}function Bs(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Vs(e){return Bs(e,{url:`The clone URL`,operation:`the clone`})}async function Hs(e,t,n={}){let r=sr(e);if(!r)throw Error(`Invalid git URL: ${qs(e)}`);if(e.trim().startsWith(`http://`))return{auth:{tier:`none`,gitConfig:[]}};let i=Xe(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=h(e)??void 0,o=await Os(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login,credentialHost:a},n._detectGhFn),s=i.login!==void 0&&o.tier===`A`&&!Mt(o.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:o,...s===void 0?{}:{declaredMiss:s}}}function Us(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Ws(e,t,n,r=process.cwd()){let i=sr(e);if(!i)throw Error(`Invalid git URL: ${qs(e)}`);let a=Us(e,i),o=t.dir?H(r,t.dir):H(r,i.name),s=U(o);if(s&&Ui(o).length>0)throw Error(`Target directory is not empty: ${o}`);Ft();let c=Qr(),l=i.protocol===`https`&&i.hostname===`github.com`&&await ks(i.owner,i.name),u=zs(i.protocol,i.hostname,l)?{auth:{tier:`none`,gitConfig:[]}}:await Hs(a,c,{selfCliArgs:Ps(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),d=u.auth;if(t.onAuthResolved?.({tier:d.tier,login:d.relayToken?.login}),!t.json){let e=Vs(u.declaredMiss);e&&process.stderr.write(e)}let f=Ns(d),p=Rs(r,d.gitConfig),m=k(p).env(f),h=-1;m.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
-`)){let n=js(e);n&&n.pct!==h&&(h=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Ls({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>m.clone(a,o,[...e,`--no-checkout`]),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await Rt(g,`HEAD`,f)}catch(e){throw Ki(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-Bz3UZZZO.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Gs(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Gs(e){let t=Cr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Ks=/^[A-Za-z0-9._/:@-]+$/;function qs(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Ze(i)!==void 0?`${t}${i}@`:t})}function Js(e){return Ks.test(e)?e:je(e)}function Ys(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Js(t)}`:``;return`ok clone ${Js(e)}${n}`}function Xs(e){let t=Pe(e.error);if(t.kind!==`auth`)return null;let n=qs(e.url);if(pe(t)){let t=Ys(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
-`)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Ys(n,e.branch)}`].join(`
-`)}function Zs(e){if(!(e.error instanceof Kt)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=qs(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${Ys(t,e.branch)}`].join(`
-`)}function Qs(e){let t=e.error instanceof dn?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:Sn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof dn?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Xs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??Zs({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function $s(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function ec(e){let t=Pe(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=sr(e.url);t&&(r=await(e.resolvePrincipal??(e=>$s(Qr(),e)))(t.hostname))}}Qs({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function tc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Ws(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BeggNNGz.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Ct||e instanceof Un){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await ec({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var nc=Fe();const rc=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...y.map(e=>e.path)];function ic(e){return Dn({absPath:Xt(`project-local`,e),sideline:!1}).diagnostics}function ac(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),i=e.loadConfigFn??Si;try{let{sources:n,diagnostics:a,sidelined:o}=i(e.cwd),s=(e.readProjectLocalFn??ic)(e.cwd??process.cwd()),c=[...a,...s],l=n.length===0?`defaults only`:n.join(`, `),u=c.filter(e=>e.code!==`REMOVED_KEY`);u.length===0?t(`✓ Configuration valid (sources: ${l})`):t(`! Configuration loaded, but ${u.length} config layer(s) had issues (sources: ${l})`);for(let e of c)t(``),t(r(e));for(let{from:e,to:n}of o)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function oc(e){let t=G(e,`utf-8`),n=(0,nc.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of rc)n.hasIn(e)&&r.push(e.join(`.`));return r}function sc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function cc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=sc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function lc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function uc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),i=e.scope??`all`,a=e.dryRun??!1,o=e.cwd??process.cwd(),s=e.writeConfigPatchFn??en,c=lc(i).map(t=>({scope:t,absPath:Xt(t,o,e.homedirOverride)})),l=[],u=!0;for(let{scope:t,absPath:n}of c){if(!U(n)){l.push({path:n,scope:t,found:[],removed:[]});continue}let i;try{i=oc(n)}catch(e){let r=e instanceof Error?e.message:String(e);l.push({path:n,scope:t,found:[],removed:[],error:r}),u=!1;continue}if(i.length===0||a){l.push({path:n,scope:t,found:i,removed:[]});continue}let c=await s({cwd:o,scope:t,patch:cc(rc.filter(e=>i.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!c.ok){l.push({path:n,scope:t,found:i,removed:[],error:r(c.error)}),u=!1;continue}l.push({path:n,scope:t,found:i,removed:i})}for(let e of l)e.error&&n(`✗ ${e.path}: ${e.error}`);let d=l.some(e=>e.error!==void 0),f=l.reduce((e,t)=>e+t.found.length,0);if(f===0&&!d)t(`No deprecated fields found.`);else if(f>0)for(let e of l)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(a?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:l,ok:u}}const dc=`project | project-local | user | all`,fc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function pc(e){return e!==`config`}function mc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{ac({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${dc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!fc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${dc}`),process.exitCode=2;return}(await uc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const hc=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],gc=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function _c(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(gc),t.join(`
-`)}function vc(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ${u(`skill-state.yml`)}`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
-`)}function yc(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),...hc,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
-`)}function bc(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function xc(e={}){let t=await An(e);return t.status===`failed`?{...t,message:bc(t),exitCode:1}:t.status===`skip-current`?{...t,message:vc(t),exitCode:0}:t.status===`installed`?{...t,message:yc(t),exitCode:0}:{...t,message:_c(t),exitCode:0}}function Sc(){return new M(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await xc({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function Cc(e,t){let n=ra({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function wc(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Gr(e)} readProcessStart=${t}`}function Tc(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Vr(n,r),t.onNativeFailure?.({kind:e,reason:Kr(n,r)})};try{if(n===`win32`){let n=!1,a=Ur(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:wc(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Gr(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Di,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Ec(e,t={}){let n=t.probe??lt(),r=t.isAlive??(e=>Ge(e,n(e))),i=t.isAlive??kn,a=tr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(ui()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let d=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,f=d!==null&&d.status!==`unverified-owner`;if(d!==null&&!t.preserveProjectState)throw l(or(d));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:f?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>wn(n)))(),u=await Qi(e).catch(()=>H(e)),d=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(d.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${d.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:f?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Tc)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ${u(`logs`)}. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let p=await fr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),m=p.failed.map(e=>({pid:e.target.pid,error:e.error})),h=new Set(p.stopped.map(e=>e.pid)),g=t.timeoutMs??1e4,_=performance.now()+g;for(;h.size>0;){for(let e of h)i(e)||h.delete(e);if(h.size===0)break;let e=_-performance.now();if(e<=0)break;await na(Math.min(t.pollIntervalMs??50,e))}for(let e of h)r(e)||h.delete(e);for(let e of h)m.push({pid:e,error:`still running ${g}ms after SIGTERM`});return{stopped:p.stopped.length-h.size,failed:m}}function Dc(e){return e?Ne.filter(e=>e!==Oe):[...Ne]}function Oc(e){return Dc(e).map(e=>`~/.ok/${e}`).join(`, `)}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function kc(e){return Pi===`/`?e:e.split(Pi).join(`/`)}function Ac(e,t,n=`This project`){let r=[],i=[A(e)],a=B(e,`.ok`);wi(B(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of Ar){let a=Lr[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(kc(V(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${kc(V(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Ir(e),...Fr(e),...Le]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:B(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:sn(e)})}catch{}let c=B(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function jc(e,t){return{scope:`deinit`,ops:Ac(e,t)}}function Mc(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(B(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + ${b}`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (${Ue})`}),c.push(...Pc(a,t));for(let e of Ar){let n=Lr[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of ir(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...Ac(e,t,`Project: ${ji(e)}`));c.push(...Fc(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e));let{userHomeDirName:l}=ie();return l===`.ok`?c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills; keeping ${Oc(!0)}, shared by every channel)`:`Remove ~/.ok (keeping ${Oc(!1)}, shared by every channel)`,path:Mn(t),preserve:Dc(s)}):(c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/${l}`:`Remove ~/${l} (keeping ~/.ok/${Oe}, shared by every channel)`,path:Mn(t)}),s&&c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:`Remove ~/.ok/${Oe} (user-authored skills, shared by every channel)`,path:B(t,`.ok`,Oe)})),{scope:`uninstall`,ops:c}}function Nc(e){return[B(e,`.zshrc`),B(e,`.bash_profile`),B(e,`.config`,`fish`,`conf.d`,ar())]}function Pc(e,t){let n=[],r=new Set([...Nc(t),...e?.rcFiles??[]]);for(let e of r)wi(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Fc(e,t,n){let r={home:e,platformName:t,env:n},i=ur(r),a=Qn(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`&&s()===`stable`){let t=ur({...r,productName:Jn});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(a,e)}`,path:a}),o}async function Ic(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??ti,r=t.clearEmbeddingsKey??gn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[H(e.lockDir)]:[])),a=lt(),o=t.scanProcesses??(()=>wn(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Ec(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(H(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Rc(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=H(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(H(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(H(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Lc(e,t=_r){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Rc(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "${ie().keyringService}"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=wi(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${zc(t.reason)}: ${e.rcFile}`};let n;try{n=G(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${zc(Mr(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=dr(n);return i?a&&!t.symlink?(Ki(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(an(t.path,r,{mode:Nr(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return vr(e.path,e.target)?(qi(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=oi(Lr[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:zc(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Ti(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${B(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:zc(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=qr(e.projectRoot,Hc(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${B(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Bc(e)}}function zc(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Wr(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Bc(e){if(e.requireOurState&&!lr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&kr(e.path,e.containWithin);let t;try{t=Vi(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}return t?t.isSymbolicLink()?(qi(e.path),{op:e,status:`removed`}):e.preserve&&e.preserve.length>0?{op:e,status:Vc(e.path,e.preserve)?`removed`:`not-present`}:(Ki(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}):{op:e,status:`not-present`}}function Vc(e,t){let n=!1;for(let r of Ui(e)){if(t.includes(r))continue;let i=B(e,r),a=t.flatMap(e=>e.startsWith(`${r}/`)?[e.slice(r.length+1)]:[]);if(a.length>0&&Vi(i).isDirectory()){Vc(i,a)&&(n=!0);continue}Ki(i,{recursive:!0,force:!0}),n=!0}return n}function Hc(e){let t=new Set([B(e,`.claude`,`launch.json`)]);for(let n of Ar){let r=Lr[n].projectConfigPath?.(e);r&&t.add(r)}return Ir(e).filter(n=>{let r=B(e,n);if(!t.has(r))return!0;try{return Vi(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Uc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Wc(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of Uc(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
-`)}function Gc(e){return e.replaceAll(`
+`)}var _o=class extends Error{constructor(e,t,n){super(go(n)),this.request=e,this.headers=t,this.response=n,this.errors=n.errors,this.data=n.data,Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)}name=`GraphqlResponseError`;errors;data},vo=[`method`,`baseUrl`,`url`,`headers`,`request`,`query`,`mediaType`,`operationName`],yo=[`query`,`method`,`url`],bo=/\/api\/v3\/?$/;function xo(e,t,n){if(n){if(typeof t==`string`&&`query`in n)return Promise.reject(Error(`[@octokit/graphql] "query" cannot be used as variable name`));for(let e in n)if(yo.includes(e))return Promise.reject(Error(`[@octokit/graphql] "${e}" cannot be used as variable name`))}let r=typeof t==`string`?Object.assign({query:t},n):t,i=Object.keys(r).reduce((e,t)=>vo.includes(t)?(e[t]=r[t],e):(e.variables||={},e.variables[t]=r[t],e),{}),a=r.baseUrl||e.endpoint.DEFAULTS.baseUrl;return bo.test(a)&&(i.url=a.replace(bo,`/api/graphql`)),e(i).then(e=>{if(e.data.errors){let t={};for(let n of Object.keys(e.headers))t[n]=e.headers[n];throw new _o(i,t,e.data)}return e.data.data})}function So(e,t){let n=e.defaults(t);return Object.assign((e,t)=>xo(n,e,t),{defaults:So.bind(null,n),endpoint:n.endpoint})}So(gi,{headers:{"user-agent":`octokit-graphql.js/${ho} ${hi()}`},method:`POST`,url:`/graphql`});function Co(e){return So(e,{method:`POST`,url:`/graphql`})}var wo=`(?:[a-zA-Z0-9_-]+)`,To=`\\.`,Eo=RegExp(`^${wo}${To}${wo}${To}${wo}$`),Do=Eo.test.bind(Eo);async function Oo(e){let t=Do(e),n=e.startsWith(`v1.`)||e.startsWith(`ghs_`),r=e.startsWith(`ghu_`);return{type:`token`,token:e,tokenType:t?`app`:n?`installation`:r?`user-to-server`:`oauth`}}function ko(e){return e.split(/\./).length===3?`bearer ${e}`:`token ${e}`}async function Ao(e,t,n,r){let i=t.endpoint.merge(n,r);return i.headers.authorization=ko(e),t(i)}var jo=function(e){if(!e)throw Error(`[@octokit/auth-token] No token passed to createTokenAuth`);if(typeof e!=`string`)throw Error(`[@octokit/auth-token] Token passed to createTokenAuth is not a string`);return e=e.replace(/^(token|bearer) +/i,``),Object.assign(Oo.bind(null,e),{hook:Ao.bind(null,e)})};const Mo=`7.0.6`,No=()=>{},Po=console.warn.bind(console),Fo=console.error.bind(console);function Io(e={}){return typeof e.debug!=`function`&&(e.debug=No),typeof e.info!=`function`&&(e.info=No),typeof e.warn!=`function`&&(e.warn=Po),typeof e.error!=`function`&&(e.error=Fo),e}const Lo=`octokit-core.js/${Mo} ${hi()}`;var Ro=class{static VERSION=Mo;static defaults(e){return class extends this{constructor(...t){let n=t[0]||{};if(typeof e==`function`){super(e(n));return}super(Object.assign({},e,n,n.userAgent&&e.userAgent?{userAgent:`${n.userAgent} ${e.userAgent}`}:null))}}}static plugins=[];static plugin(...e){let t=this.plugins;return class extends this{static plugins=t.concat(e.filter(e=>!t.includes(e)))}}constructor(e={}){let t=new mo.Collection,n={baseUrl:gi.endpoint.DEFAULTS.baseUrl,headers:{},request:Object.assign({},e.request,{hook:t.bind(null,`request`)}),mediaType:{previews:[],format:``}};if(n.headers[`user-agent`]=e.userAgent?`${e.userAgent} ${Lo}`:Lo,e.baseUrl&&(n.baseUrl=e.baseUrl),e.previews&&(n.mediaType.previews=e.previews),e.timeZone&&(n.headers[`time-zone`]=e.timeZone),this.request=gi.defaults(n),this.graphql=Co(this.request).defaults(n),this.log=Io(e.log),this.hook=t,e.authStrategy){let{authStrategy:n,...r}=e,i=n(Object.assign({request:this.request,log:this.log,octokit:this,octokitOptions:r},e.auth));t.wrap(`request`,i.hook),this.auth=i}else if(!e.auth)this.auth=async()=>({type:`unauthenticated`});else{let n=jo(e.auth);t.wrap(`request`,n.hook),this.auth=n}let r=this.constructor;for(let t=0;t<r.plugins.length;++t)Object.assign(this,r.plugins[t](this,e))}request;graphql;log;hook;auth};function zo(e){e.hook.wrap(`request`,(t,n)=>{e.log.debug(`request`,n);let r=Date.now(),i=e.request.endpoint.parse(n),a=i.url.replace(n.baseUrl,``);return t(n).then(t=>{let n=t.headers[`x-github-request-id`];return e.log.info(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t}).catch(t=>{let n=t.response?.headers[`x-github-request-id`]||`UNKNOWN`;throw e.log.error(`${i.method} ${a} - ${t.status} with id ${n} in ${Date.now()-r}ms`),t})})}zo.VERSION=`6.0.0`;var Bo=`0.0.0-development`;function Vo(e){if(!e.data)return{...e,data:[]};if(!((`total_count`in e.data||`total_commits`in e.data)&&!(`url`in e.data)))return e;let t=e.data.incomplete_results,n=e.data.repository_selection,r=e.data.total_count,i=e.data.total_commits;delete e.data.incomplete_results,delete e.data.repository_selection,delete e.data.total_count,delete e.data.total_commits;let a=Object.keys(e.data)[0];return e.data=e.data[a],t!==void 0&&(e.data.incomplete_results=t),n!==void 0&&(e.data.repository_selection=n),e.data.total_count=r,e.data.total_commits=i,e}function Ho(e,t,n){let r=typeof t==`function`?t.endpoint(n):e.request.endpoint(t,n),i=typeof t==`function`?t:e.request,a=r.method,o=r.headers,s=r.url;return{[Symbol.asyncIterator]:()=>({async next(){if(!s)return{done:!0};try{let e=Vo(await i({method:a,url:s,headers:o}));if(s=((e.headers.link||``).match(/<([^<>]+)>;\s*rel="next"/)||[])[1],!s&&`total_commits`in e.data){let t=new URL(e.url),n=t.searchParams,r=parseInt(n.get(`page`)||`1`,10);r*parseInt(n.get(`per_page`)||`250`,10)<e.data.total_commits&&(n.set(`page`,String(r+1)),s=t.toString())}return{value:e}}catch(e){if(e.status!==409)throw e;return s=``,{value:{status:200,headers:{},data:[]}}}}})}}function Uo(e,t,n,r){return typeof n==`function`&&(r=n,n=void 0),Wo(e,[],Ho(e,t,n)[Symbol.asyncIterator](),r)}function Wo(e,t,n,r){return n.next().then(i=>{if(i.done)return t;let a=!1;function o(){a=!0}return t=t.concat(r?r(i.value,o):i.value.data),a?t:Wo(e,t,n,r)})}Object.assign(Uo,{iterator:Ho});function Go(e){return{paginate:Object.assign(Uo.bind(null,e),{iterator:Ho.bind(null,e)})}}Go.VERSION=Bo;var Ko={actions:{addCustomLabelsToSelfHostedRunnerForOrg:[`POST /orgs/{org}/actions/runners/{runner_id}/labels`],addCustomLabelsToSelfHostedRunnerForRepo:[`POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],addRepoAccessToSelfHostedRunnerGroupInOrg:[`PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],approveWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/approve`],cancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel`],createEnvironmentVariable:[`POST /repos/{owner}/{repo}/environments/{environment_name}/variables`],createHostedRunnerForOrg:[`POST /orgs/{org}/actions/hosted-runners`],createOrUpdateEnvironmentSecret:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}`],createOrgVariable:[`POST /orgs/{org}/actions/variables`],createRegistrationTokenForOrg:[`POST /orgs/{org}/actions/runners/registration-token`],createRegistrationTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/registration-token`],createRemoveTokenForOrg:[`POST /orgs/{org}/actions/runners/remove-token`],createRemoveTokenForRepo:[`POST /repos/{owner}/{repo}/actions/runners/remove-token`],createRepoVariable:[`POST /repos/{owner}/{repo}/actions/variables`],createWorkflowDispatch:[`POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches`],deleteActionsCacheById:[`DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}`],deleteActionsCacheByKey:[`DELETE /repos/{owner}/{repo}/actions/caches{?key,ref}`],deleteArtifact:[`DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],deleteCustomImageFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],deleteCustomImageVersionFromOrg:[`DELETE /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],deleteEnvironmentSecret:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],deleteEnvironmentVariable:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],deleteHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],deleteOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}`],deleteOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}`],deleteRepoVariable:[`DELETE /repos/{owner}/{repo}/actions/variables/{name}`],deleteSelfHostedRunnerFromOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}`],deleteSelfHostedRunnerFromRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}`],deleteWorkflowRun:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}`],deleteWorkflowRunLogs:[`DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],disableSelectedRepositoryGithubActionsOrganization:[`DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}`],disableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable`],downloadArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}`],downloadJobLogsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs`],downloadWorkflowRunAttemptLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs`],downloadWorkflowRunLogs:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs`],enableSelectedRepositoryGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories/{repository_id}`],enableWorkflow:[`PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable`],forceCancelWorkflowRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel`],generateRunnerJitconfigForOrg:[`POST /orgs/{org}/actions/runners/generate-jitconfig`],generateRunnerJitconfigForRepo:[`POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig`],getActionsCacheList:[`GET /repos/{owner}/{repo}/actions/caches`],getActionsCacheUsage:[`GET /repos/{owner}/{repo}/actions/cache/usage`],getActionsCacheUsageByRepoForOrg:[`GET /orgs/{org}/actions/cache/usage-by-repository`],getActionsCacheUsageForOrg:[`GET /orgs/{org}/actions/cache/usage`],getAllowedActionsOrganization:[`GET /orgs/{org}/actions/permissions/selected-actions`],getAllowedActionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/selected-actions`],getArtifact:[`GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}`],getCustomImageForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}`],getCustomImageVersionForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions/{version}`],getCustomOidcSubClaimForRepo:[`GET /repos/{owner}/{repo}/actions/oidc/customization/sub`],getEnvironmentPublicKey:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key`],getEnvironmentSecret:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}`],getEnvironmentVariable:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],getGithubActionsDefaultWorkflowPermissionsOrganization:[`GET /orgs/{org}/actions/permissions/workflow`],getGithubActionsDefaultWorkflowPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions/workflow`],getGithubActionsPermissionsOrganization:[`GET /orgs/{org}/actions/permissions`],getGithubActionsPermissionsRepository:[`GET /repos/{owner}/{repo}/actions/permissions`],getHostedRunnerForOrg:[`GET /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],getHostedRunnersGithubOwnedImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/github-owned`],getHostedRunnersLimitsForOrg:[`GET /orgs/{org}/actions/hosted-runners/limits`],getHostedRunnersMachineSpecsForOrg:[`GET /orgs/{org}/actions/hosted-runners/machine-sizes`],getHostedRunnersPartnerImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/partner`],getHostedRunnersPlatformsForOrg:[`GET /orgs/{org}/actions/hosted-runners/platforms`],getJobForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/jobs/{job_id}`],getOrgPublicKey:[`GET /orgs/{org}/actions/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}`],getOrgVariable:[`GET /orgs/{org}/actions/variables/{name}`],getPendingDeploymentsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],getRepoPermissions:[`GET /repos/{owner}/{repo}/actions/permissions`,{},{renamed:[`actions`,`getGithubActionsPermissionsRepository`]}],getRepoPublicKey:[`GET /repos/{owner}/{repo}/actions/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/actions/secrets/{secret_name}`],getRepoVariable:[`GET /repos/{owner}/{repo}/actions/variables/{name}`],getReviewsForRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals`],getSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}`],getSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}`],getWorkflow:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}`],getWorkflowAccessToRepository:[`GET /repos/{owner}/{repo}/actions/permissions/access`],getWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}`],getWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}`],getWorkflowRunUsage:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/timing`],getWorkflowUsage:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timing`],listArtifactsForRepo:[`GET /repos/{owner}/{repo}/actions/artifacts`],listCustomImageVersionsForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom/{image_definition_id}/versions`],listCustomImagesForOrg:[`GET /orgs/{org}/actions/hosted-runners/images/custom`],listEnvironmentSecrets:[`GET /repos/{owner}/{repo}/environments/{environment_name}/secrets`],listEnvironmentVariables:[`GET /repos/{owner}/{repo}/environments/{environment_name}/variables`],listGithubHostedRunnersInGroupForOrg:[`GET /orgs/{org}/actions/runner-groups/{runner_group_id}/hosted-runners`],listHostedRunnersForOrg:[`GET /orgs/{org}/actions/hosted-runners`],listJobsForWorkflowRun:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs`],listJobsForWorkflowRunAttempt:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs`],listLabelsForSelfHostedRunnerForOrg:[`GET /orgs/{org}/actions/runners/{runner_id}/labels`],listLabelsForSelfHostedRunnerForRepo:[`GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],listOrgSecrets:[`GET /orgs/{org}/actions/secrets`],listOrgVariables:[`GET /orgs/{org}/actions/variables`],listRepoOrganizationSecrets:[`GET /repos/{owner}/{repo}/actions/organization-secrets`],listRepoOrganizationVariables:[`GET /repos/{owner}/{repo}/actions/organization-variables`],listRepoSecrets:[`GET /repos/{owner}/{repo}/actions/secrets`],listRepoVariables:[`GET /repos/{owner}/{repo}/actions/variables`],listRepoWorkflows:[`GET /repos/{owner}/{repo}/actions/workflows`],listRunnerApplicationsForOrg:[`GET /orgs/{org}/actions/runners/downloads`],listRunnerApplicationsForRepo:[`GET /repos/{owner}/{repo}/actions/runners/downloads`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/actions/secrets/{secret_name}/repositories`],listSelectedReposForOrgVariable:[`GET /orgs/{org}/actions/variables/{name}/repositories`],listSelectedRepositoriesEnabledGithubActionsOrganization:[`GET /orgs/{org}/actions/permissions/repositories`],listSelfHostedRunnersForOrg:[`GET /orgs/{org}/actions/runners`],listSelfHostedRunnersForRepo:[`GET /repos/{owner}/{repo}/actions/runners`],listWorkflowRunArtifacts:[`GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts`],listWorkflowRuns:[`GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs`],listWorkflowRunsForRepo:[`GET /repos/{owner}/{repo}/actions/runs`],reRunJobForWorkflowRun:[`POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun`],reRunWorkflow:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun`],reRunWorkflowFailedJobs:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs`],removeAllCustomLabelsFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels`],removeAllCustomLabelsFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],removeCustomLabelFromSelfHostedRunnerForOrg:[`DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}`],removeCustomLabelFromSelfHostedRunnerForRepo:[`DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgVariable:[`DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}`],reviewCustomGatesForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/deployment_protection_rule`],reviewPendingDeploymentsForRun:[`POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments`],setAllowedActionsOrganization:[`PUT /orgs/{org}/actions/permissions/selected-actions`],setAllowedActionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/selected-actions`],setCustomLabelsForSelfHostedRunnerForOrg:[`PUT /orgs/{org}/actions/runners/{runner_id}/labels`],setCustomLabelsForSelfHostedRunnerForRepo:[`PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels`],setCustomOidcSubClaimForRepo:[`PUT /repos/{owner}/{repo}/actions/oidc/customization/sub`],setGithubActionsDefaultWorkflowPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions/workflow`],setGithubActionsDefaultWorkflowPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/workflow`],setGithubActionsPermissionsOrganization:[`PUT /orgs/{org}/actions/permissions`],setGithubActionsPermissionsRepository:[`PUT /repos/{owner}/{repo}/actions/permissions`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/actions/secrets/{secret_name}/repositories`],setSelectedReposForOrgVariable:[`PUT /orgs/{org}/actions/variables/{name}/repositories`],setSelectedRepositoriesEnabledGithubActionsOrganization:[`PUT /orgs/{org}/actions/permissions/repositories`],setWorkflowAccessToRepository:[`PUT /repos/{owner}/{repo}/actions/permissions/access`],updateEnvironmentVariable:[`PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}`],updateHostedRunnerForOrg:[`PATCH /orgs/{org}/actions/hosted-runners/{hosted_runner_id}`],updateOrgVariable:[`PATCH /orgs/{org}/actions/variables/{name}`],updateRepoVariable:[`PATCH /repos/{owner}/{repo}/actions/variables/{name}`]},activity:{checkRepoIsStarredByAuthenticatedUser:[`GET /user/starred/{owner}/{repo}`],deleteRepoSubscription:[`DELETE /repos/{owner}/{repo}/subscription`],deleteThreadSubscription:[`DELETE /notifications/threads/{thread_id}/subscription`],getFeeds:[`GET /feeds`],getRepoSubscription:[`GET /repos/{owner}/{repo}/subscription`],getThread:[`GET /notifications/threads/{thread_id}`],getThreadSubscriptionForAuthenticatedUser:[`GET /notifications/threads/{thread_id}/subscription`],listEventsForAuthenticatedUser:[`GET /users/{username}/events`],listNotificationsForAuthenticatedUser:[`GET /notifications`],listOrgEventsForAuthenticatedUser:[`GET /users/{username}/events/orgs/{org}`],listPublicEvents:[`GET /events`],listPublicEventsForRepoNetwork:[`GET /networks/{owner}/{repo}/events`],listPublicEventsForUser:[`GET /users/{username}/events/public`],listPublicOrgEvents:[`GET /orgs/{org}/events`],listReceivedEventsForUser:[`GET /users/{username}/received_events`],listReceivedPublicEventsForUser:[`GET /users/{username}/received_events/public`],listRepoEvents:[`GET /repos/{owner}/{repo}/events`],listRepoNotificationsForAuthenticatedUser:[`GET /repos/{owner}/{repo}/notifications`],listReposStarredByAuthenticatedUser:[`GET /user/starred`],listReposStarredByUser:[`GET /users/{username}/starred`],listReposWatchedByUser:[`GET /users/{username}/subscriptions`],listStargazersForRepo:[`GET /repos/{owner}/{repo}/stargazers`],listWatchedReposForAuthenticatedUser:[`GET /user/subscriptions`],listWatchersForRepo:[`GET /repos/{owner}/{repo}/subscribers`],markNotificationsAsRead:[`PUT /notifications`],markRepoNotificationsAsRead:[`PUT /repos/{owner}/{repo}/notifications`],markThreadAsDone:[`DELETE /notifications/threads/{thread_id}`],markThreadAsRead:[`PATCH /notifications/threads/{thread_id}`],setRepoSubscription:[`PUT /repos/{owner}/{repo}/subscription`],setThreadSubscription:[`PUT /notifications/threads/{thread_id}/subscription`],starRepoForAuthenticatedUser:[`PUT /user/starred/{owner}/{repo}`],unstarRepoForAuthenticatedUser:[`DELETE /user/starred/{owner}/{repo}`]},apps:{addRepoToInstallation:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`addRepoToInstallationForAuthenticatedUser`]}],addRepoToInstallationForAuthenticatedUser:[`PUT /user/installations/{installation_id}/repositories/{repository_id}`],checkToken:[`POST /applications/{client_id}/token`],createFromManifest:[`POST /app-manifests/{code}/conversions`],createInstallationAccessToken:[`POST /app/installations/{installation_id}/access_tokens`],deleteAuthorization:[`DELETE /applications/{client_id}/grant`],deleteInstallation:[`DELETE /app/installations/{installation_id}`],deleteToken:[`DELETE /applications/{client_id}/token`],getAuthenticated:[`GET /app`],getBySlug:[`GET /apps/{app_slug}`],getInstallation:[`GET /app/installations/{installation_id}`],getOrgInstallation:[`GET /orgs/{org}/installation`],getRepoInstallation:[`GET /repos/{owner}/{repo}/installation`],getSubscriptionPlanForAccount:[`GET /marketplace_listing/accounts/{account_id}`],getSubscriptionPlanForAccountStubbed:[`GET /marketplace_listing/stubbed/accounts/{account_id}`],getUserInstallation:[`GET /users/{username}/installation`],getWebhookConfigForApp:[`GET /app/hook/config`],getWebhookDelivery:[`GET /app/hook/deliveries/{delivery_id}`],listAccountsForPlan:[`GET /marketplace_listing/plans/{plan_id}/accounts`],listAccountsForPlanStubbed:[`GET /marketplace_listing/stubbed/plans/{plan_id}/accounts`],listInstallationReposForAuthenticatedUser:[`GET /user/installations/{installation_id}/repositories`],listInstallationRequestsForAuthenticatedApp:[`GET /app/installation-requests`],listInstallations:[`GET /app/installations`],listInstallationsForAuthenticatedUser:[`GET /user/installations`],listPlans:[`GET /marketplace_listing/plans`],listPlansStubbed:[`GET /marketplace_listing/stubbed/plans`],listReposAccessibleToInstallation:[`GET /installation/repositories`],listSubscriptionsForAuthenticatedUser:[`GET /user/marketplace_purchases`],listSubscriptionsForAuthenticatedUserStubbed:[`GET /user/marketplace_purchases/stubbed`],listWebhookDeliveries:[`GET /app/hook/deliveries`],redeliverWebhookDelivery:[`POST /app/hook/deliveries/{delivery_id}/attempts`],removeRepoFromInstallation:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`,{},{renamed:[`apps`,`removeRepoFromInstallationForAuthenticatedUser`]}],removeRepoFromInstallationForAuthenticatedUser:[`DELETE /user/installations/{installation_id}/repositories/{repository_id}`],resetToken:[`PATCH /applications/{client_id}/token`],revokeInstallationAccessToken:[`DELETE /installation/token`],scopeToken:[`POST /applications/{client_id}/token/scoped`],suspendInstallation:[`PUT /app/installations/{installation_id}/suspended`],unsuspendInstallation:[`DELETE /app/installations/{installation_id}/suspended`],updateWebhookConfigForApp:[`PATCH /app/hook/config`]},billing:{getGithubActionsBillingOrg:[`GET /orgs/{org}/settings/billing/actions`],getGithubActionsBillingUser:[`GET /users/{username}/settings/billing/actions`],getGithubBillingPremiumRequestUsageReportOrg:[`GET /organizations/{org}/settings/billing/premium_request/usage`],getGithubBillingPremiumRequestUsageReportUser:[`GET /users/{username}/settings/billing/premium_request/usage`],getGithubBillingUsageReportOrg:[`GET /organizations/{org}/settings/billing/usage`],getGithubBillingUsageReportUser:[`GET /users/{username}/settings/billing/usage`],getGithubPackagesBillingOrg:[`GET /orgs/{org}/settings/billing/packages`],getGithubPackagesBillingUser:[`GET /users/{username}/settings/billing/packages`],getSharedStorageBillingOrg:[`GET /orgs/{org}/settings/billing/shared-storage`],getSharedStorageBillingUser:[`GET /users/{username}/settings/billing/shared-storage`]},campaigns:{createCampaign:[`POST /orgs/{org}/campaigns`],deleteCampaign:[`DELETE /orgs/{org}/campaigns/{campaign_number}`],getCampaignSummary:[`GET /orgs/{org}/campaigns/{campaign_number}`],listOrgCampaigns:[`GET /orgs/{org}/campaigns`],updateCampaign:[`PATCH /orgs/{org}/campaigns/{campaign_number}`]},checks:{create:[`POST /repos/{owner}/{repo}/check-runs`],createSuite:[`POST /repos/{owner}/{repo}/check-suites`],get:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}`],getSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}`],listAnnotations:[`GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations`],listForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-runs`],listForSuite:[`GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs`],listSuitesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/check-suites`],rerequestRun:[`POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest`],rerequestSuite:[`POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest`],setSuitesPreferences:[`PATCH /repos/{owner}/{repo}/check-suites/preferences`],update:[`PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}`]},codeScanning:{commitAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix/commits`],createAutofix:[`POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],createVariantAnalysis:[`POST /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses`],deleteAnalysis:[`DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}{?confirm_delete}`],deleteCodeqlDatabase:[`DELETE /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getAlert:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`,{},{renamedParameters:{alert_id:`alert_number`}}],getAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}`],getAutofix:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix`],getCodeqlDatabase:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}`],getDefaultSetup:[`GET /repos/{owner}/{repo}/code-scanning/default-setup`],getSarif:[`GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}`],getVariantAnalysis:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}`],getVariantAnalysisRepoTask:[`GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}`],listAlertInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`],listAlertsForOrg:[`GET /orgs/{org}/code-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/code-scanning/alerts`],listAlertsInstances:[`GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances`,{},{renamed:[`codeScanning`,`listAlertInstances`]}],listCodeqlDatabases:[`GET /repos/{owner}/{repo}/code-scanning/codeql/databases`],listRecentAnalyses:[`GET /repos/{owner}/{repo}/code-scanning/analyses`],updateAlert:[`PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}`],updateDefaultSetup:[`PATCH /repos/{owner}/{repo}/code-scanning/default-setup`],uploadSarif:[`POST /repos/{owner}/{repo}/code-scanning/sarifs`]},codeSecurity:{attachConfiguration:[`POST /orgs/{org}/code-security/configurations/{configuration_id}/attach`],attachEnterpriseConfiguration:[`POST /enterprises/{enterprise}/code-security/configurations/{configuration_id}/attach`],createConfiguration:[`POST /orgs/{org}/code-security/configurations`],createConfigurationForEnterprise:[`POST /enterprises/{enterprise}/code-security/configurations`],deleteConfiguration:[`DELETE /orgs/{org}/code-security/configurations/{configuration_id}`],deleteConfigurationForEnterprise:[`DELETE /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],detachConfiguration:[`DELETE /orgs/{org}/code-security/configurations/detach`],getConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}`],getConfigurationForRepository:[`GET /repos/{owner}/{repo}/code-security-configuration`],getConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations`],getConfigurationsForOrg:[`GET /orgs/{org}/code-security/configurations`],getDefaultConfigurations:[`GET /orgs/{org}/code-security/configurations/defaults`],getDefaultConfigurationsForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/defaults`],getRepositoriesForConfiguration:[`GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories`],getRepositoriesForEnterpriseConfiguration:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}/repositories`],getSingleConfigurationForEnterprise:[`GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}`],setConfigurationAsDefault:[`PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults`],setConfigurationAsDefaultForEnterprise:[`PUT /enterprises/{enterprise}/code-security/configurations/{configuration_id}/defaults`],updateConfiguration:[`PATCH /orgs/{org}/code-security/configurations/{configuration_id}`],updateEnterpriseConfiguration:[`PATCH /enterprises/{enterprise}/code-security/configurations/{configuration_id}`]},codesOfConduct:{getAllCodesOfConduct:[`GET /codes_of_conduct`],getConductCode:[`GET /codes_of_conduct/{key}`]},codespaces:{addRepositoryForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],checkPermissionsForDevcontainer:[`GET /repos/{owner}/{repo}/codespaces/permissions_check`],codespaceMachinesForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/machines`],createForAuthenticatedUser:[`POST /user/codespaces`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],createOrUpdateSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}`],createWithPrForAuthenticatedUser:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaces`],createWithRepoForAuthenticatedUser:[`POST /repos/{owner}/{repo}/codespaces`],deleteForAuthenticatedUser:[`DELETE /user/codespaces/{codespace_name}`],deleteFromOrganization:[`DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],deleteSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}`],exportForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/exports`],getCodespacesForUserInOrg:[`GET /orgs/{org}/members/{username}/codespaces`],getExportDetailsForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}/exports/{export_id}`],getForAuthenticatedUser:[`GET /user/codespaces/{codespace_name}`],getOrgPublicKey:[`GET /orgs/{org}/codespaces/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}`],getPublicKeyForAuthenticatedUser:[`GET /user/codespaces/secrets/public-key`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/codespaces/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}`],getSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}`],listDevcontainersInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/devcontainers`],listForAuthenticatedUser:[`GET /user/codespaces`],listInOrganization:[`GET /orgs/{org}/codespaces`,{},{renamedParameters:{org_id:`org`}}],listInRepositoryForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces`],listOrgSecrets:[`GET /orgs/{org}/codespaces/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/codespaces/secrets`],listRepositoriesForSecretForAuthenticatedUser:[`GET /user/codespaces/secrets/{secret_name}/repositories`],listSecretsForAuthenticatedUser:[`GET /user/codespaces/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],preFlightWithRepoForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/new`],publishForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/publish`],removeRepositoryForSecretForAuthenticatedUser:[`DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}`],repoMachinesForAuthenticatedUser:[`GET /repos/{owner}/{repo}/codespaces/machines`],setRepositoriesForSecretForAuthenticatedUser:[`PUT /user/codespaces/secrets/{secret_name}/repositories`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories`],startForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/start`],stopForAuthenticatedUser:[`POST /user/codespaces/{codespace_name}/stop`],stopInOrganization:[`POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop`],updateForAuthenticatedUser:[`PATCH /user/codespaces/{codespace_name}`]},copilot:{addCopilotSeatsForTeams:[`POST /orgs/{org}/copilot/billing/selected_teams`],addCopilotSeatsForUsers:[`POST /orgs/{org}/copilot/billing/selected_users`],cancelCopilotSeatAssignmentForTeams:[`DELETE /orgs/{org}/copilot/billing/selected_teams`],cancelCopilotSeatAssignmentForUsers:[`DELETE /orgs/{org}/copilot/billing/selected_users`],copilotMetricsForOrganization:[`GET /orgs/{org}/copilot/metrics`],copilotMetricsForTeam:[`GET /orgs/{org}/team/{team_slug}/copilot/metrics`],getCopilotOrganizationDetails:[`GET /orgs/{org}/copilot/billing`],getCopilotSeatDetailsForUser:[`GET /orgs/{org}/members/{username}/copilot`],listCopilotSeats:[`GET /orgs/{org}/copilot/billing/seats`]},credentials:{revoke:[`POST /credentials/revoke`]},dependabot:{addSelectedRepoToOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],createOrUpdateOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}`],createOrUpdateRepoSecret:[`PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],deleteOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}`],deleteRepoSecret:[`DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],getAlert:[`GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],getOrgPublicKey:[`GET /orgs/{org}/dependabot/secrets/public-key`],getOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}`],getRepoPublicKey:[`GET /repos/{owner}/{repo}/dependabot/secrets/public-key`],getRepoSecret:[`GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}`],listAlertsForEnterprise:[`GET /enterprises/{enterprise}/dependabot/alerts`],listAlertsForOrg:[`GET /orgs/{org}/dependabot/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/dependabot/alerts`],listOrgSecrets:[`GET /orgs/{org}/dependabot/secrets`],listRepoSecrets:[`GET /repos/{owner}/{repo}/dependabot/secrets`],listSelectedReposForOrgSecret:[`GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],removeSelectedRepoFromOrgSecret:[`DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}`],repositoryAccessForOrg:[`GET /organizations/{org}/dependabot/repository-access`],setRepositoryAccessDefaultLevel:[`PUT /organizations/{org}/dependabot/repository-access/default-level`],setSelectedReposForOrgSecret:[`PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories`],updateAlert:[`PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}`],updateRepositoryAccessForOrg:[`PATCH /organizations/{org}/dependabot/repository-access`]},dependencyGraph:{createRepositorySnapshot:[`POST /repos/{owner}/{repo}/dependency-graph/snapshots`],diffRange:[`GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}`],exportSbom:[`GET /repos/{owner}/{repo}/dependency-graph/sbom`]},emojis:{get:[`GET /emojis`]},enterpriseTeamMemberships:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/memberships/remove`],get:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`],list:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/memberships`],remove:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/memberships/{username}`]},enterpriseTeamOrganizations:{add:[`PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],bulkAdd:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/add`],bulkRemove:[`POST /enterprises/{enterprise}/teams/{enterprise-team}/organizations/remove`],delete:[`DELETE /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignment:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org}`],getAssignments:[`GET /enterprises/{enterprise}/teams/{enterprise-team}/organizations`]},enterpriseTeams:{create:[`POST /enterprises/{enterprise}/teams`],delete:[`DELETE /enterprises/{enterprise}/teams/{team_slug}`],get:[`GET /enterprises/{enterprise}/teams/{team_slug}`],list:[`GET /enterprises/{enterprise}/teams`],update:[`PATCH /enterprises/{enterprise}/teams/{team_slug}`]},gists:{checkIsStarred:[`GET /gists/{gist_id}/star`],create:[`POST /gists`],createComment:[`POST /gists/{gist_id}/comments`],delete:[`DELETE /gists/{gist_id}`],deleteComment:[`DELETE /gists/{gist_id}/comments/{comment_id}`],fork:[`POST /gists/{gist_id}/forks`],get:[`GET /gists/{gist_id}`],getComment:[`GET /gists/{gist_id}/comments/{comment_id}`],getRevision:[`GET /gists/{gist_id}/{sha}`],list:[`GET /gists`],listComments:[`GET /gists/{gist_id}/comments`],listCommits:[`GET /gists/{gist_id}/commits`],listForUser:[`GET /users/{username}/gists`],listForks:[`GET /gists/{gist_id}/forks`],listPublic:[`GET /gists/public`],listStarred:[`GET /gists/starred`],star:[`PUT /gists/{gist_id}/star`],unstar:[`DELETE /gists/{gist_id}/star`],update:[`PATCH /gists/{gist_id}`],updateComment:[`PATCH /gists/{gist_id}/comments/{comment_id}`]},git:{createBlob:[`POST /repos/{owner}/{repo}/git/blobs`],createCommit:[`POST /repos/{owner}/{repo}/git/commits`],createRef:[`POST /repos/{owner}/{repo}/git/refs`],createTag:[`POST /repos/{owner}/{repo}/git/tags`],createTree:[`POST /repos/{owner}/{repo}/git/trees`],deleteRef:[`DELETE /repos/{owner}/{repo}/git/refs/{ref}`],getBlob:[`GET /repos/{owner}/{repo}/git/blobs/{file_sha}`],getCommit:[`GET /repos/{owner}/{repo}/git/commits/{commit_sha}`],getRef:[`GET /repos/{owner}/{repo}/git/ref/{ref}`],getTag:[`GET /repos/{owner}/{repo}/git/tags/{tag_sha}`],getTree:[`GET /repos/{owner}/{repo}/git/trees/{tree_sha}`],listMatchingRefs:[`GET /repos/{owner}/{repo}/git/matching-refs/{ref}`],updateRef:[`PATCH /repos/{owner}/{repo}/git/refs/{ref}`]},gitignore:{getAllTemplates:[`GET /gitignore/templates`],getTemplate:[`GET /gitignore/templates/{name}`]},hostedCompute:{createNetworkConfigurationForOrg:[`POST /orgs/{org}/settings/network-configurations`],deleteNetworkConfigurationFromOrg:[`DELETE /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkConfigurationForOrg:[`GET /orgs/{org}/settings/network-configurations/{network_configuration_id}`],getNetworkSettingsForOrg:[`GET /orgs/{org}/settings/network-settings/{network_settings_id}`],listNetworkConfigurationsForOrg:[`GET /orgs/{org}/settings/network-configurations`],updateNetworkConfigurationForOrg:[`PATCH /orgs/{org}/settings/network-configurations/{network_configuration_id}`]},interactions:{getRestrictionsForAuthenticatedUser:[`GET /user/interaction-limits`],getRestrictionsForOrg:[`GET /orgs/{org}/interaction-limits`],getRestrictionsForRepo:[`GET /repos/{owner}/{repo}/interaction-limits`],getRestrictionsForYourPublicRepos:[`GET /user/interaction-limits`,{},{renamed:[`interactions`,`getRestrictionsForAuthenticatedUser`]}],removeRestrictionsForAuthenticatedUser:[`DELETE /user/interaction-limits`],removeRestrictionsForOrg:[`DELETE /orgs/{org}/interaction-limits`],removeRestrictionsForRepo:[`DELETE /repos/{owner}/{repo}/interaction-limits`],removeRestrictionsForYourPublicRepos:[`DELETE /user/interaction-limits`,{},{renamed:[`interactions`,`removeRestrictionsForAuthenticatedUser`]}],setRestrictionsForAuthenticatedUser:[`PUT /user/interaction-limits`],setRestrictionsForOrg:[`PUT /orgs/{org}/interaction-limits`],setRestrictionsForRepo:[`PUT /repos/{owner}/{repo}/interaction-limits`],setRestrictionsForYourPublicRepos:[`PUT /user/interaction-limits`,{},{renamed:[`interactions`,`setRestrictionsForAuthenticatedUser`]}]},issues:{addAssignees:[`POST /repos/{owner}/{repo}/issues/{issue_number}/assignees`],addBlockedByDependency:[`POST /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],addLabels:[`POST /repos/{owner}/{repo}/issues/{issue_number}/labels`],addSubIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],checkUserCanBeAssigned:[`GET /repos/{owner}/{repo}/assignees/{assignee}`],checkUserCanBeAssignedToIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}`],create:[`POST /repos/{owner}/{repo}/issues`],createComment:[`POST /repos/{owner}/{repo}/issues/{issue_number}/comments`],createLabel:[`POST /repos/{owner}/{repo}/labels`],createMilestone:[`POST /repos/{owner}/{repo}/milestones`],deleteComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}`],deleteLabel:[`DELETE /repos/{owner}/{repo}/labels/{name}`],deleteMilestone:[`DELETE /repos/{owner}/{repo}/milestones/{milestone_number}`],get:[`GET /repos/{owner}/{repo}/issues/{issue_number}`],getComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}`],getEvent:[`GET /repos/{owner}/{repo}/issues/events/{event_id}`],getLabel:[`GET /repos/{owner}/{repo}/labels/{name}`],getMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}`],getParent:[`GET /repos/{owner}/{repo}/issues/{issue_number}/parent`],list:[`GET /issues`],listAssignees:[`GET /repos/{owner}/{repo}/assignees`],listComments:[`GET /repos/{owner}/{repo}/issues/{issue_number}/comments`],listCommentsForRepo:[`GET /repos/{owner}/{repo}/issues/comments`],listDependenciesBlockedBy:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by`],listDependenciesBlocking:[`GET /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocking`],listEvents:[`GET /repos/{owner}/{repo}/issues/{issue_number}/events`],listEventsForRepo:[`GET /repos/{owner}/{repo}/issues/events`],listEventsForTimeline:[`GET /repos/{owner}/{repo}/issues/{issue_number}/timeline`],listForAuthenticatedUser:[`GET /user/issues`],listForOrg:[`GET /orgs/{org}/issues`],listForRepo:[`GET /repos/{owner}/{repo}/issues`],listLabelsForMilestone:[`GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels`],listLabelsForRepo:[`GET /repos/{owner}/{repo}/labels`],listLabelsOnIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/labels`],listMilestones:[`GET /repos/{owner}/{repo}/milestones`],listSubIssues:[`GET /repos/{owner}/{repo}/issues/{issue_number}/sub_issues`],lock:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/lock`],removeAllLabels:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels`],removeAssignees:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees`],removeDependencyBlockedBy:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/dependencies/blocked_by/{issue_id}`],removeLabel:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}`],removeSubIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/sub_issue`],reprioritizeSubIssue:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}/sub_issues/priority`],setLabels:[`PUT /repos/{owner}/{repo}/issues/{issue_number}/labels`],unlock:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock`],update:[`PATCH /repos/{owner}/{repo}/issues/{issue_number}`],updateComment:[`PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}`],updateLabel:[`PATCH /repos/{owner}/{repo}/labels/{name}`],updateMilestone:[`PATCH /repos/{owner}/{repo}/milestones/{milestone_number}`]},licenses:{get:[`GET /licenses/{license}`],getAllCommonlyUsed:[`GET /licenses`],getForRepo:[`GET /repos/{owner}/{repo}/license`]},markdown:{render:[`POST /markdown`],renderRaw:[`POST /markdown/raw`,{headers:{"content-type":`text/plain; charset=utf-8`}}]},meta:{get:[`GET /meta`],getAllVersions:[`GET /versions`],getOctocat:[`GET /octocat`],getZen:[`GET /zen`],root:[`GET /`]},migrations:{deleteArchiveForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/archive`],deleteArchiveForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/archive`],downloadArchiveForOrg:[`GET /orgs/{org}/migrations/{migration_id}/archive`],getArchiveForAuthenticatedUser:[`GET /user/migrations/{migration_id}/archive`],getStatusForAuthenticatedUser:[`GET /user/migrations/{migration_id}`],getStatusForOrg:[`GET /orgs/{org}/migrations/{migration_id}`],listForAuthenticatedUser:[`GET /user/migrations`],listForOrg:[`GET /orgs/{org}/migrations`],listReposForAuthenticatedUser:[`GET /user/migrations/{migration_id}/repositories`],listReposForOrg:[`GET /orgs/{org}/migrations/{migration_id}/repositories`],listReposForUser:[`GET /user/migrations/{migration_id}/repositories`,{},{renamed:[`migrations`,`listReposForAuthenticatedUser`]}],startForAuthenticatedUser:[`POST /user/migrations`],startForOrg:[`POST /orgs/{org}/migrations`],unlockRepoForAuthenticatedUser:[`DELETE /user/migrations/{migration_id}/repos/{repo_name}/lock`],unlockRepoForOrg:[`DELETE /orgs/{org}/migrations/{migration_id}/repos/{repo_name}/lock`]},oidc:{getOidcCustomSubTemplateForOrg:[`GET /orgs/{org}/actions/oidc/customization/sub`],updateOidcCustomSubTemplateForOrg:[`PUT /orgs/{org}/actions/oidc/customization/sub`]},orgs:{addSecurityManagerTeam:[`PUT /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.addSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#add-a-security-manager-team`}],assignTeamToOrgRole:[`PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],assignUserToOrgRole:[`PUT /orgs/{org}/organization-roles/users/{username}/{role_id}`],blockUser:[`PUT /orgs/{org}/blocks/{username}`],cancelInvitation:[`DELETE /orgs/{org}/invitations/{invitation_id}`],checkBlockedUser:[`GET /orgs/{org}/blocks/{username}`],checkMembershipForUser:[`GET /orgs/{org}/members/{username}`],checkPublicMembershipForUser:[`GET /orgs/{org}/public_members/{username}`],convertMemberToOutsideCollaborator:[`PUT /orgs/{org}/outside_collaborators/{username}`],createArtifactStorageRecord:[`POST /orgs/{org}/artifacts/metadata/storage-record`],createInvitation:[`POST /orgs/{org}/invitations`],createIssueType:[`POST /orgs/{org}/issue-types`],createWebhook:[`POST /orgs/{org}/hooks`],customPropertiesForOrgsCreateOrUpdateOrganizationValues:[`PATCH /organizations/{org}/org-properties/values`],customPropertiesForOrgsGetOrganizationValues:[`GET /organizations/{org}/org-properties/values`],customPropertiesForReposCreateOrUpdateOrganizationDefinition:[`PUT /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposCreateOrUpdateOrganizationDefinitions:[`PATCH /orgs/{org}/properties/schema`],customPropertiesForReposCreateOrUpdateOrganizationValues:[`PATCH /orgs/{org}/properties/values`],customPropertiesForReposDeleteOrganizationDefinition:[`DELETE /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinition:[`GET /orgs/{org}/properties/schema/{custom_property_name}`],customPropertiesForReposGetOrganizationDefinitions:[`GET /orgs/{org}/properties/schema`],customPropertiesForReposGetOrganizationValues:[`GET /orgs/{org}/properties/values`],delete:[`DELETE /orgs/{org}`],deleteAttestationsBulk:[`POST /orgs/{org}/attestations/delete-request`],deleteAttestationsById:[`DELETE /orgs/{org}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /orgs/{org}/attestations/digest/{subject_digest}`],deleteIssueType:[`DELETE /orgs/{org}/issue-types/{issue_type_id}`],deleteWebhook:[`DELETE /orgs/{org}/hooks/{hook_id}`],disableSelectedRepositoryImmutableReleasesOrganization:[`DELETE /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],enableSelectedRepositoryImmutableReleasesOrganization:[`PUT /orgs/{org}/settings/immutable-releases/repositories/{repository_id}`],get:[`GET /orgs/{org}`],getImmutableReleasesSettings:[`GET /orgs/{org}/settings/immutable-releases`],getImmutableReleasesSettingsRepositories:[`GET /orgs/{org}/settings/immutable-releases/repositories`],getMembershipForAuthenticatedUser:[`GET /user/memberships/orgs/{org}`],getMembershipForUser:[`GET /orgs/{org}/memberships/{username}`],getOrgRole:[`GET /orgs/{org}/organization-roles/{role_id}`],getOrgRulesetHistory:[`GET /orgs/{org}/rulesets/{ruleset_id}/history`],getOrgRulesetVersion:[`GET /orgs/{org}/rulesets/{ruleset_id}/history/{version_id}`],getWebhook:[`GET /orgs/{org}/hooks/{hook_id}`],getWebhookConfigForOrg:[`GET /orgs/{org}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}`],list:[`GET /organizations`],listAppInstallations:[`GET /orgs/{org}/installations`],listArtifactStorageRecords:[`GET /orgs/{org}/artifacts/{subject_digest}/metadata/storage-records`],listAttestationRepositories:[`GET /orgs/{org}/attestations/repositories`],listAttestations:[`GET /orgs/{org}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /orgs/{org}/attestations/bulk-list{?per_page,before,after}`],listBlockedUsers:[`GET /orgs/{org}/blocks`],listFailedInvitations:[`GET /orgs/{org}/failed_invitations`],listForAuthenticatedUser:[`GET /user/orgs`],listForUser:[`GET /users/{username}/orgs`],listInvitationTeams:[`GET /orgs/{org}/invitations/{invitation_id}/teams`],listIssueTypes:[`GET /orgs/{org}/issue-types`],listMembers:[`GET /orgs/{org}/members`],listMembershipsForAuthenticatedUser:[`GET /user/memberships/orgs`],listOrgRoleTeams:[`GET /orgs/{org}/organization-roles/{role_id}/teams`],listOrgRoleUsers:[`GET /orgs/{org}/organization-roles/{role_id}/users`],listOrgRoles:[`GET /orgs/{org}/organization-roles`],listOrganizationFineGrainedPermissions:[`GET /orgs/{org}/organization-fine-grained-permissions`],listOutsideCollaborators:[`GET /orgs/{org}/outside_collaborators`],listPatGrantRepositories:[`GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories`],listPatGrantRequestRepositories:[`GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories`],listPatGrantRequests:[`GET /orgs/{org}/personal-access-token-requests`],listPatGrants:[`GET /orgs/{org}/personal-access-tokens`],listPendingInvitations:[`GET /orgs/{org}/invitations`],listPublicMembers:[`GET /orgs/{org}/public_members`],listSecurityManagerTeams:[`GET /orgs/{org}/security-managers`,{},{deprecated:`octokit.rest.orgs.listSecurityManagerTeams() is deprecated, see https://docs.github.com/rest/orgs/security-managers#list-security-manager-teams`}],listWebhookDeliveries:[`GET /orgs/{org}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /orgs/{org}/hooks`],pingWebhook:[`POST /orgs/{org}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeMember:[`DELETE /orgs/{org}/members/{username}`],removeMembershipForUser:[`DELETE /orgs/{org}/memberships/{username}`],removeOutsideCollaborator:[`DELETE /orgs/{org}/outside_collaborators/{username}`],removePublicMembershipForAuthenticatedUser:[`DELETE /orgs/{org}/public_members/{username}`],removeSecurityManagerTeam:[`DELETE /orgs/{org}/security-managers/teams/{team_slug}`,{},{deprecated:`octokit.rest.orgs.removeSecurityManagerTeam() is deprecated, see https://docs.github.com/rest/orgs/security-managers#remove-a-security-manager-team`}],reviewPatGrantRequest:[`POST /orgs/{org}/personal-access-token-requests/{pat_request_id}`],reviewPatGrantRequestsInBulk:[`POST /orgs/{org}/personal-access-token-requests`],revokeAllOrgRolesTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}`],revokeAllOrgRolesUser:[`DELETE /orgs/{org}/organization-roles/users/{username}`],revokeOrgRoleTeam:[`DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}`],revokeOrgRoleUser:[`DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}`],setImmutableReleasesSettings:[`PUT /orgs/{org}/settings/immutable-releases`],setImmutableReleasesSettingsRepositories:[`PUT /orgs/{org}/settings/immutable-releases/repositories`],setMembershipForUser:[`PUT /orgs/{org}/memberships/{username}`],setPublicMembershipForAuthenticatedUser:[`PUT /orgs/{org}/public_members/{username}`],unblockUser:[`DELETE /orgs/{org}/blocks/{username}`],update:[`PATCH /orgs/{org}`],updateIssueType:[`PUT /orgs/{org}/issue-types/{issue_type_id}`],updateMembershipForAuthenticatedUser:[`PATCH /user/memberships/orgs/{org}`],updatePatAccess:[`POST /orgs/{org}/personal-access-tokens/{pat_id}`],updatePatAccesses:[`POST /orgs/{org}/personal-access-tokens`],updateWebhook:[`PATCH /orgs/{org}/hooks/{hook_id}`],updateWebhookConfigForOrg:[`PATCH /orgs/{org}/hooks/{hook_id}/config`]},packages:{deletePackageForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}`],deletePackageForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}`],deletePackageForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}`],deletePackageVersionForAuthenticatedUser:[`DELETE /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForOrg:[`DELETE /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],deletePackageVersionForUser:[`DELETE /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getAllPackageVersionsForAPackageOwnedByAnOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByOrg`]}],getAllPackageVersionsForAPackageOwnedByTheAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`,{},{renamed:[`packages`,`getAllPackageVersionsForPackageOwnedByAuthenticatedUser`]}],getAllPackageVersionsForPackageOwnedByAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByOrg:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions`],getAllPackageVersionsForPackageOwnedByUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions`],getPackageForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}`],getPackageForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}`],getPackageForUser:[`GET /users/{username}/packages/{package_type}/{package_name}`],getPackageVersionForAuthenticatedUser:[`GET /user/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForOrganization:[`GET /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}`],getPackageVersionForUser:[`GET /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}`],listDockerMigrationConflictingPackagesForAuthenticatedUser:[`GET /user/docker/conflicts`],listDockerMigrationConflictingPackagesForOrganization:[`GET /orgs/{org}/docker/conflicts`],listDockerMigrationConflictingPackagesForUser:[`GET /users/{username}/docker/conflicts`],listPackagesForAuthenticatedUser:[`GET /user/packages`],listPackagesForOrganization:[`GET /orgs/{org}/packages`],listPackagesForUser:[`GET /users/{username}/packages`],restorePackageForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/restore{?token}`],restorePackageVersionForAuthenticatedUser:[`POST /user/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForOrg:[`POST /orgs/{org}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`],restorePackageVersionForUser:[`POST /users/{username}/packages/{package_type}/{package_name}/versions/{package_version_id}/restore`]},privateRegistries:{createOrgPrivateRegistry:[`POST /orgs/{org}/private-registries`],deleteOrgPrivateRegistry:[`DELETE /orgs/{org}/private-registries/{secret_name}`],getOrgPrivateRegistry:[`GET /orgs/{org}/private-registries/{secret_name}`],getOrgPublicKey:[`GET /orgs/{org}/private-registries/public-key`],listOrgPrivateRegistries:[`GET /orgs/{org}/private-registries`],updateOrgPrivateRegistry:[`PATCH /orgs/{org}/private-registries/{secret_name}`]},projects:{addItemForOrg:[`POST /orgs/{org}/projectsV2/{project_number}/items`],addItemForUser:[`POST /users/{username}/projectsV2/{project_number}/items`],deleteItemForOrg:[`DELETE /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],deleteItemForUser:[`DELETE /users/{username}/projectsV2/{project_number}/items/{item_id}`],getFieldForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields/{field_id}`],getFieldForUser:[`GET /users/{username}/projectsV2/{project_number}/fields/{field_id}`],getForOrg:[`GET /orgs/{org}/projectsV2/{project_number}`],getForUser:[`GET /users/{username}/projectsV2/{project_number}`],getOrgItem:[`GET /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],getUserItem:[`GET /users/{username}/projectsV2/{project_number}/items/{item_id}`],listFieldsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/fields`],listFieldsForUser:[`GET /users/{username}/projectsV2/{project_number}/fields`],listForOrg:[`GET /orgs/{org}/projectsV2`],listForUser:[`GET /users/{username}/projectsV2`],listItemsForOrg:[`GET /orgs/{org}/projectsV2/{project_number}/items`],listItemsForUser:[`GET /users/{username}/projectsV2/{project_number}/items`],updateItemForOrg:[`PATCH /orgs/{org}/projectsV2/{project_number}/items/{item_id}`],updateItemForUser:[`PATCH /users/{username}/projectsV2/{project_number}/items/{item_id}`]},pulls:{checkIfMerged:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/merge`],create:[`POST /repos/{owner}/{repo}/pulls`],createReplyForReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies`],createReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],createReviewComment:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/comments`],deletePendingReview:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],deleteReviewComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}`],dismissReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals`],get:[`GET /repos/{owner}/{repo}/pulls/{pull_number}`],getReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],getReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}`],list:[`GET /repos/{owner}/{repo}/pulls`],listCommentsForReview:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments`],listCommits:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/commits`],listFiles:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/files`],listRequestedReviewers:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],listReviewComments:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/comments`],listReviewCommentsForRepo:[`GET /repos/{owner}/{repo}/pulls/comments`],listReviews:[`GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews`],merge:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge`],removeRequestedReviewers:[`DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],requestReviewers:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers`],submitReview:[`POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events`],update:[`PATCH /repos/{owner}/{repo}/pulls/{pull_number}`],updateBranch:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch`],updateReview:[`PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}`],updateReviewComment:[`PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}`]},rateLimit:{get:[`GET /rate_limit`]},reactions:{createForCommitComment:[`POST /repos/{owner}/{repo}/comments/{comment_id}/reactions`],createForIssue:[`POST /repos/{owner}/{repo}/issues/{issue_number}/reactions`],createForIssueComment:[`POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],createForPullRequestReviewComment:[`POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],createForRelease:[`POST /repos/{owner}/{repo}/releases/{release_id}/reactions`],createForTeamDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],createForTeamDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`],deleteForCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}`],deleteForIssue:[`DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}`],deleteForIssueComment:[`DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}`],deleteForPullRequestComment:[`DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}`],deleteForRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}/reactions/{reaction_id}`],deleteForTeamDiscussion:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}`],deleteForTeamDiscussionComment:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}`],listForCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}/reactions`],listForIssue:[`GET /repos/{owner}/{repo}/issues/{issue_number}/reactions`],listForIssueComment:[`GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions`],listForPullRequestReviewComment:[`GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions`],listForRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}/reactions`],listForTeamDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions`],listForTeamDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions`]},repos:{acceptInvitation:[`PATCH /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`acceptInvitationForAuthenticatedUser`]}],acceptInvitationForAuthenticatedUser:[`PATCH /user/repository_invitations/{invitation_id}`],addAppAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],addCollaborator:[`PUT /repos/{owner}/{repo}/collaborators/{username}`],addStatusCheckContexts:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],addTeamAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],addUserAccessRestrictions:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],cancelPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel`],checkAutomatedSecurityFixes:[`GET /repos/{owner}/{repo}/automated-security-fixes`],checkCollaborator:[`GET /repos/{owner}/{repo}/collaborators/{username}`],checkImmutableReleases:[`GET /repos/{owner}/{repo}/immutable-releases`],checkPrivateVulnerabilityReporting:[`GET /repos/{owner}/{repo}/private-vulnerability-reporting`],checkVulnerabilityAlerts:[`GET /repos/{owner}/{repo}/vulnerability-alerts`],codeownersErrors:[`GET /repos/{owner}/{repo}/codeowners/errors`],compareCommits:[`GET /repos/{owner}/{repo}/compare/{base}...{head}`],compareCommitsWithBasehead:[`GET /repos/{owner}/{repo}/compare/{basehead}`],createAttestation:[`POST /repos/{owner}/{repo}/attestations`],createAutolink:[`POST /repos/{owner}/{repo}/autolinks`],createCommitComment:[`POST /repos/{owner}/{repo}/commits/{commit_sha}/comments`],createCommitSignatureProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],createCommitStatus:[`POST /repos/{owner}/{repo}/statuses/{sha}`],createDeployKey:[`POST /repos/{owner}/{repo}/keys`],createDeployment:[`POST /repos/{owner}/{repo}/deployments`],createDeploymentBranchPolicy:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],createDeploymentProtectionRule:[`POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],createDeploymentStatus:[`POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],createDispatchEvent:[`POST /repos/{owner}/{repo}/dispatches`],createForAuthenticatedUser:[`POST /user/repos`],createFork:[`POST /repos/{owner}/{repo}/forks`],createInOrg:[`POST /orgs/{org}/repos`],createOrUpdateEnvironment:[`PUT /repos/{owner}/{repo}/environments/{environment_name}`],createOrUpdateFileContents:[`PUT /repos/{owner}/{repo}/contents/{path}`],createOrgRuleset:[`POST /orgs/{org}/rulesets`],createPagesDeployment:[`POST /repos/{owner}/{repo}/pages/deployments`],createPagesSite:[`POST /repos/{owner}/{repo}/pages`],createRelease:[`POST /repos/{owner}/{repo}/releases`],createRepoRuleset:[`POST /repos/{owner}/{repo}/rulesets`],createUsingTemplate:[`POST /repos/{template_owner}/{template_repo}/generate`],createWebhook:[`POST /repos/{owner}/{repo}/hooks`],customPropertiesForReposCreateOrUpdateRepositoryValues:[`PATCH /repos/{owner}/{repo}/properties/values`],customPropertiesForReposGetRepositoryValues:[`GET /repos/{owner}/{repo}/properties/values`],declineInvitation:[`DELETE /user/repository_invitations/{invitation_id}`,{},{renamed:[`repos`,`declineInvitationForAuthenticatedUser`]}],declineInvitationForAuthenticatedUser:[`DELETE /user/repository_invitations/{invitation_id}`],delete:[`DELETE /repos/{owner}/{repo}`],deleteAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],deleteAdminBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],deleteAnEnvironment:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}`],deleteAutolink:[`DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}`],deleteBranchProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection`],deleteCommitComment:[`DELETE /repos/{owner}/{repo}/comments/{comment_id}`],deleteCommitSignatureProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],deleteDeployKey:[`DELETE /repos/{owner}/{repo}/keys/{key_id}`],deleteDeployment:[`DELETE /repos/{owner}/{repo}/deployments/{deployment_id}`],deleteDeploymentBranchPolicy:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],deleteFile:[`DELETE /repos/{owner}/{repo}/contents/{path}`],deleteInvitation:[`DELETE /repos/{owner}/{repo}/invitations/{invitation_id}`],deleteOrgRuleset:[`DELETE /orgs/{org}/rulesets/{ruleset_id}`],deletePagesSite:[`DELETE /repos/{owner}/{repo}/pages`],deletePullRequestReviewProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],deleteRelease:[`DELETE /repos/{owner}/{repo}/releases/{release_id}`],deleteReleaseAsset:[`DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}`],deleteRepoRuleset:[`DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}`],deleteWebhook:[`DELETE /repos/{owner}/{repo}/hooks/{hook_id}`],disableAutomatedSecurityFixes:[`DELETE /repos/{owner}/{repo}/automated-security-fixes`],disableDeploymentProtectionRule:[`DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],disableImmutableReleases:[`DELETE /repos/{owner}/{repo}/immutable-releases`],disablePrivateVulnerabilityReporting:[`DELETE /repos/{owner}/{repo}/private-vulnerability-reporting`],disableVulnerabilityAlerts:[`DELETE /repos/{owner}/{repo}/vulnerability-alerts`],downloadArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`,{},{renamed:[`repos`,`downloadZipballArchive`]}],downloadTarballArchive:[`GET /repos/{owner}/{repo}/tarball/{ref}`],downloadZipballArchive:[`GET /repos/{owner}/{repo}/zipball/{ref}`],enableAutomatedSecurityFixes:[`PUT /repos/{owner}/{repo}/automated-security-fixes`],enableImmutableReleases:[`PUT /repos/{owner}/{repo}/immutable-releases`],enablePrivateVulnerabilityReporting:[`PUT /repos/{owner}/{repo}/private-vulnerability-reporting`],enableVulnerabilityAlerts:[`PUT /repos/{owner}/{repo}/vulnerability-alerts`],generateReleaseNotes:[`POST /repos/{owner}/{repo}/releases/generate-notes`],get:[`GET /repos/{owner}/{repo}`],getAccessRestrictions:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions`],getAdminBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],getAllDeploymentProtectionRules:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules`],getAllEnvironments:[`GET /repos/{owner}/{repo}/environments`],getAllStatusCheckContexts:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`],getAllTopics:[`GET /repos/{owner}/{repo}/topics`],getAppsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`],getAutolink:[`GET /repos/{owner}/{repo}/autolinks/{autolink_id}`],getBranch:[`GET /repos/{owner}/{repo}/branches/{branch}`],getBranchProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection`],getBranchRules:[`GET /repos/{owner}/{repo}/rules/branches/{branch}`],getClones:[`GET /repos/{owner}/{repo}/traffic/clones`],getCodeFrequencyStats:[`GET /repos/{owner}/{repo}/stats/code_frequency`],getCollaboratorPermissionLevel:[`GET /repos/{owner}/{repo}/collaborators/{username}/permission`],getCombinedStatusForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/status`],getCommit:[`GET /repos/{owner}/{repo}/commits/{ref}`],getCommitActivityStats:[`GET /repos/{owner}/{repo}/stats/commit_activity`],getCommitComment:[`GET /repos/{owner}/{repo}/comments/{comment_id}`],getCommitSignatureProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures`],getCommunityProfileMetrics:[`GET /repos/{owner}/{repo}/community/profile`],getContent:[`GET /repos/{owner}/{repo}/contents/{path}`],getContributorsStats:[`GET /repos/{owner}/{repo}/stats/contributors`],getCustomDeploymentProtectionRule:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}`],getDeployKey:[`GET /repos/{owner}/{repo}/keys/{key_id}`],getDeployment:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}`],getDeploymentBranchPolicy:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],getDeploymentStatus:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}`],getEnvironment:[`GET /repos/{owner}/{repo}/environments/{environment_name}`],getLatestPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/latest`],getLatestRelease:[`GET /repos/{owner}/{repo}/releases/latest`],getOrgRuleSuite:[`GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}`],getOrgRuleSuites:[`GET /orgs/{org}/rulesets/rule-suites`],getOrgRuleset:[`GET /orgs/{org}/rulesets/{ruleset_id}`],getOrgRulesets:[`GET /orgs/{org}/rulesets`],getPages:[`GET /repos/{owner}/{repo}/pages`],getPagesBuild:[`GET /repos/{owner}/{repo}/pages/builds/{build_id}`],getPagesDeployment:[`GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}`],getPagesHealthCheck:[`GET /repos/{owner}/{repo}/pages/health`],getParticipationStats:[`GET /repos/{owner}/{repo}/stats/participation`],getPullRequestReviewProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],getPunchCardStats:[`GET /repos/{owner}/{repo}/stats/punch_card`],getReadme:[`GET /repos/{owner}/{repo}/readme`],getReadmeInDirectory:[`GET /repos/{owner}/{repo}/readme/{dir}`],getRelease:[`GET /repos/{owner}/{repo}/releases/{release_id}`],getReleaseAsset:[`GET /repos/{owner}/{repo}/releases/assets/{asset_id}`],getReleaseByTag:[`GET /repos/{owner}/{repo}/releases/tags/{tag}`],getRepoRuleSuite:[`GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}`],getRepoRuleSuites:[`GET /repos/{owner}/{repo}/rulesets/rule-suites`],getRepoRuleset:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}`],getRepoRulesetHistory:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history`],getRepoRulesetVersion:[`GET /repos/{owner}/{repo}/rulesets/{ruleset_id}/history/{version_id}`],getRepoRulesets:[`GET /repos/{owner}/{repo}/rulesets`],getStatusChecksProtection:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],getTeamsWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`],getTopPaths:[`GET /repos/{owner}/{repo}/traffic/popular/paths`],getTopReferrers:[`GET /repos/{owner}/{repo}/traffic/popular/referrers`],getUsersWithAccessToProtectedBranch:[`GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`],getViews:[`GET /repos/{owner}/{repo}/traffic/views`],getWebhook:[`GET /repos/{owner}/{repo}/hooks/{hook_id}`],getWebhookConfigForRepo:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/config`],getWebhookDelivery:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}`],listActivities:[`GET /repos/{owner}/{repo}/activity`],listAttestations:[`GET /repos/{owner}/{repo}/attestations/{subject_digest}`],listAutolinks:[`GET /repos/{owner}/{repo}/autolinks`],listBranches:[`GET /repos/{owner}/{repo}/branches`],listBranchesForHeadCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head`],listCollaborators:[`GET /repos/{owner}/{repo}/collaborators`],listCommentsForCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/comments`],listCommitCommentsForRepo:[`GET /repos/{owner}/{repo}/comments`],listCommitStatusesForRef:[`GET /repos/{owner}/{repo}/commits/{ref}/statuses`],listCommits:[`GET /repos/{owner}/{repo}/commits`],listContributors:[`GET /repos/{owner}/{repo}/contributors`],listCustomDeploymentRuleIntegrations:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps`],listDeployKeys:[`GET /repos/{owner}/{repo}/keys`],listDeploymentBranchPolicies:[`GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`],listDeploymentStatuses:[`GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses`],listDeployments:[`GET /repos/{owner}/{repo}/deployments`],listForAuthenticatedUser:[`GET /user/repos`],listForOrg:[`GET /orgs/{org}/repos`],listForUser:[`GET /users/{username}/repos`],listForks:[`GET /repos/{owner}/{repo}/forks`],listInvitations:[`GET /repos/{owner}/{repo}/invitations`],listInvitationsForAuthenticatedUser:[`GET /user/repository_invitations`],listLanguages:[`GET /repos/{owner}/{repo}/languages`],listPagesBuilds:[`GET /repos/{owner}/{repo}/pages/builds`],listPublic:[`GET /repositories`],listPullRequestsAssociatedWithCommit:[`GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls`],listReleaseAssets:[`GET /repos/{owner}/{repo}/releases/{release_id}/assets`],listReleases:[`GET /repos/{owner}/{repo}/releases`],listTags:[`GET /repos/{owner}/{repo}/tags`],listTeams:[`GET /repos/{owner}/{repo}/teams`],listWebhookDeliveries:[`GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries`],listWebhooks:[`GET /repos/{owner}/{repo}/hooks`],merge:[`POST /repos/{owner}/{repo}/merges`],mergeUpstream:[`POST /repos/{owner}/{repo}/merge-upstream`],pingWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/pings`],redeliverWebhookDelivery:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts`],removeAppAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],removeCollaborator:[`DELETE /repos/{owner}/{repo}/collaborators/{username}`],removeStatusCheckContexts:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],removeStatusCheckProtection:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],removeTeamAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],removeUserAccessRestrictions:[`DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],renameBranch:[`POST /repos/{owner}/{repo}/branches/{branch}/rename`],replaceAllTopics:[`PUT /repos/{owner}/{repo}/topics`],requestPagesBuild:[`POST /repos/{owner}/{repo}/pages/builds`],setAdminBranchProtection:[`POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins`],setAppAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps`,{},{mapToData:`apps`}],setStatusCheckContexts:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts`,{},{mapToData:`contexts`}],setTeamAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams`,{},{mapToData:`teams`}],setUserAccessRestrictions:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users`,{},{mapToData:`users`}],testPushWebhook:[`POST /repos/{owner}/{repo}/hooks/{hook_id}/tests`],transfer:[`POST /repos/{owner}/{repo}/transfer`],update:[`PATCH /repos/{owner}/{repo}`],updateBranchProtection:[`PUT /repos/{owner}/{repo}/branches/{branch}/protection`],updateCommitComment:[`PATCH /repos/{owner}/{repo}/comments/{comment_id}`],updateDeploymentBranchPolicy:[`PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}`],updateInformationAboutPagesSite:[`PUT /repos/{owner}/{repo}/pages`],updateInvitation:[`PATCH /repos/{owner}/{repo}/invitations/{invitation_id}`],updateOrgRuleset:[`PUT /orgs/{org}/rulesets/{ruleset_id}`],updatePullRequestReviewProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews`],updateRelease:[`PATCH /repos/{owner}/{repo}/releases/{release_id}`],updateReleaseAsset:[`PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}`],updateRepoRuleset:[`PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}`],updateStatusCheckPotection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`,{},{renamed:[`repos`,`updateStatusCheckProtection`]}],updateStatusCheckProtection:[`PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks`],updateWebhook:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}`],updateWebhookConfigForRepo:[`PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config`],uploadReleaseAsset:[`POST /repos/{owner}/{repo}/releases/{release_id}/assets{?name,label}`,{baseUrl:`https://uploads.github.com`}]},search:{code:[`GET /search/code`],commits:[`GET /search/commits`],issuesAndPullRequests:[`GET /search/issues`],labels:[`GET /search/labels`],repos:[`GET /search/repositories`],topics:[`GET /search/topics`],users:[`GET /search/users`]},secretScanning:{createPushProtectionBypass:[`POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses`],getAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],getScanHistory:[`GET /repos/{owner}/{repo}/secret-scanning/scan-history`],listAlertsForOrg:[`GET /orgs/{org}/secret-scanning/alerts`],listAlertsForRepo:[`GET /repos/{owner}/{repo}/secret-scanning/alerts`],listLocationsForAlert:[`GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations`],listOrgPatternConfigs:[`GET /orgs/{org}/secret-scanning/pattern-configurations`],updateAlert:[`PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}`],updateOrgPatternConfigs:[`PATCH /orgs/{org}/secret-scanning/pattern-configurations`]},securityAdvisories:{createFork:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forks`],createPrivateVulnerabilityReport:[`POST /repos/{owner}/{repo}/security-advisories/reports`],createRepositoryAdvisory:[`POST /repos/{owner}/{repo}/security-advisories`],createRepositoryAdvisoryCveRequest:[`POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cve`],getGlobalAdvisory:[`GET /advisories/{ghsa_id}`],getRepositoryAdvisory:[`GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}`],listGlobalAdvisories:[`GET /advisories`],listOrgRepositoryAdvisories:[`GET /orgs/{org}/security-advisories`],listRepositoryAdvisories:[`GET /repos/{owner}/{repo}/security-advisories`],updateRepositoryAdvisory:[`PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}`]},teams:{addOrUpdateMembershipForUserInOrg:[`PUT /orgs/{org}/teams/{team_slug}/memberships/{username}`],addOrUpdateRepoPermissionsInOrg:[`PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],checkPermissionsForRepoInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],create:[`POST /orgs/{org}/teams`],createDiscussionCommentInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],createDiscussionInOrg:[`POST /orgs/{org}/teams/{team_slug}/discussions`],deleteDiscussionCommentInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],deleteDiscussionInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],deleteInOrg:[`DELETE /orgs/{org}/teams/{team_slug}`],getByName:[`GET /orgs/{org}/teams/{team_slug}`],getDiscussionCommentInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],getDiscussionInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],getMembershipForUserInOrg:[`GET /orgs/{org}/teams/{team_slug}/memberships/{username}`],list:[`GET /orgs/{org}/teams`],listChildInOrg:[`GET /orgs/{org}/teams/{team_slug}/teams`],listDiscussionCommentsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments`],listDiscussionsInOrg:[`GET /orgs/{org}/teams/{team_slug}/discussions`],listForAuthenticatedUser:[`GET /user/teams`],listMembersInOrg:[`GET /orgs/{org}/teams/{team_slug}/members`],listPendingInvitationsInOrg:[`GET /orgs/{org}/teams/{team_slug}/invitations`],listReposInOrg:[`GET /orgs/{org}/teams/{team_slug}/repos`],removeMembershipForUserInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}`],removeRepoInOrg:[`DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}`],updateDiscussionCommentInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}`],updateDiscussionInOrg:[`PATCH /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}`],updateInOrg:[`PATCH /orgs/{org}/teams/{team_slug}`]},users:{addEmailForAuthenticated:[`POST /user/emails`,{},{renamed:[`users`,`addEmailForAuthenticatedUser`]}],addEmailForAuthenticatedUser:[`POST /user/emails`],addSocialAccountForAuthenticatedUser:[`POST /user/social_accounts`],block:[`PUT /user/blocks/{username}`],checkBlocked:[`GET /user/blocks/{username}`],checkFollowingForUser:[`GET /users/{username}/following/{target_user}`],checkPersonIsFollowedByAuthenticated:[`GET /user/following/{username}`],createGpgKeyForAuthenticated:[`POST /user/gpg_keys`,{},{renamed:[`users`,`createGpgKeyForAuthenticatedUser`]}],createGpgKeyForAuthenticatedUser:[`POST /user/gpg_keys`],createPublicSshKeyForAuthenticated:[`POST /user/keys`,{},{renamed:[`users`,`createPublicSshKeyForAuthenticatedUser`]}],createPublicSshKeyForAuthenticatedUser:[`POST /user/keys`],createSshSigningKeyForAuthenticatedUser:[`POST /user/ssh_signing_keys`],deleteAttestationsBulk:[`POST /users/{username}/attestations/delete-request`],deleteAttestationsById:[`DELETE /users/{username}/attestations/{attestation_id}`],deleteAttestationsBySubjectDigest:[`DELETE /users/{username}/attestations/digest/{subject_digest}`],deleteEmailForAuthenticated:[`DELETE /user/emails`,{},{renamed:[`users`,`deleteEmailForAuthenticatedUser`]}],deleteEmailForAuthenticatedUser:[`DELETE /user/emails`],deleteGpgKeyForAuthenticated:[`DELETE /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`deleteGpgKeyForAuthenticatedUser`]}],deleteGpgKeyForAuthenticatedUser:[`DELETE /user/gpg_keys/{gpg_key_id}`],deletePublicSshKeyForAuthenticated:[`DELETE /user/keys/{key_id}`,{},{renamed:[`users`,`deletePublicSshKeyForAuthenticatedUser`]}],deletePublicSshKeyForAuthenticatedUser:[`DELETE /user/keys/{key_id}`],deleteSocialAccountForAuthenticatedUser:[`DELETE /user/social_accounts`],deleteSshSigningKeyForAuthenticatedUser:[`DELETE /user/ssh_signing_keys/{ssh_signing_key_id}`],follow:[`PUT /user/following/{username}`],getAuthenticated:[`GET /user`],getById:[`GET /user/{account_id}`],getByUsername:[`GET /users/{username}`],getContextForUser:[`GET /users/{username}/hovercard`],getGpgKeyForAuthenticated:[`GET /user/gpg_keys/{gpg_key_id}`,{},{renamed:[`users`,`getGpgKeyForAuthenticatedUser`]}],getGpgKeyForAuthenticatedUser:[`GET /user/gpg_keys/{gpg_key_id}`],getPublicSshKeyForAuthenticated:[`GET /user/keys/{key_id}`,{},{renamed:[`users`,`getPublicSshKeyForAuthenticatedUser`]}],getPublicSshKeyForAuthenticatedUser:[`GET /user/keys/{key_id}`],getSshSigningKeyForAuthenticatedUser:[`GET /user/ssh_signing_keys/{ssh_signing_key_id}`],list:[`GET /users`],listAttestations:[`GET /users/{username}/attestations/{subject_digest}`],listAttestationsBulk:[`POST /users/{username}/attestations/bulk-list{?per_page,before,after}`],listBlockedByAuthenticated:[`GET /user/blocks`,{},{renamed:[`users`,`listBlockedByAuthenticatedUser`]}],listBlockedByAuthenticatedUser:[`GET /user/blocks`],listEmailsForAuthenticated:[`GET /user/emails`,{},{renamed:[`users`,`listEmailsForAuthenticatedUser`]}],listEmailsForAuthenticatedUser:[`GET /user/emails`],listFollowedByAuthenticated:[`GET /user/following`,{},{renamed:[`users`,`listFollowedByAuthenticatedUser`]}],listFollowedByAuthenticatedUser:[`GET /user/following`],listFollowersForAuthenticatedUser:[`GET /user/followers`],listFollowersForUser:[`GET /users/{username}/followers`],listFollowingForUser:[`GET /users/{username}/following`],listGpgKeysForAuthenticated:[`GET /user/gpg_keys`,{},{renamed:[`users`,`listGpgKeysForAuthenticatedUser`]}],listGpgKeysForAuthenticatedUser:[`GET /user/gpg_keys`],listGpgKeysForUser:[`GET /users/{username}/gpg_keys`],listPublicEmailsForAuthenticated:[`GET /user/public_emails`,{},{renamed:[`users`,`listPublicEmailsForAuthenticatedUser`]}],listPublicEmailsForAuthenticatedUser:[`GET /user/public_emails`],listPublicKeysForUser:[`GET /users/{username}/keys`],listPublicSshKeysForAuthenticated:[`GET /user/keys`,{},{renamed:[`users`,`listPublicSshKeysForAuthenticatedUser`]}],listPublicSshKeysForAuthenticatedUser:[`GET /user/keys`],listSocialAccountsForAuthenticatedUser:[`GET /user/social_accounts`],listSocialAccountsForUser:[`GET /users/{username}/social_accounts`],listSshSigningKeysForAuthenticatedUser:[`GET /user/ssh_signing_keys`],listSshSigningKeysForUser:[`GET /users/{username}/ssh_signing_keys`],setPrimaryEmailVisibilityForAuthenticated:[`PATCH /user/email/visibility`,{},{renamed:[`users`,`setPrimaryEmailVisibilityForAuthenticatedUser`]}],setPrimaryEmailVisibilityForAuthenticatedUser:[`PATCH /user/email/visibility`],unblock:[`DELETE /user/blocks/{username}`],unfollow:[`DELETE /user/following/{username}`],updateAuthenticated:[`PATCH /user`]}};const qo=new Map;for(let[e,t]of Object.entries(Ko))for(let[n,r]of Object.entries(t)){let[t,i,a]=r,[o,s]=t.split(/ /),c=Object.assign({method:o,url:s},i);qo.has(e)||qo.set(e,new Map),qo.get(e).set(n,{scope:e,methodName:n,endpointDefaults:c,decorations:a})}const Jo={has({scope:e},t){return qo.get(e).has(t)},getOwnPropertyDescriptor(e,t){return{value:this.get(e,t),configurable:!0,writable:!0,enumerable:!0}},defineProperty(e,t,n){return Object.defineProperty(e.cache,t,n),!0},deleteProperty(e,t){return delete e.cache[t],!0},ownKeys({scope:e}){return[...qo.get(e).keys()]},set(e,t,n){return e.cache[t]=n},get({octokit:e,scope:t,cache:n},r){if(n[r])return n[r];let i=qo.get(t).get(r);if(!i)return;let{endpointDefaults:a,decorations:o}=i;return n[r]=o?Xo(e,t,r,a,o):e.request.defaults(a),n[r]}};function Yo(e){let t={};for(let n of qo.keys())t[n]=new Proxy({octokit:e,scope:n,cache:{}},Jo);return t}function Xo(e,t,n,r,i){let a=e.request.defaults(r);function o(...r){let o=a.endpoint.merge(...r);if(i.mapToData)return o=Object.assign({},o,{data:o[i.mapToData],[i.mapToData]:void 0}),a(o);if(i.renamed){let[r,a]=i.renamed;e.log.warn(`octokit.${t}.${n}() has been renamed to octokit.${r}.${a}()`)}if(i.deprecated&&e.log.warn(i.deprecated),i.renamedParameters){let o=a.endpoint.merge(...r);for(let[r,a]of Object.entries(i.renamedParameters))r in o&&(e.log.warn(`"${r}" parameter is deprecated for "octokit.${t}.${n}()". Use "${a}" instead`),a in o||(o[a]=o[r]),delete o[r]);return a(o)}return a(...r)}return Object.assign(o,a)}function Zo(e){let t=Yo(e);return{...t,rest:t}}Zo.VERSION=`17.0.0`;const Qo=Ro.plugin(zo,Zo,Go).defaults({userAgent:`octokit-rest.js/22.0.1`});function $o(e){let t=e?.cause;if(typeof t?.code==`string`)return t.code;let n=e?.code;return typeof n==`string`?n:void 0}const es=[`CERT`,`SELF_SIGNED`,`SIGNATURE`,`ISSUER`];function ts(e,t){let n=$o(e);if(n&&es.some(e=>n.includes(e)))return{kind:`tls`,message:`Could not verify the TLS certificate for ${t}. If this is a GitHub Enterprise Server with a self-signed or internal-CA certificate, add its CA to your system trust store (macOS Keychain, Windows certificate store, or your distro's ca-certificates).`};let r=e?.status;return r===401?{kind:`token`,message:`Token invalid for ${t}`}:r===403?{kind:`token`,message:`Token rejected by ${t} — check that it has the repo and read:user scopes, and that it is authorized for SSO if the organization requires it`}:n?{kind:`network`,message:`Could not reach ${t} (${n})`}:{kind:`token`,message:`Authentication failed for ${t}`}}async function ns(){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf8`).trim()}async function rs(e,t,n){let{host:r,json:i}=e,a=await(n??(()=>io({message:`Enter PAT for ${r}:`})))();a||(process.stderr.write(`No token provided
+`),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new Qo({auth:a,...o?{baseUrl:o}:{}}),c=`unknown`,l,u;try{let{data:e}=await s.users.getAuthenticated();c=e.login,l=e.name??void 0,u=e.email??void 0}catch(e){let t=ts(e,r).message;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}try{await t.set(r,c,a,{gitProtocol:`https`,name:l,email:u})}catch(e){let t=`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}i?process.stdout.write(`${JSON.stringify({type:`complete`,host:r,login:c})}\n`):process.stderr.write(`✓ PAT stored for ${c} on ${r}\n`)}function is(e){return new M(`pat`).description(`Store a Personal Access Token`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=Qa(t.host),r=t.tokenStdin?ns:void 0;await rs({host:n,json:t.json},await e(),r)})}async function as(e,t,n=_i){let r=n(e);return r.available&&r.token?r.token:(await t.get(e))?.token??null}async function os(e,t){let{host:n,json:r}=e,i=await as(n,t);i??(process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=new Qo({auth:i,...a?{baseUrl:a}:{}}),s=[];for await(let e of o.paginate.iterator(o.repos.listForAuthenticatedUser,{per_page:100,sort:`updated`}))for(let t of e.data)s.push({full_name:t.full_name,clone_url:t.clone_url,private:t.private});if(r)process.stdout.write(`${JSON.stringify({type:`repos`,host:n,repos:s})}\n`);else for(let e of s)process.stdout.write(`${e.full_name}  ${e.clone_url}\n`)}function ss(e){return new M(`repos`).description(`List accessible repositories`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Qa(t.host);await os({...t,host:n},await e())})}async function cs(e){let{host:t}=e,{touched:n}=await ti(t);if(n.length===0){process.stderr.write(`Not signed in to ${t}\n`);return}process.stderr.write(`✓ Signed out from ${t}\n`),n.includes(`keychain`)&&process.stderr.write(`  cleared from OS keychain
+`),n.includes(`file`)&&process.stderr.write(`  cleared from ${fi()}\n`)}function ls(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=$a(e.host);await cs({...e,host:t})})}async function us(e,t,n=_i){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function ds(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function fs(e,t){let n=await t.get(e);return n==null?{authenticated:!1}:{authenticated:!1,unverified:!0,login:n.login}}function ps(e,t){return e.unverified===!0?`Token stored for ${e.login} on ${t}. ${t} is not a GitHub host, so OpenKnowledge does not verify it; git uses this credential to push and pull.`:`No token stored for ${t}. Store one with:\n\n${Wa(t)}`}async function ms(e,t){let{host:n,json:r}=e,i=await fs(n,t);r?process.stdout.write(`${JSON.stringify(ds(n,t.backend,i))}\n`):process.stderr.write(`${ps(i,n)}\n`),process.exit(i.unverified===!0?0:1)}async function hs(e,t){let{host:n,json:r}=e,i=t.backend,a=await us(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new Qo({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ts(e,n);r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function gs(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`Git hostname (default: the origin host, or github.com with no origin; required when origin has no hostname, such as a local path). A non-GitHub host reports its stored token without verifying it`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Za(t.host);if(n.kind===`other`){await ms({...t,host:n.host},await e());return}await hs({...t,host:n.host},await e())})}function _s(e,t){return t?process.stdout.write(`${JSON.stringify(e)}\n`):e.type===`error`?process.stderr.write(`${e.message}\n`):process.stderr.write(`✓ Token stored for ${e.login} on ${e.host}\n`),e}async function vs(e,t,n){let{json:r}=e,i=e.host?.trim()??``;if(!i)return _s({type:`error`,message:`A host is required. Pass --host <host>.`},r);if(!S(i))return _s({type:`error`,message:`${i} is not a host name. Pass the host git connects to, with an optional :port and no scheme or path, for example git.example.com or git.example.com:8443.`},r);let a=ue(i);if(qa(a))return _s({type:`error`,message:`${a} is a GitHub host. Use ok auth pat --host ${a}, which checks the token with GitHub before storing it.`},r);let o=e.username?.trim()??``;if(!o)return _s({type:`error`,message:`A username is required. Pass --username <username>.`},r);let s=await(n??(()=>io({message:`Enter token:`})))();if(!s)return _s({type:`error`,message:`No token provided`},r);try{await t.set(a,o,s,{gitProtocol:`https`})}catch(e){return _s({type:`error`,message:`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`},r)}return _s({type:`complete`,host:a,login:o},r)}function ys(e){return new M(`token`).description(`Store an access token for any git host`).option(`--host <host>`,`Git host to store the token for`).option(`--username <username>`,`Username git sends with the token (Bitbucket: x-bitbucket-api-token-auth for an API token, x-token-auth for a repository or workspace access token; oauth2 for GitLab; your Gitea username; any non-empty value for Azure DevOps)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=t.tokenStdin?ns:void 0;(await vs({host:t.host,username:t.username,json:t.json},await e(),n)).type===`error`&&process.exit(1)})}function bs(e){let t=new M(`auth`);t.description(`Git host authentication management`);let n=e=>di(void 0,e);return t.addCommand(no(n)),t.addCommand(gs(n)),t.addCommand(ss(n)),t.addCommand(ls()),t.addCommand(is(n)),t.addCommand(ys(n)),t.addCommand(Ea(n,e)),t}function xs(e,t=Zi(),n=ei){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[z(e)])}catch{}}function Ss(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await yr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:xr(),logger:ui()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&xs(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Cs(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function ws(e){let t=e.inspect??(()=>tr(e.lockDir,`server`,{isAlive:en})),n=e.unlink??(e=>Ji(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Cs(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Ts(e){return new M(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),ws({lockDir:j(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Es(e){return`!${e.map(Ae).join(` `)} auth git-credential`}function Ds(e){return`credential.helper=${Es(e)}`}function Os(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Es(e)}`]}async function ks(e,t,n={},r=_i){let i=[`credential.helper=`,Ds(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=(n.credentialHost===void 0?null:await t.get(n.credentialHost))??await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function As(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const js=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Ms(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of js)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function K(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ns(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ps(e,t=process.env){let n=Ns(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Fs(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Is(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ls=ce;async function Rs(e){try{return await e.clone(Is(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ls(t))return e.onFallback(e.branch),await e.clone(Is(null)),{fellBack:!0};throw t}}function zs(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function Bs(e,t,n){return e===`https`&&t===`github.com`&&n}function Vs(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Hs(e){return Vs(e,{url:`The clone URL`,operation:`the clone`})}async function Us(e,t,n={}){let r=sr(e);if(!r)throw Error(`Invalid git URL: ${Js(e)}`);if(e.trim().startsWith(`http://`))return{auth:{tier:`none`,gitConfig:[]}};let i=Nn(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=se(e)??void 0,o=await ks(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login,credentialHost:a},n._detectGhFn),s=i.login!==void 0&&o.tier===`A`&&!Vt(o.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:o,...s===void 0?{}:{declaredMiss:s}}}function Ws(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Gs(e,t,n,r=process.cwd()){let i=sr(e);if(!i)throw Error(`Invalid git URL: ${Js(e)}`);let a=Ws(e,i),o=t.dir?H(r,t.dir):H(r,i.name),s=U(o);if(s&&Wi(o).length>0)throw Error(`Target directory is not empty: ${o}`);Wt();let c=Qr(),l=i.protocol===`https`&&i.hostname===`github.com`&&await As(i.owner,i.name),u=Bs(i.protocol,i.hostname,l)?{auth:{tier:`none`,gitConfig:[]}}:await Us(a,c,{selfCliArgs:Fs(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),d=u.auth;if(t.onAuthResolved?.({tier:d.tier,login:d.relayToken?.login}),!t.json){let e=Hs(u.declaredMiss);e&&process.stderr.write(e)}let f=Ps(d),p=zs(r,d.gitConfig),m=k(p).env(f),h=-1;m.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
+`)){let n=Ms(e);n&&n.pct!==h&&(h=n.pct,K(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Rs({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>m.clone(a,o,[...e,`--no-checkout`]),onFallback:e=>{K(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
+`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await lt(g,`HEAD`,f)}catch(e){throw qi(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-Br75Da84.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?K(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Ks(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Ks(e){let t=Cr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const qs=/^[A-Za-z0-9._/:@-]+$/;function Js(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Pn(i)!==void 0?`${t}${i}@`:t})}function Ys(e){return qs.test(e)?e:Ae(e)}function Xs(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ys(t)}`:``;return`ok clone ${Ys(e)}${n}`}function Zs(e){let t=f(e.error);if(t.kind!==`auth`)return null;let n=Js(e.url);if(ae(t)){let t=Xs(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Xs(n,e.branch)}`].join(`
+`)}function Qs(e){if(!(e.error instanceof Tt)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=Js(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${Xs(t,e.branch)}`].join(`
+`)}function $s(e){let t=e.error instanceof vt?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:kn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof vt?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Zs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??Qs({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function ec(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function tc(e){let t=f(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=sr(e.url);t&&(r=await(e.resolvePrincipal??(e=>ec(Qr(),e)))(t.hostname))}}$s({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function nc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Gs(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)K(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BdUyii8P.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Et||e instanceof Un){r.json?K(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await tc({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>K(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var rc=p();const ic=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...Oe.map(e=>e.path)];function ac(e){return un({absPath:Sn(`project-local`,e),sideline:!1}).diagnostics}function oc(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Si;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ac)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(E(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function sc(e){let t=W(e,`utf-8`),n=(0,rc.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ic)n.hasIn(e)&&r.push(e.join(`.`));return r}function cc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function lc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=cc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function uc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function dc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??mn,s=uc(r).map(t=>({scope:t,absPath:Sn(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=sc(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:lc(ic.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:E(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const fc=`project | project-local | user | all`,pc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function mc(e){return e!==`config`}function hc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{oc({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${fc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!pc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${fc}`),process.exitCode=2;return}(await dc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const gc=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],_c=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function vc(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(_c),t.join(`
+`)}function yc(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ${ne(`skill-state.yml`)}`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
+`)}function bc(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),...gc,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
+`)}function xc(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function Sc(e={}){let t=await vn(e);return t.status===`failed`?{...t,message:xc(t),exitCode:1}:t.status===`skip-current`?{...t,message:yc(t),exitCode:0}:t.status===`installed`?{...t,message:bc(t),exitCode:0}:{...t,message:vc(t),exitCode:0}}function Cc(){return new M(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await Sc({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function wc(e,t){let n=ia({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function Tc(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Gr(e)} readProcessStart=${t}`}function Ec(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Vr(n,r),t.onNativeFailure?.({kind:e,reason:Kr(n,r)})};try{if(n===`win32`){let n=!1,a=Ur(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Tc(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Gr(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Di,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Dc(e,t={}){let n=t.probe??It(),r=t.isAlive??(e=>en(e,n(e))),i=t.isAlive??Zt,a=tr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(ui()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(or(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>ft(n)))(),u=await $i(e).catch(()=>H(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Ec)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ${ne(`logs`)}. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await fr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await ra(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function Oc(e){return e?Ce.filter(e=>e!==be):[...Ce]}function kc(e){return Oc(e).map(e=>`~/.ok/${e}`).join(`, `)}function q(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Ac(e){return Pi===`/`?e:e.split(Pi).join(`/`)}function jc(e,t,n=`This project`){let r=[],i=[j(e)],a=B(e,`.ok`);wi(B(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of Ar){let a=Lr[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Ac(V(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Ac(V(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Ir(e),...Fr(e),...pe]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:B(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:wn(e)})}catch{}let c=B(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function Mc(e,t){return{scope:`deinit`,ops:jc(e,t)}}function Nc(e){let{home:t,platform:n,host:a,lockDirs:o,marker:s,recentDeinitProjectRoots:c,purgeContent:l}=e,u=[];for(let e of o)u.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${q(B(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});u.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${a}) from the OS keychain + ${C}`,host:a}),u.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (${r})`}),u.push(...Fc(s,t));for(let e of Ar){let n=Lr[e],r;try{r=n.configPath(``,t)}catch{continue}u.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${q(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of ir(t))u.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${q(e.path,t)}`,path:e.path});for(let e of c)u.push(...jc(e,t,`Project: ${ji(e)}`));u.push(...Ic(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e));let{userHomeDirName:d}=i();return d===`.ok`?u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:l?`Remove ~/.ok (including user-authored skills; keeping ${kc(!0)}, shared by every channel)`:`Remove ~/.ok (keeping ${kc(!1)}, shared by every channel)`,path:bn(t),preserve:Oc(l)}):(u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:l?`Remove ~/${d}`:`Remove ~/${d} (keeping ~/.ok/${be}, shared by every channel)`,path:bn(t)}),l&&u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:`Remove ~/.ok/${be} (user-authored skills, shared by every channel)`,path:B(t,`.ok`,be)})),{scope:`uninstall`,ops:u}}function Pc(e){return[B(e,`.zshrc`),B(e,`.bash_profile`),B(e,`.config`,`fish`,`conf.d`,ar())]}function Fc(e,t){let n=[],r=new Set([...Pc(t),...e?.rcFiles??[]]);for(let e of r)wi(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${q(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${q(r.path,t)}`,path:r.path,target:r.target});return n}function Ic(e,t,n){let r={home:e,platformName:t,env:n},i=ur(r),a=Qn(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${q(i,e)}`,path:i}];if(t===`darwin`&&b()===`stable`){let t=ur({...r,productName:Jn});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${q(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${q(a,e)}`,path:a}),o}async function Lc(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??ti,r=t.clearEmbeddingsKey??sn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[H(e.lockDir)]:[])),a=It(),o=t.scanProcesses??(()=>ft(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Dc(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(H(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await zc(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=H(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(H(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(H(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Rc(e,t=_r){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function zc(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "${i().keyringService}"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=wi(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Bc(t.reason)}: ${e.rcFile}`};let n;try{n=W(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Bc(Mr(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=dr(n);return i?a&&!t.symlink?(qi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(An(t.path,r,{mode:Nr(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return vr(e.path,e.target)?(Ji(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=oi(Lr[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Bc(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Ti(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${B(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Bc(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=qr(e.projectRoot,Uc(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${B(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Vc(e)}}function Bc(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Wr(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Vc(e){if(e.requireOurState&&!lr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&kr(e.path,e.containWithin);let t;try{t=Vi(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}return t?t.isSymbolicLink()?(Ji(e.path),{op:e,status:`removed`}):e.preserve&&e.preserve.length>0?{op:e,status:Hc(e.path,e.preserve)?`removed`:`not-present`}:(qi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}):{op:e,status:`not-present`}}function Hc(e,t){let n=!1;for(let r of Wi(e)){if(t.includes(r))continue;let i=B(e,r),a=t.flatMap(e=>e.startsWith(`${r}/`)?[e.slice(r.length+1)]:[]);if(a.length>0&&Vi(i).isDirectory()){Hc(i,a)&&(n=!0);continue}qi(i,{recursive:!0,force:!0}),n=!0}return n}function Uc(e){let t=new Set([B(e,`.claude`,`launch.json`)]);for(let n of Ar){let r=Lr[n].projectConfigPath?.(e);r&&t.add(r)}return Ir(e).filter(n=>{let r=B(e,n);if(!t.has(r))return!0;try{return Vi(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Wc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Gc(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of Wc(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
+`)}function Kc(e){return e.replaceAll(`
 `,`
-      `)}function Kc(e){let t=e.removed.length,n=e.failed.filter(e=>e.status!==`blocked`),r=e.results.filter(e=>e.status===`blocked`),i=n.length,a=e.results.filter(e=>e.status===`not-present`).length,o=e.results.filter(e=>e.status===`skipped`),s=[];s.push(e.failed.length>0?L(`Removed ${t} item${t===1?``:`s`}, ${i} could not be removed.`):F(`✓ Removed ${t} item${t===1?``:`s`}.`)),r.length>0&&s.push(L(`  ${r.length} dependent items left untouched; resolve the failures below and retry.`)),a>0&&s.push(P(`  ${a} already absent.`));for(let t of e.removed)t.detail!==void 0&&s.push(`  ${L(`·`)} ${t.op.label} — ${P(Gc(t.detail))}`);for(let e of o)s.push(`  ${L(`·`)} ${e.op.kind===`stop-server`?`Skipped`:`Left in place`}: ${e.op.label}${e.detail?` — ${P(Gc(e.detail))}`:``}`);if(i>0){s.push(``),s.push(I(`Could not remove:`));for(let e of n)s.push(`  ${I(`✗`)} ${e.op.label}${e.detail?` — ${Gc(e.detail)}`:``}`)}return s.join(`
-`)}function qc(e,t=[]){return{scope:e.scope,mode:`dry-run`,planned:e.ops.map(e=>({kind:e.kind,label:e.label})),attachedClients:t}}function Jc(e,t,n=[]){return{scope:e,mode:`applied`,removed:t.removed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),skipped:t.results.filter(e=>e.status===`skipped`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),blocked:t.results.filter(e=>e.status===`blocked`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),failed:t.failed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),attachedClients:n}}async function Yc(e={}){let t=H(e.cwd??process.cwd()),n=e.home??Yi();if(Wt(t,n))return{status:`failed`,message:`${I(`Refusing to deinit your home directory.`)}\n  ${t}/.ok is OpenKnowledge's user-global directory (global.yml, skills/,\n  ${b}), not a project. Removing it would delete your global settings and skills.\n  To remove OpenKnowledge everywhere, use 'ok uninstall'.`,exitCode:64};if(!U(B(t,`.ok`)))return{status:`no-op`,message:P(`No OpenKnowledge project found at ${t}. Nothing to remove.`),exitCode:0};let r=jc(t,n),i=await Lc(r,e.probeClients),a=i.length>0?`\n\n${i.map(e=>L(e)).join(`
-`)}`:``;if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(qc(r,i),null,2):`${R(`Would remove (dry-run — no changes made):`)}\n\n${Wc(r)}${a}`,exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${I(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes&&(process.stderr.write(`${R(`Remove OpenKnowledge from ${t}:`)}\n\n${Wc(r)}${a}\n\n`),!await Cc(`${R(`Remove these?`)} ${P(`[y/N] `)}`,e.confirmStream)))return{status:`cancelled`,message:P(`Cancelled.`),exitCode:0};let o=await Ic(r,{env:e.env??(e.home===void 0?process.env:{}),...e.runRemovalDeps});return{status:o.failed.length>0?`failed`:`done`,message:e.json?JSON.stringify(Jc(`deinit`,o,i),null,2):Kc(o),exitCode:+(o.failed.length>0)}}function Xc(){return new M(`deinit`).description("Remove OpenKnowledge from this project (its .ok/, editor MCP entries, git-exclude lines, shadow repo) while leaving your markdown content untouched. Re-run `ok start` to re-scaffold.").argument(`[path]`,`Project directory (defaults to the current project)`).option(`-y, --yes`,`Skip the confirmation prompt`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).action(async(e,t)=>{let n=await Yc({cwd:e??process.cwd(),yes:t.yes,dryRun:t.dryRun,json:t.json});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}var Y=e(pi(),1);function Zc(){let e=Ai(`bun`,[`--version`],j({encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}}));return e.error?{ok:!1,error:e.error.message}:e.signal===`SIGTERM`?{ok:!1,error:`probe timed out`}:e.status===0?{ok:!0,version:e.stdout.trim()}:{ok:!1,error:e.stderr?.trim()||`exit code ${e.status}`}}function Qc(e={}){let t=e.probe??Zc;return{name:`bun`,run:async()=>{let e=t();return e.ok?{name:`bun`,status:`pass`,summary:`bun ${e.version}`}:{name:`bun`,status:`fail`,summary:`bun not found on PATH`,remediation:`Install Bun: https://bun.sh/docs/installation`,detail:e.error}}}}function $c(e={}){let t=e.loader??Si;return{name:`config-yaml`,run:async e=>{let n=H(e.cwd,`.ok`,xi);if(!U(n))return{name:`config-yaml`,status:`warn`,summary:`.ok/${xi} not found (project not initialized)`,remediation:"Run `ok init` to scaffold the project."};try{let{config:n,sources:r}=t(e.cwd);return{name:`config-yaml`,status:`pass`,summary:`parses; content.dir = ${n.content.dir}`,detail:`sources: ${r.join(`, `)}`}}catch(e){let t=e instanceof Error?e.message:String(e);return{name:`config-yaml`,status:`fail`,summary:`.ok/${xi} failed to parse`,detail:t}}}}}function el(e){try{return Li(e,Bi.W_OK),{writable:!0}}catch(e){return{writable:!1,reason:e instanceof Error?e.message:String(e)}}}function tl(e={}){let t=e.loader??Si,n=e.probeWritable??el;return{name:`content-dir`,run:async e=>{let r=H(e.cwd,`.ok`,xi);if(!U(r))return{name:`content-dir`,status:`warn`,summary:`project not initialized`,remediation:"Run `ok init` to scaffold the project."};let i;try{let{config:n}=t(e.cwd);i=H(e.cwd,n.content.dir)}catch(e){return{name:`content-dir`,status:`fail`,summary:`content.dir unresolved (config invalid)`,detail:e instanceof Error?e.message:String(e)}}if(!U(i))return{name:`content-dir`,status:`fail`,summary:`content.dir does not exist: ${i}`,remediation:`Create the directory or fix \`content.dir\` in .ok/${xi}.`};if(!K(i).isDirectory())return{name:`content-dir`,status:`fail`,summary:`content.dir is not a directory: ${i}`};let a=n(i);return a.writable?{name:`content-dir`,status:`pass`,summary:`${i} (writable)`}:{name:`content-dir`,status:`fail`,summary:`content.dir is not writable: ${i}`,detail:a.reason}}}}function nl(e={}){let t=e.assert??Ft;return{name:`git`,run:async()=>{try{let e=t(),n=`git ${e.version} (${e.source} — ${e.resolvedPath})`;return Qt(e.version,`2.38.0`)<0?{name:`git`,status:`warn`,summary:`${n}; sync refuses merges that change symlinks on Git older than ${Jt}`,remediation:`Update Git to ${Jt} or newer`}:{name:`git`,status:`pass`,summary:n}}catch(e){if(e instanceof Ct)return{name:`git`,status:`fail`,summary:`git not found`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};if(e instanceof Un)return{name:`git`,status:`fail`,summary:`git ${e.detected} is older than required ${e.required}`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};throw e}}}}function rl(e){let t=Ai(`codesign`,[`--verify`,`--deep`,`--strict`,e],{encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}});return t.error?{ok:!1,stderr:t.error.message}:t.signal===`SIGTERM`?{ok:!1,stderr:`codesign probe timed out`}:{ok:t.status===0,stderr:(t.stderr??``).trim()}}function il(e={}){let t=e.platform??process.platform,n=e.execPath??process.execPath,r=e.codesignVerify??rl;return{name:`macos-codesig`,run:async()=>{if(t!==`darwin`)return{name:`macos-codesig`,status:`pass`,summary:`skipped on ${t} (macOS-only check)`};let e=n.indexOf(`/Contents/MacOS/`);if(e===-1)return{name:`macos-codesig`,status:`pass`,summary:`dev mode (no app bundle)`};let i=n.slice(0,e);if(i.startsWith(`/private/var/folders/`))return{name:`macos-codesig`,status:`fail`,summary:`app is running translocated (quarantine sandbox)`,remediation:`Drag OpenKnowledge.app to /Applications/ and re-launch.`,detail:`bundlePath: ${i}`};let a=r(i);return a.ok?{name:`macos-codesig`,status:`pass`,summary:`signed bundle at ${i}`}:{name:`macos-codesig`,status:`fail`,summary:`codesign --verify failed`,remediation:`Re-download OpenKnowledge from the official releases page.`,detail:`bundlePath: ${i}\n${a.stderr}`}}}}const al=[`git`,`bun`,`config-yaml`,`content-dir`,`server-lock`,`shadow-repo`,`shadow-health`,`macos-codesig`];function ol(e){return al.includes(e)}async function sl(e,t,n={}){let r=n.timeoutMs??5e3,i,a=Math.round(r/1e3);try{let n=new Promise(t=>{i=setTimeout(()=>{t({name:e.name,status:`fail`,summary:`check timed out after ${a}s`})},r)}),o=e.run(t),s=await Promise.race([o,n]);return o.catch(()=>{}),s}catch(t){let n=t instanceof Error?t.message:String(t);return{name:e.name,status:`fail`,summary:`check crashed: ${n}`}}finally{i!==void 0&&clearTimeout(i)}}async function cl(e,t,n={}){let r=[];for(let i of e)r.push(await sl(i,t,n));return r}function ll(e={}){let t=e.inspect??(e=>tr(e,`server`));return{name:`server-lock`,run:async e=>{let n=A(e.cwd);if(!U(n))return{name:`server-lock`,status:`pass`,summary:"no server lock (no `.ok/local/` yet)"};let r=t(n);switch(r.status){case`missing`:return{name:`server-lock`,status:`pass`,summary:`no server holding the lock`};case`alive`:return{name:`server-lock`,status:`fail`,summary:`server lock held by pid ${r.lock.pid} on this host`,remediation:"Stop the other OpenKnowledge process or run `ok stop`.",detail:`lockPath: ${r.lockPath}; port: ${r.lock.port}; started: ${r.lock.startedAt}`};case`unverified-owner`:return{name:`server-lock`,status:`warn`,summary:`unverified owner; recorded pid ${r.pid} is alive locally`,remediation:or(r),detail:`lockPath: ${r.lockPath}; pid: ${r.pid}`};case`foreign-host`:return{name:`server-lock`,status:`warn`,summary:`lock claimed by ${r.lock.hostname} (foreign host)`,remediation:`Stop the server on its owning machine and confirm the directory is no longer in use before removing the lock.`,detail:`lockPath: ${r.lockPath}; pid: ${r.lock.pid}`};case`dead-pid`:return{name:`server-lock`,status:`warn`,summary:`stale lock for non-existent pid ${r.lock.pid}`,remediation:"Run `ok clean` to prune.",detail:`lockPath: ${r.lockPath}`};case`read-error`:return{name:`server-lock`,status:`fail`,summary:`server.lock could not be read`,remediation:`Restore file and parent-directory access, then retry.`,detail:`${r.lockPath}: ${r.error}`};case`corrupt`:return{name:`server-lock`,status:`warn`,summary:`server.lock is corrupt (unparseable or invalid pid)`,remediation:`Delete ${r.lockPath} and rerun.`};default:return r}}}}async function ul(e,t){let n={gitDir:e,workTree:t},r=await nt(n),i=await vt(n),a=await $e(n,Date.now()-18e5),o=gt(n),s=null;for(let t of[`objects/info/commit-graph`,`objects/info/commit-graphs`]){let n=H(e,t);if(U(n))try{s=Math.max(s??0,K(n).mtimeMs)}catch{}}let c=null;try{let n=k({baseDir:t,timeout:{block:4e3}}).env({GIT_DIR:e}),r=(await n.raw(`for-each-ref`,`--sort=-creatordate`,`--format=%(objectname)`,`refs/checkpoints/`)).trim().split(`
-`).filter(Boolean).slice(0,25);for(let e of r){let t=(await n.raw(`log`,`-1`,`--format=%cI%x00%B`,e)).trim(),r=t.indexOf(`\0`);if(r<0)continue;let i=t.slice(0,r),a=t.slice(r+1);if(De(a)?.kind===`auto-consolidation`){let e=Date.parse(i);Number.isFinite(e)&&(c=e);break}}}catch{}return{looseObjects:r.looseObjects,packfiles:r.packfiles,wipWidth:i,deadChains:a,gcLogLatch:o,lastPackedAtMs:s,lastConsolidationAtMs:c}}function dl(e){if(e===null)return`never`;let t=Date.now()-e,n=t/864e5;if(n>=1)return`${Math.round(n)}d ago`;let r=t/36e5;return r>=1?`${Math.round(r)}h ago`:`${Math.max(0,Math.round(t/6e4))}m ago`}function fl(e={}){let t=e.resolveDir??sn,n=e.readFacts??ul;return{name:`shadow-health`,run:async e=>{let r=H(e.cwd,`.git`);if(!U(r))return{name:`shadow-health`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let i;try{i=t(e.cwd)}catch(e){return{name:`shadow-health`,status:`warn`,summary:`cannot resolve shadow gitdir: ${e instanceof Error?e.message:String(e)}`}}if(!U(i))return{name:`shadow-health`,status:`warn`,summary:`shadow repo not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let a=await n(i,e.cwd),o=[];a.gcLogLatch&&o.push(`gc.log latch present (auto-packing disabled until it self-expires)`),a.looseObjects>2e3?o.push(`${a.looseObjects} loose objects (unpacked)`):a.packfiles===0&&a.looseObjects>512&&o.push(`${a.looseObjects} loose objects, never packed`),a.deadChains>5&&o.push(`${a.deadChains} dead chains unfolded (auto-consolidation not keeping up)`),a.wipWidth>20&&o.push(`${a.wipWidth} WIP refs (version-journal width high)`);let s=[`loose objects: ${a.looseObjects}`,`packfiles: ${a.packfiles}`,`WIP refs: ${a.wipWidth}`,`dead chains: ${a.deadChains}`,`gc.log latch: ${a.gcLogLatch?`present`:`none`}`,`last packed: ${dl(a.lastPackedAtMs)}`,`last fold: ${dl(a.lastConsolidationAtMs)}`].join(`, `);return o.length>0?{name:`shadow-health`,status:`warn`,summary:`history may be slow: ${o.join(`; `)}`,remediation:`Packing and journal cleanup run automatically on the next server start and during use. If this persists, check the server logs.`,detail:s}:{name:`shadow-health`,status:`pass`,summary:`${a.looseObjects} loose, ${a.packfiles} packs, ${a.wipWidth} WIP refs`,detail:s}}}}function pl(e={}){let t=e.resolve??sn;return{name:`shadow-repo`,run:async e=>{let n=H(e.cwd,`.git`);if(!U(n))return{name:`shadow-repo`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let r;try{r=t(e.cwd)}catch(e){if(e instanceof Nn||e instanceof pn)return{name:`shadow-repo`,status:`fail`,summary:`cannot resolve shadow gitdir: ${e.message}`};throw e}if(!U(r))return{name:`shadow-repo`,status:`warn`,summary:`shadow repo at ${r} not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let i=H(r,`HEAD`);if(!U(i))return{name:`shadow-repo`,status:`fail`,summary:`shadow repo at ${r} is missing HEAD`};let a;try{a=G(i,`utf-8`).trim()}catch(e){return{name:`shadow-repo`,status:`fail`,summary:`cannot read shadow HEAD: ${e instanceof Error?e.message:String(e)}`}}return{name:`shadow-repo`,status:`pass`,summary:`${r} (HEAD: ${a})`}}}}function ml(){return[nl(),Qc(),$c(),tl(),ll(),pl(),fl(),il()]}function hl(e){switch(e){case`pass`:return Y.default.green(`✓`);case`warn`:return Y.default.yellow(`!`);case`fail`:return Y.default.red(`✗`)}}function gl(e,t){let n=[`[${hl(e.status)}] ${e.name}: ${e.summary}`];if(e.remediation!==void 0&&e.status!==`pass`&&n.push(`    → ${e.remediation}`),t&&e.detail!==void 0)for(let t of e.detail.split(`
-`))n.push(`    ${Y.default.dim(t)}`);return n}function _l(e){let t=e.filter(e=>e.status===`fail`).length,n=e.filter(e=>e.status===`warn`).length;if(t===0&&n===0)return`All checks passed`;let r=[];return t>0&&r.push(`${t} error${t===1?``:`s`}`),n>0&&r.push(`${n} warning${n===1?``:`s`}`),r.join(`, `)}async function vl(e,t={}){let n=t.checks??ml(),r=t.stdout??(e=>console.log(e)),i=t.stderr??(e=>console.error(e)),a=e.quiet??!1,o=e.json??!1,s=e.verbose??!1,c;if(e.check!==void 0){if(!ol(e.check))return i(Y.default.red(`unknown check '${e.check}'. Valid: ${al.join(`, `)}`)),2;let t=e.check,r=n.find(e=>e.name===t);if(!r)return i(Y.default.red(`internal error: check '${e.check}' not registered`)),2;c=[r]}else c=[...n];let l={cwd:e.cwd},u=await cl(c,l,t.timeoutMs===void 0?{}:{timeoutMs:t.timeoutMs});if(!a){if(o)for(let e of u)r(JSON.stringify(e));else{for(let e of u)for(let t of gl(e,s))r(t);r(``),r(_l(u))}}return+!!u.some(e=>e.status===`fail`)}function yl(){return new M(`health`).description(`Run environment health checks (${al.join(`, `)})`).option(`--json`,`Emit NDJSON (one CheckResult per line)`).option(`--verbose`,`Include detail field + probe context in human-readable output`).option(`--check <name>`,`Run only the named check. One of: ${al.join(`, `)}`).option(`--quiet`,`Suppress output; exit code only`).action(async e=>{let t=await vl({cwd:process.cwd(),json:e.json,verbose:e.verbose,check:e.check,quiet:e.quiet});process.exit(t)})}function bl(e){let t=Ai(`ps`,[`-p`,String(e),`-o`,`%cpu=,%mem=,rss=,vsz=`],j({encoding:`utf-8`,timeout:2e3}));if(t.error||!t.stdout?.trim())return null;let[n,r,i,a]=t.stdout.trim().split(/\s+/),o=Number.parseFloat(n??``),s=Number.parseFloat(r??``),c=Number.parseInt(i??``,10),l=Number.parseInt(a??``,10);return Number.isNaN(o)||Number.isNaN(s)||Number.isNaN(c)||Number.isNaN(l)?null:{ts:new Date().toISOString(),pid:e,cpuPercent:o,memPercent:s,rssKb:c,vszKb:l}}function xl(e){let t=Ai(`lsof`,[`-p`,String(e)],j({encoding:`utf-8`,timeout:5e3}));return t.error||!t.stdout?null:t.stdout}function Sl(e){let t=[];for(let n of e.split(`
-`)){let e=n.match(/127\.0\.0\.1:(\d+)\s*\(LISTEN\)/);if(e){let n=Number.parseInt(e[1]??``,10);Number.isNaN(n)||t.push(n)}}return t}function Cl(e){let t=Ai(`curl`,[`-s`,`--max-time`,`2`,`http://127.0.0.1:${e}/json/list`],j({encoding:`utf-8`,timeout:3e3}));if(t.error||!t.stdout?.trim())return null;try{let e=JSON.parse(t.stdout);return Array.isArray(e)?e:null}catch{return null}}function wl(e,t,n){let r=Hi(B(Zi(),`ok-cdp-`)),i=B(r,`profiler.mjs`);return Ji(i,`import { writeFileSync } from 'node:fs';
+      `)}function qc(e){let t=e.removed.length,n=e.failed.filter(e=>e.status!==`blocked`),r=e.results.filter(e=>e.status===`blocked`),i=n.length,a=e.results.filter(e=>e.status===`not-present`).length,o=e.results.filter(e=>e.status===`skipped`),s=[];s.push(e.failed.length>0?L(`Removed ${t} item${t===1?``:`s`}, ${i} could not be removed.`):F(`✓ Removed ${t} item${t===1?``:`s`}.`)),r.length>0&&s.push(L(`  ${r.length} dependent items left untouched; resolve the failures below and retry.`)),a>0&&s.push(P(`  ${a} already absent.`));for(let t of e.removed)t.detail!==void 0&&s.push(`  ${L(`·`)} ${t.op.label} — ${P(Kc(t.detail))}`);for(let e of o)s.push(`  ${L(`·`)} ${e.op.kind===`stop-server`?`Skipped`:`Left in place`}: ${e.op.label}${e.detail?` — ${P(Kc(e.detail))}`:``}`);if(i>0){s.push(``),s.push(I(`Could not remove:`));for(let e of n)s.push(`  ${I(`✗`)} ${e.op.label}${e.detail?` — ${Kc(e.detail)}`:``}`)}return s.join(`
+`)}function Jc(e,t=[]){return{scope:e.scope,mode:`dry-run`,planned:e.ops.map(e=>({kind:e.kind,label:e.label})),attachedClients:t}}function Yc(e,t,n=[]){return{scope:e,mode:`applied`,removed:t.removed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),skipped:t.results.filter(e=>e.status===`skipped`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),blocked:t.results.filter(e=>e.status===`blocked`).map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),failed:t.failed.map(e=>({kind:e.op.kind,label:e.op.label,detail:e.detail})),attachedClients:n}}async function Xc(e={}){let t=H(e.cwd??process.cwd()),n=e.home??Xi();if(Kt(t,n))return{status:`failed`,message:`${I(`Refusing to deinit your home directory.`)}\n  ${t}/.ok is OpenKnowledge's user-global directory (global.yml, skills/,\n  ${C}), not a project. Removing it would delete your global settings and skills.\n  To remove OpenKnowledge everywhere, use 'ok uninstall'.`,exitCode:64};if(!U(B(t,`.ok`)))return{status:`no-op`,message:P(`No OpenKnowledge project found at ${t}. Nothing to remove.`),exitCode:0};let r=Mc(t,n),i=await Rc(r,e.probeClients),a=i.length>0?`\n\n${i.map(e=>L(e)).join(`
+`)}`:``;if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(Jc(r,i),null,2):`${R(`Would remove (dry-run — no changes made):`)}\n\n${Gc(r)}${a}`,exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${I(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes&&(process.stderr.write(`${R(`Remove OpenKnowledge from ${t}:`)}\n\n${Gc(r)}${a}\n\n`),!await wc(`${R(`Remove these?`)} ${P(`[y/N] `)}`,e.confirmStream)))return{status:`cancelled`,message:P(`Cancelled.`),exitCode:0};let o=await Lc(r,{env:e.env??(e.home===void 0?process.env:{}),...e.runRemovalDeps});return{status:o.failed.length>0?`failed`:`done`,message:e.json?JSON.stringify(Yc(`deinit`,o,i),null,2):qc(o),exitCode:+(o.failed.length>0)}}function Zc(){return new M(`deinit`).description("Remove OpenKnowledge from this project (its .ok/, editor MCP entries, git-exclude lines, shadow repo) while leaving your markdown content untouched. Re-run `ok start` to re-scaffold.").argument(`[path]`,`Project directory (defaults to the current project)`).option(`-y, --yes`,`Skip the confirmation prompt`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).action(async(e,t)=>{let n=await Xc({cwd:e??process.cwd(),yes:t.yes,dryRun:t.dryRun,json:t.json});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}var J=e(pi(),1);function Qc(){let e=Ai(`bun`,[`--version`],A({encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}}));return e.error?{ok:!1,error:e.error.message}:e.signal===`SIGTERM`?{ok:!1,error:`probe timed out`}:e.status===0?{ok:!0,version:e.stdout.trim()}:{ok:!1,error:e.stderr?.trim()||`exit code ${e.status}`}}function $c(e={}){let t=e.probe??Qc;return{name:`bun`,run:async()=>{let e=t();return e.ok?{name:`bun`,status:`pass`,summary:`bun ${e.version}`}:{name:`bun`,status:`fail`,summary:`bun not found on PATH`,remediation:`Install Bun: https://bun.sh/docs/installation`,detail:e.error}}}}function el(e={}){let t=e.loader??Si;return{name:`config-yaml`,run:async e=>{let n=H(e.cwd,`.ok`,xi);if(!U(n))return{name:`config-yaml`,status:`warn`,summary:`.ok/${xi} not found (project not initialized)`,remediation:"Run `ok init` to scaffold the project."};try{let{config:n,sources:r}=t(e.cwd);return{name:`config-yaml`,status:`pass`,summary:`parses; content.dir = ${n.content.dir}`,detail:`sources: ${r.join(`, `)}`}}catch(e){let t=e instanceof Error?e.message:String(e);return{name:`config-yaml`,status:`fail`,summary:`.ok/${xi} failed to parse`,detail:t}}}}}function tl(e){try{return Li(e,Bi.W_OK),{writable:!0}}catch(e){return{writable:!1,reason:e instanceof Error?e.message:String(e)}}}function nl(e={}){let t=e.loader??Si,n=e.probeWritable??tl;return{name:`content-dir`,run:async e=>{let r=H(e.cwd,`.ok`,xi);if(!U(r))return{name:`content-dir`,status:`warn`,summary:`project not initialized`,remediation:"Run `ok init` to scaffold the project."};let i;try{let{config:n}=t(e.cwd);i=H(e.cwd,n.content.dir)}catch(e){return{name:`content-dir`,status:`fail`,summary:`content.dir unresolved (config invalid)`,detail:e instanceof Error?e.message:String(e)}}if(!U(i))return{name:`content-dir`,status:`fail`,summary:`content.dir does not exist: ${i}`,remediation:`Create the directory or fix \`content.dir\` in .ok/${xi}.`};if(!G(i).isDirectory())return{name:`content-dir`,status:`fail`,summary:`content.dir is not a directory: ${i}`};let a=n(i);return a.writable?{name:`content-dir`,status:`pass`,summary:`${i} (writable)`}:{name:`content-dir`,status:`fail`,summary:`content.dir is not writable: ${i}`,detail:a.reason}}}}function rl(e={}){let t=e.assert??Wt;return{name:`git`,run:async()=>{try{let e=t(),n=`git ${e.version} (${e.source} — ${e.resolvedPath})`;return zn(e.version,`2.38.0`)<0?{name:`git`,status:`warn`,summary:`${n}; sync refuses merges that change symlinks on Git older than ${Yt}`,remediation:`Update Git to ${Yt} or newer`}:{name:`git`,status:`pass`,summary:n}}catch(e){if(e instanceof Et)return{name:`git`,status:`fail`,summary:`git not found`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};if(e instanceof Un)return{name:`git`,status:`fail`,summary:`git ${e.detected} is older than required ${e.required}`,remediation:e.guidance.options.map(e=>`${e.label}: ${e.command}`).join(` / `),detail:e.message};throw e}}}}function il(e){let t=Ai(`codesign`,[`--verify`,`--deep`,`--strict`,e],{encoding:`utf-8`,timeout:5e3,env:{...process.env,LANG:`C`,LC_ALL:`C`}});return t.error?{ok:!1,stderr:t.error.message}:t.signal===`SIGTERM`?{ok:!1,stderr:`codesign probe timed out`}:{ok:t.status===0,stderr:(t.stderr??``).trim()}}function al(e={}){let t=e.platform??process.platform,n=e.execPath??process.execPath,r=e.codesignVerify??il;return{name:`macos-codesig`,run:async()=>{if(t!==`darwin`)return{name:`macos-codesig`,status:`pass`,summary:`skipped on ${t} (macOS-only check)`};let e=n.indexOf(`/Contents/MacOS/`);if(e===-1)return{name:`macos-codesig`,status:`pass`,summary:`dev mode (no app bundle)`};let i=n.slice(0,e);if(i.startsWith(`/private/var/folders/`))return{name:`macos-codesig`,status:`fail`,summary:`app is running translocated (quarantine sandbox)`,remediation:`Drag OpenKnowledge.app to /Applications/ and re-launch.`,detail:`bundlePath: ${i}`};let a=r(i);return a.ok?{name:`macos-codesig`,status:`pass`,summary:`signed bundle at ${i}`}:{name:`macos-codesig`,status:`fail`,summary:`codesign --verify failed`,remediation:`Re-download OpenKnowledge from the official releases page.`,detail:`bundlePath: ${i}\n${a.stderr}`}}}}const ol=[`git`,`bun`,`config-yaml`,`content-dir`,`server-lock`,`shadow-repo`,`shadow-health`,`macos-codesig`];function sl(e){return ol.includes(e)}async function cl(e,t,n={}){let r=n.timeoutMs??5e3,i,a=Math.round(r/1e3);try{let n=new Promise(t=>{i=setTimeout(()=>{t({name:e.name,status:`fail`,summary:`check timed out after ${a}s`})},r)}),o=e.run(t),s=await Promise.race([o,n]);return o.catch(()=>{}),s}catch(t){let n=t instanceof Error?t.message:String(t);return{name:e.name,status:`fail`,summary:`check crashed: ${n}`}}finally{i!==void 0&&clearTimeout(i)}}async function ll(e,t,n={}){let r=[];for(let i of e)r.push(await cl(i,t,n));return r}function ul(e={}){let t=e.inspect??(e=>tr(e,`server`));return{name:`server-lock`,run:async e=>{let n=j(e.cwd);if(!U(n))return{name:`server-lock`,status:`pass`,summary:"no server lock (no `.ok/local/` yet)"};let r=t(n);switch(r.status){case`missing`:return{name:`server-lock`,status:`pass`,summary:`no server holding the lock`};case`alive`:return{name:`server-lock`,status:`fail`,summary:`server lock held by pid ${r.lock.pid} on this host`,remediation:"Stop the other OpenKnowledge process or run `ok stop`.",detail:`lockPath: ${r.lockPath}; port: ${r.lock.port}; started: ${r.lock.startedAt}`};case`unverified-owner`:return{name:`server-lock`,status:`warn`,summary:`unverified owner; recorded pid ${r.pid} is alive locally`,remediation:or(r),detail:`lockPath: ${r.lockPath}; pid: ${r.pid}`};case`foreign-host`:return{name:`server-lock`,status:`warn`,summary:`lock claimed by ${r.lock.hostname} (foreign host)`,remediation:`Stop the server on its owning machine and confirm the directory is no longer in use before removing the lock.`,detail:`lockPath: ${r.lockPath}; pid: ${r.lock.pid}`};case`dead-pid`:return{name:`server-lock`,status:`warn`,summary:`stale lock for non-existent pid ${r.lock.pid}`,remediation:"Run `ok clean` to prune.",detail:`lockPath: ${r.lockPath}`};case`read-error`:return{name:`server-lock`,status:`fail`,summary:`server.lock could not be read`,remediation:`Restore file and parent-directory access, then retry.`,detail:`${r.lockPath}: ${r.error}`};case`corrupt`:return{name:`server-lock`,status:`warn`,summary:`server.lock is corrupt (unparseable or invalid pid)`,remediation:`Delete ${r.lockPath} and rerun.`};default:return r}}}}async function dl(e,t){let n={gitDir:e,workTree:t},r=await et(n),i=await fn(n),a=await Ct(n,Date.now()-18e5),o=xt(n),s=null;for(let t of[`objects/info/commit-graph`,`objects/info/commit-graphs`]){let n=H(e,t);if(U(n))try{s=Math.max(s??0,G(n).mtimeMs)}catch{}}let c=null;try{let n=k({baseDir:t,timeout:{block:4e3}}).env({GIT_DIR:e}),r=(await n.raw(`for-each-ref`,`--sort=-creatordate`,`--format=%(objectname)`,`refs/checkpoints/`)).trim().split(`
+`).filter(Boolean).slice(0,25);for(let e of r){let t=(await n.raw(`log`,`-1`,`--format=%cI%x00%B`,e)).trim(),r=t.indexOf(`\0`);if(r<0)continue;let i=t.slice(0,r),a=t.slice(r+1);if(Re(a)?.kind===`auto-consolidation`){let e=Date.parse(i);Number.isFinite(e)&&(c=e);break}}}catch{}return{looseObjects:r.looseObjects,packfiles:r.packfiles,wipWidth:i,deadChains:a,gcLogLatch:o,lastPackedAtMs:s,lastConsolidationAtMs:c}}function fl(e){if(e===null)return`never`;let t=Date.now()-e,n=t/864e5;if(n>=1)return`${Math.round(n)}d ago`;let r=t/36e5;return r>=1?`${Math.round(r)}h ago`:`${Math.max(0,Math.round(t/6e4))}m ago`}function pl(e={}){let t=e.resolveDir??wn,n=e.readFacts??dl;return{name:`shadow-health`,run:async e=>{let r=H(e.cwd,`.git`);if(!U(r))return{name:`shadow-health`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let i;try{i=t(e.cwd)}catch(e){return{name:`shadow-health`,status:`warn`,summary:`cannot resolve shadow gitdir: ${e instanceof Error?e.message:String(e)}`}}if(!U(i))return{name:`shadow-health`,status:`warn`,summary:`shadow repo not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let a=await n(i,e.cwd),o=[];a.gcLogLatch&&o.push(`gc.log latch present (auto-packing disabled until it self-expires)`),a.looseObjects>2e3?o.push(`${a.looseObjects} loose objects (unpacked)`):a.packfiles===0&&a.looseObjects>512&&o.push(`${a.looseObjects} loose objects, never packed`),a.deadChains>5&&o.push(`${a.deadChains} dead chains unfolded (auto-consolidation not keeping up)`),a.wipWidth>20&&o.push(`${a.wipWidth} WIP refs (version-journal width high)`);let s=[`loose objects: ${a.looseObjects}`,`packfiles: ${a.packfiles}`,`WIP refs: ${a.wipWidth}`,`dead chains: ${a.deadChains}`,`gc.log latch: ${a.gcLogLatch?`present`:`none`}`,`last packed: ${fl(a.lastPackedAtMs)}`,`last fold: ${fl(a.lastConsolidationAtMs)}`].join(`, `);return o.length>0?{name:`shadow-health`,status:`warn`,summary:`history may be slow: ${o.join(`; `)}`,remediation:`Packing and journal cleanup run automatically on the next server start and during use. If this persists, check the server logs.`,detail:s}:{name:`shadow-health`,status:`pass`,summary:`${a.looseObjects} loose, ${a.packfiles} packs, ${a.wipWidth} WIP refs`,detail:s}}}}function ml(e={}){let t=e.resolve??wn;return{name:`shadow-repo`,run:async e=>{let n=H(e.cwd,`.git`);if(!U(n))return{name:`shadow-repo`,status:`warn`,summary:`no .git/ at project root (shadow repo not initialized)`,remediation:"Run `ok start` once to initialize the shadow repo."};let r;try{r=t(e.cwd)}catch(e){if(e instanceof $t||e instanceof jn)return{name:`shadow-repo`,status:`fail`,summary:`cannot resolve shadow gitdir: ${e.message}`};throw e}if(!U(r))return{name:`shadow-repo`,status:`warn`,summary:`shadow repo at ${r} not yet initialized`,remediation:"Run `ok start` once to initialize the shadow repo."};let i=H(r,`HEAD`);if(!U(i))return{name:`shadow-repo`,status:`fail`,summary:`shadow repo at ${r} is missing HEAD`};let a;try{a=W(i,`utf-8`).trim()}catch(e){return{name:`shadow-repo`,status:`fail`,summary:`cannot read shadow HEAD: ${e instanceof Error?e.message:String(e)}`}}return{name:`shadow-repo`,status:`pass`,summary:`${r} (HEAD: ${a})`}}}}function hl(){return[rl(),$c(),el(),nl(),ul(),ml(),pl(),al()]}function gl(e){switch(e){case`pass`:return J.default.green(`✓`);case`warn`:return J.default.yellow(`!`);case`fail`:return J.default.red(`✗`)}}function _l(e,t){let n=[`[${gl(e.status)}] ${e.name}: ${e.summary}`];if(e.remediation!==void 0&&e.status!==`pass`&&n.push(`    → ${e.remediation}`),t&&e.detail!==void 0)for(let t of e.detail.split(`
+`))n.push(`    ${J.default.dim(t)}`);return n}function vl(e){let t=e.filter(e=>e.status===`fail`).length,n=e.filter(e=>e.status===`warn`).length;if(t===0&&n===0)return`All checks passed`;let r=[];return t>0&&r.push(`${t} error${t===1?``:`s`}`),n>0&&r.push(`${n} warning${n===1?``:`s`}`),r.join(`, `)}async function yl(e,t={}){let n=t.checks??hl(),r=t.stdout??(e=>console.log(e)),i=t.stderr??(e=>console.error(e)),a=e.quiet??!1,o=e.json??!1,s=e.verbose??!1,c;if(e.check!==void 0){if(!sl(e.check))return i(J.default.red(`unknown check '${e.check}'. Valid: ${ol.join(`, `)}`)),2;let t=e.check,r=n.find(e=>e.name===t);if(!r)return i(J.default.red(`internal error: check '${e.check}' not registered`)),2;c=[r]}else c=[...n];let l={cwd:e.cwd},u=await ll(c,l,t.timeoutMs===void 0?{}:{timeoutMs:t.timeoutMs});if(!a){if(o)for(let e of u)r(JSON.stringify(e));else{for(let e of u)for(let t of _l(e,s))r(t);r(``),r(vl(u))}}return+!!u.some(e=>e.status===`fail`)}function bl(){return new M(`health`).description(`Run environment health checks (${ol.join(`, `)})`).option(`--json`,`Emit NDJSON (one CheckResult per line)`).option(`--verbose`,`Include detail field + probe context in human-readable output`).option(`--check <name>`,`Run only the named check. One of: ${ol.join(`, `)}`).option(`--quiet`,`Suppress output; exit code only`).action(async e=>{let t=await yl({cwd:process.cwd(),json:e.json,verbose:e.verbose,check:e.check,quiet:e.quiet});process.exit(t)})}function xl(e){let t=Ai(`ps`,[`-p`,String(e),`-o`,`%cpu=,%mem=,rss=,vsz=`],A({encoding:`utf-8`,timeout:2e3}));if(t.error||!t.stdout?.trim())return null;let[n,r,i,a]=t.stdout.trim().split(/\s+/),o=Number.parseFloat(n??``),s=Number.parseFloat(r??``),c=Number.parseInt(i??``,10),l=Number.parseInt(a??``,10);return Number.isNaN(o)||Number.isNaN(s)||Number.isNaN(c)||Number.isNaN(l)?null:{ts:new Date().toISOString(),pid:e,cpuPercent:o,memPercent:s,rssKb:c,vszKb:l}}function Sl(e){let t=Ai(`lsof`,[`-p`,String(e)],A({encoding:`utf-8`,timeout:5e3}));return t.error||!t.stdout?null:t.stdout}function Cl(e){let t=[];for(let n of e.split(`
+`)){let e=n.match(/127\.0\.0\.1:(\d+)\s*\(LISTEN\)/);if(e){let n=Number.parseInt(e[1]??``,10);Number.isNaN(n)||t.push(n)}}return t}function wl(e){let t=Ai(`curl`,[`-s`,`--max-time`,`2`,`http://127.0.0.1:${e}/json/list`],A({encoding:`utf-8`,timeout:3e3}));if(t.error||!t.stdout?.trim())return null;try{let e=JSON.parse(t.stdout);return Array.isArray(e)?e:null}catch{return null}}function Tl(e,t,n){let r=Ui(B(Qi(),`ok-cdp-`)),i=B(r,`profiler.mjs`);return Yi(i,`import { writeFileSync } from 'node:fs';
 const ws = new WebSocket(${JSON.stringify(e)});
 let id = 0;
 const send = (m) => ws.send(JSON.stringify({ id: ++id, method: m }));
@@ -43,66 +43,66 @@ ws.addEventListener('message', ({ data }) => {
 ws.addEventListener('close', () => process.exit(0));
 ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
-`),i}async function Tl(e,t,n,r,i){let a=wl(e,t,B(r,`cpu.cpuprofile`)),o=!1,s=ki(process.execPath,[a],j({stdio:`ignore`})),c=setInterval(()=>{let e=bl(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{Ki(B(a,`..`),{recursive:!0,force:!0})}catch{}return o}function El(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
-`)}async function Dl(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??xt,s=t.inspect??(e=>tr(e,`server`)),c=t.resolveCommand??pt,l=t.resolveUsage??wt,u=t.collectLsofFn??xl,d=t.getEndpoints??Cl,f=t.profiler??Tl,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?B(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):B(process.cwd(),`ok-diagnose-${n}-${b}`);try{W(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{Ji(B(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?Sl(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,El(G(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Ol(e){let t=ra({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function kl(e){let t=Hi(B(Zi(),`ok-bundle-process-`));return await Dl({pid:e,output:t}),t}function Al(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function jl(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Ml(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Nl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Pl(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${Al(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Ml(t)}`),e(`  Credentials:         ${Nl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Yn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${br(i)}`),e(`  Output:              ${n}`),e(``)}async function Fl(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Ol,i=t.runProcessDiagnose??kl,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);W(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=er(t.diagnosticReportsDir??B(Yi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await qn(t.osTerminationEvidenceDeps),d=await Sr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Pl(n,d,o,l,u),e.yes!==!0&&!jl(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await rr({collected:d,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{Ki(s,{recursive:!0,force:!0})}catch{}}}function Il(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Dl({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(yl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-jMxSX0GK.mjs`),{resolveContentDir:r}=await import(`./dist-B7nhQgZp.mjs`),i=process.cwd(),{config:a}=n(i);await Fl({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function Ll(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ro({message:`Enter embeddings provider API key:`})).trim()}function Rl(e){return Ht(e)}async function zl(e,t){let n=await Et(yt(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Bl(e){try{let t=Gt(A(e));if(!t||t.port<=0||!kn(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=ee.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Vl(e,t){if(!e)return`unavailable (search stays lexical)`;let n=le(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Hl(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Ll();if(!t){process.stderr.write(`No key provided.
-`),process.exitCode=1;return}let n=H(e.cwd??process.cwd()),{baseUrl:r}=Rl(n);try{await yt().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ${u(Ue)}, 0600, this machine only — never in the project).\n  Enable semantic search with \`ok embeddings enable\`, or in
+`),i}async function El(e,t,n,r,i){let a=Tl(e,t,B(r,`cpu.cpuprofile`)),o=!1,s=ki(process.execPath,[a],A({stdio:`ignore`})),c=setInterval(()=>{let e=xl(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{qi(B(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Dl(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
+`)}async function Ol(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??Ge,s=t.inspect??(e=>tr(e,`server`)),c=t.resolveCommand??Dt,l=t.resolveUsage??Wn,u=t.collectLsofFn??Sl,d=t.getEndpoints??wl,f=t.profiler??El,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(J.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?B(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):B(process.cwd(),`ok-diagnose-${n}-${b}`);try{Hi(x,{recursive:!0})}catch(e){a(J.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(J.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{Yi(B(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?Cl(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(J.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(J.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
+`)}\n`);try{S(`stacks.txt`,Dl(W(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(J.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(J.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(J.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${J.default.bold(x)}`)}async function kl(e){let t=ia({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Al(e){let t=Ui(B(Qi(),`ok-bundle-process-`));return await Ol({pid:e,output:t}),t}function jl(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Ml(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Nl(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Pl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?J.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Fl(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(J.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${jl(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Nl(t)}`),e(`  Credentials:         ${Pl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Yn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${br(i)}`),e(`  Output:              ${n}`),e(``)}async function Il(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??kl,i=t.runProcessDiagnose??Al,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);Hi(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(J.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=er(t.diagnosticReportsDir??B(Xi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await qn(t.osTerminationEvidenceDeps),d=await Sr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(J.default.yellow(`  server not running — live state unavailable`)),Fl(n,d,o,l,u),e.yes!==!0&&!Ml(await r(`Write bundle? [y/N]: `))?(n(J.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await rr({collected:d,outputPath:o}),n(J.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{qi(s,{recursive:!0,force:!0})}catch{}}}function Ll(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(J.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(J.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Ol({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(bl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(J.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-CCiGCpiY.mjs`),{resolveContentDir:r}=await import(`./dist-fzYMjYEW.mjs`),i=process.cwd(),{config:a}=n(i);await Il({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(J.default.red(t)),process.exit(1)}}),e}async function Rl(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await io({message:`Enter embeddings provider API key:`})).trim()}function zl(e){return qt(e)}async function Bl(e,t){let n=await Xe(it(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Vl(e){try{let t=wt(j(e));if(!t||t.port<=0||!Zt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=x.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Hl(e,t){if(!e)return`unavailable (search stays lexical)`;let n=le(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Ul(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Rl();if(!t){process.stderr.write(`No key provided.
+`),process.exitCode=1;return}let n=H(e.cwd??process.cwd()),{baseUrl:i}=zl(n);try{await it().setForProject(n,i,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${i}\n  (kept in ${ne(r)}, 0600, this machine only — never in the project).\n  Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
-`)})}function Ul(){return new M(`clear-key`).description(`Remove the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),{baseUrl:n}=Rl(t),r;try{r=await yt().clearForProject(t,n)}catch(e){process.stderr.write(`Failed to clear the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}if(!r){process.stderr.write(`No stored embeddings key found for ${n}.\n`);return}process.stderr.write(`✓ Embeddings API key cleared for ${n}.\n`)})}function Wl(){return new M(`list`).description(`List every project + endpoint that has a stored embeddings key`).action(async()=>{let e=await yt().listProjects();if(e.length===0){process.stderr.write(`No project embeddings keys stored.
+`)})}function Wl(){return new M(`clear-key`).description(`Remove the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),{baseUrl:n}=zl(t),r;try{r=await it().clearForProject(t,n)}catch(e){process.stderr.write(`Failed to clear the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}if(!r){process.stderr.write(`No stored embeddings key found for ${n}.\n`);return}process.stderr.write(`✓ Embeddings API key cleared for ${n}.\n`)})}function Gl(){return new M(`list`).description(`List every project + endpoint that has a stored embeddings key`).action(async()=>{let e=await it().listProjects();if(e.length===0){process.stderr.write(`No project embeddings keys stored.
 `);return}let t=[`Stored embeddings keys (this machine):`,``];for(let{projectKey:n,endpoints:r}of e){t.push(`  ${n}`);for(let{endpoint:e,hint:n}of r)t.push(`    ${e}  →  ${n?`••••${n}`:`set`}`)}process.stdout.write(`${t.join(`
-`)}\n`)})}function Gl(){return new M(`set-url`).description(`Set the embeddings API endpoint for this project (project-local)`).argument(`<url>`,`OpenAI-compatible base URL, e.g. https://api.openai.com/v1`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim(),i=ae(n);if(i!==null){process.stderr.write(i===`invalid-url`?`Not a valid URL: ${e}\n`:`Refusing an insecure endpoint: use https:// (http:// is allowed only for loopback endpoints). Got: ${e}\n`),process.exitCode=1;return}let a=H(t.cwd??process.cwd()),o=await en({cwd:a,scope:`project-local`,patch:{search:{semantic:{baseUrl:n}}}});if(!o.ok){process.stderr.write(`Failed to set the embeddings endpoint — ${r(o.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint set to ${n} for ${a}\n`)})}function Kl(){return new M(`clear-url`).description(`Reset the embeddings API endpoint to the default OpenAI endpoint (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),n=await en({cwd:t,scope:`project-local`,patch:{search:{semantic:{baseUrl:Te}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings endpoint — ${r(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint reset to ${Te} for ${t}\n`)})}function ql(){return new M(`set-model`).description(`Set the embeddings model for this project (project-local)`).argument(`<model>`,`Model id served by the configured endpoint, e.g. nomic-embed-text`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim();if(!n){process.stderr.write("Model id cannot be empty. Use `clear-model` to reset the default.\n"),process.exitCode=1;return}let i=H(t.cwd??process.cwd()),a=await en({cwd:i,scope:`project-local`,patch:{search:{semantic:{model:n}}}});if(!a.ok){process.stderr.write(`Failed to set the embeddings model — ${r(a.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model set to ${n} for ${i}\n  Changing the model re-embeds the corpus on the next search.
-`)})}function Jl(){return new M(`clear-model`).description(`Reset the embeddings model to ${xe} (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),n=await en({cwd:t,scope:`project-local`,patch:{search:{semantic:{model:xe}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings model — ${r(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model reset to ${xe} for ${t}\n`)})}function Yl(e,t){return new M(e).description(`Turn semantic search ${t?`on`:`off`} for this project (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async n=>{let i=H(n.cwd??process.cwd()),a=await en({cwd:i,scope:`project-local`,patch:{search:{semantic:{enabled:t}}}});if(!a.ok){process.stderr.write(`Failed to ${e} semantic search — ${r(a.error)}\n`),process.exitCode=1;return}if(process.stderr.write(`✓ Semantic search ${t?`enabled`:`disabled`} for ${i}\n`),t){let{present:e,notRequired:t}=await zl(i,Rl(i).baseUrl);!e&&!t&&process.stderr.write("  Note: no API key set yet — run `ok embeddings set-key`. Until then, search stays lexical.\n")}})}function Xl(){return new M(`status`).description(`Show semantic-search capability: key presence, enabled, coverage, provider`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.cwd??process.cwd()),n=Rl(t),{present:r,notRequired:i,source:a}=await zl(t,n.baseUrl),o=ve({enabled:n.enabled,keyPresent:r,keyNotRequired:i}),s=o?await Bl(t):null;if(e.json){process.stdout.write(`${JSON.stringify({project:t,key:{present:r,notRequired:i,source:a},project_config:{enabled:n.enabled,capable:o,coverage:s?{embedded:s.embedded,total:s.total}:null,provider_error:s?{active:s.providerError===!0,reason:s.providerErrorReason??null}:null,provider:{baseUrl:n.baseUrl,model:n.model,dimensions:n.dimensions??null},transport:{maxBatchSize:n.maxBatchSize,maxBatchChars:n.maxBatchChars,docTimeoutMs:n.docTimeoutMs}}})}\n`);return}let c=r?`set for this endpoint — ${a===`env`?`environment (${_t})`:u(Ue)}`:i?`not required (loopback endpoint)`:`not set`,l=o?s?`${s.embedded} / ${s.total} pages embedded`:`server not running — start it to index (or it has not embedded yet)`:null,d=Vl(o,s),f=[`Semantic search`,`  project:     ${t}`,``,`  This project:`,`    enabled:    ${n.enabled?`yes`:`no`}`,`    API key:    ${c}`,`    capability: ${d}`,...l?[`    coverage:   ${l}`]:[],`    provider:   ${n.baseUrl}`,`    model:      ${n.model}`,`    dimensions: ${n.dimensions??`auto (detected from the endpoint)`}`,`    batch size: ${n.maxBatchSize} chunks maximum per indexing request`,`    characters: ${n.maxBatchChars} approximate characters per indexing request`,`    timeout:    ${n.docTimeoutMs} ms per indexing request attempt`],p=[];!r&&!i&&p.push(`Set a key:  ok embeddings set-key   (or export ${_t})`),n.enabled||p.push(`Enable it:  ok embeddings enable   (in this project folder)`),p.length>0&&f.push(``,...p.map(e=>`  ${e}`)),process.stdout.write(`${f.join(`
-`)}\n`)})}function Zl(){return new M(`embeddings`).description(`Manage the semantic-search embeddings provider key + status`).addCommand(Hl()).addCommand(Ul()).addCommand(Gl()).addCommand(Kl()).addCommand(ql()).addCommand(Jl()).addCommand(Yl(`enable`,!0)).addCommand(Yl(`disable`,!1)).addCommand(Wl()).addCommand(Xl())}const Ql=B(`Contents`,`Resources`,`cli`,`bin`,`ok.sh`),$l=/Contents\/Resources\/cli\/dist\/cli\.mjs$/;function eu(e,t,n){return e===`darwin`?[O.stable,O.beta].flatMap(e=>[B(t,`Applications`),`/Applications`].map(t=>B(t,`${e.productName}.app`,Ql))).find(e=>n.existsSync(e))??null:null}function tu(e,t,n){if(n!==`darwin`)return{proxy:!1,suppressedBy:`platform`};let r=e.OK_BUNDLE_PROXY?.toLowerCase();return r===`0`||r===`false`?{proxy:!1,suppressedBy:`env`}:t.includes(`--no-bundle-proxy`)?{proxy:!1,suppressedBy:`flag`}:typeof t[1]==`string`&&$l.test(t[1])?{proxy:!1,suppressedBy:`self`}:{proxy:!0,suppressedBy:null}}function nu(e){e.stderr.write(`${JSON.stringify({event:`mcp-bundle-proxy`,mode:e.mode,bundlePath:e.bundlePath,reason:e.reason,hint:`Suppress with --no-bundle-proxy or OK_BUNDLE_PROXY=0.`})}\n`)}function ru(e){nu({stderr:e.stderr,mode:`bundled`,bundlePath:e.bundlePath,reason:null});let t=e.spawnImpl??ki,n=e.exitProcess??(e=>process.exit(e)),r=e.now??(()=>Date.now()),i=r(),a=e.startupFailureWindowMs??1e3;return new Promise((o,s)=>{let c=t(e.bundlePath,e.argv.filter(e=>e!==`--no-bundle-proxy`),{env:{...e.env,OK_BUNDLE_PROXY:`0`},stdio:`inherit`,windowsHide:!0}),l=e=>{c.kill(e)},u=()=>{process.off(`SIGTERM`,l),process.off(`SIGINT`,l)};process.on(`SIGTERM`,l),process.on(`SIGINT`,l),c.once(`error`,e=>{u(),s(e)}),c.once(`exit`,(e,t)=>{if(u(),t){s(Error(`bundle process exited by signal ${t}`));return}let o=e??0,c=r()-i;if(o!==0&&c<=a){s(Error(`bundle process exited during startup with code ${o}`));return}n(o)})})}function iu(e){let t=e.scheduler??{setTimeout:(e,t)=>globalThis.setTimeout(e,t),clearTimeout:e=>globalThis.clearTimeout(e)},n=e.initialBackoffMs??1e3,r=e.maxBackoffMs??3e4,i=e.rng??Math.random,a=e.createWebSocket??(e=>new WebSocket(e)),o=e.logger??null,s=e.log,c=null,l=null,u=!1,d=n;function f(e,t,n){try{o?o[e](t,n):s?.(t)}catch{}}function p(){if(u)return;l!==null&&t.clearTimeout(l);let e=d;d=Math.min(d*2,r);let n=i(),a=Math.max(1,Math.floor(e*(1-n/2)));f(`debug`,`scheduling reconnect`,{backoffMs:a,ceilMs:e}),l=t.setTimeout(()=>{l=null,m().catch(e=>f(`warn`,`reconnect failed`,{error:String(e)}))},a)}async function m(){if(u)return;let t;try{t=await e.resolveWsUrl()}catch(e){f(`warn`,`resolveWsUrl threw`,{error:String(e)}),p();return}if(!t){p();return}let r=[];e.pid!==void 0&&r.push(`pid=${encodeURIComponent(String(e.pid))}`),e.connectionId&&r.push(`connectionId=${encodeURIComponent(e.connectionId)}`),e.connectionId&&e.displayName!==void 0&&e.clientName!==void 0&&e.colorSeed!==void 0&&(r.push(`displayName=${encodeURIComponent(e.displayName)}`),r.push(`clientName=${encodeURIComponent(e.clientName)}`),r.push(`colorSeed=${encodeURIComponent(e.colorSeed)}`));let i=r.length>0?`?${r.join(`&`)}`:``,o=`${t}/collab/keepalive${i}`;try{c=a(o)}catch(e){f(`warn`,`WebSocket constructor failed`,{url:o,error:String(e)}),c=null,p();return}c.addEventListener(`open`,()=>{f(`info`,`connected`,{url:t}),d=n}),c.addEventListener(`close`,()=>{u||(f(`info`,`disconnected`,{url:t}),c=null,p())}),c.addEventListener(`error`,()=>{f(`debug`,`websocket error observed`,{url:t,readyState:c?.readyState,reason:`error-event`})})}return queueMicrotask(()=>{m().catch(e=>f(`warn`,`initial connect failed`,{error:String(e)}))}),{close:()=>{if(!u&&(u=!0,l!==null&&(t.clearTimeout(l),l=null),c)){try{c.close()}catch{}c=null}},isConnected:()=>c!==null&&c.readyState===1}}var au=class{append(e){this._buffer=this._buffer?Buffer.concat([this._buffer,e]):e}readMessage(){if(!this._buffer)return null;let e=this._buffer.indexOf(`
-`);if(e===-1)return null;let t=this._buffer.toString(`utf8`,0,e).replace(/\r$/,``);return this._buffer=this._buffer.subarray(e+1),ou(t)}clear(){this._buffer=void 0}};function ou(e){return Wn.parse(JSON.parse(e))}function su(e){return JSON.stringify(e)+`
-`}var cu=class{constructor(e=Fi.stdin,t=Fi.stdout){this._stdin=e,this._stdout=t,this._readBuffer=new au,this._started=!1,this._ondata=e=>{this._readBuffer.append(e),this.processReadBuffer()},this._onerror=e=>{this.onerror?.(e)}}async start(){if(this._started)throw Error(`StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.`);this._started=!0,this._stdin.on(`data`,this._ondata),this._stdin.on(`error`,this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e)}catch(e){this.onerror?.(e)}}async close(){this._stdin.off(`data`,this._ondata),this._stdin.off(`error`,this._onerror),this._stdin.listenerCount(`data`)===0&&this._stdin.pause(),this._readBuffer.clear(),this.onclose?.()}send(e){return new Promise(t=>{let n=su(e);this._stdout.write(n)?t():this._stdout.once(`drain`,t)})}};function lu(e){if(e.platform!==`darwin`)return{kind:`unchanged`};let t;try{t=e.realpath(e.bundleAnchorPath)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}let n;try{n=e.statInode(t)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}return n===e.currentInode?{kind:`unchanged`}:{kind:`replaced`,currentInode:e.currentInode,onDiskInode:n}}function uu(e){let t=e.setInterval??setInterval,n=e.clearInterval??clearInterval,r=e.intervalMs??3e5,i=!0,a=!1,o=!1,s=t(()=>{if(!i)return;let t;try{t=e.detect()}catch(t){e.log(`bundle identity check threw unexpectedly (contract violation): ${t instanceof Error?t.message:String(t)}`);return}if(t.kind===`unreadable`){o||(o=!0,e.log(`bundle identity check unreadable${t.reason?`: ${t.reason}`:``} — will retry on next tick`));return}o&&(o=!1,e.log(`bundle identity check recovered from unreadable`)),t.kind!==`unchanged`&&(i=!1,e.onReplaced(t))},r);return typeof s.unref==`function`&&s.unref(),{stop:()=>{a||(a=!0,i=!1,n(s))}}}function du(e,t){let n;try{n=t.realpathSync(e)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (realpath failed): ${e instanceof Error?e.message:String(e)}`);return}let r;try{r=t.statInoSync(n)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (stat failed): ${e instanceof Error?e.message:String(e)}`);return}return{resolvedPath:n,inode:r}}function fu(e){let t=e.scheduler??{setInterval:(e,t)=>globalThis.setInterval(e,t),clearInterval:e=>globalThis.clearInterval(e)},n=e.getPpid();if(n<=1)return{stop:()=>{}};let r=!1,i=t.setInterval(()=>{if(r)return;let a=e.getPpid();a!==n&&(r=!0,t.clearInterval(i),e.onHostGone(`host process exited (ppid ${n} -> ${a})`))},e.intervalMs??1e3);return i.unref?.(),{stop:()=>t.clearInterval(i)}}function pu(e){let t=t=>{try{e.log(t)}catch{}},n=e.transport.onclose;e.transport.onclose=()=>{t(`[mcp] stdio transport closed (internal shutdown)`),n?.()},e.stdin.once(`end`,()=>t(`[mcp] stdin EOF (host closed pipe)`)),e.stdin.once(`close`,()=>t(`[mcp] stdin closed`)),e.process.on(`exit`,e=>{t(`[mcp] exit code=${e}`)}),e.process.on(`uncaughtExceptionMonitor`,(e,n)=>{let r=e instanceof Error?e.stack??e.message:String(e);t(`[mcp] uncaughtException origin=${n}: ${r}`)})}function mu(e){return e?e instanceof Headers?Object.fromEntries(e.entries()):Array.isArray(e)?Object.fromEntries(e):{...e}:{}}function hu(e=fetch,t){return t?async(n,r)=>e(n,{...t,...r,headers:r?.headers?{...mu(t.headers),...mu(r.headers)}:t.headers}):e}let gu;gu=globalThis.crypto?.webcrypto??globalThis.crypto??import(`node:crypto`).then(e=>e.webcrypto);async function _u(e){return(await gu).getRandomValues(new Uint8Array(e))}async function vu(e){let t=``;for(;t.length<e;){let n=await _u(e-t.length);for(let e of n)e<198&&(t+=`abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~`[e%66])}return t}async function yu(e){return await vu(e)}async function bu(e){let t=await(await gu).subtle.digest(`SHA-256`,new TextEncoder().encode(e));return btoa(String.fromCharCode(...new Uint8Array(t))).replace(/\//g,`_`).replace(/\+/g,`-`).replace(/=/g,``)}async function xu(e){if(e||=43,e<43||e>128)throw`Expected a length between 43 and 128. Received ${e}.`;let t=await yu(e);return{code_verifier:t,code_challenge:await bu(t)}}const X=f().superRefine((e,n)=>{if(!URL.canParse(e))return n.addIssue({code:ia.custom,message:`URL must be parseable`,fatal:!0}),t}).refine(e=>{let t=new URL(e);return t.protocol!==`javascript:`&&t.protocol!==`data:`&&t.protocol!==`vbscript:`},{message:`URL cannot use javascript:, data:, or vbscript: scheme`}),Su=c({resource:C().url(),authorization_servers:D(X).optional(),jwks_uri:C().url().optional(),scopes_supported:D(C()).optional(),bearer_methods_supported:D(C()).optional(),resource_signing_alg_values_supported:D(C()).optional(),resource_name:C().optional(),resource_documentation:C().optional(),resource_policy_uri:C().url().optional(),resource_tos_uri:C().url().optional(),tls_client_certificate_bound_access_tokens:E().optional(),authorization_details_types_supported:D(C()).optional(),dpop_signing_alg_values_supported:D(C()).optional(),dpop_bound_access_tokens_required:E().optional()}),Cu=c({issuer:C(),authorization_endpoint:X,token_endpoint:X,registration_endpoint:X.optional(),scopes_supported:D(C()).optional(),response_types_supported:D(C()),response_modes_supported:D(C()).optional(),grant_types_supported:D(C()).optional(),token_endpoint_auth_methods_supported:D(C()).optional(),token_endpoint_auth_signing_alg_values_supported:D(C()).optional(),service_documentation:X.optional(),revocation_endpoint:X.optional(),revocation_endpoint_auth_methods_supported:D(C()).optional(),revocation_endpoint_auth_signing_alg_values_supported:D(C()).optional(),introspection_endpoint:C().optional(),introspection_endpoint_auth_methods_supported:D(C()).optional(),introspection_endpoint_auth_signing_alg_values_supported:D(C()).optional(),code_challenge_methods_supported:D(C()).optional(),client_id_metadata_document_supported:E().optional()}),wu=c({issuer:C(),authorization_endpoint:X,token_endpoint:X,userinfo_endpoint:X.optional(),jwks_uri:X,registration_endpoint:X.optional(),scopes_supported:D(C()).optional(),response_types_supported:D(C()),response_modes_supported:D(C()).optional(),grant_types_supported:D(C()).optional(),acr_values_supported:D(C()).optional(),subject_types_supported:D(C()),id_token_signing_alg_values_supported:D(C()),id_token_encryption_alg_values_supported:D(C()).optional(),id_token_encryption_enc_values_supported:D(C()).optional(),userinfo_signing_alg_values_supported:D(C()).optional(),userinfo_encryption_alg_values_supported:D(C()).optional(),userinfo_encryption_enc_values_supported:D(C()).optional(),request_object_signing_alg_values_supported:D(C()).optional(),request_object_encryption_alg_values_supported:D(C()).optional(),request_object_encryption_enc_values_supported:D(C()).optional(),token_endpoint_auth_methods_supported:D(C()).optional(),token_endpoint_auth_signing_alg_values_supported:D(C()).optional(),display_values_supported:D(C()).optional(),claim_types_supported:D(C()).optional(),claims_supported:D(C()).optional(),service_documentation:C().optional(),claims_locales_supported:D(C()).optional(),ui_locales_supported:D(C()).optional(),claims_parameter_supported:E().optional(),request_parameter_supported:E().optional(),request_uri_parameter_supported:E().optional(),require_request_uri_registration:E().optional(),op_policy_uri:X.optional(),op_tos_uri:X.optional(),client_id_metadata_document_supported:E().optional()}),Tu=T({...wu.shape,...Cu.pick({code_challenge_methods_supported:!0}).shape}),Eu=T({access_token:C(),id_token:C().optional(),token_type:C(),expires_in:oa().optional(),scope:C().optional(),refresh_token:C().optional()}).strip(),Du=T({error:C(),error_description:C().optional(),error_uri:C().optional()}),Ou=X.optional().or(oe(``).transform(()=>void 0)),ku=T({redirect_uris:D(X),token_endpoint_auth_method:C().optional(),grant_types:D(C()).optional(),response_types:D(C()).optional(),client_name:C().optional(),client_uri:X.optional(),logo_uri:Ou,scope:C().optional(),contacts:D(C()).optional(),tos_uri:Ou,policy_uri:C().optional(),jwks_uri:X.optional(),jwks:Re().optional(),software_id:C().optional(),software_version:C().optional(),software_statement:C().optional()}).strip(),Au=T({client_id:C(),client_secret:C().optional(),client_id_issued_at:o().optional(),client_secret_expires_at:o().optional()}).strip(),ju=ku.merge(Au);T({error:C(),error_description:C().optional()}).strip(),T({token:C(),token_type_hint:C().optional()}).strip();function Mu(e){let t=typeof e==`string`?new URL(e):new URL(e.href);return t.hash=``,t}function Nu({requestedResource:e,configuredResource:t}){let n=typeof e==`string`?new URL(e):new URL(e.href),r=typeof t==`string`?new URL(t):new URL(t.href);if(n.origin!==r.origin||n.pathname.length<r.pathname.length)return!1;let i=n.pathname.endsWith(`/`)?n.pathname:n.pathname+`/`,a=r.pathname.endsWith(`/`)?r.pathname:r.pathname+`/`;return i.startsWith(a)}var Z=class extends Error{constructor(e,t){super(e),this.errorUri=t,this.name=this.constructor.name}toResponseObject(){let e={error:this.errorCode,error_description:this.message};return this.errorUri&&(e.error_uri=this.errorUri),e}get errorCode(){return this.constructor.errorCode}},Pu=class extends Z{};Pu.errorCode=`invalid_request`;var Fu=class extends Z{};Fu.errorCode=`invalid_client`;var Iu=class extends Z{};Iu.errorCode=`invalid_grant`;var Lu=class extends Z{};Lu.errorCode=`unauthorized_client`;var Ru=class extends Z{};Ru.errorCode=`unsupported_grant_type`;var zu=class extends Z{};zu.errorCode=`invalid_scope`;var Bu=class extends Z{};Bu.errorCode=`access_denied`;var Vu=class extends Z{};Vu.errorCode=`server_error`;var Hu=class extends Z{};Hu.errorCode=`temporarily_unavailable`;var Uu=class extends Z{};Uu.errorCode=`unsupported_response_type`;var Wu=class extends Z{};Wu.errorCode=`unsupported_token_type`;var Gu=class extends Z{};Gu.errorCode=`invalid_token`;var Ku=class extends Z{};Ku.errorCode=`method_not_allowed`;var qu=class extends Z{};qu.errorCode=`too_many_requests`;var Ju=class extends Z{};Ju.errorCode=`invalid_client_metadata`;var Yu=class extends Z{};Yu.errorCode=`insufficient_scope`;var Xu=class extends Z{};Xu.errorCode=`invalid_target`;const Zu={[Pu.errorCode]:Pu,[Fu.errorCode]:Fu,[Iu.errorCode]:Iu,[Lu.errorCode]:Lu,[Ru.errorCode]:Ru,[zu.errorCode]:zu,[Bu.errorCode]:Bu,[Vu.errorCode]:Vu,[Hu.errorCode]:Hu,[Uu.errorCode]:Uu,[Wu.errorCode]:Wu,[Gu.errorCode]:Gu,[Ku.errorCode]:Ku,[qu.errorCode]:qu,[Ju.errorCode]:Ju,[Yu.errorCode]:Yu,[Xu.errorCode]:Xu};var Qu=class extends Error{constructor(e){super(e??`Unauthorized`)}};function $u(e){return[`client_secret_basic`,`client_secret_post`,`none`].includes(e)}const ed=`code`,td=`S256`;function nd(e,t){let n=e.client_secret!==void 0;return`token_endpoint_auth_method`in e&&e.token_endpoint_auth_method&&$u(e.token_endpoint_auth_method)&&(t.length===0||t.includes(e.token_endpoint_auth_method))?e.token_endpoint_auth_method:t.length===0?n?`client_secret_basic`:`none`:n&&t.includes(`client_secret_basic`)?`client_secret_basic`:n&&t.includes(`client_secret_post`)?`client_secret_post`:t.includes(`none`)?`none`:n?`client_secret_post`:`none`}function rd(e,t,n,r){let{client_id:i,client_secret:a}=t;switch(e){case`client_secret_basic`:id(i,a,n);return;case`client_secret_post`:ad(i,a,r);return;case`none`:od(i,r);return;default:throw Error(`Unsupported client authentication method: ${e}`)}}function id(e,t,n){if(!t)throw Error(`client_secret_basic authentication requires a client_secret`);let r=btoa(`${e}:${t}`);n.set(`Authorization`,`Basic ${r}`)}function ad(e,t,n){n.set(`client_id`,e),t&&n.set(`client_secret`,t)}function od(e,t){t.set(`client_id`,e)}async function sd(e){let t=e instanceof Response?e.status:void 0,n=e instanceof Response?await e.text():e;try{let{error:e,error_description:t,error_uri:r}=Du.parse(JSON.parse(n));return new(Zu[e]||Vu)(t||``,r)}catch(e){return new Vu(`${t?`HTTP ${t}: `:``}Invalid OAuth error response: ${e}. Raw body: ${n}`)}}async function cd(e,t){try{return await ld(e,t)}catch(n){if(n instanceof Fu||n instanceof Lu)return await e.invalidateCredentials?.(`all`),await ld(e,t);if(n instanceof Iu)return await e.invalidateCredentials?.(`tokens`),await ld(e,t);throw n}}async function ld(e,{serverUrl:t,authorizationCode:n,scope:r,resourceMetadataUrl:i,fetchFn:a}){let o=await e.discoveryState?.(),s,c,l,u=i;if(!u&&o?.resourceMetadataUrl&&(u=new URL(o.resourceMetadataUrl)),o?.authorizationServerUrl){if(c=o.authorizationServerUrl,s=o.resourceMetadata,l=o.authorizationServerMetadata??await xd(c,{fetchFn:a}),!s)try{s=await md(t,{resourceMetadataUrl:u},a)}catch{}(l!==o.authorizationServerMetadata||s!==o.resourceMetadata)&&await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}else{let n=await Sd(t,{resourceMetadataUrl:u,fetchFn:a});c=n.authorizationServerUrl,l=n.authorizationServerMetadata,s=n.resourceMetadata,await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}let d=await dd(t,e,s),f=r||s?.scopes_supported?.join(` `)||e.clientMetadata.scope,p=await Promise.resolve(e.clientInformation());if(!p){if(n!==void 0)throw Error(`Existing OAuth client information is required when exchanging an authorization code`);let t=l?.client_id_metadata_document_supported===!0,r=e.clientMetadataUrl;if(r&&!ud(r))throw new Ju(`clientMetadataUrl must be a valid HTTPS URL with a non-root pathname, got: ${r}`);if(t&&r)p={client_id:r},await e.saveClientInformation?.(p);else{if(!e.saveClientInformation)throw Error(`OAuth client information must be saveable for dynamic registration`);let t=await Od(c,{metadata:l,clientMetadata:e.clientMetadata,scope:f,fetchFn:a});await e.saveClientInformation(t),p=t}}let m=!e.redirectUrl;if(n!==void 0||m){let t=await Dd(e,c,{metadata:l,resource:d,authorizationCode:n,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}let h=await e.tokens();if(h?.refresh_token)try{let t=await Ed(c,{metadata:l,clientInformation:p,refreshToken:h.refresh_token,resource:d,addClientAuthentication:e.addClientAuthentication,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}catch(e){if(!(!(e instanceof Z)||e instanceof Vu))throw e}let g=e.state?await e.state():void 0,{authorizationUrl:_,codeVerifier:v}=await Cd(c,{metadata:l,clientInformation:p,state:g,redirectUrl:e.redirectUrl,scope:f,resource:d});return await e.saveCodeVerifier(v),await e.redirectToAuthorization(_),`REDIRECT`}function ud(e){if(!e)return!1;try{let t=new URL(e);return t.protocol===`https:`&&t.pathname!==`/`}catch{return!1}}async function dd(e,t,n){let r=Mu(e);if(t.validateResourceURL)return await t.validateResourceURL(r,n?.resource);if(n){if(!Nu({requestedResource:r,configuredResource:n.resource}))throw Error(`Protected resource ${n.resource} does not match expected ${r} (or origin)`);return new URL(n.resource)}}function fd(e){let t=e.headers.get(`WWW-Authenticate`);if(!t)return{};let[n,r]=t.split(` `);if(n.toLowerCase()!==`bearer`||!r)return{};let i=pd(e,`resource_metadata`)||void 0,a;if(i)try{a=new URL(i)}catch{}let o=pd(e,`scope`)||void 0,s=pd(e,`error`)||void 0;return{resourceMetadataUrl:a,scope:o,error:s}}function pd(e,t){let n=e.headers.get(`WWW-Authenticate`);if(!n)return null;let r=RegExp(`${t}=(?:"([^"]+)"|([^\\s,]+))`),i=n.match(r);return i?i[1]||i[2]:null}async function md(e,t,n=fetch){let r=await yd(e,`oauth-protected-resource`,n,{protocolVersion:t?.protocolVersion,metadataUrl:t?.resourceMetadataUrl});if(!r||r.status===404)throw await r?.body?.cancel(),Error(`Resource server does not implement OAuth 2.0 Protected Resource Metadata.`);if(!r.ok)throw await r.body?.cancel(),Error(`HTTP ${r.status} trying to load well-known OAuth protected resource metadata.`);return Su.parse(await r.json())}async function hd(e,t,n=fetch){try{return await n(e,{headers:t})}catch(r){if(r instanceof TypeError)return t?hd(e,void 0,n):void 0;throw r}}function gd(e,t=``,n={}){return t.endsWith(`/`)&&(t=t.slice(0,-1)),n.prependPathname?`${t}/.well-known/${e}`:`/.well-known/${e}${t}`}async function _d(e,t,n=fetch){return await hd(e,{"MCP-Protocol-Version":t},n)}function vd(e,t){return!e||e.status>=400&&e.status<500&&t!==`/`}async function yd(e,t,n,r){let i=new URL(e),a=r?.protocolVersion??`2025-11-25`,o;if(r?.metadataUrl)o=new URL(r.metadataUrl);else{let e=gd(t,i.pathname);o=new URL(e,r?.metadataServerUrl??i),o.search=i.search}let s=await _d(o,a,n);return!r?.metadataUrl&&vd(s,i.pathname)&&(s=await _d(new URL(`/.well-known/${t}`,i),a,n)),s}function bd(e){let t=typeof e==`string`?new URL(e):e,n=t.pathname!==`/`,r=[];if(!n)return r.push({url:new URL(`/.well-known/oauth-authorization-server`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration`,t.origin),type:`oidc`}),r;let i=t.pathname;return i.endsWith(`/`)&&(i=i.slice(0,-1)),r.push({url:new URL(`/.well-known/oauth-authorization-server${i}`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration${i}`,t.origin),type:`oidc`}),r.push({url:new URL(`${i}/.well-known/openid-configuration`,t.origin),type:`oidc`}),r}async function xd(e,{fetchFn:t=fetch,protocolVersion:n=qe}={}){let r={"MCP-Protocol-Version":n,Accept:`application/json`},i=bd(e);for(let{url:e,type:n}of i){let i=await hd(e,r,t);if(i){if(!i.ok){if(await i.body?.cancel(),i.status>=400&&i.status<500)continue;throw Error(`HTTP ${i.status} trying to load ${n===`oauth`?`OAuth`:`OpenID provider`} metadata from ${e}`)}return n===`oauth`?Cu.parse(await i.json()):Tu.parse(await i.json())}}}async function Sd(e,t){let n,r;try{n=await md(e,{resourceMetadataUrl:t?.resourceMetadataUrl},t?.fetchFn),n.authorization_servers&&n.authorization_servers.length>0&&(r=n.authorization_servers[0])}catch{}r||=String(new URL(`/`,e));let i=await xd(r,{fetchFn:t?.fetchFn});return{authorizationServerUrl:r,authorizationServerMetadata:i,resourceMetadata:n}}async function Cd(e,{metadata:t,clientInformation:n,redirectUrl:r,scope:i,state:a,resource:o}){let s;if(t){if(s=new URL(t.authorization_endpoint),!t.response_types_supported.includes(ed))throw Error(`Incompatible auth server: does not support response type ${ed}`);if(t.code_challenge_methods_supported&&!t.code_challenge_methods_supported.includes(td))throw Error(`Incompatible auth server: does not support code challenge method ${td}`)}else s=new URL(`/authorize`,e);let c=await xu(),l=c.code_verifier,u=c.code_challenge;return s.searchParams.set(`response_type`,ed),s.searchParams.set(`client_id`,n.client_id),s.searchParams.set(`code_challenge`,u),s.searchParams.set(`code_challenge_method`,td),s.searchParams.set(`redirect_uri`,String(r)),a&&s.searchParams.set(`state`,a),i&&s.searchParams.set(`scope`,i),i?.includes(`offline_access`)&&s.searchParams.append(`prompt`,`consent`),o&&s.searchParams.set(`resource`,o.href),{authorizationUrl:s,codeVerifier:l}}function wd(e,t,n){return new URLSearchParams({grant_type:`authorization_code`,code:e,code_verifier:t,redirect_uri:String(n)})}async function Td(e,{metadata:t,tokenRequestParams:n,clientInformation:r,addClientAuthentication:i,resource:a,fetchFn:o}){let s=t?.token_endpoint?new URL(t.token_endpoint):new URL(`/token`,e),c=new Headers({"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`});a&&n.set(`resource`,a.href),i?await i(c,n,s,t):r&&rd(nd(r,t?.token_endpoint_auth_methods_supported??[]),r,c,n);let l=await(o??fetch)(s,{method:`POST`,headers:c,body:n});if(!l.ok)throw await sd(l);return Eu.parse(await l.json())}async function Ed(e,{metadata:t,clientInformation:n,refreshToken:r,resource:i,addClientAuthentication:a,fetchFn:o}){return{refresh_token:r,...await Td(e,{metadata:t,tokenRequestParams:new URLSearchParams({grant_type:`refresh_token`,refresh_token:r}),clientInformation:n,addClientAuthentication:a,resource:i,fetchFn:o})}}async function Dd(e,t,{metadata:n,resource:r,authorizationCode:i,fetchFn:a}={}){let o=e.clientMetadata.scope,s;if(e.prepareTokenRequest&&(s=await e.prepareTokenRequest(o)),!s){if(!i)throw Error(`Either provider.prepareTokenRequest() or authorizationCode is required`);if(!e.redirectUrl)throw Error(`redirectUrl is required for authorization_code flow`);s=wd(i,await e.codeVerifier(),e.redirectUrl)}let c=await e.clientInformation();return Td(t,{metadata:n,tokenRequestParams:s,clientInformation:c??void 0,addClientAuthentication:e.addClientAuthentication,resource:r,fetchFn:a})}async function Od(e,{metadata:t,clientMetadata:n,scope:r,fetchFn:i}){let a;if(t){if(!t.registration_endpoint)throw Error(`Incompatible auth server: does not support dynamic client registration`);a=new URL(t.registration_endpoint)}else a=new URL(`/register`,e);let o=await(i??fetch)(a,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({...n,...r===void 0?{}:{scope:r}})});if(!o.ok)throw await sd(o);return ju.parse(await o.json())}var kd=class extends Error{constructor(e,t){super(e),this.name=`ParseError`,this.type=t.type,this.field=t.field,this.value=t.value,this.line=t.line}};function Ad(e){}function jd(e){if(typeof e==`function`)throw TypeError("`config` must be an object, got a function instead. Did you mean `createParser({onEvent: fn})`?");let{onEvent:t=Ad,onError:n=Ad,onRetry:r=Ad,onComment:i,maxBufferSize:a}=e,o=[],s=0,c=!0,l,u=``,d=0,f,p=!1;function m(e){if(p)throw Error("Cannot feed parser: it was terminated after exceeding the configured max buffer size. Call `reset()` to resume parsing.");if(c&&(c=!1,e.charCodeAt(0)===239&&e.charCodeAt(1)===187&&e.charCodeAt(2)===191&&(e=e.slice(3))),o.length===0){let t=g(e);t!==``&&(o.push(t),s=t.length),h();return}if(e.indexOf(`
-`)===-1&&e.indexOf(`\r`)===-1){o.push(e),s+=e.length,h();return}o.push(e);let t=o.join(``);o.length=0,s=0;let n=g(t);n!==``&&(o.push(n),s=n.length),h()}function h(){a!==void 0&&(s+u.length<=a||(p=!0,o.length=0,s=0,l=void 0,u=``,d=0,f=void 0,n(new kd(`Buffered data exceeded max buffer size of ${a} characters`,{type:`max-buffer-size-exceeded`}))))}function g(e){let n=0;if(e.indexOf(`\r`)===-1){let r=e.indexOf(`
+`)}\n`)})}function Kl(){return new M(`set-url`).description(`Set the embeddings API endpoint for this project (project-local)`).argument(`<url>`,`OpenAI-compatible base URL, e.g. https://api.openai.com/v1`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim(),r=a(n);if(r!==null){process.stderr.write(r===`invalid-url`?`Not a valid URL: ${e}\n`:`Refusing an insecure endpoint: use https:// (http:// is allowed only for loopback endpoints). Got: ${e}\n`),process.exitCode=1;return}let i=H(t.cwd??process.cwd()),o=await mn({cwd:i,scope:`project-local`,patch:{search:{semantic:{baseUrl:n}}}});if(!o.ok){process.stderr.write(`Failed to set the embeddings endpoint — ${E(o.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint set to ${n} for ${i}\n`)})}function ql(){return new M(`clear-url`).description(`Reset the embeddings API endpoint to the default OpenAI endpoint (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),n=await mn({cwd:t,scope:`project-local`,patch:{search:{semantic:{baseUrl:Ie}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings endpoint — ${E(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings endpoint reset to ${Ie} for ${t}\n`)})}function Jl(){return new M(`set-model`).description(`Set the embeddings model for this project (project-local)`).argument(`<model>`,`Model id served by the configured endpoint, e.g. nomic-embed-text`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async(e,t)=>{let n=e.trim();if(!n){process.stderr.write("Model id cannot be empty. Use `clear-model` to reset the default.\n"),process.exitCode=1;return}let r=H(t.cwd??process.cwd()),i=await mn({cwd:r,scope:`project-local`,patch:{search:{semantic:{model:n}}}});if(!i.ok){process.stderr.write(`Failed to set the embeddings model — ${E(i.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model set to ${n} for ${r}\n  Changing the model re-embeds the corpus on the next search.
+`)})}function Yl(){return new M(`clear-model`).description(`Reset the embeddings model to ${we} (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),n=await mn({cwd:t,scope:`project-local`,patch:{search:{semantic:{model:we}}}});if(!n.ok){process.stderr.write(`Failed to reset the embeddings model — ${E(n.error)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings model reset to ${we} for ${t}\n`)})}function Xl(e,t){return new M(e).description(`Turn semantic search ${t?`on`:`off`} for this project (project-local)`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async n=>{let r=H(n.cwd??process.cwd()),i=await mn({cwd:r,scope:`project-local`,patch:{search:{semantic:{enabled:t}}}});if(!i.ok){process.stderr.write(`Failed to ${e} semantic search — ${E(i.error)}\n`),process.exitCode=1;return}if(process.stderr.write(`✓ Semantic search ${t?`enabled`:`disabled`} for ${r}\n`),t){let{present:e,notRequired:t}=await Bl(r,zl(r).baseUrl);!e&&!t&&process.stderr.write("  Note: no API key set yet — run `ok embeddings set-key`. Until then, search stays lexical.\n")}})}function Zl(){return new M(`status`).description(`Show semantic-search capability: key presence, enabled, coverage, provider`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.cwd??process.cwd()),n=zl(t),{present:i,notRequired:a,source:o}=await Bl(t,n.baseUrl),s=Me({enabled:n.enabled,keyPresent:i,keyNotRequired:a}),c=s?await Vl(t):null;if(e.json){process.stdout.write(`${JSON.stringify({project:t,key:{present:i,notRequired:a,source:o},project_config:{enabled:n.enabled,capable:s,coverage:c?{embedded:c.embedded,total:c.total}:null,provider_error:c?{active:c.providerError===!0,reason:c.providerErrorReason??null}:null,provider:{baseUrl:n.baseUrl,model:n.model,dimensions:n.dimensions??null},transport:{maxBatchSize:n.maxBatchSize,maxBatchChars:n.maxBatchChars,docTimeoutMs:n.docTimeoutMs}}})}\n`);return}let l=i?`set for this endpoint — ${o===`env`?`environment (${St})`:ne(r)}`:a?`not required (loopback endpoint)`:`not set`,u=s?c?`${c.embedded} / ${c.total} pages embedded`:`server not running — start it to index (or it has not embedded yet)`:null,d=Hl(s,c),f=[`Semantic search`,`  project:     ${t}`,``,`  This project:`,`    enabled:    ${n.enabled?`yes`:`no`}`,`    API key:    ${l}`,`    capability: ${d}`,...u?[`    coverage:   ${u}`]:[],`    provider:   ${n.baseUrl}`,`    model:      ${n.model}`,`    dimensions: ${n.dimensions??`auto (detected from the endpoint)`}`,`    batch size: ${n.maxBatchSize} chunks maximum per indexing request`,`    characters: ${n.maxBatchChars} approximate characters per indexing request`,`    timeout:    ${n.docTimeoutMs} ms per indexing request attempt`],p=[];!i&&!a&&p.push(`Set a key:  ok embeddings set-key   (or export ${St})`),n.enabled||p.push(`Enable it:  ok embeddings enable   (in this project folder)`),p.length>0&&f.push(``,...p.map(e=>`  ${e}`)),process.stdout.write(`${f.join(`
+`)}\n`)})}function Ql(){return new M(`embeddings`).description(`Manage the semantic-search embeddings provider key + status`).addCommand(Ul()).addCommand(Wl()).addCommand(Kl()).addCommand(ql()).addCommand(Jl()).addCommand(Yl()).addCommand(Xl(`enable`,!0)).addCommand(Xl(`disable`,!1)).addCommand(Gl()).addCommand(Zl())}const $l=B(`Contents`,`Resources`,`cli`,`bin`,`ok.sh`),eu=/Contents\/Resources\/cli\/dist\/cli\.mjs$/;function tu(e,t,n){return e===`darwin`?[fe.stable,fe.beta].flatMap(e=>[B(t,`Applications`),`/Applications`].map(t=>B(t,`${e.productName}.app`,$l))).find(e=>n.existsSync(e))??null:null}function nu(e,t,n){if(n!==`darwin`)return{proxy:!1,suppressedBy:`platform`};let r=e.OK_BUNDLE_PROXY?.toLowerCase();return r===`0`||r===`false`?{proxy:!1,suppressedBy:`env`}:t.includes(`--no-bundle-proxy`)?{proxy:!1,suppressedBy:`flag`}:typeof t[1]==`string`&&eu.test(t[1])?{proxy:!1,suppressedBy:`self`}:{proxy:!0,suppressedBy:null}}function ru(e){e.stderr.write(`${JSON.stringify({event:`mcp-bundle-proxy`,mode:e.mode,bundlePath:e.bundlePath,reason:e.reason,hint:`Suppress with --no-bundle-proxy or OK_BUNDLE_PROXY=0.`})}\n`)}function iu(e){ru({stderr:e.stderr,mode:`bundled`,bundlePath:e.bundlePath,reason:null});let t=e.spawnImpl??ki,n=e.exitProcess??(e=>process.exit(e)),r=e.now??(()=>Date.now()),i=r(),a=e.startupFailureWindowMs??1e3;return new Promise((o,s)=>{let c=t(e.bundlePath,e.argv.filter(e=>e!==`--no-bundle-proxy`),{env:{...e.env,OK_BUNDLE_PROXY:`0`},stdio:`inherit`,windowsHide:!0}),l=e=>{c.kill(e)},u=()=>{process.off(`SIGTERM`,l),process.off(`SIGINT`,l)};process.on(`SIGTERM`,l),process.on(`SIGINT`,l),c.once(`error`,e=>{u(),s(e)}),c.once(`exit`,(e,t)=>{if(u(),t){s(Error(`bundle process exited by signal ${t}`));return}let o=e??0,c=r()-i;if(o!==0&&c<=a){s(Error(`bundle process exited during startup with code ${o}`));return}n(o)})})}function au(e){let t=e.scheduler??{setTimeout:(e,t)=>globalThis.setTimeout(e,t),clearTimeout:e=>globalThis.clearTimeout(e)},n=e.initialBackoffMs??1e3,r=e.maxBackoffMs??3e4,i=e.rng??Math.random,a=e.createWebSocket??(e=>new WebSocket(e)),o=e.logger??null,s=e.log,c=null,l=null,u=!1,d=n;function f(e,t,n){try{o?o[e](t,n):s?.(t)}catch{}}function p(){if(u)return;l!==null&&t.clearTimeout(l);let e=d;d=Math.min(d*2,r);let n=i(),a=Math.max(1,Math.floor(e*(1-n/2)));f(`debug`,`scheduling reconnect`,{backoffMs:a,ceilMs:e}),l=t.setTimeout(()=>{l=null,m().catch(e=>f(`warn`,`reconnect failed`,{error:String(e)}))},a)}async function m(){if(u)return;let t;try{t=await e.resolveWsUrl()}catch(e){f(`warn`,`resolveWsUrl threw`,{error:String(e)}),p();return}if(!t){p();return}let r=[];e.pid!==void 0&&r.push(`pid=${encodeURIComponent(String(e.pid))}`),e.connectionId&&r.push(`connectionId=${encodeURIComponent(e.connectionId)}`),e.connectionId&&e.displayName!==void 0&&e.clientName!==void 0&&e.colorSeed!==void 0&&(r.push(`displayName=${encodeURIComponent(e.displayName)}`),r.push(`clientName=${encodeURIComponent(e.clientName)}`),r.push(`colorSeed=${encodeURIComponent(e.colorSeed)}`));let i=r.length>0?`?${r.join(`&`)}`:``,o=`${t}/collab/keepalive${i}`;try{c=a(o)}catch(e){f(`warn`,`WebSocket constructor failed`,{url:o,error:String(e)}),c=null,p();return}c.addEventListener(`open`,()=>{f(`info`,`connected`,{url:t}),d=n}),c.addEventListener(`close`,()=>{u||(f(`info`,`disconnected`,{url:t}),c=null,p())}),c.addEventListener(`error`,()=>{f(`debug`,`websocket error observed`,{url:t,readyState:c?.readyState,reason:`error-event`})})}return queueMicrotask(()=>{m().catch(e=>f(`warn`,`initial connect failed`,{error:String(e)}))}),{close:()=>{if(!u&&(u=!0,l!==null&&(t.clearTimeout(l),l=null),c)){try{c.close()}catch{}c=null}},isConnected:()=>c!==null&&c.readyState===1}}var ou=class{append(e){this._buffer=this._buffer?Buffer.concat([this._buffer,e]):e}readMessage(){if(!this._buffer)return null;let e=this._buffer.indexOf(`
+`);if(e===-1)return null;let t=this._buffer.toString(`utf8`,0,e).replace(/\r$/,``);return this._buffer=this._buffer.subarray(e+1),su(t)}clear(){this._buffer=void 0}};function su(e){return Je.parse(JSON.parse(e))}function cu(e){return JSON.stringify(e)+`
+`}var lu=class{constructor(e=Fi.stdin,t=Fi.stdout){this._stdin=e,this._stdout=t,this._readBuffer=new ou,this._started=!1,this._ondata=e=>{this._readBuffer.append(e),this.processReadBuffer()},this._onerror=e=>{this.onerror?.(e)}}async start(){if(this._started)throw Error(`StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.`);this._started=!0,this._stdin.on(`data`,this._ondata),this._stdin.on(`error`,this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e)}catch(e){this.onerror?.(e)}}async close(){this._stdin.off(`data`,this._ondata),this._stdin.off(`error`,this._onerror),this._stdin.listenerCount(`data`)===0&&this._stdin.pause(),this._readBuffer.clear(),this.onclose?.()}send(e){return new Promise(t=>{let n=cu(e);this._stdout.write(n)?t():this._stdout.once(`drain`,t)})}};function uu(e){if(e.platform!==`darwin`)return{kind:`unchanged`};let t;try{t=e.realpath(e.bundleAnchorPath)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}let n;try{n=e.statInode(t)}catch(e){return{kind:`unreadable`,reason:e instanceof Error?e.message:String(e)}}return n===e.currentInode?{kind:`unchanged`}:{kind:`replaced`,currentInode:e.currentInode,onDiskInode:n}}function du(e){let t=e.setInterval??setInterval,n=e.clearInterval??clearInterval,r=e.intervalMs??3e5,i=!0,a=!1,o=!1,s=t(()=>{if(!i)return;let t;try{t=e.detect()}catch(t){e.log(`bundle identity check threw unexpectedly (contract violation): ${t instanceof Error?t.message:String(t)}`);return}if(t.kind===`unreadable`){o||(o=!0,e.log(`bundle identity check unreadable${t.reason?`: ${t.reason}`:``} — will retry on next tick`));return}o&&(o=!1,e.log(`bundle identity check recovered from unreadable`)),t.kind!==`unchanged`&&(i=!1,e.onReplaced(t))},r);return typeof s.unref==`function`&&s.unref(),{stop:()=>{a||(a=!0,i=!1,n(s))}}}function fu(e,t){let n;try{n=t.realpathSync(e)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (realpath failed): ${e instanceof Error?e.message:String(e)}`);return}let r;try{r=t.statInoSync(n)}catch(e){t.log(`[mcp] bundle identity boot capture unreadable (stat failed): ${e instanceof Error?e.message:String(e)}`);return}return{resolvedPath:n,inode:r}}function pu(e){let t=e.scheduler??{setInterval:(e,t)=>globalThis.setInterval(e,t),clearInterval:e=>globalThis.clearInterval(e)},n=e.getPpid();if(n<=1)return{stop:()=>{}};let r=!1,i=t.setInterval(()=>{if(r)return;let a=e.getPpid();a!==n&&(r=!0,t.clearInterval(i),e.onHostGone(`host process exited (ppid ${n} -> ${a})`))},e.intervalMs??1e3);return i.unref?.(),{stop:()=>t.clearInterval(i)}}function mu(e){let t=t=>{try{e.log(t)}catch{}},n=e.transport.onclose;e.transport.onclose=()=>{t(`[mcp] stdio transport closed (internal shutdown)`),n?.()},e.stdin.once(`end`,()=>t(`[mcp] stdin EOF (host closed pipe)`)),e.stdin.once(`close`,()=>t(`[mcp] stdin closed`)),e.process.on(`exit`,e=>{t(`[mcp] exit code=${e}`)}),e.process.on(`uncaughtExceptionMonitor`,(e,n)=>{let r=e instanceof Error?e.stack??e.message:String(e);t(`[mcp] uncaughtException origin=${n}: ${r}`)})}function hu(e){return e?e instanceof Headers?Object.fromEntries(e.entries()):Array.isArray(e)?Object.fromEntries(e):{...e}:{}}function gu(e=fetch,t){return t?async(n,r)=>e(n,{...t,...r,headers:r?.headers?{...hu(t.headers),...hu(r.headers)}:t.headers}):e}let _u;_u=globalThis.crypto?.webcrypto??globalThis.crypto??import(`node:crypto`).then(e=>e.webcrypto);async function vu(e){return(await _u).getRandomValues(new Uint8Array(e))}async function yu(e){let t=``;for(;t.length<e;){let n=await vu(e-t.length);for(let e of n)e<198&&(t+=`abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~`[e%66])}return t}async function bu(e){return await yu(e)}async function xu(e){let t=await(await _u).subtle.digest(`SHA-256`,new TextEncoder().encode(e));return btoa(String.fromCharCode(...new Uint8Array(t))).replace(/\//g,`_`).replace(/\+/g,`-`).replace(/=/g,``)}async function Su(e){if(e||=43,e<43||e>128)throw`Expected a length between 43 and 128. Received ${e}.`;let t=await bu(e);return{code_verifier:t,code_challenge:await xu(t)}}const Y=h().superRefine((e,t)=>{if(!URL.canParse(e))return t.addIssue({code:aa.custom,message:`URL must be parseable`,fatal:!0}),me}).refine(e=>{let t=new URL(e);return t.protocol!==`javascript:`&&t.protocol!==`data:`&&t.protocol!==`vbscript:`},{message:`URL cannot use javascript:, data:, or vbscript: scheme`}),Cu=o({resource:v().url(),authorization_servers:T(Y).optional(),jwks_uri:v().url().optional(),scopes_supported:T(v()).optional(),bearer_methods_supported:T(v()).optional(),resource_signing_alg_values_supported:T(v()).optional(),resource_name:v().optional(),resource_documentation:v().optional(),resource_policy_uri:v().url().optional(),resource_tos_uri:v().url().optional(),tls_client_certificate_bound_access_tokens:O().optional(),authorization_details_types_supported:T(v()).optional(),dpop_signing_alg_values_supported:T(v()).optional(),dpop_bound_access_tokens_required:O().optional()}),wu=o({issuer:v(),authorization_endpoint:Y,token_endpoint:Y,registration_endpoint:Y.optional(),scopes_supported:T(v()).optional(),response_types_supported:T(v()),response_modes_supported:T(v()).optional(),grant_types_supported:T(v()).optional(),token_endpoint_auth_methods_supported:T(v()).optional(),token_endpoint_auth_signing_alg_values_supported:T(v()).optional(),service_documentation:Y.optional(),revocation_endpoint:Y.optional(),revocation_endpoint_auth_methods_supported:T(v()).optional(),revocation_endpoint_auth_signing_alg_values_supported:T(v()).optional(),introspection_endpoint:v().optional(),introspection_endpoint_auth_methods_supported:T(v()).optional(),introspection_endpoint_auth_signing_alg_values_supported:T(v()).optional(),code_challenge_methods_supported:T(v()).optional(),client_id_metadata_document_supported:O().optional()}),Tu=o({issuer:v(),authorization_endpoint:Y,token_endpoint:Y,userinfo_endpoint:Y.optional(),jwks_uri:Y,registration_endpoint:Y.optional(),scopes_supported:T(v()).optional(),response_types_supported:T(v()),response_modes_supported:T(v()).optional(),grant_types_supported:T(v()).optional(),acr_values_supported:T(v()).optional(),subject_types_supported:T(v()),id_token_signing_alg_values_supported:T(v()),id_token_encryption_alg_values_supported:T(v()).optional(),id_token_encryption_enc_values_supported:T(v()).optional(),userinfo_signing_alg_values_supported:T(v()).optional(),userinfo_encryption_alg_values_supported:T(v()).optional(),userinfo_encryption_enc_values_supported:T(v()).optional(),request_object_signing_alg_values_supported:T(v()).optional(),request_object_encryption_alg_values_supported:T(v()).optional(),request_object_encryption_enc_values_supported:T(v()).optional(),token_endpoint_auth_methods_supported:T(v()).optional(),token_endpoint_auth_signing_alg_values_supported:T(v()).optional(),display_values_supported:T(v()).optional(),claim_types_supported:T(v()).optional(),claims_supported:T(v()).optional(),service_documentation:v().optional(),claims_locales_supported:T(v()).optional(),ui_locales_supported:T(v()).optional(),claims_parameter_supported:O().optional(),request_parameter_supported:O().optional(),request_uri_parameter_supported:O().optional(),require_request_uri_registration:O().optional(),op_policy_uri:Y.optional(),op_tos_uri:Y.optional(),client_id_metadata_document_supported:O().optional()}),Eu=D({...Tu.shape,...wu.pick({code_challenge_methods_supported:!0}).shape}),Du=D({access_token:v(),id_token:v().optional(),token_type:v(),expires_in:sa().optional(),scope:v().optional(),refresh_token:v().optional()}).strip(),Ou=D({error:v(),error_description:v().optional(),error_uri:v().optional()}),ku=Y.optional().or(c(``).transform(()=>void 0)),Au=D({redirect_uris:T(Y),token_endpoint_auth_method:v().optional(),grant_types:T(v()).optional(),response_types:T(v()).optional(),client_name:v().optional(),client_uri:Y.optional(),logo_uri:ku,scope:v().optional(),contacts:T(v()).optional(),tos_uri:ku,policy_uri:v().optional(),jwks_uri:Y.optional(),jwks:Ve().optional(),software_id:v().optional(),software_version:v().optional(),software_statement:v().optional()}).strip(),ju=D({client_id:v(),client_secret:v().optional(),client_id_issued_at:y().optional(),client_secret_expires_at:y().optional()}).strip(),Mu=Au.merge(ju);D({error:v(),error_description:v().optional()}).strip(),D({token:v(),token_type_hint:v().optional()}).strip();function Nu(e){let t=typeof e==`string`?new URL(e):new URL(e.href);return t.hash=``,t}function Pu({requestedResource:e,configuredResource:t}){let n=typeof e==`string`?new URL(e):new URL(e.href),r=typeof t==`string`?new URL(t):new URL(t.href);if(n.origin!==r.origin||n.pathname.length<r.pathname.length)return!1;let i=n.pathname.endsWith(`/`)?n.pathname:n.pathname+`/`,a=r.pathname.endsWith(`/`)?r.pathname:r.pathname+`/`;return i.startsWith(a)}var X=class extends Error{constructor(e,t){super(e),this.errorUri=t,this.name=this.constructor.name}toResponseObject(){let e={error:this.errorCode,error_description:this.message};return this.errorUri&&(e.error_uri=this.errorUri),e}get errorCode(){return this.constructor.errorCode}},Fu=class extends X{};Fu.errorCode=`invalid_request`;var Iu=class extends X{};Iu.errorCode=`invalid_client`;var Lu=class extends X{};Lu.errorCode=`invalid_grant`;var Ru=class extends X{};Ru.errorCode=`unauthorized_client`;var zu=class extends X{};zu.errorCode=`unsupported_grant_type`;var Bu=class extends X{};Bu.errorCode=`invalid_scope`;var Vu=class extends X{};Vu.errorCode=`access_denied`;var Hu=class extends X{};Hu.errorCode=`server_error`;var Uu=class extends X{};Uu.errorCode=`temporarily_unavailable`;var Wu=class extends X{};Wu.errorCode=`unsupported_response_type`;var Gu=class extends X{};Gu.errorCode=`unsupported_token_type`;var Ku=class extends X{};Ku.errorCode=`invalid_token`;var qu=class extends X{};qu.errorCode=`method_not_allowed`;var Ju=class extends X{};Ju.errorCode=`too_many_requests`;var Yu=class extends X{};Yu.errorCode=`invalid_client_metadata`;var Xu=class extends X{};Xu.errorCode=`insufficient_scope`;var Zu=class extends X{};Zu.errorCode=`invalid_target`;const Qu={[Fu.errorCode]:Fu,[Iu.errorCode]:Iu,[Lu.errorCode]:Lu,[Ru.errorCode]:Ru,[zu.errorCode]:zu,[Bu.errorCode]:Bu,[Vu.errorCode]:Vu,[Hu.errorCode]:Hu,[Uu.errorCode]:Uu,[Wu.errorCode]:Wu,[Gu.errorCode]:Gu,[Ku.errorCode]:Ku,[qu.errorCode]:qu,[Ju.errorCode]:Ju,[Yu.errorCode]:Yu,[Xu.errorCode]:Xu,[Zu.errorCode]:Zu};var $u=class extends Error{constructor(e){super(e??`Unauthorized`)}};function ed(e){return[`client_secret_basic`,`client_secret_post`,`none`].includes(e)}const td=`code`,nd=`S256`;function rd(e,t){let n=e.client_secret!==void 0;return`token_endpoint_auth_method`in e&&e.token_endpoint_auth_method&&ed(e.token_endpoint_auth_method)&&(t.length===0||t.includes(e.token_endpoint_auth_method))?e.token_endpoint_auth_method:t.length===0?n?`client_secret_basic`:`none`:n&&t.includes(`client_secret_basic`)?`client_secret_basic`:n&&t.includes(`client_secret_post`)?`client_secret_post`:t.includes(`none`)?`none`:n?`client_secret_post`:`none`}function id(e,t,n,r){let{client_id:i,client_secret:a}=t;switch(e){case`client_secret_basic`:ad(i,a,n);return;case`client_secret_post`:od(i,a,r);return;case`none`:sd(i,r);return;default:throw Error(`Unsupported client authentication method: ${e}`)}}function ad(e,t,n){if(!t)throw Error(`client_secret_basic authentication requires a client_secret`);let r=btoa(`${e}:${t}`);n.set(`Authorization`,`Basic ${r}`)}function od(e,t,n){n.set(`client_id`,e),t&&n.set(`client_secret`,t)}function sd(e,t){t.set(`client_id`,e)}async function cd(e){let t=e instanceof Response?e.status:void 0,n=e instanceof Response?await e.text():e;try{let{error:e,error_description:t,error_uri:r}=Ou.parse(JSON.parse(n));return new(Qu[e]||Hu)(t||``,r)}catch(e){return new Hu(`${t?`HTTP ${t}: `:``}Invalid OAuth error response: ${e}. Raw body: ${n}`)}}async function ld(e,t){try{return await ud(e,t)}catch(n){if(n instanceof Iu||n instanceof Ru)return await e.invalidateCredentials?.(`all`),await ud(e,t);if(n instanceof Lu)return await e.invalidateCredentials?.(`tokens`),await ud(e,t);throw n}}async function ud(e,{serverUrl:t,authorizationCode:n,scope:r,resourceMetadataUrl:i,fetchFn:a}){let o=await e.discoveryState?.(),s,c,l,u=i;if(!u&&o?.resourceMetadataUrl&&(u=new URL(o.resourceMetadataUrl)),o?.authorizationServerUrl){if(c=o.authorizationServerUrl,s=o.resourceMetadata,l=o.authorizationServerMetadata??await Sd(c,{fetchFn:a}),!s)try{s=await hd(t,{resourceMetadataUrl:u},a)}catch{}(l!==o.authorizationServerMetadata||s!==o.resourceMetadata)&&await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}else{let n=await Cd(t,{resourceMetadataUrl:u,fetchFn:a});c=n.authorizationServerUrl,l=n.authorizationServerMetadata,s=n.resourceMetadata,await e.saveDiscoveryState?.({authorizationServerUrl:String(c),resourceMetadataUrl:u?.toString(),resourceMetadata:s,authorizationServerMetadata:l})}let d=await fd(t,e,s),f=r||s?.scopes_supported?.join(` `)||e.clientMetadata.scope,p=await Promise.resolve(e.clientInformation());if(!p){if(n!==void 0)throw Error(`Existing OAuth client information is required when exchanging an authorization code`);let t=l?.client_id_metadata_document_supported===!0,r=e.clientMetadataUrl;if(r&&!dd(r))throw new Yu(`clientMetadataUrl must be a valid HTTPS URL with a non-root pathname, got: ${r}`);if(t&&r)p={client_id:r},await e.saveClientInformation?.(p);else{if(!e.saveClientInformation)throw Error(`OAuth client information must be saveable for dynamic registration`);let t=await kd(c,{metadata:l,clientMetadata:e.clientMetadata,scope:f,fetchFn:a});await e.saveClientInformation(t),p=t}}let m=!e.redirectUrl;if(n!==void 0||m){let t=await Od(e,c,{metadata:l,resource:d,authorizationCode:n,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}let h=await e.tokens();if(h?.refresh_token)try{let t=await Dd(c,{metadata:l,clientInformation:p,refreshToken:h.refresh_token,resource:d,addClientAuthentication:e.addClientAuthentication,fetchFn:a});return await e.saveTokens(t),`AUTHORIZED`}catch(e){if(!(!(e instanceof X)||e instanceof Hu))throw e}let g=e.state?await e.state():void 0,{authorizationUrl:_,codeVerifier:v}=await wd(c,{metadata:l,clientInformation:p,state:g,redirectUrl:e.redirectUrl,scope:f,resource:d});return await e.saveCodeVerifier(v),await e.redirectToAuthorization(_),`REDIRECT`}function dd(e){if(!e)return!1;try{let t=new URL(e);return t.protocol===`https:`&&t.pathname!==`/`}catch{return!1}}async function fd(e,t,n){let r=Nu(e);if(t.validateResourceURL)return await t.validateResourceURL(r,n?.resource);if(n){if(!Pu({requestedResource:r,configuredResource:n.resource}))throw Error(`Protected resource ${n.resource} does not match expected ${r} (or origin)`);return new URL(n.resource)}}function pd(e){let t=e.headers.get(`WWW-Authenticate`);if(!t)return{};let[n,r]=t.split(` `);if(n.toLowerCase()!==`bearer`||!r)return{};let i=md(e,`resource_metadata`)||void 0,a;if(i)try{a=new URL(i)}catch{}let o=md(e,`scope`)||void 0,s=md(e,`error`)||void 0;return{resourceMetadataUrl:a,scope:o,error:s}}function md(e,t){let n=e.headers.get(`WWW-Authenticate`);if(!n)return null;let r=RegExp(`${t}=(?:"([^"]+)"|([^\\s,]+))`),i=n.match(r);return i?i[1]||i[2]:null}async function hd(e,t,n=fetch){let r=await bd(e,`oauth-protected-resource`,n,{protocolVersion:t?.protocolVersion,metadataUrl:t?.resourceMetadataUrl});if(!r||r.status===404)throw await r?.body?.cancel(),Error(`Resource server does not implement OAuth 2.0 Protected Resource Metadata.`);if(!r.ok)throw await r.body?.cancel(),Error(`HTTP ${r.status} trying to load well-known OAuth protected resource metadata.`);return Cu.parse(await r.json())}async function gd(e,t,n=fetch){try{return await n(e,{headers:t})}catch(r){if(r instanceof TypeError)return t?gd(e,void 0,n):void 0;throw r}}function _d(e,t=``,n={}){return t.endsWith(`/`)&&(t=t.slice(0,-1)),n.prependPathname?`${t}/.well-known/${e}`:`/.well-known/${e}${t}`}async function vd(e,t,n=fetch){return await gd(e,{"MCP-Protocol-Version":t},n)}function yd(e,t){return!e||e.status>=400&&e.status<500&&t!==`/`}async function bd(e,t,n,r){let i=new URL(e),a=r?.protocolVersion??`2025-11-25`,o;if(r?.metadataUrl)o=new URL(r.metadataUrl);else{let e=_d(t,i.pathname);o=new URL(e,r?.metadataServerUrl??i),o.search=i.search}let s=await vd(o,a,n);return!r?.metadataUrl&&yd(s,i.pathname)&&(s=await vd(new URL(`/.well-known/${t}`,i),a,n)),s}function xd(e){let t=typeof e==`string`?new URL(e):e,n=t.pathname!==`/`,r=[];if(!n)return r.push({url:new URL(`/.well-known/oauth-authorization-server`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration`,t.origin),type:`oidc`}),r;let i=t.pathname;return i.endsWith(`/`)&&(i=i.slice(0,-1)),r.push({url:new URL(`/.well-known/oauth-authorization-server${i}`,t.origin),type:`oauth`}),r.push({url:new URL(`/.well-known/openid-configuration${i}`,t.origin),type:`oidc`}),r.push({url:new URL(`${i}/.well-known/openid-configuration`,t.origin),type:`oidc`}),r}async function Sd(e,{fetchFn:t=fetch,protocolVersion:n=Rt}={}){let r={"MCP-Protocol-Version":n,Accept:`application/json`},i=xd(e);for(let{url:e,type:n}of i){let i=await gd(e,r,t);if(i){if(!i.ok){if(await i.body?.cancel(),i.status>=400&&i.status<500)continue;throw Error(`HTTP ${i.status} trying to load ${n===`oauth`?`OAuth`:`OpenID provider`} metadata from ${e}`)}return n===`oauth`?wu.parse(await i.json()):Eu.parse(await i.json())}}}async function Cd(e,t){let n,r;try{n=await hd(e,{resourceMetadataUrl:t?.resourceMetadataUrl},t?.fetchFn),n.authorization_servers&&n.authorization_servers.length>0&&(r=n.authorization_servers[0])}catch{}r||=String(new URL(`/`,e));let i=await Sd(r,{fetchFn:t?.fetchFn});return{authorizationServerUrl:r,authorizationServerMetadata:i,resourceMetadata:n}}async function wd(e,{metadata:t,clientInformation:n,redirectUrl:r,scope:i,state:a,resource:o}){let s;if(t){if(s=new URL(t.authorization_endpoint),!t.response_types_supported.includes(td))throw Error(`Incompatible auth server: does not support response type ${td}`);if(t.code_challenge_methods_supported&&!t.code_challenge_methods_supported.includes(nd))throw Error(`Incompatible auth server: does not support code challenge method ${nd}`)}else s=new URL(`/authorize`,e);let c=await Su(),l=c.code_verifier,u=c.code_challenge;return s.searchParams.set(`response_type`,td),s.searchParams.set(`client_id`,n.client_id),s.searchParams.set(`code_challenge`,u),s.searchParams.set(`code_challenge_method`,nd),s.searchParams.set(`redirect_uri`,String(r)),a&&s.searchParams.set(`state`,a),i&&s.searchParams.set(`scope`,i),i?.includes(`offline_access`)&&s.searchParams.append(`prompt`,`consent`),o&&s.searchParams.set(`resource`,o.href),{authorizationUrl:s,codeVerifier:l}}function Td(e,t,n){return new URLSearchParams({grant_type:`authorization_code`,code:e,code_verifier:t,redirect_uri:String(n)})}async function Ed(e,{metadata:t,tokenRequestParams:n,clientInformation:r,addClientAuthentication:i,resource:a,fetchFn:o}){let s=t?.token_endpoint?new URL(t.token_endpoint):new URL(`/token`,e),c=new Headers({"Content-Type":`application/x-www-form-urlencoded`,Accept:`application/json`});a&&n.set(`resource`,a.href),i?await i(c,n,s,t):r&&id(rd(r,t?.token_endpoint_auth_methods_supported??[]),r,c,n);let l=await(o??fetch)(s,{method:`POST`,headers:c,body:n});if(!l.ok)throw await cd(l);return Du.parse(await l.json())}async function Dd(e,{metadata:t,clientInformation:n,refreshToken:r,resource:i,addClientAuthentication:a,fetchFn:o}){return{refresh_token:r,...await Ed(e,{metadata:t,tokenRequestParams:new URLSearchParams({grant_type:`refresh_token`,refresh_token:r}),clientInformation:n,addClientAuthentication:a,resource:i,fetchFn:o})}}async function Od(e,t,{metadata:n,resource:r,authorizationCode:i,fetchFn:a}={}){let o=e.clientMetadata.scope,s;if(e.prepareTokenRequest&&(s=await e.prepareTokenRequest(o)),!s){if(!i)throw Error(`Either provider.prepareTokenRequest() or authorizationCode is required`);if(!e.redirectUrl)throw Error(`redirectUrl is required for authorization_code flow`);s=Td(i,await e.codeVerifier(),e.redirectUrl)}let c=await e.clientInformation();return Ed(t,{metadata:n,tokenRequestParams:s,clientInformation:c??void 0,addClientAuthentication:e.addClientAuthentication,resource:r,fetchFn:a})}async function kd(e,{metadata:t,clientMetadata:n,scope:r,fetchFn:i}){let a;if(t){if(!t.registration_endpoint)throw Error(`Incompatible auth server: does not support dynamic client registration`);a=new URL(t.registration_endpoint)}else a=new URL(`/register`,e);let o=await(i??fetch)(a,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({...n,...r===void 0?{}:{scope:r}})});if(!o.ok)throw await cd(o);return Mu.parse(await o.json())}var Ad=class extends Error{constructor(e,t){super(e),this.name=`ParseError`,this.type=t.type,this.field=t.field,this.value=t.value,this.line=t.line}};function jd(e){}function Md(e){if(typeof e==`function`)throw TypeError("`config` must be an object, got a function instead. Did you mean `createParser({onEvent: fn})`?");let{onEvent:t=jd,onError:n=jd,onRetry:r=jd,onComment:i,maxBufferSize:a}=e,o=[],s=0,c=!0,l,u=``,d=0,f,p=!1;function m(e){if(p)throw Error("Cannot feed parser: it was terminated after exceeding the configured max buffer size. Call `reset()` to resume parsing.");if(c&&(c=!1,e.charCodeAt(0)===239&&e.charCodeAt(1)===187&&e.charCodeAt(2)===191&&(e=e.slice(3))),o.length===0){let t=g(e);t!==``&&(o.push(t),s=t.length),h();return}if(e.indexOf(`
+`)===-1&&e.indexOf(`\r`)===-1){o.push(e),s+=e.length,h();return}o.push(e);let t=o.join(``);o.length=0,s=0;let n=g(t);n!==``&&(o.push(n),s=n.length),h()}function h(){a!==void 0&&(s+u.length<=a||(p=!0,o.length=0,s=0,l=void 0,u=``,d=0,f=void 0,n(new Ad(`Buffered data exceeded max buffer size of ${a} characters`,{type:`max-buffer-size-exceeded`}))))}function g(e){let n=0;if(e.indexOf(`\r`)===-1){let r=e.indexOf(`
 `,n);for(;r!==-1;){if(n===r){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0,n=r+1,r=e.indexOf(`
-`,n);continue}let i=e.charCodeAt(n);if(Md(e,n,i)){let i=e.charCodeAt(n+5)===32?n+6:n+5,a=e.slice(i,r);if(d===0&&e.charCodeAt(r+1)===10){t({id:l,event:f,data:a}),l=void 0,u=``,f=void 0,n=r+2,r=e.indexOf(`
+`,n);continue}let i=e.charCodeAt(n);if(Nd(e,n,i)){let i=e.charCodeAt(n+5)===32?n+6:n+5,a=e.slice(i,r);if(d===0&&e.charCodeAt(r+1)===10){t({id:l,event:f,data:a}),l=void 0,u=``,f=void 0,n=r+2,r=e.indexOf(`
 `,n);continue}u=d===0?a:`${u}
-${a}`,d++}else Nd(e,n,i)?f=e.slice(e.charCodeAt(n+6)===32?n+7:n+6,r)||void 0:_(e,n,r);n=r+1,r=e.indexOf(`
+${a}`,d++}else Pd(e,n,i)?f=e.slice(e.charCodeAt(n+6)===32?n+7:n+6,r)||void 0:_(e,n,r);n=r+1,r=e.indexOf(`
 `,n)}return e.slice(n)}for(;n<e.length;){let t=e.indexOf(`\r`,n),r=e.indexOf(`
-`,n),i=-1;if(t!==-1&&r!==-1?i=t<r?t:r:t===-1?r!==-1&&(i=r):i=t===e.length-1?-1:t,i===-1)break;_(e,n,i),n=i+1,e.charCodeAt(n-1)===13&&e.charCodeAt(n)===10&&n++}return e.slice(n)}function _(e,t,n){if(t===n){y();return}let r=e.charCodeAt(t);if(Md(e,t,r)){let r=e.charCodeAt(t+5)===32?t+6:t+5,i=e.slice(r,n);u=d===0?i:`${u}
-${i}`,d++;return}if(Nd(e,t,r)){f=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+3)===32?t+4:t+3,n);l=r.includes(`\0`)?void 0:r;return}if(r===58){if(i){let r=e.slice(t,n);i(r.slice(e.charCodeAt(t+1)===32?2:1))}return}let a=e.slice(t,n),o=a.indexOf(`:`);if(o===-1){v(a,``,a);return}let s=a.slice(0,o),c=a.charCodeAt(o+1)===32?2:1;v(s,a.slice(o+c),a)}function v(e,t,i){switch(e){case`event`:f=t||void 0;break;case`data`:u=d===0?t:`${u}
-${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.test(t)?r(parseInt(t,10)):n(new kd(`Invalid \`retry\` value: "${t}"`,{type:`invalid-retry`,value:t,line:i}));break;default:n(new kd(`Unknown field "${e.length>20?`${e.slice(0,20)}\u2026`:e}"`,{type:`unknown-field`,field:e,value:t,line:i}))}}function y(){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0}function b(e={}){if(e.consume&&o.length>0){let e=o.join(``);_(e,0,e.length)}c=!0,l=void 0,u=``,d=0,f=void 0,o.length=0,s=0,p=!1}return{feed:m,reset:b}}function Md(e,t,n){return n===100&&e.charCodeAt(t+1)===97&&e.charCodeAt(t+2)===116&&e.charCodeAt(t+3)===97&&e.charCodeAt(t+4)===58}function Nd(e,t,n){return n===101&&e.charCodeAt(t+1)===118&&e.charCodeAt(t+2)===101&&e.charCodeAt(t+3)===110&&e.charCodeAt(t+4)===116&&e.charCodeAt(t+5)===58}var Pd=class extends TransformStream{constructor({onError:e,onRetry:t,onComment:n,maxBufferSize:r}={}){let i;super({start(a){i=jd({onEvent:e=>{a.enqueue(e)},onError(t){typeof e==`function`&&e(t),(e===`terminate`||t.type===`max-buffer-size-exceeded`)&&a.error(t)},onRetry:t,onComment:n,maxBufferSize:r})},transform(e){i.feed(e)}})}};const Fd={initialReconnectionDelay:1e3,maxReconnectionDelay:3e4,reconnectionDelayGrowFactor:1.5,maxRetries:2};var Id=class extends Error{constructor(e,t){super(`Streamable HTTP error: ${t}`),this.code=e}},Ld=class{constructor(e,t){this._hasCompletedAuthFlow=!1,this._url=e,this._resourceMetadataUrl=void 0,this._scope=void 0,this._requestInit=t?.requestInit,this._authProvider=t?.authProvider,this._fetch=t?.fetch,this._fetchWithInit=hu(t?.fetch,t?.requestInit),this._sessionId=t?.sessionId,this._reconnectionOptions=t?.reconnectionOptions??Fd}async _authThenStart(){if(!this._authProvider)throw new Qu(`No auth provider`);let e;try{e=await cd(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})}catch(e){throw this.onerror?.(e),e}if(e!==`AUTHORIZED`)throw new Qu;return await this._startOrAuthSse({resumptionToken:void 0})}async _commonHeaders(){let e={};if(this._authProvider){let t=await this._authProvider.tokens();t&&(e.Authorization=`Bearer ${t.access_token}`)}this._sessionId&&(e[`mcp-session-id`]=this._sessionId),this._protocolVersion&&(e[`mcp-protocol-version`]=this._protocolVersion);let t=mu(this._requestInit?.headers);return new Headers({...e,...t})}async _startOrAuthSse(e){let{resumptionToken:t}=e;try{let n=await this._commonHeaders();n.set(`Accept`,`text/event-stream`),t&&n.set(`last-event-id`,t);let r=await(this._fetch??fetch)(this._url,{method:`GET`,headers:n,signal:this._abortController?.signal});if(!r.ok){if(await r.body?.cancel(),r.status===401&&this._authProvider)return await this._authThenStart();if(r.status===405)return;throw new Id(r.status,`Failed to open SSE stream: ${r.statusText}`)}this._handleSseStream(r.body,e,!0)}catch(e){throw this.onerror?.(e),e}}_getNextReconnectionDelay(e){if(this._serverRetryMs!==void 0)return this._serverRetryMs;let t=this._reconnectionOptions.initialReconnectionDelay,n=this._reconnectionOptions.reconnectionDelayGrowFactor,r=this._reconnectionOptions.maxReconnectionDelay;return Math.min(t*n**+e,r)}_scheduleReconnection(e,t=0){let n=this._reconnectionOptions.maxRetries;if(t>=n){this.onerror?.(Error(`Maximum reconnection attempts (${n}) exceeded.`));return}let r=this._getNextReconnectionDelay(t);this._reconnectionTimeout=setTimeout(()=>{this._startOrAuthSse(e).catch(n=>{this.onerror?.(Error(`Failed to reconnect SSE stream: ${n instanceof Error?n.message:String(n)}`)),this._scheduleReconnection(e,t+1)})},r)}_handleSseStream(e,t,n){if(!e)return;let{onresumptiontoken:r,replayMessageId:i}=t,a,o=!1,s=!1;(async()=>{try{let t=e.pipeThrough(new TextDecoderStream).pipeThrough(new Pd({onRetry:e=>{this._serverRetryMs=e}})).getReader();for(;;){let{value:e,done:n}=await t.read();if(n)break;if(e.id&&(a=e.id,o=!0,r?.(e.id)),e.data&&(!e.event||e.event===`message`))try{let t=Wn.parse(JSON.parse(e.data));Pt(t)&&(s=!0,i!==void 0&&(t.id=i)),this.onmessage?.(t)}catch(e){this.onerror?.(e)}}(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted&&this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){if(this.onerror?.(Error(`SSE stream disconnected: ${e}`)),(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted)try{this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){this.onerror?.(Error(`Failed to reconnect: ${e instanceof Error?e.message:String(e)}`))}}})()}async start(){if(this._abortController)throw Error(`StreamableHTTPClientTransport already started! If using Client class, note that connect() calls start() automatically.`);this._abortController=new AbortController}async finishAuth(e){if(!this._authProvider)throw new Qu(`No auth provider`);if(await cd(this._authProvider,{serverUrl:this._url,authorizationCode:e,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Qu(`Failed to authorize`)}async close(){this._reconnectionTimeout&&=(clearTimeout(this._reconnectionTimeout),void 0),this._abortController?.abort(),this.onclose?.()}async send(e,t){try{let{resumptionToken:n,onresumptiontoken:r}=t||{};if(n){this._startOrAuthSse({resumptionToken:n,replayMessageId:ut(e)?e.id:void 0}).catch(e=>this.onerror?.(e));return}let i=await this._commonHeaders();i.set(`content-type`,`application/json`),i.set(`accept`,`application/json, text/event-stream`);let a={...this._requestInit,method:`POST`,headers:i,body:JSON.stringify(e),signal:this._abortController?.signal},o=await(this._fetch??fetch)(this._url,a),s=o.headers.get(`mcp-session-id`);if(s&&(this._sessionId=s),!o.ok){let t=await o.text().catch(()=>null);if(o.status===401&&this._authProvider){if(this._hasCompletedAuthFlow)throw new Id(401,`Server returned 401 after successful authentication`);let{resourceMetadataUrl:t,scope:n}=fd(o);if(this._resourceMetadataUrl=t,this._scope=n,await cd(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new Qu;return this._hasCompletedAuthFlow=!0,this.send(e)}if(o.status===403&&this._authProvider){let{resourceMetadataUrl:t,scope:n,error:r}=fd(o);if(r===`insufficient_scope`){let r=o.headers.get(`WWW-Authenticate`);if(this._lastUpscopingHeader===r)throw new Id(403,`Server returned 403 after trying upscoping`);if(n&&(this._scope=n),t&&(this._resourceMetadataUrl=t),this._lastUpscopingHeader=r??void 0,await cd(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetch})!==`AUTHORIZED`)throw new Qu;return this.send(e)}}throw new Id(o.status,`Error POSTing to endpoint: ${t}`)}if(this._hasCompletedAuthFlow=!1,this._lastUpscopingHeader=void 0,o.status===202){await o.body?.cancel(),Lt(e)&&this._startOrAuthSse({resumptionToken:void 0}).catch(e=>this.onerror?.(e));return}let c=(Array.isArray(e)?e:[e]).filter(e=>`method`in e&&`id`in e&&e.id!==void 0).length>0,l=o.headers.get(`content-type`);if(c){if(l?.includes(`text/event-stream`))this._handleSseStream(o.body,{onresumptiontoken:r},!1);else if(l?.includes(`application/json`)){let e=await o.json(),t=Array.isArray(e)?e.map(e=>Wn.parse(e)):[Wn.parse(e)];for(let e of t)this.onmessage?.(e)}else throw await o.body?.cancel(),new Id(-1,`Unexpected content type: ${l}`)}else await o.body?.cancel()}catch(e){throw this.onerror?.(e),e}}get sessionId(){return this._sessionId}async terminateSession(){if(this._sessionId)try{let e=await this._commonHeaders(),t={...this._requestInit,method:`DELETE`,headers:e,signal:this._abortController?.signal},n=await(this._fetch??fetch)(this._url,t);if(await n.body?.cancel(),!n.ok&&n.status!==405)throw new Id(n.status,`Failed to terminate session: ${n.statusText}`);this._sessionId=void 0}catch(e){throw this.onerror?.(e),e}}setProtocolVersion(e){this._protocolVersion=e}get protocolVersion(){return this._protocolVersion}async resumeStream(e,t){await this._startOrAuthSse({resumptionToken:e,onresumptiontoken:t?.onresumptiontoken})}};function Rd(e){return`${e} Server.app`}function zd(e){return`${e} Helper`}Rd(Be),zd(Be);function Bd(e){let t=Ni.basename(e);return Ni.join(Ni.dirname(e),`..`,`Frameworks`,Rd(t),`Contents`,`MacOS`,zd(t))}const Vd=/\/[^/]+\.app\/Contents\/MacOS\/[^/]+$/;function Hd(e){if(e.platform!==`darwin`||!Vd.test(e.execPath))return null;let t=Bd(e.execPath);return e.exists(t)?t:null}function Ud(e={}){let t=e.execPath??process.execPath,n=e.platform??process.platform,r=e.argv??process.argv,i=e.exists??U,a=r[1];return a?{command:Hd({execPath:t,platform:n,exists:i})??t,prefixArgs:[a]}:(console.warn(`[self-spawn] process.argv[1] is empty — falling back to \`npx -y @inkeep/open-knowledge@latest\`. This re-introduces the registry-fetch surface that re-exec was fixing. Observed argv: ${JSON.stringify(r)}`),{command:`npx`,prefixArgs:[`-y`,`@inkeep/open-knowledge@latest`]})}const Wd="Run `ok start` in the target project, then retry this tool. Do not fall back to native file edits for OpenKnowledge content.";function Gd(e){return(t,n)=>{if((n?.method??`GET`).toUpperCase()===`GET`)return globalThis.fetch(t,n);let r=new AbortController,i=setTimeout(()=>r.abort(Error(`MCP request timed out after ${e}ms`)),e),a=n?.signal instanceof AbortSignal?AbortSignal.any([n.signal,r.signal]):r.signal;return globalThis.fetch(t,{...n,signal:a}).finally(()=>clearTimeout(i))}}function Kd(e){if(e===void 0||e===``)return;let t=Number.parseInt(e,10);if(!(Number.isNaN(t)||t<=0))return t}function qd(e){return e===`0.0.0.0`||e===`::`?`localhost`:e.includes(`:`)&&!e.startsWith(`[`)?`[${e}]`:e}function Jd(e,t){return`http://${qd(e)}:${t}/mcp`}function Yd(e){return`${e}/mcp`}function Xd(e){return e.replace(/^http/,`ws`)}function Zd(e){let t=new URL(e);return t.protocol=t.protocol===`https:`?`wss:`:`ws:`,t.pathname=``,t.search=``,t.hash=``,t.toString().replace(/\/$/,``)}function Qd(e,t){if(e&&e.draining!==!0&&t(e.pid))return zn(e,{fallbackHost:`127.0.0.1`})??void 0}function $d(e){if(!U(e))return``;let t=be(G(e,`utf-8`)).trim();return t.length>8192?`…${t.slice(-8192)}`:t}function ef(e,t){return`server did not start within ${e}ms${t?` stderr:\n${t}`:``}\n${Wd}`}function tf(e){if(e&&typeof e==`object`&&`method`in e&&`id`in e)return e.id}function nf(e){if(!e||typeof e!=`object`||!(`result`in e))return;let t=e.result;if(!t||typeof t!=`object`||!(`protocolVersion`in t))return;let n=t.protocolVersion;return typeof n==`string`?n:void 0}function rf(e,t){return{jsonrpc:`2.0`,id:e,error:{code:-32e3,message:t instanceof Error?t.message:String(t)}}}async function af(e){let t=e.readLock??(()=>Gt(e.lockDir)),n=e.isAlive??kn,r=e.sleep??(e=>na(e)),i=e.spawn??ki,a=e.readErrorLog??$d,o=e.openErrorLog??(e=>xn(e,process.pid)),s=e.closeFd??zi,c=e.timeoutMs??5e3,l=e.pollIntervalMs??100;if(e.portOverride!==void 0){let t=Number.parseInt(e.portOverride,10);if(Number.isNaN(t)||t<=0)throw Error(`invalid --port value '${e.portOverride}' — HTTP MCP shim requires a positive port`);return Jd(Ie,t)}let u=t(),d=Qd(u,n);if(d!==void 0)return Yd(d);if(e.envAutoStart===`0`)throw new tn(`OpenKnowledge server is not running and OK_MCP_AUTOSTART=0 disables auto-start. ${Wd}`);if(u!==null&&u.draining===!0&&n(u.pid)){let e=Date.now(),i=e+c,a=!0;for(;Date.now()<i;){let e=t();if(e===null||e.draining!==!0||!n(e.pid)){a=!1;break}await r(l)}console.error(`[mcp-shim] waited ${Date.now()-e}ms for a draining predecessor server${a?` (timed out — proceeding anyway)`:``}`);let o=Qd(t(),n);if(o!==void 0)return Yd(o)}U(e.lockDir)||W(e.lockDir,{recursive:!0});let f=B(e.lockDir,fe),p=o(f),m,h,g=Ud();try{try{m=i(g.command,[...g.prefixArgs,`start`],{detached:!0,stdio:[`ignore`,`ignore`,p],windowsHide:!0,cwd:e.contentDir,env:{...process.env,OK_LOCK_KIND:`mcp-spawned`,ELECTRON_RUN_AS_NODE:`1`}}),m.on(`error`,e=>{h=e instanceof Error?e.message:String(e)}),m.unref()}catch(e){h=e instanceof Error?e.message:String(e)}}finally{try{s(p)}catch{}}let _=Date.now()+c;for(;Date.now()<_;){if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}\n${Wd}`)}await r(l);let e=Qd(t(),n);if(e!==void 0)return Yd(e)}if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}\n${Wd}`)}throw Error(ef(c,a(f)))}function of(e,t){if(e.portOverride!==void 0)return Zd(t);let n=e.readLock??(()=>Gt(e.lockDir)),r=e.isAlive??kn,i=Qd(n(),r);if(i!==void 0)return Xd(i)}async function sf(e,t={}){let n=t.stderr??process.stderr,r=t.requestTimeoutMs??12e4,i=t.createStdioTransport?t.createStdioTransport(t.stdin,t.stdout):new cu(t.stdin,t.stdout),a=t.createHttpTransport?t.createHttpTransport(new URL(e)):new Ld(new URL(e),{fetch:Gd(r),requestInit:{headers:{...fn({kind:`mcp`,runtimeVersion:mn}),...t.connectionId===void 0?{}:{[Vt]:t.connectionId}}}}),o=!1,s=async()=>{o||(o=!0,t.onclose?.(),await Promise.allSettled([i.close(),a.close()]))};i.onerror=e=>{n.write(`[mcp-shim] stdio error: ${e.message}\n`)},a.onerror=e=>{n.write(`[mcp-shim] HTTP transport error: ${e.message}\n`)},i.onclose=()=>{s()},a.onclose=()=>{s()};let c=Promise.resolve();i.onmessage=e=>{c=c.then(async()=>{try{await a.send(e)}catch(t){let r=tf(e);if(r===void 0){n.write(`[mcp-shim] failed to forward stdio notification: ${t instanceof Error?t.message:String(t)}\n`);return}await i.send(rf(r,t)).catch(e=>{n.write(`[mcp-shim] failed to write stdio error response: ${e instanceof Error?e.message:String(e)}\n`)})}}).catch(e=>{n.write(`[mcp-shim] unexpected stdio forwarding failure: ${e instanceof Error?e.message:String(e)}\n`)})},a.onmessage=e=>{let t=nf(e);t&&a.setProtocolVersion?.(t),i.send(e).catch(e=>{n.write(`[mcp-shim] failed to write stdio response: ${e instanceof Error?e.message:String(e)}\n`)})};try{await a.start(),await i.start()}catch(e){throw await s(),e}return{close:s}}async function cf(e){let t=e.stderr??process.stderr,n=e.bridgeFn??sf,r=await af(e),i=e.createConnectionId?.()??ea(),a=!1,o=(e.startKeepalive??iu)({connectionId:i,pid:process.pid,resolveWsUrl:async()=>of(e,r),log:e=>t.write(`[mcp-shim] keepalive: ${e}\n`)});t.write(`[mcp-shim] proxying stdio to ${r}\n`);let s;try{s=await n(r,{stderr:t,connectionId:i,onclose:()=>{a||(o.close(),process.exit(0))}})}catch(e){throw o.close(),e}let c=()=>{a=!0,o.close(),s.close().finally(()=>{process.exit(0)})};process.once(`SIGINT`,c),process.once(`SIGTERM`,c)}const lf=/^mcp\.\d{4}-\d{2}-\d{2}\.log$/;function uf(){return B(Mn(),`logs`)}function df(e,t=()=>new Date){try{let n=t().getTime(),r=Ui(e).filter(e=>lf.test(e)).flatMap(t=>{try{let n=K(B(e,t));return[{name:t,mtime:n.mtimeMs,size:n.size}]}catch{return[]}}),i=[];for(let t of r)if(n-t.mtime>6048e5)try{qi(B(e,t.name))}catch{}else i.push(t);i.sort((e,t)=>e.mtime-t.mtime);let a=i.reduce((e,t)=>e+t.size,0);for(let t of i){if(a<=47185920)break;try{qi(B(e,t.name)),a-=t.size}catch{}}}catch{}}function ff(e={}){let t=e.logsDir??uf(),n=e.now??(()=>new Date),r=e.pruneDelayMs??5e3;r<=0?df(t,n):setTimeout(()=>df(t,n),r).unref?.();let i=0,a=!1;return{write(e){if(!(i>=5))try{a||=(W(t,{recursive:!0}),!0);let r=n().toISOString(),o=B(t,`mcp.${r.slice(0,10)}.log`);Ri(o,`${r} ${e}`),i=0}catch{a=!1,i++}}}}const pf=Ii(import.meta.url),mf=ta(Ei);async function hf(e){try{let{stdout:t}=await mf(`git`,[`-C`,e,`worktree`,`list`,`--porcelain`],j({timeout:2e3}));return t.split(`
-`).filter(e=>e.startsWith(`worktree `)).length}catch{return 0}}function gf(e){let t=H(e);for(;;){if($t(t))return t;let n=z(t);if(n===t)throw Error(`No OpenKnowledge project found at or above ${e}. Pass an explicit \`cwd\` argument that points inside an OK project (a directory with a \`${d}\`).`);t=n}}function _f(e){try{let t=new URL(e);return t.protocol===`file:`?Ii(t):void 0}catch{return}}async function vf(e){if(!e.getClientCapabilities()?.roots)return;let t;try{t=await e.listRoots()}catch(t){e.log?.(`listRoots fallback failed: ${t instanceof Error?t.message:String(t)}`);return}let n=t.roots??[];if(n.length!==1)return;let r=_f(n[0].uri);return r===void 0&&e.log?.(`single root URI not usable as fs path: ${n[0].uri}`),r}async function yf(e,t,n,r=gf){if(e!==void 0){let t=r(e);return{projectDir:t,viaRootGuess:!1,nextSticky:t}}if(t!==void 0){let e=r(t);return{projectDir:e,viaRootGuess:!1,nextSticky:e}}let i=await n();return i===void 0?{projectDir:void 0,viaRootGuess:!1,nextSticky:void 0}:{projectDir:r(i),viaRootGuess:!0,nextSticky:void 0}}async function bf(e){let t=ff(),n={write:e=>(t.write(e),process.stderr.write(e))},r=e.spawnTimeoutMs??Kd(process.env.OK_MCP_SPAWN_TIMEOUT_MS),i=e.envAutoStart??process.env.OK_MCP_AUTOSTART,a=Ci({startupCwd:e.startupCwd,startupConfig:e.startupConfig}),o=new Tt({name:ye,version:mn});Je(o);let s=ea(),c={current:{connectionId:s,displayName:s,colorSeed:s}},l=new Map,u=e=>{if(l.has(e))return;let t=Ot(e),r=c.current,i=iu({connectionId:s,pid:process.pid,displayName:r.displayName,clientName:r.clientInfo?.name??r.displayName,colorSeed:r.colorSeed,resolveWsUrl:async()=>of({lockDir:t,contentDir:e},``),log:t=>n.write(`[mcp] keepalive[${e}]: ${t}\n`)});l.set(e,i)},d=()=>vf({getClientCapabilities:()=>o.server.getClientCapabilities(),listRoots:()=>o.server.listRoots(),log:e=>n.write(`[mcp] ${e}\n`)}),f,p=!1,m=async e=>{if(p)return;p=!0;let t=await hf(e);if(t<=1){p=!1;return}let r=`Routed to ${e} from the MCP client's single advertised root, but this repo has ${t} git worktrees. If you are working in a worktree, pass its path as \`cwd\` on OK tool calls once — it sticks for the session, so reads, writes, and the preview all target that worktree instead of this checkout.`;try{n.write(`[mcp] ${r}\n`),await o.server.sendLoggingMessage({level:`warning`,data:r})}catch{}},h=async e=>{let t=await yf(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)throw Error("`cwd` is required for tool calls against the global MCP server. Pass an absolute path inside an OpenKnowledge project, or have the MCP client advertise a single root.");return t.viaRootGuess&&m(t.projectDir),t.projectDir},g=async e=>{let t=await yf(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)return;t.viaRootGuess&&m(t.projectDir);let n=t.projectDir,o=await a(n),s=await af({lockDir:Ot(n),contentDir:Pn(o,n),envAutoStart:i,...r===void 0?{}:{timeoutMs:r}});return u(n),s.replace(/\/mcp$/,``)};o.server.oninitialized=()=>{let e=o.server.getClientVersion(),t=zt(e?.name,s);c.current={connectionId:s,clientInfo:e?{name:t,version:e.version}:void 0,displayName:t,colorSeed:t}},On(o,{serverUrl:g,resolveCwd:h,config:a,identityRef:c,isHostedAgent:ge(process.env)}),Gn(o);let _=new cu,v=!1,y,b,x=async()=>{if(v)return;v=!0,y?.stop(),b?.stop();for(let e of l.values())try{e.close()}catch(e){n.write(`[mcp] keepalive close error: ${e instanceof Error?e.message:String(e)}\n`)}l.clear();let e=await Promise.allSettled([o.close(),_.close()]);for(let t of e)if(t.status===`rejected`){let e=t.reason;n.write(`[mcp] shutdown close error: ${e instanceof Error?e.message:String(e)}\n`)}};await o.connect(_),n.write(`[mcp] global stdio server ready (per-call project routing)
+`,n),i=-1;if(t!==-1&&r!==-1?i=t<r?t:r:t===-1?r!==-1&&(i=r):i=t===e.length-1?-1:t,i===-1)break;_(e,n,i),n=i+1,e.charCodeAt(n-1)===13&&e.charCodeAt(n)===10&&n++}return e.slice(n)}function _(e,t,n){if(t===n){y();return}let r=e.charCodeAt(t);if(Nd(e,t,r)){let r=e.charCodeAt(t+5)===32?t+6:t+5,i=e.slice(r,n);u=d===0?i:`${u}
+${i}`,d++;return}if(Pd(e,t,r)){f=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+3)===32?t+4:t+3,n);l=r.includes(`\0`)?void 0:r;return}if(r===58){if(i){let r=e.slice(t,n);i(r.slice(e.charCodeAt(t+1)===32?2:1))}return}let a=e.slice(t,n),o=a.indexOf(`:`);if(o===-1){v(a,``,a);return}let s=a.slice(0,o),c=a.charCodeAt(o+1)===32?2:1;v(s,a.slice(o+c),a)}function v(e,t,i){switch(e){case`event`:f=t||void 0;break;case`data`:u=d===0?t:`${u}
+${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.test(t)?r(parseInt(t,10)):n(new Ad(`Invalid \`retry\` value: "${t}"`,{type:`invalid-retry`,value:t,line:i}));break;default:n(new Ad(`Unknown field "${e.length>20?`${e.slice(0,20)}\u2026`:e}"`,{type:`unknown-field`,field:e,value:t,line:i}))}}function y(){d>0&&t({id:l,event:f,data:u}),l=void 0,u=``,d=0,f=void 0}function b(e={}){if(e.consume&&o.length>0){let e=o.join(``);_(e,0,e.length)}c=!0,l=void 0,u=``,d=0,f=void 0,o.length=0,s=0,p=!1}return{feed:m,reset:b}}function Nd(e,t,n){return n===100&&e.charCodeAt(t+1)===97&&e.charCodeAt(t+2)===116&&e.charCodeAt(t+3)===97&&e.charCodeAt(t+4)===58}function Pd(e,t,n){return n===101&&e.charCodeAt(t+1)===118&&e.charCodeAt(t+2)===101&&e.charCodeAt(t+3)===110&&e.charCodeAt(t+4)===116&&e.charCodeAt(t+5)===58}var Fd=class extends TransformStream{constructor({onError:e,onRetry:t,onComment:n,maxBufferSize:r}={}){let i;super({start(a){i=Md({onEvent:e=>{a.enqueue(e)},onError(t){typeof e==`function`&&e(t),(e===`terminate`||t.type===`max-buffer-size-exceeded`)&&a.error(t)},onRetry:t,onComment:n,maxBufferSize:r})},transform(e){i.feed(e)}})}};const Id={initialReconnectionDelay:1e3,maxReconnectionDelay:3e4,reconnectionDelayGrowFactor:1.5,maxRetries:2};var Ld=class extends Error{constructor(e,t){super(`Streamable HTTP error: ${t}`),this.code=e}},Rd=class{constructor(e,t){this._hasCompletedAuthFlow=!1,this._url=e,this._resourceMetadataUrl=void 0,this._scope=void 0,this._requestInit=t?.requestInit,this._authProvider=t?.authProvider,this._fetch=t?.fetch,this._fetchWithInit=gu(t?.fetch,t?.requestInit),this._sessionId=t?.sessionId,this._reconnectionOptions=t?.reconnectionOptions??Id}async _authThenStart(){if(!this._authProvider)throw new $u(`No auth provider`);let e;try{e=await ld(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})}catch(e){throw this.onerror?.(e),e}if(e!==`AUTHORIZED`)throw new $u;return await this._startOrAuthSse({resumptionToken:void 0})}async _commonHeaders(){let e={};if(this._authProvider){let t=await this._authProvider.tokens();t&&(e.Authorization=`Bearer ${t.access_token}`)}this._sessionId&&(e[`mcp-session-id`]=this._sessionId),this._protocolVersion&&(e[`mcp-protocol-version`]=this._protocolVersion);let t=hu(this._requestInit?.headers);return new Headers({...e,...t})}async _startOrAuthSse(e){let{resumptionToken:t}=e;try{let n=await this._commonHeaders();n.set(`Accept`,`text/event-stream`),t&&n.set(`last-event-id`,t);let r=await(this._fetch??fetch)(this._url,{method:`GET`,headers:n,signal:this._abortController?.signal});if(!r.ok){if(await r.body?.cancel(),r.status===401&&this._authProvider)return await this._authThenStart();if(r.status===405)return;throw new Ld(r.status,`Failed to open SSE stream: ${r.statusText}`)}this._handleSseStream(r.body,e,!0)}catch(e){throw this.onerror?.(e),e}}_getNextReconnectionDelay(e){if(this._serverRetryMs!==void 0)return this._serverRetryMs;let t=this._reconnectionOptions.initialReconnectionDelay,n=this._reconnectionOptions.reconnectionDelayGrowFactor,r=this._reconnectionOptions.maxReconnectionDelay;return Math.min(t*n**+e,r)}_scheduleReconnection(e,t=0){let n=this._reconnectionOptions.maxRetries;if(t>=n){this.onerror?.(Error(`Maximum reconnection attempts (${n}) exceeded.`));return}let r=this._getNextReconnectionDelay(t);this._reconnectionTimeout=setTimeout(()=>{this._startOrAuthSse(e).catch(n=>{this.onerror?.(Error(`Failed to reconnect SSE stream: ${n instanceof Error?n.message:String(n)}`)),this._scheduleReconnection(e,t+1)})},r)}_handleSseStream(e,t,n){if(!e)return;let{onresumptiontoken:r,replayMessageId:i}=t,a,o=!1,s=!1;(async()=>{try{let t=e.pipeThrough(new TextDecoderStream).pipeThrough(new Fd({onRetry:e=>{this._serverRetryMs=e}})).getReader();for(;;){let{value:e,done:n}=await t.read();if(n)break;if(e.id&&(a=e.id,o=!0,r?.(e.id)),e.data&&(!e.event||e.event===`message`))try{let t=Je.parse(JSON.parse(e.data));Ut(t)&&(s=!0,i!==void 0&&(t.id=i)),this.onmessage?.(t)}catch(e){this.onerror?.(e)}}(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted&&this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){if(this.onerror?.(Error(`SSE stream disconnected: ${e}`)),(n||o)&&!s&&this._abortController&&!this._abortController.signal.aborted)try{this._scheduleReconnection({resumptionToken:a,onresumptiontoken:r,replayMessageId:i},0)}catch(e){this.onerror?.(Error(`Failed to reconnect: ${e instanceof Error?e.message:String(e)}`))}}})()}async start(){if(this._abortController)throw Error(`StreamableHTTPClientTransport already started! If using Client class, note that connect() calls start() automatically.`);this._abortController=new AbortController}async finishAuth(e){if(!this._authProvider)throw new $u(`No auth provider`);if(await ld(this._authProvider,{serverUrl:this._url,authorizationCode:e,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new $u(`Failed to authorize`)}async close(){this._reconnectionTimeout&&=(clearTimeout(this._reconnectionTimeout),void 0),this._abortController?.abort(),this.onclose?.()}async send(e,t){try{let{resumptionToken:n,onresumptiontoken:r}=t||{};if(n){this._startOrAuthSse({resumptionToken:n,replayMessageId:Lt(e)?e.id:void 0}).catch(e=>this.onerror?.(e));return}let i=await this._commonHeaders();i.set(`content-type`,`application/json`),i.set(`accept`,`application/json, text/event-stream`);let a={...this._requestInit,method:`POST`,headers:i,body:JSON.stringify(e),signal:this._abortController?.signal},o=await(this._fetch??fetch)(this._url,a),s=o.headers.get(`mcp-session-id`);if(s&&(this._sessionId=s),!o.ok){let t=await o.text().catch(()=>null);if(o.status===401&&this._authProvider){if(this._hasCompletedAuthFlow)throw new Ld(401,`Server returned 401 after successful authentication`);let{resourceMetadataUrl:t,scope:n}=pd(o);if(this._resourceMetadataUrl=t,this._scope=n,await ld(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetchWithInit})!==`AUTHORIZED`)throw new $u;return this._hasCompletedAuthFlow=!0,this.send(e)}if(o.status===403&&this._authProvider){let{resourceMetadataUrl:t,scope:n,error:r}=pd(o);if(r===`insufficient_scope`){let r=o.headers.get(`WWW-Authenticate`);if(this._lastUpscopingHeader===r)throw new Ld(403,`Server returned 403 after trying upscoping`);if(n&&(this._scope=n),t&&(this._resourceMetadataUrl=t),this._lastUpscopingHeader=r??void 0,await ld(this._authProvider,{serverUrl:this._url,resourceMetadataUrl:this._resourceMetadataUrl,scope:this._scope,fetchFn:this._fetch})!==`AUTHORIZED`)throw new $u;return this.send(e)}}throw new Ld(o.status,`Error POSTing to endpoint: ${t}`)}if(this._hasCompletedAuthFlow=!1,this._lastUpscopingHeader=void 0,o.status===202){await o.body?.cancel(),ct(e)&&this._startOrAuthSse({resumptionToken:void 0}).catch(e=>this.onerror?.(e));return}let c=(Array.isArray(e)?e:[e]).filter(e=>`method`in e&&`id`in e&&e.id!==void 0).length>0,l=o.headers.get(`content-type`);if(c){if(l?.includes(`text/event-stream`))this._handleSseStream(o.body,{onresumptiontoken:r},!1);else if(l?.includes(`application/json`)){let e=await o.json(),t=Array.isArray(e)?e.map(e=>Je.parse(e)):[Je.parse(e)];for(let e of t)this.onmessage?.(e)}else throw await o.body?.cancel(),new Ld(-1,`Unexpected content type: ${l}`)}else await o.body?.cancel()}catch(e){throw this.onerror?.(e),e}}get sessionId(){return this._sessionId}async terminateSession(){if(this._sessionId)try{let e=await this._commonHeaders(),t={...this._requestInit,method:`DELETE`,headers:e,signal:this._abortController?.signal},n=await(this._fetch??fetch)(this._url,t);if(await n.body?.cancel(),!n.ok&&n.status!==405)throw new Ld(n.status,`Failed to terminate session: ${n.statusText}`);this._sessionId=void 0}catch(e){throw this.onerror?.(e),e}}setProtocolVersion(e){this._protocolVersion=e}get protocolVersion(){return this._protocolVersion}async resumeStream(e,t){await this._startOrAuthSse({resumptionToken:e,onresumptiontoken:t?.onresumptiontoken})}};function zd(e){return`${e} Server.app`}function Bd(e){return`${e} Helper`}zd(w),Bd(w);function Vd(e){let t=Ni.basename(e);return Ni.join(Ni.dirname(e),`..`,`Frameworks`,zd(t),`Contents`,`MacOS`,Bd(t))}const Hd=/\/[^/]+\.app\/Contents\/MacOS\/[^/]+$/;function Ud(e){if(e.platform!==`darwin`||!Hd.test(e.execPath))return null;let t=Vd(e.execPath);return e.exists(t)?t:null}function Wd(e={}){let t=e.execPath??process.execPath,n=e.platform??process.platform,r=e.argv??process.argv,i=e.exists??U,a=r[1];return a?{command:Ud({execPath:t,platform:n,exists:i})??t,prefixArgs:[a]}:(console.warn(`[self-spawn] process.argv[1] is empty — falling back to \`npx -y @inkeep/open-knowledge@latest\`. This re-introduces the registry-fetch surface that re-exec was fixing. Observed argv: ${JSON.stringify(r)}`),{command:`npx`,prefixArgs:[`-y`,`@inkeep/open-knowledge@latest`]})}const Gd="Run `ok start` in the target project, then retry this tool. Do not fall back to native file edits for OpenKnowledge content.";function Kd(e){return(t,n)=>{if((n?.method??`GET`).toUpperCase()===`GET`)return globalThis.fetch(t,n);let r=new AbortController,i=setTimeout(()=>r.abort(Error(`MCP request timed out after ${e}ms`)),e),a=n?.signal instanceof AbortSignal?AbortSignal.any([n.signal,r.signal]):r.signal;return globalThis.fetch(t,{...n,signal:a}).finally(()=>clearTimeout(i))}}function qd(e){if(e===void 0||e===``)return;let t=Number.parseInt(e,10);if(!(Number.isNaN(t)||t<=0))return t}function Jd(e){return e===`0.0.0.0`||e===`::`?`localhost`:e.includes(`:`)&&!e.startsWith(`[`)?`[${e}]`:e}function Yd(e,t){return`http://${Jd(e)}:${t}/mcp`}function Xd(e){return`${e}/mcp`}function Zd(e){return e.replace(/^http/,`ws`)}function Qd(e){let t=new URL(e);return t.protocol=t.protocol===`https:`?`wss:`:`ws:`,t.pathname=``,t.search=``,t.hash=``,t.toString().replace(/\/$/,``)}function $d(e,t){if(e&&e.draining!==!0&&t(e.pid))return Ot(e,{fallbackHost:`127.0.0.1`})??void 0}function ef(e){if(!U(e))return``;let t=Pe(W(e,`utf-8`)).trim();return t.length>8192?`…${t.slice(-8192)}`:t}function tf(e,t){return`server did not start within ${e}ms${t?` stderr:\n${t}`:``}\n${Gd}`}function nf(e){if(e&&typeof e==`object`&&`method`in e&&`id`in e)return e.id}function rf(e){if(!e||typeof e!=`object`||!(`result`in e))return;let t=e.result;if(!t||typeof t!=`object`||!(`protocolVersion`in t))return;let n=t.protocolVersion;return typeof n==`string`?n:void 0}function af(e,t){return{jsonrpc:`2.0`,id:e,error:{code:-32e3,message:t instanceof Error?t.message:String(t)}}}async function of(e){let t=e.readLock??(()=>wt(e.lockDir)),n=e.isAlive??Zt,r=e.sleep??(e=>ra(e)),i=e.spawn??ki,a=e.readErrorLog??ef,o=e.openErrorLog??(e=>On(e,process.pid)),s=e.closeFd??zi,c=e.timeoutMs??5e3,l=e.pollIntervalMs??100;if(e.portOverride!==void 0){let t=Number.parseInt(e.portOverride,10);if(Number.isNaN(t)||t<=0)throw Error(`invalid --port value '${e.portOverride}' — HTTP MCP shim requires a positive port`);return Yd(ke,t)}let u=t(),d=$d(u,n);if(d!==void 0)return Xd(d);if(e.envAutoStart===`0`)throw new Qt(`OpenKnowledge server is not running and OK_MCP_AUTOSTART=0 disables auto-start. ${Gd}`);if(u!==null&&u.draining===!0&&n(u.pid)){let e=Date.now(),i=e+c,a=!0;for(;Date.now()<i;){let e=t();if(e===null||e.draining!==!0||!n(e.pid)){a=!1;break}await r(l)}console.error(`[mcp-shim] waited ${Date.now()-e}ms for a draining predecessor server${a?` (timed out — proceeding anyway)`:``}`);let o=$d(t(),n);if(o!==void 0)return Xd(o)}U(e.lockDir)||Hi(e.lockDir,{recursive:!0});let f=B(e.lockDir,ie),p=o(f),m,h,g=Wd();try{try{m=i(g.command,[...g.prefixArgs,`start`],{detached:!0,stdio:[`ignore`,`ignore`,p],windowsHide:!0,cwd:e.contentDir,env:{...process.env,OK_LOCK_KIND:`mcp-spawned`,ELECTRON_RUN_AS_NODE:`1`}}),m.on(`error`,e=>{h=e instanceof Error?e.message:String(e)}),m.unref()}catch(e){h=e instanceof Error?e.message:String(e)}}finally{try{s(p)}catch{}}let _=Date.now()+c;for(;Date.now()<_;){if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}\n${Gd}`)}await r(l);let e=$d(t(),n);if(e!==void 0)return Xd(e)}if(h){let e=a(f),t=e?` stderr:\n${e}`:``;throw Error(`spawn failed: ${h}${t}\n${Gd}`)}throw Error(tf(c,a(f)))}function sf(e,t){if(e.portOverride!==void 0)return Qd(t);let n=e.readLock??(()=>wt(e.lockDir)),r=e.isAlive??Zt,i=$d(n(),r);if(i!==void 0)return Zd(i)}async function cf(e,t={}){let n=t.stderr??process.stderr,r=t.requestTimeoutMs??12e4,i=t.createStdioTransport?t.createStdioTransport(t.stdin,t.stdout):new lu(t.stdin,t.stdout),a=t.createHttpTransport?t.createHttpTransport(new URL(e)):new Rd(new URL(e),{fetch:Kd(r),requestInit:{headers:{...qe({kind:`mcp`,runtimeVersion:hn}),...t.connectionId===void 0?{}:{[Gt]:t.connectionId}}}}),o=!1,s=async()=>{o||(o=!0,t.onclose?.(),await Promise.allSettled([i.close(),a.close()]))};i.onerror=e=>{n.write(`[mcp-shim] stdio error: ${e.message}\n`)},a.onerror=e=>{n.write(`[mcp-shim] HTTP transport error: ${e.message}\n`)},i.onclose=()=>{s()},a.onclose=()=>{s()};let c=Promise.resolve();i.onmessage=e=>{c=c.then(async()=>{try{await a.send(e)}catch(t){let r=nf(e);if(r===void 0){n.write(`[mcp-shim] failed to forward stdio notification: ${t instanceof Error?t.message:String(t)}\n`);return}await i.send(af(r,t)).catch(e=>{n.write(`[mcp-shim] failed to write stdio error response: ${e instanceof Error?e.message:String(e)}\n`)})}}).catch(e=>{n.write(`[mcp-shim] unexpected stdio forwarding failure: ${e instanceof Error?e.message:String(e)}\n`)})},a.onmessage=e=>{let t=rf(e);t&&a.setProtocolVersion?.(t),i.send(e).catch(e=>{n.write(`[mcp-shim] failed to write stdio response: ${e instanceof Error?e.message:String(e)}\n`)})};try{await a.start(),await i.start()}catch(e){throw await s(),e}return{close:s}}async function lf(e){let t=e.stderr??process.stderr,n=e.bridgeFn??cf,r=await of(e),i=e.createConnectionId?.()??ta(),a=!1,o=(e.startKeepalive??au)({connectionId:i,pid:process.pid,resolveWsUrl:async()=>sf(e,r),log:e=>t.write(`[mcp-shim] keepalive: ${e}\n`)});t.write(`[mcp-shim] proxying stdio to ${r}\n`);let s;try{s=await n(r,{stderr:t,connectionId:i,onclose:()=>{a||(o.close(),process.exit(0))}})}catch(e){throw o.close(),e}let c=()=>{a=!0,o.close(),s.close().finally(()=>{process.exit(0)})};process.once(`SIGINT`,c),process.once(`SIGTERM`,c)}const uf=/^mcp\.\d{4}-\d{2}-\d{2}\.log$/;function df(){return B(bn(),`logs`)}function ff(e,t=()=>new Date){try{let n=t().getTime(),r=Wi(e).filter(e=>uf.test(e)).flatMap(t=>{try{let n=G(B(e,t));return[{name:t,mtime:n.mtimeMs,size:n.size}]}catch{return[]}}),i=[];for(let t of r)if(n-t.mtime>6048e5)try{Ji(B(e,t.name))}catch{}else i.push(t);i.sort((e,t)=>e.mtime-t.mtime);let a=i.reduce((e,t)=>e+t.size,0);for(let t of i){if(a<=47185920)break;try{Ji(B(e,t.name)),a-=t.size}catch{}}}catch{}}function pf(e={}){let t=e.logsDir??df(),n=e.now??(()=>new Date),r=e.pruneDelayMs??5e3;r<=0?ff(t,n):setTimeout(()=>ff(t,n),r).unref?.();let i=0,a=!1;return{write(e){if(!(i>=5))try{a||=(Hi(t,{recursive:!0}),!0);let r=n().toISOString(),o=B(t,`mcp.${r.slice(0,10)}.log`);Ri(o,`${r} ${e}`),i=0}catch{a=!1,i++}}}}const mf=Ii(import.meta.url),hf=na(Ei);async function gf(e){try{let{stdout:t}=await hf(`git`,[`-C`,e,`worktree`,`list`,`--porcelain`],A({timeout:2e3}));return t.split(`
+`).filter(e=>e.startsWith(`worktree `)).length}catch{return 0}}function _f(e){let t=H(e);for(;;){if(pn(t))return t;let n=z(t);if(n===t)throw Error(`No OpenKnowledge project found at or above ${e}. Pass an explicit \`cwd\` argument that points inside an OK project (a directory with a \`${m}\`).`);t=n}}function vf(e){try{let t=new URL(e);return t.protocol===`file:`?Ii(t):void 0}catch{return}}async function yf(e){if(!e.getClientCapabilities()?.roots)return;let t;try{t=await e.listRoots()}catch(t){e.log?.(`listRoots fallback failed: ${t instanceof Error?t.message:String(t)}`);return}let n=t.roots??[];if(n.length!==1)return;let r=vf(n[0].uri);return r===void 0&&e.log?.(`single root URI not usable as fs path: ${n[0].uri}`),r}async function bf(e,t,n,r=_f){if(e!==void 0){let t=r(e);return{projectDir:t,viaRootGuess:!1,nextSticky:t}}if(t!==void 0){let e=r(t);return{projectDir:e,viaRootGuess:!1,nextSticky:e}}let i=await n();return i===void 0?{projectDir:void 0,viaRootGuess:!1,nextSticky:void 0}:{projectDir:r(i),viaRootGuess:!0,nextSticky:void 0}}async function xf(e){let t=pf(),n={write:e=>(t.write(e),process.stderr.write(e))},r=e.spawnTimeoutMs??qd(process.env.OK_MCP_SPAWN_TIMEOUT_MS),i=e.envAutoStart??process.env.OK_MCP_AUTOSTART,a=Ci({startupCwd:e.startupCwd,startupConfig:e.startupConfig}),o=new Gn({name:Ne,version:hn});zt(o);let s=ta(),c={current:{connectionId:s,displayName:s,colorSeed:s}},l=new Map,u=e=>{if(l.has(e))return;let t=Qe(e),r=c.current,i=au({connectionId:s,pid:process.pid,displayName:r.displayName,clientName:r.clientInfo?.name??r.displayName,colorSeed:r.colorSeed,resolveWsUrl:async()=>sf({lockDir:t,contentDir:e},``),log:t=>n.write(`[mcp] keepalive[${e}]: ${t}\n`)});l.set(e,i)},d=()=>yf({getClientCapabilities:()=>o.server.getClientCapabilities(),listRoots:()=>o.server.listRoots(),log:e=>n.write(`[mcp] ${e}\n`)}),f,p=!1,m=async e=>{if(p)return;p=!0;let t=await gf(e);if(t<=1){p=!1;return}let r=`Routed to ${e} from the MCP client's single advertised root, but this repo has ${t} git worktrees. If you are working in a worktree, pass its path as \`cwd\` on OK tool calls once — it sticks for the session, so reads, writes, and the preview all target that worktree instead of this checkout.`;try{n.write(`[mcp] ${r}\n`),await o.server.sendLoggingMessage({level:`warning`,data:r})}catch{}},h=async e=>{let t=await bf(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)throw Error("`cwd` is required for tool calls against the global MCP server. Pass an absolute path inside an OpenKnowledge project, or have the MCP client advertise a single root.");return t.viaRootGuess&&m(t.projectDir),t.projectDir},g=async e=>{let t=await bf(e,f,d);if(f=t.nextSticky??f,t.projectDir===void 0)return;t.viaRootGuess&&m(t.projectDir);let n=t.projectDir,o=await a(n),s=await of({lockDir:Qe(n),contentDir:Bn(o,n),envAutoStart:i,...r===void 0?{}:{timeoutMs:r}});return u(n),s.replace(/\/mcp$/,``)};o.server.oninitialized=()=>{let e=o.server.getClientVersion(),t=at(e?.name,s);c.current={connectionId:s,clientInfo:e?{name:t,version:e.version}:void 0,displayName:t,colorSeed:t}},Xt(o,{serverUrl:g,resolveCwd:h,config:a,identityRef:c,isHostedAgent:xe(process.env)}),Ye(o);let _=new lu,v=!1,y,b,x=async()=>{if(v)return;v=!0,y?.stop(),b?.stop();for(let e of l.values())try{e.close()}catch(e){n.write(`[mcp] keepalive close error: ${e instanceof Error?e.message:String(e)}\n`)}l.clear();let e=await Promise.allSettled([o.close(),_.close()]);for(let t of e)if(t.status===`rejected`){let e=t.reason;n.write(`[mcp] shutdown close error: ${e instanceof Error?e.message:String(e)}\n`)}};await o.connect(_),n.write(`[mcp] global stdio server ready (per-call project routing)
 `);let S=!1,C=()=>{S||(S=!0,setTimeout(()=>{n.write(`[mcp] shutdown deadline (5s) reached — forcing exit(1)
 `),process.exit(1)},5e3).unref(),x().finally(()=>{process.exit(0)}))};if(process.once(`SIGINT`,C),process.once(`SIGTERM`,C),process.stdin.on(`end`,()=>{n.write(`[mcp] stdin end — host disconnected, shutting down
-`),C()}),process.stdin.on(`error`,e=>{n.write(`[mcp] stdin error (${e instanceof Error?e.message:String(e)}) — host disconnected, shutting down\n`),C()}),b=fu({getPpid:()=>process.ppid,onHostGone:e=>{n.write(`[mcp] ${e} — shutting down\n`),C()}}),pu({log:e=>n.write(`${e}\n`),transport:_,process,stdin:process.stdin}),process.platform===`darwin`){let e=du(pf,{realpathSync:Wi,statInoSync:e=>K(e).ino,log:e=>n.write(`${e}\n`)});if(e!==void 0){n.write(`[mcp] bundle identity anchor=${e.resolvedPath} inode=${e.inode} version=${mn}\n`);let{resolvedPath:t,inode:r}=e;y=uu({detect:()=>lu({bundleAnchorPath:pf,currentInode:r,platform:process.platform,realpath:Wi,statInode:e=>K(e).ino}),onReplaced:e=>{n.write(`[mcp] bundle replaced anchor=${t} bootInode=${e.currentInode} onDiskInode=${e.onDiskInode} version=${mn} — exiting for host respawn\n`),C()},log:e=>n.write(`[mcp] ${e}\n`)})}}return{close:x}}function xf(e){return new M(`mcp`).description(`Start MCP stdio server for project knowledge base`).option(`-p, --port <port>`,`Override per-call routing and proxy stdio to this HTTP MCP port (skips bundle proxy)`,void 0).option(`--no-bundle-proxy`,`Run the npm-fetched MCP server in-process instead of proxying to the Desktop app bundle (macOS-only proxy; no-op elsewhere; equivalent: OK_BUNDLE_PROXY=0)`).action(async t=>{try{let n=e(),r=process.cwd();if(t.port!==void 0){let e=Kd(process.env.OK_MCP_SPAWN_TIMEOUT_MS);await cf({lockDir:``,contentDir:``,portOverride:t.port,envAutoStart:process.env.OK_MCP_AUTOSTART,timeoutMs:e});return}let i=t.bundleProxy===!1?[...process.argv,`--no-bundle-proxy`]:process.argv,a=tu(process.env,i,process.platform);if(a.proxy){let e=eu(process.platform,Yi(),{existsSync:U});if(e===null)nu({stderr:process.stderr,mode:`fallback-absent`,bundlePath:null,reason:`no installed OpenKnowledge.app bundle found`});else try{await ru({bundlePath:e,argv:process.argv.slice(2),env:process.env,stderr:process.stderr});return}catch(t){nu({stderr:process.stderr,mode:`fallback-exec-failed`,bundlePath:e,reason:t instanceof Error?t.message:String(t)})}}else{let e=a.suppressedBy===`env`?`suppressed-env`:a.suppressedBy===`flag`?`suppressed-flag`:a.suppressedBy===`self`?`suppressed-self`:`suppressed-platform`;nu({stderr:process.stderr,mode:e,bundlePath:null,reason:null})}await bf({startupCwd:r,startupConfig:n})}catch(e){process.stderr.write(`MCP server failed to start: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1}})}const Sf=/<aside>\s*([\s\S]*?)\s*<\/aside>/g,Cf=/^(?:\p{Extended_Pictographic}️?\s*)+/u;function wf(e){return e.replace(Sf,(e,t)=>{let n=t.replace(/\r\n/g,`
+`),C()}),process.stdin.on(`error`,e=>{n.write(`[mcp] stdin error (${e instanceof Error?e.message:String(e)}) — host disconnected, shutting down\n`),C()}),b=pu({getPpid:()=>process.ppid,onHostGone:e=>{n.write(`[mcp] ${e} — shutting down\n`),C()}}),mu({log:e=>n.write(`${e}\n`),transport:_,process,stdin:process.stdin}),process.platform===`darwin`){let e=fu(mf,{realpathSync:Gi,statInoSync:e=>G(e).ino,log:e=>n.write(`${e}\n`)});if(e!==void 0){n.write(`[mcp] bundle identity anchor=${e.resolvedPath} inode=${e.inode} version=${hn}\n`);let{resolvedPath:t,inode:r}=e;y=du({detect:()=>uu({bundleAnchorPath:mf,currentInode:r,platform:process.platform,realpath:Gi,statInode:e=>G(e).ino}),onReplaced:e=>{n.write(`[mcp] bundle replaced anchor=${t} bootInode=${e.currentInode} onDiskInode=${e.onDiskInode} version=${hn} — exiting for host respawn\n`),C()},log:e=>n.write(`[mcp] ${e}\n`)})}}return{close:x}}function Sf(e){return new M(`mcp`).description(`Start MCP stdio server for project knowledge base`).option(`-p, --port <port>`,`Override per-call routing and proxy stdio to this HTTP MCP port (skips bundle proxy)`,void 0).option(`--no-bundle-proxy`,`Run the npm-fetched MCP server in-process instead of proxying to the Desktop app bundle (macOS-only proxy; no-op elsewhere; equivalent: OK_BUNDLE_PROXY=0)`).action(async t=>{try{let n=e(),r=process.cwd();if(t.port!==void 0){let e=qd(process.env.OK_MCP_SPAWN_TIMEOUT_MS);await lf({lockDir:``,contentDir:``,portOverride:t.port,envAutoStart:process.env.OK_MCP_AUTOSTART,timeoutMs:e});return}let i=t.bundleProxy===!1?[...process.argv,`--no-bundle-proxy`]:process.argv,a=nu(process.env,i,process.platform);if(a.proxy){let e=tu(process.platform,Xi(),{existsSync:U});if(e===null)ru({stderr:process.stderr,mode:`fallback-absent`,bundlePath:null,reason:`no installed OpenKnowledge.app bundle found`});else try{await iu({bundlePath:e,argv:process.argv.slice(2),env:process.env,stderr:process.stderr});return}catch(t){ru({stderr:process.stderr,mode:`fallback-exec-failed`,bundlePath:e,reason:t instanceof Error?t.message:String(t)})}}else{let e=a.suppressedBy===`env`?`suppressed-env`:a.suppressedBy===`flag`?`suppressed-flag`:a.suppressedBy===`self`?`suppressed-self`:`suppressed-platform`;ru({stderr:process.stderr,mode:e,bundlePath:null,reason:null})}await xf({startupCwd:r,startupConfig:n})}catch(e){process.stderr.write(`MCP server failed to start: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1}})}const Cf=/<aside>\s*([\s\S]*?)\s*<\/aside>/g,wf=/^(?:\p{Extended_Pictographic}️?\s*)+/u;function Tf(e){return e.replace(Cf,(e,t)=>{let n=t.replace(/\r\n/g,`
 `).split(`
-`);for(;n.length>0&&n[0].trim()===``;)n.shift();for(;n.length>0&&n[n.length-1].trim()===``;)n.pop();if(n.length>0)for(n[0]=n[0].replace(Cf,``);n.length>0&&n[0].trim()===``;)n.shift();let r=n.map(e=>e.trim()===``?`>`:`> ${e}`).join(`
-`);return r?`> [!note]\n${r}`:`> [!note]`})}const Tf=/(!?)\[([^\]]*)\]\(data:image\/([a-z0-9.+-]+);base64,([A-Za-z0-9+/=\s]+?)\)/gi,Ef={png:`png`,jpeg:`jpg`,jpg:`jpg`,gif:`gif`,webp:`webp`,"svg+xml":`svg`};function Df(e){return e.replace(/\.(md|mdx)$/i,``).replace(/[^A-Za-z0-9]+/g,`-`).replace(/^-+|-+$/g,``).toLowerCase()||`inline`}function Of(e,t,n={}){let r=[],i=Df(t),a=0;return{markdown:e.replace(Tf,(e,t,o,s,c)=>{if(n.strip)return``;a+=1;let l=Ef[s.toLowerCase()]??s.toLowerCase().replace(/[^a-z0-9]/g,``),u=`${i}-inline-${a}.${l}`,d=new Uint8Array(Buffer.from(c.replace(/\s+/g,``),`base64`));return r.push({filename:u,bytes:d}),`![${o}](${u})`}),assets:r}}function kf(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n=[],r=``,i=[],a=!1,o=!1,s=()=>{i.push(r),r=``},c=()=>{s(),n.push(i),i=[],o=!1};for(let e=0;e<t.length;e++){let n=t[e];if(a){n===`"`?t[e+1]===`"`?(r+=`"`,e++):a=!1:r+=n,o=!0;continue}n===`"`?(a=!0,o=!0):n===`,`?(s(),o=!0):n===`
+`);for(;n.length>0&&n[0].trim()===``;)n.shift();for(;n.length>0&&n[n.length-1].trim()===``;)n.pop();if(n.length>0)for(n[0]=n[0].replace(wf,``);n.length>0&&n[0].trim()===``;)n.shift();let r=n.map(e=>e.trim()===``?`>`:`> ${e}`).join(`
+`);return r?`> [!note]\n${r}`:`> [!note]`})}const Ef=/(!?)\[([^\]]*)\]\(data:image\/([a-z0-9.+-]+);base64,([A-Za-z0-9+/=\s]+?)\)/gi,Df={png:`png`,jpeg:`jpg`,jpg:`jpg`,gif:`gif`,webp:`webp`,"svg+xml":`svg`};function Of(e){return e.replace(/\.(md|mdx)$/i,``).replace(/[^A-Za-z0-9]+/g,`-`).replace(/^-+|-+$/g,``).toLowerCase()||`inline`}function kf(e,t,n={}){let r=[],i=Of(t),a=0;return{markdown:e.replace(Ef,(e,t,o,s,c)=>{if(n.strip)return``;a+=1;let l=Df[s.toLowerCase()]??s.toLowerCase().replace(/[^a-z0-9]/g,``),u=`${i}-inline-${a}.${l}`,d=new Uint8Array(Buffer.from(c.replace(/\s+/g,``),`base64`));return r.push({filename:u,bytes:d}),`![${o}](${u})`}),assets:r}}function Af(e){let t=e.charCodeAt(0)===65279?e.slice(1):e,n=[],r=``,i=[],a=!1,o=!1,s=()=>{i.push(r),r=``},c=()=>{s(),n.push(i),i=[],o=!1};for(let e=0;e<t.length;e++){let n=t[e];if(a){n===`"`?t[e+1]===`"`?(r+=`"`,e++):a=!1:r+=n,o=!0;continue}n===`"`?(a=!0,o=!0):n===`,`?(s(),o=!0):n===`
 `?c():n===`\r`?(t[e+1]===`
-`&&e++,c()):(r+=n,o=!0)}return(o||r!==``)&&c(),{header:n.length>0?n[0]:[],rows:n.slice(1)}}const Af=/[*"/\\<>:|?()]/g,jf=/\.(md|mdx)$/i,Mf=/\s+[0-9a-f]{32}$/i;function Nf(e){let t=e.split(/[\\/]/).pop()??e;try{t=decodeURIComponent(t)}catch{}return t=t.replace(jf,``),t=t.replace(Mf,``),t=t.replace(Af,``),t=t.replace(/\s+/g,` `).trim().toLowerCase(),t}function Pf(e){let t=new Map;for(let n of e){let e=Nf(n);if(!e)continue;let r=t.get(e);r?r.push(n):t.set(e,[n])}return t}function Ff(e,t){let n=Nf(t),r=n?e.get(n):void 0;return!r||r.length===0?{path:null,ambiguous:!1}:r.length>1?{path:null,ambiguous:!0}:{path:r[0],ambiguous:!1}}const If=/\s+[0-9a-f]{32}$/i,Lf=/\.mdx?$/i;function Rf(e,t={}){let n=new Set(e),r=[];for(let i of e){if(!i.endsWith(`_all.csv`))continue;let a=i.slice(0,-8),o=n.has(`${a}.md`)?`${a}.md`:n.has(`${a}.mdx`)?`${a}.mdx`:null,s=a.replace(If,``),c=``;try{c=G(i,`utf8`)}catch{t.onUnreadable?.(i)}let l=kf(c).header,u=new Set(l.map(e=>e.trim()).filter(e=>e.length>0)),d=e.filter(e=>e!==o&&Lf.test(e)&&e.startsWith(`${s}${Pi}`));r.push({csvPath:i,stubPath:o,stubTargetPath:`${a}.md`,folderPath:s,propertyKeys:u,csvText:c,rowFiles:d,folderIndex:Pf(d),fallbackTitle:ji(s)})}return r}const zf=/^[a-z][a-z0-9+.-]*:/i,Bf=/^\s*(`{3,}|~{3,})/,Vf=/_all\.csv(?=$|[#?])/i;function Hf(e){let t=Math.min(...[e.indexOf(`#`),e.indexOf(`?`)].filter(e=>e>=0).concat(e.length)),n=e.slice(0,t),r=e.slice(t);try{return decodeURIComponent(n)+r}catch{return e}}function Uf(e,t){if(e.startsWith(`<`)&&e.endsWith(`>`)){let n=e.slice(1,-1);if(zf.test(n)||n.startsWith(`//`)||n.startsWith(`#`))return e;let r=Hf(n);return t&&(r=r.replace(Vf,`.md`)),`<${r}>`}if(zf.test(e)||e.startsWith(`//`)||e.startsWith(`#`))return e;let n=Hf(e);return t&&(n=n.replace(Vf,`.md`)),/\s/.test(n)?`<${n}>`:n}function Wf(e,t){let n=``,r=0;for(;r<e.length;){let i=e.indexOf(`](`,r);if(i===-1){n+=e.slice(r);break}n+=e.slice(r,i+2);let a=i+2;if(e[a]===`<`){let i=e.indexOf(`>`,a);if(i===-1||e[i+1]!==`)`){r=a;continue}n+=`${Uf(e.slice(a,i+1),t)})`,r=i+2;continue}let o=1,s=a;for(;s<e.length;s++){let t=e[s];if(t===`(`)o++;else if(t===`)`&&(o--,o===0))break}if(s>=e.length){n+=e.slice(a);break}n+=`${Uf(e.slice(a,s),t)})`,r=s+1}return n}function Gf(e,t){let n=``,r=0;for(;r<e.length;){if(e[r]==="`"){let t=0;for(;e[r+t]==="`";)t++;let i=e.slice(r,r+t),a=e.indexOf(i,r+t);if(a>=0){n+=e.slice(r,a+t),r=a+t;continue}n+=e.slice(r);break}let i=e.indexOf("`",r),a=i===-1?e.length:i;n+=Wf(e.slice(r,a),t),r=a}return n}function Kf(e,t={}){let n=t.redirectCsv??!1,r=e.split(`
-`),i=null;for(let e=0;e<r.length;e++){let t=r[e],a=t.match(Bf);if(a){let e=a[1][0];i===null?i=e:e===i&&(i=null);continue}i===null&&(r[e]=Gf(t,n))}return r.join(`
-`)}function qf(e){let t=[],n=[e];for(;n.length>0;){let e=n.pop(),r;try{r=Ui(e)}catch{continue}for(let i of r){if(i.startsWith(`.`))continue;let r=B(e,i),a=!1,o=!1;try{let e=Vi(r);e.isSymbolicLink()?o=K(r).isFile():(a=e.isDirectory(),o=e.isFile())}catch{continue}a?n.push(r):o&&t.push(r)}}return t}const Jf=/ [0-9a-f]{32}\.mdx?$/i,Yf=/data:image\/[a-z0-9.+-]+;base64,/i;function Xf(e){let t=qf(e);for(let e of t)if(e.endsWith(`_all.csv`)||Jf.test(e))return!0;for(let e of t)if(/\.mdx?$/i.test(e))try{if(Yf.test(G(e,`utf8`)))return!0}catch{}return!1}const Zf=/^[A-Za-z0-9][A-Za-z0-9 ._/-]*$/,Qf=/^(true|false|null|~)$/i,$f=/^[-+]?(\.\d+|\d+(\.\d*)?([eE][-+]?\d+)?|0x[0-9a-fA-F]+|0o[0-7]+|\.inf|\.nan)$/i;function ep(e){return`"${e.replace(/\\/g,`\\\\`).replace(/"/g,`\\"`)}"`}function tp(e){return e===``?`""`:Qf.test(e)||$f.test(e)?ep(e):Zf.test(e)?e:ep(e)}function np(e,t){let n=Zf.test(e)?e:ep(e);return t.trimEnd()===``?`${n}:`:`${n}: ${tp(t.trimEnd())}`}function rp(e,t){if(t.size===0||/^---\r?\n/.test(e))return e;let n=e.split(`
-`),r=-1;for(let t=0;t<n.length;t++){if(/^#\s+/.test(n[t])){r=t;break}if(n[t].trim()!==``)return e}if(r===-1)return e;let i=r+1;for(;i<n.length&&n[i].trim()===``;)i++;let a=[];for(;i<n.length;){let e=n[i].match(/^([^:]+):\s?(.*)$/);if(!e)break;let r=e[1].trim();if(!t.has(r))break;a.push([r,e[2]]),i++}if(a.length===0)return e;let o=n.slice(i);for(;o.length>0&&o[0].trim()===``;)o.shift();let s=[`---`,...a.map(([e,t])=>np(e,t)),`---`,``,n[r]];o.length>0&&s.push(``,...o);let c=s.join(`
+`&&e++,c()):(r+=n,o=!0)}return(o||r!==``)&&c(),{header:n.length>0?n[0]:[],rows:n.slice(1)}}const jf=/[*"/\\<>:|?()]/g,Mf=/\.(md|mdx)$/i,Nf=/\s+[0-9a-f]{32}$/i;function Pf(e){let t=e.split(/[\\/]/).pop()??e;try{t=decodeURIComponent(t)}catch{}return t=t.replace(Mf,``),t=t.replace(Nf,``),t=t.replace(jf,``),t=t.replace(/\s+/g,` `).trim().toLowerCase(),t}function Ff(e){let t=new Map;for(let n of e){let e=Pf(n);if(!e)continue;let r=t.get(e);r?r.push(n):t.set(e,[n])}return t}function If(e,t){let n=Pf(t),r=n?e.get(n):void 0;return!r||r.length===0?{path:null,ambiguous:!1}:r.length>1?{path:null,ambiguous:!0}:{path:r[0],ambiguous:!1}}const Lf=/\s+[0-9a-f]{32}$/i,Rf=/\.mdx?$/i;function zf(e,t={}){let n=new Set(e),r=[];for(let i of e){if(!i.endsWith(`_all.csv`))continue;let a=i.slice(0,-8),o=n.has(`${a}.md`)?`${a}.md`:n.has(`${a}.mdx`)?`${a}.mdx`:null,s=a.replace(Lf,``),c=``;try{c=W(i,`utf8`)}catch{t.onUnreadable?.(i)}let l=Af(c).header,u=new Set(l.map(e=>e.trim()).filter(e=>e.length>0)),d=e.filter(e=>e!==o&&Rf.test(e)&&e.startsWith(`${s}${Pi}`));r.push({csvPath:i,stubPath:o,stubTargetPath:`${a}.md`,folderPath:s,propertyKeys:u,csvText:c,rowFiles:d,folderIndex:Ff(d),fallbackTitle:ji(s)})}return r}const Bf=/^[a-z][a-z0-9+.-]*:/i,Vf=/^\s*(`{3,}|~{3,})/,Hf=/_all\.csv(?=$|[#?])/i;function Uf(e){let t=Math.min(...[e.indexOf(`#`),e.indexOf(`?`)].filter(e=>e>=0).concat(e.length)),n=e.slice(0,t),r=e.slice(t);try{return decodeURIComponent(n)+r}catch{return e}}function Wf(e,t){if(e.startsWith(`<`)&&e.endsWith(`>`)){let n=e.slice(1,-1);if(Bf.test(n)||n.startsWith(`//`)||n.startsWith(`#`))return e;let r=Uf(n);return t&&(r=r.replace(Hf,`.md`)),`<${r}>`}if(Bf.test(e)||e.startsWith(`//`)||e.startsWith(`#`))return e;let n=Uf(e);return t&&(n=n.replace(Hf,`.md`)),/\s/.test(n)?`<${n}>`:n}function Gf(e,t){let n=``,r=0;for(;r<e.length;){let i=e.indexOf(`](`,r);if(i===-1){n+=e.slice(r);break}n+=e.slice(r,i+2);let a=i+2;if(e[a]===`<`){let i=e.indexOf(`>`,a);if(i===-1||e[i+1]!==`)`){r=a;continue}n+=`${Wf(e.slice(a,i+1),t)})`,r=i+2;continue}let o=1,s=a;for(;s<e.length;s++){let t=e[s];if(t===`(`)o++;else if(t===`)`&&(o--,o===0))break}if(s>=e.length){n+=e.slice(a);break}n+=`${Wf(e.slice(a,s),t)})`,r=s+1}return n}function Kf(e,t){let n=``,r=0;for(;r<e.length;){if(e[r]==="`"){let t=0;for(;e[r+t]==="`";)t++;let i=e.slice(r,r+t),a=e.indexOf(i,r+t);if(a>=0){n+=e.slice(r,a+t),r=a+t;continue}n+=e.slice(r);break}let i=e.indexOf("`",r),a=i===-1?e.length:i;n+=Gf(e.slice(r,a),t),r=a}return n}function qf(e,t={}){let n=t.redirectCsv??!1,r=e.split(`
+`),i=null;for(let e=0;e<r.length;e++){let t=r[e],a=t.match(Vf);if(a){let e=a[1][0];i===null?i=e:e===i&&(i=null);continue}i===null&&(r[e]=Kf(t,n))}return r.join(`
+`)}function Jf(e){let t=[],n=[e];for(;n.length>0;){let e=n.pop(),r;try{r=Wi(e)}catch{continue}for(let i of r){if(i.startsWith(`.`))continue;let r=B(e,i),a=!1,o=!1;try{let e=Vi(r);e.isSymbolicLink()?o=G(r).isFile():(a=e.isDirectory(),o=e.isFile())}catch{continue}a?n.push(r):o&&t.push(r)}}return t}const Yf=/ [0-9a-f]{32}\.mdx?$/i,Xf=/data:image\/[a-z0-9.+-]+;base64,/i;function Zf(e){let t=Jf(e);for(let e of t)if(e.endsWith(`_all.csv`)||Yf.test(e))return!0;for(let e of t)if(/\.mdx?$/i.test(e))try{if(Xf.test(W(e,`utf8`)))return!0}catch{}return!1}const Qf=/^[A-Za-z0-9][A-Za-z0-9 ._/-]*$/,$f=/^(true|false|null|~)$/i,ep=/^[-+]?(\.\d+|\d+(\.\d*)?([eE][-+]?\d+)?|0x[0-9a-fA-F]+|0o[0-7]+|\.inf|\.nan)$/i;function tp(e){return`"${e.replace(/\\/g,`\\\\`).replace(/"/g,`\\"`)}"`}function np(e){return e===``?`""`:$f.test(e)||ep.test(e)?tp(e):Qf.test(e)?e:tp(e)}function rp(e,t){let n=Qf.test(e)?e:tp(e);return t.trimEnd()===``?`${n}:`:`${n}: ${np(t.trimEnd())}`}function ip(e,t){if(t.size===0||/^---\r?\n/.test(e))return e;let n=e.split(`
+`),r=-1;for(let t=0;t<n.length;t++){if(/^#\s+/.test(n[t])){r=t;break}if(n[t].trim()!==``)return e}if(r===-1)return e;let i=r+1;for(;i<n.length&&n[i].trim()===``;)i++;let a=[];for(;i<n.length;){let e=n[i].match(/^([^:]+):\s?(.*)$/);if(!e)break;let r=e[1].trim();if(!t.has(r))break;a.push([r,e[2]]),i++}if(a.length===0)return e;let o=n.slice(i);for(;o.length>0&&o[0].trim()===``;)o.shift();let s=[`---`,...a.map(([e,t])=>rp(e,t)),`---`,``,n[r]];o.length>0&&s.push(``,...o);let c=s.join(`
 `).replace(/\n+$/,``);return e.endsWith(`
-`)?`${c}\n`:c}function ip(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function ap(e){return/\s/.test(e)?`<${e}>`:e}function op(e,t={}){let{header:n,rows:r}=kf(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(ip).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=ip(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${ap(e)})`}return a}).join(` | `)} |`)].join(`
-`),columns:i,wide:i>a}}function sp(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function cp(e,t){return`# ${e}\n\n${t}\n`}const lp=[`links`,`frontmatter`,`callouts`,`images`,`tables`],up=/\.mdx?$/i;function dp(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function fp(e,t={}){let n=t.selected??new Set(lp),r=Xf(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:dp(!1)};let i=dp(r),a=qf(e),o=Rf(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!up.test(e)||s&&l.has(e))continue;let r;try{r=G(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Of(a,ji(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:B(z(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=wf(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=rp(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Kf(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=op(e.csvText,{linkForTitle:t=>{let n=Ff(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?V(z(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=G(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=cp(o===null?e.fallbackTitle:sp(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Kf(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function pp(e){for(let t of e.assets)W(z(t.path),{recursive:!0}),Ji(t.path,t.bytes);for(let t of e.changes)W(z(t.path),{recursive:!0}),Ji(t.path,t.content,`utf8`);for(let t of e.deletions)try{qi(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const mp={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},hp=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function gp(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of hp)n.push(`  ${mp[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function _p(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function vp(e){let t=new Set(lp);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${lp.join(`, `)}`);return e})}function yp(e,t){let n=new Set(lp);if(e&&(n=new Set(vp(e))),t)for(let e of vp(t))n.delete(e);return n}function bp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=yp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=fp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{pp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?_p(a,{applied:t.apply??!1}):gp(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function xp(e){return Object.values(O).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function Sp(e,t,n){return t===`darwin`?n&&xp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Cp(e,t={}){let n=Sp(e,t.platform??process.platform,t.desktopBundlePath);return li(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function wp(e,t,n=process.platform){let r=Sp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Tp(e=()=>si(ci())){return{detectDesktopApp:()=>ni(e()),resolveBaseUrl:e=>un({lockDir:A(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return K(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Cp,findAncestorProject:e=>on(z(H(e)))?.rootPath??null,isProjectRoot:e=>on(e)?.distance===0,enclosingProject:e=>on(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Ep(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Dp(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function Op(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${wp(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function kp(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Ep(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!Ce.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${Ce.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return Op(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${En(e,s)}`;return Op(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Dp(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return Op(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${bn(s)}`;return Op(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Dp(n)}if(l)return Op(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${jn(s)}`;return Op(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Dp(n)}function Ap(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${Ce.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await kp(e,t,Tp())})}function jp(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DSu4iRwa.mjs`),r=e(),i=process.cwd(),a=Pn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Mp(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Np(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Pp(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Np((await e.raw([`remote`])).split(`
-`).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Fp(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===n(t)?t:null}const Ip=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function Lp(e,t){return Ip.some(n=>Array.from(e.matchAll(n)).some(e=>Fp(e[1])===t))}function Rp(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function zp(e,t,n){let r={git:k({baseDir:e})},i=t===null?null:Fp(t);if(t===null||i===null||sr(t)===null||!ne(i,ct()))return r;let{auth:a,declaredMiss:o}=await Hs(t,n.tokenStore,{cwd:e,...n.detectGh?{_detectGhFn:n.detectGh}:{}});return a.tier===`none`?r:{git:k(Rs(e,Ds(Ps(),i))).env(Rp(Ns(a))),signIn:{host:i,tier:a.tier},...o===void 0?{}:{declaredMiss:o}}}function Bp(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`ok auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ok auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Vp(e,t,n){try{return await n(e.git)}catch(n){let r=n instanceof Error?n.message:String(n),i=e.signIn===void 0||!Lp(r,e.signIn.host)?null:Bp(t,e.signIn,Pe(n));throw i===null?n:Error(`${r.trimEnd()}\n${i}`,{cause:n})}}async function Hp(e){await e.fetch();let t=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`@{upstream}^{commit}`])).trim();if(t!==``){let n=(await e.raw([`rev-parse`,`--symbolic-full-name`,`@{upstream}`])).trim();return{commit:t,trackingRef:n.startsWith(`refs/`)?n:null}}let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim();if(n===``)throw Error(`not on a branch, so there is nothing to pull into; switch to a branch first, for example: git switch main`);let r=(await e.raw([`config`,`--get`,`branch.${n}.merge`])).trim(),i=(await e.raw([`config`,`--get`,`branch.${n}.remote`])).trim()||`origin`;if(r===``)throw Error(`no upstream configured for branch "${n}"; set one with: git branch --set-upstream-to=${i}/${n} ${n}`);await e.fetch(i,r);let a=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`FETCH_HEAD^{commit}`])).trim();if(a===``)throw Error(`could not resolve the fetched ${r}`);return{commit:a,trackingRef:null}}function Up(e){switch(e){case`requires-newer-git`:return[`update-git`];case`unverifiable-target`:return[`readable-folder`,`fix-link`];case`outside-repository`:case`repository-root`:case`private-state`:case`secret-file`:case`inside-private-state`:return[`fix-link`];default:return e}}const Wp={"update-git":`Update Git to ${Jt} or newer.`,"readable-folder":`If a folder on the way is unreadable on this machine, make it readable.`,"fix-link":`Remove or fix these links on the remote, or fix your own local change to them, then pull again.`};function Gp(e){if(e instanceof dn){let t=new Set(e.unsafe.flatMap(({reason:e})=>Up(e))),n=Object.entries(Wp).filter(([e])=>t.has(e)).map(([,e])=>e);return t.has(`fix-link`)||n.push(`Then pull again.`),`incoming symlinks are unsafe to check out: ${e.describeLinks()}. ${n.join(` `)}`}return e instanceof Error?e.message:String(e)}async function Kp(e,t,n=process.cwd()){let r=e.op??`sync`,i=A(n),a=Gt(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...fn({kind:`cli`,runtimeVersion:mn})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Mp(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=k({baseDir:n}),s={tokenStore:e.tokenStore??Qr(),detectGh:e._detectGhFn},c=async t=>{let i=await zp(n,t,s),a=Bs(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Mp(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},l;if(r===`sync`||r===`pull`){Mp(e.json,{type:`step`,step:`pull`});let t=await Pp(o,`pull`);l={url:t,remote:await c(t)};let n=await Vp(l.remote,`pull`,Hp);await Bt(o,n.commit,`merge`);let{trackingRef:r}=n;r!==null&&await st(o,{name:r,trackingRef:r,commit:n.commit});let i=await o.pull(`.`,r??n.commit);Mp(e.json,{type:`pull`,summary:i.summary}),e.json||process.stderr.write(`  pull: ${i.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Mp(e.json,{type:`step`,step:`push`});let t=await Pp(o,`push`);await Vp(l!==void 0&&l.url===t?l.remote:await c(t),`push`,e=>e.push()),Mp(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
-`)}Mp(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function qp(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`sync`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Jp(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`pull`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Yp(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const Xp={existsSync:e=>U(e),isDirectory:e=>{try{return K(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>Ui(e),readFileSync:e=>G(e),writeFileSync:(e,t)=>{Ji(e,t)},mkdirSync:(e,t)=>{W(e,t)},rmSync:(e,t)=>{Ki(e,t)}},Zp={resolveProjectBundledSkillDir:()=>qt(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>qt(e,{checkDesktop:!1}),readBundledVersion:()=>bt(),readRecordedVersion:e=>yn(e,`cli-hosts`),writeRecordedVersion:(e,t)=>ft(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>Yt(e),readBundleDecision:(e,t)=>It(e,t),writeBundleDecision:(e,t,n)=>ht(e,t,n),removeBundleFromDisk:(e,t)=>gr(e,t)};function Qp(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function $p(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(z(t),{recursive:!0}),em(e,t,n)}function em(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=B(e,r),a=B(t,r);n.isDirectory(i)?em(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function tm(e,t,n){return n.existsSync(B(e,`.agents`,`skills`,t))||Ae.some(r=>n.existsSync(B(e,r.skillsRoot,t)))}function nm(e,t,n,r,i,a){let o=[],s=B(e,`.agents`,`skills`,t);if(tm(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of Ae){let i=B(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(B(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(B(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{$p(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of Ae){let l=B(e,c.hostDir),u=B(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{$p(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function rm(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function im(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>B(nn(z(e)),ji(e));return a(t)===a(i)}function am(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Rr){let s=B(e,n.hostDir,`skills`,`open-knowledge`),c=B(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Lr[n.editorId],u=l?.projectConfigPath?.(e);if(im(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!rm(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Er(s,e),$p(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function om(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of Ke)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=hn[i.id],o=tm(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!de(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>tm(e,hn[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===Ke.length,m=[];for(let{id:t,sourceDir:i}of u){let a=nm(e,hn[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function sm(e){let t=e.logger??Qp,n=e.fs??Xp,r=e.home??Yi(),i={...Zp,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=am(e.projectDir,r,i,n,t),o=await om(r,i,n,t),s=pr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=nr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function cm(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function lm(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
-`)}function um(){return new M(`repair-skills`).description("Restore missing project skill copies and repair user-global bundles for installed AI editors. Existing project skills are preserved; run `ok init` to refresh them.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await sm({projectDir:H(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>dm(t,{yes:e.yes===!0})});process.stdout.write(`${lm(t)}\n`),process.exitCode=cm(t)})}async function dm(e,t){let n=Yi(),r=e=>`~/${V(n,e)}`,i=t.input??process.stdin,a=[``,R(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),P(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${R(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${R(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,P(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
-`)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${L("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=ra({input:i,output:process.stdout});try{let e=(await o.question(`\n${R(`Remove them?`)} ${P(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function fm(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${L(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let n=[...new Set([He,...we.map(e=>_e[e])].filter(e=>e!==null).map(ze))].map(e=>`${e}/`);return`\n${L(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${n.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function pm(e){return typeof e==`string`&&vn.includes(e)}async function mm(e={}){let t=H(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Cn[n])return{status:`failed`,message:`${I(`Error:`)} Unknown pack "${n}". Available: ${vn.join(`, `)}`,exitCode:1};let r;try{r=await at({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Hn?{status:`prerequisite-missing`,message:`${I(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${I(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!sa(r)){let e=Cn[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${L(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=fm(r,e);return{status:`no-op`,message:`${F(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${P(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Fn(Cn[n]);return{status:`dry-run`,message:`${R(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${R(`Plan:`)}\n\n${gm(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await _m(`${R(`Plan:`)}\n\n${gm(r,t)}\n\n${R(`Apply?`)} ${P(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:P(`Cancelled.`),plan:r,exitCode:0};let i=await Ye(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${I(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${L(`Applied`)} ${i.applied} entries, ${L(String(i.errors.length))} error(s):`,...e].join(`
-`),plan:r,exitCode:1}}let a=Cn[n].name,o=i.packSkillsInstalled.length>0?`\n${P(`Installed the ${a} skills for: ${i.packSkillsInstalled.join(`, `)}`)}`:``,s=i.pluginsEnabled.length>0?`\n${P(`Enabled plugin(s) included with this pack: ${i.pluginsEnabled.join(`, `)} — turn off any time in Settings.`)}`:``,c=(i.packSkillConflicts??[]).map(e=>e.hosts===void 0||e.hosts.length===0?`\n${L(`!`)} Skill "${e.name}" was not installed — you already have your own skill with that name. Rename yours if you want the pack's version.`:`\n${L(`!`)} Skill "${e.name}" was not installed for ${e.hosts.join(`, `)} — you already have your own skill with that name there. Rename yours if you want the pack's version.`).join(``);return{status:`applied`,message:`${F(`✓ Seeded ${a}`)} ${P(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}${s}${fm(r,a)}${c}`,plan:r,exitCode:0}}function hm(){let e=[R(`Available packs:`)];for(let t of vn){let n=Cn[t];e.push(`  ${F(t)}  ${P(`—`)} ${n.name}: ${n.description}`)}return e.join(`
+`)?`${c}\n`:c}function ap(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function op(e){return/\s/.test(e)?`<${e}>`:e}function sp(e,t={}){let{header:n,rows:r}=Af(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(ap).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=ap(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${op(e)})`}return a}).join(` | `)} |`)].join(`
+`),columns:i,wide:i>a}}function cp(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function lp(e,t){return`# ${e}\n\n${t}\n`}const up=[`links`,`frontmatter`,`callouts`,`images`,`tables`],dp=/\.mdx?$/i;function fp(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function pp(e,t={}){let n=t.selected??new Set(up),r=Zf(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:fp(!1)};let i=fp(r),a=Jf(e),o=zf(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!dp.test(e)||s&&l.has(e))continue;let r;try{r=W(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=kf(a,ji(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:B(z(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Tf(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=ip(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=qf(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=sp(e.csvText,{linkForTitle:t=>{let n=If(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?V(z(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=W(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=lp(o===null?e.fallbackTitle:cp(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=qf(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function mp(e){for(let t of e.assets)Hi(z(t.path),{recursive:!0}),Yi(t.path,t.bytes);for(let t of e.changes)Hi(z(t.path),{recursive:!0}),Yi(t.path,t.content,`utf8`);for(let t of e.deletions)try{Ji(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const hp={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},gp=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function _p(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of gp)n.push(`  ${hp[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
+`)}function vp(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function yp(e){let t=new Set(up);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${up.join(`, `)}`);return e})}function bp(e,t){let n=new Set(up);if(e&&(n=new Set(yp(e))),t)for(let e of yp(t))n.delete(e);return n}function xp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=bp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=pp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{mp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?vp(a,{applied:t.apply??!1}):_p(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Sp(e){return Object.values(fe).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function Cp(e,t,n){return t===`darwin`?n&&Sp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function wp(e,t={}){let n=Cp(e,t.platform??process.platform,t.desktopBundlePath);return li(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Tp(e,t,n=process.platform){let r=Cp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Ep(e=()=>si(ci())){return{detectDesktopApp:()=>ni(e()),resolveBaseUrl:e=>_t({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:wp,findAncestorProject:e=>Cn(z(H(e)))?.rootPath??null,isProjectRoot:e=>Cn(e)?.distance===0,enclosingProject:e=>Cn(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Dp(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Op(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function kp(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Tp(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Ap(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Dp(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!de.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${de.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return kp(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${ln(e,s)}`;return kp(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Op(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${Dn(s)}`;return kp(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Op(n)}if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${yn(s)}`;return kp(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Op(n)}function jp(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${de.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Ap(e,t,Ep())})}function Mp(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DG2fmjZi.mjs`),r=e(),i=process.cwd(),a=Bn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Z(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Np(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Pp(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Np((await e.raw([`remote`])).split(`
+`).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Fp(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===he(t)?t:null}const Ip=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function Lp(e,t){return Ip.some(n=>Array.from(e.matchAll(n)).some(e=>Fp(e[1])===t))}function Rp(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function zp(e,n,r){let i={git:k({baseDir:e})},a=n===null?null:Fp(n);if(n===null||a===null||sr(n)===null||!t(a,Ft()))return i;let{auth:o,declaredMiss:s}=await Us(n,r.tokenStore,{cwd:e,...r.detectGh?{_detectGhFn:r.detectGh}:{}});return o.tier===`none`?i:{git:k(zs(e,Os(Fs(),a))).env(Rp(Ps(o))),signIn:{host:a,tier:o.tier},...s===void 0?{}:{declaredMiss:s}}}function Bp(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`ok auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ok auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Vp(e,t,n){try{return await n(e.git)}catch(n){let r=n instanceof Error?n.message:String(n),i=e.signIn===void 0||!Lp(r,e.signIn.host)?null:Bp(t,e.signIn,f(n));throw i===null?n:Error(`${r.trimEnd()}\n${i}`,{cause:n})}}async function Hp(e){await e.fetch();let t=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`@{upstream}^{commit}`])).trim();if(t!==``){let n=(await e.raw([`rev-parse`,`--symbolic-full-name`,`@{upstream}`])).trim();return{commit:t,trackingRef:n.startsWith(`refs/`)?n:null}}let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim();if(n===``)throw Error(`not on a branch, so there is nothing to pull into; switch to a branch first, for example: git switch main`);let r=(await e.raw([`config`,`--get`,`branch.${n}.merge`])).trim(),i=(await e.raw([`config`,`--get`,`branch.${n}.remote`])).trim()||`origin`;if(r===``)throw Error(`no upstream configured for branch "${n}"; set one with: git branch --set-upstream-to=${i}/${n} ${n}`);await e.fetch(i,r);let a=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`FETCH_HEAD^{commit}`])).trim();if(a===``)throw Error(`could not resolve the fetched ${r}`);return{commit:a,trackingRef:null}}function Up(e){switch(e){case`requires-newer-git`:return[`update-git`];case`unverifiable-target`:return[`readable-folder`,`fix-link`];case`outside-repository`:case`repository-root`:case`private-state`:case`secret-file`:case`inside-private-state`:return[`fix-link`];default:return e}}const Wp={"update-git":`Update Git to ${Yt} or newer.`,"readable-folder":`If a folder on the way is unreadable on this machine, make it readable.`,"fix-link":`Remove or fix these links on the remote, or fix your own local change to them, then pull again.`};function Gp(e){if(e instanceof vt){let t=new Set(e.unsafe.flatMap(({reason:e})=>Up(e))),n=Object.entries(Wp).filter(([e])=>t.has(e)).map(([,e])=>e);return t.has(`fix-link`)||n.push(`Then pull again.`),`incoming symlinks are unsafe to check out: ${e.describeLinks()}. ${n.join(` `)}`}return e instanceof Error?e.message:String(e)}async function Kp(e,t,n=process.cwd()){let r=e.op??`sync`,i=j(n),a=wt(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...qe({kind:`cli`,runtimeVersion:hn})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Z(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=k({baseDir:n}),s={tokenStore:e.tokenStore??Qr(),detectGh:e._detectGhFn},c=async t=>{let i=await zp(n,t,s),a=Vs(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Z(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},l;if(r===`sync`||r===`pull`){Z(e.json,{type:`step`,step:`pull`});let t=await Pp(o,`pull`);l={url:t,remote:await c(t)};let n=await Vp(l.remote,`pull`,Hp);await ot(o,n.commit,`merge`);let{trackingRef:r}=n;r!==null&&await mt(o,{name:r,trackingRef:r,commit:n.commit});let i=await o.pull(`.`,r??n.commit);Z(e.json,{type:`pull`,summary:i.summary}),e.json||process.stderr.write(`  pull: ${i.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Z(e.json,{type:`step`,step:`push`});let t=await Pp(o,`push`);await Vp(l!==void 0&&l.url===t?l.remote:await c(t),`push`,e=>e.push()),Z(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
+`)}Z(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function qp(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`sync`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Jp(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`pull`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Yp(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const Xp={existsSync:e=>U(e),isDirectory:e=>{try{return G(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>Wi(e),readFileSync:e=>W(e),writeFileSync:(e,t)=>{Yi(e,t)},mkdirSync:(e,t)=>{Hi(e,t)},rmSync:(e,t)=>{qi(e,t)}},Zp={resolveProjectBundledSkillDir:()=>Mn(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>Mn(e,{checkDesktop:!1}),readBundledVersion:()=>We(),readRecordedVersion:e=>En(e,`cli-hosts`),writeRecordedVersion:(e,t)=>gt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>xn(e),readBundleDecision:(e,t)=>st(e,t),writeBundleDecision:(e,t,n)=>bt(e,t,n),removeBundleFromDisk:(e,t)=>gr(e,t)};function Qp(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function $p(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(z(t),{recursive:!0}),em(e,t,n)}function em(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=B(e,r),a=B(t,r);n.isDirectory(i)?em(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function tm(e,t,n){return n.existsSync(B(e,`.agents`,`skills`,t))||_e.some(r=>n.existsSync(B(e,r.skillsRoot,t)))}function nm(e,t,n,r,i,a){let o=[],s=B(e,`.agents`,`skills`,t);if(tm(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of _e){let i=B(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(B(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(B(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{$p(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of _e){let l=B(e,c.hostDir),u=B(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{$p(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function rm(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function im(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>B(nn(z(e)),ji(e));return a(t)===a(i)}function am(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Rr){let s=B(e,n.hostDir,`skills`,`open-knowledge`),c=B(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Lr[n.editorId],u=l?.projectConfigPath?.(e);if(im(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!rm(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Er(s,e),$p(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function om(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of dn)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=gn[i.id],o=tm(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!re(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>tm(e,gn[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===dn.length,m=[];for(let{id:t,sourceDir:i}of u){let a=nm(e,gn[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function sm(e){let t=e.logger??Qp,n=e.fs??Xp,r=e.home??Xi(),i={...Zp,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=am(e.projectDir,r,i,n,t),o=await om(r,i,n,t),s=pr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=nr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function cm(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function lm(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
+`)}function um(){return new M(`repair-skills`).description("Restore missing project skill copies and repair user-global bundles for installed AI editors. Existing project skills are preserved; run `ok init` to refresh them.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await sm({projectDir:H(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>dm(t,{yes:e.yes===!0})});process.stdout.write(`${lm(t)}\n`),process.exitCode=cm(t)})}async function dm(e,t){let n=Xi(),r=e=>`~/${V(n,e)}`,i=t.input??process.stdin,a=[``,R(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),P(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${R(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${R(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,P(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
+`)}\n`),t.yes)return!0;if(!i.isTTY)return process.stdout.write(`${L("Not a terminal — skipping cleanup. Re-run with `ok repair-skills --yes` to remove these.")}\n`),!1;let o=ia({input:i,output:process.stdout});try{let e=(await o.question(`\n${R(`Remove them?`)} ${P(`[y/N] `)}`)).trim().toLowerCase();return e===`y`||e===`yes`}finally{o.close()}}function fm(e,t){if(e.packSkillHomeRefusal===void 0)return``;if(e.packSkillHomeRefusal===`home-escapes-project`)return`\n${L(`!`)} The ${t} skills were not installed: this project's skill folder is a symlink pointing outside the project, and Open Knowledge will not write through it. Replace it with a real directory inside the project, then run \`ok seed\` again.`;let r=[...new Set([n,...Fe.map(e=>Se[e])].filter(e=>e!==null).map(He))].map(e=>`${e}/`);return`\n${L(`!`)} The ${t} skills were not installed: this project has no agent folder for them. Open Knowledge only writes skills into a folder that already exists (${r.join(`, `)}) and never creates one for you. Create the folder your agent uses, then run \`ok seed\` again to install them.`}function pm(e){return typeof e==`string`&&_n.includes(e)}async function mm(e={}){let t=H(e.cwd??process.cwd()),n=e.pack??`knowledge-base`;if(!Tn[n])return{status:`failed`,message:`${I(`Error:`)} Unknown pack "${n}". Available: ${_n.join(`, `)}`,exitCode:1};let r;try{r=await ut({projectDir:t,rootDir:e.root,packId:n,skipPrerequisite:e.dryRun===!0})}catch(e){return e instanceof Hn?{status:`prerequisite-missing`,message:`${I(`Error:`)} ${e.message}`,exitCode:1}:{status:`failed`,message:`${I(`Error:`)} ${e instanceof Error?e.message:String(e)}`,exitCode:1}}if(!ca(r)){let e=Tn[n].name,t=(r.packSkills??[]).filter(e=>e.conflict).map(e=>`\n${L(`!`)} Skill "${e.name}" is your own — the pack's version is not installed. Rename yours to install the pack's version.`).join(``),i=fm(r,e);return{status:`no-op`,message:`${F(`Your ${e} pack is already seeded.`)}${i}${t}${i===``?`\n${P(`Nothing to do.`)}`:``}`,plan:r,exitCode:0}}if(e.dryRun){let e=Vn(Tn[n]);return{status:`dry-run`,message:`${R(`Reference this pack for inspiration (dry-run — no changes made):`)}\n\n${e}\n\n${R(`Plan:`)}\n\n${gm(r,t)}`,plan:r,exitCode:0}}if(!e.yes&&!await _m(`${R(`Plan:`)}\n\n${gm(r,t)}\n\n${R(`Apply?`)} ${P(`[Y/n] `)}`,e.confirmStream))return{status:`cancelled`,message:P(`Cancelled.`),plan:r,exitCode:0};let i=await Bt(r,{projectDir:t,packId:n});if(i.errors.length>0){let e=i.errors.map(e=>`  ${I(`✗`)} ${e.path}: ${e.error}`);return{status:`failed`,message:[`${L(`Applied`)} ${i.applied} entries, ${L(String(i.errors.length))} error(s):`,...e].join(`
+`),plan:r,exitCode:1}}let a=Tn[n].name,o=i.packSkillsInstalled.length>0?`\n${P(`Installed the ${a} skills for: ${i.packSkillsInstalled.join(`, `)}`)}`:``,s=i.pluginsEnabled.length>0?`\n${P(`Enabled plugin(s) included with this pack: ${i.pluginsEnabled.join(`, `)} — turn off any time in Settings.`)}`:``,c=(i.packSkillConflicts??[]).map(e=>e.hosts===void 0||e.hosts.length===0?`\n${L(`!`)} Skill "${e.name}" was not installed — you already have your own skill with that name. Rename yours if you want the pack's version.`:`\n${L(`!`)} Skill "${e.name}" was not installed for ${e.hosts.join(`, `)} — you already have your own skill with that name there. Rename yours if you want the pack's version.`).join(``);return{status:`applied`,message:`${F(`✓ Seeded ${a}`)} ${P(`(${i.applied} entries, ${i.durationMs}ms)`)}${o}${s}${fm(r,a)}${c}`,plan:r,exitCode:0}}function hm(){let e=[R(`Available packs:`)];for(let t of _n){let n=Tn[t];e.push(`  ${F(t)}  ${P(`—`)} ${n.name}: ${n.description}`)}return e.join(`
 `)}function gm(e,t){let n=[],r=e.created.filter(e=>e.kind===`folder`),i=e.created.filter(e=>e.kind===`file`);if(r.length>0){n.push(R(`Folders to create:`));for(let e of r)n.push(`  ${F(`+`)} ${N(V(t,H(t,e.path))||e.path)}${P(`/`)}`)}if(i.length>0){n.length>0&&n.push(``),n.push(R(`Files to create:`));for(let e of i)n.push(`  ${F(`+`)} ${N(V(t,H(t,e.path))||e.path)}`)}if(e.skipped.length>0){n.length>0&&n.push(``),n.push(P(`Already present (skipped):`));for(let t of e.skipped)n.push(`  ${P(`· ${t.path} (${t.reason})`)}`)}if(e.warnings.length>0){n.length>0&&n.push(``),n.push(L(`Warnings:`));for(let t of e.warnings)n.push(`  ${L(`!`)} ${t}`)}let a=(e.packSkills??[]).filter(e=>e.conflict);if(a.length>0){n.length>0&&n.push(``),n.push(L(`Name collisions:`));for(let e of a)n.push(`  ${L(`!`)} Skill "${e.name}" is your own — the pack's version will not be installed. Rename yours to install the pack's version.`)}return n.join(`
-`)}async function _m(e,t){let n=ra({input:t??process.stdin,output:process.stdout});try{let t=(await n.question(e)).trim().toLowerCase();return t===``||t===`y`||t===`yes`}finally{n.close()}}function vm(){return new M(`seed`).description(`Scaffold a starter pack into the project. Defaults to "${kt}" — the Karpathy three-layer knowledge base. Use --pack to pick a different pack (run with --list-packs to see all). Use --root to place pack folders inside a subfolder instead of the project root.`).argument(`[path]`,`Project directory (defaults to cwd)`).option(`-p, --pack <id>`,`Starter pack to scaffold. One of: ${vn.join(`, `)}. Defaults to "${kt}".`).option(`-r, --root <path>`,`Subfolder (relative to the project dir) to scaffold into — created if missing. Defaults to the project root.`).option(`--list-packs`,`List available starter packs and exit.`).option(`-y, --yes`,`Skip confirmation prompt`).option(`--dry-run`,`Print the plan and exit without writing`).action(async(e,t)=>{if(t.listPacks){process.stdout.write(`${hm()}\n`);return}if(t.pack!==void 0&&!pm(t.pack)){process.stderr.write(`${I(`Error:`)} Unknown pack "${t.pack}". Available: ${vn.join(`, `)}\n`),process.exitCode=1;return}let n=await mm({cwd:e??process.cwd(),pack:t.pack,root:t.root,yes:t.yes,dryRun:t.dryRun});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}async function ym(e,t,n){try{return await e.repos.get({owner:t,repo:n}),{kind:`ok`,available:!1}}catch(e){let t=e.status;return t===404?{kind:`ok`,available:!0}:t===401?{kind:`auth-required`}:{kind:`network`}}}async function bm(e,t){let{host:n,owner:r,name:i,json:a}=e;Ja(n);let o=await is(n,t);if(o==null){if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let s=n===`github.com`?void 0:`https://${n}/api/v3`,c=await ym(new Zo({auth:o,...s?{baseUrl:s}:{}}),r,i);if(c.kind===`ok`){a?process.stdout.write(`${JSON.stringify({type:`name-check`,available:c.available})}\n`):process.stdout.write(c.available?`available
+`)}async function _m(e,t){let n=ia({input:t??process.stdin,output:process.stdout});try{let t=(await n.question(e)).trim().toLowerCase();return t===``||t===`y`||t===`yes`}finally{n.close()}}function vm(){return new M(`seed`).description(`Scaffold a starter pack into the project. Defaults to "${jt}" — the Karpathy three-layer knowledge base. Use --pack to pick a different pack (run with --list-packs to see all). Use --root to place pack folders inside a subfolder instead of the project root.`).argument(`[path]`,`Project directory (defaults to cwd)`).option(`-p, --pack <id>`,`Starter pack to scaffold. One of: ${_n.join(`, `)}. Defaults to "${jt}".`).option(`-r, --root <path>`,`Subfolder (relative to the project dir) to scaffold into — created if missing. Defaults to the project root.`).option(`--list-packs`,`List available starter packs and exit.`).option(`-y, --yes`,`Skip confirmation prompt`).option(`--dry-run`,`Print the plan and exit without writing`).action(async(e,t)=>{if(t.listPacks){process.stdout.write(`${hm()}\n`);return}if(t.pack!==void 0&&!pm(t.pack)){process.stderr.write(`${I(`Error:`)} Unknown pack "${t.pack}". Available: ${_n.join(`, `)}\n`),process.exitCode=1;return}let n=await mm({cwd:e??process.cwd(),pack:t.pack,root:t.root,yes:t.yes,dryRun:t.dryRun});process.stdout.write(`${n.message}\n`),n.exitCode!==0&&(process.exitCode=n.exitCode)})}async function ym(e,t,n){try{return await e.repos.get({owner:t,repo:n}),{kind:`ok`,available:!1}}catch(e){let t=e.status;return t===404?{kind:`ok`,available:!0}:t===401?{kind:`auth-required`}:{kind:`network`}}}async function bm(e,t){let{host:n,owner:r,name:i,json:a}=e;Ya(n);let o=await as(n,t);if(o==null){if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let s=n===`github.com`?void 0:`https://${n}/api/v3`,c=await ym(new Qo({auth:o,...s?{baseUrl:s}:{}}),r,i);if(c.kind===`ok`){a?process.stdout.write(`${JSON.stringify({type:`name-check`,available:c.available})}\n`):process.stdout.write(c.available?`available
 `:`taken
-`);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function xm(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await bm(t,await e())})}async function Sm(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Cm(e,t){let{host:n,json:r}=e;Ja(n);let i=await is(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await Sm(new Zo({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function wm(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Cm(t,await e())})}function Tm(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
-`)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Em(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Dm(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Om(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function km(e,t){return t===void 0?k(Rs(e,[])).env(Ms()):k(Rs(e,Ds(Ps(),t.host))).env(Ns({relayToken:t}))}function Am(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const jm={ensureOkScaffold:e=>{ot(e)},gitFactory:km};async function Mm(e){let t={...jm,...e.deps},n=H(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Om(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Tm(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=B(n,`.git`);if(!U(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Em({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Tm(t)===`name-conflict`){let t=await Dm(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Tm(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Am(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Nm(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Pm(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(Ja(n),Wt(s)){process.stderr.write(`${new jt(H(s)).message}\n`),process.exitCode=64;return}if(Tn(s)){process.stderr.write(`${new it(H(s)).message}\n`),process.exitCode=64;return}let l=await is(n,t);if(l==null){Nm(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new Zo({auth:l,...u?{baseUrl:u}:{}});try{Oi(`git config user.email`,j({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Nm(c,await Mm({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Fm(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
+`);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function xm(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await bm(t,await e())})}async function Sm(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Cm(e,t){let{host:n,json:r}=e;Ya(n);let i=await as(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await Sm(new Qo({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function wm(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Cm(t,await e())})}function Tm(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
+`)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Em(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Dm(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Om(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function km(e,t){return t===void 0?k(zs(e,[])).env(Ns()):k(zs(e,Os(Fs(),t.host))).env(Ps({relayToken:t}))}function Am(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const jm={ensureOkScaffold:e=>{dt(e)},gitFactory:km};async function Mm(e){let t={...jm,...e.deps},n=H(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Om(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Tm(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=B(n,`.git`);if(!U(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Em({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Tm(t)===`name-conflict`){let t=await Dm(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Tm(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Am(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Nm(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Pm(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(Ya(n),Kt(s)){process.stderr.write(`${new Pt(H(s)).message}\n`),process.exitCode=64;return}if(pt(s)){process.stderr.write(`${new rt(H(s)).message}\n`),process.exitCode=64;return}let l=await as(n,t);if(l==null){Nm(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new Qo({auth:l,...u?{baseUrl:u}:{}});try{Oi(`git config user.email`,A({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Nm(c,await Mm({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Fm(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Pm(t,await e())})}function Im(){let e=new M(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>di();return e.addCommand(wm(t)),e.addCommand(xm(t)),e.addCommand(Fm(t)),e}function Lm(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Rm(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Ir(t),r=Cr(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){zm(e.json,t,r.reason);return}let i=jr(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${F(`✓`)} ${R(`Sharing mode is already`)} ${F(`local-only`)}${R(`.`)}\n`),Lm(r.removed);return}process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`),Lm(r.removed)})}function zm(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Bm(){return new M(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=jr(t),r=Ir(t),i=qr(t,r);if(i.kind===`no-exclude`){Vm(e.json,t,i.reason);return}let a=jr(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${F(`✓`)} ${N(`Sharing mode is already`)} ${R(`shared`)}${N(`.`)}\n`),Lm(i.removed);return}process.stderr.write(`${N(`Sharing mode is already`)} ${R(`shared`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${R(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Vm(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Hm(){return new M(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=jr(t),r=[...Or(t)],i=Dr(t,Ir(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${Um(n)}`),a.push(``),a.push(`Excluded from git via ${R(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${N(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function Um(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Wm(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Bm()),e.addCommand(Rm()),e.addCommand(Hm()),e}const Gm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Km(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Gm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function qm(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Jm(e){return/\.(md|mdx)$/i.test(e)}function Ym(e,t){if(Jm(t))return!0;try{return K(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Xm(e,t){let n=Km(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=qm(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Zm(e=()=>si(ci())){return{prepare:dt,detectDesktopApp:()=>ni(e()),openTarget:Cp,runProjectOpen:(e,t)=>kp(e,{project:t},Tp()),runBrowserOpen:e=>$m(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Qm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof At||e instanceof Ln||e instanceof rt||e instanceof et)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${wp(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function $m(e){let{createEphemeralProjectDir:t}=await import(`./dist-B7nhQgZp.mjs`),{loadConfig:n}=await import(`./src-B8diuX4-.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BeggNNGz.mjs`),{openBrowser:o}=await import(`./open-browser-B2IcPaHC.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await $i(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${jn(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
-`),o(h)),await new Promise(()=>{})}function eh(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=H(process.cwd()),n=rn(on(t)?.rootPath??t),r=Ut({projectDir:n}),i={...r,skills:r.skills.filter(e=>Qe(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${P(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${R(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?P(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?P(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${F(e.name)}${t}  ${P(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${R(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${N(e.name)} ${P(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=A(process.cwd()),r=tr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${I(`Error:`)} no running Open Knowledge server for this project. Start it with ${R(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${I(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${N(`Already imported:`)} ${R(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${F(`Imported`)} ${R(o)}${c?P(` (renamed from ${c} — name was taken)`):``} from ${P(s.source??e)}${s.publisher?P(` · ${s.publisher}`):``}.\n${P(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${P(`! ${e}`)}\n`)}),e}function th(e){return{server:nh(`server`,e),ui:e.status===`alive`&&Zt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function nh(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function rh(e){return`${ih(e.server)}\n${ih(e.ui)}`}function ih(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function ah(e){let t=e.inspect??(()=>tr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=th(t());return e.json?n(JSON.stringify(r,null,2)):n(rh(r)),r}function oh(e){return new M(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),ah({lockDir:A(process.cwd()),json:t.json===!0})})}function sh(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function ch(e,t){let n=ra({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function lh(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
+`)}\n`)})}function Um(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Wm(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Bm()),e.addCommand(Rm()),e.addCommand(Hm()),e}const Gm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Km(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Gm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function qm(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Jm(e){return/\.(md|mdx)$/i.test(e)}function Ym(e,t){if(Jm(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Xm(e,t){let n=Km(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=qm(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Zm(e=()=>si(ci())){return{prepare:ht,detectDesktopApp:()=>ni(e()),openTarget:wp,runProjectOpen:(e,t)=>Ap(e,{project:t},Ep()),runBrowserOpen:e=>$m(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Qm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof Nt||e instanceof In||e instanceof nt||e instanceof tt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Tp(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function $m(e){let{createEphemeralProjectDir:t}=await import(`./dist-fzYMjYEW.mjs`),{loadConfig:n}=await import(`./src-oGxozmX7.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BdUyii8P.mjs`),{openBrowser:o}=await import(`./open-browser-BL65djdM.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ea(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${yn(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`),o(h)),await new Promise(()=>{})}function eh(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=H(process.cwd()),n=rn(Cn(t)?.rootPath??t),r=Jt({projectDir:n}),i={...r,skills:r.skills.filter(e=>Fn(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${P(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${R(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?P(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?P(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${F(e.name)}${t}  ${P(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${R(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${N(e.name)} ${P(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=j(process.cwd()),r=tr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${I(`Error:`)} no running Open Knowledge server for this project. Start it with ${R(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${I(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${N(`Already imported:`)} ${R(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${F(`Imported`)} ${R(o)}${c?P(` (renamed from ${c} — name was taken)`):``} from ${P(s.source??e)}${s.publisher?P(` · ${s.publisher}`):``}.\n${P(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${P(`! ${e}`)}\n`)}),e}function th(e){return{server:nh(`server`,e),ui:e.status===`alive`&&Rn(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function nh(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function rh(e){return`${ih(e.server)}\n${ih(e.ui)}`}function ih(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function ah(e){let t=e.inspect??(()=>tr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=th(t());return e.json?n(JSON.stringify(r,null,2)):n(rh(r)),r}function oh(e){return new M(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),ah({lockDir:j(process.cwd()),json:t.json===!0})})}function sh(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function ch(e,t){let n=ia({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function lh(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
 What you share is sent to the OpenKnowledge team.
-`));let n=await Tr({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:w.length+1,choices:[...w.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await ch(t,P(`Anything else we should know? (optional) `)),i=await ch(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function uh(e){if(!sh(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>lh(e)))()}catch{return`failed`}return te(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??_)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function dh(e,t,n=fh,r=U,i={}){let a=[],o=i.platform??process.platform,s=i.env??process.env,c=ri(ii(s,i.execPath??process.execPath)).map(e=>O[e]);if(o===`darwin`)for(let t of c)for(let n of[`/Applications`,B(e,`Applications`)]){let e=B(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=s.LOCALAPPDATA;if(e)for(let t of c)for(let n of l(t)){let i=B(e,`Programs`,n,se(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of c){let t=`/opt/${e.productName}`;if(r(B(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function fh(e){try{return Di(`npm`,e,j({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const ph=`━`.repeat(64);function mh(e,t=process.platform){let n=[L(ph),R(`  One more step — remove the OpenKnowledge app itself`),P(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(P(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${N(`OK Desktop`)} — ${e}`),n.push(`    ${N(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${N(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${N(t.label)}`),n.push(`    ${t.instruction}`);return n.push(L(ph)),n.join(`
-`)}function hh(e){return H(e,`..`,`..`)}function gh(e){return U(B(e,`.ok`))}async function _h(e){let t=e.findRoot??on,n=e.readRecents??Kn,r=t(e.cwd)?.rootPath??null,i=ur({home:e.home,platformName:e.platform,env:e.env}),a=new Set;for(let e of n(i))a.add(H(e.path));let o=new Set(e.lockDirs.map(hh));for(let e of o)a.add(e);r&&a.delete(r);let s=[];r&&gh(r)&&s.push({path:r,running:o.has(r),current:!0});for(let e of a)gh(e)&&s.push({path:e,running:o.has(e),current:!1});return s.length===0?[]:e.allProjects?s.map(e=>e.path):e.yes||e.dryRun||!(e.isTTY??process.stdout.isTTY)?[]:(e.promptFn??vh)(s)}async function vh(e){return wr({message:`Also remove OpenKnowledge from these projects? (space to toggle; none selected by default)
+`));let n=await Tr({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:ye.length+1,choices:[...ye.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await ch(t,P(`Anything else we should know? (optional) `)),i=await ch(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function uh(e){if(!sh(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>lh(e)))()}catch{return`failed`}return u(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??Ee)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function dh(e,t,n=fh,r=U,i={}){let a=[],o=i.platform??process.platform,c=i.env??process.env,u=ri(ii(c,i.execPath??process.execPath)).map(e=>fe[e]);if(o===`darwin`)for(let t of u)for(let n of[`/Applications`,B(e,`Applications`)]){let e=B(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=c.LOCALAPPDATA;if(e)for(let t of u)for(let n of s(t)){let i=B(e,`Programs`,n,l(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of u){let t=`/opt/${e.productName}`;if(r(B(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function fh(e){try{return Di(`npm`,e,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const ph=`━`.repeat(64);function mh(e,t=process.platform){let n=[L(ph),R(`  One more step — remove the OpenKnowledge app itself`),P(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(P(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${N(`OK Desktop`)} — ${e}`),n.push(`    ${N(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${N(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${N(t.label)}`),n.push(`    ${t.instruction}`);return n.push(L(ph)),n.join(`
+`)}function hh(e){return H(e,`..`,`..`)}function gh(e){return U(B(e,`.ok`))}async function _h(e){let t=e.findRoot??Cn,n=e.readRecents??Kn,r=t(e.cwd)?.rootPath??null,i=ur({home:e.home,platformName:e.platform,env:e.env}),a=new Set;for(let e of n(i))a.add(H(e.path));let o=new Set(e.lockDirs.map(hh));for(let e of o)a.add(e);r&&a.delete(r);let s=[];r&&gh(r)&&s.push({path:r,running:o.has(r),current:!0});for(let e of a)gh(e)&&s.push({path:e,running:o.has(e),current:!1});return s.length===0?[]:e.allProjects?s.map(e=>e.path):e.yes||e.dryRun||!(e.isTTY??process.stdout.isTTY)?[]:(e.promptFn??vh)(s)}async function vh(e){return wr({message:`Also remove OpenKnowledge from these projects? (space to toggle; none selected by default)
   Removes each project's .ok/ config, editor MCP entries, and OK edit-history
   (.git/ok/). Your markdown content is kept — \`ok start\` re-adds OK later.
-`,required:!1,theme:{icon:{checked:`[x]`,unchecked:`[ ]`}},choices:e.map(e=>({name:`${e.path}${e.current?`  (current)`:``}${e.running?`  (running — will be stopped)`:``}`,value:e.path,checked:!1}))})}function yh(e,t){let{protocolScheme:n}=O[ii(e,t)];return P(`The ${n}:// URL scheme deregisters itself once the app is removed — no action needed.`)}async function bh(e={}){let t=e.home??Yi(),n=e.platform??process.platform,r=e.env??process.env,i=e.execPath??process.execPath,a=H(e.cwd??process.cwd()),o=e.host??`github.com`,s=e.purgeContent??!1,c=e.deps?.discoverLockDirs??xt,l=e.deps?.resolveRecentProjects??_h,u=e.deps?.detectInstallMethods??dh,d=await c(),f=Mc({home:t,platform:n,env:r,host:o,lockDirs:d,marker:mr(t),recentDeinitProjectRoots:await l({home:t,platform:n,env:r,cwd:a,lockDirs:d,yes:e.yes,allProjects:e.allProjects,dryRun:e.dryRun,isTTY:e.isTTY}),purgeContent:s}),p=await Lc(f,e.deps?.probeClients),m=p.length>0?`\n\n${p.map(e=>L(e)).join(`
-`)}`:``,h=P("Individual projects are only removed when you select them (or pass --all-projects). To remove OpenKnowledge from one project, run `ok deinit` inside it."),g=()=>mh(u(t,e.argv1??process.argv[1],void 0,void 0,{platform:n,env:r,execPath:i}),n);if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(qc(f,p),null,2):[R(`Would remove (dry-run — no changes made):`),``,`${Wc(f)}${m}`,``,h,``,g()].join(`
-`),exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${I(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes){if(!(e.isTTY??process.stdout.isTTY))return{status:`cancelled`,message:`${I(`Aborted:`)} refusing to uninstall non-interactively without --yes.`,exitCode:1};if(process.stderr.write(`${R(`This will remove OpenKnowledge from your machine:`)}\n\n${Wc(f)}${m}\n\n${L(`This cannot be undone.`)}\n\n`),!await Cc(`${R(`Remove all of the above?`)} ${P(`[y/N] `)}`,e.confirmStream))return{status:`cancelled`,message:P(`Cancelled. Nothing was removed.`),exitCode:0}}let _=await Ic(f,{env:e.env??(e.home===void 0?process.env:{}),...e.deps?.runRemovalDeps}),v=_.failed.length===0?async()=>{await uh({stdinIsTTY:e.isStdinTTY,stdoutIsTTY:e.isTTY,yes:e.yes,json:e.json,appVersion:bi,platform:n,...e.deps?.feedback})}:void 0,y=[e.json?JSON.stringify(Jc(`uninstall`,_,p),null,2):Kc(_)];return e.json||(y.push(``,h,yh(r,i)),_.failed.length===0&&y.push(``,F(`OpenKnowledge's files have been removed from this machine.`)),y.push(``,g())),{status:_.failed.length>0?`failed`:`done`,message:y.join(`
-`),exitCode:+(_.failed.length>0),runFeedbackAfterReport:v}}function xh(){return new M(`uninstall`).description(`Remove OpenKnowledge from your machine — credentials, PATH entries, editor MCP configs, skill bundles, app data, and ~/${O.stable.userHomeDirName} (~/${O.beta.userHomeDirName} on Beta). Keeps your markdown content and your authored skills (~/.ok/skills) unless --purge-content, and always keeps ${Oc(!0)}, shared by every channel. Detects the app install and prints how to remove it; never self-deletes.`).option(`-y, --yes`,`Skip the confirmation prompt (removes the global footprint only; add --all-projects to also deinit projects)`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).option(`--purge-content`,`Also remove user-authored content (~/.ok/skills, shared by every channel); still keeps ${Oc(!0)}`).option(`--all-projects`,`Also deinit every recent/running project (by default no project is removed — you pick them interactively)`).action(async e=>{let t=await bh({yes:e.yes,dryRun:e.dryRun,json:e.json,purgeContent:e.purgeContent,allProjects:e.allProjects});process.stdout.write(`${t.message}\n`),await t.runFeedbackAfterReport?.(),t.exitCode!==0&&(process.exitCode=t.exitCode)})}function Sh(e){return[e,`Copyright (C) 2026 Inkeep, Inc.`,`License GPL-3.0-or-later: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.`,`This is free software: you are free to change and redistribute it.`,`There is NO WARRANTY, to the extent permitted by law.`].join(`
-`)}process.argv.includes(`--no-color`)?(process.env.NO_COLOR=`1`,delete process.env.FORCE_COLOR):process.argv.includes(`--color`)&&(process.env.FORCE_COLOR=`1`,delete process.env.NO_COLOR),Vn();const Q=new M;let $;Q.name(`open-knowledge`).description(`Local-first knowledge base with CRDT collaboration`).usage(`[options] [file | command]`).version(Sh(bi)).option(`--cwd <path>`,`Working directory`).option(`--log-level <level>`,`Log level: silent, error, warn, info (default), debug, trace`,`info`).option(`--no-color`,`Disable color output`).option(`--color`,`Force color output`).hook(`preAction`,e=>{let t=e.opts().cwd;if(t!==void 0&&process.chdir(t),Q.getOptionValueSource(`logLevel`)===`cli`){let e=String(Q.opts().logLevel);process.env.LOG_LEVEL=e,process.env.OK_CONSOLE_LEVEL=e}let n=e.args?.[0],i=$n(n,process.cwd());i!==null&&(Zn(process.cwd()),process.chdir(i),console.error(`[ok] Using OpenKnowledge project at ${i}`));let a;try{let e=Si(i??t);if(a=e.config,pc(n))for(let t of e.diagnostics)t.code===`REMOVED_KEY`&&console.error(`[ok] ${r(t)}`);for(let t of e.ignoredCommittedKeys)console.error(`[ok] ${S(t)}`)}catch(e){if(n===`uninstall`||n===`deinit`)console.error(`[ok] project config could not be loaded; ${n} will use defaults: ${e instanceof Error?e.message:String(e)}`),a=Rn.parse({});else throw e}$=a;let o=e.args?.[0]??e.name()??`cli`;$r({command:o,cwd:process.cwd(),configuredProjectName:a.project?.name??void 0})}),Q.action(async()=>{let e=si(ci());if(e.available){ai({spawn:ki},e);return}await yi($,{})});const Ch=vi(()=>$);Q.addCommand(Ch);const wh=xf(()=>$);Q.addCommand(wh),Q.addCommand(Jr()),Q.addCommand(vm()),Q.addCommand(bp()),Q.addCommand(Sc(),{hidden:!0}),Q.addCommand(um()),Q.addCommand(eh());const Th=jp(()=>$);Q.addCommand(Th),Q.addCommand(da(()=>$)),Q.addCommand(va(()=>$));const Eh=new M(`ui`).description("Removed: the editor UI is served by `ok start`").allowUnknownOption().allowExcessArguments().argument(`[args...]`).action(()=>{console.error("`ok ui` was removed — the editor UI is served by the project server. Run `ok start` instead."),process.exit(1)});Q.addCommand(Eh,{hidden:!0}),Q.addCommand(Ap()),Q.addCommand(hr(()=>$)),Q.addCommand(ws(()=>$)),Q.addCommand(oh(()=>$)),Q.addCommand(Xc()),Q.addCommand(xh()),Q.addCommand(cr()),Q.addCommand(Il()),Q.addCommand(xs()),Q.addCommand(mc()),Q.addCommand(ys(ui)),Q.addCommand(Zl()),Q.addCommand(tc(()=>$)),Q.addCommand(qp(()=>$)),Q.addCommand(Yp(()=>$)),Q.addCommand(Jp(()=>$)),Q.addCommand(Im()),Q.addCommand(Wm()),Q.addHelpText(`after`,`
+`,required:!1,theme:{icon:{checked:`[x]`,unchecked:`[ ]`}},choices:e.map(e=>({name:`${e.path}${e.current?`  (current)`:``}${e.running?`  (running — will be stopped)`:``}`,value:e.path,checked:!1}))})}function yh(e,t){let{protocolScheme:n}=fe[ii(e,t)];return P(`The ${n}:// URL scheme deregisters itself once the app is removed — no action needed.`)}async function bh(e={}){let t=e.home??Xi(),n=e.platform??process.platform,r=e.env??process.env,i=e.execPath??process.execPath,a=H(e.cwd??process.cwd()),o=e.host??`github.com`,s=e.purgeContent??!1,c=e.deps?.discoverLockDirs??Ge,l=e.deps?.resolveRecentProjects??_h,u=e.deps?.detectInstallMethods??dh,d=await c(),f=Nc({home:t,platform:n,env:r,host:o,lockDirs:d,marker:mr(t),recentDeinitProjectRoots:await l({home:t,platform:n,env:r,cwd:a,lockDirs:d,yes:e.yes,allProjects:e.allProjects,dryRun:e.dryRun,isTTY:e.isTTY}),purgeContent:s}),p=await Rc(f,e.deps?.probeClients),m=p.length>0?`\n\n${p.map(e=>L(e)).join(`
+`)}`:``,h=P("Individual projects are only removed when you select them (or pass --all-projects). To remove OpenKnowledge from one project, run `ok deinit` inside it."),g=()=>mh(u(t,e.argv1??process.argv[1],void 0,void 0,{platform:n,env:r,execPath:i}),n);if(e.dryRun)return{status:`dry-run`,message:e.json?JSON.stringify(Jc(f,p),null,2):[R(`Would remove (dry-run — no changes made):`),``,`${Gc(f)}${m}`,``,h,``,g()].join(`
+`),exitCode:0};if(e.json&&!e.yes)return{status:`failed`,message:`${I(`Error:`)} --json requires --yes (or --dry-run) so there is no interactive prompt.`,exitCode:1};if(!e.yes){if(!(e.isTTY??process.stdout.isTTY))return{status:`cancelled`,message:`${I(`Aborted:`)} refusing to uninstall non-interactively without --yes.`,exitCode:1};if(process.stderr.write(`${R(`This will remove OpenKnowledge from your machine:`)}\n\n${Gc(f)}${m}\n\n${L(`This cannot be undone.`)}\n\n`),!await wc(`${R(`Remove all of the above?`)} ${P(`[y/N] `)}`,e.confirmStream))return{status:`cancelled`,message:P(`Cancelled. Nothing was removed.`),exitCode:0}}let _=await Lc(f,{env:e.env??(e.home===void 0?process.env:{}),...e.deps?.runRemovalDeps}),v=_.failed.length===0?async()=>{await uh({stdinIsTTY:e.isStdinTTY,stdoutIsTTY:e.isTTY,yes:e.yes,json:e.json,appVersion:bi,platform:n,...e.deps?.feedback})}:void 0,y=[e.json?JSON.stringify(Yc(`uninstall`,_,p),null,2):qc(_)];return e.json||(y.push(``,h,yh(r,i)),_.failed.length===0&&y.push(``,F(`OpenKnowledge's files have been removed from this machine.`)),y.push(``,g())),{status:_.failed.length>0?`failed`:`done`,message:y.join(`
+`),exitCode:+(_.failed.length>0),runFeedbackAfterReport:v}}function xh(){return new M(`uninstall`).description(`Remove OpenKnowledge from your machine — credentials, PATH entries, editor MCP configs, skill bundles, app data, and ~/${fe.stable.userHomeDirName} (~/${fe.beta.userHomeDirName} on Beta). Keeps your markdown content and your authored skills (~/.ok/skills) unless --purge-content, and always keeps ${kc(!0)}, shared by every channel. Detects the app install and prints how to remove it; never self-deletes.`).option(`-y, --yes`,`Skip the confirmation prompt (removes the global footprint only; add --all-projects to also deinit projects)`).option(`--dry-run`,`Print the removal plan and exit without changing anything`).option(`--json`,`Emit a machine-readable plan/outcome (requires --yes or --dry-run)`).option(`--purge-content`,`Also remove user-authored content (~/.ok/skills, shared by every channel); still keeps ${kc(!0)}`).option(`--all-projects`,`Also deinit every recent/running project (by default no project is removed — you pick them interactively)`).action(async e=>{let t=await bh({yes:e.yes,dryRun:e.dryRun,json:e.json,purgeContent:e.purgeContent,allProjects:e.allProjects});process.stdout.write(`${t.message}\n`),await t.runFeedbackAfterReport?.(),t.exitCode!==0&&(process.exitCode=t.exitCode)})}function Sh(e){return[e,`Copyright (C) 2026 Inkeep, Inc.`,`License GPL-3.0-or-later: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.`,`This is free software: you are free to change and redistribute it.`,`There is NO WARRANTY, to the extent permitted by law.`].join(`
+`)}process.argv.includes(`--no-color`)?(process.env.NO_COLOR=`1`,delete process.env.FORCE_COLOR):process.argv.includes(`--color`)&&(process.env.FORCE_COLOR=`1`,delete process.env.NO_COLOR),At();const Q=new M;let $;Q.name(`open-knowledge`).description(`Local-first knowledge base with CRDT collaboration`).usage(`[options] [file | command]`).version(Sh(bi)).option(`--cwd <path>`,`Working directory`).option(`--log-level <level>`,`Log level: silent, error, warn, info (default), debug, trace`,`info`).option(`--no-color`,`Disable color output`).option(`--color`,`Force color output`).hook(`preAction`,e=>{let t=e.opts().cwd;if(t!==void 0&&process.chdir(t),Q.getOptionValueSource(`logLevel`)===`cli`){let e=String(Q.opts().logLevel);process.env.LOG_LEVEL=e,process.env.OK_CONSOLE_LEVEL=e}let n=e.args?.[0],r=$n(n,process.cwd());r!==null&&(Zn(process.cwd()),process.chdir(r),console.error(`[ok] Using OpenKnowledge project at ${r}`));let i;try{let e=Si(r??t);if(i=e.config,mc(n))for(let t of e.diagnostics)t.code===`REMOVED_KEY`&&console.error(`[ok] ${E(t)}`);for(let t of e.ignoredCommittedKeys)console.error(`[ok] ${_(t)}`)}catch(e){if(n===`uninstall`||n===`deinit`)console.error(`[ok] project config could not be loaded; ${n} will use defaults: ${e instanceof Error?e.message:String(e)}`),i=Ln.parse({});else throw e}$=i;let a=e.args?.[0]??e.name()??`cli`;$r({command:a,cwd:process.cwd(),configuredProjectName:i.project?.name??void 0})}),Q.action(async()=>{let e=si(ci());if(e.available){ai({spawn:ki},e);return}await yi($,{})});const Ch=vi(()=>$);Q.addCommand(Ch);const wh=Sf(()=>$);Q.addCommand(wh),Q.addCommand(Jr()),Q.addCommand(vm()),Q.addCommand(xp()),Q.addCommand(Cc(),{hidden:!0}),Q.addCommand(um()),Q.addCommand(eh());const Th=Mp(()=>$);Q.addCommand(Th),Q.addCommand(fa(()=>$)),Q.addCommand(ya(()=>$));const Eh=new M(`ui`).description("Removed: the editor UI is served by `ok start`").allowUnknownOption().allowExcessArguments().argument(`[args...]`).action(()=>{console.error("`ok ui` was removed — the editor UI is served by the project server. Run `ok start` instead."),process.exit(1)});Q.addCommand(Eh,{hidden:!0}),Q.addCommand(jp()),Q.addCommand(hr(()=>$)),Q.addCommand(Ts(()=>$)),Q.addCommand(oh(()=>$)),Q.addCommand(Zc()),Q.addCommand(xh()),Q.addCommand(cr()),Q.addCommand(Ll()),Q.addCommand(Ss()),Q.addCommand(hc()),Q.addCommand(bs(ui)),Q.addCommand(Ql()),Q.addCommand(nc(()=>$)),Q.addCommand(qp(()=>$)),Q.addCommand(Yp(()=>$)),Q.addCommand(Jp(()=>$)),Q.addCommand(Im()),Q.addCommand(Wm()),Q.addHelpText(`after`,`
 Examples:
   ok                       Launch the desktop app (or start a local server if it isn't installed)
   ok notes.md              Open a single markdown file in the editor