@inkeep/open-knowledge 0.86.15 → 0.86.16

package/dist/assets/skills/project/references/media-and-assets.md

@@ -3,7 +3,7 @@
 - **Markdown syntax only:** `![alt text](./path/to/image.png)`. Do NOT emit HTML `<img>` tags — they don't participate in OK's content graph and don't render consistently across Fumadocs / preview surfaces. Paths resolve relative to the doc.
 - **Always a doc-relative path — never a server URL.** Reference an asset by its path relative to the doc (`./image.png`, `../assets/foo.png`), never an absolute `http://localhost:<port>/…`, `127.0.0.1`, or other server URL. `preview_url`'s `url` navigates the *preview* — it is NOT an asset path; never paste it (or any `localhost` base) into an `![]()`. An asset already in the tree is the same rule: find its path with `exec("ls -A <dir>")` and write the relative link. (Upload via `write({ asset })` hands you the exact relative `![alt](ref)` to copy.)
 - **Save locally, don't hot-link.** Hot-linked external image URLs rot when the source disappears. Fetch it through the ingest procedure in `references/ingest-and-sources.md` (SSRF-safe fetch flags, size + executable-extension gates, wrapper frontmatter) — never an ad-hoc `WebFetch` / `curl` into the tree — then reference the local file via a relative markdown link and cite the ingested wrapper below.
-- **Placement model.** Free-form image embeds → co-located alongside the referencing doc (sha256 same-directory dedup). Raw sources via `ingest` → `external-sources/<slug>.<ext>` + `external-sources/<slug>.md` (the wrapper-binary pair). Check via `exec("ls -A")` if the project uses a different convention.
+- **Placement model.** Free-form image embeds → co-located alongside the referencing doc (sha256 same-directory dedup): give `write({ asset })` a `path` in that doc's folder, because a bare file name goes to the attachment folder (`content.attachmentFolderPath`, by default the content root). Raw sources via `ingest` → `external-sources/<slug>.<ext>` + `external-sources/<slug>.md` (the wrapper-binary pair). Check via `exec("ls -A")` if the project uses a different convention.
 - **Cannot fetch** (no network, paywall) → don't invent a local path. Omit, or mark inline `(TODO: image needs sourcing from <URL>)`.
 - **Meaningful alt text required** — describes WHAT the image shows, not what it is. `![]()` / `![image]()` / `![filename.png]()` all fail. OK indexes alt text — it's both accessibility AND searchability.
 - **Cite web image sources** below the image (Grounding rule):

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$l as t,Ba as n,Bc as r,Cf as i,Cl as a,Dd as o,Df as s,Ed as c,Ef as l,F as u,Hd as d,Js as f,Ju as p,Lc as m,Ld as h,Lo as g,N as _,Nd as v,Od as y,Of as b,Pr as x,Ql as S,Rc as C,Ro as ee,Sf as w,So as te,Uc as ne,X as re,Xc as ie,Xs as ae,Ya as oe,Yl as se,Ys as ce,Zi as le,Zl as ue,_c as de,bd as T,bf as fe,df as pe,ef as me,eu as he,hd as ge,hf as _e,jc as E,jo as ve,ka as ye,kd as D,m as be,oc as xe,of as Se,p as Ce,pl as we,po as Te,q as Ee,qa as De,qc as Oe,r as ke,rf as Ae,sc as je,ta as Me,tc as Ne,tl as Pe,uf as Fe,ul as Ie,us as Le,uu as Re,vo as ze,wo as Be,xd as O,yd as Ve,yf as He,zo as Ue}from"./md-manager-BGnqyqi1-B6Vk34FK.mjs";import{$i as We,$n as Ge,$o as k,$t as Ke,Ao as A,As as qe,Bo as Je,Br as Ye,Ca as Xe,Cn as Ze,Cr as Qe,Da as $e,Dn as et,Dt as tt,Ea as j,Et as nt,F as rt,Fn as it,Ga as at,Gt as ot,Hi as st,Ho as ct,Ht as lt,Ii as ut,Ir as dt,Ja as ft,Jr as pt,Kt as mt,Li as ht,Lo as gt,Ma as _t,Mt as vt,Nn as yt,No as bt,Nr as xt,O as St,On as Ct,Qi as wt,Qo as Tt,R as Et,Ri as Dt,Si as Ot,Sn as kt,So as At,T as jt,Ta as Mt,Tt as Nt,U as Pt,Ui as Ft,Un as It,Uo as Lt,Vo as Rt,Vr as zt,Vt as Bt,Wa as Vt,Wi as Ht,Wo as Ut,Wt,X as Gt,Xr as Kt,Zi as qt,Zo as Jt,_t as Yt,ca as Xt,ci as Zt,d as Qt,ds as $t,ei as en,es as tn,fn as nn,fs as rn,ga as an,gr as on,hn as sn,hr as cn,ir as ln,is as un,jt as dn,kn as fn,li as pn,ls as mn,lt as hn,m as gn,mt as _n,nn as vn,nr as yn,ns as bn,oa as xn,os as Sn,pr as Cn,ps as wn,pt as Tn,ra as En,rr as Dn,rs as On,sa as kn,ts as An,us as jn,va as Mn,wa as Nn,wi as Pn,ws as Fn,wt as In,x as Ln,xi as Rn,xn as zn,ya as Bn,yr as Vn,yt as Hn,z as Un,zi as Wn,zo as Gn}from"./dist-CerHybyM.mjs";import{A as Kn,C as qn,D as Jn,E as Yn,M as Xn,N as Zn,O as Qn,P as $n,T as er,_ as tr,a as nr,b as rr,c as ir,f as ar,g as or,h as sr,i as cr,j as lr,k as ur,m as dr,n as fr,o as pr,p as mr,r as hr,s as gr,t as _r,u as vr,v as yr,w as br,x as xr,y as Sr}from"./src-P3X9-4mK.mjs";import{B as Cr,Ct as M,D as wr,E as Tr,F as Er,G as Dr,H as Or,I as kr,J as Ar,K as jr,M as Mr,O as Nr,St as Pr,U as Fr,W as Ir,X as Lr,Z as Rr,_t as zr,bt as Br,ft as Vr,gt as Hr,ht as Ur,j as Wr,mt as Gr,pt as Kr,q as qr,u as Jr,vt as Yr,xt as Xr,yt as Zr}from"./init-D_Mnfn9S.mjs";import{C as Qr,T as $r,_ as ei,b as ti,d as ni,f as ri,g as ii,m as ai,o as oi,p as si,u as ci,v as li,w as ui,x as di,y as fi}from"./registry-probes-xhAfEfyJ.mjs";import{c as pi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as mi,r as hi,t as gi}from"./dist-bundle-T0gq9zHH.mjs";import{E as _i,S as vi,y as yi}from"./start-W6HfLGEn.mjs";import{n as bi,t as xi}from"./constants-Big4uVC4.mjs";import{n as Si,t as Ci}from"./loader-EPi5ZErh.mjs";import{t as wi}from"./removal-file-path-Cck6aRSq.mjs";import{t as Ti}from"./launch-json-removal-DF78Zb2V.mjs";import{execFile as Ei,execFileSync as Di,execSync as Oi,spawn as ki,spawnSync as Ai}from"node:child_process";import{basename as ji,dirname as z,isAbsolute as Mi,join as B,posix as Ni,relative as V,resolve as H,sep as Pi}from"node:path";import Fi from"node:process";import{fileURLToPath as Ii}from"node:url";import{accessSync as Li,appendFileSync as Ri,closeSync as zi,constants as Bi,existsSync as U,lstatSync as Vi,mkdirSync as Hi,mkdtempSync as Ui,readFileSync as W,readdirSync as Wi,realpathSync as Gi,renameSync as Ki,rmSync as qi,statSync as G,unlinkSync as Ji,writeFileSync as Yi}from"node:fs";import{homedir as Xi,platform as Zi,tmpdir as Qi}from"node:os";import{realpath as $i,rm as ea}from"node:fs/promises";import{randomUUID as ta}from"node:crypto";import{promisify as na}from"node:util";import{setTimeout as ra}from"node:timers/promises";import{createInterface as ia}from"node:readline/promises";const aa={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var oa;oa||={};function sa(e){return d(ge,e)}function ca(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function la(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=e.resolvedScope===void 0?an(i,n):{ok:!0,scope:e.resolvedScope};if(!o.ok)throw Error(o.title);let s=o.scope,c=[],l=yt({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=Ze(t,r,d),p=ze(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},_=new Map,v=e=>{let t=z(e),r=_.get(t);if(r)return r;let i=$e(n,e,d),a=kt(f,i);return _.set(t,a),a},y=[],b=!1,x=V(n,s.path),S=x.split(Pi).some(e=>e.startsWith(`.`)&&e!==`..`);s.kind===`file`?y.push(x):(x===``||S||!l.isDirExcluded(x))&&C(s.path);function C(e){let t;try{t=Wi(e,{withFileTypes:!0})}catch(t){b=!0,c.push(`could not read directory ${V(n,e)||`.`}: ${da(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(l.isDirExcluded(i))continue;C(t)}else if(r.isFile()){if(!ua(r.name)||l.isExcluded(i))continue;y.push(i)}}}y.sort(),y.length===0&&!b&&c.push(De);let ee=[],w=0,ne=0,re=0;for(let e of y){let t=B(n,e),r;try{r=W(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${da(t)}`);continue}let i=v(e),o=!1;if(a&&i.enabled){let n=te(r,i,e,h);if(n!==r){let i=tn(t);try{Yi(i,n,`utf-8`),Ki(i,t),r=n,o=!0,re++}catch(t){try{Ji(i)}catch{}c.push(`could not write fix to ${e}: ${da(t)}`)}}}let s=await ve(r,i,e,h);for(let e of s)e.severity===`error`?w++:ne++;ee.push({file:e,diagnostics:s,fixed:o})}return c.push(...g(m)),{contentDir:n,files:ee,warnings:c,fileCount:y.length,errorCount:w,warningCount:ne,fixedCount:re,ran:p}}function ua(e){let t=e.toLowerCase();return je.some(e=>t.endsWith(e))}function da(e){return e instanceof Error?e.message:String(e)}function fa(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Bn(r,i),o=t===void 0?void 0:pa(t,Xn()),s=an(o,a);if(!s.ok){let e={type:`urn:ok:error:not-found`,title:t===void 0||s.path===a?s.title:Ke(t),status:404,instance:`urn:uuid:${ta()}`};n.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let c=r.contentRules,l=await la({projectDir:i,contentDir:a,baseConfig:c?ee(c):oe,targetPath:o,resolvedScope:s.scope,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${ga(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:ma(l))&&(process.exitCode=1)})}function pa(e,t){return H(t,e)}function ma(e){return e.errorCount>0||e.warningCount>0}function ha(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ga(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ha(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=Ue(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(Be(n)?P(n):L(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$l as t,Ba as n,Bc as r,Cf as i,Cl as a,Dd as o,Df as s,Ed as c,Ef as l,F as u,Hd as d,Js as f,Ju as p,Lc as m,Ld as h,Lo as g,N as _,Nd as v,Od as y,Of as b,Pr as x,Ql as S,Rc as C,Ro as ee,Sf as w,So as te,Uc as ne,X as re,Xc as ie,Xs as ae,Ya as oe,Yl as se,Ys as ce,Zi as le,Zl as ue,_c as de,bd as T,bf as fe,df as pe,ef as me,eu as he,hd as ge,hf as _e,jc as E,jo as ve,ka as ye,kd as D,m as be,oc as xe,of as Se,p as Ce,pl as we,po as Te,q as Ee,qa as De,qc as Oe,r as ke,rf as Ae,sc as je,ta as Me,tc as Ne,tl as Pe,uf as Fe,ul as Ie,us as Le,uu as Re,vo as ze,wo as Be,xd as O,yd as Ve,yf as He,zo as Ue}from"./md-manager-BGnqyqi1-DRBNLmLZ.mjs";import{$i as We,$n as Ge,$o as k,$t as Ke,Ao as A,As as qe,Bo as Je,Br as Ye,Ca as Xe,Cn as Ze,Cr as Qe,Da as $e,Dn as et,Dt as tt,Ea as j,Et as nt,F as rt,Fn as it,Ga as at,Gt as ot,Hi as st,Ho as ct,Ht as lt,Ii as ut,Ir as dt,Ja as ft,Jr as pt,Kt as mt,Li as ht,Lo as gt,Ma as _t,Mt as vt,Nn as yt,No as bt,Nr as xt,O as St,On as Ct,Qi as wt,Qo as Tt,R as Et,Ri as Dt,Si as Ot,Sn as kt,So as At,T as jt,Ta as Mt,Tt as Nt,U as Pt,Ui as Ft,Un as It,Uo as Lt,Vo as Rt,Vr as zt,Vt as Bt,Wa as Vt,Wi as Ht,Wo as Ut,Wt,X as Gt,Xr as Kt,Zi as qt,Zo as Jt,_t as Yt,ca as Xt,ci as Zt,d as Qt,ds as $t,ei as en,es as tn,fn as nn,fs as rn,ga as an,gr as on,hn as sn,hr as cn,ir as ln,is as un,jt as dn,kn as fn,li as pn,ls as mn,lt as hn,m as gn,mt as _n,nn as vn,nr as yn,ns as bn,oa as xn,os as Sn,pr as Cn,ps as wn,pt as Tn,ra as En,rr as Dn,rs as On,sa as kn,ts as An,us as jn,va as Mn,wa as Nn,wi as Pn,ws as Fn,wt as In,x as Ln,xi as Rn,xn as zn,ya as Bn,yr as Vn,yt as Hn,z as Un,zi as Wn,zo as Gn}from"./dist-CvZCvtXe.mjs";import{A as Kn,C as qn,D as Jn,E as Yn,M as Xn,N as Zn,O as Qn,P as $n,T as er,_ as tr,a as nr,b as rr,c as ir,f as ar,g as or,h as sr,i as cr,j as lr,k as ur,m as dr,n as fr,o as pr,p as mr,r as hr,s as gr,t as _r,u as vr,v as yr,w as br,x as xr,y as Sr}from"./src-B4Ppfouc.mjs";import{B as Cr,Ct as M,D as wr,E as Tr,F as Er,G as Dr,H as Or,I as kr,J as Ar,K as jr,M as Mr,O as Nr,St as Pr,U as Fr,W as Ir,X as Lr,Z as Rr,_t as zr,bt as Br,ft as Vr,gt as Hr,ht as Ur,j as Wr,mt as Gr,pt as Kr,q as qr,u as Jr,vt as Yr,xt as Xr,yt as Zr}from"./init-RmBoT2PK.mjs";import{C as Qr,T as $r,_ as ei,b as ti,d as ni,f as ri,g as ii,m as ai,o as oi,p as si,u as ci,v as li,w as ui,x as di,y as fi}from"./registry-probes-CQJWD_N1.mjs";import{c as pi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as mi,r as hi,t as gi}from"./dist-bundle-T0gq9zHH.mjs";import{E as _i,S as vi,y as yi}from"./start-BOXkkd5Z.mjs";import{n as bi,t as xi}from"./constants-CqNABsZB.mjs";import{n as Si,t as Ci}from"./loader-CPblhk01.mjs";import{t as wi}from"./removal-file-path-FZgRZJMq.mjs";import{t as Ti}from"./launch-json-removal-CctovJFV.mjs";import{execFile as Ei,execFileSync as Di,execSync as Oi,spawn as ki,spawnSync as Ai}from"node:child_process";import{basename as ji,dirname as z,isAbsolute as Mi,join as B,posix as Ni,relative as V,resolve as H,sep as Pi}from"node:path";import Fi from"node:process";import{fileURLToPath as Ii}from"node:url";import{accessSync as Li,appendFileSync as Ri,closeSync as zi,constants as Bi,existsSync as U,lstatSync as Vi,mkdirSync as Hi,mkdtempSync as Ui,readFileSync as W,readdirSync as Wi,realpathSync as Gi,renameSync as Ki,rmSync as qi,statSync as G,unlinkSync as Ji,writeFileSync as Yi}from"node:fs";import{homedir as Xi,platform as Zi,tmpdir as Qi}from"node:os";import{realpath as $i,rm as ea}from"node:fs/promises";import{randomUUID as ta}from"node:crypto";import{promisify as na}from"node:util";import{setTimeout as ra}from"node:timers/promises";import{createInterface as ia}from"node:readline/promises";const aa={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var oa;oa||={};function sa(e){return d(ge,e)}function ca(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function la(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=e.resolvedScope===void 0?an(i,n):{ok:!0,scope:e.resolvedScope};if(!o.ok)throw Error(o.title);let s=o.scope,c=[],l=yt({projectDir:t,contentDir:n}),u=new Set,d=e=>{u.has(e)||(u.add(e),c.push(e))},f=Ze(t,r,d),p=ze(f,{mode:`lint`}),m=[],h=e=>{m.push(e)},_=new Map,v=e=>{let t=z(e),r=_.get(t);if(r)return r;let i=$e(n,e,d),a=kt(f,i);return _.set(t,a),a},y=[],b=!1,x=V(n,s.path),S=x.split(Pi).some(e=>e.startsWith(`.`)&&e!==`..`);s.kind===`file`?y.push(x):(x===``||S||!l.isDirExcluded(x))&&C(s.path);function C(e){let t;try{t=Wi(e,{withFileTypes:!0})}catch(t){b=!0,c.push(`could not read directory ${V(n,e)||`.`}: ${da(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(l.isDirExcluded(i))continue;C(t)}else if(r.isFile()){if(!ua(r.name)||l.isExcluded(i))continue;y.push(i)}}}y.sort(),y.length===0&&!b&&c.push(De);let ee=[],w=0,ne=0,re=0;for(let e of y){let t=B(n,e),r;try{r=W(t,`utf-8`)}catch(t){c.push(`could not read ${e}: ${da(t)}`);continue}let i=v(e),o=!1;if(a&&i.enabled){let n=te(r,i,e,h);if(n!==r){let i=tn(t);try{Yi(i,n,`utf-8`),Ki(i,t),r=n,o=!0,re++}catch(t){try{Ji(i)}catch{}c.push(`could not write fix to ${e}: ${da(t)}`)}}}let s=await ve(r,i,e,h);for(let e of s)e.severity===`error`?w++:ne++;ee.push({file:e,diagnostics:s,fixed:o})}return c.push(...g(m)),{contentDir:n,files:ee,warnings:c,fileCount:y.length,errorCount:w,warningCount:ne,fixedCount:re,ran:p}}function ua(e){let t=e.toLowerCase();return je.some(e=>t.endsWith(e))}function da(e){return e instanceof Error?e.message:String(e)}function fa(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(t,n)=>{let r=e(),i=process.cwd(),a=Bn(r,i),o=t===void 0?void 0:pa(t,Xn()),s=an(o,a);if(!s.ok){let e={type:`urn:ok:error:not-found`,title:t===void 0||s.path===a?s.title:Ke(t),status:404,instance:`urn:uuid:${ta()}`};n.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let c=r.contentRules,l=await la({projectDir:i,contentDir:a,baseConfig:c?ee(c):oe,targetPath:o,resolvedScope:s.scope,fix:n.fix===!0});n.json===!0?process.stdout.write(`${JSON.stringify(l,null,2)}\n`):process.stdout.write(`${ga(l)}\n`),(n.errorsOnly===!0?l.errorCount>0:ma(l))&&(process.exitCode=1)})}function pa(e,t){return H(t,e)}function ma(e){return e.errorCount>0||e.warningCount>0}function ha(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ga(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ha(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=Ue(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(Be(n)?P(n):L(`! ${n}`))}return t.join(`
 `)}const _a={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)},va=D({title:v().optional(),error:v().optional(),message:v().optional()});function ya(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await ba(t,n,e(),process.cwd(),Xn());r!==0&&(process.exitCode=r)})}async function ba(e,t,n,r,i,a=_a){let o=Bn(n,r),s;if(e!==void 0){let t=xa(e,i,o);if(t===null){if(an(void 0,o).ok)return a.err(`Path is outside the content directory (${o}): ${e}`),1}else s=t===``?void 0:t}let c=wt(j(r));if(!c||c.port<=0)return a.err("OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with `ok start` (or open OK Desktop) and re-run. For headless lint-only checks, use `ok lint`."),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:qe({kind:`cli`,runtimeVersion:hn})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>null),n=Le.safeParse(e);if(n.success)t.json===!0?a.out(JSON.stringify(n.data,null,2)):a.err(`Audit failed: ${n.data.title}`);else{let t=va.safeParse(e),n=t.success?t.data.title??t.data.error??t.data.message:void 0;a.err(`Audit failed: ${n??`server responded with ${d.status}`}`)}return 1}let f=Te.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;if(t.json===!0)a.out(JSON.stringify(p,null,2));else{let e=p.brokenLinkSuppression?on(p.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([ga(Sa(p)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function xa(e,t,n){let r=V(n,H(t,e));return r===``?``:r.startsWith(`..`)||Mi(r)?null:r.split(Pi).join(`/`)}function Sa(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function Ca(e,t,n,r){let i=wa(await Ta(e)),a=i.host??``,o=e=>e.replace(/[\r\n]/g,``);if(!a)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;if(i.protocol!==void 0&&i.protocol!==`https`)return r?.log?.warn({host:a,protocol:i.protocol,outcome:`insecure-protocol`,backend:n.backend},`[auth] git-credential get`),1;let s=ue(a,i.protocol),c=process.env.OK_GH_TOKEN,l=process.env.OK_GH_TOKEN_HOST;if(c&&l&&ue(l)===s)return r?.log?.debug({host:a,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${o(c)}\n`),0;let u=await n.get(s)??(s===a?null:await n.get(a)),d=r?.getDiag?.(),f=u==null?d?.kind??`absent`:`found`;if(r?.log){let e={host:a,outcome:f,backend:n.backend,...d?.error?{keychainError:d.error}:{}};f===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return u==null?1:(t.write(`username=${o(u.login)}\npassword=${o(u.token)}\n`),0)}function wa(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ta(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Ea(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await Ca(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await cn(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await cn(n),process.exit(1)}}),n}function Da(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function Oa(e,t,n){let r={baseUrl:Da(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new mi(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function ka(e){let t=e.request||gi,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),Oa(t,`POST /login/device/code`,n)}async function Aa(e){let t=await Oa(e.request||gi,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=ja(e,t.data.expires_in),n.refreshTokenExpiresAt=ja(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function ja(e,t){return new Date(e+t*1e3).toISOString()}async function Ma(e,t){let n=Na(e,t.auth);if(n)return n;let{data:r}=await ka({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Fa(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Na(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Pa(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Fa(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await Aa({...i,clientType:`oauth-app`}):await Aa({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Pa(r.interval),Fa(e,t,n,r);if(a===`slow_down`)return await Pa(r.interval+7),Fa(e,t,n,r);throw i}}async function Ia(e,t){return Ma(e,{auth:t})}async function La(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Ma(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var Ra=`0.0.0-development`;function za(e){let t=e.request||gi.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${Ra} ${hi()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(Ia.bind(null,i),{hook:La.bind(null,i)})}async function Ba(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=za({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function Va(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function Ha(){let e=process.cwd();return Cn(e)?.rootPath??e}function Ua(e){return`${ne(`global.yml`)}:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function Wa(e){return`  ok auth token --host ${e} --username <username>`}function Ga(e){return`If ${e} is not a GitHub host, store an access token for git with:\n\n${Wa(e)}\n`}function Ka(e){return`${I(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${Ua(e)}\n`+Ga(e)}function qa(e){return t(e,Ft())}function Ja(e){return qa(e)?null:Ka(he(e))}function Ya(e){let t=Ja(e);t!==null&&(process.stderr.write(t),process.exit(1))}function Xa(e,t){if(e===null)return`${I(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\nPass --host <hostname> to target a GitHub host explicitly.
@@ -10,10 +10,10 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$l as t,Ba as n,Bc as
 `),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new Qo({auth:a,...o?{baseUrl:o}:{}}),c=`unknown`,l,u;try{let{data:e}=await s.users.getAuthenticated();c=e.login,l=e.name??void 0,u=e.email??void 0}catch(e){let t=ts(e,r).message;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}try{await t.set(r,c,a,{gitProtocol:`https`,name:l,email:u})}catch(e){let t=`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}i?process.stdout.write(`${JSON.stringify({type:`complete`,host:r,login:c})}\n`):process.stderr.write(`✓ PAT stored for ${c} on ${r}\n`)}function is(e){return new M(`pat`).description(`Store a Personal Access Token`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=Qa(t.host),r=t.tokenStdin?ns:void 0;await rs({host:n,json:t.json},await e(),r)})}async function as(e,t,n=_i){let r=n(e);return r.available&&r.token?r.token:(await t.get(e))?.token??null}async function os(e,t){let{host:n,json:r}=e,i=await as(n,t);i??(process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=new Qo({auth:i,...a?{baseUrl:a}:{}}),s=[];for await(let e of o.paginate.iterator(o.repos.listForAuthenticatedUser,{per_page:100,sort:`updated`}))for(let t of e.data)s.push({full_name:t.full_name,clone_url:t.clone_url,private:t.private});if(r)process.stdout.write(`${JSON.stringify({type:`repos`,host:n,repos:s})}\n`);else for(let e of s)process.stdout.write(`${e.full_name}  ${e.clone_url}\n`)}function ss(e){return new M(`repos`).description(`List accessible repositories`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Qa(t.host);await os({...t,host:n},await e())})}async function cs(e){let{host:t}=e,{touched:n}=await ti(t);if(n.length===0){process.stderr.write(`Not signed in to ${t}\n`);return}process.stderr.write(`✓ Signed out from ${t}\n`),n.includes(`keychain`)&&process.stderr.write(`  cleared from OS keychain
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ${fi()}\n`)}function ls(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=$a(e.host);await cs({...e,host:t})})}async function us(e,t,n=_i){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function ds(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function fs(e,t){let n=await t.get(e);return n==null?{authenticated:!1}:{authenticated:!1,unverified:!0,login:n.login}}function ps(e,t){return e.unverified===!0?`Token stored for ${e.login} on ${t}. ${t} is not a GitHub host, so OpenKnowledge does not verify it; git uses this credential to push and pull.`:`No token stored for ${t}. Store one with:\n\n${Wa(t)}`}async function ms(e,t){let{host:n,json:r}=e,i=await fs(n,t);r?process.stdout.write(`${JSON.stringify(ds(n,t.backend,i))}\n`):process.stderr.write(`${ps(i,n)}\n`),process.exit(i.unverified===!0?0:1)}async function hs(e,t){let{host:n,json:r}=e,i=t.backend,a=await us(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new Qo({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ts(e,n);r?process.stdout.write(`${JSON.stringify(ds(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function gs(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`Git hostname (default: the origin host, or github.com with no origin; required when origin has no hostname, such as a local path). A non-GitHub host reports its stored token without verifying it`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Za(t.host);if(n.kind===`other`){await ms({...t,host:n.host},await e());return}await hs({...t,host:n.host},await e())})}function _s(e,t){return t?process.stdout.write(`${JSON.stringify(e)}\n`):e.type===`error`?process.stderr.write(`${e.message}\n`):process.stderr.write(`✓ Token stored for ${e.login} on ${e.host}\n`),e}async function vs(e,t,n){let{json:r}=e,i=e.host?.trim()??``;if(!i)return _s({type:`error`,message:`A host is required. Pass --host <host>.`},r);if(!S(i))return _s({type:`error`,message:`${i} is not a host name. Pass the host git connects to, with an optional :port and no scheme or path, for example git.example.com or git.example.com:8443.`},r);let a=ue(i);if(qa(a))return _s({type:`error`,message:`${a} is a GitHub host. Use ok auth pat --host ${a}, which checks the token with GitHub before storing it.`},r);let o=e.username?.trim()??``;if(!o)return _s({type:`error`,message:`A username is required. Pass --username <username>.`},r);let s=await(n??(()=>io({message:`Enter token:`})))();if(!s)return _s({type:`error`,message:`No token provided`},r);try{await t.set(a,o,s,{gitProtocol:`https`})}catch(e){return _s({type:`error`,message:`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`},r)}return _s({type:`complete`,host:a,login:o},r)}function ys(e){return new M(`token`).description(`Store an access token for any git host`).option(`--host <host>`,`Git host to store the token for`).option(`--username <username>`,`Username git sends with the token (Bitbucket: x-bitbucket-api-token-auth for an API token, x-token-auth for a repository or workspace access token; oauth2 for GitLab; your Gitea username; any non-empty value for Azure DevOps)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=t.tokenStdin?ns:void 0;(await vs({host:t.host,username:t.username,json:t.json},await e(),n)).type===`error`&&process.exit(1)})}function bs(e){let t=new M(`auth`);t.description(`Git host authentication management`);let n=e=>di(void 0,e);return t.addCommand(no(n)),t.addCommand(gs(n)),t.addCommand(ss(n)),t.addCommand(ls()),t.addCommand(is(n)),t.addCommand(ys(n)),t.addCommand(Ea(n,e)),t}function xs(e,t=Zi(),n=ei){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[z(e)])}catch{}}function Ss(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await yr({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:xr(),logger:ui()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&xs(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function Cs(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:or(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function ws(e){let t=e.inspect??(()=>tr(e.lockDir,`server`,{isAlive:en})),n=e.unlink??(e=>Ji(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=Cs(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Ts(e){return new M(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),ws({lockDir:j(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Es(e){return`!${e.map(Ae).join(` `)} auth git-credential`}function Ds(e){return`credential.helper=${Es(e)}`}function Os(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Es(e)}`]}async function ks(e,t,n={},r=_i){let i=[`credential.helper=`,Ds(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=(n.credentialHost===void 0?null:await t.get(n.credentialHost))??await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function As(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const js=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Ms(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of js)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function K(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ns(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Ps(e,t=process.env){let n=Ns(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Fs(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Is(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Ls=ce;async function Rs(e){try{return await e.clone(Is(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Ls(t))return e.onFallback(e.branch),await e.clone(Is(null)),{fellBack:!0};throw t}}function zs(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function Bs(e,t,n){return e===`https`&&t===`github.com`&&n}function Vs(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Hs(e){return Vs(e,{url:`The clone URL`,operation:`the clone`})}async function Us(e,t,n={}){let r=sr(e);if(!r)throw Error(`Invalid git URL: ${Js(e)}`);if(e.trim().startsWith(`http://`))return{auth:{tier:`none`,gitConfig:[]}};let i=Nn(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=se(e)??void 0,o=await ks(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login,credentialHost:a},n._detectGhFn),s=i.login!==void 0&&o.tier===`A`&&!Vt(o.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:o,...s===void 0?{}:{declaredMiss:s}}}function Ws(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Gs(e,t,n,r=process.cwd()){let i=sr(e);if(!i)throw Error(`Invalid git URL: ${Js(e)}`);let a=Ws(e,i),o=t.dir?H(r,t.dir):H(r,i.name),s=U(o);if(s&&Wi(o).length>0)throw Error(`Target directory is not empty: ${o}`);Wt();let c=Qr(),l=i.protocol===`https`&&i.hostname===`github.com`&&await As(i.owner,i.name),u=Bs(i.protocol,i.hostname,l)?{auth:{tier:`none`,gitConfig:[]}}:await Us(a,c,{selfCliArgs:Fs(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),d=u.auth;if(t.onAuthResolved?.({tier:d.tier,login:d.relayToken?.login}),!t.json){let e=Hs(u.declaredMiss);e&&process.stderr.write(e)}let f=Ps(d),p=zs(r,d.gitConfig),m=k(p).env(f),h=-1;m.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Ms(e);n&&n.pct!==h&&(h=n.pct,K(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await Rs({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>m.clone(a,o,[...e,`--no-checkout`]),onFallback:e=>{K(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await lt(g,`HEAD`,f)}catch(e){throw qi(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-DpWQMxOd.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?K(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Ks(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Ks(e){let t=Cr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const qs=/^[A-Za-z0-9._/:@-]+$/;function Js(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Pn(i)!==void 0?`${t}${i}@`:t})}function Ys(e){return qs.test(e)?e:Ae(e)}function Xs(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ys(t)}`:``;return`ok clone ${Ys(e)}${n}`}function Zs(e){let t=f(e.error);if(t.kind!==`auth`)return null;let n=Js(e.url);if(ae(t)){let t=Xs(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
+`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await lt(g,`HEAD`,f)}catch(e){throw qi(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-C99xOULP.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?K(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{Ks(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?K(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function Ks(e){let t=Cr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const qs=/^[A-Za-z0-9._/:@-]+$/;function Js(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&Pn(i)!==void 0?`${t}${i}@`:t})}function Ys(e){return qs.test(e)?e:Ae(e)}function Xs(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Ys(t)}`:``;return`ok clone ${Ys(e)}${n}`}function Zs(e){let t=f(e.error);if(t.kind!==`auth`)return null;let n=Js(e.url);if(ae(t)){let t=Xs(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ok auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ok auth pat`,`    3. Then re-run: ${Xs(n,e.branch)}`].join(`
 `)}function Qs(e){if(!(e.error instanceof Tt)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=Js(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${Xs(t,e.branch)}`].join(`
-`)}function $s(e){let t=e.error instanceof vt?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:kn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof vt?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Zs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??Qs({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function ec(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function tc(e){let t=f(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=sr(e.url);t&&(r=await(e.resolvePrincipal??(e=>ec(Qr(),e)))(t.hostname))}}$s({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function nc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Gs(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)K(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-Bqg3TrSD.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Et||e instanceof Un){r.json?K(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await tc({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>K(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var rc=p();const ic=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...Oe.map(e=>e.path)];function ac(e){return un({absPath:Sn(`project-local`,e),sideline:!1}).diagnostics}function oc(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Si;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ac)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(E(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function sc(e){let t=W(e,`utf-8`),n=(0,rc.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ic)n.hasIn(e)&&r.push(e.join(`.`));return r}function cc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function lc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=cc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function uc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function dc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??mn,s=uc(r).map(t=>({scope:t,absPath:Sn(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=sc(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:lc(ic.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:E(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const fc=`project | project-local | user | all`,pc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function mc(e){return e!==`config`}function hc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{oc({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${fc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!pc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${fc}`),process.exitCode=2;return}(await dc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const gc=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],_c=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function vc(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(_c),t.join(`
+`)}function $s(e){let t=e.error instanceof vt?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:kn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof vt?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Zs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??Qs({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function ec(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function tc(e){let t=f(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=sr(e.url);t&&(r=await(e.resolvePrincipal??(e=>ec(Qr(),e)))(t.hostname))}}$s({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function nc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Gs(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)K(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BBEHhUC8.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Et||e instanceof Un){r.json?K(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await tc({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>K(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var rc=p();const ic=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...Oe.map(e=>e.path)];function ac(e){return un({absPath:Sn(`project-local`,e),sideline:!1}).diagnostics}function oc(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Si;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??ac)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(E(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function sc(e){let t=W(e,`utf-8`),n=(0,rc.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ic)n.hasIn(e)&&r.push(e.join(`.`));return r}function cc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function lc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=cc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function uc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function dc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??mn,s=uc(r).map(t=>({scope:t,absPath:Sn(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=sc(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:lc(ic.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:E(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const fc=`project | project-local | user | all`,pc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function mc(e){return e!==`config`}function hc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{oc({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${fc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!pc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${fc}`),process.exitCode=2;return}(await dc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const gc=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],_c=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function vc(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(_c),t.join(`
 `)}function yc(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ${ne(`skill-state.yml`)}`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function bc(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),...gc,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function xc(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function Sc(e={}){let t=await vn(e);return t.status===`failed`?{...t,message:xc(t),exitCode:1}:t.status===`skip-current`?{...t,message:yc(t),exitCode:0}:t.status===`installed`?{...t,message:bc(t),exitCode:0}:{...t,message:vc(t),exitCode:0}}function Cc(){return new M(`cowork`).description("Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — `ok init` already wires Claude.)").option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await Sc({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function wc(e,t){let n=ia({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function Tc(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Gr(e)} readProcessStart=${t}`}function Ec(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Vr(n,r),t.onNativeFailure?.({kind:e,reason:Kr(n,r)})};try{if(n===`win32`){let n=!1,a=Ur(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Tc(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Gr(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Di,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Dc(e,t={}){let n=t.probe??It(),r=t.isAlive??(e=>en(e,n(e))),i=t.isAlive??Zt,a=tr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(ui()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(or(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>ft(n)))(),u=await $i(e).catch(()=>H(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Ec)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ${ne(`logs`)}. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await fr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await ra(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function Oc(e){return e?Ce.filter(e=>e!==be):[...Ce]}function kc(e){return Oc(e).map(e=>`~/.ok/${e}`).join(`, `)}function q(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function Ac(e){return Pi===`/`?e:e.split(Pi).join(`/`)}function jc(e,t,n=`This project`){let r=[],i=[j(e)],a=B(e,`.ok`);wi(B(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of Ar){let a=Lr[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(Ac(V(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${Ac(V(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Ir(e),...Fr(e),...pe]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:B(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:wn(e)})}catch{}let c=B(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function Mc(e,t){return{scope:`deinit`,ops:jc(e,t)}}function Nc(e){let{home:t,platform:n,host:a,lockDirs:o,marker:s,recentDeinitProjectRoots:c,purgeContent:l}=e,u=[];for(let e of o)u.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${q(B(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});u.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${a}) from the OS keychain + ${C}`,host:a}),u.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (${r})`}),u.push(...Fc(s,t));for(let e of Ar){let n=Lr[e],r;try{r=n.configPath(``,t)}catch{continue}u.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${q(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of ir(t))u.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${q(e.path,t)}`,path:e.path});for(let e of c)u.push(...jc(e,t,`Project: ${ji(e)}`));u.push(...Ic(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e));let{userHomeDirName:d}=i();return d===`.ok`?u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:l?`Remove ~/.ok (including user-authored skills; keeping ${kc(!0)}, shared by every channel)`:`Remove ~/.ok (keeping ${kc(!1)}, shared by every channel)`,path:bn(t),preserve:Oc(l)}):(u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:l?`Remove ~/${d}`:`Remove ~/${d} (keeping ~/.ok/${be}, shared by every channel)`,path:bn(t)}),l&&u.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:`Remove ~/.ok/${be} (user-authored skills, shared by every channel)`,path:B(t,`.ok`,be)})),{scope:`uninstall`,ops:u}}function Pc(e){return[B(e,`.zshrc`),B(e,`.bash_profile`),B(e,`.config`,`fish`,`conf.d`,ar())]}function Fc(e,t){let n=[],r=new Set([...Pc(t),...e?.rcFiles??[]]);for(let e of r)wi(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${q(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${q(r.path,t)}`,path:r.path,target:r.target});return n}function Ic(e,t,n){let r={home:e,platformName:t,env:n},i=ur(r),a=Qn(r),o=[{kind:`remove-path`,group:`Application data`,label:`Remove ${q(i,e)}`,path:i}];if(t===`darwin`&&b()===`stable`){let t=ur({...r,productName:Jn});o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${q(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return o.push({kind:`remove-path`,group:`Application data`,label:`Remove ${q(a,e)}`,path:a}),o}async function Lc(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??ti,r=t.clearEmbeddingsKey??sn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[H(e.lockDir)]:[])),a=It(),o=t.scanProcesses??(()=>ft(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Dc(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(H(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await zc(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=H(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(H(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(H(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function Rc(e,t=_r){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function zc(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "${i().keyringService}"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=wi(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Bc(t.reason)}: ${e.rcFile}`};let n;try{n=W(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Bc(Mr(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=dr(n);return i?a&&!t.symlink?(qi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(An(t.path,r,{mode:Nr(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return vr(e.path,e.target)?(Ji(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=oi(Lr[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Bc(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Ti(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${B(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Bc(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=qr(e.projectRoot,Uc(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${B(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Vc(e)}}function Bc(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${Wr(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Vc(e){if(e.requireOurState&&!lr(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&kr(e.path,e.containWithin);let t;try{t=Vi(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}return t?t.isSymbolicLink()?(Ji(e.path),{op:e,status:`removed`}):e.preserve&&e.preserve.length>0?{op:e,status:Hc(e.path,e.preserve)?`removed`:`not-present`}:(qi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}):{op:e,status:`not-present`}}function Hc(e,t){let n=!1;for(let r of Wi(e)){if(t.includes(r))continue;let i=B(e,r),a=t.flatMap(e=>e.startsWith(`${r}/`)?[e.slice(r.length+1)]:[]);if(a.length>0&&Vi(i).isDirectory()){Hc(i,a)&&(n=!0);continue}qi(i,{recursive:!0,force:!0}),n=!0}return n}function Uc(e){let t=new Set([B(e,`.claude`,`launch.json`)]);for(let n of Ar){let r=Lr[n].projectConfigPath?.(e);r&&t.add(r)}return Ir(e).filter(n=>{let r=B(e,n);if(!t.has(r))return!0;try{return Vi(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Wc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Gc(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of Wc(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
@@ -45,7 +45,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function El(e,t,n,r,i){let a=Tl(e,t,B(r,`cpu.cpuprofile`)),o=!1,s=ki(process.execPath,[a],A({stdio:`ignore`})),c=setInterval(()=>{let e=xl(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{qi(B(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Dl(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function Ol(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??Ge,s=t.inspect??(e=>tr(e,`server`)),c=t.resolveCommand??Dt,l=t.resolveUsage??Wn,u=t.collectLsofFn??Sl,d=t.getEndpoints??wl,f=t.profiler??El,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(J.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?B(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):B(process.cwd(),`ok-diagnose-${n}-${b}`);try{Hi(x,{recursive:!0})}catch(e){a(J.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(J.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{Yi(B(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?Cl(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(J.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(J.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,Dl(W(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(J.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(J.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(J.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${J.default.bold(x)}`)}async function kl(e){let t=ia({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Al(e){let t=Ui(B(Qi(),`ok-bundle-process-`));return await Ol({pid:e,output:t}),t}function jl(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Ml(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Nl(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Pl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?J.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Fl(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(J.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${jl(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Nl(t)}`),e(`  Credentials:         ${Pl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Yn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${br(i)}`),e(`  Output:              ${n}`),e(``)}async function Il(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??kl,i=t.runProcessDiagnose??Al,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);Hi(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(J.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=er(t.diagnosticReportsDir??B(Xi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await qn(t.osTerminationEvidenceDeps),d=await Sr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(J.default.yellow(`  server not running — live state unavailable`)),Fl(n,d,o,l,u),e.yes!==!0&&!Ml(await r(`Write bundle? [y/N]: `))?(n(J.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await rr({collected:d,outputPath:o}),n(J.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{qi(s,{recursive:!0,force:!0})}catch{}}}function Ll(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(J.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(J.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Ol({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(bl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(J.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-D5rR-ONY.mjs`),{resolveContentDir:r}=await import(`./dist-fzYMjYEW.mjs`),i=process.cwd(),{config:a}=n(i);await Il({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(J.default.red(t)),process.exit(1)}}),e}async function Rl(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await io({message:`Enter embeddings provider API key:`})).trim()}function zl(e){return qt(e)}async function Bl(e,t){let n=await Xe(it(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Vl(e){try{let t=wt(j(e));if(!t||t.port<=0||!Zt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=x.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Hl(e,t){if(!e)return`unavailable (search stays lexical)`;let n=le(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Ul(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Rl();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,Dl(W(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(J.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(J.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(J.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${J.default.bold(x)}`)}async function kl(e){let t=ia({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function Al(e){let t=Ui(B(Qi(),`ok-bundle-process-`));return await Ol({pid:e,output:t}),t}function jl(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Ml(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Nl(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Pl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?J.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Fl(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(J.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${jl(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Nl(t)}`),e(`  Credentials:         ${Pl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Yn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${br(i)}`),e(`  Output:              ${n}`),e(``)}async function Il(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??kl,i=t.runProcessDiagnose??Al,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);Hi(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(J.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=er(t.diagnosticReportsDir??B(Xi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await qn(t.osTerminationEvidenceDeps),d=await Sr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(J.default.yellow(`  server not running — live state unavailable`)),Fl(n,d,o,l,u),e.yes!==!0&&!Ml(await r(`Write bundle? [y/N]: `))?(n(J.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await rr({collected:d,outputPath:o}),n(J.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{qi(s,{recursive:!0,force:!0})}catch{}}}function Ll(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(J.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(J.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await Ol({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(bl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,"Include `ok diagnose process <pid>` output under process/ in the bundle").option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(J.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-BVSrV694.mjs`),{resolveContentDir:r}=await import(`./dist-BNPpubXf.mjs`),i=process.cwd(),{config:a}=n(i);await Il({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(J.default.red(t)),process.exit(1)}}),e}async function Rl(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await io({message:`Enter embeddings provider API key:`})).trim()}function zl(e){return qt(e)}async function Bl(e,t){let n=await Xe(it(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Vl(e){try{let t=wt(j(e));if(!t||t.port<=0||!Zt(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=x.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Hl(e,t){if(!e)return`unavailable (search stays lexical)`;let n=le(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Ul(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await Rl();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=H(e.cwd??process.cwd()),{baseUrl:i}=zl(n);try{await it().setForProject(n,i,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${i}\n  (kept in ${ne(r)}, 0600, this machine only — never in the project).\n  Enable semantic search with \`ok embeddings enable\`, or in
   OK Desktop → Settings → This project → Search.
 `)})}function Wl(){return new M(`clear-key`).description(`Remove the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),{baseUrl:n}=zl(t),r;try{r=await it().clearForProject(t,n)}catch(e){process.stderr.write(`Failed to clear the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}if(!r){process.stderr.write(`No stored embeddings key found for ${n}.\n`);return}process.stderr.write(`✓ Embeddings API key cleared for ${n}.\n`)})}function Gl(){return new M(`list`).description(`List every project + endpoint that has a stored embeddings key`).action(async()=>{let e=await it().listProjects();if(e.length===0){process.stderr.write(`No project embeddings keys stored.
@@ -79,7 +79,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function ap(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function op(e){return/\s/.test(e)?`<${e}>`:e}function sp(e,t={}){let{header:n,rows:r}=Af(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(ap).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=ap(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${op(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function cp(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function lp(e,t){return`# ${e}\n\n${t}\n`}const up=[`links`,`frontmatter`,`callouts`,`images`,`tables`],dp=/\.mdx?$/i;function fp(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function pp(e,t={}){let n=t.selected??new Set(up),r=Zf(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:fp(!1)};let i=fp(r),a=Jf(e),o=zf(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!dp.test(e)||s&&l.has(e))continue;let r;try{r=W(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=kf(a,ji(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:B(z(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Tf(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=ip(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=qf(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=sp(e.csvText,{linkForTitle:t=>{let n=If(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?V(z(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=W(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=lp(o===null?e.fallbackTitle:cp(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=qf(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function mp(e){for(let t of e.assets)Hi(z(t.path),{recursive:!0}),Yi(t.path,t.bytes);for(let t of e.changes)Hi(z(t.path),{recursive:!0}),Yi(t.path,t.content,`utf8`);for(let t of e.deletions)try{Ji(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const hp={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},gp=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function _p(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of gp)n.push(`  ${hp[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function vp(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function yp(e){let t=new Set(up);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${up.join(`, `)}`);return e})}function bp(e,t){let n=new Set(up);if(e&&(n=new Set(yp(e))),t)for(let e of yp(t))n.delete(e);return n}function xp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=bp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=pp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{mp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?vp(a,{applied:t.apply??!1}):_p(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Sp(e){return Object.values(fe).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function Cp(e,t,n){return t===`darwin`?n&&Sp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function wp(e,t={}){let n=Cp(e,t.platform??process.platform,t.desktopBundlePath);return li(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Tp(e,t,n=process.platform){let r=Cp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Ep(e=()=>si(ci())){return{detectDesktopApp:()=>ni(e()),resolveBaseUrl:e=>_t({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:wp,findAncestorProject:e=>Cn(z(H(e)))?.rootPath??null,isProjectRoot:e=>Cn(e)?.distance===0,enclosingProject:e=>Cn(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Dp(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Op(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function kp(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Tp(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Ap(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Dp(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!de.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${de.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return kp(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${ln(e,s)}`;return kp(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Op(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${Dn(s)}`;return kp(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Op(n)}if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${yn(s)}`;return kp(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Op(n)}function jp(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${de.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Ap(e,t,Ep())})}function Mp(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-ClW6A8dv.mjs`),r=e(),i=process.cwd(),a=Bn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Z(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Np(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Pp(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Np((await e.raw([`remote`])).split(`
+`)}function vp(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function yp(e){let t=new Set(up);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${up.join(`, `)}`);return e})}function bp(e,t){let n=new Set(up);if(e&&(n=new Set(yp(e))),t)for(let e of yp(t))n.delete(e);return n}function xp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=bp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=pp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{mp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?vp(a,{applied:t.apply??!1}):_p(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Sp(e){return Object.values(fe).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function Cp(e,t,n){return t===`darwin`?n&&Sp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function wp(e,t={}){let n=Cp(e,t.platform??process.platform,t.desktopBundlePath);return li(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Tp(e,t,n=process.platform){let r=Cp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Ep(e=()=>si(ci())){return{detectDesktopApp:()=>ni(e()),resolveBaseUrl:e=>_t({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return G(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:wp,findAncestorProject:e=>Cn(z(H(e)))?.rootPath??null,isProjectRoot:e=>Cn(e)?.distance===0,enclosingProject:e=>Cn(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Dp(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function Op(e){return e.error("No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run `ok start` to serve the editor, then retry."),1}async function kp(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Tp(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function Ap(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error("Nothing to open: pass a doc, folder, or skill name (e.g. `ok open specs/foo/SPEC`)."),1;if(Dp(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!de.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${de.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return kp(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${ln(e,s)}`;return kp(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return Op(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${Dn(s)}`;return kp(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return Op(n)}if(l)return kp(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${yn(s)}`;return kp(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return Op(n)}function jp(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${de.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await Ap(e,t,Ep())})}function Mp(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DkSS1KD_.mjs`),r=e(),i=process.cwd(),a=Bn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Z(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Np(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Pp(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Np((await e.raw([`remote`])).split(`
 `).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Fp(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===he(t)?t:null}const Ip=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function Lp(e,t){return Ip.some(n=>Array.from(e.matchAll(n)).some(e=>Fp(e[1])===t))}function Rp(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function zp(e,n,r){let i={git:k({baseDir:e})},a=n===null?null:Fp(n);if(n===null||a===null||sr(n)===null||!t(a,Ft()))return i;let{auth:o,declaredMiss:s}=await Us(n,r.tokenStore,{cwd:e,...r.detectGh?{_detectGhFn:r.detectGh}:{}});return o.tier===`none`?i:{git:k(zs(e,Os(Fs(),a))).env(Rp(Ps(o))),signIn:{host:a,tier:o.tier},...s===void 0?{}:{declaredMiss:s}}}function Bp(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`ok auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ok auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Vp(e,t,n){try{return await n(e.git)}catch(n){let r=n instanceof Error?n.message:String(n),i=e.signIn===void 0||!Lp(r,e.signIn.host)?null:Bp(t,e.signIn,f(n));throw i===null?n:Error(`${r.trimEnd()}\n${i}`,{cause:n})}}async function Hp(e){await e.fetch();let t=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`@{upstream}^{commit}`])).trim();if(t!==``){let n=(await e.raw([`rev-parse`,`--symbolic-full-name`,`@{upstream}`])).trim();return{commit:t,trackingRef:n.startsWith(`refs/`)?n:null}}let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim();if(n===``)throw Error(`not on a branch, so there is nothing to pull into; switch to a branch first, for example: git switch main`);let r=(await e.raw([`config`,`--get`,`branch.${n}.merge`])).trim(),i=(await e.raw([`config`,`--get`,`branch.${n}.remote`])).trim()||`origin`;if(r===``)throw Error(`no upstream configured for branch "${n}"; set one with: git branch --set-upstream-to=${i}/${n} ${n}`);await e.fetch(i,r);let a=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`FETCH_HEAD^{commit}`])).trim();if(a===``)throw Error(`could not resolve the fetched ${r}`);return{commit:a,trackingRef:null}}function Up(e){switch(e){case`requires-newer-git`:return[`update-git`];case`unverifiable-target`:return[`readable-folder`,`fix-link`];case`outside-repository`:case`repository-root`:case`private-state`:case`secret-file`:case`inside-private-state`:return[`fix-link`];default:return e}}const Wp={"update-git":`Update Git to ${Yt} or newer.`,"readable-folder":`If a folder on the way is unreadable on this machine, make it readable.`,"fix-link":`Remove or fix these links on the remote, or fix your own local change to them, then pull again.`};function Gp(e){if(e instanceof vt){let t=new Set(e.unsafe.flatMap(({reason:e})=>Up(e))),n=Object.entries(Wp).filter(([e])=>t.has(e)).map(([,e])=>e);return t.has(`fix-link`)||n.push(`Then pull again.`),`incoming symlinks are unsafe to check out: ${e.describeLinks()}. ${n.join(` `)}`}return e instanceof Error?e.message:String(e)}async function Kp(e,t,n=process.cwd()){let r=e.op??`sync`,i=j(n),a=wt(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...qe({kind:`cli`,runtimeVersion:hn})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Z(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=k({baseDir:n}),s={tokenStore:e.tokenStore??Qr(),detectGh:e._detectGhFn},c=async t=>{let i=await zp(n,t,s),a=Vs(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Z(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},l;if(r===`sync`||r===`pull`){Z(e.json,{type:`step`,step:`pull`});let t=await Pp(o,`pull`);l={url:t,remote:await c(t)};let n=await Vp(l.remote,`pull`,Hp);await ot(o,n.commit,`merge`);let{trackingRef:r}=n;r!==null&&await mt(o,{name:r,trackingRef:r,commit:n.commit});let i=await o.pull(`.`,r??n.commit);Z(e.json,{type:`pull`,summary:i.summary}),e.json||process.stderr.write(`  pull: ${i.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Z(e.json,{type:`step`,step:`push`});let t=await Pp(o,`push`);await Vp(l!==void 0&&l.url===t?l.remote:await c(t),`push`,e=>e.push()),Z(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)}Z(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function qp(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`sync`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Jp(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`pull`},e())}catch(e){let n=Gp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Yp(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Kp({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const Xp={existsSync:e=>U(e),isDirectory:e=>{try{return G(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>Wi(e),readFileSync:e=>W(e),writeFileSync:(e,t)=>{Yi(e,t)},mkdirSync:(e,t)=>{Hi(e,t)},rmSync:(e,t)=>{qi(e,t)}},Zp={resolveProjectBundledSkillDir:()=>Mn(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>Mn(e,{checkDesktop:!1}),readBundledVersion:()=>We(),readRecordedVersion:e=>En(e,`cli-hosts`),writeRecordedVersion:(e,t)=>gt(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>xn(e),readBundleDecision:(e,t)=>st(e,t),writeBundleDecision:(e,t,n)=>bt(e,t,n),removeBundleFromDisk:(e,t)=>gr(e,t)};function Qp(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function $p(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(z(t),{recursive:!0}),em(e,t,n)}function em(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=B(e,r),a=B(t,r);n.isDirectory(i)?em(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function tm(e,t,n){return n.existsSync(B(e,`.agents`,`skills`,t))||_e.some(r=>n.existsSync(B(e,r.skillsRoot,t)))}function nm(e,t,n,r,i,a){let o=[],s=B(e,`.agents`,`skills`,t);if(tm(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of _e){let i=B(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(B(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(B(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{$p(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of _e){let l=B(e,c.hostDir),u=B(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{$p(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function rm(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function im(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>B(nn(z(e)),ji(e));return a(t)===a(i)}function am(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Rr){let s=B(e,n.hostDir,`skills`,`open-knowledge`),c=B(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Lr[n.editorId],u=l?.projectConfigPath?.(e);if(im(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!rm(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Er(s,e),$p(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function om(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of dn)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=gn[i.id],o=tm(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!re(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>tm(e,gn[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===dn.length,m=[];for(let{id:t,sourceDir:i}of u){let a=nm(e,gn[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function sm(e){let t=e.logger??Qp,n=e.fs??Xp,r=e.home??Xi(),i={...Zp,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=am(e.projectDir,r,i,n,t),o=await om(r,i,n,t),s=pr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=nr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function cm(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function lm(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function um(){return new M(`repair-skills`).description("Restore missing project skill copies and repair user-global bundles for installed AI editors. Existing project skills are preserved; run `ok init` to refresh them.").option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await sm({projectDir:H(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>dm(t,{yes:e.yes===!0})});process.stdout.write(`${lm(t)}\n`),process.exitCode=cm(t)})}async function dm(e,t){let n=Xi(),r=e=>`~/${V(n,e)}`,i=t.input??process.stdin,a=[``,R(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),P(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${R(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${R(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,P(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
@@ -91,7 +91,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function xm(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await bm(t,await e())})}async function Sm(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Cm(e,t){let{host:n,json:r}=e;Ya(n);let i=await as(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await Sm(new Qo({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function wm(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Cm(t,await e())})}function Tm(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Em(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function Dm(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Om(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function km(e,t){return t===void 0?k(zs(e,[])).env(Ns()):k(zs(e,Os(Fs(),t.host))).env(Ps({relayToken:t}))}function Am(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const jm={ensureOkScaffold:e=>{dt(e)},gitFactory:km};async function Mm(e){let t={...jm,...e.deps},n=H(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Om(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Tm(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=B(n,`.git`);if(!U(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Em({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Tm(t)===`name-conflict`){let t=await Dm(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Tm(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Am(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Nm(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Pm(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(Ya(n),Kt(s)){process.stderr.write(`${new Pt(H(s)).message}\n`),process.exitCode=64;return}if(pt(s)){process.stderr.write(`${new rt(H(s)).message}\n`),process.exitCode=64;return}let l=await as(n,t);if(l==null){Nm(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new Qo({auth:l,...u?{baseUrl:u}:{}});try{Oi(`git config user.email`,A({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Nm(c,await Mm({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Fm(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Pm(t,await e())})}function Im(){let e=new M(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>di();return e.addCommand(wm(t)),e.addCommand(xm(t)),e.addCommand(Fm(t)),e}function Lm(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Rm(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Ir(t),r=Cr(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){zm(e.json,t,r.reason);return}let i=jr(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${F(`✓`)} ${R(`Sharing mode is already`)} ${F(`local-only`)}${R(`.`)}\n`),Lm(r.removed);return}process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`),Lm(r.removed)})}function zm(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Bm(){return new M(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=jr(t),r=Ir(t),i=qr(t,r);if(i.kind===`no-exclude`){Vm(e.json,t,i.reason);return}let a=jr(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${F(`✓`)} ${N(`Sharing mode is already`)} ${R(`shared`)}${N(`.`)}\n`),Lm(i.removed);return}process.stderr.write(`${N(`Sharing mode is already`)} ${R(`shared`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${R(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Vm(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Hm(){return new M(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=jr(t),r=[...Or(t)],i=Dr(t,Ir(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${Um(n)}`),a.push(``),a.push(`Excluded from git via ${R(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${N(n===`local-only`?`ok config-sharing share`:`ok config-sharing unshare`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function Um(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Wm(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Bm()),e.addCommand(Rm()),e.addCommand(Hm()),e}const Gm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Km(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Gm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function qm(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Jm(e){return/\.(md|mdx)$/i.test(e)}function Ym(e,t){if(Jm(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Xm(e,t){let n=Km(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=qm(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Zm(e=()=>si(ci())){return{prepare:ht,detectDesktopApp:()=>ni(e()),openTarget:wp,runProjectOpen:(e,t)=>Ap(e,{project:t},Ep()),runBrowserOpen:e=>$m(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Qm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof Nt||e instanceof In||e instanceof nt||e instanceof tt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Tp(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function $m(e){let{createEphemeralProjectDir:t}=await import(`./dist-fzYMjYEW.mjs`),{loadConfig:n}=await import(`./src-DkA3OkNb.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-Bqg3TrSD.mjs`),{openBrowser:o}=await import(`./open-browser-BL65djdM.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ea(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${yn(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Um(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Wm(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Bm()),e.addCommand(Rm()),e.addCommand(Hm()),e}const Gm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Km(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(Gm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function qm(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Jm(e){return/\.(md|mdx)$/i.test(e)}function Ym(e,t){if(Jm(t))return!0;try{return G(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Xm(e,t){let n=Km(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=qm(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function Zm(e=()=>si(ci())){return{prepare:ht,detectDesktopApp:()=>ni(e()),openTarget:wp,runProjectOpen:(e,t)=>Ap(e,{project:t},Ep()),runBrowserOpen:e=>$m(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function Qm(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof Nt||e instanceof In||e instanceof nt||e instanceof tt)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Tp(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function $m(e){let{createEphemeralProjectDir:t}=await import(`./dist-BNPpubXf.mjs`),{loadConfig:n}=await import(`./src-BgQTBEn_.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BBEHhUC8.mjs`),{openBrowser:o}=await import(`./open-browser-DU_gU7KC.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ea(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${yn(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function eh(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=H(process.cwd()),n=rn(Cn(t)?.rootPath??t),r=Jt({projectDir:n}),i={...r,skills:r.skills.filter(e=>Fn(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${P(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${R(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?P(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?P(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${F(e.name)}${t}  ${P(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${R(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${N(e.name)} ${P(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=j(process.cwd()),r=tr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${I(`Error:`)} no running Open Knowledge server for this project. Start it with ${R(`ok start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${I(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${N(`Already imported:`)} ${R(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${F(`Imported`)} ${R(o)}${c?P(` (renamed from ${c} — name was taken)`):``} from ${P(s.source??e)}${s.publisher?P(` · ${s.publisher}`):``}.\n${P(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${P(`! ${e}`)}\n`)}),e}function th(e){return{server:nh(`server`,e),ui:e.status===`alive`&&Rn(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function nh(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function rh(e){return`${ih(e.server)}\n${ih(e.ui)}`}function ih(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`ok clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`ok clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function ah(e){let t=e.inspect??(()=>tr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=th(t());return e.json?n(JSON.stringify(r,null,2)):n(rh(r)),r}function oh(e){return new M(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),ah({lockDir:j(process.cwd()),json:t.json===!0})})}function sh(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function ch(e,t){let n=ia({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function lh(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await Tr({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:ye.length+1,choices:[...ye.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await ch(t,P(`Anything else we should know? (optional) `)),i=await ch(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function uh(e){if(!sh(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>lh(e)))()}catch{return`failed`}return u(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??Ee)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function dh(e,t,n=fh,r=U,i={}){let a=[],o=i.platform??process.platform,c=i.env??process.env,u=ri(ii(c,i.execPath??process.execPath)).map(e=>fe[e]);if(o===`darwin`)for(let t of u)for(let n of[`/Applications`,B(e,`Applications`)]){let e=B(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=c.LOCALAPPDATA;if(e)for(let t of u)for(let n of s(t)){let i=B(e,`Programs`,n,l(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`)for(let e of u){let t=`/opt/${e.productName}`;if(r(B(t,e.linuxExecutableName))){let{deb:n,rpm:r}=e.linuxPackageNames;a.push({method:`app`,label:`${e.productName} (${t})`,instruction:`Remove with your package manager: sudo apt remove ${n} (Debian/Ubuntu) or sudo dnf remove ${r} (Fedora/RHEL)`})}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function fh(e){try{return Di(`npm`,e,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}const ph=`━`.repeat(64);function mh(e,t=process.platform){let n=[L(ph),R(`  One more step — remove the OpenKnowledge app itself`),P(`  (OpenKnowledge can't delete its own running binary — do this by hand.)`),``];if(e.length===0){let e=t===`win32`?`uninstall from Settings → Apps → Installed apps → OpenKnowledge`:t===`linux`?`remove the openknowledge package with your package manager (apt / dnf)`:`move /Applications/OpenKnowledge.app to the Trash`;n.push(P(`  Install method not detected. If you installed it, remove it via:`)),n.push(`    ${N(`OK Desktop`)} — ${e}`),n.push(`    ${N(`npm global`)} — npm uninstall -g @inkeep/open-knowledge`),n.push(`    ${N(`npx`)} — nothing to remove (runs from a temporary cache)`)}else for(let t of e)n.push(`  ${N(t.label)}`),n.push(`    ${t.instruction}`);return n.push(L(ph)),n.join(`

package/dist/config-schema.json

@@ -25,7 +25,7 @@
           "agentSettable": false,
           "reload": "live",
           "defaultScope": "project",
-          "description": "Where pasted and dropped assets are stored, relative to the content root. './' colocates beside the current document (default); '/' targets the content root; './subdir' targets a subfolder under the current document folder; 'folder' targets a fixed folder under the content root. Whitespace-only values are treated as './'."
+          "description": "Where pasted and dropped assets, and MCP write assets given a bare file name, are stored, relative to the content root. './' colocates beside the current document (default); '/' targets the content root; './subdir' targets a subfolder under the current document folder; 'folder' targets a fixed folder under the content root. Whitespace-only values are treated as './'."
         }
       },
       "additionalProperties": {}

package/dist/config.project.schema.json

@@ -25,7 +25,7 @@
           "agentSettable": false,
           "reload": "live",
           "defaultScope": "project",
-          "description": "Where pasted and dropped assets are stored, relative to the content root. './' colocates beside the current document (default); '/' targets the content root; './subdir' targets a subfolder under the current document folder; 'folder' targets a fixed folder under the content root. Whitespace-only values are treated as './'."
+          "description": "Where pasted and dropped assets, and MCP write assets given a bare file name, are stored, relative to the content root. './' colocates beside the current document (default); '/' targets the content root; './subdir' targets a subfolder under the current document folder; 'folder' targets a fixed folder under the content root. Whitespace-only values are treated as './'."
         }
       },
       "additionalProperties": {}

package/dist/constants-CqNABsZB.mjs

@@ -0,0 +1 @@
+import"./md-manager-BGnqyqi1-DRBNLmLZ.mjs";var e=`0.86.16`;const t=`config.yml`,n=e;export{n,t};

package/dist/{dist-fzYMjYEW.mjs → dist-BNPpubXf.mjs}

@@ -1 +1 @@
-import{Et as e,Ot as t,S as n,X as r,cc as i,qa as a,tc as o,v as s,vc as c}from"./md-manager-BGnqyqi1-B6Vk34FK.mjs";import{$ as l,$a as u,$i as d,$n as f,$r as p,$t as m,A as h,Aa as g,Ai as _,An as v,Ao as y,Ar as b,At as x,B as S,Ba as C,Bi as w,Bn as T,Br as E,Bt as D,C as O,Ca as k,Ci as A,Cn as j,Co as M,Cr as N,Cs as P,Ct as F,D as I,Da as L,Di as R,Dn as z,Do as B,Dr as V,Ds as H,Dt as U,E as W,Ea as G,Ei as K,En as q,Eo as J,Er as Y,Es as X,Et as Z,F as Q,Fa as $,Fi as ee,Fn as te,Fo as ne,Fr as re,Ft as ie,G as ae,Ga as oe,Gi as se,Gn as ce,Gr as le,Gt as ue,H as de,Ha as fe,Hi as pe,Hn as me,Hr as he,Ht as ge,I as _e,Ia as ve,Ii as ye,In as be,Io as xe,Ir as Se,It as Ce,J as we,Ja as Te,Ji as Ee,Jn as De,Jr as Oe,Jt as ke,K as Ae,Ka as je,Ki as Me,Kn as Ne,Kr as Pe,Kt as Fe,L as Ie,La as Le,Li as Re,Ln as ze,Lo as Be,Lr as Ve,Lt as He,M as Ue,Ma as We,Mi as Ge,Mn as Ke,Mo as qe,Mr as Je,Mt as Ye,N as Xe,Na as Ze,Ni as Qe,Nn as $e,No as et,Nr as tt,Nt as nt,O as rt,Oa as it,Oi as at,On as ot,Oo as st,Or as ct,Os as lt,Ot as ut,P as dt,Pa as ft,Pi as pt,Pn as mt,Po as ht,Pr as gt,Pt as _t,Q as vt,Qa as yt,Qi as bt,Qn as xt,Qr as St,Qt as Ct,R as wt,Ra as Tt,Ri as Et,Rn as Dt,Ro as Ot,Rr as kt,Rt as At,S as jt,Sa as Mt,Si as Nt,Sn as Pt,So as Ft,Sr as It,Ss as Lt,St as Rt,T as zt,Ta as Bt,Ti as Vt,Tn as Ht,To as Ut,Tr as Wt,Tt as Gt,U as Kt,Ua as qt,Ui as Jt,Un as Yt,Ur as Xt,Ut as Zt,V as Qt,Va as $t,Vi as en,Vn as tn,Vr as nn,Vt as rn,W as an,Wa as on,Wi as sn,Wn as cn,Wr as ln,Wt as un,X as dn,Xa as fn,Xi as pn,Xn as mn,Xr as hn,Xt as gn,Y as _n,Ya as vn,Yi as yn,Yn as bn,Yr as xn,Yt as Sn,Z as Cn,Za as wn,Zi as Tn,Zn as En,Zr as Dn,Zt as On,_ as kn,_a as An,_i as jn,_n as Mn,_o as Nn,_r as Pn,_s as Fn,_t as In,a as Ln,aa as Rn,ai as zn,an as Bn,ao as Vn,ar as Hn,at as Un,b as Wn,ba as Gn,bi as Kn,bn as qn,bo as Jn,br as Yn,bs as Xn,bt as Zn,c as Qn,ca as $n,ci as er,cn as tr,co as nr,cr as rr,ct as ir,d as ar,da as or,di as sr,dn as cr,do as lr,dr as ur,ds as dr,dt as fr,ea as pr,ei as mr,en as hr,eo as gr,er as _r,et as vr,f as yr,fa as br,fi as xr,fn as Sr,fo as Cr,fr as wr,ft as Tr,g as Er,ga as Dr,gi as Or,gn as kr,go as Ar,gr as jr,gs as Mr,gt as Nr,h as Pr,ha as Fr,hi as Ir,hn as Lr,ho as Rr,hr as zr,hs as Br,ht as Vr,i as Hr,ia as Ur,ii as Wr,in as Gr,io as Kr,ir as qr,it as Jr,j as Yr,ja as Xr,ji as Zr,jn as Qr,jo as $r,jr as ei,jt as ti,k as ni,ka as ri,ki as ii,kn as ai,ko as oi,kr as si,ks as ci,kt as li,l as ui,la as di,li as fi,ln as pi,lo as mi,lr as hi,lt as gi,m as _i,ma as vi,mi as yi,mn as bi,mo as xi,mr as Si,mt as Ci,n as wi,na as Ti,ni as Ei,nn as Di,no as Oi,nr as ki,nt as Ai,o as ji,oa as Mi,oi as Ni,on as Pi,oo as Fi,or as Ii,ot as Li,p as Ri,pa as zi,pi as Bi,pn as Vi,po as Hi,pr as Ui,pt as Wi,q as Gi,qa as Ki,qi,qn as Ji,qr as Yi,qt as Xi,r as Zi,ra as Qi,ri as $i,rn as ea,ro as ta,rr as na,rt as ra,s as ia,sa as aa,si as oa,sn as sa,so as ca,sr as la,st as ua,t as da,ta as fa,ti as pa,tn as ma,to as ha,tr as ga,tt as _a,u as va,ua as ya,ui as ba,un as xa,uo as Sa,ur as Ca,us as wa,ut as Ta,v as Ea,va as Da,vi as Oa,vn as ka,vo as Aa,vr as ja,vs as Ma,vt as Na,w as Pa,wa as Fa,wi as Ia,wn as La,wo as Ra,wr as za,wt as Ba,x as Va,xa as Ha,xi as Ua,xn as Wa,xo as Ga,xr as Ka,xs as qa,xt as Ja,y as Ya,ya as Xa,yi as Za,yn as Qa,yo as $a,yr as eo,ys as to,yt as no,z as ro,za as io,zi as ao,zn as oo,zr as so,zt as co}from"./dist-CerHybyM.mjs";export{da as AGENT_ID_MAX_LEN,wi as AGENT_ID_RE,Zi as AGENT_WRITE_ORIGIN,a as AUDIT_EMPTY_SCOPE_WARNING,Hr as AcpPermissionStore,Ln as AcpRegistry,ji as AcpThreadManager,ia as AgentFocusBroadcaster,Qn as AgentPresenceBroadcaster,ui as AgentSessionCapacityError,va as AgentSessionManager,ar as AutoStartDisabledError,yr as BUNDLE_IDS,Ri as BUNDLE_SCOPE,_i as BUNDLE_SKILL_NAME,Pr as BacklinkIndex,Er as CC1Broadcaster,i as CC1_CONTRACT_VERSION,kn as CONCURRENT_REPLACE_WINDOW_MS,Ea as CONFIG_FILENAME,Ya as CONFLICT_MARKER_RE,Wn as CURSOR_BUNDLE_PATHS_BY_PLATFORM,Va as ConfigSchema,jt as ConflictAuthority,O as DEFAULT_CHECKPOINT_RETENTION,Pa as DEFAULT_EMBEDDINGS_DIMENSIONS,zt as DEFAULT_PACK_ID,W as DocumentDurabilityState,I as DocumentDurabilityStateError,rt as EMBEDDINGS_API_KEY_ENV,ni as EPHEMERAL_PROJECT_DIR_PREFIX,h as ExposureConsentError,Yr as FEATURED_AGENT_IDS,Ue as FILE_SYSTEM_WRITER,Xe as FILE_WATCHER_ORIGIN,dt as FileEmbeddingsBackend,Q as FilesystemRootProjectError,_e as GIT_PREFLIGHT_FAIL_SPAN_NAME,Ie as GIT_UPSTREAM_WRITER,wa as GitDirAccessError,wt as GitNotAvailableError,ro as GitTooOldError,S as HOCUSPOCUS_AUTH_REJECTION_REASONS,Qt as HocuspocusAuthRejection,de as HocuspocusAuthTokenSchema,Kt as HomeProjectRootError,an as INSTALLED_AGENTS_SCHEMES,ae as JSON_SCHEMA_DIALECT_2020_12,lt as LINEAGE_EPOCH_KEY,Ae as LIVE_DERIVED_INDEX_DEBOUNCE_MS,Gi as MANAGED_RENAME_ORIGIN,we as MAX_ACP_THREADS,_n as MAX_AGENT_SESSIONS,dn as MCP_CONNECTION_ID_HEADER,o as MCP_SERVER_NAME,Cn as MIN_EVICTABLE_IDLE_MS,vt as MIN_GIT_VERSION,l as MISSING_OK_CONFIG_MESSAGE,dr as MalformedGitPointerError,vr as McpLogger,_a as MissingOkConfigError,Ai as OBSERVER_SYNC_ORIGIN,ra as OK_OKIGNORE_TEMPLATE,Jr as ONBOARDING_BUNDLE_IDS,X as ORPHAN_MODES,ci as PROTOCOL_VERSION,Br as PinoLogger,Un as ProcessLockCollisionError,Li as ProjectGitInitError,ua as ROLLBACK_ORIGIN,ir as ROOT_GITIGNORE_TEMPLATE,gi as RUNTIME_VERSION,Ta as SERVICE_WRITER,fr as SKILL_INSTALL_EVENTS_FILENAME,s as SKILL_STATE_TARGETS,Tr as STARTER_FOLDER_FRONTMATTER_FILENAME,Wi as STARTER_PACKS,Ci as STARTER_PACK_IDS,Vr as STATE_MANIFEST_FILENAME,Nr as STATE_SCHEMA_VERSION,In as SYMLINK_MERGE_MIN_GIT_LABEL,Na as SYMLINK_MERGE_MIN_GIT_VERSION,c as SYSTEM_DOC_NAME,no as SeedPrerequisiteError,Zn as SeedRootDirError,Ja as ServerAuthorityCollisionError,Rt as ServerAuthorityRegistryError,F as ServerLockCollisionError,Ba as SingleFileNotAFileError,Gt as SingleFileNotFoundError,Z as SingleFileNotMarkdownError,U as SingleFileProjectOverrideError,ut as StateManifestError,n as TEST_LOOP_CORE_MARKER,li as TEST_LOOP_SERVER_MARKER,x as TagIndex,ti as USER_GLOBAL_BUNDLE_IDS,Ye as UnsafeIncomingSymlinkError,nt as __getShowAllWalkStatsForTesting,_t as __resetShowAllWalkStatsForTesting,ie as acpThreadStoreRoots,Ce as acpThreadsDir,He as acquireProcessLock,At as acquireServerLock,co as applyAgentMarkdownWrite,D as applyExternalChange,rn as applySeed,ge as assertCheckoutSymlinksSafe,Zt as assertCompatibleStateManifest,un as assertGitAvailable,ue as assertIncomingSymlinksSafe,Fe as assertMergeNameResolvesTo,Xi as assertNeverDiskEvent,ke as assertRepoCheckoutSymlinksSafe,Sn as assertSafeProjectRoot,gn as attachAcpThreadSocket,On as attachCollabClientCounter,Ct as attachIdleShutdown,m as auditScopeNotFoundTitle,hr as bindConflictAuthority,ma as bootServer,Di as buildAndOpenSkill,ea as buildConfigYmlContent,Gr as buildExecResult,Bn as buildIngressPolicy,Pi as buildOkMcpStdioCommand,sa as buildSkillZip,tr as buildStarterFolderFrontmatterYaml,pi as buildWipTree,xa as bundleSkillMdPath,cr as canonicalProjectKey,Sr as canonicalizeForCompare,Vi as classifyEvents,bi as classifyFsPath,Lr as clearAllEmbeddingsKeys,kr as coercePackId,Mn as collectServerHostSnapshot,e as colorFromSeed,ka as commitUpstreamImport,Qa as commitWip,qn as commitWipFromTree,Wa as compareSemver,Pt as composeEffectiveLinterConfig,j as composeFrontmatterSchemasConfig,La as containsConflictMarkers,Ht as contentHash,q as contributorCount,z as countShadowObjects,ot as countStaleAgentWipRefs,ai as countWipRefs,v as createApiExtension,Qr as createAssetServeMiddleware,Ke as createCollaborationHost,$e as createContentFilter,mt as createContentFilterAsync,te as createEmbeddingsSecretStore,be as createEphemeralProjectDir,ze as createExternalChangeHandler,Dt as createFileLogger,oo as createLiveDerivedIndexExtension,T as createMcpHttpHandler,tn as createOsProbe,me as createPersistenceExtension,Yt as createProbeFailureReporter,cn as createServer,ce as createServerObserverExtension,Ne as createServerProbeResolver,Ji as createStreamingErrorWriter,Mr as createTestLogger,De as describeStoredEmbeddingsKey,bn as detectClaudeDesktopPresence,mn as detectGit,En as detectProjectShape,xt as detectUserSkillHosts,f as discoverLockDirs,_r as discoverMarkdownlintConfig,ga as emitPreflightFailureSpan,ki as encodeDocName,na as encodeFolderRoute,qr as encodeSkillRoute,Hn as ensureProjectGit,Ii as errorResponse,la as evictStaleTrackerEntries,rr as extractHeadings,hi as extractOkBinaryPath,Ca as extractWikiLinksFromMarkdown,ur as fallbackPaths,wr as findEnclosingGitRoot,Ui as findEnclosingProjectRoot,Si as findNativeMarkdownlintFile,zr as flushFileLogger,jr as formatAuditBrokenLinkSuppressionLine,Pn as formatAuthRejectionWire,ja as formatContributorsFrom,eo as formatPackRationale,Yn as gcCheckpointRefs,Ka as getCurrentMcpLogger,It as getIngressContext,N as getLocalDir,za as getLogFilePath,Fn as getLogger,Wt as getLogsDir,Y as getMachineId,V as getMeter,ct as getMetrics,si as getTracer,b as handleCollabSocketError,ei as handleSpawnCursor,Je as hasForwardingHeaders,tt as hasGcLogLatch,t as iconFromClientName,gt as incrementCollabSocketFilteredError,re as incrementServerObserverFire,Se as initContent,Ve as initShadowRepo,kt as initTelemetry,so as initToleranceTelemetryWriter,E as installJsonSchemaDialect,nn as installPrettyZodErrors,Ma as installTestLoggers,he as installUserSkill,Xt as isAllowedApiOrigin,ln as isAllowedWorkspaceHostHeader,le as isConfigDoc,Pe as isDefunctProcess,Yi as isDocInConflict,Oe as isFilesystemRoot,xn as isHocuspocusAuthRejectionReason,hn as isHomeDir,Dn as isHostAdmitted,St as isKnownPackId,p as isLinkIndexExcludedDoc,mr as isLockProcessRunning,pa as isLoopbackAddress,Ei as isManagedArtifactDoc,$i as isMintedThreadId,Wr as isOriginAdmitted,H as isOrphanMode,zn as isPairedWriteOrigin,Ni as isPathWithinDir,oa as isPeerAdmitted,er as isProcessAlive,fi as isProjectRoot,ba as isReservedForUserTree,sr as isSelfWrite,xr as isSkillInstallReportEnvOptOut,Bi as isSystemDoc,yi as isToleranceTelemetryEnabled,Ir as isValidLockPid,Or as lastKnownHash,jn as listRescueCheckpoints,Oa as listStarterPacks,Za as loadCustomAgents,Kn as loadPrincipal,Ua as lockAdvertisesUi,Nt as lockBaseUrl,A as lockFilePath,to as loggerFactory,Ia as loginShapedUserinfoUser,Xn as logsCurrentPath,qa as logsPreviousPath,Vt as makeLazyEmbeddingsKeyStore,K as markServerLockDraining,R as mountMcpAndApi,at as normalizeFsPath,ii as observeReadiness,_ as packageVersionMajorMinor,Zr as parseAuthRejectionWire,Ge as parseGitVersion,Qe as parseHocuspocusAuthToken,pt as parseKeepaliveConnectionId,ee as pathToDocName,ye as planSeed,Re as prepareSingleFileOpen,Et as processCommand,ao as processUsage,w as readAgentBrowserTools,en as readAllTargets,pe as readBundleDecision,Jt as readDeclaredGitHubHosts,sn as readOriginCredentialHost,se as readOriginGitHubRepo,Me as readOwnNativeRules,qi as readProcessLock,Ee as readProcessLockDetailed,yn as readProcessState,pn as readProjectHeadState,Tn as readProjectLocalSemanticConfig,bt as readServerLock,d as readServerPackageVersion,pr as readSkillInstallStateSnapshot,fa as readStateManifest,Ti as readTargetRecordedAt,Qi as readTargetVersion,Ur as reconcile,Rn as recordContributor,Mi as recordSkillInstallEvent,aa as redactShareSubprocessStderr,$n as registerAllTools,di as registerWrite,ya as releaseProcessLock,or as releaseServerLock,br as removeLastKnownHash,zi as removeProjectSkillGitignoreBlock,vi as reportSkillInstall,Fr as resetMetrics,Dr as resolveAuditScope,An as resolveBuiltinSkillHosts,r as resolveBundleEnabled,Da as resolveBundledSkillDir,Xa as resolveContentDir,Gn as resolveCursorBinaryDefault,Ha as resolveCursorSpawnInvocation,Mt as resolveEffectiveLinterConfig,k as resolveEmbeddingsCredential,Fa as resolveGitHubAccountFromUrl,Bt as resolveGitHubAuthHost,G as resolveLockDir,L as resolveNativeConfigForDoc,it as resolveNativeMarkdownlintConfig,ri as resolvePack,g as resolvePackageVersion,Xr as resolveSkillInstallReportSettings,We as resolveUiInfo,Ze as restoreContributors,ft as rewriteMarkdownLinksForDocumentRename,$ as rewriteWikiLinksForDocumentRename,ve as runAuthReposSubprocess,Le as runAuthStatusSubprocess,Tt as runCloneSubprocess,io as runDeviceFlowSubprocess,C as runWithMcpLogger,$t as safeContentPath,fe as safeSubdir,qt as safetyCheckpoint,on as sameGitHubLogin,oe as sanitizeClientName,je as saveInMemoryCheckpoint,Ki as saveVersion,Te as scanLockProcesses,vn as seedBasenameIndex,fn as seedEphemeralProjectDir,wn as serializeError,yt as setActiveSpanAttributes,u as setupServerObservers,gr as shadowGit,ha as shutdownTelemetry,Lt as spansCurrentPath,P as spansPreviousPath,Oi as spawnDetached,ta as splitMarkdownBlocks,Kr as startWatcher,Vn as strategiesFor,Fi as streamedChunkOf,ca as streamingProblemEvent,nr as swapContributors,mi as teardownToleranceTelemetryWriter,Sa as toBroadcasterKey,lr as tracedAppendFileSync,Cr as tracedLinkSync,Hi as tracedMkdir,xi as tracedMkdirSync,Rr as tracedRename,Ar as tracedRenameSync,Nn as tracedRmSync,Aa as tracedRmdirSync,$a as tracedUnlinkSync,Jn as tracedWriteFile,Ga as tracedWriteFileSync,Ft as trustSystemCertificates,M as updateLastKnownHash,Ra as updateProcessLockPort,Ut as updateServerLockPort,J as validateAgentId,B as validateCloneInputs,st as validateSkillZip,oi as waitForServerLockDrain,y as withHiddenWindowsConsole,$r as withSpan,qe as withSpanSync,et as writeBundleDecision,ht as writeMarkdownlintRule,ne as writeRootGitignoreForNewRepo,xe as writeStateManifest,Be as writeTargetVersion,Ot as writeTracker};
+import{Et as e,Ot as t,S as n,X as r,cc as i,qa as a,tc as o,v as s,vc as c}from"./md-manager-BGnqyqi1-DRBNLmLZ.mjs";import{$ as l,$a as u,$i as d,$n as f,$r as p,$t as m,A as h,Aa as g,Ai as _,An as v,Ao as y,Ar as b,At as x,B as S,Ba as C,Bi as w,Bn as T,Br as E,Bt as D,C as O,Ca as k,Ci as A,Cn as j,Co as M,Cr as N,Cs as P,Ct as F,D as I,Da as L,Di as R,Dn as z,Do as B,Dr as V,Ds as H,Dt as U,E as W,Ea as G,Ei as K,En as q,Eo as J,Er as Y,Es as X,Et as Z,F as Q,Fa as $,Fi as ee,Fn as te,Fo as ne,Fr as re,Ft as ie,G as ae,Ga as oe,Gi as se,Gn as ce,Gr as le,Gt as ue,H as de,Ha as fe,Hi as pe,Hn as me,Hr as he,Ht as ge,I as _e,Ia as ve,Ii as ye,In as be,Io as xe,Ir as Se,It as Ce,J as we,Ja as Te,Ji as Ee,Jn as De,Jr as Oe,Jt as ke,K as Ae,Ka as je,Ki as Me,Kn as Ne,Kr as Pe,Kt as Fe,L as Ie,La as Le,Li as Re,Ln as ze,Lo as Be,Lr as Ve,Lt as He,M as Ue,Ma as We,Mi as Ge,Mn as Ke,Mo as qe,Mr as Je,Mt as Ye,N as Xe,Na as Ze,Ni as Qe,Nn as $e,No as et,Nr as tt,Nt as nt,O as rt,Oa as it,Oi as at,On as ot,Oo as st,Or as ct,Os as lt,Ot as ut,P as dt,Pa as ft,Pi as pt,Pn as mt,Po as ht,Pr as gt,Pt as _t,Q as vt,Qa as yt,Qi as bt,Qn as xt,Qr as St,Qt as Ct,R as wt,Ra as Tt,Ri as Et,Rn as Dt,Ro as Ot,Rr as kt,Rt as At,S as jt,Sa as Mt,Si as Nt,Sn as Pt,So as Ft,Sr as It,Ss as Lt,St as Rt,T as zt,Ta as Bt,Ti as Vt,Tn as Ht,To as Ut,Tr as Wt,Tt as Gt,U as Kt,Ua as qt,Ui as Jt,Un as Yt,Ur as Xt,Ut as Zt,V as Qt,Va as $t,Vi as en,Vn as tn,Vr as nn,Vt as rn,W as an,Wa as on,Wi as sn,Wn as cn,Wr as ln,Wt as un,X as dn,Xa as fn,Xi as pn,Xn as mn,Xr as hn,Xt as gn,Y as _n,Ya as vn,Yi as yn,Yn as bn,Yr as xn,Yt as Sn,Z as Cn,Za as wn,Zi as Tn,Zn as En,Zr as Dn,Zt as On,_ as kn,_a as An,_i as jn,_n as Mn,_o as Nn,_r as Pn,_s as Fn,_t as In,a as Ln,aa as Rn,ai as zn,an as Bn,ao as Vn,ar as Hn,at as Un,b as Wn,ba as Gn,bi as Kn,bn as qn,bo as Jn,br as Yn,bs as Xn,bt as Zn,c as Qn,ca as $n,ci as er,cn as tr,co as nr,cr as rr,ct as ir,d as ar,da as or,di as sr,dn as cr,do as lr,dr as ur,ds as dr,dt as fr,ea as pr,ei as mr,en as hr,eo as gr,er as _r,et as vr,f as yr,fa as br,fi as xr,fn as Sr,fo as Cr,fr as wr,ft as Tr,g as Er,ga as Dr,gi as Or,gn as kr,go as Ar,gr as jr,gs as Mr,gt as Nr,h as Pr,ha as Fr,hi as Ir,hn as Lr,ho as Rr,hr as zr,hs as Br,ht as Vr,i as Hr,ia as Ur,ii as Wr,in as Gr,io as Kr,ir as qr,it as Jr,j as Yr,ja as Xr,ji as Zr,jn as Qr,jo as $r,jr as ei,jt as ti,k as ni,ka as ri,ki as ii,kn as ai,ko as oi,kr as si,ks as ci,kt as li,l as ui,la as di,li as fi,ln as pi,lo as mi,lr as hi,lt as gi,m as _i,ma as vi,mi as yi,mn as bi,mo as xi,mr as Si,mt as Ci,n as wi,na as Ti,ni as Ei,nn as Di,no as Oi,nr as ki,nt as Ai,o as ji,oa as Mi,oi as Ni,on as Pi,oo as Fi,or as Ii,ot as Li,p as Ri,pa as zi,pi as Bi,pn as Vi,po as Hi,pr as Ui,pt as Wi,q as Gi,qa as Ki,qi,qn as Ji,qr as Yi,qt as Xi,r as Zi,ra as Qi,ri as $i,rn as ea,ro as ta,rr as na,rt as ra,s as ia,sa as aa,si as oa,sn as sa,so as ca,sr as la,st as ua,t as da,ta as fa,ti as pa,tn as ma,to as ha,tr as ga,tt as _a,u as va,ua as ya,ui as ba,un as xa,uo as Sa,ur as Ca,us as wa,ut as Ta,v as Ea,va as Da,vi as Oa,vn as ka,vo as Aa,vr as ja,vs as Ma,vt as Na,w as Pa,wa as Fa,wi as Ia,wn as La,wo as Ra,wr as za,wt as Ba,x as Va,xa as Ha,xi as Ua,xn as Wa,xo as Ga,xr as Ka,xs as qa,xt as Ja,y as Ya,ya as Xa,yi as Za,yn as Qa,yo as $a,yr as eo,ys as to,yt as no,z as ro,za as io,zi as ao,zn as oo,zr as so,zt as co}from"./dist-CvZCvtXe.mjs";export{da as AGENT_ID_MAX_LEN,wi as AGENT_ID_RE,Zi as AGENT_WRITE_ORIGIN,a as AUDIT_EMPTY_SCOPE_WARNING,Hr as AcpPermissionStore,Ln as AcpRegistry,ji as AcpThreadManager,ia as AgentFocusBroadcaster,Qn as AgentPresenceBroadcaster,ui as AgentSessionCapacityError,va as AgentSessionManager,ar as AutoStartDisabledError,yr as BUNDLE_IDS,Ri as BUNDLE_SCOPE,_i as BUNDLE_SKILL_NAME,Pr as BacklinkIndex,Er as CC1Broadcaster,i as CC1_CONTRACT_VERSION,kn as CONCURRENT_REPLACE_WINDOW_MS,Ea as CONFIG_FILENAME,Ya as CONFLICT_MARKER_RE,Wn as CURSOR_BUNDLE_PATHS_BY_PLATFORM,Va as ConfigSchema,jt as ConflictAuthority,O as DEFAULT_CHECKPOINT_RETENTION,Pa as DEFAULT_EMBEDDINGS_DIMENSIONS,zt as DEFAULT_PACK_ID,W as DocumentDurabilityState,I as DocumentDurabilityStateError,rt as EMBEDDINGS_API_KEY_ENV,ni as EPHEMERAL_PROJECT_DIR_PREFIX,h as ExposureConsentError,Yr as FEATURED_AGENT_IDS,Ue as FILE_SYSTEM_WRITER,Xe as FILE_WATCHER_ORIGIN,dt as FileEmbeddingsBackend,Q as FilesystemRootProjectError,_e as GIT_PREFLIGHT_FAIL_SPAN_NAME,Ie as GIT_UPSTREAM_WRITER,wa as GitDirAccessError,wt as GitNotAvailableError,ro as GitTooOldError,S as HOCUSPOCUS_AUTH_REJECTION_REASONS,Qt as HocuspocusAuthRejection,de as HocuspocusAuthTokenSchema,Kt as HomeProjectRootError,an as INSTALLED_AGENTS_SCHEMES,ae as JSON_SCHEMA_DIALECT_2020_12,lt as LINEAGE_EPOCH_KEY,Ae as LIVE_DERIVED_INDEX_DEBOUNCE_MS,Gi as MANAGED_RENAME_ORIGIN,we as MAX_ACP_THREADS,_n as MAX_AGENT_SESSIONS,dn as MCP_CONNECTION_ID_HEADER,o as MCP_SERVER_NAME,Cn as MIN_EVICTABLE_IDLE_MS,vt as MIN_GIT_VERSION,l as MISSING_OK_CONFIG_MESSAGE,dr as MalformedGitPointerError,vr as McpLogger,_a as MissingOkConfigError,Ai as OBSERVER_SYNC_ORIGIN,ra as OK_OKIGNORE_TEMPLATE,Jr as ONBOARDING_BUNDLE_IDS,X as ORPHAN_MODES,ci as PROTOCOL_VERSION,Br as PinoLogger,Un as ProcessLockCollisionError,Li as ProjectGitInitError,ua as ROLLBACK_ORIGIN,ir as ROOT_GITIGNORE_TEMPLATE,gi as RUNTIME_VERSION,Ta as SERVICE_WRITER,fr as SKILL_INSTALL_EVENTS_FILENAME,s as SKILL_STATE_TARGETS,Tr as STARTER_FOLDER_FRONTMATTER_FILENAME,Wi as STARTER_PACKS,Ci as STARTER_PACK_IDS,Vr as STATE_MANIFEST_FILENAME,Nr as STATE_SCHEMA_VERSION,In as SYMLINK_MERGE_MIN_GIT_LABEL,Na as SYMLINK_MERGE_MIN_GIT_VERSION,c as SYSTEM_DOC_NAME,no as SeedPrerequisiteError,Zn as SeedRootDirError,Ja as ServerAuthorityCollisionError,Rt as ServerAuthorityRegistryError,F as ServerLockCollisionError,Ba as SingleFileNotAFileError,Gt as SingleFileNotFoundError,Z as SingleFileNotMarkdownError,U as SingleFileProjectOverrideError,ut as StateManifestError,n as TEST_LOOP_CORE_MARKER,li as TEST_LOOP_SERVER_MARKER,x as TagIndex,ti as USER_GLOBAL_BUNDLE_IDS,Ye as UnsafeIncomingSymlinkError,nt as __getShowAllWalkStatsForTesting,_t as __resetShowAllWalkStatsForTesting,ie as acpThreadStoreRoots,Ce as acpThreadsDir,He as acquireProcessLock,At as acquireServerLock,co as applyAgentMarkdownWrite,D as applyExternalChange,rn as applySeed,ge as assertCheckoutSymlinksSafe,Zt as assertCompatibleStateManifest,un as assertGitAvailable,ue as assertIncomingSymlinksSafe,Fe as assertMergeNameResolvesTo,Xi as assertNeverDiskEvent,ke as assertRepoCheckoutSymlinksSafe,Sn as assertSafeProjectRoot,gn as attachAcpThreadSocket,On as attachCollabClientCounter,Ct as attachIdleShutdown,m as auditScopeNotFoundTitle,hr as bindConflictAuthority,ma as bootServer,Di as buildAndOpenSkill,ea as buildConfigYmlContent,Gr as buildExecResult,Bn as buildIngressPolicy,Pi as buildOkMcpStdioCommand,sa as buildSkillZip,tr as buildStarterFolderFrontmatterYaml,pi as buildWipTree,xa as bundleSkillMdPath,cr as canonicalProjectKey,Sr as canonicalizeForCompare,Vi as classifyEvents,bi as classifyFsPath,Lr as clearAllEmbeddingsKeys,kr as coercePackId,Mn as collectServerHostSnapshot,e as colorFromSeed,ka as commitUpstreamImport,Qa as commitWip,qn as commitWipFromTree,Wa as compareSemver,Pt as composeEffectiveLinterConfig,j as composeFrontmatterSchemasConfig,La as containsConflictMarkers,Ht as contentHash,q as contributorCount,z as countShadowObjects,ot as countStaleAgentWipRefs,ai as countWipRefs,v as createApiExtension,Qr as createAssetServeMiddleware,Ke as createCollaborationHost,$e as createContentFilter,mt as createContentFilterAsync,te as createEmbeddingsSecretStore,be as createEphemeralProjectDir,ze as createExternalChangeHandler,Dt as createFileLogger,oo as createLiveDerivedIndexExtension,T as createMcpHttpHandler,tn as createOsProbe,me as createPersistenceExtension,Yt as createProbeFailureReporter,cn as createServer,ce as createServerObserverExtension,Ne as createServerProbeResolver,Ji as createStreamingErrorWriter,Mr as createTestLogger,De as describeStoredEmbeddingsKey,bn as detectClaudeDesktopPresence,mn as detectGit,En as detectProjectShape,xt as detectUserSkillHosts,f as discoverLockDirs,_r as discoverMarkdownlintConfig,ga as emitPreflightFailureSpan,ki as encodeDocName,na as encodeFolderRoute,qr as encodeSkillRoute,Hn as ensureProjectGit,Ii as errorResponse,la as evictStaleTrackerEntries,rr as extractHeadings,hi as extractOkBinaryPath,Ca as extractWikiLinksFromMarkdown,ur as fallbackPaths,wr as findEnclosingGitRoot,Ui as findEnclosingProjectRoot,Si as findNativeMarkdownlintFile,zr as flushFileLogger,jr as formatAuditBrokenLinkSuppressionLine,Pn as formatAuthRejectionWire,ja as formatContributorsFrom,eo as formatPackRationale,Yn as gcCheckpointRefs,Ka as getCurrentMcpLogger,It as getIngressContext,N as getLocalDir,za as getLogFilePath,Fn as getLogger,Wt as getLogsDir,Y as getMachineId,V as getMeter,ct as getMetrics,si as getTracer,b as handleCollabSocketError,ei as handleSpawnCursor,Je as hasForwardingHeaders,tt as hasGcLogLatch,t as iconFromClientName,gt as incrementCollabSocketFilteredError,re as incrementServerObserverFire,Se as initContent,Ve as initShadowRepo,kt as initTelemetry,so as initToleranceTelemetryWriter,E as installJsonSchemaDialect,nn as installPrettyZodErrors,Ma as installTestLoggers,he as installUserSkill,Xt as isAllowedApiOrigin,ln as isAllowedWorkspaceHostHeader,le as isConfigDoc,Pe as isDefunctProcess,Yi as isDocInConflict,Oe as isFilesystemRoot,xn as isHocuspocusAuthRejectionReason,hn as isHomeDir,Dn as isHostAdmitted,St as isKnownPackId,p as isLinkIndexExcludedDoc,mr as isLockProcessRunning,pa as isLoopbackAddress,Ei as isManagedArtifactDoc,$i as isMintedThreadId,Wr as isOriginAdmitted,H as isOrphanMode,zn as isPairedWriteOrigin,Ni as isPathWithinDir,oa as isPeerAdmitted,er as isProcessAlive,fi as isProjectRoot,ba as isReservedForUserTree,sr as isSelfWrite,xr as isSkillInstallReportEnvOptOut,Bi as isSystemDoc,yi as isToleranceTelemetryEnabled,Ir as isValidLockPid,Or as lastKnownHash,jn as listRescueCheckpoints,Oa as listStarterPacks,Za as loadCustomAgents,Kn as loadPrincipal,Ua as lockAdvertisesUi,Nt as lockBaseUrl,A as lockFilePath,to as loggerFactory,Ia as loginShapedUserinfoUser,Xn as logsCurrentPath,qa as logsPreviousPath,Vt as makeLazyEmbeddingsKeyStore,K as markServerLockDraining,R as mountMcpAndApi,at as normalizeFsPath,ii as observeReadiness,_ as packageVersionMajorMinor,Zr as parseAuthRejectionWire,Ge as parseGitVersion,Qe as parseHocuspocusAuthToken,pt as parseKeepaliveConnectionId,ee as pathToDocName,ye as planSeed,Re as prepareSingleFileOpen,Et as processCommand,ao as processUsage,w as readAgentBrowserTools,en as readAllTargets,pe as readBundleDecision,Jt as readDeclaredGitHubHosts,sn as readOriginCredentialHost,se as readOriginGitHubRepo,Me as readOwnNativeRules,qi as readProcessLock,Ee as readProcessLockDetailed,yn as readProcessState,pn as readProjectHeadState,Tn as readProjectLocalSemanticConfig,bt as readServerLock,d as readServerPackageVersion,pr as readSkillInstallStateSnapshot,fa as readStateManifest,Ti as readTargetRecordedAt,Qi as readTargetVersion,Ur as reconcile,Rn as recordContributor,Mi as recordSkillInstallEvent,aa as redactShareSubprocessStderr,$n as registerAllTools,di as registerWrite,ya as releaseProcessLock,or as releaseServerLock,br as removeLastKnownHash,zi as removeProjectSkillGitignoreBlock,vi as reportSkillInstall,Fr as resetMetrics,Dr as resolveAuditScope,An as resolveBuiltinSkillHosts,r as resolveBundleEnabled,Da as resolveBundledSkillDir,Xa as resolveContentDir,Gn as resolveCursorBinaryDefault,Ha as resolveCursorSpawnInvocation,Mt as resolveEffectiveLinterConfig,k as resolveEmbeddingsCredential,Fa as resolveGitHubAccountFromUrl,Bt as resolveGitHubAuthHost,G as resolveLockDir,L as resolveNativeConfigForDoc,it as resolveNativeMarkdownlintConfig,ri as resolvePack,g as resolvePackageVersion,Xr as resolveSkillInstallReportSettings,We as resolveUiInfo,Ze as restoreContributors,ft as rewriteMarkdownLinksForDocumentRename,$ as rewriteWikiLinksForDocumentRename,ve as runAuthReposSubprocess,Le as runAuthStatusSubprocess,Tt as runCloneSubprocess,io as runDeviceFlowSubprocess,C as runWithMcpLogger,$t as safeContentPath,fe as safeSubdir,qt as safetyCheckpoint,on as sameGitHubLogin,oe as sanitizeClientName,je as saveInMemoryCheckpoint,Ki as saveVersion,Te as scanLockProcesses,vn as seedBasenameIndex,fn as seedEphemeralProjectDir,wn as serializeError,yt as setActiveSpanAttributes,u as setupServerObservers,gr as shadowGit,ha as shutdownTelemetry,Lt as spansCurrentPath,P as spansPreviousPath,Oi as spawnDetached,ta as splitMarkdownBlocks,Kr as startWatcher,Vn as strategiesFor,Fi as streamedChunkOf,ca as streamingProblemEvent,nr as swapContributors,mi as teardownToleranceTelemetryWriter,Sa as toBroadcasterKey,lr as tracedAppendFileSync,Cr as tracedLinkSync,Hi as tracedMkdir,xi as tracedMkdirSync,Rr as tracedRename,Ar as tracedRenameSync,Nn as tracedRmSync,Aa as tracedRmdirSync,$a as tracedUnlinkSync,Jn as tracedWriteFile,Ga as tracedWriteFileSync,Ft as trustSystemCertificates,M as updateLastKnownHash,Ra as updateProcessLockPort,Ut as updateServerLockPort,J as validateAgentId,B as validateCloneInputs,st as validateSkillZip,oi as waitForServerLockDrain,y as withHiddenWindowsConsole,$r as withSpan,qe as withSpanSync,et as writeBundleDecision,ht as writeMarkdownlintRule,ne as writeRootGitignoreForNewRepo,xe as writeStateManifest,Be as writeTargetVersion,Ot as writeTracker};