@inkeep/open-knowledge 0.86.22-beta.0 → 0.86.22-beta.1

package/dist/THIRD_PARTY_NOTICES.md

@@ -6715,6 +6715,7 @@ The following MIT-licensed packages are patched in this repository via pnpm's `p
 | `@tiptap/extension-drag-handle@3.22.3` | `patches/@tiptap%2Fextension-drag-handle@3.22.3.patch` |
 | `@tiptap/y-tiptap@3.0.3` | `patches/@tiptap%2Fy-tiptap@3.0.3.patch` |
 | `@xterm/xterm@6.0.0` | `patches/@xterm%2Fxterm@6.0.0.patch` |
+| `cmdk@1.1.1` | `patches/cmdk@1.1.1.patch` |
 | `react-medium-image-zoom@5.4.3` | `patches/react-medium-image-zoom@5.4.3.patch` |
 | `react-resizable-panels@4.12.1` | `patches/react-resizable-panels@4.12.1.patch` |
 | `y-indexeddb@9.0.12` | `patches/y-indexeddb@9.0.12.patch` |

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$s as n,$u as r,Af as i,Bf as a,Ed as o,Ef as s,Eo as c,F as l,Fo as u,Fr as d,Gc as f,Hc as p,Hd as m,Ho as h,Ic as g,If as _,Jc as v,Lf as y,Md as b,Mf as x,N as S,Na as C,Nd as ee,Ol as w,Oo as te,Pd as T,Qc as ne,Qs as re,Rd as E,Sc as ie,So as ae,Td as D,Uc as oe,Uo as se,Vo as ce,Wa as le,X as ue,Za as de,_o as fe,aa as pe,ac as me,af as he,au as ge,bd as _e,bf as ve,cf as ye,dc as be,df as xe,ea as Se,ec as Ce,eu as we,gf as Te,hf as Ee,hl as De,hu as Oe,iu as ke,jd as Ae,jf as O,m as je,ms as Me,nu as Ne,ol as Pe,p as Fe,q as Ie,qd as Le,r as Re,ru as ze,tl as Be,uc as Ve,vl as He,wd as Ue,wf as We}from"./md-manager-BGnqyqi1-I7NmBKjQ.mjs";import{$i as Ge,$o as k,$r as Ke,Ao as A,As as qe,At as Je,Bo as Ye,Br as Xe,Bt as Ze,Ca as Qe,Ci as $e,Ct as et,Da as tt,Dn as nt,Ea as j,En as rt,Et as it,F as at,Fr as ot,Ga as st,Gt as ct,Hi as lt,Hn as ut,Ho as dt,Ii as ft,Ja as pt,Li as mt,Lo as ht,Ma as gt,Mn as _t,Mr as vt,No as yt,O as bt,On as xt,Pn as St,Qi as Ct,Qn as wt,Qo as Tt,Qt as Et,R as Dt,Ri as Ot,Sn as kt,So as At,Sr as jt,T as Mt,Ta as Nt,Tt as Pt,U as Ft,Ui as It,Uo as Lt,Ut as Rt,Vo as zt,Vt as Bt,Wa as Vt,Wi as Ht,Wo as Ut,Wt,X as Gt,Yr as Kt,Zi as qt,Zo as Jt,bi as Yt,bn as Xt,ca as Zt,ci as Qt,ct as $t,d as en,dn as tn,ds as nn,es as rn,fr as an,fs as on,ft as sn,ga as cn,gt as ln,hr as un,is as dn,jt as fn,ls as pn,m as mn,mn as hn,mr as gn,nr as _n,ns as vn,oa as yn,os as bn,ps as xn,pt as Sn,qr as Cn,ra as wn,rr as Tn,rs as En,sa as Dn,si as On,tn as kn,tr as An,ts as jn,us as Mn,va as Nn,vr as Pn,vt as Fn,wa as In,ws as Ln,wt as Rn,x as zn,xi as Bn,xn as Vn,ya as Hn,z as Un,zi as Wn,zo as Gn,zr as Kn}from"./dist-G9AKZ6QI.mjs";import{A as qn,C as Jn,D as Yn,E as Xn,M as Zn,N as Qn,O as $n,P as er,T as tr,_ as nr,a as rr,b as ir,c as ar,f as or,g as sr,h as cr,i as lr,j as ur,k as dr,m as fr,n as pr,o as mr,p as hr,r as gr,s as _r,t as vr,u as yr,v as br,w as xr,x as Sr,y as Cr}from"./src-DWr4iLfz.mjs";import{Ct as wr,D as Tr,G as Er,I as Dr,J as Or,K as kr,L as Ar,M as jr,N as Mr,O as Nr,Q as Pr,St as Fr,U as Ir,V as Lr,W as Rr,Y as zr,Z as Br,_t as Vr,bt as Hr,d as Ur,gt as Wr,ht as Gr,k as Kr,mt as qr,pt as Jr,q as Yr,vt as Xr,wt as M,xt as Zr,yt as Qr}from"./init-fa7qUByP.mjs";import{C as $r,T as ei,_ as ti,b as ni,d as ri,f as ii,g as ai,m as oi,o as si,p as ci,u as li,v as ui,w as di,x as fi,y as pi}from"./registry-probes-CiXdEvpS.mjs";import{c as mi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as hi,r as gi,t as _i}from"./dist-bundle-T0gq9zHH.mjs";import{E as vi,S as yi,y as bi}from"./start-BnNnu4Ae.mjs";import{n as xi,t as Si}from"./constants-qCWeJBfo.mjs";import{n as Ci,t as wi}from"./loader-Dby-XR0f.mjs";import{t as Ti}from"./removal-file-path-B23ELw_l.mjs";import{t as Ei}from"./launch-json-removal-Dat-CgnO.mjs";import{execFile as Di,execFileSync as Oi,execSync as ki,spawn as Ai,spawnSync as ji}from"node:child_process";import{basename as Mi,dirname as z,isAbsolute as Ni,join as B,posix as Pi,relative as V,resolve as H,sep as Fi}from"node:path";import Ii from"node:process";import{fileURLToPath as Li}from"node:url";import{accessSync as Ri,appendFileSync as zi,closeSync as Bi,constants as Vi,existsSync as U,lstatSync as Hi,mkdirSync as W,mkdtempSync as Ui,readFileSync as G,readdirSync as Wi,realpathSync as Gi,renameSync as Ki,rmSync as qi,statSync as K,unlinkSync as Ji,writeFileSync as Yi}from"node:fs";import{homedir as Xi,platform as Zi,tmpdir as Qi}from"node:os";import{realpath as $i,rm as ea}from"node:fs/promises";import{randomUUID as ta}from"node:crypto";import{promisify as na}from"node:util";import{setTimeout as ra}from"node:timers/promises";import{createInterface as ia}from"node:readline/promises";const aa={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var oa;oa||={};function sa(e){return Le(_e,e)}function ca(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function la(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=e.resolvedScope===void 0?cn(i,n):{ok:!0,scope:e.resolvedScope};if(!o.ok)throw Error(o.title);let s=o.scope,l=[],d=_t({projectDir:t,contentDir:n}),f=new Set,p=e=>{f.has(e)||(f.add(e),l.push(e))},m=kt(t,r,p),h=ae(m,{mode:`lint`}),g=[],_=e=>{g.push(e)},v=new Map,y=e=>{let t=z(e),r=v.get(t);if(r)return r;let i=tt(n,e,p),a=Vn(m,i);return v.set(t,a),a},b=[],x=!1,S=V(n,s.path),C=S.split(Fi).some(e=>e.startsWith(`.`)&&e!==`..`);s.kind===`file`?b.push(S):(S===``||C||!d.isDirExcluded(S))&&ee(s.path);function ee(e){let t;try{t=Wi(e,{withFileTypes:!0})}catch(t){x=!0,l.push(`could not read directory ${V(n,e)||`.`}: ${da(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(d.isDirExcluded(i))continue;ee(t)}else if(r.isFile()){if(!ua(r.name)||d.isExcluded(i))continue;b.push(i)}}}b.sort(),b.length===0&&!x&&l.push(de);let w=[],te=0,T=0,ne=0;for(let e of b){let t=B(n,e),r;try{r=G(t,`utf-8`)}catch(t){l.push(`could not read ${e}: ${da(t)}`);continue}let i=y(e),o=!1;if(a&&i.enabled){let n=c(r,i,e,_);if(n!==r){let i=rn(t);try{Yi(i,n,`utf-8`),Ki(i,t),r=n,o=!0,ne++}catch(t){try{Ji(i)}catch{}l.push(`could not write fix to ${e}: ${da(t)}`)}}}let s=await u(r,i,e,_);for(let e of s)e.severity===`error`?te++:T++;w.push({file:e,diagnostics:s,fixed:o})}return l.push(...ce(g)),{contentDir:n,files:w,warnings:l,fileCount:b.length,errorCount:te,warningCount:T,fixedCount:ne,ran:h}}function ua(e){let t=e.toLowerCase();return be.some(e=>t.endsWith(e))}function da(e){return e instanceof Error?e.message:String(e)}function fa(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(n,r)=>{let i=e(),a=process.cwd(),o=Hn(i,a),s=n===void 0?void 0:pa(n,Zn()),c=cn(s,o);if(!c.ok){let e={type:`urn:ok:error:not-found`,title:n===void 0||c.path===o?c.title:Et(n),status:404,instance:`urn:uuid:${ta()}`};r.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let l=i.contentRules,u=await la({projectDir:a,contentDir:o,baseConfig:l?h(l):t,targetPath:s,resolvedScope:c.scope,fix:r.fix===!0});r.json===!0?process.stdout.write(`${JSON.stringify(u,null,2)}\n`):process.stdout.write(`${ga(u)}\n`),(r.errorsOnly===!0?u.errorCount>0:ma(u))&&(process.exitCode=1)})}function pa(e,t){return H(t,e)}function ma(e){return e.errorCount>0||e.warningCount>0}function ha(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ga(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ha(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=se(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(te(n)?P(n):L(`! ${n}`))}return t.join(`
+import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$s as n,$u as r,Af as i,Bf as a,Ed as o,Ef as s,Eo as c,F as l,Fo as u,Fr as d,Gc as f,Hc as p,Hd as m,Ho as h,Ic as g,If as _,Jc as v,Lf as y,Md as b,Mf as x,N as S,Na as C,Nd as ee,Ol as w,Oo as te,Pd as T,Qc as ne,Qs as re,Rd as E,Sc as ie,So as ae,Td as D,Uc as oe,Uo as se,Vo as ce,Wa as le,X as ue,Za as de,_o as fe,aa as pe,ac as me,af as he,au as ge,bd as _e,bf as ve,cf as ye,dc as be,df as xe,ea as Se,ec as Ce,eu as we,gf as Te,hf as Ee,hl as De,hu as Oe,iu as ke,jd as Ae,jf as O,m as je,ms as Me,nu as Ne,ol as Pe,p as Fe,q as Ie,qd as Le,r as Re,ru as ze,tl as Be,uc as Ve,vl as He,wd as Ue,wf as We}from"./md-manager-BGnqyqi1-I7NmBKjQ.mjs";import{$i as Ge,$o as k,$r as Ke,Ao as A,As as qe,At as Je,Bo as Ye,Br as Xe,Bt as Ze,Ca as Qe,Ci as $e,Ct as et,Da as tt,Dn as nt,Ea as j,En as rt,Et as it,F as at,Fr as ot,Ga as st,Gt as ct,Hi as lt,Hn as ut,Ho as dt,Ii as ft,Ja as pt,Li as mt,Lo as ht,Ma as gt,Mn as _t,Mr as vt,No as yt,O as bt,On as xt,Pn as St,Qi as Ct,Qn as wt,Qo as Tt,Qt as Et,R as Dt,Ri as Ot,Sn as kt,So as At,Sr as jt,T as Mt,Ta as Nt,Tt as Pt,U as Ft,Ui as It,Uo as Lt,Ut as Rt,Vo as zt,Vt as Bt,Wa as Vt,Wi as Ht,Wo as Ut,Wt,X as Gt,Yr as Kt,Zi as qt,Zo as Jt,bi as Yt,bn as Xt,ca as Zt,ci as Qt,ct as $t,d as en,dn as tn,ds as nn,es as rn,fr as an,fs as on,ft as sn,ga as cn,gt as ln,hr as un,is as dn,jt as fn,ls as pn,m as mn,mn as hn,mr as gn,nr as _n,ns as vn,oa as yn,os as bn,ps as xn,pt as Sn,qr as Cn,ra as wn,rr as Tn,rs as En,sa as Dn,si as On,tn as kn,tr as An,ts as jn,us as Mn,va as Nn,vr as Pn,vt as Fn,wa as In,ws as Ln,wt as Rn,x as zn,xi as Bn,xn as Vn,ya as Hn,z as Un,zi as Wn,zo as Gn,zr as Kn}from"./dist-G9AKZ6QI.mjs";import{A as qn,C as Jn,D as Yn,E as Xn,M as Zn,N as Qn,O as $n,P as er,T as tr,_ as nr,a as rr,b as ir,c as ar,f as or,g as sr,h as cr,i as lr,j as ur,k as dr,m as fr,n as pr,o as mr,p as hr,r as gr,s as _r,t as vr,u as yr,v as br,w as xr,x as Sr,y as Cr}from"./src-MZQPH7K6.mjs";import{Ct as wr,D as Tr,G as Er,I as Dr,J as Or,K as kr,L as Ar,M as jr,N as Mr,O as Nr,Q as Pr,St as Fr,U as Ir,V as Lr,W as Rr,Y as zr,Z as Br,_t as Vr,bt as Hr,d as Ur,gt as Wr,ht as Gr,k as Kr,mt as qr,pt as Jr,q as Yr,vt as Xr,wt as M,xt as Zr,yt as Qr}from"./init-CDT9ZRbp.mjs";import{C as $r,T as ei,_ as ti,b as ni,d as ri,f as ii,g as ai,m as oi,o as si,p as ci,u as li,v as ui,w as di,x as fi,y as pi}from"./registry-probes-Dmp884DR.mjs";import{c as mi,i as N,n as P,o as F,r as I,s as L,t as R}from"./colors-r_owlCuY.mjs";import{n as hi,r as gi,t as _i}from"./dist-bundle-T0gq9zHH.mjs";import{E as vi,S as yi,y as bi}from"./start-BLSfVYJc.mjs";import{n as xi,t as Si}from"./constants-GwXjnOvH.mjs";import{n as Ci,t as wi}from"./loader-Bqiz9lFA.mjs";import{t as Ti}from"./removal-file-path-_UkMuU4P.mjs";import{t as Ei}from"./launch-json-removal-DLUrTbMH.mjs";import{execFile as Di,execFileSync as Oi,execSync as ki,spawn as Ai,spawnSync as ji}from"node:child_process";import{basename as Mi,dirname as z,isAbsolute as Ni,join as B,posix as Pi,relative as V,resolve as H,sep as Fi}from"node:path";import Ii from"node:process";import{fileURLToPath as Li}from"node:url";import{accessSync as Ri,appendFileSync as zi,closeSync as Bi,constants as Vi,existsSync as U,lstatSync as Hi,mkdirSync as W,mkdtempSync as Ui,readFileSync as G,readdirSync as Wi,realpathSync as Gi,renameSync as Ki,rmSync as qi,statSync as K,unlinkSync as Ji,writeFileSync as Yi}from"node:fs";import{homedir as Xi,platform as Zi,tmpdir as Qi}from"node:os";import{realpath as $i,rm as ea}from"node:fs/promises";import{randomUUID as ta}from"node:crypto";import{promisify as na}from"node:util";import{setTimeout as ra}from"node:timers/promises";import{createInterface as ia}from"node:readline/promises";const aa={invalid_type:`invalid_type`,too_big:`too_big`,too_small:`too_small`,invalid_format:`invalid_format`,not_multiple_of:`not_multiple_of`,unrecognized_keys:`unrecognized_keys`,invalid_union:`invalid_union`,invalid_key:`invalid_key`,invalid_element:`invalid_element`,invalid_value:`invalid_value`,custom:`custom`};var oa;oa||={};function sa(e){return Le(_e,e)}function ca(e){return e.created.length>0||e.packSkills?.some(e=>e.pending)===!0||e.requiredPlugins?.some(e=>e.pending)===!0}async function la(e){let{projectDir:t,contentDir:n,baseConfig:r,targetPath:i,fix:a=!1}=e,o=e.resolvedScope===void 0?cn(i,n):{ok:!0,scope:e.resolvedScope};if(!o.ok)throw Error(o.title);let s=o.scope,l=[],d=_t({projectDir:t,contentDir:n}),f=new Set,p=e=>{f.has(e)||(f.add(e),l.push(e))},m=kt(t,r,p),h=ae(m,{mode:`lint`}),g=[],_=e=>{g.push(e)},v=new Map,y=e=>{let t=z(e),r=v.get(t);if(r)return r;let i=tt(n,e,p),a=Vn(m,i);return v.set(t,a),a},b=[],x=!1,S=V(n,s.path),C=S.split(Fi).some(e=>e.startsWith(`.`)&&e!==`..`);s.kind===`file`?b.push(S):(S===``||C||!d.isDirExcluded(S))&&ee(s.path);function ee(e){let t;try{t=Wi(e,{withFileTypes:!0})}catch(t){x=!0,l.push(`could not read directory ${V(n,e)||`.`}: ${da(t)}`);return}for(let r of t){if(r.name.startsWith(`.`))continue;let t=B(e,r.name),i=V(n,t);if(r.isDirectory()){if(d.isDirExcluded(i))continue;ee(t)}else if(r.isFile()){if(!ua(r.name)||d.isExcluded(i))continue;b.push(i)}}}b.sort(),b.length===0&&!x&&l.push(de);let w=[],te=0,T=0,ne=0;for(let e of b){let t=B(n,e),r;try{r=G(t,`utf-8`)}catch(t){l.push(`could not read ${e}: ${da(t)}`);continue}let i=y(e),o=!1;if(a&&i.enabled){let n=c(r,i,e,_);if(n!==r){let i=rn(t);try{Yi(i,n,`utf-8`),Ki(i,t),r=n,o=!0,ne++}catch(t){try{Ji(i)}catch{}l.push(`could not write fix to ${e}: ${da(t)}`)}}}let s=await u(r,i,e,_);for(let e of s)e.severity===`error`?te++:T++;w.push({file:e,diagnostics:s,fixed:o})}return l.push(...ce(g)),{contentDir:n,files:w,warnings:l,fileCount:b.length,errorCount:te,warningCount:T,fixedCount:ne,ran:h}}function ua(e){let t=e.toLowerCase();return be.some(e=>t.endsWith(e))}function da(e){return e instanceof Error?e.message:String(e)}function fa(e){return new M(`lint`).description(`Lint markdown content (headless) — whole project, a folder, or a single file`).argument(`[path]`,`Folder or file to lint, relative to where you run the command`).option(`--json`,`Emit structured JSON instead of formatted text`).option(`--fix`,`Auto-fix fixable issues in place (markdownlint rules only)`).option(`--errors-only`,`Exit non-zero only on error-severity problems (findings are warning-severity unless your .markdownlint.* assigns a rule "error")`).action(async(n,r)=>{let i=e(),a=process.cwd(),o=Hn(i,a),s=n===void 0?void 0:pa(n,Zn()),c=cn(s,o);if(!c.ok){let e={type:`urn:ok:error:not-found`,title:n===void 0||c.path===o?c.title:Et(n),status:404,instance:`urn:uuid:${ta()}`};r.json===!0?process.stdout.write(`${JSON.stringify(e,null,2)}\n`):process.stderr.write(`${e.title}\n`),process.exitCode=1;return}let l=i.contentRules,u=await la({projectDir:a,contentDir:o,baseConfig:l?h(l):t,targetPath:s,resolvedScope:c.scope,fix:r.fix===!0});r.json===!0?process.stdout.write(`${JSON.stringify(u,null,2)}\n`):process.stdout.write(`${ga(u)}\n`),(r.errorsOnly===!0?u.errorCount>0:ma(u))&&(process.exitCode=1)})}function pa(e,t){return H(t,e)}function ma(e){return e.errorCount>0||e.warningCount>0}function ha(e){let t=[R(e.file)+(e.fixed?P(` (fixed)`):``)];for(let n of e.diagnostics){let e=P(`${n.range.start.line+1}:${n.range.start.character+1}`.padEnd(7)),r=n.severity===`error`?I(`error  `):L(`warning`);t.push(`  ${e} ${r}  ${n.message}  ${P(`${n.source}/${n.code}`)}`)}return t.push(``),t}function ga(e){let t=[];for(let n of e.files)n.diagnostics.length>0&&t.push(...ha(n));let n=e.errorCount+e.warningCount;if(e.fileCount===0)t.push(P(`No documents were checked.`));else if(n===0)t.push(F(`✓ No problems in ${e.fileCount} file${e.fileCount===1?``:`s`}.`));else{let r=[`${n} problem${n===1?``:`s`}`];r.push(`${e.errorCount} error${e.errorCount===1?``:`s`}`),r.push(`${e.warningCount} warning${e.warningCount===1?``:`s`}`),t.push(`${I(r[0]??``)} (${r[1]}, ${r[2]}) across ${e.fileCount} file${e.fileCount===1?``:`s`}.`)}e.fixedCount>0&&t.push(P(`Fixed ${e.fixedCount} file${e.fixedCount===1?``:`s`}.`));let r=se(e.ran,e.fileCount);if(t.push(...r.map(e=>P(e))),e.warnings.length>0){t.push(``);for(let n of e.warnings)t.push(te(n)?P(n):L(`! ${n}`))}return t.join(`
 `)}const _a={out:e=>process.stdout.write(`${e}\n`),err:e=>process.stderr.write(`${e}\n`)},va=T({title:E().optional(),error:E().optional(),message:E().optional()});function ya(){let e=O();return`OpenKnowledge server is not running — the links validator needs the live backlink index. Start it with \`${e} start\` (or open OK Desktop) and re-run. For headless lint-only checks, use \`${e} lint\`.`}function ba(e){return new M(`audit`).description(`Unified validation audit (markdown lint + broken internal links) via the running project server`).argument(`[path]`,`Folder or file to audit, relative to where you run the command`).option(`--json`,`Emit the full structured JSON response instead of formatted text`).option(`--errors-only`,`Exit non-zero only on error-severity problems (broken links default to warnings; the project's validation.links setting can raise them to errors)`).action(async(t,n)=>{let r=await xa(t,n,e(),process.cwd(),Zn());r!==0&&(process.exitCode=r)})}async function xa(e,t,n,r,i,a=_a){let o=Hn(n,r),s;if(e!==void 0){let t=Sa(e,i,o);if(t===null){if(cn(void 0,o).ok)return a.err(`Path is outside the content directory (${o}): ${e}`),1}else s=t===``?void 0:t}let c=Ct(j(r));if(!c||c.port<=0)return a.err(ya()),1;let l=`http://127.0.0.1:${c.port}`,u=s===void 0?``:`?path=${encodeURIComponent(s)}`,d;try{d=await fetch(`${l}/api/audit${u}`,{headers:qe({kind:`cli`,runtimeVersion:$t})})}catch(e){return a.err(`Could not reach the OpenKnowledge server on port ${c.port}: ${String(e)}`),1}if(!d.ok){let e=await d.json().catch(()=>null),n=Me.safeParse(e);if(n.success)t.json===!0?a.out(JSON.stringify(n.data,null,2)):a.err(`Audit failed: ${n.data.title}`);else{let t=va.safeParse(e),n=t.success?t.data.title??t.data.error??t.data.message:void 0;a.err(`Audit failed: ${n??`server responded with ${d.status}`}`)}return 1}let f=fe.safeParse(await d.json().catch(()=>null));if(!f.success){let e=f.error.issues.map(e=>`${e.path.join(`.`)}: ${e.message}`).join(`; `);return a.err(`Audit failed: unexpected response shape from the server. Schema issues: ${e}`),1}let p=f.data;if(t.json===!0)a.out(JSON.stringify(p,null,2));else{let e=p.brokenLinkSuppression?un(p.brokenLinkSuppression,{surface:`cli`,serverBaseUrl:l}):void 0;a.out([ga(Ca(p)),...e===void 0?[]:[e]].join(`
 `))}return+(t.errorsOnly===!0?p.errorCount>0:p.errorCount+p.warningCount>0)}function Sa(e,t,n){let r=V(n,H(t,e));return r===``?``:r.startsWith(`..`)||Ni(r)?null:r.split(Fi).join(`/`)}function Ca(e){return{files:e.files.map(e=>({file:e.file,fixed:!1,diagnostics:e.diagnostics})),warnings:e.warnings,fileCount:e.fileCount,errorCount:e.errorCount,warningCount:e.warningCount,fixedCount:0,ran:e.ran}}async function wa(e,t,n,r){let i=Ta(await Ea(e)),a=i.host??``,o=e=>e.replace(/[\r\n]/g,``);if(!a)return r?.log?.warn({outcome:`no-host`,backend:n.backend},`[auth] git-credential get`),1;if(i.protocol!==void 0&&i.protocol!==`https`)return r?.log?.warn({host:a,protocol:i.protocol,outcome:`insecure-protocol`,backend:n.backend},`[auth] git-credential get`),1;let s=Ne(a,i.protocol),c=process.env.OK_GH_TOKEN,l=process.env.OK_GH_TOKEN_HOST;if(c&&l&&Ne(l)===s)return r?.log?.debug({host:a,outcome:`gh-env-token`,backend:n.backend,relayLogin:process.env.OK_GH_TOKEN_LOGIN},`[auth] git-credential get`),t.write(`username=x-access-token\npassword=${o(c)}\n`),0;let u=await n.get(s)??(s===a?null:await n.get(a)),d=r?.getDiag?.(),f=u==null?d?.kind??`absent`:`found`;if(r?.log){let e={host:a,outcome:f,backend:n.backend,...d?.error?{keychainError:d.error}:{}};f===`found`?r.log.debug(e,`[auth] git-credential get`):r.log.warn(e,`[auth] git-credential get`)}return u==null?1:(t.write(`username=${o(u.login)}\npassword=${o(u.token)}\n`),0)}function Ta(e){let t={};for(let n of e.split(`
 `)){let e=n.trim();if(e===``)continue;let r=e.indexOf(`=`);r!==-1&&(t[e.slice(0,r)]=e.slice(r+1))}return t}function Ea(e){return new Promise((t,n)=>{let r=[];e.on(`data`,e=>r.push(e)),e.on(`end`,()=>t(Buffer.concat(r).toString(`utf-8`))),e.on(`error`,n)})}function Da(e,t){let n=new M(`git-credential`);return n.description(`Git credential helper (git credential-helper protocol)`),n.command(`get`).description(`Lookup credentials from TokenStore (called by git)`).action(async()=>{let n=t?.();try{let t,r=await e({onKeychainRead:e=>{t=e},onBackendSelected:e=>{e.backend===`file`&&e.reason&&n?.warn({backend:`file`,reason:e.reason},`[auth] token storage fallback`)}}),i=await wa(process.stdin,process.stdout,r,{log:n,getDiag:()=>t});await gn(n),process.exit(i)}catch(e){n?.error({err:e},`[auth] git-credential get: unexpected error`),await gn(n),process.exit(1)}}),n}function Oa(e){let t=e.endpoint.DEFAULTS;return/^https:\/\/(api\.)?github\.com$/.test(t.baseUrl)?`https://github.com`:t.baseUrl.replace(`/api/v3`,``)}async function ka(e,t,n){let r={baseUrl:Oa(e),headers:{accept:`application/json`},...n},i=await e(t,r);if(`error`in i.data){let n=new hi(`${i.data.error_description} (${i.data.error}, ${i.data.error_uri})`,400,{request:e.endpoint.merge(t,r)});throw n.response=i,n}return i}async function Aa(e){let t=e.request||_i,n={client_id:e.clientId};return`scopes`in e&&Array.isArray(e.scopes)&&(n.scope=e.scopes.join(` `)),ka(t,`POST /login/device/code`,n)}async function ja(e){let t=await ka(e.request||_i,`POST /login/oauth/access_token`,{client_id:e.clientId,device_code:e.code,grant_type:`urn:ietf:params:oauth:grant-type:device_code`}),n={clientType:e.clientType,clientId:e.clientId,token:t.data.access_token,scopes:t.data.scope.split(/\s+/).filter(Boolean)};if(`clientSecret`in e&&(n.clientSecret=e.clientSecret),e.clientType===`github-app`){if(`refresh_token`in t.data){let e=new Date(t.headers.date).getTime();n.refreshToken=t.data.refresh_token,n.expiresAt=Ma(e,t.data.expires_in),n.refreshTokenExpiresAt=Ma(e,t.data.refresh_token_expires_in)}delete n.scopes}return{...t,authentication:n}}function Ma(e,t){return new Date(e+t*1e3).toISOString()}async function Na(e,t){let n=Pa(e,t.auth);if(n)return n;let{data:r}=await Aa({clientType:e.clientType,clientId:e.clientId,request:t.request||e.request,scopes:t.auth.scopes||e.scopes});await e.onVerification(r);let i=await Ia(t.request||e.request,e.clientId,e.clientType,r);return e.authentication=i,i}function Pa(e,t){if(t.refresh===!0||!e.authentication)return!1;if(e.clientType===`github-app`)return e.authentication;let n=e.authentication;return(`scopes`in t&&t.scopes||e.scopes).join(` `)===n.scopes.join(` `)&&n}async function Fa(e){await new Promise(t=>setTimeout(t,e*1e3))}async function Ia(e,t,n,r){try{let i={clientId:t,request:e,code:r.device_code},{authentication:a}=n===`oauth-app`?await ja({...i,clientType:`oauth-app`}):await ja({...i,clientType:`github-app`});return{type:`token`,tokenType:`oauth`,...a}}catch(i){if(!i.response)throw i;let a=i.response.data.error;if(a===`authorization_pending`)return await Fa(r.interval),Ia(e,t,n,r);if(a===`slow_down`)return await Fa(r.interval+7),Ia(e,t,n,r);throw i}}async function La(e,t){return Na(e,{auth:t})}async function Ra(e,t,n,r){let i=t.endpoint.merge(n,r);if(/\/login\/(oauth\/access_token|device\/code)$/.test(i.url))return t(i);let{token:a}=await Na(e,{request:t,auth:{type:`oauth`}});return i.headers.authorization=`token ${a}`,t(i)}var za=`0.0.0-development`;function Ba(e){let t=e.request||_i.defaults({headers:{"user-agent":`octokit-auth-oauth-device.js/${za} ${gi()}`}}),{request:n=t,...r}=e,i=e.clientType===`github-app`?{...r,clientType:`github-app`,request:n}:{...r,clientType:`oauth-app`,request:n,scopes:e.scopes||[]};if(!e.clientId)throw Error(`[@octokit/auth-oauth-device] "clientId" option must be set (https://github.com/octokit/auth-oauth-device.js#usage)`);if(!e.onVerification)throw Error(`[@octokit/auth-oauth-device] "onVerification" option must be a function (https://github.com/octokit/auth-oauth-device.js#usage)`);return Object.assign(La.bind(null,i),{hook:Ra.bind(null,i)})}async function Va(e){let{clientId:t,scopes:n=[`repo`,`read:user`,`user:email`],onVerification:r,host:i}=e,a=i&&i!==`github.com`?`https://${i}/api/v3`:`https://api.github.com`,o=Ba({clientType:`oauth-app`,clientId:t,scopes:n,onVerification:async e=>{await r({verificationUri:e.verification_uri,userCode:e.user_code,expiresIn:e.expires_in,interval:e.interval})},request:a===`https://api.github.com`?void 0:(await import(`./dist-bundle-Dl9Hkg-Q.mjs`)).request.defaults({baseUrl:a})}),s;try{s=await o({type:`oauth`})}catch(e){if(e instanceof Error){let t=e.message.toLowerCase();throw t.includes(`access_denied`)?Error(`Device-flow authorization was denied.`):t.includes(`expired_token`)||t.includes(`timeout`)||t.includes(`timed out`)?Error(`Device-flow code expired before authorization — please try again.`):Error(`GitHub sign-in failed: ${e.message}`)}throw e}return{token:s.token,tokenType:s.tokenType,scopes:s.scopes??[]}}function Ha(){return process.env.OPEN_KNOWLEDGE_GITHUB_CLIENT_ID??`Ov23liqlSd0V1MwR6rhI`}function Ua(){let e=process.cwd();return an(e)?.rootPath??e}function Wa(e){return`${v(`global.yml`)}:\n\n  git:\n    hosts:\n      ${e}:\n        provider: github\n`}function Ga(e){return`  ${O()} auth token --host ${e} --username <username>`}function Ka(e){return`If ${e} is not a GitHub host, store an access token for git with:\n\n${Ga(e)}\n`}function qa(e){return`${I(`Error:`)} ${e} is not a known GitHub host.\nTo use a GitHub Enterprise Server host, declare it in ${Wa(e)}\n`+Ka(e)}function Ja(e){return ke(e,It())}function Ya(e){return Ja(e)?null:qa(ge(e))}function Xa(e){let t=Ya(e);t!==null&&(process.stderr.write(t),process.exit(1))}function Za(e,t){if(e===null)return`${I(`Error:`)} Cannot determine a GitHub hostname from this project's git remote.\nPass --host <hostname> to target a GitHub host explicitly.
@@ -10,10 +10,10 @@ import{o as e}from"./rolldown-runtime-tZXQYakl.mjs";import{$a as t,$s as n,$u as
 `),process.exit(1));let o=r===`github.com`?void 0:`https://${r}/api/v3`,s=new $o({auth:a,...o?{baseUrl:o}:{}}),c=`unknown`,l,u;try{let{data:e}=await s.users.getAuthenticated();c=e.login,l=e.name??void 0,u=e.email??void 0}catch(e){let t=ns(e,r).message;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}try{await t.set(r,c,a,{gitProtocol:`https`,name:l,email:u})}catch(e){let t=`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`;i?process.stdout.write(`${JSON.stringify({type:`error`,message:t})}\n`):process.stderr.write(`${t}\n`),process.exit(1)}i?process.stdout.write(`${JSON.stringify({type:`complete`,host:r,login:c})}\n`):process.stderr.write(`✓ PAT stored for ${c} on ${r}\n`)}function as(e){return new M(`pat`).description(`Store a Personal Access Token`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=$a(t.host),r=t.tokenStdin?rs:void 0;await is({host:n,json:t.json},await e(),r)})}async function os(e,t,n=vi){let r=n(e);return r.available&&r.token?r.token:(await t.get(e))?.token??null}async function ss(e,t){let{host:n,json:r}=e,i=await os(n,t);i??(process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=new $o({auth:i,...a?{baseUrl:a}:{}}),s=[];for await(let e of o.paginate.iterator(o.repos.listForAuthenticatedUser,{per_page:100,sort:`updated`}))for(let t of e.data)s.push({full_name:t.full_name,clone_url:t.clone_url,private:t.private});if(r)process.stdout.write(`${JSON.stringify({type:`repos`,host:n,repos:s})}\n`);else for(let e of s)process.stdout.write(`${e.full_name}  ${e.clone_url}\n`)}function cs(e){return new M(`repos`).description(`List accessible repositories`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=$a(t.host);await ss({...t,host:n},await e())})}async function ls(e){let{host:t}=e,{touched:n}=await ni(t);if(n.length===0){process.stderr.write(`Not signed in to ${t}\n`);return}process.stderr.write(`✓ Signed out from ${t}\n`),n.includes(`keychain`)&&process.stderr.write(`  cleared from OS keychain
 `),n.includes(`file`)&&process.stderr.write(`  cleared from ${pi()}\n`)}function us(){return new M(`signout`).description(`Remove stored credentials`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname (default: the GitHub origin host, or github.com with no origin; required otherwise)`).action(async e=>{let t=eo(e.host);await ls({...e,host:t})})}async function ds(e,t,n=vi){let r=n(e);if(r.available&&r.token)return{tier:`A`,token:r.token};let i=await t.get(e);return i==null?{tier:`none`}:{tier:i.gitProtocol===`ssh`?`C`:`B`,token:i.token}}function fs(e,t,n){return{type:`status`,host:e,backend:t,...n}}async function ps(e,t){let n=await t.get(e);return n==null?{authenticated:!1}:{authenticated:!1,unverified:!0,login:n.login}}function ms(e,t){return e.unverified===!0?`Token stored for ${e.login} on ${t}. ${t} is not a GitHub host, so OpenKnowledge does not verify it; git uses this credential to push and pull.`:`No token stored for ${t}. Store one with:\n\n${Ga(t)}`}async function hs(e,t){let{host:n,json:r}=e,i=await ps(n,t);r?process.stdout.write(`${JSON.stringify(fs(n,t.backend,i))}\n`):process.stderr.write(`${ms(i,n)}\n`),process.exit(i.unverified===!0?0:1)}async function gs(e,t){let{host:n,json:r}=e,i=t.backend,a=await ds(n,t);a.tier===`none`&&(r?process.stdout.write(`${JSON.stringify(fs(n,i,{authenticated:!1}))}\n`):process.stderr.write(`Not logged in to ${n}\n`),process.exit(1));let o=n===`github.com`?void 0:`https://${n}/api/v3`,s=new $o({auth:a.token,...o?{baseUrl:o}:{}});try{let{data:e}=await s.users.getAuthenticated();r?process.stdout.write(`${JSON.stringify(fs(n,i,{authenticated:!0,tier:a.tier,login:e.login,name:e.name,email:e.email}))}\n`):process.stderr.write(`✓ Logged in as ${e.login} on ${n}\n`)}catch(e){let t=ns(e,n);r?process.stdout.write(`${JSON.stringify(fs(n,i,{authenticated:!1,error:t.message}))}\n`):process.stderr.write(`✗ ${t.message}\n`),process.exit(1)}}function _s(e){return new M(`status`).description(`Show authentication status`).option(`--host <host>`,`Git hostname (default: the origin host, or github.com with no origin; required when origin has no hostname, such as a local path). A non-GitHub host reports its stored token without verifying it`).option(`--json`,`Output JSON`,!1).action(async t=>{let n=Qa(t.host);if(n.kind===`other`){await hs({...t,host:n.host},await e());return}await gs({...t,host:n.host},await e())})}function vs(e,t){return t?process.stdout.write(`${JSON.stringify(e)}\n`):e.type===`error`?process.stderr.write(`${e.message}\n`):process.stderr.write(`✓ Token stored for ${e.login} on ${e.host}\n`),e}async function ys(e,t,n){let{json:r}=e,i=e.host?.trim()??``;if(!i)return vs({type:`error`,message:`A host is required. Pass --host <host>.`},r);if(!ze(i))return vs({type:`error`,message:`${i} is not a host name. Pass the host git connects to, with an optional :port and no scheme or path, for example git.example.com or git.example.com:8443.`},r);let a=Ne(i);if(Ja(a))return vs({type:`error`,message:`${a} is a GitHub host. Use ${O()} auth pat --host ${a}, which checks the token with GitHub before storing it.`},r);let o=e.username?.trim()??``;if(!o)return vs({type:`error`,message:`A username is required. Pass --username <username>.`},r);let s=await(n??(()=>ao({message:`Enter token:`})))();if(!s)return vs({type:`error`,message:`No token provided`},r);try{await t.set(a,o,s,{gitProtocol:`https`})}catch(e){return vs({type:`error`,message:`Could not save the token to the credential store: ${e instanceof Error?e.message:String(e)}`},r)}return vs({type:`complete`,host:a,login:o},r)}function bs(e){return new M(`token`).description(`Store an access token for any git host`).option(`--host <host>`,`Git host to store the token for`).option(`--username <username>`,`Username git sends with the token (Bitbucket: x-bitbucket-api-token-auth for an API token, x-token-auth for a repository or workspace access token; oauth2 for GitLab; your Gitea username; any non-empty value for Azure DevOps)`).option(`--json`,`Output JSON`,!1).option(`--token-stdin`,`Read the token from stdin instead of prompting`,!1).action(async t=>{let n=t.tokenStdin?rs:void 0;(await ys({host:t.host,username:t.username,json:t.json},await e(),n)).type===`error`&&process.exit(1)})}function xs(e){let t=new M(`auth`);t.description(`Git host authentication management`);let n=e=>fi(void 0,e);return t.addCommand(ro(n)),t.addCommand(_s(n)),t.addCommand(cs(n)),t.addCommand(us()),t.addCommand(as(n)),t.addCommand(bs(n)),t.addCommand(Da(n,e)),t}function Ss(e,t=Zi(),n=ti){try{t===`darwin`?n(`/usr/bin/open`,[`-R`,e]):n(t===`win32`?`explorer.exe`:`xdg-open`,[z(e)])}catch{}}function Cs(){return new M(`bug-report`).description(`Generate a diagnostic bundle for bug reporting`).option(`--reveal`,`Reveal the bundle in your file manager (default: true)`,!0).option(`--no-reveal`,`Do not reveal the bundle in your file manager`).action(async e=>{try{let{zipPath:t,summary:n}=await br({level:`standard`,projectDir:process.cwd(),redact:!0,outputPath:Sr(),logger:di()});process.stdout.write(`${t}\n`),n.redactedLineCount>0&&process.stderr.write(`ok bug-report: ${n.redactedLineCount} line(s) auto-redacted across ${n.redactions.length} file(s)\n`),e.reveal&&Ss(t)}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`ok bug-report: failed — ${t}\n`),process.exitCode=1}})}function ws(e){switch(e.status){case`read-error`:return{prune:[],refusal:{lockPath:e.lockPath,error:`Cannot read the server lock: ${e.error}. Restore file and parent-directory access, then retry.`}};case`corrupt`:return e.foreignHost?{prune:[],refusal:{lockPath:e.lockPath,error:sr(e)}}:{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`dead-pid`:return{prune:[{name:`server`,lockPath:e.lockPath,reason:e.status}]};case`unverified-owner`:case`foreign-host`:return{prune:[],refusal:{lockPath:e.lockPath,error:sr(e)}};case`alive`:case`missing`:return{prune:[]};default:return e}}function Ts(e){let t=e.inspect??(()=>nr(e.lockDir,`server`,{isAlive:Ke})),n=e.unlink??(e=>Ji(e)),r=e.log??(e=>console.log(e)),i=e.error??(e=>console.error(e)),a=ws(t());if(a.refusal)return i(`${a.refusal.lockPath}: ${a.refusal.error}`),{pruned:[],failed:[{target:{name:`server`,lockPath:a.refusal.lockPath},error:a.refusal.error}]};if(a.prune.length===0)return r(`No stale locks.`),{pruned:[],failed:[]};let o=[],s=[];for(let e of a.prune)try{n(e.lockPath),o.push(e)}catch(t){s.push({target:e,error:t instanceof Error?t.message:String(t)})}if(o.length>0){let e=o.map(e=>`${e.name} (${e.reason})`).join(`, `);r(`Pruned ${o.length} stale lock${o.length===1?``:`s`}: ${e}`)}return s.length>0&&i(`Failed to prune: ${s.map(({target:e,error:t})=>`${e.name} (${e.lockPath}): ${t}`).join(`; `)}`),{pruned:o,failed:s}}function Es(e){return new M(`clean`).description(`Prune a stale / corrupt open-knowledge lock file (never touches live locks)`).action(()=>{e(),Ts({lockDir:j(process.cwd())}).failed.length>0&&(process.exitCode=1)})}function Ds(e){return`!${e.map(ye).join(` `)} auth git-credential`}function Os(e){return`credential.helper=${Ds(e)}`}function ks(e,t){let n=`credential.https://${t}.helper`;return[`${n}=`,`${n}=${Ds(e)}`]}async function As(e,t,n={},r=vi){let i=[`credential.helper=`,Os(n.selfCliArgs??[`open-knowledge`])];if(!n.skipGhDetect){let t=r(e,{login:n.login});if(t.available&&t.token)return{tier:`A`,gitConfig:i,relayToken:{token:t.token,host:e,...t.resolvedLogin?{login:t.resolvedLogin}:{}}}}let a=(n.credentialHost===void 0?null:await t.get(n.credentialHost))??await t.get(e);return a==null?{tier:`none`,gitConfig:[]}:{tier:a.gitProtocol===`ssh`?`C`:`B`,gitConfig:i}}async function js(e,t,n=fetch){let r=new AbortController,i=setTimeout(()=>r.abort(),5e3);try{return(await n(`https://api.github.com/repos/${encodeURIComponent(e)}/${encodeURIComponent(t)}`,{signal:r.signal,headers:{"User-Agent":`open-knowledge-cli`,Accept:`application/vnd.github+json`}})).status===200}catch{return!1}finally{clearTimeout(i)}}const Ms=[[`count`,0,10],[`compress`,10,20],[`receiv`,20,60],[`resolv`,60,100]];function Ns(e){let t=/^([\w ]+):\s+(\d+)%/.exec(e.trim());if(!t)return null;let n=t[1].toLowerCase(),r=Number(t[2]);for(let[e,i,a]of Ms)if(n.includes(e))return{stage:t[1],pct:Math.round(i+r/100*(a-i))};return null}function q(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Ps(e=process.env){let t={};for(let[n,r]of Object.entries(e))r!==void 0&&(t[n]=r);return t.GIT_TERMINAL_PROMPT=`0`,t.LANG=`C`,t.LC_ALL=`C`,t}function Fs(e,t=process.env){let n=Ps(t);return e.relayToken?(n.OK_GH_TOKEN=e.relayToken.token,n.OK_GH_TOKEN_HOST=e.relayToken.host,e.relayToken.login?n.OK_GH_TOKEN_LOGIN=e.relayToken.login:delete n.OK_GH_TOKEN_LOGIN):(delete n.OK_GH_TOKEN,delete n.OK_GH_TOKEN_HOST,delete n.OK_GH_TOKEN_LOGIN),n}function Is(e=process.argv,t=process.execPath){let n=e[1];return n?[t,n]:[t]}function Ls(e){return typeof e!=`string`||e.length===0?[`--progress`]:[`--progress`,`-b`,e]}const Rs=n;async function zs(e){try{return await e.clone(Ls(e.branch)),{fellBack:!1}}catch(t){if(e.branch!==null&&Rs(t))return e.onFallback(e.branch),await e.clone(Ls(null)),{fellBack:!0};throw t}}function Bs(e,t){return{baseDir:e,config:t,unsafe:{allowUnsafeCredentialHelper:!0,allowUnsafePager:!0,allowUnsafeSshCommand:!0,allowUnsafeAskPass:!0,allowUnsafeEditor:!0,allowUnsafeConfigEnvCount:!0}}}function Vs(e,t,n){return e===`https`&&t===`github.com`&&n}function Hs(e,t){if(e===void 0)return null;let{declaredLogin:n,declaredSource:r}=e,i;switch(r){case`remote-url`:i=`${t.url} names ${n}`;break;case`credential-config`:i=`Your Git credential configuration names ${n}`;break;default:i=`Your Git configuration names ${n}`}return`⚠ ${i}, but the GitHub CLI couldn't confirm that account — ${t.operation} used its active account.\n  Run \`gh auth status\` to see which account that is. If ${n} is listed as active, nothing is wrong; confirming an account by name needs GitHub CLI 2.40 or newer.\n`}function Us(e){return Hs(e,{url:`The clone URL`,operation:`the clone`})}async function Ws(e,t,n={}){let r=cr(e);if(!r)throw Error(`Invalid git URL: ${Ys(e)}`);if(e.trim().startsWith(`http://`))return{auth:{tier:`none`,gitConfig:[]}};let i=In(e,{cwd:n.cwd,_readCredentialUrlMatch:n._readCredentialUrlMatch}),a=we(e)??void 0,o=await As(i.host??r.hostname,t,{selfCliArgs:n.selfCliArgs,login:i.login,credentialHost:a},n._detectGhFn),s=i.login!==void 0&&o.tier===`A`&&!Vt(o.relayToken?.login,i.login)?{declaredLogin:i.login,declaredSource:i.source}:void 0;return{auth:o,...s===void 0?{}:{declaredMiss:s}}}function Gs(e,t){let n=`${t.owner}/${t.name}`;return e===n||e===`${n}.git`?`https://${t.hostname}/${n}`:e}async function Ks(e,t,n,r=process.cwd()){let i=cr(e);if(!i)throw Error(`Invalid git URL: ${Ys(e)}`);let a=Gs(e,i),o=t.dir?H(r,t.dir):H(r,i.name),s=U(o);if(s&&Wi(o).length>0)throw Error(`Target directory is not empty: ${o}`);Rt();let c=$r(),l=i.protocol===`https`&&i.hostname===`github.com`&&await js(i.owner,i.name),u=Vs(i.protocol,i.hostname,l)?{auth:{tier:`none`,gitConfig:[]}}:await Ws(a,c,{selfCliArgs:Is(),cwd:r,...t._detectGhFn?{_detectGhFn:t._detectGhFn}:{}}),d=u.auth;if(t.onAuthResolved?.({tier:d.tier,login:d.relayToken?.login}),!t.json){let e=Us(u.declaredMiss);e&&process.stderr.write(e)}let f=Fs(d),p=Bs(r,d.gitConfig),m=k(p).env(f),h=-1;m.outputHandler((e,n,r)=>{r.on(`data`,e=>{let n=e.toString(`utf-8`);for(let e of n.split(`
 `)){let n=Ns(e);n&&n.pct!==h&&(h=n.pct,q(t.json,{type:`progress`,pct:n.pct,stage:n.stage}),t.json||process.stderr.write(`\r  Cloning ${n.pct}%`))}})}),await zs({branch:typeof t.branch==`string`&&t.branch.length>0?t.branch:null,clone:e=>m.clone(a,o,[...e,`--no-checkout`]),onFallback:e=>{q(t.json,{type:`branch-fallback`,branch:e}),t.json||process.stderr.write(`\n  Branch '${e}' not found upstream — cloning default branch instead.\n`)}}),t.json||process.stderr.write(`
-`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await Bt(g,`HEAD`,f)}catch(e){throw qi(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-Cvu87wOZ.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{qs(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function qs(e){let t=Lr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Js=/^[A-Za-z0-9._/:@-]+$/;function Ys(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&$e(i)!==void 0?`${t}${i}@`:t})}function Xs(e){return Js.test(e)?e:ye(e)}function Zs(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Xs(t)}`:``;return`${O()} clone ${Xs(e)}${n}`}function Qs(e){let t=re(e.error);if(t.kind!==`auth`)return null;let n=Ys(e.url);if(Ce(t)){let t=Zs(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ${O()} auth login`,`    2. Then re-run: ${t}`].join(`
+`);let g=k({...p,baseDir:o}).env(f);if((await g.raw([`rev-parse`,`--verify`,`--quiet`,`HEAD^{commit}`])).trim()!==``){try{await Bt(g,`HEAD`,f)}catch(e){throw qi(s?B(o,`.git`):o,{recursive:!0,force:!0}),e}await g.raw([`checkout`,`--force`,`HEAD`])}try{let{runInit:e}=await import(`./init-DN5TmXar.mjs`),n=await e({cwd:o,mcp:!1});if(n.contentUpdated.length>0){let e=`auto-init: updated ${n.contentUpdated.join(`, `)}`;t.json?q(!0,{type:`warning`,message:e}):process.stderr.write(`  ${e}\n`)}}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`auto-init: ${n}`}):process.stderr.write(`  auto-init: ${n}\n`)}try{qs(o)}catch(e){let n=e instanceof Error?e.message:String(e);t.json?q(!0,{type:`warning`,message:`git-exclude: ${n}`}):process.stderr.write(`  git-exclude: ${n}\n`)}return o}function qs(e){let t=Lr(e,[`.ok/`]);return t.kind===`no-exclude`?`no-exclude`:t.kind===`refused-tracked`?`already-present`:t.appended.length>0?`appended`:`already-present`}const Js=/^[A-Za-z0-9._/:@-]+$/;function Ys(e){return e.replace(/^([a-z][a-z0-9+.-]*:\/\/)([^/]*)@/i,(e,t,n)=>{let r=n.indexOf(`:`),i=r===-1?n:n.slice(0,r);return i!==``&&$e(i)!==void 0?`${t}${i}@`:t})}function Xs(e){return Js.test(e)?e:ye(e)}function Zs(e,t){let n=typeof t==`string`&&t.length>0?` -b ${Xs(t)}`:``;return`${O()} clone ${Xs(e)}${n}`}function Qs(e){let t=re(e.error);if(t.kind!==`auth`)return null;let n=Ys(e.url);if(Ce(t)){let t=Zs(n,e.branch);return[`✗ Couldn't clone ${n} — authentication is required.`,``,`  To fix:`,`    1. Run: ${O()} auth login`,`    2. Then re-run: ${t}`].join(`
 `)}return t.subclass===`403`?`✗ Access denied when cloning ${n}${typeof e.principal==`string`&&e.principal.length>0?` (signed in as @${e.principal} — may lack access)`:``}. Check that your account has access to the repository.`:t.subclass===`ssh-auth`?`✗ Couldn't clone ${n} over SSH — authentication failed. Check that your SSH key is added to your GitHub account and the host key is trusted, or clone the HTTPS URL instead.`:t.subclass===`not-found-as-identity`?`✗ Repository not found when cloning ${n}. It may not exist, or the account used may not have access.${typeof e.resolvedLogin==`string`&&e.resolvedLogin.length>0?` Authenticated as ${e.resolvedLogin}.`:``}`:["✗ Your GitHub token is missing required OAuth scopes — likely the `repo` scope.",``,`  To fix:`,"    1. Create a token with `repo` scope at https://github.com/settings/tokens",`    2. Run: ${O()} auth pat`,`    3. Then re-run: ${Zs(n,e.branch)}`].join(`
 `)}function $s(e){if(!(e.error instanceof Tt)||e.error.plugin!==`unsafe`||!e.message.startsWith(`Configuring `))return null;let t=Ys(e.url);return[`✗ Couldn't clone ${t} — a Git setting passed in through the GIT_CONFIG_COUNT and GIT_CONFIG_KEY_<n> environment variables was refused:`,`  ${e.message}`,``,`  To fix:`,`    1. Remove that setting from the GIT_CONFIG_KEY_<n> and GIT_CONFIG_VALUE_<n> variables, or unset GIT_CONFIG_COUNT`,`    2. Then re-run: ${Zs(t,e.branch)}`].join(`
-`)}function ec(e){let t=e.error instanceof fn?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:Dn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof fn?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Qs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??$s({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function tc(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function nc(e){let t=re(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=cr(e.url);t&&(r=await(e.resolvePrincipal??(e=>tc($r(),e)))(t.hostname))}}ec({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function rc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Ks(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-CpWqdsmT.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Dt||e instanceof Un){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await nc({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var ic=r();const ac=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...ne.map(e=>e.path)];function oc(e){return dn({absPath:bn(`project-local`,e),sideline:!1}).diagnostics}function sc(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Ci;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??oc)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(g(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function cc(e){let t=G(e,`utf-8`),n=(0,ic.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ac)n.hasIn(e)&&r.push(e.join(`.`));return r}function lc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function uc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=lc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function dc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function fc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??pn,s=dc(r).map(t=>({scope:t,absPath:bn(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=cc(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:uc(ac.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:g(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const pc=`project | project-local | user | all`,mc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function hc(e){return e!==`config`}function gc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{sc({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${pc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!mc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${pc}`),process.exitCode=2;return}(await fc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const _c=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],vc=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function yc(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(vc),t.join(`
+`)}function ec(e){let t=e.error instanceof fn?`The repository has symlinks that are unsafe to check out: ${e.error.describeLinks()}. The clone was removed. Remove or fix these links on the remote, then clone again.`:Dn(e.error instanceof Error?e.error.message:String(e.error));if(e.json){e.emit(e.error instanceof fn?{type:`error`,code:`unsafe-symlinks`,message:`The repository has ${e.error.unsafe.length} symlink(s) that are unsafe to check out. The clone was removed. Remove or fix these links on the remote, then clone again.`,refusedSymlinkPaths:e.error.displayPaths()}:{type:`error`,message:t});return}let n=Qs({error:e.error,url:e.url,branch:e.branch,principal:e.principal,resolvedLogin:e.resolvedLogin})??$s({error:e.error,message:t,url:e.url,branch:e.branch});e.printStderr(`${n??`✗ ${t}`}\n`)}async function tc(e,t){let n=(await e.get(t))?.login;return n&&n!==`unknown`?n:null}async function nc(e){let t=re(e.error),n=e.auth?.tier===`A`?e.auth:void 0,r=null;if(!e.json&&t.kind===`auth`&&t.subclass===`403`){if(n)r=n.login??null;else if(e.auth?.tier!==`none`){let t=cr(e.url);t&&(r=await(e.resolvePrincipal??(e=>tc($r(),e)))(t.hostname))}}ec({error:e.error,url:e.url,branch:e.branch,json:e.json,principal:r,resolvedLogin:n?.login??null,emit:e.emit,printStderr:e.printStderr})}function rc(e){return new M(`clone`).description(`Clone a git repository and open it`).argument(`<url>`,`Repository URL or owner/repo shorthand`).argument(`[dir]`,`Target directory (default: ./<repo-name>)`).option(`--json`,`Output JSONL progress events`,!1).option(`-b, --branch <branch>`,`Branch to check out (falls back to default if missing)`).action(async(t,n,r)=>{let i=e(),a;try{let o=await Ks(t,{json:r.json,dir:n,branch:r.branch??null,onAuthResolved:e=>{a=e}},i);if(r.json)q(!0,{type:`complete`,dir:o});else{process.stderr.write(`✓ Cloned to ${o}\n`),process.chdir(o);let{startCommand:t}=await import(`./start-BF0RgQZF.mjs`);await t(e).parseAsync([],{from:`user`})}}catch(e){if(e instanceof Dt||e instanceof Un){r.json?q(!0,{type:`error`,message:e.message}):process.stderr.write(`${e.message}\n`),process.exitCode=78;return}await nc({error:e,url:t,branch:r.branch??null,json:r.json,auth:a,emit:e=>q(!0,e),printStderr:e=>process.stderr.write(e)}),process.exitCode=1}})}var ic=r();const ac=[[`sync`],[`persistence`,`debounceMs`],[`persistence`,`maxDebounceMs`],...ne.map(e=>e.path)];function oc(e){return dn({absPath:bn(`project-local`,e),sideline:!1}).diagnostics}function sc(e={}){let t=e.log??(e=>console.error(e)),n=e.error??(e=>console.error(e)),r=e.loadConfigFn??Ci;try{let{sources:n,diagnostics:i,sidelined:a}=r(e.cwd),o=(e.readProjectLocalFn??oc)(e.cwd??process.cwd()),s=[...i,...o],c=n.length===0?`defaults only`:n.join(`, `),l=s.filter(e=>e.code!==`REMOVED_KEY`);l.length===0?t(`✓ Configuration valid (sources: ${c})`):t(`! Configuration loaded, but ${l.length} config layer(s) had issues (sources: ${c})`);for(let e of s)t(``),t(g(e));for(let{from:e,to:n}of a)t(``),t(`Moved ${e} aside to ${n} so defaults could be used. Restore it once fixed.`);return{ok:!0}}catch(e){return n(e instanceof Error?e.message:String(e)),{ok:!1}}}function cc(e){let t=G(e,`utf-8`),n=(0,ic.parseDocument)(t);if(n.errors.length>0)throw Error(`Could not parse ${e}: ${n.errors.map(e=>e.message).join(`; `)}`);let r=[];for(let e of ac)n.hasIn(e)&&r.push(e.join(`.`));return r}function lc(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function uc(e){let t={};for(let n of e){let e=t;for(let t=0;t<n.length-1;t++){let r=n[t],i=e[r],a=lc(i)?i:{};e[r]=a,e=a}e[n[n.length-1]]=null}return t}function dc(e){switch(e){case`project`:return[`project`];case`project-local`:return[`project-local`];case`user`:return[`user`];case`both`:return[`project`,`user`];case`all`:return[`project`,`project-local`,`user`]}}async function fc(e={}){let t=e.log??(e=>console.log(e)),n=e.error??(e=>console.error(e)),r=e.scope??`all`,i=e.dryRun??!1,a=e.cwd??process.cwd(),o=e.writeConfigPatchFn??pn,s=dc(r).map(t=>({scope:t,absPath:bn(t,a,e.homedirOverride)})),c=[],l=!0;for(let{scope:t,absPath:n}of s){if(!U(n)){c.push({path:n,scope:t,found:[],removed:[]});continue}let r;try{r=cc(n)}catch(e){let r=e instanceof Error?e.message:String(e);c.push({path:n,scope:t,found:[],removed:[],error:r}),l=!1;continue}if(r.length===0||i){c.push({path:n,scope:t,found:r,removed:[]});continue}let s=await o({cwd:a,scope:t,patch:uc(ac.filter(e=>r.includes(e.join(`.`)))),homedirOverride:e.homedirOverride});if(!s.ok){c.push({path:n,scope:t,found:r,removed:[],error:g(s.error)}),l=!1;continue}c.push({path:n,scope:t,found:r,removed:r})}for(let e of c)e.error&&n(`✗ ${e.path}: ${e.error}`);let u=c.some(e=>e.error!==void 0),d=c.reduce((e,t)=>e+t.found.length,0);if(d===0&&!u)t(`No deprecated fields found.`);else if(d>0)for(let e of c)e.error||(e.found.length===0?t(`  ${e.path}: no deprecated fields`):t(i?`[dry-run] ${e.path}: would remove ${e.found.length} field(s): ${e.found.join(`, `)}`:`✓ ${e.path}: removed ${e.removed.length} field(s): ${e.removed.join(`, `)}`));return{outcomes:c,ok:l}}const pc=`project | project-local | user | all`,mc=new Set(Object.keys({project:!0,"project-local":!0,user:!0,both:!0,all:!0}));function hc(e){return e!==`config`}function gc(){let e=new M(`config`).description(`Inspect and maintain OpenKnowledge configuration files`);return e.command(`validate`).description(`Validate the merged config (defaults → user → project)`).action(()=>{sc({}).ok||(process.exitCode=1)}),e.command(`migrate`).description(`Remove deprecated config fields from config.yml idempotently (every removed key in the registry — content.*, folders, appearance.editorModeDefault, server.host, etc. — plus the silently-dropped sync.*, persistence.*)`).option(`--scope <scope>`,`Which scope to migrate: ${pc}`,`all`).option(`--dry-run`,`Preview without writing`,!1).action(async e=>{let t=String(e.scope);if(!mc.has(t)){console.error(`Invalid --scope: ${t}. Expected: ${pc}`),process.exitCode=2;return}(await fc({scope:t,dryRun:e.dryRun})).ok||(process.exitCode=1)}),e}const _c=[`    1. ${R(`Customize`)} (sidebar) → ${R(`Skills`)}`,`    2. Click the ${R(`+`)} button`,`    3. Click ${R(`Create skill`)}`,`    4. Click ${R(`Upload skill`)}`,`    5. Pick ${R(`openknowledge.skill`)} from Downloads`],vc=N(`  Open the Claude Desktop App, then: ${R(`Customize → Skills → + → Create skill → Upload skill`)} → pick the file.`);function yc(e){let t=[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…`)];return e.handoffError&&t.push(L(`  Handoff failed: ${e.handoffError.message}`)),t.push(vc),t.join(`
 `)}function bc(e){let t=e.skillVersion??`unknown`,n=e.recordedAt??`unknown`;return[N(`OpenKnowledge skill ${R(`v${t}`)} already delivered to Claude Desktop.`),P(`  Recorded at ${n} in ${v(`skill-state.yml`)}`),P(`  Use ${R(`--force`)} to rebuild and re-open the install dialog.`)].join(`
 `)}function xc(e){let t=e.skillVersion?`  •  Skill v${e.skillVersion}`:``;return[F(`Built ${e.outputPath}`),P(`  ${e.size} bytes  •  sha256 ${e.sha256?.slice(0,12)}…${t}`),N(`  Claude Desktop App opened. Now upload the file manually:`),..._c,P(`  If Claude Desktop didn't open, open it and start at step 1. The file is at ${e.outputPath}`)].join(`
 `)}function Sc(e){return`${I(`Error:`)} ${e.buildError??`unknown build failure`}`}async function Cc(e={}){let t=await kn(e);return t.status===`failed`?{...t,message:Sc(t),exitCode:1}:t.status===`skip-current`?{...t,message:bc(t),exitCode:0}:t.status===`installed`?{...t,message:xc(t),exitCode:0}:{...t,message:yc(t),exitCode:0}}function wc(){return new M(`cowork`).description(`Build openknowledge.skill and open the Claude Desktop App so you can upload it for Claude Chat & Cowork. (Advanced/rarely needed — \`${O()} init\` already wires Claude.)`).option(`--out <path>`,`Custom output path (default: ~/Downloads/openknowledge.skill)`).option(`--no-open`,`Build the file but skip the OS file-association handoff`).option(`--force`,`Bypass the install-state gate and rebuild unconditionally`).action(async e=>{let t=await Cc({out:e.out,noOpen:!e.open,force:e.force??!1});process.stdout.write(`${t.message}\n`),t.exitCode!==0&&process.exit(t.exitCode)})}async function Tc(e,t){let n=ia({input:t??process.stdin,output:process.stderr});try{let t=(await n.question(e)).trim().toLowerCase();return t===`y`||t===`yes`}finally{n.close()}}function Ec(e){if(!e||typeof e!=`object`)return String(e);let t=typeof e.readProcessStart;return`${Gr(e)} readProcessStart=${t}`}function Dc(e,t={}){if(!Number.isSafeInteger(e)||e<=0||e>4294967295)return null;let n=t.platform??process.platform,r=t.arch??process.arch,i=(e,n,r)=>{Jr(n,r),t.onNativeFailure?.({kind:e,reason:qr(n,r)})};try{if(n===`win32`){let n=!1,a=Wr(t.nativeResolver,(e,t)=>{n=!0,i(`unavailable`,e,t)});if(!a||typeof a!=`object`||!(`readProcessStart`in a)||typeof a.readProcessStart!=`function`){let e;return e=a==null?n?`no usable binding was returned`:`the addon was not found`:Ec(a),i(`unavailable`,`the Windows native addon (native-config.win32-${r}-msvc.node) did not load or does not export readProcessStart`,e),null}let o=a.readProcessStart(e);return typeof o==`number`&&Number.isSafeInteger(o)&&o>=0?o:(i(`unavailable`,`readProcessStart returned an invalid value`,Gr(o)),null)}if(n===`darwin`||n===`linux`){let n=t.env??process.env,r=t.run??Oi,i={encoding:`utf8`,stdio:[`ignore`,`pipe`,`pipe`],timeout:5e3,windowsHide:!0,env:{...n,LC_ALL:`C`,TZ:`UTC0`}},a=r(`ps`,[`-p`,String(e),`-o`,`lstart=`],i).trim();if(!/^\w{3}\s+\w{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4}$/.test(a))return null;let o=Date.parse(`${a} UTC`);return Number.isFinite(o)?o:null}return null}catch(e){return n===`win32`&&i(`query-failed`,`readProcessStart failed`,e),null}}async function Oc(e,t={}){let n=t.probe??ut(),r=t.isAlive??(e=>Ke(e,n(e))),i=t.isAlive??On,a=nr(e,`server`,{isAlive:r}),o=`Quit OpenKnowledge and stop any OpenKnowledge server processes. Once you have confirmed they have exited, remove the stale lock file at ${a.lockPath} and retry cleanup.`,s=()=>{switch(a.status){case`alive`:case`dead-pid`:case`foreign-host`:return a.lock.pid;case`unverified-owner`:return a.pid;case`missing`:case`corrupt`:case`read-error`:return;default:return a}},c=()=>{let t=s();return{...t===void 0?{}:{lockPid:t},lockDir:e,lockPath:a.lockPath,status:a.status}},l=(e,t=[])=>(di()?.warn(t.length>0?{...c(),nativeFailures:t}:c(),e),Error(e));if(a.status===`read-error`)throw l(`Cannot read the server lock at ${a.lockPath}: ${a.error}. Restore file and parent-directory access, then retry cleanup.`);let u=a.status===`unverified-owner`||a.status===`foreign-host`||a.status===`corrupt`&&a.foreignHost===!0?a:null,d=u!==null&&u.status!==`unverified-owner`;if(u!==null&&!t.preserveProjectState)throw l(sr(u));if(a.status===`dead-pid`)return{stopped:0,failed:[],skipped:`Skipped stale lock at ${a.lockPath}; its recorded local process ${a.lock.pid} has exited. No server was stopped.`};if(a.status===`corrupt`||a.status===`foreign-host`||a.status===`unverified-owner`){let i=a.status===`unverified-owner`,s=i?`unverified`:d?`foreign-owned`:`malformed`,c=await(t.scanProcesses??(()=>pt(n)))(),u=await $i(e).catch(()=>H(e)),f=c.candidates.filter(e=>e.lockDir===u&&r(e.pid));if(f.length>0)throw l(`Cannot verify shutdown from the ${s} lock at ${a.lockPath}: live process candidates ${f.map(e=>`${e.pid} (${e.source})`).join(`, `)}. No process was signalled. ${o}`);if(c.unavailable.length>0)throw l(`Cannot rule out a live server for ${a.lockPath}: ${c.unavailable.join(`; `)}. Restore process-inspection access and retry cleanup. ${o}`);return{stopped:0,failed:[],skipped:i?`Retained project lock with an unverified owner at ${a.lockPath}; its recorded process ${a.pid} is running locally, but process and listener inspection could not attribute any server to this directory. No process was signalled. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:d?`Retained foreign-owned project lock at ${a.lockPath}; process and listener inspection found no local server candidate for this directory. Only local application cleanup may proceed; project state is unchanged. No server was stopped.`:`Skipped malformed lock at ${a.lockPath}; process and listener inspection found no live server candidate for this directory. No server was stopped.`}}if(a.status===`alive`){let e=typeof a.lock.startedAt==`string`?Date.parse(a.lock.startedAt):NaN;if(!Number.isFinite(e))throw l(`The server lock has no valid start time. ${o}`);let n=[],i=t.platform??process.platform,s=(t.readProcessStart??Dc)(a.lock.pid,{platform:i,onNativeFailure:e=>{n.push(e)}});if(s===null){if(!r(a.lock.pid))return{stopped:0,failed:[]};let e=n.some(e=>{switch(e.kind){case`unavailable`:return!0;case`query-failed`:return!1;default:return e.kind}}),t=n.length===0?`Stop the server manually. `:e?`Reinstall OpenKnowledge to restore the Windows component that verifies process identity, or stop the server manually. `:`The Windows component loaded but the operating system refused the query, so reinstalling will not help; retry from an account that can inspect that process, or stop the server manually. `,o=i===`linux`?`Linux requires ps supporting -p and -o lstart= (such as procps). Install a compatible ps and retry, or stop the server manually. `:i===`win32`?t:`Stop the server manually. `,s=n.length>0?`The failure detail is recorded in the CLI log under ${v(`logs`)}. `:``;throw l(`Cannot verify the identity of process ${a.lock.pid} recorded in the server lock at ${a.lockPath}; the OS process-start query failed or is unavailable, so it was not signalled. `+o+s+`Confirm the OpenKnowledge server has exited before retrying cleanup after a manual stop.`,n)}if(s>e)throw l(`Process ${a.lock.pid} started after the server lock was acquired; it was not signalled. ${o}`)}let f=await pr({lockDir:e,inspect:()=>a,force:!0,log:()=>{},error:()=>{}}),p=f.failed.map(e=>({pid:e.target.pid,error:e.error})),m=new Set(f.stopped.map(e=>e.pid)),h=t.timeoutMs??1e4,g=performance.now()+h;for(;m.size>0;){for(let e of m)i(e)||m.delete(e);if(m.size===0)break;let e=g-performance.now();if(e<=0)break;await ra(Math.min(t.pollIntervalMs??50,e))}for(let e of m)r(e)||m.delete(e);for(let e of m)p.push({pid:e,error:`still running ${h}ms after SIGTERM`});return{stopped:f.stopped.length-m.size,failed:p}}function kc(e){return e?Fe.filter(e=>e!==je):[...Fe]}function Ac(e){return kc(e).map(e=>`~/.ok/${e}`).join(`, `)}function J(e,t){return e===t?`~`:e.startsWith(`${t}/`)?`~${e.slice(t.length)}`:e}function jc(e){return Fi===`/`?e:e.split(Fi).join(`/`)}function Mc(e,t,n=`This project`){let r=[],i=[j(e)],a=B(e,`.ok`);Ti(B(a,`server.lock`)).kind!==`not-present`&&i.push(a);for(let e of i)r.push({kind:`stop-server`,group:n,label:e===a?`Check the legacy project server lock`:`Stop the project server (if running)`,lockDir:e});let o=new Set;for(let i of zr){let a=Br[i];if(!a.projectConfigPath)continue;let s=a.projectConfigPath(e);o.add(jc(V(e,s))),r.push({kind:`mcp-entry`,group:n,label:`Remove OK's MCP entry from ${a.label} (${jc(V(e,s))})`,editorId:i,scope:`project`,cwd:e,home:t,configPath:s})}r.push({kind:`launch-entry`,group:n,label:`Remove OK's entry from .claude/launch.json`,projectRoot:e}),r.push({kind:`git-exclude`,group:n,label:`Remove OK paths from .git/info/exclude`,projectRoot:e});let s=new Set([...Er(e),...Rr(e),...Te]);for(let t of s){let i=t.replace(/\/$/,``);o.has(i)||i!==`.claude/launch.json`&&r.push({kind:`remove-path`,group:n,label:`Remove ${t}`,path:B(e,i),containWithin:e})}try{r.push({kind:`remove-path`,group:n,label:`Remove the OK shadow repo (.git/ok/)`,path:xn(e)})}catch{}let c=B(e,`.ok`);return r.sort((e,t)=>Number(e.kind===`remove-path`&&e.path===c)-Number(t.kind===`remove-path`&&t.path===c)),r.map(e=>e.kind===`stop-server`?e:{...e,requiresStoppedServers:i,...e.kind===`remove-path`?{requiresSuccessfulCleanup:!0}:{}})}function Nc(e,t){return{scope:`deinit`,ops:Mc(e,t)}}function Pc(e){let{home:t,platform:n,host:r,lockDirs:i,marker:a,recentDeinitProjectRoots:o,purgeContent:s}=e,c=[];for(let e of i)c.push({kind:`stop-server`,group:`Running servers`,label:`Stop server at ${J(B(e,`..`,`..`),t)}`,lockDir:e,preserveProjectState:!0});c.push({kind:`keychain-token`,group:`Credentials`,label:`Remove the GitHub credential (${r}) from the OS keychain + ${oe}`,host:r}),c.push({kind:`embeddings-key`,group:`Credentials`,label:`Remove all embeddings API keys (${f})`}),c.push(...Ic(a,t));for(let e of zr){let n=Br[e],r;try{r=n.configPath(``,t)}catch{continue}c.push({kind:`mcp-entry`,group:`Editor MCP configs`,label:`Remove OK's MCP entry from ${n.label} (${J(r,t)})`,editorId:e,scope:`user`,cwd:t,home:t,configPath:r})}for(let e of ar(t))c.push({kind:`remove-path`,group:`Skill bundles`,label:`Remove ${J(e.path,t)}`,path:e.path});for(let e of o)c.push(...Mc(e,t,`Project: ${Mi(e)}`));c.push(...Lc(t,n,e.env).map(e=>e.kind===`remove-path`?{...e,requiresSuccessfulCleanup:!0}:e));let{userHomeDirName:l}=x();return l===`.ok`?c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/.ok (including user-authored skills; keeping ${Ac(!0)}, shared by every channel)`:`Remove ~/.ok (keeping ${Ac(!1)}, shared by every channel)`,path:vn(t),preserve:kc(s)}):(c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:s?`Remove ~/${l}`:`Remove ~/${l} (keeping ~/.ok/${je}, shared by every channel)`,path:vn(t)}),s&&c.push({kind:`remove-path`,group:`Global directory`,requiresSuccessfulCleanup:!0,label:`Remove ~/.ok/${je} (user-authored skills, shared by every channel)`,path:B(t,`.ok`,je)})),{scope:`uninstall`,ops:c}}function Fc(e){return[B(e,`.zshrc`),B(e,`.bash_profile`),B(e,`.config`,`fish`,`conf.d`,or())]}function Ic(e,t){let n=[],r=new Set([...Fc(t),...e?.rcFiles??[]]);for(let e of r)Ti(e).kind!==`not-present`&&n.push({kind:`shell-block`,group:`Shell PATH`,label:`Strip the OK block from ${J(e,t)}`,rcFile:e});for(let r of e?.extraSymlinks??[])n.push({kind:`extra-symlink`,group:`Shell PATH`,label:`Remove the ok symlink at ${J(r.path,t)}`,path:r.path,target:r.target});return n}function Lc(e,t,n){let r={home:e,platformName:t,env:n},i=dr(r),o=$n(r),s=[{kind:`remove-path`,group:`Application data`,label:`Remove ${J(i,e)}`,path:i}];if(t===`darwin`&&a()===`stable`){let t=dr({...r,productName:Yn});s.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(t,e)} (only if it is OpenKnowledge's)`,path:t,requireOurState:!0})}return s.push({kind:`remove-path`,group:`Application data`,label:`Remove ${J(o,e)}`,path:o}),s}async function Rc(e,t={}){if(t.stopServer!==void 0&&t.scanProcesses!==void 0)throw Error(`runRemoval received both stopServer and scanProcesses. scanProcesses only parameterizes the default stopServer, so a supplied stopServer never reads it and the scan would never run. Supply stopServer to replace shutdown entirely, or scanProcesses to parameterize the default one.`);let n=t.clearToken??ni,r=t.clearEmbeddingsKey??hn,i=new Set(e.ops.flatMap(e=>e.kind===`stop-server`&&!e.preserveProjectState?[H(e.lockDir)]:[])),a=ut(),o=t.scanProcesses??(()=>pt(a)),s,c={clearToken:n,clearEmbeddingsKey:r,stopServer:t.stopServer??(t=>Oc(t,{preserveProjectState:e.scope===`uninstall`&&!i.has(H(t)),probe:a,scanProcesses:()=>s??=o()})),env:t.env??{}},l=async e=>{try{return await Bc(e,c)}catch(t){return{op:e,status:`failed`,detail:t instanceof Error?t.message:String(t)}}},u=new Map;for(let t of e.ops){if(t.kind!==`stop-server`)continue;let e=H(t.lockDir);u.has(e)||u.set(e,await l(t))}let d=[];for(let t of e.ops){if(t.kind===`stop-server`){let e=u.get(H(t.lockDir));e&&d.push({...e,op:t});continue}let e=t.requiresStoppedServers??[...u.keys()],n=e.filter(e=>{let t=u.get(H(e));return!t||t.status===`failed`});if(n.length>0){d.push({op:t,status:`blocked`,detail:`left untouched because server shutdown was not verified (${n.length} server blocker${n.length===1?``:`s`}; see the stop-server failures).`});continue}if(t.kind===`remove-path`&&t.requiresSuccessfulCleanup&&d.some(n=>n.status!==`failed`&&n.status!==`blocked`?!1:!t.requiresStoppedServers||n.op.requiresStoppedServers?.some(t=>e.includes(t)))){d.push({op:t,status:`blocked`,detail:`left untouched so cleanup can be retried after the earlier failures are resolved`});continue}d.push(await l(t))}return{results:d,removed:d.filter(e=>e.status===`removed`),failed:d.filter(e=>e.status===`failed`||e.status===`blocked`)}}async function zc(e,t=vr){let n=[];for(let r of e.ops){if(r.kind!==`stop-server`)continue;let e=await t(r.lockDir);e!==null&&e!==0&&n.push(`${e} collaboration client${e===1?``:`s`} (editor window${e===1?``:`s`} or agents) ${e===1?`is`:`are`} connected to the server at ${r.lockDir}. Those windows will stop working, and restarting will NOT recover them — this removes the project state they depend on.`)}return n}async function Bc(e,t){switch(e.kind){case`stop-server`:{let{stopped:n,failed:r,skipped:i}=await t.stopServer(e.lockDir);return r.length>0?{op:e,status:`failed`,detail:`could not stop the server (${r.map(e=>`pid ${e.pid}: ${e.error}`).join(`; `)}); dependent files were left untouched; stop the server and retry cleanup`}:i?{op:e,status:`skipped`,detail:i}:{op:e,status:n>0?`removed`:`not-present`}}case`keychain-token`:{let{touched:n,keychainError:r}=await t.clearToken(e.host);return r?{op:e,status:`failed`,detail:`keychain unreachable (${r}); remove manually: Keychain Access → service "${x().keyringService}"`}:{op:e,status:n.length>0?`removed`:`not-present`}}case`embeddings-key`:{let{touched:n}=await t.clearEmbeddingsKey();return{op:e,status:n.length>0?`removed`:`not-present`}}case`shell-block`:{let t=Ti(e.rcFile);if(t.kind===`not-present`)return{op:e,status:`not-present`};if(t.kind===`declined`&&t.reason===`missing-symlink-target`)return{op:e,status:`skipped`,detail:`left the dangling shell symlink untouched; no target file contains a PATH block to remove: ${e.rcFile}`};if(t.kind===`declined`)return{op:e,status:`failed`,detail:`${Vc(t.reason)}: ${e.rcFile}`};let n;try{n=G(t.path,`utf-8`)}catch(t){return{op:e,status:`failed`,detail:`${Vc(Mr(t))}: ${e.rcFile}`}}let{text:r,changed:i,emptyAfter:a}=fr(n);return i?a&&!t.symlink?(qi(e.rcFile,{force:!0}),{op:e,status:`removed`,detail:`file removed (was OK-owned)`}):(jn(t.path,r,{mode:Kr(t.path)}),{op:e,status:`removed`}):{op:e,status:`not-present`}}case`extra-symlink`:return yr(e.path,e.target)?(Ji(e.path),{op:e,status:`removed`}):{op:e,status:`not-present`};case`mcp-entry`:{let n=si(Br[e.editorId],e.cwd,e.home,e.configPath,t.env);switch(n.kind){case`removed`:return n.trustDetail?{op:e,status:`removed`,detail:n.trustDetail}:{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`left-foreign`:return{op:e,status:`skipped`,detail:`left a non-OK server in place`};case`declined`:if(n.reason===`missing-symlink-target`){let t=e.configPath;return e.editorId===`pi`?{op:e,status:`failed`,detail:`Pi bridge configuration left untouched (missing symlink target); Pi's separate folder trust grant has not been checked or removed. Restore the missing target of the OpenKnowledge bridge symlink at ${t}, or repoint that symlink to the intended bridge file, then retry cleanup`}:{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${t}`}}return{op:e,status:`failed`,detail:Vc(n.reason)};default:throw Error(`unhandled mcp-remove outcome: ${n.kind}`)}}case`launch-entry`:{let t=Ei(e.projectRoot);switch(t.kind){case`removed`:return{op:e,status:`removed`};case`not-present`:return{op:e,status:`not-present`};case`declined`:return t.reason===`missing-symlink-target`?{op:e,status:`skipped`,detail:`left the dangling configuration symlink untouched; no target file contains an OpenKnowledge entry to remove: ${B(e.projectRoot,`.claude`,`launch.json`)}`}:{op:e,status:`failed`,detail:Vc(t.reason)};default:throw Error(`unhandled launch-remove outcome: ${t.kind}`)}}case`git-exclude`:{let t=Or(e.projectRoot,Wc(e.projectRoot));if(t.kind===`no-exclude`)switch(t.reason){case`inaccessible`:return{op:e,status:`failed`,detail:`could not write .git/info/exclude (inaccessible)`};case`malformed-pointer`:return{op:e,status:`failed`,detail:`could not locate .git/info/exclude; repair the .git pointer at ${B(e.projectRoot,`.git`)} by restoring permissions or access to its repository, including any mounted volume. If its contents are malformed, restore a valid gitdir: <path> line pointing to the existing Git directory. For a linked worktree, run git worktree repair from the main repository with this worktree's path. If the repository is permanently gone, back up and remove only the stale .git pointer file, then retry cleanup`};case`no-git`:case`no-info-dir`:return{op:e,status:`not-present`}}return{op:e,status:t.removed.length>0?`removed`:`not-present`}}case`remove-path`:return Hc(e)}}function Vc(e){switch(e){case`permission-denied`:case`missing-symlink-target`:case`unresolved-symlink`:case`not-a-file`:case`unreadable`:case`disappeared`:return`configuration left untouched: ${jr(e)}`;case`oversize`:return`configuration left untouched (file is too large to edit safely); back up the file and reduce its size to 10 MiB or less while preserving needed settings, then retry cleanup`;case`duplicate-container`:return`configuration left untouched (duplicate server configuration blocks); combine the duplicate blocks while preserving their settings, then retry cleanup`;case`no-native-writer`:return`configuration left untouched (this install has no format-preserving TOML writer); remove the OpenKnowledge entry manually or reinstall OpenKnowledge, then retry cleanup`;case`unparseable`:return`configuration left untouched (unparseable); repair it and retry cleanup`;default:throw Error(`unhandled configuration decline reason: ${e}`)}}function Hc(e){if(e.requireOurState&&!ur(e.path))return{op:e,status:`skipped`,detail:`not verified as OpenKnowledge — left untouched`};e.containWithin&&Ar(e.path,e.containWithin);let t;try{t=Hi(e.path)}catch(e){if(e.code!==`ENOENT`)throw e}return t?t.isSymbolicLink()?(Ji(e.path),{op:e,status:`removed`}):e.preserve&&e.preserve.length>0?{op:e,status:Uc(e.path,e.preserve)?`removed`:`not-present`}:(qi(e.path,{recursive:!0,force:!0}),{op:e,status:`removed`}):{op:e,status:`not-present`}}function Uc(e,t){let n=!1;for(let r of Wi(e)){if(t.includes(r))continue;let i=B(e,r),a=t.flatMap(e=>e.startsWith(`${r}/`)?[e.slice(r.length+1)]:[]);if(a.length>0&&Hi(i).isDirectory()){Uc(i,a)&&(n=!0);continue}qi(i,{recursive:!0,force:!0}),n=!0}return n}function Wc(e){let t=new Set([B(e,`.claude`,`launch.json`)]);for(let n of zr){let r=Br[n].projectConfigPath?.(e);r&&t.add(r)}return Er(e).filter(n=>{let r=B(e,n);if(!t.has(r))return!0;try{return Hi(r),!1}catch(e){if(e.code===`ENOENT`)return!0;throw e}})}function Gc(e){let t=new Map;for(let n of e){let e=t.get(n.group)??[];e.push(n),t.set(n.group,e)}return t}function Kc(e){if(e.ops.length===0)return P(`Nothing to remove.`);let t=[];for(let[n,r]of Gc(e.ops)){t.length>0&&t.push(``),t.push(R(`${n}:`));for(let e of r)t.push(`  ${L(`-`)} ${e.label}`)}return t.join(`
@@ -45,7 +45,7 @@ ws.addEventListener('error', () => process.exit(1));
 setTimeout(() => process.exit(2), ${t+1e4});
 `),i}async function Dl(e,t,n,r,i){let a=El(e,t,B(r,`cpu.cpuprofile`)),o=!1,s=Ai(process.execPath,[a],A({stdio:`ignore`})),c=setInterval(()=>{let e=Sl(n);e&&i(e)},1e3);await new Promise(e=>{s.once(`close`,t=>{o=t===0,e()}),setTimeout(()=>{s.kill(),e()},t+12e3)}),clearInterval(c);try{qi(B(a,`..`),{recursive:!0,force:!0})}catch{}return o}function Ol(e){let t;try{t=JSON.parse(e)}catch{return`(could not parse profile)`}let n=new Map(t.nodes.map(e=>[e.id,e])),r=new Map;for(let e of t.nodes)for(let t of e.children??[])r.set(t,e.id);let i=new Map;for(let e of t.samples??[])i.set(e,(i.get(e)??0)+1);let a=t.samples?.length??0,o=t.endTime!=null&&t.startTime!=null?((t.endTime-t.startTime)/1e3).toFixed(2):`?`,s=[...i.entries()].sort((e,t)=>t[1]-e[1]).slice(0,10),c=[`samples ${a} duration_ms ${o}`,``,`Top leaf nodes`];for(let[e,t]of s){let r=n.get(e);if(!r)continue;let i=a>0?(t/a*100).toFixed(1):`0.0`,{functionName:o,url:s,lineNumber:l,columnNumber:u}=r.callFrame;c.push(` ${t} ${i}% id=${e} ${o||`(anonymous)`} ${s}:${l}:${u} hit=${r.hitCount??0}`)}c.push(``,`Top stacks`);let l=e=>{let t=[],i=e;for(;i!=null;){let e=n.get(i);if(!e)break;let{functionName:a,url:o,lineNumber:s,columnNumber:c}=e.callFrame;t.unshift(`  ${a||`(anonymous)`}  ${o} ${s} ${c}`),i=r.get(i)}return t};for(let[e,t]of s.slice(0,5)){let n=a>0?(t/a*100).toFixed(1):`0.0`;c.push(``,`--- ${t} ${n}%`,...l(e))}return c.join(`
 `)}async function kl(e,t={}){let{pid:n,cpuProfileSecs:r=15,noInspector:i=!1}=e,a=t.log??(e=>console.log(e)),o=t.discover??wt,s=t.inspect??(e=>nr(e,`server`)),c=t.resolveCommand??Ot,l=t.resolveUsage??Wn,u=t.collectLsofFn??Cl,d=t.getEndpoints??Tl,f=t.profiler??Dl,p=t.isAlive??(e=>{try{return process.kill(e,0),!0}catch(e){return e.code===`EPERM`}}),m=t.sendSignal??((e,t)=>{process.kill(e,t)}),h=t.sleep??(e=>new Promise(t=>setTimeout(t,e))),g=r*1e3;if(!p(n)){a(Y.default.red(`No process with pid ${n} found.`));return}let _=await o(),v=null,y=null;for(let e of _){let t=s(e);if(t.status!==`missing`&&t.status!==`corrupt`&&t.status!==`read-error`&&t.status!==`unverified-owner`&&t.lock.pid===n){v=t.lock.worktreeRoot,y={lockDir:e,state:t.status,lockPath:t.lockPath,lock:t.lock};break}}let b=new Date().toISOString().replace(/[:.]/g,`-`),x=e.output?e.output:v?B(v,`.ok`,`local`,`diagnostics`,`process-${n}-${b}`):B(process.cwd(),`ok-diagnose-${n}-${b}`);try{W(x,{recursive:!0})}catch(e){a(Y.default.red(`Cannot create output directory ${x}: ${e.message}`));return}a(Y.default.bold(`Diagnosing pid ${n}`)),a(`Output: ${x}`),a(``);let S=(e,t)=>{Yi(B(x,e),t),a(`  wrote ${e}`)},C=c(n),ee=l(n);S(`metadata.json`,JSON.stringify({capturedAt:new Date().toISOString(),pid:n,command:C,usage:ee,lockInfo:y},null,2)),a(`  sampling lsof`);let w=u(n);if(w&&S(`lsof.txt`,w),!i){let e=w?wl(w).find(e=>e>=9229&&e<=9299)??9229:9229,t=d(e);if(!t||t.length===0){a(`  no inspector on :${e}, sending SIGUSR1 to pid ${n}`);try{m(n,`SIGUSR1`),await h(2e3),t=d(e)}catch(e){a(Y.default.yellow(`  SIGUSR1 delivery failed: ${e.message}`))}}if(t&&t.length>0){S(`inspector-endpoints.json`,JSON.stringify(t,null,2));let e=t[0].webSocketDebuggerUrl;if(e){a(`  capturing ${r}s CPU profile`);let t=[];await f(e,g,n,x,e=>t.push(e))?a(`  wrote cpu.cpuprofile`):a(Y.default.yellow(`  CPU profile capture failed`)),t.length>0&&S(`process-stats.jsonl`,`${t.map(e=>JSON.stringify(e)).join(`
-`)}\n`);try{S(`stacks.txt`,Ol(G(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Al(e){let t=ia({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function jl(e){let t=Ui(B(Qi(),`ok-bundle-process-`));return await kl({pid:e,output:t}),t}function Ml(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Nl(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Pl(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Fl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Il(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${Ml(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Pl(t)}`),e(`  Credentials:         ${Fl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Xn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${xr(i)}`),e(`  Output:              ${n}`),e(``)}async function Ll(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Al,i=t.runProcessDiagnose??jl,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);W(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=tr(t.diagnosticReportsDir??B(Xi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Jn(t.osTerminationEvidenceDeps),d=await Cr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Il(n,d,o,l,u),e.yes!==!0&&!Nl(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await ir({collected:d,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{qi(s,{recursive:!0,force:!0})}catch{}}}function Rl(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await kl({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(xl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,`Include \`${O()} diagnose process <pid>\` output under process/ in the bundle`).option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-DYBjdl5l.mjs`),{resolveContentDir:r}=await import(`./dist-D9qVgnke.mjs`),i=process.cwd(),{config:a}=n(i);await Ll({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function zl(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ao({message:`Enter embeddings provider API key:`})).trim()}function Bl(e){return qt(e)}async function Vl(e,t){let n=await Qe(St(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Hl(e){try{let t=Ct(j(e));if(!t||t.port<=0||!On(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=d.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Ul(e,t){if(!e)return`unavailable (search stays lexical)`;let n=Se(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Wl(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await zl();if(!t){process.stderr.write(`No key provided.
+`)}\n`);try{S(`stacks.txt`,Ol(G(B(x,`cpu.cpuprofile`),`utf-8`)))}catch(e){a(Y.default.yellow(`  stacks.txt skipped: ${e.message}`))}}}else a(Y.default.yellow(`  Node inspector unavailable — skipping CPU profile`))}a(``),a(Y.default.yellow(`⚠  Before sharing, review what each file contains:`)),a(`  metadata.json           — content directory paths, lock file locations, CPU/MEM at capture time`),a(`  lsof.txt                — all open files, network connections, and private paths for this process`),a(`  inspector-endpoints.json — Node debugger metadata (titles, URLs)`),a(`  cpu.cpuprofile          — function names and source file paths from your Node process`),a(`  stacks.txt              — call stacks derived from cpu.cpuprofile; includes source paths`),a(`  process-stats.jsonl     — CPU/MEM/RSS numbers only; safe to share`),a(``),a(`Bundle: ${Y.default.bold(x)}`)}async function Al(e){let t=ia({input:process.stdin,output:process.stdout});try{return(await t.question(e)).trim()}finally{t.close()}}async function jl(e){let t=Ui(B(Qi(),`ok-bundle-process-`));return await kl({pid:e,output:t}),t}function Ml(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t.toFixed(1)} KB`;let n=t/1024;return n<1024?`${n.toFixed(1)} MB`:`${(n/1024).toFixed(1)} GB`}function Nl(e){let t=e.trim().toLowerCase();return t===`y`||t===`yes`}function Pl(e){let{summary:t,manifest:n}=e;return t.redacted?t.contentDirVisible?`masked as <CONTENT_DIR>, but still present in some files`:`masked as <CONTENT_DIR>`:t.contentDirVisible?`visible (${n.contentDir.absolutePath})`:`not present`}function Fl(e,t){let n=e.manifest.redaction.secretScrub;return n===void 0?Y.default.yellow(t>0?`NOT scrubbed (--no-redact): tokens and keys ship verbatim, crash reports excepted`:`NOT scrubbed (--no-redact): tokens and keys ship verbatim`):`scrubbed known credential formats (${n.redactedLineCount} line(s) across ${n.redactions.length} file(s))`}function Il(e,t,n,r,i){let{summary:a,manifest:o}=t;e(``),e(Y.default.bold(`ok diagnose bundle — what leaves this machine`)),e(``),e(`  Files:               ${a.fileCount}`),e(`  Total size:          ${Ml(a.totalBytes)} uncompressed`),e(`  Document names:      included in cleartext (${a.docNameCount} doc.name occurrence(s) in telemetry)`),e(`  Content-dir path:    ${Pl(t)}`),e(`  Credentials:         ${Fl(t,a.stagedDiagnosticReports)}`),e(`  Server status:       ${o.serverStatus}`),e(`  macOS crash reports: ${Xn(r,a.stagedDiagnosticReports)}`),a.stagedDiagnosticReports>0&&(e(`                       each carrying machine details macOS puts in every report: the`),e(`                       account uid, the Mac model, and the name of the process that`),e(`                       launched this app, which on a managed machine can be internal`),e(`                       tooling.`),e(`                       Rewritten on the way in: escaped path separators normalised so`),e(`                       the scrub can read them, and the identifiers that would link`),e(`                       this machine's bundles to each other replaced.`),e(`                       Not byte-identical to the files macOS wrote, on any tier and`),e(`                       regardless of --no-redact. A report of ours still names the`),e(`                       processes it was running alongside.`)),e(`  OS termination log:  ${xr(i)}`),e(`  Output:              ${n}`),e(``)}async function Ll(e,t={}){let n=t.log??(e=>console.log(e)),r=t.prompt??Al,i=t.runProcessDiagnose??jl,a=t.now??(()=>new Date),o;if(e.out!==void 0){o=e.out;let t=z(o);if(!U(t))throw Error(`ok diagnose bundle: --out parent directory does not exist: ${t}. Create it first.`)}else{let t=a().toISOString().replace(/[:.]/g,`-`),n=B(e.contentDir,`.ok`,`local`,`diagnostics`);W(n,{recursive:!0}),o=B(n,`bundle-${t}.zip`)}let s;e.pid!==void 0&&(n(Y.default.dim(`Running ok diagnose process ${e.pid} into a temp dir`)),s=await i(e.pid));let c=e.redact!==!1,l=tr(t.diagnosticReportsDir??B(Xi(),`Library`,`Logs`,`DiagnosticReports`),a()),u=await Jn(t.osTerminationEvidenceDeps),d=await Cr({contentDir:e.contentDir,projectDir:e.projectDir,processDir:s,redact:c,scrubSecrets:c,diagnosticReports:l,osTerminationEvidence:u,deps:t.collectDeps});try{return d.manifest.serverStatus===`not-running`&&n(Y.default.yellow(`  server not running — live state unavailable`)),Il(n,d,o,l,u),e.yes!==!0&&!Nl(await r(`Write bundle? [y/N]: `))?(n(Y.default.dim(`Aborted; no bundle written.`)),{outputPath:null,declined:!0}):(await ir({collected:d,outputPath:o}),n(Y.default.bold(`Bundle: ${o}`)),{outputPath:o,declined:!1})}finally{if(d.cleanup(),s!==void 0)try{qi(s,{recursive:!0,force:!0})}catch{}}}function Rl(){let e=new M(`diagnose`).description(`Diagnostic utilities for open-knowledge processes`);return e.command(`process`).description(`Capture a diagnostic bundle (metadata, lsof, CPU profile) for a running process`).argument(`<pid>`,`Process ID to diagnose`).option(`--cpu-profile <seconds>`,`CPU profile duration (default: 15)`,`15`).option(`--output <dir>`,`Output directory`).option(`--no-inspector`,`Collect metadata only; skip Node inspector and CPU profile`).action(async(e,t)=>{let n=Number.parseInt(e,10);(Number.isNaN(n)||n<=0)&&(console.error(Y.default.red(`Invalid pid '${e}': must be a positive integer`)),process.exit(1));let r=Number.parseInt(t.cpuProfile,10);(Number.isNaN(r)||r<=0)&&(console.error(Y.default.red(`--cpu-profile must be a positive integer`)),process.exit(1)),await kl({pid:n,cpuProfileSecs:r,output:t.output,noInspector:!t.inspector})}),e.addCommand(xl()),e.command(`bundle`).description(`Capture a support bundle (telemetry + logs + server state) into a zip suitable for bug reports`).option(`--pid <pid>`,`Include \`${O()} diagnose process <pid>\` output under process/ in the bundle`).option(`--out <path>`,`Write the zip to this path instead of the default location`).option(`--yes`,`Skip the y/N prompt`).option(`--no-redact`,`Write a raw bundle: skip credential scrubbing and content-dir path masking`).option(`--redact`,`Scrub credentials and mask the content-dir path (the default)`).action(async e=>{let t;e.pid!==void 0&&(t=Number.parseInt(e.pid,10),(Number.isNaN(t)||t<=0)&&(console.error(Y.default.red(`Invalid --pid '${e.pid}': must be a positive integer`)),process.exit(1)));try{let{loadConfig:n}=await import(`./loader-DVCM1hwA.mjs`),{resolveContentDir:r}=await import(`./dist-D9qVgnke.mjs`),i=process.cwd(),{config:a}=n(i);await Ll({contentDir:r(a,i),projectDir:i,pid:t,out:e.out,yes:e.yes===!0,redact:e.redact})}catch(e){let t=e instanceof Error?e.message:String(e);console.error(Y.default.red(t)),process.exit(1)}}),e}async function zl(){if(!process.stdin.isTTY){let e=[];for await(let t of process.stdin)e.push(t);return Buffer.concat(e).toString(`utf-8`).trim()}return(await ao({message:`Enter embeddings provider API key:`})).trim()}function Bl(e){return qt(e)}async function Vl(e,t){let n=await Qe(St(),e,t);return n.apiKey?{present:!0,notRequired:!1,source:n.source}:{present:!1,notRequired:n.keyless,source:null}}async function Hl(e){try{let t=Ct(j(e));if(!t||t.port<=0||!On(t.pid))return null;let n=await fetch(`http://127.0.0.1:${t.port}/api/semantic-status`,{signal:AbortSignal.timeout(1500)});if(!n.ok)return null;let r=d.safeParse(await n.json());return r.success?r.data:null}catch{return null}}function Ul(e,t){if(!e)return`unavailable (search stays lexical)`;let n=Se(t);return n===`restart_required`?`RESTART REQUIRED (provider vector dimensions changed repeatedly)`:n===`incapable`?`CONFIGURATION ERROR (remove search.semantic.dimensions to use the model's own size)`:n===`provider_error`?t?.providerErrorReason===`warm`?`temporarily unavailable (provider initialization failed)`:t?.providerErrorReason===`corpus`?`partially unavailable (corpus indexing requests failed)`:t?.providerErrorReason===`query`?`temporarily unavailable (query embedding failed)`:`temporarily unavailable (provider error)`:`AVAILABLE`}function Wl(){return new M(`set-key`).description(`Store the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=await zl();if(!t){process.stderr.write(`No key provided.
 `),process.exitCode=1;return}let n=H(e.cwd??process.cwd()),{baseUrl:r}=Bl(n);try{await St().setForProject(n,r,t)}catch(e){process.stderr.write(`Failed to store the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}process.stderr.write(`✓ Embeddings API key stored for ${r}\n  (kept in ${v(f)}, 0600, this machine only — never in the project).\n  Enable semantic search with \`${O()} embeddings enable\`, or in\n  OK Desktop → Settings → This project → Search.
 `)})}function Gl(){return new M(`clear-key`).description(`Remove the embeddings API key for THIS project's configured endpoint`).option(`--cwd <path>`,`Project directory (defaults to the current directory)`).action(async e=>{let t=H(e.cwd??process.cwd()),{baseUrl:n}=Bl(t),r;try{r=await St().clearForProject(t,n)}catch(e){process.stderr.write(`Failed to clear the embeddings key: ${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1;return}if(!r){process.stderr.write(`No stored embeddings key found for ${n}.\n`);return}process.stderr.write(`✓ Embeddings API key cleared for ${n}.\n`)})}function Kl(){return new M(`list`).description(`List every project + endpoint that has a stored embeddings key`).action(async()=>{let e=await St().listProjects();if(e.length===0){process.stderr.write(`No project embeddings keys stored.
 `);return}let t=[`Stored embeddings keys (this machine):`,``];for(let{projectKey:n,endpoints:r}of e){t.push(`  ${n}`);for(let{endpoint:e,hint:n}of r)t.push(`    ${e}  →  ${n?`••••${n}`:`set`}`)}process.stdout.write(`${t.join(`
@@ -78,7 +78,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `).replace(/\n+$/,``);return e.endsWith(`
 `)?`${c}\n`:c}function op(e){return e.replace(/\r\n|\r|\n/g,`<br>`).replace(/\|/g,`\\|`)}function sp(e){return/\s/.test(e)?`<${e}>`:e}function cp(e,t={}){let{header:n,rows:r}=jf(e),i=n.length;if(i===0)return{table:``,columns:0,wide:!1};let a=t.wideThreshold??15,o=t.titleColumn??0;return{table:[`| ${n.map(op).join(` | `)} |`,`| ${n.map(()=>`---`).join(` | `)} |`,...r.map(e=>`| ${n.map((n,r)=>{let i=e[r]??``,a=op(i);if(r===o&&t.linkForTitle&&i.trim()!==``){let e=t.linkForTitle(i);if(e)return`[${a}](${sp(e)})`}return a}).join(` | `)} |`)].join(`
 `),columns:i,wide:i>a}}function lp(e,t){let n=e.match(/^#\s+(.+)$/m);return n?n[1].trim():t}function up(e,t){return`# ${e}\n\n${t}\n`}const dp=[`links`,`frontmatter`,`callouts`,`images`,`tables`],fp=/\.mdx?$/i;function pp(e){return{isNotionExport:e,transforms:{links:0,frontmatter:0,callouts:0,images:0,tables:0},assetsExtracted:0,stubsCreated:0,csvsRemoved:0,wideTables:[],ambiguousTitleLinks:0,unreadable:[],filesChanged:0}}function mp(e,t={}){let n=t.selected??new Set(dp),r=Qf(e);if(!r&&!t.force)return{changes:[],assets:[],deletions:[],report:pp(!1)};let i=pp(r),a=Yf(e),o=Bf(a,{onUnreadable:e=>i.unreadable.push(e)}),s=n.has(`tables`),c=new Map,l=new Set;for(let e of o){e.stubPath&&l.add(e.stubPath);for(let t of e.rowFiles)c.set(t,e)}let u=[],d=[],f=[];for(let e of a){if(!fp.test(e)||s&&l.has(e))continue;let r;try{r=G(e,`utf8`)}catch{i.unreadable.push(e);continue}let a=r,o=(e,t)=>{a!==t&&(i.transforms[e]+=1)};if(n.has(`images`)){let n=a,r=Af(a,Mi(e),{strip:t.stripBase64});a=r.markdown;for(let t of r.assets)d.push({path:B(z(e),t.filename),bytes:t.bytes});i.assetsExtracted+=r.assets.length,o(`images`,n)}if(n.has(`callouts`)){let e=a;a=Ef(a),o(`callouts`,e)}if(n.has(`frontmatter`)){let t=c.get(e);if(t){let e=a;a=ap(a,t.propertyKeys),o(`frontmatter`,e)}}if(n.has(`links`)){let e=a;a=Jf(a,{redirectCsv:s}),o(`links`,e)}a!==r&&u.push({path:e,content:a})}if(s)for(let e of o){let r=cp(e.csvText,{linkForTitle:t=>{let n=Lf(e.folderIndex,t);return n.ambiguous&&(i.ambiguousTitleLinks+=1),n.path?V(z(e.stubTargetPath),n.path):null}});if(r.columns===0)continue;let a=e.stubPath??e.stubTargetPath,o=null;if(e.stubPath)try{o=G(e.stubPath,`utf8`)}catch{i.unreadable.push(e.stubPath);continue}let c=up(o===null?e.fallbackTitle:lp(o,e.fallbackTitle),r.table);n.has(`links`)&&(c=Jf(c,{redirectCsv:s})),r.wide&&i.wideTables.push(a),o===null?(u.push({path:a,content:c}),i.stubsCreated+=1,i.transforms.tables+=1):c!==o&&(u.push({path:a,content:c}),i.transforms.tables+=1),t.removeCsv&&(f.push(e.csvPath),i.csvsRemoved+=1)}return i.filesChanged=new Set(u.map(e=>e.path)).size,{changes:u,assets:d,deletions:f,report:i}}function hp(e){for(let t of e.assets)W(z(t.path),{recursive:!0}),Yi(t.path,t.bytes);for(let t of e.changes)W(z(t.path),{recursive:!0}),Yi(t.path,t.content,`utf8`);for(let t of e.deletions)try{Ji(t)}catch(e){if(e.code!==`ENOENT`)throw e}}const gp={images:`Inline base64 images extracted`,callouts:`Notion <aside> callouts converted`,frontmatter:`Row properties lifted to frontmatter`,tables:`Databases rendered as tables`,links:`Internal links decoded`},_p=[`images`,`callouts`,`frontmatter`,`tables`,`links`];function vp(e,t){let n=[];n.push(t.applied?`Applied Notion cleanup in ${t.dir}`:`Dry run — no changes written (${t.dir})`);for(let t of _p)n.push(`  ${gp[t]}: ${e.transforms[t]}`);return n.push(`  Assets written: ${e.assetsExtracted}`),e.stubsCreated>0&&n.push(`  Database pages created (CSVs without a stub): ${e.stubsCreated}`),e.csvsRemoved>0&&n.push(`  CSV files removed: ${e.csvsRemoved}`),n.push(`  Files changed: ${e.filesChanged}`),e.ambiguousTitleLinks>0&&n.push(`  Ambiguous title links left as plain text: ${e.ambiguousTitleLinks}`),e.wideTables.length>0&&n.push(`  Wide tables (>15 columns): ${e.wideTables.length}`),e.unreadable.length>0&&n.push(`  Skipped unreadable files: ${e.unreadable.length}`),!t.applied&&e.filesChanged+e.assetsExtracted+e.csvsRemoved>0&&(n.push(``),n.push(`Re-run with --apply to write these changes.`)),n.join(`
-`)}function yp(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function bp(e){let t=new Set(dp);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${dp.join(`, `)}`);return e})}function xp(e,t){let n=new Set(dp);if(e&&(n=new Set(bp(e))),t)for(let e of bp(t))n.delete(e);return n}function Sp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=xp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=mp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{hp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?yp(a,{applied:t.apply??!1}):vp(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Cp(e){return Object.values(s).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function wp(e,t,n){return t===`darwin`?n&&Cp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Tp(e,t={}){let n=wp(e,t.platform??process.platform,t.desktopBundlePath);return ui(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Ep(e,t,n=process.platform){let r=wp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Dp(e=()=>ci(li())){return{detectDesktopApp:()=>ri(e()),resolveBaseUrl:e=>gt({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return K(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Tp,findAncestorProject:e=>an(z(H(e)))?.rootPath??null,isProjectRoot:e=>an(e)?.distance===0,enclosingProject:e=>an(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Op(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function kp(e){return e.error(`No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run \`${O()} start\` to serve the editor, then retry.`),1}async function Ap(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Ep(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function jp(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error(`Nothing to open: pass a doc, folder, or skill name (e.g. \`${O()} open specs/foo/SPEC\`).`),1;if(Op(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!ie.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${ie.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return Ap(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Tn(e,s)}`;return Ap(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return kp(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return Ap(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${_n(s)}`;return Ap(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return kp(n)}if(l)return Ap(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${An(s)}`;return Ap(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return kp(n)}function Mp(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${ie.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await jp(e,t,Dp())})}function Np(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-DQPaNx3f.mjs`),r=e(),i=process.cwd(),a=Hn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Pp(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Fp(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Ip(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Fp((await e.raw([`remote`])).split(`
+`)}function yp(e,t){return JSON.stringify({applied:t.applied,...e},null,2)}function bp(e){let t=new Set(dp);return e.split(`,`).map(e=>e.trim()).filter(e=>e.length>0).map(e=>{if(!t.has(e))throw Error(`Unknown transform "${e}". Valid transforms: ${dp.join(`, `)}`);return e})}function xp(e,t){let n=new Set(dp);if(e&&(n=new Set(bp(e))),t)for(let e of bp(t))n.delete(e);return n}function Sp(){let e=new M(`migrate`).description(`Migrate content from other tools into Open Knowledge`);return e.command(`notion [dir]`).description(`Clean up a Notion "Markdown & CSV" export in place (dry-run unless --apply)`).option(`--apply`,`write changes to disk (default: dry-run preview)`).option(`--strip-base64`,`delete inline base64 images instead of extracting them to files`).option(`--remove-csv`,`delete each "_all.csv" once its table page exists (destructive)`).option(`--only <transforms>`,`run only these transforms (comma-separated: links,frontmatter,callouts,images,tables)`).option(`--skip <transforms>`,`skip these transforms (comma-separated)`).option(`--force`,`run even if the directory is not detected as a Notion export`).option(`--json`,`print a machine-readable JSON report`).action((e,t)=>{let n=H(e??process.cwd()),r;try{r=xp(t.only,t.skip)}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=2;return}let i=mp(n,{selected:r,stripBase64:t.stripBase64??!1,removeCsv:t.removeCsv??!1,force:t.force??!1}),{report:a}=i;if(!a.isNotionExport&&!t.force){t.json?console.log(JSON.stringify({refused:!0,reason:`not-a-notion-export`,dir:n},null,2)):console.error(`Not a Notion export: ${n}\nNo id-suffixed pages, "_all.csv", or inline base64 images were found. Re-run with --force to override.`),process.exitCode=2;return}if(t.apply)try{hp(i)}catch(e){console.error(`Failed to apply changes: ${e instanceof Error?e.message:String(e)}`),process.exitCode=4;return}console.log(t.json?yp(a,{applied:t.apply??!1}):vp(a,{applied:t.apply??!1,dir:n})),a.filesChanged===0&&a.assetsExtracted===0&&i.deletions.length===0?process.exitCode=1:t.apply&&(a.ambiguousTitleLinks>0||a.wideTables.length>0)&&(process.exitCode=3)}),e}function Cp(e){return Object.values(s).some(({protocolScheme:t})=>e.startsWith(`${t}://`))}function wp(e,t,n){return t===`darwin`?n&&Cp(e)?{command:`/usr/bin/open`,args:[`-a`,n,e]}:{command:`/usr/bin/open`,args:[e]}:t===`win32`?e.startsWith(`http://`)||e.startsWith(`https://`)?{command:`explorer.exe`,args:[e]}:{command:`rundll32.exe`,args:[`url.dll,FileProtocolHandler`,e]}:{command:`xdg-open`,args:[e]}}function Tp(e,t={}){let n=wp(e,t.platform??process.platform,t.desktopBundlePath);return ui(n.command,n.args,{spawn:t.spawn,env:t.env,timeoutMs:t.timeoutMs})}function Ep(e,t,n=process.platform){let r=wp(t,n).command;switch(e){case`not-installed`:return`${r} is not installed or cannot be executed`;case`timeout`:return`${r} did not start in time`;case`spawn-error`:return`${r} could not be started`}}function Dp(e=()=>ci(li())){return{detectDesktopApp:()=>ri(e()),resolveBaseUrl:e=>gt({lockDir:j(e)}).baseUrl,classifyName:(e,t)=>{let n=B(e,t);try{return K(n).isDirectory()?`folder`:`doc`}catch(e){let t=e?.code;return t!==`ENOENT`&&t!==`ENOTDIR`&&process.stderr.write(`[ok open] statSync failed for ${n} (${t??`unknown`}); treating as a doc\n`),`doc`}},openTarget:Tp,findAncestorProject:e=>an(z(H(e)))?.rootPath??null,isProjectRoot:e=>an(e)?.distance===0,enclosingProject:e=>an(H(e))?.rootPath??null,log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}function Op(e){return e.startsWith(`/`)||e.includes(`\\`)||e.split(`/`).includes(`..`)}function kp(e){return e.error(`No OpenKnowledge desktop app found and no UI is running. Install it from https://openknowledge.ai/download, or run \`${O()} start\` to serve the editor, then retry.`),1}async function Ap(e,t,n,r,i,a){let o=await i.openTarget(e,a?{desktopBundlePath:a}:{});if(!o.ok)return i.error(`Could not open ${e}: ${Ep(o.reason,e)}.`),1;if(i.log(t),!r)return i.log(`Working directory: ${n} (not an OpenKnowledge project).`),0;i.log(`Project: ${n}`);let s=i.findAncestorProject(n);return s!==null&&i.log(`Note: this project (${n}) is nested inside another OpenKnowledge project at ${s}. Pass --project to choose explicitly.`),0}async function jp(e,t,n){let r=t.project!==void 0,i=r?null:n.enclosingProject(process.cwd()),a=H(t.project??i??process.cwd()),o=r||i!==null,s=e.replace(/\/+$/,``);if(r&&!n.isProjectRoot(a))return n.error(`Cannot open with --project ${a}: no .ok/config.yml there, so it is not an OpenKnowledge project.`),1;if(!s)return n.error(`Nothing to open: pass a doc, folder, or skill name (e.g. \`${O()} open specs/foo/SPEC\`).`),1;if(Op(s))return n.error(`Invalid name "${s}": must be a relative path with no '..' segments, leading '/', or backslashes.`),1;if(t.skill===!0){let e=t.scope??`project`;if(!ie.includes(e))return n.error(`Invalid --scope "${t.scope}": expected one of ${ie.join(`, `)}.`),1;let r=n.detectDesktopApp();if(r)return Ap(`${r.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(`__skill__/${e}/${s}`)}`,`Opening skill ${s} (${e}) in the OpenKnowledge desktop app.`,a,o,n,r.bundlePath);let i=n.resolveBaseUrl(a);if(i){let t=`${i}/#/${Tn(e,s)}`;return Ap(t,`Opening skill ${s} (${e}) in your browser: ${t}`,a,o,n)}return kp(n)}let c=/\/+$/.test(e)||n.classifyName(a,s)===`folder`,l=n.detectDesktopApp();if(c){if(l)return Ap(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&folder=${encodeURIComponent(s)}`,`Opening folder ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let e=n.resolveBaseUrl(a);if(e){let t=`${e}/#/${_n(s)}`;return Ap(t,`Opening folder ${s} in your browser: ${t}`,a,o,n)}return kp(n)}if(l)return Ap(`${l.protocolScheme}://open?project=${encodeURIComponent(a)}&doc=${encodeURIComponent(s)}`,`Opening ${s} in the OpenKnowledge desktop app.`,a,o,n,l.bundlePath);let u=n.resolveBaseUrl(a);if(u){let e=`${u}/#/${An(s)}`;return Ap(e,`Opening ${s} in your browser: ${e}`,a,o,n)}return kp(n)}function Mp(){return new M(`open`).description(`Open a doc, folder, or skill in the OK Desktop app (falls back to the browser UI). Docs and folders are auto-detected — no flag needed.`).argument(`<name>`,`Doc path (specs/foo/SPEC), folder path (specs/foo or specs/foo/), or a skill name with --skill`).option(`--skill`,`Open <name> as a skill in the skill editor`).option(`--scope <scope>`,`Skill scope when --skill is set: ${ie.join(` | `)}`,`project`).option(`--project <dir>`,`Project root (defaults to the project enclosing the current directory)`).action(async(e,t)=>{process.exitCode=await jp(e,t,Dp())})}function Np(e){return new M(`preview`).description(`Show what content the watcher will track (read-only)`).action(async()=>{let{previewContent:t,formatPreviewBlock:n}=await import(`./preview-CJZurUHe.mjs`),r=e(),i=process.cwd(),a=Hn(r,i),o;try{o=t({projectDir:i,contentDir:a})}catch(e){console.error(`Content preview failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}process.stdout.write(`${n(o,i)}\n`),o.totalCount===0&&o.warnings.length>0&&(process.exitCode=1)})}function Pp(e,t){e&&process.stdout.write(`${JSON.stringify(t)}\n`)}function Fp(e){let[t,...n]=e;return t!==void 0&&n.length===0?t:`origin`}async function Ip(e,t){try{let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim(),r=n===``?``:(await e.raw([`for-each-ref`,`--format=%(${t===`push`?`push`:`upstream`}:remotename)`,`refs/heads/${n}`])).trim(),i=r===``?Fp((await e.raw([`remote`])).split(`
 `).map(e=>e.trim()).filter(e=>e!==``)):r,a=(await e.raw([`remote`,`get-url`,...t===`push`?[`--push`]:[],i])).trim();return a===``?null:a}catch{return null}}function Lp(e){let t=/^https:\/\/(?:[^/?#@]*@)?([^/?#@]+)/i.exec(e)?.[1];return t!==void 0&&t===ge(t)?t:null}const Rp=[/Authentication failed for '([^']+)'/g,/unable to access '([^']+)'/g,/repository '([^']+)' not found/g,/could not read (?:Username|Password) for '([^']+)'/g];function zp(e,t){return Rp.some(n=>Array.from(e.matchAll(n)).some(e=>Lp(e[1])===t))}function Bp(e){let t={...process.env},n=Object.create(t);for(let r of new Set([...Object.keys(t),...Object.keys(e)]))e[r]!==t[r]&&(n[r]=e[r]);return n}async function Vp(e,t,n){let r={git:k({baseDir:e})},i=t===null?null:Lp(t);if(t===null||i===null||cr(t)===null||!ke(i,It()))return r;let{auth:a,declaredMiss:o}=await Ws(t,n.tokenStore,{cwd:e,...n.detectGh?{_detectGhFn:n.detectGh}:{}});return a.tier===`none`?r:{git:k(Bs(e,ks(Is(),i))).env(Bp(Fs(a))),signIn:{host:i,tier:a.tier},...o===void 0?{}:{declaredMiss:o}}}function Hp(e,t,n){if(n.kind!==`auth`)return null;let{host:r}=t,i=t.tier===`A`,a=i?`The ${e} offered the GitHub CLI's sign-in for ${r}, which OpenKnowledge relays in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`:`The ${e} offered OpenKnowledge's GitHub sign-in for ${r} in place of your git credential helpers for that host; a ~/.netrc entry or a password in the remote URL is used before it.`;switch(n.subclass){case`no-credential`:case`401`:case`unknown-auth`:return`${a} If that sign-in has expired or was revoked, run: ${i?`gh auth login --hostname ${r}`:`${O()} auth login --host ${r}`}`;case`403`:return`${a} If ${r} denied that account access, check that it has access to the repository.`;case`not-found-as-identity`:return`${a} If ${r} reported the repository as not found, it may not exist, or that account may not have access.`;case`scope-mismatch`:return`${a} If its token is missing a required OAuth scope, likely repo, ${i?`run: gh auth refresh --hostname ${r} --scopes repo`:`create a token with that scope at https://${r}/settings/tokens and run: ${O()} auth pat --host ${r}`}`;case`ssh-auth`:return null;default:return n.subclass}}async function Up(e,t,n){try{return await n(e.git)}catch(n){let r=n instanceof Error?n.message:String(n),i=e.signIn===void 0||!zp(r,e.signIn.host)?null:Hp(t,e.signIn,re(n));throw i===null?n:Error(`${r.trimEnd()}\n${i}`,{cause:n})}}async function Wp(e){await e.fetch();let t=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`@{upstream}^{commit}`])).trim();if(t!==``){let n=(await e.raw([`rev-parse`,`--symbolic-full-name`,`@{upstream}`])).trim();return{commit:t,trackingRef:n.startsWith(`refs/`)?n:null}}let n=(await e.raw([`symbolic-ref`,`--quiet`,`--short`,`HEAD`])).trim();if(n===``)throw Error(`not on a branch, so there is nothing to pull into; switch to a branch first, for example: git switch main`);let r=(await e.raw([`config`,`--get`,`branch.${n}.merge`])).trim(),i=(await e.raw([`config`,`--get`,`branch.${n}.remote`])).trim()||`origin`;if(r===``)throw Error(`no upstream configured for branch "${n}"; set one with: git branch --set-upstream-to=${i}/${n} ${n}`);await e.fetch(i,r);let a=(await e.raw([`rev-parse`,`--verify`,`--quiet`,`FETCH_HEAD^{commit}`])).trim();if(a===``)throw Error(`could not resolve the fetched ${r}`);return{commit:a,trackingRef:null}}function Gp(e){switch(e){case`requires-newer-git`:return[`update-git`];case`unverifiable-target`:return[`readable-folder`,`fix-link`];case`outside-repository`:case`repository-root`:case`private-state`:case`secret-file`:case`inside-private-state`:return[`fix-link`];default:return e}}const Kp={"update-git":`Update Git to ${ln} or newer.`,"readable-folder":`If a folder on the way is unreadable on this machine, make it readable.`,"fix-link":`Remove or fix these links on the remote, or fix your own local change to them, then pull again.`};function qp(e){if(e instanceof fn){let t=new Set(e.unsafe.flatMap(({reason:e})=>Gp(e))),n=Object.entries(Kp).filter(([e])=>t.has(e)).map(([,e])=>e);return t.has(`fix-link`)||n.push(`Then pull again.`),`incoming symlinks are unsafe to check out: ${e.describeLinks()}. ${n.join(` `)}`}return e instanceof Error?e.message:String(e)}async function Jp(e,t,n=process.cwd()){let r=e.op??`sync`,i=j(n),a=Ct(i);if(a&&a.port>0){let t=`http://127.0.0.1:${a.port}/api/sync/trigger`;e.json||process.stderr.write(`Triggering ${r} via running server (port ${a.port})\n`);try{let n=await fetch(t,{method:`POST`,headers:{"Content-Type":`application/json`,...qe({kind:`cli`,runtimeVersion:$t})},body:JSON.stringify({op:r})});if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.title??e.error??e.message??`Server responded with ${n.status}`)}Pp(e.json,{type:`triggered`,op:r,port:a.port}),e.json||process.stderr.write(`✓ ${r} triggered\n`);return}catch(t){let n=t instanceof Error?t.message:String(t);e.json||process.stderr.write(`Server trigger failed (${n}), running directly\n`)}}e.json||process.stderr.write(`Running ${r} directly (no live server)\n`);let o=k({baseDir:n}),s={tokenStore:e.tokenStore??$r(),detectGh:e._detectGhFn},c=async t=>{let i=await Vp(n,t,s),a=Hs(i.declaredMiss,{url:`The remote URL`,operation:`ok ${r}`});return a===null||(e.json?Pp(!0,{type:`warning`,message:a.trimEnd()}):process.stderr.write(a)),i},l;if(r===`sync`||r===`pull`){Pp(e.json,{type:`step`,step:`pull`});let t=await Ip(o,`pull`);l={url:t,remote:await c(t)};let n=await Up(l.remote,`pull`,Wp);await Wt(o,n.commit,`merge`);let{trackingRef:r}=n;r!==null&&await ct(o,{name:r,trackingRef:r,commit:n.commit});let i=await o.pull(`.`,r??n.commit);Pp(e.json,{type:`pull`,summary:i.summary}),e.json||process.stderr.write(`  pull: ${i.summary.changes} changes\n`)}if(r===`sync`||r===`push`){Pp(e.json,{type:`step`,step:`push`});let t=await Ip(o,`push`);await Up(l!==void 0&&l.url===t?l.remote:await c(t),`push`,e=>e.push()),Pp(e.json,{type:`push`,ok:!0}),e.json||process.stderr.write(`  push: ok
 `)}Pp(e.json,{type:`complete`,op:r}),e.json||process.stderr.write(`✓ ${r} complete\n`)}function Yp(e){return new M(`sync`).description(`Commit, pull, and push to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Jp({json:t.json,op:`sync`},e())}catch(e){let n=qp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ sync failed: ${n}\n`),process.exit(1)}})}function Xp(e){return new M(`pull`).description(`Pull changes from the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Jp({json:t.json,op:`pull`},e())}catch(e){let n=qp(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ pull failed: ${n}\n`),process.exit(1)}})}function Zp(e){return new M(`push`).description(`Push commits to the remote`).option(`--json`,`Output JSONL progress events`,!1).action(async t=>{try{await Jp({json:t.json,op:`push`},e())}catch(e){let n=e instanceof Error?e.message:String(e);t.json?process.stdout.write(`${JSON.stringify({type:`error`,message:n})}\n`):process.stderr.write(`✗ push failed: ${n}\n`),process.exit(1)}})}const Qp={existsSync:e=>U(e),isDirectory:e=>{try{return K(e).isDirectory()}catch(e){if(e.code===`ENOENT`)return!1;throw e}},readdirSync:e=>Wi(e),readFileSync:e=>G(e),writeFileSync:(e,t)=>{Yi(e,t)},mkdirSync:(e,t)=>{W(e,t)},rmSync:(e,t)=>{qi(e,t)}},$p={resolveProjectBundledSkillDir:()=>Nn(`project`,{checkDesktop:!1}),resolveUserBundledSkillDir:e=>Nn(e,{checkDesktop:!1}),readBundledVersion:()=>Ge(),readRecordedVersion:e=>wn(e,`cli-hosts`),writeRecordedVersion:(e,t)=>ht(e,`cli-hosts`,t,`cli-start`),recordEvent:e=>yn(e),readBundleDecision:(e,t)=>lt(e,t),writeBundleDecision:(e,t,n)=>yt(e,t,n),removeBundleFromDisk:(e,t)=>_r(e,t)};function em(e){process.stderr.write(`${JSON.stringify(e)}\n`)}function tm(e,t,n){n.rmSync(t,{recursive:!0,force:!0}),n.mkdirSync(z(t),{recursive:!0}),nm(e,t,n)}function nm(e,t,n){n.mkdirSync(t,{recursive:!0});for(let r of n.readdirSync(e)){let i=B(e,r),a=B(t,r);n.isDirectory(i)?nm(i,a,n):n.writeFileSync(a,n.readFileSync(i))}}function rm(e,t,n){return n.existsSync(B(e,`.agents`,`skills`,t))||ve.some(r=>n.existsSync(B(e,r.skillsRoot,t)))}function im(e,t,n,r,i,a){let o=[],s=B(e,`.agents`,`skills`,t);if(rm(e,t,r)){r.existsSync(s)&&o.push({kind:`central`,path:s,outcome:`skipped-present`});for(let n of ve){let i=B(e,n.skillsRoot,t);if(i!==s){if(!r.existsSync(B(e,n.hostDir))){o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-host-absent`});continue}r.existsSync(i)&&o.push({kind:`host`,editorId:n.editorId,hostDir:n.hostDir,path:i,outcome:`skipped-present`})}}return{entries:o,anyWritten:!1,anyDestinationSucceeded:!0}}let c=r.existsSync(B(e,`.agents`));if(c&&r.existsSync(s))o.push({kind:`central`,path:s,outcome:`skipped-present`});else if(c)try{tm(n,s,r),o.push({kind:`central`,path:s,outcome:`written`}),i({event:`user-skill-reclaim-central-written`,scope:`user`,path:s,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`central`,path:s,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-central-failed`,scope:`user`,path:s,error:t})}for(let c of ve){let l=B(e,c.hostDir),u=B(e,c.skillsRoot,t);if(u===s){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-collapsed-with-central`});continue}if(!r.existsSync(l)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-host-absent`});continue}if(r.existsSync(u)){o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`skipped-present`});continue}try{tm(n,u,r),o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`written`}),i({event:`user-skill-reclaim-host-written`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,preexisting:!1,version:a})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({kind:`host`,editorId:c.editorId,hostDir:c.hostDir,path:u,outcome:`failed`,error:t}),i({event:`user-skill-reclaim-host-failed`,scope:`user`,editorId:c.editorId,hostDir:c.hostDir,path:u,error:t})}}return{entries:o,anyWritten:o.some(e=>e.outcome===`written`),anyDestinationSucceeded:o.some(e=>e.outcome===`written`||e.outcome===`skipped-present`)}}function am(e,t){if(!e)return!1;try{return t.existsSync(e)?t.readFileSync(e).toString(`utf8`).includes(`# ok-mcp-`):!1}catch{return!1}}function om(e,t,n,r){if(!e||!t)return!1;let i;try{i=e.configPath(n,r)}catch{return!1}let a=e=>B(tn(z(e)),Mi(e));return a(t)===a(i)}function sm(e,t,n,r,i){let a;try{a=n.resolveProjectBundledSkillDir()}catch(e){return i({event:`project-skill-reclaim-bundle-missing`,scope:`project`,error:e instanceof Error?e.message:String(e)}),{outcome:`skipped`,reason:`bundle-missing`}}let o=[];for(let n of Pr){let s=B(e,n.hostDir,`skills`,`open-knowledge`),c=B(s,`SKILL.md`);if(r.existsSync(c)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`present`});continue}let l=Br[n.editorId],u=l?.projectConfigPath?.(e);if(om(l,u,e,t)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`skipped-global-collision`}),i({event:`project-skill-reclaim-skipped-global-collision`,scope:`project`,editorId:n.editorId,path:s});continue}if(!am(u,r)){o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`no-token`}),i({event:`project-skill-reclaim-no-token`,scope:`project`,editorId:n.editorId,path:s});continue}try{Dr(s,e),tm(a,s,r),o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`created`}),i({event:`project-skill-reclaim-created`,scope:`project`,editorId:n.editorId,path:s})}catch(e){let t=e instanceof Error?e.message:String(e);o.push({editorId:n.editorId,hostDir:n.hostDir,path:s,outcome:`failed`,error:t}),i({event:`project-skill-reclaim-failed`,scope:`project`,editorId:n.editorId,path:s,error:t})}}return{outcome:`done`,entries:o}}async function cm(e,t,n,r){let i=e=>{t.recordEvent(e).catch(()=>{})},a=()=>new Date().toISOString(),o;try{o=await t.readBundledVersion()}catch(e){let t=e instanceof Error?e.message:String(e);return r({event:`user-skill-reclaim-version-read-failed`,scope:`user`,error:t}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:`discovery`,outcome:`failed`,reason:`version-read-failed:${t}`}),{outcome:`skipped`,reason:`version-read-failed`}}let s;try{s=await t.readRecordedVersion(e)}catch(e){r({event:`user-skill-reclaim-version-read-error`,scope:`user`,error:e instanceof Error?e.message:String(e)}),s=null}let c=[],l=null;for(let e of Je)try{c.push({id:e,sourceDir:t.resolveUserBundledSkillDir(e)})}catch(e){l=e instanceof Error?e.message:String(e)}if(c.length===0)return r({event:`user-skill-reclaim-bundle-missing`,scope:`user`,error:l??`no user-global bundles`}),i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,reason:`bundle-missing:${l}`}),{outcome:`skipped`,reason:`bundle-missing`};let u=[];for(let i of c){let a=mn[i.id],o=rm(e,a,n),s=await t.readBundleDecision(e,a).catch(()=>null);if(!ue(s,{installedOnDisk:o})){if(o)try{t.removeBundleFromDisk(e,i.id),r({event:`user-skill-reclaim-bundle-declined-removed`,scope:`user`,bundle:i.id})}catch(e){r({event:`user-skill-reclaim-bundle-remove-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}continue}if(s===null&&o)try{await t.writeBundleDecision(e,a,!0)}catch(e){r({event:`user-skill-reclaim-grandfather-write-failed`,scope:`user`,bundle:i.id,error:e instanceof Error?e.message:String(e)})}u.push(i)}if(u.length===0)return{outcome:`skipped`,reason:`all-bundles-declined`};let d=u.every(t=>rm(e,mn[t.id],n));if(s!==null&&s===o&&d)return r({event:`user-skill-reclaim-skipped-version-current`,scope:`user`,version:o}),{outcome:`skipped`,reason:`version-current`};let f=[],p=c.length===Je.length,m=[];for(let{id:t,sourceDir:i}of u){let a=im(e,mn[t],i,n,r,o);f.push(...a.entries),m.push({id:t,anyWritten:a.anyWritten,landed:a.anyDestinationSucceeded,centralFailed:a.entries.some(e=>e.kind===`central`&&e.outcome===`failed`),hostFailed:a.entries.some(e=>e.kind===`host`&&e.outcome===`failed`)})}let h=m.some(e=>e.centralFailed),g=m.every(e=>e.landed);if(p&&g&&!h){let n=null;try{await t.writeRecordedVersion(e,o),r({event:`user-skill-reclaim-version-recorded`,scope:`user`,version:o})}catch(e){n=e instanceof Error?e.message:String(e),r({event:`user-skill-reclaim-version-record-failed`,scope:`user`,version:o,error:n})}for(let{id:e,anyWritten:t}of m)i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:n===null?t?`installed`:`skip-current`:`failed`,version:o,...n===null?{}:{reason:`state-write-failed:${n}`}})}else{p||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,outcome:`failed`,version:o,reason:`bundle-unresolved`});for(let{id:e,centralFailed:t,hostFailed:n}of m)!t&&!n||i({ts:a(),surface:`cli-start`,target:`cli-hosts`,bundle:e,outcome:`failed`,version:o,reason:n?`all-writes-failed`:`central-write-failed`})}return{outcome:`done`,version:o,entries:f}}async function lm(e){let t=e.logger??em,n=e.fs??Qp,r=e.home??Xi(),i={...$p,...e.deps};if(e.reclaimDisableEnv===`1`)return t({event:`skill-repair-skipped`,reason:`reclaim-disabled`}),{status:`skipped`,reason:`reclaim-disabled`};let a=sm(e.projectDir,r,i,n,t),o=await cm(r,i,n,t),s=mr(r),c=[],l=!1,u=!1;if(s.skillDirs.length>0||s.emptyDirs.length>0){if(e.confirmLegacyCleanup&&await e.confirmLegacyCleanup(s)){try{c=rr(r,s)}catch(e){u=!0,t({event:`legacy-fanout-cleanup-refused`,scope:`user`,error:e instanceof Error?e.message:String(e)})}for(let e of c)t({event:`legacy-fanout-path-removed`,scope:`user`,path:e})}else l=!0,t({event:`legacy-fanout-cleanup-declined`,scope:`user`})}return{status:`done`,project:a,user:o,legacySwept:c,legacyCleanupDeclined:l,legacyCleanupFailed:u}}function um(e){return e.status===`skipped`?e.reason===`reclaim-disabled`?0:1:e.project.outcome===`skipped`||e.user.outcome===`skipped`&&e.user.reason!==`version-current`&&e.user.reason!==`all-bundles-declined`||e.project.entries.some(e=>e.outcome===`failed`)||e.user.outcome===`done`&&e.user.entries.some(e=>e.outcome===`failed`)?1:0}function dm(e){if(e.status===`skipped`)return`Skipped: ${e.reason}`;let t=[`Skill reclaim complete.`];if(e.project.outcome===`done`){let n=e.project.entries.filter(e=>e.outcome===`present`).length,r=e.project.entries.filter(e=>e.outcome===`created`).length,i=e.project.entries.filter(e=>e.outcome===`no-token`).length,a=e.project.entries.filter(e=>e.outcome===`failed`).length,o=e.project.entries.filter(e=>e.outcome===`skipped-global-collision`).length;t.push(`  Project: ${n} present, ${r} created, ${i} no-token, ${a} failed.`),o>0&&t.push(`  Skipped ${o} host(s) whose project config path is their user-global config (not a project directory).`)}else t.push(`  Project: skipped (${e.project.reason}).`);if(e.user.outcome===`done`){let n=e.user.entries.filter(e=>e.outcome===`written`).length,r=e.user.entries.filter(e=>e.outcome===`skipped-present`).length,i=e.user.entries.filter(e=>e.outcome===`skipped-host-absent`||e.outcome===`skipped-collapsed-with-central`).length,a=e.user.entries.filter(e=>e.outcome===`failed`).length;t.push(`  User (${e.user.version}): ${n} written, ${r} present, ${i} skipped, ${a} failed.`)}else t.push(`  User: skipped (${e.user.reason}).`);return e.legacySwept.length>0?t.push(`  Cleanup: removed ${e.legacySwept.length} path(s) from a pre-0.42 install.`):e.legacyCleanupFailed?t.push(`  Cleanup: failed — see logs; pre-0.42 directories left in place.`):e.legacyCleanupDeclined&&t.push(`  Cleanup: declined — pre-0.42 directories left in place.`),t.join(`
 `)}function fm(){return new M(`repair-skills`).description(`Restore missing project skill copies and repair user-global bundles for installed AI editors. Existing project skills are preserved; run \`${O()} init\` to refresh them.`).option(`-y, --yes`,`Skip the confirmation prompt for removing directories left by a pre-0.42 install.`).action(async e=>{let t=await lm({projectDir:H(process.cwd()),reclaimDisableEnv:process.env.OK_RECLAIM_DISABLE??null,confirmLegacyCleanup:t=>pm(t,{yes:e.yes===!0})});process.stdout.write(`${dm(t)}\n`),process.exitCode=um(t)})}async function pm(e,t){let n=Xi(),r=e=>`~/${V(n,e)}`,i=t.input??process.stdin,a=[``,R(`A previous version of OpenKnowledge installed its skill into agent tools you may never have used.`),P(`(Versions before 0.42 wrote to every host a third-party installer knew about — see issue #820.)`)];if(e.skillDirs.length>0&&a.push(``,`${R(`Remove OpenKnowledge skills:`)} ${e.skillDirs.length}`,...e.skillDirs.map(e=>`  ${r(e)}`)),e.emptyDirs.length>0){let t=e.skillDirs.length>0?`Then remove these, which hold nothing else once the above are gone:`:`Remove these empty directories, left behind by that install:`;a.push(``,`${R(t)} ${e.emptyDirs.length}`,...e.emptyDirs.map(e=>`  ${r(e)}`))}if(a.push(``,P(`Nothing outside these paths is touched. A directory that still holds anything is kept.`)),process.stdout.write(`${a.join(`
@@ -90,7 +90,7 @@ ${t}`,d++;break;case`id`:l=t.includes(`\0`)?void 0:t;break;case`retry`:/^\d+$/.t
 `);return}if(a){process.stdout.write(`${JSON.stringify({type:`error`,code:c.kind})}\n`);return}process.stderr.write(`✗ share name-check failed: ${c.kind}\n`),process.exit(1)}function Cm(e){return new M(`name-check`).description(`Check if owner/name is available on GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Sm(t,await e())})}async function wm(e){try{let t=[],n=await e.users.getAuthenticated();t.push({login:n.data.login,kind:`user`,avatarUrl:n.data.avatar_url});for await(let n of e.paginate.iterator(e.orgs.listMembershipsForAuthenticatedUser,{state:`active`,per_page:100}))for(let e of n.data)(e.permissions?.can_create_repository===!0||e.role===`admin`)&&t.push({login:e.organization.login,kind:`org`,avatarUrl:e.organization.avatar_url??void 0});return{kind:`ok`,owners:t}}catch(e){return e.status===401?{kind:`auth-required`}:{kind:`network`}}}async function Tm(e,t){let{host:n,json:r}=e;Xa(n);let i=await os(n,t);if(i==null){if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:`auth-required`})}\n`);return}process.stderr.write(`Not logged in to ${n}\n`),process.exit(1)}let a=n===`github.com`?void 0:`https://${n}/api/v3`,o=await wm(new $o({auth:i,...a?{baseUrl:a}:{}}));if(o.kind===`ok`){if(r)process.stdout.write(`${JSON.stringify({type:`owners`,owners:o.owners})}\n`);else for(let e of o.owners)process.stdout.write(`${e.kind}\t${e.login}\n`);return}if(r){process.stdout.write(`${JSON.stringify({type:`error`,code:o.kind})}\n`);return}process.stderr.write(`✗ share owners failed: ${o.kind}\n`),process.exit(1)}function Em(e){return new M(`owners`).description(`List GitHub owners eligible to host a new repository`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{await Tm(t,await e())})}function Dm(e){let t=e,n=t.status,r=t.response?.data,i=t.response?.headers,a=`${r?.message??r?.errors?.map(e=>e.message??``).join(`
 `)??``}\n${t.message??``}`.toLowerCase();return n===401?`auth-required`:n===403?i?.[`x-github-sso`]||a.includes(`saml`)||a.includes(`sso`)?`saml-sso`:`network`:n===422&&(r?.errors?.some(e=>e.field===`name`)||a.includes(`already exists`)||a.includes(`name already exists`))?`name-conflict`:`network`}async function Om(e){let{octokit:t,ownerLogin:n,ownerKind:r,name:i,visibility:a,description:o}=e,s=a===`private`;if(r===`user`){let{data:e}=await t.repos.createForAuthenticatedUser({name:i,private:s,...o?{description:o}:{}});return{cloneUrl:e.clone_url,defaultBranch:e.default_branch??`main`}}let{data:c}=await t.repos.createInOrg({org:n,name:i,visibility:a,...o?{description:o}:{}});return{cloneUrl:c.clone_url,defaultBranch:c.default_branch??`main`}}async function km(e,t,n){try{let{data:r}=await e.repos.get({owner:t,repo:n});return{cloneUrl:r.clone_url,defaultBranch:r.default_branch??`main`}}catch{return null}}async function Am(e,t){return(await e.users.getAuthenticated()).data.login.toLowerCase()===t.toLowerCase()?`user`:`org`}function jm(e,t){return t===void 0?k(Bs(e,[])).env(Ps()):k(Bs(e,ks(Is(),t.host))).env(Fs({relayToken:t}))}function Mm(e){if(!e.startsWith(`https://`))return!1;try{return new URL(e).hostname===`github.com`}catch{return!1}}const Nm={ensureOkScaffold:e=>{ot(e)},gitFactory:jm};async function Pm(e){let t={...Nm,...e.deps},n=H(e.projectDir),r;if(e.ownerKind)r=e.ownerKind;else try{r=await Am(e.octokit,e.body.owner)}catch(e){return{kind:`error`,code:Dm(e)}}try{t.ensureOkScaffold(n)}catch{return{kind:`error`,code:`init-failed`}}let i=t.gitFactory(n),a=B(n,`.git`);if(!U(a))try{await i.init()}catch{return{kind:`error`,code:`init-failed`}}let o;try{o=await Om({octokit:e.octokit,ownerLogin:e.body.owner,ownerKind:r,name:e.body.name,visibility:e.body.visibility,description:e.body.description})}catch(t){if(Dm(t)===`name-conflict`){let t=await km(e.octokit,e.body.owner,e.body.name);if(t===null)return{kind:`error`,code:`name-conflict`};o=t}else return{kind:`error`,code:Dm(t)}}try{await i.addRemote(`origin`,o.cloneUrl)}catch(e){if(!String(e.message??``).toLowerCase().includes(`remote origin already exists`))return{kind:`error`,code:`push-failed`}}let s=!1;try{await i.raw([`rev-parse`,`--verify`,`HEAD`])}catch{s=!0}if(s)try{await i.add(`.`),await i.raw([`commit`,`--allow-empty`,`-m`,`Initial commit`])}catch{return{kind:`error`,code:`init-failed`}}let c=Mm(o.cloneUrl)?t.gitFactory(n,{token:e.token,host:`github.com`}):i;try{await c.raw([`push`,o.cloneUrl,`HEAD:refs/heads/${o.defaultBranch}`])}catch(e){let t=String(e.message??``).toLowerCase();return t.includes(`saml`)||t.includes(`sso`)?{kind:`error`,code:`saml-sso`}:{kind:`error`,code:`push-failed`}}try{await i.raw([`update-ref`,`refs/remotes/origin/${o.defaultBranch}`,`HEAD`])}catch{}return{kind:`ok`,value:{ownerLogin:e.body.owner,repoName:e.body.name,cloneUrl:o.cloneUrl,defaultBranch:o.defaultBranch}}}function Fm(e,t){if(!e){t.kind===`ok`?process.stdout.write(`✓ Published ${t.value.cloneUrl}\n`):(process.stderr.write(`✗ share publish failed: ${t.code}\n`),process.exit(1));return}if(t.kind===`ok`){process.stdout.write(`${JSON.stringify({type:`publish`,...t.value})}\n`);return}process.stdout.write(`${JSON.stringify({type:`error`,code:t.code})}\n`)}async function Im(e,t){let{host:n,owner:r,name:i,visibility:a,description:o,projectDir:s,json:c}=e;if(Xa(n),Kt(s)){process.stderr.write(`${new Ft(H(s)).message}\n`),process.exitCode=64;return}if(Cn(s)){process.stderr.write(`${new at(H(s)).message}\n`),process.exitCode=64;return}let l=await os(n,t);if(l==null){Fm(c,{kind:`error`,code:`auth-required`});return}let u=n===`github.com`?void 0:`https://${n}/api/v3`,d=new $o({auth:l,...u?{baseUrl:u}:{}});try{ki(`git config user.email`,A({cwd:s,stdio:`ignore`}))}catch{process.env.GIT_AUTHOR_NAME??=`OpenKnowledge`,process.env.GIT_AUTHOR_EMAIL??=`noreply@inkeep.com`,process.env.GIT_COMMITTER_NAME??=`OpenKnowledge`,process.env.GIT_COMMITTER_EMAIL??=`noreply@inkeep.com`}Fm(c,await Pm({octokit:d,token:l,projectDir:s,body:{owner:r,name:i,visibility:a,description:o}}))}function Lm(e){return new M(`publish`).description(`Publish a no-remote project to GitHub`).requiredOption(`--owner <owner>`,`GitHub owner (user or org)`).requiredOption(`--name <name>`,`Repository name`).requiredOption(`--visibility <visibility>`,`public or private`).option(`--description <description>`,`Repository description`).requiredOption(`--project-dir <projectDir>`,`Path to the project on disk`).option(`--host <host>`,`GitHub or GitHub Enterprise hostname`,`github.com`).option(`--json`,`Output JSON`,!1).action(async t=>{t.visibility!==`public`&&t.visibility!==`private`&&(process.stderr.write(`✗ visibility must be 'public' or 'private'
 `),process.exit(1)),await Im(t,await e())})}function Rm(){let e=new M(`share`);e.description(`Sharing flow operations (owners, name-check, publish)`);let t=()=>fi();return e.addCommand(Em(t)),e.addCommand(Cm(t)),e.addCommand(Lm(t)),e}function zm(e){if(e.length!==0){process.stderr.write(`  Cleared ${e.length} stale entry(s) left by an older version:\n`);for(let t of e)process.stderr.write(`    ${t}\n`)}}function Bm(){return new M(`unshare`).description(`Switch this project to local-only mode (add OK artifacts to .git/info/exclude so they stay out of git)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Er(t),r=Lr(t,n);if(r.kind===`refused-tracked`){if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:`refused-tracked`,tracked:r.tracked,remediation:r.remediation};process.stdout.write(`${JSON.stringify(e)}\n`)}else process.stderr.write(`${r.remediation}\n`);process.exitCode=1;return}if(r.kind===`no-exclude`){Vm(e.json,t,r.reason);return}let i=Yr(t);if(e.json){let e={type:`sharing-unshare`,projectRoot:t,mode:i,appended:r.appended,alreadyPresent:r.alreadyPresent,removed:r.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(r.appended.length===0){if(r.removed.length>0){process.stderr.write(`${F(`✓`)} ${R(`Sharing mode is already`)} ${F(`local-only`)}${R(`.`)}\n`),zm(r.removed);return}process.stderr.write(`${R(`Sharing mode is already`)} ${F(`local-only`)} ${R(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`local-only`)}\n`),process.stderr.write(`  Added ${r.appended.length} path(s) to ${R(`.git/info/exclude`)} (per-clone, not committed).\n`),zm(r.removed)})}function Vm(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-unshare`,projectRoot:t,mode:`no-git`,appended:[],alreadyPresent:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Hm(){return new M(`share`).description(`Switch this project to shared mode (commit OK config alongside content)`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Yr(t),r=Er(t),i=Or(t,r);if(i.kind===`no-exclude`){Um(e.json,t,i.reason);return}let a=Yr(t);if(e.json){let e={type:`sharing-share`,projectRoot:t,mode:a,removed:i.removed};process.stdout.write(`${JSON.stringify(e)}\n`);return}if(n===`shared`){if(i.removed.length>0){process.stderr.write(`${F(`✓`)} ${N(`Sharing mode is already`)} ${R(`shared`)}${N(`.`)}\n`),zm(i.removed);return}process.stderr.write(`${N(`Sharing mode is already`)} ${R(`shared`)} ${N(`— nothing to do.`)}\n`);return}process.stderr.write(`${F(`✓`)} ${R(`Sharing mode set to`)} ${F(`shared`)}\n`),process.stderr.write(`  Removed OK paths from ${R(`.git/info/exclude`)}; commit the files to share with teammates.\n`)})}function Um(e,t,n){if(e){process.stdout.write(`${JSON.stringify({type:`sharing-share`,projectRoot:t,mode:`no-git`,removed:[],reason:n})}\n`);return}process.stderr.write(`${L({"no-git":`No git repository here — sharing mode does not apply.`,"no-info-dir":`The gitdir's info/ folder is absent; cannot toggle sharing mode.`,"malformed-pointer":"The .git pointer file is malformed (stale worktree). Run `git worktree prune` and try again.",inaccessible:`The .git path is inaccessible (permissions or mount issue).`}[n])}\n`)}function Wm(){return new M(`status`).description(`Print the current sharing mode and the OK paths in .git/info/exclude`).option(`--project <dir>`,`Project root (defaults to cwd)`).option(`--json`,`Output JSON`,!1).action(async e=>{let t=H(e.project??process.cwd()),n=Yr(t),r=[...Ir(t)],i=kr(t,Er(t)).tracked;if(e.json){let e={type:`sharing-status`,projectRoot:t,mode:n,excluded:r,trackedUpstream:i};process.stdout.write(`${JSON.stringify(e)}\n`);return}let a=[];if(a.push(`OpenKnowledge sharing mode: ${Gm(n)}`),a.push(``),a.push(`Excluded from git via ${R(`.git/info/exclude`)}:`),r.length===0)a.push(`  (none)`);else for(let e of r)a.push(`  ${e}`);if(a.push(``),a.push(`Other OK paths exist but are tracked upstream:`),i.length===0)a.push(`  (none)`);else for(let e of i)a.push(`  ${e}`);a.push(``),a.push(`Toggle with: ${N(`${O()} config-sharing ${n===`local-only`?`share`:`unshare`}`)}`),process.stdout.write(`${a.join(`
-`)}\n`)})}function Gm(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Km(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Hm()),e.addCommand(Bm()),e.addCommand(Wm()),e}const qm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Jm(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(qm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Ym(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Xm(e){return/\.(md|mdx)$/i.test(e)}function Zm(e,t){if(Xm(t))return!0;try{return K(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Qm(e,t){let n=Jm(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Ym(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function $m(e=()=>ci(li())){return{prepare:mt,detectDesktopApp:()=>ri(e()),openTarget:Tp,runProjectOpen:(e,t)=>jp(e,{project:t},Dp()),runBrowserOpen:e=>th(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function eh(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof Rn||e instanceof et||e instanceof Pt||e instanceof it)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Ep(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function th(e){let{createEphemeralProjectDir:t}=await import(`./dist-D9qVgnke.mjs`),{loadConfig:n}=await import(`./src-D7raIegm.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-CpWqdsmT.mjs`),{openBrowser:o}=await import(`./open-browser-DOwoD8uY.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ea(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${An(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
+`)}\n`)})}function Gm(e){switch(e){case`shared`:return F(`shared`);case`local-only`:return F(`local-only`);case`no-git`:return L(`no-git (not a git repository)`)}}function Km(){let e=new M(`config-sharing`);return e.description(`Manage OpenKnowledge's git-sharing mode (share OK config with the team, or keep local-only on this machine)`),e.addCommand(Hm()),e.addCommand(Bm()),e.addCommand(Wm()),e}const qm=new Set([`--cwd`,`--log-level`,`--project`,`--scope`]);function Jm(e){let t=[],n=null,r=null,i=!1;for(let a=0;a<e.length;a++){let o=e[a];if(o===`--help`||o===`-h`||o===`--version`||o===`-V`){i=!0;break}if(qm.has(o)){let t=e[a+1]??null;o===`--cwd`&&(n=t),o===`--project`&&(r=t),a++;continue}if(o.startsWith(`--cwd=`)){n=o.slice(6);continue}if(o.startsWith(`--project=`)){r=o.slice(10);continue}o.startsWith(`-`)||t.push(o)}return{operands:t,cwd:n,project:r,sawTerminalFlag:i}}function Ym(e,t){if(e.length===0)return null;let n=e[0];return n===`open`&&e[1]!==void 0&&t.isFileish(e[1])?e[1]:t.knownSubcommands.has(n)?null:t.isFileish(n)?n:null}function Xm(e){return/\.(md|mdx)$/i.test(e)}function Zm(e,t){if(Xm(t))return!0;try{return K(e).isFile()}catch(t){let n=t?.code;return n!==`ENOENT`&&n!==`ENOTDIR`&&process.stderr.write(`[ok] statSync failed for ${e} (${n??`unknown`}); treating as non-fileish\n`),!1}}function Qm(e,t){let n=Jm(e);if(n.sawTerminalFlag)return null;let r=n.cwd?t.resolvePath(t.cwd,n.cwd):t.cwd,i=Ym(n.operands,{knownSubcommands:t.knownSubcommands,isFileish:e=>t.isFileish(t.resolvePath(r,e),e)});return i===null?null:{absPath:t.resolvePath(r,i),projectRoot:n.project===null?null:t.resolvePath(r,n.project)}}function $m(e=()=>ci(li())){return{prepare:mt,detectDesktopApp:()=>ri(e()),openTarget:Tp,runProjectOpen:(e,t)=>jp(e,{project:t},Dp()),runBrowserOpen:e=>th(e),log:e=>process.stdout.write(`${e}\n`),error:e=>process.stderr.write(`${e}\n`)}}async function eh(e,t,n={}){let r;try{r=t.prepare(e,{projectRoot:n.projectRoot})}catch(e){if(e instanceof Rn||e instanceof et||e instanceof Pt||e instanceof it)return t.error(e.message),1;throw e}if(r.mode===`project`)return await t.runProjectOpen(r.docName,r.projectRoot);let i=t.detectDesktopApp();if(i){let e=`${i.protocolScheme}://open?file=${encodeURIComponent(r.canonicalFilePath)}`,n=await t.openTarget(e,{desktopBundlePath:i.bundlePath});return n.ok?(t.log(`Opening ${r.singleDocRelPath} in the OpenKnowledge desktop app.`),0):(t.error(`Could not open the OpenKnowledge desktop app: ${Ep(n.reason,e)}.`),1)}return await t.runBrowserOpen(r),0}async function th(e){let{createEphemeralProjectDir:t}=await import(`./dist-D9qVgnke.mjs`),{loadConfig:n}=await import(`./src-CRvXHnnn.mjs`),{bootStartServer:r,resolveBundledReactShellDir:i,resolveHost:a}=await import(`./start-BF0RgQZF.mjs`),{openBrowser:o}=await import(`./open-browser-DOwoD8uY.mjs`),s=i();s||(process.stderr.write("OpenKnowledge UI assets were not found. Reinstall @inkeep/open-knowledge, or build the app (`bun run build`) in a monorepo checkout.\n"),process.exit(1));let c=t(e.contentDir),l=!1,u,d=async()=>{if(!l){l=!0;try{await u?.destroy(`external-signal`)}catch{}try{await ea(c,{recursive:!0,force:!0})}catch{}}},f=()=>{d().then(()=>process.exit(0))};process.once(`SIGINT`,f),process.once(`SIGTERM`,f);let{config:p}=n(c),m=a({},process.env);try{u=await r({config:p,cwd:c,host:m,port:0,projectDir:c,singleFile:e.canonicalFilePath,serveContentAssets:!0,reactShellDistDir:s,idleThresholdMs:6e5})}catch(t){await d(),process.stderr.write(`Failed to open ${e.singleDocRelPath}: ${t instanceof Error?t.message:String(t)}\n`),process.exit(1)}let h=`http://${m}:${u.port}/#/${An(e.docName)}`;process.env.OK_SINGLE_FILE_NO_OPEN===`1`?process.stdout.write(`Serving ${e.singleDocRelPath} (headless) at: ${h}\n`):(process.stdout.write(`Opening ${e.singleDocRelPath} in your browser: ${h}\n`),process.stdout.write(`Press Ctrl-C to close the session.
 `),o(h)),await new Promise(()=>{})}function nh(){let e=new M(`skills`).description(`Manage Open Knowledge skills for this project.`);return e.command(`installed`).description(`List every skill installed across all your agents (read-only).`).option(`--json`,`Emit the raw enumeration as JSON.`).action(e=>{let t=H(process.cwd()),n=on(an(t)?.rootPath??t),r=Jt({projectDir:n}),i={...r,skills:r.skills.filter(e=>Ln(e.provenance,n))};if(e.json){process.stdout.write(`${JSON.stringify(i,null,2)}\n`);return}if(i.skills.length===0){process.stdout.write(`${P(`No installed skills found across any agent.`)}\n`);return}process.stdout.write(`${R(`${i.skills.length} installed skill(s):`)}\n`);for(let e of i.skills){let t=e.provenance.version?P(` v${e.provenance.version}`):``,n=[e.inert.commands&&`commands`,e.inert.hooks&&`hooks`,e.inert.mcp&&`mcp`].filter(Boolean),r=n.length>0?P(` [${n.join(`, `)}]`):``;process.stdout.write(`  ${F(e.name)}${t}  ${P(e.sourceHarnesses.join(`, `))}${r}\n`)}process.stdout.write(`\n${R(`${i.packs.length} pack(s):`)}\n`);for(let e of i.packs)process.stdout.write(`  ${N(e.name)} ${P(`v${e.version}`)} — ${e.skills.length} skill(s)\n`)}),e.command(`import <source>`).description(`Import a skill into this project as versioned content (github owner/repo, a git URL, or a local path).`).option(`--skill <name>`,`Pick one skill from a multi-skill source.`).option(`--scope <scope>`,`project (default) or global.`,`project`).action(async(e,t)=>{let n=j(process.cwd()),r=nr(n,`server`);if(r.status!==`alive`){process.stderr.write(`${I(`Error:`)} no running Open Knowledge server for this project. Start it with ${R(`${O()} start`)} and retry.\n`),process.exitCode=1;return}let i;try{i=await fetch(`http://127.0.0.1:${r.lock.port}/api/skill/import`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({source:e,...t.skill?{skill:t.skill}:{},scope:t.scope===`global`?`global`:`project`})})}catch(e){let t=e instanceof Error?e.message:String(e);process.stderr.write(`${I(`Error:`)} could not reach the server: ${t}\n`),process.exitCode=1;return}let a=await i.json().catch(()=>({}));if(!i.ok){let e=a.detail??a.title??`HTTP ${i.status}`;process.stderr.write(`${I(`Import failed:`)} ${e}\n`),process.exitCode=1;return}let o=a.name;if(a.alreadyImported){process.stdout.write(`${N(`Already imported:`)} ${R(o)} (identical content).\n`);return}let s=a.provenance??{},c=a.collisionRenamedFrom;process.stdout.write(`${F(`Imported`)} ${R(o)}${c?P(` (renamed from ${c} — name was taken)`):``} from ${P(s.source??e)}${s.publisher?P(` · ${s.publisher}`):``}.\n${P(`Saved as versioned content in this project's skill home. Scripts shown, never run. Use the skill's install menu (or the install MCP verb) to add it to your other editors.`)}\n`);for(let e of a.warnings??[])process.stdout.write(`  ${P(`! ${e}`)}\n`)}),e}function rh(e){return{server:ih(`server`,e),ui:e.status===`alive`&&Yt(e.lock)?{name:`ui`,state:`alive`,pid:e.lock.pid,port:e.lock.port,startedAt:e.lock.startedAt,host:e.lock.hostname,alive:!0,servedByServer:!0}:{name:`ui`,state:`missing`,alive:!1}}}function ih(e,t){switch(t.status){case`missing`:return{name:e,state:`missing`,alive:!1};case`corrupt`:return{name:e,state:`corrupt`,alive:!1};case`read-error`:return{name:e,state:`read-error`,alive:`unknown`};case`unverified-owner`:return{name:e,state:`unverified-owner`,pid:t.pid,alive:`unknown`};case`foreign-host`:return{name:e,state:`foreign-host`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:`unknown`};case`dead-pid`:return{name:e,state:`dead-pid`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!1};case`alive`:return{name:e,state:`alive`,pid:t.lock.pid,port:t.lock.port,startedAt:t.lock.startedAt,host:t.lock.hostname,alive:!0}}}function ah(e){return`${oh(e.server)}\n${oh(e.ui)}`}function oh(e){let t=e.name===`server`?`server`:`ui    `;return e.state===`missing`?`${t}  not running`:e.state===`corrupt`?`${t}  lock file corrupt — run \`${O()} clean\``:e.state===`read-error`?`${t}  lock file unreadable — restore file and parent-directory access, then retry`:e.state===`unverified-owner`?`${t}  unverified owner (lock records no machine) pid=${e.pid} is alive locally; server identity unknown`:e.state===`foreign-host`?`${t}  foreign host (${e.host}) pid=${e.pid} port=${e.port}`:e.state===`dead-pid`?`${t}  stale (dead pid=${e.pid}) — run \`${O()} clean\``:e.servedByServer===!0?`${t}  served by server  pid=${e.pid} port=${e.port}`:`${t}  alive  pid=${e.pid} port=${e.port} started=${e.startedAt}`}function sh(e){let t=e.inspect??(()=>nr(e.lockDir,`server`)),n=e.log??(e=>console.log(e)),r=rh(t());return e.json?n(JSON.stringify(r,null,2)):n(ah(r)),r}function ch(e){return new M(`status`).description(`Show whether the server and UI are running for this project`).option(`--json`,`Emit structured JSON instead of formatted text`).action(t=>{e(),sh({lockDir:j(process.cwd()),json:t.json===!0})})}function lh(e){if(e.yes===!0||e.json===!0)return!1;let t=e.stdinIsTTY??process.stdin.isTTY,n=e.stdoutIsTTY??process.stdout.isTTY;return t===!0&&n===!0}async function uh(e,t){let n=ia({input:e.input,output:e.output});try{return(await n.question(t)).trim()}finally{n.close()}}async function dh(e={}){let t={input:e.input??process.stdin,output:e.output??process.stderr};t.output.write(P(`
 What you share is sent to the OpenKnowledge team.
 `));let n=await Tr({message:`Before you go, mind sharing why? (optional)`,default:null,pageSize:C.length+1,choices:[...C.map(e=>({name:e.label,value:e.value})),{name:`Skip, I'd rather not say`,value:null}]},t);if(n===null)return{};let r=await uh(t,P(`Anything else we should know? (optional) `)),i=await uh(t,P(`Email, if we may follow up (optional) `));return{reason:n,note:r||void 0,email:i||void 0}}async function fh(e){if(!lh(e))return`not-prompted`;let t;try{t=await(e.collect??(()=>dh(e)))()}catch{return`failed`}return l(t)?((e.output??process.stderr).write(`\n${R(`Thank you. We read every response.`)}\n\n`),(await(e.submit??Ie)({...t,source:`cli_uninstall`,appVersion:e.appVersion,platform:e.platform})).ok?`submitted`:`undelivered`):`skipped`}function ph(e,t,n=_h,r=U,i={}){let a=[],o=i.platform??process.platform,c=i.env??process.env,l=ii(ai(c,i.execPath??process.execPath)).map(e=>s[e]);if(o===`darwin`)for(let t of l)for(let n of[`/Applications`,B(e,`Applications`)]){let e=B(n,`${t.productName}.app`);r(e)&&a.push({method:`app`,label:`${t.productName} (${e})`,instruction:`Move ${e} to the Trash (or: rm -rf "${e}")`})}else if(o===`win32`){let e=c.LOCALAPPDATA;if(e)for(let t of l)for(let n of y(t)){let i=B(e,`Programs`,n,_(t));if(r(i)){a.push({method:`app`,label:`${t.productName} (${i})`,instruction:`Uninstall from Windows Settings → Apps → Installed apps → ${t.productName}`});break}}}else if(o===`linux`){let e=i.queryPackageDatabase??mh;for(let t of l){let n=`/opt/${t.productName}`,i=B(n,t.linuxExecutableName);if(r(i)){let{deb:r,rpm:o}=t.linuxPackageNames,s=gh(i,e);a.push({method:`app`,label:`${t.productName} (${n})`,instruction:`Remove with your package manager: ${s===null?`sudo apt remove ${r} (Debian/Ubuntu), ${hh(o)}`:s.format===`deb`?`sudo apt remove ${s.name}`:hh(s.name)}`})}}}return n([`ls`,`-g`,`--depth=0`,`@inkeep/open-knowledge`])?.includes(`@inkeep/open-knowledge@`)&&a.push({method:`npm-global`,label:`npm global install`,instruction:`npm uninstall -g @inkeep/open-knowledge`}),t&&/[/\\]_npx[/\\]/.test(t)&&a.push({method:`npx`,label:`npx (ephemeral)`,instruction:`Nothing to uninstall — npx runs from a temporary cache. (Optional: npm cache clean --force)`}),a}function mh(e,t){try{return Oi(e,t,A({encoding:`utf-8`,timeout:5e3,stdio:[`ignore`,`pipe`,`ignore`]}))}catch{return null}}function hh(e){return`sudo dnf remove ${e} (Fedora/RHEL) or sudo zypper remove ${e} (openSUSE)`}function gh(e,t){let n=t(`dpkg-query`,[`-S`,e])?.split(`

package/dist/constants-GwXjnOvH.mjs

@@ -0,0 +1 @@
+import"./md-manager-BGnqyqi1-I7NmBKjQ.mjs";var e=`0.86.22-beta.1`;const t=`config.yml`,n=e;export{n,t};

package/dist/index.mjs

@@ -1550,6 +1550,6 @@ GFS4: `),console.error(e)}),r[c]||(d(r,global[c]||[]),r.close=(function(e){funct
 `);re(e,o)}function j9(e,t){let n=S(e,`utf-8`);if(n.trim().length!==0)try{let r=k9(JSON.parse(n),t),i=n.endsWith(`
 `)?`
 `:``;re(e,`${JSON.stringify(r,null,2)}${i}`)}catch{let r=O9(n,t.contentDirSpellings);r!==n&&re(e,r)}}function M9(e,t){let n=S(e,`utf-8`),r=O9(n,t.contentDirSpellings);r!==n&&re(e,r)}function N9(e){try{return w(e,{withFileTypes:!0}).filter(e=>e.isFile()).map(t=>j(e,t.name))}catch{return[]}}const OPe=new Set([`agent-presence.json`,`agent-effects.json`,`runtime.json`]);function P9(e){return/\.log\.\d+$/.test(e)}function kPe(e){return e.endsWith(`.jsonl`)||e.endsWith(`.log`)||P9(e)}const APe=[`telemetry`,`logs`,`process`,`diagnostic-reports`];function jPe(e){let t={contentDirSpellings:D9(e.contentDir)};for(let n of APe)for(let r of N9(j(e.stagingDir,n)))kPe(r)?A9(r,t):r.endsWith(`.json`)?j9(r,t):M9(r,t);for(let n of N9(j(e.stagingDir,`state`))){let e=ae(n);n.endsWith(`.jsonl`)?A9(n,t):OPe.has(e)?j9(n,t):M9(n,t)}}const F9=[`.ok`,`local`,`telemetry`],I9=[`.ok`,`local`,`logs`],L9=[`.ok`,`local`,`loss-capture`],R9=`spans-current.jsonl`,z9=`spans-prev.jsonl`,B9=`server-current.jsonl`,V9=`server-prev.jsonl`,H9=`loss-current.jsonl`,U9=`loss-prev.jsonl`;function MPe(e){return j(e,...F9,R9)}function NPe(e){return j(e,...F9,z9)}function PPe(e){return j(e,...I9,B9)}function FPe(e){return j(e,...I9,V9)}function IPe(e){return j(e,...L9,H9)}function LPe(e){return j(e,...L9,U9)}const W9=1e3;async function RPe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-presence`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function zPe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/agent-effects`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}async function BPe(e){try{let t=await fetch(`http://127.0.0.1:${e}/api/metrics/watcher-recent`,{signal:AbortSignal.timeout(W9)});return t.ok?await t.text():null}catch{return null}}function VPe(e){try{let t=JSON.parse(e);if(typeof t!=`object`||!t)return null;let n=t.decisions;return Array.isArray(n)?n.length===0?``:`${n.map(e=>JSON.stringify(e)).join(`
-`)}\n`:null}catch{return null}}function HPe(e){let t=j(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],c8({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function UPe(e){let t=j(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],c8({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function WPe(){return{nodeVersion:process.version,platform:ye(),arch:me()}}function GPe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,xs.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function KPe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return KPe(e.maxBytes)}function qPe(e){let t=q9(GJ(`project`,e)),n=q9(GJ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function JPe(e){return Te(`sha256`).update(e).digest(`hex`)}function X9(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const YPe=[`"doc.name"`,`"docName"`];function XPe(e){let t=S(e,`utf-8`),n=0;for(let e of YPe){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function Z9(e,t){if(!g(e))return!1;try{return v(k(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,Z5(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Q9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=j(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const ZPe=new Set([`.jsonl`]);function QPe(e){let t=e.lastIndexOf(`.`);return t!==-1&&ZPe.has(e.slice(t))}const $Pe=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function eFe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&$Pe.has(e.slice(t))}function tFe(e){let t=[];for(let n of Q9(e)){let r=$9(e,n);if(!eFe(r))continue;let{redacted:i,patterns:a,lineCount:o}=BP(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return M(e,t).split(le).join(`/`)}async function nFe(e){let t=N(e.contentDir),n=N(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??RPe,a=r.fetchAgentEffects??zPe,o=r.fetchWatcherRecent??BPe,s=r.readShadowHead??HPe,c=r.readCheckpointRefs??UPe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.86.22-beta.0`),d=r.readDesktopEnv??G9,f=r.readLanguage??E9,p=r.readRuntime??WPe,h=r.isOtlpPushEnabled??GPe,_=y(j(xe(),`ok-bundle-`));try{v(j(_,`telemetry`),{recursive:!0}),v(j(_,`logs`),{recursive:!0}),v(j(_,`state`),{recursive:!0}),Z9(MPe(n),j(_,`telemetry`,R9)),Z9(NPe(n),j(_,`telemetry`,z9)),Z9(PPe(n),j(_,`logs`,B9)),Z9(FPe(n),j(_,`logs`,V9));for(let t of e.userLogFiles??[])Z9(t,j(_,`logs`,ae(t)));for(let t of e.userStateFiles??[])Z9(t,j(_,TJ,ae(t)));let y=0;for(let t of e.diagnosticReports?.files??[])Z9(t,j(_,`diagnostic-reports`,ae(t)))&&(y+=1);let b=j(n,`.ok`,`local`),x=j(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){Z9(x,j(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(j(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(j(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=VPe(n);e!==null&&re(j(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(j(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(j(_,`state`,`checkpoint-refs.txt`),D),Z9(IPe(n),j(_,`state`,H9)),Z9(LPe(n),j(_,`state`,U9)),Z9(j(b,`last-spawn-error.log`),j(_,`state`,`last-spawn-error.log`)),Z9(j(b,od),j(_,`state`,od)),Z9(j(b,sd),j(_,`state`,sd)),Z9(j(b,ad),j(_,`state`,ad));let ee=p(),ne=d(),ie=f(),k={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(j(_,`state`,`runtime.json`),`${JSON.stringify(k,null,2)}\n`);let oe=C===`running`?`running
+`)}\n`:null}catch{return null}}function HPe(e){let t=j(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`log`,`--oneline`,`-50`],c8({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function UPe(e){let t=j(e,`.git`,`ok`);if(!g(t))return null;let n=l(`git`,[`-C`,t,`for-each-ref`,`--sort=-creatordate`,`--count=50`,`--format=%(refname)%09%(creatordate:iso-strict)%09%(contents:subject)`,`refs/checkpoints/`],c8({encoding:`utf-8`,timeout:2e3}));return n.error||n.status!==0?null:n.stdout??``}function G9(){let e=process.env.OK_DESKTOP_VERSION,t=process.env.OK_DESKTOP_PACKAGED,n=process.env.OK_DESKTOP_CHANNEL;return e===void 0||t===void 0||n===void 0?null:{electronVersion:e,packaged:t===`1`||t.toLowerCase()===`true`,channel:n}}function WPe(){return{nodeVersion:process.version,platform:ye(),arch:me()}}function GPe(){return process.env.OTEL_SDK_DISABLED===`false`}function K9(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function q9(e){if(!g(e))return{};let t;try{t=(0,xs.parse)(S(e,`utf-8`))}catch(t){return console.warn(`[ok diagnose bundle] failed to parse ${e} for manifest config; manifest will report schema defaults. Reason: ${t instanceof Error?t.message:String(t)}`),{}}if(!K9(t))return{};let n=t.telemetry;if(!K9(n))return{};let r=n.localSink;return K9(r)?r:{}}function J9(e){return typeof e==`boolean`?e:void 0}function KPe(e){return typeof e==`number`&&Number.isFinite(e)&&e>0?e:void 0}function Y9(e){if(K9(e))return KPe(e.maxBytes)}function qPe(e){let t=q9(GJ(`project`,e)),n=q9(GJ(`project-local`,e));return{enabled:J9(n.enabled)??J9(t.enabled)??!0,spansMaxBytes:Y9(n.spans)??Y9(t.spans)??52428800,logsMaxBytes:Y9(n.logs)??Y9(t.logs)??26214400}}function JPe(e){return Te(`sha256`).update(e).digest(`hex`)}function X9(e){let t=S(e),n=0;for(let e=0;e<t.length;e++)t[e]===10&&n++;return n}const YPe=[`"doc.name"`,`"docName"`];function XPe(e){let t=S(e,`utf-8`),n=0;for(let e of YPe){let r=t.indexOf(e);for(;r!==-1;)n++,r=t.indexOf(e,r+e.length)}return n}function Z9(e,t){if(!g(e))return!1;try{return v(k(t),{recursive:!0}),e.endsWith(`.ips`)?re(t,Z5(S(e,`utf-8`))):m(e,t),!0}catch{return!1}}function Q9(e){let t=[],n=e=>{let r=w(e,{withFileTypes:!0});for(let i of r){let r=j(e,i.name);i.isDirectory()?n(r):i.isFile()&&t.push(r)}};return n(e),t.sort()}const ZPe=new Set([`.jsonl`]);function QPe(e){let t=e.lastIndexOf(`.`);return t!==-1&&ZPe.has(e.slice(t))}const $Pe=new Set([`.jsonl`,`.json`,`.txt`,`.log`,`.lock`,`.yaml`,`.yml`,`.ips`]);function eFe(e){if(P9(e))return!0;let t=e.lastIndexOf(`.`);return t!==-1&&$Pe.has(e.slice(t))}function tFe(e){let t=[];for(let n of Q9(e)){let r=$9(e,n);if(!eFe(r))continue;let{redacted:i,patterns:a,lineCount:o}=BP(S(n,`utf-8`));a.length!==0&&(re(n,i),t.push({file:r,lineCount:o,patterns:a}))}return{redactions:t,redactedLineCount:t.reduce((e,t)=>e+t.lineCount,0)}}function $9(e,t){return M(e,t).split(le).join(`/`)}async function nFe(e){let t=N(e.contentDir),n=N(e.projectDir??e.contentDir),r=e.deps??{},i=r.fetchAgentPresence??RPe,a=r.fetchAgentEffects??zPe,o=r.fetchWatcherRecent??BPe,s=r.readShadowHead??HPe,c=r.readCheckpointRefs??UPe,l=r.now??(()=>new Date),u=r.okVersion??(()=>`0.86.22-beta.1`),d=r.readDesktopEnv??G9,f=r.readLanguage??E9,p=r.readRuntime??WPe,h=r.isOtlpPushEnabled??GPe,_=y(j(xe(),`ok-bundle-`));try{v(j(_,`telemetry`),{recursive:!0}),v(j(_,`logs`),{recursive:!0}),v(j(_,`state`),{recursive:!0}),Z9(MPe(n),j(_,`telemetry`,R9)),Z9(NPe(n),j(_,`telemetry`,z9)),Z9(PPe(n),j(_,`logs`,B9)),Z9(FPe(n),j(_,`logs`,V9));for(let t of e.userLogFiles??[])Z9(t,j(_,`logs`,ae(t)));for(let t of e.userStateFiles??[])Z9(t,j(_,TJ,ae(t)));let y=0;for(let t of e.diagnosticReports?.files??[])Z9(t,j(_,`diagnostic-reports`,ae(t)))&&(y+=1);let b=j(n,`.ok`,`local`),x=j(b,`server.lock`),C=`not-running`,w=`no server.lock`,T=null;if(g(x)){Z9(x,j(_,`state`,`server.lock`));try{let e=S(x,`utf-8`),t=JSON.parse(e);typeof t.port==`number`?T=t.port:w=`lock present but no port`}catch{w=`lock present but unparseable`}}if(T!==null){let e=await i(T);e===null?w=`agent-presence endpoint at :${T} unreachable`:(re(j(_,`state`,`agent-presence.json`),e),C=`running`,w=``);let t=await a(T);t!==null&&re(j(_,`state`,`agent-effects.json`),t);let n=await o(T);if(n!==null){let e=VPe(n);e!==null&&re(j(_,`state`,`watcher-recent.jsonl`),e)}}let E=s(t);E!==null&&re(j(_,`state`,`shadow-head.txt`),E);let D=c(t);D!==null&&re(j(_,`state`,`checkpoint-refs.txt`),D),Z9(IPe(n),j(_,`state`,H9)),Z9(LPe(n),j(_,`state`,U9)),Z9(j(b,`last-spawn-error.log`),j(_,`state`,`last-spawn-error.log`)),Z9(j(b,od),j(_,`state`,od)),Z9(j(b,sd),j(_,`state`,sd)),Z9(j(b,ad),j(_,`state`,ad));let ee=p(),ne=d(),ie=f(),k={ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie}};re(j(_,`state`,`runtime.json`),`${JSON.stringify(k,null,2)}\n`);let oe=C===`running`?`running
 `:`not-running (${w})\n`;re(j(_,`state`,`server-status.txt`),oe);let A=e.diagnosticReports===void 0?`not-collected (no collection attempted)`:X5(e.diagnosticReports,y);if(re(j(_,`state`,`diagnostic-reports-status.txt`),`${A}\n`),re(j(_,e7),x7(e.osTerminationEvidence)),e.processDir&&g(e.processDir)){let t=j(_,`process`);v(t,{recursive:!0}),m(e.processDir,t,{recursive:!0})}let se=e.redact===!0;se&&jPe({stagingDir:_,contentDir:t}),e.note&&re(j(_,`note.txt`),e.note);let ce=null;e.scrubSecrets===!0&&(ce=tFe(_));for(let t of e.extraFiles??[]){let e=t.zipName??ae(t.sourcePath);if(!Z9(t.sourcePath,j(_,`extra`,e))){r.logger?.warn({sourcePath:t.sourcePath},`extra file missing; omitted from bundle`);continue}let n=C7(t,`extra/${e}`);n!==null&&(ce??={redactions:[],redactedLineCount:0},ce.redactions.push(n),ce.redactedLineCount+=n.lineCount)}let M=qPe(n),N=Q9(_),le=[],ue=0,de=0;for(let e of N){let t=$9(_,e),n=te(e).size,r=QPe(t)?X9(e):0;le.push({path:t,bytes:n,lines:r}),ue+=n,(t.startsWith(`telemetry/`)||t.startsWith(`logs/`))&&(de+=XPe(e))}let fe={applied:se};ce!==null&&(fe.secretScrub=ce);let P={schemaVersion:2,createdAt:l().toISOString(),ok:{version:u(),nodeVersion:ee.nodeVersion,platform:ee.platform,arch:ee.arch},host:{desktop:ne,language:ie},contentDir:{pathSha256:JPe(t),absolutePath:se?`<CONTENT_DIR>`:t},telemetry:{localSink:M,otlpPushEnabled:h()},redaction:fe,serverStatus:C,files:le};re(j(_,`manifest.json`),`${JSON.stringify(P,null,2)}\n`);let pe=D9(t),me=N.some(e=>{try{let t=S(e,`utf-8`);return pe.some(e=>t.includes(e))}catch{return!1}}),he={stagedDiagnosticReports:y,totalBytes:ue,fileCount:le.length,docNameCount:de,contentDirVisible:me,redacted:se},ge=!1;return{stagingDir:_,manifest:P,summary:he,cleanup:()=>{ge||(ge=!0,O(_,{recursive:!0,force:!0}))}}}catch(e){throw O(_,{recursive:!0,force:!0}),e}}async function rFe(e){let{collected:t,outputPath:n}=e,r=k(n);if(!g(r))throw Error(`ok diagnose bundle: parent directory does not exist: ${r}. Create it or pass --out with an existing parent.`);let i=new DDe.ZipFile,a=Q9(t.stagingDir);for(let e of a){let n=$9(t.stagingDir,e);i.addFile(e,n)}i.end();let o=h(n);return i.outputStream.pipe(o),await new Promise((e,t)=>{o.on(`close`,e),o.on(`error`,t),i.outputStream.on(`error`,t)}),n}function iFe(e,t){let n=j(e,`.ok`,`config.yml`);if(g(n))try{let t=(0,xs.parse)(S(n,`utf-8`)),r=dY(t)?t.content:void 0,i=dY(r)?r.dir:void 0;if(typeof i==`string`&&i.length>0)return N(e,i)}catch(e){t?.warn({configPath:n,err:e},`bug-report: failed to read .ok/config.yml; falling back to project root as content dir`)}return N(e)}async function aFe(e,t,n,r,i,a){let o=w7(t,e.logger),s=await nFe({contentDir:iFe(t,e.logger),projectDir:t,redact:e.redact,scrubSecrets:e.redact,note:e.note,extraFiles:e.extraFiles,userLogFiles:[...hNe(o,e.userLogsDir??j(RJ(),`logs`)),...E7(e.cachesDir??j(_e(),`Library`,`Caches`))],userStateFiles:D7(e.bugReportsDir??S7()),diagnosticReports:i,osTerminationEvidence:a,deps:{readDesktopEnv:n,readLanguage:r,logger:e.logger}});try{v(k(e.outputPath),{recursive:!0}),await rFe({collected:s,outputPath:e.outputPath});let t=s.manifest.redaction.secretScrub;return{zipPath:e.outputPath,summary:{level:`full`,systemWide:!1,projectSlug:o,files:s.manifest.files.map(e=>e.path),redactions:t?.redactions??[],redactedLineCount:t?.redactedLineCount??0,generatedAt:s.manifest.createdAt}}}finally{s.cleanup()}}async function oFe(e){let{projectDir:t}=e,n=e.readDesktopEnv??G9,r=e.readLanguage??E9,i=()=>VMe(e.diagnosticReportsDir??j(_e(),`Library`,`Logs`,`DiagnosticReports`),new Date);if(e.level===`full`&&t!==void 0)return aFe(e,t,n,r,i(),await b7(e.osTerminationEvidenceDeps));let{zipPath:a,summary:o}=await bNe({projectDir:t,redact:e.redact,revealDocNames:e.level===`full`,outputPath:e.outputPath,userLogsDir:e.userLogsDir,shipItLogFiles:E7(e.cachesDir??j(_e(),`Library`,`Caches`)),bugReportLedgerFiles:D7(e.bugReportsDir??S7()),diagnosticReports:e.level===`full`?i():void 0,osTerminationEvidence:e.level===`full`?await b7(e.osTerminationEvidenceDeps):void 0,logger:e.logger,note:e.note,extraFiles:e.extraFiles,desktop:n(),language:r()});return{zipPath:a,summary:{level:e.level,systemWide:t===void 0,projectSlug:o.projectSlug,files:o.files,redactions:o.redactions,redactedLineCount:o.redactedLineCount,generatedAt:o.generatedAt}}}export{vY as ALL_EDITOR_IDS,yY as EDITOR_LABELS,$Y as EDITOR_TARGETS,Pbe as HOSTS_WITH_USER_SKILL_DIR,kMe as LAUNCH_CONFIG_NAME,uPe as PATH_SHIM_BEGIN,fPe as PATH_SHIM_BLOCK_RE,dPe as PATH_SHIM_END,u5 as ProjectPathSafetyError,oMe as addOkPathsToGitExclude,d5 as assertProjectPathSafe,PY as buildManagedServerEntry,$Ne as buildMcpConfigDeclineEvent,ePe as buildMcpConfigMigrateEvent,WY as canonicalEntryFor,q5 as classifyExistingMcpEntry,oFe as collectReportBundle,_Pe as createCliProbeResolver,ZJ as createTokenStore,fNe as defaultBugReportZipPath,Ke as detectGh,Ye as detectGhAccounts,NMe as detectInstalledEditors,UY as droppedManagedKeys,txe as editorConfigPathDisplay,exe as editorEntryLocator,HNe as ensurePiBridge,qMe as findJetsamKillSync,T5 as formatTrackedRemediation,lMe as getExcludedOkPaths,C5 as getInstalledSkillProjectionPaths,Nbe as getNativeTomlMcpEditor,S5 as getOkArtifactPaths,MY as isEntryUpToDate,FY as isOwnManagedEntry,sPe as loadConfig,abe as makeLazyProbeTokenStore,S7 as okBugReportsDir,v9 as parseGitHubBlobUrl,cPe as parseGitHubShareUrl,y9 as parseGitHubTreeUrl,_9 as parseGitUrl,pPe as pathInstallMarkerPath,Gje as previewContent,PMe as probeOwnManagedEditorMcpEntry,BNe as probePiBridgeState,w5 as probeTrackedOkPaths,G5 as readExistingMcpEntry,cMe as readSharingMode,BP as redactContent,sMe as removeOkPathsFromGitExclude,YNe as removeOwnMcpEntry,nMe as removeProjectSkill,yPe as removeUserGlobalSkillBundle,TPe as removeUserSkill,Xje as resolveProjectRoot,iPe as runStop,p9 as truncatePriorEntry,w9 as userGlobalSkillBundleTargets,wPe as userSkillPresentAnywhere,lPe as validateLocalFolderForShare,W5 as writeEditorMcpConfig,SPe as writeProjectAiIntegrations,_5 as writeProjectSkill,MMe as writeUserMcpConfigs,CPe as writeUserSkill};
 //# sourceMappingURL=index.mjs.map