@khotan/cli 0.11.0 → 0.12.0

package/dist/khotan.js

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // ../khotan-core/src/version.ts
-var CATALOG_SCHEMA_VERSION = 2, CATALOG_VERSION = "2026-07-02", KHOTAN_ADAPTER_NAME = "khotan", KHOTAN_ADAPTER_VERSION = "0.10.0", SUPPORTED_CATALOG_SCHEMA_VERSIONS;
+var CATALOG_SCHEMA_VERSION = 2, CATALOG_VERSION = "2026-08-23", KHOTAN_ADAPTER_NAME = "khotan", KHOTAN_ADAPTER_VERSION = "0.10.0", SUPPORTED_CATALOG_SCHEMA_VERSIONS;
 var init_version = __esm(() => {
   SUPPORTED_CATALOG_SCHEMA_VERSIONS = [
     CATALOG_SCHEMA_VERSION
@@ -1129,7 +1129,7 @@ var init_catalog = __esm(() => {
         { name: "slug", location: "body", type: "string", description: "Stable identifier; derived from the name when omitted." },
         { name: "description", location: "body", type: "string", description: "Short summary shown in listings." }
       ],
-      http: { method: "POST", path: "/api/v1/projects", operationId: "createProject" },
+      http: { method: "POST", path: "/api/v1/projects", operationId: "createProject", bodyMode: "json" },
       cli: { command: ["projects", "create"], summary: "Create a project" }
     },
     {
@@ -1138,18 +1138,34 @@ var init_catalog = __esm(() => {
       safety: "destructive",
       auth: true,
       title: "Delete a project",
-      description: "Soft-delete a project and free its slug. The linked Linear project is retained as the record of work done.",
+      description: "Soft-delete a project and free its slug. The linked tracker project is retained as the record of work done.",
       input: [idField("projectId", "The project id or slug.")],
       http: { method: "DELETE", path: "/api/v1/projects/{projectId}", operationId: "deleteProject" },
       cli: { command: ["projects", "delete"], summary: "Delete a project" }
     },
+    {
+      id: "projects.update",
+      domain: "projects",
+      safety: "write",
+      auth: true,
+      title: "Update a project",
+      description: "Update a project's name, description, or lifecycle. Archive with lifecycle archived.",
+      input: [
+        idField("projectId", "The project id or slug."),
+        { name: "name", location: "body", type: "string", description: "Display name for the project." },
+        { name: "description", location: "body", type: "string", description: "Short summary shown in listings." },
+        { name: "lifecycle", location: "body", type: "string", description: "One of: active, archived." }
+      ],
+      http: { method: "PATCH", path: "/api/v1/projects/{projectId}", operationId: "updateProject", bodyMode: "json" },
+      cli: { command: ["projects", "update"], summary: "Update a project" }
+    },
     {
       id: "projects.spec.get",
       domain: "projects",
       safety: "read",
       auth: true,
       title: "Read a project spec",
-      description: "Read the spec tree at one altitude: high renders the goal, medium adds phases, low adds items and their mirrored Linear issues.",
+      description: "Read the spec tree at one altitude: high renders the goal, medium adds phases, low adds items and their mirrored tracker issues.",
       input: [
         idField("projectId", "The project id or slug."),
         { name: "altitude", location: "query", type: "string", default: "high", description: "One of: high, medium, low." }
@@ -1208,7 +1224,7 @@ var init_catalog = __esm(() => {
         { name: "resourceKind", location: "body", type: "string", required: true, description: "One of: app, pipeline, database." },
         { name: "resourceId", location: "body", type: "string", required: true, description: "The resource id." }
       ],
-      http: { method: "POST", path: "/api/v1/projects/{projectId}/members", operationId: "attachProjectMember" },
+      http: { method: "POST", path: "/api/v1/projects/{projectId}/members", operationId: "attachProjectMember", bodyMode: "json" },
       cli: { command: ["projects", "attach"], summary: "Attach a resource to a project" }
     },
     {
@@ -1223,21 +1239,99 @@ var init_catalog = __esm(() => {
         { name: "resourceKind", location: "body", type: "string", required: true, description: "One of: app, pipeline, database." },
         { name: "resourceId", location: "body", type: "string", required: true, description: "The resource id." }
       ],
-      http: { method: "DELETE", path: "/api/v1/projects/{projectId}/members", operationId: "detachProjectMember" },
+      http: { method: "DELETE", path: "/api/v1/projects/{projectId}/members", operationId: "detachProjectMember", bodyMode: "json" },
       cli: { command: ["projects", "detach"], summary: "Detach a resource from a project" }
+    },
+    {
+      id: "projects.nodes.create",
+      domain: "projects",
+      safety: "write",
+      auth: true,
+      title: "Create a spec node",
+      description: "Create a child under an existing spec node — a delivery phase under Milestones, or an item under a phase.",
+      input: [
+        idField("projectId", "The project id or slug."),
+        { name: "parentId", location: "body", type: "string", required: true, description: "The parent node id." },
+        { name: "title", location: "body", type: "string", required: true, description: "Display title for the node." },
+        { name: "body", location: "body", type: "string", description: "Initial body. Empty when omitted." },
+        { name: "position", location: "body", type: "number", description: "Sibling position. Appended when omitted." }
+      ],
+      http: { method: "POST", path: "/api/v1/projects/{projectId}/spec/nodes", operationId: "createProjectSpecNode", bodyMode: "json" },
+      cli: { command: ["projects", "node", "create"], summary: "Create a spec node" }
+    },
+    {
+      id: "projects.nodes.update",
+      domain: "projects",
+      safety: "write",
+      auth: true,
+      title: "Update a spec node",
+      description: "Update a node's title, sibling position, parent, or milestone plan dates.",
+      input: [
+        idField("projectId", "The project id or slug."),
+        idField("nodeId", "The spec node id."),
+        { name: "title", location: "body", type: "string", description: "Display title for the node." },
+        { name: "position", location: "body", type: "number", description: "Sibling position." },
+        { name: "parentId", location: "body", type: "string", description: "Move the node under this parent." },
+        { name: "startDate", location: "body", type: "string", description: "Milestone plan start (YYYY-MM-DD). Only valid on a phase." },
+        { name: "targetDate", location: "body", type: "string", description: "Milestone plan target (YYYY-MM-DD). Only valid on a phase." },
+        { name: "dependsOnNodeId", location: "body", type: "string", description: "Milestone this phase waits on. Only valid on a phase." }
+      ],
+      http: { method: "PATCH", path: "/api/v1/projects/{projectId}/spec/nodes/{nodeId}", operationId: "updateProjectSpecNode", bodyMode: "json" },
+      cli: { command: ["projects", "node", "update"], summary: "Update a spec node" }
+    },
+    {
+      id: "projects.nodes.delete",
+      domain: "projects",
+      safety: "destructive",
+      auth: true,
+      title: "Delete a spec node",
+      description: "Soft-delete a spec node and its descendants. The goal node cannot be deleted.",
+      input: [
+        idField("projectId", "The project id or slug."),
+        idField("nodeId", "The spec node id.")
+      ],
+      http: { method: "DELETE", path: "/api/v1/projects/{projectId}/spec/nodes/{nodeId}", operationId: "deleteProjectSpecNode" },
+      cli: { command: ["projects", "node", "delete"], summary: "Delete a spec node" }
+    },
+    {
+      id: "projects.linear.options",
+      domain: "projects",
+      safety: "read",
+      auth: true,
+      title: "List Linear projects that can be bound",
+      description: "List Linear projects this workspace can bind a Khotan project to.",
+      input: [
+        { name: "query", location: "query", type: "string", description: "Filter Linear projects by name." }
+      ],
+      http: { method: "GET", path: "/api/v1/projects/linear-options", operationId: "listLinearProjectOptions" },
+      cli: { command: ["projects", "linear", "options"], summary: "List Linear projects that can be bound", defaultOutput: "table" }
+    },
+    {
+      id: "projects.linear.bind",
+      domain: "projects",
+      safety: "write",
+      auth: true,
+      title: "Bind a project to Linear",
+      description: "Bind this project to an existing Linear project. A new project mints its own on first push.",
+      input: [
+        idField("projectId", "The project id or slug."),
+        { name: "linearProjectId", location: "body", type: "string", required: true, description: "The Linear project id to bind." }
+      ],
+      http: { method: "POST", path: "/api/v1/projects/{projectId}/linear", operationId: "bindLinearProject", bodyMode: "json" },
+      cli: { command: ["projects", "linear", "bind"], summary: "Bind a project to Linear" }
     }
   ];
   capabilities = [
     ...identityCapabilities,
     ...appsCapabilities,
     ...pipelinesCapabilities,
+    ...fileCapabilities,
+    ...contextCapabilities,
+    ...integrationsCapabilities,
     ...databaseCapabilities,
     ...redisCapabilities,
-    ...fileCapabilities,
     ...folderCapabilities,
-    ...contextCapabilities,
     ...projectCapabilities,
-    ...integrationsCapabilities,
     ...emailSubscriptionCapabilities
   ];
   khotanCatalog = {
@@ -1430,6 +1524,13 @@ function validateCatalogStructure(catalog = khotanCatalog) {
         });
       }
     }
+    const hasBodyInput = capability.input.some((field) => field.location === "body");
+    if (hasBodyInput && capability.http.bodyMode !== "json") {
+      errors.push({
+        capabilityId: capability.id,
+        message: 'Has body inputs but does not declare bodyMode: "json".'
+      });
+    }
   }
   return { ok: errors.length === 0, errors };
 }
@@ -1497,6 +1598,11 @@ var init_spec = __esm(() => {
       title: "Khotan API",
       version: "1.0.0"
     },
+    servers: [
+      {
+        url: "https://app.khotan.com"
+      }
+    ],
     paths: {
       "/api/v1/health": {
         get: {
@@ -4630,7 +4736,7 @@ var init_spec = __esm(() => {
             }
           },
           summary: "Create a Redis database",
-          description: "Provisions a global Upstash Redis database synchronously and responds 201 with the persisted record whether provisioning ends ready or failed; branch on the returned status. This operation is not idempotent: retrying a request that already succeeded provisions a second database. Omit primaryRegion to use the default region.",
+          description: "Provisions a globally replicated Redis database synchronously and responds 201 with the persisted record whether provisioning ends ready or failed; branch on the returned status. This operation is not idempotent: retrying a request that already succeeded provisions a second database. Omit primaryRegion to use the default region.",
           tags: [
             "Redis Databases"
           ],
@@ -4920,7 +5026,7 @@ var init_spec = __esm(() => {
             }
           },
           summary: "Delete a Redis database",
-          description: "Tears down the Upstash database, then soft-deletes the record — the same semantics as deleting from the dashboard. Deletion is permanent. Returns 403 resource_protected when the database has deletion protection enabled; protection can only be removed from the dashboard.",
+          description: "Tears down the database at the provider, then soft-deletes the record — the same semantics as deleting from the dashboard. Deletion is permanent. Returns 403 resource_protected when the database has deletion protection enabled; protection can only be removed from the dashboard.",
           tags: [
             "Redis Databases"
           ],
@@ -15155,6 +15261,102 @@ var init_spec = __esm(() => {
           ]
         }
       },
+      "/api/v1/projects/linear-options": {
+        get: {
+          responses: {
+            "200": {
+              description: "Linear projects this workspace can bind to.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      projects: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            id: {
+                              type: "string"
+                            },
+                            name: {
+                              type: "string"
+                            },
+                            url: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            statusName: {
+                              nullable: true,
+                              type: "string"
+                            }
+                          },
+                          required: [
+                            "id",
+                            "name",
+                            "url",
+                            "statusName"
+                          ],
+                          additionalProperties: false
+                        }
+                      }
+                    },
+                    required: [
+                      "projects"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "List Linear projects that can be bound",
+          description: "Returns Linear projects visible to this workspace. Use this to pick a project to bind; a new Khotan project mints its own Linear project on first push.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "listLinearProjectOptions",
+          parameters: [
+            {
+              name: "query",
+              in: "query",
+              required: false,
+              schema: {
+                type: "string",
+                maxLength: 200
+              }
+            }
+          ],
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
       "/api/v1/projects/{projectId}": {
         get: {
           responses: {
@@ -15383,7 +15585,7 @@ var init_spec = __esm(() => {
             }
           },
           summary: "Update a project",
-          description: "Updates a project's Khotan-owned attributes. The slug is immutable, and execution state is never writable here — Linear owns it.",
+          description: "Updates a project's Khotan-owned attributes. The slug is immutable, and execution state is never writable here — the tracker owns it.",
           tags: [
             "Projects"
           ],
@@ -15484,7 +15686,7 @@ var init_spec = __esm(() => {
             }
           },
           summary: "Delete a project",
-          description: "Soft-deletes a project and frees its slug for reuse. The linked Linear project is retained.",
+          description: "Soft-deletes a project and frees its slug for reuse. The linked tracker project is retained.",
           tags: [
             "Projects"
           ],
@@ -15573,6 +15775,10 @@ var init_spec = __esm(() => {
                           title: {
                             type: "string"
                           },
+                          sectionKey: {
+                            nullable: true,
+                            type: "string"
+                          },
                           documentId: {
                             nullable: true,
                             type: "string"
@@ -15589,6 +15795,18 @@ var init_spec = __esm(() => {
                             nullable: true,
                             type: "string"
                           },
+                          startDate: {
+                            nullable: true,
+                            type: "string"
+                          },
+                          targetDate: {
+                            nullable: true,
+                            type: "string"
+                          },
+                          dependsOnNodeId: {
+                            nullable: true,
+                            type: "string"
+                          },
                           children: {
                             type: "array",
                             items: {
@@ -15602,10 +15820,14 @@ var init_spec = __esm(() => {
                           "depth",
                           "position",
                           "title",
+                          "sectionKey",
                           "documentId",
                           "body",
                           "bodyRevision",
                           "linearMilestoneId",
+                          "startDate",
+                          "targetDate",
+                          "dependsOnNodeId",
                           "children"
                         ],
                         additionalProperties: false
@@ -15647,7 +15869,7 @@ var init_spec = __esm(() => {
             }
           },
           summary: "Read a project spec",
-          description: "Returns the project's spec tree limited to the requested altitude: high renders the goal, medium adds phases, low adds items joined with their mirrored Linear issues. Defaults to high.",
+          description: "Returns the project's spec tree limited to the requested altitude: high renders the goal, medium adds phases, low adds items joined with their mirrored tracker issues. Defaults to high.",
           tags: [
             "Projects"
           ],
@@ -15673,7 +15895,7 @@ var init_spec = __esm(() => {
                   "medium",
                   "low"
                 ],
-                description: "Depth cap over the one spec tree: high renders the goal, medium adds phases, low adds items and their mirrored Linear issues."
+                description: "Depth cap over the one spec tree: high renders the goal, medium adds phases, low adds items and their mirrored tracker issues."
               }
             }
           ],
@@ -15923,59 +16145,69 @@ var init_spec = __esm(() => {
           ]
         }
       },
-      "/api/v1/projects/{projectId}/revisions": {
-        get: {
+      "/api/v1/projects/{projectId}/spec/nodes": {
+        post: {
           responses: {
-            "200": {
-              description: "The project's committed spec revisions.",
+            "201": {
+              description: "The created node.",
               content: {
                 "application/json": {
                   schema: {
                     type: "object",
                     properties: {
-                      revisions: {
-                        type: "array",
-                        items: {
-                          type: "object",
-                          properties: {
-                            id: {
-                              type: "string"
-                            },
-                            revision: {
-                              type: "number"
-                            },
-                            changeSummary: {
-                              nullable: true,
-                              type: "string"
-                            },
-                            actorType: {
-                              type: "string"
-                            },
-                            actorId: {
-                              type: "string"
-                            },
-                            committedAt: {
-                              type: "string"
-                            },
-                            documentCount: {
-                              type: "number"
-                            }
-                          },
-                          required: [
-                            "id",
-                            "revision",
-                            "changeSummary",
-                            "actorType",
-                            "actorId",
-                            "committedAt",
-                            "documentCount"
-                          ],
-                          additionalProperties: false
-                        }
+                      id: {
+                        type: "string"
+                      },
+                      parentId: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      depth: {
+                        type: "number"
+                      },
+                      position: {
+                        type: "number"
+                      },
+                      title: {
+                        type: "string"
+                      },
+                      sectionKey: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      documentId: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      linearMilestoneId: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      startDate: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      targetDate: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      dependsOnNodeId: {
+                        nullable: true,
+                        type: "string"
                       }
                     },
                     required: [
-                      "revisions"
+                      "id",
+                      "parentId",
+                      "depth",
+                      "position",
+                      "title",
+                      "sectionKey",
+                      "documentId",
+                      "linearMilestoneId",
+                      "startDate",
+                      "targetDate",
+                      "dependsOnNodeId"
                     ],
                     additionalProperties: false
                   }
@@ -15992,6 +16224,16 @@ var init_spec = __esm(() => {
                 }
               }
             },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
             "404": {
               description: "The resource was not found.",
               content: {
@@ -16002,8 +16244,8 @@ var init_spec = __esm(() => {
                 }
               }
             },
-            "429": {
-              description: "Too many requests; retry after the indicated delay.",
+            "422": {
+              description: "Response.",
               content: {
                 "application/json": {
                   schema: {
@@ -16011,14 +16253,24 @@ var init_spec = __esm(() => {
                   }
                 }
               }
-            }
-          },
-          summary: "List spec revisions",
-          description: "Returns the project's committed spec revisions newest-first, with actor, timestamp, change summary, and the number of documents each revision bundled.",
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Create a spec node",
+          description: "Creates a child under an existing spec node. Use this to add a delivery phase under the Milestones section, or an item under a phase. The thirteen section headings are created with the project and cannot be added here.",
           tags: [
             "Projects"
           ],
-          operationId: "listProjectSpecRevisions",
+          operationId: "createProjectSpecNode",
           parameters: [
             {
               name: "projectId",
@@ -16028,18 +16280,42 @@ var init_spec = __esm(() => {
                 type: "string",
                 minLength: 1
               }
-            },
-            {
-              name: "limit",
-              in: "query",
-              required: false,
-              schema: {
-                type: "integer",
-                minimum: 1,
-                maximum: 200
-              }
             }
           ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    parentId: {
+                      type: "string",
+                      minLength: 1
+                    },
+                    title: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 200
+                    },
+                    body: {
+                      type: "string",
+                      maxLength: 1e6
+                    },
+                    position: {
+                      type: "integer",
+                      minimum: 0,
+                      maximum: 9007199254740991
+                    }
+                  },
+                  required: [
+                    "parentId",
+                    "title"
+                  ]
+                }
+              }
+            }
+          },
           security: [
             {
               bearerAuth: []
@@ -16050,11 +16326,11 @@ var init_spec = __esm(() => {
           ]
         }
       },
-      "/api/v1/projects/{projectId}/revisions/{revision}": {
-        get: {
+      "/api/v1/projects/{projectId}/spec/nodes/{nodeId}": {
+        patch: {
           responses: {
             "200": {
-              description: "The revision with its diff and provenance.",
+              description: "The updated node.",
               content: {
                 "application/json": {
                   schema: {
@@ -16063,106 +16339,56 @@ var init_spec = __esm(() => {
                       id: {
                         type: "string"
                       },
-                      revision: {
+                      parentId: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      depth: {
                         type: "number"
                       },
-                      changeSummary: {
-                        nullable: true,
+                      position: {
+                        type: "number"
+                      },
+                      title: {
                         type: "string"
                       },
-                      actorType: {
+                      sectionKey: {
+                        nullable: true,
                         type: "string"
                       },
-                      actorId: {
+                      documentId: {
+                        nullable: true,
                         type: "string"
                       },
-                      committedAt: {
+                      linearMilestoneId: {
+                        nullable: true,
                         type: "string"
                       },
-                      documentCount: {
-                        type: "number"
+                      startDate: {
+                        nullable: true,
+                        type: "string"
                       },
-                      documents: {
-                        type: "array",
-                        items: {
-                          type: "object",
-                          properties: {
-                            documentId: {
-                              type: "string"
-                            },
-                            nodeId: {
-                              nullable: true,
-                              type: "string"
-                            },
-                            title: {
-                              type: "string"
-                            },
-                            revision: {
-                              type: "number"
-                            },
-                            content: {
-                              type: "string"
-                            },
-                            previousContent: {
-                              nullable: true,
-                              type: "string"
-                            }
-                          },
-                          required: [
-                            "documentId",
-                            "nodeId",
-                            "title",
-                            "revision",
-                            "content",
-                            "previousContent"
-                          ],
-                          additionalProperties: false
-                        }
+                      targetDate: {
+                        nullable: true,
+                        type: "string"
                       },
-                      links: {
-                        type: "array",
-                        items: {
-                          type: "object",
-                          properties: {
-                            direction: {
-                              type: "string"
-                            },
-                            kind: {
-                              type: "string"
-                            },
-                            ref: {
-                              type: "string"
-                            },
-                            url: {
-                              nullable: true,
-                              type: "string"
-                            },
-                            label: {
-                              nullable: true,
-                              type: "string"
-                            }
-                          },
-                          required: [
-                            "direction",
-                            "kind",
-                            "ref",
-                            "url",
-                            "label"
-                          ],
-                          additionalProperties: false
-                        }
+                      dependsOnNodeId: {
+                        nullable: true,
+                        type: "string"
                       }
                     },
                     required: [
                       "id",
-                      "revision",
-                      "changeSummary",
-                      "actorType",
-                      "actorId",
-                      "committedAt",
-                      "documentCount",
-                      "documents",
-                      "links"
+                      "parentId",
+                      "depth",
+                      "position",
+                      "title",
+                      "sectionKey",
+                      "documentId",
+                      "linearMilestoneId",
+                      "startDate",
+                      "targetDate",
+                      "dependsOnNodeId"
                     ],
                     additionalProperties: false
                   }
@@ -16179,6 +16405,16 @@ var init_spec = __esm(() => {
                 }
               }
             },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
             "404": {
               description: "The resource was not found.",
               content: {
@@ -16189,6 +16425,16 @@ var init_spec = __esm(() => {
                 }
               }
             },
+            "422": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
             "429": {
               description: "Too many requests; retry after the indicated delay.",
               content: {
@@ -16200,12 +16446,12 @@ var init_spec = __esm(() => {
               }
             }
           },
-          summary: "Get a spec revision",
-          description: "Returns one committed spec revision: each bundled document's content alongside the previous revision's content, plus the cause and effect provenance edges attached to it.",
+          summary: "Update a spec node",
+          description: "Updates a node's title, sibling position, parent, or milestone plan. A move is applied first so a node that is becoming a phase can then accept dates. Each field is optional; omitted fields are left alone.",
           tags: [
             "Projects"
           ],
-          operationId: "getProjectSpecRevision",
+          operationId: "updateProjectSpecNode",
           parameters: [
             {
               name: "projectId",
@@ -16217,16 +16463,60 @@ var init_spec = __esm(() => {
               }
             },
             {
-              name: "revision",
+              name: "nodeId",
               in: "path",
               required: true,
               schema: {
-                type: "integer",
-                minimum: 1,
-                maximum: 9007199254740991
+                type: "string",
+                minLength: 1
               }
             }
           ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    title: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 200
+                    },
+                    position: {
+                      type: "integer",
+                      minimum: 0,
+                      maximum: 9007199254740991
+                    },
+                    parentId: {
+                      description: "Move the node under this parent before applying the other fields.",
+                      type: "string",
+                      minLength: 1
+                    },
+                    startDate: {
+                      description: "Milestone plan start. Only valid on a phase.",
+                      nullable: true,
+                      type: "string",
+                      pattern: "^\\d{4}-\\d{2}-\\d{2}(?:T[\\d:.Z+-]+)?$"
+                    },
+                    targetDate: {
+                      description: "Milestone plan target. Only valid on a phase.",
+                      nullable: true,
+                      type: "string",
+                      pattern: "^\\d{4}-\\d{2}-\\d{2}(?:T[\\d:.Z+-]+)?$"
+                    },
+                    dependsOnNodeId: {
+                      description: "Milestone this phase waits on. Only valid on a phase.",
+                      nullable: true,
+                      type: "string",
+                      minLength: 1
+                    }
+                  }
+                }
+              }
+            }
+          },
           security: [
             {
               bearerAuth: []
@@ -16235,39 +16525,444 @@ var init_spec = __esm(() => {
               apiKeyHeader: []
             }
           ]
-        }
-      },
-      "/api/v1/projects/{projectId}/members": {
-        get: {
+        },
+        delete: {
           responses: {
-            "200": {
-              description: "The project's members.",
+            "204": {
+              description: "The node was deleted."
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
               content: {
                 "application/json": {
                   schema: {
-                    type: "object",
-                    properties: {
-                      members: {
-                        type: "array",
-                        items: {
-                          type: "object",
-                          properties: {
-                            id: {
-                              type: "string"
-                            },
-                            resourceKind: {
-                              type: "string"
-                            },
-                            resourceId: {
-                              type: "string"
-                            },
-                            attachedAt: {
-                              type: "string"
-                            }
-                          },
-                          required: [
-                            "id",
-                            "resourceKind",
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "422": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Delete a spec node",
+          description: "Soft-deletes the node and its descendants. The goal node cannot be deleted — delete the project instead.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "deleteProjectSpecNode",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            },
+            {
+              name: "nodeId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/projects/{projectId}/revisions": {
+        get: {
+          responses: {
+            "200": {
+              description: "The project's committed spec revisions.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      revisions: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            id: {
+                              type: "string"
+                            },
+                            revision: {
+                              type: "number"
+                            },
+                            changeSummary: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            actorType: {
+                              type: "string"
+                            },
+                            actorId: {
+                              type: "string"
+                            },
+                            committedAt: {
+                              type: "string"
+                            },
+                            documentCount: {
+                              type: "number"
+                            }
+                          },
+                          required: [
+                            "id",
+                            "revision",
+                            "changeSummary",
+                            "actorType",
+                            "actorId",
+                            "committedAt",
+                            "documentCount"
+                          ],
+                          additionalProperties: false
+                        }
+                      }
+                    },
+                    required: [
+                      "revisions"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "List spec revisions",
+          description: "Returns the project's committed spec revisions newest-first, with actor, timestamp, change summary, and the number of documents each revision bundled.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "listProjectSpecRevisions",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            },
+            {
+              name: "limit",
+              in: "query",
+              required: false,
+              schema: {
+                type: "integer",
+                minimum: 1,
+                maximum: 200
+              }
+            }
+          ],
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/projects/{projectId}/revisions/{revision}": {
+        get: {
+          responses: {
+            "200": {
+              description: "The revision with its diff and provenance.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      id: {
+                        type: "string"
+                      },
+                      revision: {
+                        type: "number"
+                      },
+                      changeSummary: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      actorType: {
+                        type: "string"
+                      },
+                      actorId: {
+                        type: "string"
+                      },
+                      committedAt: {
+                        type: "string"
+                      },
+                      documentCount: {
+                        type: "number"
+                      },
+                      documents: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            documentId: {
+                              type: "string"
+                            },
+                            nodeId: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            title: {
+                              type: "string"
+                            },
+                            revision: {
+                              type: "number"
+                            },
+                            content: {
+                              type: "string"
+                            },
+                            previousContent: {
+                              nullable: true,
+                              type: "string"
+                            }
+                          },
+                          required: [
+                            "documentId",
+                            "nodeId",
+                            "title",
+                            "revision",
+                            "content",
+                            "previousContent"
+                          ],
+                          additionalProperties: false
+                        }
+                      },
+                      links: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            direction: {
+                              type: "string"
+                            },
+                            kind: {
+                              type: "string"
+                            },
+                            ref: {
+                              type: "string"
+                            },
+                            url: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            label: {
+                              nullable: true,
+                              type: "string"
+                            }
+                          },
+                          required: [
+                            "direction",
+                            "kind",
+                            "ref",
+                            "url",
+                            "label"
+                          ],
+                          additionalProperties: false
+                        }
+                      }
+                    },
+                    required: [
+                      "id",
+                      "revision",
+                      "changeSummary",
+                      "actorType",
+                      "actorId",
+                      "committedAt",
+                      "documentCount",
+                      "documents",
+                      "links"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Get a spec revision",
+          description: "Returns one committed spec revision: each bundled document's content alongside the previous revision's content, plus the cause and effect provenance edges attached to it.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "getProjectSpecRevision",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            },
+            {
+              name: "revision",
+              in: "path",
+              required: true,
+              schema: {
+                type: "integer",
+                minimum: 1,
+                maximum: 9007199254740991
+              }
+            }
+          ],
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/projects/{projectId}/members": {
+        get: {
+          responses: {
+            "200": {
+              description: "The project's members.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      members: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            id: {
+                              type: "string"
+                            },
+                            resourceKind: {
+                              type: "string"
+                            },
+                            resourceId: {
+                              type: "string"
+                            },
+                            attachedAt: {
+                              type: "string"
+                            }
+                          },
+                          required: [
+                            "id",
+                            "resourceKind",
                             "resourceId",
                             "attachedAt"
                           ],
@@ -16276,15 +16971,920 @@ var init_spec = __esm(() => {
                       }
                     },
                     required: [
-                      "members"
+                      "members"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "List project members",
+          description: "Returns the embedded apps, pipelines, and databases attached to this project.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "listProjectMembers",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        },
+        post: {
+          responses: {
+            "201": {
+              description: "The created membership.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      id: {
+                        type: "string"
+                      },
+                      resourceKind: {
+                        type: "string"
+                      },
+                      resourceId: {
+                        type: "string"
+                      },
+                      attachedAt: {
+                        type: "string"
+                      }
+                    },
+                    required: [
+                      "id",
+                      "resourceKind",
+                      "resourceId",
+                      "attachedAt"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "409": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Attach a resource to a project",
+          description: "Attaches an embedded app, pipeline, or database. A resource already attached elsewhere returns 409 until it is detached.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "attachProjectMember",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    resourceKind: {
+                      type: "string",
+                      enum: [
+                        "app",
+                        "pipeline",
+                        "database"
+                      ]
+                    },
+                    resourceId: {
+                      type: "string",
+                      minLength: 1
+                    }
+                  },
+                  required: [
+                    "resourceKind",
+                    "resourceId"
+                  ]
+                }
+              }
+            }
+          },
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        },
+        delete: {
+          responses: {
+            "204": {
+              description: "The membership was removed."
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Detach a resource from a project",
+          description: "Removes the membership. The underlying app, pipeline, or database is untouched.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "detachProjectMember",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    resourceKind: {
+                      type: "string",
+                      enum: [
+                        "app",
+                        "pipeline",
+                        "database"
+                      ]
+                    },
+                    resourceId: {
+                      type: "string",
+                      minLength: 1
+                    }
+                  },
+                  required: [
+                    "resourceKind",
+                    "resourceId"
+                  ]
+                }
+              }
+            }
+          },
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/projects/{projectId}/changes": {
+        post: {
+          responses: {
+            "200": {
+              description: "The issue tracking this change.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      projectId: {
+                        type: "string"
+                      },
+                      changeId: {
+                        type: "string"
+                      },
+                      issueId: {
+                        type: "string"
+                      },
+                      issueUrl: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      identifier: {
+                        nullable: true,
+                        description: "Linear's human key, e.g. ADE-12.",
+                        type: "string"
+                      },
+                      created: {
+                        type: "boolean",
+                        description: "False when an existing issue was updated."
+                      },
+                      documentsWritten: {
+                        type: "number"
+                      }
+                    },
+                    required: [
+                      "projectId",
+                      "changeId",
+                      "issueId",
+                      "issueUrl",
+                      "identifier",
+                      "created",
+                      "documentsWritten"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "422": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "File a change as an issue",
+          description: "Creates or updates the issue tracking one OpenSpec change directory under this project. Khotan owns the issue's title and description; its state, assignee, priority, and dates stay with the tracker. Idempotent by change id.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "syncProjectChange",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    changeId: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 200,
+                      description: "The change directory name. Stable identity for the issue, so renaming the directory files a second one."
+                    },
+                    title: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 200
+                    },
+                    body: {
+                      type: "string",
+                      maxLength: 1e6
+                    },
+                    capabilities: {
+                      default: [],
+                      description: "Capabilities this change amends, applied as labels in one managed group. Labels outside that group are untouched.",
+                      maxItems: 20,
+                      type: "array",
+                      items: {
+                        type: "string",
+                        minLength: 1,
+                        maxLength: 80
+                      }
+                    },
+                    documents: {
+                      default: [],
+                      description: "Long parts of the change — design and requirements — attached as documents rather than inlined in the description.",
+                      maxItems: 20,
+                      type: "array",
+                      items: {
+                        type: "object",
+                        properties: {
+                          key: {
+                            type: "string",
+                            minLength: 1,
+                            maxLength: 80,
+                            description: "Stable key for this document, so a re-push updates it rather than adding another."
+                          },
+                          title: {
+                            type: "string",
+                            minLength: 1,
+                            maxLength: 200
+                          },
+                          content: {
+                            type: "string",
+                            maxLength: 1e6
+                          }
+                        },
+                        required: [
+                          "key",
+                          "title",
+                          "content"
+                        ]
+                      }
+                    },
+                    source: {
+                      description: "Where the change came from. A url is attached to the issue as a link.",
+                      type: "object",
+                      properties: {
+                        ref: {
+                          type: "string",
+                          minLength: 1,
+                          maxLength: 200
+                        },
+                        url: {
+                          nullable: true,
+                          type: "string",
+                          format: "uri"
+                        },
+                        label: {
+                          nullable: true,
+                          type: "string",
+                          maxLength: 200
+                        }
+                      },
+                      required: [
+                        "ref"
+                      ]
+                    }
+                  },
+                  required: [
+                    "changeId",
+                    "title",
+                    "body"
+                  ]
+                }
+              }
+            }
+          },
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/projects/{projectId}/linear": {
+        post: {
+          responses: {
+            "200": {
+              description: "The Linear project now bound, or null if cleared.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      bound: {
+                        nullable: true,
+                        type: "string"
+                      }
+                    },
+                    required: [
+                      "bound"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "403": {
+              description: "The caller is not permitted to perform this action.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "404": {
+              description: "The resource was not found.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "422": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "Bind a project to Linear",
+          description: "Binds this project to an existing Linear project, or clears the binding when linearProjectId is null. A new project mints its Linear project on first push, so this is only needed when the binding must point at one that already exists.",
+          tags: [
+            "Projects"
+          ],
+          operationId: "bindLinearProject",
+          parameters: [
+            {
+              name: "projectId",
+              in: "path",
+              required: true,
+              schema: {
+                type: "string",
+                minLength: 1
+              }
+            }
+          ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    linearProjectId: {
+                      nullable: true,
+                      description: "The Linear project to bind. Null clears the binding.",
+                      type: "string",
+                      minLength: 1
+                    }
+                  },
+                  required: [
+                    "linearProjectId"
+                  ]
+                }
+              }
+            }
+          },
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        }
+      },
+      "/api/v1/sqlite-databases": {
+        get: {
+          responses: {
+            "200": {
+              description: "The organization's SQLite databases.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      databases: {
+                        type: "array",
+                        items: {
+                          type: "object",
+                          properties: {
+                            id: {
+                              type: "string"
+                            },
+                            displayName: {
+                              type: "string"
+                            },
+                            status: {
+                              type: "string",
+                              enum: [
+                                "creating",
+                                "ready",
+                                "failed"
+                              ]
+                            },
+                            provider: {
+                              type: "string"
+                            },
+                            primaryRegion: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            regions: {
+                              nullable: true,
+                              type: "array",
+                              items: {
+                                type: "string"
+                              }
+                            },
+                            providerDatabaseName: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            endpointHost: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            protected: {
+                              type: "boolean"
+                            },
+                            createdAt: {
+                              type: "string"
+                            },
+                            updatedAt: {
+                              type: "string"
+                            },
+                            readyAt: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            failedAt: {
+                              nullable: true,
+                              type: "string"
+                            },
+                            failureState: {
+                              nullable: true,
+                              type: "object",
+                              properties: {
+                                code: {
+                                  type: "string",
+                                  enum: [
+                                    "provider_unavailable",
+                                    "provider_rejected",
+                                    "internal_error"
+                                  ]
+                                },
+                                message: {
+                                  type: "string"
+                                }
+                              },
+                              required: [
+                                "code",
+                                "message"
+                              ],
+                              additionalProperties: false
+                            }
+                          },
+                          required: [
+                            "id",
+                            "displayName",
+                            "status",
+                            "provider",
+                            "primaryRegion",
+                            "regions",
+                            "providerDatabaseName",
+                            "endpointHost",
+                            "protected",
+                            "createdAt",
+                            "updatedAt",
+                            "readyAt",
+                            "failedAt",
+                            "failureState"
+                          ],
+                          additionalProperties: false
+                        }
+                      }
+                    },
+                    required: [
+                      "databases"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
+            },
+            "401": {
+              description: "Authentication is missing or invalid.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            },
+            "429": {
+              description: "Too many requests; retry after the indicated delay.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
+            }
+          },
+          summary: "List SQLite databases",
+          description: "Returns the organization's non-deleted SQLite databases. Responses never include connection credentials.",
+          tags: [
+            "SQLite Databases"
+          ],
+          operationId: "listSqliteDatabases",
+          security: [
+            {
+              bearerAuth: []
+            },
+            {
+              apiKeyHeader: []
+            }
+          ]
+        },
+        post: {
+          responses: {
+            "201": {
+              description: "The persisted SQLite database record, ready or failed.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      id: {
+                        type: "string"
+                      },
+                      displayName: {
+                        type: "string"
+                      },
+                      status: {
+                        type: "string",
+                        enum: [
+                          "creating",
+                          "ready",
+                          "failed"
+                        ]
+                      },
+                      provider: {
+                        type: "string"
+                      },
+                      primaryRegion: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      regions: {
+                        nullable: true,
+                        type: "array",
+                        items: {
+                          type: "string"
+                        }
+                      },
+                      providerDatabaseName: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      endpointHost: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      protected: {
+                        type: "boolean"
+                      },
+                      createdAt: {
+                        type: "string"
+                      },
+                      updatedAt: {
+                        type: "string"
+                      },
+                      readyAt: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      failedAt: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      failureState: {
+                        nullable: true,
+                        type: "object",
+                        properties: {
+                          code: {
+                            type: "string",
+                            enum: [
+                              "provider_unavailable",
+                              "provider_rejected",
+                              "internal_error"
+                            ]
+                          },
+                          message: {
+                            type: "string"
+                          }
+                        },
+                        required: [
+                          "code",
+                          "message"
+                        ],
+                        additionalProperties: false
+                      }
+                    },
+                    required: [
+                      "id",
+                      "displayName",
+                      "status",
+                      "provider",
+                      "primaryRegion",
+                      "regions",
+                      "providerDatabaseName",
+                      "endpointHost",
+                      "protected",
+                      "createdAt",
+                      "updatedAt",
+                      "readyAt",
+                      "failedAt",
+                      "failureState"
                     ],
                     additionalProperties: false
                   }
                 }
               }
             },
-            "401": {
-              description: "Authentication is missing or invalid.",
+            "400": {
+              description: "The request was malformed or failed validation.",
               content: {
                 "application/json": {
                   schema: {
@@ -16293,8 +17893,8 @@ var init_spec = __esm(() => {
                 }
               }
             },
-            "404": {
-              description: "The resource was not found.",
+            "401": {
+              description: "Authentication is missing or invalid.",
               content: {
                 "application/json": {
                   schema: {
@@ -16314,23 +17914,37 @@ var init_spec = __esm(() => {
               }
             }
           },
-          summary: "List project members",
-          description: "Returns the embedded apps, pipelines, and databases attached to this project.",
+          summary: "Create a SQLite database",
+          description: "Provisions a SQLite database synchronously and responds 201 with the persisted record whether provisioning ends ready or failed; branch on the returned status. This operation is not idempotent: retrying a request that already succeeded provisions a second database.",
           tags: [
-            "Projects"
+            "SQLite Databases"
           ],
-          operationId: "listProjectMembers",
-          parameters: [
-            {
-              name: "projectId",
-              in: "path",
-              required: true,
-              schema: {
-                type: "string",
-                minLength: 1
+          operationId: "createSqliteDatabase",
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    name: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 63
+                    },
+                    idempotencyKey: {
+                      type: "string",
+                      minLength: 1,
+                      maxLength: 200
+                    }
+                  },
+                  required: [
+                    "name"
+                  ]
+                }
               }
             }
-          ],
+          },
           security: [
             {
               bearerAuth: []
@@ -16339,11 +17953,13 @@ var init_spec = __esm(() => {
               apiKeyHeader: []
             }
           ]
-        },
-        post: {
+        }
+      },
+      "/api/v1/sqlite-databases/{databaseId}": {
+        get: {
           responses: {
-            "201": {
-              description: "The created membership.",
+            "200": {
+              description: "The SQLite database record.",
               content: {
                 "application/json": {
                   schema: {
@@ -16352,21 +17968,94 @@ var init_spec = __esm(() => {
                       id: {
                         type: "string"
                       },
-                      resourceKind: {
+                      displayName: {
                         type: "string"
                       },
-                      resourceId: {
+                      status: {
+                        type: "string",
+                        enum: [
+                          "creating",
+                          "ready",
+                          "failed"
+                        ]
+                      },
+                      provider: {
                         type: "string"
                       },
-                      attachedAt: {
+                      primaryRegion: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      regions: {
+                        nullable: true,
+                        type: "array",
+                        items: {
+                          type: "string"
+                        }
+                      },
+                      providerDatabaseName: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      endpointHost: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      protected: {
+                        type: "boolean"
+                      },
+                      createdAt: {
+                        type: "string"
+                      },
+                      updatedAt: {
+                        type: "string"
+                      },
+                      readyAt: {
+                        nullable: true,
+                        type: "string"
+                      },
+                      failedAt: {
+                        nullable: true,
                         type: "string"
+                      },
+                      failureState: {
+                        nullable: true,
+                        type: "object",
+                        properties: {
+                          code: {
+                            type: "string",
+                            enum: [
+                              "provider_unavailable",
+                              "provider_rejected",
+                              "internal_error"
+                            ]
+                          },
+                          message: {
+                            type: "string"
+                          }
+                        },
+                        required: [
+                          "code",
+                          "message"
+                        ],
+                        additionalProperties: false
                       }
                     },
                     required: [
                       "id",
-                      "resourceKind",
-                      "resourceId",
-                      "attachedAt"
+                      "displayName",
+                      "status",
+                      "provider",
+                      "primaryRegion",
+                      "regions",
+                      "providerDatabaseName",
+                      "endpointHost",
+                      "protected",
+                      "createdAt",
+                      "updatedAt",
+                      "readyAt",
+                      "failedAt",
+                      "failureState"
                     ],
                     additionalProperties: false
                   }
@@ -16383,16 +18072,6 @@ var init_spec = __esm(() => {
                 }
               }
             },
-            "403": {
-              description: "The caller is not permitted to perform this action.",
-              content: {
-                "application/json": {
-                  schema: {
-                    $ref: "#/components/schemas/Error"
-                  }
-                }
-              }
-            },
             "404": {
               description: "The resource was not found.",
               content: {
@@ -16403,16 +18082,6 @@ var init_spec = __esm(() => {
                 }
               }
             },
-            "409": {
-              description: "Response.",
-              content: {
-                "application/json": {
-                  schema: {
-                    $ref: "#/components/schemas/Error"
-                  }
-                }
-              }
-            },
             "429": {
               description: "Too many requests; retry after the indicated delay.",
               content: {
@@ -16424,15 +18093,15 @@ var init_spec = __esm(() => {
               }
             }
           },
-          summary: "Attach a resource to a project",
-          description: "Attaches an embedded app, pipeline, or database. A resource already attached elsewhere returns 409 until it is detached.",
+          summary: "Get a SQLite database",
+          description: "Returns one SQLite database's record, including status and failure state when present. Responses never include connection credentials.",
           tags: [
-            "Projects"
+            "SQLite Databases"
           ],
-          operationId: "attachProjectMember",
+          operationId: "getSqliteDatabase",
           parameters: [
             {
-              name: "projectId",
+              name: "databaseId",
               in: "path",
               required: true,
               schema: {
@@ -16441,34 +18110,6 @@ var init_spec = __esm(() => {
               }
             }
           ],
-          requestBody: {
-            required: true,
-            content: {
-              "application/json": {
-                schema: {
-                  type: "object",
-                  properties: {
-                    resourceKind: {
-                      type: "string",
-                      enum: [
-                        "app",
-                        "pipeline",
-                        "database"
-                      ]
-                    },
-                    resourceId: {
-                      type: "string",
-                      minLength: 1
-                    }
-                  },
-                  required: [
-                    "resourceKind",
-                    "resourceId"
-                  ]
-                }
-              }
-            }
-          },
           security: [
             {
               bearerAuth: []
@@ -16480,8 +18121,27 @@ var init_spec = __esm(() => {
         },
         delete: {
           responses: {
-            "204": {
-              description: "The membership was removed."
+            "200": {
+              description: "The SQLite database was deleted.",
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object",
+                    properties: {
+                      deleted: {
+                        type: "boolean",
+                        enum: [
+                          true
+                        ]
+                      }
+                    },
+                    required: [
+                      "deleted"
+                    ],
+                    additionalProperties: false
+                  }
+                }
+              }
             },
             "401": {
               description: "Authentication is missing or invalid.",
@@ -16522,17 +18182,27 @@ var init_spec = __esm(() => {
                   }
                 }
               }
+            },
+            "502": {
+              description: "Response.",
+              content: {
+                "application/json": {
+                  schema: {
+                    $ref: "#/components/schemas/Error"
+                  }
+                }
+              }
             }
           },
-          summary: "Detach a resource from a project",
-          description: "Removes the membership. The underlying app, pipeline, or database is untouched.",
+          summary: "Delete a SQLite database",
+          description: "Tears down the database at the provider, then soft-deletes the record. Deletion is permanent.",
           tags: [
-            "Projects"
+            "SQLite Databases"
           ],
-          operationId: "detachProjectMember",
+          operationId: "deleteSqliteDatabase",
           parameters: [
             {
-              name: "projectId",
+              name: "databaseId",
               in: "path",
               required: true,
               schema: {
@@ -16541,34 +18211,6 @@ var init_spec = __esm(() => {
               }
             }
           ],
-          requestBody: {
-            required: true,
-            content: {
-              "application/json": {
-                schema: {
-                  type: "object",
-                  properties: {
-                    resourceKind: {
-                      type: "string",
-                      enum: [
-                        "app",
-                        "pipeline",
-                        "database"
-                      ]
-                    },
-                    resourceId: {
-                      type: "string",
-                      minLength: 1
-                    }
-                  },
-                  required: [
-                    "resourceKind",
-                    "resourceId"
-                  ]
-                }
-              }
-            }
-          },
           security: [
             {
               bearerAuth: []
@@ -16663,8 +18305,19 @@ function apiTags() {
 function operationsForTag(tag) {
   return listApiOperations().filter(({ operation }) => operation.tags?.includes(tag));
 }
+function preferOrder(items, preferred) {
+  const rank = new Map(preferred.map((item, index) => [item, index]));
+  return [...items].sort((a, b) => {
+    const left = rank.get(a) ?? preferred.length;
+    const right = rank.get(b) ?? preferred.length;
+    if (left !== right) {
+      return left - right;
+    }
+    return items.indexOf(a) - items.indexOf(b);
+  });
+}
 function referenceTags() {
-  return apiTags().filter((tag) => !OVERVIEW_TAGS.has(tag));
+  return preferOrder(apiTags().filter((tag) => !OVERVIEW_TAGS.has(tag)), REFERENCE_TAG_ORDER);
 }
 function typeLabel(schema) {
   if (!schema) {
@@ -16783,7 +18436,7 @@ function authSection() {
     const how = scheme.type === "http" && scheme.scheme === "bearer" ? "`Authorization: Bearer <key>`" : scheme.in === "header" && scheme.name ? `\`${scheme.name}: <key>\`` : `\`${name}\``;
     lines.push(`- ${how} — ${scheme.description ?? name}`);
   }
-  lines.push("", "Never commit a key. See [auth](/cli/auth/) for how the CLI stores and selects keys.");
+  lines.push("", "Never commit a key. See [authentication](/api/auth/) for how keys are scoped, stored, and managed, or [CLI auth](/cli/auth/) for how the CLI selects between them.");
   return lines;
 }
 function errorSection() {
@@ -16796,9 +18449,9 @@ function errorSection() {
     '{ "error": { "code": "not_found", "message": "App not found.", "details": {} } }',
     "```",
     "",
-    "`401` means the key is missing or invalid, `403` means the key's organization cannot reach the resource, `404` means it does not exist, `400` means the request failed validation, and `429` means a rate limit was exceeded. Rate limits are applied per key; back off and retry on `429`.",
+    "`401` means the key is missing or invalid, `403` means the key's organization cannot reach the resource, `404` means it does not exist, `400` means the request failed validation, and `429` means a rate limit was exceeded. Rate limits are applied per key; back off and retry on `429`, which carries a `Retry-After` header.",
     "",
-    "See [errors](/cli/errors/) for how the CLI surfaces these."
+    "See [conventions](/api/conventions/) for retries, idempotency, and the rest of the shared contract, or [CLI errors](/cli/errors/) for how the CLI surfaces these."
   ];
 }
 function coreOperationsSection() {
@@ -16826,14 +18479,16 @@ function renderApiOverviewMarkdown() {
     "",
     "## Base URL",
     "",
-    "The API is served from your workspace origin:",
+    `Every request goes to \`${API_ORIGIN_EXAMPLE}\`:`,
     "",
     "```bash",
     `curl ${API_ORIGIN_EXAMPLE}/api/v1/apps \\`,
     '  -H "Authorization: Bearer $KHOTAN_API_KEY"',
     "```",
     "",
-    `The machine-readable document is at [\`${OPENAPI_SPEC_PATH}\`](${API_ORIGIN_EXAMPLE}${OPENAPI_SPEC_PATH}) on the same origin. Generate a client from that rather than scraping these pages; they summarize each operation and omit nested response schemas.`,
+    "There is no per-workspace API host. A key carries its own organization and no operation reads the request host, so the base URL never varies by account or workspace.",
+    "",
+    `The machine-readable document is at [\`${OPENAPI_SPEC_PATH}\`](${API_ORIGIN_EXAMPLE}${OPENAPI_SPEC_PATH}) on the same origin, and is also published on this site for reading without an account. Generate a client from the document rather than scraping these pages; they summarize each operation and omit nested response schemas.`,
     "",
     ...authSection(),
     "",
@@ -16851,7 +18506,7 @@ function renderApiOverviewMarkdown() {
   return lines.join(`
 `);
 }
-var apiSpec, OPENAPI_SPEC_PATH = "/api/v1/openapi.json", API_ORIGIN_EXAMPLE = "https://<workspace>.khotan.com", HTTP_METHODS2, OVERVIEW_TAGS;
+var apiSpec, OPENAPI_SPEC_PATH = "/api/v1/openapi.json", API_ORIGIN_EXAMPLE = "https://app.khotan.com", HTTP_METHODS2, OVERVIEW_TAGS, REFERENCE_TAG_ORDER;
 var init_reference2 = __esm(() => {
   init_validate();
   init_version();
@@ -16863,6 +18518,18 @@ var init_reference2 = __esm(() => {
     "Identity",
     "API keys"
   ]);
+  REFERENCE_TAG_ORDER = [
+    "Apps",
+    "Pipelines",
+    "Files",
+    "Context",
+    "Integrations",
+    "Databases",
+    "Redis Databases",
+    "SQLite Databases",
+    "Folders",
+    "Projects"
+  ];
 });
 
 // ../khotan-core/src/client/api-client.ts
@@ -16949,6 +18616,40 @@ function createApiClient(context) {
     buildRequest(capabilityOrId, input = {}) {
       return buildHttpRequest(capabilityOrId, input, context);
     },
+    async request(method, path, body) {
+      if (!context.apiKey) {
+        throw new KhotanClientError("not_authenticated", `${method} ${path} requires authentication but no API key is configured.`);
+      }
+      const headers = {
+        accept: "application/json",
+        "x-api-key": context.apiKey
+      };
+      if (body !== undefined) {
+        headers["content-type"] = "application/json";
+      }
+      let response;
+      try {
+        response = await doFetch(`${normalizeApiUrl(context.apiUrl)}${path}`, {
+          method,
+          headers,
+          body: body === undefined ? undefined : JSON.stringify(body)
+        });
+      } catch (error) {
+        throw new KhotanClientError("network_error", `Could not reach the Khotan API at ${context.apiUrl}: ${error instanceof Error ? error.message : String(error)}`);
+      }
+      const rawBody = await response.text();
+      if (!response.ok) {
+        throw toApiError(response.status, rawBody);
+      }
+      if (!rawBody) {
+        return null;
+      }
+      try {
+        return JSON.parse(rawBody);
+      } catch {
+        throw new KhotanClientError("invalid_response", `The Khotan API returned a non-JSON success response for ${method} ${path}.`);
+      }
+    },
     async execute(capabilityOrId, input = {}) {
       const capability = resolveCapability(capabilityOrId);
       const request = buildHttpRequest(capability, input, context);
@@ -17135,77 +18836,442 @@ var init_repo_env = __esm(() => {
   OVERLAY_KEYS = [ENV_API_URL, ENV_API_KEY, ENV_PROFILE, ENV_ORG_ID];
 });
 
-// ../khotan-core/src/index.ts
-var exports_src = {};
-__export(exports_src, {
-  validateCatalogStructure: () => validateCatalogStructure,
-  validateCatalogAgainstOpenApi: () => validateCatalogAgainstOpenApi,
-  tagSlug: () => tagSlug,
-  setProfile: () => setProfile,
-  selectProfile: () => selectProfile,
-  saveProfileStore: () => saveProfileStore,
-  resolveProfile: () => resolveProfile,
-  requiresConfirmation: () => requiresConfirmation,
-  renderTagReferenceMarkdown: () => renderTagReferenceMarkdown,
-  renderOperation: () => renderOperation,
-  renderDomainCommandsMarkdown: () => renderDomainCommandsMarkdown,
-  renderApiOverviewMarkdown: () => renderApiOverviewMarkdown,
-  renderApiOperation: () => renderApiOperation,
-  referenceTags: () => referenceTags,
-  parseRepoEnvFile: () => parseRepoEnvFile,
-  overlayRepoEnv: () => overlayRepoEnv,
-  operationsForTag: () => operationsForTag,
-  operationsForDomain: () => operationsForDomain,
-  openApiStamp: () => openApiStamp,
-  loadProfileStore: () => loadProfileStore,
-  listDomains: () => listDomains,
-  listCapabilities: () => listCapabilities,
-  listApiOperations: () => listApiOperations,
-  khotanCatalog: () => khotanCatalog,
-  isSecret: () => isSecret,
-  isReadOnly: () => isReadOnly,
-  isDestructive: () => isDestructive,
-  indexOpenApiOperations: () => indexOpenApiOperations,
-  getProfileStorePath: () => getProfileStorePath,
-  getCapability: () => getCapability,
-  findRepoEnvFile: () => findRepoEnvFile,
-  fileTransferSection: () => fileTransferSection,
-  fieldFlag: () => fieldFlag,
-  domainTitle: () => domainTitle,
-  domainLabel: () => domainLabel,
-  createApiClient: () => createApiClient,
-  commandUsage: () => commandUsage,
-  commandDomains: () => commandDomains,
-  catalogStamp: () => catalogStamp,
-  capabilitiesByOperationId: () => capabilitiesByOperationId,
-  camelToKebab: () => camelToKebab,
-  buildHttpRequest: () => buildHttpRequest,
-  assertSupportedCatalogSchemaVersion: () => assertSupportedCatalogSchemaVersion,
-  apiVersion: () => apiVersion,
-  apiTags: () => apiTags,
-  apiSpec: () => apiSpec,
-  SUPPORTED_CATALOG_SCHEMA_VERSIONS: () => SUPPORTED_CATALOG_SCHEMA_VERSIONS,
-  SAFETY_LEVELS: () => SAFETY_LEVELS,
-  REPO_ENV_FILENAME: () => REPO_ENV_FILENAME,
-  OVERVIEW_TAGS: () => OVERVIEW_TAGS,
-  OVERVIEW_DOMAINS: () => OVERVIEW_DOMAINS,
-  OPENAPI_SPEC_PATH: () => OPENAPI_SPEC_PATH,
-  KhotanUnknownCapabilityError: () => KhotanUnknownCapabilityError,
-  KhotanError: () => KhotanError,
-  KhotanConfirmationRequiredError: () => KhotanConfirmationRequiredError,
-  KhotanClientError: () => KhotanClientError,
-  KhotanCatalogVersionError: () => KhotanCatalogVersionError,
-  KhotanApiError: () => KhotanApiError,
-  KHOTAN_ADAPTER_VERSION: () => KHOTAN_ADAPTER_VERSION,
-  KHOTAN_ADAPTER_NAME: () => KHOTAN_ADAPTER_NAME,
-  ENV_PROFILE: () => ENV_PROFILE,
-  ENV_ORG_ID: () => ENV_ORG_ID,
-  ENV_API_URL: () => ENV_API_URL,
-  ENV_API_KEY: () => ENV_API_KEY,
-  CATALOG_VERSION: () => CATALOG_VERSION,
-  CATALOG_SCHEMA_VERSION: () => CATALOG_SCHEMA_VERSION,
+// ../khotan-core/src/openspec/change.ts
+function splitMarkdownSections(markdown) {
+  const sections = new Map;
+  let heading;
+  let lines = [];
+  const flush = () => {
+    if (heading !== undefined) {
+      sections.set(heading.toLowerCase(), lines.join(`
+`).trim());
+    }
+  };
+  for (const line of markdown.split(`
+`)) {
+    const match = SECTION_HEADING.exec(line);
+    if (match && !line.startsWith("###")) {
+      flush();
+      heading = match[1];
+      lines = [];
+      continue;
+    }
+    lines.push(line);
+  }
+  flush();
+  return sections;
+}
+function parseTasks(markdown) {
+  const phases = [];
+  let current;
+  for (const line of markdown.split(`
+`)) {
+    if (line.startsWith("## ")) {
+      const match = PHASE_HEADING.exec(line);
+      const title = match?.[2]?.trim();
+      if (title) {
+        current = { number: match?.[1], title, items: [] };
+        phases.push(current);
+      }
+      continue;
+    }
+    const task = TASK_LINE.exec(line);
+    if (task && current) {
+      const title = task[3]?.trim();
+      if (title) {
+        current.items.push({
+          number: task[2],
+          title,
+          done: task[1]?.toLowerCase() === "x"
+        });
+      }
+    }
+  }
+  return phases;
+}
+function parseSpecDelta(delta) {
+  const requirements = [];
+  let verb = "ADDED";
+  let current;
+  let awaitingStatement = false;
+  let pending = [];
+  const flushStatement = () => {
+    if (current && pending.length > 0) {
+      current.statement = pending.join(" ");
+      awaitingStatement = false;
+    }
+    pending = [];
+  };
+  for (const line of delta.content.split(`
+`)) {
+    const deltaHeading = DELTA_HEADING.exec(line);
+    if (deltaHeading?.[1]) {
+      flushStatement();
+      verb = deltaHeading[1].toUpperCase();
+      current = undefined;
+      awaitingStatement = false;
+      continue;
+    }
+    const requirement = REQUIREMENT_HEADING.exec(line);
+    if (requirement?.[1]) {
+      flushStatement();
+      current = {
+        capability: delta.capability,
+        verb,
+        title: requirement[1],
+        scenarios: []
+      };
+      requirements.push(current);
+      awaitingStatement = true;
+      continue;
+    }
+    const scenario = SCENARIO_HEADING.exec(line);
+    if (scenario?.[1] && current) {
+      flushStatement();
+      current.scenarios.push(scenario[1]);
+      awaitingStatement = false;
+      continue;
+    }
+    if (awaitingStatement && current) {
+      if (line.trim()) {
+        pending.push(line.trim());
+      } else {
+        flushStatement();
+      }
+    }
+  }
+  flushStatement();
+  return requirements;
+}
+function renderChangeIssue(changeId, sources) {
+  const proposal = sources.proposal?.trim();
+  const design = sources.design?.trim();
+  const documents = [];
+  const parts = [];
+  if (proposal) {
+    parts.push(proposal);
+  }
+  const phases = parseTasks(sources.tasks ?? "");
+  if (phases.length > 0) {
+    parts.push(renderTasks(phases));
+  }
+  const requirements = (sources.specs ?? []).flatMap(parseSpecDelta);
+  if (requirements.length > 0) {
+    documents.push({
+      key: "requirements",
+      title: "Requirements",
+      content: renderRequirements(requirements)
+    });
+  }
+  if (design) {
+    documents.push({ key: "design", title: "Design", content: design });
+  }
+  const footer = [`OpenSpec change: \`openspec/changes/${changeId}\``];
+  if (documents.length > 0) {
+    footer.push(`Also on this issue: ${documents.map((document) => document.title).join(" and ")}.`);
+  }
+  parts.push(`---
+
+${footer.join(`
+
+`)}`);
+  return {
+    title: humanizeChangeId(changeId),
+    body: parts.join(`
+
+`),
+    documents
+  };
+}
+function renderTasks(phases) {
+  const lines = [
+    "# Tasks",
+    "Tracked in `tasks.md`. Tick them there — this list is rewritten on every push."
+  ];
+  for (const phase of phases) {
+    lines.push(`## ${phase.number ? `${phase.number}. ` : ""}${phase.title}`, phase.items.map((item) => {
+      const box = item.done ? "- [x]" : "- [ ]";
+      const number = item.number ? `${item.number} ` : "";
+      return `${box} ${number}${item.title}`;
+    }).join(`
+`));
+  }
+  return lines.filter(Boolean).join(`
+
+`);
+}
+function renderRequirements(requirements) {
+  const byCapability = new Map;
+  for (const requirement of requirements) {
+    const list = byCapability.get(requirement.capability) ?? [];
+    list.push(requirement);
+    byCapability.set(requirement.capability, list);
+  }
+  const lines = [];
+  for (const [capability, group] of byCapability) {
+    lines.push(`## ${capability}`);
+    for (const requirement of group) {
+      lines.push(`**${requirement.verb} — ${requirement.title}**`);
+      if (requirement.statement) {
+        lines.push(requirement.statement);
+      }
+      if (requirement.scenarios.length > 0) {
+        lines.push(requirement.scenarios.map((title) => `- ${title}`).join(`
+`));
+      }
+    }
+  }
+  return lines.join(`
+
+`);
+}
+function humanizeChangeId(id) {
+  const words = id.replace(/[-_]+/g, " ").trim();
+  return words.charAt(0).toUpperCase() + words.slice(1);
+}
+var SECTION_HEADING, PHASE_HEADING, TASK_LINE, DELTA_HEADING, REQUIREMENT_HEADING, SCENARIO_HEADING;
+var init_change = __esm(() => {
+  SECTION_HEADING = /^##\s+(.+?)\s*$/;
+  PHASE_HEADING = /^##\s+(?:(\d+(?:\.\d+)*)\.\s*)?(.+?)\s*$/;
+  TASK_LINE = /^\s*-\s+\[([ xX])\]\s+(?:(\d+(?:\.\d+)+)\s+)?(.*)$/;
+  DELTA_HEADING = /^##\s+(ADDED|MODIFIED|REMOVED|RENAMED)\s+Requirements\s*$/i;
+  REQUIREMENT_HEADING = /^###\s+Requirement:\s*(.+?)\s*$/;
+  SCENARIO_HEADING = /^####\s+Scenario:\s*(.+?)\s*$/;
+});
+
+// ../khotan-core/src/openspec/config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
+import { join as join3 } from "node:path";
+function parseKhotanConfig(text) {
+  const lines = text.split(`
+`);
+  const start = lines.findIndex((line) => KHOTAN_BLOCK.test(line));
+  if (start === -1) {
+    return {};
+  }
+  for (const line of lines.slice(start + 1)) {
+    if (line.trim().startsWith("#") || line.trim() === "") {
+      continue;
+    }
+    if (TOP_LEVEL_KEY.test(line)) {
+      break;
+    }
+    const project = PROJECT_ENTRY.exec(line)?.[1];
+    if (project) {
+      return { project: unquote(project) };
+    }
+  }
+  return {};
+}
+function readKhotanConfig(openspecRoot) {
+  const path = join3(openspecRoot, "config.yaml");
+  if (!existsSync2(path)) {
+    return {};
+  }
+  return parseKhotanConfig(readFileSync3(path, "utf8"));
+}
+function unquote(value) {
+  const trimmed = value.trim();
+  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
+    return trimmed.slice(1, -1);
+  }
+  if (trimmed.startsWith("'") && trimmed.endsWith("'")) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed.split("#")[0]?.trim() ?? "";
+}
+var KHOTAN_CONFIG_KEY = "khotan", KHOTAN_BLOCK, TOP_LEVEL_KEY, PROJECT_ENTRY;
+var init_config = __esm(() => {
+  KHOTAN_BLOCK = /^khotan:\s*$/;
+  TOP_LEVEL_KEY = /^\S/;
+  PROJECT_ENTRY = /^\s+project:\s*(.+?)\s*$/;
+});
+
+// ../khotan-core/src/openspec/source-url.ts
+function changeSourceUrl(input) {
+  const parsed = parseRemote(input.remote);
+  if (!parsed) {
+    return;
+  }
+  const { host, path } = parsed;
+  const ref = input.ref ?? "HEAD";
+  const dir = `openspec/changes/${input.changeId}`;
+  if (host === "github.com") {
+    return `https://github.com/${path}/tree/${ref}/${dir}`;
+  }
+  if (host === "gitlab.com") {
+    return `https://gitlab.com/${path}/-/tree/${ref}/${dir}`;
+  }
+  return;
+}
+function parseRemote(remote) {
+  const trimmed = remote.trim();
+  for (const pattern of [SSH_REMOTE, HTTPS_REMOTE]) {
+    const match = pattern.exec(trimmed);
+    const host = match?.[1];
+    const path = match?.[2];
+    if (host && path) {
+      return { host: host.toLowerCase(), path: path.replace(/\/+$/, "") };
+    }
+  }
+  return null;
+}
+var SSH_REMOTE, HTTPS_REMOTE;
+var init_source_url = __esm(() => {
+  SSH_REMOTE = /^(?:ssh:\/\/)?git@([^:/]+)[:/](.+?)(?:\.git)?$/;
+  HTTPS_REMOTE = /^https?:\/\/(?:[^@]+@)?([^/]+)\/(.+?)(?:\.git)?$/;
+});
+
+// ../khotan-core/src/openspec/read.ts
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync4, statSync } from "node:fs";
+import { dirname as dirname3, join as join4 } from "node:path";
+function findOpenSpecRoot(startDir) {
+  let dir = startDir;
+  for (;; ) {
+    const candidate = join4(dir, OPENSPEC_DIRNAME);
+    if (isDirectory(candidate)) {
+      return candidate;
+    }
+    if (existsSync3(join4(dir, ".git"))) {
+      return;
+    }
+    const parent = dirname3(dir);
+    if (parent === dir) {
+      return;
+    }
+    dir = parent;
+  }
+}
+function listChangeIds(openspecRoot) {
+  const changesDir = join4(openspecRoot, "changes");
+  if (!isDirectory(changesDir)) {
+    return [];
+  }
+  return readdirSync(changesDir).filter((entry) => entry !== "archive" && !entry.startsWith(".")).filter((entry) => isDirectory(join4(changesDir, entry))).sort();
+}
+function readChangeDirectory(openspecRoot, id) {
+  const path = join4(openspecRoot, "changes", id);
+  if (!isDirectory(path)) {
+    throw new Error(`No change directory at ${path}`);
+  }
+  return {
+    id,
+    path,
+    sources: {
+      proposal: readIfPresent(join4(path, "proposal.md")),
+      design: readIfPresent(join4(path, "design.md")),
+      tasks: readIfPresent(join4(path, "tasks.md")),
+      specs: readSpecDeltas(path)
+    }
+  };
+}
+function readSpecDeltas(changePath) {
+  const specsDir = join4(changePath, "specs");
+  if (!isDirectory(specsDir)) {
+    return [];
+  }
+  return readdirSync(specsDir).filter((entry) => !entry.startsWith(".")).sort().flatMap((capability) => {
+    const content = readIfPresent(join4(specsDir, capability, "spec.md"));
+    return content ? [{ capability, content }] : [];
+  });
+}
+function readIfPresent(path) {
+  return existsSync3(path) ? readFileSync4(path, "utf8") : undefined;
+}
+function isDirectory(path) {
+  try {
+    return statSync(path).isDirectory();
+  } catch {
+    return false;
+  }
+}
+var OPENSPEC_DIRNAME = "openspec";
+var init_read = () => {};
+
+// ../khotan-core/src/index.ts
+var exports_src = {};
+__export(exports_src, {
+  API_ORIGIN_EXAMPLE: () => API_ORIGIN_EXAMPLE,
   AUTH_LOGIN_CAPABILITY_ID: () => AUTH_LOGIN_CAPABILITY_ID,
-  API_ORIGIN_EXAMPLE: () => API_ORIGIN_EXAMPLE
+  CATALOG_SCHEMA_VERSION: () => CATALOG_SCHEMA_VERSION,
+  CATALOG_VERSION: () => CATALOG_VERSION,
+  ENV_API_KEY: () => ENV_API_KEY,
+  ENV_API_URL: () => ENV_API_URL,
+  ENV_ORG_ID: () => ENV_ORG_ID,
+  ENV_PROFILE: () => ENV_PROFILE,
+  KHOTAN_ADAPTER_NAME: () => KHOTAN_ADAPTER_NAME,
+  KHOTAN_ADAPTER_VERSION: () => KHOTAN_ADAPTER_VERSION,
+  KHOTAN_CONFIG_KEY: () => KHOTAN_CONFIG_KEY,
+  KhotanApiError: () => KhotanApiError,
+  KhotanCatalogVersionError: () => KhotanCatalogVersionError,
+  KhotanClientError: () => KhotanClientError,
+  KhotanConfirmationRequiredError: () => KhotanConfirmationRequiredError,
+  KhotanError: () => KhotanError,
+  KhotanUnknownCapabilityError: () => KhotanUnknownCapabilityError,
+  OPENAPI_SPEC_PATH: () => OPENAPI_SPEC_PATH,
+  OPENSPEC_DIRNAME: () => OPENSPEC_DIRNAME,
+  OVERVIEW_DOMAINS: () => OVERVIEW_DOMAINS,
+  OVERVIEW_TAGS: () => OVERVIEW_TAGS,
+  REPO_ENV_FILENAME: () => REPO_ENV_FILENAME,
+  SAFETY_LEVELS: () => SAFETY_LEVELS,
+  SUPPORTED_CATALOG_SCHEMA_VERSIONS: () => SUPPORTED_CATALOG_SCHEMA_VERSIONS,
+  apiSpec: () => apiSpec,
+  apiTags: () => apiTags,
+  apiVersion: () => apiVersion,
+  assertSupportedCatalogSchemaVersion: () => assertSupportedCatalogSchemaVersion,
+  buildHttpRequest: () => buildHttpRequest,
+  camelToKebab: () => camelToKebab,
+  capabilitiesByOperationId: () => capabilitiesByOperationId,
+  catalogStamp: () => catalogStamp,
+  changeSourceUrl: () => changeSourceUrl,
+  commandDomains: () => commandDomains,
+  commandUsage: () => commandUsage,
+  createApiClient: () => createApiClient,
+  domainLabel: () => domainLabel,
+  domainTitle: () => domainTitle,
+  fieldFlag: () => fieldFlag,
+  fileTransferSection: () => fileTransferSection,
+  findOpenSpecRoot: () => findOpenSpecRoot,
+  findRepoEnvFile: () => findRepoEnvFile,
+  getCapability: () => getCapability,
+  getProfileStorePath: () => getProfileStorePath,
+  humanizeChangeId: () => humanizeChangeId,
+  indexOpenApiOperations: () => indexOpenApiOperations,
+  isDestructive: () => isDestructive,
+  isReadOnly: () => isReadOnly,
+  isSecret: () => isSecret,
+  khotanCatalog: () => khotanCatalog,
+  listApiOperations: () => listApiOperations,
+  listCapabilities: () => listCapabilities,
+  listChangeIds: () => listChangeIds,
+  listDomains: () => listDomains,
+  loadProfileStore: () => loadProfileStore,
+  openApiStamp: () => openApiStamp,
+  operationsForDomain: () => operationsForDomain,
+  operationsForTag: () => operationsForTag,
+  overlayRepoEnv: () => overlayRepoEnv,
+  parseKhotanConfig: () => parseKhotanConfig,
+  parseRepoEnvFile: () => parseRepoEnvFile,
+  parseSpecDelta: () => parseSpecDelta,
+  parseTasks: () => parseTasks,
+  readChangeDirectory: () => readChangeDirectory,
+  readKhotanConfig: () => readKhotanConfig,
+  referenceTags: () => referenceTags,
+  renderApiOperation: () => renderApiOperation,
+  renderApiOverviewMarkdown: () => renderApiOverviewMarkdown,
+  renderChangeIssue: () => renderChangeIssue,
+  renderDomainCommandsMarkdown: () => renderDomainCommandsMarkdown,
+  renderOperation: () => renderOperation,
+  renderTagReferenceMarkdown: () => renderTagReferenceMarkdown,
+  requiresConfirmation: () => requiresConfirmation,
+  resolveProfile: () => resolveProfile,
+  saveProfileStore: () => saveProfileStore,
+  selectProfile: () => selectProfile,
+  setProfile: () => setProfile,
+  splitMarkdownSections: () => splitMarkdownSections,
+  tagSlug: () => tagSlug,
+  validateCatalogAgainstOpenApi: () => validateCatalogAgainstOpenApi,
+  validateCatalogStructure: () => validateCatalogStructure
 });
 var init_src = __esm(() => {
   init_version();
@@ -17218,6 +19284,10 @@ var init_src = __esm(() => {
   init_api_client();
   init_profiles();
   init_repo_env();
+  init_change();
+  init_config();
+  init_source_url();
+  init_read();
 });
 
 // src/cli/run.ts
@@ -17262,7 +19332,7 @@ function parseArgs(argv) {
         continue;
       }
       const next = argv[i + 1];
-      if (next !== undefined && !next.startsWith("-")) {
+      if (next !== undefined && (next === "-" || !next.startsWith("-"))) {
         addFlag(body, next);
         i++;
       } else {
@@ -17530,6 +19600,88 @@ async function whoami(ctx) {
   return 0;
 }
 
+// src/cli/commands/change-push.ts
+init_src();
+import { execFileSync } from "node:child_process";
+async function changePush(deps, options) {
+  const { session, io, json } = deps;
+  const root = findOpenSpecRoot(options.cwd ?? process.cwd());
+  if (!root) {
+    throw new KhotanClientError("not_found", "No openspec/ directory found at or above this directory.");
+  }
+  const project = options.project ?? readKhotanConfig(root).project;
+  if (!project) {
+    throw new KhotanClientError("missing_argument", "No contract project named. Add a `khotan:` block with `project: <slug>` to openspec/config.yaml, or pass --project.");
+  }
+  const changeId = options.changeId ?? soleChangeId(root);
+  const change = readChangeDirectory(root, changeId);
+  const issue = renderChangeIssue(changeId, change.sources);
+  const capabilities2 = (change.sources.specs ?? []).map((delta) => delta.capability);
+  const sourceUrl = resolveSourceUrl(change.path, changeId, options.ref);
+  if (!issue.body.trim()) {
+    throw new KhotanClientError("invalid_argument", `Change "${changeId}" has no proposal or design content to file.`);
+  }
+  if (options.dryRun) {
+    renderResult(io, {
+      project,
+      changeId,
+      openspecRoot: root,
+      title: issue.title,
+      bodyLength: issue.body.length,
+      documents: issue.documents.map((document) => ({
+        title: document.title,
+        length: document.content.length
+      })),
+      capabilities: capabilities2,
+      sourceUrl: sourceUrl ?? null
+    }, { json });
+    return 0;
+  }
+  if (!session) {
+    throw new KhotanClientError("not_authenticated", "Filing a change needs an API key. Run `khotan login`, or pass --dry-run.");
+  }
+  const documentNote = issue.documents.length > 0 ? ` with ${issue.documents.map((document) => document.title.toLowerCase()).join(" and ")}` : "";
+  errLine(io, `Filing ${changeId} under ${project}${documentNote}…`);
+  const result = await session.client.request("POST", `/api/v1/projects/${encodeURIComponent(project)}/changes`, {
+    changeId,
+    title: issue.title,
+    body: issue.body,
+    capabilities: capabilities2,
+    documents: issue.documents,
+    ...options.ref || sourceUrl ? {
+      source: {
+        ref: options.ref ?? changeId,
+        ...sourceUrl ? { url: sourceUrl } : {},
+        label: `openspec/changes/${changeId}`
+      }
+    } : {}
+  });
+  renderResult(io, result, { json });
+  return 0;
+}
+function resolveSourceUrl(changePath, changeId, ref) {
+  try {
+    const remote = execFileSync("git", ["remote", "get-url", "origin"], {
+      cwd: changePath,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    return changeSourceUrl({ remote, ref, changeId });
+  } catch {
+    return;
+  }
+}
+function soleChangeId(openspecRoot) {
+  const ids = listChangeIds(openspecRoot);
+  if (ids.length === 1 && ids[0]) {
+    return ids[0];
+  }
+  if (ids.length === 0) {
+    throw new KhotanClientError("not_found", "No active changes under openspec/changes. Write one first.");
+  }
+  throw new KhotanClientError("missing_argument", `This repo has ${ids.length} active changes. Name one: ${ids.join(", ")}.`);
+}
+
 // src/cli/commands/files-transfer.ts
 init_src();
 import { basename } from "node:path";
@@ -17602,9 +19754,65 @@ async function downloadFile(deps, options) {
   return 0;
 }
 
+// src/cli/commands/spec-commit.ts
+init_src();
+import { readFileSync as readFileSync5 } from "node:fs";
+async function specCommit(deps, options) {
+  const { session, io, json } = deps;
+  const raw = readCommitDocument(options.file);
+  const document = parseCommitDocument(raw);
+  if (options.expectedRevision !== undefined) {
+    document.expectedRevision = options.expectedRevision;
+  }
+  if (options.changeSummary !== undefined) {
+    document.changeSummary = options.changeSummary;
+  }
+  if (typeof document.expectedRevision !== "number") {
+    throw new KhotanClientError("missing_argument", "A commit needs expectedRevision. Put it in the JSON document, or pass --expected-revision.");
+  }
+  if (!Array.isArray(document.edits) || document.edits.length === 0) {
+    throw new KhotanClientError("invalid_argument", "A commit needs a non-empty edits array.");
+  }
+  errLine(io, `Committing ${document.edits.length} edit${document.edits.length === 1 ? "" : "s"} on ${options.projectId} at revision ${document.expectedRevision}…`);
+  try {
+    const result = await session.client.request("POST", `/api/v1/projects/${encodeURIComponent(options.projectId)}/spec`, document);
+    renderResult(io, result, { json });
+    return 0;
+  } catch (error) {
+    if (error instanceof KhotanApiError && error.code === "revision_conflict") {
+      const expected = error.details?.expectedRevision;
+      const actual = error.details?.actualRevision;
+      throw new KhotanClientError("revision_conflict", `The spec changed since revision ${expected ?? document.expectedRevision}; current is ${actual ?? "?"}. Re-read with khotan projects spec, then commit again.`);
+    }
+    throw error;
+  }
+}
+function readCommitDocument(file) {
+  if (file === "-") {
+    return readFileSync5(0, "utf8");
+  }
+  try {
+    return readFileSync5(file, "utf8");
+  } catch (error) {
+    throw new KhotanClientError("not_found", `Could not read ${file}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+function parseCommitDocument(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new KhotanClientError("invalid_argument", "The commit document is not valid JSON.");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new KhotanClientError("invalid_argument", "The commit document must be a JSON object with an edits array.");
+  }
+  return parsed;
+}
+
 // src/cli/commands/init.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname3, join as join3, relative } from "node:path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync6, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname4, join as join5, relative } from "node:path";
 
 // src/cli/skills.ts
 init_src();
@@ -17777,25 +19985,25 @@ function toRelative(cwd, absolutePath) {
   return relative(cwd, absolutePath) || absolutePath;
 }
 function detectMonoRoot(cwd) {
-  if (hasWorkspacesManifest(join3(cwd, "package.json")))
+  if (hasWorkspacesManifest(join5(cwd, "package.json")))
     return true;
-  if (existsSync2(join3(cwd, "turbo.json")))
+  if (existsSync4(join5(cwd, "turbo.json")))
     return true;
-  if (existsSync2(join3(cwd, "WORKSPACE.md")))
+  if (existsSync4(join5(cwd, "WORKSPACE.md")))
     return true;
-  if (existsSync2(join3(cwd, "package.json")))
+  if (existsSync4(join5(cwd, "package.json")))
     return false;
   try {
-    return readdirSync(cwd, { withFileTypes: true }).some((entry) => entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules" && existsSync2(join3(cwd, entry.name, "package.json")));
+    return readdirSync2(cwd, { withFileTypes: true }).some((entry) => entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules" && existsSync4(join5(cwd, entry.name, "package.json")));
   } catch {
     return false;
   }
 }
 function hasWorkspacesManifest(packageJsonPath) {
-  if (!existsSync2(packageJsonPath))
+  if (!existsSync4(packageJsonPath))
     return false;
   try {
-    const parsed = JSON.parse(readFileSync3(packageJsonPath, "utf8"));
+    const parsed = JSON.parse(readFileSync6(packageJsonPath, "utf8"));
     if (typeof parsed !== "object" || parsed === null)
       return false;
     const workspaces = parsed.workspaces;
@@ -17806,19 +20014,19 @@ function hasWorkspacesManifest(packageJsonPath) {
 }
 function writeTextAsset(ctx, absolutePath, content) {
   const path = toRelative(ctx.cwd, absolutePath);
-  const existed = existsSync2(absolutePath);
+  const existed = existsSync4(absolutePath);
   if (existed && !ctx.force) {
     ctx.results.push({ path, action: "skipped" });
     return;
   }
-  mkdirSync2(dirname3(absolutePath), { recursive: true });
+  mkdirSync2(dirname4(absolutePath), { recursive: true });
   writeFileSync2(absolutePath, content);
   ctx.results.push({ path, action: existed ? "forced" : "created" });
 }
 function writeManagedAsset(ctx, absolutePath, content) {
   const path = toRelative(ctx.cwd, absolutePath);
-  const existed = existsSync2(absolutePath);
-  mkdirSync2(dirname3(absolutePath), { recursive: true });
+  const existed = existsSync4(absolutePath);
+  mkdirSync2(dirname4(absolutePath), { recursive: true });
   writeFileSync2(absolutePath, content);
   ctx.results.push({ path, action: existed ? "updated" : "created" });
 }
@@ -17826,13 +20034,13 @@ function runInit(options) {
   const { io, cwd, client, force, json } = options;
   const ctx = { cwd, force, results: [] };
   if (client === "cursor") {
-    writeTextAsset(ctx, join3(cwd, ".cursor", "rules", "khotan.mdc"), CURSOR_RULES);
+    writeTextAsset(ctx, join5(cwd, ".cursor", "rules", "khotan.mdc"), CURSOR_RULES);
   } else {
-    writeTextAsset(ctx, join3(cwd, "khotan-agents.md"), GENERIC_GUIDE);
+    writeTextAsset(ctx, join5(cwd, "khotan-agents.md"), GENERIC_GUIDE);
   }
   for (const skill of generateSkills()) {
     for (const base of SKILL_BASES) {
-      writeManagedAsset(ctx, join3(cwd, base, "skills", skill.name, "SKILL.md"), skill.content);
+      writeManagedAsset(ctx, join5(cwd, base, "skills", skill.name, "SKILL.md"), skill.content);
     }
   }
   const monoRoot = detectMonoRoot(cwd);
@@ -17859,115 +20067,9 @@ function runInit(options) {
   return 0;
 }
 
-// src/cli/commands/spec-drift.ts
-import { execFileSync } from "node:child_process";
-import { readFileSync as readFileSync4 } from "node:fs";
-import { join as join4 } from "node:path";
-var SPEC_LOCK_PATH = ".khotan/spec.lock.json";
-async function runSpecDrift(options) {
-  const { session, io, json, dir } = options;
-  const defaultBranch = options.defaultBranch ?? resolveDefaultBranch(dir);
-  if (!defaultBranch) {
-    errLine(io, "Could not determine the default branch. Pass --branch <name>, or run inside a git checkout.");
-    return 1;
-  }
-  const pinned = readPinnedRevisions(dir, defaultBranch);
-  if (pinned === null) {
-    errLine(io, `No ${SPEC_LOCK_PATH} found at the merge base with ${defaultBranch}. Nothing has been materialized into this repository yet.`);
-    return json ? 0 : 1;
-  }
-  const response = await session.client.execute("projects.list");
-  const rows = (response.projects ?? []).map((project) => {
-    const slug = typeof project.slug === "string" ? project.slug : null;
-    if (!slug)
-      return null;
-    const latestRevision = typeof project.latestSpecRevision === "number" ? project.latestSpecRevision : 0;
-    const pinnedRevision = pinned.get(slug) ?? null;
-    return {
-      project: slug,
-      pinnedRevision,
-      latestRevision,
-      behindBy: Math.max(0, latestRevision - (pinnedRevision ?? 0))
-    };
-  }).filter((row) => row !== null);
-  if (json) {
-    outLine(io, JSON.stringify({ defaultBranch, projects: rows }, null, 2));
-    return 0;
-  }
-  if (rows.length === 0) {
-    outLine(io, "No projects in this workspace.");
-    return 0;
-  }
-  const drifted = rows.filter((row) => row.behindBy > 0);
-  for (const row of rows) {
-    const pinnedLabel = row.pinnedRevision === null ? "not materialized" : `r${row.pinnedRevision}`;
-    const suffix = row.behindBy === 0 ? "up to date" : `${row.behindBy} revision${row.behindBy === 1 ? "" : "s"} behind (latest r${row.latestRevision})`;
-    outLine(io, `${row.project}: ${pinnedLabel} — ${suffix}`);
-  }
-  if (drifted.length > 0) {
-    outLine(io, `
-${drifted.length} project${drifted.length === 1 ? " has" : "s have"} moved on since this branch was cut.`);
-  }
-  return 0;
-}
-function readPinnedRevisions(dir, defaultBranch) {
-  const mergeBase = git(dir, ["merge-base", "HEAD", defaultBranch]) ?? git(dir, ["rev-parse", defaultBranch]);
-  const content = mergeBase ? git(dir, ["show", `${mergeBase}:${SPEC_LOCK_PATH}`]) : readWorkingTreeLock(dir);
-  if (!content) {
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(content);
-  } catch {
-    return null;
-  }
-  const pinned = new Map;
-  for (const [slug, entry] of Object.entries(parsed.projects ?? {})) {
-    if (entry && typeof entry.revision === "number") {
-      pinned.set(slug, entry.revision);
-    }
-  }
-  return pinned;
-}
-function readWorkingTreeLock(dir) {
-  try {
-    return readFileSync4(join4(dir, SPEC_LOCK_PATH), "utf8");
-  } catch {
-    return null;
-  }
-}
-function resolveDefaultBranch(dir) {
-  const remoteHead = git(dir, ["symbolic-ref", "refs/remotes/origin/HEAD"]);
-  if (remoteHead) {
-    const name = remoteHead.split("/").pop();
-    if (name)
-      return `origin/${name}`;
-  }
-  for (const candidate of ["origin/main", "origin/master", "main", "master"]) {
-    if (git(dir, ["rev-parse", "--verify", candidate])) {
-      return candidate;
-    }
-  }
-  return null;
-}
-function git(dir, args) {
-  try {
-    const output = execFileSync("git", args, {
-      cwd: dir,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    const trimmed = output.trim();
-    return trimmed.length > 0 ? trimmed : null;
-  } catch {
-    return null;
-  }
-}
-
 // src/cli/commands/status.ts
 import { writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join5, relative as relative2 } from "node:path";
+import { join as join6, relative as relative2 } from "node:path";
 function str(value) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
@@ -18247,7 +20349,7 @@ async function runStatus(options) {
   const { session, io, json, writeDir } = options;
   const topology = await loadTopology(session);
   if (writeDir) {
-    const target = join5(writeDir, "WORKSPACE.md");
+    const target = join6(writeDir, "WORKSPACE.md");
     writeFileSync3(target, buildWorkspaceManifest(topology));
     const shown = relative2(process.cwd(), target) || target;
     if (json) {
@@ -18329,6 +20431,10 @@ function printTopLevelHelp(io) {
   outLine(io, "  files upload <path>         Upload a local file (presigned flow)");
   outLine(io, "  files download <fileId>     Download a file to --output (presigned flow)");
   outLine(io);
+  outLine(io, "OpenSpec:");
+  outLine(io, "  change push [changeId]      File a change directory as an issue");
+  outLine(io, "  projects spec commit        Commit spec edits from a JSON document");
+  outLine(io);
   outLine(io, "Workspace:");
   outLine(io, "  status                      Show the workspace topology (apps, pipelines, databases)");
   outLine(io, "  status --write              Refresh a committable WORKSPACE.md from live data");
@@ -18477,25 +20583,25 @@ init_src();
 // src/cli/assert-org.ts
 init_src();
 import { createHash } from "node:crypto";
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { dirname as dirname5, join as join7 } from "node:path";
 var CACHE_TTL_MS = 5 * 60 * 1000;
 function cacheDir(env) {
   const xdg = env.XDG_CACHE_HOME;
-  const base = xdg && xdg.trim() ? xdg : join6(homedir2(), ".cache");
-  return join6(base, "khotan");
+  const base = xdg && xdg.trim() ? xdg : join7(homedir2(), ".cache");
+  return join7(base, "khotan");
 }
 function cacheFilePath(env, apiUrl, orgId) {
   const hash = createHash("sha256").update(`${apiUrl}
 ${orgId}`).digest("hex").slice(0, 32);
-  return join6(cacheDir(env), `org-assert-${hash}.json`);
+  return join7(cacheDir(env), `org-assert-${hash}.json`);
 }
 function readAssertionCache(path, expectedOrgId) {
-  if (!existsSync3(path))
+  if (!existsSync5(path))
     return false;
   try {
-    const parsed = JSON.parse(readFileSync5(path, "utf8"));
+    const parsed = JSON.parse(readFileSync7(path, "utf8"));
     if (parsed.organizationId !== expectedOrgId)
       return false;
     if (Date.now() - parsed.verifiedAt > CACHE_TTL_MS)
@@ -18507,7 +20613,7 @@ function readAssertionCache(path, expectedOrgId) {
 }
 function writeAssertionCache(path, organizationId) {
   try {
-    mkdirSync3(dirname4(path), { recursive: true });
+    mkdirSync3(dirname5(path), { recursive: true });
     const payload = { organizationId, verifiedAt: Date.now() };
     writeFileSync4(path, `${JSON.stringify(payload)}
 `);
@@ -18686,29 +20792,6 @@ async function run(argv, options = {}) {
       const writeDir = write ? flagValue(args, "dir") ?? (writeValue && writeValue !== "true" ? writeValue : undefined) ?? process.cwd() : undefined;
       return await runStatus({ session, io, json, writeDir });
     }
-    if (first === "spec" && positionals[1] === "drift") {
-      if (helpFlag) {
-        errLine(io, "Usage: khotan spec drift [--dir <path>] [--branch <name>] [--json]");
-        return 0;
-      }
-      const session = await resolveSessionAsserted({
-        env,
-        storeOptions: options.storeOptions,
-        profileName,
-        apiUrlOverride,
-        apiKeyOverride,
-        fetch: options.fetch,
-        assertOrgOverride
-      });
-      const json = jsonFlag || session.resolved.defaultOutput === "json";
-      return await runSpecDrift({
-        session,
-        io,
-        json,
-        dir: flagValue(args, "dir") ?? process.cwd(),
-        defaultBranch: flagValue(args, "branch")
-      });
-    }
     if (first === "login") {
       return await authLogin(authCtx);
     }
@@ -18734,6 +20817,62 @@ async function run(argv, options = {}) {
       errLine(io, `Unknown auth command "${sub ?? ""}". Try: set-key, login, use, list.`);
       return 1;
     }
+    if (first === "projects" && positionals[1] === "spec" && positionals[2] === "commit") {
+      if (helpFlag) {
+        errLine(io, "Usage: khotan projects spec commit <projectId> --file <path> [--expected-revision <n>] [--change-summary <text>] [--json]");
+        return 0;
+      }
+      const projectId = positionals[3];
+      const file = flagValue(args, "file");
+      if (!projectId || !file) {
+        throw new KhotanClientError("missing_argument", "Usage: khotan projects spec commit <projectId> --file <path>.");
+      }
+      const session = await resolveSessionAsserted({
+        env,
+        storeOptions: options.storeOptions,
+        profileName,
+        apiUrlOverride,
+        apiKeyOverride,
+        fetch: options.fetch,
+        assertOrgOverride
+      });
+      const json = jsonFlag || session.resolved.defaultOutput === "json";
+      const expectedRevisionRaw = flagValue(args, "expected-revision");
+      const expectedRevision = expectedRevisionRaw ? Number(expectedRevisionRaw) : undefined;
+      if (expectedRevisionRaw && Number.isNaN(expectedRevision)) {
+        throw new KhotanClientError("invalid_argument", "--expected-revision expects a number.");
+      }
+      return await specCommit({ session, io, json }, {
+        projectId,
+        file,
+        expectedRevision,
+        changeSummary: flagValue(args, "change-summary")
+      });
+    }
+    if (first === "change" && positionals[1] === "push") {
+      if (helpFlag) {
+        errLine(io, "Usage: khotan change push [changeId] [--project <slug>] [--ref <sha>] [--dir <path>] [--dry-run] [--json]");
+        return 0;
+      }
+      const dryRun = flagBool(args, "dry-run");
+      const session = dryRun ? undefined : await resolveSessionAsserted({
+        env,
+        storeOptions: options.storeOptions,
+        profileName,
+        apiUrlOverride,
+        apiKeyOverride,
+        fetch: options.fetch,
+        assertOrgOverride
+      });
+      const json = jsonFlag || session?.resolved.defaultOutput === "json";
+      return await changePush({ session, io, json }, {
+        changeId: positionals[2],
+        project: flagValue(args, "project"),
+        cwd: flagValue(args, "dir"),
+        ref: flagValue(args, "ref"),
+        dryRun
+      });
+    }
     if (first === "files" && (positionals[1] === "upload" || positionals[1] === "download")) {
       if (helpFlag) {
         errLine(io, positionals[1] === "upload" ? "Usage: khotan files upload <localPath> [--name <n>] [--folder-id <id>] [--folder-path <p>] [--content-type <t>]" : "Usage: khotan files download <fileId> --output <path>");