@knowzai/cli 0.1.0 → 0.3.0

package/dist/commands/repo/graph.js

@@ -1,10 +1,12 @@
 import { Args, Flags } from '@oclif/core';
-import { existsSync, readFileSync } from 'node:fs';
-import { CodeGraph } from '@knowzai/indexer';
+import { existsSync } from 'node:fs';
+import { openLocalStore } from '@knowzai/local-store';
+import { TreeSitterIndexer } from '@knowzai/indexer';
 import { ExitCode, KnowzError } from '@knowzai/core';
 import { BaseCommand } from '../../base-command.js';
 import { findRepoBinding, resolveRepoPath } from '../../lib/repo-binding.js';
 import { requireRepoBinding } from '../../lib/repo-command-support.js';
+import { assertRepoScopeReady } from '../../lib/repo-scope.js';
 export default class RepoGraph extends BaseCommand {
     static id = 'repo:graph';
     static description = 'Query local code graph stats, symbols, or file neighborhoods for the bound repository.';
@@ -17,56 +19,38 @@ export default class RepoGraph extends BaseCommand {
         neighborhood: Flags.string({ description: 'Node id or symbol name whose adjacent graph nodes should be returned' }),
         kind: Flags.string({ description: 'Restrict results to a graph node kind' }),
         limit: Flags.integer({ description: 'Max matched nodes', default: 20 }),
+        offset: Flags.integer({ description: 'Skip matched nodes', default: 0 }),
     };
     async run() {
         const { args, flags } = await this.parse(RepoGraph);
         const binding = requireRepoBinding(findRepoBinding(args.path));
-        const graphPath = resolveRepoPath(binding, binding.graphPath);
-        if (!existsSync(graphPath)) {
+        const dbPath = resolveRepoPath(binding, binding.dbPath);
+        if (!existsSync(dbPath)) {
             throw new KnowzError('No repo code graph found. Run `knowz repo index` first.', ExitCode.NotFound);
         }
-        const graph = CodeGraph.fromJSON(JSON.parse(readFileSync(graphPath, 'utf8')));
-        const stats = graph.stats();
-        const allNodes = [...graph.nodes.values()];
-        let nodes;
-        if (flags.neighborhood) {
-            nodes = neighborhood(graph, flags.neighborhood);
+        const indexer = new TreeSitterIndexer();
+        const store = await openLocalStore({ driver: 'sqlite', dbPath, dim: indexer.dim });
+        let result;
+        try {
+            await assertRepoScopeReady(store, binding);
+            result = await store.queryGraph(binding.vaultId, {
+                ...(flags.symbol ? { symbol: flags.symbol } : {}),
+                ...(flags.file ? { file: flags.file } : {}),
+                ...(flags.neighborhood ? { neighborhood: flags.neighborhood } : {}),
+                ...(flags.kind ? { kind: flags.kind } : {}),
+                limit: flags.limit,
+                offset: flags.offset,
+            });
         }
-        else if (flags.symbol) {
-            const q = flags.symbol.toLowerCase();
-            nodes = allNodes.filter((n) => n.name.toLowerCase().includes(q) || n.id.toLowerCase().includes(q));
+        finally {
+            await store.close();
         }
-        else if (flags.file) {
-            const q = flags.file.replace(/\\/g, '/').toLowerCase();
-            nodes = allNodes.filter((n) => n.file.replace(/\\/g, '/').toLowerCase().includes(q));
-        }
-        else {
-            nodes = allNodes;
-        }
-        if (flags.kind)
-            nodes = nodes.filter((n) => n.kind === flags.kind);
-        nodes = nodes.slice(0, flags.limit);
-        const ids = new Set(nodes.map((n) => n.id));
-        const edges = graph.edges.filter((e) => ids.has(e.from) || ids.has(e.to));
-        const result = { stats, nodes, edges };
         if (this.jsonEnabled())
             return result;
-        this.log(`nodes: ${stats.nodes}  edges: ${stats.edges}`);
-        for (const n of nodes)
+        this.log(`nodes: ${result.stats.nodeCount}  edges: ${result.stats.edgeCount}`);
+        for (const n of result.nodes)
             this.log(`${n.kind.padEnd(9)} ${n.name}  ${n.file}`);
         return result;
     }
 }
-function neighborhood(graph, query) {
-    const q = query.toLowerCase();
-    const matched = [...graph.nodes.values()].filter((n) => n.id.toLowerCase() === q || n.name.toLowerCase() === q || n.id.toLowerCase().includes(q));
-    const ids = new Set(matched.map((n) => n.id));
-    for (const e of graph.edges) {
-        if (ids.has(e.from))
-            ids.add(e.to);
-        if (ids.has(e.to))
-            ids.add(e.from);
-    }
-    return [...ids].map((id) => graph.nodes.get(id)).filter((n) => Boolean(n));
-}
 //# sourceMappingURL=graph.js.map

package/dist/commands/repo/graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../src/commands/repo/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAgC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAQvE,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,EAAE,GAAG,YAAY,CAAC;IAClC,MAAM,CAAU,WAAW,GAAG,wFAAwF,CAAC;IACvH,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACnF,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;QAC5E,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,CAAC;QACnH,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;QAC5E,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KACxE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAAC,yDAAyD,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAA6C,CAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,KAAiB,CAAC;QACtB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACvD,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI;YAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;;AAGH,SAAS,YAAY,CAAC,KAAgB,EAAE,KAAa;IACnD,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAChG,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../../src/commands/repo/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAyB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAI/D,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,EAAE,GAAG,YAAY,CAAC;IAClC,MAAM,CAAU,WAAW,GAAG,wFAAwF,CAAC;IACvH,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACnF,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;QAC5E,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;QACrE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sEAAsE,EAAE,CAAC;QACnH,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;QAC5E,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KACzE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAAC,yDAAyD,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,SAAS,YAAY,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC"}

package/dist/commands/repo/index/index.d.ts

@@ -21,6 +21,7 @@ export default class RepoIndex extends BaseCommand {
     static flags: {
         force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         sync: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<RepoIndexResult>;
 }

package/dist/commands/repo/index/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/repo/index/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AASvD,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,EAAE,SAAgB;IAClC,OAAgB,WAAW,SAAwE;IACnG,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;CAwDtC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/repo/index/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAWvD,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAqDD,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,EAAE,SAAgB;IAClC,OAAgB,WAAW,SAAwE;IACnG,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;;MAInB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;CAoFtC"}

package/dist/commands/repo/index/index.js

@@ -1,11 +1,69 @@
 import { Args, Flags } from '@oclif/core';
-import { mkdirSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
+import { closeSync, constants as fsConstants, existsSync, fstatSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { createHash, randomBytes } from 'node:crypto';
+import { dirname, isAbsolute, relative, resolve } from 'node:path';
 import { TreeSitterIndexer } from '@knowzai/indexer';
-import { SyncEngine, openLocalStore } from '@knowzai/local-store';
+import { LegacyGraphRebuildRequiredError, SyncEngine, openLocalStore, } from '@knowzai/local-store';
+import { ExitCode, KnowzError } from '@knowzai/core';
 import { BaseCommand } from '../../../base-command.js';
 import { findRepoBinding, resolveRepoPath, saveRepoBinding, updateRepoBindingIndex, } from '../../../lib/repo-binding.js';
 import { requireRepoBinding } from '../../../lib/repo-command-support.js';
+import { isSafeToIndex } from '../../../lib/safe-file.js';
+import { assertRepoScopeReady } from '../../../lib/repo-scope.js';
+const MAX_GRAPH_SIDECAR_BYTES = 64 * 1024 * 1024;
+const O_NOFOLLOW = fsConstants.O_NOFOLLOW ?? 0;
+class GraphSidecarIgnoredError extends Error {
+}
+function readGraphSidecar(repoRoot, graphPath) {
+    const root = resolve(repoRoot);
+    const path = resolve(graphPath);
+    const rel = relative(root, path);
+    if (!rel || rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`) || isAbsolute(rel)) {
+        throw new KnowzError('Repo graph sidecar must stay inside the bound repository.', ExitCode.Usage);
+    }
+    if (O_NOFOLLOW === 0) {
+        throw new GraphSidecarIgnoredError('This platform cannot safely import a graph sidecar without O_NOFOLLOW');
+    }
+    let fd;
+    try {
+        fd = openSync(path, fsConstants.O_RDONLY | O_NOFOLLOW);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === 'ELOOP' || code === 'EMLINK') {
+            throw new GraphSidecarIgnoredError('Refusing to follow a graph sidecar symlink');
+        }
+        throw new KnowzError('Unable to safely open the repo graph sidecar.', ExitCode.Usage, { cause: error });
+    }
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > MAX_GRAPH_SIDECAR_BYTES) {
+            throw new KnowzError('Repo graph sidecar is not a bounded regular file.', ExitCode.Usage);
+        }
+        const content = readFileSync(fd, 'utf8');
+        return {
+            records: JSON.parse(content),
+            sha256: createHash('sha256').update(content).digest('hex'),
+        };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function writeGraphSidecar(graphPath, value) {
+    const temp = `${graphPath}.tmp-${process.pid}-${randomBytes(6).toString('hex')}`;
+    try {
+        writeFileSync(temp, `${JSON.stringify(value)}\n`, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
+        renameSync(temp, graphPath);
+    }
+    catch (error) {
+        try {
+            unlinkSync(temp);
+        }
+        catch { /* no temporary file to remove */ }
+        throw error;
+    }
+}
 export default class RepoIndex extends BaseCommand {
     static id = 'repo:index';
     static description = 'Index the bound repository into its repo-local Knowz SQLite store.';
@@ -15,36 +73,66 @@ export default class RepoIndex extends BaseCommand {
     static flags = {
         force: Flags.boolean({ description: 'Re-index unchanged files' }),
         sync: Flags.boolean({ description: 'Push indexed rows for the bound vault after indexing' }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (if the profile is CMEK-enabled)' }),
     };
     async run() {
         const { args, flags } = await this.parse(RepoIndex);
         const found = findRepoBinding(args.path);
         const binding = requireRepoBinding(found);
+        if (flags.sync && binding.scopeKind === 'local') {
+            throw new KnowzError('A local-scope repository cannot sync. Graduate it with `knowz repo setup --vault <hosted>` first.', ExitCode.Usage);
+        }
         const dbPath = resolveRepoPath(binding, binding.dbPath);
         const graphPath = resolveRepoPath(binding, binding.graphPath);
-        const indexer = new TreeSitterIndexer();
+        // H7 — same shared gate as `index scan`; `repo index --sync` pushes what it
+        // indexes to the cloud, so a credential file caught here never leaves the box.
+        const indexer = new TreeSitterIndexer({ pathFilter: isSafeToIndex });
         const store = await openLocalStore({ driver: 'sqlite', dbPath, dim: indexer.dim });
         let syncReport;
         let result;
         try {
+            await assertRepoScopeReady(store, binding);
+            let forceGraphRebuild = Boolean(flags.force);
+            let legacySidecarSha256;
+            if ((await store.graphStats(binding.vaultId)).nodeCount === 0 && existsSync(graphPath)) {
+                let sidecar;
+                try {
+                    sidecar = readGraphSidecar(binding.repoRoot, graphPath);
+                    await store.importGraphJson(binding.vaultId, sidecar.records, sidecar.sha256);
+                }
+                catch (error) {
+                    if (!(error instanceof LegacyGraphRebuildRequiredError) && !(error instanceof GraphSidecarIgnoredError))
+                        throw error;
+                    forceGraphRebuild = true;
+                    if (error instanceof LegacyGraphRebuildRequiredError)
+                        legacySidecarSha256 = sidecar?.sha256;
+                }
+            }
             const report = await indexer.indexDirectory(binding.repoRoot, store, {
                 vaultId: binding.vaultId,
-                force: flags.force,
+                force: forceGraphRebuild,
+                repoRoot: binding.repoRoot,
             });
             mkdirSync(dirname(graphPath), { recursive: true });
-            writeFileSync(graphPath, JSON.stringify(report.graph.toJSON()));
-            const stats = report.graph.stats();
+            if (legacySidecarSha256)
+                await store.markGraphRebuildComplete(binding.vaultId, legacySidecarSha256);
+            const graph = await store.exportGraphJson(binding.vaultId);
+            writeGraphSidecar(graphPath, graph);
+            const stats = await store.graphStats(binding.vaultId);
             const updated = updateRepoBindingIndex(binding, {
                 filesIndexed: report.filesIndexed,
                 filesSkipped: report.filesSkipped,
                 chunks: report.chunks,
-                graphNodes: stats.nodes,
-                graphEdges: stats.edges,
+                graphNodes: stats.nodeCount,
+                graphEdges: stats.edgeCount,
             });
             saveRepoBinding(updated);
             if (flags.sync) {
                 const client = await this.apiClient({ profile: binding.profile, 'api-url': binding.apiUrl, vault: binding.vaultId });
-                syncReport = await new SyncEngine(store, client).push({ vaultId: binding.vaultId });
+                // H4 — without the encryptor this pushes repository SOURCE to the cloud
+                // in plaintext on a CMEK-enabled profile.
+                const encryptor = this.cmekEncryptor({ profile: binding.profile, passphrase: flags.passphrase });
+                syncReport = await new SyncEngine(store, client, { encryptor }).push({ vaultId: binding.vaultId });
             }
             result = {
                 repoRoot: binding.repoRoot,
@@ -54,8 +142,8 @@ export default class RepoIndex extends BaseCommand {
                 filesIndexed: report.filesIndexed,
                 filesSkipped: report.filesSkipped,
                 chunks: report.chunks,
-                nodes: stats.nodes,
-                edges: stats.edges,
+                nodes: stats.nodeCount,
+                edges: stats.edgeCount,
                 ...(syncReport ? { sync: syncReport } : {}),
             };
         }

package/dist/commands/repo/index/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/repo/index/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAe1E,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,EAAE,GAAG,YAAY,CAAC;IAClC,MAAM,CAAU,WAAW,GAAG,oEAAoE,CAAC;IACnG,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACnF,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;QACjE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;KAC7F,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,UAAkC,CAAC;QACvC,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE;gBACnE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE;gBAC9C,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,KAAK,CAAC,KAAK;gBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;aACxB,CAAC,CAAC;YACH,eAAe,CAAC,OAAO,CAAC,CAAC;YAEzB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrH,UAAU,GAAG,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,MAAM,GAAG;gBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM;gBACN,SAAS;gBACT,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,MAAM,sBAAsB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;QAC/G,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,KAAK,aAAa,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,UAAU;YAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,OAAO,MAAM,CAAC;IAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/repo/index/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EACL,+BAA+B,EAC/B,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAelE,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,UAAU,GAAI,WAAuC,CAAC,UAAU,IAAI,CAAC,CAAC;AAE5E,MAAM,wBAAyB,SAAQ,KAAK;CAAG;AAE/C,SAAS,gBAAgB,CAAC,QAAgB,EAAE,SAAiB;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,UAAU,CAAC,2DAA2D,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,wBAAwB,CAAC,uEAAuE,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,wBAAwB,CAAC,4CAA4C,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,+CAA+C,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,mDAAmD,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;YACvC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC3D,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,KAAc;IAC1D,MAAM,IAAI,GAAG,GAAG,SAAS,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,MAAM,CAAU,EAAE,GAAG,YAAY,CAAC;IAClC,MAAM,CAAU,WAAW,GAAG,oEAAoE,CAAC;IACnG,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;KACnF,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;QACjE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,sDAAsD,EAAE,CAAC;QAC5F,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;KAC9F,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,UAAU,CAClB,mGAAmG,EACnG,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,UAAkC,CAAC;QACvC,IAAI,MAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,mBAAuC,CAAC;YAC5C,IAAI,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvF,IAAI,OAAyD,CAAC;gBAC9D,IAAI,CAAC;oBACH,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBACxD,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,+BAA+B,CAAC,IAAI,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC;wBAAE,MAAM,KAAK,CAAC;oBACrH,iBAAiB,GAAG,IAAI,CAAC;oBACzB,IAAI,KAAK,YAAY,+BAA+B;wBAAE,mBAAmB,GAAG,OAAO,EAAE,MAAM,CAAC;gBAC9F,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE;gBACnE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,KAAK,EAAE,iBAAiB;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,mBAAmB;gBAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YACpG,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE;gBAC9C,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,eAAe,CAAC,OAAO,CAAC,CAAC;YAEzB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrH,wEAAwE;gBACxE,0CAA0C;gBAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;gBACjG,UAAU,GAAG,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACrG,CAAC;YAED,MAAM,GAAG;gBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM;gBACN,SAAS;gBACT,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,KAAK,CAAC,SAAS;gBACtB,KAAK,EAAE,KAAK,CAAC,SAAS;gBACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,MAAM,sBAAsB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;QAC/G,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,KAAK,aAAa,SAAS,EAAE,CAAC,CAAC;QAChF,IAAI,UAAU;YAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,OAAO,MAAM,CAAC;IAChB,CAAC"}

package/dist/commands/repo/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/commands/repo/search.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAIpD,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,EAAE,SAAiB;IACnC,OAAgB,WAAW,SAAkF;IAC7G,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;CA6BtC"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/commands/repo/search.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAKpD,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,OAAgB,EAAE,SAAiB;IACnC,OAAgB,WAAW,SAAkF;IAC7G,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;CA8BtC"}

package/dist/commands/repo/search.js

@@ -4,6 +4,7 @@ import { openLocalStore, relevanceFromDistance } from '@knowzai/local-store';
 import { BaseCommand } from '../../base-command.js';
 import { findRepoBinding, resolveRepoPath } from '../../lib/repo-binding.js';
 import { requireRepoBinding } from '../../lib/repo-command-support.js';
+import { assertRepoScopeReady } from '../../lib/repo-scope.js';
 export default class RepoSearch extends BaseCommand {
     static id = 'repo:search';
     static description = 'Search the bound repository locally using its repo-local Knowz SQLite index.';
@@ -21,6 +22,7 @@ export default class RepoSearch extends BaseCommand {
         const store = await openLocalStore({ driver: 'sqlite', dbPath: resolveRepoPath(binding, binding.dbPath), dim: indexer.dim });
         const hits = [];
         try {
+            await assertRepoScopeReady(store, binding);
             const results = await store.knnSearch(indexer.embedQuery(args.query), flags.limit, { vaultId: binding.vaultId });
             for (const h of results) {
                 const item = await store.getItem(h.chunk.itemId);

package/dist/commands/repo/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../src/commands/repo/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAUvE,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,EAAE,GAAG,aAAa,CAAC;IACnC,MAAM,CAAU,WAAW,GAAG,8EAA8E,CAAC;IAC7G,MAAM,CAAU,IAAI,GAAG;QACrB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KACjE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;oBACtB,IAAI,EAAE,IAAI,EAAE,KAAK;oBACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;oBAC9D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../src/commands/repo/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAU/D,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,WAAW;IACjD,MAAM,CAAU,EAAE,GAAG,aAAa,CAAC;IACnC,MAAM,CAAU,WAAW,GAAG,8EAA8E,CAAC;IAC7G,MAAM,CAAU,IAAI,GAAG;QACrB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACpE,CAAC;IACF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;KACjE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7H,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC;oBACR,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;oBACtB,IAAI,EAAE,IAAI,EAAE,KAAK;oBACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;oBAC9D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;iBAChE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC"}

package/dist/commands/repo/setup.d.ts

@@ -1,17 +1,20 @@
 import type { SyncReport } from '@knowzai/local-store';
 import { BaseCommand } from '../../base-command.js';
+import { type ProjectMcpInstallResult } from '../../lib/project-mcp-config.js';
 interface RepoSetupResult {
-    configured: true;
+    configured: boolean;
     repoRoot: string;
     bindingPath: string;
     profile: string;
-    apiUrl: string;
+    apiUrl?: string;
     vaultId: string;
+    scopeKind: 'local' | 'hosted';
     vaultName?: string;
     dbPath: string;
     graphPath: string;
     hooksPath?: string;
     mcpCommand?: string;
+    mcpInstall?: ProjectMcpInstallResult;
     sync?: SyncReport;
 }
 export default class RepoSetup extends BaseCommand {
@@ -26,12 +29,16 @@ export default class RepoSetup extends BaseCommand {
         graph: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         sync: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        offline: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'create-vault': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'parent-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'vault-type': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         'install-hooks': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         mcp: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'install-mcp': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'dry-run': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        passphrase: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'command-prefix': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<RepoSetupResult>;

package/dist/commands/repo/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/commands/repo/setup.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAapD,UAAU,eAAe;IACvB,UAAU,EAAE,IAAI,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,EAAE,SAAgB;IAClC,OAAgB,WAAW,SAC0D;IACrF,OAAgB,QAAQ,WAItB;IACF,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;;;;;;;;;;MAenB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;YAmFvB,YAAY;CAoC3B"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/commands/repo/setup.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAYpD,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAGxG,UAAU,eAAe;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,CAAC,OAAO,OAAO,SAAU,SAAQ,WAAW;IAChD,OAAgB,EAAE,SAAgB;IAClC,OAAgB,WAAW,SAC0D;IACrF,OAAgB,QAAQ,WAKtB;IACF,OAAgB,IAAI;;MAElB;IACF,OAAgB,KAAK;;;;;;;;;;;;;;;;MAmBnB;IAEI,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;YAoJvB,YAAY;CAqC3B"}

package/dist/commands/repo/setup.js

@@ -1,5 +1,6 @@
 import { Args, Flags } from '@oclif/core';
 import { existsSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
 import { SyncEngine, openLocalStore } from '@knowzai/local-store';
 import { ExitCode, KnowzError, loadConfig, resolveApiUrl, resolveProfileName } from '@knowzai/core';
@@ -7,6 +8,8 @@ import { BaseCommand } from '../../base-command.js';
 import { isGuid, resolveVaultRef } from '../../lib/vault.js';
 import { defaultRepoBinding, equivalentRepoBinding, findRepoBinding, normalizeRepoRoot, resolveRepoPath, saveRepoBinding, } from '../../lib/repo-binding.js';
 import { buildHostedMcpCommand, installRepoHooks } from '../../lib/repo-command-support.js';
+import { installProjectMcpConfig } from '../../lib/project-mcp-config.js';
+import { graduateLocalScope, recoverHostedScopeMarker } from '../../lib/repo-scope-migration.js';
 export default class RepoSetup extends BaseCommand {
     static id = 'repo:setup';
     static description = 'Bind a repository checkout to a Knowz vault and repo-local SQLite context store.';
@@ -14,6 +17,7 @@ export default class RepoSetup extends BaseCommand {
         '<%= config.bin %> repo setup --vault 00000000-0000-4000-8000-000000000000',
         '<%= config.bin %> repo setup . --vault "Platform Code" --install-hooks --mcp',
         '<%= config.bin %> repo setup . --create-vault "Platform Code"',
+        '<%= config.bin %> repo setup . --offline --install-mcp',
     ];
     static args = {
         path: Args.string({ description: 'Repository checkout path', default: '.' }),
@@ -23,12 +27,16 @@ export default class RepoSetup extends BaseCommand {
         graph: Flags.string({ description: 'Repo-local graph sidecar path', default: '.knowz/graph.json' }),
         force: Flags.boolean({ description: 'Overwrite an existing binding when values change' }),
         sync: Flags.boolean({ description: 'Pull the bound vault into the repo-local store after setup' }),
+        offline: Flags.boolean({ description: 'Create a signed-out local-only repository scope' }),
         'create-vault': Flags.string({ description: 'Create a new Knowz vault with this name and bind to it' }),
         description: Flags.string({ description: 'Description for --create-vault' }),
         'parent-id': Flags.string({ description: 'Parent vault id for --create-vault' }),
         'vault-type': Flags.string({ description: 'Vault type for --create-vault', default: 'CodeBase' }),
         'install-hooks': Flags.boolean({ description: 'Install repo-pinned Claude Code hooks in this checkout' }),
         mcp: Flags.boolean({ description: 'Print hosted Knowz MCP setup guidance for this bound vault' }),
+        'install-mcp': Flags.boolean({ description: 'Install knowz-local in project .mcp.json' }),
+        'dry-run': Flags.boolean({ description: 'Preview --install-mcp without writing setup or config state' }),
+        passphrase: Flags.string({ description: 'CMEK passphrase (if the profile is CMEK-enabled)' }),
         'command-prefix': Flags.string({
             description: 'How generated hooks should invoke the CLI',
             default: 'knowz',
@@ -36,17 +44,72 @@ export default class RepoSetup extends BaseCommand {
     };
     async run() {
         const { args, flags } = await this.parse(RepoSetup);
+        if (flags['dry-run'] && !flags['install-mcp']) {
+            throw new KnowzError('--dry-run is valid only with --install-mcp.', ExitCode.Usage);
+        }
+        if (flags.offline && (flags.sync || flags.vault || flags['create-vault'])) {
+            throw new KnowzError('--offline cannot be combined with --sync, --vault, or --create-vault.', ExitCode.Usage);
+        }
         const cfg = loadConfig();
         const repoRoot = normalizeRepoRoot(args.path);
         const profile = resolveProfileName({ profileFlag: flags.profile }, cfg);
-        const apiUrl = resolveApiUrl({ apiUrlFlag: flags['api-url'], profileFlag: flags.profile }, cfg);
         const existing = findRepoBinding(repoRoot)?.binding;
+        if (flags.offline) {
+            if (existing?.scopeKind === 'hosted') {
+                throw new KnowzError('This repository is already hosted-scoped; offline setup cannot downgrade it.', ExitCode.Usage);
+            }
+            const desired = defaultRepoBinding({
+                repoRoot,
+                profile,
+                vaultId: existing?.vaultId ?? randomUUID(),
+                scopeKind: 'local',
+                dbPath: flags.db,
+                graphPath: flags.graph,
+                syncEnabled: false,
+            });
+            const binding = existing
+                ? { ...desired, createdAt: existing.createdAt, index: existing.index, updatedAt: new Date().toISOString() }
+                : desired;
+            const dbPath = resolveRepoPath(binding, binding.dbPath);
+            const graphPath = resolveRepoPath(binding, binding.graphPath);
+            const mcpInstall = flags['install-mcp']
+                ? installProjectMcpConfig(repoRoot, { dryRun: flags['dry-run'] })
+                : undefined;
+            if (!flags['dry-run'])
+                saveRepoBinding(binding);
+            const result = {
+                configured: !flags['dry-run'],
+                repoRoot,
+                bindingPath: join(repoRoot, '.knowz', 'repo.json'),
+                profile,
+                vaultId: binding.vaultId,
+                scopeKind: 'local',
+                dbPath,
+                graphPath,
+                ...(mcpInstall ? { mcpInstall } : {}),
+            };
+            if (this.jsonEnabled())
+                return result;
+            if (flags['dry-run'])
+                this.log(`Would install knowz-local in ${mcpInstall.path}`);
+            else
+                this.log(`Knowz repo configured offline: ${repoRoot}`);
+            return result;
+        }
+        if (existing?.scopeKind === 'hosted' && !flags['dry-run']) {
+            await recoverHostedScopeMarker(existing);
+        }
+        const apiUrl = resolveApiUrl({ apiUrlFlag: flags['api-url'], profileFlag: flags.profile }, cfg);
+        if (existing?.scopeKind === 'local' && !flags.vault && !flags['create-vault']) {
+            throw new KnowzError('Graduate a local repository with --vault <hosted> or --create-vault <name>.', ExitCode.Usage);
+        }
         const vault = await this.resolveVault(flags, cfg, profile, existing);
         const desired = defaultRepoBinding({
             repoRoot,
             profile,
             apiUrl,
             vaultId: vault.id,
+            scopeKind: 'hosted',
             vaultName: vault.name,
             dbPath: flags.db,
             graphPath: flags.graph,
@@ -54,7 +117,8 @@ export default class RepoSetup extends BaseCommand {
         });
         let binding = desired;
         if (existing) {
-            if (!equivalentRepoBinding(existing, desired) && !flags.force) {
+            const graduation = existing.scopeKind === 'local' && desired.scopeKind === 'hosted';
+            if (!equivalentRepoBinding(existing, desired) && !flags.force && !graduation) {
                 throw new KnowzError('Knowz repo binding already exists with different values. Re-run with --force to update it.', ExitCode.Usage);
             }
             binding = {
@@ -64,40 +128,52 @@ export default class RepoSetup extends BaseCommand {
                 updatedAt: new Date().toISOString(),
             };
         }
-        saveRepoBinding(binding);
         const dbPath = resolveRepoPath(binding, binding.dbPath);
         const graphPath = resolveRepoPath(binding, binding.graphPath);
+        if (existing?.scopeKind === 'local' && binding.scopeKind === 'hosted' && !flags['dry-run']) {
+            await graduateLocalScope(existing, binding);
+        }
+        const mcpInstall = flags['install-mcp']
+            ? installProjectMcpConfig(repoRoot, { dryRun: flags['dry-run'] })
+            : undefined;
+        if (!flags['dry-run'])
+            saveRepoBinding(binding);
         let syncReport;
-        if (flags.sync) {
+        if (flags.sync && !flags['dry-run']) {
             const store = await openLocalStore({ driver: 'sqlite', dbPath });
             try {
                 const client = await this.apiClient({ ...flags, profile, 'api-url': apiUrl });
-                syncReport = await new SyncEngine(store, client).pull({ vaultId: binding.vaultId });
+                // H4 — without the encryptor this pull writes undecrypted CMEK
+                // ciphertext into the repo-local store.
+                const encryptor = this.cmekEncryptor({ ...flags, profile, passphrase: flags.passphrase });
+                syncReport = await new SyncEngine(store, client, { encryptor }).pull({ vaultId: binding.vaultId });
             }
             finally {
                 await store.close();
             }
         }
-        const hooksPath = flags['install-hooks']
+        const hooksPath = flags['install-hooks'] && !flags['dry-run']
             ? installRepoHooks(join(repoRoot, '.claude', 'settings.json'), {
                 binding,
                 dbPath,
                 commandPrefix: flags['command-prefix'],
             }).path
             : undefined;
-        const mcpCommand = flags.mcp ? buildHostedMcpCommand(binding) : undefined;
+        const mcpCommand = flags.mcp ? buildHostedMcpCommand({ apiUrl, vaultId: binding.vaultId }) : undefined;
         const result = {
-            configured: true,
+            configured: !flags['dry-run'],
             repoRoot,
             bindingPath: join(repoRoot, '.knowz', 'repo.json'),
             profile,
             apiUrl,
             vaultId: binding.vaultId,
+            scopeKind: 'hosted',
             ...(binding.vaultName ? { vaultName: binding.vaultName } : {}),
             dbPath,
             graphPath,
             ...(hooksPath ? { hooksPath } : {}),
             ...(mcpCommand ? { mcpCommand } : {}),
+            ...(mcpInstall ? { mcpInstall } : {}),
             ...(syncReport ? { sync: syncReport } : {}),
         };
         if (this.jsonEnabled())